AD一个，红伞未报

The EQs

222222222

The EQs

Scan performed at: 2007-3-9 1:04:55
Scanning Log
NOD32 version 2103 (20070308) NT
Command line: C:\Documents and Settings\EQ2\桌面\1.rar
Operating memory - is OK
Date: 9.3.2007  Time: 01:04:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\1.rar
C:\Documents and Settings\EQ2\桌面\1.rar ?RAR ?Yayad4HaoFang070112.exe ?NSIS ?YayadRunOnce.dll - Win32/Adware.Yayad application - was a part of the deleted object
Number of scanned files: 9
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 01:04:59 Total scanning time: 0 sec (00:00:00)

The EQs

AntiVir	7.3.1.41	03.08.2007 [td]no virus found
Authentium	4.93.8	03.07.2007 [td]no virus found
Avast	4.7.936.0	03.08.2007	Win32:Trojan-gen. {Other}
AVG	7.5.0.447	03.08.2007 [td]no virus found
BitDefender	7.2	03.08.2007 [td]no virus found
CAT-QuickHeal	9.00	03.08.2007 [td]no virus found
ClamAV	devel-20060426	03.08.2007 [td]no virus found
DrWeb	4.33	03.08.2007 [td]no virus found
eSafe	7.0.14.0	03.08.2007 [td]no virus found
eTrust-Vet	30.6.3464	03.08.2007 [td]no virus found
Ewido	4.0	03.07.2007 [td]no virus found
FileAdvisor	1	03.08.2007 [td]no virus found
Fortinet	2.85.0.0	03.08.2007	Adware/Yayadu
F-Prot	4.3.1.45	03.07.2007 [td]no virus found
F-Secure	6.70.13030.0	03.08.2007 [td]no virus found
Ikarus	T3.1.1.3	03.08.2007 [td]no virus found
Kaspersky	4.0.2.24	03.08.2007	not-a-virus:AdWare.Win32.Yayadu.b
McAfee	4980	03.08.2007 [td]no virus found
Microsoft	1.2204	03.08.2007 [td]no virus found
NOD32v2	2103	03.08.2007	Win32/Adware.Yayad
Norman	5.80.02	03.07.2007 [td]no virus found
Panda	9.0.0.4	03.08.2007 [td]no virus found
Prevx1	V2	03.08.2007 [td]no virus found
Sophos	4.15.0	03.07.2007 [td]no virus found
Sunbelt	2.2.907.0	03.07.2007 [td]no virus found
Symantec	10	03.08.2007 [td]no virus found
TheHacker	6.1.6.072	03.07.2007 [td]no virus found
UNA	1.83	03.07.2007	Adware.Yayadu.AD25
VBA32	3.11.2	03.07.2007	AdWare.Win32.Yayadu.b

Aditional Information

File size: 400054 bytes

MD5: e7b98d8665e67a9ed522f8baa33b4785

SHA1: 91d0aeb8deb84c169c7f2aa5e3239b1861932dd2

packers: BINARYRES, BINARYRES

ly250094040

E和M算是正式对上了


你用的什么版红伞？

C好像不杀广告？

The EQs

多引擎的是P版的。。。。

mofunzone

nod32是比较诡异的，包报了但是里面的组件都不报告。。
AntiVir         Found HEUR/Malware, ADSPY/Yayadu.B.3
ArcaVir         Found Adware.Yayadu.B
Avast         Found nothing
AVG Antivirus         Found Generic.VQF
BitDefender         Found nothing
ClamAV         Found nothing
Dr.Web         Found nothing
F-Prot Antivirus         Found nothing
F-Secure Anti-Virus         Found not-a-virus:AdWare.Win32.Yayadu.b (4, 1, 400)
Fortinet         Found Adware/Yayadu
Kaspersky Anti-Virus         Found not-a-virus:AdWare.Win32.Yayadu.b
NOD32         Found nothing
Norman Virus Control         Found nothing
Panda Antivirus         Found nothing
VirusBuster         Found nothing
VBA32         Found AdWare.Win32.Yayadu.b
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files alongside their results can be found below:File ID         Filename         Size (Byte)        Result
218302         Yayad4HaoFang070112.exe         412.833         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
Yayad4HaoFang070112.exe         UNDER ANALYSIS


The file 'Yayad4HaoFang070112.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

[ 本帖最后由 mofunzone 于 2007-3-8 14:36 编辑 ]

hsjj2005

费尔右键扫描未报

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-6
Start time: 2007-3-9 10:12
Engine(s): KAV engine (AVK 17.3103), BD-Engine (BD 17.2113)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: Yayad4HaoFang070112.exe data0002
In archive: C:\Documents and Settings\Administrator\桌面\1.rar
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.Yayadu.b (KAV engine)
Object: Yayad4HaoFang070112.exe data0005
In archive: C:\Documents and Settings\Administrator\桌面\1.rar
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.Yayadu.b (KAV engine)
Object: 1.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: not-a-virus:AdWare.Win32.Yayadu.b (2x) (KAV engine)
Analysis complete: 2007-3-9 10:12
    1 files checked
    1 infected files detected
    0 suspected files detected

bridgewr

微点

闪电战

P版红伞未报