未知

Whkroran

卡7 启发全杀了。

红心王子

KIS对广告程序一向都是比较感冒的，这次也是不例外，删除不了
费尔扫描后两个包没有报病毒

qqq000@qq.com

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2007-5-8 15:32
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: stream data0001
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\03.exe
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.BHO.av (KAV engine)
Object: (NSIS o) lzma_solid_nsis0001
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\03.exe
        Status: Virus detected
        Virus: Adware.Sogou.B (BD-Engine)
Object: 03.exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.BHO.av (KAV engine), Adware.Sogou.B (BD-Engine)
Object: data0003
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\825.exe
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.Cinmus.g (KAV engine)
Object: data0004
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\825.exe
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.Cinmus.g (KAV engine)
Object: 825.exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.Cinmus.g (2x) (KAV engine)
Object: acpidisk.sys
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.Cinmus.g (KAV engine)
Object: bind_50202[1].exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: Trojan-Downloader.Win32.QQHelper.qz (KAV engine)
Object: DoSSSetup.dll
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.Cinmus.g (KAV engine)
Object: [1]setup[trd.elf.tt].exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: Trojan-Dropper.Win32.Delf.or (KAV engine)
Object: data0003/stream data0001
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\[2]setup[trd.elf.tt].exe
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.BHO.av (KAV engine)
Object: (NSIS o) lzma_nsis0001
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\[2]setup[trd.elf.tt].exe
        Status: Virus detected
        Virus: BehavesLike:Win32.ExplorerHijack (BD-Engine)
Object: (NSIS o)=>lzma_nsis0002=>(NSIS o) lzma_solid_nsis0001
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\[2]setup[trd.elf.tt].exe
        Status: Virus detected
        Virus: Adware.Sogou.B (BD-Engine)
Object: [2]setup[trd.elf.tt].exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.BHO.av (KAV engine), BehavesLike:Win32.ExplorerHijack, Adware.Sogou.B (BD-Engine)
Object: [4]setup[trd.elf.tt].exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.AdMoke.dv (KAV engine), Trojan.Adload.L (BD-Engine)
Object: [4]setup[trd.elf.tt]_unpacked.exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.AdMoke.dv (KAV engine), Trojan.Adload.L (BD-Engine)
Object: data0003 data0003
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\[5]setup[trd.elf.tt].exe
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.Cinmus.g (KAV engine)
Object: data0003 data0004
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\[5]setup[trd.elf.tt].exe
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.Cinmus.g (KAV engine)
Object: [5]setup[trd.elf.tt].exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.Cinmus.g (2x) (KAV engine)
Object: [7]setup[trd.elf.tt].exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: Trojan-Downloader.Win32.QQHelper.uv (KAV engine), DeepScan:Generic.Dld.ADL.C253783D (BD-Engine)
Object: stream data0001
        In archive: C:\Documents and Settings\Administrator\桌面\未知[1]\未知\[8]setup[trd.elf.tt].exe
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.Boran.z (KAV engine)
Object: [8]setup[trd.elf.tt].exe
        Path: C:\Documents and Settings\Administrator\桌面\未知[1]\未知
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.Boran.z (KAV engine)
Analysis complete: 2007-5-8 15:33
    16 files checked
    12 infected files detected
    0 suspected files detected