3个

mofunzone

装东西的时候找到的。。

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.QQHelper.tp        File: E:\Ñù±¾\н¨Îļþ¼Ð\habooSetup_a.exe

Nblock

AFRB.EXE  Backdoor.genus is found
1) D:\TEMP\NSZ2.TMP\USERINFO.DLL
2) D:\TEMP\NSZ2.TMP\INSTALLOPTIONS.DLL
3) D:\TEMP\NSZ2.TMP\NSPROCESS.DLL
4) C:\PROGRAM FILES\ANCHORFREE\UNINSTALL.EXE
5) C:\PROGRAM FILES\ANCHORFREE\BIN\AFBHO.DLL
6) C:\PROGRAM FILES\ANCHORFREE\BIN\AFPANEL.EXE
7) C:\PROGRAM FILES\ANCHORFREE\BIN\AFTOOLBAR.DLL
8) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\AFCONTROLLER.EXE
9) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\AFDATAPROCESSOR.DLL
10) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\AFPROCESSOR.DLL
11) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\AFUTILS.DLL
12) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\DMPROCESSOR.DLL
13) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\HTML2XML.EXE
14) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\
15) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\DAT2XML.EXE
16) C:\PROGRAM FILES\ANCHORFREE\BIN\CTRL\MSXML4.DLL

Delay delete file
Program:
C:\PROGRAM FILES\ANCHORFREE\BIN\AFTOOLBAR.DLL
Delete failed!

Delay delete file!

worker321

小红伞两个


Begin scan in 'C:\Documents and Settings\Administrator\桌面\My Documents'
C:\Documents and Settings\Administrator\桌面\My Documents\AFRB.exe
      [DETECTION] Contains signature of the dropper DR/Tool.PsKill.Q.5
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\My Documents\habooSetup_a.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!

worker321

蜘蛛报两个


habooSetup_a.exe;C:\Documents and Settings\Administrator\桌面\My Documents;Trojan.DownLoader.origin;;
nsProcess.dll;C:\Documents and Settings\Administrator\桌面\My Documents;Tool.ProcessKill;;

hcyjc

红伞全杀![:26:]
==\My Documents[1]\AFRB.exe
      [DETECTION] Contains signature of the dropper DR/Tool.PsKill.Q.5
==\My Documents[1]\habooSetup_a.exe
      [DETECTION] Contains suspicious code HEUR/Malware

==\My Documents[1]\nsProcess.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Maxifiles

taihuxian

Virus: Trojan-Downloader.Win32.QQHelper.tp

Virus found while downloading Web content.

Address: bbs.kafan.cn

wangjay1980

Hello.

nsProcess.dll，AFRB.exe

No malicious software was found in the attached file.
-----------------
Regards, Roman Gavrilchenko
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com
http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.