setup_5002.exe

fatezero

        24/42 (57.1%)

setup_5002.rar

62590423

avg 杀

jayavira

ess kill

D:\下载文件夹\setup_5002.rar > RAR > setup_5002.exe > NSIS > smes.exe > NSIS > kws.ini - NSIS/TrojanClicker.Agent.AN.Gen 特洛伊木马

星晨

BitDefender
zlib_nsis0000 Trojan.Startpage.ZVB

z2009

金山网盾报毒

风亡

360 SD kill

留侯

大蜘蛛clean，部分文件加了壳：
setup_5002.exe/Flush.exe/data004 已打包，方式： ZLIB
setup_5002.exe/Flush.exe/data004 - 压缩文件 BINARYRES

setup_5002.exe/searchcore.dll 已打包，方式： ZLIB
setup_5002.exe/searchcore.dll - 压缩文件 BINARYRES

已上报。

kinkids

掃瞄偵測為【】，
已進行隔離/刪除動作。

掃瞄偵測到【1】個惡意檔案，【】個 Kaspersky Cloud，【】個啟發，【1】個特徵碼，
一隻病毒一條特徵碼，傻眼，囧rz，
剩餘【】個可疑文件MISS，無威脅存在，已提交至 Kaspersky 分析行為。

gogo8989

瑞星杀

liulangzhecgr

-----------------------------------------------------------------------------
added files:

C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\ Intarnot Explarer .lnk
C:\Documents and Settings\Administrator\Application Data\PIPI\jfcheck.conf
C:\Documents and Settings\Administrator\Application Data\PIPI\pipisp.ico
C:\Documents and Settings\Administrator\Application Data\PIPI\pipisp.url
C:\Documents and Settings\Administrator\Application Data\Scooter Software\Beyond Compare 3\BCCommands.xml.bak
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\tabiconcache.dat
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{E97AA574-67AB-11E0-9D86-00142ABFC05C}.dat
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{00CE41F0-68B6-11E0-9D8C-00142ABFC05C}.dat
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012011041620110417\index.dat
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012011041720110418\index.dat
C:\Documents and Settings\Administrator\桌面\JJ斗地主大奖赛.lnk
C:\Documents and Settings\Administrator\桌面\免费网络电话172710.EXE
C:\Documents and Settings\All Users\Application Data\Kingsoft\kws\kws.ini
C:\Documents and Settings\All Users\Application Data\Kingsoft\kws\spitesp.dat
C:\Documents and Settings\All Users\Application Data\Kingsoft\kws\spot.ini
C:\Documents and Settings\All Users\桌面\ Intarnot   Explarer .lnk
C:\Documents and Settings\All Users\桌面\购物大全.lnk
C:\Program Files\Flush\Flush_172710.exe
C:\Program Files\Flush\Flush_172710.ini
C:\Program Files\Flush\module.log
C:\Program Files\Flush\passlist.dat
C:\Program Files\Flush\search_hist.dat
C:\Program Files\Flush\360\360core\360core.dll
C:\Program Files\Flush\360\360core\plugin.ini
C:\Program Files\Flush\360\searchcore\plugin.ini
C:\Program Files\Flush\360\searchcore\SearchCfg.dat
C:\Program Files\Flush\360\searchcore\searchcore.dll
C:\Program Files\Flush\ImgCache\hao.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\MouseGesture_0.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_1.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_10.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_11.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_12.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_13.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_14.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_15.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_16.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_17.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_18.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_19.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_2.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_3.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_4.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_5.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_6.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_7.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_8.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_9.bmp
C:\Program Files\Flush\ImgCache\new.cnzz.com_favicon.ico
C:\Program Files\Flush\ImgCache\poker.wan.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\se.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\wan.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\www.2345.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.2345a.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.3234.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\www.360buy.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.46.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.58.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.886.la_favicon.ico
C:\Program Files\Flush\ImgCache\www.baidu.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.ename.cn_favicon.ico
C:\Program Files\Flush\ImgCache\www.google.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.qihoo.com_favicon.ico
C:\Program Files\Flush\plugin\360Skinhelper\plugin.ini
C:\Program Files\Flush\plugin\360Skinhelper\Skinhelper.dll
C:\Program Files\Flush\plugin\360Skinhelper\skinhelper.ico
C:\Program Files\Flush\plugin\360snap\360snap.dll
C:\Program Files\Flush\plugin\360snap\plugin.ini
C:\Program Files\Flush\plugin\360snap\screener.exe
C:\Program Files\Flush\plugin\360snap\snap.ico
C:\Program Files\Flush\plugin\koudai\add.htm
C:\Program Files\Flush\plugin\koudai\add.ico
C:\Program Files\Flush\plugin\koudai\plugin.ini
C:\Program Files\Flush\plugin\koudai\readme.txt
C:\Program Files\Flush\plugin\zconf\conf.ico
C:\Program Files\Flush\plugin\zconf\plugin.ini
C:\Program Files\Flush\plugin\zconf\quickconf.dll
C:\Program Files\Flush\Shield\Sandboxie.ini
C:\Program Files\soft172710\172710.txt
C:\Program Files\soft172710\JJmatch_11494.exe
C:\Program Files\soft172710\pipi_dae_381.exe
C:\Program Files\soft172710\wl06079.exe
C:\Program Files\soft172710\w_1710.exe
C:\WINDOWS\system32\jfcheck.conf
C:\WINDOWS\system32\JfCheck.dll.bak
C:\WINDOWS\system32\multbp.cfg
C:\WINDOWS\system32\config\mcckmplayervod.ini