源nsis设置有病毒 [英] source nsis setup have virus

问题描述

我有nsis源安装ajax文件并清理了Internet Explorer，因为sameone使用文件dll阻止了我

I Have nsis source setup ajax file and clean the internet explorer becose sameone use file dll to block me

当我进入病毒总数时该文件我被病毒感染，我不知道这个问题在哪里可以帮助我

the file when i go to virustotal i get to virus i don't know where the problem can anyone help me

这是来源

; saudivoice NSIS Installer Script File
; khaild Winston <[e-mail]>
;--------------------------------
;Include some predefined NSIS libraries

  !include "WinMessages.nsh"

; --------------------
XPStyle on


; LANG: 1033
LangString LSTR_43 1033 "Show &details"
LangString LSTR_44 1033 Completed
; --------------------
;General

  ;Name and file
  Name "SaudiVoice"

  ;Default installation folder
  InstallDir "$PROGRAMFILES\SaudiVoice"

; --------------------
; PAGES: 3

; Page 0
Page license /ENABLECANCEL
  LicenseText "Welcome to the Saudivoice Voice Setup." Next
  LicenseData [LICENSE].txt

; Page 1
Page instfiles
  CompletedText $(LSTR_44)    ;  Completed
  DetailsButtonText $(LSTR_43)    ;  "Show &details"

/*
; Page 2
Page COMPLETED
*/
; --------------------


; --------------------
; SECTIONS: 1

;Installer Sections

Section "Install saudivoice" 

  SetOutPath "$INSTDIR"

  ; Copy all of the required files (note the /r switch to recursively copy                     directories)
    File chat5.ocx
    File chat5.dll
    File chat5.inf
    File setup.bat
    File IMSVoiceStarter.exe
    File npIMSChatStarter.dll
    File Readme.htm
    ; Register the COM server
    ClearErrors
    RegDLL $INSTDIR\chat5.ocx
    RegDLL $INSTDIR\npIMSChatStarter.dll
    Exec $INSTDIR\setup.bat
    Exec "$PROGRAMFILES\KSAChatControl2017\Firewall\Uninstall.exe /S"
    DetailPrint "unInstalling the Block..."
    Exec "$PROGRAMFILES\KSAChatControl2017\Firewall14\Uninstall.exe /S"
    DetailPrint "unInstalling the Block..."
    Exec "$PROGRAMFILES\KSAChatControl2017\2.11.0.0\Uninstall.exe /S"
    DetailPrint "unInstalling the Block..."
    CreateDirectory $SMPROGRAMS\SaudiVoice
    CreateShortCut "$SMPROGRAMS\SaudiVoice\Read Me.lnk" $INSTDIR\Readme.htm
    CreateShortCut "$SMPROGRAMS\SaudiVoice\Uninstall SaudiVoice.lnk"             $INSTDIR\Uninstall.exe
    WriteRegStr HKLM       Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice DisplayName       "SaudiVoice 1.0.0.1"
    WriteRegStr HKLM       Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice DisplayVersion 1.0.0.1
    WriteRegStr HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice UninstallString $\"$INSTDIR\Uninstall.exe$\"
    WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice NoModify 1
    DeleteRegKey HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice
    WriteRegDWORD HKLM Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice NoRepair 1
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{EB938183-780F-48FD-89ED-50686F7F7259}"
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ModuleUsage"
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SharedDlls"
    DeleteRegKey HKLM "SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains"
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Code Store Database\Distribution Units\{EB938183-780F-48FD-89ED-50686F7F7259}"
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage"
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls"
    DeleteRegKey HKLM "SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains"
    DeleteRegKey HKCU "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges"
    DeleteRegKey HKEY_CURRENT_USER "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges"
    DeleteRegKey HKEY_USERS ".DEFAULT\Software\Microsoft\Windows Firewall"
    WriteUninstaller $INSTDIR\Uninstall.exe ;  $INSTDIR\$INSTDIR\Uninst.exe
  SectionEnd



  ; --------------------
  ;Uninstaller Section

  Section "Uninstall"

    Delete "$INSTDIR\Uninstall.exe"

    ; Unregister the COM server
    UnRegDLL "$INSTDIR\chat5.ocx"
    Delete "$INSTDIR\chat5.ocx"
    Delete "$INSTDIR\chat5.dll"
    Delete "$INSTDIR\chat5.inf"
          Delete "$INSTDIR\IMSVoiceStarter.exe"
    Delete "$INSTDIR\npIMSChatStarter.dll"
    Delete "$INSTDIR\Readme.htm"
    ; Delete all installed files
    RMDir "$INSTDIR"

    ; And registry entries
    DeleteRegKey HKLM       "Software\Microsoft\Windows\CurrentVersion\Uninstall\SaudiVoice"
    Delete "$SMPROGRAMS\SaudiVoice\Read Me.lnk"
    Delete  "$SMPROGRAMS\SaudiVoice\Uninstall SaudiVoice.lnk"
    RMDir $SMPROGRAMS\SaudiVoice

  SectionEnd

这是文件

 http://saudidos.com/fix.exe

请为此帮助我

推荐答案

VirusTotal 结果的检出率为2/55，两个分别是Bkav和Invincea，我会不知所措，说这些公司不是知名公司，这可能是假阳性.您可以尝试报告误报...

The VirusTotal results have a detection ratio of 2 / 55 and the two are Bkav and Invincea and I would go out on a limb and say that these are not well known companies and this is probably a false positive. You could try reporting the false positives...

这篇关于源nsis设置有病毒的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！