【nuydgvu】卡巴查不出来……但可自动关闭卡巴登杀毒程序，感染所有盘符，自动运行

显示全部楼层 · 发表于 2007-7-11 07:00:57

所有盘符下都会产生nuydgvu.exe、filepage、还有自动运行文件自动关闭卡巴、360 上网搜索病毒名称会自动关闭盘符右键用任务管理器打开也会中毒（已经重装过两次了

）现在卡巴又查不出来~大家帮帮我啊！谢谢拉！

只能用搜索打开……无法打来任务管理器，无法进入安全模式，进了就蓝屏……在任务管理其中有JBMNOVH.EXE HOPJUHC.EXE 无法终止掉……这两个程序包含在nuydgvu.exe里面

[ 本帖最后由 `12345 于 2007-7-11 07:05 编辑 ]

显示全部楼层 · 发表于 2007-7-11 07:01:22

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=GenPack:Trojan.Autorun.BQ

显示全部楼层 · 发表于 2007-7-11 07:07:54

但是确实感染了~关闭所有杀毒软件~所有盘符都有产生文件……

显示全部楼层 · 发表于 2007-7-11 07:22:17

Starting the file scan:

Begin scan in 'F:\病毒样本\nuydgvu.rar'
F:\病毒样本\nuydgvu.rar
  [0] Archive type: RAR
  --> nuydgvu.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-11 07:42:21

avast轻松搞定

显示全部楼层 · 发表于 2007-7-11 07:47:18

显示全部楼层 · 发表于 2007-7-11 07:59:32

detected: virus Heur.Worm.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\nuydgvu.rar/nuydgvu.exe//NSPack

显示全部楼层 · 发表于 2007-7-11 08:11:11

A-Squared  Found nothing
AntiVir  Found TR/Crypt.NSPI.Gen
ArcaVir  Found nothing
Avast  Found Win32:OnLineGames-AIU
AVG Antivirus  Found nothing
BitDefender  Found GenPack:Trojan.Autorun.BQ
ClamAV  Found nothing
Dr.Web  Found Trojan.MulDrop.5969
F-Prot Antivirus  Found Possibly a new variant of W32/Threat-HLLIN-Slipper-based!Maximus
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found a variant of Win32/Delf.NDF
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
Sophos Antivirus  Found Mal/EncPk-E
VirusBuster  Found Packed/NSPack
VBA32  Found Trojan.PWS.Maran

显示全部楼层 · 发表于 2007-7-11 08:19:50

Scan performed at: 2007-7-11 8:19:18
Scanning Log
NOD32 version 2390 (20070710) NT
Command line: C:\Documents and Settings\wangcheng\My Documents\nuydgvu.rar
C:\Program Files\Eset\nod32.exe - is OK

Date: 11.7.2007 Time: 08:19:20
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\wangcheng\My Documents\nuydgvu.rar
C:\Documents and Settings\wangcheng\My Documents\nuydgvu.rar ?RAR ?nuydgvu.exe - a variant of Win32/Delf.NDF worm
Number of scanned files: 2
Number of threats found: 1
Number of active threats: 1
Time of completion: 08:19:26 Total scanning time: 6 sec (00:00:06)

显示全部楼层 · 发表于 2007-7-11 08:33:07

已检测到: 病毒 Worm.Generic (变种) URL: http://bbs.kafan.cn/attachment.php?aid=99323//nuydgvu.exe//NSPack

WHO说卡吧杀不出...

[病毒样本] 【nuydgvu】卡巴查不出来……但可自动关闭卡巴登杀毒程序，感染所有盘符，自动运行

本帖子中包含更多资源

本帖子中包含更多资源