趋势科技翻车，电脑里一堆CAD毒，大家看看自己的杀毒

WCMS

更正
SEP 2/3漏acad.lsp，已上报

bbszy

WCMS 发表于 2018-3-31 13:25
SEP 3/3

NS只杀两个，其中一个修复：

Filename: acad.mnl
Threat name: ALS.JiwaiFull Path: e:\desktop\cad三个病毒过趋势科技\acad.mnl

____________________________

____________________________


On computers as of 
2018.3.31 at 13:30:20

Last Used 
2018.3.31 at 13:32:20

Startup Item 
No

Launched 
No

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


acad.mnl Threat name: ALS.Jiwai
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


Source: External Media

Source File:
acad.mnl

____________________________

File Actions

File: e:\Desktop\cad三个病毒过趋势科技\ acad.mnl Threat Removed
____________________________


File Thumbprint - SHA:
9ed9850929303d63f509621b98f81db81979426c2ea4c7798fcbd73369b28b42
File Thumbprint - MD5:
3e9a33eb6efdecdc7d2194fbea082476













Filename: acaddoc.lsp
Threat name: ALS.JiwaiFull Path: e:\desktop\cad三个病毒过趋势科技\acaddoc.lsp

____________________________

____________________________


On computers as of 
2018.3.31 at 13:32:23

Last Used 
2018.3.31 at 13:32:23

Startup Item 
No

Launched 
No

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


acaddoc.lsp Threat name: ALS.Jiwai
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


Source: External Media


____________________________

File Actions

File: e:\desktop\cad三个病毒过趋势科技\ acaddoc.lsp Blocked
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

Dolby123

chen月 发表于 2018-3-31 11:24
更新下解压密码:  infected    看看一共删掉几个可以

WD 我这里一共杀掉两个

acad.mnl -  Virus:ALisp/Bursted.BL
acaddoc.lsp  -  Virus:ALisp/Bursted.BL

Virus:ALisp/Bursted.BL
This virus spreads by attaching its code to other files on your PC or network. Some of the infected programs might no longer run correctly.

諾言敵不過時間

記錄
掃描防護記錄
偵側引擎版本: 17144 (20180330)
日期: 2018/3/31  時間: 下午 02:53:08
已掃描的磁碟、資料夾及檔案: C:\Users\Desktop\惡意程式\CAD三个病毒过趋势科技
C:\Users\Desktop\惡意程式\CAD三个病毒过趋势科技\acaddoc.lsp - ALS/Bursted.AD 病毒 - 已清除
已掃描的檔案數目: 3
已發現的威脅數目: 1
已清除檔案數: 1
完成時間: 下午 02:53:09  掃描時間總計: 1 秒 (00:00:01)

chen月

cjn 发表于 2018-3-31 13:17
AVG kill2
剩下 acad.lsp上报给了avast……应该没毛病吧……

这几个病毒，是在你启动cad时候发作加载进程的，非常牛逼，一般人看不出是毒，软件也能运行，就是开始软件cad时候会需要按esc 然后开启文件也是，中途会自动出错，查了百度才知道是中毒了

ELOHIM

SCEP KILL 2
Virus:ALisp/Bursted.BL

很久以前，MSE就将A单位的CAD病毒围剿了一个差不多。
然后再加上U盘限制。

至于我离开以后就不知道什么样子了。

a8855942

dongwenqi 发表于 2018-3-31 11:02
卡巴删除一个

19版杀2个。

dongwenqi

a8855942 发表于 2018-3-31 18:09
19版杀2个。

下午测试了杀了2个

chen月

ELOHIM 发表于 2018-3-31 17:56
SCEP KILL 2
Virus:ALisp/Bursted.BL

趋势科技，这么牛逼的杀软，居然对所有cad病毒都不感冒，我也是醉了

ELOHIM

acad.lsp里面是：fillmode;z;z;z;z;z;z;z;z;z;z;z;z;23;hgf

这个可以起作用吗？大神在哪里？