劫持bing主页或搜索跳转百度的userinit.txt rootkit

落华无痕

样本（infected）：https://free.lanzoue.com/iITJg1zbaiof

761773275

BD

1. msiuhp.sys 已偵測為感染 Trojan.GenericKD.72672664

复制代码

班德就是我

谁上传vt看下

心醉咖啡

火绒5

360拦截
eset快速拦截

莒县小哥

wuming_bpnes

诺顿V22

1. Resolved Threats:
   
2. Trojan.Gen.MBT
   
3. Type: Anomaly
   
4. Risk: High (High Stealth, High Removal, High Performance, High Privacy)
   
5. Categories: Virus
   
6. Status: Restart Required
   
7. -----------
   
8. 1 Infected File
   
9. C:\Users\test\Downloads\system32\drivers\msiuhp.sys - Restart Required
   
10. 1 Browser Cache
    
11. 
    
12. 
    
13. 
    
14. ISB.Dropper!gen1
    
15. Type: Anomaly
    
16. Risk: High (High Stealth, High Removal, High Performance, High Privacy)
    
17. Categories: Heuristic Virus
    
18. Status: Fully Resolved
    
19. -----------
    
20. 1 Infected File
    
21. C:\Users\test\Downloads\system32\microsoft\private-02\userinit.txt - Deleted
    
22. 1 Browser Cache
    
23. 
    
24. 
    
25. 
    
26. ISB.Downloader!gen68
    
27. Type: Anomaly
    
28. Risk: High (High Stealth, High Removal, High Performance, High Privacy)
    
29. Categories: Heuristic Virus
    
30. Status: Fully Resolved
    
31. -----------
    
32. 1 Infected File
    
33. C:\Users\test\Downloads\system32\microsoft\private-02\userinit.txt - No Action Required
    
34. 1 Browser Cache

复制代码

anxiety520

卡巴杀txt
Name: HEUR:Trojan.Script.Generic
Precision: Heuristic Analysis
Threat level: High
Object type: File
Object name: userinit.txt

nvwcc

奇安信

fever腾腾

毒霸 2x