木马病毒

显示全部楼层 · 发表于 2008-7-26 14:42:39

这个病毒有点牛. 病毒文件解压出来,买咖啡没发现.运行它会在进程中产生两个进程,使得买咖啡不停的报病毒提示,至使你的防软CPU利用率为98%左右,使得电脑超慢. 此病毒后在启动项中建两个自动启动项. 还有使得系统无法显示隐藏的文件.(不管怎么设都不行),只有结束其进程才可恢复.
有的厉害!

显示全部楼层 · 发表于 2008-7-26 14:46:15

Begin scan in 'C:\Documents and Settings\Administrator\桌面\密碼123456'
C:\Documents and Settings\Administrator\桌面\密碼123456\qwbgoxx.exe
[DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
[NOTE]    A backup was created as '48ecc8a0.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年7月26日  14:46
Used time: 00:04 Minute(s)

The scan has been done completely.

   1 Scanning directories
   1 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-7-26 14:57:48

已删除: Trojan-Downloader.Win32.Todon.ad

显示全部楼层 · 发表于 2008-7-26 15:21:17

显示全部楼层 · 发表于 2008-7-26 15:23:31

微点砍掉

显示全部楼层 · 发表于 2008-7-26 15:27:02

信息 2008-07-26  15:26:21 您此次查毒隔离了1个文件
信息 2008-07-26  15:26:21 您此次查毒共查出1个病毒以及危险代码
信息 2008-07-26  15:26:21 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个
信息 2008-07-26  15:26:21 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-07-26  15:26:21 D:\Desktop\123456\qwbgoxx.exe Win32.Hack.Agent.ah 隔离成功

显示全部楼层 · 发表于 2008-7-26 15:30:01

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Win32.AvKiller.bh

用户来源：互联网

软件版本：20.54.50

显示全部楼层 · 发表于 2008-7-27 00:46:05

刚解压费尔马上报

显示全部楼层 · 发表于 2008-7-27 00:56:03

Symantec Endpoint Protection

显示全部楼层 · 发表于 2008-7-27 01:06:43

2008/7/27 1:05:56 D:\Users\EKINCHENG\Desktop\qwbgoxx.exe Microsoft Windows Search Protocol Host Detected: Trojan-Downloader.Win32.Todon.ad

[病毒样本] 木马病毒

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块