卡巴没杀掉,大蜘蛛没反应2

silone

前些日子,我发过一个帖子,就是这个题目的,现在我进入PE把样本拿下来了,大家帮忙看看好吗?
我还是没杀掉他们,

蓝色牛仔裤

卡巴现在可以全部查出来了。但是你说的没有殺掉他们，是不是卡巴要求重启删除病毒？

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-9
Start time: 2007-6-14 0:41
Engine(s): KAV engine (AVK 17.5257), BD-Engine (BD 17.4363)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: owfkkp54.dll
        In archive: C:\Documents and Settings\Administrator\桌面\1owfkkp54.rar
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.QQHelper.mo (KAV engine), Trojan.Downloader.QQhelper.DO (BD-Engine)
Object: 1owfkkp54.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.QQHelper.mo (KAV engine), Trojan.Downloader.QQhelper.DO (BD-Engine)
Object: owfkkp54.sys
        In archive: C:\Documents and Settings\Administrator\桌面\owfkkp54.rar
        Status: Virus detected
        Virus: Trojan.Win32.Zapchast.ch (KAV engine), Trojan.Downloader.Agent.AMG (BD-Engine)
Object: owfkkp54.dll
        In archive: C:\Documents and Settings\Administrator\桌面\owfkkp54.rar
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.QQHelper.mo (KAV engine), Trojan.Downloader.QQhelper.DO (BD-Engine)
Object: owfkkp54.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Virus detected
        Virus: Trojan.Win32.Zapchast.ch, Trojan-Downloader.Win32.QQHelper.mo (KAV engine), Trojan.Downloader.Agent.AMG, Trojan.Downloader.QQhelper.DO (BD-Engine)
Object: xyusmi60.dll
        In archive: C:\Documents and Settings\Administrator\桌面\xyusmi60.rar
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.QQHelper.mo (KAV engine), Trojan.Downloader.QQhelper.DO (BD-Engine)
Object: xyusmi60.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.QQHelper.mo (KAV engine), Trojan.Downloader.QQhelper.DO (BD-Engine)
Analysis complete: 2007-6-14 0:41
    3 files checked
    3 infected files detected
    0 suspected files detected

蓝色牛仔裤

大蜘蛛4.44也可以全杀，楼主没有更新病毒库吧？
如果病毒真的删除不了，可以发个系统扫描报告上来让高手们看看～



[Scan path] C:\Documents and Settings\Administrator\桌面\xyusmi60.rar
>C:\Documents and Settings\Administrator\桌面\xyusmi60.rar\xyusmi60.dll infected with Trojan.DownLoader.14462
C:\Documents and Settings\Administrator\桌面\xyusmi60.rar - archive contains infected objects

[Scan path] C:\Documents and Settings\Administrator\桌面\1owfkkp54.rar
>C:\Documents and Settings\Administrator\桌面\1owfkkp54.rar\owfkkp54.dll infected with Trojan.DownLoader.14462
C:\Documents and Settings\Administrator\桌面\1owfkkp54.rar - archive contains infected objects

[Scan path] C:\Documents and Settings\Administrator\桌面\owfkkp54.rar
>C:\Documents and Settings\Administrator\桌面\owfkkp54.rar\owfkkp54.sys infected with Trojan.Starter.108
>C:\Documents and Settings\Administrator\桌面\owfkkp54.rar\owfkkp54.dll infected with Trojan.DownLoader.14462
C:\Documents and Settings\Administrator\桌面\owfkkp54.rar - archive contains infected objects

wangjay1980

用冰刃删除SYS驱动文件，再用卡巴杀