C:/windows/system32/drivers/beep.sys
未中毒的
大小 4.12 KB (4,224 字节), MD5 :da1f27d85e0d1525f6621372e7b685e9
中毒后的
大小 15.8 KB (16,256 字节), MD5 : 177cb1deabb1e315ce79a6225c9d84b3
beep.sys MD5:177cb1deabb1e315ce79a6225c9d84b3 - VirSCAN.org 70%的杀软(26/37)报告发现病毒 http://virscan.org/report/f1c58a7f4f9afb5856731323648df96a.html
让病毒存活了这么长时间,实在不应该。
Sign of "Win32:Adware-gen [Adw]" has been found in "C:/Documents and Settings/wf/Local Settings/Temp/7zO10D.tmp/cmqq2008Beta2v40.exe/$TEMP/bimonycb.exe/$INSTDIR/BaiduBar.dll" file.
Sign of "Win32:Adware-gen [Adw]" has been found in "C:/Documents and Settings/wf/Local Settings/Temp/7zO10D.tmp/cmqq2008Beta2v40.exe/$TEMP/bimonycb.exe" file.
Sign of "Win32:Agent-TOF [Trj]" has been found in "C:/Documents and Settings/wf/Local Settings/Temp/E_4/krnln.fnr" file.
Sign of "Win32:Agent-TOF [Trj]" has been found in "C:/Documents and Settings/wf/Local Settings/Temp/E_4/krnln.fne" file.
Sign of "Win32:OnLineGames-EDH [Trj]" has been found in "C:/WINDOWS/system32/drivers/beep.sys" file.
Sign of "Win32:Delf-GBA [Trj]" has been found in "C:/WINDOWS/system32/msxmle.dll/[Embedded#03c70]" file.
Sign of "Win32:Delf-GBA [Trj]" has been found in "C:/WINDOWS/system32/msxmle.dll" file.
Sign of "Win32:Patched-FF [Trj]" has been found in "C:/WINDOWS/system32/sens.dll" file.
Sign of "Win32:Agent-UBX [Trj]" has been found in "C:/WINDOWS/system32/msdtcs.dll" file.
Sign of "Win32:FlyStudio-AA [Trj]" has been found in "C:/WINDOWS/system32/boorcservice.exe_" file.
Sign of "Win32:Delf-GBA [Trj]" has been found in "C:/WINDOWS/system32/dotmessengers.exe_/[Embedded#05070]/[Embedded#05070]" file.
Sign of "Win32:Delf-GBA [Trj]" has been found in "C:/WINDOWS/system32/dotmessengers.exe_/[Embedded#05070]" file.
Sign of "Win32:Delf-GBA [Trj]" has been found in "C:/WINDOWS/system32/dotmessengers.exe_" file.
Sign of "Win32:Delf-GBA [Trj]" has been found in "C:/WINDOWS/system32/sprint.dll_/[Embedded#05070]" file.
Sign of "Win32:Delf-GBA [Trj]" has been found in "C:/WINDOWS/system32/sprint.dll_" file.
Sign of "Win32:FlyStudio-AA [Trj]" has been found in "C:/WINDOWS/system32/boorcservice.exe__" file.
Sign of "Win32:Trojan-gen {Other}" has been found in "C:/WINDOWS/system32/SkypeComm.dll.disabled" file.
Sign of "Win32:FlyStudio-AA [Trj]" has been found in "C:/WINDOWS/Fonts/09e84031a107f84a8d2ad6cdfb3b06b5.dat" file.
Sign of "Win32:FlyStudio-AA [Trj]" has been found in "C:/WINDOWS/Fonts/09e84031a107f84a8d2ad6cdfb3b06b5.dat" file.
Sign of "Win32:Agent-TOF [Trj]" has been found in "C:/WINDOWS/Temp/E_4/krnln.fnr" file.
Sign of "Win32:Agent-TOF [Trj]" has been found in "C:/WINDOWS/Temp/E_4/krnln.fne" file.
以上列表中.dll_和.exe_还有.disabled文件都是本人修改过文件名的,比较乱,有时候后缀直接加个下划线,有时又加上.disabled后缀。