C:/WINDOWS/Temp/Temporary Internet Files/Content.IE5
C:/WINDOWS/Temp/Cookies
每次开机都自动弹出一个快车网的网页并且迅速关闭。闪现一下,有时候甚至都看不到窗口。
有毒的文件
C:/WINDOWS/system32/spoolsv.exe
md5:0928dc5706250dde4ca458dfa8a35ad1
ver:5.1.2600.2696
57856byte
和avast有冲突,avast查不出来,机器还变的贼慢。只好换用小红伞了
Avira antivirus 扫描结果
C:/WINDOWS/system32/spoolsv.exe
[DETECTION] Is theTR/PePatch.JW.1 Trojan
C:/WINDOWS/system32/dmserver.dll
[DETECTION] Is the TR/Patched.BU.32 Trojan
C:/WINDOWS/system32/taskmagr.exe
[DETECTION] Is the TR/StartPage.cyi Trojan
C:/WINDOWS/system32/sens.dll
[DETECTION] Is the TR/Patched.BD.444 Trojan
C:/WINDOWS/system32/msGDI1.dll
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
C:/WINDOWS/system32/wmdmpmsvc.dll
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program