中招很久了

来源：互联网发布：步进电机单片机程序编辑：程序博客网时间：2024/06/08 04:16

C:/WINDOWS/Temp/Temporary Internet Files/Content.IE5

C:/WINDOWS/Temp/Cookies

每次开机都自动弹出一个快车网的网页并且迅速关闭。闪现一下，有时候甚至都看不到窗口。

有毒的文件

C:/WINDOWS/system32/spoolsv.exe
md5:0928dc5706250dde4ca458dfa8a35ad1
ver:5.1.2600.2696
57856byte

和avast有冲突，avast查不出来，机器还变的贼慢。只好换用小红伞了

Avira antivirus 扫描结果

C:/WINDOWS/system32/spoolsv.exe
[DETECTION] Is the TR/PePatch.JW.1 Trojan
C:/WINDOWS/system32/dmserver.dll
[DETECTION] Is the TR/Patched.BU.32 Trojan
C:/WINDOWS/system32/taskmagr.exe
[DETECTION] Is the TR/StartPage.cyi Trojan
C:/WINDOWS/system32/sens.dll
[DETECTION] Is the TR/Patched.BD.444 Trojan
C:/WINDOWS/system32/msGDI1.dll
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
C:/WINDOWS/system32/wmdmpmsvc.dll
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program