表现:
1 运行卡卡\安全卫士等软件就会自动关机;
2 重新启动后,卡卡\安全卫士的主程序被自动删除;
3 删除注册表有关条目,无法进入安全模式;(一进就重启)
4 修改Hosts文件,屏蔽了主要安全软件网站
127.0.0.1 localhost
218.83.161.65 www.hao123.com
218.83.161.65 hao123.com
218.83.161.65 www.7939.com
218.83.161.65 www.360safe.com
218.83.161.65 360safe.com
218.83.161.65 update.360safe.com
218.83.161.65 dl.360safe.com
218.83.161.65 bbs.360safe.com
218.83.161.65 www.btbaicai.com
218.83.161.65 btbaicai.com
218.83.161.65 www.pctutu.com
218.83.161.65 www.7322.com
218.83.161.65 www.5566.net
218.83.161.65 www.9991.com
218.83.161.65 9991.com
218.83.161.65 forum.ikaka.com
218.83.161.65 www.ikaka.com
218.83.161.65 update.ikaka.com
218.83.161.65 www.piaoxue.com
218.83.161.65 forum.jiangmin.com
218.83.161.65 update.jiangmin.com
218.83.161.65 post.baidu.com
218.83.161.65 update.rising.com.cn
218.83.161.65 online.rising.com.cn
218.83.161.65 dl.pconline.com.cn
218.83.161.65 space.uwants.com
218.83.161.65 www.pcav.cn
218.83.161.65 mopery.hits.io
218.83.161.65 www.goodmv.cn
218.83.161.65 www.5566.net
218.83.161.65 www.piaoxue.com
218.83.161.65 www.luosoft.com
218.83.161.65 luosoft.com
218.83.161.65 www.7255.com
218.83.161.65 dl.pconline.com.cn
218.83.161.65 www.spjoy.com
218.83.161.65 www.adanywhere.cn
218.83.161.65 ip.adanywhere.cn
218.83.161.65 ip1.adanywhere.cn
218.83.161.65 ip2.adanywhere.cn
218.83.161.65 www.bannerbox.cn
218.83.161.65 www.caiqiyue.com
218.83.161.65 www.2t2t.cn
218.83.161.65 3.a.kal.cn
218.83.161.65 ip.alexaanywhere.com
218.83.161.65 go.ipcenter.cn
218.83.161.65 www.2yin.cn
218.83.161.65 wwww.systeel.com.cn
218.83.161.65 go.baibaoxiang.cn
218.83.161.65 www.gao58.com
218.83.161.65 www.2tu.cn
218.83.161.65 www.91tu.cn
218.83.161.65 www.haotop.com
218.83.161.65 www.ycdy.com
218.83.161.65 ycdy.com
218.83.161.65 www.maipao.com
218.83.161.65 www.sina-baidu.com
218.83.161.65 www.maohehe.com
218.83.161.65 www.1717kan.cn
218.83.161.65 www.feixue.net
218.83.161.65 www.xingkongitv.com
218.83.161.65 about-blank.cc
218.83.161.65 www.xfkz.com
218.83.161.65 xfkz.com
218.83.161.65 www.365tan.com
218.83.161.65 cg.9e3.com
218.83.161.65 www.qqplayer.net
218.83.161.65 www.sosok.com
218.83.161.65 img.zhangxiu.com
218.83.161.65 www.okeaa.com
218.83.161.65 www.winopen.cn
218.83.161.65 dnl-eu1.kaspersky-labs.com
218.83.161.65 dnl-eu2.kaspersky-labs.com
218.83.161.65 dnl-eu3.kaspersky-labs.com
218.83.161.65 dnl-eu4.kaspersky-labs.com
218.83.161.65 dnl-eu5.kaspersky-labs.com
218.83.161.65 dnl-us1.kaspersky-labs.com
218.83.161.65 dnl-us2.kaspersky-labs.com
218.83.161.65 dnl-us3.kaspersky-labs.com
218.83.161.65 dnl-us4.kaspersky-labs.com
218.83.161.65 dnl-us5.kaspersky-labs.com
218.83.161.65 dnl-ru1.kaspersky-labs.com
218.83.161.65 dnl-ru2.kaspersky-labs.com
218.83.161.65 dnl-ru3.kaspersky-labs.com
218.83.161.65 dnl-ru4.kaspersky-labs.com
218.83.161.65 dnl-ru5.kaspersky-labs.com
218.83.161.65 dnl-jp1.kaspersky-labs.com
218.83.161.65 dnl-jp2.kaspersky-labs.com
218.83.161.65 dnl-jp3.kaspersky-labs.com
218.83.161.65 dnl-jp4.kaspersky-labs.com
218.83.161.65 dnl-jp5.kaspersky-labs.com
218.83.161.65 dnl-kr1.kaspersky-labs.com
218.83.161.65 dnl-kr2.kaspersky-labs.com
218.83.161.65 dnl-kr3.kaspersky-labs.com
218.83.161.65 dnl-kr4.kaspersky-labs.com
218.83.161.65 dnl-kr5.kaspersky-labs.com
218.83.161.65 ishare.sina.com.cn
218.83.161.65 www.my123.com
218.83.161.65 www.58.com
218.83.161.65 www.zhaomeimei.cn
218.83.161.65 banzou6.wo99.com
218.83.161.65 dv.ku6.com
218.83.161.65 www.33943.com
218.83.161.65 zhongbaoscissors.cn
218.83.161.65 www.3w663.com
218.83.161.65 www.wg668.com
218.83.161.65 www.zewq.com
218.83.161.65 www.google.com
218.83.161.65 google.com
218.83.161.65 www.google.cn
218.83.161.65 www.sogou.com
218.83.161.65 www.yahoo.com.cn
218.83.161.65 cn.yahoo.com
218.83.161.65 www.iask.com
218.83.161.65 iask.com
218.83.161.65 search.tom.com
218.83.161.65 page.so.163.com
218.83.161.65 www.soso.com
218.83.161.65 sou.china.com
218.83.161.65 wod.shancunn.com
218.83.161.65 love911.com.cn
218.83.161.65 www.588wy.com
218.83.161.65 news.ruihang.net
218.83.161.65 8.62oo.com
218.83.161.65 www.588wy.com
218.83.161.65 www.369.com
218.83.161.65 www.netv3g.com
218.83.161.65 www.775999.com
218.83.161.65 www.xuedao.net
218.83.161.65 www.9505.com
61.152.244.167 www.qq2525.com
61.152.244.167 toolsbar.kuaiso.com
61.152.244.167 www.kuaiso.com
218.83.161.65 keyword.vnet.cn
218.83.161.65 mtv.fzzv.com
61.152.244.167 29.av366.com
5 调用explorer.exe锁住hosts文件,使得不能修改或删除已被感染的hosts文件
6 伪装掩盖内存,瑞星主程序扫描内存无法进行(只显示内存只有3个文件)
求救!!!谢谢!
