Win32.Troj.KillAV.eh，為木馬病毒名稱。該病毒是“av終結者”的新變種,集合目前最流行的病毒技術於一身。
基本介紹
- 中文名：安全殺手
- 外文名：Win32.Troj.KillAV.eh
- 病毒類型：木馬
- 威脅級別：二星
基本信息,簡介,病毒行為,關閉程式,
基本信息
病毒別名：Trojan.Win32.KillAV.eh[AVP]
處理時間：
威脅級別：★★
中文名稱：安全殺手
病毒類型：木馬
影響系統：Win9x / WinNT
簡介
它能破壞大量的防毒軟體和個人防火牆的正常監控和保護功能,造成電腦無法進入安全模式,反病毒網站無法打開。普通用戶一旦感染該病毒,格式化系統盤後病毒仍無法清除。導致用戶的電腦安全性能劇降,嚴重威脅用戶個人隱私資料和網路個人財產的安全。此外,它可通過可移動磁碟傳播。該病毒已經衍生多個新變種,可造成在網際網路上的病毒蔓延現象。建議您多留意毒霸官網的相關安全資訊,及時獲取專業的預防和處理流行病毒的措施。
病毒行為
關閉程式
該病毒嘗試關閉以下服務或進程：
"_avp"
"_avpcc"
"_avpm"
"_findviru"
"ackwin32"
"advxdwin"
"agentsvr"
"agentw"
"ahnsd"
"alerter"
"alertsvc"
"alogserv"
"amon"
"amon9x"
"anti-trojan"
"antivirus"
"ants"
"apimonitor"
"aplica32"
"apvxdwin"
"atcon"
"atguard"
"atro55en"
"atupdater"
"atwatch"
"aupdate"
"autodown"
"autotrace"
"autoupdate"
"avconsol"
"ave32"
"avgcc32"
"avgctrl"
"avgserv"
"avgserv9"
"avgw"
"avkpop"
"avkserv"
"avkservice"
"avkwcl9"
"avkwctl9"
"avnt"
"avp"
"avp32"
"avpcc"
"avpdos32"
"avpexec"
"avpinst"
"avpm"
"avpmon"
"avpnt"
"avptc32"
"avpupd"
"avrescue"
"avsched32"
"avsynmgr"
"avwin95"
"avwinnt"
"avwupd32"
"avxmonitor9x"
"avxmonitornt"
"avxquar"
"avxw"
"azonealarm"
"bd_professional"
"bidef"
"bidserver"
"bipcp"
"bipcpevalsetup"
"bisp"
"blackd"
"blackice"
"bootwarn"
"borg2"
"bs120"
"ccapp"
"ccevtmgr"
"ccpxysvc"
"ccsetmgr"
"ccshtdwn"
"cdp"
"cfgwiz"
"cfiadmin"
"cfiaudit"
"cfind"
"cfinet"
"cfinet32"
"claw95"
"claw95cf"
"claw95ct"
"clean"
"cleaner"
"cleaner3"
"cleanpc"
"cmgrdian"
"cmon016"
"connectionmonitor"
"cpd"
"cpdclnt"
"cpf9x206"
"cpfnt206"
"csinject"
"csinsm32"
"css1631"
"ctrl"
"cv"
"cwnb181"
"cwntdwmo"
"defalert"
"defscangui"
"defwatch"
"deputy"
"dllhost"
"doors"
"dpf"
"drwatson"
"drweb32"
"dv95"
"dv95_o"
"dvp95"
"dvp95_0"
"ecengine"
"edi"
"efinet32"
"efpeadm"
"ent"
"esafe"
"escanh95"
"escanhnt"
"escanv95"
"espwatch"
"etrustcipe"
"evpn"
"exantivirus-cnet"
"expert"
"explored"
"f-agnt95"
"fameh32"
"fast"
"fch32"
"fih32"
"findviru"
"firewall"
"fix-it"
"flowprotector"
"fnrb32"
"fprot"
"f-prot"
"fprot95"
"f-prot95"
"fp-win"
"fp-win_trial"
"frw"
"fsaa"
"fsav"
"fsav32"
"fsav530stbyb"
"fsav530wtbyb"
"fsav95"
"fsave32"
"fsgk32"
"fsm32"
"fsma32"
"fsmb32"
"fssm32"
"f-stopw"
"fwenc"
"gbmenu"
"gbpoll"
"generics"
"gibe"
"guard"
"guarddog"
"hacktracersetup"
"htlog"
"hwpe"
"iamapp"
"iamserv"
"iamstats"
"ibmasn"
"ibmavsp"
"icesword"
"icload95"
"icloadnt"
"icmon"
"icssuppnt"
"icsuppnt"
"ifw2000"
"iomon98"
"iparmor"
"iris"
"jammer"
"jed"
"jedi"
"kavlite40eng"
"kavpers40eng"
"kerio-pf-213-en-win"
"kerio-wrl-421-en-win"
"kerio-wrp-421-en-win"
"killprocesssetup161"
"kpf"
"kpfw32"
"kv"
"kv2004"
"kv300"
"kv3000"
"kav"
"kav2002"
"kav2003"
"kav2004"
"kav2005"
"ldnetmon"
"ldpro"
"ldpromenu"
"ldscan"
"localnet"
"lockdown"
"lockdown2000"
"lookout"
"lsetup"
"luall"
"luau"
"lucomserver"
"luinit"
"luspt"
"mcagent"
"mcconsol"
"mcmnhdlr"
"mcshield"
"mctool"
"mcupdate"
"mcvsrte"
"mcvsshld"
"mdll"
"mfw2en"
"mfweng3.02d30"
"mgavrtcl"
"mgavrte"
"mghtml"
"mgui"
"minilog"
"monitor"
"monsys32"
"monsysnt"
"monwow"
"moolive"
"mpfagent"
"mpfservice"
"mpftray"
"mrflux"
"msblast"
"msconfig"
"msinfo32"
"msn"
"mspatch"
"mssmmc32"
"mu0311ad"
"mwatch"
"mxtask"
"n32scan"
"n32scanw"
"nai_vs_stat"
"nav32_loader"
"nav80try"
"navap"
"navapsvc"
"navapw32"
"navauto-protect"
"navdx"
"naveng"
"navengnavex15"
"navex15"
"navlu32"
"navnt"
"navrunr"
"navsched"
"navstub"
"navw"
"navw32"
"navwnt"
"nc2000"
"ncinst4"
"ndd32"
"neomonitor"
"neowatchlog"
"netarmor"
"netinfo"
"netmon"
"netscanpro"
"netspyhunter-1.2"
"netstat"
"netutils"
"nisserv"
"nisum"
"nmain"
"nod32"
"normist"
7 ; "norton_internet_secu_3.0_407"
"notstart"
"npf40_tw_98_nt_me_2k"
"npfmessenger"
"nprotect"
"npscheck"
"npssvc"
"nsched32"
"nsplugin"
"ntrtscan"
"ntvdm"
"ntxconfig"
"nui"
"nupdate"
"nupgrade"
"nvapsvc"
"nvarch16"
"nvc95"
"nvlaunch"
"nvsvc32"
"nwinst4"
"nwservice"
"nwtool16"
"offguard"
"ogrc"
"ostronet"
"outpost"
"outpostinstall"
"outpostproinstall"
"padmin"
"panixk"
"pathping"
"pavcl"
"pavproxy"
"pavsched"
"pavw"
"pcc2002s902"
"pcc2k_76_1436"
"pccclient"
"pccguide"
"pcciomon"
"pccmain"
"pccntmon"
"pccpfw"
"pccwin97"
"pccwin98"
"pcdsetup"
"pcfwallicon"
"pcip10117_0"
"pcscan"
"pcscanpdsetup"
"penis32"
"periscope"
"persfw"
"perswf"
"pf2"
"pfwadmin"
"ping"
"pingscan"
"platin"
"pop3trap"
"poproxy"
"popscan"
"portdetective"
"portmonitor"
"ppinupdt"
"pptbc"
"ppvstop"
"processmonitor"
"procexplorerv1.0"
"programauditor"
"proport"
"protectx"
"pspf"
"purge"
"pview"
"pview95"
"qconsole"
"qserver"
"rapapp"
"rav"
"rav7"
"rav7win"
"rav8win32eng"
"realmon"
"regedit"
"rescue"
"rescue32"
"route"
"routemon"
"rrguard"
"rshell"
"rtvscn95"
"rulaunch"
"safeweb"
"sbserv"
"scan32"
"scan95"
"scanpm"
"schedapp"
"scrscan"
"scvhosl"
"sd"
"serv95"
"setup_flowprotector_us"
"setupvameeval"
"sfc"
"sgssfw32"
"sh"
"sharedaccess"
"shcfg32"
"shellspyinstall"
"shn"
"smc"
"smss"
"sofi"
"spf"
"sphinx"
"spider"
"spyxx"
"srwatch"
"ss3edit"
"st2"
"supftrl"
"supporter5"
"sweep"
"sweep95"
"sweepnet"
"sweepsrv.sys"
"swnetsup"
"symproxysvc"
"symtray"
"sysdoc32"
"sysedit"
"syshelp"
"taskmon"
"taumon"
"tauscan"
"tbscan"
"tc"
"tca"
"tcm"
"tcpsvs32"
"tds2"
"tds2-98"
"tds2-nt"
"tds-3"
"tfak"
"tfak5"
"tftpd"
"tgbob"
"titanin"
"titaninxp"
"tmntsrv"
"tracerpt"
"tracert"
"trjscan"
"trjsetup"
"trojantrap3"
"undoboot"
"update"
"vbcmserv"
"vbcons"
"vbust"
"vbwin9x"
"vbwinntw"
"vccmserv"
"vcleaner"
"vcontrol"
"vcsetup"
"vet32"
"vet95"
"vet98"
"vettray"
"vfsetup"
"vir-help"
"virusmdpersonalfirewall"
"vnlan300"
"vnpc3000"
"vpc32"
"vpc42"
"vpfw30s"
"vptray"
"vscan"
"vscan40"
"vscenu6.02d30"
"vsched"
"vsecomr"
"vshwin32"
"vsisetup"
"vsmain"
"vsmon"
"vsscan40"
"vsstat"
"vswin9xe"
"vswinntse"
"vswinperse"
"vvstat"
"w32dsm89"
"w9x"
"watchdog"
"webscan"
"webscanx"
"webtrap"
"wfindv32"
"wgfe95"
"whoswatchingme"
"wimmun32"
"wingate"
"winhlpp32"
"wink"
"winmgm32"
"winppr32"
"winrecon"
"winroute"
"winservices"
"winsfcm"
"wnt"
"wradmin"
"wrctrl"
"wsbgate"
"wyvernworksfirewall"
"xpf202en"
"xscan"
"zapro"
"zapsetup3001"
"zatutor"
"zatutorzauinst"
"zauinst"
"zonalarm"
"zonalm2601"
"zonealarm"
