堕落风流 - 2007-9-3 19:34:00
我电脑不知道怎么老提示有病毒,我用的是瑞星,而且有更新.下面是我用SRE弄的日志.请高手给看看...
多谢!!!
PS:日志怎么看啊?看到这么多英文字母我就眼晕,大家受累给看看,不胜感激!!!
[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; KuGooSoft)附件:
932778200793192410.txt
堕落风流 - 2007-9-4 19:37:00
hack.suspiciousani 还有trojan.dl.js.(后缀有好几种)
trojan.win32.agent.vxl
堕落风流 - 2007-9-4 19:45:00
病毒名称 处理结果 发现日期 扫描方式 路径 文件
Trojan.DL.VBS.Agent.xfs 清除成功 2007-07-20 16:06 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\KXMF4D6B 06014[1].htm
Trojan.DL.VBS.Agent.xfs 跳过脚本 2007-07-20 16:06 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 276842417144.tmp
Trojan.DL.VBS.Agent.xfs 清除成功 2007-07-20 16:06 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\KPQFKTQN 06014[1].htm
Trojan.DL.VBS.Agent.xfs 跳过脚本 2007-07-20 16:06 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 276842417304.tmp
Trojan.DL.JS.Agent.ljn 跳过脚本 2007-07-29 14:09 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 347247789928.tmp
Worm.Win32.Agent.c 删除成功 2007-08-28 13:46 文件监控 h: htocusa.exe>>fsg2.0
Trojan.Win32.Agent.vxl 删除成功 2007-09-02 10:26 文件监控 C:\Program Files\Rising\Rfw rav.exe
Hack.SuspiciousAni 重新启动计算机后删除文件2007-09-02 10:41 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\VRJ5M2KH ani[1].c
Hack.SuspiciousAni 重新启动计算机后删除文件2007-09-02 10:47 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\LEN1564E ani[1].c
Hack.SuspiciousAni 删除成功 2007-09-02 10:53 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\M271DZXJ ani[1].c
Hack.SuspiciousAni 重新启动计算机后删除文件2007-09-02 10:54 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\4HI7G167 ani[1].c
Hack.SuspiciousAni 忽略 2007-09-02 10:54 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\4HI7G167 ani[1].c
Hack.SuspiciousAni 重新启动计算机后删除文件2007-09-02 10:54 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\QLWNMHI5 ani[1].c
Hack.SuspiciousAni 忽略 2007-09-02 10:54 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\QLWNMHI5 ani[1].c
堕落风流 - 2007-9-4 19:46:00
Hack.SuspiciousAni 重新启动计算机后删除文件2007-09-02 10:54 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\19QB89AB ani[1].c
Hack.SuspiciousAni 删除成功 2007-09-02 10:55 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\HI12CDNF 2007s[1].bmp
Trojan.Win32.Agent.vxl 删除成功 2007-09-02 11:23 文件监控 C:\System Volume Information\_restore{1FB9BFCB-8C72-4C7C-9A2D-BE44D59878A5}\RP163 A0059804.exe
Trojan.Win32.Agent.vxl 删除成功 2007-09-02 11:23 文件监控 C:\System Volume Information\_restore{1FB9BFCB-8C72-4C7C-9A2D-BE44D59878A5}\RP167 A0062008.exe
Trojan.Win32.Agent.vxl 删除成功 2007-09-02 11:25 文件监控 C:\System Volume Information\_restore{1FB9BFCB-8C72-4C7C-9A2D-BE44D59878A5}\RP168 A0064455.exe
Hack.SuspiciousAni 删除成功 2007-09-02 11:29 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\19QB89AB ani[1].c
Hack.SuspiciousAni 重新启动计算机后删除文件2007-09-02 11:58 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\4HI7G167 ani[1].c
Hack.SuspiciousAni 重新启动计算机后删除文件2007-09-02 12:01 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\19QB89AB ani[1].c
Trojan.DL.JS.Small.lhe 跳过脚本 2007-09-03 11:12 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.JS.Small.lhe 删除成功 2007-09-03 11:12 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\VRJ5M2KH downloader1[1].htm
Trojan.DL.VBS.Agent.ac 删除成功 2007-09-03 11:12 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\19QB89AB 2209[1].htm
Trojan.DL.HTML.Agent.gs 删除成功 2007-09-03 11:12 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\19QB89AB 6056[1].htm
Trojan.DL.JS.Agent.lmh 重新启动计算机后删除文件2007-09-03 11:12 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\LEN1564E ifuckhackerdewife[1].js
Trojan.DL.VBS.Agent.cgk 跳过脚本 2007-09-03 11:12 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.VBS.Agent.cgk 跳过脚本 2007-09-03 11:12 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.VBS.Agent.cgk 跳过脚本 2007-09-03 11:13 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.VBS.Agent.cgk 跳过脚本 2007-09-03 11:13 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.VBS.Agent.ad 删除成功 2007-09-03 11:13 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\85MZC92R 847[1].htm
Trojan.DL.VBS.Agent.cgk 跳过脚本 2007-09-03 11:13 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.VBS.Agent.cgk 跳过脚本 2007-09-03 11:13 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.VBS.Agent.cgk 跳过脚本 2007-09-03 11:13 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.JS.Agent.lmj 删除成功 2007-09-03 11:13 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\M271DZXJ oo[1].js
Trojan.DL.VBS.Agent.cgk 跳过脚本 2007-09-03 11:13 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Hack.SuspiciousAni 重新启动计算机后删除文件2007-09-03 11:13 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\M271DZXJ Ani[1].c
Trojan.DL.JS.Small.lhl 跳过脚本 2007-09-03 11:13 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
Trojan.DL.JS.Agent.lmi 删除成功 2007-09-03 11:13 文件监控 C:\Documents and Settings\Liu\Local Settings\Temporary Internet Files\Content.IE5\M271DZXJ baidu[1].htm
Trojan.DL.JS.Agent.lma 跳过脚本 2007-09-03 11:13 网页/脚本监控 C:\DOCUME~1\Liu\LOCALS~1\Temp 348843727464.tmp
流星陨落 - 2007-9-4 20:28:00
http://forum.ikaka.com/topic.asp?board=40&artid=8353392
© 2000 - 2026 Rising Corp. Ltd.