瑞星卡卡安全论坛

瑞星卡卡电脑诊断日志 v1.30 (2007-9-11 7:33:14)  北京瑞星科技股份有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      RfwProxySrv
        [A ] 1. c:\program files\rising\rfw\rfwproxy.exe
          Beijing Rising Technology Co., Ltd.
          Rising Personal Proxy Service
          .text,.rdata,.data,.rsrc,


      RfwService
        [A ] 2. c:\program files\rising\rfw\rfwsrv.exe
          Beijing Rising Technology Co., Ltd.
          Rising Personal FireWall Service
          .text,.rdata,.data,.rsrc,


      rpcapd
        [A ] 3. c:\program files\winpcap\rpcapd.exe
          .text,.rdata,.data,


      RsCCenter
        [A ] 4. e:\program files\rising\rav\ccenter.exe
          Beijing Rising Technology Co., Ltd.
          CCenter
          .text,.rdata,.data,.rsrc,


      RsRavMon
        [A ] 5. e:\program files\rising\rav\ravmond.exe
          Beijing Rising Technology Co., Ltd.
          RavMond
          .text,.rdata,.data,.rsrc,


[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; BysooTB; .NETSPX2; Alexa Toolbar)


附件: 940449200791183125.txt

自己顶.

病毒名称处理结果发现日期扫描方式路径文件病毒来源
Trojan.Spy.KeyLogger.xc删除成功2007-07-14 09:59其它嵌入杀毒f:\TDdownloadwg999_0515.exe>>简单霸主1.28++免费PK版\mir2hookdll.dll本机
Trojan.PSW.Win32.WoWar.sh删除成功2007-07-17 14:16快捷扫描F:\TDdownloadmh0405.exe>>3242\m6564j.exe>>upack0.34本机
Trojan.PSW.Win32.OnlineGames.dgx删除成功2007-07-17 14:16快捷扫描F:\TDdownloadmh0405.exe>>3242\q865765j.exe>>upx_c本机
Trojan.PSW.Win32.OnlineGames.dby删除成功2007-07-17 14:16快捷扫描F:\TDdownloadmh0405.exe>>3242\w645j.exe>>nspack本机
Trojan.PSW.Win32.Shanda.m删除成功2007-07-17 14:16快捷扫描F:\TDdownloadmh0405.exe>>3242\c5433j.exe>>Aspack212r本机
Trojan.PSW.Win32.OnlineGames.dfy删除成功2007-07-17 14:16快捷扫描F:\TDdownloadmh0405.exe>>3242\m45343y.exe本机
Trojan.PSW.Win32.Shanda.k删除成功2007-07-17 14:16快捷扫描F:\TDdownloadmh0405.exe>>3242\zt615.exe本机
Trojan.PSW.Win32.WoWar.sh清除失败2007-07-17 14:47其它嵌入杀毒f:\TDdownloadmh0405.exe>>3242\m6564j.exe>>upack0.34本机
Trojan.PSW.Win32.WoWar.sh清除失败2007-07-17 14:47其它嵌入杀毒f:\TDdownloadmh0405.exe>>3242\m6564j.exe>>upack0.34本机
Trojan.PSW.SBoy.a删除成功2007-07-20 11:30快捷扫描H:EXPLORER.EXE本机
Trojan.PSW.SBoy.b删除成功2007-07-20 11:30快捷扫描H:wsctf.exe本机
Worm.Suser.d删除成功2007-07-20 11:31快捷扫描H:tel.xls.exe本机
Dropper.Agent.ers删除成功2007-07-30 13:26定时扫描C:\Program Files\HuaCi\updatezpig.exe.dat>>zpig.exe本机
Adware.Win32.WSearch.i删除成功2007-08-09 14:45手动扫描C:\Documents and Settings\eyes.6C4US995IZPJP9V\Local Settings\Temp~ex2.exe本机
Adware.Win32.WSearch.g删除成功2007-08-10 11:43定时扫描C:\Program Files\HuaCi\huacimUin.exe本机
Worm.Suser.d删除成功2007-08-10 15:14快捷扫描H:\System Volume Information\_restore{BF35003F-EF8B-4BAA-BEF9-A3D679625EA2}\RP12A0002445.exe本机
Worm.Suser.d删除成功2007-08-10 15:16快捷扫描H:tel.xls.exe本机
Hack.SuspiciousAni删除成功2007-08-28 11:33定时扫描C:\Documents and Settings\eyes.6C4US995IZPJP9V\Local Settings\Temporary Internet Files\Content.IE5\LTGARZXCani[1].c本机
Hack.SuspiciousAni删除成功2007-08-28 11:33定时扫描C:\Documents and Settings\eyes.6C4US995IZPJP9V\Local Settings\Temporary Internet Files\Content.IE5\LTGARZXCani[6].c本机
Hack.SuspiciousAni删除成功2007-08-28 11:33定时扫描C:\Documents and Settings\eyes.6C4US995IZPJP9V\Local Settings\Temporary Internet Files\Content.IE5\LTGARZXCani[3].c本机
Hack.SuspiciousAni删除成功2007-08-28 11:34定时扫描C:\Documents and Settings\eyes.6C4US995IZPJP9V\Local Settings\Temporary Internet Files\Content.IE5\WRJ4K3NYani[1].c本机
Hack.SuspiciousAni删除成功2007-08-28 11:34定时扫描C:\Documents and Settings\eyes.6C4US995IZPJP9V\Local Settings\Temporary Internet Files\Content.IE5\WRJ4K3NYani[2].c本机
Trojan.PSW.Win32.XYOnline.gw清除成功2007-09-05 15:29手动扫描kvdxais.exe>>C:\WINDOWS\system32\kvdxais.exe本机
Trojan.PSW.Win32.ZeroOnline.am清除成功2007-09-05 15:29手动扫描rsjzasp.exe>>C:\WINDOWS\system32\rsjzasp.exe本机
Trojan.PSW.Win32.XYOnline.gw清除成功2007-09-05 15:29手动扫描kvmxais.exe>>C:\WINDOWS\system32\kvmxais.exe本机
Trojan.PSW.Win32.OnlineGames.yfi清除成功2007-09-05 15:29手动扫描rsmyasp.exe>>C:\WINDOWS\system32\rsmyasp.exe本机
Trojan.PSW.Win32.YBOnline.ak清除成功2007-09-05 15:29手动扫描raqjatl.exe>>C:\WINDOWS\system32\raqjatl.exe本机
Trojan.PSW.Win32.YBOnline.ak清除成功2007-09-05 15:30手动扫描rarjatl.exe>>C:\WINDOWS\system32\rarjatl.exe本机
Trojan.PSW.Win32.YBOnline.ak清除成功2007-09-05 15:30手动扫描ratbatl.exe>>C:\WINDOWS\system32\ratbatl.exe本机
Trojan.PSW.Win32.Wowar.vr删除成功2007-09-08 12:29手动扫描C:\WINDOWSq1.exe>>admin1.EXE>>Aspack212r本机
Trojan.PSW.Win32.OnlineGames.yge删除成功2007-09-08 12:29手动扫描c:\windowswl.exe>>upack0.39本机
Trojan.PSW.Win32.OnlineGames.ygo删除成功2007-09-08 13:37手动扫描e:\program files\world of warcraftbicenet.dll_0>>upack0.34本机