新版灰鸽子的查杀方法

last 初生襁褓狮帖子:17 注册: 2005-09-02 来自:	发表于： 2005-09-02 11:41 \| 短消息资料字号：小中大 41楼我中了Backdoor.Gpigeon.5.cj 每次重启都会有，跪求各位大虾如何清楚~~~~~~~~~~~ 万分感谢
last 初生襁褓狮帖子:17 注册: 2005-09-02 来自:

大版主

帖子:72578
注册: 2003-04-10
来自:

发表于： 2005-09-02 11:47 | 只看楼主 短消息资料

字号：小中大 42楼

引用:

【苹果8509的贴子】
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet001\Services\里面的mchInjDrv用不用删除??
...........................

删除！

大版主

帖子:72578
注册: 2003-04-10
来自:

发表于： 2005-09-02 11:50 | 只看楼主 短消息资料

字号：小中大 43楼

引用:

【last的贴子】我中了Backdoor.Gpigeon.5.cj
每次重启都会有，跪求各位大虾如何清楚~~~~~~~~~~~
万分感谢
...........................

扫个HijackThis1.99.1的日志贴上来看看。

帅的有型锋芒艾服狮帖子:2088 注册: 2005-08-30 来自:	发表于： 2005-09-02 11:55 \| 短消息资料字号：小中大 44楼用这个扫附件: 文件名:573736200592115538.rar 下载次数:0 文件类型:application/octet-stream 文件大小: 上传时间:2005-9-2 11:55:39 描述:
帅的有型锋芒艾服狮帖子:2088 注册: 2005-08-30 来自:

last 初生襁褓狮帖子:17 注册: 2005-09-02 来自:	发表于： 2005-09-02 11:58 \| 短消息资料字号：小中大 45楼 Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\PROGRAM FILES\RISING\RAV\Ravmond.exe c:\program files\rising\rfw\rfwsrv.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Rising\Rfw\rfwmain.exe C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE C:\Program Files\Logitech\MouseWare\system\em_exec.exe D:\Norton Ghost 2003\GhostStartService.exe C:\WINDOWS\System32\inetsrv\inetinfo.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE C:\WINDOWS\System32\dllhost.exe C:\WINDOWS\System32\inetsrv\DavCData.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\MYIE2\MyIE.exe C:\Documents and Settings\starcraft\桌面\hijackthis\HijackThis.exe O1 - Hosts: 218.5.76.51 ctt900.com O1 - Hosts: 218.5.76.51 www.ctt900.com O1 - Hosts: 218.5.76.51 ctt900.com O1 - Hosts: 218.5.76.51 www.ctt900.com O1 - Hosts: 218.5.76.51 zhao123.com O1 - Hosts: 218.5.76.51 www.zhao123.com O1 - Hosts: 218.5.76.51 zhao123.com O1 - Hosts: 218.5.76.51 www.zhao123.com O1 - Hosts: 218.5.76.51 4399.com O1 - Hosts: 218.5.76.51 www.4399.com O1 - Hosts: 218.5.76.51 4399.com O1 - Hosts: 218.5.76.51 www.4399.com O1 - Hosts: 218.5.76.51 chinagames.net O1 - Hosts: 218.5.76.51 www.chinagames.net O1 - Hosts: 218.5.76.51 chinagames.net O1 - Hosts: 218.5.76.51 www.chinagames.net O1 - Hosts: 218.5.76.51 tiexue.net O1 - Hosts: 218.5.76.51 www.tiexue.net O1 - Hosts: 218.5.76.51 tiexue.net O1 - Hosts: 218.5.76.51 www.tiexue.net O1 - Hosts: 218.5.76.51 qq163.com O1 - Hosts: 218.5.76.51 www.qq163.com O1 - Hosts: 218.5.76.51 qq163.com O1 - Hosts: 218.5.76.51 www.qq163.com O1 - Hosts: 218.5.76.51 flashmi.net O1 - Hosts: 218.5.76.51 www.flashmi.net O1 - Hosts: 218.5.76.51 flashmi.net O1 - Hosts: 218.5.76.51 www.flashmi.net O1 - Hosts: 218.5.76.51 chinamp3.com O1 - Hosts: 218.5.76.51 www.chinamp3.com O1 - Hosts: 218.5.76.51 chinamp3.com O1 - Hosts: 218.5.76.51 www.chinamp3.com O1 - Hosts: 218.5.76.51 pg168.com O1 - Hosts: 218.5.76.51 www.pg168.com O1 - Hosts: 218.5.76.51 pg168.com O1 - Hosts: 218.5.76.51 www.pg168.com O1 - Hosts: 218.5.76.51 yymp3.com O1 - Hosts: 218.5.76.51 www.yymp3.com O1 - Hosts: 218.5.76.51 yymp3.com O1 - Hosts: 218.5.76.51 www.yymp3.com O1 - Hosts: 218.5.76.51 yy138.com O1 - Hosts: 218.5.76.51 www.yy138.com O1 - Hosts: 218.5.76.51 yy138.com O1 - Hosts: 218.5.76.51 www.yy138.com O1 - Hosts: 218.5.76.51 dj99.com O1 - Hosts: 218.5.76.51 www.dj99.com O1 - Hosts: 218.5.76.51 dj99.com O1 - Hosts: 218.5.76.51 www.dj99.com O1 - Hosts: 218.5.76.51 sogua.com O1 - Hosts: 218.5.76.51 www.sogua.com O1 - Hosts: 218.5.76.51 sogua.com O1 - Hosts: 218.5.76.51 www.sogua.com O1 - Hosts: 218.5.76.51 snsn.net O1 - Hosts: 218.5.76.51 www.snsn.net O1 - Hosts: 218.5.76.51 snsn.net O1 - Hosts: 218.5.76.51 www.snsn.net O1 - Hosts: 218.5.76.51 flash8.net O1 - Hosts: 218.5.76.51 www.flash8.net O1 - Hosts: 218.5.76.51 flash8.net O1 - Hosts: 218.5.76.51 www.flash8.net O1 - Hosts: 218.5.76.51 mop.com O1 - Hosts: 218.5.76.51 www.mop.com O1 - Hosts: 218.5.76.51 mop.com O1 - Hosts: 218.5.76.51 www.mop.com O1 - Hosts: 218.5.76.51 tianyaclub.com O1 - Hosts: 218.5.76.51 www.tianyaclub.com O1 - Hosts: 218.5.76.51 tianyaclub.com O1 - Hosts: 218.5.76.51 www.tianyaclub.com O1 - Hosts: 218.5.76.51 xici.net O1 - Hosts: 218.5.76.51 www.xici.net O1 - Hosts: 218.5.76.51 xici.net O1 - Hosts: 218.5.76.51 www.xici.net O1 - Hosts: 218.5.76.51 ucanlove.com O1 - Hosts: 218.5.76.51 www.ucanlove.com O1 - Hosts: 218.5.76.51 ucanlove.com O1 - Hosts: 218.5.76.51 www.ucanlove.com O1 - Hosts: 218.5.76.51 cmfu.com O1 - Hosts: 218.5.76.51 www.cmfu.com O1 - Hosts: 218.5.76.51 cmfu.com O1 - Hosts: 218.5.76.51 www.cmfu.com O1 - Hosts: 218.5.76.51 21red.net O1 - Hosts: 218.5.76.51 www.21red.net O1 - Hosts: 218.5.76.51 21red.net O1 - Hosts: 218.5.76.51 www.21red.net O1 - Hosts: 218.5.76.51 pconline.com.cn O1 - Hosts: 218.5.76.51 www.pconline.com.cn O1 - Hosts: 218.5.76.51 pconline.com.cn O1 - Hosts: 218.5.76.51 www.pconline.com.cn O1 - Hosts: 218.5.76.51 donews.com O1 - Hosts: 218.5.76.51 www.donews.com O1 - Hosts: 218.5.76.51 donews.com O1 - Hosts: 218.5.76.51 www.donews.com O1 - Hosts: 218.5.76.51 pcauto.com.cn O1 - Hosts: 218.5.76.51 www.pcauto.com.cn O1 - Hosts: 218.5.76.51 pcauto.com.cn O1 - Hosts: 218.5.76.51 www.pcauto.com.cn O1 - Hosts: 218.5.76.51 265.com O1 - Hosts: 218.5.76.51 www.265.com O1 - Hosts: 218.5.76.51 265.com O1 - Hosts: 218.5.76.51 www.265.com O1 - Hosts: 218.5.76.51 wo99.com O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v5.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\Program Files\浩方对战平台\GameClient.exe O9 - Extra button: 中文 - {0D5C2EA0-EDCD-11D3-86A5-0088CC224026} - C:\PROGRA~1\TRANST~1\APPLIC~1\TransIE.dll O9 - Extra 'Tools' menuitem: 中文 - {0D5C2EA0-EDCD-11D3-86A5-0088CC224026} - C:\PROGRA~1\TRANST~1\APPLIC~1\TransIE.dll O9 - Extra button: (no name) - {676AB8E0-F5A6-11D3-86A5-0088CC224026} - C:\PROGRA~1\TRANST~1\APPLIC~1\TransIE.dll O9 - Extra 'Tools' menuitem: 译星帮助 - {676AB8E0-F5A6-11D3-86A5-0088CC224026} - C:\PROGRA~1\TRANST~1\APPLIC~1\TransIE.dll O9 - Extra button: 英文 - {C2EDD5E0-EB64-11D3-B4D2-0088CC231035} - C:\PROGRA~1\TRANST~1\APPLIC~1\TransIE.dll O9 - Extra 'Tools' menuitem: 英文 - {C2EDD5E0-EB64-11D3-B4D2-0088CC231035} - C:\PROGRA~1\TRANST~1\APPLIC~1\TransIE.dll O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing) O9 - Extra 'Tools' menuitem: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing) O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - Extra button: 百万图库 - {6713E8D2-850A-101B-AFC0-4210102A8DA7} - http://www.26-3.com/p (file missing) (HKCU) O9 - Extra button: 铃声图片下载 - {7713E8D2-850A-101B-AFC0-4210102A8DA7} - http://www.26-3.com/sms/index.htm (file missing) (HKCU) O16 - DPF: {EF6205C1-3F17-4829-BCB5-1336ED89E356} (KvScanOnline Control) - http://club.jiangmin.com/kvscan/KvDown.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{FCB153DC-5A71-42C0-BA97-66D277109FFA}: NameServer = 202.96.104.27 202.96.104.17 O23 - Service: GhostStartService - Symantec Corporation - D:\Norton Ghost 2003\GhostStartService.exe O23 - Service: Microsoft HttpServer - Unknown owner - C:\WINDOWS\Microsoft HttpServer.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\System32\nvsvc32.exe (file missing) O23 - Service: Remtoe Access Client - Unknown owner - C:\WINDOWS\Explorers.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - c:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
last 初生襁褓狮帖子:17 注册: 2005-09-02 来自:

baohe 大版主帖子:72578 注册: 2003-04-10 来自:	发表于： 2005-09-02 12:05 \| 只看楼主短消息资料字号：小中大 46楼【回复“last”的帖子】 C:\WINDOWS\Microsoft HttpServer.exe C:\WINDOWS\Explorers.exe 请将上面两个文件打包传上来。帮你看看是那个鸽子。另：关闭IE浏览器，用HijackThis修复所有O1及O6项。
baohe 大版主帖子:72578 注册: 2003-04-10 来自:

last 初生襁褓狮帖子:17 注册: 2005-09-02 来自:	发表于： 2005-09-02 12:34 \| 短消息资料字号：小中大 47楼打包好了怎么上传啊
last 初生襁褓狮帖子:17 注册: 2005-09-02 来自:

大版主

帖子:72578
注册: 2003-04-10
来自:

发表于： 2005-09-02 13:31 | 只看楼主 短消息资料

字号：小中大 48楼

引用:

【last的贴子】打包好了怎么上传啊
...........................

如何将病毒样本上传到论坛——写给请求帮助的新手
http://forum.ikaka.com/topic.asp?board=28&artid=6267232

last 初生襁褓狮帖子:17 注册: 2005-09-02 来自:	发表于： 2005-09-02 14:22 \| 短消息资料字号：小中大 49楼谢谢这个是Microsoft HttpServer和explorer的打包请您帮忙看看附件: 文件名:575265200592142236.rar 下载次数:0 文件类型:application/octet-stream 文件大小: 上传时间:2005-9-2 14:22:36 描述:
last 初生襁褓狮帖子:17 注册: 2005-09-02 来自:

xxaall011 初生襁褓狮帖子:13 注册: 2005-09-02 来自:	发表于： 2005-09-02 14:40 \| 短消息资料字号：小中大 50楼这个就是查到的一些了, 病毒名称处理结果发现日期扫描方式路径文件病毒来源 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 csrss.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 winlogon.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 winlogon.exe>>C:\WINNT\DNS_SERVERKey.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 services.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 lsass.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 spoolsv.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 svchost.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.GPigeon.5.a(灰鸽子后门) 清除成功 05-09-02 13:48 手动扫描 IEXPLORE.EXE>>C:\WINNT\DNS_SERVER.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 IEXPLORE.EXE>>C:\WINNT\DNS_SERVERKey.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 IEXPLORE.EXE>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 apache.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 GemServ.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 gemback.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 nSvcIp.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 ctfmon.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 nSvcLog.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 nvsvc32.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 nvsvc32.exe>>C:\WINNT\DNS_SERVERKey.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 regsvc.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 CCENTER.EXE>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 Ravmond.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 apache.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 MSTask.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 stisvc.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 stisvc.exe>>C:\WINNT\DNS_SERVERKey.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 RavStub.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 WinMgmt.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 svchost.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 Explorer.EXE>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 RUNDLL32.EXE>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 RUNDLL32.EXE>>C:\WINNT\DNS_SERVERKey.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 RAVTIMER.EXE>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 RAVMON.EXE>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.Gpigeon.bc 清除成功 05-09-02 13:48 手动扫描 rundll32.exe>>C:\WINNT\DNS_SERVER_Hook.DLL\本机 Backdoor.GPigeon.5.a(灰鸽子后门) 清除成功 05-09-02 13:48 手动扫描 IEXPLORE.EXE>>C:\WINNT\DNS_SERVER.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 IEXPLORE.EXE>>C:\WINNT\DNS_SERVERKey.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 nvsvc32.exe>>C:\WINNT\DNS_SERVERKey.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 stisvc.exe>>C:\WINNT\DNS_SERVERKey.DLL\本机 Backdoor.Gpigeon.5.am 清除成功 05-09-02 13:48 手动扫描 RUNDLL32.EXE>>C:\WINNT\DNS_SERVERKey.DLL\本机
xxaall011 初生襁褓狮帖子:13 注册: 2005-09-02 来自:

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第四十七次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 新版灰鸽子的查杀方法

附件:

文件名:573736200592115538.rar 下载次数:0 文件类型:application/octet-stream 文件大小: ShowFormatBytesStr(0); 上传时间:2005-9-2 11:55:39 描述:

附件:

文件名:575265200592142236.rar 下载次数:0 文件类型:application/octet-stream 文件大小: ShowFormatBytesStr(0); 上传时间:2005-9-2 14:22:36 描述:

瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛新版灰鸽子的查杀方法

文件名:573736200592115538.rar

下载次数:0

文件类型:application/octet-stream

文件大小:

上传时间:2005-9-2 11:55:39

描述:

文件名:575265200592142236.rar

下载次数:0

文件类型:application/octet-stream

文件大小:

上传时间:2005-9-2 14:22:36

描述: