1   1  /  1  页   跳转

日志

日志

看看

附件附件:

下载次数:88
文件类型:application/octet-stream
文件大小:
上传时间:2007-7-27 11:11:39
描述:

最后编辑2007-07-27 11:20:49
分享到:
gototop
 

抱歉,楼主所中不是一般的病毒,而是木马群..

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <visin><C:\WINDOWS\system32\visin.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><wsbpri.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{459AFD5B-159F-ACD8-954C-ACD545FA6584}><C:\WINDOWS\system32\jzdpri.dll>  [N/A]
    <{26368135-64FA-BC34-DA32-DCF4FD431C92}><C:\WINDOWS\system32\qhbpri.dll>  []
    <{5A65498A-7653-9801-1647-987114AB7F45}><C:\WINDOWS\system32\zxepri.dll>  [N/A]
    <{1182C1EB-375C-573D-1F5E-234552345211}><C:\WINDOWS\system32\wldpri.dll>  []
    <{2F12545B-1212-1314-5679-4512ACEF8902}><C:\WINDOWS\system32\wdbpri.dll>  [N/A]
    <{0EA66AD2-CF26-2E23-532B-B292E22F3266}><C:\Program Files\Internet Explorer\PLUGINS\NewTemp.dll>  []
    <{713AF41A-21B1-131B-1BFC-D2A90DF4A2B7}><C:\WINDOWS\system32\xyfpri.dll>  [N/A]
    <{40117B96-998D-4D80-8F89-5E9DBD9F3460}><C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys>  [N/A]
    <{559AFD5B-159F-ACD8-954C-ACD545FA6585}><C:\WINDOWS\system32\jzepri.dll>  [N/A]
    <{22311A42-AC1B-158F-FD32-5674345F23A2}><C:\WINDOWS\system32\dhbpri.dll>  [N/A]
    <{613AF41A-21B1-131B-1BFC-D2A90DF4A2B6}><C:\WINDOWS\system32\xyepri.dll>  [N/A]
    <{425AB2F3-234A-7469-2F43-E341713ABFA4}><C:\WINDOWS\system32\wgdpri.dll>  [N/A]
    <{B1351752-5628-1547-FFAB-BADC13512AFB}><C:\WINDOWS\system32\ztkpri.dll>  []
    <{2FFAB213-ABCF-F421-FBA1-3FA352343212}><C:\WINDOWS\system32\wsbpri.dll>  []


gototop
 

[C:\WINDOWS\HKNTDLL.dll]  [N/A, ]
[C:\Program Files\Internet Explorer\PLUGINS\NewTemp.dll]  [N/A, ]
Autorun.inf
[C:\]
[autorun]
open=PegeFile.pif
shellexecute=PegeFile.pif
shell\Auto\command=PegeFile.pif
shell=Auto
[D:\]
[autorun]
open=PegeFile.pif
shellexecute=PegeFile.pif
shell\Auto\command=PegeFile.pif
shell=Auto
[E:\]
[autorun]
open=PegeFile.pif
shellexecute=PegeFile.pif
shell\Auto\command=PegeFile.pif
shell=Auto


gototop
 

推荐楼主找到那些文件,上报给瑞星:

http://up.rising.com.cn/webmail/uploadnew.htm

一般隔一天,就能查杀了。
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT