rs32net估计我这次中的毒又要掀起一场血雨腥风！！ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛 rs32net估计我这次中的毒又要掀起一场血雨腥风！！

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

[求助] rs32net估计我这次中的毒又要掀起一场血雨腥风！！

泪满城初生襁褓狮帖子:22 注册: 2008-10-10 来自:	发表于： 2008-11-11 23:40 \| 只看楼主短消息资料字号：小中大 1楼 rs32net估计我这次中的毒又要掀起一场血雨腥风！！此病毒貌似黑客工具中了之后我用netstat看了下： Proto Local Address Foreign Address State TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 192.168.1.190:139 0.0.0.0:0 LISTENING TCP 192.168.1.190:1765 216.195.61.148:2588 ESTABLISHED TCP 192.168.1.190:1777 79.132.211.24:80 ESTABLISHED TCP 192.168.1.190:1822 216.157.145.27:25 FIN_WAIT_1 TCP 192.168.1.190:1920 69.72.149.27:25 FIN_WAIT_1 TCP 192.168.1.190:1935 81.169.145.99:25 FIN_WAIT_1 TCP 192.168.1.190:1936 81.169.145.99:25 FIN_WAIT_1 TCP 192.168.1.190:2060 194.78.216.204:25 TIME_WAIT TCP 192.168.1.190:2061 194.78.216.204:25 FIN_WAIT_1 TCP 192.168.1.190:2096 63.249.162.56:25 FIN_WAIT_1 TCP 192.168.1.190:2098 12.158.191.119:25 FIN_WAIT_1 TCP 192.168.1.190:2099 12.158.191.119:25 FIN_WAIT_1 TCP 192.168.1.190:2197 89.31.7.10:25 FIN_WAIT_1 TCP 192.168.1.190:2198 89.31.7.10:25 FIN_WAIT_1 TCP 192.168.1.190:2250 129.41.63.183:25 ESTABLISHED TCP 192.168.1.190:2292 139.15.237.6:25 FIN_WAIT_1 TCP 192.168.1.190:2303 81.169.145.102:25 FIN_WAIT_1 TCP 192.168.1.190:2413 64.29.145.43:25 FIN_WAIT_1 TCP 192.168.1.190:2439 213.171.216.65:25 FIN_WAIT_1 TCP 192.168.1.190:2487 194.206.126.201:25 FIN_WAIT_1 TCP 192.168.1.190:2488 194.206.126.201:25 FIN_WAIT_1 TCP 192.168.1.190:2489 65.254.61.114:25 FIN_WAIT_1 TCP 192.168.1.190:2515 209.94.48.11:25 FIN_WAIT_1 TCP 192.168.1.190:2526 81.169.145.102:25 FIN_WAIT_1 TCP 192.168.1.190:2540 85.10.193.58:25 FIN_WAIT_1 TCP 192.168.1.190:2546 81.169.145.99:25 FIN_WAIT_1 TCP 192.168.1.190:2552 213.171.216.65:25 FIN_WAIT_1 TCP 192.168.1.190:2643 209.85.143.114:25 ESTABLISHED TCP 192.168.1.190:2646 81.169.145.102:25 FIN_WAIT_1 TCP 192.168.1.190:2666 216.200.145.235:25 FIN_WAIT_1 TCP 192.168.1.190:2717 194.90.17.131:25 TIME_WAIT TCP 192.168.1.190:2719 88.255.204.1:25 FIN_WAIT_1 TCP 192.168.1.190:2760 81.169.145.99:25 FIN_WAIT_1 TCP 192.168.1.190:2781 74.218.24.5:25 FIN_WAIT_1 TCP 192.168.1.190:2867 194.206.126.201:25 FIN_WAIT_1 TCP 192.168.1.190:2900 216.37.76.63:25 FIN_WAIT_1 TCP 192.168.1.190:2949 72.0.198.37:25 FIN_WAIT_1 TCP 192.168.1.190:2955 89.31.7.10:25 FIN_WAIT_1 TCP 192.168.1.190:2981 81.221.254.195:25 FIN_WAIT_1 TCP 192.168.1.190:2987 81.169.145.102:25 FIN_WAIT_1 TCP 192.168.1.190:2999 81.169.145.99:25 FIN_WAIT_1 TCP 192.168.1.190:3007 208.80.200.4:25 TIME_WAIT TCP 192.168.1.190:3015 81.169.145.102:25 FIN_WAIT_1 TCP 192.168.1.190:3030 216.222.241.71:25 TIME_WAIT TCP 192.168.1.190:3031 64.18.5.14:25 TIME_WAIT TCP 192.168.1.190:3037 81.169.145.99:25 TIME_WAIT TCP 192.168.1.190:3039 209.157.71.80:25 FIN_WAIT_1 TCP 192.168.1.190:3040 72.0.198.37:25 TIME_WAIT TCP 192.168.1.190:3047 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3050 194.206.126.201:25 FIN_WAIT_1 TCP 192.168.1.190:3053 81.169.145.99:25 TIME_WAIT TCP 192.168.1.190:3056 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3058 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3059 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3060 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3061 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3062 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3064 58.30.18.52:80 LAST_ACK TCP 192.168.1.190:3068 58.30.18.52:80 LAST_ACK TCP 192.168.1.190:3069 58.30.18.52:80 LAST_ACK TCP 192.168.1.190:3070 139.15.237.6:25 TIME_WAIT TCP 192.168.1.190:3072 81.169.145.99:25 FIN_WAIT_1 TCP 192.168.1.190:3073 64.18.7.13:25 TIME_WAIT TCP 192.168.1.190:3074 64.29.145.43:25 FIN_WAIT_1 TCP 192.168.1.190:3075 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3076 194.206.126.201:25 TIME_WAIT TCP 192.168.1.190:3077 194.206.126.201:25 TIME_WAIT TCP 192.168.1.190:3080 58.30.18.51:80 LAST_ACK TCP 192.168.1.190:3087 72.0.198.37:25 TIME_WAIT TCP 192.168.1.190:3088 81.169.145.99:25 FIN_WAIT_1 TCP 192.168.1.190:3090 194.206.126.201:25 FIN_WAIT_1 TCP 192.168.1.190:3092 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3094 139.15.237.6:25 TIME_WAIT TCP 192.168.1.190:3095 81.169.145.99:25 TIME_WAIT TCP 192.168.1.190:3098 194.206.126.201:25 FIN_WAIT_1 TCP 192.168.1.190:3099 72.0.198.37:25 FIN_WAIT_1 TCP 192.168.1.190:3102 194.206.126.201:25 FIN_WAIT_1 TCP 192.168.1.190:3104 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3105 89.31.7.10:25 TIME_WAIT TCP 192.168.1.190:3108 58.30.18.51:80 LAST_ACK TCP 192.168.1.190:3111 194.206.126.201:25 TIME_WAIT TCP 192.168.1.190:3114 72.0.198.37:25 TIME_WAIT TCP 192.168.1.190:3116 194.206.126.201:25 TIME_WAIT TCP 192.168.1.190:3117 58.30.18.51:80 LAST_ACK TCP 192.168.1.190:3119 139.15.237.6:25 TIME_WAIT TCP 192.168.1.190:3120 64.29.145.43:25 FIN_WAIT_1 TCP 192.168.1.190:3121 212.90.160.3:25 FIN_WAIT_1 TCP 192.168.1.190:3128 212.90.160.3:25 FIN_WAIT_1 TCP 192.168.1.190:3130 194.206.126.201:25 TIME_WAIT TCP 192.168.1.190:3135 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3140 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3141 58.30.18.52:80 CLOSING TCP 192.168.1.190:3143 58.30.18.52:80 LAST_ACK TCP 192.168.1.190:3144 58.30.18.52:80 LAST_ACK TCP 192.168.1.190:3145 58.30.18.52:80 LAST_ACK TCP 192.168.1.190:3146 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3147 58.30.18.51:80 LAST_ACK TCP 192.168.1.190:3155 194.206.126.201:25 TIME_WAIT TCP 192.168.1.190:3156 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3160 61.164.62.111:80 TIME_WAIT TCP 192.168.1.190:3161 194.206.126.201:25 FIN_WAIT_1 TCP 192.168.1.190:3162 212.90.160.3:25 TIME_WAIT TCP 192.168.1.190:3163 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3164 194.206.126.201:25 TIME_WAIT TCP 192.168.1.190:3165 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3166 194.206.126.201:25 TIME_WAIT TCP 192.168.1.190:3168 64.29.145.43:25 FIN_WAIT_1 TCP 192.168.1.190:3171 58.30.18.51:80 LAST_ACK TCP 192.168.1.190:3172 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3173 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3174 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3175 60.28.216.16:80 ESTABLISHED TCP 192.168.1.190:3224 204.4.187.100:25 TIME_WAIT TCP 192.168.1.190:3227 213.216.0.11:25 FIN_WAIT_1 TCP 192.168.1.190:3229 69.19.135.2:25 TIME_WAIT TCP 192.168.1.190:3234 81.169.145.102:25 TIME_WAIT TCP 192.168.1.190:3251 64.68.200.52:25 TIME_WAIT TCP 192.168.1.190:3262 166.70.40.3:25 TIME_WAIT TCP 192.168.1.190:3297 63.149.130.81:25 ESTABLISHED TCP 192.168.1.190:3299 63.149.130.81:25 FIN_WAIT_2 TCP 192.168.1.190:3319 213.216.0.11:25 TIME_WAIT TCP 192.168.1.190:3341 64.29.145.43:25 TIME_WAIT TCP 192.168.1.190:3342 63.238.52.24:25 TIME_WAIT TCP 192.168.1.190:3391 74.125.45.27:25 ESTABLISHED TCP 192.168.1.190:3396 58.30.18.51:80 LAST_ACK TCP 192.168.1.190:3402 74.128.0.19:25 FIN_WAIT_1 TCP 192.168.1.190:3409 209.217.41.5:25 FIN_WAIT_2 TCP 192.168.1.190:3432 81.169.145.102:25 FIN_WAIT_1 TCP 192.168.1.190:3451 82.216.111.1:25 FIN_WAIT_1 TCP 192.168.1.190:3456 64.98.36.4:25 TIME_WAIT TCP 192.168.1.190:3458 64.98.36.4:25 TIME_WAIT TCP 192.168.1.190:3461 193.100.227.85:25 ESTABLISHED TCP 192.168.1.190:3462 193.100.227.85:25 FIN_WAIT_2 TCP 192.168.1.190:3464 64.68.200.52:25 FIN_WAIT_1 TCP 192.168.1.190:3493 148.78.247.65:25 TIME_WAIT TCP 192.168.1.190:3494 148.78.247.65:25 TIME_WAIT TCP 192.168.1.190:3495 62.151.4.44:25 TIME_WAIT TCP 192.168.1.190:3496 62.151.4.44:25 FIN_WAIT_1 TCP 192.168.1.190:3500 167.206.4.77:25 TIME_WAIT TCP 192.168.1.190:3510 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3511 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3512 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3513 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3517 64.18.6.14:25 ESTABLISHED TCP 192.168.1.190:3518 64.18.6.14:25 ESTABLISHED TCP 192.168.1.190:3519 207.115.20.21:25 TIME_WAIT TCP 192.168.1.190:3520 207.115.20.21:25 TIME_WAIT TCP 192.168.1.190:3535 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3536 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3538 64.68.200.52:25 TIME_WAIT TCP 192.168.1.190:3552 148.78.247.65:25 TIME_WAIT TCP 192.168.1.190:3553 148.78.247.65:25 FIN_WAIT_1 TCP 192.168.1.190:3554 167.206.4.77:25 FIN_WAIT_1 TCP 192.168.1.190:3555 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3556 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3557 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3558 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3559 209.85.135.27:25 ESTABLISHED TCP 192.168.1.190:3560 209.85.135.27:25 ESTABLISHED TCP 192.168.1.190:3561 64.68.200.52:25 TIME_WAIT TCP 192.168.1.190:3568 62.151.4.44:25 TIME_WAIT TCP 192.168.1.190:3570 64.68.200.52:25 FIN_WAIT_1 TCP 192.168.1.190:3574 167.206.4.77:25 TIME_WAIT TCP 192.168.1.190:3575 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3576 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3579 148.78.247.65:25 TIME_WAIT TCP 192.168.1.190:3580 148.78.247.65:25 TIME_WAIT TCP 192.168.1.190:3582 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3583 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3585 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3586 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3587 64.68.200.52:25 TIME_WAIT TCP 192.168.1.190:3590 167.206.4.77:25 FIN_WAIT_1 TCP 192.168.1.190:3592 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3593 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3595 62.151.4.44:25 TIME_WAIT TCP 192.168.1.190:3596 216.200.145.235:25 FIN_WAIT_1 TCP 192.168.1.190:3597 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3598 216.32.181.22:25 FIN_WAIT_1 TCP 192.168.1.190:3599 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3600 64.68.200.52:25 FIN_WAIT_1 TCP 192.168.1.190:3601 148.78.247.65:25 TIME_WAIT TCP 192.168.1.190:3603 203.147.21.124:25 SYN_SENT TCP 192.168.1.190:3604 203.147.21.124:25 SYN_SENT TCP 192.168.1.190:3605 167.206.4.77:25 TIME_WAIT TCP 192.168.1.190:3608 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3609 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3611 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3612 216.32.180.22:25 TIME_WAIT TCP 192.168.1.190:3613 64.68.200.52:25 TIME_WAIT TCP 192.168.1.190:3614 148.78.247.65:25 FIN_WAIT_1 TCP 192.168.1.190:3615 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3616 216.32.181.22:25 FIN_WAIT_1 TCP 192.168.1.190:3618 167.206.4.77:25 TIME_WAIT TCP 192.168.1.190:3619 62.151.4.44:25 FIN_WAIT_1 TCP 192.168.1.190:3620 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3621 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3622 64.68.200.52:25 TIME_WAIT TCP 192.168.1.190:3623 148.78.247.65:25 TIME_WAIT TCP 192.168.1.190:3625 216.32.180.22:25 FIN_WAIT_1 TCP 192.168.1.190:3626 216.32.181.22:25 TIME_WAIT TCP 192.168.1.190:3627 209.87.239.13:25 ESTABLISHED TCP 192.168.1.190:3628 167.206.4.77:25 FIN_WAIT_1 TCP 192.168.1.190:3629 94.100.176.20:25 TIME_WAIT TCP 192.168.1.190:3630 216.200.145.235:25 TIME_WAIT TCP 192.168.1.190:3631 64.68.200.52:25 TIME_WAIT TCP 192.168.1.190:3634 66.111.4.75:25 TIME_WAIT TCP 192.168.1.190:3635 216.32.180.22:25 ESTABLISHED TCP 192.168.1.190:3636 216.157.145.27:25 TIME_WAIT TCP 192.168.1.190:3637 216.200.145.235:25 ESTABLISHED TCP 192.168.1.190:3638 216.32.181.22:25 ESTABLISHED TCP 192.168.1.190:3639 209.62.20.186:25 SYN_SENT TCP 192.168.1.190:3640 204.19.253.31:25 ESTABLISHED 头一次看到这样的情况，好多25端口这是怎么回事还有svchost.exe有10多个找了下又都在SYSTEM32下我不懂希望专家能分析下这个病毒谢谢生成服务zvjvucnz.sys 又和上次的HKB...毒很象打开其他盘有EXE文件的文件夹都提示文件被感染还好这次大蜘蛛能修复刚才网线一直出现红插（估计朋友拔的）该不会这鸟毒又会拖网速局域网传播？是的话又要被朋友暴K一顿了 svchost.exe看了下有8个服务是占缺的可文件却都是在SYSTEM32下以前看的学到的是在别的盘有同名文件这次却没有了这高手也给解释下吧用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; 360SE) 附件: 文件名:rs32net.rar 下载次数:166 文件类型:application/octet-stream 文件大小: 上传时间:2008-11-11 23:40:12 描述:rar
泪满城初生襁褓狮帖子:22 注册: 2008-10-10 来自:	分享到：

左眼球锋芒艾服狮帖子:1313 注册: 2008-03-03 来自:左眼眶子里	发表于： 2008-11-12 10:56 \| 短消息资料字号：小中大 2楼回复：rs32net估计我这次中的毒又要掀起一场血雨腥风！！ 25是smtp端口，难不成在外发垃圾邮件........ 上传个sreng日志吧精品软件、实用工具大杂烩（20091221更新到61款） Windows清理助手
左眼球锋芒艾服狮帖子:1313 注册: 2008-03-03 来自:左眼眶子里

泪满城初生襁褓狮帖子:22 注册: 2008-10-10 来自:	发表于： 2008-11-12 18:17 \| 只看楼主短消息资料字号：小中大 3楼回复：rs32net估计我这次中的毒又要掀起一场血雨腥风！！是哦 25 端口我事先玩游戏把大蜘蛛停了5分钟左右突然就觉的系统好慢赶紧开大蜘蛛才明白中了这毒我感觉大蜘蛛已经把这毒给完全删除了事后我就想知道这病毒是怎么来的我那5分钟就玩游戏还是单机的怎么就这么容易中毒还请麻烦KK的工程师分析下这个毒我感觉过几天绝对又有网友会为这个毒向你们求助的
泪满城初生襁褓狮帖子:22 注册: 2008-10-10 来自:

超级游戏迷卡卡技术团队帖子:25779 注册: 2007-01-14 来自:	发表于： 2008-11-12 18:34 \| 短消息资料字号：小中大 4楼回复: rs32net估计我这次中的毒又要掀起一场血雨腥风！！引用: 原帖由泪满城于 2008-11-12 18:17:00 发表是哦 25 端口我事先玩游戏把大蜘蛛停了5分钟左右突然就觉的系统好慢赶紧开大蜘蛛才明白中了这毒我感觉大蜘蛛已经把这毒给完全删除了事后我就想知道这病毒是怎么来的我那5分钟就玩游戏还是单机的怎么就这...... 建议将附件提交“可疑文件交流区”鉴定…… 打酱油的……
超级游戏迷卡卡技术团队帖子:25779 注册: 2007-01-14 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT