急!!!Backdoor.Gpigeon.pi 请各位高手帮忙 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛急!!!Backdoor.Gpigeon.pi 请各位高手帮忙

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

急!!!Backdoor.Gpigeon.pi 请各位高手帮忙

ewengod 初生襁褓狮帖子:18 注册: 2006-02-23 来自:	发表于： 2006-02-24 00:03 \| 只看楼主短消息资料字号：小中大 1楼急!!!Backdoor.Gpigeon.pi 请各位高手帮忙病毒名称:Backdoor.Gpigeon.pi 路径: IEXPLORE.EXE>>C:\Program Files\Internet Explorer\IEXPLORE.EXE HijackThis_zww汉化版扫描日志 V1.99.1 保存于 23:59:02, 日期 2006-2-23 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Rising\Rav\Ravmond.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Huawei-3Com\H3C 认证客户端\AuthenMngService.exe C:\Program Files\Rising\Rav\RavStub.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Rising\Rav\RavTask.exe C:\Program Files\Rising\Rav\Ravmon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Huawei-3Com\H3C 认证客户端\H3C Client.exe C:\Documents and Settings\Administrator\桌面\新建文件夹\HijackThis1991汉化版\HijackThis1991zww.exe R3 - URLSearchHook: QQ Search Hook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\AdPlus\IEHelp.dll O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v11.dll O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\AdPlus\IEHelp.dll O2 - BHO: URLMonitor Class - {3ED9FFDA-79DB-4B2D-99B7-16EA3C4A3A92} - C:\WINDOWS\system32\hap.dll O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - e:\Program Files\Tencent\QQ\QQIEHelper.dll O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - C:\WINDOWS\System32\aclayer.dll (file missing) O2 - BHO: DownloadValue Class - {616D4040-5712-4F0F-BCF1-5C6420A99E14} - C:\WINDOWS\system32\winhtp.dll O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX O2 - BHO: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\Progra~1\Baidu\bar\BaiDuBar.dll O2 - BHO: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll O3 - IE工具栏增项: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - f:\Program Files\BitComet\BitCometBar\BitCometBar0.2.dll O3 - IE工具栏增项: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - IE工具栏增项: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O3 - IE工具栏增项: 完美网译通 - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - C:\WINDOWS\WORLD2\TOOLBAR\hmtoolbar.dll (file missing) O3 - IE工具栏增项: 一搜工具条 - {115F6E46-FCBC-41ed-B3B5-3BDDD4AAB5E5} - C:\Program Files\YiSou\yisou.dll (file missing) O3 - IE工具栏增项: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\Progra~1\Baidu\bar\BaiDuBar.dll O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE O4 - 启动项HKLM\\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 启动项HKLM\\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - 启动项HKLM\\Run: [AddrPlus3] C:\PROGRA~1\TENCENT\AdPlus\Runner.exe C:\PROGRA~1\TENCENT\AdPlus\QAHook.dll Rundll32 O4 - 启动项HKLM\\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: AutoCAD 启动加速器.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - E:\Program Files\Tencent\qq\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - C:\Program Files\KuGoo3\KuGoo3DownX.htm O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - E:\Program Files\Tencent\qq\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - E:\Program Files\Tencent\qq\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - E:\Program Files\Tencent\qq\SendMMS.htm O8 - IE右键菜单中的新增项目: 百度-搜索MP3 - res://C:\Progra~1\Baidu\bar\BaiDuBar.dll/BAIDUMP3.HTM O8 - IE右键菜单中的新增项目: 百度-搜索图片 - res://C:\Progra~1\Baidu\bar\BaiDuBar.dll/BAIDUIMG.HTM O8 - IE右键菜单中的新增项目: 百度-搜索新闻 - res://C:\Progra~1\Baidu\bar\BaiDuBar.dll/BAIDUNEWS.HTM O8 - IE右键菜单中的新增项目: 百度-搜索歌词 - res://C:\Progra~1\Baidu\bar\BaiDuBar.dll/BAIDULYRIC.HTM O8 - IE右键菜单中的新增项目: 百度-搜索网页 - res://C:\Progra~1\Baidu\bar\BaiDuBar.dll/BAIDUSEARCH.HTM O8 - IE右键菜单中的新增项目: 百度-搜索贴吧 - res://C:\Progra~1\Baidu\bar\BaiDuBar.dll/BAIDUPOST.HTM O8 - IE右键菜单中的新增项目: 百度-词典搜索 - res://C:\Progra~1\Baidu\bar\BaiDuBar.dll/BAIDU_DIC.HTM O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\Game\hf\HFGame3\GameClient.exe O9 - 浏览器额外的按钮: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll O9 - 浏览器额外的“工具”菜单项: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的按钮: 易趣购物 - {EE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=50 (file missing) O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {EE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=50 (file missing) O10 - Broken Internet access because of LSP provider 'c:\windows\system32\cdnns.dll' missing O11 - Options group: [CDNCLIENT] 中文上网 O11 - Options group: [TBH] QQ地址栏搜索插件 O14 - IERESET.INF: START_PAGE_URL=http://www.tomatolei.com O20 - AppInit_DLLs: APIHookDll.dll O23 - NT 服务: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - NT 服务: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe O23 - NT 服务: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - C:\WINDOWS\G_Server2.0.exe O23 - NT 服务: huawei-3com EAD appendix service (H3C_EAD_APX_SVR) - Unknown owner - C:\Program Files\Huawei-3Com\H3C 认证客户端\eadApxSvr.exe O23 - NT 服务: huawei-3com protocol authentication service manage center (H3C_SVR_MNG_SERVICE) - Unknown owner - C:\Program Files\Huawei-3Com\H3C 认证客户端\AuthenMngService.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe 2006-02-25 10:39:31
ewengod 初生襁褓狮帖子:18 注册: 2006-02-23 来自:	分享到：

ewengod 初生襁褓狮帖子:18 注册: 2006-02-23 来自:	发表于： 2006-02-24 00:08 \| 只看楼主短消息资料字号：小中大 2楼用AutoRuns扫描的结果 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run + AddrPlus3 TENCENT c:\program files\tencent\adplus\runner.exe + ATIPTA ATI Desktop Control Panel ATI Technologies, Inc. c:\program files\ati technologies\ati control panel\atiptaxx.exe + NeroFilterCheck NeroCheck Ahead Software Gmbh c:\windows\system32\nerocheck.exe + RavTask RavTimer Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravtask.exe + SoundMan Realtek Sound Manager Realtek Semiconductor Corp. C:\WINDOWS\soundman.exe + StormCodec_Helper c:\program files\ringz studio\storm codec\stormset.exe + TkBellExe RealNetworks Scheduler RealNetworks, Inc. c:\program files\common files\real\update_ob\realsched.exe C:\Documents and Settings\All Users\「开始」菜单\程序\启动 + AutoCAD 启动加速器.lnk AutoCAD Startup Accelerator Autodesk, Inc c:\program files\common files\autodesk shared\acstart16.exe HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run + helperdll c:\windows\system32\drivers\pupw.sys HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks + Rising Execute File Exts hook Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved + AutoCAD 数字签名图标覆盖处理程序 AcSignIcon Module Autodesk c:\windows\system32\acsignicon.dll + Autodesk Drawing Preview AcThumbnail Module Autodesk c:\program files\common files\autodesk shared\thumbnail\acthumbnail16.dll + Autodesk DWF Preview AcThumbnail Module Autodesk c:\program files\common files\autodesk shared\thumbnail\acdwfthmbprxy16.dll + QQ Search Hook Tencent c:\program files\tencent\adplus\iehelp.dll + QQAddrBar Drop Target Tencent c:\program files\tencent\adplus\iehelp.dll + RISING Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll + Tencent Browser Helper Tencent c:\program files\tencent\adplus\iehelp.dll HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects + CdnForIE Class CdnForIE CNNIC c:\program files\cnnic\cdn\cdnforie.dll + DownloadValue Class DownloadStart Module c:\windows\system32\winhtp.dll + Infofo 工具栏珊瑚虫 Infofo 工具栏珊瑚虫工作室泰格工作室 c:\program files\infofo bar\infofobar.dll + QQBrowserHelperObject Class QQIEHelper Module 深圳市腾讯计算机系统有限公司 e:\program files\tencent\qq\qqiehelper.dll + Router Layer File not found: C:\WINDOWS\System32\aclayer.dll + Tencent Browser Helper Tencent c:\program files\tencent\adplus\iehelp.dll + ThunderIEHelper Class xunleibho BHO Thunder Networking Technologies,LTD c:\windows\system32\xunleibho_v11.dll + URLMonitor Class HAP Henbang c:\windows\system32\hap.dll + WMHlprObj Class CNNIC Web Mail for Windows CNNIC c:\program files\cnnic\cdn\wmhlpr.dll + 百度超级搜霸 BaiduBar Module Baidu.com, Inc. c:\program files\baidu\bar\baidubar.dll HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks + iehelp.dll Tencent c:\program files\tencent\adplus\iehelp.dll HKLM\Software\Microsoft\Internet Explorer\Toolbar + 一搜 File not found: C:\Program Files\YiSou\yisou.dll HKLM\Software\Microsoft\Internet Explorer\Extensions + 浩方对战平台浩方对战平台上海浩方在线信息技术有限公司 d:\game\hf\hfgame3\gameclient.exe + 易趣购物 File not found: http://click2.ad4all.net/url2/urlmanage/url.asp?id=50 HKLM\System\CurrentControlSet\Services + Ati HotKey Poller c:\windows\system32\ati2evxx.exe + ATI Smart ATI Smart c:\windows\system32\ati2sgag.exe + GrayPigeonServer2.0 监控管理. c:\windows\g_server2.0.exe + RsCCenter CCenter Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ccenter.exe + RsRavMon RavMond Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravmond.exe HKLM\System\CurrentControlSet\Services + ALCXWDM Realtek AC'97 Audio Driver (WDM) Realtek Semiconductor Corp. c:\windows\system32\drivers\alcxwdm.sys + ati2mtag ATI Radeon WindowsNT Miniport Driver ATI Technologies Inc. c:\windows\system32\drivers\ati2mtag.sys + BaseTDI basetdi Beijing Rising Technology Co., Ltd. c:\windows\system32\drivers\basetdi.sys + cdnprot cdnprot CNNIC c:\windows\system32\drivers\cdnprot.sys + cdntran cdntran CNNIC c:\windows\system32\drivers\cdntran.sys + d347bus PnP BIOS Extension c:\windows\system32\drivers\d347bus.sys + d347prt SCSI miniport c:\windows\system32\drivers\d347prt.sys + ExpScaner ExpScan.sys c:\program files\rising\rav\expscan.sys + FETNDIS NDIS 5.0 miniport driver VIA Technologies, Inc. c:\windows\system32\drivers\fetnd5.sys + HOOKAPI HOOKAPI Driver 瑞星软件有限公司 c:\program files\rising\rav\hookapi.sys + HookCont TDI HOOK Driver Rising tech Co. ltd c:\program files\rising\rav\hookcont.sys + HookReg c:\program files\rising\rav\hookreg.sys + HookSys Hooksys Rising c:\program files\rising\rav\hooksys.sys + MEMSCAN MemScan Driver 瑞星软件有限公司 c:\program files\rising\rav\memscan.sys + npkcrypt nProtect KeyCrypt Driver INCA Internet Co., Ltd. e:\program files\tencent\qq\npkcrypt.sys + PCAMPR5 PCAUSA NDIS 5.0 MPR Protocol Driver Printing Communications Assoc., Inc. (PCAUSA) c:\windows\system32\pcampr5.sys + PCANDIS5 PCAUSA NDIS 5.0 Protocol Driver Printing Communications Assoc., Inc. (PCAUSA) c:\windows\system32\pcandis5.sys + Ptilink Direct Parallel Link Driver Parallel Technologies, Inc. c:\windows\system32\drivers\ptilink.sys + PxHelp20 Px Engine Device Driver for Windows 2000/XP Sonic Solutions c:\windows\system32\drivers\pxhelp20.sys + Secdrv SafeDisc driver c:\windows\system32\drivers\secdrv.sys + viaagp1 VIA NT AGP Filter VIA Technologies, Inc. c:\windows\system32\drivers\viaagp1.sys + viamraid VIA RAID DRIVER FOR WIN 2000/XP/2003IA32 VIA Technologies inc,.ltd c:\windows\system32\drivers\viamraid.sys HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute + autocheck autochk * File not found: autocheck HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls + APIHookDll.dll File not found: APIHookDll.dll
ewengod 初生襁褓狮帖子:18 注册: 2006-02-23 来自:

ewengod 初生襁褓狮帖子:18 注册: 2006-02-23 来自:	发表于： 2006-02-24 00:45 \| 只看楼主短消息资料字号：小中大 3楼 http://forum.ikaka.com/topic.asp?board=28&artid=5666824 按这里的做,病毒没了.......
ewengod 初生襁褓狮帖子:18 注册: 2006-02-23 来自:

mopery 卡卡技术团队帖子:17737 注册: 2005-12-06 来自:New York	发表于： 2006-02-24 02:49 \| 短消息资料字号：小中大 4楼 O23 - NT 服务: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - C:\WINDOWS\G_Server2.0.exe 鸽子电脑好乱重装得勒
mopery 卡卡技术团队帖子:17737 注册: 2005-12-06 来自:New York

不言放弃社区嘉宾帖子:30678 注册: 2004-09-17 来自:蓝色星球	发表于： 2006-02-24 08:11 \| 短消息资料字号：小中大 5楼修复 O2 - BHO: URLMonitor Class - {3ED9FFDA-79DB-4B2D-99B7-16EA3C4A3A92} - C:\WINDOWS\system32\hap.dll O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - C:\WINDOWS\System32\aclayer.dll (file missing) O2 - BHO: DownloadValue Class - {616D4040-5712-4F0F-BCF1-5C6420A99E14} - C:\WINDOWS\system32\winhtp.dll O2 - BHO: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O3 - IE工具栏增项: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - f:\Program Files\BitComet\BitCometBar\BitCometBar0.2.dll O3 - IE工具栏增项: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - IE工具栏增项: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O3 - IE工具栏增项: 完美网译通 - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - C:\WINDOWS\WORLD2\TOOLBAR\hmtoolbar.dll (file missing) O23 - NT 服务: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - C:\WINDOWS\G_Server2.0.exe 卸载 C:\Program Files\Infofo Bar 添加删除程序中卸载HAP 删除 C:\Program Files\Infofo Bar文件夹 C:\WINDOWS\system32\hap.dll C:\WINDOWS\system32\winhtp.dll C:\WINDOWS\G_Server2.0.exe 其中 O23 - NT 服务: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - C:\WINDOWS\G_Server2.0.exe 具体操作请参考http://forum.ikaka.com/topic.asp?board=28&artid=7713905
不言放弃社区嘉宾帖子:30678 注册: 2004-09-17 来自:蓝色星球

kukaka 拙长孩提狮帖子:109 注册: 2005-08-24 来自:	发表于： 2006-02-25 10:00 \| 短消息资料字号：小中大 6楼 http://it.rising.com.cn/service/technology/Ravgpk_Download1.htm 瑞星 “灰鸽子”专用检测清除工具（发布时间：2006-02-21） “灰鸽子”专用检测清除工具工具名称：GPDetect.exe 版本号：1.0 发布时间：2006-02-21 软件大小：121 KB 重点提示：请在怀疑中了“灰鸽子”病毒的计算机上进行检测，以提高准确率。　　检测　　可以对流行的多种 “灰鸽子”病毒进行检测和清除。　　提取　　该工具能将检测出的“灰鸽子”病毒文件提取出来，存放在工具所在目录的VirusUp子目录中。　　在某些情况下针对“灰鸽子”病毒的某些版本，使用本检测工具将无法检测到病毒，在确实存在明显的病毒症状的前提下，用户可在系统目录中自行查找可疑文件或联系瑞星客户服务中心寻求解决方法。　　清除　　当工具发现系统中的“灰鸽子”病毒，并且用户进行了清除操作后，应重新启动计算机以确保清除病毒文件。
kukaka 拙长孩提狮帖子:109 注册: 2005-08-24 来自:

闪电风暴特邀体验者帖子:5462 注册: 2005-01-12 来自:0GiNr	发表于： 2006-02-25 10:39 \| 短消息资料字号：小中大 7楼 O23 - NT 服务: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - C:\WINDOWS\G_Server2.0.exe 鸽子
闪电风暴特邀体验者帖子:5462 注册: 2005-01-12 来自:0GiNr

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT