我中木马,从网上了解后,好像是灰鸽了,然后在注册表里删掉一个服务,又在c:\windows下删掉三个文件:G_Server.exe,G_Server_hook.dll,G_Server.dll现在不知道还有没有异常,请各位大虾指点一下,谢谢.................
我的Running processes
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\system32\crypserv.exe
D:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
d:\PROGRA~1\MICROS~1\MSSQL\binn\sqlservr.exe
D:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe
C:\WINDOWS\Explorer.EXE
D:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\WINDOWS\vcdplayx.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\zh-cn\msnappau.exe
D:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\VM303_STI.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSNShell\BIN\MSNShell.exe
C:\Nokia\Update_Manager\bin\UMScheduler.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\system32\mmc.exe
d:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe
C:\DOCUME~1\ZHANGJ~1\LOCALS~1\Temp\~e5d141.tmp
C:\DOCUME~1\ZHANGJ~1\LOCALS~1\Temp\~e5d141.tmp
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\System32\cidaemon.exe
C:\WINDOWS\System32\cidaemon.exe
C:\WINDOWS\System32\cidaemon.exe
C:\WINDOWS\System32\SNDVOL32.EXE
D:\Program Files\Kingsoft\PowerWord 2005\XDICT.EXE
D:\PROGRA~1\Kingsoft\FASTAI~1\KTEngine.exe
D:\Program Files\Tencent\TT\TTraveler.exe
E:\Install\HijackThis-反间谍工具\HijackThis.exe
