瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 还是Trojan.PSW.ROconline.cv(附监控结果)

12   1  /  2  页   跳转

还是Trojan.PSW.ROconline.cv(附监控结果)

还是Trojan.PSW.ROconline.cv(附监控结果)

处理结果    发现日期    扫描方式    路径    文件
删除成功    2007-04-23 12:43    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PAQC5M6D    4[1].exe>>UPX
删除成功    2007-04-23 12:43    文件监控    C:\WINDOWS\system32    4.exe>>UPX
删除成功    2007-04-23 21:37    文件监控    C:\WINDOWS\system32    4.exe>>UPX
删除成功    2007-04-23 21:38    文件监控    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CDY38DQZ    4[1].exe>>UPX
删除成功    2007-04-24 08:01    文件监控    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GTINOHQJ    4[1].exe>>UPX
删除成功    2007-04-24 08:01    文件监控    C:\WINDOWS\system32    4.exe>>UPX
删除成功    2007-04-24 09:02    文件监控    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GTINOHQJ    4[1].exe>>UPX
删除成功    2007-04-24 09:02    文件监控    C:\WINDOWS\system32    4.exe>>UPX
删除成功    2007-04-24 13:48    文件监控    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GTINOHQJ    4[1].exe>>UPX
删除成功    2007-04-24 13:48    文件监控    C:\WINDOWS\system32    4.exe>>UPX
删除成功    2007-04-24 15:07    文件监控    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GTINOHQJ    4[1].exe>>UPX
删除成功    2007-04-24 15:07    文件监控    C:\WINDOWS\system32    4.exe>>UPX
删除成功    2007-04-25 10:08    文件监控    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GTINOHQJ    4[1].exe>>UPX
删除成功    2007-04-25 10:08    文件监控    C:\WINDOWS\system32    4.exe>>UPX
删除成功    2007-04-25 11:09    文件监控    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\W9AF0T67    4[1].exe>>UPX
删除成功    2007-04-25 11:09    文件监控    C:\WINDOWS\system32    4.exe>>UPX
最后编辑2007-04-25 16:14:05
分享到:
gototop
 

病毒名称处理结果发现日期扫描方式路径文件病毒来源
Worm.Pabug.co删除成功2007-04-11 13:46快捷扫描H:OSO.exe>>fsg2.0本机
Worm.Pabug.co删除成功2007-04-20 16:13快捷扫描H:OSO.exe>>fsg2.0本机
Hack.SuspiciousAni删除成功2007-04-24 08:43手动扫描C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OJHR6YV5pf[1].js本机
Trojan.PSW.OnLineGames.aqd忽略2007-04-25 08:09手动扫描C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GTINOHQJ1[1].exe本机
Trojan.PSW.OnlineGames.arn忽略2007-04-25 08:12手动扫描C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8WQCX1MA3[1].exe本机
Trojan.PSW.OnLineGames.aqd重新启动计算机后删除文件2007-04-25 08:25手动扫描C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\219MN2HG1[1].exe本机
Hack.SuspiciousAni删除成功2007-04-25 08:26手动扫描C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OJHR6YV51[1].cur本机
Trojan.PSW.OnLineGames.aqd删除成功2007-04-25 09:40手动扫描C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\GTINOHQJ1[1].exe本机
杀毒结果:
Hack.SuspiciousAni删除成功2007-04-25 09:46手动扫描C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PAQC5M6D1[1].cur本机
Trojan.DL.MnLess.tg删除成功2007-04-25 14:16手动扫描C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\NYOZN1SL6[1].exe本机
gototop
 



下载 System Repair Engineer,
http://www.kztechs.com/sreng/download.html
1 解压缩sreng2.zip
2 运行SREng.exe
3 智能扫描=》扫描=》保存报告
4 把日志中的报告完整拷贝贴上来,不要修改
日志一次发不完,请分次发上来
(扫日志前请尽可能的关闭能手动关闭的窗口 如:QQ、音乐、网页...)
gototop
 

Hack.SuspiciousAni删除成功2007-04-24 08:43手动扫描
Hack.SuspiciousAni删除成功2007-04-25 09:46手动扫描

也就是说第一次没杀死,现在杀死了吗?迷茫中
反正
gototop
 

你先清空IE缓存再杀一下试试,当然还有那个4.EXE文件!不会有那样的系统文件
gototop
 

昨天已发:

下载 System Repair Engineer,
http://www.kztechs.com/sreng/download.html
1 解压缩sreng2.zip
2 运行SREng.exe
3 智能扫描=》扫描=》保存报告
4 把日志中的报告完整拷贝贴上来,不要修改
日志一次发不完,请分次发上来
gototop
 

发在哪了?
gototop
 

日志详见第7页倒数第三帖

4.EXE包括1~10.exe都已经粉碎
gototop
 

粉碎之后:
每次开机出现
1.exe要连接上网络---拒绝执行
2.exe要连接上网络---拒绝执行
3.exe要连接上网络---拒绝执行
.
.
.
10.exe要连接上网络---拒绝执行

gototop
 

然后是监控出现
发现:Trojan.PSW.ROconline.cv

补丁早就打了
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT