未知病毒-Backdoor.Win32.Gpigeon.efk - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛未知病毒-Backdoor.Win32.Gpigeon.efk

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

未知病毒-Backdoor.Win32.Gpigeon.efk

∮麥兜→鄭々初生襁褓狮帖子:56 注册: 2006-07-19 来自:	发表于： 2007-07-20 15:46 \| 显示全部短消息资料字号：小中大 1楼未知病毒-Backdoor.Win32.Gpigeon.efk 我中了这个病毒以后，电脑上网时，刚开始正常，过了一会儿，网络就自动断开了。 2007-07-20 19:27:55
∮麥兜→鄭々初生襁褓狮帖子:56 注册: 2006-07-19 来自:	分享到：

∮麥兜→鄭々初生襁褓狮帖子:56 注册: 2006-07-19 来自:	发表于： 2007-07-20 15:48 \| 显示全部短消息资料字号：小中大 2楼我的杀毒软件也自动隐藏起来了
∮麥兜→鄭々初生襁褓狮帖子:56 注册: 2006-07-19 来自:

∮麥兜→鄭々初生襁褓狮帖子:56 注册: 2006-07-19 来自:	发表于： 2007-07-20 15:49 \| 显示全部短消息资料字号：小中大 3楼瑞星卡卡电脑诊断日志 v1.30 (2007-7-20 15:27:16) 北京瑞星科技股份有限公司注释:[A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services Alerrter [A ] 1. c:\windows\rejoice44.exe NVSvc [AM] 2. c:\windows\system32\nvsvc32.exe ose [A ] 3. c:\program files\common files\microsoft shared\source engine\ose.exe UMWdf [AM] 4. c:\windows\system32\wdfmgr.exe + 内核驱动 + HKLM\System\CurrentControlSet\Services 2310_00 [A ] 5. c:\windows\system32\bird\2310_00.sys 3WAREDRV [A ] 6. c:\windows\system32\bird\3waredrv.sys 3WAREGSM [A ] 7. c:\windows\system32\bird\3waregsm.sys 3WDRV100 [A ] 8. c:\windows\system32\bird\3wdrv100.sys A320RAID [A ] 9. c:\windows\system32\bird\a320raid.sys AAC [A ] 10. c:\windows\system32\bird\aac.sys AACSAS [A ] 11. c:\windows\system32\bird\aacsas.sys AAR81XX [A ] 12. c:\windows\system32\bird\aar81xx.sys AARSI3X [A ] 13. c:\windows\system32\bird\aarsi3x.sys ADP94XX [A ] 14. c:\windows\system32\bird\adp94xx.sys adpu160m [A ] 15. c:\windows\system32\bird\adpu160m.sys ADPU320 [A ] 16. c:\windows\system32\bird\adpu320.sys AEC6210 [A ] 17. c:\windows\system32\bird\aec6210.sys AEC6260 [A ] 18. c:\windows\system32\bird\aec6260.sys AEC6280 [A ] 19. c:\windows\system32\bird\aec6280.sys AEC67160 [A ] 20. c:\windows\system32\bird\aec67160.sys AEC67162 [A ] 21. c:\windows\system32\bird\aec67162.sys AEC671X [A ] 22. c:\windows\system32\bird\aec671x.sys AEC6880 [A ] 23. c:\windows\system32\bird\aec6880.sys AEC6897 [A ] 24. c:\windows\system32\bird\aec6897.sys AEC68X5 [A ] 25. c:\windows\system32\bird\aec68x5.sys aic78u2 [A ] 26. c:\windows\system32\bird\aic78u2.sys aic78xx [A ] 27. c:\windows\system32\bird\aic78xx.sys amsint [A ] 28. c:\windows\system32\bird\amsint.sys ARCM_X86 [A ] 29. c:\windows\system32\bird\arcm_x86.sys asc [A ] 30. c:\windows\system32\bird\asc.sys BCHTSW32 [A ] 31. c:\windows\system32\bird\bchtsw32.sys buslogic [A ] 32. c:\windows\system32\bird\buslogic.sys CDA1000 [A ] 33. c:\windows\system32\bird\cda1000.sys CmdIde [A ] 34. c:\windows\system32\bird\cmdide.sys Cpqarray [A ] 35. c:\windows\system32\bird\cpqarray.sys CPQARRY2 [A ] 36. c:\windows\system32\bird\cpqarry2.sys CPQCISSM [A ] 37. c:\windows\system32\bird\cpqcissm.sys CSB6IDE [A ] 38. c:\windows\system32\bird\csb6ide.sys dac2w2k [A ] 39. c:\windows\system32\bird\dac2w2k.sys dac960nt [A ] 40. c:\windows\system32\bird\dac960nt.sys DMX3191 [A ] 41. c:\windows\system32\bird\dmx3191.sys DMX3194 [A ] 42. c:\windows\system32\bird\dmx3194.sys dpti2o [A ] 43. c:\windows\system32\bird\dpti2o.sys DPTSCSI [A ] 44. c:\windows\system32\bird\dptscsi.sys FASTSX [A ] 45. c:\windows\system32\bird\fastsx.sys FASTTRAK [A ] 46. c:\windows\system32\bird\fasttrak.sys FASTTX2K [A ] 47. c:\windows\system32\bird\fasttx2k.sys fd16_700 [A ] 48. c:\windows\system32\bird\fd16_700.sys fireport [A ] 49. c:\windows\system32\bird\fireport.sys flashpnt [A ] 50. c:\windows\system32\bird\flashpnt.sys FT8300 [A ] 51. c:\windows\system32\bird\ft8300.sys FTSATA2 [A ] 52. c:\windows\system32\drivers\ftsata2.sys GD31244 [A ] 53. c:\windows\system32\bird\gd31244.sys hooksys [A ] 54. c:\program files\rising\rav\hooksys.sys HPCISSS2 [A ] 55. c:\windows\system32\bird\hpcisss2.sys HPT371 [A ] 56. c:\windows\system32\bird\hpt371.sys HPT374 [A ] 57. c:\windows\system32\bird\hpt374.sys HPT3XX [A ] 58. c:\windows\system32\bird\hpt3xx.sys i2omp [A ] 59. c:\windows\system32\bird\i2omp.sys IASTOR [A ] 60. c:\windows\system32\bird\iastor.sys IFT2000 [A ] 61. c:\windows\system32\bird\ift2000.sys ini910u [A ] 62. c:\windows\system32\bird\ini910u.sys INIA100 [A ] 63. c:\windows\system32\bird\inia100.sys IPSRAIDN [A ] 64. c:\windows\system32\bird\ipsraidn.sys ITERAID [A ] 65. c:\windows\system32\bird\iteraid.sys JRAID [A ] 66. c:\windows\system32\bird\jraid.sys M5228 [A ] 67. c:\windows\system32\bird\m5228.sys M5281 [A ] 68. c:\windows\system32\bird\m5281.sys M5287 [A ] 69. c:\windows\system32\bird\m5287.sys M5288 [A ] 70. c:\windows\system32\bird\m5288.sys M5289 [A ] 71. c:\windows\system32\bird\m5289.sys MEGAIDE [A ] 72. c:\windows\system32\bird\megaide.sys mraid35x [A ] 73. c:\windows\system32\bird\mraid35x.sys MSAHCI [A ] 74. c:\windows\system32\bird\msahci.sys New0 [A ] 75. c:\windows\system32\new.sys NFRD960 [A ] 76. c:\windows\system32\bird\nfrd960.sys npkcrypt [A ] 77. c:\program files\tencent\qq\npkcrypt.sys NVATABUS [A ] 78. c:\windows\system32\bird\nvatabus.sys NVRAID [A ] 79. c:\windows\system32\bird\nvraid.sys perc2 [A ] 80. c:\windows\system32\bird\perc2.sys PNP649R [A ] 81. c:\windows\system32\bird\pnp649r.sys PNP680 [A ] 82. c:\windows\system32\bird\pnp680.sys PNP680R [A ] 83. c:\windows\system32\bird\pnp680r.sys ql1080 [A ] 84. c:\windows\system32\bird\ql1080.sys Ql10wnt [A ] 85. c:\windows\system32\bird\ql10wnt.sys ql12160 [A ] 86. c:\windows\system32\bird\ql12160.sys ql1240 [A ] 87. c:\windows\system32\bird\ql1240.sys ql1280 [A ] 88. c:\windows\system32\bird\ql1280.sys RAIDSRC [A ] 89. c:\windows\system32\bird\raidsrc.sys RR232X [A ] 90. c:\windows\system32\bird\rr232x.sys RsAntiSpyware [A ] 91. c:\windows\system32\drivers\rsboot.sys RTL8023xp [A ] 92. c:\windows\system32\drivers\rtlnicxp.sys S150SX8 [A ] 93. c:\windows\system32\bird\s150sx8.sys Secdrv [A ] 94. c:\windows\system32\drivers\secdrv.sys SI3112 [A ] 95. c:\windows\system32\bird\si3112.sys SI3112R [A ] 96. c:\windows\system32\bird\si3112r.sys SI3114 [A ] 97. c:\windows\system32\bird\si3114.sys SI3114R [A ] 98. c:\windows\system32\bird\si3114r.sys SI3114R5 [A ] 99. c:\windows\system32\bird\si3114r5.sys SI3124 [A ] 100. c:\windows\system32\bird\si3124.sys SI3124R [A ] 101. c:\windows\system32\bird\si3124r.sys SI3124R5 [A ] 102. c:\windows\system32\bird\si3124r5.sys SI3132 [A ] 103. c:\windows\system32\bird\si3132.sys SI3132R5 [A ] 104. c:\windows\system32\bird\si3132r5.sys SISRAID [A ] 105. c:\windows\system32\bird\sisraid.sys SISRAID2 [A ] 106. c:\windows\system32\bird\sisraid2.sys SISRAID4 [A ] 107. c:\windows\system32\bird\sisraid4.sys SPTRAK [A ] 108. c:\windows\system32\bird\sptrak.sys ST8350 [A ] 109. c:\windows\system32\bird\st8350.sys symc810 [A ] 110. c:\windows\system32\bird\symc810.sys symc8xx [A ] 111. c:\windows\system32\bird\symc8xx.sys SYMMPI [A ] 112. c:\windows\system32\bird\symmpi.sys sym_hi [A ] 113. c:\windows\system32\bird\sym_hi.sys sym_u3 [A ] 114. c:\windows\system32\bird\sym_u3.sys TRM3X5 [A ] 115. c:\windows\system32\bird\trm3x5.sys ULSATA [A ] 116. c:\windows\system32\bird\ulsata.sys ULSATA2 [A ] 117. c:\windows\system32\bird\ulsata2.sys ULTIMA [A ] 118. c:\windows\system32\bird\ultima.sys ULTIMARX [A ] 119. c:\windows\system32\bird\ultimarx.sys ultra [A ] 120. c:\windows\system32\bird\ultra.sys
∮麥兜→鄭々初生襁褓狮帖子:56 注册: 2006-07-19 来自:

∮麥兜→鄭々初生襁褓狮帖子:56 注册: 2006-07-19 来自:	发表于： 2007-07-20 15:57 \| 显示全部短消息资料字号：小中大 4楼 viaagp1 [A ] 121. c:\windows\system32\drivers\viaagp1.sys ViaIde [A ] 122. c:\windows\system32\drivers\viaidexp.sys VIAMRAID [A ] 123. c:\windows\system32\bird\viamraid.sys W2KADV [A ] 124. c:\windows\system32\bird\w2kadv.sys WD7296A [A ] 125. c:\windows\system32\bird\wd7296a.sys + 文件系统驱动 + HKLM\System\CurrentControlSet\Services BdGuard [A ] 126. c:\windows\system32\drivers\bdguard.sys + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {B580CF65-E151-49C3-B73F-70B13FCA8E86} [AM] 127. c:\program files\baidu\bar\baidubar.dll + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {54EBD53A-9BC1-480B-966A-843A333CA162} [A ] 128. c:\program files\tencent\qq\qqiehelper.dll {77FEF28E-EB96-44FF-B511-3185DEA48697} [AM] 127. c:\program files\baidu\bar\baidubar.dll {889D2FEB-5411-4565-8998-1DD2C5261283} [AM] 129. c:\program files\thunder network\thunder\comdlls\xunleibho_001.dll + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 130. c:\program files\tencent\qq\qq.exe Exec [A ] 131. c:\program files\messenger\msmsgs.exe + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [A ] 132. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers {0561EC90-CE54-4f0c-9C55-E226110A740C} [AM] 133. c:\program files\media player classic\codecs\mmfinfo.dll + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 134. c:\windows\system32\hticons.dll Portable Media Devices [A ] 135. c:\windows\system32\audiodev.dll Portable Media Devices Menu [A ] 135. c:\windows\system32\audiodev.dll WinRAR shell extension [AM] 136. c:\program files\winrar\rarext.dll Haali Column Provider [AM] 133. c:\program files\media player classic\codecs\mmfinfo.dll Microsoft Office HTML Icon Handler [A ] 137. c:\program files\microsoft office\office11\msohev.dll Web Folders [A ] 138. c:\program files\common files\microsoft shared\web folders\msonsext.dll NvCpl DesktopContext Class [AM] 139. c:\windows\system32\nvcpl.dll Play on my TV helper [AM] 139. c:\windows\system32\nvcpl.dll + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {51351752-5628-1547-FFAB-BADC13512AF5} [AM] 140. c:\windows\system32\ztepri.dll {12311A42-AC1B-158F-FD32-5674345F23A1} [AM] 141. c:\windows\system32\dhapri.dll {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A} [A ] 142. c:\windows\system32\shlhook.dll + 用户登陆自运行项目 + HKCU\Software\Microsoft\Windows\CurrentVersion\Run bgswitch [A ] 143. c:\windows\system32\bgswitch.exe + HKLM\Software\Microsoft\Windows\CurrentVersion\Run SunJavaUpdateSched [AM] 144. c:\program files\java\jre1.5.0\bin\jusched.exe tlsa [A ] 145. c:\documents and settings\administrator\local settings\temp\tlso.exe Microsoft Autorun7 [A ] 146. c:\windows\system32\nwizqjsj.exe wdsa [A ] 147. c:\documents and settings\administrator\local settings\temp\wdso.exe cmdbcs [A ] 148. c:\windows\cmdbcs.exe KVP [A ] 149. c:\windows\system32\drivers\svchost.exe runeip [AM] 150. c:\program files\rising\antispyware\runiep.exe + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce KKDelay [A ] 151. c:\program files\rising\antispyware\runonce.exe + HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run MSDEG32 [A ] 152. c:\windows\system32\lyloader.exe MSDMG32 [A ] 153. c:\windows\system32\lyloadmr.exe + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 154. c:\windows\system32\kknative.exe + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 155. c:\program files\microsoft office\office11\msohtmed.exe htmlfile\Print\Command [A ] 155. c:\program files\microsoft office\office11\msohtmed.exe + HKCR\.htm htmlfile\Edit\Command [A ] 155. c:\program files\microsoft office\office11\msohtmed.exe htmlfile\Print\Command [A ] 155. c:\program files\microsoft office\office11\msohtmed.exe + 程序初始化和已知动态连接库 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs [AM] 141. c:\windows\system32\dhapri.dll + 打印机监控 + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors Canon BJ Language Monitor iP1600 [AM] 156. c:\windows\system32\cnmlm75.dll + 正在运行的进程 + 00000114(276) ctfmon.exe 003D0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll 10000000[0001B000] [ M] 157. c:\program files\rising\antispyware\ieprot.dll + 00000130(304) calc.exe 003D0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 00000190(400) smss.exe + 000001c8(456) csrss.exe + 000001e0(480) winlogon.exe 004D0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll 72C80000[00008000] [ M] 158. c:\windows\system32\msacm32.drv + 00000210(528) services.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 0000021c(540) lsass.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 0000027c(636) runiep.exe 00400000[00012000] [AM] 150. c:\program files\rising\antispyware\runiep.exe 00C40000[0001B000] [ M] 157. c:\program files\rising\antispyware\ieprot.dll + 000002b4(692) svchost.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 0000031c(796) svchost.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 00000368(872) svchost.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 000003a8(936) svchost.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 0000040c(1036) svchost.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 00000444(1092) alg.exe + 000004b0(1200) Explorer.EXE 003D0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll 00FB0000[0000A000] [AM] 141. c:\windows\system32\dhapri.dll 10000000[0001B000] [ M] 159. c:\windows\system32\ravext.dll 00C00000[0000E000] [ M] 160. c:\windows\system32\lymangr.dll 00C30000[0000E000] [ M] 161. c:\windows\system32\shqmangr.dll 00D30000[00005000] [ M] 162. c:\documents and settings\administrator\local settings\temp\tlso0.dll 00D60000[00006000] [ M] 163. c:\windows\system32\nwizqjsj.dll 00D70000[00006000] [ M] 164. c:\documents and settings\administrator\local settings\temp\wdso0.dll 72C80000[00008000] [ M] 158. c:\windows\system32\msacm32.drv 01330000[00009000] [ M] 165. c:\windows\system32\cmdbcs.dll 02050000[0000F000] [AM] 133. c:\program files\media player classic\codecs\mmfinfo.dll 02070000[0000B000] [ M] 166. c:\program files\media player classic\codecs\mkunicode.dll 02970000[00555000] [AM] 139. c:\windows\system32\nvcpl.dll 03BF0000[00137000] [AM] 127. c:\program files\baidu\bar\baidubar.dll 03EB0000[0000C000] [AM] 129. c:\program files\thunder network\thunder\comdlls\xunleibho_001.dll 02180000[0002B000] [AM] 136. c:\program files\winrar\rarext.dll 01230000[0001B000] [ M] 157. c:\program files\rising\antispyware\ieprot.dll + 00000528(1320) spoolsv.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll 66F40000[00026000] [AM] 156. c:\windows\system32\cnmlm75.dll 00AF0000[00008000] [ M] 167. c:\windows\system32\spool\prtprocs\w32x86\cnmpd75.dll + 0000058c(1420) Ras.exe 00400000[0013F000] [ M] 168. c:\program files\rising\antispyware\ras.exe 003D0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll 10000000[000A3000] [ M] 169. c:\program files\rising\antispyware\rasgui.dll 015E0000[0001B000] [ M] 157. c:\program files\rising\antispyware\ieprot.dll 01D50000[00009000] [ M] 165. c:\windows\system32\cmdbcs.dll 01D60000[00006000] [ M] 164. c:\documents and settings\administrator\local settings\temp\wdso0.dll 01D70000[00005000] [ M] 162. c:\documents and settings\administrator\local settings\temp\tlso0.dll 01D90000[0000A000] [AM] 141. c:\windows\system32\dhapri.dll 02B50000[0002F000] [ M] 170. c:\program files\rising\antispyware\engine.dll 02B80000[00012000] [ M] 171. c:\program files\rising\antispyware\zip.dll + 000005d8(1496) jusched.exe 00400000[00009000] [AM] 144. c:\program files\java\jre1.5.0\bin\jusched.exe 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 000006cc(1740) taskmgr.exe 003D0000[0000A000] [AM] 141. c:\windows\system32\dhapri.dll 10000000[00009000] [ M] 165. c:\windows\system32\cmdbcs.dll 00CA0000[00006000] [ M] 164. c:\documents and settings\administrator\local settings\temp\wdso0.dll 00CB0000[00005000] [ M] 162. c:\documents and settings\administrator\local settings\temp\tlso0.dll 00CC0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll 00DF0000[0001B000] [ M] 157. c:\program files\rising\antispyware\ieprot.dll + 00000724(1828) IEXPLORE.EXE 003C0000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll + 0000074c(1868) nvsvc32.exe 00400000[00021000] [AM] 2. c:\windows\system32\nvsvc32.exe + 000007e8(2024) wdfmgr.exe 01000000[0000C000] [AM] 4. c:\windows\system32\wdfmgr.exe 00560000[0000B000] [AM] 140. c:\windows\system32\ztepri.dll
∮麥兜→鄭々初生襁褓狮帖子:56 注册: 2006-07-19 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT