瑞星卡卡安全论坛

一个是Backdoor.Gpigeon.oc 　路径C:\WINDOWS．文件是G_Sever.dll
一个是Trojan.Spy.Jiospy.a　　路径 　C:\WINDOWS\system32　　　文件是SVCH0ST＞upack

瑞星查到却杀不掉，我是刚刚升级的啊，哪位大侠指点一下啊？

Backdoor.Gpigeon.oc 　
这个是灰鸽子,请参考http://forum.ikaka.com/topic.asp?board=28&artid=6202404

Trojan.Spy.Jiospy.a
这个看名字属于间谍软件,安全模式杀试下

谢谢楼上，下了HijackThis，打开日志，０２３有三项，一项是瑞星，其余的两项这俩家伙一人一项，打开注册表，找到，删除，重启，瑞星杀毒，哈哈，把他们全部删掉了，看来瑞星杀木马效果也不错啊～～

O - Other, several sections which represent:
    O1 - Hijack of auto.search.msn.com with Hosts file
    O2 - Enumeration of existing MSIE BHO's
    O3 - Enumeration of existing MSIE toolbars
    O4 - Enumeration of suspicious autoloading Registry entries
    O5 - Blocking of loading Internet Options in Control Panel
    O6 - Disabling of 'Internet Options' Main tab with Policies
    O7 - Disabling of Regedit with Policies
    O8 - Extra MSIE context menu items
    O9 - Extra 'Tools' menuitems and buttons
    O10 - Breaking of Internet access by New.Net or WebHancer
    O11 - Extra options in MSIE 'Advanced' settings tab
    O12 - MSIE plugins for file extensions or MIME types
    O13 - Hijack of default URL prefixes
    O14 - Changing of IERESET.INF
    O15 - Trusted Zone Autoadd
    O16 - Download Program Files item
    O17 - Domain hijack
    O18 - Enumeration of existing protocols and filters
    O19 - User stylesheet hijack
    O20 - AppInit_DLLs autorun Registry value, Winlogon Notify Registry keys
    O21 - ShellServiceObjectDelayLoad (SSODL) autorun Registry key
    O22 - SharedTaskScheduler autorun Registry key
    O23 - Enumeration of NT Services