瑞星卡卡安全论坛

病毒名称    处理结果    发现日期    扫描方式    路径    文件
Trojan.DL.JS.Agent.llm    跳过脚本    2007-08-20 15:11    网页/脚本监控    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp    2832180107032.tmp
Trojan.DL.JS.Agent.lll    跳过脚本    2007-08-20 15:12    网页/脚本监控    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp    2832180107032.tmp
Trojan.DL.JS.Agent.llm    删除成功    2007-08-20 15:16    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    haha[1].js
Hack.SuspiciousAni    重新启动计算机后删除文件    2007-08-20 15:16    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4JYR61K7    2007s[1].bmp
Trojan.DL.JS.Agent.llm    删除成功    2007-08-20 15:16    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4JYR61K7    haha[1].js
Trojan.DL.JS.Agent.lll    删除成功    2007-08-20 15:16    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\FZ5ZZTOW    sys614[1].js
Trojan.DL.JS.Agent.lll    删除成功    2007-08-20 15:16    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    sys614[1].js
Hack.Exploit.JS.Agent.o    清除成功    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\OYNUPQUD    sys07[1].htm
Trojan.DL.VBS.Agent.xhh    清除成功    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    vip[1].htm
Hack.SuspiciousAni    忽略    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4JYR61K7    2007s[1].bmp
Trojan.DL.JS.Agent.llm    删除成功    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    haha[1].js
Hack.Exploit.JS.Agent.o    跳过脚本    2007-08-20 15:17    网页/脚本监控    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp    260066074336.tmp
Hack.SuspiciousAni    删除成功    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4JYR61K7    2007s[2].bmp
Trojan.DL.JS.Agent.lll    删除成功    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4JYR61K7    sys614[1].js
Hack.Exploit.JS.Agent.o    清除成功    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    sys07[1].htm
Trojan.DL.VBS.Agent.xhh    清除成功    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    vip[2].htm
Hack.SuspiciousAni    重新启动计算机后删除文件    2007-08-20 15:17    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\FZ5ZZTOW    2007s[1].bmp
Hack.SuspiciousAni    忽略    2007-08-20 15:18    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\FZ5ZZTOW    2007s[1].bmp
Hack.SuspiciousAni    重新启动计算机后删除文件    2007-08-20 15:18    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\V39QC5E6    2007s[1].bmp
Hack.SuspiciousAni    重新启动计算机后删除文件    2007-08-20 15:18    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\V39QC5E6    2007s[1].bmp
Trojan.DL.JS.Agent.llm    删除成功    2007-08-20 15:18    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    haha[1].js
Hack.SuspiciousAni    重新启动计算机后删除文件    2007-08-20 15:18    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    2007s[1].bmp
Trojan.DL.JS.Agent.lll    删除成功    2007-08-20 15:18    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\SFVRIGL5    sys614[1].js
Trojan.DL.VBS.Agent.xhh    清除成功    2007-08-20 15:18    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4JYR61K7    vip[1].htm
Hack.Exploit.JS.Agent.o    清除成功    2007-08-20 15:18    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    sys07[2].htm
Hack.Exploit.JS.Agent.o    跳过脚本    2007-08-20 15:18    网页/脚本监控    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp    260066074336.tmp
Hack.SuspiciousAni    删除成功    2007-08-20 15:23    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XKCN1XKP    2007s[1].bmp
Trojan.DL.JS.Agent.llm    删除成功    2007-08-20 15:23    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\FZ5ZZTOW    haha[1].js

[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

而且经常出现这个窗口



附件: 9272102007820154137.jpg

系统诊断日志

附件: 9272102007820154357.txt

局域网用户?
全网所有的机器都要打好MS06-014和MS07-017两个补丁.如果全网都有病毒,就在网络管理员的机器上装网络版\企业版杀毒软件.很像ARP欺骗.