求救！！ Backdoor.Gpigeon.gwv怎么杀！！！！！1 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛求救！！ Backdoor.Gpigeon.gwv怎么杀！！！！！1

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

2 / 2 页

跳转页

求救！！ Backdoor.Gpigeon.gwv怎么杀！！！！！1

王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:	发表于： 2006-09-17 15:13 \| 只看楼主短消息资料字号：小中大 11楼 [C:\PROGRA~1\Yahoo!\ASSIST~1\ynotifier.dll] <yahoo! china><3, 0, 0, 1000> [PID: 1944][C:\WINDOWS\System32\CTFMDN.exe] <N/A><N/A> [PID: 1952][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [PID: 1960][C:\Program Files\Rising\Rfw\rfwmain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 52> [C:\Program Files\Rising\Rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [C:\Program Files\Rising\Rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [PID: 1972][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [PID: 2032][C:\WINDOWS\SYSTEM32\RUNDLL32.EXE] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1868][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [PID: 1508][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll] <Yahoo! China><3, 0, 0, 1000> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] <yahoo! china><3, 3, 0, 1081> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] <Yahoo! China><3, 0, 1, 1010> [C:\PROGRA~1\baidu\bar\baidubar.dll] <Baidu.com, Inc.><2, 0, 2, 106> [C:\WINDOWS\System32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll] <Yahoo! China><3, 0, 2, 1004> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll] <yahoo! china><3, 0, 1, 1002> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL] <yahoo! china><3, 0, 0, 1000> [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 2> [C:\WINDOWS\System32\kakatool.dll] <Beijing Rising Technology Co., Ltd.><2, 0, 0, 1> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasnoad.dll] <yahoo! china><3, 0, 1, 1003> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yzsNetProto.dll] <Yahoo! China><3, 0, 0, 1000> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll] <Yahoo! China><3, 0, 0, 1000> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll] <Yahoo! China><3, 0, 8, 1013> [C:\DOCUME~1\zc\APPLIC~1\GIGANO~1\IE_HEL~1.DLL] <N/A><N/A> [C:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll] <Yahoo! China><3, 0, 2, 1004> [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll] <Yahoo! China><3, 0, 1, 1002> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll] <Yahoo! China><3, 0, 5, 1008> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll] <3721.com><2, 1, 1, 87> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yoptimum.dll] <Yahoo! China><3, 0, 0, 1000> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yxpstyle.dll] <Yahoo! China><3, 0, 0, 1000> [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll] <yahoo! china><3, 0, 9, 1053> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ysearch.dll] <Yahoo! China><3, 0, 4, 1005> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yaswiper.dll] <Yahoo! China><3, 0, 1, 1001> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasiesec.dll] <Yahoo! China><3, 0, 1, 1001> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ysettings.dll] <yahoo! china><3, 0, 4, 1007> [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ymailp.dll] <Yahoo! China><3.0.0.1006> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [PID: 3260][E:\QQ\QQ.exe] <TENCENT><0, 0, 0, 0> [E:\QQ\QQBaseClassInDll.dll] <><1, 0, 0, 1> [E:\QQ\QQHelperDll.dll] <><1, 0, 0, 1> [E:\QQ\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [E:\QQ\RICHED20.dll] <N/A><9, 0, 0, 1> [E:\QQ\QQAPI.dll] <><1, 0, 0, 1> [E:\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4> [E:\QQ\LoginCtrl.dll] <><1, 0, 0, 1> [E:\QQ\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1> [E:\QQ\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1> [E:\QQ\QQRes.dll] <tencent><1, 0, 0, 1> [E:\QQ\QQMainFrame.dll] <N/A><N/A> [E:\QQ\CQQApplication.dll] <N/A><N/A> [E:\QQ\NewSkin.dll] <><1, 0, 0, 1> [E:\QQ\HostingMgr.dll] <><1, 0, 0, 1> [E:\QQ\CameraDll.dll] <><1, 0, 0, 1> [E:\QQ\MailSummary.dll] <><1, 0, 0, 1> [E:\QQ\QQSpace.dll] <><1, 0, 0, 1> [C:\WINDOWS\System32\msdmo.dll] <N/A><N/A> [E:\QQ\QQGroupMng.dll] <><1, 0, 0, 1> [E:\QQ\GroupLive.dll] <N/A><N/A> [E:\QQ\UserDefinedHead.dll] <><1, 0, 0, 1> [E:\QQ\QQPlugin.dll] <N/A><N/A> [E:\QQ\QQConfigPlugin.dll] <><1, 0, 0, 1> [E:\QQ\QRingMng.dll] <N/A><N/A> [E:\QQ\PhoneAPI.dll] <><1, 0, 0, 1> [E:\QQ\DialerAllinOne.dll] <tencent><1, 4, 0, 0> [E:\QQ\QQAvatar.dll] <N/A><N/A> [E:\QQ\FlashAvatarDll.dll] <><1, 4, 0, 1> [E:\QQ\LongConnection.dll] <tencent><5, 0, 200, 160> [E:\QQ\QQSysMsgMng.dll] <N/A><N/A> [E:\QQ\QQPet.dll] <><1, 0, 0, 1> [E:\QQ\QQAllInOne.dll] <N/A><N/A> [E:\QQ\SCCore.dll] <N/A><N/A> [E:\QQ\BQQApplication.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [E:\QQ\CommercesMng.dll] <><1, 0, 0, 1> [E:\QQ\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2> [E:\QQ\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200> [E:\QQ\QQSceneMng.dll] <N/A><N/A> [C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [E:\QQ\QQCustomFace.dll] <N/A><N/A> [E:\QQ\GroupConnection.dll] <Tencent><5, 0, 202, 170> [PID: 3356][E:\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [E:\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4> [PID: 2372][E:\QQGame\QQGame.exe] <深圳市腾讯计算机系统有限公司><0, 10, 108, 45> [E:\QQGame\VHelp.dll] <><1, 0, 0, 1> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [E:\QQGame\ResEx.dll] <深圳市腾讯计算机系统有限公司><0, 10, 0, 0> [E:\QQGame\HelpDll.dll] <><1, 0, 0, 1> [E:\QQGame\GameLogCore.dll] <><0, 10, 106, 13> [E:\QQGame\Core.dll] <é??úêDìú???????ú?μí3óD?T1???><0, 10, 0, 0> [E:\QQGame\NetCenter.dll] <é??úêDìú???????ú?μí3óD?T1???><0, 10, 0, 0> [E:\QQGame\CmdCenter.dll] <深圳市腾讯计算机系统有限公司><0, 10, 0, 0> [E:\QQGame\GameLogAidMgr.dll] <><1, 0, 0, 1> [E:\QQGame\COMToolKit.dll] <><1, 0, 0, 3> [E:\QQGame\QQGameAvatar.dll] <深圳市腾讯计算机系统有限公司 Tencent Computer System Ltd.><0, 10, 0, 0> [E:\QQGame\QQGameAvatarShow.dll] <深圳市腾讯计算机系统有限公司 Tencent Computer System Ltd.><0, 10, 0, 0> [C:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [E:\QQGame\QQGameItemMgr.dll] <><1, 0, 0, 1> [E:\QQGame\ItemShowHelper.dll] <><1, 0, 0, 1> [E:\QQGame\WorkModule.dll] <><0, 0, 0, 13> [E:\QQGame\Room.dll] <><1, 0, 0, 28> [E:\QQGame\CUQG.ocx] <深圳市腾讯计算机系统有限公司 Tencent Computer System Ltd.><0, 10, 0, 14> [E:\QQGame\GameProxy.dll] <N/A><N/A>
王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:

王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:	发表于： 2006-09-17 15:14 \| 只看楼主短消息资料字号：小中大 12楼 PID: 3568][C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe] <Thunder Networking Technologies,LTD><5.3.0.220> [C:\Program Files\Thunder Network\Thunder\Program\UpdateDownload.dll] <Thunder Networking Technologies,LTD><1, 0, 1, 8> [C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll] <Thunder Networking Technologies,LTD><1, 0, 4, 71> [C:\Program Files\Thunder Network\Thunder\Program\log4cplus.dll] <><1, 0, 2, 1> [C:\Program Files\Thunder Network\Thunder\Program\stlport_vc646.dll] <STLport Consulting, Inc.><4.6.2003.1031> [C:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll] <N/A><N/A> [C:\Program Files\Thunder Network\Thunder\Program\msgmanage.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 15> [C:\Program Files\Thunder Network\Thunder\Program\historyinfo_manage.dll] <Thunder Networking Technologies,LTD><5, 2, 0, 148> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll] <Thunder Networking Technologies,LTD><2, 1, 0, 18> [C:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2> [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll] <　><1, 0, 0, 11> [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed04.dll] <　><2, 3, 0, 37> [C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll] <Thunder Networking Technologies,LTD><1, 0, 3, 8> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\Program Files\Thunder Network\Thunder\Program\iTargetAd.dll] <Thunder Networking Technologies,LTD><1, 0, 1, 55> [C:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [PID: 2476][C:\Program Files\Rising\Rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 2524][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> [PID: 3952][E:\TDdownload\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <Yahoo! China><3, 0, 2, 1020> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><3, 0, 9, 1015> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:

王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:	发表于： 2006-09-17 15:15 \| 只看楼主短消息资料字号：小中大 13楼谢谢，高手顶一下！
王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2006-09-17 15:26 \| 短消息资料字号：小中大 14楼 C:\WINDOWS\G_Server1.23.exe使用系统修复那项删除另外系统里还有很多流氓软件，用超级兔子清理
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:	发表于： 2006-09-17 15:36 \| 只看楼主短消息资料字号：小中大 15楼我是在安全模式里，宣示所有文件，把隐藏文件保护的钩去掉后查找的，但是找不到，注册表中可以，但删了不行瑞星路径是：IEXPLORE.EXE>>C:\Program Files\Internet Explorer\IEXPLORE.EXE
王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2006-09-17 15:43 \| 短消息资料字号：小中大 16楼用HijackThis扫个日志上来http://free5.ys168.com/?aqfrs
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2006-09-17 15:51 \| 短消息资料字号：小中大 17楼可以参考 http://forum.ikaka.com/topic.asp?board=28&artid=5666824 很详细，对操作会有帮助
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:	发表于： 2006-09-17 16:01 \| 只看楼主短消息资料字号：小中大 18楼好了，谢谢！！！！！！！！！
王淼淼80 初生襁褓狮帖子:48 注册: 2006-07-12 来自:

<<上一主题|下一主题>>

12

2 / 2 页

跳转页

页面顶部

Powered by Discuz!NT