[杂谈] 在游民星空下个前线战火之源玩玩，结果中病毒和木马了！ [复制链接]

Paladin_Lee

帖子: 503
精华: 0
积分: 252
金钱: 1005
荣誉: 0
人气: 6
评议: 0

电梯直达

楼主

发表于 2010-1-17 20:36:36 |只看该作者 |倒序浏览

想下个前线战火之源玩玩，结果中病毒和木马了！再游民星空中标的！大家千万别下中文完整版9G多的那个！！！
我把种子下下来，结果杀毒软件和360不停地提示，网页也崩溃了，杀了三遍才杀干净，好在不是什么牛X的病毒。以下是查杀结果：
查杀原因|位置|处理时间
木马:Win32.BHO.NTL | E:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP143\A0020995.exe | 2010-01-17 20:13:03
木马:Trojan/Win32.Agent.ayqa.rgrk.rgrk | E:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP143\A0020994.exe | 2010-01-17 20:13:03
木马:Trojan/Win32.Agent.ayqa.rgrk.rgrk | E:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP143\A0020993.exe | 2010-01-17 20:13:02
木马:Packer/Win32.Mian007.a | C:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP143\A0020990.exe | 2010-01-17 20:13:02
禁止启动:建议禁止开机自动运行的程序 | D:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE | 2010-01-17 20:01:50
禁止启动:建议禁止开机自动运行的程序 | D:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE | 2010-01-17 20:01:50
禁止启动:建议禁止开机自动运行的程序 | d:\Program Files\PPLive\PPLive.exe | 2010-01-17 20:01:50
文件篡改:文件被篡改 | C:\WINDOWS\system32\dsound.dll | 2010-01-17 20:01:50
文件篡改:文件被篡改 | C:\WINDOWS\system32\MSIMG32.dll | 2010-01-17 20:00:20
木马:Packer/Win32.Mian007.a | F:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP142\A0020124.exe | 2010-01-17 20:00:15
木马:Packer/Win32.Mian007.a | F:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP143\A0020774.exe | 2010-01-17 20:00:15
可疑文件:系统敏感目录下的程序有伪装自身的行为 | C:\WINDOWS\system\RGE.tmp | 2010-01-17 20:00:15
木马:Packer/Win32.Mian007.a | F:\1.exe | 2010-01-17 20:00:14
木马:Packer/Win32.Mian007.a | E:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP143\A0020772.exe | 2010-01-17 20:00:14
木马:Packer/Win32.Mian007.a | E:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP142\A0020122.exe | 2010-01-17 20:00:14
木马:Win32.BHO.NTL | E:\down\vipbofangqi.exe | 2010-01-17 20:00:13
木马:Trojan/Win32.Agent.ayqa.rgrk.rgrk | E:\down\sexplay_o10.exe | 2010-01-17 20:00:13
木马:Trojan/Win32.Agent.ayqa.rgrk.rgrk | E:\down\sexplay_o10(1).exe | 2010-01-17 20:00:13
木马:Packer/Win32.Mian007.a | E:\1.exe | 2010-01-17 20:00:12
木马:Packer/Win32.Mian007.a | D:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP143\A0020768.exe | 2010-01-17 20:00:12
木马:Packer/Win32.Mian007.a | D:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP142\A0020120.exe | 2010-01-17 20:00:12
木马:Packer/Win32.Mian007.a | D:\1.exe | 2010-01-17 20:00:12
木马:Packer/Win32.Mian007.a | C:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP143\A0020766.exe | 2010-01-17 20:00:11
木马:Packer/Win32.Mian007.a | C:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP142\A0020118.exe | 2010-01-17 20:00:11
木马:Packer/Win32.Mian007.a | C:\System Volume Information\_restore{466C155D-4482-49F0-99D1-9D6E9D5C67FE}\RP142\A0020110.exe | 2010-01-17 20:00:11
木马:Trojan-GameThief/Win32.OnLineGames.bnbo | C:\WINDOWS\system\RGD.tmp | 2010-01-17 20:00:10
木马:Trojan-GameThief/Win32.OnLineGames.bnbo | C:\WINDOWS\system\RG1C.tmp | 2010-01-17 20:00:10
木马:Trojan/Win32.KillAV.fai | C:\Documents and Settings\Administrator\Local Settings\Temp\pci.sys | 2010-01-17 20:00:10
木马:Trojan-GameThief/Win32.OnLineGames.bnbo | C:\Documents and Settings\Administrator\Local Settings\Temp\RG7.tmp | 2010-01-17 20:00:10
木马:Trojan-GameThief/Win32.OnLineGames.bnbo | C:\Documents and Settings\Administrator\Local Settings\Temp\RGD.tmp | 2010-01-17 20:00:10
木马:Trojan-GameThief/Win32.OnLineGames.bnbo | C:\Documents and Settings\Administrator\Local Settings\Temp\RG1C.tmp | 2010-01-17 20:00:10
木马:PSW/Win32.OnLineGames.OQU | C:\Documents and Settings\Administrator\Local Settings\Temp\RG2A.tmp | 2010-01-17 20:00:10
木马:Win32/PSWTroj.GameOnline | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\SXQ3CPMV\ok3[1].exe | 2010-01-17 20:00:10
木马:Packer/Win32.Mian007.a | C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3V51L1PU\040[1].exe | 2010-01-17 20:00:10
木马:Trojan-GameThief/Win32.OnLineGames.bnbo | C:\WINDOWS\system\RG7.tmp | 2010-01-17 20:00:09
木马:Win32.Loader.ft | C:\WINDOWS\system32\dllcache\dsound.dllkJuQD | 2010-01-17 20:00:09
木马:Win32.Loader.ft | C:\WINDOWS\system32\dllcache\d3d9.dll | 2010-01-17 20:00:09
木马:Win32.Loader.ft | C:\WINDOWS\system32\dllcache\asycfilt.dll | 2010-01-17 20:00:08
木马:Win32.Loader.ft | C:\WINDOWS\system32\dsound.dllkJuQD | 2010-01-17 20:00:08
木马:Packer/Win32.Mian007.a | C:\1.exe | 2010-01-17 20:00:08
木马:PSW/Win32.OnLineGames.OQU | C:\WINDOWS\system\RG2A.tmp | 2010-01-17 20:00:07
木马:Packer/Win32.Mian007.a | C:\Documents and Settings\Administrator\Application Data\Y.exe | 2010-01-17 20:00:07
木马:Win32.Loader.ft | C:\WINDOWS\system32\d3d9.dll | 2010-01-17 20:00:07
木马:Win32.Loader.ft | C:\WINDOWS\system32\asycfilt.dll | 2010-01-17 19:57:24

病毒库版本：4861389
扫描时间：2010-01-17 19:44:55
扫描用时：00:09:26
扫描类型：快速扫描
扫描文件总数：5357
威胁总数：1

扫描选项
----------------------
扫描所有文件：是
扫描压缩包：是
发现病毒处理方式：自动
扫描系统内存：是
扫描磁盘引导区：是
扫描Rootkit：是
使用启发式扫描：是

扫描内容
----------------------
C:\WINDOWS
C:\WINDOWS\system
C:\WINDOWS\system32

白名单设置
----------------------

扫描结果
----------------------
C:\WINDOWS\def26500aab6334ccd.dll Gen:Trojan.Heur.D.cm5@c8fsUqfb 已删除

Gen:Trojan.Heur.D.cm5@c8fsUqfb是种子的名子！我靠了

而且一个病毒给我带进40个木马来！都是盗号的！三遍才干净了，累死我了，以后再也不能在家里的电脑上下载游民星空的东西而来！还是得信任咱游侠和VC！