今天下午终于装上了 ,,扫了很久好象很多病毒,,我仔细看了一下文件夹里的东西很多都不知道
请大家帮我看看,,我应该怎么删除小红伞扫出来的东西啊
Avira AntiVir Personal
Report file date: 2008年7月28日 14:58
Scanning for 1513016 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Normally booted
Username: SYSTEM
Computer name: XTZJ-E7DDF24791
Version information:
BUILD.DAT : 8.1.0.326 16933 Bytes 2008-7-11 12:57:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 2008-6-26 02:57:53
AVSCAN.DLL : 8.1.4.0 40705 Bytes 2008-5-26 01:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 2008-6-12 06:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 2008-5-26 01:58:52
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 2007-7-18 06:36:36
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 2008-6-24 07:53:28
ANTIVIR2.VDF : 7.0.5.174 2027008 Bytes 2008-7-25 09:17:42
ANTIVIR3.VDF : 7.0.5.177 44032 Bytes 2008-7-28 06:44:30
Engineversion : 8.1.1.12
AEVDF.DLL : 8.1.0.5 102772 Bytes 2008-7-9 02:46:50
AESCRIPT.DLL : 8.1.0.59 307579 Bytes 2008-7-28 06:46:19
AESCN.DLL : 8.1.0.23 119156 Bytes 2008-7-28 06:46:13
AERDL.DLL : 8.1.0.20 418165 Bytes 2008-7-9 02:46:50
AEPACK.DLL : 8.1.2.1 364917 Bytes 2008-7-28 06:46:08
AEOFFICE.DLL : 8.1.0.21 192891 Bytes 2008-7-28 06:45:57
AEHEUR.DLL : 8.1.0.44 1343863 Bytes 2008-7-28 06:45:50
AEHELP.DLL : 8.1.0.15 115063 Bytes 2008-7-9 02:46:50
AEGEN.DLL : 8.1.0.31 311669 Bytes 2008-7-28 06:45:01
AEEMU.DLL : 8.1.0.6 430451 Bytes 2008-7-9 02:46:50
AECORE.DLL : 8.1.1.7 172406 Bytes 2008-7-28 06:44:47
AEBB.DLL : 8.1.0.1 53617 Bytes 2008-4-24 02:50:42
AVWINLL.DLL : 1.0.0.12 15105 Bytes 2008-7-9 02:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 2008-5-16 03:28:01
AVREP.DLL : 8.0.0.2 98561 Bytes 2008-7-28 06:44:35
AVREG.DLL : 8.0.0.1 33537 Bytes 2008-5-9 05:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 2008-2-12 02:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 2008-6-12 06:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 2008-1-22 11:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 2008-6-12 06:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 2008-1-25 06:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 2008-6-12 07:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 2008-6-27 07:34:37
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: C:\Program Files\Avira\AntiVir PersonalEdition Classic\sysscan.avp
Logging..........................: low
Primary action...................: repair
Secondary action.................: delete
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, E:, F:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: on
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,
Start of the scan: 2008年7月28日 14:58
Starting search for hidden objects.
The driver could not be initialized.
The scan of running processes will be started
Scan process 'avwsc.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'xdict.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'conime.exe' - '1' Module(s) have been scanned
Scan process 'TXPlatform.exe' - '1' Module(s) have been scanned
Scan process 'QQ.exe' - '1' Module(s) have been scanned
Scan process 'Thunder5.exe' - '1' Module(s) have been scanned
Scan process 'iexplore.exe' - '1' Module(s) have been scanned
Scan process 'PFW.exe' - '0' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process '360Tray.exe' - '0' Module(s) have been scanned
Scan process 'safeboxTray.exe' - '0' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'stormliv.exe' - '1' Module(s) have been scanned
Scan process 'CDANTSRV.EXE' - '1' Module(s) have been scanned
Scan process 'CDAC11BA.EXE' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
34 processes with 34 modules were scanned
Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Boot sector 'E:\'
[INFO] No virus was found!
Boot sector 'F:\'
[INFO] No virus was found!
Starting to scan the registry.
The registry was scanned ( '53' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\boot\ghos\1KG_su.exe
[DETECTION] Is the TR/Drop.Agen.H Trojan
[NOTE] A backup was created as '48d46e59.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
C:\boot\ghos\del_gho
[DETECTION] Is the TR/Drop.Agen.E Trojan
[NOTE] A backup was created as '48f96e74.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
[NOTE] The file was deleted!
C:\boot\ghos\gho_cfg.exe
[DETECTION] Is the TR/Drop.Agen.I Trojan
[NOTE] A backup was created as '48fc6e77.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
C:\boot\ghos\gho_run.exe
[DETECTION] Is the TR/Drop.Agen.T Trojan
[NOTE] A backup was created as '49562b10.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
[NOTE] The file was deleted!
C:\Documents and Settings\LuckyStar\Local Settings\Temporary Internet Files\Content.IE5\34LI7V53\index[1].htm
[DETECTION] Contains HEUR/HTML.Malware suspicious code
[NOTE] The detection was classified as suspicious.
[NOTE] A backup was created as '48f16f1f.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
C:\Documents and Settings\LuckyStar\Local Settings\Temporary Internet Files\Content.IE5\E7AC8BQE\er[1].htm
[DETECTION] Contains recognition pattern of the JS/Dldr.Harsole Java script virus
[NOTE] A backup was created as '48e86fb7.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
[NOTE] The file was deleted!
C:\Documents and Settings\LuckyStar\Local Settings\Temporary Internet Files\Content.IE5\R4VKF9WA\news[1].htm
[DETECTION] Contains recognition pattern of the HTML/Silly.Gen HTML script virus
[NOTE] A backup was created as '49047015.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
C:\Documents and Settings\LuckyStar\Local Settings\Temporary Internet Files\Content.IE5\T6KTDC61\whole_counter[1].htm
[DETECTION] Contains recognition pattern of the HTML/Infected.WebPage.Gen HTML script virus
[NOTE] A backup was created as '48fc7039.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
[NOTE] The file was deleted!
C:\WINDOWS\system32\sferunnum.dll
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\IEProtect.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\wxbfileb.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\'
D:\应用程序\专杀工具\磁碟机病毒专杀总程序\killer_dummycom.exe
[DETECTION] Is the TR/Smalltroj.DMUV Trojan
[NOTE] A backup was created as '48f972cf.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
D:\应用程序\专杀工具\360顽固木马专杀总程序\360compkill(1).exe
D:\应用程序\专杀工具\360顽固木马专杀总程序\360compkill(1).exe
[0] Archive type: RAR SFX (self extracting)
--> killer_dummycom.exe
[DETECTION] Is the TR/Smalltroj.DMUV Trojan
[NOTE] A backup was created as '48bd729f.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
[NOTE] The file was deleted!
D:\应用程序\专杀工具\360顽固木马专杀总程序\360compkill(2).exe
D:\应用程序\专杀工具\360顽固木马专杀总程序\360compkill(2).exe
[0] Archive type: RAR SFX (self extracting)
--> killer_dummycom.exe
[DETECTION] Is the TR/Smalltroj.DMUV Trojan
[NOTE] A backup was created as '48bd72a0.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
D:\应用程序\专杀工具\360顽固木马专杀总程序\360compkill(3).exe
[0] Archive type: RAR SFX (self extracting)
--> fixtool.exe
[DETECTION] Is the TR/Small.286720.E Trojan
[NOTE] A backup was created as '48bd72a2.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
[NOTE] The file was deleted!
D:\应用程序\专杀工具\360顽固木马专杀总程序\360compkill(4).exe
[0] Archive type: RAR SFX (self extracting)
--> fixtool.exe
[DETECTION] Is the TR/Small.282624 Trojan
--> killer_rodog.exe
[DETECTION] Is the TR/Agent.691200 Trojan
[NOTE] A backup was created as '48bd72a3.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
D:\应用程序\代理超人 V4.10\proxysm410.rar
[0] Archive type: RAR
--> ﾷﾢﾲﾼ\proxysm.exe
[DETECTION] Contains recognition pattern of the SPR/Agent.Z program
[NOTE] A backup was created as '48fc7321.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
[NOTE] The file was deleted!
D:\应用程序\代理超人 V4.10\发布\proxysm.exe
[DETECTION] Contains recognition pattern of the SPR/Agent.Z program
[NOTE] A backup was created as '48fc7322.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
D:\应用程序\傲游浏览器总程序\傲游浏览器\Maxthon2\Favicons\ABFDHJBDCDAOBOCHFIAIGABGCBBLFJCHFIAL.ico
[DETECTION] Contains HEUR/HTML.Malware suspicious code
[NOTE] The detection was classified as suspicious.
[NOTE] A backup was created as '48d37312.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
Begin scan in 'E:\'
E:\pastime\单机\街机模拟器总程序\CPS1\WinKawaks.exe
[DETECTION] Is the TR/Proxy.QOF Trojan
[NOTE] A backup was created as '48fb73bf.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
E:\pastime\网络\传奇私服\登录器\JSY\JSY.dll
[DETECTION] Is the TR/Hook.Agent.VR Trojan
[NOTE] A backup was created as '48e674c3.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[WARNING] The file could not be copied to the quarantine directory.
[WARNING] Error in ARK lib
[NOTE] The file was deleted!
Begin scan in 'F:\'
F:\个人资料\黑工具\黑防专用端口扫描器\黑客防线VIP专用端口扫描器\黑客防线VIP专用扫描器.exe
[DETECTION] Is the TR/FlyStudio.AI.15 Trojan
[NOTE] A backup was created as 'debfd66a.qua' ( QUARANTINE )
[NOTE] Attempting to perform action using the ARK lib.
[NOTE] The driver could not be initialized.
[NOTE] The file was deleted!
End of the scan: 2008年7月28日 16:04
Used time: 1:06:22 Hour(s)
The scan has been done completely.
6548 Scanning directories
709047 Files were scanned
16 viruses and/or unwanted programs were found
6 Files were classified as suspicious:
17 files were deleted
0 files were repaired
19 files were moved to quarantine
0 files were renamed
4 Files cannot be scanned
709021 Files not concerned
4995 Archives were scanned
13 Warnings
19 Notes
[ 本帖最后由 xyz00909 于 2008-7-28 19:08 编辑 ] |
[复制链接]
发表于 2008-7-28 16:38:08
楼主
来人哪,,,
发表于 2008-7-28 19:08:00