刚刚扫描出来的，达人帮看一下

V!RTUAL

Exported events:

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\ctfmon.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a2e99a6.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\ntoskrnl.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a3799a4.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\ntdll.DLL'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a2c99a3.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\kernel32.DLL'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4ba3cae3.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\gdi32.DLL'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a31998f.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\user32.DLL'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a2d999b.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\advapi32.DLL'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a3e998a.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\alg.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a2f9990.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\spoolsv.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a379993.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\drivers\kbdclass.sys'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a2c9983.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\csrss.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a3a9992.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\lsass.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a299990.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\services.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a3a9980.qua'  ( QUARANTINE ).

2009-3-24 16:26 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\ws2_32.DLL'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '49fa998d.qua'  ( QUARANTINE ).

2009-3-24 16:25 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\wsock32.DLL'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a379987.qua'  ( QUARANTINE ).

2009-3-24 16:25 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\wininet.DLL'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a36997b.qua'  ( QUARANTINE ).

2009-3-24 16:25 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\smss.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a3b997d.qua'  ( QUARANTINE ).

2009-3-24 16:25 [Scanner] Malware found
      The file 'C:\WINDOWS\explorer.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a389986.qua'  ( QUARANTINE ).

2009-3-24 16:25 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\winlogon.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a369974.qua'  ( QUARANTINE ).

2009-3-24 16:25 [Scanner] Malware found
      The file 'C:\WINDOWS\system32\svchost.exe'
      contained a virus or unwanted program 'HEUR/Modified.SystemFile' []
      Action(s) taken:
      A backup was created as '4a2b997e.qua'  ( QUARANTINE ).

最后一个BT下载包内的图片

2009-3-24 01:41 [Guard] Malware found
      Virus or unwanted program 'TR/Dropper.Gen [trojan]'
      detected in file 'E:\下载目录\ssss\a.jpg.bt.td.
      Action performed: Delete file

[ 本帖最后由 V!RTUAL 于 2009-3-24 16:52 编辑 ]

Sebastian

http://bbs.kafan.cn/viewthread.php?tid=444216&highlight=

Beloved

干到隔离区那么多，上传到多引擎在线扫描看看

http://www.virustotal.com/

或者：http://virscan.org/

V!RTUAL

已经取消了勾选"Integrity checking of system files才扫描的

HC303

不用在线扫了，楼主用的是非原版操作系统，把检查操作系统文件的选项去掉。

V!RTUAL

隔离了重起还能进入系统，说明没有隔离

Beloved

 QUARANTINE = 检疫

不好意思，英语没学好，看错了

长的和 隔离 差不多

slm513

用Local Protection中的scaner扫描下试试

xianlin_qin

后来呢  到底怎么了！！！

xianlin_qin

原帖由 ahu2422 于 2009-3-24 16:57 发表

QUARANTINE = 检疫

不好意思，英语没学好，看错了

长的和 隔离 差不多

“QUARANTINE”就是隔离啊   它有检疫、隔离两个意思