微点交流论坛

标题: 今天晚上微点报可疑木马结果误杀 [打印本页]

作者: 枫叶№秋千 时间: 2008-12-6 02:00 标题: 今天晚上微点报可疑木马结果误杀

时间处理结果木马名称木马进程名木马文件创建者
2008-12-06 01:52:19 处理成功未知木马 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\WMP11.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\SRUPDATE\HOTFIX\WMP11-WINDOWSXP-X86-ZH-CN_0616.EXE
2008-12-06 01:52:15 处理成功未知木马 D:\BF5E90848BA744BAD8E9EF1255BE24C3\WPDINSTALLUTIL.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\WMFDIST11.EXE
2008-12-06 01:52:12 处理成功未知木马 D:\BF5E90848BA744BAD8E9EF1255BE24C3\UPDATE\WPDINSTALLUTIL.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\WMFDIST11.EXE
2008-12-06 01:52:12 处理成功未知木马 D:\BF5E90848BA744BAD8E9EF1255BE24C3\UPDATE\UPDATE.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\WMFDIST11.EXE
2008-12-06 01:52:07 处理成功未知木马 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\WMFDIST11.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\SRUPDATE\HOTFIX\WMP11-WINDOWSXP-X86-ZH-CN_0616.EXE
2008-12-06 01:52:06 处理成功未知木马 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\WMDBEXPORT.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\SRUPDATE\HOTFIX\WMP11-WINDOWSXP-X86-ZH-CN_0616.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\UPDATE\UPDATE.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\UPDATE\WUDFCUSTOM.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\UPDATE\UPDSPAPI.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\WUDFRD.SYS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\WUDFPF.SYS C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\WUDFHOST.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\SPUPDSVC.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\SPUNINST.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\WUDFX.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:05 处理成功未知木马 D:\080264A500CA0B1073\WUDFSVC.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:04 处理成功未知木马 D:\080264A500CA0B1073\WUDFPLATFORM.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:04 处理成功未知木马 D:\080264A500CA0B1073\WUDFCUSTOM.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:04 处理成功未知木马 D:\080264A500CA0B1073\WUDFCOINSTALLER.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:04 处理成功未知木马 D:\080264A500CA0B1073\SPMSG.DLL C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\UMDF.EXE
2008-12-06 01:52:04 处理成功未知木马 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IXP000.TMP\SETUP_WM.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\SRUPDATE\HOTFIX\WMP11-WINDOWSXP-X86-ZH-CN_0616.EXE
2008-12-06 01:52:03 处理成功未知木马 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\SRUPDATE\HOTFIX\WMP11-WINDOWSXP-X86-ZH-CN_0616.EXE E:\兔子\MAGICSET\SRUPDATE.EXE
怎么办
系统还会稳定吗

附件 1: QQ截图未命名.jpg (2008-12-6 02:00, 17.62 K,下载次数： 33)

作者: Legend 时间: 2008-12-6 07:09
请问楼主具体是做了哪些操作后出现的？是否是安装了哪个补丁程序？
方便的话，请楼主将所安装补丁程序的下载连接和微点的技术支持信息(辅助功能->生成技术支持信息)发送到 support@micropoint.com.cn 邮箱，发送时请在邮件中注明本帖链接，并在发送后请将您的邮箱地址通过论坛短消息发给我，便于我们及时跟踪处理。
我们将具体测试分析后给您回复，谢谢。

作者: 枫叶№秋千 时间: 2008-12-6 11:36
今天中午我又打开兔子的升级天使来打补丁
发现是升级了
WIN的播放器
在下载完成后我安装后
微点马上报未知木马:(

附件 1: QQ截图未命名.jpg (2008-12-6 11:36, 43.13 K,下载次数： 63)

作者: 枫叶№秋千 时间: 2008-12-6 20:58
我又发了一次邮件

作者: 风中之烛 时间: 2008-12-6 21:11
看来是有点问题，新的东西都报病毒？

作者: 枫叶№秋千 时间: 2008-12-7 21:41
版主怎么也不回信也不回帖
我还有什么要发的吗

作者: Legend 时间: 2008-12-7 21:46
您好，我们具体测试分析后，会在五个工作日内给您回复。

作者: Legend 时间: 2008-12-8 14:13
请楼主将C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\SRUPDATE\HOTFIX\WMP11-WINDOWSXP-X86-ZH-CN_0616.EXE
和微点的技术支持信息（微点主界面-->辅助功能-->生成技术支持信息）一起发送到我们support@micropoint.com.cn 邮箱，随信请附上此贴链接。

作者: Legend 时间: 2008-12-11 11:46
由于没有收到楼主的进一步反馈，此主题暂做关闭主题处理，如有其他问题，请另开新帖讨论！

欢迎光临微点交流论坛 (http://bbs.micropoint.com.cn/)

bbs.micropoint.com.cn