站长，GZ被瑞星给黑了！

lovefifa2005

benbenboom

网站给挂马了，“Y.exe”

"C:Program FilesatixOne.inf"

;
; File Name: One.inf
; Install information file for One Driver
;
; Generated by C DriverWizard 3.2.0 (Build 2485)
; Requires DDK Only
; File created on 3/2/2010
;

;--------- Version Section ---------------------------------------------------

[Version]
Signature="$WINDOWS NT$"
Class=One
ClassGUID={9B2E08D6-619B-45F3-9521-0A3FC09FB474}
Provider=%Provider%
DriverVer=3/2/2010,1.00.0000
CatalogFile=One.cat

;--------- ClassInstall/ClassInstall32 Section -------------------------------

; Not necessary if using a standard class

; 9X Style
[ClassInstall]
Addreg=OneClassAddReg

; NT Style
[ClassInstall32]
Addreg=OneClassAddReg

[OneClassAddReg]
;reg-root,[subkey],[value-entry-name],[flags],[value]
HKR,,,%REG_SZ%,%DeviceClassName%
HKR,,Icon,,"-18"
HKR,,DeviceCharacteristics,%REG_DWORD%,0x100                    ; FILE_DEVICE_SECURE_OPEN
HKR,,Security,,"D:P(A;;GR;;;WD)(A;;GA;;;SY)(A;;GA;;;BA)"        ; generic read - everybody
                                                                ; generic all access - system and admin

;--------- DestinationDirs Section -------------------------------------------

[DestinationDirs]
DefaultDestDir = 10
One_Files_Driver = 12


;--------- SourceDiskNames and SourceDiskFiles Section -----------------------
; These sections identify source disks and files for installation.

[SourceDisksNames]
1 = %DiskId1%,,,""

[SourceDisksFiles]
One.sys  = 1,,


;--------- Manufacturer and Models Sections ----------------------------------

[Manufacturer]
%MfgName% = One_Mfg

[One_Mfg]
; DisplayName               Section           DeviceId
%One_DeviceDesc%=One_DDI, *OneDevice

;---------- DDInstall Sections -----------------------------------------------
; --------- Windows 98 -----------------

; Experimentation has shown that DDInstall root names greater than 19 characters
; cause problems in Windows 98

[One_DDI]
CopyFiles=One_Files_Driver
AddReg=One_9X_AddReg

[One_9X_AddReg]
HKR,,DevLoader,,*ntkern
HKR,,NTMPDriver,,One.sys
HKR,,Description,,%One_DeviceDesc%

; --------- Windows NT -----------------

[One_DDI.NT]
CopyFiles=One_Files_Driver

[One_DDI.NT.Services]
Addservice = One, %【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_NOCLOBBER%, One_Service

; --------- Service ----------------------

[One_Service]
DisplayName    = %One_SvcDesc%
ServiceType    = %SERVICE_KERNEL_DRIVER%
StartType      = %SERVICE_DEMAND_START%
ErrorControl   = %SERVICE_ERROR_NORMAL%
ServiceBinary  = %12%One.sys
LoadOrderGroup = Extended Base

; --------- Files ----------------------

[One_Files_Driver]
One.sys,,,2

;--------- Strings Section ---------------------------------------------------

[Strings]
Provider = "Lenovo (Beijing) Limited"
MfgName = "Lenovo (Beijing) Limited"
One_DeviceDesc = "One Device"
DeviceClassName="Class for One devices"
One_SvcDesc = "Driver for One Device"
DiskId1 = "One Device Installation Disk #1"

REG_SZ                      = 0x00000000
REG_MULTI_SZ                = 0x00010000
REG_EXPAND_SZ               = 0x00020000
REG_BINARY                  = 0x00000001
REG_DWORD                   = 0x00010001
REG_NONE                    = 0x00020001

SERVICE_KERNEL_DRIVER       = 0x00000001
SERVICE_FILE_SYSTEM_DRIVER  = 0x00000002
SERVICE_ADAPTER             = 0x00000004
SERVICE_RECOGNIZER_DRIVER   = 0x00000008

SERVICE_BOOT_START          = 0x0
SERVICE_SYSTEM_START        = 0x1
SERVICE_AUTO_START          = 0x2
SERVICE_DEMAND_START        = 0x3
SERVICE_DISABLED            = 0x4

SERVICE_ERROR_IGNORE        = 0x00000000
SERVICE_ERROR_NORMAL        = 0x00000001
SERVICE_ERROR_SEVERE        = 0x00000002
SERVICE_ERROR_CRITICAL      = 0x00000003

【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_NOCLOBBER        = 0x00000002
【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_DELVAL           = 0x00000004
【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_APPEND           = 0x00000008
【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_KEYONLY          = 0x00000010
【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_OVERWRITEONLY    = 0x00000020
【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_64BITKEY         = 0x00001000
【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_KEYONLY_COMMON   = 0x00002000
【论坛严禁话题，请勿再谈，我们会保留追究的权利】_ADDREG_32BITKEY         = 0x00004000

"C:Program FilesatixOne.sys"

老温WKK

激动过啥啊，不是一天两天的事了。

zhen179

瑞星算是什么东西，让它黑是好事不是坏事，这种公司还做杀软，天大的笑话~~~