pwwxytk - 2005-10-7 15:02:00
请问楼主....我的电脑总是出现这个提示...是中毒了吗?
| 引用: |
| 【∑dw｜n的贴子】老大，看看我的 Logfile of HijackThis v1.99.1 Scan saved at 17:55:14, on 2005-10-12 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: E:\WINDOWS\System32\smss.exe E:\WINDOWS\system32\winlogon.exe E:\WINDOWS\system32\services.exe E:\WINDOWS\system32\lsass.exe E:\WINDOWS\system32\svchost.exe E:\WINDOWS\System32\svchost.exe e:\program files\rising\rfw\rfwsrv.exe E:\WINDOWS\system32\spoolsv.exe E:\WINDOWS\Explorer.EXE e:\program files\rising\rfw\RfwMain.exe E:\Program Files\cFosSpeed\spd.exe E:\WINDOWS\system32\nvsvc32.exe E:\WINDOWS\system32\oodag.exe E:\PROGRAM FILES\RISING\RAV\CCENTER.EXE E:\PROGRAM FILES\RISING\RAV\Ravmond.exe E:\PROGRA~1\RISING\RAV\RAVTIMER.EXE E:\PROGRA~1\RISING\RAV\RAVMON.EXE E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe E:\PROGRAM FILES\RISING\RAV\RavStub.exe E:\WINDOWS\system32\ctfmon.exe E:\WINDOWS\system32\wuauclt.exe E:\Documents and Settings\Edwin_iu.EDWIN\桌面\hijackthis1991\HijackThis.exe R3 - Default URLSearchHook is missing O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - E:\WINDOWS\system32\xunleibho_v5.dll O2 - BHO: ltmenu Class - {78C21EFD-53BA-406C-AF1A-33A38ABD3958} - C:\Program Files\LtUcx\1002\c0.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FLASHGET\jccatch.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\zh-cn\msntb.dll O2 - BHO: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O3 - Toolbar: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - E:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\zh-cn\msntb.dll O4 - HKLM\..\Run: [PHIME2002ASync] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] E:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [RavTimer] E:\PROGRA~1\RISING\RAV\RAVTIMER.EXE O4 - HKLM\..\Run: [IMSCMig] E:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload O4 - HKLM\..\Run: [RavMon] E:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [RfwMain] "E:\Program Files\rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [MSPY2002] E:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [cFos_Speed] D:\Program Files\cFosSpeed\cFos_Speed.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: &★将链接添加到MSN RSS频道 - E:\Program Files\MsnOK\geturl.htm O8 - Extra context menu item: &使用迅雷下载 - E:\Program Files\Sandai Technologies Inc\Thunder\geturl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - E:\Program Files\Sandai Technologies Inc\Thunder\getAllurl.htm O8 - Extra context menu item: 使用Kugoo下载 - E:\PROGRA~1\KUGOO2\KugooDownX.htm O8 - Extra context menu item: 使用网际快车下载 - E:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: 使用网际快车下载全部链接 - E:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: 使用超级解霸播放 - g:\Herosoft\Hero 9\MPURLGET.HTM O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - F:\HFGame3\GameClient.exe (file missing) O9 - Extra button: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - g:\Herosoft\Hero 9\STHSDVD.EXE O9 - Extra ''Tools'' menuitem: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - g:\Herosoft\Hero 9\STHSDVD.EXE O9 - Extra button: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing) O9 - Extra ''Tools'' menuitem: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing) O9 - Extra button: 寻论网--中学作业解答 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing) O9 - Extra ''Tools'' menuitem: 中学作业 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing) O9 - Extra button: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll O9 - Extra ''Tools'' menuitem: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe O15 - ProtocolDefaults: ''@ivt'' protocol is in My Computer Zone, should be Intranet Zone O15 - ProtocolDefaults: ''file'' protocol is in My Computer Zone, should be Internet Zone O15 - ProtocolDefaults: ''ftp'' protocol is in My Computer Zone, should be Internet Zone O15 - ProtocolDefaults: ''http'' protocol is in My Computer Zone, should be Internet Zone O15 - ProtocolDefaults: ''https'' protocol is in My Computer Zone, should be Internet Zone O16 - DPF: {0400AC1C-EEF0-4638-A501-31D5A0DC2002} (VTPlug3 Class) - http://202.101.62.196:1995/VTrans.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409 O16 - DPF: {2354A44B-3CEB-4829-9940-545B03103538} (PowerPlr Control) - http://www.etvnet.net/plugin/PowerPlr.ocx O16 - DPF: {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} (BlueskyVideo Control) - http://www.bluesky.cn/download/v2_60.cab O16 - DPF: {3072B1F1-0C4D-4E76-A7C6-FBAF129DBCC9} (Share Control) - http://www.bluesky.cn/download/share.cab O16 - DPF: {35DC0C9A-C471-4910-8724-BA5514967E2F} (ERADMStart.StartControl) - http://www.im.tv/bbstart.ocx O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125473063605 O16 - DPF: {8F9E8A28-C296-4C6F-9A57-8FE4374135A1} (TV Stream Source) - http://www.mysee.com/Chaos.cab O16 - DPF: {991481A7-4669-4E15-8C24-100404E1F5CB} (Blueskyvoice Control) - http://www.bluesky.cn/download/blueskyvoice_60.cab O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan ) - http://download.rising.com.cn/register/pcver/autoupgradepad/Ver2005/OL2005.cab O23 - Service: Adobe LM Service - Unknown owner - E:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: cFosSpeed System Service (cFosSpeedS) - Unknown owner - E:\Program Files\cFosSpeed\spd.exe" -service (file missing) O23 - Service: Windows Internet/Server (Internet) - Unknown owner - E:\WINDOWS\system32\RavExt\winlogo.exe (file missing) O23 - Service: Nl1krenr - Unknown owner - (no file) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe O23 - Service: O&O Defrag - O&O Software GmbH - E:\WINDOWS\system32\oodag.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - e:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - rising - E:\PROGRAM FILES\RISING\RAV\CCENTER.EXE O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - E:\PROGRAM FILES\RISING\RAV\Ravmond.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - E:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe O23 - Service: Windows Internet/Firewall (SysEven) - Unknown owner - E:\WINDOWS\system32\drivers\SysEven.exe O23 - Service: MorningSound VirtualCamera Play Service (VirtualCameraService) - Unknown owner - E:\Program Files\VirtualCamera\VCamSrv.exe (file missing) 经瑞星检查为E:\Program Files\Internet Explorer\IEXPLORE.EXE 里有名为 Backdoor.Gpigeon.ua 的病毒，杀完重新启动又能查到。 请问斑竹，有救吗？怎么彻底删除？ 救救我 ........................... |