气死我了~~这2天病毒不断!theopen.exe求助!! bbs.ikaka.com

Aionegirl - 2006-9-14 20:23:00

已检测到: 木马程序 Trojan-Downloader.JS.IstBar.ai 脚本:

http://59.34.197.239/theopen.asp[7]
已删除: 木马程序 Trojan-Downloader.HTA.Agent.h 文件: C:\boot.hta
已检测到: 木马程序 Trojan-Downloader.VBS.Small.be URL:

http://59.34.197.239/7002avpa.htm
已检测到: 木马程序 Trojan-Downloader.JS.IstBar.ai 脚本:

http://59.34.197.239/theopen.asp[9]
已检测到: 木马程序 Trojan-Downloader.JS.gen (修改) 脚本:

http://www.baidu.com/[1]
已删除: 木马程序 Trojan.Win32.VB.ase 文件: C:\Documents and

Settings\Lolita\Local Settings\Temporary Internet Files\Content.IE5

\I9FK55BL\theopen[1].exe/PE_Patch.UPX/UPX
已检测到: 木马程序 Trojan.Win32.VB.ase URL:

http://59.34.197.195/theopen.exe/PE_Patch.UPX/UPX
已检测到: 木马程序 Trojan-Downloader.Win32.Small.dti URL:

http://afied.com/d/ms32.exe

昨天刚杀了7939.com!开机上百度结果KIS就又说有病毒!今天我一开机打GOOGLE又有!!

晕死我了!!求高手帮我解决下!!

秋日里的蓝天 - 2006-9-14 20:31:00

请下载SREng2 ，使用“智能扫描”，按下“扫描”按钮进行扫描，
扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告
日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。

下载地址
http://free5.ys168.com/?ufwihgu168

7939.com
参考这个贴子的解决方法
http://forum.ikaka.com/topic.asp?board=67&artid=8155668

Aionegirl - 2006-9-14 20:37:00

昨天我就是用那个专杀杀的7939.com啊!!郁闷了!!
2006-09-14,20:27:37

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SoundMAXPnP><C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe> [Analog Devices, Inc.]
<SoundMAX><"C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray> [Analog Devices, Inc.]
<kis><"D:\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"> [Kaspersky Lab]
<AntiArpSniffer><D:\工具\AntiArpSniffer3\AntiArpSniffer.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><D:\KASPER~1\KASPER~1.0\adialhk.dll> [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
<WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll> [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<helper.dll><; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> []
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]

==================================
启动文件夹
服务
[卡巴斯基互联网安全套装 6.0 / AVP]
<"D:\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r><Kaspersky Lab>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
<"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><N/A>
[SoundMAX Agent Service / SoundMAX Agent Service (default)]
<C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <D:\工具\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\工具\KuGoo3\KuGoo3DownXControl.ocx, N/A>
[Shell name]
{D682D42E-BE2C-4758-AB18-926D2E7553B8} <C:\DOCUME~1\Lolita\LOCALS~1\Temp\vmmreg32.dll, Microsoft Corporation>
[启动迅雷]
{0062C9BD-B349-40DE-91A0-755F37ACD559} <D:\工具\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A} <E:\网络游戏\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[Web反病毒保护]
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <D:\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll, Kaspersky Lab>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\工具\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[VOSLite Control]
{0E573AAB-4E97-4B09-9F22-9F93B8147E2E} <C:\WINDOWS\DOWNLO~1\VOSLite.ocx, MusicNPlay>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation>
[MiniPlayer2 Control]
{33E8A070-5A9A-4F01-A80A-CCBA19061810} <C:\WINDOWS\DOWNLO~1\MINIPL~1.OCX, (?)?????>
[MSN Photo Upload Tool]
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} <C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation>
[AxSubmitControl Class]
{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, >
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[ActiveMovieControl Object]
{05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[HtmlDlgSafeHelper Class]
{3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation>
[MSN Photo Upload Tool]
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} <C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <D:\工具\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Shell Name Space]
{55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\工具\KuGoo3\KuGoo3DownXControl.ocx, N/A>
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[Shell name]
{D682D42E-BE2C-4758-AB18-926D2E7553B8} <C:\DOCUME~1\Lolita\LOCALS~1\Temp\vmmreg32.dll, Microsoft Corporation>
[&使用迅雷下载]
<D:\工具\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<D:\工具\Thunder\Program\GetAllUrl.htm, N/A>
[使用KuGoo3下载(&K)]
<D:\工具\KuGoo3\KuGoo3DownX.htm, N/A>
[用比特精灵下载(&B)]
<D:\工具\BitSpirit\bsurl.htm, N/A>

Aionegirl - 2006-9-14 20:38:00

==================================
正在运行的进程
[PID: 912][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1052][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1124][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\klogon.dll] <Kaspersky Lab><6.0.0.299>
[PID: 1168][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1180][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1368][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1452][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1540][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] <Kaspersky Lab><6.0.0.299>
[PID: 1660][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1696][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1920][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 292][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\工具\WinRAR\rarext.dll] <N/A><N/A>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\shellex.dll] <Kaspersky Lab><6.0.0.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] <Kaspersky Lab><6.0.0.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] <Kaspersky Lab><1.0.6.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] <Kaspersky Lab><6.0.0.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299>
[d:\kaspersky lab\kaspersky internet security 6.0\params.ppl] <Kaspersky Lab><6.0.0.299>
[d:\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299>
[d:\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] <Kaspersky Lab><6.0.0.299>
[d:\kaspersky lab\kaspersky internet security 6.0\nfio.ppl] <Kaspersky Lab><6.0.0.299>
[d:\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl] <Kaspersky Lab><6.0.0.299>
[D:\工具\KuGoo3\KuGoo3DownXControl.ocx] <N/A><N/A>
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[PID: 428][C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe] <Analog Devices, Inc.><4, 0, 4, 11>
[C:\Program Files\Analog Devices\SoundMAX\SMWDMIF.dll] <Analog Device, Inc.><1, 0, 22, 26>
[PID: 436][C:\Program Files\Analog Devices\SoundMAX\Smax4.exe] <Analog Devices, Inc.><4, 0, 4, 25>
[PID: 496][D:\工具\AntiArpSniffer3\AntiArpSniffer.exe] <N/A><N/A>
[PID: 508][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 864][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe] <Analog Devices, Inc.><3, 2, 6, 0>
[PID: 1388][C:\WINDOWS\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 712][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1152][D:\工具\QQ\QQ.exe] <TENCENT><0, 0, 0, 0>
[D:\工具\QQ\CoralAssist.DLL] <Coral Team><4.5.0 build 20060515>
[D:\工具\QQ\CoralQQ.DLL] <Coral Team><4.5.2 Build 20060830>
[D:\工具\QQ\ipsearcher.dll] <N/A><1.0.0.4>
[D:\工具\QQ\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\工具\QQ\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\工具\QQ\BasicCtrlDll.dll] <Tencent><5, 0, 200, 370>
[D:\工具\QQ\QQAPI.dll] <><1, 0, 0, 1>
[D:\工具\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[D:\工具\QQ\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\工具\QQ\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 6, 27, 1>
[D:\工具\QQ\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[D:\工具\QQ\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\工具\QQ\WizardCtrl.dll] <><1, 0, 0, 1>
[D:\工具\QQ\QQMainFrame.dll] <N/A><N/A>
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[D:\工具\QQ\CQQApplication.dll] <N/A><N/A>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] <Kaspersky Lab><6.0.0.299>
[D:\工具\QQ\NewSkin.dll] <><1, 0, 0, 1>
[D:\工具\QQ\HostingMgr.dll] <><1, 0, 0, 1>
[D:\工具\QQ\CameraDll.dll] <><1, 0, 0, 1>
[D:\工具\QQ\MailSummary.dll] <><1, 0, 0, 1>
[D:\工具\QQ\QQSpace.dll] <><1, 0, 0, 1>
[D:\工具\QQ\QQSettingCtrl.dll] <><1, 0, 0, 1>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[D:\工具\QQ\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\工具\QQ\GroupLive.dll] <N/A><N/A>
[D:\工具\QQ\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\工具\QQ\QQPlugin.dll] <N/A><N/A>
[D:\工具\QQ\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\工具\QQ\LongConnection.dll] <tencent><5, 0, 200, 160>
[D:\工具\QQ\QRingMng.dll] <N/A><N/A>
[D:\工具\QQ\PhoneAPI.dll] <><1, 0, 0, 1>
[D:\工具\QQ\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[D:\工具\QQ\VPortal.dll] <><1, 0, 0, 4>
[D:\工具\QQ\QQAllInOne.dll] <N/A><N/A>
[D:\工具\QQ\SCCore.dll] <TENCENT><2, 0, 0, 1>
[D:\工具\QQ\QQCustomFace.dll] <N/A><N/A>
[D:\工具\QQ\GroupConnection.dll] <Tencent><0, 3, 3, 5>
[D:\工具\QQ\QQAvatar.dll] <N/A><N/A>
[D:\工具\QQ\FlashAvatarDll.dll] <><1, 4, 0, 1>
[D:\工具\QQ\QQPet.dll] <><1, 0, 0, 1>
[D:\工具\QQ\QQSysMsgMng.dll] <N/A><N/A>
[D:\工具\QQ\BQQApplication.dll] <N/A><N/A>
[D:\工具\QQ\CommercesMng.dll] <><1, 0, 0, 1>
[D:\工具\QQ\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[D:\工具\QQ\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 240>
[D:\工具\QQ\QQSceneMng.dll] <N/A><N/A>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] <Kaspersky Lab><1.0.6.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] <Kaspersky Lab><6.0.0.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299>
[d:\kaspersky lab\kaspersky internet security 6.0\params.ppl] <Kaspersky Lab><6.0.0.299>
[d:\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299>
[d:\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] <Kaspersky Lab><6.0.0.299>
[PID: 2944][D:\工具\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[D:\工具\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 2940][D:\工具\千千静听\TTPlayer.exe] <Alen Soft><4, 6, 8, 0>
[D:\工具\千千静听\ttpcomm.dll] <N/A><N/A>
[D:\工具\千千静听\ttpres.dll] <Alen Soft><4, 6, 8, 0>
[D:\工具\千千静听\Plugins\Dsp_Dfx.dll] <N/A><N/A>
[D:\工具\千千静听\AddIn\ttp_lrcsh.dll] <N/A><N/A>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] <Kaspersky Lab><6.0.0.299>
[D:\工具\千千静听\AddIn\ttp_asf.dll] <N/A><N/A>
[PID: 2148][D:\工具\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[D:\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] <Kaspersky Lab><6.0.0.299>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

秋日里的蓝天 - 2006-9-14 20:40:00

日志看不出问题

请问还有什么异常

Aionegirl - 2006-9-14 20:43:00

C:\WINNT\system32\drivers\etc\hosts文件，内容为：
59.34.197.239 www.baidu.com
59.34.197.239 baidu.com
59.34.197.239 www.sohu.com
59.34.197.239 sohu.com
59.34.197.239 www.sina.com
59.34.197.239 sina.com
59.34.197.239 www.sina.com.cn
59.34.197.239 sina.com.cn
59.34.197.239 www.163.com
59.34.197.239 163.com
59.34.197.239 www.google.com
59.34.197.239 google.com
59.34.197.239 www.qq.com
59.34.197.239 qq.com
59.34.197.239 www.hao123.com
59.34.197.239 hao123.com
59.34.197.239 ttlttt.com
59.34.197.239 about:blank

秋日里的蓝天 - 2006-9-14 20:46:00

只留下
127.0.0.1这一项，其它全部清除

Aionegirl - 2006-9-14 20:47:00

看看这个

附件: 7326352006914203923.BMP

我无邪 - 2006-9-14 21:23:00

请问，你是否还有什么异常

瑞星卡卡安全论坛