瑞星卡卡安全论坛

又发现2个顽固的毒~

同样是卡巴~360~瑞心都杀不掉~（下面网站可能是有毒的网站~别点《老是跳在桌面上我不敢点~估计有毒》）
http://sm.1sto.com/（免费算命占卜）C:\Documents and Settings\Administrator\桌面
http://www.91ie.com/（就要IE——网址导航）Documents and Settings\Administrator\桌面《这个网址你要是用QQ和朋友私聊他还会自动像好友发出~~~中国人自己的网站导航 就要IE网址之家--http://www.91ie.com

桌面老是跳出这个连接的快捷方式~
怎么杀都杀不掉！。。。。。哭死~
不管怎么杀都杀不掉！
他们2个老是在桌面跳出图标~删了图表过会又会出来！

附：hijackthis下载地址 http://forum.ikaka.com/topic.asp?board=28&artid=8105899  扫出全部日志

晕呀,我跟你一样这种情况呀,有人帮帮忙吗???

引用:

【zzq11211的贴子】附：hijackthis下载地址 http://forum.ikaka.com/topic.asp?board=28&artid=8105899  扫出全部日志 ………………

在没日志前只能下让你这样做


附件: 7546292006927130017.jpg

\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 125.91.1.20 localhost
O1 - Hosts: 219.153.18.212 vip.45vip.com
O1 - Hosts: 219.153.18.212 www.pk222.com
O2 - BHO: KOSIE HelperInternet Explorer Web Content Guard  - {1B2F92A1-CDAF-4511-9382-91E3F5CE0880} - C:\Program Files\KOS\KOSIEBar.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - d:\Program Files\Tencent\QQ\QQIEHelper.dll
O3 - Toolbar: 金山毒霸安全助手 - {EF72500A-C234-46C4-BF0A-9AA6913DDF34} - C:\Program Files\KOS\KOSIEBar.dll
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - Startup: 腾讯QQ.lnk = D:\Program Files\Tencent\QQ\QQ.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - d:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - d:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - d:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - d:\Program Files\Tencent\QQ\QQIEHelper.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O16 - DPF: {52DF16E3-6C4F-4B22-8BAF-09263E463B48} (金山毒霸在线产品升级) - http://www.duba.net/cab/KOSInit.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: PopWinIe - Unknown owner - C:\WINDOWS\system32\PopWin.exe (file missing)
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe

晕啊,机子声音没了,用迅雷下的东西解压不了啊!

掉了啊有没有人看到啊,我~~~~~~没得话说了

sdm

修复F2  所有01项

O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O10
在http://forum.ikaka.com/topic.asp?board=67&artid=5188931
8楼下载lspfix修复
修复后不能上网
到2楼下载winsockfix.exe修复

O23 - Service: PopWinIe - Unknown owner - C:\WINDOWS\system32\PopWin.exe (file missing)
开始  运行 regedit  展开
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
删除PopWinIe
重启后删除C:\WINDOWS\system32\PopWin.exe