CAD中毒了,重装了系统,在其他盘还是有病毒,查不出来,轩辕和蛊毒快来看看呀 bbs.ikaka.com

hthczz - 2006-12-20 16:18:00

2006-12-20,15:59:59

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<Internat.exe><internat.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Synchronization Manager><mobsync.exe /logon> [(Verified)Microsoft Corporation]
<IgfxTray><C:\WINNT\System32\igfxtray.exe> [(Verified)Intel Corporation]
<HotKeysCmds><C:\WINNT\System32\hkcmd.exe> [(Verified)Intel Corporation]
<SoundMan><SOUNDMAN.EXE> [(Verified)Avance Logic, Inc.]
<Realtime Monitor><C:\PROGRA~1\CA-JIN~1\KILL\realmon.exe> [Computer Associates International, Inc.]
<!AVG Anti-Spyware><"C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [Anti-Malware Development a.s.]
<SKYNET Personal FireWall><C:\PROGRA~1\FIREWALL\pfw.exe> [广州众达天网技术有限公司]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINNT\system32\userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><C:\Program Files\AVG Anti-Spyware 7.5\shellexecutehook.dll> [Anti-Malware Development a.s.]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINNT\LUNARM~1.SCR> [N/A]

==================================
启动文件夹
[Microsoft Office]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> C:\PROGRA~1\MICROS~2\Office\OSA9.EXE [Microsoft Corporation]><N>

==================================
服务
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard]
<C:\Program Files\AVG Anti-Spyware 7.5\guard.exe><Anti-Malware Development a.s.>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
<C:\WINNT\system32\drivers\CDAC11BA.EXE><Macrovision>
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[KILL RPC Server / InoRPC]
<"C:\Program Files\CA-Jinchen\KILL\InoRpc.exe"><Computer Associates International, Inc.>
[KILL Realtime Server / InoRT]
<"C:\Program Files\CA-Jinchen\KILL\InoRT.exe"><Computer Associates International, Inc.>
[KILL Job Server / InoTask]
<"C:\Program Files\CA-Jinchen\KILL\InoTask.exe"><Computer Associates International, Inc.>

==================================
驱动程序
[Service for Avance AC97 Audio (WDM) / ALCXWDM]
<system32\drivers\ALCXWDM.SYS><Avance Logic, Inc.>
[AVG Anti-Spyware Driver / AVG Anti-Spyware Driver]
<\??\C:\Program Files\AVG Anti-Spyware 7.5\guard.sys><N/A>
[AVG Anti-Spyware Clean Driver / AvgAsCln]
<System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
[CdaC15BA / CdaC15BA]
<\??\C:\WINNT\system32\drivers\CDAC15BA.SYS><Macrovision Europe Ltd>
[dmboot / dmboot]
<System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio]
<\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload]
<\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[ialm / ialm]
<System32\DRIVERS\ialmnt5.sys><Intel Corporation>
[INO_FLPY / INO_FLPY]
<\SystemRoot\System32\Drivers\ino_flpy.sys><Computer Associates International, Inc.>
[INO_FLTR / INO_FLTR]
<\??\C:\WINNT\System32\Drivers\ino_fltr.sys><Computer Associates International, Inc.>
[npkcrypt / npkcrypt]
<\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[Direct Parallel Link Driver / Ptilink]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139-based PCI Fast Ethernet Adapter NT Driver / rtl8139]
<System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[SKNFW / SKNFW]
<\??\C:\WINNT\system32\Drivers\SKNFW.sys><N/A>
[World Standard Teletext Codec / WSTCODEC]
<System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[Intel(R) Graphics Platform (SoftBIOS) Driver / {6080A529-897E-4629-A488-ABA0C29B635E}]
<system32\drivers\ialmsbw.sys><Intel Corporation>
[Intel(R) Graphics Chipset (KCH) Driver / {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}]
<system32\drivers\ialmkchw.sys><Intel Corporation>

==================================
浏览器加载项
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>

hthczz - 2006-12-20 16:19:00

==================================
正在运行的进程
[PID: 136][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 160][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 156][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6714]
[PID: 208][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.00.2195.6700]
[C:\WINNT\system32\dmserver.dll] [VERITAS Software Corp., 2195.6605.297.3]
[PID: 220][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.00.2195.6695]
[PID: 404][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 432][C:\WINNT\system32\spoolsv.exe] [Microsoft Corporation, 5.00.2195.6659]
[PID: 472][C:\WINNT\system32\drivers\CDAC11BA.EXE] [Macrovision, 4.20.020]
[PID: 496][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 516][C:\Program Files\CA-Jinchen\KILL\InoRpc.exe] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InConfig.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\INOCORE.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InoOEM.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA\Common\ScanEngine\DistCfg.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\ScanLog.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InocDB.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\LANG\KILL\wBkRsrcres.dll] [冠群金辰, 6.0.200.0]
[C:\Program Files\CA-Jinchen\KILL\InocAdn.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InDrvCfg.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\secAPI.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA\Common\ScanEngine\InoScan.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\PROGRAM FILES\CA\COMMON\SCANENGINE\ScanRes.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\RPCMtAdn.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\NameAPIX.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\RPCMtAPI.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InoAlert.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\albuild.dll] [Computer Associates International, Inc., 6, 0, 599, 0]
[C:\Program Files\CA-Jinchen\KILL\secAddIn.dll] [Computer Associates International, Inc., 6.0.312.0]
[PID: 536][C:\Program Files\CA-Jinchen\KILL\InoRT.exe] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\ScanLog.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InConfig.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\INOCORE.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InoOEM.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InocDB.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA\Common\ScanEngine\DistCfg.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\LANG\KILL\wBkRsrcres.dll] [冠群金辰, 6.0.200.0]
[C:\Program Files\CA\Common\ScanEngine\InoScan.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\PROGRAM FILES\CA\COMMON\SCANENGINE\ScanRes.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA\Common\ScanEngine\arclib.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA\Common\ScanEngine\Avh32dll.dll] [N/A, N/A]
[PID: 548][C:\Program Files\CA-Jinchen\KILL\InoTask.exe] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InoAlert.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\RPCMtAPI.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InoOEM.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InConfig.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\INOCORE.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InocDB.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\InDrvCfg.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\ScanLog.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA\Common\ScanEngine\DistCfg.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\secAPI.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\LANG\KILL\wBkRsrcres.dll] [冠群金辰, 6.0.200.0]
[C:\Program Files\CA-Jinchen\KILL\albuild.dll] [Computer Associates International, Inc., 6, 0, 599, 0]
[C:\Program Files\CA\Common\ScanEngine\InoScan.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\PROGRAM FILES\CA\COMMON\SCANENGINE\ScanRes.dll] [Computer Associates International, Inc., 6.0.312.0]
[PID: 676][C:\WINNT\system32\regsvc.exe] [Microsoft Corporation, 5.00.2195.6701]
[PID: 724][C:\WINNT\system32\MSTask.exe] [Microsoft Corporation, 4.71.2195.6704]
[PID: 796][C:\WINNT\System32\WBEM\WinMgmt.exe] [Microsoft Corporation, 1.50.1085.0100]
[PID: 856][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 1132][C:\WINNT\System32\hkcmd.exe] [Intel Corporation, 3,0,0,1517]
[C:\WINNT\System32\hccutils.DLL] [Intel Corporation, 3,0,0,1517]
[C:\WINNT\System32\igfxdev.dll] [Intel Corporation, 3,0,0,1517]
[C:\WINNT\System32\igfxsrvc.dll] [Intel Corporation, 3,0,0,1517]
[C:\WINNT\System32\igfxhk.dll] [Intel Corporation, 3,0,0,1517]
[C:\WINNT\System32\igfxres.dll] [Intel Corporation, 3,0,0,1517]

hthczz - 2006-12-20 16:20:00

[PID: 1208][C:\WINNT\SOUNDMAN.EXE] [Avance Logic, Inc., 5.0]
[PID: 1212][C:\PROGRA~1\CA-JIN~1\KILL\realmon.exe] [Computer Associates International, Inc., 6.0.312.0]
[C:\PROGRA~1\CA-JIN~1\KILL\InConfig.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\PROGRA~1\CA-JIN~1\KILL\INOCORE.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\PROGRA~1\CA-JIN~1\KILL\InoOEM.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\PROGRA~1\CA-JIN~1\KILL\InDrvCfg.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA\Common\ScanEngine\DistCfg.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\PROGRA~1\CA-JIN~1\KILL\LANG\KILL\Realmonres.dll] [冠群金辰, 6.0.200.0]
[C:\PROGRA~1\CA-JIN~1\KILL\secAPI.dll] [Computer Associates International, Inc., 6.0.312.0]
[PID: 708][C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe] [Anti-Malware Development a.s., 7, 5, 0, 50]
[C:\Program Files\AVG Anti-Spyware 7.5\engine.dll] [Anti-Malware Development a.s., 4, 2, 0, 15]
[C:\WINNT\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[PID: 1236][C:\WINNT\system32\internat.exe] [Microsoft Corporation, 5.00.2920.0000]
[PID: 980][C:\WINNT\explorer.exe] [Microsoft Corporation, 5.00.3700.6690]
[C:\WINNT\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] [Autodesk, 16.0.0.86]
[C:\Program Files\AVG Anti-Spyware 7.5\shellexecutehook.dll] [Anti-Malware Development a.s., 7, 5, 0, 47]
[C:\WINNT\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[C:\WINNT\System32\hccutils.DLL] [Intel Corporation, 3,0,0,1517]
[C:\WINNT\system32\igfxres.dll] [Intel Corporation, 3,0,0,1517]
[C:\WINNT\System32\igfxsrvc.dll] [Intel Corporation, 3,0,0,1517]
[C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300]
[C:\WINNT\System32\igfxpph.dll] [Intel Corporation, 3,0,0,1517]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[C:\Program Files\CA-Jinchen\KILL\InoShell.dll] [Computer Associates International, Inc., 6.0.312.0]
[C:\Program Files\CA-Jinchen\KILL\LANG\KILL\iShellres.dll] [冠群金辰, 6.0.200.0]
[C:\Program Files\AVG Anti-Spyware 7.5\context.dll] [Anti-Malware Development a.s., 7, 5, 0, 49]
[C:\WINNT\System32\igfxdev.dll] [Intel Corporation, 3,0,0,1517]
[PID: 1264][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3208]
[C:\WINNT\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[PID: 260][C:\Program Files\FireWall\PFW.exe] [广州众达天网技术有限公司, 2.7.6.1005]
[C:\Program Files\FireWall\skymisc.dll] [N/A, N/A]
[PID: 1444][C:\WINNT\System32\ups.exe] [Microsoft Corporation, 5.00.2158.1]
[PID: 1032][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2600.0000]
[C:\WINNT\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.1.2003110300]
[PID: 1164][C:\Program Files\Microsoft Office\Office\WINWORD.EXE] [Microsoft Corporation, 9.0.2823]
[C:\WINNT\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\SDNT5UI.DLL] [Zenographics, Inc., 5.50.1811.0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\SDDM32.DLL] [Zenographics, Inc., 5, 52, 1023, 0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\ZSPOOL.dll] [Zenographics, Inc., 5, 51, 709, 0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\ZGDI32.dll] [Zenographics, Inc., 5, 51, 628, 0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\ZTAG32.dll] [Zenographics, Inc., 5, 50, 1725, 0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\SDDMUI.DLL] [Zenographics, Inc., 5, 51, 701, 0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\ZLANG.dll] [Zenographics, Inc., 1, 2, 104, 0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\SR32.dll] [Zenographics, Inc., 5, 52, 1031, 0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\IMFNT5.DLL] [Zenographics, Inc., 5.51.1031.0]
[C:\WINNT\system32\spool\DRIVERS\W32X86\3\Imf32.dll] [Zenographics, Inc., 5, 51, 405, 0]
[PID: 1476][C:\Documents and Settings\xjq\桌面\新建文件夹\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\WINNT\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR Error. [AutoCADScriptFile]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS Error. [C:\WINNT\system32\WScript.exe "%1" %*]
.JS Error. [C:\WINNT\system32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost

==================================

hthczz - 2006-12-20 16:23:00

我用杀毒软件扫描，找到病毒没名字，感染文件无法修复，被重命名。我把C盘重新安装系统了，但是其他盘还是继续找到病毒。
而且实时监控不时也弹出病毒。
无奈上来请高手检查，并看在解决~谢谢了。

hthczz - 2006-12-20 16:37:00

不能沉，等解决了再沉，我顶起｀～

hthczz - 2006-12-20 16:51:00

再顶，不解决坚决不能沉

hthczz - 2006-12-20 17:00:00

起来，不沉下帖子
把我的问题解决

hthczz - 2006-12-20 17:18:00

下去咯~下去咯
再顶

hthczz - 2006-12-21 8:48:00

摆了1天了，都没人帮帮我吗？？

hthczz - 2006-12-21 9:35:00

我提的问题有这么难吗？？
没人懂？？

鸟儿天上飞 - 2006-12-21 9:44:00

我什么都,没看出来不好意思

hthczz - 2006-12-21 9:48:00

怎么老弹出病毒，全是acad/bursted.a
我都要疯了
杀毒软件查不出来，用起就会弹病毒。

hthczz - 2006-12-21 10:57:00

病毒感染文件的名字是acad.lsp.0.avb
病毒的名字是acad.bursted.a

高手们，蛊毒兄弟，怎么解决啊~~~救命啊`~

hthczz - 2006-12-21 11:38:00

又下去了，上去呀
找人解决哦

hthczz - 2006-12-21 13:12:00

顶

hthczz - 2006-12-22 9:13:00

没人会解决`？

安全防卫 - 2006-12-22 9:58:00

开始菜单－搜索－acad.lsp 硬盘所有的位置
找到后全部删掉即可。(2005-11-17)
看看这办法行不

安全防卫 - 2006-12-22 10:03:00

专杀工具 >>>AutoCAD病毒专杀工具http://www.earch.cn/net/Soft/HTML/21.html
再下载这专杀工具查杀

瑞星卡卡安全论坛