瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 【求助】Win[数字].exe
Win数字点exe - 2007-1-4 19:17:00
高手看名字也知道了吧？就是这个玩意！！

【症状】： 瑞星老跳 是否允许执行 Win1.exe这个文件，开始我就拒绝啦！过一会又来【是否允许执行 Win2.exe这个文件】，再然后一直到【是否允许执行 Win9.exe这个文件】，更奇怪的是还有【是否允许执行 WinA.exe这个文件】之类的字幕数字结合的，位置都在C:\WINNT\Temp里面。瑞星杀毒又查不出来！

我知道高手都很拽，所以呢申明以下几点：
1.因为这个瑞星查不出来的毒系统已经做过N次了！
2.瑞星正版，及时更新的！
3.IE防漏墙也装了！
4.安全模式下也查了  无毒！

所以麻烦高手那些“安全模式杀毒”“正版瑞星”“安全模式下手动删除文件夹”“删除注册表**项”就不要回帖了，简直侮辱我的智商！
求助彻底的，便捷的解决方案！因为之前安全模式下手动删除文件及修改注册表的办法已经用过了，但无法最终解决！

水树雨下 - 2007-1-4 19:18:00
mizuki.ys168.com下载System Repair Engineer扫个日志上来，一次贴不完分段贴，不要修改
Win数字点exe - 2007-1-4 20:11:00
[CODE]

2007-01-04,19:50:13

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <internat.exe><internat.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
    <runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <twin><C:\WINDOWS\system32\twunk32.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]

==================================
启动文件夹
N/A

==================================
服务
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Rising Proxy  Service / RfwProxySrv][Stopped/Manual Start]
  <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
Win数字点exe - 2007-1-4 20:11:00
==================================
驱动程序
[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
  <system32\drivers\ac97intc.sys><Intel Corporation>
[AMD K8 Processor Driver / AmdK8][Stopped/Manual Start]
  <System32\DRIVERS\amdk8.sys><Advanced Micro Devices>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[ExpScaner / ExpScaner][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[HookCont / HookCont][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[HookUrl / HookUrl][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[Kingsun KS-959 USB Infrared Adapter / KS-959][Stopped/Manual Start]
  <system32\DRIVERS\KS-959.sys><Kingsun Corporation>
[MEMSCAN / MEMSCAN][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mProcRs / mProcRs][Running/Auto Start]
  <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\D:\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsFwDrv / RsFwDrv][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising>
[Realtek 10/100/1000 NIC Family all in one NDIS XP Driver / RTL8023xp][Running/Manual Start]
  <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[Synaptics TouchPad Driver / SynTP][Running/Manual Start]
  <system32\DRIVERS\SynTP.sys><Synaptics, Inc.>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Tencent\QQ\QQ.EXE, TENCENT>
[Tencent Safety Online Base Module]
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\DOWNLO~1\TSOBase.ocx, Tencent Corporation>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
[Tencent Safety Online Base Module]
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\DOWNLO~1\TSOBase.ocx, Tencent Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[XML DOM Document]
  {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[上传到QQ网络硬盘]
  <D:\Tencent\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <D:\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\Tencent\QQ\SendMMS.htm, N/A>
Win数字点exe - 2007-1-4 20:12:00
==================================
正在运行的进程
[PID: 468][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 536][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 560][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 604][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 616][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 772][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 836][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 920][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 948][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1020][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1112][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1136][C:\Program Files\Rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\rfwctrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RsPPsys.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\Rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\psapi.dll]  [Microsoft Corporation, 4.00]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
    [C:\Program Files\Rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\Rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [C:\Program Files\Rising\Rav\HookCont.dll]  [Rising, 19, 0, 0, 0]
    [C:\Program Files\Rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
    [C:\Program Files\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [C:\Program Files\Rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15]
    [C:\Program Files\Rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 32]
    [C:\Program Files\Rising\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 23]
    [C:\Program Files\Rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [C:\Program Files\Rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
    [C:\Program Files\Rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\Unpacker.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17]
    [C:\Program Files\Rising\Rav\ScanPack.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18]
    [C:\Program Files\Rising\Rav\RsVM.dll]  [N/A, 19, 0, 0, 13]
    [C:\Program Files\Rising\Rav\Uroutine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [C:\Program Files\Rising\Rav\Uscript.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17]
[PID: 1172][c:\program files\rising\rfw\rfwsrv.exe]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 30]
    [c:\program files\rising\rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 3]
    [c:\program files\rising\rfw\rfwlog.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 2]
    [c:\program files\rising\rfw\Rfwdrv.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 9]
    [c:\program files\rising\rfw\psapi.dll]  [Microsoft Corporation, 4.00]
    [c:\program files\rising\rfw\MonDrv.dll]  [rs, 1, 0, 0, 4]
    [c:\program files\rising\rfw\ProcLib.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 5]
    [c:\program files\rising\rfw\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[PID: 1356][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\sfc_os.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1440][C:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 1684][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.8198]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 1980][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1388][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
    [C:\WINDOWS\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.8198]
    [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.8198]
    [C:\WINDOWS\system32\nvshell.dll]  [N/A, N/A]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [D:\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
    [D:\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 1632][c:\program files\rising\rfw\RfwMain.exe]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 56]
    [c:\program files\rising\rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28]
    [c:\program files\rising\rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [c:\program files\rising\rfw\RfwCtrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [c:\program files\rising\rfw\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [c:\program files\rising\rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\WINDOWS\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 1888][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 172][C:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
Win数字点exe - 2007-1-4 20:13:00
==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost
0.0.0.0 WWW.3839.COM
0.0.0.0 www.677977.com
0.0.0.0 www.wu123.com
0.0.0.0 www.flysky168.com
0.0.0.0 www.my123.com
0.0.0.0 my123.com
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
Win数字点exe - 2007-1-4 20:15:00

0.0.0.0 www.5115.com
0.0.0.0 www.mysee.com
0.0.0.0 netgoo.com
0.0.0.0 ad.duole8.com
0.0.0.0 www.jqba.com
0.0.0.0 bars.duole8.com
0.0.0.0 www.k662.com
0.0.0.0 www.qddown.com
0.0.0.0 www.bypk.com
0.0.0.0 soxun.com
0.0.0.0 www.baidu345.com
0.0.0.0 www.dyzhan.com
0.0.0.0 www.agoga.com
0.0.0.0 www.31tg.com
0.0.0.0 www.kunbang.net
0.0.0.0 www.263dvd.com
0.0.0.0 www.ycdy.com
0.0.0.0 www.haokan123.com
0.0.0.0 www.3glele.com
0.0.0.0 club.sinsoo.com
0.0.0.0 www.cn3222.cn
0.0.0.0 www.300yy.com
0.0.0.0 www.500v.com
0.0.0.0 www.1000n.com
0.0.0.0 www.4c44.com
0.0.0.0 www.t2ns.com
0.0.0.0 www.mtv888.com
0.0.0.0 www.kan4.com
0.0.0.0 www.diyitian.com
0.0.0.0 www.8757.com
0.0.0.0 www.71791.com
0.0.0.0 www.outout.cn
0.0.0.0 da.pvka.com
0.0.0.0 www.7y8.com
0.0.0.0 www.firstdo.com
0.0.0.0 www.ac66.cn
0.0.0.0 www.d9j.com
0.0.0.0 www.qq923.com
0.0.0.0 www.kun163.com
0.0.0.0 7b.com.cn
0.0.0.0 www.7b.com.cn
0.0.0.0 www.wealink.com
0.0.0.0 www.duduw.com
0.0.0.0 ww.855.com
0.0.0.0 www.jsfv.com
0.0.0.0 www.71791.com
0.0.0.0 www.21xh.com
0.0.0.0 www.4c44.com
0.0.0.0 www.51viva.com
0.0.0.0 www.zhicheng.com
0.0.0.0 www.tm286.com
0.0.0.0 www.365tan.com
0.0.0.0 www.bbmao.com
0.0.0.0 www.ycdy.com
0.0.0.0 www.8s9s.com
0.0.0.0 www.k662.com
0.0.0.0 www.1000wsf.com
0.0.0.0 www.800vv.com
0.0.0.0 tan.37wg.com
0.0.0.0 ent.youxi123.net
0.0.0.0 www.nb46.com
0.0.0.0 www.qu123.com
0.0.0.0 ww.k662.com
0.0.0.0 www.tejj.com
0.0.0.0 www.54886.com
0.0.0.0 www.kzxf.com
0.0.0.0 kzxf.com
0.0.0.0 www.8s9s.com
0.0.0.0 www.678t.com
0.0.0.0 kzxf.com
0.0.0.0 www.kzxf.com
0.0.0.0 www.qddown.com
0.0.0.0 www.ali666.com
0.0.0.0 www.sjsoo.com
0.0.0.0 www.jsfv.com
0.0.0.0 www.666c.com
0.0.0.0 www.wwmmww.com
0.0.0.0 WWW.HN0735.CN
0.0.0.0 www.sexyes.cn
0.0.0.0 www.nanke-ele.com
0.0.0.0 www.maohehe.com
0.0.0.0 www.vivid.org.cn
0.0.0.0 www.chdr-ss.com
0.0.0.0 www.asp121.net
0.0.0.0 www.ting58.net
0.0.0.0 my.m369m.com
0.0.0.0  www.m369m.com
0.0.0.0 www.51.vc
0.0.0.0 www.17633.com
0.0.0.0 www.1000wsf.com
0.0.0.0 vod.mmdy.org
0.0.0.0 www.mmdy.org
0.0.0.0 www.9158.com
0.0.0.0 89200.cn
0.0.0.0 www.roogoo.com
0.0.0.0 www.91ni.com
0.0.0.0 www.dt800.com
0.0.0.0 www.gooyx.com
0.0.0.0 www.7322.com
0.0.0.0 www.daqimm.com
0.0.0.0 www.52bo.com
0.0.0.0 www.zbox.com.cn
0.0.0.0 www.yahooabc.net
0.0.0.0 www.120ask.com
0.0.0.0 www.firefox-box.com
0.0.0.0 downmm.net
0.0.0.0 lookmm.net
0.0.0.0 www.downmm.net
0.0.0.0 www.lookmm.net
0.0.0.0 sh.3309.com
Win数字点exe - 2007-1-4 20:16:00

0.0.0.0 www.3309.com
0.0.0.0 www.7yin.com
0.0.0.0 www.086wz.com
0.0.0.0 www.9istyle.com
0.0.0.0 www.vvget.net
0.0.0.0 www.wiki.cn
0.0.0.0 13373.com
0.0.0.0 www.13373.com
0.0.0.0 yaotan.cn
0.0.0.0 www.yaotan.cn
0.0.0.0 music.netxshell.com
0.0.0.0 booso.bokee.com
0.0.0.0 www.100e.com
0.0.0.0 www.ld123.com
0.0.0.0 www.9509.COM
0.0.0.0 www.1818soft.com
0.0.0.0 www.920pic.com
0.0.0.0 www.hahapic.net
0.0.0.0 www.17bn.com
0.0.0.0 www.hnvcd.com
0.0.0.0 www.208tv.com
0.0.0.0 www.208tv.com
0.0.0.0 www.globalecmarket.com
0.0.0.0 www.haohao1.com
0.0.0.0 www.5tianxia.com
0.0.0.0 www.yule21.com
0.0.0.0 www.hal8.com
0.0.0.0 www.2007mm.com
0.0.0.0 www.pk160.com
0.0.0.0 www.pengpeng.com
0.0.0.0 www.pk160.com
0.0.0.0 bbs.91kjbbs.com
0.0.0.0 www.ycboy.com
0.0.0.0 www.heho.cn
0.0.0.0 photo.yesmm.cn
0.0.0.0 group.pengpeng.com
0.0.0.0 www.ttmp3.com
0.0.0.0 www.7b.com.cn
0.0.0.0 www.borlander.cn
0.0.0.0 www.z8k8.com
0.0.0.0 u1.sky99.cn
0.0.0.0 u2.sky99.cn
0.0.0.0 u3.sky99.cn
0.0.0.0 u4.sky99.cn
0.0.0.0 u5.sky99.cn
0.0.0.0 u6.sky99.cn
0.0.0.0 www.sky99.cn
0.0.0.0 www.3tg.cn
0.0.0.0 sm.1sto.com
0.0.0.0 www.1sto.com
0.0.0.0 www.manzhai.com
0.0.0.0 www.293.cc
0.0.0.0 photo.pengpeng.com
0.0.0.0 www.jp.u88.cn
0.0.0.0 www.2007MM.com
0.0.0.0 free.bbvod.net
127.0.0.1 www.xowernum123.com
127.0.0.1 www.shebl.com
127.0.0.1 www.shebuluo.com
127.0.0.1 www.shebl.com.cn
127.0.0.1 www.shebuluo.com.cn
127.0.0.1 xowernum123.com
127.0.0.1 shebuluo.com.cn
127.0.0.1 shebl.com.cn
127.0.0.1 shebuluo.com
127.0.0.1 shebl.com
0.0.0.0 www.52521.com
0.0.0.0 www.91ni.com
0.0.0.0 vod.mmdy.org
0.0.0.0 www.meit.cn
0.0.0.0 www.365news.cn
0.0.0.0 movie.code1234.net
0.0.0.0 www.293.cc
0.0.0.0 www.677977.com
0.0.0.0 www.13511.com
0.0.0.0 kwww.com.cn
0.0.0.0  cj.sanjipian.net
0.0.0.0 www.s5s.org
0.0.0.0 www.7939.com
0.0.0.0 www.9991.com
0.0.0.0 a3.369ip.com
0.0.0.0 www.369ip.com
0.0.0.0 www.110box.com
0.0.0.0 u1.sky99.cn
0.0.0.0 www.sky99.cn
0.0.0.0 www.536536.com
0.0.0.0 www.666ddd.com
0.0.0.0 u.7town.com
0.0.0.0 www.7town.com
0.0.0.0 5.7v77.com
0.0.0.0 www.7v77.com
0.0.0.0 ent.youxi123.net
0.0.0.0 www.xoyo.com
0.0.0.0 www.7town.com
0.0.0.0 www.7v77.com
0.0.0.0 www.youxi123.net
0.0.0.0 u.sh.xoyo.com
0.0.0.0 www.xingkongitv.com
0.0.0.0 www.downmm.net
0.0.0.0 www.7255.com
0.0.0.0 www.dcom.cn
0.0.0.0 www.37021.net
0.0.0.0 www.dj916.com
0.0.0.0 www.96vod.com
0.0.0.0 www.9505.com
0.0.0.0 www.536536.com
0.0.0.0 www.sowdo.com
0.0.0.0 www.2v20.com
0.0.0.0 www.4199.com
0.0.0.0 www.4199.net
0.0.0.0 dm91.fx120.net
0.0.0.0 www.fx120.net
0.0.0.0 www.7393.com
0.0.0.0 www.netpool.com.cn
0.0.0.0 www.s0575.net
0.0.0.0 www.2v22.com
0.0.0.0 www.4199.com
0.0.0.0 www.is88.cn
0.0.0.0 is88.cn
0.0.0.0 www.yahooabc.net
0.0.0.0 www.motamimi.com
0.0.0.0 movie.code1234.net
0.0.0.0 139.com/learn.html?cid=406
Win数字点exe - 2007-1-4 20:16:00

0.0.0.0 www.rr88.cn
0.0.0.0 www.58games.com
0.0.0.0 piaoxue.com
0.0.0.0 an85.com
0.0.0.0 www.9istyle.com
0.0.0.0 www.meizi7472831.com
0.0.0.0 vod.mmdy.org
0.0.0.0 toolbar.eqiso.com
0.0.0.0 www.23xl.com
0.0.0.0 www.jjjppp.com
0.0.0.0 www.shopsoo.com
0.0.0.0 www.henku.com
0.0.0.0 www.333du.cn
0.0.0.0 www.globalecmarket.com
0.0.0.0 www.sqqd.com
0.0.0.0 00.0bid.com
0.0.0.0 00mm.0033.cn
0.0.0.0 07007.com
0.0.0.0 0ml.net
0.0.0.0 1.qq1234.cn
0.0.0.0 100.332233.com
0.0.0.0 12388.hk
0.0.0.0 12cha.com
0.0.0.0 13258.com
0.0.0.0 139mm.info
0.0.0.0 163.qq263
0.0.0.0 163.qq263qq.com
0.0.0.0 16888.6to23.com
0.0.0.0 168wz.net
0.0.0.0 17126.com
0.0.0.0 17777.com
0.0.0.0 18ol.21vod.cn
0.0.0.0 194.237.110.186
0.0.0.0 19ku.com
0.0.0.0 204.177.92.68
0.0.0.0 258.com
0.0.0.0 263movie.com
0.0.0.0 265.com
0.0.0.0 30686.com
0.0.0.0 3155.cn
0.0.0.0 338.3126.com
0.0.0.0 353.22.cn
0.0.0.0 361du.01.bizsn.com
0.0.0.0 393.com
0.0.0.0 3cctv.com
0.0.0.0 4OO.net
0.0.0.0 51115.com
0.0.0.0 516.com
0.0.0.0 51888.com
0.0.0.0 51sobu.com
0.0.0.0 52007.com
0.0.0.0 540.filost.com
0.0.0.0 5533.com.cn
0.0.0.0 5585.****cn
0.0.0.0 585.com
0.0.0.0 68086.com
0.0.0.0 68899.com
0.0.0.0 68biz.cn
0.0.0.0 758.jss.cn
0.0.0.0 777.sexfiles.nu
0.0.0.0 77wo.com
0.0.0.0 78900.com
0.0.0.0 855.com
0.0.0.0 888.89178.com
0.0.0.0 *******com
0.0.0.0 888woool.com
0.0.0.0 8qi.net
0.0.0.0 98so.com
0.0.0.0 991b.511go.com
0.0.0.0 www.9991.com
0.0.0.0 9991.com
0.0.0.0 99cu.com
0.0.0.0 99love.cn
0.0.0.0 9see.com
0.0.0.0 Oml.net
0.0.0.0 Ssearch.biz
0.0.0.0 SwipeSpy.com
0.0.0.0 WWW.FA899.COM
0.0.0.0 Www.ok149.Com
0.0.0.0 a-search.biz
0.0.0.0 ad.100
0.0.0.0 ad.99cu.com
0.0.0.0 ad.bokee.com
0.0.0.0 ad.info
0.0.0.0 ad.t2t2.com
0.0.0.0 ad.tom.com
0.0.0.0 ad2.99cu.com
0.0.0.0 adfarm.mediaplex.com
0.0.0.0 ads.yy240.com
0.0.0.0 ads1.revenue.net
0.0.0.0 adultfriendfinder.com
0.0.0.0 adv.bibikan.cn
0.0.0.0 adv.pconline.com.cn
0.0.0.0 aliao.com
0.0.0.0 ally.263.net
0.0.0.0 app.smartdove.com
0.0.0.0 asiafriendfinder.com
0.0.0.0 au.9you.com
0.0.0.0 auto.search.msn.com
0.0.0.0 av.9xi.cn
0.0.0.0 baby.aoe88.com
0.0.0.0 bar.souhuu.com
0.0.0.0 bbs2.mofcom.gov.cn
0.0.0.0 bestscene.net
0.0.0.0 beyond.521cn.com
0.0.0.0 biz4.sandai.net
0.0.0.0 bj.u4123.com
0.0.0.0 cdn2.cnnic.cn
0.0.0.0 chat.51liao.net
0.0.0.0 chat.9see.com
0.0.0.0 chinabdkx.363.net
0.0.0.0 chinav32.51.net
0.0.0.0 chow.yesky.net
0.0.0.0 club.51.net
0.0.0.0 club.henbang.net
0.0.0.0 club.homeway.com.cn
0.0.0.0 cn.yimg.com
0.0.0.0 cn.zs.yahoo.com
0.0.0.0 cn1.ijcool.com
0.0.0.0 cncmax.tg.cn
0.0.0.0 cnsmin.3721.com
0.0.0.0 code.dudusms.com
0.0.0.0 cool.vv66.com
0.0.0.0 coolsite21.com
0.0.0.0 count1.99count.com
0.0.0.0 count1.zhao123.com
0.0.0.0 count10.zhaocount.com
0.0.0.0 count11.zhaocount.com
0.0.0.0 count2.zhao123.com
0.0.0.0 count3.zhao123.com
0.0.0.0 count4.zhaocount.com
0.0.0.0 count5.zhaocount.com
0.0.0.0 count6.zhaocount.com
0.0.0.0 count7.zhaocount.com
0.0.0.0 count8.zhaocount.com
0.0.0.0 count9.zhaocount.com
0.0.0.0 crob.net
0.0.0.0 cwshredder.net
0.0.0.0 cy.51sobu.com
0.0.0.0 daosearch.com
0.0.0.0 ddd.dudu.com
0.0.0.0 df.ro2cn.com
0.0.0.0 download.51888.com
0.0.0.0 duoduo.duode.cn
0.0.0.0 dvd.qq92.com
0.0.0.0 dvd.sg51.com
0.0.0.0 dy007.cn
0.0.0.0 e.x365.cn
0.0.0.0 empnads.com
0.0.0.0 et138.com
0.0.0.0 f.keyrun.com
0.0.0.0 fadama.com
0.0.0.0 feiying.coolwww.net
0.0.0.0 film.yun8.com
0.0.0.0 getmdan.51.net
0.0.0.0 gg7777.com
0.0.0.0 girlchinese.com
0.0.0.0 girlchinese.comie
0.0.0.0 go.8848.com
0.0.0.0 gsm.cnoicq.net
0.0.0.0 ha45.com
0.0.0.0 haoliao.com
Win数字点exe - 2007-1-4 20:17:00

0.0.0.0 hk582.com
0.0.0.0 hk582.coms
0.0.0.0 hkdown.net
0.0.0.0 home.deds.n
.0.0.0 homepage.so8.com
0.0.0.0 xysearch.biz
0.0.0.0 hualiao.net
0.0.0.0 iebar.t2t2.com
0.0.0.0 image.sms265.com
0.0.0.0 info.91bbb.com
0.0.0.0 jjkafei.longcity.net
0.0.0.0 jjol.cn
0.0.0.0 joke.bbs.net
0.0.0.0 jx.xoyo.com
0.0.0.0 kan3721.com
0.0.0.0 kb.winfixer.com
0.0.0.0 kk357.com
0.0.0.0 kuho.mop.com
0.0.0.0 liaoliao.com
0.0.0.0 link.fan8.net
0.0.0.0 love.movcd.com
0.0.0.0 loveliao.com
0.0.0.0 loveliao.net
0.0.0.0 lsxzb.batcave.net
0.0.0.0 lt.shcode.com
0.0.0.0 luosoft.com
0.0.0.0 m.com.tv
0.0.0.0 manage.link8.com
0.0.0.0 meim.y365.com
0.0.0.0 mm.227.cn
0.0.0.0 mm5i.com
0.0.0.0 mmliao.com
0.0.0.0 mmpic.uni.cc
0.0.0.0 mms.aogo.net
0.0.0.0 mms.kongzhong.com
0.0.0.0 mms.mocoo.com
0.0.0.0 mms.t2t2.com
0.0.0.0 mms.tcjp2.com
0.0.0.0 mms.tjcp2.com
0.0.0.0 mms.tjcq2.com
0.0.0.0 mms.tjcqi.com
0.0.0.0 mms1.18dx.com/
0.0.0.0 mms4.caiku.com
0.0.0.0 mobile.hawa.cn
0.0.0.0 movie-down.com
0.0.0.0 movie.66dd.net
0.0.0.0 movie.sx.zj.cn
0.0.0.0 movie1.66dd.net
0.0.0.0 mp3.zhongsou.com
0.0.0.0 music.feifa.com
0.0.0.0 music.v111.com
0.0.0.0 music925.com
0.0.0.0 mysms.xgcn.com
0.0.0.0 neatreg.com
0.0.0.0 net888.89178.com
0.0.0.0 newyouth.3322.net
0.0.0.0 o2jam.9you.com
0.0.0.0 oicq.hk.st
0.0.0.0 op99.com
0.0.0.0 open.wz101.com
0.0.0.0 p.51ads.com
0.0.0.0 page-not-found.net
0.0.0.0 party.sdo.com
0.0.0.0 passion.com
0.0.0.0 paypopup.com
0.0.0.0 pfw.sky.net.cn
0.0.0.0 pig.zhongsou.com
0.0.0.0 play.joyiex.com
0.0.0.0 pollen.my001.net
0.0.0.0 popad.koboo.com
0.0.0.0 popad.qq.com
0.0.0.0 popme.163.com
0.0.0.0 popospider.51.net
0.0.0.0 pp.t2cn.com
0.0.0.0 qichun.6to23.com
0.0.0.0 qm.8ok.com
0.0.0.0 qq.rsb.cn
0.0.0.0 qq1234.cn
0.0.0.0 qq230.com
0.0.0.0 qq530.com
0.0.0.0 qq55.588.net
0.0.0.0 qq92.com
0.0.0.0 qqmusic.qq.com
0.0.0.0 reg.sdo.com
0.0.0.0 resource.stockstar.com
0.0.0.0 rich.sdo.com
0.0.0.0 rl.webtracer.cc
0.0.0.0 sba.3322.net
0.0.0.0 sdik.8ok.net
0.0.0.0 sdo.sdo.com
0.0.0.0 search.taobao.com
0.0.0.0 searchweb2.com
0.0.0.0 see3see.net
0.0.0.0 serv.sexushost.com
0.0.0.0 sex.92l.com
0.0.0.0 sg51.com
0.0.0.0 sms520.com
0.0.0.0 software-dl.real.com
0.0.0.0 sogua.com
0.0.0.0 solo99.com
0.0.0.0 stat.t2t2.com
0.0.0.0 stat.textclick.com
0.0.0.0 sunwukong.cn
0.0.0.0 sweetbox.anyp.cn
0.0.0.0 sxzb.batcave.net
0.0.0.0 talk.imu.com.cn
0.0.0.0 terra.es
0.0.0.0 test.vv520.info
0.0.0.0 tf999.com
0.0.0.0 tiankong.net
0.0.0.0 tinypic.com
0.0.0.0 tj.biz178.com
0.0.0.0 tj1.mytongji.com
0.0.0.0 tj4.7789.com
0.0.0.0 tj5.7789.com
0.0.0.0 tj6.7789.com
0.0.0.0 tj7.7789.com
0.0.0.0 tl.a8.com
0.0.0.0 tl.bestlm.net
0.0.0.0 tm286.com
0.0.0.0 tool.ikaka.com
0.0.0.0 toolbar.yisou.com
0.0.0.0 topxxx.sexushost.com
0.0.0.0 traffic.waypoint cash.com
0.0.0.0 tty.yyun.net
0.0.0.0 tv.180solutions.com
0.0.0.0 tv.megajoy.com
0.0.0.0 u.7b.com.cn
0.0.0.0 u.t2cn.com
0.0.0.0 uc999.com
0.0.0.0 uni--search.com
0.0.0.0 union.textclick.com
0.0.0.0 union1.textclick.com
0.0.0.0 update.myxq.com
0.0.0.0 v.jsdownload.com
0.0.0.0 v.textclick.com
0.0.0.0 vcd.one111.com
0.0.0.0 vchat.xaonline.com
0.0.0.0 vip.51lele.info
0.0.0.0 vip.*****com
0.0.0.0 vip2.activeclub.net
0.0.0.0 vod.19hi.com
0.0.0.0 vod.cqupt.edu.cn
0.0.0.0 vod.czinfo.net
0.0.0.0 vod.et138.com
0.0.0.0 vod.hengshui.com
0.0.0.0 vod.hy265.com
0.0.0.0 vod.soucn.com
0.0.0.0 vod.soucn.net
0.0.0.0 vod.xp99.net
0.0.0.0 vs.6h.com.cn
0.0.0.0 wap.koboo.com
0.0.0.0 web.9983.com
0.0.0.0 web.aogo.net
0.0.0.0 webspacecn.com
0.0.0.0 ww.k8k8.com
0.0.0.0 www,yyyvvv.com
0.0.0.0 www.001x.com
0.0.0.0 www.00855.com
0.0.0.0 www.02tk.com
0.0.0.0 www.037.net
0.0.0.0 www.0xing.com
0.0.0.0 www.112288.net
0.0.0.0 www.114.com.cn
0.0.0.0 www.11468.com
0.0.0.0 www.11670.com
0.0.0.0 www.12388.HK.com
0.0.0.0 www.12388.com
0.0.0.0 www.12388.hk
0.0.0.0 www.12822.com
0.0.0.0 www.12zhao.com
0.0.0.0 www.139cn.com
0.0.0.0 www.139love.com
0.0.0.0 www.1432.net
0.0.0.0 www.15rc.com
0.0.0.0 www.1613.cn
0.0.0.0 www.1633.cn
0.0.0.0 www.1633.com
0.0.0.0 www.163[1].com
0.0.0.0 www.163mm.com
0.0.0.0 www.165z.com
0.0.0.0 www.16yi.com
0.0.0.0 www.17173.com
0.0.0.0 www.1777.com
0.0.0.0 www.17777.com
0.0.0.0 www.17ad.com
0.0.0.0 www.17lele.com
0.0.0.0 www.17rm.com
0.0.0.0 www.17vr.com
0.0.0.0 www.18-girl.net
0.0.0.0 www.180searchAssistant.com
0.0.0.0 www.18dy.com
0.0.0.0 www.18hi.com
0.0.0.0 www.18hi.net
0.0.0.0 www.18it.com
0.0.0.0 www.18too.com
0.0.0.0 www.19ku.com
0.0.0.0 www.1ya.cn
0.0.0.0 www.1yin.net
0.0.0.0 www.20dy.com
0.0.0.0 www.20girl.com
0.0.0.0 www.214dy.com
0.0.0.0 www.21stock.cn
0.0.0.0 www.21vod.cn
0.0.0.0 www.225.com.cn
0.0.0.0 www.23051.com
0.0.0.0 www.26-3.com
0.0.0.0 www.2637.com
0.0.0.0 www.265z.com
0.0.0.0 www.26yy.com
0.0.0.0 www.30099.com
0.0.0.0 www.3155.cn
0.0.0.0 www.331122.com
0.0.0.0 www.333tu.com
0.0.0.0 www.3399.net
0.0.0.0 www.34158.com
0.0.0.0 www.34345.com
0.0.0.0 www.3456788.com
0.0.0.0 www.35938.com
0.0.0.0 www.360so.com
0.0.0.0 www.363618.com
0.0.0.0 www.365key.com
0.0.0.0 www.37021.com
0.0.0.0 www.3721.com.cn
0.0.0.0 www.37210.com
0.0.0.0 www.3721lhc.com
0.0.0.0 www.3721see.com
0.0.0.0 www.3721zs.com
0.0.0.0 www.37c.com.cn
0.0.0.0 www.38738.com
0.0.0.0 www.38k38.com
0.0.0.0 www.3cctv.com
0.0.0.0 www.3tom.com
0.0.0.0 www.3xcn.com
0.0.0.0 www.432.cn
0.0.0.0 www.435000.com
0.0.0.0 www.4427.net
0.0.0.0 www.44766.cn
0.0.0.0 www.44766.com
0.0.0.0 www.44766.net
0.0.0.0 www.47555.net
0.0.0.0 www.48848.com
0.0.0.0 www.500.com
0.0.0.0 www.50356.com.cn
0.0.0.0 www.50365.com
0.0.0.0 www.51115.com
0.0.0.0 www.511ring.com
0.0.0.0 www.51****com
0.0.0.0 www.517tg.com
0.0.0.0 www.51888.com
0.0.0.0 www.51ads.com
0.0.0.0 www.51bug.com
0.0.0.0 www.51dd.com
0.0.0.0 www.51liao.net
0.0.0.0 www.51link.com
0.0.0.0 www.520.com
0.0.0.0 www.52935.com
0.0.0.0 www.52kuku.com
0.0.0.0 www.5359.com
0.0.0.0 www.5359.net
0.0.0.0 www.53900.com
0.0.0.0 www.53best.com
0.0.0.0 www.5522.com
0.0.0.0 www.5533.com
0.0.0.0 www.5533.com.cn
0.0.0.0 www.555666.net
烧香的熊猫 - 2007-1-4 20:18:00
========Content========
<twin><C:\WINDOWS\system32\twunk32.exe> [N/A]
看这个http://forum.ikaka.com/topic.asp?board=28&artid=8237996
清理HOSTS 文件
Win数字点exe - 2007-1-4 20:22:00
填的我累的晕哦~~~~

幸亏你及时消息了！
Win数字点exe - 2007-1-4 20:25:00
我之前做过的  但是没两天又出来了

是我上了不该上的网站么?我的监控很齐全啊！
我郁闷急啦 - 2007-1-5 14:46:00
怎么这个病毒就这么难解决吗，重做系统都不好使
yqlikaka - 2007-1-5 14:48:00
是啊，我的也中了，从装都不行，现在很流行了啊这个
我郁闷急啦 - 2007-1-5 15:24:00
系统自动启动此木马Win.exe

并以Win1.exe, Win2.exe,....一直启动到Win(X未知数).exe.

通过不断的复制程序, 来占用内存, 造成死机.

查看进程下全是

多个 IEXPLORE.EXE 和多个 SVCHOST.EXE

不要说“重启按F8进入安全模式，用××杀毒软件杀一遍” （因为我用了10多个杀马或杀毒软件—无效）

或者是重装系统这些都没有任何意义，木马决不只在C盘下。 555
1
查看完整版本: 【求助】Win[数字].exe
© 2000 - 2026 Rising Corp. Ltd.