瑞星卡卡安全论坛

电脑中病毒了########
rundll32.exe 遇到问题需要关闭。我们对此引起的不便表示抱歉。}


附件: 9712302007111195355.txt

版主帮忙看看吧#####

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <PictureShow><"d:\program files\PictureShow\poco_tools.exe" -p PictureShow>  []
    <PICer><"d:\program files\PICer\poco_tools.exe" -p PICer>  []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <switch><c:\windows\system32\壁纸自动换.exe>  []
   
    <SoundMan><SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <yok.exe><C:\Program Files\yok\yok.exe>  [YOK.Com]
    <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  []
   
    <IdnSvr><C:\Program Files\OCINS\idnsvr.exe>  [(Verified)China Internet Network Information Center]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <tahlq1a><rundll32 "C:\WINDOWS\Downlo~1\tahlq1a.dll",Run>  [Microsoft Corporation]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{6D47B341-43DF-4563-753F-345FFA3157D6}><C:\WINDOWS\system32\kvmxfma.dll>  []
    <{F2CEA371-1442-4F42-900F-97C479F406DB}><C:\WINDOWS\system32\hythsx.dll>  []
    <{25799B4A-E35A-4A34-BFE5-07C0784C37C7}><C:\Program Files\Internet Explorer\PLUGINS\WinSys8x.Sys>  []
    <{3598FF45-DA60-F48A-BC43-10AC47853D53}><C:\WINDOWS\system32\rarjcpi.dll>  []
    <{5859245F-345D-BC13-AC4F-145D47DA34F5}><C:\WINDOWS\system32\avzxemn.dll>  []
    <{8DFA2904-9664-43AE-8929-4347554D24B6}><C:\WINDOWS\system32\csavpw0.dll>  []

[DNS Service / DNService][Running/Auto Start]
  <C:\WINDOWS\inf\MsnSvc64.exe><N/A>

[Internet Statistics / Internet Statistics][Stopped/Auto Start]
  <"C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mszstb.dll", Run><Microsoft Corporation>
[ms_2fax / ms_2fax][Running/Auto Start]
  <C:\WINDOWS\system32\1af51.exe><Microsoft Corporation>

[Windows psut RunThem / psut][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\knpo\uxzy.dll><>
[System Event loader / sysloader][Stopped/Auto Start]
  <"C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\sysloader.exe"><Microsoft>
[一起来音乐助手 / Yiqilai][Stopped/Auto Start]
  <"C:\Program Files\Yiqilai\wmp\YiqilaiLyrics.exe"><Yiqilai>

[cnprov / cnprov][Running/Boot Start]
  <\SystemRoot\system32\drivers\cnprov.sys><中国互联网络信息中心(CNNIC)>
[idnaux / idnaux][Running/Auto Start]
  <system32\drivers\idnaux.sys><中国互联网络信息中心(CNNIC)>
[TYKeeper / TYKeeper][Running/Boot Start]
  <\SystemRoot\system32\drivers\TYKeeper.sys><YOK.Com>

建议安装正版杀毒软件，安装后升级到最新版本，安全模式下全盘杀！
正版杀毒软件下载：http://www.rising.com.cn/2008/release/index.htm

下载安装360清理流氓木马：
360下载：http://360safe.com/

引用:

【ADL的贴子】建议安装正版杀毒软件，安装后升级到最新版本，安全模式下全盘杀！ 正版杀毒软件下载： 下载安装360清理流氓木马： 360下载： ………………

直接说下正版瑞星不就行了