Logfile of HijackThis v1.99.1
Scan saved at 上午 18:26:32, on 2005-9-14
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
D:\WINDOWS\Explorer.EXE
D:\PROGRAM FILES\RISING\RAV\RavStub.exe
d:\program files\rising\rfw\rfwsrv.exe
D:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
D:\PROGRA~1\RISING\RAV\RAVMON.EXE
D:\Program Files\rising\Rfw\rfwmain.exe
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\WINDOWS\system32\ctfmon.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\system32\oodag.exe
D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\wscntfy.exe
F:\下载备份\奇迹外挂下载3.0\脱机版1.6.9\sgol.exe
F:\下载备份\奇迹外挂下载3.0\脱机版1.6.9\sgol.exe
D:\Program Files\Internet Explorer\iexplore.exe
F:\下载备份\金山病毒库下载\HijackThis.exe

O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - D:\WINDOWS\system32\xunleibho_v5.dll
O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - E:\工具\金山快译\IEBand.dll
O4 - HKLM\..\Run: [RavTimer] D:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] D:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKLM\..\Run: [RfwMain] "D:\Program Files\rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &使用迅雷下载 - D:\工具\讯雷\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\工具\讯雷\getAllurl.htm
O8 - Extra context menu item: 使用Kugoo下载 - E:\工具\酷狗\KugooDownX.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\工具\QQ2\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\工具\QQ2\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\工具\QQ2\SendMMS.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - E:\hxh\浩方对战平台\GameClient.exe
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1123784592562
O17 - HKLM\System\CCS\Services\Tcpip\..\{77FA9C5E-C59B-4165-8AB1-A443D47EA39D}: NameServer = 61.187.191.3 202.103.96.68
O20 - AppInit_DLLs: APIHookDll.dll
O23 - Service: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - D:\WINDOWS\G_Server2.0.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - D:\WINDOWS\system32\oodag.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - d:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe

Service: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - D:\WINDOWS\G_Server2.0.exe  这个是不是鸽子的~~~~

来看下 啊...

O23 - Service: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - D:\WINDOWS\G_Server2.0.exe
就是它了

【回复“sycc”的帖子】怎么杀?没G_Server2.0.dll

先把主文件删除，那些文件能找到就删

引用:

【天天泡泡的贴子】先把主文件删除，那些文件能找到就删 ...........................

删除了.注册表了的G_Server2.0.exe
有关系的都删除了.重启后没发现它了,是不是安全了呢?

病毒监控不再提示就不要管它了

引用:

【天天泡泡的贴子】病毒监控不再提示就不要管它了 ...........................

o  哦