对计算机所知不多,上网就怕病毒,越怕病毒越多。
这两天电脑只要上网,即使没打开IE也会自动弹出一些英文广告,列出几个:
http://ads1.revenue.net/load/217764/25oct05.html?O_R_NUM=68848474&O_RANK=1&O_CREATIVE_ID=217764&O_PPLACEMENT_ID=1&O_SITE_ID=13963&;
http://media.top-banners.com/advertpro/servlet/view/dynamic/html/campaign?cid=55&pid=0;
http://ads.z-quest.com/BudsPops.html;http://www.allthatsearch.com/partner/10102/showitN.php。
用瑞星2006查毒(正版),没有发现病毒;
用瑞星卡卡助手修复IE,问题照旧;
用Spybot - Search & Destroy查,修复所以查到的选项,问题依然没有解决;
禁用Messenger服务也不管用;
用hijackthis扫描系统,日志如下:
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
E:\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
E:\Rising\Rav\Ravmond.exe
E:\Rising\Rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
E:\Rising\Rfw\RfwMain.exe
E:\Rising\Rav\RavStub.exe
E:\Rising\Rav\RavTask.exe
C:\WINDOWS\System32\ctfmon.exe
E:\Rising\Rav\Ravmon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [RfwMain] "E:\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [RavTask] "E:\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - E:\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\QQ\SendMMS.htm
O9 - Extra button: 新浪UC - {2253922F-1B26-4C74-8B57-E3AEE748DBB8} - E:\UC\uc.exe
O9 - Extra button: 词霸 - {9A687CA6-D585-4947-9ED9-BE96071F5CD9} - E:\POWERW~1\XDictExB.dll
O15 - Trusted Zone: http://www.icbc.com.cn
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (AxSubmitControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} (photo_uploader Control) - http://upload.photo.163.com/photoup.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0E52F2AF-9884-4107-9465-2A52E73E4E38}: NameServer = 211.98.*.4 211.98.*.1
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - E:\Rising\Rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - E:\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - E:\Rising\Rav\Ravmond.exe
感觉没什么异样的项。
想尽所有的办法,广告依然每隔一阵弹出。烦不胜烦。
求助高手,这玩意儿到底是什么怪物,如何解决。谢谢。。。