瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 总是杀不掉的病毒~~~求助！求助·！

12   1  /  2  页   跳转页

总是杀不掉的病毒~~~求助！求助·！

收藏
旖旎12226
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2006-06-07
  • 来自:
发表于： 2006-06-07 22:55 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

总是杀不掉的病毒~~~求助！求助·！

backdoor.gpigoon.2006.dh
        backdoor.GPigeon.WKb
就是这两个家伙
顺便问一个白痴问题，怎么导出日志
我用的是瑞星的杀毒软件```
等待强手来解答``
谢谢拉
最后编辑2006-06-10 19:23:29
分享到：
gototop
 
mopery
头像
卡卡技术团队
  • 帖子:17737
  • 注册: 2005-12-06
  • 来自:New York
卡卡名人堂论坛9周年纪念
发表于： 2006-06-07 22:48 | 短消息 资料
字号： 小 中 大 2楼

http://forum.ikaka.com/topic.asp?board=28&artid=6979213
一楼附件...下载HijackThis...把日志帖上来..
gototop
 
旖旎12226
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2006-06-07
  • 来自:
发表于： 2006-06-07 22:58 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

谢谢
我先去下载
gototop
 
旖旎12226
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2006-06-07
  • 来自:
发表于： 2006-06-07 23:02 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

Logfile of HijackThis v1.99.1
Scan saved at 23:08:19, on 2006-6-7
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP3 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
F:\PROGRAM FILES\RISING\RISING\RAV\CCENTER.EXE
F:\Program Files\Rising\Rising\Rav\Ravmond.exe
f:\rising\rising\rfw\rfwsrv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\DOCUME~1\lao\LOCALS~1\Temp\vsy\vsy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\lao\LOCALS~1\Temp\aua\aua.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
F:\Program Files\Rising\Rising\Rav\RavStub.exe
C:\WINNT\Explorer.EXE
f:\rising\rising\rfw\RfwMain.exe
C:\WINNT\System32\rundll32.exe
C:\WINNT\Mixer.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINNT\system32\rundll32.exe
D:\DVD\SYSEXPLR.EXE
F:\Program Files\Rising\Rising\Rav\RavTask.exe
F:\Program Files\Rising\Rising\Rav\Ravmon.exe
C:\WINNT\System32\internat.exe
D:\TT\TTraveler.exe
F:\Program Files\Rising\Rising\Rav\RsLogVw.exe
F:\HijackThis.exe

R3 - URLSearchHook: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O1 - Hosts: 222.186.8.100 popme.163.com
O1 - Hosts: 222.186.8.100 www.xk99.com
O1 - Hosts: 222.186.8.100 www.006.net
O1 - Hosts: 222.186.8.100 006.net
O1 - Hosts: 222.186.8.100 www.cmfu.com
O1 - Hosts: 222.186.8.100 www.free120.com
O1 - Hosts: 222.186.8.100 www.4577.com
O1 - Hosts: 222.186.8.100 www.9617.com
O1 - Hosts: 222.186.8.100 www.fjwz.com
O1 - Hosts: 222.186.8.100 partner.cpc.sohu.com
O1 - Hosts: 222.186.8.100 ad4.sina.com.cn
O1 - Hosts: 222.186.8.100 music.17o8.comer.cpc.sohu.com
O1 - Hosts: 222.186.8.100 ad.tom.com
O1 - Hosts: 222.186.8.100 search.union.3721,com
O1 - Hosts: 222.186.8.100 post.baidu.com
O1 - Hosts: 222.186.8.100 mp3.baidu.com
O1 - Hosts: 222.186.8.100 image.baidu.com
O1 - Hosts: 222.186.8.100 site.google.com
O1 - Hosts: 222.186.8.100 flash.baidu.com
O1 - Hosts: 222.186.8.100 assistant.3721,com
O1 - Hosts: 222.186.8.100 pfp.sina.com.cn
O1 - Hosts: 222.186.8.100 cn.websearch.yahoo.com
O1 - Hosts: 222.186.8.100 sms.qq.com
O1 - Hosts: 222.186.8.100 www.qq.com
O1 - Hosts: 222.186.8.100 partner.lead2.com.cn
O1 - Hosts: 222.186.8.100 ad.cn.doubleclick.net
O1 - Hosts: 222.186.8.100 auto.search.msn.com
O1 - Hosts: 222.186.8.100 www.ourgame.com
O1 - Hosts: 222.186.8.100 www.the9.com
O1 - Hosts: 222.186.8.100 www.flashempire.com
O1 - Hosts: 222.186.8.100 www.qq163.com
O1 - Hosts: 222.186.8.100 www.9sky.com
O1 - Hosts: 222.186.8.100 www.tom-1.com
O1 - Hosts: 222.186.8.100 www.17173.com
O1 - Hosts: 222.186.8.100 www.yaotou.com
O1 - Hosts: 222.186.8.100 union.3721,com
O1 - Hosts: 222.186.8.100 music.feifa.com
O1 - Hosts: 222.186.8.100 www.vodfans.com
O1 - Hosts: 222.186.8.100 www.sogua.com
O1 - Hosts: 222.186.8.100 fm974.tom.com
O1 - Hosts: 222.186.8.100 ent.tom.com
O1 - Hosts: 222.186.8.100 music.tyfo.com
O1 - Hosts: 222.186.8.100 www.wanwa.com
O1 - Hosts: 222.186.8.100 www.guang.org
O1 - Hosts: 222.186.8.100 www.wz.zj.cn
O1 - Hosts: 222.186.8.100 www.3189.net
O1 - Hosts: 222.186.8.100 music.17o8.com
O1 - Hosts: 222.186.8.100 www.99music.net
O1 - Hosts: 222.186.8.100 www.cococ.com
O1 - Hosts: 222.186.8.100 www.qqqq.cn
O1 - Hosts: 222.186.8.100 www.bnb.com.cn
O1 - Hosts: 222.186.8.100 www.z163.com
O1 - Hosts: 222.186.8.100 game.163.com
O1 - Hosts: 222.186.8.100 games.sina.com.cn
O1 - Hosts: 222.186.8.100 www.v111.com
O1 - Hosts: 222.186.8.100 music.v111.com
O1 - Hosts: 222.186.8.100 www.3tom.com
O1 - Hosts: 222.186.8.100 www.xkqq.com
O1 - Hosts: 222.186.8.100 www.verymp3.com
O1 - Hosts: 222.186.8.100 www.91look.com
O1 - Hosts: 222.186.8.100 www.168101.com
O1 - Hosts: 222.186.8.100 www.cmfu.com
O1 - Hosts: 222.186.8.100 www.woogood.com
O1 - Hosts: 222.186.8.100 www.haodx.com
O1 - Hosts: 222.186.8.100 www.yingku.com
O1 - Hosts: 222.186.8.100 www.flash51.com
O1 - Hosts: 222.186.8.100 www.17haha.com
O1 - Hosts: 222.186.8.100 www.432.cn
O1 - Hosts: 222.186.8.100 www.cnxp.com
O1 - Hosts: 222.186.8.100 www.hjsm.net
O1 - Hosts: 222.186.8.100 music.8wa.com
O1 - Hosts: 222.186.8.100 www.66vv.com
O1 - Hosts: 222.186.8.100 www.musicfbi.com
O1 - Hosts: 222.186.8.100 www.vv66.com
O1 - Hosts: 222.186.8.100 www.139mm.com
O1 - Hosts: 222.186.8.100 www.130wg.com
O1 - Hosts: 222.186.8.100 www.flashsea.com
O1 - Hosts: 222.186.8.100 movie.59178.com
O1 - Hosts: 222.186.8.100 www.wo123.com
O1 - Hosts: 222.186.8.100 www.1ya.cn
O1 - Hosts: 222.186.8.100 www.happy8.cn
O1 - Hosts: 222.186.8.100 www.s6.cn
O1 - Hosts: 222.186.8.100 www.hao123.com
O1 - Hosts: 222.186.8.100 www.qqee.com
O1 - Hosts: 222.186.8.100 imgu.21cn.com
O1 - Hosts: 222.186.8.100 www.sohu123.com
O1 - Hosts: 222.186.8.100 www.chinamp3.com
O1 - Hosts: 222.186.8.100 www.18z.net
O1 - Hosts: 222.186.8.100 www.ssxs.com
O1 - Hosts: 222.186.8.100 www.fjwz.net
O1 - Hosts: 222.186.8.100 www.wo365.com
O1 - Hosts: 222.186.8.100 www.zhao99.com
O1 - Hosts: 222.186.8.100 www.cn808.net
O1 - Hosts: 222.186.8.100 www.tt55.net
O1 - Hosts: 222.186.8.100 www.mp3tt.com
O1 - Hosts: 222.186.8.100 www.yi5.com
O1 - Hosts: 222.186.8.100 www.haozs.com
O1 - Hosts: 222.186.8.100 www.77ttt.com
O1 - Hosts: 222.186.8.100 www.77xi.com
O1 - Hosts: 222.186.8.100 13258.com
O1 - Hosts: 222.186.8.100 www.13258.com
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINNT\System32\xunleibho_v14.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll (file missing)
O2 - BHO: Wbho Class - {40E3A34A-3282-41F8-AD2C-051BAB96AD4A} - C:\WINNT\System32\Usign.dll
O2 - BHO: AdsHlpObj Class - {49A94665-B1F5-4F05-B9C7-FB6E336E49BD} - C:\WINNT\System32\AdsObj.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Tencent\QQ\QQIEHelper.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL (file missing)
O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - (no file)
O2 - BHO: AdsObj2 Class - {7DDEA238-3E32-43FD-8223-A5E15D9666FF} - C:\WINNT\System32\AdsHlp2.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\讯雷4\ComDlls\XunLeiBHO_001.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AssistII - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O2 - BHO: AdsHlpObj Class - {C74332D8-097F-41E7-8F8A-2E4D5A07A31E} - C:\WINNT\System32\AdsHlp.dll
O2 - BHO: YiSou - {EF1D17A9-089F-40cc-8D64-7324CD
gototop
 
旖旎12226
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2006-06-07
  • 来自:
发表于： 2006-06-07 23:02 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: 完美网译通 - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - C:\WINNT\WORLD2\TOOLBAR\hmtoolbar.dll
O3 - Toolbar: 一搜工具条 - {115F6E46-FCBC-41ed-B3B5-3BDDD4AAB5E5} - C:\Program Files\yisou\yisou.dll
O3 - Toolbar: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - D:\BitSpirit\BitComet\BitCometBar\BitCometBar0.3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [RfwMain] "F:\Rising\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [helper.dll] C:\WINNT\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - HKLM\..\Run: [CnsMin] Rundll32.exe C:\WINNT\DOWNLO~1\CnsMin.dll,Rundll32
O4 - HKLM\..\Run: [BCUpdate] C:\WINNT\System32\BCUP.exe
O4 - HKLM\..\Run: [ADShow] C:\WINNT\System32\bcsysnote.exe
O4 - HKLM\..\Run: [SysExplr] D:\DVD\SYSEXPLR.EXE
O4 - HKLM\..\Run: [RavTask] "F:\Program Files\Rising\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [YOKAssiant] Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant uninstall
O4 - HKLM\..\Run: [Thunder] "D:\讯雷4\ThunderShell.exe" /s
O4 - HKLM\..\Run: [KillTrojanMaster] F:\木马专杀大师\木马专杀大师.exe
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [RegBar] regsvr32.exe /u C:\progra~1\blogmark\bocaitoolbar.dll /s /i /n
O4 - HKCU\..\Run: [IEXPLORE.EXE] IEXPLORE.EXE http://vod.soucn.net
O4 - Startup: 腾讯QQ.lnk = D:\Tencent\QQ\QQ.exe
O4 - Global Startup: del.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item:  >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O8 - Extra context menu item: !搜一搜 - res://C:\Program Files\yisou\yisou.dll/232
O8 - Extra context menu item: &使用迅雷下载 - D:\讯雷4\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\讯雷4\Program\GetAllUrl.htm
O8 - Extra context menu item: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: VeryCD搜索 - C:\Program Files\YOK.com\SuperSearch\yoksch.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 反向链接 - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 类似网页 - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: 解霸实时播放 - D:\DVD\MPURLGET.HTM
O9 - Extra button: 解霸 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - D:\DVD\MPLAYER.EXE
O9 - Extra 'Tools' menuitem: 超级解霸 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - D:\DVD\MPLAYER.EXE
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Tencent\QQ\QQIEHelper.dll
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O17 - HKLM\System\CCS\Services\Tcpip\..\{2F31B4E7-94AB-4FCC-9108-8C432C4AA4B6}: NameServer = 202.103.96.112,61.137.94.195
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\rising\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\rising\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\PROGRAM FILES\RISING\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\Program Files\Rising\Rising\Rav\Ravmond.exe
O23 - Service: Intelligent Transferl (Svenusl) - Unknown owner - C:\WINNT\svenusl.exe
O23 - Service: vsw - Unknown owner - C:\DOCUME~1\lao\LOCALS~1\Temp\vsy\vsy.exe
O23 - Service: winaua - Unknown owner - C:\DOCUME~1\lao\LOCALS~1\Temp\aua\aua.exe
gototop
 
旖旎12226
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2006-06-07
  • 来自:
发表于： 2006-06-07 23:03 | 只看楼主 短消息 资料
字号： 小 中 大 6楼

是不是就是上面这些？
gototop
 
mopery
头像
卡卡技术团队
  • 帖子:17737
  • 注册: 2005-12-06
  • 来自:New York
卡卡名人堂论坛9周年纪念
发表于： 2006-06-07 23:07 | 短消息 资料
字号： 小 中 大 7楼

修复

O1 - Hosts: 222.186.8.100 popme.163.com
O1 - Hosts: 222.186.8.100 www.xk99.com
O1 - Hosts: 222.186.8.100 www.006.net
O1 - Hosts: 222.186.8.100 006.net
O1 - Hosts: 222.186.8.100 www.cmfu.com
O1 - Hosts: 222.186.8.100 www.free120.com
O1 - Hosts: 222.186.8.100 www.4577.com
O1 - Hosts: 222.186.8.100 www.9617.com
O1 - Hosts: 222.186.8.100 www.fjwz.com
O1 - Hosts: 222.186.8.100 partner.cpc.sohu.com
O1 - Hosts: 222.186.8.100 ad4.sina.com.cn
O1 - Hosts: 222.186.8.100 music.17o8.comer.cpc.sohu.com
O1 - Hosts: 222.186.8.100 ad.tom.com
O1 - Hosts: 222.186.8.100 search.union.3721,com
O1 - Hosts: 222.186.8.100 post.baidu.com
O1 - Hosts: 222.186.8.100 mp3.baidu.com
O1 - Hosts: 222.186.8.100 image.baidu.com
O1 - Hosts: 222.186.8.100 site.google.com
O1 - Hosts: 222.186.8.100 flash.baidu.com
O1 - Hosts: 222.186.8.100 assistant.3721,com
O1 - Hosts: 222.186.8.100 pfp.sina.com.cn
O1 - Hosts: 222.186.8.100 cn.websearch.yahoo.com
O1 - Hosts: 222.186.8.100 sms.qq.com
O1 - Hosts: 222.186.8.100 www.qq.com
O1 - Hosts: 222.186.8.100 partner.lead2.com.cn
O1 - Hosts: 222.186.8.100 ad.cn.doubleclick.net
O1 - Hosts: 222.186.8.100 auto.search.msn.com
O1 - Hosts: 222.186.8.100 www.ourgame.com
O1 - Hosts: 222.186.8.100 www.the9.com
O1 - Hosts: 222.186.8.100 www.flashempire.com
O1 - Hosts: 222.186.8.100 www.qq163.com
O1 - Hosts: 222.186.8.100 www.9sky.com
O1 - Hosts: 222.186.8.100 www.tom-1.com
O1 - Hosts: 222.186.8.100 www.17173.com
O1 - Hosts: 222.186.8.100 www.yaotou.com
O1 - Hosts: 222.186.8.100 union.3721,com
O1 - Hosts: 222.186.8.100 music.feifa.com
O1 - Hosts: 222.186.8.100 www.vodfans.com
O1 - Hosts: 222.186.8.100 www.sogua.com
O1 - Hosts: 222.186.8.100 fm974.tom.com
O1 - Hosts: 222.186.8.100 ent.tom.com
O1 - Hosts: 222.186.8.100 music.tyfo.com
O1 - Hosts: 222.186.8.100 www.wanwa.com
O1 - Hosts: 222.186.8.100 www.guang.org
O1 - Hosts: 222.186.8.100 www.wz.zj.cn
O1 - Hosts: 222.186.8.100 www.3189.net
O1 - Hosts: 222.186.8.100 music.17o8.com
O1 - Hosts: 222.186.8.100 www.99music.net
O1 - Hosts: 222.186.8.100 www.cococ.com
O1 - Hosts: 222.186.8.100 www.qqqq.cn
O1 - Hosts: 222.186.8.100 www.bnb.com.cn
O1 - Hosts: 222.186.8.100 www.z163.com
O1 - Hosts: 222.186.8.100 game.163.com
O1 - Hosts: 222.186.8.100 games.sina.com.cn
O1 - Hosts: 222.186.8.100 www.v111.com
O1 - Hosts: 222.186.8.100 music.v111.com
O1 - Hosts: 222.186.8.100 www.3tom.com
O1 - Hosts: 222.186.8.100 www.xkqq.com
O1 - Hosts: 222.186.8.100 www.verymp3.com
O1 - Hosts: 222.186.8.100 www.91look.com
O1 - Hosts: 222.186.8.100 www.168101.com
O1 - Hosts: 222.186.8.100 www.cmfu.com
O1 - Hosts: 222.186.8.100 www.woogood.com
O1 - Hosts: 222.186.8.100 www.haodx.com
O1 - Hosts: 222.186.8.100 www.yingku.com
O1 - Hosts: 222.186.8.100 www.flash51.com
O1 - Hosts: 222.186.8.100 www.17haha.com
O1 - Hosts: 222.186.8.100 www.432.cn
O1 - Hosts: 222.186.8.100 www.cnxp.com
O1 - Hosts: 222.186.8.100 www.hjsm.net
O1 - Hosts: 222.186.8.100 music.8wa.com
O1 - Hosts: 222.186.8.100 www.66vv.com
O1 - Hosts: 222.186.8.100 www.musicfbi.com
O1 - Hosts: 222.186.8.100 www.vv66.com
O1 - Hosts: 222.186.8.100 www.139mm.com
O1 - Hosts: 222.186.8.100 www.130wg.com
O1 - Hosts: 222.186.8.100 www.flashsea.com
O1 - Hosts: 222.186.8.100 movie.59178.com
O1 - Hosts: 222.186.8.100 www.wo123.com
O1 - Hosts: 222.186.8.100 www.1ya.cn
O1 - Hosts: 222.186.8.100 www.happy8.cn
O1 - Hosts: 222.186.8.100 www.s6.cn
O1 - Hosts: 222.186.8.100 www.hao123.com
O1 - Hosts: 222.186.8.100 www.qqee.com
O1 - Hosts: 222.186.8.100 imgu.21cn.com
O1 - Hosts: 222.186.8.100 www.sohu123.com
O1 - Hosts: 222.186.8.100 www.chinamp3.com
O1 - Hosts: 222.186.8.100 www.18z.net
O1 - Hosts: 222.186.8.100 www.ssxs.com
O1 - Hosts: 222.186.8.100 www.fjwz.net
O1 - Hosts: 222.186.8.100 www.wo365.com
O1 - Hosts: 222.186.8.100 www.zhao99.com
O1 - Hosts: 222.186.8.100 www.cn808.net
O1 - Hosts: 222.186.8.100 www.tt55.net
O1 - Hosts: 222.186.8.100 www.mp3tt.com
O1 - Hosts: 222.186.8.100 www.yi5.com
O1 - Hosts: 222.186.8.100 www.haozs.com
O1 - Hosts: 222.186.8.100 www.77ttt.com
O1 - Hosts: 222.186.8.100 www.77xi.com
O1 - Hosts: 222.186.8.100 13258.com
O1 - Hosts: 222.186.8.100 www.13258.com
O2 - BHO: Wbho Class - {40E3A34A-3282-41F8-AD2C-051BAB96AD4A} - C:\WINNT\System32\Usign.dll
O2 - BHO: AdsHlpObj Class - {49A94665-B1F5-4F05-B9C7-FB6E336E49BD} - C:\WINNT\System32\AdsObj.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL (file missing)
O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - (no file)
O2 - BHO: AdsObj2 Class - {7DDEA238-3E32-43FD-8223-A5E15D9666FF} - C:\WINNT\System32\AdsHlp2.dll
O2 - BHO: AdsHlpObj Class - {C74332D8-097F-41E7-8F8A-2E4D5A07A31E} - C:\WINNT\System32\AdsHlp.dll
O4 - HKLM\..\Run: [BCUpdate] C:\WINNT\System32\BCUP.exe
O4 - HKCU\..\Run: [IEXPLORE.EXE] IEXPLORE.EXE http://vod.soucn.net
O4 - Global Startup: del.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll

O23 - Service: Intelligent Transferl (Svenusl) - Unknown owner - C:\WINNT\svenusl.exe
O23 - Service: vsw - Unknown owner - C:\DOCUME~1\lao\LOCALS~1\Temp\vsy\vsy.exe
O23 - Service: winaua - Unknown owner - C:\DOCUME~1\lao\LOCALS~1\Temp\aua\aua.exe
第一个鸽子..安全模式..打开注册表编辑器，展开：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
搜索Svenusl    vsw      winaua  删除这三项..

删除
C:\DOCUME~1\lao\LOCALS~1\Temp\aua
C:\DOCUME~1\lao\LOCALS~1\Temp\vsy
C:\WINNT\svenusl.exe
C:\WINNT\System32\BCUP.exe
C:\WINNT\System32\AdsHlp.dll
C:\WINNT\System32\AdsHlp2.dll
C:\WINNT\System32\AdsObj.dll
C:\WINNT\System32\Usign.dll

下载超级兔子..用超级兔子优化王卸载除讯雷以外的流氓软件..
gototop
 
mopery
头像
卡卡技术团队
  • 帖子:17737
  • 注册: 2005-12-06
  • 来自:New York
卡卡名人堂论坛9周年纪念
发表于： 2006-06-07 23:08 | 短消息 资料
字号： 小 中 大 8楼

按上面的做 做完进安全模式扫个毒..如果还报病毒..再来..
gototop
 
旖旎12226
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2006-06-07
  • 来自:
发表于： 2006-06-07 23:10 | 只看楼主 短消息 资料
字号： 小 中 大 9楼

``好的
谢谢
gototop
 
旖旎12226
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2006-06-07
  • 来自:
发表于： 2006-06-07 23:12 | 只看楼主 短消息 资料
字号： 小 中 大 10楼

流氓软件是什么？
gototop
 
<<上一主题|下一主题>>
12   1  /  2  页   跳转页
页面顶部
Powered by Discuz!NT