瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 帮忙看看这个怎么弄？？Trojan.PSW.QQPass.pim

12   1  /  2  页   跳转页

帮忙看看这个怎么弄？？Trojan.PSW.QQPass.pim

收藏
魔力鼓棒
头像
初生襁褓狮
  • 帖子:29
  • 注册: 2004-10-11
  • 来自:
发表于： 2006-06-23 09:30 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

帮忙看看这个怎么弄？？Trojan.PSW.QQPass.pim

一点QQ登陆界面就出病毒提示，还杀不掉，瑞星提示从启动后删除，但从启动后还是不行？？？？？？急！！！！！！！！！！！！
最后编辑2006-06-24 00:36:25.810000000
分享到：
gototop
 
ppdog
头像
飘泊而立狮
  • 帖子:837
  • 注册: 2005-05-31
  • 来自:
发表于： 2006-06-23 09:38 | 短消息 资料
字号： 小 中 大 2楼

请到http://www.spywareinfo.com/~merijn/files/hijackthis.zip 下载Hijackthis，贴个log上来
gototop
 
魔力鼓棒
头像
初生襁褓狮
  • 帖子:29
  • 注册: 2004-10-11
  • 来自:
发表于： 2006-06-23 09:49 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

Logfile of HijackThis v1.99.1
Scan saved at 9:39:08, on 2006-6-23
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
d:\Program Files\Rising\Rav\CCenter.exe
d:\Program Files\Rising\Rav\Ravmond.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
d:\Program Files\Rising\Rav\RavStub.exe
C:\WINNT\Explorer.EXE
C:\WINNT\Mixer.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Rising\Rav\RavTask.exe
D:\Program Files\Rising\Rav\Ravmon.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Common Files\COMM\Network.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\wuauclt.exe
D:\PROGRA~1\Nero\nero.exe
D:\Program Files\Rising\Rav\RsAgent.exe
C:\WINNT\msagent\AgentSvr.exe
C:\Program Files\Sandai\ThunderMini\ThunderMini.exe
D:\Program Files\淘宝网\淘宝旺旺\WangWang.exe
D:\Program Files\CoverDesigner\CoverDes.exe
D:\Program Files\Tencent\qq\QQ.exe
D:\Program Files\Tencent\qq\TIMPlatform.exe
D:\Program Files\Tencent\qq\QQ.exe
D:\Program Files\Tencent\TT\TTraveler.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\安装软件\日志创建\HijackThis.exe

R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 222.186.8.100 popme.163.com
O1 - Hosts: 222.186.8.100 www.xk99.com
O1 - Hosts: 222.186.8.100 www.006.net
O1 - Hosts: 222.186.8.100 006.net
O1 - Hosts: 222.186.8.100 www.cmfu.com
O1 - Hosts: 222.186.8.100 www.free120.com
O1 - Hosts: 222.186.8.100 www.4577.com
O1 - Hosts: 222.186.8.100 www.9617.com
O1 - Hosts: 222.186.8.100 www.fjwz.com
O1 - Hosts: 222.186.8.100 partner.cpc.sohu.com
O1 - Hosts: 222.186.8.100 ad4.sina.com.cn
O1 - Hosts: 222.186.8.100 music.17o8.comer.cpc.sohu.com
O1 - Hosts: 222.186.8.100 ad.tom.com
O1 - Hosts: 222.186.8.100 search.union.3721,com
O1 - Hosts: 222.186.8.100 post.baidu.com
O1 - Hosts: 222.186.8.100 mp3.baidu.com
O1 - Hosts: 222.186.8.100 image.baidu.com
O1 - Hosts: 222.186.8.100 site.google.com
O1 - Hosts: 222.186.8.100 flash.baidu.com
O1 - Hosts: 222.186.8.100 assistant.3721,com
O1 - Hosts: 222.186.8.100 pfp.sina.com.cn
O1 - Hosts: 222.186.8.100 cn.websearch.yaho,.com
O1 - Hosts: 222.186.8.100 sms.qq.com
O1 - Hosts: 222.186.8.100 www.qq.com
O1 - Hosts: 222.186.8.100 partner.lead2.com.cn
O1 - Hosts: 222.186.8.100 ad.cn.doubleclick.net
O1 - Hosts: 222.186.8.100 auto.search.msn.com
O1 - Hosts: 222.186.8.100 www.ourgame.com
O1 - Hosts: 222.186.8.100 www.the9.com
O1 - Hosts: 222.186.8.100 www.flashempire.com
O1 - Hosts: 222.186.8.100 www.qq163.com
O1 - Hosts: 222.186.8.100 www.9sky.com
O1 - Hosts: 222.186.8.100 www.tom-1.com
O1 - Hosts: 222.186.8.100 www.17173.com
O1 - Hosts: 222.186.8.100 www.yaotou.com
O1 - Hosts: 222.186.8.100 union.3721,com
O1 - Hosts: 222.186.8.100 music.feifa.com
O1 - Hosts: 222.186.8.100 www.vodfans.com
O1 - Hosts: 222.186.8.100 www.sogua.com
O1 - Hosts: 222.186.8.100 fm974.tom.com
O1 - Hosts: 222.186.8.100 ent.tom.com
O1 - Hosts: 222.186.8.100 music.tyfo.com
O1 - Hosts: 222.186.8.100 www.wanwa.com
O1 - Hosts: 222.186.8.100 www.guang.org
O1 - Hosts: 222.186.8.100 www.wz.zj.cn
O1 - Hosts: 222.186.8.100 www.3189.net
O1 - Hosts: 222.186.8.100 music.17o8.com
O1 - Hosts: 222.186.8.100 www.99music.net
O1 - Hosts: 222.186.8.100 www.cococ.com
O1 - Hosts: 222.186.8.100 www.qqqq.cn
O1 - Hosts: 222.186.8.100 www.bnb.com.cn
O1 - Hosts: 222.186.8.100 www.z163.com
O1 - Hosts: 222.186.8.100 game.163.com
O1 - Hosts: 222.186.8.100 games.sina.com.cn
O1 - Hosts: 222.186.8.100 www.v111.com
O1 - Hosts: 222.186.8.100 music.v111.com
O1 - Hosts: 222.186.8.100 www.3tom.com
O1 - Hosts: 222.186.8.100 www.xkqq.com
O1 - Hosts: 222.186.8.100 www.verymp3.com
O1 - Hosts: 222.186.8.100 www.91look.com
O1 - Hosts: 222.186.8.100 www.168101.com
O1 - Hosts: 222.186.8.100 www.cmfu.com
O1 - Hosts: 222.186.8.100 www.woogood.com
O1 - Hosts: 222.186.8.100 www.haodx.com
O1 - Hosts: 222.186.8.100 www.yingku.com
O1 - Hosts: 222.186.8.100 www.flash51.com
O1 - Hosts: 222.186.8.100 www.17haha.com
O1 - Hosts: 222.186.8.100 www.432.cn
O1 - Hosts: 222.186.8.100 www.cnxp.com
O1 - Hosts: 222.186.8.100 www.hjsm.net
O1 - Hosts: 222.186.8.100 music.8wa.com
O1 - Hosts: 222.186.8.100 www.66vv.com
O1 - Hosts: 222.186.8.100 www.musicfbi.com
O1 - Hosts: 222.186.8.100 www.vv66.com
O1 - Hosts: 222.186.8.100 www.139mm.com
O1 - Hosts: 222.186.8.100 www.130wg.com
O1 - Hosts: 222.186.8.100 www.flashsea.com
O1 - Hosts: 222.186.8.100 movie.59178.com
O1 - Hosts: 222.186.8.100 www.wo123.com
O1 - Hosts: 222.186.8.100 www.1ya.cn
O1 - Hosts: 222.186.8.100 www.happy8.cn
O1 - Hosts: 222.186.8.100 www.s6.cn
O1 - Hosts: 222.186.8.100 www.hao123.com
O1 - Hosts: 222.186.8.100 www.qqee.com
O1 - Hosts: 222.186.8.100 imgu.21cn.com
O1 - Hosts: 222.186.8.100 www.sohu123.com
O1 - Hosts: 222.186.8.100 www.chinamp3.com
O1 - Hosts: 222.186.8.100 www.18z.net
O1 - Hosts: 222.186.8.100 www.ssxs.com
O1 - Hosts: 222.186.8.100 www.fjwz.net
O1 - Hosts: 222.186.8.100 www.wo365.com
O1 - Hosts: 222.186.8.100 www.zhao99.com
O1 - Hosts: 222.186.8.100 www.cn808.net
O1 - Hosts: 222.186.8.100 www.tt55.net
O1 - Hosts: 222.186.8.100 www.mp3tt.com
O1 - Hosts: 222.186.8.100 www.yi5.com
O1 - Hosts: 222.186.8.100 www.haozs.com
O1 - Hosts: 222.186.8.100 www.77ttt.com
O1 - Hosts: 222.186.8.100 www.77xi.com
O1 - Hosts: 222.186.8.100 13258.com
O1 - Hosts: 222.186.8.100 www.13258.com
gototop
 
魔力鼓棒
头像
初生襁褓狮
  • 帖子:29
  • 注册: 2004-10-11
  • 来自:
发表于： 2006-06-23 09:49 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINNT\system32\xunleibho_v14.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL (file missing)
O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINNT\SYSTEM32\stdup.dll
O2 - BHO: ltmenu Class - {78C21EFD-53BA-406C-AF1A-33A38ABD3958} - C:\Program Files\LtUcx\1002\c0.dll
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: 实用搜索 - {15ADF205-4C54-4cfe-AC88-1EA0BA6D06A0} - C:\Program Files\ScanToolbar\ScanBar.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [RavTask] "d:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [WangWang] "D:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [assistse] "C:\PROGRA~1\3721\assistse.exe"
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O8 - Extra context menu item:  >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O8 - Extra context menu item: &RSDN Search - res://C:\Program Files\ScanToolbar\ScanBar.dll/GoRSDN.dll.htm
O8 - Extra context menu item: &使用迅雷下载 - d:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - d:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\qq\SendMMS.htm
O8 - Extra context menu item: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra button: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing)
O9 - Extra 'Tools' menuitem: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing)
O9 - Extra button: 寻论网--中学作业解答 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing)
O9 - Extra 'Tools' menuitem: 中学作业 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - d:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - d:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: 易趣购物 - {DE607142-AC19-422e-862A-2D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - Extra 'Tools' menuitem: 易趣购物 - {DE607142-AC19-422e-862A-2D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - d:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - d:\Program Files\Tencent\QQ\QQIEHelper.dll
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://www.liaoba.com/talk.cab
O21 - SSODL: DLMon - {590498A3-4131-4D8F-BA4B-36791A0803B1} - C:\WINNT\system32\DLMain.dll (file missing)
O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINNT\SYSTEM32\stdup.dll
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - d:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - d:\Program Files\Rising\Rav\Ravmond.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Network System (Universal Disk Manager) - COMENET TECHNOLOGY - C:\Program Files\Common Files\COMM\Network.exe
gototop
 
魔力鼓棒
头像
初生襁褓狮
  • 帖子:29
  • 注册: 2004-10-11
  • 来自:
发表于： 2006-06-23 10:21 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

怎么没人帮我看看？？？
gototop
 
peanut
头像
初生襁褓狮
  • 帖子:8
  • 注册: 2005-04-12
  • 来自:
发表于： 2006-06-23 10:24 | 短消息 资料
字号： 小 中 大 6楼

斑竹不负责任!!!!有意见!!!
gototop
 
轩辕小聪
头像
卡卡技术团队
  • 帖子:8368
  • 注册: 2006-01-09
  • 来自:
卡卡名人堂论坛9周年纪念
发表于： 2006-06-23 10:33 | 短消息 资料
字号： 小 中 大 7楼

结束进程C:\Program Files\Common Files\COMM\Network.exe

修复：
R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 222.186.8.100 popme.163.com
O1 - Hosts: 222.186.8.100 www.xk99.com
O1 - Hosts: 222.186.8.100 www.006.net
O1 - Hosts: 222.186.8.100 006.net
O1 - Hosts: 222.186.8.100 www.cmfu.com
O1 - Hosts: 222.186.8.100 www.free120.com
O1 - Hosts: 222.186.8.100 www.4577.com
O1 - Hosts: 222.186.8.100 www.9617.com
O1 - Hosts: 222.186.8.100 www.fjwz.com
O1 - Hosts: 222.186.8.100 partner.cpc.sohu.com
O1 - Hosts: 222.186.8.100 ad4.sina.com.cn
O1 - Hosts: 222.186.8.100 music.17o8.comer.cpc.sohu.com
O1 - Hosts: 222.186.8.100 ad.tom.com
O1 - Hosts: 222.186.8.100 search.union.3721,com
O1 - Hosts: 222.186.8.100 post.baidu.com
O1 - Hosts: 222.186.8.100 mp3.baidu.com
O1 - Hosts: 222.186.8.100 image.baidu.com
O1 - Hosts: 222.186.8.100 site.google.com
O1 - Hosts: 222.186.8.100 flash.baidu.com
O1 - Hosts: 222.186.8.100 assistant.3721,com
O1 - Hosts: 222.186.8.100 pfp.sina.com.cn
O1 - Hosts: 222.186.8.100 cn.websearch.yaho,.com
O1 - Hosts: 222.186.8.100 sms.qq.com
O1 - Hosts: 222.186.8.100 www.qq.com
O1 - Hosts: 222.186.8.100 partner.lead2.com.cn
O1 - Hosts: 222.186.8.100 ad.cn.doubleclick.net
O1 - Hosts: 222.186.8.100 auto.search.msn.com
O1 - Hosts: 222.186.8.100 www.ourgame.com
O1 - Hosts: 222.186.8.100 www.the9.com
O1 - Hosts: 222.186.8.100 www.flashempire.com
O1 - Hosts: 222.186.8.100 www.qq163.com
O1 - Hosts: 222.186.8.100 www.9sky.com
O1 - Hosts: 222.186.8.100 www.tom-1.com
O1 - Hosts: 222.186.8.100 www.17173.com
O1 - Hosts: 222.186.8.100 www.yaotou.com
O1 - Hosts: 222.186.8.100 union.3721,com
O1 - Hosts: 222.186.8.100 music.feifa.com
O1 - Hosts: 222.186.8.100 www.vodfans.com
O1 - Hosts: 222.186.8.100 www.sogua.com
O1 - Hosts: 222.186.8.100 fm974.tom.com
O1 - Hosts: 222.186.8.100 ent.tom.com
O1 - Hosts: 222.186.8.100 music.tyfo.com
O1 - Hosts: 222.186.8.100 www.wanwa.com
O1 - Hosts: 222.186.8.100 www.guang.org
O1 - Hosts: 222.186.8.100 www.wz.zj.cn
O1 - Hosts: 222.186.8.100 www.3189.net
O1 - Hosts: 222.186.8.100 music.17o8.com
O1 - Hosts: 222.186.8.100 www.99music.net
O1 - Hosts: 222.186.8.100 www.cococ.com
O1 - Hosts: 222.186.8.100 www.qqqq.cn
O1 - Hosts: 222.186.8.100 www.bnb.com.cn
O1 - Hosts: 222.186.8.100 www.z163.com
O1 - Hosts: 222.186.8.100 game.163.com
O1 - Hosts: 222.186.8.100 games.sina.com.cn
O1 - Hosts: 222.186.8.100 www.v111.com
O1 - Hosts: 222.186.8.100 music.v111.com
O1 - Hosts: 222.186.8.100 www.3tom.com
O1 - Hosts: 222.186.8.100 www.xkqq.com
O1 - Hosts: 222.186.8.100 www.verymp3.com
O1 - Hosts: 222.186.8.100 www.91look.com
O1 - Hosts: 222.186.8.100 www.168101.com
O1 - Hosts: 222.186.8.100 www.cmfu.com
O1 - Hosts: 222.186.8.100 www.woogood.com
O1 - Hosts: 222.186.8.100 www.haodx.com
O1 - Hosts: 222.186.8.100 www.yingku.com
O1 - Hosts: 222.186.8.100 www.flash51.com
O1 - Hosts: 222.186.8.100 www.17haha.com
O1 - Hosts: 222.186.8.100 www.432.cn
O1 - Hosts: 222.186.8.100 www.cnxp.com
O1 - Hosts: 222.186.8.100 www.hjsm.net
O1 - Hosts: 222.186.8.100 music.8wa.com
O1 - Hosts: 222.186.8.100 www.66vv.com
O1 - Hosts: 222.186.8.100 www.musicfbi.com
O1 - Hosts: 222.186.8.100 www.vv66.com
O1 - Hosts: 222.186.8.100 www.139mm.com
O1 - Hosts: 222.186.8.100 www.130wg.com
O1 - Hosts: 222.186.8.100 www.flashsea.com
O1 - Hosts: 222.186.8.100 movie.59178.com
O1 - Hosts: 222.186.8.100 www.wo123.com
O1 - Hosts: 222.186.8.100 www.1ya.cn
O1 - Hosts: 222.186.8.100 www.happy8.cn
O1 - Hosts: 222.186.8.100 www.s6.cn
O1 - Hosts: 222.186.8.100 www.hao123.com
O1 - Hosts: 222.186.8.100 www.qqee.com
O1 - Hosts: 222.186.8.100 imgu.21cn.com
O1 - Hosts: 222.186.8.100 www.sohu123.com
O1 - Hosts: 222.186.8.100 www.chinamp3.com
O1 - Hosts: 222.186.8.100 www.18z.net
O1 - Hosts: 222.186.8.100 www.ssxs.com
O1 - Hosts: 222.186.8.100 www.fjwz.net
O1 - Hosts: 222.186.8.100 www.wo365.com
O1 - Hosts: 222.186.8.100 www.zhao99.com
O1 - Hosts: 222.186.8.100 www.cn808.net
O1 - Hosts: 222.186.8.100 www.tt55.net
O1 - Hosts: 222.186.8.100 www.mp3tt.com
O1 - Hosts: 222.186.8.100 www.yi5.com
O1 - Hosts: 222.186.8.100 www.haozs.com
O1 - Hosts: 222.186.8.100 www.77ttt.com
O1 - Hosts: 222.186.8.100 www.77xi.com
O1 - Hosts: 222.186.8.100 13258.com
O1 - Hosts: 222.186.8.100 www.13258.com
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL (file missing)
O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINNT\SYSTEM32\stdup.dll
O2 - BHO: ltmenu Class - {78C21EFD-53BA-406C-AF1A-33A38ABD3958} - C:\Program Files\LtUcx\1002\c0.dll
O3 - Toolbar: 实用搜索 - {15ADF205-4C54-4cfe-AC88-1EA0BA6D06A0} - C:\Program Files\ScanToolbar\ScanBar.dll
O8 - Extra context menu item: >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O21 - SSODL: DLMon - {590498A3-4131-4D8F-BA4B-36791A0803B1} - C:\WINNT\system32\DLMain.dll (file missing)
O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINNT\SYSTEM32\stdup.dll
O23 - Service: Network System (Universal Disk Manager) - COMENET TECHNOLOGY - C:\Program Files\Common Files\COMM\Network.exe

卸载：
C:\PROGRA~1\MMSASS~1\
C:\Program Files\ScanToolbar\
C:\Program Files\LtUcx\

重启后删除：
C:\PROGRA~1\MMSASS~1\
C:\Program Files\ScanToolbar\
C:\Program Files\LtUcx\
C:\Program Files\Common Files\COMM\
C:\WINNT\SYSTEM32\stdup.dll

其中C:\WINNT\SYSTEM32\stdup.dll的详细处理参考http://forum.ikaka.com/topic.asp?board=28&artid=7971417

做完这些后，请重启
再在http://forum.ikaka.com/topic.asp?board=28&artid=6979213下载System Repair Engineer 2.0.21.505（RC2）导出全部日志
并说清楚你所中病毒的病毒文件名称与具体路径。
gototop
 
轩辕小聪
头像
卡卡技术团队
  • 帖子:8368
  • 注册: 2006-01-09
  • 来自:
卡卡名人堂论坛9周年纪念
发表于： 2006-06-23 10:35 | 短消息 资料
字号： 小 中 大 8楼

引用:
【peanut的贴子】斑竹不负责任!!!!有意见!!!
...........................

所有到论坛上求助的会员都要首先明白一点：斑竹不是瑞星的员工，没拿一分钱工资，所有工作均为义务性质，你没有理由要求斑竹24小时全天候在线。
gototop
 
幸福就在手中
头像
初生襁褓狮
  • 帖子:41
  • 注册: 2006-04-26
  • 来自:
发表于： 2006-06-23 10:38 | 短消息 资料
字号： 小 中 大 9楼

我支持理解你们的工作
我也是一个论坛的斑竹。
请帮我看下。
http://forum.ikaka.com/topic.asp?board=28&artid=8111427
gototop
 
peanut
头像
初生襁褓狮
  • 帖子:8
  • 注册: 2005-04-12
  • 来自:
发表于： 2006-06-24 00:33 | 短消息 资料
字号： 小 中 大 10楼

引用:
【轩辕小聪的贴子】
所有到论坛上求助的会员都要首先明白一点：斑竹不是瑞星的员工，没拿一分钱工资，所有工作均为义务性质，你没有理由要求斑竹24小时全天候在线。
...........................

发贴时间:2005-4-12 15:27:25
这么久的问题没有一个人回答!说明了什么?大家想想吧!
我发的5个没有一个回答,不是无能就是.....!
gototop
 
<<上一主题|下一主题>>
12   1  /  2  页   跳转页
页面顶部
Powered by Discuz!NT