瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 ●●●IE中毒了!自动弹网页,自动关闭,求救!!

12   2  /  2  页   跳转

●●●IE中毒了!自动弹网页,自动关闭,求救!!

正在运行的进程
[PID: 2104][G:\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [G:\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [G:\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [G:\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
[PID: 2192][G:\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
    [G:\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
    [G:\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [G:\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [G:\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [G:\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [G:\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>
[PID: 2304][C:\WINDOWS\system32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\pcast\hbcast.dll]  <Shanghai Henbang Technology Co., Ltd><1, 1, 3, 8>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>
[PID: 2344][C:\WINDOWS\system32\res.exe]  <N/A><N/A>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>
[PID: 2392][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
[PID: 2452][G:\ICQ\Phone\Skype.exe]  <N/A><N/A>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
[PID: 2580][C:\Program Files\Kingsoft\Powerword 2003\XDICT.EXE]  <Kingsoft Co, Ltd.><6, 0, 0, 0>
    [C:\Program Files\Kingsoft\Powerword 2003\ITextOut.dll]  <Kingsoft><1, 1, 0, 0>
    [C:\Program Files\Kingsoft\Powerword 2003\CJKTAB32.dll]  <N/A><N/A>
    [C:\Program Files\Kingsoft\Powerword 2003\XImage32.dll]  <N/A><N/A>
    [C:\Program Files\Kingsoft\Powerword 2003\xfile.dll]  <N/A><N/A>
    [C:\Program Files\Kingsoft\Powerword 2003\KPic10.dll]  <N/A><N/A>
    [C:\Program Files\Kingsoft\Powerword 2003\ijl11.dll]  <Intel Corporation><1.1.2>
    [C:\Program Files\Kingsoft\Powerword 2003\toTTSEngine50.dll]  <Kingsoft Corporation><1, 0, 0, 1>
    [C:\Program Files\Kingsoft\Powerword 2003\NormGrab.DLL]  <Kingsoft Co, Ltd.><6, 0, 0, 0>
    [C:\Program Files\Kingsoft\Powerword 2003\DicMngr.dll]  <Kingsoft><1, 0, 0, 0>
    [C:\Program Files\Kingsoft\Powerword 2003\DBCore10.dll]  <Kingsoft ><1, 0, 0, 0>
    [C:\Program Files\Kingsoft\Powerword 2003\XdictGrb.dll]  <Kingsoft Co, Ltd.><6, 0, 0, 0>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
[PID: 3776][G:\Rising\Rav\RsAgent.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [G:\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 3796][C:\WINDOWS\msagent\AgentSvr.exe]  <Microsoft Corporation><2.00.0.3422>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
[PID: 3192][d:\My Documents\新建文件夹\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [d:\My Documents\新建文件夹\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\QQHelperDll.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 160>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\QQAPI.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [d:\My Documents\新建文件夹\LoginCtrl.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\npkcntc.dll]  <INCA Internet Co., Ltd.><2006, 3, 2, 1>
    [d:\My Documents\新建文件夹\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [d:\My Documents\新建文件夹\QQRes.dll]  <tencent><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\QQMainFrame.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\CQQApplication.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>
    [d:\My Documents\新建文件夹\NewSkin.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\HostingMgr.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\CameraDll.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\MailSummary.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\QQSpace.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\QQAllInOne.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\GroupLive.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\SCCore.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\QQGroupMng.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\QQSysMsgMng.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\QQPlugin.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\QRingMng.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\PhoneAPI.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [d:\My Documents\新建文件夹\QQAvatar.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [d:\My Documents\新建文件夹\LongConnection.dll]  <tencent><5, 0, 200, 160>
    [d:\My Documents\新建文件夹\QQPet.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\BQQApplication.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [d:\My Documents\新建文件夹\CommercesMng.dll]  <><1, 0, 0, 1>
    [d:\My Documents\新建文件夹\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [d:\My Documents\新建文件夹\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
    [d:\My Documents\新建文件夹\QQSceneMng.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\QQPhoneHelper.dll]  <腾讯科技(深圳)有限公司><2, 0, 6, 60>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
    [d:\My Documents\新建文件夹\QQCustomFace.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\GroupConnection.dll]  <Tencent><5, 0, 202, 170>
    [d:\My Documents\新建文件夹\ImageOle.dll]  <TODO: <Company name>><1.0.0.1>
    [d:\My Documents\新建文件夹\QQZip.dll]  <tencent><0, 3, 2, 4>
[PID: 3348][d:\My Documents\新建文件夹\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [d:\My Documents\新建文件夹\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 1352][C:\WINDOWS\system32\gunzip.exe]  <N/A><N/A>
[PID: 3844][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
[PID: 1184][C:\WINDOWS\explorer.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>
    [C:\WINDOWS\webwork\webwork.nls]  <MSWebwork Cop.><1, 0, 0, 1>
    [C:\DOCUME~1\nancy\LOCALS~1\Temp\themeadp.nls]  <N/A><N/A>
    [C:\PROGRA~1\MMSASS~1\albus.dll]  <Albus><1, 0, 0, 2>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [G:\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\smflash.ocx]  <Macromedia, Inc.><9.0.25.0>
    [C:\WINDOWS\System32\Agm.dll]  <AdoBeSoft Co.><4, 4, 26, 1>
    [C:\WINDOWS\system32\EJMX.dll]  <广州盛行网络有限公司><1.03>
    [C:\PROGRA~1\MMSASS~1\mmsass~1.dll]  <><1, 2, 0, 6>
gototop
 

[C:\WINDOWS\SYSTEM32\stdup.dll]  <MStdup Co Ltd.><3, 2, 2, 3>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
[PID: 196][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
[PID: 2080][d:\My Documents\TT\TTraveler.exe]  <腾讯公司><3.0.0.250>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [d:\My Documents\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  <腾讯公司><1, 1, 0, 5>
    [d:\My Documents\TT\Plugins\TWeather\TWeather.dll]  <><1, 0, 0, 3>
    [d:\My Documents\TT\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>
[PID: 1716][C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE]  <Microsoft Corporation><11.0.5604>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [G:\Rising\Rav\RsPlugIn.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [G:\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
    [C:\Program Files\Kingsoft\Powerword 2003\PWOffice2.dll]  <Kingsoft Co, Ltd.><6, 0, 0, 0>
    [G:\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\epepcres.dll]  <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)>
[PID: 4704][C:\Documents and Settings\nancy\桌面\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\Program Files\Kingsoft\Powerword 2003\Cjktl32.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\quartz32.dll]  <><4, 1, 0, 0>

==================================
文件关联
.TXT  Error. [notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [notepad.exe %1]
.INF  Error. [notepad.exe %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

gototop
 

为了贴个日志费老劲了,现在终于把日志贴上了,大家来看看,指点指点吧!!!
gototop
 

大家都说点什么呀,帮帮忙!!!
gototop
 

先用瑞星在安全模式下殺毒  就是在啓動時反復按住f8 選擇安全模式
gototop
 

杀过了,没用
gototop
 

各位进来说句话吧
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT