瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 各位大侠帮帮忙，怎么清除我电脑里的毒

12   1  /  2  页   跳转页

各位大侠帮帮忙，怎么清除我电脑里的毒

收藏
达达络勃
头像
拙长孩提狮
  • 帖子:75
  • 注册: 2006-09-12
  • 来自:
发表于： 2006-09-12 13:52 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

各位大侠帮帮忙，怎么清除我电脑里的毒

Logfile of HijackThis v1.99.1
Scan saved at 13:38:57, on 2006-9-12
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
f:\Program Files\rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
f:\Program Files\rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
f:\Program Files\rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
f:\Program Files\rising\Rav\RavTask.exe
f:\Program Files\rising\Rav\RavMon.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\SVOHOST.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\conime.exe
F:\Program Files\Maxthon\Maxthon.exe
C:\Documents and Settings\mxy\桌面\HijackThis.exe

R3 - URLSearchHook: YOK Search Class - {88351CEF-BAC0-4A9B-8380-31A173E2926F} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
F3 - REG:win.ini: load=; ?矹岠 词矵?    逷矵峈 岨 鲤 耈砎??
F3 - REG:win.ini: run=; ?矹岠 词矵?    逷矵峈 岨 ? 耈砎??
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: IDDTInitObj Class - {15DDE989-CD45-4561-BF99-D22C0D5C2B74} - F:\PROGRA~1\sina\UC\UCddt\ddtinit.dll
O2 - BHO: IExpress - {27E96DE0-8211-42CF-9A1E-FA6246A95B77} - C:\WINDOWS\System32\iexpress.dll
O2 - BHO: IEHandle Class - {30EBA2E2-58B2-4980-9C41-F12F5F1422C5} - C:\WINDOWS\System32\tpHandle.dll
O2 - BHO: DeskSpread - {492B8F66-B8CF-4F7A-B0EE-B7383B92F5BA} - C:\PROGRA~1\DESKSP~1\DESKSP~1.DLL
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - f:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: KillObj Class - {66C28884-4E5D-494B-80C9-CAA27528FD6D} - F:\PROGRA~1\sina\UC\UCddt\ddtkillw.ocx
O2 - BHO: 珊瑚虫工具栏 - {75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - f:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll
O2 - BHO: IMU IE HELP - {9A0527C1-4D5F-4e45-9D28-6257F75EDDB1} - C:\WINDOWS\System32\imuiepls.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - F:\PROGRA~1\KuGoo\KUGOO3~1.OCX
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: 新浪点点通 - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - F:\PROGRA~1\sina\UC\UCddt\DDTONG~1.DLL
O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - f:\Program Files\BitComet\BitCometBar\BitCometBar0.3.dll
O3 - Toolbar: 珊瑚虫工具栏 - {F869BB38-FFEF-4589-B986-610B7AD0ADA2} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [EssSpkPhone] ; esscw10.exe
O4 - HKLM\..\Run: [RfwMain] "f:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [NMGameX_AutoRun] ; C:\WINDOWS\System32\Rundll32.exe NMGameX.dll,LiveProcess /aa
O4 - HKLM\..\Run: [TotalRecorderScheduler] ; "f:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SoundMam] C:\WINDOWS\System32\SVOHOST.exe
O4 - HKLM\..\Run: [RavTask] "f:\Program Files\rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [ExFilter] ; Rundll32.exe "C:\PROGRA~1\CNNIC\Cdn\cdnspie.dll,ExecFilter solo"
O4 - HKLM\..\Run: [Install Alitalk] ;
O4 - HKLM\..\Run: [NvCplDaemon] ; RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] ; nwiz.exe /install
O4 - HKLM\..\Run: [PHIME2002A] ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PHIME2002ASync] ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
最后编辑2006-09-26 15:36:08
分享到：
gototop
 
达达络勃
头像
拙长孩提狮
  • 帖子:75
  • 注册: 2006-09-12
  • 来自:
发表于： 2006-09-12 13:53 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

O4 - HKLM\..\Run: [popo2004] ;
O4 - HKLM\..\Run: [uc] ;
O4 - HKLM\..\Run: [WangWang] ; "f:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
O4 - HKLM\..\Run: [YOKAssiant] ; ; Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [RTEGPRS] ; "C:\Program Files\Common Files\RTE\RTEGPRS.exe" tray
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &使用迅雷下载 - f:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - f:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - F:\Program Files\KuGoo\KuGoo3DownX.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Program Files\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - F:\Program Files\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Program Files\Tencent\qq\SendMMS.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\ws2_64.dll' missing
O16 - DPF: {229610B2-3C6D-41EE-BD17-4D929DD16B3D} (Mediaplay Control) - http://www.4510888.com/MediaplayProj1.ocx
O16 - DPF: {339C1EE2-1029-46B8-81F1-360217F26FC4} (VGAPlayer Control) - http://219.144.186.220/gdsx/77/VGAPlayer.cab
O16 - DPF: {3A2B370C-BA0A-11D1-B137-0000F8753F5D} (Microsoft Chart Control 6.0 (SP4) (OLEDB)) - http://www.fangdi.com.cn/mschart.cab
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1120316649625
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {7FC22A16-79E6-4787-9C96-B6359BB1106D} (DigitalTrafic Control) - http://www.jt.sh.cn/trafficmap/jtj.cab
O16 - DPF: {878FA04A-1689-4359-BAB4-9DB29BC4B1BD} (DigitalTrafic Control) - http://www.jt.sh.cn/chaxun/digitaltrafic.cab
O16 - DPF: {8819C261-5B61-4628-908C-9BE795EABEC3} (IE Class) - http://easyabc.95599.cn/download/ABC.cab
O16 - DPF: {88734439-46D0-42C0-A13F-7E881EE550CF} (Filetran Control) - http://www.bluesky.cn/download/filetran.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cab
O16 - DPF: {99888952-AC62-437C-AFC6-7B5CF05A7F2F} (IEDown Class) - http://download.ourgame.com/IEDown.cab
O16 - DPF: {9A0527C1-4D5F-4E45-9D28-6257F75EDDB1} (IEBHOObj Class) - http://download.imuweb.com/client/chatatwill/ie/imuiepls.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab27513.cab
O16 - DPF: {BA0F088C-72C1-475A-92F8-42391DEF6961} (Blueskyvoice Control) - http://www.bluesky.cn/download/blueskyvoice_27.cab
O16 - DPF: {C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} (Kingsoft DUBA OnlineScan) - http://duba.2dai.com/KAVClean.CAB
O16 - DPF: {CF051549-EDE1-40F5-B440-BCD646CF2C25} (Ppinstall Control) - http://popo.163.com/install/ppinstall.cab
O16 - DPF: {CF85459D-DFA7-4028-A065-3C6D1356DCC8} (CertInstall Control) - http://gd.chinavnet.com/CertInstall.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://zone.msn.com/bingame/zuma/default/popcaploader_v6.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Network Logon (NetWorkLogon) - Unknown owner - rundll32.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Unknown owner - f:\program files\rising\rfw\rfwsrv.exe
gototop
 
达达络勃
头像
拙长孩提狮
  • 帖子:75
  • 注册: 2006-09-12
  • 来自:
发表于： 2006-09-12 13:59 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

另外
我瑞星杀毒最新到了18.44.10，在安全模式下杀毒也没用
我开机时跳出好几个出错窗口
其中一个是      windows找不到文件’：’。请确定文件名是否正确后，再试一次。要搜索文件，请单击 开始 按钮，然后单击搜索
瑞星防火墙现在也打不开了，更新也不行了
gototop
 
达达络勃
头像
拙长孩提狮
  • 帖子:75
  • 注册: 2006-09-12
  • 来自:
发表于： 2006-09-12 14:09 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

请大家帮帮忙啊！！！！
gototop
 
达达络勃
头像
拙长孩提狮
  • 帖子:75
  • 注册: 2006-09-12
  • 来自:
发表于： 2006-09-12 14:23 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

刚才又发现瑞星杀毒软件的杀毒日志也找不到了
gototop
 
达达络勃
头像
拙长孩提狮
  • 帖子:75
  • 注册: 2006-09-12
  • 来自:
发表于： 2006-09-12 14:48 | 只看楼主 短消息 资料
字号： 小 中 大 6楼

帮帮我！！！！

附件附件:

下载次数:202
文件类型:application/octet-stream
文件大小:
上传时间:2006-9-12 14:48:22
描述:
gototop
 
baohe
头像
大版主
  • 帖子:72578
  • 注册: 2003-04-10
  • 来自:
年度优秀版主奖端午辟邪香囊卡卡名人堂就爱不长大论坛9周年纪念09欢乐圣诞十周年年度风云人物2012我眼中的你们茶馆劳模瑞星金牌用户十一周年勋章
发表于： 2006-09-12 14:59 | 短消息 资料
字号： 小 中 大 7楼

【回复“达达络勃”的帖子】

1、结束进程：C:\WINDOWS\System32\SVOHOST.exe
2、关闭所有应用程序。用HijackThis修复：
R3 - URLSearchHook: YOK Search Class - {88351CEF-BAC0-4A9B-8380-31A173E2926F} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
F3 - REG:win.ini: load=; ?矹岠
F3 - REG:win.ini: load=; ?矹岠 词矵? 逷矵峈 岨 鲤�耈砎??
F3 - REG:win.ini: run=; ?矹岠 词矵? 逷矵峈 岨 ?�耈砎??

O2 - BHO: IDDTInitObj Class - {15DDE989-CD45-4561-BF99-D22C0D5C2B74} - F:\PROGRA~1\sina\UC\UCddt\ddtinit.dll
O2 - BHO: IExpress - {27E96DE0-8211-42CF-9A1E-FA6246A95B77} - C:\WINDOWS\System32\iexpress.dll
O2 - BHO: IEHandle Class - {30EBA2E2-58B2-4980-9C41-F12F5F1422C5} - C:\WINDOWS\System32\tpHandle.dll
O2 - BHO: DeskSpread - {492B8F66-B8CF-4F7A-B0EE-B7383B92F5BA} - C:\PROGRA~1\DESKSP~1\DESKSP~1.DLL
O2 - BHO: KillObj Class - {66C28884-4E5D-494B-80C9-CAA27528FD6D} - F:\PROGRA~1\sina\UC\UCddt\ddtkillw.ocx
O2 - BHO: 珊瑚虫工具栏 - {75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
O2 - BHO: IMU IE HELP - {9A0527C1-4D5F-4e45-9D28-6257F75EDDB1} - C:\WINDOWS\System32\imuiepls.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O3 - Toolbar: 珊瑚虫工具栏 - {F869BB38-FFEF-4589-B986-610B7AD0ADA2} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
O4 - HKLM\..\Run: [EssSpkPhone] ; esscw10.exe
O4 - HKLM\..\Run: [SoundMam] C:\WINDOWS\System32\SVOHOST.exe
O4 - HKLM\..\Run: [uc] ;
O4 - HKLM\..\Run: [YOKAssiant] ; ; Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O16 - DPF: {229610B2-3C6D-41EE-BD17-4D929DD16B3D} (Mediaplay Control) - http://www.4510888.com/MediaplayProj1.ocx
O16 - DPF: {339C1EE2-1029-46B8-81F1-360217F26FC4} (VGAPlayer Control) - http://219.144.186.220/gdsx/77/VGAPlayer.cab
O16 - DPF: {3A2B370C-BA0A-11D1-B137-0000F8753F5D} (Microsoft Chart Control 6.0 (SP4) (OLEDB)) - http://www.fangdi.com.cn/mschart.cab
O16 - DPF: {7FC22A16-79E6-4787-9C96-B6359BB1106D} (DigitalTrafic Control) - http://www.jt.sh.cn/trafficmap/jtj.cab
O16 - DPF: {878FA04A-1689-4359-BAB4-9DB29BC4B1BD} (DigitalTrafic Control) - http://www.jt.sh.cn/chaxun/digitaltrafic.cab
O16 - DPF: {8819C261-5B61-4628-908C-9BE795EABEC3} (IE Class) - http://easyabc.95599.cn/download/ABC.cab
O16 - DPF: {88734439-46D0-42C0-A13F-7E881EE550CF} (Filetran Control) - http://www.bluesky.cn/download/filetran.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cab
O16 - DPF: {99888952-AC62-437C-AFC6-7B5CF05A7F2F} (IEDown Class) - http://download.ourgame.com/IEDown.cab
O16 - DPF: {9A0527C1-4D5F-4E45-9D28-6257F75EDDB1} (IEBHOObj Class) - http://download.imuweb.com/client/chatatwill/ie/imuiepls.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab27513.cab
O16 - DPF: {BA0F088C-72C1-475A-92F8-42391DEF6961} (Blueskyvoice Control) - http://www.bluesky.cn/download/blueskyvoice_27.cab
O16 - DPF: {C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} (Kingsoft DUBA OnlineScan) - http://duba.2dai.com/KAVClean.CAB
O16 - DPF: {CF051549-EDE1-40F5-B440-BCD646CF2C25} (Ppinstall Control) - http://popo.163.com/install/ppinstall.cab
O16 - DPF: {CF85459D-DFA7-4028-A065-3C6D1356DCC8} (CertInstall Control) - http://gd.chinavnet.com/CertInstall.cab
O23 - Service: Network Logon (NetWorkLogon) - Unknown owner - rundll32.exe (file missing)
3、重启系统。显示隐藏文件。删除上述加载项指向的文件。
4、右击其它硬盘分区盘符，点击“打开”（千万不要双击打开任何分区！），在分区根目录下找找，可能还有autorun.inf以及与此autorun.inf同一时间创建的.exe文件，也要一一删除。
5、用LSPFix修复：
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\ws2_64.dll' missing
gototop
 
达达络勃
头像
拙长孩提狮
  • 帖子:75
  • 注册: 2006-09-12
  • 来自:
发表于： 2006-09-12 17:29 | 只看楼主 短消息 资料
字号： 小 中 大 8楼

谢谢haobe斑竹的帮助
1.2.没问题
3.怎么删除，用HijackThis软件还是自己一个一个找了删除
4.找过了，没有这些文件，可能是我用最新升级的瑞星软件杀了
5.O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll  修复了
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\ws2_64.dll' missing    没找到
gototop
 
达达络勃
头像
拙长孩提狮
  • 帖子:75
  • 注册: 2006-09-12
  • 来自:
发表于： 2006-09-12 17:29 | 只看楼主 短消息 资料
字号： 小 中 大 9楼

现在扫描情况为
Logfile of HijackThis v1.99.1
Scan saved at 17:12:03, on 2006-9-12
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
f:\Program Files\rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
f:\Program Files\rising\Rav\Ravmond.exe
c:\Program Files\Rising\Rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
f:\Program Files\rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Rising\Rfw\RfwMain.exe
C:\WINDOWS\System32\nvsvc32.exe
F:\Program Files\rising\Rav\RavTask.exe
C:\WINDOWS\System32\ctfmon.exe
F:\Program Files\rising\Rav\Ravmon.exe
C:\WINDOWS\System32\wuauclt.exe
F:\Program Files\Maxthon\Maxthon.exe
C:\Documents and Settings\mxy\桌面\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe

O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - f:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll
O4 - HKLM\..\Run: [RavTask] "f:\Program Files\rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "c:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: &使用迅雷下载 - f:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - f:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - F:\Program Files\KuGoo\KuGoo3DownX.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Program Files\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - F:\Program Files\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Program Files\Tencent\qq\SendMMS.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O23 - Service: Network Logon (NetWorkLogon) - Unknown owner - rundll32.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\Program Files\Rising\Rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - f:\Program Files\rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - f:\Program Files\rising\Rav\Ravmond.exe
gototop
 
westbeck
头像
初生襁褓狮
  • 帖子:3572
  • 注册: 2006-07-27
  • 来自:
发表于： 2006-09-12 17:33 | 短消息 资料
字号： 小 中 大 10楼

LSPFix(汉化版) 下载地址:http://forum.ikaka.com/topic.asp?board=67&artid=5188931
(8楼...)
同时下载WinsockXPFix.exe...(2楼...)
运行LSPFix ... 勾上 我确定要进行修复操作 ...
然后将quartz32.dll
移到右边...点下完成...
----------------------------------------------------------------
如果在操作之后不能上网...请用WinsockXPFix.exe 修复一下即可...安全模式下..
gototop
 
<<上一主题|下一主题>>
12   1  /  2  页   跳转页
页面顶部
Powered by Discuz!NT