1   1  /  1  页   跳转

求救电脑高手

求救电脑高手

小弟的机子最近出了点问题,在E盘(非系统盘)的一个普通文件夹下出现以乱码命名的文件,文件名如?r? 絙G! bF!.竛&,有些还是超大的文件(有一个竟然有2G)。这些文件占了4G多的空间,用了一些方法杀不掉:重启后杀不掉,在安全模式下杀不掉,对话框提示“无法删除文件:无法读源文件或磁盘”但是用正版瑞星没有查出病毒或木马,其他的文件夹没事,就是这个文件夹有文件及文件夹的缺失,以及一些软件的安装程序的缺失,请各位高手帮下忙,给些良策,小弟谢了 另附上日志及如下:

Logfile of HijackThis v1.99.1
Scan saved at 1:24:38, on 2006-9-27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Rising\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Rising\Rising\Rav\Ravmond.exe
d:\program files\rising\rising\rfw\rfwsrv.exe
D:\Program Files\Rising\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
d:\program files\rising\rising\rfw\RfwMain.exe
D:\Program Files\Rising\Rising\Rav\RavTask.exe
D:\Program Files\Rising\Rising\Rav\Ravmon.exe
F:\PROGRA~1\鼠标驱动\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\maxthon\Max.exe
D:\Program Files\拼音加加\jj4\jjsvr4.exe
E:\program files\winrar\WinRAR.exe
E:\工具1\浏览器修复\HijackThis.exe

R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v14.dll
O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - C:\PROGRA~1\DESKAD~1\deskipn.dll (file missing)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Program Files\qq\QQIEHelper.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - E:\program files\迅雷\ComDlls\XunLeiBHO_002.dll
O2 - BHO: BDHlprObj Class - {CA92B524-BC8A-4610-BD2C-6BD3E28155D0} - C:\WINDOWS\DOWNLO~1\BDHelper.dll
O4 - HKLM\..\Run: [RavTask] "D:\Program Files\Rising\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "D:\Program Files\Rising\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [EM_EXEC] F:\PROGRA~1\鼠标驱动\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &使用迅雷下载 - E:\program files\迅雷\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - E:\program files\迅雷\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\qq\AddToNetDisk.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\PROGRA~1\OFFICE~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 导出当前页到超星阅览器(&A) - E:\program files\SSREADER36\ss_all.htm
O8 - Extra context menu item: 导出选中部分到超星阅览器(&S) - E:\program files\SSREADER36\ss_select.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\qq\AddEmotion.htm
O9 - Extra button: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - E:\program files\迅雷\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - E:\program files\迅雷\Thunder.exe
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\qq\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\qq\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{C86D4D8E-9FB7-42BA-A80B-EFB4F5285195}: NameServer = 202.103.224.68 202.103.225.68
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rising\Rav\Ravmond.exe
最后编辑2006-09-27 22:12:13.077000000
分享到:
gototop
 

应该是中病毒!

杀毒!
gototop
 

正版瑞星没杀出毒啊,大概是什么病毒啊?
gototop
 

修复F2 - REG:system.ini: UserInit=userinit.exe,
将E盘有用的文件复制到其它盘中再将它格式化。
gototop
 

好,谢谢,看来只有格式化这招了
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT