瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 急!由于上了黄色网站,瑞星变成了小辣椒打不开了!

1   1  /  1  页   跳转

[求助] 急!由于上了黄色网站,瑞星变成了小辣椒打不开了!

急!由于上了黄色网站,瑞星变成了小辣椒打不开了!

急!由于上了黄色网站,瑞星变成了小辣椒打不开了!请高手帮帮忙1

用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; WPS)
分享到:
gototop
 

回复:急!由于上了黄色网站,瑞星变成了小辣椒打不开了!

该用户帖子内容已被屏蔽
gototop
 

回复:急!由于上了黄色网站,瑞星变成了小辣椒打不开了!

扫日志前关闭无用进程,如QQ,迅雷

到大的软件站,如天空,太平洋,下载2.5版的SReng(推荐)

地址http://www.skycn.com/soft/45002.html#download
SREng/智能扫描

等扫描完成,保存日志(LOG格式)
日志贴到反病毒区或流行病毒区
PS:如主程序SREng**.exe无法运行,导致无法扫描日志
将主程序改名为小狮子.bat
gototop
 

回复 2F 魔2008神 的帖子

我试过,在安全模式下一打开瑞星杀毒也会自动关闭
gototop
 

回复:急!由于上了黄色网站,瑞星变成了小辣椒打不开了!

日志!!!!!!!!!!
要日志!!!!!!!!!
先看版规!!!!!!!!!
http://bbs.ikaka.com/showtopic-6979213.aspx
gototop
 

回复 3F aaccbbdd 的帖子

大哥这是我的日志,请帮助下:
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>  [(Verified)Microsoft Windows XP Publisher]
    <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background>  [(Verified)Microsoft Windows XP Publisher]
    <Skype><"C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized>  [(Verified)Skype Technologies SA]
    <Alitalk><C:\Program Files\Alisoft\Alitalk\AliTalk.EXE>  [(Verified)"Alibaba Software(Shanghai)Co,. Ltd"]
    <TudouVAStart><G:\新建文件夹 (3)\飞速Tudou\TudouVA.exe>  [土豆网(www.tudou.com)]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows XP Publisher]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows XP Publisher]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows XP Publisher]
    <nwiz><nwiz.exe /install>  [NVIDIA Corporation]
    <runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup>  [Beijing Rising Technology Co., Ltd.]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [(Verified)Beijing Rising Science and Technology Corporation Limited]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [(Verified)"RealNetworks, Inc."]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>  [NVIDIA Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <KKDelay><C:\Program Files\Rising\AntiSpyware\RunOnce.exe>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows XP Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows XP Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><nhmxdjkl.dll>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows XP Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Science and Technology Corporation Limited]
    <{7C8D1401-A58D-A81C-CD24-A5915C4517C7}><C:\WINDOWS\System32\mnmhgsrv.dll>  []
    <{A9895933-6636-4281-BC58-EE6DE2AF96E3}><C:\WINDOWS\System32\ddserh.dll>  []
    <{C0595A7E-2E2F-4B34-A83A-019270A0A464}><C:\WINDOWS\System32\tdffdl.dll>  [N/A]
    <{DC3D30AE-0380-4151-8934-EE98A34B0370}><C:\WINDOWS\System32\mfdesy.dll>  [N/A]
    <{7A041F13-A111-12A3-B0CF-F99818AA68A7}><C:\WINDOWS\System32\zxmsdwin.dll>  []
    <{55694105-5108-9405-3695-954187462155}><C:\WINDOWS\System32\mpwdeapi.dll>  []
    <{EB71E0B3-E97D-4D30-8733-E28266467617}><>  [N/A]
    <{00010001-0001-0001-0001-00010001BB15}><C:\WINDOWS\System32\adsntzt.dll>  []
    <{00050005-0005-0005-0005-00050005BB15}><C:\WINDOWS\System32\cliconfgzx.dll>  []
    <{45AADFAA-DD36-42AB-83AD-0521BBF58C24}><>  [N/A]
    <{8C41B7F7-3168-400D-A702-0E7EFE0BA304}><C:\WINDOWS\System32\sgdewg.dll>  []
    <{B29583D8-033A-4B9F-8553-7C5458F3FB8E}><C:\WINDOWS\System32\jdsaex.dll>  []
    <{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}><>  [N/A]
    <{841529CB-7F77-4B99-A895-B5441E0D302F}><C:\WINDOWS\System32\jfrwdh.dll>  [N/A]
    <{87FD640A-158F-48AC-FD14-1597F14A9778}><C:\WINDOWS\System32\mndshsrv.dll>  []
    <{47AC9076-C898-B098-D098-A18319080974}><C:\WINDOWS\System32\nhmxdjkl.dll>  []
    <{37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73}><C:\WINDOWS\System32\zywlcime.dll>  []
    <{461D2AB4-29A5-45C2-9134-D52272D3DE38}><C:\WINDOWS\System32\rfdswc.dll>  []
    <{81AF1CF6-D1C9-4C6A-AC01-EDE54E71945B}><C:\WINDOWS\System32\jfdses.dll>  []
    <{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}><C:\WINDOWS\System32\jggtsr.dll>  []
    <{84143967-B645-4BFF-B873-DA1DC886E9A7}><C:\WINDOWS\System32\cedafb.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <adsntzt.dll><C:\WINDOWS\System32\adsntzt.dll>  []
    <cliconfgzx.dll><C:\WINDOWS\System32\cliconfgzx.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player 6.4><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\mplayer2.inf,PerUserStub.NT>  [(Verified)Microsoft Windows XP Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows XP Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.0><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.Install.PerUser>  [(Verified)Microsoft Windows XP Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player 8><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Windows XP Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT