瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 〓〓〓〓超强QQ尾巴 怎么杀!!!!有日志呀 快帮忙!!!!

12   1  /  2  页   跳转

〓〓〓〓超强QQ尾巴 怎么杀!!!!有日志呀 快帮忙!!!!

〓〓〓〓超强QQ尾巴 怎么杀!!!!有日志呀 快帮忙!!!!

要发送给您文件“超模纳奥米诱惑写真,胴体勾勒完美曲线!.exe(25KB)”,您是要接收,另存为还是谢绝该文件

我的同学的 老给我发 我让他用最新的 瑞星杀了 一遍 到是杀到不少 可杀完了

还有这个 怎么杀呀
最后编辑2005-08-18 22:31:48
分享到:
gototop
 

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      10:58:41, 日期 2006-2-17
操作系统:  Windows XP  (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 (6.00.2600.0000)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\lsas32.exe
C:\Program Files\NewRemoteControl\NewRmtService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Rising\Rfw\rfwmain.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\seedupdate.exe
C:\WINDOWS\System32\Ctfmon.exe
C:\program files\zangoclient\zanu.exe
C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\skdaemon.exe
D:\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\DuDu\DddClient\DuDuAcc.exe
D:\迅雷\Thunder.exe
C:\Program Files\DuDu\DddClient\dudupros.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Tencent\QQ\QQ.exe
C:\Program Files\Tencent\QQ\TMDlls\TIMPlatform.exe
D:\迅雷\TDUpdate.exe
D:\迅雷\MediaIssue\Issue.exe
C:\WINDOWS\System32\conime.exe
C:\Program Files\Tencent\QQTang\Client.exe
C:\WINDOWS\System32\rav32.exe
C:\WINDOWS\System32\assiste.exe
C:\Program Files\HijackThis1991汉化版\HijackThis1991zww.exe

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - _{BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
O1 - Hosts: 210.17.251.234 bbbppp.com
O1 - Hosts: 210.17.251.234 www.bbbppp.com
O1 - Hosts: 210.17.251.234 666fff.com
O1 - Hosts: 210.17.251.234 www.666fff.com
O1 - Hosts: 210.17.251.234 ok0809.com
O1 - Hosts: 210.17.251.234 www.ok0809.com
O1 - Hosts: 210.17.251.234 qq558899.com
O1 - Hosts: 210.17.251.234 www.qq558899.com
O1 - Hosts: 210.17.251.234 hkqw.com
O1 - Hosts: 210.17.251.234 www.hkqw.com
O1 - Hosts: 210.17.251.234 65188.com
O1 - Hosts: 210.17.251.234 www.65188.com
O1 - Hosts: 210.17.251.234 665858.com
O1 - Hosts: 210.17.251.234 www.665858.com
O1 - Hosts: 210.17.251.234 tm5656.com
O1 - Hosts: 210.17.251.234 www.tm5656.com
O1 - Hosts: 210.17.251.234 88235.com
O1 - Hosts: 210.17.251.234 www.88235.com
O1 - Hosts: 210.17.251.234 k88688.com
O1 - Hosts: 210.17.251.234 www.k88688.com
O1 - Hosts: 210.17.251.234 22688.cn
O1 - Hosts: 210.17.251.234 www.22688.cn
O1 - Hosts: 210.17.251.234 30887.com
O1 - Hosts: 210.17.251.234 www.30887.com
O1 - Hosts: 210.17.251.234 331188.net
O1 - Hosts: 210.17.251.234 www.331188.net
O1 - Hosts: 210.17.251.234 50958.com
O1 - Hosts: 210.17.251.234 www.50958.com
O1 - Hosts: 210.17.251.234 518778.com
O1 - Hosts: 210.17.251.234 www.518778.com
O1 - Hosts: 210.17.251.234 hongkong3618.com
O1 - Hosts: 210.17.251.234 www.hongkong3618.com
O1 - Hosts: 210.17.251.234 kk4444.com
O1 - Hosts: 210.17.251.234 www.kk4444.com
O1 - Hosts: 210.17.251.234 xp668.com
O1 - Hosts: 210.17.251.234 www.xp668.com
O1 - Hosts: 210.17.251.234 iebar.t2t2.com
O1 - Hosts: 210.17.251.234 fh94.com
O1 - Hosts: 210.17.251.234 www.fh94.com
O1 - Hosts: 210.17.251.234 ww678.com
O1 - Hosts: 210.17.251.234 www.ww678.com
O1 - Hosts: 210.17.251.234 00559.com
O1 - Hosts: 210.17.251.234 www.00559.com
O1 - Hosts: 210.17.251.234 25889.com
O1 - Hosts: 210.17.251.234 www.25889.com
O1 - Hosts: 210.17.251.234 49558.com
O1 - Hosts: 210.17.251.234 www.49558.com
O1 - Hosts: 210.17.251.234 6868888.com
O1 - Hosts: 210.17.251.234 www.6868888.com
O1 - Hosts: 210.17.251.234 7575333.com
O1 - Hosts: 210.17.251.234 www.7575333.com
O1 - Hosts: 210.17.251.234 85599.com
O1 - Hosts: 210.17.251.234 www.85599.com
O1 - Hosts: 210.17.251.234 88993.com
O1 - Hosts: 210.17.251.234 www.88993.com
O1 - Hosts: 210.17.251.234 f689.com
O1 - Hosts: 210.17.251.234 www.f689.com
O1 - Hosts: 210.17.251.234 hk3728.com
O1 - Hosts: 210.17.251.234 www.hk3728.com
O1 - Hosts: 210.17.251.234 k3355.com
O1 - Hosts: 210.17.251.234 www.k3355.com
O1 - Hosts: 210.17.251.234 kk766.com
O1 - Hosts: 210.17.251.234 www.kk766.com
O1 - Hosts: 210.17.251.234 kkkiii.com
O1 - Hosts: 210.17.251.234 www.kkkiii.com
O1 - Hosts: 210.17.251.234 kkkjjj.com
O1 - Hosts: 210.17.251.234 www.kkkjjj.com
O1 - Hosts: 210.17.251.234 pp678.com
O1 - Hosts: 210.17.251.234 www.pp678.com
O1 - Hosts: 210.17.251.234 56598.com
O1 - Hosts: 210.17.251.234 www.56598.com
O1 - Hosts: 210.17.251.234 hk5868.com
O1 - Hosts: 210.17.251.234 hk5868.com
O1 - Hosts: 210.17.251.234 qq558899.com
O1 - Hosts: 210.17.251.234 www.qq558899.com
O1 - Hosts: 210.17.251.234 tm669.com
O1 - Hosts: 210.17.251.234 www.tm669.com
O1 - Hosts: 210.17.251.234 68599.com
O1 - Hosts: 210.17.251.234 www.68599.com
O1 - Hosts: 210.17.251.234 358619.com
O1 - Hosts: 210.17.251.234 www.358619.com
O1 - Hosts: 210.17.251.234 3c6.com
O1 - Hosts: 210.17.251.234 www.3c6.com
O1 - Hosts: 210.17.251.234 f888888.com
O1 - Hosts: 210.17.251.234 www.f888888.com
O1 - Hosts: 210.17.251.234 hh8hh.com
O1 - Hosts: 210.17.251.234 www.hh8hh.com
O1 - Hosts: 210.17.251.234 hongkong998.com
O1 - Hosts: 210.17.251.234 www.hongkong998.com
O1 - Hosts: 210.17.251.234 lh8688.com
O1 - Hosts: 210.17.251.234 www.lh8688.com
O1 - Hosts: 210.17.251.234 lh8688.net
O1 - Hosts: 210.17.251.234 www.lh8688.net
O1 - Hosts: 210.17.251.234 p888888.com
O1 - Hosts: 210.17.251.234 www.p888888.com
O1 - Hosts: 210.17.251.234 vv6888.com
O1 - Hosts: 210.17.251.234 www.vv6888.com
O1 - Hosts: 210.17.251.234 y8y88.com
O1 - Hosts: 210.17.251.234 www.y8y88.com
O1 - Hosts: 210.17.251.234 y8y88.net
O1 - Hosts: 210.17.251.234 www.y8y88.net
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll (file missing)
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v5.dll
O2 - BHO: SABHO - {21B4ACC4-8874-4AEC-AEAC-F567A249B4D4} - c:\program files\zangoclient\zanuhook.dll
O2 - BHO: Wbho Class - {40E3A34A-3282-41F8-AD2C-051BAB96AD4A} - C:\WINDOWS\System32\Usign.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: DDDMon Class - {6BDE1669-B490-48E3-B668-456314F2D6C3} - C:\Program Files\DuDu\DddClient\dddiemon.dll
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\CnsHook.dll
O2 - BHO: YiSou - {EF1D17A9-089F-40cc-8D64-7324CDEBA0DB} - C:\PROGRA~1\YiSou\yisoub.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O3 - IE工具栏增项: 一搜工具条 - {115F6E46-FCBC-41ed-B3B5-3BDDD4AAB5E5} - C:\PROGRA~1\YiSou\yisou.dll
O3 - IE工具栏增项: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - IE工具栏增项: 完美网译通 - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - C:\WINDOWS\WORLD2\TOOLBAR\hmtoolbar.dll
O3 - IE工具栏增项: ISTbar - {FAA356E4-D317-42a6-AB41-A3021C6E7D52} - C:\Program Files\ISTbar\istbarcm.dll
O3 - IE工具栏增项: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - D:\BitComet\BitCometBar\BitCometBar0.1.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [NewRmtService ] C:\Program Files\NewRemoteControl\NewRmtService.exe
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [update] seedupdate.exe
O4 - 启动项HKLM\\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - 启动项HKLM\\Run: [internat] internat.exe
O4 - 启动项HKLM\\Run: [internat.exe] internat.exe
O4 - 启动项HKLM\\Run: [] C:\WINDOWS\System32\Ctfmon.exe
O4 - 启动项HKLM\\Run: [!!QQKav] C:\Documents and Settings\lenovo\桌面\qqkav.exe
gototop
 

O4 - 启动项HKLM\\Run: [zanu] c:\program files\zangoclient\zanu.exe
O4 - 启动项HKLM\\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - 启动项HKLM\\Run: [RavMon] C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Startup: 迅雷4.lnk = ?
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O4 - Global Startup: 联想键盘驱动程序.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: 桌面传媒.lnk = ?
O4 - Global Startup: DuDu加速器.lnk = C:\Program Files\DuDu\DddClient\DuDuAcc.exe
O8 - IE右键菜单中的新增项目: !搜一搜 - res://C:\WINDOWS\DOWNLO~1\CnsMinEx.dll/1003
O8 - IE右键菜单中的新增项目: !搜一搜(&S) - res://C:\Program Files\yisou\yisou.dll/232
O8 - IE右键菜单中的新增项目: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - IE右键菜单中的新增项目: &使用DuDu 加速器下载 - res://C:\Program Files\DuDu\DddClient\dddmext.dll/202
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - D:\迅雷\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - D:\迅雷\getAllurl.htm
O8 - IE右键菜单中的新增项目: 反向链接 - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - IE右键菜单中的新增项目: 类似网页 - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - IE右键菜单中的新增项目: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O9 - 浏览器额外的按钮: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm?pid=84183_1006 (file missing)
O9 - 浏览器额外的按钮: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
O9 - 浏览器额外的按钮: 下载管理 - {3DB9F45E-AA74-4373-A466-C18A9F1C500D} - C:\Program Files\DuDu\DddClient\DuDuAcc.exe
O9 - 浏览器额外的“工具”菜单项: 下载管理 - {3DB9F45E-AA74-4373-A466-C18A9F1C500D} - C:\Program Files\DuDu\DddClient\DuDuAcc.exe
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file missing)
O9 - 浏览器额外的按钮: QQKav - {55080AC5-8FAA-4C8E-9D8D-494FB1CC6277} - qqkav.exe (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://hot.3721.com/rd/shop_btn.htm (file missing)
O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: 卓越 - {8DE0FCD4-5EB5-11D3-AD25-00002100131B} - C:\PROGRA~1\Kingsoft\FastAIT\IEPlugin.dll
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-219?cn=song;icon;hp&mpro=http://www.ebay.com.cn (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-219?cn=song;icon;hp&mpro=http://www.ebay.com.cn (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O11 - Options group: [!CNS]  上网助手-地址栏搜索
O11 - Options group: [TBH] QQ地址栏搜索
O14 - IERESET.INF: START_PAGE_URL=http://www.legend.com
O15 - “受信任的站点”中添加项: http://ny.contentmatch.net (HKLM)
O16 - DPF: {047C50E8-A451-4ECC-9920-8E5C0F8956E9} (seedupdate Class) - http://ad.tom.com/seedupdateatl.cab
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} (Installer Class) - http://www.xxxtoolbar.com/ist/softwares/v4.0/0006_regular.cab
O16 - DPF: {99410CDE-6F16-42ce-9D49-3807F78F0287} (ClientInstaller Class) - http://www.zango.com/GetZango/Download/zangoax.cab
O16 - DPF: {EF9F1C48-1A63-495A-9317-B7B71B34A9CF} (Msp Class) - http://ddddl.dudu.com/ddd/update/plugin/dudumsp.cab
O16 - DPF: {FC87A650-207D-4392-A6A1-82ADBC56FA64} (MultiDist) - http://xbs.mtree.com/mt/dialers/fc/MultiDistFC.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E9828D1-9ED2-4DCC-BB1A-27CC8414063A}: NameServer = 202.99.160.68 202.99.168.8
O17 - HKLM\System\CCS\Services\Tcpip\..\{FB84151F-3295-4B54-874F-CA6AE526603D}: NameServer = 202.99.160.68
O18 - 列举现有的协议: koboo - {7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6} - C:\WINDOWS\System32\mbprot.dll
O20 - Winlogon Notify: skwinlogon - C:\WINDOWS\SYSTEM32\dll.dll
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - C:\Program Files\Rising\Rfw\rfwsrv.exe

gototop
 

O20 - Winlogon Notify: skwinlogon - C:\WINDOWS\SYSTEM32\dll.dll
这项好像.......
gototop
 

还是要自觉的!!!
gototop
 

01项都是什么啊??
gototop
 

我不知道 呀 我的 同学的 他菜鸟一个 我看了 都吃惊

这么多 流氓软件  大家说怎么改呀  困难呀 这么多
gototop
 

C:\WINDOWS\System32\rav32.exe
这又是什么啊??
好像不对阿!
我的没有啊
gototop
 

C:\WINDOWS\System32\rav32.exe
进程中也有
可能就是它

gototop
 

有知道的不  不好的 都改了  帮忙
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT