瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 先是瑞星的监控和主程序不能打开,删除后不能重装,现在机器老是死机

1   1  /  1  页   跳转

先是瑞星的监控和主程序不能打开,删除后不能重装,现在机器老是死机

先是瑞星的监控和主程序不能打开,删除后不能重装,现在机器老是死机

瑞星和金山都不能装,这病毒也太霸道了吧
现在每隔几小时就死一次机,我快受不了了,谁来救救我
最后编辑2005-10-24 10:09:03
分享到:
gototop
 

扫个日志上来
gototop
 

咋扫,对电脑不太懂哦
需要什么的日志
gototop
 

下载:http://forum.ikaka.com/download.asp?id=6979243
然后解压,执行系统扫描!
gototop
 

是这个吗,麻烦您给看看

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      9:52:13, 日期 2005-10-24
操作系统:  Windows XP SP2 (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\KAV2005\KWatch.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\smss.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\KAV2005\KPfwSvc.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\jason hoo\桌面\HijackThis1991zww.exe

F2 - REG:system.ini: Shell=Explorer.exe 1
O3 - IE工具栏增项: 卡卡安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [Torjan Program] C:\WINDOWS\smss.exe
O4 - 启动项HKLM\\RunServices: [Torjan Program] C:\WINDOWS\smss.exe
O4 - HKCU\..\Run: [RegBar] regsvr32.exe /u C:\progra~1\blogmark\bocaitoolbar.dll /s /i /n
O12 - IE插件,支持文件类型.spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (AxSubmitControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {8F9E8A28-C296-4C6F-9A57-8FE4374135A1} (TV Stream Source) - http://218.57.9.18/down/0510/CHaos.cab
O16 - DPF: {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} (QQPlayer Control) - http://219.133.62.247/QQPlayer.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} (pCastPanel Class) - http://pcaststatic.mop.com/dn/files/pCastCtl_1.0.0.71_20050929.cab
O18 - 列举现有的协议: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - NT 服务: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - NT 服务: Kingsoft Personal Firewall Service (KPfwSvc) - Kingsoft Corporation - C:\KAV2005\KPfwSvc.EXE
O23 - NT 服务: Kingsoft Antivirus KWatch Service (KWatchSvc) - Kingsoft Corporation - C:\KAV2005\KWatch.EXE
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: MySQL - Unknown owner - c:/mysql/bin/mysqld-nt.exe (file missing)

gototop
 

O4 - 启动项HKLM\\Run: [Torjan Program] C:\WINDOWS\smss.exe
O4 - 启动项HKLM\\RunServices: [Torjan Program] C:\WINDOWS\smss.exe
删除以上两个!
C:\WINDOWS\smss.exe
查杀方法:http://forum.ikaka.com/topic.asp?board=28&artid=6202404
gototop
 

EN 我试试
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT