1   1  /  1  页   跳转

Backdoor.Gpigeon.2006.zb  删不了急

Backdoor.Gpigeon.2006.zb  删不了急

我瑞星杀出来在C盘上有6个文件有Backdoor.Gpigeon.2006.zb  病毒能删除,但开机后杀还有这6个病毒,为什么?怎样可以杀光它.在线等
             
                     谢谢各位高手说的清楚一点本人是菜鸟
最后编辑2006-08-22 16:13:10
分享到:
gototop
 

参考:http://forum.ikaka.com/topic.asp?board=28&artid=6202404
gototop
 

O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - E:\迅雷\ComDlls\XunLeiBHO_002.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RavTask] "E:\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: &使用迅雷下载 - E:\迅雷\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - E:\迅雷\Program\GetAllUrl.htm
O9 - Extra button: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - E:\迅雷\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - E:\迅雷\Thunder.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O14 - IERESET.INF: START_PAGE_URL=about:blank
O16 - DPF: {7A97B026-F3BB-49F6-BEAC-75021AD45B4E} (SLAProbe Control) - http://202.102.15.200:81/sla/SLAProbe/SLAProbe.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{3299AE1A-AD95-4F09-9335-A551FB10E695}: NameServer = 61.177.7.1 221.228.255.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{3299AE1A-AD95-4F09-9335-A551FB10E695}: NameServer = 61.177.7.1 221.228.255.1
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Procedure (RPC) (Remote Procedure Call) - Unknown owner - C:\WINDOWS\nt_Server2006.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - E:\Rising\rav\CCenter.exe
O23 - Service: Rising Realtime Monitor Service (RsRavMon) - rising - E:\Rising\rav\RavMonD.exe
gototop
 

以上是我的日志,请检查一下
gototop
 

以上是我的日志,请检查一下
gototop
 

高手在哪里
gototop
 

O23 - Service: Remote Procedure (RPC) (Remote Procedure Call) - Unknown owner - C:\WINDOWS\nt_Server2006.exe
开始-运行输入regedit,打开注册表编辑器,定位到HKEY_LOCAL_MACHINE\ SYSTEM \ CURRENTCONTROLSET \ SERVICES分支,删除左栏中的病毒服务名Remote Procedure Call
重启安全模式显示隐藏文件删除:
C:\WINDOWS\nt_Server2006.exe
C:\WINDOWS\nt_Server2006.dll(若有的话)
C:\WINDOWS\nt_Server2006key.dll(若有的话)
C:\WINDOWS\nt_Server2006_hook.dll(若有的话)

gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT