#15 今天和往常一样看论坛听歌，然后感觉游戏双开有点卡，就想关掉QQ，然后从资源管理器那看，发现好多这个东西jts3.exe wls3.exe mhs3.exe#15气死我了，我搜索百度，竟然是病毒#15为什么我的瑞星没提醒啊
#15我该怎么办啊，我1点发现的，现在弄到3点啦，他们说是威金变种，可是我下了瑞星专杀威金，都没查出病毒#15
#15我已经在资源管理器终止程序了，现在没有了，可是一定还在我的电脑里，怎么办怎么办#15哪个哥哥教教我怎么办啊，不弄好我睡不着觉了
#15我玩梦幻西游的，想知道那些病毒会不会盗我的号啊，虽然瑞醒已经游戏保护密了，可是我还是好担心啊~~~

日志

#15我不知道怎么弄日志
#15现在又有了，谁教我怎么弄我截图了
#15救命啊，重起电脑又自己出现了

#15救命啊，我看到病毒我就烦，弄了一个晚上都没弄好，我该怎么办
有厉害的人教我吗，求求你们了

结束进程，删除原文件实试，在安全模式下杀杀看

去下载sreng2,关闭qq，下载软件等一切不必要的程序后扫个日志上来，一次贴不完分段贴，不要修改
http://www.kztechs.com/sreng/sreng2.zip

我已经在安全模式下删掉那几个文件了
现在在资源管理器也没看到了，但网上说那些是威金变种#15可是我下专杀又杀不掉
还有，可以告诉我怎么下载日志吗，我不会弄哦

嗯了,没错是威金

威金专业的专杀工具。可以修复被感染的程序。
http://www.antiy.com/download/KillViking.zip

金山威金专杀下载地址:
http://db.kingsoft.com/download/3/246.shtml

瑞星威金专杀下载地址:
http://down1.tech.sina.com.cn/download/down_contents/1151769600/28441.shtml

http://www.chenoe.com/downloads.asp?file=AntiVirus.rar 

PS:最好一次都下载去交叉检查,专杀过程中不要运行任何东西..~

正在运行的进程
[PID: 420][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
[PID: 492][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
[PID: 516][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 560][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
[PID: 572][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
[PID: 728][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
[PID: 784][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
[PID: 1360][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2144 (xpsp.040601-1829)]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\WiNice.dll]  [N/A, ]
    [D:\系统软件\其他软件\rarext.dll]  [N/A, ]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [D:\杀毒软件\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 1692][D:\杀毒软件\Rfw\RfwMain.exe]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 70]
    [D:\杀毒软件\Rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [D:\杀毒软件\Rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [D:\杀毒软件\Rfw\RfwCtrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [D:\杀毒软件\Rfw\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [D:\杀毒软件\Rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [D:\杀毒软件\Rfw\PSAPI.DLL]  [Microsoft Corporation, 4.00]
[PID: 1892][D:\杀毒软件\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [D:\杀毒软件\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [D:\杀毒软件\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\杀毒软件\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [D:\杀毒软件\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 192][F:\Program Files\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6]
    [F:\Program Files\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 228][C:\Program Files\Chinanet\VnetClient.exe]  [, 2005, 11, 14, 1]
    [C:\Program Files\Chinanet\Communicate.dll]  [0, 2005, 3, 3, 1]
    [C:\Program Files\Chinanet\DialModule.dll]  [GDCN, 2005, 11, 15, 1]
    [C:\Program Files\Chinanet\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\PROGRA~1\Chinanet\CLIENT~1.DLL]  [, 2004, 2, 28, 1]
    [C:\PROGRA~1\Chinanet\PLUGIN~1.OCX]  [, 2005, 7, 27, 1]
    [C:\PROGRA~1\Chinanet\sign.dll]  [0, 2004, 12, 1, 1]
    [C:\PROGRA~1\Chinanet\WEBPLU~1.DLL]  [, 2005, 8, 18, 1]
    [C:\PROGRA~1\Chinanet\PostPlug.dll]  [, 2004, 12, 16, 2]
    [C:\PROGRA~1\Chinanet\ADVERT~1.OCX]  [, 2005, 10, 13, 1]
    [C:\PROGRA~1\Chinanet\VnetBs.ocx]  [, 2004, 11, 18, 1]
    [C:\PROGRA~1\Chinanet\ACCOUN~2.DLL]  [, 2005, 11, 14, 1]
    [C:\PROGRA~1\Chinanet\AccountMgr.dll]  [, 2005, 11, 14, 17]
    [C:\PROGRA~1\Chinanet\VnetSkin.ocx]  [GDDC, 2005, 11, 14, 1]
    [C:\PROGRA~1\Chinanet\DialogStyle.dll]  [, 1, 0, 0, 1]
    [C:\PROGRA~1\Chinanet\Timer.ocx]  [, 2005, 10, 9, 14]
    [C:\PROGRA~1\Chinanet\PLUGIN~2.OCX]  [, 2005, 2, 24, 1]
    [C:\PROGRA~1\Chinanet\NEWMES~1.DLL]  [, 2005, 8, 26, 1]
    [C:\PROGRA~1\Chinanet\PassCtrl.dll]  [, 1, 0, 0, 1]
    [C:\PROGRA~1\Chinanet\PlugPush.dll]  [, 2004, 12, 21, 1]
    [C:\PROGRA~1\Chinanet\ALLINT~1.DLL]  [, 2004, 11, 23, 1]
    [C:\PROGRA~1\Chinanet\VNetLog.ocx]  [, 2005, 10, 9, 1]
    [C:\PROGRA~1\Chinanet\StatNum.dll]  [, 2004, 11, 18, 1]
    [C:\PROGRA~1\Chinanet\VNETON~1.OCX]  [, 2005, 3, 2, 1]
    [C:\PROGRA~1\Chinanet\ALLFUN~1.DLL]  [GDCN, 2005, 10, 9, 1]
    [C:\PROGRA~1\Chinanet\VnetOptLog.dll]  [, 2005, 9, 13, 9]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\Chinanet\DlgSkin.ocx]  [, 2005, 11, 14, 1]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1804][C:\WINDOWS\system32\wscntfy.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 3632][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2144 (xpsp.040601-1829)]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 3992][D:\杀毒软件\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43]
    [D:\杀毒软件\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [D:\杀毒软件\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\杀毒软件\Rav\rfwctrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [D:\杀毒软件\Rav\RsPPsys.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [D:\杀毒软件\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\杀毒软件\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [D:\杀毒软件\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [D:\杀毒软件\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [D:\杀毒软件\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
    [D:\杀毒软件\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
    [D:\杀毒软件\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [D:\杀毒软件\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [D:\杀毒软件\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [D:\杀毒软件\Rav\psapi.dll]  [Microsoft Corporation, 4.00]
    [D:\杀毒软件\Rav\HookWeb.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
    [D:\杀毒软件\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [D:\杀毒软件\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\杀毒软件\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [D:\杀毒软件\Rav\HookCont.dll]  [Rising, 19, 0, 0, 0]
    [D:\杀毒软件\Rav\SpamEng.dll]  [, 18, 0, 0, 6]
    [D:\杀毒软件\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 26]
    [D:\杀毒软件\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
    [D:\杀毒软件\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [D:\杀毒软件\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [D:\杀毒软件\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 41]
    [D:\杀毒软件\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25]
    [D:\杀毒软件\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [D:\杀毒软件\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
    [D:\杀毒软件\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [D:\杀毒软件\Rav\Unpacker.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [D:\杀毒软件\Rav\ScanPack.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 21]
    [D:\杀毒软件\Rav\RsVM.dll]  [, 19, 0, 0, 16]
    [D:\杀毒软件\Rav\Uroutine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 24]
    [D:\杀毒软件\Rav\ExtOLE.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
    [D:\杀毒软件\Rav\Uscript.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18]
[PID: 624][D:\杀毒软件\Rav\RAVMON.EXE]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45]
    [D:\杀毒软件\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [D:\杀毒软件\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [D:\杀毒软件\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\杀毒软件\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [D:\杀毒软件\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [D:\杀毒软件\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\杀毒软件\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [D:\杀毒软件\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1188][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2144 (xpsp.040601-1829)]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 2988][C:\DOCUME~1\kaka\LOCALS~1\Temp\Rar$EX00.109\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
    [F:\Program Files\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]

==================================
文件关联
.TXT  Error. [NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. [hh.exe %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  Error. [notepad.exe %1]
.INF  Error. [notepad.exe %1]
.VBS  Error. [wscript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

隐藏进程
    [2225] F:\Program Files\梦西游\my.exe

我会弄了，我用那个sreng2扫描日志啦，谢谢那个楼上的哥哥
你们帮我看看，我电脑还有没有病毒啊
我系统2年没重装了，我不会装啊，上次我装过一次，结果删不掉以前的，装出2个系统了，所以我都是买瑞星来装的，5555555但是有时候上网老是中木吗
而且我的XP是盗板的，每次更新后，就连接不了网络了，所以我不敢更新，还是XP2的