瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 中了很多病毒,灰鸽子变种,上兴,求助,有扫描数据.

1   1  /  1  页   跳转

[求助] 中了很多病毒,灰鸽子变种,上兴,求助,有扫描数据.

中了很多病毒,灰鸽子变种,上兴,求助,有扫描数据.

C:\WINDOWS\system32\svchost.exe
D:\系统工具应用程序\VStart50\VStart.exe
C:\Program Files\彩影软件\ARP防火墙单机版\AntiARP.exe
C:\WINDOWS\system32\ctfmon.exe
F:\常用文件\飞信2008\Fetion\FetionFX.exe
F:\常用文件\遨游2\Maxthon\Maxthon.exe
D:\系统工具应用程序\roguecleaner\RogueCleaner.exe
F:\常用文件\360safe\safemon\360Tray.exe
C:\Program Files\360Safebox\safeboxtray.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
C:\WINDOWS\regedit.exe
C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe
C:\Documents and Settings\Lazurite\桌面\HijackThis.exe
O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O2 - BHO: SafeMon Class - {B69F34DD-F0F9-42DC-9EDD-957187DA688D} - F:\常用文件\360safe\safemon\safemon.dll
O4 - HKLM\..\Run: [VStart5.0] D:\系统工具应用程序\VStart50\VStart.exe
O4 - HKLM\..\Run: [AntiARPStandalone] C:\Program Files\彩影软件\ARP防火墙单机版\AntiARP.exe
O4 - HKLM\..\Run: [360Safetray] F:\常用文件\360safe\safemon\360Tray.exe /start
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Fetion] F:\常用文件\飞信2008\Fetion\Fetion.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: &使用BitComet下载 - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &使用BitComet下载全部链接 - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &使用BitComet下载本页视频 - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: .保存该图片至网站 - http://www.jiagoo.com/addimg.htm
O8 - Extra context menu item: .保存该网址至网站 - http://www.jiagoo.com/addurl.htm
O8 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\geturl.htm
O8 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm
O8 - Extra context menu item: 在Foxmail中添加该RSS频道/频道组 - res://C:\WINDOWS\system32\fmrsslink.dll/201
O8 - Extra context menu item: 妏蚚捃濘狟婥 - C:\Program Files\Thunder Network\Thunder\Program\geturl.htm
O8 - Extra context menu item: 设为 Messenger Live 头像 - \SetMSNDP.htm
O9 - Extra button: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - F:\安装包\HFGameOPT\GameClient.exe
O9 - Extra 'Tools' menuitem: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - F:\安装包\HFGameOPT\GameClient.exe
O9 - Extra button: 番茄花园 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.tomatolei.com (file missing)
O9 - Extra 'Tools' menuitem: 番茄花园 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.tomatolei.com (file missing)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.6.26.dll/206 (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/
O16 - DPF: {6531D99C-0D0E-4293-B3CB-A3E1D0D41847} (AhnASP Control) - http://aspglobal.ahnlab.com/asp/cab/AhnASP.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2DCBF78B-83A5-4E55-8288-DE871BA9ED18}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{2DCBF78B-83A5-4E55-8288-DE871BA9ED18}: NameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{2DCBF78B-83A5-4E55-8288-DE871BA9ED18}: NameServer = 192.168.1.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll




帮忙看一下,谢谢了!用HIjackthis扫的.

用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; Maxthon; .NET CLR 2.0.50727)
分享到:
gototop
 

回复:中了很多病毒,灰鸽子变种,上兴,求助,有扫描数据.

上传System Repair Engineer扫描日志
下载地址http://www.kztechs.com/sreng/sreng2.zip
操作方法:
1、下载后解压缩,运行“SREngLdr.EXE”
2、如果无法打开请参考http://bbs.ikaka.com/showtopic-8442813.aspx#3637414
3、打开后依次点击【智能扫描】-【扫描】,耐心等待,扫描结束后点击【保存报告】
4、选择保存路径,文件名保持默认,直接点击【保存】
5、将日志文件SREngLOG.log作为附件上传到论坛,同时务必详细描述问题现象
如果有查杀不净的病毒务必提供病毒名和路径
注意:扫描前请尽量关闭QQ、游戏、下载工具、媒体播放器等应用程序
gototop
 

回复:中了很多病毒,灰鸽子变种,上兴,求助,有扫描数据.

你可以装个卡卡6.0的在安全下试下
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT