瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】这样的启动项有病毒吗??????????????????????

12   1  /  2  页   跳转

【求助】这样的启动项有病毒吗??????????????????????

【求助】这样的启动项有病毒吗??????????????????????

请问下图有病毒程序吗?
哪些程序是不需要的
请帮帮忙看看~~~~~~
还有的是第9项删来删去都删不了
不知道是不是病毒来的~~~~


附件附件:

下载次数:0
文件类型:image/pjpeg
文件大小:
上传时间:2005-9-23 10:56:47
描述:



最后编辑2005-09-23 16:17:47
分享到:
gototop
 

扫个日志上来啊
gototop
 

我是新手
不懂什么叫做日志~~~~
gototop
 

请用置顶帖子里的hijackthis扫描后,把日志贴上来
gototop
 

这下面的就是日记


HijackThis_zww汉化版扫描日志 V1.99.1
保存于      14:41:30, 日期 2005-9-23
操作系统:  Windows XP  (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 (6.00.2600.0000)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\wdfmgr.exe
D:\RISING\RAV\RAVTIMER.EXE
C:\WINDOWS\etb\pokapoka69.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
D:\Tencent\QQ\QQ.exe
D:\Tencent\QQ\TIMPlatform.exe
D:\Tencent\QQ\QQ.exe
D:\Tencent\QQ\qqpet\qqpet.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
D:\Tencent\QQ\qqpet\qqpet.exe
G:\Petkeeper\PetKeeper.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\wsearch\Search.exe
G:\Petkeeper\PetKeeper.exe
G:\Petkeeper\PetKeeper.exe
C:\WINDOWS\System32\conime.exe
D:\RISING\RAV\Ravmond.exe
D:\RISING\RAV\RavStub.exe
G:\新建文件夹\HijackThis1991zww.exe

O1 - Hosts: 222.89.109.112 www.99bb.com
O1 - Hosts: 222.89.109.112 99bb.com
O1 - Hosts: 222.89.109.112 www.zdao.com
O1 - Hosts: 222.89.109.112 zdao.com
O1 - Hosts: 222.89.109.112 www.aisex.com
O1 - Hosts: 222.89.109.112 aisex.com
O1 - Hosts: 222.89.109.112 www.qq190.com
O1 - Hosts: 222.89.109.112 qq190.com
O1 - Hosts: 222.89.109.112 www.wanmm.com
O1 - Hosts: 222.89.109.112 wanmm.com
O1 - Hosts: 222.89.109.112 www.qq163.com
O1 - Hosts: 222.89.109.112 qq163.com
O1 - Hosts: 222.89.109.112 www.sex141.com
O1 - Hosts: 222.89.109.112 sex141.com
O1 - Hosts: 222.89.109.112 www.my990.com
O1 - Hosts: 222.89.109.112 my990.com
O1 - Hosts: 222.89.109.112 ad.my990.com
O1 - Hosts: 222.89.109.112 www.ttjj.com
O1 - Hosts: 222.89.109.112 ttjj.com
O1 - Hosts: 222.89.109.112 www.7t7t.com
O1 - Hosts: 222.89.109.112 7t7t.com
O1 - Hosts: 222.89.109.112 www.123987.com
O1 - Hosts: 222.89.109.112 www.123987.com/7sese/
O1 - Hosts: 222.89.109.112 www.oursm.com
O1 - Hosts: 222.89.109.112 oursm.com
O1 - Hosts: 222.89.109.112 www.palacemoon.com
O1 - Hosts: 222.89.109.112 palacemoon.com
O1 - Hosts: 222.89.109.112 18dy.com
O1 - Hosts: 222.89.109.112 www.18dy.com
O1 - Hosts: 222.89.109.112 49m.cn
O1 - Hosts: 222.89.109.112 www.49m.cn
O1 - Hosts: 222.89.109.112 123.xuanji8.com
O1 - Hosts: 222.89.109.112 ohkk.xuanji8.com
O1 - Hosts: 222.89.109.112 123.52lhc.com
O1 - Hosts: 222.89.109.112 7sese.com222.89.109.112 www.7sese.com
O1 - Hosts: 222.89.109.112 www.hao119.com
O1 - Hosts: 222.89.109.112 7sese.com
O1 - Hosts: 222.89.109.112 www.7sese.com
O1 - Hosts: 222.89.109.112 www.hao358.com
O1 - Hosts: 222.89.109.112 www.ee456.com
O1 - Hosts: 222.89.109.112 video.12san.com
O1 - Hosts: 222.89.109.112 www.eachz.com
O1 - Hosts: 222.89.109.112 www.avl.cn
O1 - Hosts: 222.89.109.112 avl.cn
O1 - Hosts: 222.89.109.112 www.98756.net
O1 - Hosts: 222.89.109.112 7sese.org
O1 - Hosts: 222.89.109.112 www.7sese.org
O1 - Hosts: 222.89.109.112 kanvcd.com
O1 - Hosts: 222.89.109.112 www.kanvcd.com
O1 - Hosts: 222.89.109.112 cn.movies.yahoo
O1 - Hosts: 222.89.109.112 www.zfvod.com
O1 - Hosts: 222.89.109.112 zfvod.com
O1 - Hosts: 222.89.109.112 media.netandtv.com
O1 - Hosts: 222.89.109.112 p2p.55660.com
O1 - Hosts: 222.89.109.112 media.netandtv.com
O1 - Hosts: 222.89.109.112 www.sol.sohu.com
O1 - Hosts: 222.89.109.112 www.sexhu.cn
O1 - Hosts: 222.89.109.112 sexhu.cn
O1 - Hosts: 222.89.109.112 www.blogchina.com
O1 - Hosts: 222.89.109.112 5blogchina.com
O1 - Hosts: 222.89.109.112 www.5806.net
O1 - Hosts: 222.89.109.112 zhao999.com
O1 - Hosts: 222.89.109.112 www.zhao999.com
O1 - Hosts: 222.89.109.112 movie.xmfdc.net
O1 - Hosts: 222.89.109.112 www.movie110.com
O1 - Hosts: 222.89.109.112 movie110.com
O1 - Hosts: 222.89.109.112 www.yesky.com
O1 - Hosts: 222.89.109.112 yesky.com
O1 - Hosts: 222.89.109.112 www.178ya.com
O1 - Hosts: 222.89.109.112 178ya.com
O1 - Hosts: 222.89.109.112 www.3668.cn
O1 - Hosts: 222.89.109.112 3668.cn
O1 - Hosts: 222.89.109.112 www.hao45.com
O1 - Hosts: 222.89.109.112 hao45.com
O1 - Hosts: 222.89.109.112 www.5sese.com
O1 - Hosts: 222.89.109.112 5sese.com
O1 - Hosts: 222.89.109.112 woyy.51.net
O1 - Hosts: 222.89.109.112 3668.cn
O1 - Hosts: 222.89.109.112 www.3668.cn
O1 - Hosts: 222.89.109.112 tu68.com
O1 - Hosts: 222.89.109.112 www.tu68.com
O1 - Hosts: 222.89.109.112 avxiu.com
O1 - Hosts: 222.89.109.112 www.avxiu.com
O1 - Hosts: 222.89.109.112 18dy.net
O1 - Hosts: 222.89.109.112 www.18dy.net
O1 - Hosts: 222.89.109.112 avxiu.com
O1 - Hosts: 222.89.109.112 www.avxiu.com
O1 - Hosts: 222.89.109.112 hk.18dy.com
O1 - Hosts: 222.89.109.112 dianying.gghggh.com
O1 - Hosts: 222.89.109.112 lady3.****net
O1 - Hosts: 222.89.109.112 kan56.zj.com
O1 - Hosts: 222.89.109.112 88848.net
O1 - Hosts: 222.89.109.112 www.88848.net
O1 - Hosts: 222.89.109.112 xonline.org
O1 - Hosts: 222.89.109.112 www.xonline.org
O1 - Hosts: 222.89.109.112 dy.nuoy.com
O1 - Hosts: 222.89.109.112 www.korea-av.com
O1 - Hosts: 222.89.109.112 korea-av.com
O1 - Hosts: 222.89.109.112 movie.bucuo.org
O1 - Hosts: 222.89.109.112 mv888.com
O1 - Hosts: 222.89.109.112 www.mv888.com
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\FLASHGET\jccatch.dll
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\FLASHGET\fgiebar.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - 启动项HKLM\\Run: [RavTimer] D:\RISING\RAV\RAVTIMER.EXE
O4 - 启动项HKLM\\Run: [RavMon] D:\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [System service69] C:\WINDOWS\\etb\pokapoka69.exe
O4 - 启动项HKLM\\Run: [zcom] C:\Program Files\zcom\zPlatform.exe MIN
O4 - 启动项HKLM\\Run: [MoveSearch] C:\Program Files\wsearch\Search.exe
O4 - 启动项HKLM\\RunOnce: [RavStub] "D:\RISING\RAV\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - D:\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - D:\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\FLASHGET\flashget.exe
O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\FLASHGET\flashget.exe
O9 - 浏览器额外的按钮: 易趣购物 - {DE60714F-AC19-427e-861A-FD60ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE60714F-AC19-427e-861A-FD60ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O17 - HKLM\System\CCS\Services\Tcpip\..\{6CA21B4C-06B5-406C-B767-5DFE7E2832E0}: NameServer = 202.96.128.86 202.96.128.166
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\RISING\RAV\Ravmond.exe

附件附件:

下载次数:0
文件类型:image/pjpeg
文件大小:
上传时间:2005-9-23 14:43:24
描述:



gototop
 

所有01项
O4 - 启动项HKLM\\Run: [System service69] C:\WINDOWS\\etb\pokapoka69.exe
  O4 - 启动项HKLM\\Run: [MoveSearch] C:\Program Files\wsearch\Search.exe 
用hijackthis修复上面

删除文件
C:\WINDOWS\\etb
C:\Program Files\wsearch
gototop
 

我找不到C:\windows\\etb
请问怎么找啊~~~~
gototop
 

在“文件夹选项”的“查看”面板中勾选“显示系统文件”、“显示所有的文件和文件夹”两项,点击“确定”按钮。
gototop
 

也是找不到啊~~~~
gototop
 

引用:
【风范的贴子】也是找不到啊~~~~
...........................
到安全模式下找找看,这个病毒我在国外网站找到些资料C:\WINDOWS\etb\ (le dossier entier)
Ensuites tu redémarres en mode normal.
Tu installes Firefox, que tu vas utiliser à la place d'Internet Explorer, t'auras plus de problèmes de ce type !
但是德文,不懂的说
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT