瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 家里中了很多的病毒,拿瑞星杀过了还有,请GG,JJ帮忙看看

1   1  /  1  页   跳转

家里中了很多的病毒,拿瑞星杀过了还有,请GG,JJ帮忙看看

家里中了很多的病毒,拿瑞星杀过了还有,请GG,JJ帮忙看看

我拿HJ扫了一下 请帮忙看看

Logfile of HijackThis v1.99.1
Scan saved at 10:26:21, on 2006-5-6
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Program Files\瑞星\HijackThis.exe

O2 - BHO: PPGou BHO - {00000000-0000-0000-0000-C4CA9A05F1E2} - D:\PROGRA~1\KINGSO~1\下载工具\PPGou\PPGIEC~1.DLL (file missing)
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\Program Files\Kingsoft Temp Download\下载工具\Thunder\ComDlls\XunLeiBHO_001.dll
O2 - BHO: NewWeb Controller - {9ACEEE30-143F-471A-AA45-72B061FE7D60} - C:\WINDOWS\system32\WinSC.dll
O2 - BHO: Internet Explorer - {AC59ECB7-FE7A-43C8-B11D-6A81705F1FA7} - C:\WINDOWS\system32\Inetbar.dll
O4 - HKLM\..\Run: [Thunder] D:\Program Files\Kingsoft Temp Download\下载工具\Thunder\Thunder.exe /s
O4 - HKLM\..\Run: [RfwMain] "D:\Program Files\瑞星\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [RavTask] "D:\Program Files\瑞星\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [eMuleAutoStart] D:\Program Files\Kingsoft Temp Download\下载工具\电驴\eMule\emule.exe -AutoStart
O8 - Extra context menu item: &使用屁屁狗[PPGou]加速下载 - D:\Program Files\Kingsoft Temp Download\下载工具\PPGou\geturl.htm
O8 - Extra context menu item: &使用迅雷下载 - D:\Program Files\Kingsoft Temp Download\下载工具\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Program Files\Kingsoft Temp Download\下载工具\Thunder\Program\GetAllUrl.htm
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O23 - Service: Kingsoft Personal Firewall Service (KPfwSvc) - Unknown owner - C:\KAV2006\KPfwSvc.EXE (file missing)
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\program files\瑞星\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Unknown owner - d:\program files\瑞星\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\瑞星\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Program Files\瑞星\Rising\Rav\Ravmond.exe

最后编辑2006-05-06 10:48:34
分享到:
gototop
 

关闭所有浏览窗口以及一些不必要的程序
运行Hijackthis,扫描结束后在下列选项前打上勾,然后选"修复""
2 - BHO: NewWeb Controller - {9ACEEE30-143F-471A-AA45-72B061FE7D60} - C:\WINDOWS\system32\WinSC.dll
O2 - BHO: Internet Explorer - {AC59ECB7-FE7A-43C8-B11D-6A81705F1FA7} - C:\WINDOWS\system32\Inetbar.dll
双击我的电脑--工具---文件夹选项--查看选项卡--单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件(推荐)"复选框。在提示您确定更改时,单击“是”
C:\WINDOWS\system32\WinSC.dll
C:\WINDOWS\system32\Inetbar.dll
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT