Trojan.DL.Agent.hoh
路径:C:\DOCUME~1\用户名\LOCALS~1\Temp\mum
文件:mum.exe
20日和23日,这两天被瑞星监控查杀. 以前也杀过好几次.特别是在使用IE的状态下瑞星经常查出来.在安全模式下清空过mum文件夹.请问如何彻底清除...
hijackthis.log:
Logfile of HijackThis v1.99.0
Scan saved at 14:44:08, on 2006-6-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\PROGRAM FILES\RISING\RAV\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Rising\Rav\RavTray.exe
C:\Program Files\Rising\Rav\RavTimer.exe
C:\Program Files\Rising\Rav\RavMon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\msdtc.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\msde2000MSSQL$NG\Binn\sqlservr.exe
C:\WINDOWS\NSServics.Exe
C:\Program Files\Rising\Rav\RavService.exe
C:\Program Files\NG\NSServer\NSServer.Exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\msde2000MSSQL$NG\Binn\sqlagent.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\wnwb2005\wnwb.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\wnwb2005\selectso.exe
C:\Program Files\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\ha-killbox20017+\KillBox.exe
C:\Program Files\ha-hijackthis199-xqb\HijackThis.exe
O23 - Service: NEWGRAND Socket Server - NEWGRAND - C:\WINDOWS\NSServics.Exe
O23 - Service: OracleOraHome92ClientCache - Unknown - c:\oracle\ora92\BIN\ONRSD.EXE
O23 - Service: RavService - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\RavService.exe
O23 - Service: Rising Process Communication Center - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
