瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 中了灰鸽子,呈上日志,请高手帮忙,谢谢!

12   2  /  2  页   跳转

中了灰鸽子,呈上日志,请高手帮忙,谢谢!

[D:\cuihao\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\cuihao\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\cuihao\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\cuihao\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 240][D:\cuihao\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28>
    [D:\cuihao\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [D:\cuihao\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [D:\cuihao\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\cuihao\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\cuihao\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\cuihao\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\cuihao\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 248][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe]  < ><2, 0, 0, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  <><2, 0, 4, 1030>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 1, 1007>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\ynotifier.dll]  <><1, 0, 0, 5>
[PID: 304][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 312][D:\cuihao\MagicSet\SRIECLI.EXE]  <Super Rabbit Soft><7.60>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [D:\cuihao\MagicSet\shlobj71.ocx]  <Sky Software (http://www.ssware.com)><7, 1, 0, 0>
    [C:\WINDOWS\system32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>
[PID: 1820][C:\WINDOWS\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.8195>
[PID: 1952][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1984][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 2076][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\System32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>
[PID: 2156][C:\WINDOWS\system32\wscntfy.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 2264][D:\cuihao\2006QQ421\TT\TTraveler.exe]  <腾讯公司><3.0.0.250>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  <><2, 0, 4, 1030>
    [D:\cuihao\2006QQ421\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  <腾讯公司><1, 1, 0, 5>
    [D:\cuihao\2006QQ421\TT\Plugins\TWeather\TWeather.dll]  <><1, 0, 0, 3>
    [C:\WINDOWS\system32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 1, 1007>
    [D:\cuihao\2006QQ421\TT\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
    [D:\cuihao\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
[PID: 3004][D:\我的应用软件\迅雷\Program\Thunder5.exe]  <Thunder Networking Technologies,LTD><5.1.6.198>
    [D:\我的应用软件\迅雷\Program\UpdateDownload.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 3>
    [D:\我的应用软件\迅雷\Program\download_interface.dll]  <Thunder Networking Technologies,LTD><1, 0, 2, 69>
    [D:\我的应用软件\迅雷\Program\log4cplus.dll]  <><1, 0, 2, 1>
    [D:\我的应用软件\迅雷\Program\stlport_vc646.dll]  <STLport Consulting, Inc.><4.6.2003.1031>
    [D:\我的应用软件\迅雷\Program\asyn_dns.dll]  <N/A><N/A>
    [D:\我的应用软件\迅雷\Program\msgmanage.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 15>
    [D:\我的应用软件\迅雷\Program\historyinfo_manage.dll]  <Thunder Networking Technologies,LTD><5, 2, 0, 148>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [D:\我的应用软件\迅雷\Program\RegisterDll.dll]  <Thunder Networking Technologies,LTD><1, 2, 0, 7>
    [D:\我的应用软件\迅雷\Program\FloatBar.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 2>
    [C:\WINDOWS\system32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>
    [D:\我的应用软件\迅雷\Components\InMedia\iEmbedShell.dll]  < ><1, 0, 0, 5>
    [D:\我的应用软件\迅雷\Components\InMedia\iEmbed.dll]  < ><2, 1, 0, 29>
    [D:\我的应用软件\迅雷\Components\P4PClient\P4PClient.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 4>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [D:\我的应用软件\迅雷\Program\iTargetAd.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 60>
    [D:\cuihao\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
[PID: 2576][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 2996][C:\DOCUME~1\new\LOCALS~1\Temp\Rar$EX00.000\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\WINDOWS\system32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>
gototop
 

谢谢楼上的,你问的那个我也不知道,呵呵
gototop
 

引用:
【我无邪的贴子】运行(双击)System Repair Engineer,点“启动项目,服务,点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Network Management Center Task ,选择“删除服务”点“设置”选择“否”最后重启
重启后,删除
C:\WINDOWS\system32\taskman32.exe
另外问问你,你是否知道C:\WINDOWS\system32\w2pxdrv.dll是什么东东?
...........................





小弟按照老大指示来做,现在在查已经没有病毒了,非常谢谢
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT