【求助】我的电脑中了好几种病毒，怎样解决啊？（附日志） - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【求助】我的电脑中了好几种病毒，怎样解决啊？（附日志）

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

【求助】我的电脑中了好几种病毒，怎样解决啊？（附日志）

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-14 21:52 \| 显示全部短消息资料字号：小中大 1楼【求助】我的电脑中了好几种病毒，怎样解决啊？（附日志） 2006-11-14,21:34:25 System Repair Engineer 2.2.6.605 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] <H/PC Connection Agent><"C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"> [Microsoft Corporation] <MSNShell><C:\Program Files\MSNShell\BIN\MSNShell.exe autorun> [N/A] <swg><C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe> [(Verified)Google Inc.] <Xplus_spy><"C:\Program Files\Xplus\xvcclip.exe" /min> [N/A] <Kugoo><; > [N/A] <KuGoo3><; "C:\PROGRA~1\KUGOO2\kugoo.exe"> [N/A] <Super Rabbit IEPro><C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [Super Rabbit Soft] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] <run><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation] <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation] <BigDogPath><C:\WINDOWS\VM_STI.EXE FAMETECH USB PC CAMERA> [N/A] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <Super Rabbit SRRestore><C:\Program Files\Super Rabbit\MagicSet\srrest.exe /autosave> [Super Rabbit Soft] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] 2006-11-15 18:15:28
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	分享到：

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-14 21:53 \| 显示全部短消息资料字号：小中大 2楼 ================================== 启动文件夹 N/A ================================== 服务 [Human Interface Device Access / HidServ] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Rising Proxy Service / RfwProxySrv] <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 驱动程序 [11951715 / 11951715] <\SystemRoot\System32\drivers\11951715.sys><N/A> [Aspi32 / Aspi32] <C:\WINDOWS\SYSTEM32\DRIVERS\Aspi32.SYS><Adaptec> [Rising TDI Base Driver / BaseTDI] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [ExpScaner / ExpScaner] <\??\C:\Program Files\Rising\Rav\ExpScan.sys><> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS] <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.> [HookCont / HookCont] <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd> [HookReg / HookReg] <\??\C:\Program Files\Rising\Rav\HookReg.sys><> [HookSys / HookSys] <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising> [HookUrl / HookUrl] <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [MEMSCAN / MEMSCAN] <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [mProcRs / mProcRs] <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [npkcrypt / npkcrypt] <\??\C:\Program Files\Tencent\qq\npkcrypt.sys><INCA Internet Co., Ltd.> [npkycryp / npkycryp] <\??\C:\Program Files\Tencent\qq\npkycryp.sys><N/A> [Direct Parallel Link Driver / Ptilink] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsFwDrv / RsFwDrv] <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS] <\??\C:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising> [S3Psddr / S3Psddr] <system32\DRIVERS\s3gnbm.sys><S3 Graphics, Inc.> [S3SavageNB / S3SavageNB] <system32\DRIVERS\s3gnbm.sys><S3 Graphics, Inc.> [Secdrv / Secdrv] <system32\DRIVERS\secdrv.sys><N/A> [TCP/IP Protocol Driver / Tcpip] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [VIA AGP Filter / viaagp1] <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.> [ViaIde / ViaIde] <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation> [VIAPFD / VIAPFD] <\SystemRoot\System32\Drivers\VIAPFD.SYS><VIA Technologies. Inc.>
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-14 21:53 \| 显示全部短消息资料字号：小中大 3楼 ================================== 浏览器加载项 [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <C:\PROGRA~1\SUPERR~1\MAGICSET\haokanbar.dll, Xiang Feng Technology> [JoyoCtrl Class] {C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll, > [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\PROGRA~1\SUPERR~1\MAGICSET\haokanbar.dll, Xiang Feng Technology> [Checkers Class] {00B71CFB-6864-4346-A978-C0A14556272C} <C:\WINDOWS\Downloaded Program Files\msgrchkr.dll, Microsoft Corporation> [MMCPlayer Class] {05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINDOWS\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.> [Office Update Installation Engine] {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} <C:\WINDOWS\opuc.dll, Microsoft Corporation> [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} <C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation> [MessengerStatsClient Class] {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} <C:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v4.dll, N/A> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, N/A> [Microsoft ProgressBar Control, version 5.0 (SP2)] {0713E8D2-850A-101B-AFC0-4210102A8DA7} <C:\WINDOWS\system32\comctl32.ocx, Microsoft Corporation> [Shareaza Web Download Hook] {0EEDB912-C5FA-486F-8334-57288578C627} <C:\Program Files\超级BT下载软件\Plugins\RazaWebHook.dll, Shareaza Pty. Ltd.> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [Tabular Data Control] {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation> [Office Update Installation Engine] {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} <C:\WINDOWS\opuc.dll, Microsoft Corporation> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\PROGRA~1\SUPERR~1\MAGICSET\haokanbar.dll, Xiang Feng Technology> [Microsoft Office Control] {4453D895-F2A1-4A38-A285-1EF9BD3F6D5D} <C:\PROGRA~1\MICROS~2\OFFICE11\AUTHZAX.DLL, Microsoft Corporation> [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} <C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A> [DragSearch BHO] {62EED7C6-9F02-42F9-B634-98E2899E147B} <, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <C:\PROGRA~1\SUPERR~1\MAGICSET\haokanbar.dll, Xiang Feng Technology> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [CibaCtrl Class] {8DE0FCD4-5EB5-11D3-AD25-00002100131B} <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll, > [ThunderMini Browser Helper] {8E6C1C49-F9CE-4311-9FB4-D70E8B0AEAEB} <C:\Program Files\Thunder Network\ThunderMini\ComDlls\XunLeiMiniBHO_002.dll, N/A> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [JoyoCtrl Class] {C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll, > [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [上传到QQ网络硬盘] <C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <C:\Program Files\Tencent\qq\AddPanel.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\qq\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <C:\Program Files\Tencent\qq\SendMMS.htm, N/A>
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-14 21:54 \| 显示全部短消息资料字号：小中大 4楼 ================================== 正在运行的进程 [PID: 540][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 596][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 620][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 676][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 836][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 900][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1044][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 1060][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1144][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1308][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1332][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 47] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 18, 1, 0, 12] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 33] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\Program Files\Rising\Rav\HookWeb.dll] [rising, 18, 0, 0, 2] [C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\Program Files\Rising\Rav\MailMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 35] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 18] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RSUnpack.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 19] [C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 24] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 15] [C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [PID: 1492][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\contmenu.dll] [N/A, N/A] [PID: 1524][c:\program files\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 22] [c:\program files\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 1] [c:\program files\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 2] [c:\program files\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 6] [c:\program files\rising\rfw\MonDrv.dll] [rs, 1, 0, 0, 4] [c:\program files\rising\rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 2] [c:\program files\rising\rfw\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [PID: 1720][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] [Windows (R) 2000 DDK provider, 5.00.2195.1620] [PID: 1860][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [PID: 1868][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [PID: 1892][C:\Program Files\Rising\Rfw\rfwmain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 40] [C:\Program Files\Rising\Rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 26] [C:\Program Files\Rising\Rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 3] [C:\Program Files\Rising\Rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 9] [C:\Program Files\Rising\Rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [PID: 1924][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1928][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 39] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [PID: 1960][C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE] [Microsoft Corporation, 3.7.1.4034] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [PID: 1972][C:\Program Files\MSNShell\BIN\MSNShell.exe] [N/A, N/A] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [PID: 1980][C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe] [Google Inc., 1, 0, 720, 3640] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\res_en.dll] [Google Inc., 1, 0, 720, 3640] [C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\swg.dll] [Google Inc., 1, 0, 720, 3640] [PID: 1988][C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE] [Super Rabbit Soft, 7.86] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [C:\PROGRA~1\SUPERR~1\MagicSet\shlobj71.ocx] [Sky Software (http://www.ssware.com), 7, 1, 0, 0] [PID: 2020][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 480][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)] [PID: 164][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 352][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [PID: 2068][E:\BitComet_0.63_PConline\BitComet.exe] [www.BitComet.com, 0.63.] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [PID: 2076][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)] [PID: 2328][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [C:\PROGRA~1\SUPERR~1\MAGICSET\haokanbar.dll] [Xiang Feng Technology, 2, 2, 0, 1612] [PID: 2428][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2488][C:\Program Files\WinRAR\WinRAR.exe] [Eugene Roshal, 3.30] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [PID: 2524][C:\DOCUME~1\CECICH~1\LOCALS~1\Temp\Rar$EX00.947\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\Program Files\MSNShell\BIN\ShellDll.dll] [N/A, N/A]
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-14 21:55 \| 显示全部短消息资料字号：小中大 5楼 ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ==================================
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-14 21:58 \| 显示全部短消息资料字号：小中大 6楼病毒名称处理结果发现日期扫描方式路径文件病毒来源 Rootkit.CnsProt.a 删除成功 2006-10-30 22:40 手动扫描 C:\WINDOWS\system32\drivers 3426927.sys 本机 Rootkit.CnsProt.a 删除成功 2006-10-30 22:40 手动扫描 C:\WINDOWS\system32\drivers 107474.sys 本机 Rootkit.CnsProt.a 删除成功 2006-10-30 22:40 手动扫描 C:\WINDOWS\system32\drivers 103348.sys 本机 Rootkit.CnsProt.a 删除成功 2006-10-30 22:40 手动扫描 C:\WINDOWS\system32\drivers 106503.sys 本机 Trojan.Agent.ebn 删除成功 2006-10-30 23:29 手动扫描 C:\Program Files\Tencent\qq atievxx.exe 本机 Trojan.PSW.QQPass.pud 删除成功 2006-10-30 23:30 手动扫描 C:\Program Files\Tencent\qq SetIe.dll 本机 Trojan.DL.Agent.ymv 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015827.exe 本机 Trojan.DL.Agent.ymv 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015828.exe 本机 Trojan.DL.Agent.ymv 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015829.exe 本机 Rootkit.CnsProt.a 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015846.sys 本机 Rootkit.CnsProt.a 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015847.sys 本机 Rootkit.CnsProt.a 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015848.sys 本机 Rootkit.CnsProt.a 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015849.sys 本机 Trojan.Agent.ebn 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015856.exe 本机 Trojan.PSW.QQPass.pud 删除成功 2006-11-04 11:58 定时扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP49 A0015857.dll 本机 Trojan.DL.Agent.wti 删除成功 2006-11-12 00:42 手动扫描 C:\WINDOWS\system32 sthu2.exe 本机 Trojan.DL.Agent.wti 删除成功 2006-11-12 00:59 手动扫描 C:\Documents and Settings\ceci chan\Local Settings\Temporary Internet Files\Content.IE5\RV5BZ1CW 90a763baa207c69a[1].exe 本机 Trojan.DL.VBS.Agent.cfx 清除成功 2006-11-12 00:59 手动扫描 C:\Documents and Settings\ceci chan\Local Settings\Temporary Internet Files\Content.IE5\RV5BZ1CW wwmm[1].htm 本机未知病毒需要解压缩后杀毒2006-11-12 02:10 手动扫描 E: pplivesetup(1.3.15).exe>>$PLUGINSDIR\StartMenu.dll 本机未知病毒需要解压缩后杀毒2006-11-13 00:07 手动扫描 E: pplivesetup(1.3.15).exe>>$PLUGINSDIR\StartMenu.dll 本机 Trojan.IMMSG.MsgSender.p 删除成功 2006-11-14 02:49 手动扫描 C:\System Volume Information\_restore{A8B19FA3-E310-46FE-89C6-3270D4178903}\RP50 A0016489.exe>>uPack0.33 本机 Trojan.IMMSG.MsgSender.p 删除成功 2006-11-14 02:57 手动扫描 C:\Recycled Dc4330.exe>>uPack0.33 本机 Trojan.DL.Multi.a 删除成功 2006-11-14 02:57 手动扫描 C:\Recycled Dc4719.exe 本机 Trojan.DL.Multi.a 删除成功 2006-11-14 02:57 手动扫描 C:\Recycled Dc4720.exe 本机这是我所中的病毒，好多哦。。。呜呜呜
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-14 21:59 \| 显示全部短消息资料字号：小中大 7楼 “lsass.EXE”-应用程序错误的对话框说："0x00002367"指令引用的"0x00002367"内存，该内存不能为"Read" 要终止程序，请按确定，要调试程序，请按取消我一按确定，就出现系统自动关机的对话框，是因为上面的原因吗？我应该在注册表那个路径下删除这个东西？这几天用瑞星杀毒时总会出现： C:\Documents and Settings\ceci chan\Application Data\Microsoft\AddIns\outlvba.dll 不是有效的office加载项请问这个是什么？病毒吗？要怎样解决？谢谢了！！
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-15 11:00 \| 显示全部短消息资料字号：小中大 8楼有人可以帮我吗？
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:

misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:	发表于： 2006-11-15 18:24 \| 显示全部短消息资料字号：小中大 9楼 Help~~
misschanchan 初生襁褓狮帖子:45 注册: 2006-11-13 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT