瑞星都能查到并删除,但每天都会从新出现,怎么办??
我都把病毒扫描的日志贴上来了,大家帮忙啊
进程名称 路径 数值名称 数值数据 操作日期 操作方式 操作结果
C:\Program Files\Common Files\Microsoft Shared\MSINFO\Sysreme.exe HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN r C:\WINDOWS\down\rundll32.exe 2006-11-10 16:25 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT 打开(&O) 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\COMMAND default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\COMMAND "C:\Program Files\Microsoft Office\OFFICE11\WINWOR 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\COMMAND command 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC [REM _DDE_Direct][FileOpen("%1")] 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC\APPLICATION default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC\APPLICATION WinWord 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC\TOPIC default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC\TOPIC System 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT 打开(&O) 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\COMMAND default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\COMMAND "C:\Program Files\Microsoft Office\OFFICE11\EXCEL. 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\COMMAND command 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC [open("%1")] 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC\APPLICATION default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC\APPLICATION Excel 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC\TOPIC default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC\TOPIC system 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL\EDIT default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL\EDIT default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL\EDIT 打开(&O) 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL\EDIT\COMMAND default 2006-11-13 09:42 添加 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL\EDIT\COMMAND "C:\Program Files\Microsoft Office\OFFICE11\MSPUB. 2006-11-13 09:42 修改 同意修改
HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL\EDIT\COMMAND command 2006-11-13 09:42 修改 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC\TOPIC default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC\APPLICATION default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\DDEEXEC default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT\COMMAND default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL\EDIT default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL\SHELL default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE EXCEL default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL\EDIT\COMMAND default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL\EDIT default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER\SHELL default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE PUBLISHER default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC\TOPIC default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC\APPLICATION default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\DDEEXEC default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT\COMMAND default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL\EDIT default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD\SHELL default 2006-11-13 09:48 删除 同意修改
C:\Program Files\Internet Explorer\IEXPLORE.EXE HKEY_CLASSES_ROOT\.HTM\OPENWITHLIST\MICROSOFT OFFICE WORD default 2006-11-13 09:48 删除 同意修改
C:\DOCUME~1\new\LOCALS~1\Temp\is-4D1VO.tmp\jbwb_cns_yassist.exe HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN helper.dll C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\ 2006-11-13 11:41 修改 同意修改
C:\DOCUME~1\new\LOCALS~1\Temp\is-4D1VO.tmp\jbwb_cns_yassist.exe HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN YLive.exe C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe 2006-11-13 11:41 修改 同意修改
C:\DOCUME~1\new\LOCALS~1\Temp\is-4D1VO.tmp\jbwb_cns_yassist.exe HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN CnsMin Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll 2006-11-13 11:42 修改 同意修改
C:\DOCUME~1\new\LOCALS~1\Temp\is-1PI9D.tmp\is-SU0FF.tmp HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN Thunder "C:\Program Files\Thunder Network\Thunder\Thunder. 2006-11-14 08:59 修改 同意修改
C:\WINDOWS\system32\rundll32.exe HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN CTFMON.EXE C:\WINDOWS\system32\CTFMON.EXE 2006-11-14 13:20 修改 同意修改
C:\WINDOWS\system32\CTFMON.EXE HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN ctfmon.exe C:\WINDOWS\system32\ctfmon.exe 2006-11-14 13:26 修改 同意修改