1   1  /  1  页   跳转

Trojan.PSW.win32.onlineGames.dcj...

Trojan.PSW.win32.onlineGames.dcj...

升级了最新的也杀不掉...
每次重新启动就会有这个毒!!游戏安装了玩不了....被弹出去没有任何提示..

下面为卡卡的扫描报告..能人帮帮我.吧.
最后编辑2007-07-11 21:19:30
分享到:
gototop
 

瑞星卡卡电脑诊断日志 v1.20 (2007-7-11 13:13:10) 北京瑞星科技股份有限公司

注释:[A]表示该文件存在自启动关联;
[M]表示该文件在内存中;

+ 注册表自运行项目
+ Win32 Services
+ HKLM\System\CurrentControlSet\Services
ose
[A ] 1. c:\program files\common files\microsoft shared\source engine\ose.exe
RsCCenter
[A ] 2. c:\program files\rising\rav\ccenter.exe
RsRavMon
[A ] 3. c:\program files\rising\rav\ravmond.exe
UMWdf
[AM] 4. c:\windows\system32\wdfmgr.exe
+ Kernel Drivers
+ HKLM\System\CurrentControlSet\Services
a320raid
[A ] 5. c:\windows\system32\drivers\a320raid.sys
AAC
[A ] 6. c:\windows\system32\drivers\aac.sys
aar1210
[A ] 7. c:\windows\system32\drivers\aar1210.sys
adpu320
[A ] 8. c:\windows\system32\drivers\adpu320.sys
aec6210
[A ] 9. c:\windows\system32\drivers\aec6210.sys
aec6260
[A ] 10. c:\windows\system32\drivers\aec6260.sys
aec6280
[A ] 11. c:\windows\system32\drivers\aec6280.sys
AEC6290
[A ] 12. c:\windows\system32\drivers\aec6290.sys
AEC67160
[A ] 13. c:\windows\system32\drivers\aec67160.sys
AEC671X
[A ] 14. c:\windows\system32\drivers\aec671x.sys
AEC6880
[A ] 15. c:\windows\system32\drivers\aec6880.sys
AEC6890
[A ] 16. c:\windows\system32\drivers\aec6890.sys
aec68x5
[A ] 17. c:\windows\system32\drivers\aec68x5.sys
ALCXWDM
[A ] 18. c:\windows\system32\drivers\alcxwdm.sys
AmdK8
[A ] 19. c:\windows\system32\drivers\amdk8.sys
arc
[A ] 20. c:\windows\system32\drivers\arc.sys
BaseTDI
[A ] 21. c:\windows\system32\drivers\basetdi.sys
elxstor
[A ] 22. c:\windows\system32\drivers\elxstor.sys
ExpScaner
[A ] 23. c:\program files\rising\rav\expscan.sys
FASTSX
[A ] 24. c:\windows\system32\drivers\fastsx.sys
fasttrak
[A ] 25. c:\windows\system32\drivers\fasttrak.sys
fasttx2k
[A ] 26. c:\windows\system32\drivers\fasttx2k.sys
fasttx2k2
[A ] 27. c:\windows\system32\drivers\fasttx2k2.sys
HookCont
[A ] 28. c:\program files\rising\rav\hookcont.sys
HookReg
[A ] 29. c:\program files\rising\rav\hookreg.sys
HookSys
[A ] 30. c:\program files\rising\rav\hooksys.sys
HpCISSs
[A ] 31. c:\windows\system32\drivers\hpcisss.sys
Hpt366
[A ] 32. c:\windows\system32\drivers\hpt366.sys
HPT371
[A ] 33. c:\windows\system32\drivers\hpt371.sys
hpt374
[A ] 34. c:\windows\system32\drivers\hpt374.sys
hpt3xx
[A ] 35. c:\windows\system32\drivers\hpt3xx.sys
hptmv
[A ] 36. c:\windows\system32\drivers\hptmv.sys
hptpro
[A ] 37. c:\windows\system32\drivers\hptpro.sys
ialm
[A ] 38. c:\windows\system32\drivers\ialmnt5.sys
iaStor
[A ] 39. c:\windows\system32\drivers\iastor.sys
iirsp
[A ] 40. c:\windows\system32\drivers\iirsp.sys
iteraid
[A ] 41. c:\windows\system32\drivers\iteraid.sys
LSI_SAS
[A ] 42. c:\windows\system32\drivers\lsi_sas.sys
LSI_SCSI
[A ] 43. c:\windows\system32\drivers\lsi_scsi.sys
m5228
[A ] 44. c:\windows\system32\drivers\m5228.sys
m5281
[A ] 45. c:\windows\system32\drivers\m5281.sys
MegaIDE
[A ] 46. c:\windows\system32\drivers\megaide.sys
megasas
[A ] 47. c:\windows\system32\drivers\megasas.sys
MEMSCAN
[A ] 48. c:\program files\rising\rav\memscan.sys
mraid2k
[A ] 49. c:\windows\system32\drivers\mraid2k.sys
nfrd960
[A ] 50. c:\windows\system32\drivers\nfrd960.sys
NPF
[A ] 51. c:\windows\system32\drivers\npf.sys
NvAtaBus
[A ] 52. c:\windows\system32\drivers\nvatabus.sys
nvraid
[A ] 53. c:\windows\system32\drivers\nvraid.sys
PNP649R
[A ] 54. c:\windows\system32\drivers\pnp649r.sys
Pnp680
[A ] 55. c:\windows\system32\drivers\pnp680.sys
Pnp680r
[A ] 56. c:\windows\system32\drivers\pnp680r.sys
ql2300
[A ] 57. c:\windows\system32\drivers\ql2300.sys
RAIDSRC
[A ] 58. c:\windows\system32\drivers\raidsrc.sys
RsAntiSpyware
[A ] 59. c:\windows\system32\drivers\rsboot.sys
RsNTGDI
[A ] 60. c:\windows\system32\drivers\rsntgdi.sys
RSPPSYS
[A ] 61. c:\program files\rising\rav\rsppsys.sys
RTL8023xp
[A ] 62. c:\windows\system32\drivers\rtnicxp.sys
S150SX8
[A ] 63. c:\windows\system32\drivers\s150sx8.sys
Secdrv
[A ] 64. c:\windows\system32\drivers\secdrv.sys
SI3112
[A ] 65. c:\windows\system32\drivers\si3112.sys
SI3112r
[A ] 66. c:\windows\system32\drivers\si3112r.sys
SI3114
[A ] 67. c:\windows\system32\drivers\si3114.sys
SI3114r
[A ] 68. c:\windows\system32\drivers\si3114r.sys
SI3124
[A ] 69. c:\windows\system32\drivers\si3124.sys
SI3124r
[A ] 70. c:\windows\system32\drivers\si3124r.sys
SiFilter
[A ] 71. c:\windows\system32\drivers\siwinacc.sys
SISIDE
[A ] 72. c:\windows\system32\drivers\siside.sys
SiSRaid
[A ] 73. c:\windows\system32\drivers\sisraid.sys
SiSRaid1
[A ] 74. c:\windows\system32\drivers\sisraid1.sys
SISRAIDS
[A ] 75. c:\windows\system32\drivers\sisraids.sys
sptrak
[A ] 76. c:\windows\system32\drivers\sptrak.sys
SYMMPI
[A ] 77. c:\windows\system32\drivers\symmpi.sys
UlSata
[A ] 78. c:\windows\system32\drivers\ulsata.sys
ULSATAS
[A ] 79. c:\windows\system32\drivers\ulsatas.sys
viamraid
[A ] 80. c:\windows\system32\drivers\viamraid.sys
viapdsk
[A ] 81. c:\windows\system32\drivers\viapdsk.sys
viaraid
[A ] 82. c:\windows\system32\drivers\viaraid.sys
viasraid
[A ] 83. c:\windows\system32\drivers\viasraid.sys
vmscsi
[A ] 84. c:\windows\system32\drivers\vmscsi.sys
+ Winlogon
+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
igfxcui
[AM] 85. c:\windows\system32\igfxsrvc.dll
+ Internet Explorer
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[AM] 86. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll
{889D2FEB-5411-4565-8998-1DD2C5261283}
[AM] 87. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
Exec
[A ] 88. c:\program files\thunder network\thunder\thunder.exe
Exec
[A ] 89. c:\program files\messenger\msmsgs.exe
+ Explorer
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
text/xml
[AM] 90. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
+ HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
{926A036A-158B-047A-E269-D148B0369C14}
[A ] 91. c:\windows\system32\install.exe
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 92. c:\windows\system32\hticons.dll
Microsoft Office HTML Icon Handler
[AM] 93. c:\program files\microsoft office\office11\msohev.dll
Web Folders
[A ] 94. c:\program files\common files\microsoft shared\web folders\msonsext.dll
Portable Media Devices
[A ] 95. c:\windows\system32\audiodev.dll
Portable Media Devices Menu
[A ] 95. c:\windows\system32\audiodev.dll
WinRAR shell extension
[A ] 96. c:\program files\winrar\rarext.dll
RISING
[AM] 97. c:\windows\system32\ravext.dll
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{32CD708B-60A7-4C00-9377-D73EAA495F0F}
[AM] 97. c:\windows\system32\ravext.dll
{3495D328-661A-4FB0-BA67-8ACDD1704D1E}
[AM] 98. c:\windows\system32\csrss.dll
{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
[AM] 99. c:\windows\system32\shlhook.dll
+ Logon
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
IgfxTray
[A ] 100. c:\windows\system32\igfxtray.exe
HotKeysCmds
[AM] 101. c:\windows\system32\hkcmd.exe
SoundMan
[AM] 102. c:\windows\soundman.exe
RavTask
[A ] 103. c:\program files\rising\rav\ravtask.exe
runeip
[AM] 104. c:\program files\rising\antispyware\runiep.exe
+ Boot Execute
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 105. c:\windows\system32\bsmain.exe
+ Image Hijacks
+ HKCR\.html
htmlfile\Edit\Command
[A ] 106. c:\program files\microsoft office\office11\msohtmed.exe
htmlfile\Print\Command
[A ] 106. c:\program files\microsoft office\office11\msohtmed.exe
+ HKCR\.htm
htmlfile\Edit\Command
[A ] 106. c:\program files\microsoft office\office11\msohtmed.exe
htmlfile\Print\Command
[A ] 106. c:\program files\microsoft office\office11\msohtmed.exe
gototop
 

+ 系统活动模块
+ 00000074(116) wdfmgr.exe
01000000[0000C000]
[AM] 4. c:\windows\system32\wdfmgr.exe
+ 000001dc(476) hkcmd.exe
00400000[00022000]
[AM] 101. c:\windows\system32\hkcmd.exe
10000000[0001E000]
[ M] 107. c:\windows\system32\hccutils.dll
00A10000[00024000]
[ M] 108. c:\windows\system32\igfxdev.dll
00AE0000[00058000]
[AM] 85. c:\windows\system32\igfxsrvc.dll
00B60000[0000E000]
[AM] 98. c:\windows\system32\csrss.dll
00B90000[00022000]
[ M] 109. c:\windows\system32\igfxhk.dll
00BD0000[00024000]
[ M] 110. c:\windows\system32\igfxres.dll
+ 000001f0(496) SOUNDMAN.EXE
00400000[00015000]
[AM] 102. c:\windows\soundman.exe
00C90000[0000E000]
[AM] 98. c:\windows\system32\csrss.dll
+ 00000248(584) smss.exe
+ 0000026c(620) ctfmon.exe
00A00000[0000E000]
[AM] 98. c:\windows\system32\csrss.dll
10000000[0001B000]
[ M] 111. c:\program files\rising\antispyware\ieprot.dll
+ 00000288(648) csrss.exe
+ 000002a0(672) winlogon.exe
72C80000[00008000]
[ M] 112. c:\windows\system32\msacm32.drv
+ 000002cc(716) services.exe
+ 000002d8(728) lsass.exe
+ 00000370(880) svchost.exe
+ 000003b0(944) svchost.exe
+ 00000448(1096) svchost.exe
50E60000[0000C000]
[ M] 113. c:\windows\system32\wups2.dll
+ 00000498(1176) svchost.exe
+ 00000500(1280) svchost.exe
+ 00000580(1408) alg.exe
+ 000005c4(1476) Ras.exe
00400000[0013E000]
[ M] 114. c:\program files\rising\antispyware\ras.exe
10000000[000A3000]
[ M] 115. c:\program files\rising\antispyware\rasgui.dll
01360000[0001B000]
[AM] 97. c:\windows\system32\ravext.dll
01380000[0000E000]
[AM] 98. c:\windows\system32\csrss.dll
016B0000[00011000]
[AM] 99. c:\windows\system32\shlhook.dll
014F0000[0001B000]
[ M] 111. c:\program files\rising\antispyware\ieprot.dll
+ 000005cc(1484) Explorer.EXE
014C0000[0001F000]
[ M] 116. c:\windows\system32\sysprofiles.dll
72C80000[00008000]
[ M] 112. c:\windows\system32\msacm32.drv
01720000[0000E000]
[AM] 98. c:\windows\system32\csrss.dll
01E60000[0003C000]
[ M] 117. c:\windows\system32\igfxpph.dll
01EA0000[0001E000]
[ M] 107. c:\windows\system32\hccutils.dll
01EC0000[00024000]
[ M] 110. c:\windows\system32\igfxres.dll
01EF0000[00058000]
[AM] 85. c:\windows\system32\igfxsrvc.dll
01F60000[00024000]
[ M] 108. c:\windows\system32\igfxdev.dll
23700000[0001A000]
[ M] 118. c:\program files\rising\rav\rscommon.dll
10000000[0001B000]
[AM] 97. c:\windows\system32\ravext.dll
01E30000[0001B000]
[ M] 111. c:\program files\rising\antispyware\ieprot.dll
+ 00000658(1624) spoolsv.exe
+ 00000834(2100) RsLogVw.exe
00400000[0002C000]
[ M] 119. c:\program files\rising\rav\rslogvw.exe
10000000[0001B000]
[ M] 120. c:\program files\rising\rav\rscommx.dll
26600000[0007D000]
[ M] 121. c:\program files\rising\rav\rsguilib.dll
23800000[0001A000]
[ M] 122. c:\program files\rising\rav\rsxml.dll
23900000[00031000]
[ M] 123. c:\program files\rising\rav\pngdll.dll
23700000[0001A000]
[ M] 118. c:\program files\rising\rav\rscommon.dll
0A970000[0000E000]
[AM] 98. c:\windows\system32\csrss.dll
13100000[0002E000]
[ M] 124. c:\program files\rising\rav\libload.dll
0BAC0000[0002C000]
[ M] 125. c:\program files\rising\rav\viruslib.dll
+ 0000086c(2156) iexplore.exe
10000000[00022000]
[AM] 86. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll
00FE0000[00019000]
[AM] 87. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
223F0000[00009000]
[ M] 126. c:\program files\thunder network\thunder\components\resworker\dsbho_00.dll
223C0000[0000C000]
[ M] 127. c:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll
010F0000[0000E000]
[AM] 98. c:\windows\system32\csrss.dll
325C0000[00012000]
[AM] 93. c:\program files\microsoft office\office11\msohev.dll
011B0000[00019000]
[ M] 128. c:\program files\rising\rav\ravscrch.dll
72C80000[00008000]
[ M] 112. c:\windows\system32\msacm32.drv
30000000[002EF000]
[ M] 129. c:\windows\system32\macromed\flash\flash9c.ocx
04930000[00035000]
[ M] 130. c:\windows\system32\xpsp3res.dll
73900000[0002D000]
[ M] 131. c:\windows\system32\vcdxp.ime
05420000[0000B000]
[AM] 90. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
00CE0000[0001B000]
[ M] 111. c:\program files\rising\antispyware\ieprot.dll
+ 00000e48(3656) runiep.exe
00400000[00012000]
[AM] 104. c:\program files\rising\antispyware\runiep.exe
00BF0000[0001B000]
[ M] 111. c:\program files\rising\antispyware\ieprot.dll
00BE0000[0000E000]
[AM] 98. c:\windows\system32\csrss.dll
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT