瑞星卡卡安全论坛

O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O17 - HKLM\System\CCS\Services\Tcpip\..\{D07141C6-1F66-4DEA-90BA-E4F7B0BD9EFE}: NameServer = 219.232.48.61,202.106.127.1
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Internet Explorer (IExplorer) - Unknown owner - C:\WINNT\svchost.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - Service: Srv32 - Unknown owner - C:\WINNT\system32\srv32.exe (file missing)

用瑞星杀过之后，重新启动机器后仍然有病毒，怎么办？？？

O23 - Service: Internet Explorer (IExplorer) - Unknown owner - C:\WINNT\svchost.exe
O23 - Service: Srv32 - Unknown owner - C:\WINNT\system32\srv32.exe (file missing)

引用:

【garnett21的贴子】O23 - Service: Internet Explorer (IExplorer) - Unknown owner - C:\WINNT\svchost.exe O23 - Service: Srv32 - Unknown owner - C:\WINNT\system32\srv32.exe (file missing) ...........................

您是说这两个是灰鸽子病毒的服务吗？

很有可能..
删除文件
svchost.exe
srv32.exe
(或是＊exe , ＊.dll ,＊Key.dll, ＊_Hook.dll)
到注册表编辑器中找到HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services下查找svchost.exe将其删除.重启即可.

注册表改过了，还是不行。
我想把svchost.exe程序删除，可是说程序正在使用，不能删除。
而且我找不到srv32.exe文件。