瑞星卡卡安全论坛

我的电脑　开了一段时间后　电脑就自己一下变成蓝屏　一大堆英文下面有数字到１００多就自己重起了　我的系统是xp sp2 而且我是正版瑞星用户也没查出是什么毒　以前查出个一个 Script.Exploit.HTML.Spage.K　还有一个Trojan.DL.Agent.drk 　都已经杀了　出现问题以后我把系统修复了　还是不行不知道是怎么回事啊　高手帮下了

用Autoruns保存一个日志发上来
日志保存方法:选择File->Save菜单项
保存日志时注意选择Options->Hide Microsoft Entries菜单项(设置了这项后点工具栏的刷新按钮)

工具使用参考http://forum.ikaka.com/topic.asp?board=28&artid=7318038第14楼

ProcessPIDCPUDescriptionCompany Name
System Idle Process080.30
Interruptsn/aHardware Interrupts
DPCsn/aDeferred Procedure Calls
System4
  smss.exe416Windows NT Session ManagerMicrosoft Corporation
  csrss.exe4724.55Client Server Runtime ProcessMicrosoft Corporation
  winlogon.exe496Windows NT Logon ApplicationMicrosoft Corporation
    services.exe540Services and Controller appMicrosoft Corporation
    svchost.exe716Generic Host Process for Win32 ServicesMicrosoft Corporation
      TIMPlatform.exe14744TIMPlatformtencent
    svchost.exe776Generic Host Process for Win32 ServicesMicrosoft Corporation
    svchost.exe840Generic Host Process for Win32 ServicesMicrosoft Corporation
    svchost.exe892Generic Host Process for Win32 ServicesMicrosoft Corporation
    svchost.exe936Generic Host Process for Win32 ServicesMicrosoft Corporation
    RavMonD.exe1016RavMonBeijing Rising Technology Co., Ltd.
      RavStub.exe1176Rising Rav StubBeijing Rising Technology Co., Ltd.
    rfwsrv.exe1112Rising Personal FireWall ServiceBeijing Rising Technology Corporation Limited
    spoolsv.exe1352Spooler SubSystem AppMicrosoft Corporation
    CCenter.exe1300CCenterrising
    alg.exe2124Application Layer Gateway ServiceMicrosoft Corporation
    lsass.exe560LSA Shell (Export Version)Microsoft Corporation
explorer.exe13681.52Windows ExplorerMicrosoft Corporation
rundll32.exe1424Run a DLL as an AppMicrosoft Corporation
RavTimer.exe1572RavTimerBeijing Rising Technology Co., Ltd.
rfwmain.exe1600Rising Personal FireWall Main ProgramBeijing Rising Technology Corporation Limited
RavMon.exe1608RavMon Rising realtime monitor Beijing Rising Technology Co., Ltd.
realsched.exe1624RealNetworks SchedulerRealNetworks, Inc.
rundll32.exe1640Run a DLL as an AppMicrosoft Corporation
mmsk.exe1732查杀:木马、病毒、蠕虫、后门、黑客程序等www.mmsk.cn
ctfmon.exe1812CTF LoaderMicrosoft Corporation
mir3superman17.6.exe152324.55Mir3_ Microsoft 基础类应用程序
  sm_mon.exe15468COMMONORG
  sm_mon.exe161007.58COMMONORG
QQ.exe14552QQTENCENT
procexp.exe104643.03Sysinternals Process ExplorerSysinternals
IEXPLORE.EXE192Internet ExplorerMicrosoft Corporation

Process: Procexp Pid: -2

TypeName

mmsk.exe1732查杀:木马、病毒、蠕虫、后门、黑客程序等www.mmsk.cn
mir3superman17.6.exe152324.55Mir3_ Microsoft 基础类应用程序
sm_mon.exe15468COMMONORG
sm_mon.exe161007.58COMMONORG

杀掉
删除文件

注意关闭XP系统还原，再杀

应该是显卡松动了把???