| 引用: |
| 【一剑封喉—↓的贴子】我的电脑中了一个叫Trojan.DL.Agent.lqt的毒.文件名为windows\system32\dwers\nwupspx.sys。杀毒杀不了，删也删不掉。请问用什么办法可以解决？？？（以在安全模式杀过，不能杀这个毒。请高手指点一二） Logfile of HijackThis v1.99.1 Scan saved at 21:21:04, on 2006-9-16 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180) Running processes: G:\WINDOWS\System32\smss.exe G:\WINDOWS\system32\winlogon.exe G:\WINDOWS\system32\services.exe G:\WINDOWS\system32\lsass.exe G:\WINDOWS\system32\svchost.exe F:\Program Files\Rising\Rav\CCenter.exe G:\WINDOWS\System32\svchost.exe F:\Program Files\Rising\Rav\Ravmond.exe G:\WINDOWS\Explorer.EXE G:\WINDOWS\system32\spoolsv.exe F:\Program Files\Rising\Rav\RavStub.exe F:\Program Files\Rising\Rav\RavTask.exe F:\Program Files\Rising\Rav\Ravmon.exe G:\Program Files\Common Files\Real\Update_OB\realsched.exe G:\WINDOWS\system32\ctfmon.exe G:\WINDOWS\System32\svchost.exe G:\WINDOWS\System32\svchost.exe G:\WINDOWS\system32\svchost.exe G:\Program Files\Internet Explorer\iexplore.exe G:\WINDOWS\system32\rundll32.exe f:\program files\rising\rfw\rfwsrv.exe F:\Program Files\Rising\Rfw\RfwMain.exe F:\Program Files\Rising\Rav\RsAgent.exe G:\WINDOWS\msagent\AgentSvr.exe D:\Downloads\ha_hijackthis_1991\HijackThis.exe O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - G:\PROGRA~1\DESKAD~1\deskipn.dll O2 - BHO: Shockwave Flash - {14A21378-5BB1-4BC4-95D5-5D3F51527F6F} - G:\WINDOWS\system32\dpnaddr32.dll O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - G:\WINDOWS\system32\kakatool.dll O4 - HKLM\..\Run: [RavTask] "F:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [TkBellExe] "G:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [BigDogPath] G:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera O4 - HKLM\..\RunOnce: [RavStub] "F:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - G:\WINDOWS\system32\shdocvw.dll O9 - Extra ''Tools'' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - G:\WINDOWS\system32\shdocvw.dll O10 - Unknown file in Winsock LSP: g:\windows\system32\quartz32.dll O10 - Unknown file in Winsock LSP: g:\windows\system32\quartz32.dll O14 - IERESET.INF: SEARCH_PAGE_URL= O14 - IERESET.INF: START_PAGE_URL= O17 - HKLM\System\CCS\Services\Tcpip\..\{D14E5DFE-F6EF-4C9F-B77D-7F7D4A847058}: NameServer = 202.96.128.166 202.96.128.86 O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\program files\rising\rfw\rfwproxy.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\Program Files\Rising\Rav\CCenter.exe O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\Program Files\Rising\Rav\Ravmond.exe ……………… |