瑞星卡卡安全论坛

中了这个病毒怎么办啊 瑞星查不出来它是病毒 但是在进程中可以显示 我上网查了说是病毒 但是用结束进程的方法说是系统关键进程无法结束 去C盘查找这个东西 但是没有 连隐藏的文件都找了还是没有 网上说 在D盘生成2个文件 可是我的D盘什么都没有 我改怎么办呢
这个东西一直在请求连接 我一直拒绝 路径是C:\WINDOWS\system32  但是找不到这个程序按CTRL+ALT+DEL显示的有两个和这个程序有关系（网上说的 我也找到了)lass.exe 和smss.exe
请大家帮帮我 看看我怎么办

用户系统信息：Mozilla/4.0 (compatible;tlbb=bl; MSIE 6.0; Windows NT 5.1; SV1; QQDownload 1.7)

附件: 瑞星听诊信息.rar

日志正常，无可疑文件，你看这两个进程是哪个目录下谁启用的，拿卡卡助手看，高级工具--进程管理，找到这两个进程，然后压缩提交到以下地址：
http://mailcenter.rising.com.cn/uploadnew.aspx:default7:

可是卡卡进程管理里没有这俩个进程 我按CTRL+ALT+DEL 就有

C:\WINDOWS\SYSTEM32\CTFMON.EXE
进程好多。。


H:\RSDETECT.EXE
发上来看看

可疑驱动
yaskp = C:\WINDOWS\SYSTEM32\DRIVERS\YASKP.SYS

疑似病毒驱动
kbdfi3 = C:\WINDOWS\SYSTEM32\DRIVERS\KBDFI3.SYs
kbdfj = C:\WINDOWS\SYSTEM32\DRIVERS\KBDFJ.SYS
qduml = C:\WINDOWS\SYSTEM32\DRIVERS\QDUML.SYS
xuusp = C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\_TEMP.DAT
yxbqfobk = C:\WINDOWS\SYSTEM32\DRIVERS\QBEQBM.SYS


雅虎
你也安装
。。。。。。。。


http://www.arswp.com/download.html
下载完清理系统
雅虎助手清理了

什么意思 让我发什么 我不明白 对不起啊我把雅虎删除了下载了你说的那个东东

你还是去反病毒区发个SRENG日志吧

虽然听诊器里看不出什么
SRENG日志比卡卡听诊器全面

且
kbdfi3 = C:\WINDOWS\SYSTEM32\DRIVERS\KBDFI3.SYs
kbdfj = C:\WINDOWS\SYSTEM32\DRIVERS\KBDFJ.SYS
qduml = C:\WINDOWS\SYSTEM32\DRIVERS\QDUML.SYS
xuusp = C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\_TEMP.DAT
yxbqfobk = C:\WINDOWS\SYSTEM32\DRIVERS\QBEQBM.SYS
疑似病毒驱动的运行状况不明

未知家族病毒分析
扫描结果:
无可疑文件


系统活动进程
C:\PROGRAM FILES\COMMON FILES\SOGOU PXP\P2PSVR.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\P4P\P4PIPC.DLL
C:\PROGRAM FILES\SOGOU PXP\VODSVR.DLL
C:\PROGRAM FILES\SOGOU PXP\PXPNET.DLL
C:\PROGRAM FILES\SOGOU PXP\P2PCLIENT.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\PROGRAM FILES\SERVCIE.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\PPSTREAM\BIN\1.0.0.2\VODRC.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\WINDOWS\SYSTEM32\GOOGLEPINYIN.IME
C:\WINDOWS\SYSTEM32\MSACM32.DRV

C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\ATI2EVXX.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\ATI2EDXX.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\WINDOWS\SYSTEM32\GOOGLEPINYIN.IME

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\ALG.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE
C:\WINDOWS\SYSTEM32\MFC71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\RFW\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RFW\RSCOMMX2.DLL
C:\PROGRAM FILES\RISING\RFW\RSAPPMGR.DLL
C:\PROGRAM FILES\RISING\RFW\CFGDLL.DLL
C:\PROGRAM FILES\RISING\RFW\RFWRULE.DLL
C:\PROGRAM FILES\RISING\RFW\RFWLOG.DLL
C:\PROGRAM FILES\RISING\RFW\RFWDRV.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_CTRL.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\RISING\RFW\UNVDET.DLL
C:\PROGRAM FILES\RISING\RFW\MPORTS.DLL

C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE
C:\PROGRAM FILES\RISING\RAV\BWLIST.DLL
C:\WINDOWS\SYSTEM32\MFC71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL
C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL
C:\PROGRAM FILES\RISING\RAV\RSLOG.DLL
C:\PROGRAM FILES\RISING\RAV\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMX2.DLL
C:\PROGRAM FILES\RISING\RAV\MONRULE.DLL
C:\PROGRAM FILES\RISING\RAV\HOOKSYS.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\RISING\RAV\HOOKREG.DLL
C:\PROGRAM FILES\RISING\RAV\HOOKNTOS.DLL
C:\PROGRAM FILES\RISING\RAV\RSWALMON.DLL
C:\PROGRAM FILES\RISING\RAV\RECOMP.DLL
C:\PROGRAM FILES\RISING\RAV\REFS.DLL
C:\PROGRAM FILES\RISING\RAV\FFR.DLL
C:\PROGRAM FILES\RISING\RAV\RSSTORE.DLL
C:\PROGRAM FILES\RISING\RAV\HOOKCONT.DLL
C:\PROGRAM FILES\RISING\RAV\FAKESCAN.DLL
C:\PROGRAM FILES\RISING\RAV\SCANNER.DLL
C:\PROGRAM FILES\RISING\RAV\VIRUSLIB.DLL
C:\PROGRAM FILES\RISING\RAV\RELIBLDR.DLL
C:\PROGRAM FILES\RISING\RAV\HOOKWEB.DLL
C:\PROGRAM FILES\RISING\RAV\NVFILE.DLL
C:\PROGRAM FILES\RISING\RAV\SCANEXEC.DLL
C:\PROGRAM FILES\RISING\RAV\UNEXE.DLL
C:\PROGRAM FILES\RISING\RAV\SCANEX.DLL
C:\PROGRAM FILES\RISING\RAV\PEARC.DLL
C:\PROGRAM FILES\RISING\RAV\EXTFILE.DLL
C:\PROGRAM FILES\RISING\RAV\SCANPACK.DLL
C:\PROGRAM FILES\RISING\RAV\REVM.DLL
C:\PROGRAM FILES\RISING\RAV\URUTILS.DLL
C:\PROGRAM FILES\RISING\RAV\UR000.DAT
C:\PROGRAM FILES\RISING\RAV\SCRIPTCI.DLL
C:\PROGRAM FILES\RISING\RAV\UR001.DAT
C:\PROGRAM FILES\RISING\RAV\UR023.DAT
C:\PROGRAM FILES\RISING\RAV\UROUTINE.DLL
C:\PROGRAM FILES\RISING\RAV\SCANSCT.DLL
C:\PROGRAM FILES\RISING\RAV\EXTOLE.DLL
C:\PROGRAM FILES\RISING\RAV\EXTMAIL.DLL

C:\PROGRAM FILES\RISING\RFW\RFWPROXY.EXE
C:\WINDOWS\SYSTEM32\MFC71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\RFW\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RFW\RSCOMMX2.DLL
C:\PROGRAM FILES\RISING\RFW\RFWRULE.DLL
C:\PROGRAM FILES\RISING\RFW\URLRULE.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\RISING\RFW\MONMID.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\PROGRAM FILES\RISING\RAV\RAVSTUB.EXE
C:\PROGRAM FILES\RISING\RAV\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMX2.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\STORMII\STORMLIV.EXE
C:\PROGRAM FILES\STORMII\MSVCP60.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\QBEQBM.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\GOOGLEPINYIN.IME
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\APPLICATION DATA\PPSTREAM\BIN\1.0.0.2\VODRC.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRA~1\YAHOO!\ASSIST~1\YALIVE.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YALLIVEEX.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YSEARCH.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YZSNETPROTO.DLL
C:\PROGRAM FILES\WINRAR\RAREXT.DLL
C:\WINDOWS\SYSTEM32\RAVEXT.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YADFIL~1.DLL
C:\PROGRA~1\YAHOO!\ASSISTANT\SHELL\YASSECBLK.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YOPTIMUM.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YREPAIR.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YASFSKS.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YXPSTYLE.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YASBAR.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YASNOAD.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YASWIPER.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YASIESEC.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YSETTI~2.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YMAILP.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YMYWEB.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YPAGETR.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YDRAGS~2.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YASSIST.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL
C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL

大哥
别贴这东东了

卡卡听诊器
都不带操作的:default3: :default3: