我用木马杀客杀完后,瑞星和杀客都查不到毒了,可是开机还是直接变小红伞,过一段时间就弹出个垃圾网页
附最新日志:
Logfile of HijackThis v1.98.0
Scan saved at 23:46:43, on 2006-7-30
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\msime.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\BUUTND.exe
F:\新建文件夹\Rising\Rav\RavTask.exe
C:\WINDOWS\ctfmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\conime.exe
F:\新建文件夹\Rising\Rav\Ravmon.exe
D:\qq\TIMPlatform.exe
D:\qq\QQ.exe
E:\Program Files\TTPlayer\TTPlayer.exe
F:\新建文件夹\Rising\Rav\Rav.exe
F:\新建文件夹\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\qq\QQ.exe
D:\临时文件夹\HijackThis.exe
R3 - Default URLSearchHook is missing
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v13.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - F:\新建文件夹 (2)\xunlei\ComDlls\XunLeiBHO_002.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [V7X7G2] C:\WINDOWS\system32\BUUTND.exe
O4 - HKLM\..\Run: [RavTask] "F:\新建文件夹\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [ctfmon] C:\WINDOWS\ctfmon.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] ; "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: 腾讯QQ珊瑚虫版.lnk = D:\qq\CoralQQ.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &使用迅雷下载 - F:\新建文件夹 (2)\xunlei\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - F:\新建文件夹 (2)\xunlei\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\qq\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\qq\SendMMS.htm
O8 - Extra context menu item: 用比特精灵下载(&B) - F:\新建文件夹 (2)\BitSpirit\bsurl.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\quartz32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com
O16 - DPF: {18F57D30-EF36-4C0E-9343-7BFA6DF79B4A} (XLink Class) - http://active.micr0media.com/swflash.CAB
O16 - DPF: {1EAB7671-2630-408A-865C-DC967AB2FBF8} (GSCell Control) - http://172.16.21.1/cwbase/sys/menushow/GSCellPro.ocx
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://wojiuaibei.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5932517A-3326-4439-A708-1C98EDB5C549} (Downloader Class) - http://imop-union.mop.com/install/activex/js/iMopDl.cab
O16 - DPF: {86A2938F-A71B-4521-81C4-1727B7B6201B} (PrjGenerRpt.GenerRpt) - http://172.16.21.1/CWBASE/bb/GenerRpt.cab
O16 - DPF: {87CCFDB0-C4BE-4BC2-A78C-9EAA7CF96667} - http://ps.itv.mop.com/dn/files/vodupdate_1.0.0.9_20060425.cab
O16 - DPF: {8B4B2DC6-8372-4675-A8EF-D634FE8CF1E4} (ClientManager
Object) - http://172.16.21.1/cwbase/sys/userlogin/GsClientManager.cab
O16 - DPF: {A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} (photo_uploader Control) - http://upload.photo.163.com/photoup.cab
O16 - DPF: {CDBD9968-7BF1-11D4-9D36-0001029DEBEB} (Loader Class) - http://202.102.145.26/bug/Spider.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{D4E8E67A-6438-471D-A341-A57DE472311D}: NameServer = 202.99.192.68
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll"
