瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 太可怕了!大家快来帮帮忙啊!!

1234   3  /  4  页   跳转

太可怕了!大家快来帮帮忙啊!!

正在运行的进程
[PID: 280][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 336][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 360][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 404][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 416][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 568][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 616][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 700][F:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 716][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 760][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 828][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [F:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1040][C:\WINDOWS\system32\LEXBCES.EXE]  <Lexmark International, Inc.><8.18>
    [C:\WINDOWS\system32\lexp2p32.dll]  <Lexmark International, Inc.><8.18>
    [C:\WINDOWS\system32\lex2kusb.dll]  <Lexmark International, Inc.><8.18>
[PID: 1068][C:\WINDOWS\system32\LEXPPS.EXE]  <Lexmark International, Inc.><8.18>
    [C:\WINDOWS\system32\LEXBCE.DLL]  <Lexmark International, Inc.><8.18>
[PID: 1084][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
    [C:\WINDOWS\system32\LEXLMPM.DLL]  <Lexmark International, Inc.><8.18>
    [C:\WINDOWS\system32\LexBce.dll]  <Lexmark International, Inc.><8.18>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LGBLPP5C.dll]  <><1.0.0.0>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll]  <Windows (R) 2000 DDK provider><5.00.2195.1620>
    [C:\WINDOWS\system32\LGBLpwr.dll]  <Lexmark International, Inc.><0, 1, 61, 1>
[PID: 1192][C:\WINDOWS\System32\SCardSvr.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1344][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.1.0.30>
[PID: 1376][C:\Program Files\95599 Certificate Tools\CIDC\RegCertTool.exe]  <CIDC><1, 0, 0, 6>
[PID: 1384][F:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [F:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [F:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [F:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [F:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1392][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1404][F:\Program Files\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30>
    [F:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [F:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [F:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [F:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [F:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [F:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [F:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1536][C:\WINDOWS\System32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.6693>
    [C:\WINDOWS\System32\NVRSZHC.DLL]  <NVIDIA Corporation><6.14.10.6693>
[PID: 1580][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 112][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 988][C:\WINDOWS\system32\wuauclt.exe]  <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
[PID: 408][C:\Program Files\WinRAR\WinRAR.exe]  <Eugene Roshal><3.30>
[PID: 1512][C:\DOCUME~1\Lenovo\LOCALS~1\Temp\Rar$EX00.283\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
[PID: 320][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll]  <Xiang Feng Technology><2, 2, 0, 1612>
    [F:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 

C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper2006813_4825.dll我发觉这个文件怎么找也找不到,我用工具里的文件夹选项选显示所有文件和文件夹然后应用确定,可是还是找不到那个Application Data文件夹我再打开工具,文件夹选项,发觉刚刚那个变成了不显示隐藏文件和文件夹。唉!我拿这个插件没辙了
gototop
 

dddd
gototop
 

dddddddd
gototop
 

没人帮忙啊?
gototop
 

无邪哥哥,快来看看呀,我是不是没得救了?
gototop
 

你没有用兔子去卸载它吧
我建议你卸载所有提示的流氓软件
文件夹选项的问题,你可以到www.27814939.ys168.com,点“我的软件”下载,显示文件.RAR,解压出来双击就可以了。
gototop
 

对了,你的兔子不知是不是最新版,建议卸载老兔子,重新下载并安装兔子
下载超级兔子。
http://www.pctutu.com/srmsdown.asp
安装好后,打开“超级兔子清理王”“专业卸载,卸载所有提示的垃圾软件,卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载。
卸载完后,重启,再扫份日志粘上来。
gototop
 

我卸了,用的也是你给我的网址
gototop
 

C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper2006813_4825.dll
不在运行中
你用以下的方法找找看
http://forum.ikaka.com/topic.asp?board=3&artid=8130575
gototop
 
1234   3  /  4  页   跳转
页面顶部
Powered by Discuz!NT