我刚才也中了。症状如下:
一运行比如宽带客户端、卡卡进程管理等就强制关机;
另外,运行所有程序时,瑞星都监控注册表被修改HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
进入安全模式,把以下搞掉,再到注册表删除上面
R3 - URLSearchHook: (no name) - {982CB676-38F0-4D9A-BB72-D9371ABE876E} - (no file)
O1 - Hosts: 125.91.1.20 www.7322.com
O1 - Hosts: 61.141.31.11 59.34.148.81
O1 - Hosts: 61.162.230.31 7939.com
O1 - Hosts: 125.91.1.20 60.191.60.114
O1 - Hosts: 125.91.1.20 265.com
O1 - Hosts: 125.91.1.20 www.265.com
O1 - Hosts: 125.91.1.20 www.v111.com
O1 - Hosts: 61.162.230.31 59.34.148.98
O1 - Hosts: 125.91.1.20 localhost
O1 - Hosts: 61.141.31.11 down.Virussky.com
O1 - Hosts: 61.141.31.11 luosoft.com
O1 - Hosts: 61.141.31.11 60.191.60.108
O1 - Hosts: 125.91.1.20 www.ycdy.com
O1 - Hosts: 61.141.31.11 www.360safe.com
O1 - Hosts: 61.141.31.11 61.129.58.12
O1 - Hosts: 125.91.1.20 hao123.com
O1 - Hosts: 61.141.31.11 www.btbbt.com
O1 - Hosts: 61.141.31.11 www.piaoxue.com
O1 - Hosts: 125.91.1.20 www.gjj.cc
O1 - Hosts: 61.162.230.31
about:blank
O1 - Hosts: 61.141.31.11 bbs.360safe.com
O1 - Hosts: 125.91.1.20 www.gjj.cc
O1 - Hosts: 61.141.31.11 forum.ikaka.com
O1 - Hosts: 125.91.1.20 9991.com
O1 - Hosts: 61.141.31.11 bbs.btbbt.com
O1 - Hosts: 125.91.1.20 www.v111.com
O1 - Hosts: 125.91.1.20 post.baidu.com
O1 - Hosts: 125.91.1.20 www.hao123.com
O1 - Hosts: 61.141.31.11 cn.zs.yahoo.com
O1 - Hosts: 61.162.230.31 www.7939.com
O1 - Hosts: 61.141.31.11 219.139.58.97
O1 - Hosts: 61.141.31.11 www.znmq.com
O1 - Hosts: 61.141.31.11 219.153.20.209
O1 - Hosts: 125.91.1.20 www.9991.com
O1 - Hosts: 125.91.1.20 www.5566.net
O1 - Hosts: 61.141.31.11 forum.jiangmin.com
O1 - Hosts: 61.141.31.11 60.191.60.107
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3}? - (no file)
问题解决了,目前没发现出现其他问题,请问上面的做法是否有问题?另外以下几项没删除是否存在危险?
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdog0.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdog0.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdog0.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdogr0.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdogr0.dll