公司服务器今天下午起每几分钟就断一次网，怀疑是中病毒了，目前是不是有种让机器自动断网的病毒，如何杀灭，请高手指教，谢谢

【回复“免检产品”的帖子】
断了后需要几分钟后有能连接

HijackThis@Qoo的扫描日志  V1.97.7
Scan saved at 18:01:27, on 2006-3-27
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
D:\PROGRAM FILES\RISING\RAV\RavStub.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\llssrv.exe
C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe
d:\Program Files\Rising\Rav\RavService.exe
C:\WINNT\system32\regsvc.exe
D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\WINNT\System32\msdtc.exe
C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe
C:\WINNT\system32\Dfssvc.exe
C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlagent.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
D:\Program Files\Rising\Rav\RavTray.exe
D:\Program Files\Rising\Rav\RavTimer.exe
D:\Program Files\Rising\Rav\RavMon.exe
C:\pb_svr\server.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\IComMail2005\WatchDog.exe
d:\IComMail2005\MessageCC.exe
d:\IComMail2005\SmtpService.exe
d:\IComMail2005\ServiceFS.exe
d:\IComMail2005\UserService.exe
C:\Program Files\畅通伟业\快递通2004\KDTMain.exe
D:\Program Files\D512计费系统\d512.exe
D:\Program Files\Rising\Rav\Rav.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
d:\IComMail2005\Pop3Service.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrator\桌面\HijackThis.exe

O3 - Toolbar: ????? - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [RavTray] d:\Program Files\Rising\Rav\RavTray.exe
O4 - HKLM\..\Run: [RavTimer] d:\Program Files\Rising\Rav\RavTimer.exe
O4 - HKLM\..\Run: [RavMon] d:\Program Files\Rising\Rav\RavMon.exe -system
O4 - HKLM\..\Run: [productserver] c:\pb_svr\server.exe
O4 - HKLM\..\Run: [KDTAnywhere] "C:\Program Files\
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - Startup: NTUSER.DAT
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Global Startup: ntuser.dat
O4 - Global Startup: ntuser.dat.LOG
O4 - Global Startup: ntuser.pol
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F34BF4A-A007-4320-A777-530CB6379AF7}: NameServer = 202.96.96.236,202.101.172.35

自己顶上去

HijackThis版本太老，http://forum.ikaka.com/topic.asp?board=28&artid=6979213第1楼下个1.99.1版的再扫一次

Logfile of HijackThis v1.99.1
Scan saved at 10:59:00, on 2006-3-28
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\llssrv.exe
C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe
C:\WINNT\system32\regsvc.exe
D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\WINNT\System32\msdtc.exe
C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe
C:\WINNT\system32\Dfssvc.exe
C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlagent.exe
C:\WINNT\System32\svchost.exe
D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
D:\PROGRAM FILES\RISING\RAV\RavStub.exe
d:\Program Files\Rising\Rav\RavService.exe
C:\WINNT\Explorer.EXE
D:\Program Files\Rising\Rav\RavTray.exe
D:\Program Files\Rising\Rav\RavTimer.exe
D:\Program Files\Rising\Rav\RavMon.exe
C:\pb_svr\server.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\Program Files\D512计费系统\d512.exe
D:\IComMail2005\WatchDog.exe
d:\IComMail2005\MessageCC.exe
d:\IComMail2005\SmtpService.exe
d:\IComMail2005\Pop3Service.exe
d:\IComMail2005\ServiceFS.exe
d:\IComMail2005\UserService.exe
C:\Documents and Settings\Administrator\桌面\HijackThis.exe

O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [RavTray] d:\Program Files\Rising\Rav\RavTray.exe
O4 - HKLM\..\Run: [RavTimer] d:\Program Files\Rising\Rav\RavTimer.exe
O4 - HKLM\..\Run: [RavMon] d:\Program Files\Rising\Rav\RavMon.exe -system
O4 - HKLM\..\Run: [productserver] c:\pb_svr\server.exe
O4 - HKLM\..\Run: [KDTAnywhere] "C:\Program Files\畅通伟业\快递通2004\KDTAnywhereS.exe" -servicehelper
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - Global Startup: 服务管理器.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{7F34BF4A-A007-4320-A777-530CB6379AF7}: NameServer = 202.96.96.236,202.101.172.35
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: KDTAnywhere Server (kdtanywhere) - Unknown owner - C:\Program Files\畅通伟业\快递通2004\KDTAnywhereS.exe" -service (file missing)
O23 - Service: RavService - Unknown owner - d:\Program Files\Rising\Rav\RavService.exe" /service (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe

【回复“免检产品”的帖子】
若数据包堵塞
就会导致断网

若发送的数据包比接收的多
也会导致断网