1   1  /  1  页   跳转

哪位高手帮帮忙!

哪位高手帮帮忙!

我现在电脑上瑞星杀毒软件  IE  游戏 讯雷等 都会自动关闭  我认为是中了橙色八月 拿瑞星发布的橙色八月专杀  但是根本没有检测出来有任何病毒  现在还是开IE  瑞星 游戏等都会自动关闭  哪位高手能帮下忙!
最后编辑2006-09-08 09:31:38
分享到:
gototop
 

用HijackThis扫描个日志来看看
gototop
 

Logfile of HijackThis v1.99.1
Scan saved at 1:08:43, on 2006-9-8
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
d:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
d:\Program Files\Rising\Rav\Ravmond.exe
d:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
d:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
d:\program files\rising\rfw\RfwMain.exe
D:\Program Files\Rising\Rav\RavTask.exe
D:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\dwwin.exe
C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe
C:\WINDOWS\system32\dwwin.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\dwwin.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\dwwin.exe
C:\Documents and Settings\yangdazao.YANGDAZA-88B2B2\桌面\ha_hijackthis_1991\HijackThis.exe

O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XUNLEIBHO_002.dll
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - HKLM\..\Run: [CdnCtr] C:\Program Files\CNNIC\Cdn\cdnup.exe
O4 - HKLM\..\Run: [Thunder] "C:\Program Files\Thunder Network\Thunder\Thunder.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O9 - Extra button: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - Extra 'Tools' menuitem: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O11 - Options group: [CDNCLIENT]  中文上网
O17 - HKLM\System\CCS\Services\Tcpip\..\{7B85BCE5-DC0F-4013-862A-0895456964F1}: NameServer = 202.101.224.69 202.101.226.68
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - d:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - d:\Program Files\Rising\Rav\Ravmond.exe

这是用hijackthis扫描出来的日志
gototop
 

O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\cn_spiex.dll

病毒DLL 
你把cn_spiEx.dll 这个文件改下名~比如cn_spiEx.dll2什么的.那这个文件就不可用了,然后重启再删它.软件无法识别这个改了名的模块也就无法加载它

O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll
步骤是:点击运行,输入 regedit。点编辑后有个查找,把cdnns.dll输入后进行查找。出现后把它删了就行了
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT