瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 中毒后运行ewido或是插U盘就会死机【原创】

1   1  /  1  页   跳转

中毒后运行ewido或是插U盘就会死机【原创】

中毒后运行ewido或是插U盘就会死机【原创】

我的电脑从9.16日开始中了好多毒后,用瑞星最新版杀完后还有一个Trojan.Agent.emf清不了.
  现在只要一运行ewido或是插U盘就会死机,重起后会出现c盘BC6B-229D受损,需要扫描的情况.也进不了安全模式,在桌面出来前会死机.请问有什么办法解决呢??谢谢!!
  这是今天用hijackthis扫描的结果,请问哪一项需要修复呢?谢谢!!
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\Rising\Rav\CCenter.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\Rising\Rav\Ravmond.exe
  C:\WINDOWS\Explorer.EXE
  C:\WINDOWS\system32\spoolsv.exe
  C:\Program Files\Rising\Rav\RavStub.exe
  C:\Program Files\Rising\Rav\RavTask.exe
  C:\Program Files\Rising\Rav\Ravmon.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE
  C:\WINDOWS\system32\conime.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\WinRAR\WinRAR.exe
  C:\DOCUME~1\lady\LOCALS~1\Temp\Rar$EX11.828\HijackThis.exe
  
  R3 - Default URLSearchHook is missing
  F2 - REG:system.ini: UserInit=userinit.exe,
  O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll
  O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll
  O3 - Toolbar: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll
  O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
  O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
  O4 - HKLM\..\Run: [Super Rabbit SRRestore] C:\Program Files\Super Rabbit\MagicSet\srrest.exe /autosave
  O4 - HKLM\..\RunOnce: [RavStub] "C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [Super Rabbit IEPro] C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD
  O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
  O8 - Extra context menu item: 使用Web迅雷下载 - C:\Program Files\Thunder Network\WebThunder\GetUrl.htm
  O8 - Extra context menu item: 使用Web迅雷下载全部链接 - C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm
  O14 - IERESET.INF: SEARCH_PAGE_URL=
  O14 - IERESET.INF: START_PAGE_URL=
  O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
  O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
  
  
  



     


最后编辑2006-10-10 15:06:38
分享到:
gototop
 

自己顶顶
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT