卡卡查出我的电脑中了恶意程序33063204,路径c:\windows\system32\jdsfdutj.dat
症状:桌面上一直出现一个成人影院的快捷方式,指向http://www.diymov88.cn:8080/movie
我试过了很多方法:
1.卡卡直接清除,无效,没几分钟就又出来了.
2.手动删除jdsfdutj.dat文件,甚至用powerRMV来粉碎,也无效,重启后又出来了.
3.在运行msconfig里把启动项都停掉,还是会出来.
4.用了木马杀客,360,没查出来....
这么顽固的病毒.....网上一搜....很多人也中的一样的...貌似么有好的解决方法...
高手来处理下吧~~~~~
我把用AUTORUN的日志贴上来,希望对解决问题有帮助:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ msccrt c:\windows\msccrt.exe
+ norton c:\windows\norton.exe
+ RavTask RavTimer Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravtask.exe
+ runeip Rising AntiSpyware Monitor Beijing Rising Technology Co., Ltd. c:\program files\rising\antispyware\runiep.exe
+ upxdnd c:\documents and settings\emily.hu\local settings\temp\upxdnd.exe
+ winform c:\windows\winform.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
+ KKDelay RunOnce Application Beijing Rising Technology Co., Ltd. c:\program files\rising\antispyware\runonce.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
+ 333 c:\syswm1i\svchost.exe
+ 4 c:\syswsj7\svchost.exe
+ 50 c:\sysad5d\svchost.exe
+ 66 c:\sysdayn6\svchost.exe
HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components
+ 0 文件未找到:
About:Home
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
+ isignup.sys 文件未找到: C:\Program Files\Internet Explorer\Connection Wizard\isignup.sys
+ Rising Execute File Exts hook Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Adobe.Acrobat.ContextMenu Adobe Acrobat Context Menu Adobe Systems Inc. c:\program files\adobe\acrobat 7.0\acrobat elements\contextmenu.dll
+ Display Panning CPL Extension 文件未找到: deskpan.dll
+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve, Inc. c:\windows\system32\hticons.dll
+ RISING Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll
+ WinRAR shell extension c:\program files\winrar\rarext.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ acroiefavclient.dll Adobe IE plugin Adobe Systems Incorporated c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ @shdoclc.dll,-864 c:\windows\web\related.htm
+ 启动迅雷5 Thunder Networking Technologies,LTD c:\program files\thunder network\thunder\thunder.exe
+ 腾讯QQ QQ TENCENT c:\program files\tencent\qq\qq.exe
HKLM\System\CurrentControlSet\Services
+ RsCCenter CCenter Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ccenter.exe
+ RsRavMon RavMond Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravmond.exe
HKLM\System\CurrentControlSet\Services
+ AgereSoftModem SoftModem Device Driver Agere Systems c:\windows\system32\drivers\agrsm.sys
+ BaseTDI basetdi Beijing Rising Technology Co., Ltd. c:\windows\system32\drivers\basetdi.sys
+ d347bus PnP BIOS Extension c:\windows\system32\drivers\d347bus.sys
+ d347prt SCSI miniport c:\windows\system32\drivers\d347prt.sys
+ E100B NDIS 5 driver Intel Corporation c:\windows\system32\drivers\e100b325.sys
+ ExpScaner ExpScan.sys c:\program files\rising\rav\expscan.sys
+ HookCont HookCont Rising c:\program files\rising\rav\hookcont.sys
+ HookReg c:\program files\rising\rav\hookreg.sys
+ HookSys Hooksys Rising c:\program files\rising\rav\hooksys.sys
+ ialm Controller Hub for Intel Graphics Driver Intel Corporation c:\windows\system32\drivers\ialmnt5.sys
+ MEMSCAN MemScan Driver 瑞星软件有限公司 c:\program files\rising\rav\memscan.sys
+ NPF npf CACE Technologies c:\windows\system32\drivers\npf.sys
+ npkcrypt nProtect KeyCrypt Driver INCA Internet Co., Ltd. c:\program files\tencent\qq\npkcrypt.sys
+ Ptilink Parallel Technologies DirectParallel IO Library Parallel Technologies, Inc. c:\windows\system32\drivers\ptilink.sys
+ RsAntiSpyware RsBoot Beijing Rising c:\windows\system32\drivers\rsboot.sys
+ RsNTGDI RsNTGDI Beijing Rising Technology Co., Ltd. c:\windows\system32\drivers\rsntgdi.sys
+ RSPPSYS RSPPSYS.SYS Rising c:\program files\rising\rav\rsppsys.sys
+ Secdrv c:\windows\system32\drivers\secdrv.sys
+ STAC97 SigmaTel Audio Driver (WDM) SigmaTel, Inc. c:\windows\system32\drivers\stac97.sys
+ SynTP Synaptics Touchpad Driver Synaptics, Inc. c:\windows\system32\drivers\syntp.sys
+ w22n51 Intel? Wireless LAN Driver Intel? Corporation c:\windows\system32\drivers\w22n51.sys
+ {6080A529-897E-4629-A488-ABA0C29B635E} Intel Graphics Platform (SoftBIOS) Driver for Windows 2000(R) & Windows XP(TM) Intel Corporation c:\windows\system32\drivers\ialmsbw.sys
+ {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} Intel Graphics Chipset (KCH) Driver for Windows 2000(R) & Windows XP(TM) Intel Corporation c:\windows\system32\drivers\ialmkchw.sys
+ {E2B953A6-195A-44F9-9BA3-3D5F4E32BB55} Ch7009 Minidriver Intel Corporation c:\windows\system32\drivers\wa301a.sys
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
+ KKNative.exe NativeAp Beijing Rising Technology Co., Ltd. c:\windows\system32\kknative.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
+ igfxcui igfxsrvc Module Intel Corporation c:\windows\system32\igfxsrvc.dll
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
+ Adobe PDF Port Acrobat ? PDF Port Adobe Systems Incorporated. c:\windows\system32\adobepdf.dll
