无法删除！瑞星删除以后~机器重启以后病毒又出来了！！怎么办啊？？
backdoor.pcclient就这种类型的！！
我准备把病毒上传~多不行！rar它多进不去，无法压缩！！晕阿！！！！！！！！

Logfile of HijackThis v1.99.1
Scan saved at 21:15:11, on 2005-10-27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\nvsvc32.exe
F:\RISING\RAV\CCENTER.EXE
F:\RISING\RAV\Ravmond.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\ups.exe
d:\WinPoET Broadband Connection\WrOS.EXE
F:\RISING\RAV\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
F:\RISING\RAV\RAVTIMER.EXE
F:\RISING\RAV\RAVMON.EXE
C:\WINDOWS\system32\rundll32.exe
D:\SKYNET\FIREWALL\PFW.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\下载目录\新建文件夹\HijackThis.exe

O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - d:\NetTransport 2\NTIEHelper.dll
O2 - BHO: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll
O3 - Toolbar: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RavTimer] F:\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] F:\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SKYNET Personal FireWall] D:\SKYNET\FIREWALL\PFW.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: 使用影音传送带下载 - D:\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: 使用影音传送带下载全部链接 - D:\NetTransport 2\NTAddList.html
O8 - Extra context menu item: 查看 Exif 信息(&V) - res://d:\Exif Show\ExShow.dll/EXSHOW.HTML
O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - F:\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Tencent\qq\SendMMS.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\浩方对战平台\GameClient.exe
O9 - Extra button: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll
O9 - Extra 'Tools' menuitem: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - f:\Tencent\QQ\QQ.EXE (file missing)
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - f:\Tencent\QQ\QQ.EXE (file missing)
O16 - DPF: {3D8F74EE-8692-4F8F-A8D2-7522B732519E} (WebActivater Control) - http://game.qq.com/QQGame.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096800614133
O16 - DPF: {CC4FE0DB-801C-4ACB-A17B-5D816C72000B} (SetupDrv Control) - http://www.hinovo.com:8080/autodrv/SetupDrvX.cab
O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/ravkill/rsonline.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{18B2C5F7-99AF-403F-A4D1-3C614F6FCA19}: NameServer = 202.96.209.6 202.96.209.133
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Messenger - Unknown owner - C:\WINDOWS\system32\dll.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - F:\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\RISING\RAV\Ravmond.exe
O23 - Service: WinPPPoverEthernet - iVasion, a Routerware Company - d:\WinPoET Broadband Connection\WrOS.EXE

大家帮我看看~我也不懂！！怎么解决阿

没人知道?

O23 - Service: Messenger - Unknown owner - C:\WINDOWS\system32\dll.exe

看看这个.对你会有帮助http://cache.baidu.com/c?word=dll%3B%2E%3Bexe&url=http%3A//forum%2Eikaka%2Ecom/topic%2Easp%3Fboard%3D28%26artid%3D7133966&b=0&a=27&user=baidu

我用木马克星查出来

发现可疑系统服务:C:\WINDOWS\system32\dll.exe
发现可疑系统服务:C:\WINDOWS\system32\dll.exe
发现可疑系统服务:C:\WINDOWS\System32\new.sys
发现可疑系统服务:C:\WINDOWS\system32\dll.exe
发现可疑系统服务:C:\WINDOWS\system32\dll.exe
发现可疑系统服务:C:\WINDOWS\System32\new.sys
发现可疑系统服务:C:\WINDOWS\system32\dll.exe
发现可疑系统服务:C:\WINDOWS\system32\dll.exe
发现可疑系统服务:C:\WINDOWS\System32\new.sys
发现可疑系统服务:C:\WINDOWS\system32\dll.exe
发现可疑系统服务:C:\WINDOWS\system32\dll.exe
发现可疑系统服务:C:\WINDOWS\System32\new.sys

现在怎么解决？？？？？？？？？瑞星有杀不掉！！！怎么办？
我买的正版软件！连着多不行？叫我怎么办？？？？
杀毒软件不杀毒~我晕阿！！

【回复“zhangxuyao”的帖子】
C:\WINDOWS\system32\dll.exe

将这个文件打包，发到：baohelin@yahoo.com.cn

谢谢4楼兄弟！现在dll已经解决
还有一个new.sys，这个没有解决！怎么办？

引用:

【baohe的贴子】【回复“zhangxuyao”的帖子】 C:\WINDOWS\system32\dll.exe 将这个文件打包，发到：baohelin@yahoo.com.cn ...........................

打包？？？？不行啊！rar压缩多不行！