瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 我电脑有三个iexplore要求访问网络，是病毒吗？瑞星查不到

123   1  /  3  页   跳转页

我电脑有三个iexplore要求访问网络，是病毒吗？瑞星查不到

收藏
皮皮奇柯
头像
初生襁褓狮
  • 帖子:51
  • 注册: 2006-09-30
  • 来自:
发表于： 2006-10-01 00:36 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

我电脑有三个iexplore要求访问网络，是病毒吗？瑞星查不到

如题，我的瑞星防火墙拒绝了两个 是c:\windows\system和system32下的，正常吗？是病毒吗？我电脑隔段时间就弹出一个IE页面，每次不同。
日志如下：
Logfile of HijackThis v1.99.1
Scan saved at 0:19:23, on 2006-10-1
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\软件\工具软件\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\软件\工具软件\Rising\Rav\Ravmond.exe
d:\软件\工具软件\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
D:\软件\工具软件\Rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\软件\工具软件\Rising\Rav\RavTask.exe
D:\软件\工具软件\Rising\Rav\Ravmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\WINDOWS\system32\nvsvc32.exe
c:\windows\system\iexplore.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
D:\软件\网络\淘宝旺旺\WangWang.EXE
D:\软件\工具软件\Rising\Rfw\rfwmain.exe
D:\软件\网络\QQ\QQ.exe
D:\软件\网络\QQ\TIMPlatform.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
G:\下载\ha_hijackthis_1991\HijackThis.exe
最后编辑2006-10-17 00:02:33
分享到：
gototop
 
皮皮奇柯
头像
初生襁褓狮
  • 帖子:51
  • 注册: 2006-09-30
  • 来自:
发表于： 2006-10-01 00:37 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WangWang] "D:\软件\网络\淘宝旺旺\WangWang.EXE"
O4 - HKLM\..\Run: [RavTask] "D:\软件\工具软件\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Alitalk] D:\软件\贸易通\AliTalk.EXE -hideframe
O4 - HKLM\..\Run: [RfwMain] "D:\软件\工具软件\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [updateMgr] D:\软件\Adobe reader\Reader\AdobeUpdateManager.exe AcRdB7_0_0 -reboot 1
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\软件\网络\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\软件\OFFICE~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\软件\网络\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\软件\网络\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\软件\网络\QQ\SendMMS.htm
O8 - Extra context menu item: 用比特精灵下载(&B) - D:\软件\网络\BitSpirit\bsurl.htm
O9 - Extra button: 网址大全 - {1FBA04EE-3024-11D2-8F1F-0000F87ABD18} - http://www.coc.cc (file missing)
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\软件\OFFICE~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AXSafeControls.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5211A18F-141F-483D-B4B9-69C4E6D6AD7D}: NameServer = 202.99.166.4 202.99.160.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{870355DE-C4CA-4E30-8FBD-5949446DBF15}: NameServer = 202.99.166.4,202.99.168.68
O18 - Protocol: bw+0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
gototop
 
皮皮奇柯
头像
初生襁褓狮
  • 帖子:51
  • 注册: 2006-09-30
  • 来自:
发表于： 2006-10-01 00:37 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

O18 - Protocol: bwa0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
gototop
 
皮皮奇柯
头像
初生襁褓狮
  • 帖子:51
  • 注册: 2006-09-30
  • 来自:
发表于： 2006-10-01 00:38 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

O18 - Protocol: bwv0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {2EC7D24C-C616-4992-AAF5-5B3AF465CD9E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\软件\工具软件\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\软件\工具软件\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\软件\工具软件\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\软件\工具软件\Rising\Rav\Ravmond.exe
O23 - Service: Volume Shadow Coopyer (ServiceCopyer2) - Unknown owner - c:\windows\system\iexplore.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
gototop
 
終生學習
头像
横据古稀狮
  • 帖子:5914
  • 注册: 2004-08-16
  • 来自:
发表于： 2006-10-01 00:38 | 短消息 资料
字号： 小 中 大 5楼

对  是病毒 
正常是C:\Program Files\Internet Explorer下面
gototop
 
zzq11211
头像
初生襁褓狮
  • 帖子:1270
  • 注册: 2005-06-15
  • 来自:
发表于： 2006-10-01 00:45 | 短消息 资料
字号： 小 中 大 6楼

结束进程c:\windows\system\iexplore.exe
禁止这个服务 O23 - Service: Volume Shadow Coopyer (ServiceCopyer2) - Unknown owner - c:\windows\system\iexplore.exe
C盘下搜索iexplore.DLL  有没有告诉我
删除c:\windows\system\iexplore.exe
gototop
 
皮皮奇柯
头像
初生襁褓狮
  • 帖子:51
  • 注册: 2006-09-30
  • 来自:
发表于： 2006-10-01 00:46 | 只看楼主 短消息 资料
字号： 小 中 大 7楼

谢谢 我试试
gototop
 
皮皮奇柯
头像
初生襁褓狮
  • 帖子:51
  • 注册: 2006-09-30
  • 来自:
发表于： 2006-10-01 00:53 | 只看楼主 短消息 资料
字号： 小 中 大 8楼

怎么终止 是选上以后 选修复吗？我用了 再扫描还有，我也搜了iexplore.dll 没搜到
gototop
 
皮皮奇柯
头像
初生襁褓狮
  • 帖子:51
  • 注册: 2006-09-30
  • 来自:
发表于： 2006-10-01 00:54 | 只看楼主 短消息 资料
字号： 小 中 大 9楼

我说的是进程已经终止 023项怎么禁止服务
gototop
 
zzq11211
头像
初生襁褓狮
  • 帖子:1270
  • 注册: 2005-06-15
  • 来自:
发表于： 2006-10-01 00:55 | 短消息 资料
字号： 小 中 大 10楼

安全模式...打开注册表编辑器，展开：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services-找到ServiceCopyer2-删除c:\windows\system\iexplore.exe 键
gototop
 
<<上一主题|下一主题>>
123   1  /  3  页   跳转页
页面顶部
Powered by Discuz!NT