瑞星卡卡安全论坛技术交流区系统软件 昨天杀了4个木马,扫个日志各位帮忙看看还有没有病毒?

12   2  /  2  页   跳转

昨天杀了4个木马,扫个日志各位帮忙看看还有没有病毒?

楼上怎么深夜出来了``````TT是什么?不是基于ie内核的么?
gototop
 

那个讯雷```怎么不让他不在内存里?
但是我是想随时下载时候他就蹦出来的,如果他不在内存里,他可以自动蹦出来么?
gototop
 

。。。。。。。。。。。。。。。。。

<table width=100% height=0 border=0 cellspacing=0 cellpadding=0 class=quote><tr><td align=left><strong>引用:</strong></td></tr><tr><td align=left>【zgr稳得起的贴子】<br>在“开始菜单”→“运行”→输入“msconfig”回车→进入“系统配置实用程序”→击“启动”卡如下图所示<br>...........................</td></tr></table><br><br><br>好了~~~~~~~~<br>可是偶的启动卡东西好多~~~~~~~<br>我发现(比如天网)我明明早卸了,这里却还有~~~~~~~~~<br>怎么删除某个没用的???<br>貌似没找到删除的方法~~~~~~~~~~~~~<img src=icon/face14.gif>
最后编辑mysky50 最后编辑于 2010-06-11 16:37:35
gototop
 

引用:
【zgr稳得起的贴子】
俺是个夜猫子,常失眠,所以又来上网,TT是基于IE内核的腾讯浏览器。它很实合国人的使用方式,我爱用它。
...........................


我也是个夜猫子~~~~~~~~~~~不过不失眠的~~~~~~~~~`就是热睡不着~~~~~~~~~
gototop
 

还是谢谢两位~~~~~~~~~~`
gototop
 

奇怪奇怪奇怪奇怪奇怪奇怪奇怪奇怪奇怪奇怪奇怪

<table width=100% height=0 border=0 cellspacing=0 cellpadding=0 class=quote><tr><td align=left><strong>引用:</strong></td></tr><tr><td align=left>【地区性的贴子】奇怪,我打开4个,但它显示2个<br><br>这是不是和注册表中某个键值有关<br>...........................</td></tr></table><br><br>不晓得哦~~~~~~~~~~~~偶就是开几个有几个~~~~~~~~~~~~~<br><br>
最后编辑mysky50 最后编辑于 2010-06-11 15:43:11
gototop
 

这是日志~~~~~~~也是上面那开了3个的:

Logfile of HijackThis v1.99.0
Scan saved at 14:47:58, on 2006-7-15
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
c:\program files\rising\rfw\RfwMain.exe
D:\Rising\Rav\RavTask.exe
D:\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\photoshop cs\Photoshop.exe
C:\DOCUME~1\高岚\LOCALS~1\Temp\~e5d141.tmp
C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\高岚\LOCALS~1\Temp\~e5d141.tmp
E:\HijackThis\HijackThis\HijackThis.exe

O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\Program Files\Kingsoft\FastAIT 2006\IEBand.dll
O3 - Toolbar: BitComet工具栏 - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - D:\BitComet\BitCometBar\BitCometBar0.5.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [RavTask] "D:\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microtek 扫描仪探测器.lnk = C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
O8 - Extra context menu item: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\QQ\SendMMS.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {C37FBD87-3AA7-4640-9A8D-19AFC10B15B2} (Netease Chat Control) - http://room.chat.163.com/xchat/chat.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6ED29DF9-30C1-4E73-AB6F-8A2CB1AB40AA}: NameServer = 202.106.46.151 202.106.0.20
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Macromedia Licensing Service - Unknown - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rising Proxy  Service - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center - Beijing Rising Technology Co., Ltd. - D:\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service - Beijing Rising Technology Co., Ltd. - D:\Rising\Rav\Ravmond.exe

gototop
 

那个启动卡的程序怎么删除?25楼的~~~~~~~最好找一个比较容易的办法~~~~~~~~~~~~~~~~~~
gototop
 

引用:
【叶·幽思的贴子】

你们强!这么晚了还不睡!

偶昨天晚上睡的晚了点,今天早上起来发现......
...........................


偶也很诧异~~~~~~~~他老晚出来了
gototop
 

引用:
【叶·幽思的贴子】把它在启动项里删了还不行?
...........................


不是,是要启动项里没有那个程序~~~~~~~就是我25楼那个~~~~~~~~~~~
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT