|
|
马上注册，结识高手，享用更多资源，轻松玩转三维网社区。
您需要 登录 才可以下载或查看，没有帐号？注册
x
现象：杀软无法打开，
" G: _$ \- x* V! e" \( A& L; k7 b( W 安全模式蓝屏
8 W; N( e, `5 X4 e' J+ [7 F$ j+ R; ^ 每过十几分钟的样子打开的所有程序、文件等自动全部关闭，
" W% Y! b/ n2 F( C' U 1 ?$ m/ N, Q$ J, N& p
9 Q5 R6 f) m: }! X3 F3 l
这个病毒真聪明，一般的网站随便上没关系，只要一进和杀毒有关的网站，马上就自动关闭浏览器，本来还想在线杀毒，看来这条路子也不行啊。
6 y0 V3 e1 w; B6 N杀软无法安装，我用免安装的超级兔子网络卫士一查有以下软件：
1 F: l3 v" R0 Z( H1.NEW ADP OPUP/ v+ v2 }2 ]0 |8 @
2.MUMU
& @3 p( |, o7 p1 f, ~2 D: U- C) v3.熊猫烧香* K* M" j* b! C" D P
4.搜狗工具条
$ ~8 o' J4 r; |5 E1 r但我用熊猫烧香的专杀好像也没什么效果。8 d$ C: g. g% }6 y% ~
" n! U+ m$ \; z( J [- N以下是我的进程 q4 I, ]+ W o. j `3 T4 U
123.exe 1160 C:\DOCUME~1\lenovo\LOCALS~1\Temp\123.exe 123.exe
7 N& q% X: O/ D$ t5 `( ~123.exe 2124 C:\DOCUME~1\lenovo\LOCALS~1\Temp\123.exe 123.exe
, V* o# O9 M& x3 LCDAC11BA.EXE 532 C:\WINDOWS\system32\drivers\CDAC11BA.EXE Macrovision RTS Service 4.20.020 Windows NT 2002/12/10. Copyright (c) 1998-2002 Macrovision Corp.
) {, k; H8 y' q f4 Nconime.exe 2284 C:\WINDOWS\system32\conime.exe Console IME 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.9 T z$ T" u# i* I8 r6 a( X, B
csrss.exe 976 C:\WINDOWS\system32\csrss.exe Client Server Runtime Process 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.
6 d7 e1 S/ C) T5 Wctfmon.exe 752 C:\WINDOWS\system32\ctfmon.exe CTF Loader 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.( c9 O) O+ Y' b) `
Explorer.EXE 1968 C:\WINDOWS\Explorer.EXE Windows Explorer 6.00.2900.2180. (C) Microsoft Corporation. All rights reserved.+ x* l e8 S! L8 h1 R9 W& g
fsp.exe 588 C:\WINDOWS\fsp.exe fsp.exe8 i+ V$ Q. F8 R3 Q! ` k$ Q
HotKeyB.exe 484 C:\Program Files\Lenovo\功能键盘\HotKeyB.exe 联想功能键盘 v2.2 2, 2, 0, 1. 联想电脑公司 版权所有 (C) 2005, W+ I: T) m# n* K$ j
iexplore.exe 4064 C:\Program Files\Internet Explorer\iexplore.exe Internet Explorer 6.00.2900.2180. (C) Microsoft Corporation. All rights reserved./ D0 O: e! @8 E t
lsass.exe 1056 C:\WINDOWS\system32\lsass.exe LSA Shell (Export Version) 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.; U# l0 Q/ w3 Z8 U7 F0 X: Z) V
prcview.exe 2892 F:\abc\prcview.exe 进程查看器实用程序 3.7.3.1. 由 Igor Nys 开发, 1995-2003
; J( R1 X& E% S7 Rproscan.exe 2764 F:\abc\proscan.exe 进程查看器 1.0.0.0. http://askwhy.yeah.net4 [: i' j+ P" b- ^1 X
realsched.exe 508 C:\Program Files\Common Files\Real\Update_OB\realsched.exe RealNetworks Scheduler 0.1.0.3208. Copyright ? RealNetworks, Inc. 1995-2004" @( P. V1 ?2 A1 u" B p$ G1 m$ r2 ?0 K9 P# L
services.exe 1044 C:\WINDOWS\system32\services.exe Services and Controller app 5.1.2600.2180. (C) Microsoft Corporation. All rights reserved.
: V" s0 |; }7 A0 w; b* x; `! Q. O: fsmss.exe 912 C:\WINDOWS\System32\smss.exe Windows NT Session Manager 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.. I* {5 l+ [% W
SOUNDMAN.EXE 476 C:\WINDOWS\SOUNDMAN.EXE Realtek Sound Manager 5, 1, 0, 51. Copyright (c) 2001-2004 Realtek Semiconductor Corp. o+ X! L; C# B* n8 X
spoolsv.exe 1820 C:\WINDOWS\system32\spoolsv.exe Spooler SubSystem App 5.1.2600.2696. ? Microsoft Corporation. All rights reserved.
. j. x# ]/ W' X" M( H( G* gsqlservr.exe 816 d:\MSDE\binn\sqlservr.exe SQL Server Windows NT 7.00.623. Copyright ? Microsoft Corp. 1988-1998: Z, b- s4 f/ v7 [" W2 K, ?) [0 X
svchost.exe 236 C:\WINDOWS\system32\svchost.exe Generic Host Process for Win32 Services 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.4 t! ^2 \6 }( s
svchost.exe 1192 C:\WINDOWS\system32\svchost.exe Generic Host Process for Win32 Services 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.0 u0 }6 u' e: W- N
svchost.exe 1268 C:\WINDOWS\system32\svchost.exe Generic Host Process for Win32 Services 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.3 j9 |% l' k* A- ^
svchost.exe 1324 C:\WINDOWS\System32\svchost.exe Generic Host Process for Win32 Services 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.3 K1 o9 K& G3 O! _/ ~3 M& d
svchost.exe 1512 C:\WINDOWS\system32\svchost.exe Generic Host Process for Win32 Services 5.1.2600.2180. ? Microsoft Corporation. All rights reserved." m* }, D) h( r9 D3 `# S
svchost.exe 1564 C:\WINDOWS\system32\svchost.exe Generic Host Process for Win32 Services 5.1.2600.2180. ? Microsoft Corporation. All rights reserved. @% q7 J1 r i2 s; f3 B* }" |4 C
svchost.exe 2308 C:\WINDOWS\System32\svchost.exe Generic Host Process for Win32 Services 5.1.2600.2180. ? Microsoft Corporation. All rights reserved.
2 {3 |3 A7 F- a+ K" V; N8 f5 musblogon.exe 256 C:\WINDOWS\usblogon.exe usblogon.exe
9 |# Q# y& g: LVTTimer.exe 400 C:\WINDOWS\system32\VTTimer.exe S3 Graphics, Inc. Utilities 2.00.01-0307. Copyright (C) 2001-2005 S3 Graphics, Inc.
& R9 M2 X E/ _" l3 g' A5 RVTtrayp.exe 412 C:\WINDOWS\system32\VTtrayp.exe s3contrl (32-bit) 2.00.36-0308B. Copyright (c) 2004-2005 S3 Graphics Co., Ltd.
$ S& X3 R% n1 u$ Pwinlogon.exe 1000 C:\WINDOWS\system32\winlogon.exe Windows NT Logon Application 5.1.2600.2180. (C) Microsoft Corporation. All rights reserved.
: c/ H9 o, i. o3 ~& g我用专杀出了三个病毒，但回头再杀还是这三个，杀了一下稍微好点，以前点杀软会弹出一个对话框，其他什么都没有，现在对话筐不出来了，杀软还能出来一下，不过也只有两秒钟马上又关闭了，好像不管是打开软件也好，网页也好只要带有杀毒两字，马上就会自动关闭。- p# X' q. s% M# l# x7 F- U' B+ c5 J
0 ^7 e. w7 W* c; s# w \' ^
[ 本帖最后由 huwenjie 于 2007-6-14 07:19 编辑 ] |
|
发表于 2007-6-13 10:56:03
发表于 2007-6-13 11:25:45
楼主
运行，选项用/?查看,常用为 *:/*所