兄弟帮帮看,又中什么毒了??

猪一头

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\KAV2007\KWatch.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\KAV2007\KPfwSvc.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\KAV2007\KMailMon.EXE
C:\WINDOWS\system32\svchost.exe
E:\清毒屋\360safe\360Safe.exe
E:\清毒屋\HiJackThis_v2_PConline.exe
O2 - BHO: ThunderBHO - {01443AD4-0FD1-40FD-9C87-E93D1494C233} - E:\迅雷网络版\ComDlls\xunleiBHO_Now.dll
O2 - BHO: QQCycloneHelper Class - {01443AD5-0FD1-40FD-9C87-E93D1494C233} - E:\QQDownload\QQIEHelper01.dll
O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - E:\迅雷网络版\ComDlls\TDAtOnce_Now.dll
O2 - BHO: KAVAntiFishing - {55302805-482E-470E-8A57-6795A1487F90} - C:\KAV2007\KAVAFish.DLL
O4 - HKLM\..\Run: [NvCplDaemon] ; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [KavStart] "C:\KAV2007\KAVStart.exe" -startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [KavPFW] ; "C:\KAV2007\KPFW32.EXE"
O4 - S-1-5-18 Startup: 腾讯QQ.lnk = E:\QQ\QQ.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: 腾讯QQ.lnk = E:\QQ\QQ.exe (User 'Default user')
O4 - Startup: 腾讯QQ.lnk = E:\QQ\QQ.exe
O8 - Extra context menu item: &V使用Vagaa哇嘎下载 - E:\随便搞搞\Vagaa\Data\vg.htm
O8 - Extra context menu item: 使用迅雷下载 - E:\迅雷网络版\Program\geturl.htm
O8 - Extra context menu item: 使用迅雷下载全部链接 - E:\迅雷网络版\Program\getallurl.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ表情 - E:\QQ\AddEmotion.htm
O8 - Extra context menu item: 金山毒霸反钓鱼... - C:\KAV2007\KAF\ShowSet.htm
O9 - Extra button: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - E:\迅雷网络版\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - E:\迅雷网络版\Thunder.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\sqmapi32.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\sqmapi32.dll
O18 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - E:\PROGRA~1\KuGoo3\InExtend\KUGOO3~1.OCX
O22 - SharedTaskScheduler: 组件类别缓存程序 - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Kingsoft Personal Firewall Service (KPfwSvc) - Kingsoft Corporation - C:\KAV2007\KPfwSvc.EXE
O23 - Service: Kingsoft Antivirus KWatch Service (KWatchSvc) - Kingsoft Corporation - C:\KAV2007\KWatch.EXE
O23 - Service: ms cic (mscic) - Unknown owner - C:\WINDOWS\system32\CIC~1.EXE (file missing)
O23 - Service: MICR0SOFT SVCH0ST (MS_SVCH0ST) - Unknown owner - C:\WINDOWS\system\SVCH0ST.EXE (file missing)
O23 - Service: ms NCPA (NCPA) - Unknown owner - C:\WINDOWS\system32\ncpa.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Help Session Manager (Rasautol) - Unknown owner - C:\WINDOWS\system32\ntsokele.exe
O23 - Service: Tele_google (WindowsMsn) - Unknown owner - C:\WINDOWS\system32\msn.exe (file missing)

谢谢各位大虾!!!谢谢

sansa520

O10 - Unknown file in Winsock LSP: c:\windows\system32\sqmapi32.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\sqmapi32.dll
O18 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - E:\PROGRA~1\KuGoo3\InExtend\KUGOO3~1.OCX
O22 - SharedTaskScheduler: 组件类别缓存程序 - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Kingsoft Personal Firewall Service (KPfwSvc) - Kingsoft Corporation - C:\KAV2007\KPfwSvc.EXE
O23 - Service: Kingsoft Antivirus KWatch Service (KWatchSvc) - Kingsoft Corporation - C:\KAV2007\KWatch.EXE
O23 - Service: ms cic (mscic) - Unknown owner - C:\WINDOWS\system32\CIC~1.EXE (file missing)--(木馬清除）
O23 - Service: MICR0SOFT SVCH0ST (MS_SVCH0ST) - Unknown owner - C:\WINDOWS\system\SVCH0ST.EXE (file missing)
O23 - Service: ms NCPA (NCPA) - Unknown owner - C:\WINDOWS\system32\ncpa.exe (file missing)  （這個MS映象劫持）
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Help Session Manager (Rasautol) - Unknown owner - C:\WINDOWS\system32\ntsokele.exe  （安全模式下清空这个临时文件夹C:\\DOCUME~1\\ADMINI~1\\Temp）
O23 - Service: Tele_google (WindowsMsn) - Unknown owner - C:\WINDOWS\system32\msn.exe (file missing)  （如果你機子上沒裝MSN。。那MSN.exe是W32.Flita木马的一部分。该木马允许攻击者访问你的计算机，窃取密码和个人数据。这个进程的安全等级是建议立即进行删除。 ）

CIC~1.EXE
进程特征：病毒/木马
进程路径：C:\WINDOWS\system32\CIC~1.EXE - (NULL) - 0.0.0.0
可能病毒：win32.Troj.Mnless.82432；win32.TrojDownloader.Agent.10752
被感染的文件：eemok.dll；dqadg.sys

猪一头

呵呵,谢谢各位.中了魔波这个病毒,杀掉了

老处汉

不用谢,介绍几个女人来就行了

jxdn

想女想疯了不成 在这里找  呵  上X365X.com 吧