最近用ie浏览网页的时候，卡巴老报“试图用命令行启动ie”？

zaxzax

用卡巴7扫了一下系统盘，发现了一个木马叫做jdxczn65.dll。杀了以后还是没有用。
ie老是跳出别的网页，救命啊！ie的自我恢复功能也用过了。

huxiqiuzhen

请参考
http://bbs.kafan.cn/archiver/?tid-8812.html

zaxzax

上传一个截图，大家看看

zaxzax

冰刀log
进程：

System Idle Process
System
E:\WINDOWS\system32\ati2evxx.exe
E:\WINDOWS\explorer.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\system32\smss.exe
E:\WINDOWS\system32\csrss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\Program Files\eMule\emule.exe
E:\WINDOWS\system32\ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
E:\PROGRA~1\ANSYSI~1\SHARED~1\LICENS~1\intel\lmgrd.exe
E:\WINDOWS\system32\svchost.exe
J:\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
E:\Program Files\Ansys Inc\Shared Files\Licensing\intel\ansyslmd.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\ZoneLabs\vsmon.exe
E:\WINDOWS\system32\alg.exe
E:\WINDOWS\SOUNDMAN.EXE
E:\Program Files\D-Link\AirPlus G\AirGCFG.exe
E:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
E:\Program Files\D-Tools\daemon.exe
E:\Program Files\QuickTime\QTTask.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\iPod\bin\iPodService.exe
E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
E:\Program Files\iTunes\iTunesHelper.exe
J:\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
E:\PROGRA~1\Sony\SONICS~1\SSAAD.exe
J:\Zone Labs\ZoneAlarm\zlclient.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Documents and Settings\Wei Zhang\桌面\IceSword120_cn\IceSword.exe
I:\palmOne\HOTSYNC.EXE