After you enter the password to log on to the system, the system will automatically log out again? It turns out to be a machine dog. 2.

After you enter the password to log on to the system, the system will automatically log out again? It turns out to be a machine dog. 2.

EndurerOriginal
2008-02-17 1st

(Can I log out again after I enter my password? It turned out to be a fault caused by a bot.
Http://blog.csdn.net/Purpleendurer/archive/2008/02/15/2097467.aspx)

Run the rising Kaka Security Assistant to automatically scan two rogue software and clear the software.
In [advanced functions]-> [plug-in management and uninstallation], remove the O2 and o24 items.
In [advanced functions]-> [system enable item management], click [logon item] on the left, find the project corresponding to the O4 item on the right, right-click, select Delete from the pop-up menu.
In [advanced functions]-> [system enable item management], click [service items] and [Driver] on the left, find the project corresponding to o23 on the right, right-click, select Delete from the pop-up menu; click [Application hijacking items] on the left, find the items corresponding to O26 items on the right, right-click, and choose delete from the pop-up menu.

Upgrade the rising virus library and perform a full scan. At the same time, use WinRAR to view C:/Windows/system32 and C:/program files/Internet Explorer/plugins, and find some virus files.
Package the virus file with bat_do and delay the deletion. Use fileinfo to extract the Virus File Information (bat_do and fileinfo can be downloaded to the http://purpleendurer.ys168.com ).

File Description: C:/program files/Internet Explorer/plugins/sys_win7s.jmp
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time: 22:46:51
Modification time:
Access time:
Size: 33936 bytes, 33.144 KB
MD5: 18a19ed6a0f4f09289b1d49f66112644
Sha1: 7de0ae3737e0e268d9e72d4f573e74c86bd451bb
CRC32: 76b1bf23
Kaspersky: Trojan-PSW.Win32.QQPass.auq, rising Report: Trojan. psw. win32.qqpass. gen
C:/Windows/system32/9.exe is the same as sys_win7s.jmp.
File Description: C:/program files/Internet Explorer/plugins/sy_win7k.jmp
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time: 16:33:14
Modification time: 16:33:16
Access time:
Size: 33928 bytes, 33.136 KB
MD5: a163e7e036cf4f95953da-28d7b3cda
Sha1: eb18146fe71b9389279a6dbc9fb70a66e509d865
CRC32: d622d7cc
File Description: C:/Windows/system32/22.exe
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time: 22:47:57
Modification time: 23:11:28
Access time:
Size: 9025 bytes, 8.833 KB
MD5: 9fdcadf38e267ef432672815473b82fc
Sha1: baf400a892bc13d62087c5b504482131bc16f0f1
CRC32: bda-a7f4
File Description: C:/Windows/system32/yvivyfjdj. dll
Attribute: ---
Language: Chinese (China)
File version: 5.1.2600.3099
Description: Windows XP msplay API DLL
Copyright: (c) Microsoft Corporation. All rights resad.
Note:
Product Version: 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)
Product Name: Microsoft (r) Windows (r) Operating System
Company Name: Microsoft Corporation
Legal trademark: Microsoft
Internal name: msplay32
Source File Name: msplay32
Creation Time: 22:47:56
Modification time: 22:47:58
Access time:
Size: 19893 bytes, 19.437 KB
MD5: 43652a86a6fd85cd98f42423bb5a0203
Sha1: 40efada2eb646850ba5f5207437579d0d6790e63
CRC32: 565b6741
Kaspersky for Trojan-PSW.Win32.Nilage.bzr, rising for Trojan. psw. win32.gameol. LXG
File Description: C:/Windows/system32/okbwyr. dll
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time: 23:10:48
Modification time: 23:10:50
Access time:
Size: 31232 bytes, 30.512 KB
MD5: 9ff588d3dfac03b311fbe092741aa5ac
Sha1: 88eace8e7c1de20f6769c73c7f34e0039c34982a
CRC32: b3fd6f26
Kaspersky reports Trojan-PSW.Win32.OnLineGames.qkv, rising reports Trojan. psw. win32.sunonline. MF
File Description: C:/Windows/system32/lotushlp. dll
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time:
Modification time:
Access time:
Size: 28672 bytes, 28.0 KB
MD5: cdabc2a0fc000046175d59bb92093f521
Sha1: 89e7e99a9308524815dbae8bf7cc8670ecba9d45
CRC32: 6fb09c3f
Kaspersky for Trojan-PSW.Win32.OnLineGames.qya, rising for Trojan. psw. win32.qqpass. ZCZ
File Description: C:/Windows/system32/msepion. sys
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time: 22:46:44
Modification time:
Access time:
Size: 10112 bytes, 9.896 KB
MD5: 9799ec209ebdd1_ddf%315a671e87
Sha1: fb36ee21f39181277c3efc3aa37e4cbc12df87bb
CRC32: a2919a4c
Kaspersky reported as Trojan-PSW.Win32.OnLineGames.rfd
File Description: C:/Windows/system32/ptsshell. dll
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time:
Modification time: 23:11:10
Access time:
Size: 29696 bytes, 29.0 KB
MD5: e67ce6834b2235f5e031bac88e37ac94
Sha1: 2c5ba546e13118c5fb0a9751f7a91d62366b759
CRC32: 16ceb673
Kaspersky for Trojan-PSW.Win32.OnLineGames.qsq, rising for Trojan. psw. win32.qqhx. TWA
File Description: C:/Windows/system32/mswwwdj32.dll
Attribute: ---
An error occurred while obtaining the file version information!
Creation Time: 22:47:49
Modification time: 23:11:18
Access time:
Size: 31345 bytes, 30.625 KB
MD5: 766d715d35a2c89a9000dac937daef4d
Sha1: 86fbf9ccc897a4a3a9ca15e47108ede8310899c5
CRC32: 1fe306f3
File Description: C:/Windows/system32/internt.exe
Property: ash-
An error occurred while obtaining the file version information!
Creation Time: 22:47:50
Modification time: 16:40:24
Access time:
Size: 6041 bytes, 5.921 KB
MD5: 019b1d0fe70dbdf7a857d4475c13bd79
Sha1: e10e1a3272db8e984f0b3d5c2f2fc218860b9404
CRC32: 9be5a15b
Kaspersky: worm. win32.agent. AJ; rising: worm. tinret. A, fsg2.0
C:/Windows/system32/progmon.exe is the same as internt.exe.
File Description: C:/Windows/system32/miraqvbdj. dll
Attribute: ---
Language: Chinese (China)
File version: 5.1.2600.3099
Description: Windows XP msplay API DLL
Copyright: (c) Microsoft Corporation. All rights resad.
Note:
Product Version: 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)
Product Name: Microsoft (r) Windows (r) Operating System
Company Name: Microsoft Corporation
Legal trademark: Microsoft
Internal name: msplay32
Source File Name: msplay32
Creation Time: 23:11:24
Modification time: 23:11:26
Access time:
Size: 19893 bytes, 19.437 KB
MD5: 5dbb2aaee22030409e2af3cef2952f49
Sha1: 4fdceefcc924b7dc5786202c2ccda-15c4e76911
CRC32: 404e0d93
Kaspersky reported as Trojan-PSW.Win32.Nilage.bzr