瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 求救一个网页广告弹出的解决办法

12   2  /  2  页   跳转

求救一个网页广告弹出的解决办法

没有找到这个dll.好像每次扫描结果都不一样,我又扫描了一遍

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

+ ccAppCommon Client User SessionSymantec Corporationc:\program files\common files\symantec shared\ccapp.exe

+ vptraySymantec AntiVirusSymantec Corporationc:\program files\symantec antivirus\vptray.exe

+ yassistseAssistSettingYahoo!c:\program files\yahoo!\assistant\yassistse.exe

+ YLive.exeYLive c:\program files\yahoo!\assistant\ylive.exe

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ Adobe.Acrobat.ContextMenuAdobe Acrobat ElementsAdobe Systems Inc.c:\program files\adobe\acrobat 6.0\acrobat elements\contextmenu.dll

+ Display Panning CPL ExtensionFile not found: deskpan.dll

+ hA23msp.dllFile not found: C:\WINNT\system32\hA23msp.dll

+ HyperTerminal Icon ExtHyperTerminal Applet LibraryHilgraeve, Inc.c:\winnt\system32\hticons.dll

+ KodakShellExtensionShell Extension Resource DLLEastman Kodak Companyc:\program files\common files\kodak\ifscore\kodakshx.dll

+ LDVP Shell ExtensionsSymantec AntiVirusSymantec Corporationc:\program files\common files\symantec shared\ssc\vpshell2.dll

+ ScriptDropShellExtRoboEnhancer ScriptDropShellExt Modulec:\program files\acd systems\roboenhancer\scriptdropshellext.dll

+ sscpack.dllc:\winnt\system32\sscpack.dll

+ WinRAR shell extensionc:\program files\winrar\rarext.dll

+ Yahoo!PhotoyPhtbYahoo! Chinac:\program files\yahoo!\assistant\assist\yphtb.dll

+ 粉碎文件Wiper 动态链接库c:\program files\yahoo!\assistant\assist\ywiper.dll

HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ Web 文件夹c:\program files\common files\microsoft shared\web folders\msonsext.dll

HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks

+ coolbarToolBarYahoo!c:\program files\yahoo!\assistant\assist\yasbar.dll

HKLM\Software\Microsoft\Internet Explorer\Toolbar

+ 雅虎助手ToolBarYahoo!c:\program files\yahoo!\assistant\assist\yasbar.dll

Task Scheduler

+ BMMTask.jobc:\program files\thinkpad\utilities\bmmtask.exe

+ Symantec NetDetect.jobSymantec NetDetectSymantec Corporationc:\program files\symantec\liveupdate\ndetect.exe

HKLM\System\CurrentControlSet\Services

+ Ati HotKey Pollerc:\winnt\system32\ati2evxx.exe

+ ccEvtMgrSymantec Event ManagerSymantec Corporationc:\program files\common files\symantec shared\ccevtmgr.exe

+ ccSetMgrSymantec Settings ManagerSymantec Corporationc:\program files\common files\symantec shared\ccsetmgr.exe

+ DefWatchMonitors and maintains virus definitions.Symantec Corporationc:\program files\symantec antivirus\defwatch.exe

+ Symantec AntiVirusProvides real-time virus scanning, reporting, and management functionality for Symantec AntiVirus.Symantec Corporationc:\program files\symantec antivirus\rtvscan.exe

HKLM\System\CurrentControlSet\Services

+ AgereSoftModemSoftModem Device DriverAgere Systemsc:\winnt\system32\drivers\agrsm.sys

+ ati2mtagATI RAGE 6 Miniport DriverATI Technologies Inc.c:\winnt\system32\drivers\ati2mtag.sys

+ cs429xCrystal AC9x WDM DriverCirrus Logic, Inc.c:\winnt\system32\drivers\cwawdm.sys

+ dmioNT Disk Manager I/O DriverVERITAS Software Corp.c:\winnt\system32\drivers\dmio.sys

+ E100BNDIS 5 driverIntel Corporationc:\winnt\system32\drivers\e100bnt5.sys

+ EGATHDRVc:\winnt\system32\egathdrv.sys

+ IBMPMDRVc:\winnt\system32\drivers\ibmpmdrv.sys

+ IBMTPCHKc:\winnt\system32\drivers\ibmbldid.sys

+ KlickKaspersky Anti-Hacker NDIS InterceptorKaspersky Labsc:\winnt\system32\drivers\klick.sys

+ Klifspuper-ptorKaspersky Labsc:\winnt\system32\drivers\klif.sys

+ KlinKaspersky Anti-Hacker TDI InterceptorKaspersky Labsc:\winnt\system32\drivers\klin.sys

+ KlmcKaspersky Anti-Virus Mail Checker ProxyKaspersky Labc:\winnt\system32\drivers\klmc.sys

+ ltmodem5LT Windows ModemLTc:\winnt\system32\drivers\ltmdmnt.sys

+ NAVENGAV EngineSymantec Corporationc:\program files\common files\symantec shared\virusdefs\20051123.019\naveng.sys

+ NAVEX15AV EngineSymantec Corporationc:\program files\common files\symantec shared\virusdefs\20051123.019\navex15.sys

+ NSCIRDANSC Fast Infrared Driver.National Semiconductor Corporationc:\winnt\system32\drivers\nscirda.sys

+ PcdrNtPC-Doctor NT Support DriverPC-Doctor Inc.c:\winnt\system32\drivers\pcdrnt.sys

+ PtilinkDirect Parallel Link DriverParallel Technologies, Inc.c:\winnt\system32\drivers\ptilink.sys

+ PxHelp20Px Engine Device Driver for Windows 2000/XPSonic Solutionsc:\winnt\system32\drivers\pxhelp20.sys

+ S3SSavageS3 Graphics SuperSavage MiniportS3 Graphics, Inc.c:\winnt\system32\drivers\s3ssavm.sys

+ SAVRTAutoProtectSymantec Corporationc:\program files\symantec antivirus\savrt.sys

+ SAVRTPELSAVRTPELSymantec Corporationc:\program files\symantec antivirus\savrtpel.sys

+ smwdmSoundMAX Integrated Digital Audio Analog Devices, Inc.c:\winnt\system32\drivers\smwdm.sys

+ SymEventSymantec Event LibrarySymantec Corporationc:\program files\symantec\symevent.sys

+ SYMREDRVRedirector Filter DriverSymantec Corporationc:\winnt\system32\drivers\symredrv.sys

+ SYMTDINetwork Dispatch DriverSymantec Corporationc:\winnt\system32\drivers\symtdi.sys

+ SynTPSynaptics Touchpad DriverSynaptics, Inc.c:\winnt\system32\drivers\syntp.sys

+ TDSMAPIc:\winnt\system32\drivers\tdsmapi.sys

+ TPPWRIBM ThinkPad Power Management Device DriverIBM Corp.c:\winnt\system32\drivers\tppwr.sys

+ TSMAPIPc:\winnt\system32\drivers\tsmapip.sys

+ TSPspuper-ptorKaspersky Labsc:\winnt\system32\drivers\klif.sys

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

+ Extensionsc:\winnt\system32\fp8603lse.dll

HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors

+ Adobe PDF PortAcrobat ? PDF PortAdobe Systems Incorporated.c:\winnt\system32\adobepdf.dll
gototop
 

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ sscpack.dllc:\winnt\system32\sscpack.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
+ Extensionsc:\winnt\system32\fp8603lse.dll

删除启动项
重启
删除c:\winnt\system32\fp8603lse.dll
c:\winnt\system32\sscpack.dll

注意文件夹选项

附件附件:

下载次数:0
文件类型:image/pjpeg
文件大小:
上传时间:2005-11-30 14:12:12
描述:



gototop
 

经过无数次删除启动机器后,还是失败了.原因是这些dll文件是自动生成的.这次扫描出来的dll文件在安全模式下删除后,下次启动又生成新的dll文件,文件名随机生成的.而且host文件也照样被修改,加入了30过个网址和127.0.0.1对应,实在没有办法了,只能重新安装系统了.不知道还有没有其他有效的方法
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT