引用:

【mopery的贴子】http://forum.ikaka.com/topic.asp?board=28&artid=8105899 下载HijackThis...把日志帖上来.. ...........................

全贴出来了，劳烦帮看看，哪儿出问题了？

修复
R3 - URLSearchHook: (no name) - {982CB676-38F0-4D9A-BB72-D9371ABE876E} - (no file)
R3 - URLSearchHook: SgUrlSearHook Class - {BAB1AC41-6FF7-4F2E-A04E-5C592CCFEA7D} - C:\WINDOWS\system32\socul.dll
R3 - URLSearchHook: (no name) - {3FD90DCC-B300-4360-AD2C-A5DB2313713D} - C:\WINDOWS\system32\Jiok.dll
R3 - URLSearchHook: (no name) - {943B5034-6145-4F30-9253-08E93CC3952B} - C:\WINDOWS\system32\Rvqc.dll
R3 - URLSearchHook: (no name) - {BF2F8409-D62F-4BA1-8696-13E34058999E} - C:\WINDOWS\system32\Fanhr.dll
R3 - URLSearchHook: (no name) - {852DC944-FF62-4764-B5DF-BEAC1A5C90FD} - C:\WINDOWS\system32\Jrsa.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: SohuDAIEHelper - {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} - C:\Program Files\P4P\sodaie.dll (file missing)
O2 - BHO: (no name) - {21993B4B-1E2D-4D0B-80E9-9965861D7E97} - C:\WINDOWS\system32\Ffbjew.dll
O2 - BHO: (no name) - {2EDC45F1-70F4-41F2-A43E-75AB6EA47C07} - C:\WINDOWS\system32\Rcekp.dll
O2 - BHO: (no name) - {3FD90DCC-B300-4360-AD2C-A5DB2313713D} - C:\WINDOWS\system32\Jiok.dll
O2 - BHO: (no name) - {551F9B5E-8D0B-41E3-9E55-3D905366E6E4} - C:\WINDOWS\system32\Sqpl.dll
O2 - BHO: (no name) - {5F6EEE0A-CD7A-4BB5-9DA3-D9872E1C7F43} - C:\WINDOWS\system32\Prdtxu.dll
O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O2 - BHO: (no name) - {68C737F3-BCF1-4C3E-8BB2-3D37D3BD7DE4} - C:\WINDOWS\system32\Ckarib.dll
O2 - BHO: (no name) - {6AEF32FA-B471-4111-8731-249A67917D96} - C:\WINDOWS\system32\Yvcm.dll
O2 - BHO: (no name) - {852DC944-FF62-4764-B5DF-BEAC1A5C90FD} - C:\WINDOWS\system32\Jrsa.dll
O2 - BHO: (no name) - {943B5034-6145-4F30-9253-08E93CC3952B} - C:\WINDOWS\system32\Rvqc.dll
O2 - BHO: (no name) - {B8936873-08E9-4D90-AF81-9569E33078C4} - C:\WINDOWS\system32\Sdfvjg.dll
O2 - BHO: (no name) - {BF2F8409-D62F-4BA1-8696-13E34058999E} - C:\WINDOWS\system32\Fanhr.dll
O2 - BHO: (no name) - {CCDE5352-138E-4C78-A904-FB2BA163D51A} - C:\WINDOWS\system32\Kvhi.dll
O2 - BHO: (no name) - {D0115255-E29E-47CF-80E7-182649A40AC0} - C:\WINDOWS\system32\Nabapc.dll
O2 - BHO: (no name) - {DD851AD1-4E6C-4ECA-8980-57BC3BEEED40} - C:\WINDOWS\system32\Ayhfdm.dll
O2 - BHO: (no name) - {E8AE135E-9466-4929-876E-3971B4FD999A} - C:\WINDOWS\system32\Icozv.dll
O4 - 启动项HKLM\\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - IE右键菜单中的新增项目: >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O9 - 浏览器额外的按钮: 番茄花园 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.tomatolei.com (file missing)
O9 - 浏览器额外的“工具”菜单项: 番茄花园 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.tomatolei.com (file missing)
O9 - 浏览器额外的按钮: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - 浏览器额外的“工具”菜单项: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll

删除
C:\WINDOWS\system32\socul.dll
C:\WINDOWS\system32\Jiok.dll
C:\WINDOWS\system32\Rvqc.dll
C:\WINDOWS\system32\Fanhr.dll
C:\WINDOWS\system32\Jrsa.dll
C:\Program Files\TENCENT\Adplus\SSAddr.dll
C:\WINDOWS\system32\Ffbjew.dll
C:\WINDOWS\system32\Rcekp.dll
C:\WINDOWS\system32\Jiok.dll
C:\WINDOWS\system32\Sqpl.dll
C:\WINDOWS\system32\Prdtxu.dll
C:\WINDOWS\system32\Ckarib.dll
C:\WINDOWS\system32\Yvcm.dll
C:\WINDOWS\system32\Jrsa.dll
C:\WINDOWS\system32\Rvqc.dll
C:\WINDOWS\system32\Sdfvjg.dll
C:\WINDOWS\system32\Fanhr.dll
C:\WINDOWS\system32\Kvhi.dll
C:\WINDOWS\system32\Nabapc.dll
C:\WINDOWS\system32\Ayhfdm.dll
C:\WINDOWS\system32\Icozv.dll
C:\PROGRA~1\TENCENT\Adplus\stup.exe

卸载搜搜地址栏搜索...

引用:

【梦影9926的贴子】 在C盘下我根本找不到那个文件夹 ...........................

没那个路径会显示出来?

O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
参考：http://forum.ikaka.com/topic.asp?board=28&artid=7971417

O23 - NT 服务: Gray_Pigeon_Server2.03 (GrayPigeonServer2.03) - Unknown owner - C:\WINDOWS\G_Server2.03.exe
鸽子..安全模式...打开注册表编辑器，展开：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
搜索GrayPigeonServer2.03  删除...
删除
C:\WINDOWS\G_Server2.03.exe


杀软还报Trojan.DL.Agent.hoh 么?

我是电脑盲哈，请问到哪儿进行修复和删除？

要命，我找不到你说的那个窗口，打开后应该点哪个：显示新用户向导，是不是选择“什么都不干，进入主界面？

【第一步】：
用可以查看进程路径的小工具结束如下两个进程：
[RUNDLL32.EXE]
CommandLine = C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\STDSVER.DLL,Service

[RUNDLL32.EXE]
CommandLine = C:\windows\SYSTEM32\stdup.dll,Entry
这步具体是怎么做的？可以不做不？

请问mopery，我按照你要求修复的进行修复后，但在删除中找不到 C:\Program Files\TENCENT\Adplus\SSAddr.dll和C:\WINDOWS\G_Server2.03.exe，不知道会不会对彻底清除Trojan.DL.Agent.hoh有影响？？