瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 救命啊!!都扫出来好几万个Downloader.Trojan了!!

12   2  /  2  页   跳转

救命啊!!都扫出来好几万个Downloader.Trojan了!!

[PID: 3780][C:\Programme\T-DSL SpeedManager\TSMSvc.exe]  <T-Systems Business Services><1, 0, 60209, 1>
[PID: 3960][C:\Programme\T-Online\DSL-Manager\TODslSvc.exe]  <T-Systems International GmbH><2, 0, 51101, 1>
[PID: 856][C:\Programme\Tencent\QQ\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [C:\Programme\Tencent\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 2504][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3996][C:\Programme\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Programme\YiSou\yisou.dll]  <3721><1, 1, 1, 0>
    [C:\WINDOWS\system32\xunleibho_v14.dll]  <Thunder Networking Technologies,LTD><4, 6, 0, 62>
    [C:\WINDOWS\system32\swflash.ocx]  <Macromedia, Inc.><9.0.25.0>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 1, 1039>
    [C:\WINDOWS\SYSTEM32\stdup.dll]  <N/A><N/A>
    [C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\AdHndCnt.dll]  <Marmiko IT-Solutions GmbH><6.04>
    [c:\programme\google\googletoolbar1.dll]  <Google Inc.><3, 0, 131, 0>
    [C:\KAV2005\KAScript.DLL]  <Kingsoft Corporation><2005, 4, 1, 53>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2004, 11, 26, 53>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2004, 11, 9, 11>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  <Macromedia, Inc.><8.5.1r102>
[PID: 2028][C:\PROGRA~1\INTERN~1\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Programme\YiSou\yisou.dll]  <3721><1, 1, 1, 0>
    [C:\WINDOWS\system32\xunleibho_v14.dll]  <Thunder Networking Technologies,LTD><4, 6, 0, 62>
    [C:\WINDOWS\system32\swflash.ocx]  <Macromedia, Inc.><9.0.25.0>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 1, 1039>
    [C:\WINDOWS\SYSTEM32\stdup.dll]  <N/A><N/A>
    [c:\programme\google\googletoolbar1.dll]  <Google Inc.><3, 0, 131, 0>
    [C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\AdHndCnt.dll]  <Marmiko IT-Solutions GmbH><6.04>
    [C:\KAV2005\KAScript.DLL]  <Kingsoft Corporation><2005, 4, 1, 53>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2004, 11, 26, 53>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2004, 11, 9, 11>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  <Macromedia, Inc.><8.5.1r102>
[PID: 2684][C:\WINDOWS\system32\RunDll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Progra~1\IE-BAR\Cast\221~1.0\dmplayer.dll]  <千橡互联><2, 2, 1, 0>
    [C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\AdHndCnt.dll]  <Marmiko IT-Solutions GmbH><6.04>
    [C:\KAV2005\KAScript.DLL]  <Kingsoft Corporation><2005, 4, 1, 53>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2004, 11, 26, 53>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2004, 11, 9, 11>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  <Macromedia, Inc.><8.5.1r102>
[PID: 1704][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2472][C:\soft\winrar\WinRAR.exe]  <N/A><N/A>
[PID: 2632][C:\DOKUME~1\Yuki\LOKALE~1\Temp\Rar$EX00.906\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\AdHndCnt.dll]  <Marmiko IT-Solutions GmbH><6.04>
gototop
 

==================================
????
.TXT  Error. [NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  Error. [C:\WINDOWS\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF  Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  Error. ["C:\Programme\Dreamweaver MX 2004\Dreamweaver.exe" "%1"]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock ???

==================================


这次我想把电脑好好清理一下.什么乱七八糟的软件都想弄掉,可是能力有限,所以让电脑越来越慢啊啊啊啊~~

希望大大们可以帮帮我,另外谢谢你们抽时间来看我的日志!
gototop
 

你什么东西都装在C盘啊
gototop
 

修复
O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
然后删除C:\WINDOWS\SYSTEM32\stdup.dll

用System Repair Engineer的系统修复中的文件关联修复以下
.HLP Error. [C:\WINDOWS\winhlp32.exe %1]
.INI Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.JS Error. ["C:\Programme\Dreamweaver MX 2004\Dreamweaver.exe" "%1"]

建议你卸载雅虎助手(3721),著名的流氓软件。

就看出这些,高手继续。
gototop
 

.HLP Error. [C:\WINDOWS\winhlp32.exe %1]
.INI Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF Error. [C:\WINDOWS\NOTEPAD.EXE %1]
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT