瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 rootkit.vanti.gen我怎么也杀不了!求助!!【求助】

12   2  /  2  页   跳转

rootkit.vanti.gen我怎么也杀不了!求助!!【求助】

[C:\WINDOWS\system32\cmjazvyj.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\cmjazvyj.ime]  <N/A><N/A>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
[PID: 396][D:\Program Files\Tencent\qq\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [D:\Program Files\Tencent\qq\CoralAssist.DLL]  <N/A><4.0.0 Build 20051112>
    [D:\Program Files\Tencent\qq\CoralQQ.DLL]  <Coral Team><4.1.2 Build 20060106>
    [D:\Program Files\Tencent\qq\IPSearcher.dll]  <><1.0.0.3>
    [D:\Program Files\Tencent\qq\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\QQHelperDll.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 14>
    [D:\Program Files\Tencent\qq\QQAPI.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [D:\Program Files\Tencent\qq\LoginCtrl.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\npkcntc.dll]  <INCA Internet Co., Ltd.><2005, 9, 1, 1>
    [D:\Program Files\Tencent\qq\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [D:\Program Files\Tencent\qq\QQRes.dll]  <tencent><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\QQMainFrame.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\CQQApplication.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\NewSkin.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\HostingMgr.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\CameraDll.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\MailSummary.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\QQSpace.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\QQGroupMng.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\QQSysMsgMng.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\QRingMng.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\PhoneAPI.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [D:\Program Files\Tencent\qq\LongConnection.dll]  <tencent><0, 3, 3, 8>
    [D:\Program Files\Tencent\qq\QQAvatar.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [D:\Program Files\Tencent\qq\QQPet.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\BQQApplication.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\QQPlugin.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\QQAllInOne.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\SCCore.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\QQCustomFace.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
    [D:\Program Files\Tencent\qq\QQSceneMng.dll]  <N/A><N/A>
    [D:\Program Files\Tencent\qq\GroupConnection.dll]  <Tencent><5, 0, 202, 30>
    [D:\Program Files\Tencent\qq\CommercesMng.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Tencent\qq\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [D:\Program Files\Tencent\qq\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 141>
[PID: 1940][D:\Program Files\Tencent\qq\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [D:\Program Files\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 2016][C:\Documents and Settings\张广波\桌面\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 

你现在应该可能删除了
运行(双击)System Repair Engineer,点“启动项目,服务,点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Universal Plug and Play Device Host,Windows Time,Windows Management Instrumentation,Portable Media Serial Number Service,Windows Management Instrumentation Driver Extensions 选择“删除服务”点“设置”选择“否”
这是几个空服务,完全可以删除。
看不出问题了,如果还有问题请描述一下。
gototop
 

提示:
Windows Management Instrumentation/winmgmt是系统服务,你不能配置它
多了个wedclient/wedclient
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT