瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 又来麻烦各位了~~能帮我看看吗~今天中东西了~

12   2  /  2  页   跳转

又来麻烦各位了~~能帮我看看吗~今天中东西了~

<C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[Backward Links]
  <res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html, N/A>
[Cached Snapshot of Page]
  <res://c:\program files\google\GoogleToolbar2.dll/cmcache.html, N/A>
[Similar Pages]
  <res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html, N/A>
[Translate Page into English]
  <res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html, N/A>
[使用影音传送带下载]
  <C:\Program Files\Xi\NetTransport 2\NTAddLink.html, N/A>
[使用影音传送带下载全部链接]
  <C:\Program Files\Xi\NetTransport 2\NTAddList.html, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 496][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 716][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 740][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
    [c:\WINDOWS\System32\LgNotify.dll]  <Intel Corporation><8, 0, 0, 162>
[PID: 796][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 808][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 1008][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1408][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1432][C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe]  <><0, 20, 0, 3000>
[PID: 1460][C:\WINDOWS\System32\S24EvMon.exe]  <Intel Corporation ><8, 0, 0, 162>
[PID: 1888][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1912][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 264][C:\WINDOWS\system32\ZCfgSvc.exe]  <Intel Corporation><8, 0, 0, 162>
    [C:\WINDOWS\system32\PfMgrApi.dll]  <Intel Corporation><8, 0, 0, 162>
    [C:\WINDOWS\system32\PsRegApi.dll]  <Intel Corporation><8, 0, 0, 162>
    [C:\WINDOWS\system32\WConfig.DLL]  <Intel Corporation><8, 0, 0, 162>
    [C:\WINDOWS\system32\WiFiAdap.DLL]  <Intel Corporation><8, 0, 0, 162>
    [C:\WINDOWS\system32\PsGuiMgr.dll]  <Intel Corporation.><8, 0, 0, 162>
    [C:\WINDOWS\system32\C1XStngs.dll]  <Intel Corporation><8, 0, 0, 162>
    [c:\Program Files\Intel\PROSetWireless\PROSet\CHT\ZcSvcCHT.dll]  <Intel Corporation><8, 0, 0, 107>
    [c:\Program Files\Intel\PROSetWireless\PROSet\CHT\PmApiCHT.dll]  <Intel Corporation><8, 0, 0, 107>
    [C:\WINDOWS\system32\S24MUDLL.dll]  <Intel Corporation><8, 0, 0, 162>
    [c:\Program Files\Intel\PROSetWireless\PROSet\CHT\C1XStCHT.dll]  <Intel Corporation><8, 0, 0, 107>
[PID: 1056][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)>
[PID: 1364][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\Nikon\NkView6\NkvDropExt.dll]  <Nikon Corporation><1, 0, 0, 1000>
    [c:\program files\google\googletoolbar2.dll]  <Google Inc.><3, 0, 131, 0>
    [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll]  <Thunder Networking Technologies,LTD><5, 0, 0, 2>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrchpg.dll]  <Kaspersky Lab><5.0.1.18>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrch_ag.dll]  <Kaspersky Lab><5.0.388.1>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\FSSync.dll]  <Kaspersky Lab><5.0.388.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\pr_rmt.dll]  <Kaspersky Lab><5.0.388.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ccclient.dll]  <Kaspersky Lab><5.0.388.1>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\klipc.dll]  <Kaspersky Lab><5.0.388.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\KLUtil.dll]  <Kaspersky Lab><5.0.388.1>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\rpt.dll]  <Kaspersky Lab><5.0.388.2>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\CCIFACE.dll]  <Kaspersky Lab><5.0.388.1>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prloader.dll]  <Kaspersky Lab><5.0.388.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prkernel.ppl]  <Kaspersky Lab><5.0.388.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro\prstring.ppl]  <Kaspersky Lab><5.0.388.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_srv.ppl]  <Kaspersky Lab><5.0.388.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_clnt.ppl]  <Kaspersky Lab><5.0.388.0>
    [C:\Program Files\Dell\QuickSet\dadkeyb.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
[PID: 1772][C:\Program Files\Apoint\Apoint.exe]  <Alps Electric Co., Ltd.><5.5.101.123>
    [C:\WINDOWS\System32\VXDIF.DLL]  <Alps Electric Co., Ltd.><6.0.2.66>
    [C:\Program Files\Apoint\Apoint.DLL]  <Alps Electric Co., Ltd.><5.5.104.216>
    [C:\Program Files\Apoint\EzAuto.dll]  <Alps Electric Co., Ltd.><4.5.1.83>
    [C:\Program Files\Apoint\EzLaunch.DLL]  <Alps Electric Co., Ltd.><5.5.1.62>
gototop
 

[PID: 1792][C:\WINDOWS\System32\hkcmd.exe]  <Intel Corporation><3.0.0.3775>
    [C:\WINDOWS\System32\hccutils.DLL]  <Intel Corporation><3.0.0.3775>
    [C:\WINDOWS\System32\igfxdev.dll]  <Intel Corporation><3.0.0.3775>
    [C:\WINDOWS\System32\igfxsrvc.dll]  <Intel Corporation><3.0.0.3775>
    [C:\WINDOWS\System32\igfxres.dll]  <Intel Corporation><3.0.0.3775>
    [C:\WINDOWS\System32\igfxhk.dll]  <Intel Corporation><3.0.0.3775>
[PID: 1800][C:\Program Files\Dell\QuickSet\quickset.exe]  <><1, 0, 0, 1>
    [C:\WINDOWS\System32\KPOWER.DLL]  <Intel Corporation><1, 0, 0, 3>
    [C:\Program Files\Dell\QuickSet\dadkeyb.dll]  <N/A><N/A>
[PID: 1808][C:\Program Files\SigmaTel\SigmaTel AC97 音频驱动器\stacmon.exe]  <SigmaTel Inc.><1, 0, 0, 3>
[PID: 1832][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3208>
[PID: 1848][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe]  <Network Associates, Inc.><3.1.1.184>
    [C:\Program Files\Network Associates\Common Framework\nailog.dll]  <Network Associates, Inc.><3.1.1.159>
    [C:\Program Files\Network Associates\Common Framework\naCmnLib.dll]  <Network Associates, Inc.><3.1.1.159>
    [C:\Program Files\Network Associates\Common Framework\naXML.dll]  <Network Associates, Inc.><3.1.1.159>
    [C:\Program Files\Network Associates\Common Framework\NaiSign.dll]  <Network Associates, Inc.><3.1.0.197>
    [C:\Program Files\Network Associates\Common Framework\0804\UpdRes.dll]  <Network Associates, Inc.><3.1.1.184>
    [C:\Program Files\Network Associates\Common Framework\0804\AgentRes.dll]  <Network Associates, Inc.><3.1.1.184>
    [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll]  <Network Associates, Inc.><3.1.1.184>
[PID: 1856][C:\Program Files\Wom\WinMem.exe]  <鲁锦><3.0.6.321>
[PID: 1908][C:\Program Files\DAEMON Tools\daemon.exe]  <DT Soft Ltd.><4.03.0.0>
    [C:\Program Files\DAEMON Tools\daemon.dll]  <DT Soft Ltd.><4.03.0.0>
    [C:\Program Files\DAEMON Tools\PFCTOC.DLL]  <Padus(R), Inc.><1, 0, 0, 12>
    [C:\Program Files\DAEMON Tools\Plugins\Images\bw5mount.dll]  <N/A><1.0.6.0>
    [C:\Program Files\DAEMON Tools\Plugins\Images\ccdmount.dll]  <GENERIC><1.10.0.0>
    [C:\Program Files\DAEMON Tools\Plugins\Images\mdsmount.dll]  <GENERIC><1.12.0.0>
    [C:\Program Files\DAEMON Tools\Plugins\Images\nrgmount.dll]  <GENERIC><1.11.0.0>
    [C:\Program Files\DAEMON Tools\Plugins\Images\pdimount.dll]  <GENERIC><1.01.0.0>
[PID: 1956][C:\WINDOWS\System32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 1964][C:\Program Files\Nikon\NkView6\NkvMon.exe]  <Nikon Corporation><6, 0, 0, 3000>
[PID: 1476][C:\Program Files\Apoint\Apntex.exe]  <Alps Electric Co., Ltd.><5.0.1.15>
    [C:\WINDOWS\System32\VXDIF.DLL]  <Alps Electric Co., Ltd.><6.0.2.66>
[PID: 276][C:\WINDOWS\System32\conime.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 352][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 384][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe]  <Network Associates, Inc.><3.1.1.184>
    [C:\Program Files\Network Associates\Common Framework\nailog.dll]  <Network Associates, Inc.><3.1.1.159>
    [C:\Program Files\Network Associates\Common Framework\naXML.dll]  <Network Associates, Inc.><3.1.1.159>
    [C:\Program Files\Network Associates\Common Framework\NaiSign.dll]  <Network Associates, Inc.><3.1.0.197>
    [C:\Program Files\Network Associates\Common Framework\naCmnLib.dll]  <Network Associates, Inc.><3.1.1.159>
    [C:\Program Files\Network Associates\Common Framework\0804\AgentRes.dll]  <Network Associates, Inc.><3.1.1.184>
[PID: 1116][C:\WINDOWS\System32\RegSrvc.exe]  <Intel Corporation><8, 0, 0, 162>
[PID: 1160][C:\WINDOWS\System32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 484][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 2020][C:\WINDOWS\System32\1XConfig.exe]  <Intel><8, 0, 0, 162>
    [C:\WINDOWS\System32\IntelAE5.dll]  <Meetinghouse Data Communications><1, 42, 19, 1>
    [C:\WINDOWS\System32\SSLEAY32.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\LIBEAY32.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\PsRegApi.dll]  <Intel Corporation><8, 0, 0, 162>
[PID: 1984][C:\Documents and Settings\Administrator\My Documents\sreng2\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
gototop
 

完全按照步骤~~帮我看下 对了  我说的很快有个什么 触犯法律的提示的那东西解决了吗~~~也在刚刚的解决方案里面吗~
gototop
 

运行(双击)System Repair Engineer,使用“启动项目,注册表”来删除以下选项。
C:\WINDOWS\System32\winmer.exe
删除
C:\WINDOWS\System32\winmer.exe找不到就算了。
运行(双击)System Repair Engineer,点“启动项目,服务,点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Update Service For Windows,选择“删除服务”点“设置”选择“否”
重启后删除
C:\WINDOWS\winupdate.exe
gototop
 

按照指示又操作1次~~希望没了吧~~~
那个 什么触犯法律 应该跳不出了吧~
gototop
 

这种事情也就只有你才知道
如果还有异常,再扫份日志粘上来。
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT