瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 刘麻子病毒来了,大家小心自己的Q币和密码...斑竹救我!高人指点...谢谢!

12   2  /  2  页   跳转

刘麻子病毒来了,大家小心自己的Q币和密码...斑竹救我!高人指点...谢谢!

==================================
正在运行的进程
[PID: 388][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 440][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 464][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 508][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 520][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 680][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 736][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 800][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 816][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 880][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 940][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 952][C:\Program Files\Rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 35]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 18, 1, 0, 11]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\Rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\psapi.dll]  [Microsoft Corporation, 4.00]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [rising, 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [C:\Program Files\Rising\Rav\MailMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 34]
    [C:\Program Files\Rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17]
    [C:\Program Files\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 15]
    [C:\Program Files\Rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 30]
    [C:\Program Files\Rising\Rav\RSUnpack.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18]
    [C:\Program Files\Rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7]
    [C:\Program Files\Rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\Rav\Unpacker.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\ExtOLE.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\ScanNet.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\ScanElf.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 1076][c:\program files\rising\rfw\rfwsrv.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 33]
    [c:\program files\rising\rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13]
    [c:\program files\rising\rfw\rfwlog.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6]
    [c:\program files\rising\rfw\Rfwdrv.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21]
    [c:\program files\rising\rfw\psapi.dll]  [Microsoft Corporation, 4.00]
    [c:\program files\rising\rfw\MonDrv.dll]  [rs, 1, 0, 0, 4]
    [c:\program files\rising\rfw\ProcLib.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1276][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.1897.0]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.1897.0]
[PID: 1392][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll]  [Nero AG, 2, 0, 0, 8]
    [C:\Program Files\Common Files\Ahead\Lib\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.7772]
    [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.7772]
    [C:\WINDOWS\system32\nvshell.dll]  [NVIDIA Corporation, 6.14.10.10525]
gototop
 

[PID: 1432][C:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1560][c:\program files\rising\rfw\RfwMain.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 52]
    [c:\program files\rising\rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23]
    [c:\program files\rising\rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [c:\program files\rising\rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1708][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.7772]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1752][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 1996][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2012][C:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 33]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 172][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.3536]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 308][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 344][C:\Program Files\MSN Messenger\msnmsgr.exe]  [Microsoft Corporation, 8.0.0812.00]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.163]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
[PID: 1248][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
gototop
 

[PID: 4084][C:\Program Files\Adobe\Adobe Audition 2.0\Audition.exe]  [Adobe Systems?, Incorporated, 2.0.5306.2]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\SharedControls.dll]  [Adobe Systems?, Incorporated, 2.0.0.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\AuditionUtil.dll]  [Adobe Systems?, Incorporated, 2.0.0.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\libmmd.dll]  [Intel Corporation, 8.1.8.2]
    [C:\Program Files\Adobe\Adobe Audition 2.0\ExtendScript.dll]  [Adobe公司 小T汉化, 3.6.59]
    [C:\Program Files\Adobe\Adobe Audition 2.0\ScCore.dll]  [Adobe公司 小T汉化, 3.6.59]
    [C:\Program Files\Adobe\Adobe Audition 2.0\UIToolsShell.dll]  [Adobe Systems?, Incorporated, 2.0.0.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\dva.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\audipp.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\PremiereShell.dll]  [Adobe Systems?, Incorporated, 2.0.0.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\ASLFoundation.dll]  [Adobe 公司 小T汉化, 2, 0, 0, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\PRM.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\MediaLayer.dll]  [Adobe 公司 小T汉化, 2, 0, 0, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\AdobeXMP.dll]  [Adobe Systems Incorporated, 3.1.2-113]
    [C:\Program Files\Adobe\Adobe Audition 2.0\AXE8SharedExpat.dll]  [Adobe Systems Incorporated, 3.2.406]
    [C:\Program Files\Adobe\Adobe Audition 2.0\AdobeDocMeta.dll]  [Adobe Systems Incorporated, 1.1.1-746]
    [C:\Program Files\Adobe\Adobe Audition 2.0\BIB.dll]  [Adobe Systems Incorporated, 1.1.17]
    [C:\Program Files\Adobe\Adobe Audition 2.0\BravoInitializer.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\AGM.dll]  [Adobe Systems Incorporated, 4.15.21]
    [C:\Program Files\Adobe\Adobe Audition 2.0\ACE.dll]  [Adobe Systems Incorporated, 2.09.18]
    [C:\Program Files\Adobe\Adobe Audition 2.0\CoolType.dll]  [Adobe Systems Incorporated, 5.02.18]
    [C:\Program Files\Adobe\Adobe Audition 2.0\AudioFilters.dll]  [Adobe 公司 小T汉化, 2, 0, 0, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\BackendLib.dll]  [Adobe 公司 小T汉化, 2, 0, 0, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\xerces-c_2_1_0.dll]  [Apache Software Foundation, 2, 1, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\ASLUnitTesting.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\ASLConsole.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\MediaFrames.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\ImageRenderer.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\mcdvd_32.dll]  [MainConcept AG, 2.4.14]
    [C:\Program Files\Adobe\Adobe Audition 2.0\MemoryShell.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\BackendLegacyLib.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\VTransCoderEngine.dll]  [Adobe Systems Incorporated , 3.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\VStringBall.dll]  [Adobe Systems Incorporated , 3.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\qt.dll]  [Adobe Systems Incorporated, 1, 1, 0, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\AMEProperties.dll]  [Adobe Systems Incorporated , 3.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\FileInfo.dll]  [Adobe Systems, Incorporated, 3.1.0.239]
    [C:\Program Files\Adobe\Adobe Audition 2.0\VUI.dll]  [Adobe公司 小T汉化, 3.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\AMESettingsUI.dll]  [Adobe公司 小T汉化, 3.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\UIFramework.dll]  [Adobe 公司 小T汉化, 2, 0, 0, 0]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Adobe\Adobe Audition 2.0\epic_regs.dll]  [Adobe 公司 小T汉化, 1.0.2.5]
    [C:\Program Files\Adobe\Adobe Audition 2.0\asneu.dll]  [Adobe Systems Inc., 1, 6, 0, 8]
    [C:\Program Files\Adobe\Adobe Audition 2.0\epic_pers.dll]  [Adobe 公司 小T汉化, 1.0.2.5]
    [C:\Program Files\Adobe\Adobe Audition 2.0\epic_eula.dll]  [Adobe 公司 小T汉化, 1.0.2.5]
    [C:\Program Files\Adobe\Adobe Audition 2.0\XMPShell.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\Memory.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\en_US\CompilerVfw.prm]  [Adobe Systems Incorporated, 2, 0, 0, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\PsiLib.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Adobe Audition 2.0\MediaUtils.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\tssoft32.acm]  [DSP GROUP, INC., 1.01]
    [C:\WINDOWS\system32\tsd32.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\sl_anet.acm]  [Sipro Lab Telecom Inc., 3.02]
    [C:\WINDOWS\system32\iac25_32.ax]  [Intel Corporation, 2.05.53]
    [C:\WINDOWS\system32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.163]
    [C:\Program Files\Adobe\Adobe Audition 2.0\en_US\ImporterAVI.prm]  [Adobe Systems Incorporated, 2, 0, 0, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\HDVDecoder.dll]  [CineForm, 1, 0, 0, 5]
    [C:\Program Files\Adobe\Adobe Audition 2.0\en_US\ImporterWindowsMedia.prm]  [Adobe Systems Incorporated, 2, 0, 0, 0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\en_US\PlayerStandard.prm]  [Adobe Systems Incorporated, 2, 0, 0, 0]
    [c:\program files\adobe\adobe audition 2.0\en_us\audition asio.dll]  [Adobe&美听数码公司., 1, 0, 1, 1]
    [C:\Program Files\Adobe\Adobe Audition 2.0\UITools.dll]  [Adobe Systems?, Incorporated, 2.0.0.0]
    [C:\Program Files\Adobe\Adobe Audition 2.0\cda.xfm]  [Adobe公司 小T汉化, 2.0.5306.2]
[PID: 340][C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe]  [Adobe Systems, 2.67.010]
[PID: 2436][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KakaTool.dll]  [Beijing Rising Technology Co., Ltd., 2, 0, 0, 9]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.7.2006011200]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  [FlashGet, 1, 1, 5, 0]
    [C:\PROGRA~1\FLASHGET\getflash.dll]  [N/A, 1, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\macromed\flash\Flash85.ocx]  [Macromedia, Inc., 8,5,0,133]
    [C:\WINDOWS\system32\JPWB.IME]  [常诚研制, 4.00.950]
[PID: 3324][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.844\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
gototop
 

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
gototop
 

请到www.27814939.ys168.com,点“我的软件”下载KillBox.exe
重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows
运行System Repair Engineer,使用“启动项目,注册表”来删除以下选项
<{08315C1A-9BA9-4B7C-A432-26885F78DF28}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp>
<{18315C1A-9BA9-4B7C-A432-26885F78DF28}><C:\Program Files\Common Files\joipor.vxd>
双击打开KillBox.exe,分别删除
C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp
C:\Program Files\Common Files\joipor.vxd
C:\WINDOWS\system32 winasp32.dll
(删除时勾选“删除前先结束Explorer.EXE进程”)
注:后缀为.dll的文件如果无法删除,请勾选"反注册""再删除
gototop
 

【回复“westbeck”的帖子】
我已经按照你的要求做了,但是我不知道
<运行System Repair Engineer,使用“启动项目,注册表”来删除以下选项>这个怎样操作,还有我把C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp已经删除,接下来的两个C:\Program Files\Common Files\joipor.vxd
C:\WINDOWS\system32 winasp32.dll
KillBox.exe提示我找不到文件
请指点!
gototop
 

高人请指点啊!!晕
gototop
 

高人去哪里了啊,我的QQ一启动就出现键盘密码失效,是不是病毒还在机器里面啊?
gototop
 

论坛上的高人请帮忙啊!
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT