12   2  /  2  页   跳转

看看这是什么毒?总也杀不完!

[C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
    [C:\Documents and Settings\a\桌面\h4x0r.com]  [N/A, N/A]
[PID: 1792][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [Yahoo! China, 3, 0, 3, 1021]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll]  [Yahoo! China, 3, 0, 0, 1000]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 3, 1, 6, 1022]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 1, 2]
    [C:\WINDOWS\DOWNLO~1\CnsHint.dll]  [3721, 1, 0, 0, 4]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
[PID: 4024][C:\Program Files\Common Files\Microsoft Shared\MSINFO\Sysrem2.exe]  [N/A, N/A]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
[PID: 4036][C:\Program Files\Common Files\Microsoft Shared\MSINFO\Sysrem4.exe]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
[PID: 2632][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\235780M.BMP]  [N/A, N/A]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [Yahoo! China, 3, 0, 3, 1021]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll]  [Yahoo! China, 3, 0, 0, 1000]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 3, 1, 6, 1022]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 1, 2]
    [C:\WINDOWS\DOWNLO~1\CnsHint.dll]  [3721, 1, 0, 0, 4]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yalive.dll]  [yahoo! china, 3, 3, 5, 1086]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  [Yahoo! China, 3, 0, 1, 1010]
    [C:\WINDOWS\DOWNLO~1\cnsplus.dll]  [3721, 1, 0, 0, 2]
    [F:\PROGRA~1\SUPERR~1\MAGICSET\haokanbar.dll]  [Xiang Feng Technology, 2, 2, 0, 1612]
    [C:\Program Files\yisou\yisou.dll]  [3721, 1, 1, 1, 0]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  [yahoo! china, 3, 2, 1, 1072]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ysearch.dll]  [Yahoo! China, 3, 0, 5, 1005]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasnoad.dll]  [yahoo! china, 3, 0, 2, 1004]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yzsNetProto.dll]  [Yahoo! China, 3, 0, 1, 1002]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll]  [Yahoo! China, 3, 0, 4, 1006]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll]  [Yahoo! China, 3, 0, 2, 1003]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yaswiper.dll]  [Yahoo! China, 3, 0, 2, 1002]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasiesec.dll]  [Yahoo! China, 3, 0, 3, 1003]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YSETTI~1.DLL]  [yahoo! china, 3, 0, 5, 1010]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ymailp.dll]  [Yahoo! China, 3, 0, 2, 1008]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\PROGRA~1\Yahoo!\Assistant\yClickOn.dll]  [YAHOO Corporation Limited, 3, 0, 0, 1001]
    [D:\DownLoads\qq\QQIEHelper.dll]  [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL]  [yahoo! china, 3, 0, 1, 1001]
    [c:\program files\google\googletoolbar1.dll]  [Google Inc., 3, 0, 125, 1]
    [C:\PROGRA~1\yisou\yisoub.dll]  [, 1, 1, 2, 4]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  [Macromedia, Inc., 8,0,22,0]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrepair.dll]  [Yahoo! China, 3, 0, 7, 1010]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasfsks.dll]  [3721.com, 2, 1, 1, 87]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yoptimum.dll]  [Yahoo! China, 3, 0, 1, 1004]
    [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll]  [Yahoo! China, 3, 0, 1, 1002]
    [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll]  [Yahoo! China, 3, 0, 5, 1007]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yxpstyle.dll]  [Yahoo! China, 3, 0, 0, 1000]
    [C:\WINDOWS\system32\xunleibho_v6.dll]  [, 4, 4, 0, 31]
[PID: 1876][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\235780M.BMP]  [N/A, N/A]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [Yahoo! China, 3, 0, 3, 1021]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 3, 1, 6, 1022]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 1, 2]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
[PID: 828][D:\OurFriend\ourfriend.exe]  [, 1, 0, 0, 1]
    [C:\WINDOWS\235780M.BMP]  [N/A, N/A]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [Yahoo! China, 3, 0, 3, 1021]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 3, 1, 6, 1022]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 1, 2]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [D:\OurFriend\ODCtrlRes.dll]  [, 1, 0, 0, 1]
    [D:\OurFriend\ourfriend_res.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\GLPNG.dll]  [globallink(ourgame) , 1, 0, 0, 2]
    [C:\WINDOWS\system32\GLCOMPRESS.dll]  [globallink, 1, 0, 0, 2]
    [D:\roomicon.dll]  [Beijing GlobalLink Computer Corp., 2, 5, 0, 6]
    [D:\RIconEx.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 1, 40]
    [D:\people.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 3]
    [D:\Image\Room\Table0.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [D:\Image\Room\Table1.dll]  [Beijing GlobalLink Computer Corp., 2, 1, 2, 255]
    [D:\Image\Room\Table2.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [D:\Image\Room\peopleEx0.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [D:\Image\Room\peopleEx1.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [D:\Image\Room\Player0_0.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [D:\Image\Room\Player0_1.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [D:\Image\Room\Player1_0.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [D:\Image\Room\Player1_1.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [D:\Image\Room\Player2_0.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [D:\Image\Room\Player2_1.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [D:\GLAvatar.ocx]  [, 2, 2, 0, 32]
    [D:\GLChatEx.ocx]  [GlobalLink, 2, 5, 1, 29]
    [D:\glchatex.dll]  [GlobalLink, 2, 5, 1, 29]
    [D:\odctrls\ourfriend_skn.dll]  [, 1, 0, 5, 4]
    [C:\WINDOWS\system32\codecvt.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\GLGIFTGA.dll]  [globallink(ourgame) , 1, 0, 0, 2]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
gototop
 

PID: 2940][D:\WEB迅雷\WebThunder.exe]  [深圳市迅雷网络技术有限公司, 1, 3, 0, 65]
    [D:\WEB迅雷\taskmanage.dll]  [Thunder Networking Technologies,LTD, 1, 4, 1, 66]
    [D:\WEB迅雷\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 0, 0, 3]
    [D:\WEB迅雷\asyn_dns.dll]  [N/A, N/A]
    [D:\WEB迅雷\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 2, 1, 34]
    [C:\WINDOWS\235780M.BMP]  [N/A, N/A]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [Yahoo! China, 3, 0, 3, 1021]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 3, 1, 6, 1022]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 1, 2]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [D:\WEB迅雷\historyinfo_manage.dll]  [Thunder Networking Technologies,LTD, 5, 3, 0, 228]
    [D:\WEB迅雷\UpdateDownload.dll]  [Thunder Networking Technologies,LTD, 1, 0, 1, 8]
    [D:\WEB迅雷\UpdateExec.dll]  [Thunder Networking Technologies,LTD, 1, 0, 1, 5]
    [D:\WEB迅雷\iEmbedShell.dll]  [ , 1, 0, 0, 12]
    [D:\WEB迅雷\iEmbed05.dll]  [ , 2, 3, 1, 41]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  [Macromedia, Inc., 8,0,22,0]
[PID: 2572][D:\Program Files\Thunder.exe]  [深圳市迅雷网络技术有限公司, 4, 7, 3, 53]
    [D:\Program Files\log4cplus.dll]  [N/A, N/A]
    [D:\Program Files\ICF.dll]  [N/A, N/A]
    [D:\Program Files\WebBrowserEx.dll]  [N/A, N/A]
    [D:\Program Files\boost_thread-vc6-mt-1_31.dll]  [N/A, N/A]
    [C:\WINDOWS\235780M.BMP]  [N/A, N/A]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [Yahoo! China, 3, 0, 3, 1021]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 3, 1, 6, 1022]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 1, 2]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  [Macromedia, Inc., 8,0,22,0]
    [C:\PROGRA~1\Yahoo!\Assistant\yClickOn.dll]  [YAHOO Corporation Limited, 3, 0, 0, 1001]
[PID: 3892][D:\Program Files\TDUpdate.exe]  [N/A, N/A]
    [C:\WINDOWS\235780M.BMP]  [N/A, N/A]
[PID: 2524][F:\sreng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\235780M.BMP]  [N/A, N/A]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [Yahoo! China, 3, 0, 3, 1021]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 3, 1, 6, 1022]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 1, 2]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck100.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\ztdll.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xydll.dll]  [N/A, N/A]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  Error. [超级解霸2001XP]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
gototop
 

高手能说的详细点吗?我是菜鸟啊!
gototop
 

哎!!!!!!!!!!!!!!怎么回事,按照你的方法做了还是不行啊!!!!!!!!!!!救我吧
gototop
 

[9 / 9]
<\SystemRoot\system32\drivers\boot00.sys><N/A>
[99 / 99]
<\SystemRoot\system32\drivers\boot00.sys><N/A>

上面这两个驱动,有点不像好人~(建议更改下它们的启动类型,重启后删除这两个驱动~)


清理下面的这些插件,并删除相关文件(你的浏览器已经变成牛氓窝了~~)
[]
{EE7A2E77-8EEB-44B3-AEF0-0C315B1ACB1B} <C:\WINDOWS\system32\Zxox.dll, N/A>
[]
{F11B9292-51D2-4FB7-A126-32718B830DC0} <C:\WINDOWS\system32\Rgaz.dll, N/A>
[Cytd Encipherment Memory]
{F381FC65-D92D-4410-B865-E4E9713994E8} <C:\WINDOWS\cytdcli.dll, N/A>

[]
{D86B2031-3841-4EB4-909C-1D7EF6B34B77} <C:\WINDOWS\system32\Abtg.dll, N/A>
[]
{D8805FC7-9472-4332-977B-08CC14507B09} <C:\WINDOWS\system32\Jjhx.dll, N/A>
[]
{C10575ED-D597-44E6-B41B-4290F49EAA96} <C:\WINDOWS\system32\Demlw.dll, N/A>
[]
{C1361798-C1D9-4056-89B3-0AA736CEBCF9} <C:\WINDOWS\system32\Glois.dll, N/A>
[]
{C4A68AA1-0C94-4E0C-ABC7-B82DFDAAD377} <C:\WINDOWS\system32\Tsur.dll, N/A>
[]
{C509772C-74D1-47FE-918C-0DE5A16001C6} <C:\WINDOWS\system32\Qxjfr.dll, N/A>
[]
{BC73F0F8-B366-4171-BDCE-FFFCE464A734} <C:\WINDOWS\system32\Gwok.dll, N/A>
[]
{6668493D-22A5-474D-BAD2-7B09FCC7C4D2} <C:\WINDOWS\system32\Nozc.dll, N/A>
[]
{3B8ECC8D-608E-4AEA-9662-FBC9D048A315} <C:\WINDOWS\system32\Cyklv.dll, N/A>
[]
{423545F1-15C4-40D1-BDFA-928500B3BB03} <C:\WINDOWS\system32\Gbepah.dll, N/A>
[Router Layer]
{5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} <C:\WINDOWS\System32\aclayer.dll, N/A>
[]
{141BE591-D8F3-4FC5-9AFE-404EFD719088} <C:\WINDOWS\system32\Fvtti.dll, N/A>
[MyIEHelper Class]

{16A770A0-0E87-4278-B748-2460D64A8386} <C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IEHelper\IEHelper_8888.dll, Microsoft Corporation>(注意,这个IEHelper_8888.dll可能需要单独处理下,参考下面这个链接:(类型差不多,!)
http://forum.ikaka.com/topic.asp?board=28&artid=8174324

[]
{19AACE88-33E2-4812-A096-36769082B0C7} <C:\WINDOWS\system32\Xmvdm.dll, N/A>
[Router Layer]
{5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} <C:\WINDOWS\System32\aclayer.dll, N/A>

另,查找下面文件(连同上帖中的文件,)并删除
[C:\WINDOWS\system32\xydll.dll] [N/A, N/A]
[C:\WINDOWS\system32\ztdll.dll] [N/A, N/A]
[C:\WINDOWS\235780M.BMP] [N/A, N/A]


以上操作最好在安全模式下操作!!!!!!

再一个,建议楼主卸载3721,一搜等(NM)软件
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT