求助病毒rootkit.Adprot.g的解决办法 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛求助病毒rootkit.Adprot.g的解决办法

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

2 / 2 页

跳转页

求助病毒rootkit.Adprot.g的解决办法

ZHANGLMY 初生襁褓狮帖子:16 注册: 2006-10-17 来自:	发表于： 2006-11-21 16:29 \| 只看楼主短消息资料字号：小中大 11楼 [PID: 1912][C:\Program Files\SmartBackup\SmartAutorun.exe] [Beijing Thinker Ltd., 1, 0, 0, 1] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [PID: 1920][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [C:\WINDOWS\system32\VM31bPrp.Ax] [VM, 4.2.711.31] [PID: 1116][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [PID: 200][C:\WINDOWS\system32\FSTMON_N.EXE] [Founder Technology Group Corp., 1, 1, 1427, 0] [C:\WINDOWS\system32\FSPOOL_N.dll] [Zenographics, Inc., 5, 51, 709, 717] [C:\WINDOWS\system32\FSTMON_N.dll] [Founder Technology Group Corp., 1, 1, 1427, 0] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [PID: 212][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 39] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [PID: 828][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [PID: 2908][C:\Program Files\Tencent\qq\QQ.exe] [TENCENT, 0, 0, 0, 0] [C:\Program Files\Tencent\qq\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\QQHelperDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 160] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [C:\Program Files\Tencent\qq\QQAPI.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\TIMProxy.dll] [tencent, 0, 3, 2, 4] [C:\Program Files\Tencent\qq\LoginCtrl.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 3, 2, 1] [C:\Program Files\Tencent\qq\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [C:\Program Files\Tencent\qq\QQRes.dll] [tencent, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\QQMainFrame.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\CQQApplication.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\NewSkin.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\HostingMgr.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\CameraDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\MailSummary.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\QQSpace.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\QQGroupMng.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\GroupLive.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\QQSysMsgMng.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\QQPet.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\UserDefinedHead.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\QQPlugin.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\QQConfigPlugin.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\QRingMng.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\PhoneAPI.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [C:\Program Files\Tencent\qq\OEMApplication.dll] [, 1, 0, 0, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Tencent\qq\LongConnection.dll] [tencent, 5, 0, 200, 160] [C:\Program Files\Tencent\qq\QQAvatar.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\FlashAvatarDll.dll] [, 1, 4, 0, 1] [C:\Program Files\Tencent\qq\BQQApplication.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\QQAllInOne.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\SCCore.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200] [C:\WINDOWS\downlo~1\CnsHook.dll] [北京三七二一科技有限公司, 1, 0, 4, 2] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21] [C:\PROGRA~1\Yahoo!\Assistant\yClickOn.dll] [YAHOO Corporation Limited, 3, 0, 1, 1002] [C:\Program Files\Tencent\qq\CommercesMng.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\qq\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [C:\WINDOWS\system32\UNISPIM.IME] [北京清华紫光软件股份有限公司, 3.0.0.3045] [C:\WINDOWS\system32\upengine.dll] [北京清华紫光软件股份有限公司, 3.0.0.3045] [C:\Program Files\Tencent\qq\QQSceneMng.dll] [N/A, N/A] [C:\Program Files\Tencent\qq\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 0, 6, 60] [PID: 3268][C:\Program Files\Tencent\qq\TIMPlatform.exe] [tencent, 0, 3, 1, 8] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [C:\Program Files\Tencent\qq\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 4072][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll] [Yahoo! China, 3, 0, 0, 1000] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\3721\scrblock.dll] [3721, 1, 0, 1, 1000] [C:\PROGRA~1\3721\alrex.dll] [, 1, 0, 1, 1001] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [C:\WINDOWS\downlo~1\CnsHint.dll] [3721, 1, 0, 1, 1] [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] [yahoo! china, 3, 4, 8, 1099] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] [Yahoo! China, 3, 0, 1, 1010] [C:\PROGRA~1\3721\autolive.dll] [, 1, 1, 8, 1327] [C:\WINDOWS\downlo~1\cnsplus.dll] [3721, 1, 0, 0, 2] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll] [yahoo! china, 3, 2, 3, 1075] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ysearch.dll] [Yahoo! China, 3, 1, 0, 1010] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasnoad.dll] [yahoo! china, 3, 0, 2, 1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yzsNetProto.dll] [Yahoo! China, 3, 0, 1, 1002] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll] [Yahoo! China, 3, 0, 4, 1006] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll] [Yahoo! China, 3, 0, 2, 1003] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yaswiper.dll] [Yahoo! China, 3, 0, 2, 1002] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasiesec.dll] [Yahoo! China, 3, 0, 3, 1003] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YSETTI~2.DLL] [yahoo! china, 3, 0, 8, 1015] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ymailp.dll] [Yahoo! China, 3, 0, 2, 1008] [C:\WINDOWS\downlo~1\CnsHook.dll] [北京三七二一科技有限公司, 1, 0, 4, 2] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21] [C:\PROGRA~1\Yahoo!\Assistant\yClickOn.dll] [YAHOO Corporation Limited, 3, 0, 1, 1002] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll] [yahoo! china, 3, 0, 3, 1004] [C:\Program Files\Tencent\qq\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~2.DLL] [yahoo! china, 3, 0, 1, 1001] [C:\PROGRA~1\vision\vision.dll] [, 1, 2, 0, 7] [C:\PROGRA~1\vision\alvsn.dll] [N/A, 1, 0, 0, 4] [C:\PROGRA~1\FlashGet\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yassist.dll] [Yahoo! China, 3, 1, 1, 1016] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\downlo~1\CnsMinIO.dll] [北京三七二一科技有限公司, 1, 0, 3, 5] [C:\WINDOWS\downlo~1\cnsio.dll] [北京三七二一科技有限公司, 1, 0, 2, 6] [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll] [Yahoo! China, 3, 0, 1, 1002] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yoptimum.dll] [Yahoo! China, 3, 0, 1, 1004] [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll] [Yahoo! China, 3, 0, 7, 1010] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll] [Yahoo! China, 3, 0, 7, 1010] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll] [3721.com, 2, 1, 1, 87] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yxpstyle.dll] [Yahoo! China, 3, 0, 0, 1000] [C:\WINDOWS\system32\UNISPIM.IME] [北京清华紫光软件股份有限公司, 3.0.0.3045] [C:\WINDOWS\system32\upengine.dll] [北京清华紫光软件股份有限公司, 3.0.0.3045]
ZHANGLMY 初生襁褓狮帖子:16 注册: 2006-10-17 来自:

ZHANGLMY 初生襁褓狮帖子:16 注册: 2006-10-17 来自:	发表于： 2006-11-21 16:29 \| 只看楼主短消息资料字号：小中大 12楼 [PID: 2268][C:\Program Files\FlashGet\flashget.exe] [Amaze Soft, 1, 6, 5, 0] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [PID: 2936][C:\Program Files\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [PID: 3032][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3424] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] [PID: 3512][E:\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 3, 1021] [C:\PROGRA~1\3721\helper.dll] [, 1, 1, 1, 1327] [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007] [C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 8] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ==================================
ZHANGLMY 初生襁褓狮帖子:16 注册: 2006-10-17 来自:

ZHANGLMY 初生襁褓狮帖子:16 注册: 2006-10-17 来自:	发表于： 2006-11-21 16:31 \| 只看楼主短消息资料字号：小中大 13楼终于贴完了，有劳楼上的了，也请版主来看看，中这病毒的人多着呢
ZHANGLMY 初生襁褓狮帖子:16 注册: 2006-10-17 来自:

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2006-11-21 17:09 \| 短消息资料字号：小中大 14楼找到0002dc2.sys压缩发到我邮箱mizukiuka@163.com
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

ZHANGLMY 初生襁褓狮帖子:16 注册: 2006-10-17 来自:	发表于： 2006-11-22 19:10 \| 只看楼主短消息资料字号：小中大 15楼文件压缩不了啊，好像好多电脑都是这病毒，瑞星的专家怎么还没有想出招来呀，急切盼望ing
ZHANGLMY 初生襁褓狮帖子:16 注册: 2006-10-17 来自:

<<上一主题|下一主题>>

12

2 / 2 页

跳转页

页面顶部

Powered by Discuz!NT