瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 每个盘都有这几个文件:RECYCLER,System Volume Information

12   2  /  2  页   跳转

每个盘都有这几个文件:RECYCLER,System Volume Information

RECYCLER System Volume Information
这个是正常系统文件夹
gototop
 

<Windows木马防火墙><; C:\Program Files\ftc\Trojanwall.exe> [N/A]
<askasdkcl3><C:\WINDOWS\system32\faskflxld3.exe> [N/A]
<asfkafsk4><C:\WINDOWS\system32\fdaolfdos4.exe> [N/A]
<xcxdsaa7><C:\WINDOWS\system32\slcskxsdl7.exe> [N/A]
<xzkadsfk10><C:\WINDOWS\system32\afslkfasl10.exe> [N/A]
<faslkakj11><C:\WINDOWS\system32\kjgagklj11.exe> [N/A]
<gadkgak12><C:\WINDOWS\system32\fsafsakx12.exe> [N/A]
<asdsaxcxz13><C:\WINDOWS\system32\dasxcsx13.exe> [N/A]
<dsadlsa14><C:\WINDOWS\system32\dsakfsak14.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe]
<IFEO[cmd.exe]><setuprs1.PIF> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe]
<IFEO[msconfig.exe]><2581.PIF> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe]
<IFEO[regedit.exe]><setuprs1.PIF> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe]
<IFEO[regedt32.exe]><setuprs1.PIF> [N/A]
看了一下注册表启动项,这些都有问题
gototop
 


http://download.kztechs.com/files/sreng2.zip 下载System Repair Engineer
1 解压缩sreng2.zip
2 运行SREng.exe
3 智能扫描=》扫描=》保存报告
4 把日志中的报告完整拷贝贴上来,不要修改

gototop
 

【回复“xcggdfvfdtfdvg”的帖子】
晕……人家都扫完了呀= =||
gototop
 

有映象劫持,小心啊 ~
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT