瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 求助Trojan.DL.Agent.jcx，Trojan.DL.Agent.alu病毒问题，有日志

1   1  /  1  页   跳转页

求助Trojan.DL.Agent.jcx，Trojan.DL.Agent.alu病毒问题，有日志

收藏
dongdong3233223
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-07-03
  • 来自:
发表于： 2006-07-03 15:07 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

求助Trojan.DL.Agent.jcx，Trojan.DL.Agent.alu病毒问题，有日志

每次打开文件夹和ie都会出现杀灭病毒，怎么也杀不干净
2006-07-03,14:52:10

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <yassistse><"C:\Program Files\Yahoo!\Assistant\yAssistSe.exe">  [Yahoo!]
    <stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe>  [Tencent]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
    <{72A585A9-3F37-4D30-8DB7-E36695AF0EEF}><C:\WINDOWS\system32\Qffmy.dll>  []
    <{02F84021-D775-452E-963A-7B17FCDD6091}><C:\WINDOWS\system32\Fxak.dll>  []
    <{F7B4D186-BEBB-439B-9F3D-923D25DD6486}><C:\WINDOWS\system32\Thvy.dll>  []
    <{9982577B-F944-4FEB-A7FC-1C9B0FC0E0D9}><C:\WINDOWS\system32\Owyopu.dll>  []
    <{7384F382-21D2-44A1-8F7C-720724B6FA49}><C:\WINDOWS\system32\Qmpa.dll>  []
    <{62279A9C-ED4B-4121-968D-BBCA4F0AC25B}><C:\WINDOWS\system32\Augh.dll>  []
    <{F2F509D5-2E7D-407A-8B08-68594E18FF6F}><C:\WINDOWS\system32\Wojlw.dll>  []
    <{31779773-D8B1-49DC-A98A-A6AF0AEFDC8D}><C:\WINDOWS\system32\Ejvdjp.dll>  []
    <{BC68F5FF-4D9F-450B-87D4-6BF12CD2011B}><C:\WINDOWS\system32\Jmnugx.dll>  []
    <{0D4D21F9-B2FE-48F2-B82E-C03F45B64A17}><C:\WINDOWS\system32\Iuobjz.dll>  []
    <{7FBC5B13-2E76-4ED1-BADA-99BFB55F3DE0}><C:\WINDOWS\system32\Fdrxb.dll>  []
    <{8C1EB763-88B0-4535-8275-5CC5D307834C}><C:\WINDOWS\system32\Gyjnuc.dll>  []
    <{4EF56E27-AC4A-4FD9-BC23-16F1AC6747E7}><C:\WINDOWS\system32\Xmsrx.dll>  []
    <{0C5E7D93-358A-4BB9-B265-9F310E484082}><C:\WINDOWS\system32\Uaryu.dll>  []
    <{0661C93D-B6D5-464D-A386-F5191834F695}><C:\WINDOWS\system32\Eopga.dll>  []
    <{2D2EC256-23DE-4113-952B-373D823F6C49}><C:\WINDOWS\system32\Mlmgj.dll>  []
    <{0179998F-7393-4605-9EF6-C6B756AFE455}><C:\WINDOWS\system32\Glcd.dll>  []
    <{D3915CAD-1BDE-4C69-A237-2D6C0CEF2C1C}><C:\WINDOWS\system32\Kicfjj.dll>  []
    <{F9A73164-34C4-4C21-BE7D-C52B3C0F4812}><C:\WINDOWS\system32\Xztqq.dll>  []
    <{8EE2EF7A-7867-401C-AB3E-B50997C521CB}><C:\WINDOWS\system32\Qwwor.dll>  []
    <{2B7FEB56-35BE-4A58-8E7D-40BAC386568C}><C:\WINDOWS\system32\Swgnni.dll>  []
    <{794ABB96-F0AB-48A2-B578-BEEC3D7810DF}><C:\WINDOWS\system32\Oeqjgy.dll>  []
    <{41F80BB9-A616-4231-B555-8FAAFF6F90AD}><C:\WINDOWS\system32\Gzuq.dll>  []
    <{1C84F354-9F67-4C95-ACB6-FFC3BADA3118}><C:\WINDOWS\system32\Dasm.dll>  []
    <{6B37CDDC-3025-4BA7-B85D-18D07F1BA00F}><C:\WINDOWS\system32\Otumc.dll>  []
    <{09EC1AE9-53AE-4656-BCC1-07326426A654}><C:\WINDOWS\system32\Dmpos.dll>  []
    <{74F7BFBD-5312-46B3-B3A9-CCD232A89FC9}><C:\WINDOWS\system32\Qpubg.dll>  []
    <{2CFBEB95-5A53-4092-B4A0-39E634654CAB}><C:\WINDOWS\system32\Pelcuj.dll>  []
    <{7B2EAC32-39FB-426A-ABEB-ED7205BE7385}><C:\WINDOWS\system32\Scykyq.dll>  []
    <{979B1CFD-78C5-4C42-B4E3-B9ECA3FBF37D}><C:\WINDOWS\system32\Eqlw.dll>  []
    <{C24F90BA-1F86-402C-8C65-6769B46E05F1}><C:\WINDOWS\system32\Xqopb.dll>  []
    <{FAC62B4C-5F09-4D82-BDDD-3A2964B8E1BD}><C:\WINDOWS\system32\Sehoky.dll>  []
    <{2EF0E591-5EF5-408E-8CFD-8CB53C6450A2}><C:\WINDOWS\system32\Mnqvr.dll>  []
    <{16723D4B-A23D-4351-ACF3-8550B682BC23}><C:\WINDOWS\system32\Istz.dll>  []
    <{F738BD45-90A0-4579-9821-AF14F9638E9C}><C:\WINDOWS\system32\Feuj.dll>  []
    <{5EB88E2C-BE8C-46DC-AA50-5654F7E70113}><C:\WINDOWS\system32\Eljieq.dll>  []
    <{955D1E63-BE75-4504-9426-BA01707CBBDF}><C:\WINDOWS\system32\Ldfi.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <Vision><C:\PROGRA~1\MMSASS~1\Mmsass~1.dll>  []
    <stdup><C:\WINDOWS\System32\stdup.dll>  [MStdup Co Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <Apoint><; C:\Program Files\Apoint2K\Apoint.exe>  [Alps Electric Co., Ltd.]
    <BigDogPath><; C:\WINDOWS\VM_STI.EXE SOVIC PC Camera>  []
    <CplBCL50><; C:\Program Files\EzButton\CplBCL50.EXE>  [Dritek System Inc.]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><; C:\WINDOWS\system32\CTFMON.EXE>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <HotKeysCmds><; C:\WINDOWS\system32\hkcmd.exe>  [Intel Corporation]
    <HP Software Update><; "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe">  [Hewlett-Packard Company]
    <IgfxTray><; C:\WINDOWS\system32\igfxtray.exe>  [Intel Corporation]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [Microsoft Corporation]
    <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>  []
    <MoveSearch><; >  []
    <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PigUpdate><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~ex9.exe>  []
    <RichMedia><; C:\WINDOWS\system32\Rundll32.exe  "C:\PROGRA~1\HBClient\tbhelper.dll",WaitWindows>  []
    <Skype><; C:\Program Files\skype\Phone\Skype.exe>  []
    <SoundMan><; SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <stup.exe><; C:\PROGRA~1\TENCENT\Adplus\stup.exe>  [Tencent]
    <Update><; >  []
    <WebThunder><; C:\Program Files\Thunder Network\WebThunder\WebThunder.exe>  [深圳市迅雷网络技术有限公司]
最后编辑2006-07-03 15:11:55
分享到：
gototop
 
dongdong3233223
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-07-03
  • 来自:
发表于： 2006-07-03 15:08 | 只看楼主 短消息 资料
字号： 小 中 大 2楼


    <yassistse><; "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">  [Yahoo!]
    <YLive.exe><; C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>  [ ]

==================================
启动文件夹
[IE-BAR]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IE-BAR.lnk><N>

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A>
[Autodesk Licensing Service / Autodesk Licensing Service]
  <"C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe"><Autodesk, Inc.>
[QoS Service / BUZOR]
  <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[Pml Driver HPZ12 / Pml Driver HPZ12]
  <C:\WINDOWS\system32\HPZipm12.exe><HP>
[Rising Process Communication Center / RsCCenter]
  <C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"C:\Program Files\rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SmartLinkService / SLService]
  <slserv.exe><>
[Smart Card Event / Smart Card Event]
  <><N/A>
[Network System / Universal Disk Manager]
  <><N/A>

==================================
浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v14.dll, Thunder Networking Technologies,LTD>
[]
  {0179998F-7393-4605-9EF6-C6B756AFE455} <C:\WINDOWS\system32\Glcd.dll, N/A>
[internet explorer helper]
  {02C9B9AB-6372-46C5-B356-773FAF3B6B1E} <C:\WINDOWS\fonts\msshapi.dll, >
[]
  {02F84021-D775-452E-963A-7B17FCDD6091} <C:\WINDOWS\system32\Fxak.dll, N/A>
[]
  {0661C93D-B6D5-464D-A386-F5191834F695} <C:\WINDOWS\system32\Eopga.dll, N/A>
[]
  {09EC1AE9-53AE-4656-BCC1-07326426A654} <C:\WINDOWS\system32\Dmpos.dll, N/A>
[]
  {0C5E7D93-358A-4BB9-B265-9F310E484082} <C:\WINDOWS\system32\Uaryu.dll, N/A>
[ChajianHelper Class]
  {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} <C:\WINDOWS\system32\SYSREA~1.DLL, Kmedia>
[]
  {0D4D21F9-B2FE-48F2-B82E-C03F45B64A17} <C:\WINDOWS\system32\Iuobjz.dll, N/A>
[wmpdrm]
  {0E674588-66B7-4E19-9D0E-2053B800F69F} <, N/A>
[]
  {16723D4B-A23D-4351-ACF3-8550B682BC23} <C:\WINDOWS\system32\Istz.dll, N/A>
[BgfLaiwt Class]
  {17DA7993-2D22-EDAD-494E-6E21AA64BFEB} <C:\WINDOWS\DOWNLO~1\qnjm.dll, dbbfvsoft>
[]
  {1C84F354-9F67-4C95-ACB6-FFC3BADA3118} <C:\WINDOWS\system32\Dasm.dll, N/A>
[Adobe-Plugins Manager]
  {2AFA7CEC-26D9-4256-AF57-497A13180BA5} <C:\WINDOWS\System32\Agm.dll, AdoBeSoft Co.>
[]
  {2B7FEB56-35BE-4A58-8E7D-40BAC386568C} <C:\WINDOWS\system32\Swgnni.dll, N/A>
[]
  {2CFBEB95-5A53-4092-B4A0-39E634654CAB} <C:\WINDOWS\system32\Pelcuj.dll, N/A>
[]
  {2D2EC256-23DE-4113-952B-373D823F6C49} <C:\WINDOWS\system32\Mlmgj.dll, N/A>
[BrowserHelper Class]
  {2D99E8F4-56B7-457B-9A92-61B5D247D263} <C:\WINDOWS\system32\WinDefendor.dll, N/A>
[]
  {2EF0E591-5EF5-408E-8CFD-8CB53C6450A2} <C:\WINDOWS\system32\Mnqvr.dll, N/A>
[]
  {31779773-D8B1-49DC-A98A-A6AF0AEFDC8D} <C:\WINDOWS\system32\Ejvdjp.dll, N/A>
[Yahoo!Photo]
  {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\Program Files\Yahoo!\Assistant\Assist\yAngling.dll, Yahoo.>
[UouYvtgp Class]
  {3B430356-98F9-A036-3F18-0E8D22B023BC} <C:\WINDOWS\DOWNLO~1\jkvehod.dll, ujrlysoft>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[]
  {41F80BB9-A616-4231-B555-8FAAFF6F90AD} <C:\WINDOWS\system32\Gzuq.dll, N/A>
[]
  {4EF56E27-AC4A-4FD9-BC23-16F1AC6747E7} <C:\WINDOWS\system32\Xmsrx.dll, N/A>
[NetAccelerate Class]
  {5673A7C0-95CC-4646-BB07-3BD71234CEF9} <, N/A>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC>
[IEYHlprObj Class]
  {5C761D09-377E-4EAC-ADA1-C9CDE39B5674} <C:\WINDOWS\IEYHelper.dll, Eastday Corporation>
[TalYarfn Class]
  {5CEC2D98-80B9-7101-69B0-3D106AB9989A} <C:\WINDOWS\DOWNLO~1\juajdwh.dll, eruyxsoft>
[]
  {5EB88E2C-BE8C-46DC-AA50-5654F7E70113} <C:\WINDOWS\system32\Eljieq.dll, N/A>
[]
  {62279A9C-ED4B-4121-968D-BBCA4F0AC25B} <C:\WINDOWS\system32\Augh.dll, N/A>
[DragSearch BHO]
  {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[ActiveBHO Class]
  {63C55A7F-6E29-8D4F-5C76-4F850F28D13A} <C:\Progra~1\DoDoorRSSFinder\ActiveBandObject.dll, >
[MMSAssist BHO]
  {6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[]
  {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\DOCUME~1\yyyyyy\LOCALS~1\Temp\SSLive1.dll, TENCENT>
[stdup]
  {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} <C:\WINDOWS\System32\stdup.dll, MStdup Co Ltd.>
[]
  {6B37CDDC-3025-4BA7-B85D-18D07F1BA00F} <C:\WINDOWS\system32\Otumc.dll, N/A>
[MSHlper Class]
  {721E6521-4CAD-4A8D-A7F1-4E230B31EF19} <C:\WINDOWS\system32\MSHLP.DLL, N/A>
[]
  {72A585A9-3F37-4D30-8DB7-E36695AF0EEF} <C:\WINDOWS\system32\Qffmy.dll, N/A>
[]
  {7384F382-21D2-44A1-8F7C-720724B6FA49} <C:\WINDOWS\system32\Qmpa.dll, N/A>
[]
  {74F7BFBD-5312-46B3-B3A9-CCD232A89FC9} <C:\WINDOWS\system32\Qpubg.dll, N/A>
[]
  {794ABB96-F0AB-48A2-B578-BEEC3D7810DF} <C:\WINDOWS\system32\Oeqjgy.dll, N/A>
[]
  {7B2EAC32-39FB-426A-ABEB-ED7205BE7385} <C:\WINDOWS\system32\Scykyq.dll, N/A>
[]
  {7FBC5B13-2E76-4ED1-BADA-99BFB55F3DE0} <C:\WINDOWS\system32\Fdrxb.dll, N/A>
[]
  {8C1EB763-88B0-4535-8275-5CC5D307834C} <C:\WINDOWS\system32\Gyjnuc.dll, N/A>
[]
  {8EE2EF7A-7867-401C-AB3E-B50997C521CB} <C:\WINDOWS\system32\Qwwor.dll, N/A>
[]
  {955D1E63-BE75-4504-9426-BA01707CBBDF} <C:\WINDOWS\system32\Ldfi.dll, N/A>
[]
  {979B1CFD-78C5-4C42-B4E3-B9ECA3FBF37D} <C:\WINDOWS\system32\Eqlw.dll, N/A>
[]
  {9982577B-F944-4FEB-A7FC-1C9B0FC0E0D9} <C:\WINDOWS\system32\Owyopu.dll, N/A>
[estAliveObj Class]
  {A2B7A0F0-B697-4A71-8D91-43443F57D7BB} <C:\WINDOWS\estAlive.dll, Eastday Corporation>
[Google Toolbar Helper]
  {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[IEHlprObj Class]
  {BA623AA0-9A82-4d0c-944C-0228CEA17780} <C:\Progra~1\NetMeeting\netinit.dll, Microsoft Corporation>
[]
  {BC68F5FF-4D9F-450B-87D4-6BF12CD2011B} <C:\WINDOWS\system32\Jmnugx.dll, N/A>
[]
  {C24F90BA-1F86-402C-8C65-6769B46E05F1} <C:\WINDOWS\system32\Xqopb.dll, N/A>
[]
  {D3915CAD-1BDE-4C69-A237-2D6C0CEF2C1C} <C:\WINDOWS\system32\Kicfjj.dll, N/A>
[Letscool System Helper]
  {F0C15012-7DBD-4068-95A2-0A82DB03AC35} <C:\WINDOWS\system32\CoolBho.dll, LETSCOOL Network Technology>
[]
  {F2F509D5-2E7D-407A-8B08-68594E18FF6F} <C:\WINDOWS\system32\Wojlw.dll, N/A>
[WMHlprObj Class]
  {F5824EFB-728A-4726-A5A5-85A68B20EDC3} <C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll, CNNIC>
[IEHlprObj Class]
  {F5B3ECED-9BF3-4f7e-882B-A6E75343C499} <C:\Progra~1\Messenger\netshow.dll, N/A>
[iehelper]
  {F651FCAA-F826-4922-8990-C6F99CC67AFC} <C:\WINDOWS\Win32ef.dll, N/A>
[]
  {F738BD45-90A0-4579-9821-AF14F9638E9C} <C:\WINDOWS\system32\Feuj.dll, N/A>
[internet explorer helper]
  {F7911E65-B01C-4A58-AEC7-53085ECA70A5} <C:\WINDOWS\system32\mshlink.dll, >
[]
  {F7B4D186-BEBB-439B-9F3D-923D25DD6486} <C:\WINDOWS\system32\Thvy.dll, N/A>
[]
  {F9A73164-34C4-4C21-BE7D-C52B3C0F4812} <C:\WINDOWS\system32\Xztqq.dll, N/A>
[]
  {FAC62B4C-5F09-4D82-BDDD-3A2964B8E1BD} <C:\WINDOWS\system32\Sehoky.dll, N/A>
[google bar]
  {FAD11F89-F11E-4A15-92FB-6F0EDC4C8D59} <C:\WINDOWS\vwwreg.dll, N/A>
[Yahoo 1G电邮]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[雅虎助手]
  {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[MMSAssistMenu]
  {6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[启动Web迅雷]
  {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[比较购物搜索(&C)]
  {A36ABCF0-1C8F-46e7-A67C-0489DC21B9CC} <C:\WINDOWS\YayaBands.dll, Eastday Corporation>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A>
[&Google]
  {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
gototop
 
710207
头像
叱咤花甲狮
  • 帖子:2341
  • 注册: 2006-02-06
  • 来自:
发表于： 2006-07-03 15:11 | 短消息 资料
字号： 小 中 大 3楼

流氓很多,下载超级兔子,用清理网卸去流氓软件......
gototop
 
dongdong3233223
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-07-03
  • 来自:
发表于： 2006-07-03 15:12 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

【回复“dongdong3233223”的帖子】
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[IE标准栏]
  {954F618B-0DEC-4D1A-9317-E0FC96F87865} <C:\WINDOWS\system32\amstreamxb.dll, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[pCastPanel Class]
  {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} <C:\WINDOWS\Downloaded Program Files\pCastCtl.dll, >
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v14.dll, Thunder Networking Technologies,LTD>
[]
  {0179998F-7393-4605-9EF6-C6B756AFE455} <C:\WINDOWS\system32\Glcd.dll, N/A>
[internet explorer helper]
  {02C9B9AB-6372-46C5-B356-773FAF3B6B1E} <C:\WINDOWS\fonts\msshapi.dll, >
[]
  {02F84021-D775-452E-963A-7B17FCDD6091} <C:\WINDOWS\system32\Fxak.dll, N/A>
[]
  {0661C93D-B6D5-464D-A386-F5191834F695} <C:\WINDOWS\system32\Eopga.dll, N/A>
[MonitorURL Class]
  {08A312BB-5409-49FC-9347-54BB7D069AC6} <, N/A>
[]
  {09EC1AE9-53AE-4656-BCC1-07326426A654} <C:\WINDOWS\system32\Dmpos.dll, N/A>
[]
  {0C5E7D93-358A-4BB9-B265-9F310E484082} <C:\WINDOWS\system32\Uaryu.dll, N/A>
[ChajianHelper Class]
  {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} <C:\WINDOWS\system32\SYSREA~1.DLL, Kmedia>
[]
  {0D4D21F9-B2FE-48F2-B82E-C03F45B64A17} <C:\WINDOWS\system32\Iuobjz.dll, N/A>
[wmpdrm]
  {0E674588-66B7-4E19-9D0E-2053B800F69F} <, N/A>
[]
  {16723D4B-A23D-4351-ACF3-8550B682BC23} <C:\WINDOWS\system32\Istz.dll, N/A>
[BgfLaiwt Class]
  {17DA7993-2D22-EDAD-494E-6E21AA64BFEB} <C:\WINDOWS\DOWNLO~1\qnjm.dll, dbbfvsoft>
[]
  {1C84F354-9F67-4C95-ACB6-FFC3BADA3118} <C:\WINDOWS\system32\Dasm.dll, N/A>
[&Google]
  {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[Adobe-Plugins Manager]
  {2AFA7CEC-26D9-4256-AF57-497A13180BA5} <C:\WINDOWS\System32\Agm.dll, AdoBeSoft Co.>
[]
  {2B7FEB56-35BE-4A58-8E7D-40BAC386568C} <C:\WINDOWS\system32\Swgnni.dll, N/A>
[]
  {2CFBEB95-5A53-4092-B4A0-39E634654CAB} <C:\WINDOWS\system32\Pelcuj.dll, N/A>
[]
  {2D2EC256-23DE-4113-952B-373D823F6C49} <C:\WINDOWS\system32\Mlmgj.dll, N/A>
[BrowserHelper Class]
  {2D99E8F4-56B7-457B-9A92-61B5D247D263} <C:\WINDOWS\system32\WinDefendor.dll, N/A>
[]
  {2EF0E591-5EF5-408E-8CFD-8CB53C6450A2} <C:\WINDOWS\system32\Mnqvr.dll, N/A>
[]
  {31779773-D8B1-49DC-A98A-A6AF0AEFDC8D} <C:\WINDOWS\system32\Ejvdjp.dll, N/A>
[Yahoo!Photo]
  {33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\Program Files\Yahoo!\Assistant\Assist\yAngling.dll, Yahoo.>
[UouYvtgp Class]
  {3B430356-98F9-A036-3F18-0E8D22B023BC} <C:\WINDOWS\DOWNLO~1\jkvehod.dll, ujrlysoft>
[雅虎助手]
  {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[]
  {41F80BB9-A616-4231-B555-8FAAFF6F90AD} <C:\WINDOWS\system32\Gzuq.dll, N/A>
[]
  {4EF56E27-AC4A-4FD9-BC23-16F1AC6747E7} <C:\WINDOWS\system32\Xmsrx.dll, N/A>
[NetAccelerate Class]
  {5673A7C0-95CC-4646-BB07-3BD71234CEF9} <, N/A>
[Yahoo!Live]
  {57421194-58FB-49AE-9B4F-FD48869B9AD4} <C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll, >
[IEYHlprObj Class]
  {5C761D09-377E-4EAC-ADA1-C9CDE39B5674} <C:\WINDOWS\IEYHelper.dll, Eastday Corporation>
[TalYarfn Class]
  {5CEC2D98-80B9-7101-69B0-3D106AB9989A} <C:\WINDOWS\DOWNLO~1\juajdwh.dll, eruyxsoft>
[]
  {5EB88E2C-BE8C-46DC-AA50-5654F7E70113} <C:\WINDOWS\system32\Eljieq.dll, N/A>
[]
  {62279A9C-ED4B-4121-968D-BBCA4F0AC25B} <C:\WINDOWS\system32\Augh.dll, N/A>
[DragSearch BHO]
  {62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[ActiveBHO Class]
  {63C55A7F-6E29-8D4F-5C76-4F850F28D13A} <C:\Progra~1\DoDoorRSSFinder\ActiveBandObject.dll, >
[MMSAssist BHO]
  {6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[]
  {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\DOCUME~1\yyyyyy\LOCALS~1\Temp\SSLive1.dll, TENCENT>
[stdup]
  {6A512BF7-EC78-4E8D-9841-6C02E8FA9838} <C:\WINDOWS\System32\stdup.dll, MStdup Co Ltd.>
[]
  {6B37CDDC-3025-4BA7-B85D-18D07F1BA00F} <C:\WINDOWS\system32\Otumc.dll, N/A>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[MSHlper Class]
  {721E6521-4CAD-4A8D-A7F1-4E230B31EF19} <C:\WINDOWS\system32\MSHLP.DLL, N/A>
[]
  {72A585A9-3F37-4D30-8DB7-E36695AF0EEF} <C:\WINDOWS\system32\Qffmy.dll, N/A>
[]
  {7384F382-21D2-44A1-8F7C-720724B6FA49} <C:\WINDOWS\system32\Qmpa.dll, N/A>
[]
  {74F7BFBD-5312-46B3-B3A9-CCD232A89FC9} <C:\WINDOWS\system32\Qpubg.dll, N/A>
[]
  {794ABB96-F0AB-48A2-B578-BEEC3D7810DF} <C:\WINDOWS\system32\Oeqjgy.dll, N/A>
[]
  {7B2EAC32-39FB-426A-ABEB-ED7205BE7385} <C:\WINDOWS\system32\Scykyq.dll, N/A>
[]
  {7FBC5B13-2E76-4ED1-BADA-99BFB55F3DE0} <C:\WINDOWS\system32\Fdrxb.dll, N/A>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[]
  {8C1EB763-88B0-4535-8275-5CC5D307834C} <C:\WINDOWS\system32\Gyjnuc.dll, N/A>
[]
  {8EE2EF7A-7867-401C-AB3E-B50997C521CB} <C:\WINDOWS\system32\Qwwor.dll, N/A>
[IE标准栏]
  {954F618B-0DEC-4D1A-9317-E0FC96F87865} <C:\WINDOWS\system32\amstreamxb.dll, >
[]
  {955D1E63-BE75-4504-9426-BA01707CBBDF} <C:\WINDOWS\system32\Ldfi.dll, N/A>
[]
  {979B1CFD-78C5-4C42-B4E3-B9ECA3FBF37D} <C:\WINDOWS\system32\Eqlw.dll, N/A>
[]
  {9982577B-F944-4FEB-A7FC-1C9B0FC0E0D9} <C:\WINDOWS\system32\Owyopu.dll, N/A>
[estAliveObj Class]
  {A2B7A0F0-B697-4A71-8D91-43443F57D7BB} <C:\WINDOWS\estAlive.dll, Eastday Corporation>
[Google Toolbar Helper]
  {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[IEHlprObj Class]
  {BA623AA0-9A82-4D0C-944C-0228CEA17780} <C:\Progra~1\NetMeeting\netinit.dll, Microsoft Corporation>
[]
  {BC68F5FF-4D9F-450B-87D4-6BF12CD2011B} <C:\WINDOWS\system32\Jmnugx.dll, N/A>
[]
  {C24F90BA-1F86-402C-8C65-6769B46E05F1} <C:\WINDOWS\system32\Xqopb.dll, N/A>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[]
  {D3915CAD-1BDE-4C69-A237-2D6C0CEF2C1C} <C:\WINDOWS\system32\Kicfjj.dll, N/A>
[Letscool System Helper]
  {F0C15012-7DBD-4068-95A2-0A82DB03AC35} <C:\WINDOWS\system32\CoolBho.dll, LETSCOOL Network Technology>
[]
  {F2F509D5-2E7D-407A-8B08-68594E18FF6F} <C:\WINDOWS\system32\Wojlw.dll, N/A>
[IEHlprObj Class]
  {F5B3ECED-9BF3-4F7E-882B-A6E75343C499} <C:\Progra~1\Messenger\netshow.dll, N/A>
[iehelper]
  {F651FCAA-F826-4922-8990-C6F99CC67AFC} <C:\WINDOWS\Win32ef.dll, N/A>
[]
  {F738BD45-90A0-4579-9821-AF14F9638E9C} <C:\WINDOWS\system32\Feuj.dll, N/A>
[internet explorer helper]
  {F7911E65-B01C-4A58-AEC7-53085ECA70A5} <C:\WINDOWS\system32\mshlink.dll, >
[]
  {F7B4D186-BEBB-439B-9F3D-923D25DD6486} <C:\WINDOWS\system32\Thvy.dll, N/A>
[]
  {F9A73164-34C4-4C21-BE7D-C52B3C0F4812} <C:\WINDOWS\system32\Xztqq.dll, N/A>
[]
  {FAC62B4C-5F09-4D82-BDDD-3A2964B8E1BD} <C:\WINDOWS\system32\Sehoky.dll, N/A>
[google bar]
  {FAD11F89-F11E-4A15-92FB-6F0EDC4C8D59} <C:\WINDOWS\vwwreg.dll, N/A>
gototop
 
dongdong3233223
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-07-03
  • 来自:
发表于： 2006-07-03 15:19 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT