瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 没办法了~~请帮忙看下Trojan.DL.Agent.dlo 怎么杀~~谢谢

1   1  /  1  页   跳转

没办法了~~请帮忙看下Trojan.DL.Agent.dlo 怎么杀~~谢谢

没办法了~~请帮忙看下Trojan.DL.Agent.dlo 怎么杀~~谢谢

这种病毒怎么防范???

病毒名 Trojan.DL.Agent.dlo
路径  C:\WINDOWS\System32\DLMon.dll

使用AUTORUNS

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run           
+ RavMon    RavMon Rising realtime monitor     Beijing Rising Technology Co., Ltd.    c:\program files\rising\rav\ravmon.exe
+ RavTimer    RavTimer    Beijing Rising Technology Co., Ltd.    c:\program files\rising\rav\ravtimer.exe
+ thunder_mini    三代科技 版权所有 (C) 2004 - 2005    深圳市三代科技开发有限公司    c:\program files\sandai\thundermini\thundermini.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad           
+ SysTrays            c:\windows\system32\dlmain.dll
+ SysTrays            c:\windows\system32\dlmain.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved           
+ RISING    Rising Shell Ext Module    Beijing Rising Technology Co., Ltd.    c:\windows\system32\ravext.dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved           
+ 金山毒霸            File not found: D:\KAV2003\KAVEXT.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects           
+ CNNIC_IDN            File not found: C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll
+ DDDMon Class            File not found: C:\Program Files\DuDu\DddClient\dddiemon.dll
+ DragSearch BHO    DragSearch        c:\program files\yisou\yisoub.dll
+ Google Toolbar Helper    Google IE Client Toolbar    Google Inc.    c:\program files\google\googletoolbar1.dll
+ IeCatch2 Class    jccatch Module    Amaze Soft    d:\flashget\jccatch.dll
+ QQBrowserHelperObject Class    QQIEHelper Module    深圳市腾讯计算机系统有限公司    d:\tencent\qq\qqiehelper.dll
+ ThunderIEHelper Class    xunleibho Module        c:\windows\system32\thunderbho.dll
+ 上网助手            File not found: C:\Program Files\3721\Assist\asbar.dll
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks           
+ coolbar            File not found: C:\Program Files\3721\Assist\asbar.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar           
+ FlashGet Bar    FlashGet IE Bar    Amaze Soft    d:\flashget\fgiebar.dll
+ 上网助手            File not found: C:\Program Files\3721\Assist\asbar.dll
+ 一搜            File not found: C:\Program Files\yisou\yisou.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions           
+ &FlashGet    FlashGet    Amaze Soft    d:\flashget\flashget.exe
+ 播霸电视            File not found: http://itv.mop.com
+ 浩方对战平台    浩方对战平台    上海浩方在线信息技术有限公司    d:\浩方对战平台\gameclient.exe
+ 腾讯QQ    QQ    TENCENT    d:\tencent\qq\qq.exe
+ 易趣购物            File not found: http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-209?cn=song;icon;hp&mpro=http://www.ebay.com.cn
HKLM\System\CurrentControlSet\Services           
+ Ati HotKey Poller    ATI External Event Utility EXE Module    ATI Technologies Inc.    c:\windows\system32\ati2evxx.exe
+ ATI Smart    ATI Smart        c:\windows\system32\ati2sgag.exe
+ RfwService    Rising Personal Firewall Service    Beijing Rising Technology Corporation Limited    d:\rising\rfw\rfwsrv.exe
+ RsCCenter    CCenter    rising    c:\program files\rising\rav\ccenter.exe
+ RsRavMon    RavMon    Beijing Rising Technology Co., Ltd.    c:\program files\rising\rav\ravmond.exe
HKLM\System\CurrentControlSet\Services           
+ ALCXWDM    Realtek AC'97 Audio Driver (WDM)    Realtek Semiconductor Corp.    c:\windows\system32\drivers\alcxwdm.sys
+ AN983    ADMtek AN983/AN985/ADM951X NDIS5 Driver    ADMtek Incorporated.    c:\windows\system32\drivers\an983.sys
+ AntiyNF            c:\windows\system32\drivers\antiynf.sys
+ ati2mtag    ATI Radeon WindowsNT Miniport Driver    ATI Technologies Inc.    c:\windows\system32\drivers\ati2mtag.sys
+ ATITool    ATITool Low-Level Driver    W1zzard    c:\windows\system32\drivers\atitool.sys
+ BaseTDI    basetdi    Rising    c:\windows\system32\drivers\basetdi.sys
+ Cdsys            File not found: C:\WINDOWS\System32\cdcd.sys
+ d347bus    PnP BIOS Extension         c:\windows\system32\drivers\d347bus.sys
+ d347prt    SCSI miniport         c:\windows\system32\drivers\d347prt.sys
+ ExpScaner    ExpScan.sys        c:\program files\rising\rav\expscan.sys
+ FwDrv    nt_fwdrv    Rising    d:\rising\rfw\fwdrv.sys
+ GMSIPCI            File not found: H:\INSTALL\GMSIPCI.SYS
+ HookCont    TDI HOOK Driver    Rising tech Co. ltd    c:\program files\rising\rav\hookcont.sys
+ HookReg            c:\program files\rising\rav\hookreg.sys
+ HookSys        瑞星    c:\program files\rising\rav\hooksys.sys
+ kmsinput            c:\windows\system32\drivers\kmsinput.sys
+ New0            File not found: C:\WINDOWS\System32\new.sys
+ npkcrypt    nProtect KeyCrypt Driver    INCA Internet Co., Ltd.    d:\tencent\qq\npkcrypt.sys
+ prodrv06    StarForce Protection Environment Driver    Protection Technology    c:\windows\system32\drivers\prodrv06.sys
+ prohlp02    StarForce Protection Helper Driver    Protection Technology    c:\windows\system32\drivers\prohlp02.sys
+ prosync1    StarForce Protection Synchronization Driver    Protection Technology    c:\windows\system32\drivers\prosync1.sys
+ Ptilink    Direct Parallel Link Driver    Parallel Technologies, Inc.    c:\windows\system32\drivers\ptilink.sys
+ Secdrv    SafeDisc driver    Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.    c:\windows\system32\drivers\secdrv.sys
+ sfhlp01    StarForce Protection Helper Driver    Protection Technology    c:\windows\system32\drivers\sfhlp01.sys
+ SVKP    SVKP driver for NT    AntiCracking    c:\windows\system32\svkp.sys
+ XPROTECTOR            File not found: C:\WINDOWS\system32\drivers\Xprotector.sys
+ ZSMC302    Video streaming and Capture Device Driver    VM    c:\windows\system32\drivers\usbvm31b.sys
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls           
+ APIHookDll.dll            File not found: APIHookDll.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify           
+ AtiExtEvent    ATI External Event Utility DLL Module    ATI Technologies Inc.    c:\windows\system32\ati2evxx.dll
最后编辑2005-12-14 17:36:57
分享到:
gototop
 

帮我看下怎么查杀呀~~谢谢了
gototop
 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
+ SysTrays c:\windows\system32\dlmain.dll
+ SysTrays c:\windows\system32\dlmain.dll

+ SVKP SVKP driver for NT AntiCracking c:\windows\system32\svkp.sys

删除启动项
重启
删除c:\windows\system32\dlmain.dll试试
gototop
 

谢谢BlackStone
只是还想问问~怎么才能杀掉啊~~
不然每次都中。。。不是每次来问。。好麻烦你啊~
gototop
 

引用:
【scoutd的贴子】谢谢BlackStone
只是还想问问~怎么才能杀掉啊~~
不然每次都中。。。不是每次来问。。好麻烦你啊~
...........................


那就得多学习,多看别人解决问题得帖子,多总结
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT