【求助】帮忙看看日志 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【求助】帮忙看看日志

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

【求助】帮忙看看日志

メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:	发表于： 2006-07-26 01:23 \| 只看楼主短消息资料字号：小中大 1楼【求助】帮忙看看日志帮帮忙。 2006-07-26 10:15:32
メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:	分享到：

メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:	发表于： 2006-07-26 01:49 \| 只看楼主短消息资料字号：小中大 2楼 HijackThis_815汉化版扫描日志 V1.99.1 保存于 1:30:45, 日期 2006-7-26 操作系统： Windows XP SP1 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Rising\Rav\Ravmond.exe c:\program files\rising\rfw\rfwsrv.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Rising\Rav\RavStub.exe C:\WINDOWS\Explorer.EXE c:\program files\rising\rfw\RfwMain.exe C:\WINDOWS\VM_STI.EXE C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Rising\Rav\RavTask.exe C:\Program Files\Rising\Rav\Ravmon.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\e税通电子税务管理系统\ETaxII\autobackup.exe C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe D:\梦幻超人\梦幻超人v1.37免费破解版\挂盟软件.exe D:\梦幻超人\梦幻超人v1.37免费破解版\superman.exe D:\qq2006beta2sp1\QQ.exe D:\qq2006beta2sp1\TIMPlatform.exe C:\Program Files\Rising\Rav\Rav.exe D:\TT\TTraveler.exe F:\扫描日志\扫描日志\HijackThis.exe
メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:

メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:	发表于： 2006-07-26 01:51 \| 只看楼主短消息资料字号：小中大 3楼 F2 - REG:system.ini: UserInit=userinit.exe,C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\fneiih.exe O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v14.dll O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - C:\PROGRA~1\DESKAD~1\deskipn.dll (file missing) O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINDOWS\System32\wmpdrm.dll O2 - BHO: MyIEHelper Class - {16A770A0-0E87-4278-B748-2460D64A8386} - C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper_4572.dll (file missing) O2 - BHO: (no name) - {184BED23-3FF3-4BC2-9521-C227FB1C1F51} - C:\WINDOWS\System32\Akxh.dll (file missing) O2 - BHO: FltSetUp Class - {1D49D58D-5C84-4B50-8359-D9809BEB2B32} - C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll O2 - BHO: (no name) - {243D7778-7B12-4098-8C24-04281B664499} - C:\WINDOWS\System32\Dffhb.dll (file missing) O2 - BHO: (no name) - {255DA542-7F27-4CB2-A5B3-87363D1D5D14} - C:\WINDOWS\System32\Dlsci.dll (file missing) O2 - BHO: (no name) - {25CC26D6-664F-4026-B281-A34B036EB21B} - C:\WINDOWS\System32\Cautx.dll O2 - BHO: (no name) - {33495C72-2FFA-4975-84A2-6325D0E5CF07} - C:\WINDOWS\System32\Buaq.dll O2 - BHO: (no name) - {4E275066-A89A-424F-9D72-0417774551A5} - C:\WINDOWS\System32\Pmwjwh.dll (file missing) O2 - BHO: (no name) - {4E56B93C-0891-479D-BA3A-71E4C7A1A3C1} - C:\WINDOWS\System32\Nqwc.dll (file missing) O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\qq2006beta2sp1\QQIEHelper.dll O2 - BHO: (no name) - {556C43AA-BD1F-43B6-AFA4-FEEE66BCD0F7} - C:\WINDOWS\System32\Swgkfc.dll (file missing) O2 - BHO: (no name) - {578BAAEB-4CA4-4E0F-8B4C-FAA688A933CA} - C:\WINDOWS\System32\Pmjso.dll (file missing) O2 - BHO: IEYHlprObj Class - {5C761D09-377E-4EAC-ADA1-C9CDE39B5674} - C:\WINDOWS\IEYHelper.dll O2 - BHO: ActiveBHO Class - {63C55A7F-6E29-8D4F-5C76-4F850F28D13A} - C:\Progra~1\DoDoorRSSFinder\ActiveBandObject.dll O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\System32\stdup.dll O2 - BHO: BHOImp Class - {70AFF2CB-9DA2-499C-8D15-900729FCE83D} - C:\WINDOWS\system32\YHBO.dll (file missing) O2 - BHO: (no name) - {736A541E-D078-44A9-84E8-873BC1B47EA5} - C:\WINDOWS\System32\Ujnn.dll (file missing) O2 - BHO: 主秀网工具条 BHO - {7EA5CD4C-DC37-4615-8F87-012E4B415362} - (no file) O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\迅雷\ComDlls\XunLeiBHO_002.dll O2 - BHO: IEHlprObj Class - {999ADFA2-8AD1-47ff-97FC-69FB847458F4} - C:\Progra~1\NetMeeting\nmview.dll O2 - BHO: (no name) - {9AC02DF3-3974-4EB2-B463-1789FA8280C8} - C:\WINDOWS\System32\Lvzdiz.dll (file missing) O2 - BHO: NewWeb Controller - {9ACEEE31-1440-471B-AA46-72B061FE7D61} - C:\WINDOWS\system32\WinSC.dll O2 - BHO: estAliveObj Class - {A2B7A0F0-B697-4A71-8D91-43443F57D7BB} - C:\WINDOWS\estAlive.dll O2 - BHO: (no name) - {A33948E2-3FF6-4478-BA3D-2C3F55A451E7} - C:\WINDOWS\System32\Zpvew.dll (file missing) O2 - BHO: (no name) - {ADD6DDD7-B93A-4C5D-9AD7-7FC00CA9CBCA} - C:\WINDOWS\System32\Mczo.dll (file missing) O2 - BHO: DownloadBHO T2BHO - {B1D147E7-873E-4909-8127-695D9BB78728} - C:\WINDOWS\Downloaded Program Files\barsmall24.dll O2 - BHO: (no name) - {B4C63585-C4DD-4BE8-B9AD-B047FF78F219} - C:\WINDOWS\System32\Hedv.dll (file missing) O2 - BHO: (no name) - {B7376FDE-DAAD-4BD9-8804-DF28EF997F1A} - C:\WINDOWS\System32\Vpyuz.dll (file missing) O2 - BHO: (no name) - {B874F32A-282D-400C-8CF6-9D2409C24A19} - C:\WINDOWS\System32\Vjnat.dll (file missing) O2 - BHO: Flash 8 ocx - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\System32\flash8.dll O2 - BHO: (no name) - {C017357B-5774-411B-A20D-AA8A097C8EF8} - C:\WINDOWS\System32\Jfara.dll (file missing) O2 - BHO: (no name) - {C0E81421-FCDC-46D2-A1A8-81FF9076D85B} - C:\WINDOWS\System32\Oehg.dll (file missing) O2 - BHO: (no name) - {DDE441C4-951B-42F5-9020-4950F4A5FAF2} - C:\WINDOWS\System32\Jcouc.dll (file missing) O2 - BHO: Subconscious Intruder - {E2218499-2FD4-4EED-A94A-7F0B9C6E300E} - C:\WINDOWS\system32\Inte32.dll (file missing) O2 - BHO: (no name) - {E4E683CE-237C-4575-8FD4-192550CC0781} - C:\WINDOWS\System32\Gqrpvz.dll (file missing) O2 - BHO: Letscool System Helper - {F0C15012-7DBD-4068-95A2-0A82DB03AC35} - C:\WINDOWS\System32\CoolBho.dll O2 - BHO: Yahoo Bar - {F60FAB6F-115D-4797-9ED1-89793B930876} - C:\WINDOWS\ODBINT.dll O2 - BHO: google bar - {FAD11F89-F11E-4A15-92FB-6F0EDC4C8D59} - C:\WINDOWS\vwwreg.dll O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - IE工具栏增项: (no name) - {0C2B3984-303D-4131-BF1B-BE0D5623D922} - (no file) O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install O4 - 启动项HKLM\\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE ZSMC USB PC Camera O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - 启动项HKLM\\Run: [spoolsv] C:\WINDOWS\System32\spoolsv\spoolsv.exe -printer O4 - 启动项HKLM\\Run: [MoveSearch] C:\Program Files\HuaCi\huaci\zsearch.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [etaxBackup] C:\Program Files\e税通电子税务管理系统\ETaxII\BackupLink.lnk O4 - HKCU\..\Run: [msnnt] C:\WINDOWS\mcUpdate.exe O8 - IE右键菜单中的新增项目: &使用迅雷下载 - D:\迅雷\Program\GetUrl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - D:\迅雷\Program\GetAllUrl.htm O8 - IE右键菜单中的新增项目: >>彩信发送<< - res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\qq2006beta2sp1\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://E:\tools\OFFICE11\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\qq2006beta2sp1\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\qq2006beta2sp1\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\qq2006beta2sp1\SendMMS.htm O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - D:\BT下栽\BitSpirit\bsurl.htm
メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:

メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:	发表于： 2006-07-26 01:51 \| 只看楼主短消息资料字号：小中大 4楼 O9 - 浏览器额外的按钮: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll O9 - 浏览器额外的“工具”菜单项: 彩E精灵设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\tools\OFFICE11\REFIEBAR.DLL O9 - 浏览器额外的按钮: 比较购物搜索 - {A36ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\WINDOWS\YayaBands.dll O9 - 浏览器额外的“工具”菜单项: The AskYaya VerticalBar - {A36ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - C:\WINDOWS\YayaBands.dll O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\qq2006beta2sp1\QQ.EXE O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\qq2006beta2sp1\QQ.EXE O9 - 浏览器额外的按钮: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-205?cn=song;icon;hp&mpro=http://www.ebay.com.cn (file missing) O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-205?cn=song;icon;hp&mpro=http://www.ebay.com.cn (file missing) O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\qq2006beta2sp1\QQIEHelper.dll O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\qq2006beta2sp1\QQIEHelper.dll O9 - 浏览器额外的按钮: 易趣购物 - {EE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=50 (file missing) O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {EE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=50 (file missing) O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - 浏览器额外的“工具”菜单项: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - 浏览器额外的按钮: 时尚精品，体验快感 - {6E5EECAF-8879-4a75-8A88-B44B6382A763} - http://adfarm.mediaplex.com/ad/ck/4080-22910-9640-334?cn=chaoyue;rgbutton_120x60;hp&mpro=http://www.ebay.com.cn (file missing) (HKCU) O9 - 浏览器额外的“工具”菜单项: 易趣时尚购物 - {6E5EECAF-8879-4a75-8A88-B44B6382A763} - http://adfarm.mediaplex.com/ad/ck/4080-22910-9640-334?cn=chaoyue;rgbutton_120x60;hp&mpro=http://www.ebay.com.cn (file missing) (HKCU) O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - file://C:\Easy_Report\lib\ScriptX.cab O16 - DPF: {2931566C-B8A6-46C5-BF4D-E6AB9251E953} (Nexon Package Manager Control) - http://file.nx.com/activex/public_new/nxpm.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/123b23948725a7e1bd18/netzip/RdxIE601_cn.cab O16 - DPF: {56A7DC70-E102-4408-A34A-AE06FEF01586} (天下搜索) - http://iebar.t2t2.com/iebar.cab O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (PhotoUploadCtrl Control) - http://imgcache.qq.com/qzone/photo/QzoneMediaTools.cab O16 - DPF: {C415C83B-3FE3-4AAA-ABD0-53D812D25593} (JCUpdaterAx Control) - http://www.joycity.com/_app/JCUpdaterAX.cab O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl Object) - https://www.tenpay.com/download/qqedit.cab O16 - DPF: {F138084D-84D7-48CD-BEA8-04772457516E} (VqqSpeedDlProxy Class) - http://218.85.138.27/vqqsdl1009.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{57A66C4B-A553-4797-9EDE-29A4C17BA653}: NameServer = 202.96.128.86 202.96.128.166 O17 - HKLM\System\CCS\Services\Tcpip\..\{D1083A67-A447-4F65-A9BC-13237935C8BA}: NameServer = 202.96.128.86 O17 - HKLM\System\CS1\Services\Tcpip\..\{57A66C4B-A553-4797-9EDE-29A4C17BA653}: NameServer = 202.96.128.86 202.96.128.166 O18 - Filter: text/html - {E7009873-0D40-45B1-8D59-5B9AE98C7D38} - C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\System32\stdup.dll O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:

メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:	发表于： 2006-07-26 03:48 \| 只看楼主短消息资料字号：小中大 5楼各位高手帮帮忙看看。
メ明∨仔℡ 拙长孩提狮帖子:70 注册: 2005-07-26 来自:

酷盖飘泊而立狮帖子:505 注册: 2003-10-05 来自:	发表于： 2006-07-26 09:49 \| 短消息资料字号：小中大 6楼 F2 - REG:system.ini: UserInit=userinit.exe,C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\fneiih.exe O4 - 启动项HKLM\\Run: [spoolsv] C:\WINDOWS\System32\spoolsv\spoolsv.exe -printer 建议下载超级兔子，到安全模式下清理垃圾
酷盖飘泊而立狮帖子:505 注册: 2003-10-05 来自:

mopery 卡卡技术团队帖子:17737 注册: 2005-12-06 来自:New York	发表于： 2006-07-26 10:23 \| 短消息资料字号：小中大 7楼修复 F2 - REG:system.ini: UserInit=userinit.exe,C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\fneiih.exe O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - C:\PROGRA~1\DESKAD~1\deskipn.dll (file missing) O2 - BHO: MyIEHelper Class - {16A770A0-0E87-4278-B748-2460D64A8386} - C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper_4572.dll (file missing) O2 - BHO: (no name) - {184BED23-3FF3-4BC2-9521-C227FB1C1F51} - C:\WINDOWS\System32\Akxh.dll (file missing) O2 - BHO: FltSetUp Class - {1D49D58D-5C84-4B50-8359-D9809BEB2B32} - C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll O2 - BHO: (no name) - {243D7778-7B12-4098-8C24-04281B664499} - C:\WINDOWS\System32\Dffhb.dll (file missing) O2 - BHO: (no name) - {255DA542-7F27-4CB2-A5B3-87363D1D5D14} - C:\WINDOWS\System32\Dlsci.dll (file missing) O2 - BHO: (no name) - {25CC26D6-664F-4026-B281-A34B036EB21B} - C:\WINDOWS\System32\Cautx.dll O2 - BHO: (no name) - {33495C72-2FFA-4975-84A2-6325D0E5CF07} - C:\WINDOWS\System32\Buaq.dll O2 - BHO: (no name) - {4E275066-A89A-424F-9D72-0417774551A5} - C:\WINDOWS\System32\Pmwjwh.dll (file missing) O2 - BHO: (no name) - {4E56B93C-0891-479D-BA3A-71E4C7A1A3C1} - C:\WINDOWS\System32\Nqwc.dll (file missing) O2 - BHO: (no name) - {556C43AA-BD1F-43B6-AFA4-FEEE66BCD0F7} - C:\WINDOWS\System32\Swgkfc.dll (file missing) O2 - BHO: (no name) - {578BAAEB-4CA4-4E0F-8B4C-FAA688A933CA} - C:\WINDOWS\System32\Pmjso.dll (file missing) O2 - BHO: IEYHlprObj Class - {5C761D09-377E-4EAC-ADA1-C9CDE39B5674} - C:\WINDOWS\IEYHelper.dll O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll O2 - BHO: BHOImp Class - {70AFF2CB-9DA2-499C-8D15-900729FCE83D} - C:\WINDOWS\system32\YHBO.dll (file missing) O2 - BHO: (no name) - {736A541E-D078-44A9-84E8-873BC1B47EA5} - C:\WINDOWS\System32\Ujnn.dll (file missing) O2 - BHO: 主秀网工具条 BHO - {7EA5CD4C-DC37-4615-8F87-012E4B415362} - (no file) O2 - BHO: IEHlprObj Class - {999ADFA2-8AD1-47ff-97FC-69FB847458F4} - C:\Progra~1\NetMeeting\nmview.dll O2 - BHO: (no name) - {9AC02DF3-3974-4EB2-B463-1789FA8280C8} - C:\WINDOWS\System32\Lvzdiz.dll (file missing) O2 - BHO: NewWeb Controller - {9ACEEE31-1440-471B-AA46-72B061FE7D61} - C:\WINDOWS\system32\WinSC.dll O2 - BHO: estAliveObj Class - {A2B7A0F0-B697-4A71-8D91-43443F57D7BB} - C:\WINDOWS\estAlive.dll O2 - BHO: (no name) - {A33948E2-3FF6-4478-BA3D-2C3F55A451E7} - C:\WINDOWS\System32\Zpvew.dll (file missing) O2 - BHO: (no name) - {ADD6DDD7-B93A-4C5D-9AD7-7FC00CA9CBCA} - C:\WINDOWS\System32\Mczo.dll (file missing) O2 - BHO: (no name) - {B4C63585-C4DD-4BE8-B9AD-B047FF78F219} - C:\WINDOWS\System32\Hedv.dll (file missing) O2 - BHO: (no name) - {B7376FDE-DAAD-4BD9-8804-DF28EF997F1A} - C:\WINDOWS\System32\Vpyuz.dll (file missing) O2 - BHO: (no name) - {B874F32A-282D-400C-8CF6-9D2409C24A19} - C:\WINDOWS\System32\Vjnat.dll (file missing) O2 - BHO: Flash 8 ocx - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\System32\flash8.dll O2 - BHO: (no name) - {C017357B-5774-411B-A20D-AA8A097C8EF8} - C:\WINDOWS\System32\Jfara.dll (file missing) O2 - BHO: (no name) - {C0E81421-FCDC-46D2-A1A8-81FF9076D85B} - C:\WINDOWS\System32\Oehg.dll (file missing) O2 - BHO: (no name) - {DDE441C4-951B-42F5-9020-4950F4A5FAF2} - C:\WINDOWS\System32\Jcouc.dll (file missing) O2 - BHO: Subconscious Intruder - {E2218499-2FD4-4EED-A94A-7F0B9C6E300E} - C:\WINDOWS\system32\Inte32.dll (file missing) O2 - BHO: (no name) - {E4E683CE-237C-4575-8FD4-192550CC0781} - C:\WINDOWS\System32\Gqrpvz.dll (file missing) O2 - BHO: Letscool System Helper - {F0C15012-7DBD-4068-95A2-0A82DB03AC35} - C:\WINDOWS\System32\CoolBho.dll O2 - BHO: Yahoo Bar - {F60FAB6F-115D-4797-9ED1-89793B930876} - C:\WINDOWS\ODBINT.dll O2 - BHO: google bar - {FAD11F89-F11E-4A15-92FB-6F0EDC4C8D59} - C:\WINDOWS\vwwreg.dll O3 - IE工具栏增项: (no name) - {0C2B3984-303D-4131-BF1B-BE0D5623D922} - (no file) O8 - IE右键菜单中的新增项目: >>彩信发送<< - res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm O4 - HKCU\..\Run: [msnnt] C:\WINDOWS\mcUpdate.exe O9 - 浏览器额外的按钮: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll O9 - 浏览器额外的“工具”菜单项: 彩E精灵设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll O18 - Filter: text/html - {E7009873-0D40-45B1-8D59-5B9AE98C7D38} - C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll 删除 C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\fneiih.exe C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll C:\WINDOWS\System32\Cautx.dll C:\WINDOWS\System32\Buaq.dll C:\WINDOWS\IEYHelper.dll C:\Progra~1\NetMeeting\nmview.dll C:\WINDOWS\system32\WinSC.dll C:\WINDOWS\estAlive.dll C:\WINDOWS\System32\flash8.dll C:\WINDOWS\System32\CoolBho.dll C:\WINDOWS\ODBINT.dll C:\WINDOWS\vwwreg.dll C:\WINDOWS\mcUpdate.exe O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\System32\stdup.dll O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\System32\stdup.dll 参考：http://forum.ikaka.com/topic.asp?board=28&artid=7971417 O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINDOWS\System32\wmpdrm.dll O4 - 启动项HKLM\\Run: [spoolsv] C:\WINDOWS\System32\spoolsv\spoolsv.exe -printer 参考：http://forum.ikaka.com/topic.asp?board=28&artid=7948848 http://www.pctutu.com/srmsdown.asp 下载超级兔子..用超级兔子清理王卸载流氓软件...(安全模式...)
mopery 卡卡技术团队帖子:17737 注册: 2005-12-06 来自:New York

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT