瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 SOS,SOS,十万火急,扫描如下,大家帮忙看看

1   1  /  1  页   跳转

SOS,SOS,十万火急,扫描如下,大家帮忙看看

SOS,SOS,十万火急,扫描如下,大家帮忙看看

移动硬盘中度了,只要一插usb,系统马上出现windows文件保护,说windows所需要的文件被替换成不可识别的,哪个兄弟知道如何解决???
以下为扫描内容:
2007-02-24,16:51:07

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <vrvnet><C:\Vrv\Client\vrvnet.exe>  [N/A]
    <xysecond><C:\Vrv\Client\vrvmon.exe>  [N/A]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <BigDog303><C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)>  [N/A]
    <wxClient><C:\WINDOWS\System32\Clsmn.exe>  []
    <Refresh><C:\WINDOWS\System32\Refresh_Service.exe>  []
    <BIE><RUNDLL32.EXE C:\PROGRA~1\baidu\iexp\BDSrHook.dll,Rundll32>  []
    <0040601172305564mcinstcleanup><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\004060~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <WIAWizardMenu><RUNDLL32.EXE C:\WINDOWS\System32\sti_ci.dll,WiaCreateWizardMenu>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\System32\userinit.exe,>  [(Verified)Microsoft Corporation]
    <GinaDLL><C:\WINDOWS\system32\LogUser.dll>  [N/A]
    <UIHost><"\Program Files\Logonui\Royale.exe">  [Microsoft Corporation]

==================================
启动文件夹
[INTERNAT]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\INTERNAT.lnk --> C:\WINDOWS\system32\internat.exe [Microsoft Corporation]><N>
最后编辑2007-02-27 09:23:36
分享到:
gototop
 

服务
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Sicent Network File Synchronization / sicentnetsync][Running/Auto Start]
  <C:\WINDOWS\System32\wxsyncli.exe><成都吉胜科技有限公司>
[McAfee Update Manager / mcmispupdmgr][Running/Auto Start]
  <C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe><McAfee, Inc.>
[McAfee Task Scheduler / mctskshd.exe][Running/Auto Start]
  <C:\PROGRA~1\McAfee\MSC\mctskshd.exe><McAfee, Inc.>
[McAfee User Manager / mcusrmgr][Running/Auto Start]
  <C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe><McAfee, Inc.>
[McAfee Log Manager / McLogManagerService][Running/Auto Start]
  <C:\PROGRA~1\McAfee\MSC\mclogsrv.exe><McAfee, Inc.>
[McAfee Protection Manager / mcpromgr][Running/Auto Start]
  <C:\PROGRA~1\McAfee\MSC\mcpromgr.exe><McAfee, Inc.>
[McAfee Network Agent / McNASvc][Running/Auto Start]
  <"c:\program files\common files\mcafee\mna\mcnasvc.exe"><McAfee, Inc.>
[McAfee Redirector Service / McRedirector][Running/Auto Start]
  <c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe><McAfee, Inc.>
[McAfee HackerWatch Service / McAfee HackerWatch Service][Running/Auto Start]
  <"C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe"><McAfee, Inc.>
[McAfee E-mail Proxy / Emproxy][Running/Manual Start]
  <C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe><McAfee, Inc.>
[McAfee Real-time Scanner / McShield][Running/Auto Start]
  <C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe><McAfee, Inc.>
[McAfee SystemGuards / McSysmon][Running/Auto Start]
  <C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe><McAfee, Inc.>
[McAfee Scanner / McODS][Running/Auto Start]
  <C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe><McAfee, Inc.>
[McAfee Personal Firewall Service / MpfService][Running/Auto Start]
  <"C:\Program Files\McAfee\MPF\MPFSrv.exe"><McAfee, Inc.>

==================================
驱动程序
[adsrsvc / adsrsvc][Running/Boot Start]
  <\SystemRoot\System32\drivers\adsrsvc.SYS><N/A>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[EagleNT / EagleNT][Stopped/Manual Start]
  <\??\C:\WINDOWS\System32\drivers\EagleNT.sys><N/A>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\E:\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv][Running/Manual Start]
  <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <System32\DRIVERS\secdrv.sys><N/A>
[VIA AGP Filter / viaagp1][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
[videX32 / videX32][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\videX32.sys><VIA Technologies, Inc.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[wxNDA / wxNDA][Running/Auto Start]
  <\??\C:\WINDOWS\System32\drivers\wxNDA.sys><成都吉胜科技>
[VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
[xyfilemon / xyantivirus][Stopped/Auto Start]
  <\??\C:\Vrv\Client\filemon.sys><N/A>
[VIMICRO USB PC Camera (ZC0301PLH) / ZSMC303][Running/Manual Start]
  <System32\Drivers\usbVM303.sys><Vimicro Corporation>
[MPFP / MPFP][Running/System Start]
  <System32\Drivers\Mpfp.sys><McAfee, Inc.>
[mfehidk / mfehidk][Running/Manual Start]
  <system32\drivers\mfehidk.sys><McAfee, Inc.>
[mfeavfk / mfeavfk][Running/Manual Start]
  <system32\drivers\mfeavfk.sys><McAfee, Inc.>
[mfebopk / mfebopk][Running/Manual Start]
  <system32\drivers\mfebopk.sys><McAfee, Inc.>
[mfesmfk / mfesmfk][Running/Manual Start]
  <system32\drivers\mfesmfk.sys><McAfee, Inc.>
[mferkdk / mferkdk][Running/Manual Start]
  <system32\drivers\mferkdk.sys><McAfee, Inc.>
gototop
 

浏览器加载项
[BdSearchHook Class]
  {02496EBD-8455-48db-B3C7-5DAC97D9F5A7} <C:\PROGRA~1\baidu\iexp\BDSrHook.dll, >
[scriptproxy]
  {7DB2D5A0-7241-4E79-B68D-6309F01C5231} <c:\program files\mcafee\virusscan\scriptsn.dll, McAfee, Inc.>
[红心游戏]
  {00000000-DAEB-480d-867B-D746D955765B} <D:\PROGRA~1\bdgame\RedHeart\GameHall.exe, >
[百度首页]
  {02496EBD-8455-48db-B3C7-5DAC97D9F5A7} <http://baidu.com/index.php?tn=jackiehe_dg, N/A>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[JUJU猫]
  {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.jujumao.com, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[&使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A>
[&使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A>
gototop
 

正在运行的进程
[PID: 476][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 536][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 560][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\WINDOWS\system32\LogUser.dll]  [N/A, N/A]
[PID: 604][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 616][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 784][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 832][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1040][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1072][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1280][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
    [C:\WINDOWS\System32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.8456]
    [C:\WINDOWS\System32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.8456]
    [C:\WINDOWS\System32\nvshell.dll]  [N/A, N/A]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [c:\program files\mcafee\virusscan\scriptsn.dll]  [McAfee, Inc., 13.2.0.180]
    [c:\program files\mcafee\virusscan\mcodsax.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\virusscan\mcvsps.dll]  [McAfee, Inc., 11,0,286,0]
[PID: 1412][C:\WINDOWS\VM303_STI.EXE]  [Vimicro, 4, 3, 625, 61]
    [C:\WINDOWS\System32\msdmo.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\VM303Prp.Ax]  [Vimicro, 4.3. 625.61]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
[PID: 1420][C:\WINDOWS\System32\Clsmn.exe]  [, 16.3.12.598]
    [C:\WINDOWS\System32\RegCode.dll]  [N/A, N/A]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
[PID: 1440][C:\WINDOWS\System32\RUNDLL32.EXE]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
[PID: 1560][C:\WINDOWS\System32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.8456]
[PID: 1576][C:\WINDOWS\system32\internat.exe]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
[PID: 1624][C:\WINDOWS\System32\wxsyncli.exe]  [成都吉胜科技有限公司, 1.0.0.253]
[PID: 1668][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 888][C:\WINDOWS\System32\conime.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
[PID: 1292][C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe]  [McAfee, Inc., 11,0,210,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\PROGRA~1\mcafee\VIRUSS~1\mvsscan.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\virusscan\mvscfg.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\virusscan\mcvsqt.dll]  [McAfee, Inc., 11,0,286,0]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\PROGRA~1\mcafee\VIRUSS~1\mytilus2.dll]  [McAfee, Inc., 13.2.0.180]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mytilus.dll]  [McAfee, Inc., 13.2.0.180]
    [C:\PROGRA~1\McAfee\VIRUSS~1\RES00\McShield.dll]  [McAfee, Inc., 13.2.0.175]
    [C:\Program Files\McAfee\VirusScan\mcscan32.dll]  [McAfee, Inc., 5.1.00]
    [C:\PROGRA~1\McAfee\VIRUSS~1\McQtLib.dll]  [McAfee, Inc., 11,0,286,0]
    [C:\PROGRA~1\McAfee\VIRUSS~1\ftl.dll]  [McAfee, Inc., 13.2.0.180]
[PID: 1244][c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe]  [McAfee, Inc., 11,0,210,0]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
    [C:\PROGRA~1\McAfee\MSC\McAltLib.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\McRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\McLocRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\Mccobres.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\virusscan\mcodsps.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\program files\mcafee\virusscan\mcvsps.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\msc\mcuicfg.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mccfgpv.dll]  [McAfee, Inc., 7,0,330,0]
[PID: 1328][C:\PROGRA~1\McAfee\MSC\mclogsrv.exe]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\msc\mcdbmgr.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcmispps.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\sqlite3.dll]  [McAfee, Inc., 7,0,208,0]
[PID: 400][C:\PROGRA~1\McAfee\MSC\mcpromgr.exe]  [McAfee, Inc., 7,0,327,0]
gototop
 

[C:\PROGRA~1\McAfee\MSC\McRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\McLocRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\Mccobres.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\McUtil.dll]  [McAfee, Inc., 7,0,208,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\msc\mcsubmgr\7,0,327,0\mcsubmgr.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcmscver.dll]  [McAfee, Inc., 7,0,329,0]
    [c:\PROGRA~1\mcafee\VIRUSS~1\mvsap.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\program files\mcafee\mpf\mc\mpfmisp.dll]  [McAfee, Inc., 8.0.207.0]
    [C:\Program Files\McAfee\MPF\L10N.DLL]  [McAfee Security, 8.0.207.0]
    [c:\program files\mcafee\virusscan\mcvspp.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\program files\mcafee\msc\mcprotpv.dll]  [McAfee, Inc., 7,0,330,0]
    [c:\program files\mcafee\msc\mcnmcprv.dll]  [McAfee, Inc., 1,0,166,0]
    [C:\PROGRA~1\McAfee\MSC\McNmcRes.dll]  [McAfee, Inc., 1,0,166,0]
    [C:\PROGRA~1\McAfee\MSC\McNmcLoR.dll]  [McAfee, Inc., 1,0,166,0]
    [C:\PROGRA~1\McAfee\MSC\McNmcCoR.dll]  [McAfee, Inc., 1,0,166,0]
    [c:\program files\common files\mcafee\mna\mcnasvcps.dll]  [McAfee, Inc., 1,0,178,0]
    [c:\program files\mcafee\virusscan\mvscfg.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\msc\mcshllps.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\virusscan\naiannps.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\virusscan\mcodsax.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\program files\mcafee\msc\mcregobj\7,0,327,0\mcregobj.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcnmcsps.dll]  [McAfee, Inc., 1,0,166,0]
    [c:\program files\mcafee\mpf\mc\mpfp.dll]  [McAfee, Inc., 8.0.207.0]
    [c:\program files\mcafee\virusscan\mvsver.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\PROGRA~1\COMMON~1\mcafee\emproxy\empxyver.dll]  [McAfee, Inc., 11,0,171,0]
    [c:\program files\common files\mcafee\redirsvc\redirver.dll]  [McAfee, Inc., 1,0,205,0]
    [C:\PROGRA~1\McAfee\MSC\McProHlp.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcnmcver.dll]  [McAfee, Inc., 1,0,166,0]
    [c:\program files\mcafee\mqc\qcmisp.dll]  [McAfee, Inc., 7,0,229,0]
    [c:\program files\mcafee\mqc\QcLite.dll]  [McAfee, Inc., 7,0,229,0]
[PID: 1604][c:\PROGRA~1\mcafee.com\agent\mcagent.exe]  [McAfee, Inc., 7,0,330,0]
    [C:\PROGRA~1\McAfee\MSC\McRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\McLocRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\Mccobres.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
    [c:\program files\mcafee\msc\mcsubmgr\7,0,327,0\mcsubmgr.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcregobj\7,0,327,0\mcregobj.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\msc\mcmispps.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee.com\agent\mcagntps.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mccfgpv.dll]  [McAfee, Inc., 7,0,330,0]
    [c:\program files\mcafee\msc\mcuicfg.dll]  [McAfee, Inc., 7,0,327,0]
[PID: 452][C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\McRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\McLocRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\Mccobres.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\sqlite3.dll]  [McAfee, Inc., 7,0,208,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\msc\mcmispps.dll]  [McAfee, Inc., 7,0,327,0]
[PID: 1876][c:\program files\common files\mcafee\mna\mcnasvc.exe]  [McAfee, Inc., 1,0,178,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\McUtil.dll]  [McAfee, Inc., 7,0,208,0]
    [c:\program files\common files\mcafee\mna\mcnasvcps.dll]  [McAfee, Inc., 1,0,178,0]
    [c:\program files\mcafee\msc\mcnmcsrv.dll]  [McAfee, Inc., 1,0,166,0]
    [c:\program files\mcafee\msc\mcshllps.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\common files\mcafee\mna\mcuj.dll]  [McAfee, Inc., 1,0,178,0]
    [C:\PROGRA~1\McAfee\MSC\McNmcRes.dll]  [McAfee, Inc., 1,0,166,0]
    [C:\PROGRA~1\McAfee\MSC\McNmcLoR.dll]  [McAfee, Inc., 1,0,166,0]
    [C:\PROGRA~1\McAfee\MSC\McNmcCoR.dll]  [McAfee, Inc., 1,0,166,0]
    [c:\program files\mcafee\msc\mcnmcsps.dll]  [McAfee, Inc., 1,0,166,0]
[PID: 256][C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe]  [McAfee, Inc., 13.2.0.180]
    [C:\PROGRA~1\McAfee\VIRUSS~1\LockDown.dll]  [McAfee, Inc., 13.2.0.180]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mytilus.dll]  [McAfee, Inc., 13.2.0.180]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mytilus2.dll]  [McAfee, Inc., 13.2.0.180]
    [C:\PROGRA~1\McAfee\VIRUSS~1\RES00\McShield.dll]  [McAfee, Inc., 13.2.0.175]
    [C:\PROGRA~1\McAfee\VIRUSS~1\FTL.Dll]  [McAfee, Inc., 13.2.0.180]
    [C:\PROGRA~1\McAfee\VIRUSS~1\naiann.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\virusscan\mcvsps.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\virusscan\naiannps.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\virusscan\mvscfg.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\virusscan\mcvsqt.dll]  [McAfee, Inc., 11,0,286,0]
    [C:\PROGRA~1\McAfee\VIRUSS~1\McQtLib.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll]  [McAfee, Inc., 2,0,139,0]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll]  [McAfee, Inc., 11,0,210,0]
    [C:\Program Files\McAfee\VirusScan\mcscan32.dll]  [McAfee, Inc., 5.1.00]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mfebopa.dll]  [McAfee, Inc., 13.2.0.167]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mfehida.dll]  [McAfee, Inc., 13.2.0.167]
    [c:\program files\mcafee\msc\mcmispps.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mfeavfa.dll]  [McAfee, Inc., 13.2.0.167]
[PID: 372][C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe]  [McAfee, Inc., 8.0.162.0]
gototop
 

[c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\common files\mcafee\hackerwatch\hwapips.dll]  [McAfee, Inc., 8.0.162.0]
[PID: 2144][C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\McUtil.dll]  [McAfee, Inc., 7,0,208,0]
[PID: 2164][C:\PROGRA~1\McAfee\MSC\mctskshd.exe]  [McAfee, Inc., 7,0,327,0]
[PID: 2204][c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe]  [McAfee, Inc., 1,0,205,0]
    [c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\common files\mcafee\hackerwatch\hwapips.dll]  [McAfee, Inc., 8.0.162.0]
[PID: 2216][C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe]  [McAfee, Inc., 11,0,171,0]
    [C:\PROGRA~1\COMMON~1\McAfee\EmProxy\EmPrxRes.dll]  [McAfee, Inc., 11,0,171,0]
[PID: 2252][C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe]  [McAfee, Inc., 11,0,286,0]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll]  [McAfee, Inc., 11,0,210,0]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mfesmfa.dll]  [McAfee, Inc., 13.2.0.167]
    [C:\PROGRA~1\McAfee\VIRUSS~1\mfehida.dll]  [McAfee, Inc., 13.2.0.167]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\common files\mcafee\hackerwatch\hwapips.dll]  [McAfee, Inc., 8.0.162.0]
    [c:\program files\mcafee\virusscan\mvscfg.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\msc\mcsubmgr\7,0,327,0\mcsubmgr.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcmispps.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\virusscan\mcvsps.dll]  [McAfee, Inc., 11,0,286,0]
[PID: 2376][C:\Program Files\McAfee\MPF\MPFSrv.exe]  [McAfee, Inc., 8.0.207.0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\common files\mcafee\hackerwatch\hwapips.dll]  [McAfee, Inc., 8.0.162.0]
    [c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\mpf\mc\mpfmisp.dll]  [McAfee, Inc., 8.0.207.0]
    [c:\program files\mcafee\msc\mcmispps.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\mpf\mc\mpfaltps.dll]  [McAfee, Inc., 8.0.207.0]
    [C:\Program Files\McAfee\MPF\L10N.DLL]  [McAfee Security, 8.0.207.0]
[PID: 3124][C:\PROGRA~1\McAfee\MSC\mcshell.exe]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\McBrwsr2.dll]  [McAfee, Inc., 7,0,208,0]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\McUtil.dll]  [McAfee, Inc., 7,0,208,0]
    [c:\program files\common files\mcafee\core\mccoreps.dll]  [McAfee, Inc., 2,0,139,0]
    [c:\program files\mcafee\msc\mcshllps.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcuicfg.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\MispLF.dll]  [McAfee, Inc., 7,0,208,0]
    [C:\PROGRA~1\McAfee\MSC\McRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\McLocRes.dll]  [McAfee, Inc., 7,0,327,0]
    [C:\PROGRA~1\McAfee\MSC\Mccobres.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcprtcnt.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\progra~1\mcafee\msc\mcshlui.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\mpf\mc\mpfmisp.dll]  [McAfee, Inc., 8.0.207.0]
    [c:\program files\mcafee\virusscan\mvscp.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\program files\mcafee\virusscan\mvscfg.dll]  [McAfee, Inc., 11,0,286,0]
    [c:\program files\mcafee\msc\mccfgpv.dll]  [McAfee, Inc., 7,0,330,0]
    [c:\program files\mcafee\msc\mcmismgr.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\virusscan\scriptsn.dll]  [McAfee, Inc., 13.2.0.180]
    [c:\program files\mcafee\msc\mcmnumgr.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mccfgmgr.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcsubmgr\7,0,327,0\mcsubmgr.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\msc\mcmispps.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\virusscan\mvsmp.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\program files\mcafee\msc\mcdemenu.dll]  [McAfee, Inc., 7,0,327,0]
    [c:\program files\mcafee\mqc\qcmisp.dll]  [McAfee, Inc., 7,0,229,0]
    [c:\program files\mcafee\mqc\QcLite.dll]  [McAfee, Inc., 7,0,229,0]
    [c:\program files\mcafee\mshr\shrmisp.dll]  [McAfee, Inc., 7,0,229,0]
    [c:\program files\mcafee\mshr\ShrRes.dll]  [N/A, N/A]
    [c:\program files\mcafee\mqc\QCRes.dll]  [McAfee, Inc., 7,0,229,0]
    [C:\Program Files\McAfee\MPF\L10N.DLL]  [McAfee Security, 8.0.207.0]
    [c:\program files\mcafee\msc\mcmscver.dll]  [McAfee, Inc., 7,0,329,0]
    [c:\PROGRA~1\mcafee\VIRUSS~1\mvsap.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\progra~1\mcafee\viruss~1\vsui.dll]  [McAfee, Inc., 11,0,213,0]
    [C:\PROGRA~1\COMMON~1\McAfee\MSC\mccomctl.dll]  [McAfee, Inc., 7,0,208,0]
    [c:\program files\mcafee\virusscan\mcodsax.dll]  [McAfee, Inc., 11,0,210,0]
    [c:\PROGRA~1\COMMON~1\mcafee\msc\mcscrhlp.dll]  [McAfee, Inc., 7,0,208,0]
[PID: 2764][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
    [c:\program files\mcafee\virusscan\scriptsn.dll]  [McAfee, Inc., 13.2.0.180]
    [c:\program files\mcafee\virusscan\mytilus2.dll]  [McAfee, Inc., 13.2.0.180]
    [c:\program files\mcafee\virusscan\mytilus.dll]  [McAfee, Inc., 13.2.0.180]
    [c:\program files\mcafee\virusscan\RES00\McShield.dll]  [McAfee, Inc., 13.2.0.175]
    [C:\Program Files\McAfee\VirusScan\mcscan32.dll]  [McAfee, Inc., 5.1.00]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 2572][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
    [c:\program files\mcafee\virusscan\scriptsn.dll]  [McAfee, Inc., 13.2.0.180]
    [c:\program files\mcafee\virusscan\mytilus2.dll]  [McAfee, Inc., 13.2.0.180]
    [c:\program files\mcafee\virusscan\mytilus.dll]  [McAfee, Inc., 13.2.0.180]
    [c:\program files\mcafee\virusscan\RES00\McShield.dll]  [McAfee, Inc., 13.2.0.175]
    [C:\Program Files\McAfee\VirusScan\mcscan32.dll]  [McAfee, Inc., 5.1.00]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
[PID: 2372][C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5, 5, 3, 264]
gototop
 

没完呢
gototop
 

[C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]
    [C:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
    [C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 42]
    [C:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 42]
    [C:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
    [C:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\Program Files\Thunder Network\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
    [C:\Program Files\Thunder Network\Thunder\Components\PortVerify\PortVerify.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\Program Files\Thunder Network\Thunder\Components\DTAG\DTAG.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll]  [, 1, 0, 1, 16]
    [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll]  [ , 1, 0, 0, 15]
    [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed08.dll]  [ , 3, 2, 0, 63]
    [C:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
    [C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
    [C:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 0, 1, 6]
    [C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
    [C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VideoPicture.dll]  [XunLei, 1, 0, 0, 1]
    [C:\Program Files\Thunder Network\Thunder\Program\msgmanage.dll]  [Thunder Networking Technologies,LTD, 2, 0, 0, 24]
    [C:\Program Files\Thunder Network\Thunder\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
    [c:\program files\mcafee\virusscan\scriptsn.dll]  [McAfee, Inc., 13.2.0.180]
[PID: 4052][C:\Documents and Settings\Administrator\桌面\sreng2\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  [, 1, 0, 0, 45]

==================================
文件关联
.TXT  Error. [notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  Error. [regedit.exe %1]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [notepad.exe %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================


[/CODE]
gototop
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Refresh><C:\WINDOWS\System32\Refresh_Service.exe> []
<0040601172305564mcinstcleanup><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\004060~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog> [N/A]
SREng删除以上启动项目,重启后安全模式下删除如下:
C:\WINDOWS\System32\Refresh_Service.exe
清空C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\
卸载掉百渡IE搜索伴侣(如果你觉得有用的话,可以留着)

PS:LZ是网吧的机器么?
gototop
 

我靠~眼花了。我诊断不料~~~呵呵
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT