12   2  /  2  页   跳转

请高手来帮忙中了remove spyware

正在运行的进程
[PID: 1728][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\meftedit.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\nvcpl.dll]  <NVIDIA Corporation><6.14.10.7330>
    [C:\WINDOWS\system32\NVRSZHC.DLL]  <NVIDIA Corporation><6.14.10.7330>
    [C:\WINDOWS\system32\nvshell.dll]  <NVIDIA Corporation><6.14.10.10045>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 1, 2, 1018>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yaLive.dll]  <yahoo! china><3, 4, 0, 1091>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
[PID: 1516][C:\WINDOWS\system32\wscntfy.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1900][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll]  <yahoo! china><3, 1, 4, 1062>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ysearch.dll]  <Yahoo! China><3, 0, 5, 1005>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasnoad.dll]  <yahoo! china><3, 0, 2, 1004>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yzsNetProto.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll]  <Yahoo! China><3, 0, 4, 1006>
    [C:\Program Files\Yahoo!\Assistant\Assist\yrss.dll]  <Yahoo! China><3, 0, 1, 1001>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yaswiper.dll]  <Yahoo! China><3, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasiesec.dll]  <Yahoo! China><3, 0, 3, 1003>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YSETTI~1.DLL]  <yahoo! china><3, 0, 5, 1010>
    [C:\Program Files\Yahoo!\Assistant\Assist\ymailp.dll]  <Yahoo! China><3.0.0.1006>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 1, 2, 1018>
    [C:\WINDOWS\system32\WBJJU.IME]  <北京六合源软件技术有限公司><2, 8, 0, 0>
    [C:\WINDOWS\system32\WbCodeU.dll]  <N/A><2, 8, 0, 0>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yaLive.dll]  <yahoo! china><3, 4, 0, 1091>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll]  <Yahoo! China><3, 0, 1, 1002>
    [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll]  <Yahoo! China><3, 0, 3, 1005>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yoptimum.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrepair.dll]  <Yahoo! China><3, 0, 7, 1010>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasfsks.dll]  <3721.com><2, 1, 1, 87>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yxpstyle.dll]  <Yahoo! China><3, 0, 0, 1000>
[PID: 1932][C:\PROGRA~1\Yahoo!\ASSIST~1\ylive.exe]  <Yahoo! China><3, 1, 2, 1018>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 1, 2, 1018>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yaLive.dll]  <yahoo! china><3, 4, 0, 1091>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\ynotifier.dll]  <yahoo! china><3, 0, 1, 1001>
[PID: 812][D:\新建文件夹\Program\Thunder5.exe]  <Thunder Networking Technologies,LTD><5.4.0.226>
    [D:\新建文件夹\Program\UpdateDownload.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 8>
    [D:\新建文件夹\Program\download_interface.dll]  <Thunder Networking Technologies,LTD><2, 0, 0, 1>
    [D:\新建文件夹\Program\stlport_vc646.dll]  <STLport Consulting, Inc.><4.6.2003.1031>
    [D:\新建文件夹\Program\log4cplus.dll]  <><1, 0, 2, 1>
    [D:\新建文件夹\Program\asyn_dns.dll]  <N/A><N/A>
    [D:\新建文件夹\Program\msgmanage.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 15>
    [D:\新建文件夹\Program\historyinfo_manage.dll]  <Thunder Networking Technologies,LTD><5, 2, 0, 148>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 1, 2, 1018>
    [D:\新建文件夹\Program\RegisterDll.dll]  <Thunder Networking Technologies,LTD><2, 1, 0, 18>
    [D:\新建文件夹\Program\FloatBar.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 2>
    [D:\新建文件夹\Components\InMedia\iEmbedShell.dll]  < ><1, 0, 0, 11>
    [D:\新建文件夹\Components\InMedia\iEmbed04.dll]  < ><2, 3, 0, 37>
    [D:\新建文件夹\Components\P4PClient\P4PClient.dll]  <Thunder Networking Technologies,LTD><1, 0, 4, 10>
    [D:\新建文件夹\Program\iTargetAd.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 59>
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
[PID: 256][C:\DOCUME~1\Admin\LOCALS~1\Temp\Rar$EX00.625\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 1, 2, 1018>
[PID: 408][C:\WINDOWS\system32\NOTEPAD.EXE]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  <Yahoo! China><3, 1, 2, 1018>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
gototop
 

没有找到这个啊C:\WINDOWS\system32\SVCH0ST.exe
gototop
 

C:\WINDOWS\system32\m4820eloehqc0.dll
这个一刷新还是有
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT