瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 中病毒了,瑞星杀不了,日志奉上

12   2  /  2  页   跳转

中病毒了,瑞星杀不了,日志奉上

[C:\WINDOWS\system32\GDWLI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDMSI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDQQHXI32.dll]  [N/A, ]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 30]
    [C:\WINDOWS\system32\PYJJ4.IME]  [加加工作组, 4, 1, 0, 48]
[PID: 3988 / new][C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe]  [Adobe Systems Inc., 6.0.1.2003102300]
    [C:\WINDOWS\system32\GDWLI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDMSI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDQQHXI32.dll]  [N/A, ]
    [C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.chs]  [Adobe Systems Inc., 6.0.0.0]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 30]
    [C:\WINDOWS\system32\PYJJ4.IME]  [加加工作组, 4, 1, 0, 48]
[PID: 4088 / new][C:\WINDOWS\system32\WgaTray.exe]  [Microsoft Corporation, 1.7.0018.5]
    [C:\WINDOWS\system32\GDWLI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDMSI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDQQHXI32.dll]  [N/A, ]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 30]
    [C:\WINDOWS\system32\PYJJ4.IME]  [加加工作组, 4, 1, 0, 48]
[PID: 2284 / new][C:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQHelperDll.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [TENCENT, 7, 1, 518, 1751]
    [C:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 30]
    [C:\WINDOWS\system32\PYJJ4.IME]  [加加工作组, 4, 1, 0, 48]
    [C:\WINDOWS\system32\GDWLI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDMSI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDQQHXI32.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\Program Files\Tencent\QQ\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
    [C:\Program Files\Tencent\QQ\QQAPI.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\QQ2005\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Tencent\QQ\LoginCtrl.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\LoginCtrlRes.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQRes.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Tencent\QQ\UnReadMsgMgr.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\Program Files\Tencent\QQ\NewSkin.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\MailSummary.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQSpace.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [C:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQGroupMng.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQAllInOne.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 1, 6, 0, 2]
    [C:\Program Files\Tencent\QQ\CameraDll.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, ]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Tencent\QQ\QQPet.dll]  [TENCENT, 7,1,518,1751]
    [C:\WINDOWS\system32\msadp32.acm]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Tencent\QQ\LongConnection.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\PhoneAPI.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [C:\Program Files\Tencent\QQ\ImageOle.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQLiveQMng.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQMagicFace.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, ]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx]  [Adobe Systems, Inc., 9,0,47,0]
    [C:\Program Files\Tencent\QQ\GroupConnection.dll]  [TENCENT, 7,1,518,1751]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\QQFileTransfer.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\CommercesMng.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [TENCENT, 7,1,518,1751]
    [C:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 310]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
[PID: 1236 / new][C:\Program Files\Tencent\QQ\TIMPlatform.exe]  [TENCENT, 7,1,518,1751]
    [C:\WINDOWS\system32\GDWLI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDMSI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDQQHXI32.dll]  [N/A, ]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 30]
    [C:\Program Files\QQ2005\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 3860 / new][C:\Program Files\Tencent\TT\TTraveler.exe]  [腾讯公司, 3.1.0.256]
    [C:\WINDOWS\system32\GDWLI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDMSI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDQQHXI32.dll]  [N/A, ]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 30]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\WINDOWS\system32\PYJJ4.IME]  [加加工作组, 4, 1, 0, 48]
    [C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll]  [N/A, ]
    [C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.CHS]  [N/A, ]
    [C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  [腾讯公司, 1, 1, 0, 5]
    [C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll]  [, 1, 0, 0, 3]
    [C:\Program Files\Tencent\TT\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx]  [Adobe Systems, Inc., 9,0,47,0]
[PID: 608 / SYSTEM][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\WINDOWS\system32\GDWLI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDMSI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDQQHXI32.dll]  [N/A, ]
    [c:\program files\rising\rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.9]
    [c:\program files\rising\rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.4]
    [C:\WINDOWS\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 3084 / new][C:\Documents and Settings\new\桌面\sreng2日志扫描软件\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\WINDOWS\system32\GDWLI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDMSI32.dll]  [N/A, ]
    [C:\WINDOWS\system32\GDQQHXI32.dll]  [N/A, ]
    [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll]  [TENCENT, 5, 0, 1, 30]
    [C:\WINDOWS\system32\PYJJ4.IME]  [加加工作组, 4, 1, 0, 48]
    [C:\Documents and Settings\new\桌面\sreng2日志扫描软件\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
gototop
 

文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  Error. [AutoCADScriptFile]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
特殊特权被允许: SeLoadDriverPrivilege [PID = 2568, C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 3568, C:\PROGRAM FILES\JJ4\JIAJIASR.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 3988, C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\DISTILLR\ACROTRAY.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 3860, C:\PROGRAM FILES\TENCENT\TT\TTRAVELER.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]
gototop
 

求助各位高手,看怎么解决?谢谢了
gototop
 

我用“马吉斯(Worm.Magistr)”专杀查过了,没有查出病毒,而且用冰刃也找不到<C:\WINDOWS\WinForm.exE> [N/A]
[C:\WINDOWS\system32\GDWLI32.dll] [N/A, ]
[C:\WINDOWS\system32\GDMSI32.dll] [N/A, ]
[C:\WINDOWS\system32\GDQQHXI32.dll] [N/A, ]
这些东西,请问过去兄,这是怎么回事啊?
gototop
 

顶了,求助ing
gototop
 

求助中
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT