你好!
我大体按照下面这个方法删除病毒,修复机子,其中没有找到upfdll.dll这个文件,最后也用WinsockXPFix修复,但是仍然不能上网~~求救~~~
| 引用: |
运行System Repair Engineer,使用“系统修复,文件关联,勾选“全选”点“修复”使所有扩展名都恢复正常 进入控制面版的添加删除程序中卸载,搜搜地址栏搜索(QQ搜索小助手)
请到http://forum.ikaka.com/topic.asp?board=67&artid=5188931,下载,LSPFix.exe,WinsockXPFix这两个软件 重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows 运行LSPFix.exe 删除 upfdll.dll 附说明一份 LSPFix.exe这个软件主要用来辅助修复HijackThis扫描发现的O10项。 使用时,请关闭所有IE界面和文件夹界面后运行LSPFix,运行后,把要修复的那一个O10项从左边转到右边,点“Finish”即可。(不过这之前,需要在“I know what I`m doing”前面打勾。) 双击我的电脑,工具,文件夹选项,查看,单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件(推荐)"复选框。在提示确定更改时,单击“是”,清除“隐藏已知文件类型的扩展名 删除 C:\PROGRA~1\TENCENT\Adplus C:\WINDOWS\system32\upfdll.dll 修复后,请重启。 如果无法上网,请运行WinsockXPFix,让它修复一下 烦再扫份日志粘上来。
|
我的当前日志。机子是IBM t43:
2006-07-28,14:52:04
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 1 (Build 2600)
- Administrative User - Completed Functions Allowed
Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
(ctfmon.exe)(C:\WINDOWS\System32\ctfmon.exe) [Microsoft Corporation]
(LocalSystem)(C:\WINDOWS\system\svchost.exe) []
(caidiysetup)(; C:\temp\diynetsetupuni.exe) []
(googletalk)(; "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart) [Google]
(MSNShell)(; ) []
(MyShares)(; c:\program Files\易虎\MyShares.exe /tray) []
(NetSP - restore settings on power failure)(; "C:\Program Files\AT&T Network Client\NetSP.exe" -show) [AT&T]
(VoipDiscount)(; "D:\Program Files\VoipDiscount.com\VoipDiscount\VoipDiscount.exe" -nosplash -minimized) [VoipDiscount]
(Yahoo! Pager)(; D:\Program Files\Yahoo!\Messenger\ypager.exe -quiet) []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
(ccApp)("C:\Program Files\Common Files\Symantec Shared\ccApp.exe") [Symantec Corporation]
(vptray)(C:\PROGRA~1\SYMANT~1\VPTray.exe) [Symantec Corporation]
(KernelFaultCheck)(%systemroot%\system32\dumprep 0 -k) []
(TPHOTKEY)(C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe) []
(C4EBReg)("C:\Program Files\c4ebreg\c4ebreg.exe" /q) [IBM Global Services]
(Isamtray)("C:\Program Files\c4ebreg\isamtray.exe") [IBM Global Services]
(ISSI EZUpdate Service)("c:\sdwork\issimsvc.exe") [IBM Global Services]
(RfwMain)("d:\Program Files\Rising\Rfw\rfwmain.exe" -Startup) [Beijing Rising Technology Co., Ltd.]
(RavTask)("C:\Program Files\Rising\Rav\RavTask.exe" -system) [Beijing Rising Technology Co., Ltd.]
(spoolsv)(; C:\WINDOWS\System32\spoolsv\spoolsv.exe -printer) []
(SOUNDM)(winsmd.exe) []
(BMMGAG)(; RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor) [IBM Corp.]
(BMMLREF)(; C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE) []
(BMMMONWND)(; rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor) []
(ControlCenter)(; "C:\Program Files\IBM fingerprint software\ctlcntr.exe" /startup) [UPEK Inc.]
(IMJPMIG8.1)(; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32) [Microsoft Corporation]
(iTunesHelper)(; "D:\Program Files\iTunes\iTunesHelper.exe") [Apple Computer, Inc.]
(MoveSearch)(; C:\Program Files\HuaCi\huaci\zsearch.exe) []
(MSPY2002)(; C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC) []
(PHIME2002A)(; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName) [Microsoft Corporation]
(PHIME2002ASync)(; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC) [Microsoft Corporation]
(Picasa Media Detector)(; D:\Program Files\Picasa2\PicasaMediaDetector) []
(PigUpdate)(; ) []
(QuickTime Task)(; "C:\Program Files\QuickTime\qttask.exe" -atboottime) [Apple Computer, Inc.]
(res)(; ) []
(RichMedia)(; C:\WINDOWS\System32\Rundll32.exe "C:\PROGRA~1\hbclient\HBHelper.dll",WaitWindows) []
(stgclean)(; c:\sdwork\w32main2.exe /cleanup) [IBM Global Services]
(TotalRecorderScheduler)(; "d:\Program Files\HighCriteria\TotalRecorder\TotRecSched.exe") [High Criteria inc.]
(UpdateManager)(; "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r) [Sonic Solutions]
(YLive.exe)(; C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe) [ ]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
(shell)(Explorer.exe) [Microsoft Corporation]
(Userinit)(userinit.exe,) [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
(AppInit_DLLs)(KB853957M.LOG) []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
(GinaDLL)(vrlogon.dll) [UPEK Inc.]
(UIHost)(logonui.exe) [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
({32CD708B-60A7-4C00-9377-D73EAA495F0F})(C:\WINDOWS\system32\RavExt.dll) [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad]
(DVDBurn)(C:\WINDOWS\Downloaded Program Files\AfxEdit.dll) []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
(WinlogonNotify: tphotkey)(tphklock.dll) []
[HKEY_CURRENT_USER\Control Panel\Desktop]
(SCRNSAVE.EXE)(C:\WINDOWS\UD.SCR) [International Business Machines Corporation]
--------------------------------------------------------------------------------
Startup Folders
Services
[ACU Configuration Service / ACS]
(C:\WINDOWS\System32\acs.exe)(N/A)
[Adobe LM Service / Adobe LM Service]
("C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe")(Adobe Systems)
[Ati HotKey Poller / Ati HotKey Poller]
(C:\WINDOWS\System32\Ati2evxx.exe)(ATI Technologies Inc.)
[Bluetooth Service / btwdins]
(C:\Program Files\IBM\Bluetooth Software\bin\btwdins.exe)(WIDCOMM, Inc.)
[C-DillaSrv / C-DillaSrv]
(C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE)(C-Dilla Ltd)
[Symantec Event Manager / ccEvtMgr]
("C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe")(Symantec Corporation)
[Symantec Password Validation / ccPwdSvc]
("C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe")(Symantec Corporation)
[Symantec Settings Manager / ccSetMgr]
("C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe")(Symantec Corporation)
[Cryptographic Transer Services / Cryptsvcer]
(C:\Program Files\Common Files\Update.exe)(N/A)
[Symantec AntiVirus Definition Watcher / DefWatch]
("C:\Program Files\Symantec AntiVirus\DefWatch.exe")(Symantec Corporation)
[IBM PM Service / IBMPMSVC]
(C:\WINDOWS\System32\ibmpmsvc.exe)(N/A)
[InstallDriver Table Manager / IDriverT]
("C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe")(Macrovision Corporation)
[iPodService / iPodService]
(C:\Program Files\iPod\bin\iPodService.exe)(Apple Computer, Inc.)
[IBM Standard Asset Manager Service / ISAMSvc]
(C:\Program Files\c4ebreg\c4ebreg.exe)(IBM Global Services)
[Indexing Data / iSPONER]
(C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087)(N/A)
[ISSI EZUpdate / ISSIMon]
(c:\sdwork\issimsvc.exe)(IBM Global Services)
[ldlcserv / ldlcserv]
(C:\WINDOWS\System32\Drivers\ldlcserv.exe)(IBM Corporation)
[Macromedia Licensing Service / Macromedia Licensing Service]
("C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe")(N/A)
[Multi-user Cleanup Service / Multi-user Cleanup Service]
(C:\notes\ntmulti.exe)(IBM Corp)
[Network Configuration Service / NetCfgSvr]
(C:\PROGRA~1\AT&TNE~1\NetCfgSv.EXE)(AT&T)
[QCONSVC / QCONSVC]
(System32\QCONSVC.EXE)(IBM Corp.)
[RegSrvc / RegSrvc]
(C:\WINDOWS\System32\RegSrvc.exe)(Intel Corporation)
[Rising Proxy Service / RfwProxySrv]
(d:\program files\rising\rfw\rfwproxy.exe)(Beijing Rising Technology Co., Ltd.)
[Rising Personal Firewall Service / RfwService]
(d:\program files\rising\rfw\rfwsrv.exe)(Beijing Rising Technology Co., Ltd.)
[Rising Process Communication Center / RsCCenter]
("C:\Program Files\Rising\Rav\CCenter.exe")(Beijing Rising Technology Co., Ltd.)
[RsRavMon Service / RsRavMon]
("C:\Program Files\Rising\Rav\Ravmond.exe")(Beijing Rising Technology Co., Ltd.)
[Spectrum24 Event Monitor / S24EventMonitor]
(C:\WINDOWS\System32\S24EvMon.exe)(Intel Corporation)
[SavRoam / SavRoam]
("C:\Program Files\Symantec AntiVirus\SavRoam.exe")(symantec)
[Symantec Network Drivers Service / SNDSrvc]
("C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe")(Symantec Corporation)
[Symantec AntiVirus / Symantec AntiVirus]
("C:\Program Files\Symantec AntiVirus\Rtvscan.exe")(Symantec Corporation)
[IBM KCU Service / TpKmpSVC]
(C:\WINDOWS\system32\TpKmpSVC.exe)(N/A)
[TrcBoot / TrcBoot]
(C:\WINDOWS\System32\drivers\trcboot.exe)(IBM Corporation)
[TrueVector Internet Monitor / vsmon]
(C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service)(Zone Labs Inc.)
[Protector Suite Virtual Token / vtserver]
(C:\Program Files\Common Files\Virtual Token\vtserver.exe)(UPEK Inc.)
[VNC Server / winvnc]
("C:\Program Files\ORL\VNC\WinVNC.exe" -service)(AT&T Research Labs Cambridge)