瑞星卡卡安全论坛

救我啊,中了变形灰鸽子了!怎么也清除不了,是VC6 debug时发现速度奇慢而且Loaded 'C:\WINDOWKey.DLL'
Loaded 'ntdll.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\kernel32.dll', no matching symbolic information found.
Loaded symbols for 'C:\WINDOWS\system32\MFC42D.DLL'
Loaded symbols for 'C:\WINDOWS\system32\MSVCRTD.DLL'
Loaded 'C:\WINDOWS\system32\gdi32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\user32.dll', no matching symbolic information found.
Loaded symbols for 'C:\WINDOWS\system32\MFCO42D.DLL'
Loaded 'C:\WINDOWS\system32\imm32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\advapi32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\rpcrt4.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\lpk.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\usp10.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\msvcrt.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\mfc42loc.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\msctf.dll', no matching symbolic information found.
Loaded 'C:\Program Files\Common Files\Microsoft Shared\MSInfo\rejoi.vxd', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\oleaut32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\ole32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\imagehlp.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\shell32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\shlwapi.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\wsock32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\ws2_32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\ws2help.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\urlmon.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\version.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWS\system32\comctl32.dll', no matching symbolic information found.
Loaded 'C:\WINDOWKey.DLL', no matching symbolic information found.
First-chance exception in frame2.exe (WINDOWKEY.DLL): 0xC000001D: Illegal Instruction.
Loaded 'C:\WINDOWKey.DLL', no matching symbolic information found.
First-chance exception in frame2.exe (WINDOWKEY.DLL): 0xC000001D: Illegal Instruction.
Loaded 'C:\WINDOWKey.DLL', no matching symbolic information found.
First-chance exception in frame2.exe (WINDOWKEY.DLL): 0xC000001D: Illegal Instruction.
Loaded 'C:\WINDOWS\system32\msctfime.ime', no matching symbolic information found.
Loaded 'C:\WINDOWKey.DLL', no matching symbolic information found.
First-chance exception in frame2.exe (WINDOWKEY.DLL): 0xC000001D: Illegal Instruction.
Loaded 'C:\WINDOWKey.DLL', no matching symbolic information found.
First-chance exception in frame2.exe (WINDOWKEY.DLL): 0xC000001D: Illegal Instruction.
Loaded 'C:\WINDOWKey.DLL', no matching symbolic information found.
First-chance exception in frame2.exe (WINDOWKEY.DLL): 0xC000001D: Illegal Instruction.
Loaded 'C:\WINDOWKey.DLL', no matching symbolic information found.
First-chance exception in frame2.exe (WINDOWKEY.DLL): 0xC000001D: Illegal Instruction.

底下是一大堆同样的.


C:\WINDOWKey.DLL这个文件根本不存在.整个C盘都没有.
用registray crawler查 windowkey.dll,刚查到3000个键时却停止了,

怎么办?

http://p2s.newhua.com/down/blackhole.exe

变形灰鸽子后门专杀

在安全模式下试试

点窗口上的工具\文件夹选项\查看\取消受保护的文件类型\显示所有文件和文件夹，估计就能找到。

如果不能删除，就下载一个unlocker，专门对付不能删除的东西。