瑞星卡卡安全论坛
oo千里追风oo - 2007-2-24 17:06:00
移动硬盘中度了,只要一插usb,系统马上出现windows文件保护,说windows所需要的文件被替换成不可识别的,哪个兄弟知道如何解决???
以下为扫描内容:
2007-02-24,16:51:07
System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中:
所有的启动项目(包括注册表、启动文件夹、服务等)
浏览器加载项
正在运行的进程(包括进程模块信息)
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation]
<vrvnet><C:\Vrv\Client\vrvnet.exe> [N/A]
<xysecond><C:\Vrv\Client\vrvmon.exe> [N/A]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation]
<BigDog303><C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)> [N/A]
<wxClient><C:\WINDOWS\System32\Clsmn.exe> []
<Refresh><C:\WINDOWS\System32\Refresh_Service.exe> []
<BIE><RUNDLL32.EXE C:\PROGRA~1\baidu\iexp\BDSrHook.dll,Rundll32> []
<0040601172305564mcinstcleanup><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\004060~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
<WIAWizardMenu><RUNDLL32.EXE C:\WINDOWS\System32\sti_ci.dll,WiaCreateWizardMenu> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINDOWS\System32\userinit.exe,> [(Verified)Microsoft Corporation]
<GinaDLL><C:\WINDOWS\system32\LogUser.dll> [N/A]
<UIHost><"\Program Files\Logonui\Royale.exe"> [Microsoft Corporation]
==================================
启动文件夹
[INTERNAT]
<C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\INTERNAT.lnk --> C:\WINDOWS\system32\internat.exe [Microsoft Corporation]><N>
oo千里追风oo - 2007-2-24 17:07:00
服务
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Sicent Network File Synchronization / sicentnetsync][Running/Auto Start]
<C:\WINDOWS\System32\wxsyncli.exe><成都吉胜科技有限公司>
[McAfee Update Manager / mcmispupdmgr][Running/Auto Start]
<C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe><McAfee, Inc.>
[McAfee Task Scheduler / mctskshd.exe][Running/Auto Start]
<C:\PROGRA~1\McAfee\MSC\mctskshd.exe><McAfee, Inc.>
[McAfee User Manager / mcusrmgr][Running/Auto Start]
<C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe><McAfee, Inc.>
[McAfee Log Manager / McLogManagerService][Running/Auto Start]
<C:\PROGRA~1\McAfee\MSC\mclogsrv.exe><McAfee, Inc.>
[McAfee Protection Manager / mcpromgr][Running/Auto Start]
<C:\PROGRA~1\McAfee\MSC\mcpromgr.exe><McAfee, Inc.>
[McAfee Network Agent / McNASvc][Running/Auto Start]
<"c:\program files\common files\mcafee\mna\mcnasvc.exe"><McAfee, Inc.>
[McAfee Redirector Service / McRedirector][Running/Auto Start]
<c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe><McAfee, Inc.>
[McAfee HackerWatch Service / McAfee HackerWatch Service][Running/Auto Start]
<"C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe"><McAfee, Inc.>
[McAfee E-mail Proxy / Emproxy][Running/Manual Start]
<C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe><McAfee, Inc.>
[McAfee Real-time Scanner / McShield][Running/Auto Start]
<C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe><McAfee, Inc.>
[McAfee SystemGuards / McSysmon][Running/Auto Start]
<C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe><McAfee, Inc.>
[McAfee Scanner / McODS][Running/Auto Start]
<C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe><McAfee, Inc.>
[McAfee Personal Firewall Service / MpfService][Running/Auto Start]
<"C:\Program Files\McAfee\MPF\MPFSrv.exe"><McAfee, Inc.>
==================================
驱动程序
[adsrsvc / adsrsvc][Running/Boot Start]
<\SystemRoot\System32\drivers\adsrsvc.SYS><N/A>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[EagleNT / EagleNT][Stopped/Manual Start]
<\??\C:\WINDOWS\System32\drivers\EagleNT.sys><N/A>
[npkcrypt / npkcrypt][Running/Auto Start]
<\??\E:\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv][Running/Manual Start]
<System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
<System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
<System32\DRIVERS\secdrv.sys><N/A>
[VIA AGP Filter / viaagp1][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
[videX32 / videX32][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\videX32.sys><VIA Technologies, Inc.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
<System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[wxNDA / wxNDA][Running/Auto Start]
<\??\C:\WINDOWS\System32\drivers\wxNDA.sys><成都吉胜科技>
[VIA SATA IDE Hot-plug Driver / xfilt][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\xfilt.sys><VIA Technologies,Inc>
[xyfilemon / xyantivirus][Stopped/Auto Start]
<\??\C:\Vrv\Client\filemon.sys><N/A>
[VIMICRO USB PC Camera (ZC0301PLH) / ZSMC303][Running/Manual Start]
<System32\Drivers\usbVM303.sys><Vimicro Corporation>
[MPFP / MPFP][Running/System Start]
<System32\Drivers\Mpfp.sys><McAfee, Inc.>
[mfehidk / mfehidk][Running/Manual Start]
<system32\drivers\mfehidk.sys><McAfee, Inc.>
[mfeavfk / mfeavfk][Running/Manual Start]
<system32\drivers\mfeavfk.sys><McAfee, Inc.>
[mfebopk / mfebopk][Running/Manual Start]
<system32\drivers\mfebopk.sys><McAfee, Inc.>
[mfesmfk / mfesmfk][Running/Manual Start]
<system32\drivers\mfesmfk.sys><McAfee, Inc.>
[mferkdk / mferkdk][Running/Manual Start]
<system32\drivers\mferkdk.sys><McAfee, Inc.>
oo千里追风oo - 2007-2-24 17:07:00
浏览器加载项
[BdSearchHook Class]
{02496EBD-8455-48db-B3C7-5DAC97D9F5A7} <C:\PROGRA~1\baidu\iexp\BDSrHook.dll, >
[scriptproxy]
{7DB2D5A0-7241-4E79-B68D-6309F01C5231} <c:\program files\mcafee\virusscan\scriptsn.dll, McAfee, Inc.>
[红心游戏]
{00000000-DAEB-480d-867B-D746D955765B} <D:\PROGRA~1\bdgame\RedHeart\GameHall.exe, >
[百度首页]
{02496EBD-8455-48db-B3C7-5DAC97D9F5A7} <http://baidu.com/index.php?tn=jackiehe_dg, N/A>
[启动迅雷5]
{09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[JUJU猫]
{6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.jujumao.com, N/A>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[&使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A>
oo千里追风oo - 2007-2-24 17:09:00
正在运行的进程
[PID: 476][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 536][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 560][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[C:\WINDOWS\system32\LogUser.dll] [N/A, N/A]
[PID: 604][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 616][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 784][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 832][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1040][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1072][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1280][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[C:\WINDOWS\System32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.8456]
[C:\WINDOWS\System32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.8456]
[C:\WINDOWS\System32\nvshell.dll] [N/A, N/A]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[c:\program files\mcafee\virusscan\scriptsn.dll] [McAfee, Inc., 13.2.0.180]
[c:\program files\mcafee\virusscan\mcodsax.dll] [McAfee, Inc., 11,0,210,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\virusscan\mcvsps.dll] [McAfee, Inc., 11,0,286,0]
[PID: 1412][C:\WINDOWS\VM303_STI.EXE] [Vimicro, 4, 3, 625, 61]
[C:\WINDOWS\System32\msdmo.dll] [N/A, N/A]
[C:\WINDOWS\System32\VM303Prp.Ax] [Vimicro, 4.3. 625.61]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[PID: 1420][C:\WINDOWS\System32\Clsmn.exe] [, 16.3.12.598]
[C:\WINDOWS\System32\RegCode.dll] [N/A, N/A]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[PID: 1440][C:\WINDOWS\System32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[PID: 1560][C:\WINDOWS\System32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8456]
[PID: 1576][C:\WINDOWS\system32\internat.exe] [Microsoft Corporation, 5.00.2920.0000]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[PID: 1624][C:\WINDOWS\System32\wxsyncli.exe] [成都吉胜科技有限公司, 1.0.0.253]
[PID: 1668][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 888][C:\WINDOWS\System32\conime.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[PID: 1292][C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe] [McAfee, Inc., 11,0,210,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\PROGRA~1\mcafee\VIRUSS~1\mvsscan.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\virusscan\mvscfg.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\virusscan\mcvsqt.dll] [McAfee, Inc., 11,0,286,0]
[C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll] [McAfee, Inc., 11,0,210,0]
[c:\PROGRA~1\mcafee\VIRUSS~1\mytilus2.dll] [McAfee, Inc., 13.2.0.180]
[C:\PROGRA~1\McAfee\VIRUSS~1\mytilus.dll] [McAfee, Inc., 13.2.0.180]
[C:\PROGRA~1\McAfee\VIRUSS~1\RES00\McShield.dll] [McAfee, Inc., 13.2.0.175]
[C:\Program Files\McAfee\VirusScan\mcscan32.dll] [McAfee, Inc., 5.1.00]
[C:\PROGRA~1\McAfee\VIRUSS~1\McQtLib.dll] [McAfee, Inc., 11,0,286,0]
[C:\PROGRA~1\McAfee\VIRUSS~1\ftl.dll] [McAfee, Inc., 13.2.0.180]
[PID: 1244][c:\PROGRA~1\mcafee\VIRUSS~1\mcvsshld.exe] [McAfee, Inc., 11,0,210,0]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[C:\PROGRA~1\McAfee\MSC\McAltLib.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\McRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\McLocRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\Mccobres.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\virusscan\mcodsps.dll] [McAfee, Inc., 11,0,210,0]
[c:\program files\mcafee\virusscan\mcvsps.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\msc\mcuicfg.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mccfgpv.dll] [McAfee, Inc., 7,0,330,0]
[PID: 1328][C:\PROGRA~1\McAfee\MSC\mclogsrv.exe] [McAfee, Inc., 7,0,327,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\msc\mcdbmgr.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcmispps.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\sqlite3.dll] [McAfee, Inc., 7,0,208,0]
[PID: 400][C:\PROGRA~1\McAfee\MSC\mcpromgr.exe] [McAfee, Inc., 7,0,327,0]
oo千里追风oo - 2007-2-24 17:09:00
[C:\PROGRA~1\McAfee\MSC\McRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\McLocRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\Mccobres.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\McUtil.dll] [McAfee, Inc., 7,0,208,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\msc\mcsubmgr\7,0,327,0\mcsubmgr.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcmscver.dll] [McAfee, Inc., 7,0,329,0]
[c:\PROGRA~1\mcafee\VIRUSS~1\mvsap.dll] [McAfee, Inc., 11,0,210,0]
[c:\program files\mcafee\mpf\mc\mpfmisp.dll] [McAfee, Inc., 8.0.207.0]
[C:\Program Files\McAfee\MPF\L10N.DLL] [McAfee Security, 8.0.207.0]
[c:\program files\mcafee\virusscan\mcvspp.dll] [McAfee, Inc., 11,0,210,0]
[c:\program files\mcafee\msc\mcprotpv.dll] [McAfee, Inc., 7,0,330,0]
[c:\program files\mcafee\msc\mcnmcprv.dll] [McAfee, Inc., 1,0,166,0]
[C:\PROGRA~1\McAfee\MSC\McNmcRes.dll] [McAfee, Inc., 1,0,166,0]
[C:\PROGRA~1\McAfee\MSC\McNmcLoR.dll] [McAfee, Inc., 1,0,166,0]
[C:\PROGRA~1\McAfee\MSC\McNmcCoR.dll] [McAfee, Inc., 1,0,166,0]
[c:\program files\common files\mcafee\mna\mcnasvcps.dll] [McAfee, Inc., 1,0,178,0]
[c:\program files\mcafee\virusscan\mvscfg.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\msc\mcshllps.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\virusscan\naiannps.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\virusscan\mcodsax.dll] [McAfee, Inc., 11,0,210,0]
[c:\program files\mcafee\msc\mcregobj\7,0,327,0\mcregobj.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcnmcsps.dll] [McAfee, Inc., 1,0,166,0]
[c:\program files\mcafee\mpf\mc\mpfp.dll] [McAfee, Inc., 8.0.207.0]
[c:\program files\mcafee\virusscan\mvsver.dll] [McAfee, Inc., 11,0,286,0]
[c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll] [McAfee, Inc., 2,0,139,0]
[c:\PROGRA~1\COMMON~1\mcafee\emproxy\empxyver.dll] [McAfee, Inc., 11,0,171,0]
[c:\program files\common files\mcafee\redirsvc\redirver.dll] [McAfee, Inc., 1,0,205,0]
[C:\PROGRA~1\McAfee\MSC\McProHlp.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcnmcver.dll] [McAfee, Inc., 1,0,166,0]
[c:\program files\mcafee\mqc\qcmisp.dll] [McAfee, Inc., 7,0,229,0]
[c:\program files\mcafee\mqc\QcLite.dll] [McAfee, Inc., 7,0,229,0]
[PID: 1604][c:\PROGRA~1\mcafee.com\agent\mcagent.exe] [McAfee, Inc., 7,0,330,0]
[C:\PROGRA~1\McAfee\MSC\McRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\McLocRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\Mccobres.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[c:\program files\mcafee\msc\mcsubmgr\7,0,327,0\mcsubmgr.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcregobj\7,0,327,0\mcregobj.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\msc\mcmispps.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee.com\agent\mcagntps.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mccfgpv.dll] [McAfee, Inc., 7,0,330,0]
[c:\program files\mcafee\msc\mcuicfg.dll] [McAfee, Inc., 7,0,327,0]
[PID: 452][C:\PROGRA~1\McAfee\MSC\mcusrmgr.exe] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\McRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\McLocRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\Mccobres.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\sqlite3.dll] [McAfee, Inc., 7,0,208,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\msc\mcmispps.dll] [McAfee, Inc., 7,0,327,0]
[PID: 1876][c:\program files\common files\mcafee\mna\mcnasvc.exe] [McAfee, Inc., 1,0,178,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\McUtil.dll] [McAfee, Inc., 7,0,208,0]
[c:\program files\common files\mcafee\mna\mcnasvcps.dll] [McAfee, Inc., 1,0,178,0]
[c:\program files\mcafee\msc\mcnmcsrv.dll] [McAfee, Inc., 1,0,166,0]
[c:\program files\mcafee\msc\mcshllps.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\common files\mcafee\mna\mcuj.dll] [McAfee, Inc., 1,0,178,0]
[C:\PROGRA~1\McAfee\MSC\McNmcRes.dll] [McAfee, Inc., 1,0,166,0]
[C:\PROGRA~1\McAfee\MSC\McNmcLoR.dll] [McAfee, Inc., 1,0,166,0]
[C:\PROGRA~1\McAfee\MSC\McNmcCoR.dll] [McAfee, Inc., 1,0,166,0]
[c:\program files\mcafee\msc\mcnmcsps.dll] [McAfee, Inc., 1,0,166,0]
[PID: 256][C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe] [McAfee, Inc., 13.2.0.180]
[C:\PROGRA~1\McAfee\VIRUSS~1\LockDown.dll] [McAfee, Inc., 13.2.0.180]
[C:\PROGRA~1\McAfee\VIRUSS~1\mytilus.dll] [McAfee, Inc., 13.2.0.180]
[C:\PROGRA~1\McAfee\VIRUSS~1\mytilus2.dll] [McAfee, Inc., 13.2.0.180]
[C:\PROGRA~1\McAfee\VIRUSS~1\RES00\McShield.dll] [McAfee, Inc., 13.2.0.175]
[C:\PROGRA~1\McAfee\VIRUSS~1\FTL.Dll] [McAfee, Inc., 13.2.0.180]
[C:\PROGRA~1\McAfee\VIRUSS~1\naiann.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\virusscan\mcvsps.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\virusscan\naiannps.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\virusscan\mvscfg.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\virusscan\mcvsqt.dll] [McAfee, Inc., 11,0,286,0]
[C:\PROGRA~1\McAfee\VIRUSS~1\McQtLib.dll] [McAfee, Inc., 11,0,286,0]
[c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll] [McAfee, Inc., 2,0,139,0]
[C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll] [McAfee, Inc., 11,0,210,0]
[C:\Program Files\McAfee\VirusScan\mcscan32.dll] [McAfee, Inc., 5.1.00]
[C:\PROGRA~1\McAfee\VIRUSS~1\mfebopa.dll] [McAfee, Inc., 13.2.0.167]
[C:\PROGRA~1\McAfee\VIRUSS~1\mfehida.dll] [McAfee, Inc., 13.2.0.167]
[c:\program files\mcafee\msc\mcmispps.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\VIRUSS~1\mfeavfa.dll] [McAfee, Inc., 13.2.0.167]
[PID: 372][C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe] [McAfee, Inc., 8.0.162.0]
oo千里追风oo - 2007-2-24 17:10:00
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\common files\mcafee\hackerwatch\hwapips.dll] [McAfee, Inc., 8.0.162.0]
[PID: 2144][C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\McUtil.dll] [McAfee, Inc., 7,0,208,0]
[PID: 2164][C:\PROGRA~1\McAfee\MSC\mctskshd.exe] [McAfee, Inc., 7,0,327,0]
[PID: 2204][c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe] [McAfee, Inc., 1,0,205,0]
[c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\common files\mcafee\hackerwatch\hwapips.dll] [McAfee, Inc., 8.0.162.0]
[PID: 2216][C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe] [McAfee, Inc., 11,0,171,0]
[C:\PROGRA~1\COMMON~1\McAfee\EmProxy\EmPrxRes.dll] [McAfee, Inc., 11,0,171,0]
[PID: 2252][C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe] [McAfee, Inc., 11,0,286,0]
[C:\PROGRA~1\McAfee\VIRUSS~1\mvslog.dll] [McAfee, Inc., 11,0,210,0]
[C:\PROGRA~1\McAfee\VIRUSS~1\mfesmfa.dll] [McAfee, Inc., 13.2.0.167]
[C:\PROGRA~1\McAfee\VIRUSS~1\mfehida.dll] [McAfee, Inc., 13.2.0.167]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\common files\mcafee\hackerwatch\hwapips.dll] [McAfee, Inc., 8.0.162.0]
[c:\program files\mcafee\virusscan\mvscfg.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\msc\mcsubmgr\7,0,327,0\mcsubmgr.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcmispps.dll] [McAfee, Inc., 7,0,327,0]
[c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\virusscan\mcvsps.dll] [McAfee, Inc., 11,0,286,0]
[PID: 2376][C:\Program Files\McAfee\MPF\MPFSrv.exe] [McAfee, Inc., 8.0.207.0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\common files\mcafee\hackerwatch\hwapips.dll] [McAfee, Inc., 8.0.162.0]
[c:\PROGRA~1\COMMON~1\mcafee\core\mcevtbrk.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\mpf\mc\mpfmisp.dll] [McAfee, Inc., 8.0.207.0]
[c:\program files\mcafee\msc\mcmispps.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\mpf\mc\mpfaltps.dll] [McAfee, Inc., 8.0.207.0]
[C:\Program Files\McAfee\MPF\L10N.DLL] [McAfee Security, 8.0.207.0]
[PID: 3124][C:\PROGRA~1\McAfee\MSC\mcshell.exe] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\McBrwsr2.dll] [McAfee, Inc., 7,0,208,0]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\McUtil.dll] [McAfee, Inc., 7,0,208,0]
[c:\program files\common files\mcafee\core\mccoreps.dll] [McAfee, Inc., 2,0,139,0]
[c:\program files\mcafee\msc\mcshllps.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcuicfg.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\MispLF.dll] [McAfee, Inc., 7,0,208,0]
[C:\PROGRA~1\McAfee\MSC\McRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\McLocRes.dll] [McAfee, Inc., 7,0,327,0]
[C:\PROGRA~1\McAfee\MSC\Mccobres.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcprtcnt.dll] [McAfee, Inc., 7,0,327,0]
[c:\progra~1\mcafee\msc\mcshlui.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\mpf\mc\mpfmisp.dll] [McAfee, Inc., 8.0.207.0]
[c:\program files\mcafee\virusscan\mvscp.dll] [McAfee, Inc., 11,0,210,0]
[c:\program files\mcafee\virusscan\mvscfg.dll] [McAfee, Inc., 11,0,286,0]
[c:\program files\mcafee\msc\mccfgpv.dll] [McAfee, Inc., 7,0,330,0]
[c:\program files\mcafee\msc\mcmismgr.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\virusscan\scriptsn.dll] [McAfee, Inc., 13.2.0.180]
[c:\program files\mcafee\msc\mcmnumgr.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mccfgmgr.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcsubmgr\7,0,327,0\mcsubmgr.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\msc\mcmispps.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\virusscan\mvsmp.dll] [McAfee, Inc., 11,0,210,0]
[c:\program files\mcafee\msc\mcdemenu.dll] [McAfee, Inc., 7,0,327,0]
[c:\program files\mcafee\mqc\qcmisp.dll] [McAfee, Inc., 7,0,229,0]
[c:\program files\mcafee\mqc\QcLite.dll] [McAfee, Inc., 7,0,229,0]
[c:\program files\mcafee\mshr\shrmisp.dll] [McAfee, Inc., 7,0,229,0]
[c:\program files\mcafee\mshr\ShrRes.dll] [N/A, N/A]
[c:\program files\mcafee\mqc\QCRes.dll] [McAfee, Inc., 7,0,229,0]
[C:\Program Files\McAfee\MPF\L10N.DLL] [McAfee Security, 8.0.207.0]
[c:\program files\mcafee\msc\mcmscver.dll] [McAfee, Inc., 7,0,329,0]
[c:\PROGRA~1\mcafee\VIRUSS~1\mvsap.dll] [McAfee, Inc., 11,0,210,0]
[c:\progra~1\mcafee\viruss~1\vsui.dll] [McAfee, Inc., 11,0,213,0]
[C:\PROGRA~1\COMMON~1\McAfee\MSC\mccomctl.dll] [McAfee, Inc., 7,0,208,0]
[c:\program files\mcafee\virusscan\mcodsax.dll] [McAfee, Inc., 11,0,210,0]
[c:\PROGRA~1\COMMON~1\mcafee\msc\mcscrhlp.dll] [McAfee, Inc., 7,0,208,0]
[PID: 2764][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[c:\program files\mcafee\virusscan\scriptsn.dll] [McAfee, Inc., 13.2.0.180]
[c:\program files\mcafee\virusscan\mytilus2.dll] [McAfee, Inc., 13.2.0.180]
[c:\program files\mcafee\virusscan\mytilus.dll] [McAfee, Inc., 13.2.0.180]
[c:\program files\mcafee\virusscan\RES00\McShield.dll] [McAfee, Inc., 13.2.0.175]
[C:\Program Files\McAfee\VirusScan\mcscan32.dll] [McAfee, Inc., 5.1.00]
[C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
[C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[PID: 2572][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[c:\program files\mcafee\virusscan\scriptsn.dll] [McAfee, Inc., 13.2.0.180]
[c:\program files\mcafee\virusscan\mytilus2.dll] [McAfee, Inc., 13.2.0.180]
[c:\program files\mcafee\virusscan\mytilus.dll] [McAfee, Inc., 13.2.0.180]
[c:\program files\mcafee\virusscan\RES00\McShield.dll] [McAfee, Inc., 13.2.0.175]
[C:\Program Files\McAfee\VirusScan\mcscan32.dll] [McAfee, Inc., 5.1.00]
[C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
[PID: 2372][C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5, 5, 3, 264]
我是来来 - 2007-2-24 17:11:00
没完呢
oo千里追风oo - 2007-2-24 17:11:00
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
[C:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
[C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 12, 2, 42]
[C:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 12, 2, 42]
[C:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
[C:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
[C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\Program Files\Thunder Network\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
[C:\Program Files\Thunder Network\Thunder\Components\PortVerify\PortVerify.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[C:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[C:\Program Files\Thunder Network\Thunder\Components\DTAG\DTAG.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[C:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll] [, 1, 0, 1, 16]
[C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll] [ , 1, 0, 0, 15]
[C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed08.dll] [ , 3, 2, 0, 63]
[C:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
[C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
[C:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 6]
[C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
[C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll] [, 1, 0, 0, 1]
[C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VideoPicture.dll] [XunLei, 1, 0, 0, 1]
[C:\Program Files\Thunder Network\Thunder\Program\msgmanage.dll] [Thunder Networking Technologies,LTD, 2, 0, 0, 24]
[C:\Program Files\Thunder Network\Thunder\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0]
[c:\program files\mcafee\virusscan\scriptsn.dll] [McAfee, Inc., 13.2.0.180]
[PID: 4052][C:\Documents and Settings\Administrator\桌面\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
[C:\PROGRA~1\baidu\iexp\BDSrHook.dll] [, 1, 0, 0, 45]
==================================
文件关联
.TXT Error. [notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG Error. [regedit.exe %1]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [notepad.exe %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
N/A
==================================
[/CODE]
spiritfire - 2007-2-27 9:15:00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Refresh><C:\WINDOWS\System32\Refresh_Service.exe> []
<0040601172305564mcinstcleanup><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\004060~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog> [N/A]
SREng删除以上启动项目,重启后安全模式下删除如下:
C:\WINDOWS\System32\Refresh_Service.exe
清空C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\
卸载掉百渡IE搜索伴侣(如果你觉得有用的话,可以留着)
PS:LZ是网吧的机器么?
冰冻你我 - 2007-2-27 9:33:00
我靠~眼花了。我诊断不料~~~呵呵
1
© 2000 - 2026 Rising Corp. Ltd.