瑞星卡卡安全论坛

帮帮看看.不知中了什么毒.会自己大开别的网

附件: 9079772008111164429.txt

卸载百度搜霸

用XDelBox删除以下文件
c:\windows\system32\winlib .dll
c:\progra~1\baidu\bar\baidubar.dll
c:\windows\bitdot.dll
c:\windows\system32\com\1.0.0\wndhook.dll
c:\windows\system32\nvapi.dll
c:\windows\svchost.exe
c:\windows\system32\msncom.exe
c:\windows\htmlpeek.dll
c:\documents and settings\lym1988.205da6fd090e439\「开始」菜单\程序\启动\msn.exe
c:\progra~1\intern~1\connec~1\wtlair.dll
c:\windows\system32\stobject.dll
c:\windows\system32\drivers\acpidisk.sys
c:\documents and settings\all users.windows\application data\microsoft\pctools\pctools.dll
c:\progra~1\intern~1\connec~1\wtlair.dll
c:\documents and settings\all users.windows\application data\microsoft\office\userdata\nse10_41b03d10.dll
C:\WINDOWS\system32\wstdik.dll
c:\msn.exe
d:\msn.exe
e:\msn.exe
c:\autorun.inf
d:\autorun.inf
e:\autorun.inf

用SREng删除启动项：
[SkyDock]    <C:\WINDOWS\system32\Rundll32.exe  "C:\PROGRA~1\INTERN~1\CONNEC~1\wtlair.dll",WaitWindows>
[SysTray]    <C:\WINDOWS\system32\stobject.dll>
[msn]    <C:\Documents and Settings\lym1988.205DA6FD090E439\「开始」菜单\程序\启动\msn.exe>

删除驱动：
[acpidisk / acpidisk]    <\??\C:\WINDOWS\system32\drivers\acpidisk.sys>

删除加载项：
[Info cache]    <C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\PCTools\pctools.dll>
[wtobj Class]    <C:\PROGRA~1\INTERN~1\CONNEC~1\wtlair.dll>
[Adobe Common Objects]    <C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\Office\USERDATA\nse10_41B03D10.dll>

用sreng修复winsock，【系统修复】-【winsock提供者】-【重置所有内容为默认值】