瑞星卡卡安全论坛

有截图不知道发在哪,请求帮助

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; QQDownload 1.7)

附件: SREngLOG.log

启动项目--注册表--删除以下项目
    <kcoin><kcoin32.exe>  []
    <{7c8d1401-a58d-a81c-cd24-a5915c4517c7}><c:\windows\system32\mnmhgsrv.dll>  [file is missing]
    <{528df602-9541-a985-210a-984a698c6f25}><c:\windows\system32\ptjhehlp.dll>  [file is missing]
    <{50940f85-f015-14f1-a05f-f69858ac6d05}><c:\windows\system32\zptlcsys.dll>  [file is missing]
    <{7fd45a54-9875-698f-e56e-65102358fdf7}><c:\windows\system32\apsggjba.dll>  [file is missing]
    <{6c648541-1025-9650-9057-6541258720c6}><c:\windows\system32\mndhfdwd.dll>  [file is missing]
    <{00050005-0005-0005-0005-00050005bb15}><c:\windows\system32\cliconfgzx.dll>  [file is missing]
    <{00060006-0006-0006-0006-00060006bb15}><c:\windows\system32\dispexcb.dll>  [file is missing]
    <{91954fac-1023-154f-895a-1458258ad819}><c:\windows\system32\ypdjgbmp.dll>  [file is missing]
    <cliconfgzx.dll><c:\windows\system32\cliconfgzx.dll>  [file is missing]
    <dispexcb.dll><c:\windows\system32\dispexcb.dll>  [file is missing]
==================================
删除驱动程序
[iis manager  / iis manager ][stopped/manual start]
  <\??\c:\docume~1\admini~1\locals~1\temp\1.tmp><n/a>
==================================
删除浏览器加载项
  {50940f85-f015-14f1-a05f-f69858ac6d05} <c:\windows\system32\zptlcsys.dll, n/a>
  {528df602-9541-a985-210a-984a698c6f25} <c:\windows\system32\ptjhehlp.dll, n/a>
  {6c648541-1025-9650-9057-6541258720c6} <c:\windows\system32\mndhfdwd.dll, n/a>
  {7c8d1401-a58d-a81c-cd24-a5915c4517c7} <c:\windows\system32\mnmhgsrv.dll, n/a>
  {7fd45a54-9875-698f-e56e-65102358fdf7} <c:\windows\system32\apsggjba.dll, n/a>
  {91954fac-1023-154f-895a-1458258ad819} <c:\windows\system32\ypdjgbmp.dll, n/a>
==================================
重启，显示隐藏文件后删除
c:\windows\system32\kcoin32.exe
c:\docume~1\admini~1\locals~1\temp\1.tmp