123456   2  /  6  页   跳转

请版主高手帮下忙

这里论谈里的连接失效了不能下载了,版主能给个连接吗谢了啊
gototop
 

不是E文的汉化的可以用吗
gototop
 

是这个报告吗版主啊
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

+ MSPY2002c:\windows\system32\ime\pintlgnt\imscinst.exe

+ NvCplDaemonNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll

+ RavTaskRavTimerBeijing Rising Technology Co., Ltd.c:\program files\rising\rav\ravtask.exe

+ TkBellExeRealNetworks SchedulerRealNetworks, Inc.c:\program files\common files\real\update_ob\realsched.exe

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ RISINGRising Shell Ext ModuleBeijing Rising Technology Co., Ltd.c:\windows\system32\ravext.dll

+ Yahoo!PhotoyPhtbYahoo! Chinac:\program files\yahoo!\assistant\assist\yphtb.dll

+ 粉碎文件Wiper 动态链接库c:\program files\yahoo!\assistant\assist\ywiper.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

+ AntiFish Classyangling.dllYahoo.c:\program files\yahoo!\assistant\assist\yangling.dll

+ CnsHook Class3721 CNS Module北京三七二一科技有限公司c:\windows\downloaded program files\cnshook.dll

+ DragSearch BHODragSearchc:\program files\yahoo!\assistant\assist\ydragsearch.dll

+ QQBrowserHelperObject ClassQQIEHelper Module深圳市腾讯计算机系统有限公司d:\tencent\qq\qqiehelper.dll

+ ThunderIEHelper Classxunleibho Modulec:\windows\system32\xunleibho_v2.dll

+ Yahoo!PhotoyPhtbYahoo! Chinac:\program files\yahoo!\assistant\assist\yphtb.dll

+ 雅虎助手ToolBarYahoo!c:\program files\yahoo!\assistant\assist\yasbar.dll

HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks

+ coolbarToolBarYahoo!c:\program files\yahoo!\assistant\assist\yasbar.dll

HKLM\Software\Microsoft\Internet Explorer\Toolbar

+ 雅虎助手ToolBarYahoo!c:\program files\yahoo!\assistant\assist\yasbar.dll

HKLM\Software\Microsoft\Internet Explorer\Extensions

+ 清理上网记录File not found: http://assistant.3721.com/clean1.htm?fb=Cns

+ 上网助手File not found: http://assistant.3721.com/index.htm?fb=Cns

+ 修复浏览器File not found: http://assistant.3721.com/security1.htm?fb=Cns

HKLM\System\CurrentControlSet\Services

+ NVSvcProvides system and desktop level support to the NVIDIA display driverNVIDIA Corporationc:\windows\system32\nvsvc32.exe

+ RsCCenterCCenterBeijing Rising Technology Co., Ltd.c:\program files\rising\rav\ccenter.exe

+ RsRavMonRavMondBeijing Rising Technology Co., Ltd.c:\program files\rising\rav\ravmond.exe

HKLM\System\CurrentControlSet\Services

+ 3dfxvs3dfx VSA Miniport Driver3dfx Interactive, Inc.c:\windows\system32\drivers\3dfxvsm.sys

+ ALCXSENSFile not found: system32\drivers\ALCXSENS.SYS

+ ALCXWDMRealtek AC'97 Audio Driver (WDM)Realtek Semiconductor Corp.c:\windows\system32\drivers\alcxwdm.sys

+ BaseTDIbasetdiBeijing Rising Technology Co., Ltd.c:\windows\system32\drivers\basetdi.sys

+ ds1Yamaha PCI(x) Audio System (WDM)[1013]Yamaha Corp.c:\windows\system32\drivers\ds1wdm.sys

+ dtscsic:\windows\system32\drivers\dtscsi.sys

+ ExpScanerExpScan.sysc:\program files\rising\rav\expscan.sys

+ FETNDISNDIS 5.0 miniport driverD-Link                              c:\windows\system32\drivers\dlkfet5b.sys

+ GMSIPCIFile not found: G:\INSTALL\GMSIPCI.SYS

+ HookContTDI HOOK DriverRising tech Co. ltdc:\program files\rising\rav\hookcont.sys

+ HookRegc:\program files\rising\rav\hookreg.sys

+ HookSysHooksysRisingc:\program files\rising\rav\hooksys.sys

+ ialmController Hub for Intel Graphics DriverIntel Corporationc:\windows\system32\drivers\ialmnt5.sys

+ MEMSCANMemScan Driver瑞星软件有限公司c:\program files\rising\rav\memscan.sys

+ New0c:\windows\system32\new.sys

+ NPFnpfNetGroup - Politecnico di Torinoc:\windows\system32\drivers\npf.sys

+ npkcryptFile not found: D:\Tencent\QQ\npkcrypt.sys

+ NTACCESSFile not found: G:\NTACCESS.sys

+ nvNVIDIA Compatible Windows 2000 Miniport Driver, Version 53.03 NVIDIA Corporationc:\windows\system32\drivers\nv4_mini.sys

+ paasweqFile not found: C:\WINDOWS\System32\awope.sys

+ PtilinkDirect Parallel Link DriverParallel Technologies, Inc.c:\windows\system32\drivers\ptilink.sys

+ rtl8139NDIS 5.0 driver                                                                  Realtek Semiconductor Corporation                                                c:\windows\system32\drivers\rtl8139.sys

+ safemonSystem Safety Monitor 2.0 extension for Windows security layerSystem Safety Limitedc:\windows\system32\drivers\safemon.sys

+ SecdrvSafeDisc driverMacrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.c:\windows\system32\drivers\secdrv.sys

+ SetupNTGLM7XFile not found: G:\NTGLM7X.sys

+ sfdrv01StarForce Protection Environment DriverProtection Technologyc:\windows\system32\drivers\sfdrv01.sys

+ sfhlp02StarForce Protection Helper DriverProtection Technologyc:\windows\system32\drivers\sfhlp02.sys

+ sfsync02StarForce Protection Synchronization DriverProtection Technologyc:\windows\system32\drivers\sfsync02.sys

+ sptdc:\windows\system32\drivers\sptd.sys

+ STEC3SVKP driver for NTAntiCrackingc:\windows\system32\stec3.sys

+ vnndevVirtual Native Network DriverVNN B.J.c:\windows\system32\drivers\vnnvnic.sys

+ {6080A529-897E-4629-A488-ABA0C29B635E}Intel Graphics Platform (SoftBIOS) Driver for Windows 2000(R) & Windows XP(TM)Intel Corporationc:\windows\system32\drivers\ialmsbw.sys

+ {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}Intel Graphics Chipset (KCH) Driver for Windows 2000(R) & Windows XP(TM)Intel Corporationc:\windows\system32\drivers\ialmkchw.sys

HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute

+ autocheck autochk *File not found: autocheck

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

+ igfxcuiigfxsrvc ModuleIntel Corporationc:\windows\system32\igfxsrvc.dll

全部起动项的报告,不对偶再去搞
gototop
 

【回复“偶是高达”的帖子】
+ New0c:\windows\system32\new.sys
鬼在这里。删除它!重启系统,删除c:\windows\system32\new.sys
————————————————————
+ dtscsic:\windows\system32\drivers\dtscsi.sys
+ sptdc:\windows\system32\drivers\sptd.sys
查看文件属性。看看是哪家的。
——————————————————
+ NTACCESSFile not found: G:\NTACCESS.sys
+ SetupNTGLM7XFile not found: G:\NTGLM7X.sys
+ GMSIPCIFile not found: G:\INSTALL\GMSIPCI.SYS
+ autocheck autochk *File not found: autocheck
删除它们。
gototop
 

问题应当是出在这里:
+ New0c:\windows\system32\new.sys
先进入安全模式,删除c:\windows\system32\new.sys,然后搜索注册表,删除含有“new.sys”的内容。(操作前请备份文件和注册表)

另外C:\WINDOWS\System32\awope.sys没见过,如能找到请将该文件打包发送至fangrensong@yahoo.com.cn
gototop
 

到底去掉哪个啊LS的各位版主
gototop
 

引用:
【偶是高达的贴子】到底去掉哪个啊LS的各位版主
...........................

+ New0c:\windows\system32\new.sys
删除上面这个。
重启系统,删除c:\windows\system32\new.sys。
至少还应该有一个dll文件是它的同伙。删除这个.sys后,用SSM禁止DLL注入,重启系统,应该可以发现那个DLL文件。
gototop
 

先进入安全模式,删除c:\windows\system32\new.sys,然后搜索注册表,删除含有“new.sys”的内容。都做完了不过心急忘了备份不会出啥事吧,另外还有个DLL文件在哪找的到啊
gototop
 

DLL文件还没找啊,那个进程还是红的啊
gototop
 

+ New0c:\windows\system32\new.sys
这个在哪去掉偶直接删除c:\windows\system32\new.sys,然后搜索注册表,删除含有“new.sys”的内容了
gototop
 
123456   2  /  6  页   跳转
页面顶部
Powered by Discuz!NT