瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 哥哥 姐姐 帮个忙教我这个这么弄

123   2  /  3  页   跳转

哥哥 姐姐 帮个忙教我这个这么弄

删除O4 - HKLM\..\Run: [RichMedia] C:\WINDOWS\System32\Rundll32.exe "C:\PROGRA~1\HBClient\tbhelper.dll",WaitWindows
就可以了
gototop
 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
c:\program files\rising\rfw\RfwMain.exe
C:\WINDOWS\System32\Rundll32.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Common Files\COMM\Network.exe
C:\Program Files\Multimedia Card Reader\shwicon2k.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
G:\QQ\QQ.exe
G:\QQ\TIMPlatform.exe
G:\TT\TTraveler.exe
F:\BitComet\BitComet.exe
C:\HijackThis.exe


这怎么删....开头就是

附件附件:

下载次数:104
文件类型:application/octet-stream
文件大小:
上传时间:2006-4-9 16:52:47
描述:



gototop
 

只是删除软件后没清理注册启动项罢了.并不是流氓软件.
gototop
 

我晕`
怎么搞那么多插件啊`
汗```
下次要是有插件安装比赛
我推荐你呵呵
gototop
 

谢谢~~~~~~~~~~~~~~~~~
gototop
 

不用了.
gototop
 

我还想问一下我这里面还有什么问题吗 插件...有什么没有用的可以删掉了 可以告诉我吗?
谢谢了~~~
gototop
 

如果想删除一些没用的插件的话:

结束进程C:\Program Files\Common Files\COMM\Network.exe

修复:
R3 - Default URLSearchHook is missing
O2 - BHO: IDDTInitObj Class - {15DDE989-CD45-4561-BF99-D22C0D5C2B74} - C:\WINDOWS\Downlo~1\ddtinit.dll
O2 - BHO: QuickBtn - {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} - C:\Program Files\CoolWebsite\QuickLink.dll
O2 - BHO: Deliverer Class - {3E290290-1728-4C1E-863A-AA12526333F6} - C:\Program Files\CNet\ADDeliverer\ADDeliverer.dll
O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - (no file)
O2 - BHO: KillObj Class - {66C28884-4E5D-494B-80C9-CAA27528FD6D} - C:\WINDOWS\Downlo~1\ddtkillw.ocx
O2 - BHO: std software - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O2 - BHO: CpapView Class - {77962960-536E-47EC-9DDB-52651519705F} - C:\WINDOWS\System32\cpap.dll
O2 - BHO: HBObject Class - {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} - C:\PROGRA~1\HBClient\tbhelper.dll (file missing)
O2 - BHO: DownloadBHO T2BHO - {B1D147E7-873E-4909-8127-695D9BB78728} - C:\WINDOWS\Downloaded Program Files\barsmall24.dll
O3 - Toolbar: 天下搜索 - {56A7DC70-E102-4408-A34A-AE06FEF01586} - C:\WINDOWS\Downloaded Program Files\iesmall24.dll
O3 - Toolbar: 实用搜索 - {15ADF205-4C54-4cfe-AC88-1EA0BA6D06A0} - C:\Program Files\ScanToolbar\ScanBar.dll
O4 - HKLM\..\Run: [YDTMain.exe] C:\PROGRA~1\YDT\YDTMain.exe
O4 - HKLM\..\Run: [RichMedia] C:\WINDOWS\System32\Rundll32.exe "C:\PROGRA~1\HBClient\tbhelper.dll",WaitWindows
O4 - HKLM\..\Run: [AutoInsQyule] rem C:\Program Files\Qyule\QyuleInstall.exe
O4 - HKLM\..\Run: [YOKAssiant] Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant uninstall
O4 - HKCU\..\Run: [AutoInsQyule] rem C:\Program Files\Qyule\QyuleInstall.exe
O8 - Extra context menu item: >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O23 - Service: Network System (Universal Disk Manager) - COMENET TECHNOLOGY - C:\Program Files\Common Files\COMM\Network.exe
O23 - Service: windowsGray_Pigeon_Server (windowsGrayPigeonServer) - Unknown owner - C:\WINDOWS\windowsftp.exe (file missing)

在注册表找到并删除HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\windowsGrayPigeonServer项
卸载:
C:\Program Files\CoolWebsite\
C:\Program Files\CNet\
C:\Program Files\ScanToolbar\
C:\PROGRA~1\YDT\
C:\Program Files\Qyule\
C:\PROGRA~1\YOK.com\
C:\PROGRA~1\MMSASS~1\(若还存在的话)

重启后删除:
C:\Program Files\CoolWebsite\(表示文件夹,下同)
C:\Program Files\CNet\
C:\Program Files\ScanToolbar\
C:\PROGRA~1\YDT\
C:\Program Files\Qyule\
C:\PROGRA~1\YOK.com\
C:\PROGRA~1\MMSASS~1\(若还存在的话)
C:\WINDOWS\Downlo~1\ddtinit.dll
C:\WINDOWS\Downlo~1\ddtkillw.ocx
C:\WINDOWS\SYSTEM32\stdup.dll
C:\WINDOWS\Downloaded Program Files\barsmall24.dll
C:\WINDOWS\Downloaded Program Files\iesmall24.dll
C:\Program Files\Common Files\COMM\

其中C:\WINDOWS\SYSTEM32\stdup.dll若删不掉的话则参考
http://forum.ikaka.com/topic.asp?board=67&artid=7423269
gototop
 

很多都可以删除的,依你工作需要而定.
gototop
 

我也不知道有没有用....我用电脑没多久
有什么没用的 告诉我
gototop
 
123   2  /  3  页   跳转
页面顶部
Powered by Discuz!NT