瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 怎么杀来杀去都有的(自从QQ被盗之后....)

12345678   2  /  8  页   跳转

怎么杀来杀去都有的(自从QQ被盗之后....)

好的,我马上去看看,谢谢
gototop
 

我也看不到完整的名字啊,我用的是瑞星在线杀毒,那个框拉不过去,只用省略号省略了
gototop
 

那算了,尽快把Autoruns日志扫出来。那个驱动项用SREng看不到的,因为它没扫描那个项目。
gototop
 

嗯,谢谢
gototop
 

请教小聪,你叫我参考的网址那里说的“HijackThis日志”是什么啊?还有你叫我用Autoruns扫的日志有什么用?我是个电脑白痴啊,你说清楚点好吗,拜托.....
gototop
 

晕倒,早说嘛
HijackThis在http://forum.ikaka.com/topic.asp?board=28&artid=6979213第1楼附件中下载。
不过用Autoruns其实就可以解决这些问题了,Autoruns在http://forum.ikaka.com/topic.asp?board=28&artid=6979213第11楼有下载链接。下载解压并运行后,按第8楼的说明操作。
gototop
 

好的,我再去看看,谢谢了
可能等下不懂还要请教你,呵呵~你不用去睡了
gototop
 

唉,我已经好几天没在二点半前睡了……
加速啊……
灰鸽子那个,先不用参考了。导出Autoruns日志后一并解决。
gototop
 

我也是啊,唉~这几天又要考证又给人盗Q放鸽子,一直忍着没去睡
加速ing.....
我早导出了,但没有023项啊?我不会看
gototop
 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

+ BigDogPathStill Image (STI) DriverVM.c:\windows\vm_sti.exe

+ CnsMin3721北京三七二一科技有限公司c:\windows\downloaded program files\cnsmin.dll

+ IMJPMIG8.1File not found: ;

+ NvCplDaemonNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll

+ NvMediaCenterNVIDIA Media Center LibraryNVIDIA Corporationc:\windows\system32\nvmctray.dll

+ nwizNVIDIA nView Wizard, Version 56.64 NVIDIA Corporationc:\windows\system32\nwiz.exe

+ TE_QQProtectFile not found: ;

+ TkBellExeRealNetworks SchedulerRealNetworks, Inc.c:\program files\common files\real\update_ob\realsched.exe

+ yassistseFile not found: ;

+ YLive.exeFile not found: ;

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

+ PowerFile not found: C:\DOCUME~1\Wei\LOCALS~1\Temp\f3\pnxpwf.dll

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

+ MSMSGSFile not found: ;

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad

+ stdupFile not found: CLSID\{6A512BF7-EC78-4e8d-9841-6C02E8FA9838}\InprocServer32

+ VisionFile not found: CLSID\{6671A431-5C3D-463d-A7CF-5587F9B7E191}\InprocServer32

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

+ cnshook.dll3721 CNS Module北京三七二一科技有限公司c:\windows\downloaded program files\cnshook.dll

+ new123.sysc:\program files\internet explorer\plugins\new123.sys

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ Desktop ExplorerNVIDIA Desktop Explorer, Version 56.64 NVIDIA Corporationc:\windows\system32\nvshell.dll

+ Desktop Explorer MenuNVIDIA Desktop Explorer, Version 56.64 NVIDIA Corporationc:\windows\system32\nvshell.dll

+ NvCpl DesktopContext ClassNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll

+ nView Desktop Context MenuNVIDIA Desktop Explorer, Version 56.64 NVIDIA Corporationc:\windows\system32\nvshell.dll

+ Play on my TV helperNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll

+ Shell Extensions for RealOne PlayerRealPlayer Shell ExtensionsRealNetworks, Inc.d:\program files\realplayer\rpshell.dll

+ Yahoo!PhotoFile not found: CLSID\{33BBE430-0E42-4F12-B075-8D21ACB10DCB}\InprocServer32

+ 粉碎文件Wiper 动态链接库c:\program files\yahoo!\assistant\assist\ywiper.dll

HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ Web 文件夹c:\program files\common files\microsoft shared\web folders\msonsext.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

+ BandIE ClassBaiduBar ModuleBaidu.com, Inc.c:\program files\baidu\bar\baidubar.dll

+ CnsHook Class3721 CNS Module北京三七二一科技有限公司c:\windows\downloaded program files\cnshook.dll

HKLM\Software\Microsoft\Internet Explorer\Toolbar

+ baidubar.dllBaiduBar ModuleBaidu.com, Inc.c:\program files\baidu\bar\baidubar.dll

+ 雅虎助手File not found: C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll

HKLM\Software\Microsoft\Internet Explorer\Extensions

+ QQQQTENCENTd:\program files\qq2005beta3\qq.exe

+ Yahoo 1G电邮File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail

+ 浩方对战平台浩方对战平台上海浩方在线信息技术有限公司e:\浩方对战平台\gameclient.exe

+ 清理上网记录File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean

+ 情景聊天File not found: http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/

+ 修复浏览器File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair

+ 寻宝乐趣多File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao

+ 雅虎助手File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist

HKLM\System\CurrentControlSet\Services

+ GrayPigeonServer2.03灰鸽子服务端程序。远程监控管理.c:\windows\g_server2.03.exe

+ NVSvcProvides system and desktop level support to the NVIDIA display driverNVIDIA Corporationc:\windows\system32\nvsvc32.exe

HKLM\System\CurrentControlSet\Services

+ EagleNTFile not found: C:\WINDOWS\system32\drivers\EagleNT.sys

+ kmsinputc:\windows\system32\drivers\kmsinput.sys

+ New0c:\windows\system32\new.sys

+ nvNVIDIA Compatible Windows 2000 Miniport Driver, Version 56.64 NVIDIA Corporationc:\windows\system32\drivers\nv4_mini.sys

+ oreans32c:\windows\system32\drivers\oreans32.sys

+ PtilinkDirect Parallel Link DriverParallel Technologies, Inc.c:\windows\system32\drivers\ptilink.sys

+ rtl8139Realtek RTL8139 NDIS 5.0 DriverRealtek Semiconductor Corporationc:\windows\system32\drivers\rtl8139.sys

+ SecdrvSafeDisc driverc:\windows\system32\drivers\secdrv.sys

+ VIAudioVinyl AC'97 Codec Combo WDM DriverVIA Technologies, Inc.c:\windows\system32\drivers\viaudios.sys

+ ZSMC301bVideo streaming and Capture Device DriverVMc:\windows\system32\drivers\usbvm31b.sys
gototop
 
12345678   2  /  8  页   跳转
页面顶部
Powered by Discuz!NT