瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 小聪看看我的日志,中了Rootkit.Vanti.gen

12345678   7  /  8  页   跳转

小聪看看我的日志,中了Rootkit.Vanti.gen

[PID: 272][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe]  < ><2, 0, 0, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  <><2, 0, 7, 1035>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 1, 1007>
    [C:\Program Files\Tencent\qq\DShared.dll]  <Tencent><1.5.0.0>
[PID: 292][C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe]  <Yahoo!><1, 0, 1, 1001>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAsMenu.dll]  <Yahoo><1, 0, 1, 1006>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAssecblk.dll]  <Yahoo><1, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yIEAngel.dll]  <Yahoo><1, 0, 1, 1001>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yMenuInfo.dll]  <Yahoo><1, 0, 0, 2>
    [C:\Program Files\Tencent\qq\DShared.dll]  <Tencent><1.5.0.0>
[PID: 304][E:\瑞星\新建文件夹\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [E:\瑞星\新建文件夹\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [E:\瑞星\新建文件夹\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [E:\瑞星\新建文件夹\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [E:\瑞星\新建文件夹\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 612][E:\瑞星\新建文件夹\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
    [E:\瑞星\新建文件夹\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [E:\瑞星\新建文件夹\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [E:\瑞星\新建文件夹\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [E:\瑞星\新建文件夹\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [E:\瑞星\新建文件夹\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [E:\瑞星\新建文件夹\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [E:\瑞星\新建文件夹\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 128][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 1080][C:\Program Files\Tencent\qq\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\Program Files\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [C:\Program Files\Tencent\qq\DShared.dll]  <Tencent><1.5.0.0>
[PID: 2000][C:\Program Files\ChinaNet\VnetClient.exe]  <><2006, 4, 27, 1>
    [C:\Program Files\ChinaNet\Communicate.dll]  <GDCN><2006, 2, 15, 1>
    [C:\Program Files\ChinaNet\DialModule.dll]  <GDCN><2006, 3, 8, 18>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL]  <><2004, 2, 28, 1>
    [C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX]  <><2006, 6, 2, 14>
    [C:\PROGRA~1\ChinaNet\sign.dll]  <0><2004, 12, 1, 1>
    [C:\PROGRA~1\ChinaNet\SETUPP~1.DLL]  <><1, 0, 0, 1>
    [C:\PROGRA~1\ChinaNet\WEBPLU~1.DLL]  <><2005, 8, 18, 1>
    [C:\PROGRA~1\ChinaNet\ADVERT~1.OCX]  <><2005, 10, 13, 1>
    [C:\PROGRA~1\ChinaNet\Gif89a.dll]  <><2005, 6, 21, 1>
    [C:\PROGRA~1\ChinaNet\VnetBs.ocx]  <><2004, 11, 18, 1>
    [C:\PROGRA~1\ChinaNet\ACCOUN~2.DLL]  <><2006, 6, 2, 14>
    [C:\PROGRA~1\ChinaNet\AccountMgr.dll]  <><2006, 5, 26, 11>
    [C:\PROGRA~1\ChinaNet\VnetSkin.ocx]  <GDDC><2005, 12, 21, 1>
    [C:\PROGRA~1\ChinaNet\DialogStyle.dll]  <><1, 0, 0, 1>
    [C:\PROGRA~1\ChinaNet\BDSearch.ocx]  <gdcn><2005, 12, 22, 1>
    [C:\PROGRA~1\ChinaNet\Timer.ocx]  <><2006, 5, 26, 16>
    [C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX]  <><2006, 4, 4, 1>
    [C:\PROGRA~1\ChinaNet\NEWMES~1.DLL]  <><2006, 5, 26, 16>
    [C:\PROGRA~1\ChinaNet\PassCtrl.dll]  <GDCN><2006, 3, 1, 16>
    [C:\WINDOWS\system32\wpcap.dll]  <Politecnico di Torino><3, 0, 0, 18>
    [C:\WINDOWS\system32\pthreadVC.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\packet.dll]  <Politecnico di Torino><3, 0, 0, 18>
    [C:\PROGRA~1\ChinaNet\PlugPush.dll]  <><2004, 12, 21, 1>
    [C:\PROGRA~1\ChinaNet\ALLINT~1.DLL]  <><2006, 6, 8, 15>
    [C:\PROGRA~1\ChinaNet\VNETLO~1.OCX]  <><2005, 10, 9, 1>
    [C:\PROGRA~1\ChinaNet\StatNum.dll]  <><2006, 3, 1, 1>
    [C:\PROGRA~1\ChinaNet\VNETON~1.OCX]  <><2005, 3, 2, 1>
    [C:\PROGRA~1\ChinaNet\ALLFUN~2.DLL]  <GDCN><2006, 4, 24, 14>
    [C:\PROGRA~1\ChinaNet\VnetOptLog.dll]  < ><2006, 5, 10, 14>
    [C:\PROGRA~1\ChinaNet\Favorite.ocx]  <><1, 0, 0, 1>
    [E:\瑞星\新建文件夹\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
    [C:\PROGRA~1\ChinaNet\DlgSkin.ocx]  <><2005, 11, 14, 1>
[PID: 1296][C:\Program Files\Tencent\qq\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [C:\Program Files\Tencent\qq\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\QQHelperDll.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 160>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\Program Files\Tencent\qq\QQAPI.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [C:\Program Files\Tencent\qq\LoginCtrl.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\npkcntc.dll]  <INCA Internet Co., Ltd.><2006, 3, 2, 1>
    [C:\Program Files\Tencent\qq\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [C:\Program Files\Tencent\qq\QQRes.dll]  <tencent><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\QQMainFrame.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\CQQApplication.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\NewSkin.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\HostingMgr.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\CameraDll.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\MailSummary.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\QQSpace.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\QQGroupMng.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\GroupLive.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\QQPlugin.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\QQAllInOne.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\SCCore.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\QQCustomFace.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\QQPet.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\QQSysMsgMng.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\QQAvatar.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [C:\Program Files\Tencent\qq\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
gototop
 

[C:\Program Files\Tencent\qq\QRingMng.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\QQMagicFace.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\QQSceneMng.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\LongConnection.dll]  <tencent><5, 0, 200, 160>
    [C:\Program Files\Tencent\qq\PhoneAPI.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [C:\Program Files\Tencent\qq\ImageOle.dll]  <TODO: <Company name>><1.0.0.1>
    [C:\Program Files\Tencent\qq\DShared.dll]  <Tencent><1.5.0.0>
    [C:\Program Files\Tencent\qq\ShareFiles.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\QQZip.dll]  <tencent><0, 3, 2, 4>
    [C:\Program Files\Tencent\qq\BQQApplication.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\qq\CommercesMng.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\qq\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [C:\Program Files\Tencent\qq\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
    [C:\Program Files\Tencent\qq\QQPhoneHelper.dll]  <腾讯科技(深圳)有限公司><2, 0, 4, 40>
[PID: 492][E:\瑞星\sys\sreng2\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  Error. []
.JS  Error. []
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 

一个字不漏``````
gototop
 

引用:
【轩辕小聪的贴子】
我是没办法为楼主远程了,我们这边的网速太慢了,上次想为别人远程,结果看到的对方的屏幕居然是五分钟前的,根本没有办法操作
...........................


我可以谅解```````
gototop
 

小聪`````你悄悄话,把你的QQ给偶,有事偶可以问你
gototop
 

看不出问题了,如果还有异常,请描述一下。
运行System Repair Engineer,使用“系统修复,文件关联,勾选“全选”点“修复”使所有扩展名都恢复正常
另外建议
进入控制面版的添加删除程序中卸载,搜搜地址栏搜索(QQ搜索小助手)
gototop
 

.VBS Error. []
.JS Error. []
这两项,在SREng的“系统修复”-“文件关联”里修复,其他的应该没什么问题了。
gototop
 



进入控制面版的添加删除程序中卸载,搜搜地址栏搜索(QQ搜索小助手)




为什么

gototop
 

好了```````````小弟在这给两为大哥`````行个大礼咯`````
gototop
 

因为这个软件无用,却自立启动项,还有加载浏览器加载项。
没有什么危害,随便你吧。
gototop
 
12345678   7  /  8  页   跳转
页面顶部
Powered by Discuz!NT