瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 木马Trojan.Win32.Inject.am怎么删?杀不掉啊~

123   3  /  3  页   跳转

木马Trojan.Win32.Inject.am怎么删?杀不掉啊~


 
[PID: 1020][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1172][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1260][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
[PID: 1384][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
[PID: 1556][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1628][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1660][c:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [c:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [c:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [c:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [c:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [c:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 1824][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 336][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\lenovo\IGRS EasyShare\IgrsAnywhere.dll]  <Lenovo Group Limited><1, 0, 2, 60>
    [C:\WINDOWS\system32\soundmix.dll]  <><1, 4, 0, 0>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
    [C:\PROGRA~1\WinKld\Winkld.dat]  <www.88dog.com><2, 0, 0, 1>
    [C:\WINDOWS\system32\igfxpph.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\ext\dtdl.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\ext\dtsm.dll]  <N/A><N/A>
[PID: 416][c:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
    [c:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [c:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [c:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 744][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 780][D:\down xunlei\音乐\xvcclip.exe]  <><1, 0, 0, 1>
[PID: 888][C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe]  <InterVideo Inc.><1.7.1>
[PID: 1200][C:\Program Files\Tencent\QQ\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [C:\Program Files\Tencent\QQ\CoralAssist.DLL]  <Coral Team><4.5.0 build 20060515>
    [C:\Program Files\Tencent\QQ\CoralQQ.DLL]  <Coral Team><4.5.1 Build 20060620>
    [C:\Program Files\Tencent\QQ\ipsearcher.dll]  <N/A><1.0.0.4>
    [C:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\QQHelperDll.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 160>
    [C:\Program Files\Tencent\QQ\QQAPI.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [C:\Program Files\Tencent\QQ\LoginCtrl.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\npkcntc.dll]  <INCA Internet Co., Ltd.><2006, 3, 2, 1>
    [C:\Program Files\Tencent\QQ\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [C:\Program Files\Tencent\QQ\QQRes.dll]  <tencent><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\QQMainFrame.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\CQQApplication.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
    [C:\Program Files\Tencent\QQ\NewSkin.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\HostingMgr.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\CameraDll.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\MailSummary.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\QQSpace.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\QQGroupMng.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\GroupLive.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\QQAllInOne.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\SCCore.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\QQCustomFace.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\LongConnection.dll]  <tencent><5, 0, 200, 160>
    [C:\Program Files\Tencent\QQ\QQPlugin.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [C:\WINDOWS\system32\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
    [C:\Program Files\Tencent\QQ\QQAvatar.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\QQPet.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\GroupConnection.dll]  <Tencent><5, 0, 202, 170>
    [C:\Program Files\Tencent\QQ\QRingMng.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\PhoneAPI.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [C:\Program Files\Tencent\QQ\QQFileTransfer.dll]  <Tencent><5, 0, 202, 180>
    [C:\Program Files\Tencent\QQ\BQQApplication.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [C:\Program Files\Tencent\QQ\QQSceneMng.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\ImageOle.dll]  <TODO: <Company name>><1.0.0.1>
    [C:\Program Files\Tencent\QQ\CommercesMng.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\QQUdpGetFileLib.dll]  <tencent><0, 2, 2, 3>
    [C:\Program Files\Tencent\QQ\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
    [C:\Program Files\Tencent\QQ\QQZip.dll]  <tencent><0, 3, 2, 4>
    [C:\Program Files\Tencent\QQ\QQMagicFace.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  <腾讯科技(深圳)有限公司><2, 0, 5, 50>
    [C:\Program Files\Tencent\QQ\videodevice.dll]  <Tencent><1.5.0.0>
    [C:\Program Files\Tencent\QQ\inplus.dll]  <Tencent><1.5.0.0>
    [C:\WINDOWS\system32\l3codeca.acm]  <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
[PID: 1460][C:\Program Files\Tencent\QQ\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [C:\Program Files\Tencent\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 1984][C:\Program Files\lenovo\GUA\GUA.exe]  <lenovo><1.0.0.19>
[PID: 172][C:\Program Files\lenovo\IGRS\IGRS.exe]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\framework.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\ReliablePlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\WINDOWS\system32\WMCAPI.dll]  <Lenovo Group Limited><2, 0, 2, 19>
    [C:\WINDOWS\system32\wmcdrv.dll]  <Lenovo Group Limited><3, 1, 0, 10>
    [C:\WINDOWS\system32\wmcinst.dll]  <Lenovo Group Limited><2, 0, 1, 3>
    [C:\Program Files\lenovo\IGRS\CorePlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\SocketPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\BTComPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\SerialPortMonitor.dll]  <lenovo><1, 0, 1, 19>
    [C:\Program Files\lenovo\IGRS\ProxyPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\LoggingPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\DebugPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
gototop
 

[PID: 236][C:\Program Files\lenovo\IGRS\Ext\IgrsMonitor.exe]  <Lenovo Group Limited><1, 0, 1, 13>
    [C:\WINDOWS\system32\IgrsApi.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\WINDOWS\system32\WMCAPI.dll]  <Lenovo Group Limited><2, 0, 2, 19>
    [C:\WINDOWS\system32\wmcdrv.dll]  <Lenovo Group Limited><3, 1, 0, 10>
    [C:\WINDOWS\system32\wmcinst.dll]  <Lenovo Group Limited><2, 0, 1, 3>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
[PID: 1844][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  <Microsoft Corporation><7.00.9466>
[PID: 816][C:\Program Files\lenovo\IGRS\Ext\router.exe]  <Lenovo Group Limited><1, 3, 0, 12>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
    [C:\WINDOWS\system32\WMCAPI.DLL]  <Lenovo Group Limited><2, 0, 2, 19>
    [C:\WINDOWS\system32\wmcdrv.dll]  <Lenovo Group Limited><3, 1, 0, 10>
    [C:\WINDOWS\system32\wmcinst.dll]  <Lenovo Group Limited><2, 0, 1, 3>
[PID: 1916][C:\Program Files\lenovo\IGRS\Ext\wmcsvc.exe]  <Lenovo Group Limited><2, 0, 2, 17>
    [C:\WINDOWS\system32\wmcdrv.dll]  <Lenovo Group Limited><3, 1, 0, 10>
    [C:\WINDOWS\system32\wmcinst.dll]  <Lenovo Group Limited><2, 0, 1, 3>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
[PID: 2256][C:\Program Files\lenovo\IGRS Profiles\File Profile\IgrsFile.exe]  <Lenovo Group Limited><1, 0, 0, 4>
    [C:\WINDOWS\system32\IgrsApi.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS Profiles\File Profile\Util.dll]  <N/A><1, 0, 1, 1>
    [C:\Program Files\lenovo\IGRS Profiles\File Profile\FrameWork.dll]  <Lenovo><1, 0, 1, 1>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
    [C:\Program Files\lenovo\IGRS Profiles\File Profile\FileProfileModule.dll]  <Lenovo Group Limited><2, 0, 2, 35>
    [C:\Program Files\lenovo\IGRS Profiles\File Profile\BFileDialog.dll]  <Lenovo Group Limited><2, 0, 1, 32>
[PID: 2360][C:\Program Files\lenovo\IGRS EasyShare\FileShare.exe]  <联想集团有限公司><1, 0, 2, 23>
    [C:\Program Files\lenovo\IGRS EasyShare\IGRSAVSDK.dll]  <联想集团有限公司><1, 0, 1, 50204>
    [C:\WINDOWS\system32\IgrsApi.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS EasyShare\QuickDB.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
[PID: 3284][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
[PID: 2852][D:\down xunlei\音乐\Xplus.exe]  <新数通兴业科技(北京)有限公司><3.50>
    [D:\down xunlei\音乐\GetMD5.dll]  <N/A><N/A>
    [D:\down xunlei\音乐\Xplus_String.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
    [C:\WINDOWS\system32\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 2524][C:\WINDOWS\system32\wbem\wmiprvse.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3692][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\lenovo\IGRS EasyShare\IgrsAnywhere.dll]  <Lenovo Group Limited><1, 0, 2, 60>
    [D:\zhouhb\MAGICSET\haokanbar.dll]  <Xiang Feng Technology><2, 2, 0, 1612>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>
    [C:\K\Kaspersky Anti-Virus Personal Pro\scrchpg.dll]  <Kaspersky Lab><5.0.1.18>
    [C:\K\Kaspersky Anti-Virus Personal Pro\scrch_ag.dll]  <Kaspersky Lab><5.0.388.1>
    [C:\K\Kaspersky Anti-Virus Personal Pro\FSSync.dll]  <Kaspersky Lab><5.0.388.0>
    [C:\K\Kaspersky Anti-Virus Personal Pro\pr_rmt.dll]  <Kaspersky Lab><5.0.388.0>
    [C:\K\Kaspersky Anti-Virus Personal Pro\ccclient.dll]  <Kaspersky Lab><5.0.388.1>
    [C:\K\Kaspersky Anti-Virus Personal Pro\klipc.dll]  <Kaspersky Lab><5.0.388.0>
    [C:\K\Kaspersky Anti-Virus Personal Pro\KLUtil.dll]  <Kaspersky Lab><5.0.388.1>
    [C:\K\Kaspersky Anti-Virus Personal Pro\rpt.dll]  <Kaspersky Lab><5.0.388.2>
    [C:\K\Kaspersky Anti-Virus Personal Pro\CCIFACE.dll]  <Kaspersky Lab><5.0.388.1>
    [C:\K\Kaspersky Anti-Virus Personal Pro\prloader.dll]  <Kaspersky Lab><5.0.388.0>
    [C:\K\Kaspersky Anti-Virus Personal Pro\prkernel.ppl]  <Kaspersky Lab><5.0.388.0>
    [c:\k\kaspersky anti-virus personal pro\prstring.ppl]  <Kaspersky Lab><5.0.388.0>
    [c:\k\kaspersky anti-virus personal pro\pr_srv.ppl]  <Kaspersky Lab><5.0.388.0>
    [c:\k\kaspersky anti-virus personal pro\pr_clnt.ppl]  <Kaspersky Lab><5.0.388.0>
    [c:\k\kaspersky anti-virus personal pro\tempfile.ppl]  <Kaspersky Lab><5.0.388.0>
    [C:\WINDOWS\system32\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 3424][C:\Documents and Settings\a\桌面\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINDOWS\system32\wshcon32.dll]  <><4, 0, 0, 0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
gototop
 

[Windows Audio Server / Windows Audio Server]
<C:\WINDOWS\system32\drwatsn.exe><N/A>
[XDownloadService / XDownloadService]
<C:\WINDOWS\system32\Rundll32.exe "C:\WINDOWS\Downloader.dll",Run><N/A>
gototop
 

这个怎么处理?它们很可疑的,好像都是木马程序
gototop
 

怎么没人理我啊?大侠们帮帮忙,为什么现在每次开机都有"加载
C:\WINDOWS\Downloader.dll文件出错"????
gototop
 
123   3  /  3  页   跳转
页面顶部
Powered by Discuz!NT