| 引用: |
【侃侠的贴子】修复
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,SKEYS /I
O1 - Hosts: 222.73.250.189 patch.ali213.net
O1 - Hosts: 203.95.1.201 www.cmplayer.com
O1 - Hosts: 221.231.129.30 ac.sdo.com
O1 - Hosts: 59.49.17.158 www.sxkszx.cn
O1 - Hosts: 211.154.222.56 bbs.cctv.com
O1 - Hosts: 61.152.117.72 sso.myrice.com
O1 - Hosts: 221.1.204.250 wstatic.xunlei.com
O1 - Hosts: 222.168.8.195 bbs.ccit365.com
O1 - Hosts: 60.195.252.238 game.tkgame.com
O1 - Hosts: 218.244.47.22 www.coc.cc
O1 - Hosts: 64.111.103.171 www.worldfax.net
O1 - Hosts: 205.196.214.24 www.download.com.ph
O1 - Hosts: 64.202.163.2 pop.dl530.com
O1 - Hosts: 219.238.233.252 forum.ikaka.com
O1 - Hosts: 222.222.65.71 www.2ndspace.com
O1 - Hosts: 131.107.102.120 www.betaplace.com
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - C:\Program Files\HgzServer\WindowsUpdate\rundll32.exe
O23 - Service: GrayX - Unknown owner - C:\WINDOWS\Grow.exe
O23 - Service: PsShutdown (PsShutdownSvc) - Unknown owner - C:\WINDOWS\System32\PSSDNSVC.EXE
重启后删除
C:\Program Files\HgzServer\WindowsUpdate\rundll32.exe
C:\WINDOWS\Grow.exe
C:\WINDOWS\System32\PSSDNSVC.EXE
……………… |
關于
O23 - Service: Gray_Pigeon_Server2.0 (GrayPigeonServer2.0) - Unknown owner - C:\Program Files\HgzServer\WindowsUpdate\rundll32.exe
O23 - Service: GrayX - Unknown owner - C:\WINDOWS\Grow.exe
這3個服務我補充一下.
开始 运行 输入 services.msc 找到Gray_Pigeon_Server2.0,GrayX双击 停止并且将启动类型改为 已禁用
开始 运行 输入regedit 分别定位到HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet00X\Services
查找Gray_Pigeon_Server2.0,GrayX, 目录，查到的清删除整个目录
重启计算机
显示所有文件并且显示隐藏的系统文件
删除如下文件
C:\Program Files\HgzServer\WindowsUpdate\rundll32.exe
C:\WINDOWS\Grow.exe
