瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】老是弹出www.qq2006down.com/....这个网址

123   2  /  3  页   跳转

【求助】老是弹出www.qq2006down.com/....这个网址

[C:\Program Files\QQ2005\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 160]
    [C:\Program Files\QQ2005\QQAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\DeskAdTop\fshook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 3, 2, 1]
    [C:\Program Files\QQ2005\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\Program Files\QQ2005\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQMainFrame.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\CQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\NewSkin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\HostingMgr.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\CameraDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\MailSummary.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\GroupLive.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQSysMsgMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQPlugin.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QRingMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [C:\Program Files\QQ2005\QQAvatar.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\Program Files\QQ2005\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [C:\Program Files\QQ2005\QQPet.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\BQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQAllInOne.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\SCCore.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQCustomFace.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\GroupConnection.dll]  [Tencent, 5, 0, 202, 170]
    [C:\WINDOWS\system32\macromed\flash\Flash85.ocx]  [Macromedia, Inc., 8,5,0,133]
    [C:\Program Files\QQ2005\QQSceneMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [C:\Program Files\QQ2005\CommercesMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [C:\Program Files\QQ2005\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200]
[PID: 2156][C:\Program Files\QQ2005\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [C:\Program Files\QQ2005\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 160]
    [C:\Program Files\QQ2005\QQAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\DeskAdTop\fshook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 3, 2, 1]
    [C:\Program Files\QQ2005\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\Program Files\QQ2005\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQMainFrame.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\CQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\NewSkin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\HostingMgr.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\CameraDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\MailSummary.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\GroupLive.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQSysMsgMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQPlugin.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QRingMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [C:\Program Files\QQ2005\QQAvatar.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\Program Files\QQ2005\QQAllInOne.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\SCCore.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [C:\Program Files\QQ2005\QQPet.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\BQQApplication.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [C:\Program Files\QQ2005\CommercesMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [C:\Program Files\QQ2005\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200]
    [C:\Program Files\QQ2005\QQSceneMng.dll]  [N/A, N/A]
[PID: 3128][C:\Program Files\QQ2005\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [C:\Program Files\QQ2005\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 160]
    [C:\Program Files\QQ2005\QQAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\DeskAdTop\fshook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 3, 2, 1]
    [C:\Program Files\QQ2005\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\Program Files\QQ2005\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\WizardCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQMainFrame.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\macromed\flash\Flash85.ocx]  [Macromedia, Inc., 8,5,0,133]
    [C:\Program Files\QQ2005\CQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\NewSkin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\HostingMgr.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\CameraDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\MailSummary.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\GroupLive.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQPlugin.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQAllInOne.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\SCCore.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQCustomFace.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQPet.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\Program Files\QQ2005\QRingMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
gototop
 


    [C:\Program Files\QQ2005\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQAvatar.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQSceneMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [C:\Program Files\QQ2005\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [C:\Program Files\QQ2005\GroupConnection.dll]  [Tencent, 5, 0, 202, 170]
    [C:\Program Files\QQ2005\QQSysMsgMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\BQQApplication.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [C:\Program Files\QQ2005\CommercesMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [C:\Program Files\QQ2005\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200]
    [D:\Program Files\QQGame\GamePublic.dll]  [N/A, N/A]
    [D:\Program Files\QQGame\Factory.dll]  [N/A, N/A]
    [D:\Program Files\QQGame\Logic\Global.dll]  [N/A, N/A]
    [D:\Program Files\QQGame\ProtHand\QQProt.dll]  [N/A, N/A]
    [D:\Program Files\QQGame\Socket\NetMod.dll]  [N/A, N/A]
    [D:\Program Files\QQGame\Common\Serial.dll]  [N/A, N/A]
    [D:\Program Files\QQGame\Common\Encrypt.dll]  [N/A, N/A]
[PID: 3024][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\DeskAdTop\fshook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\kakatool.dll]  [Beijing Rising Technology Co., Ltd., 2, 0, 0, 9]
    [C:\Program Files\DeskAdTop\deskipn.dll]  [, 1, 0, 0, 1]
    [C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll]  [新萌科技(上海)有限公司, 2, 0, 2, 0]
    [C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 0, 0, 2]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMUI64.DLL]  [CANON INC., 1.80.2.50]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMDR64.DLL]  [CANON INC., 1.80.2.50]
    [C:\WINDOWS\system32\macromed\flash\Flash85.ocx]  [Macromedia, Inc., 8,5,0,133]
[PID: 3644][C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE]  [Microsoft Corporation, 11.0.6568]
    [C:\Program Files\Rising\Rav\RsPlugIn.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMUI64.DLL]  [CANON INC., 1.80.2.50]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMDR64.DLL]  [CANON INC., 1.80.2.50]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMCP64.DLL]  [CANON INC., 1.80.2.50]
    [C:\Program Files\DeskAdTop\fshook.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 3764][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\DeskAdTop\fshook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\kakatool.dll]  [Beijing Rising Technology Co., Ltd., 2, 0, 0, 9]
    [C:\Program Files\DeskAdTop\deskipn.dll]  [, 1, 0, 0, 1]
    [C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll]  [新萌科技(上海)有限公司, 2, 0, 2, 0]
    [C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 0, 0, 2]
[PID: 688][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)]
[PID: 3352][C:\DOCUME~1\new\LOCALS~1\Temp\Rar$EX00.609\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\Program Files\DeskAdTop\fshook.dll]  [, 1, 0, 0, 1]
[PID: 2880][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\DeskAdTop\deskipn.dll]  [, 1, 0, 0, 1]
    [C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll]  [新萌科技(上海)有限公司, 2, 0, 2, 0]
    [C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 0, 0, 2]
    [C:\WINDOWS\system32\macromed\flash\Flash85.ocx]  [Macromedia, Inc., 8,5,0,133]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
gototop
 

运行(双击)SRENG2,点“启动项目,服务,点“Win32服务应用程序”
勾选“隐藏微软服务”选中病毒服务
Security Machine Manager
NetMeeting Remote Desktop Agent
,选择“删除服务”
点“设置”选择“否”
运行SREng2,使用“启动项目”--启动文件夹--删除
[Adobe Gamma Loader]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><N>
Adobe Gamma]
<C:\Documents and Settings\new\「开始」菜单\程序\启动\Adobe Gamma.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><N>


重启按F8进入安全模式下修复
显示隐藏文件
删除:                 
C:\WINDOWS\SYSTEM32\RUNDLLFROMWIN2000.EXE
C:\WINDOWS\SYSTEM32\WBEM\GKKPTJ90.DLL
C:\WINDOWS\system32\Nwsapagent.dll
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE

使用360安全卫士清除插件

.360下载地址:
http://www.xdowns.com/soft/8/9/2006/Soft_31554.html






这个自己查下c:\windows\system\Microsoft\kav.exe
gototop
 

红夜鬼1大哥!
我都贴出来了,麻烦你帮我看看吧!
gototop
 

哦!我试试,谢谢!
gototop
 

红夜鬼1哥
重启按F8进入安全模式下修复
显示隐藏文件
删除:
C:\WINDOWS\SYSTEM32\RUNDLLFROMWIN2000.EXE
C:\WINDOWS\SYSTEM32\WBEM\GKKPTJ90.DLL
C:\WINDOWS\system32\Nwsapagent.dll
C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE

删除时提示该文件写保护什么的,不能删除啊
gototop
 

Icesword v1.20(新手慎用)
①这是一斩断黑手的利刃,它适用于Windows 2000/XP/2003 操作系统,其内部功能是十分强大,用于查探系统中的幕后黑手-木马后门,并作出处理。可能您也用过很多类似功能的软件,比如一些进程工具、端口工具,但是现在的系统级后门功能越来越强,一般都可轻而易举地隐藏进程、端口、注册表、文件信息,一般的工具根本无法发现这些“幕后黑手”。IceSword 使用了大量新颖的内核技术,使得这些后门躲无所躲。当然使用它需要用户有一些操作系统的知识。使用前请详细阅读说明。
在对软件做讲解之前,首先说明第一注意事项:此程序运行时不要激活内核调试器(如softice),否则系统可能即刻崩溃。另外使用前请保存好您的数据,以防万一未知的Bug带来损失。
IceSword目前只为使用32位的x86兼容CPU的系统设计,另外运行IceSword需要管理员权限。

IceSword1.20 功能改动不大..跟 1.18 没多大区别..

②最新版本下载地址:
中文:http://202.38.64.10/~jfpan/download/IceSword120_cn.zip MD5 :cfb8514add1fbfb510b0084e837e561c

英文:http://202.38.64.10/~jfpan/download/IceSword120_en.zip MD5: 14573e30abbbe576ed739ec7866e5939

gototop
 

我是新手!你这一说我那敢用啊!
gototop
 

还是没搞好哦!
谁还有什么好的方法,指点哈啊!
gototop
 

去我的网盘下载KILLBOX删除这些文件试试
删除前够选结束explorer.exe
gototop
 
123   2  /  3  页   跳转
页面顶部
Powered by Discuz!NT