12   2  /  2  页   跳转

被51ZC劫持,请求红夜鬼帮忙!!

[E:\msnqun\MSNHOOK.dll]  [Msn群开发团队, 1, 0, 0, 2]
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 1, 0, 3]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [CNNIC, 2, 2, 0, 4]
    [C:\PROGRA~1\3721\helper.dll]  [, 1, 1, 1, 1327]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
[PID: 3992][C:\WINDOWS\msagent\AgentSvr.exe]  [Microsoft Corporation, 2.00.0.3424]
    [E:\msnqun\MSNHOOK.dll]  [Msn群开发团队, 1, 0, 0, 2]
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 1, 0, 3]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [CNNIC, 2, 2, 0, 4]
    [C:\PROGRA~1\3721\helper.dll]  [, 1, 1, 1, 1327]
[PID: 1484][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SoDAHK.DLL]  [Sogou.com Inc., 1, 0, 1, 5]
    [E:\msnqun\MSNHOOK.dll]  [Msn群开发团队, 1, 0, 0, 2]
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 1, 0, 3]
    [C:\Program Files\CNNIC\Cdn\cdnuplib.dll]  [CNNIC, 2, 5, 0, 5]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [CNNIC, 2, 2, 0, 4]
    [C:\PROGRA~1\3721\helper.dll]  [, 1, 1, 1, 1327]
    [C:\PROGRA~1\3721\scrblock.dll]  [3721, 1, 0, 1, 1000]
    [C:\PROGRA~1\3721\alrex.dll]  [, 1, 0, 1, 1001]
    [C:\PROGRA~1\3721\autolive.dll]  [, 1, 1, 8, 1327]
    [C:\PROGRA~1\3721\alliveex.dll]  [ , 1, 0, 3, 1006]
    [E:\P4P\ToolBar.dll]  [Sogou.com Inc., 1, 4, 8, 18]
    [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.1.2003110300]
    [E:\P4P\sodaie.dll]  [Sogou.com Inc., 1, 2, 1, 5]
    [E:\P4P\autolink.dll]  [Sohu.com Inc., 1, 0, 2, 3]
    [C:\WINDOWS\DOWNLO~1\dfcnksc.dll]  [pmtjasoft, 1, 0, 0, 1]
    [C:\PROGRA~1\cdnpack\cdncn.dll]  [CNNIC, 1, 0, 0, 7]
    [C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll]  [Sun Microsystems, Inc., 5.0.60.5]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
    [C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll]  [CNNIC, 1, 1, 0, 0]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 2244][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SoDAHK.DLL]  [Sogou.com Inc., 1, 0, 1, 5]
    [E:\msnqun\MSNHOOK.dll]  [Msn群开发团队, 1, 0, 0, 2]
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 1, 0, 3]
    [C:\Program Files\CNNIC\Cdn\cdnuplib.dll]  [CNNIC, 2, 5, 0, 5]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [CNNIC, 2, 2, 0, 4]
    [C:\PROGRA~1\3721\helper.dll]  [, 1, 1, 1, 1327]
    [C:\PROGRA~1\3721\scrblock.dll]  [3721, 1, 0, 1, 1000]
    [C:\PROGRA~1\3721\alrex.dll]  [, 1, 0, 1, 1001]
    [C:\PROGRA~1\3721\autolive.dll]  [, 1, 1, 8, 1327]
    [C:\PROGRA~1\3721\alliveex.dll]  [ , 1, 0, 3, 1006]
    [E:\P4P\ToolBar.dll]  [Sogou.com Inc., 1, 4, 8, 18]
    [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.1.2003110300]
    [E:\P4P\sodaie.dll]  [Sogou.com Inc., 1, 2, 1, 5]
    [E:\P4P\autolink.dll]  [Sohu.com Inc., 1, 0, 2, 3]
    [C:\WINDOWS\DOWNLO~1\dfcnksc.dll]  [pmtjasoft, 1, 0, 0, 1]
    [C:\PROGRA~1\cdnpack\cdncn.dll]  [CNNIC, 1, 0, 0, 7]
    [C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll]  [Sun Microsystems, Inc., 5.0.60.5]
    [C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll]  [CNNIC, 1, 1, 0, 0]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 4064][e:\Program Files\WinRAR\WinRAR.exe]  [N/A, N/A]
    [E:\msnqun\MSNHOOK.dll]  [Msn群开发团队, 1, 0, 0, 2]
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 1, 0, 3]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [CNNIC, 2, 2, 0, 4]
    [C:\PROGRA~1\3721\helper.dll]  [, 1, 1, 1, 1327]
    [D:\nokia\Nokia PC Suite 6\PhoneBrowser.dll]  [Nokia, 6, 80, 37, 4]
    [D:\nokia\Nokia PC Suite 6\PCSCM.dll]  [Nokia, 6, 80, 66, 0]
    [C:\WINDOWS\system32\ConnAPI.DLL]  [Nokia., 6, 80, 55, 5]
    [D:\nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr]  [Nokia, 6, 80, 26, 0]
    [D:\nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr]  [Nokia, 6, 80, 8, 0]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[PID: 608][C:\DOCUME~1\hp\LOCALS~1\Temp\Rar$EX02.266\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [E:\msnqun\MSNHOOK.dll]  [Msn群开发团队, 1, 0, 0, 2]
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  [CNNIC, 2, 1, 0, 3]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [CNNIC, 2, 2, 0, 4]
    [C:\PROGRA~1\3721\helper.dll]  [, 1, 1, 1, 1327]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[D:\]
[autorun]
open=d:\myplay.pif

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
gototop
 

麻烦您了!
gototop
 

时不时地会自动跳出一个网站news.51zc.com
希望大师早日出手解救我。。。
gototop
 

运行(双击)SRENG2,点“启动项目,服务,点“Win32服务应用程序”
勾选“隐藏微软服务”选中病毒服务
Application Management /
,选择“删除服务”
点“设置”选择“否”

运行(双击)SRENG2,点“启动项目,服务,点“驱动程序”
勾选“隐藏微软服务”选中病毒服务
00
354437
354437
cdnprot
djihbaga
ggbgbegf
istd
jbiebjch
kmsinput
rokppp17
,选择“删除服务”
点“设置”选择“否”

重启按F8进入安全模式下
显示隐藏文件
删除: 
SystemRoot\system32\\drivers\\rokppp17.sys
C:\WINDOWS\system32\drivers\kmsinput.sys
SystemRoot\system32\drivers\jbiebjch.sys
SystemRoot\System32\DRIVERS\istdb.sys><
SystemRoot\system32\drivers\ggbgbegf.sys
\SystemRoot\system32\drivers\cdnprot.sys
\SystemRoot\system32\drivers\djihbaga.sys
-->%SystemRoot%\System32\appmgmts.dll
\SystemRoot\\SystemRoot\System32\drivers\1036203.sys
SystemRoot\\SystemRoot\System32\drivers\354437.sys
SystemRoot\System32\drivers\354437.sys

请下载LSPFix和WinsockXPFix这两个软件,
小软件下载
http://free5.ys168.com/?ufwihgu168
  重新启动电脑, 进入安全模式。运行LSPFix.exe,删除:

cdnns.dll
如果无法上网,请运行WinsockXPFix,
让它修复一下。

删除D盘的隐藏文件,右键打开,不要双击
d:\Autorun.inf
d:\myplay.pif


推荐使用360安全卫士清理一下流氓

.360下载地址:
http://www.360safe.com/
http://www.xdowns.com/soft/8/9/2006/Soft_31554.html
使用后删除360安全卫士

gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT