瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 求助,怎么彻底删除Trojan.Agent.zcj???

123   2  /  3  页   跳转

求助,怎么彻底删除Trojan.Agent.zcj???

[PID: 2372][D:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36]
    [D:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28]
    [D:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6]
    [D:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [D:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [D:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 2404][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2436][C:\WINDOWS\ATK0100\ATKOSD.exe]  [, 1043, 2, 15, 51]
[PID: 2060][D:\EyouIPB Agent\GMon.exe]  [N/A, N/A]
[PID: 2748][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\kakatool.dll]  [Beijing Rising Technology Co., Ltd., 2, 0, 2, 5]
    [C:\WINDOWS\system32\rybskmqn.dll]  [Microsoft Corporation, 1, 0, 0, 24]
    [C:\WINDOWS\system32\xlxknnbi.dll]  [, 1, 0, 0, 9]
    [E:\QQ\QQIEHelper.dll]  [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
    [D:\Thunder\ComDlls\XunLeiBHO_004.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 3]
    [C:\WINDOWS\system32\ZComBHO.dll]  [zcom, 1.00]
    [D:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sohu.com Inc., 1, 0, 2, 2]
    [C:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  [Macromedia, Inc., 10.0r210]
[PID: 2132][D:\Program Files\Rising\Rav\RsAgent.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [D:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
[PID: 2292][C:\WINDOWS\msagent\AgentSvr.exe]  [Microsoft Corporation, 2.00.0.3424]
[PID: 3900][C:\Documents and Settings\Administrator\桌面\sreng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
gototop
 

大虾们多多指教啊
gototop
 

为什么会有这种病毒的啊?这种病毒有什么害处?
gototop
 

一打开浏览器就出现,麻烦
gototop
 

是呀!我也想知道这种病毒有什么害处?我也中这种毒了!!!
gototop
 

我也中这种毒了!!!9999999999999999999999999
gototop
 

怎么没人帮忙啊????
gototop
 

运行System Repair Engineer 系统修复,浏览器加载项,删除
BhoObj Class]
{0B7DB39C-3E87-5A1B-EDA2-02B883DEE790} <C:\WINDOWS\system32\rybskmqn.dll, Microsoft Corporation>
安全模式下删除
C:\WINDOWS\system32\rybskmqn.dll
C:\WINDOWS\system32\rybskmqns.exe
gototop
 

千恩万谢啊!!!!
gototop
 

问一下,启动项目里没有浏览器加载项这个选项啊???
gototop
 
123   2  /  3  页   跳转
页面顶部
Powered by Discuz!NT