瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 中了winlogon.exe,lsass.exe,专杀没用...

12345   3  /  5  页   跳转

中了winlogon.exe,lsass.exe,专杀没用...

[D:\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\qq\GroupLive.dll]  [N/A, N/A]
    [D:\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQPlugin.dll]  [N/A, N/A]
    [D:\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\qq\QRingMng.dll]  [N/A, N/A]
    [D:\qq\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\qq\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\qq\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\qq\QQAvatar.dll]  [N/A, N/A]
    [D:\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQAllInOne.dll]  [N/A, N/A]
    [D:\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\qq\BQQApplication.dll]  [N/A, N/A]
    [D:\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [D:\qq\QQSceneMng.dll]  [N/A, N/A]
[PID: 1548][D:\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [D:\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\qq\QQMainFrame.dll]  [N/A, N/A]
    [D:\qq\CQQApplication.dll]  [N/A, N/A]
    [D:\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\qq\GroupLive.dll]  [N/A, N/A]
    [D:\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQPlugin.dll]  [N/A, N/A]
    [D:\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\qq\QRingMng.dll]  [N/A, N/A]
    [D:\qq\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\qq\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\qq\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\qq\QQAllInOne.dll]  [N/A, N/A]
    [D:\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\qq\QQAvatar.dll]  [N/A, N/A]
    [D:\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\qq\BQQApplication.dll]  [N/A, N/A]
    [D:\qq\QQCustomFace.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\macromed\flash\Flash85.ocx]  [Macromedia, Inc., 8,5,0,133]
    [D:\qq\QQSceneMng.dll]  [N/A, N/A]
    [D:\qq\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
[PID: 748][D:\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [D:\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\qq\QQMainFrame.dll]  [N/A, N/A]
    [D:\qq\CQQApplication.dll]  [N/A, N/A]
    [D:\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\qq\GroupLive.dll]  [N/A, N/A]
    [D:\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQPlugin.dll]  [N/A, N/A]
    [D:\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\qq\QRingMng.dll]  [N/A, N/A]
    [D:\qq\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\qq\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\qq\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\qq\QQAllInOne.dll]  [N/A, N/A]
    [D:\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\qq\QQAvatar.dll]  [N/A, N/A]
    [D:\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\qq\BQQApplication.dll]  [N/A, N/A]
    [D:\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [D:\qq\QQSceneMng.dll]  [N/A, N/A]
[PID: 3992][C:\Documents and Settings\blueli\桌面\sreng2_zip~\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================


[/CODE]
gototop
 

各位大侠,帮忙看看吧
我的机器就靠你们了.................
gototop
 

问题是流氓清不掉啊
有什么好的方法啊各位大侠.....
兔子和360我都用了,不行的哦``````````````
gototop
 

运行SREng2,使用“启动项目”--注册表--删除
<sdmmrnm><D;]XJOEPXT]ufnq]te266/fyf> [N/A]
<dfsf><RUNDLL32.EXE C:\WINDOWS\system\Mvvp.dll,DImmcv> [N/A
<WebSecurity><C:\WINDOWS\system32\PvSec.dll> []
运行(双击)SRENG2,点“启动项目,服务,点“Win32服务应用程序”
勾选“隐藏微软服务”选中病毒服务
[Local Connection Manager / SoSCAR][Stopped/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\AHELX.DLL,Export 1087><N/A>
[VisionService / VisionService][Running/Auto Start]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\vision\VISVER.DLL,Service><Microsoft Corporation>
[WinXP DHCP Service / WinXPDHCPsvc][Stopped/Auto Start]
<C:\WINDOWS\system32\rundll32.exe xpdhcp.dll,start><Microsoft Corporation>
,选择“删除服务”
点“设置”选择“否”
运行SREng2,使用“系统修复”--浏览器加载项--删除
[Vision]
{6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\vision\vision.dll, >
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\vision\vision.dll, >
Vision]
{6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\vision\vision.dll, >
[>>彩信发送<<]
<res://C:\PROGRA~1\vision\vision.dll/mms.htm, N/A>
重启按F8进入安全模式下
显示隐藏文件
删除:
C:\WINDOWS\system\Mvvp.dll
C:\WINDOWS\system32\PvSec.dll
C:\WINDOWS\SYSTEM32\WBEM\AHELX.DLL
C:\WINDOWS\system32\xpdhcp.dll
C:\PROGRA~1\vision删掉这个文件夹
在清理流氓看还有什么 如果还有的话在传一次日志
gototop
 

鸟儿就不得了啊...一眼就看出来了啊
gototop
 

请问鸟儿....{6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\vision\vision.dll, >
[>>彩信发送<<]
这个为什么要删.有必要吗???
gototop
 

这个删除还是有必要的.毕竟在流氓软件的行列里.虽然没什么危害
gototop
 

vision
这样是搞不掉的
找个请流氓的或
用它提供的卸载
有保护不是简单能搞定除非你联不了网生成不了认证码
gototop
 

用kaka或windows清理专家
gototop
 

慢慢来吧.看来楼主光清理流氓软件就够受的了
gototop
 
12345   3  /  5  页   跳转
页面顶部
Powered by Discuz!NT