[PID: 936][C:\Program Files\Globallink\Game\share\OurFriend\ourfriend.exe]  [北京联众电脑技术有限责任公司, 1, 0, 0, 1]
    [C:\Program Files\Globallink\Game\share\OurFriend\Voice.dll]  [N/A, N/A]
    [C:\Program Files\Globallink\Game\share\OurFriend\GLP2PComm.dll]  [N/A, N/A]
    [C:\Program Files\Globallink\Game\share\OurFriend\OFCatchScreen.dll]  [N/A, 1, 0, 0, 1]
    [C:\Program Files\Globallink\Game\share\OurFriend\GLCompress.dll]  [N/A, N/A]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 2, 5, 0, 2]
    [C:\Program Files\Globallink\Game\share\OurFriend\ODCtrlRes.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Globallink\Game\share\OurFriend\ourfriend_res.dll]  [北京联众电脑技术有限责任公司, 1, 0, 0, 1]
    [C:\WINDOWS\system32\GLPNG.dll]  [globallink(ourgame) , 1, 0, 0, 2]
    [C:\WINDOWS\system32\GLCOMPRESS.dll]  [globallink, 1, 0, 0, 2]
    [C:\Program Files\Globallink\Game\share\roomicon.dll]  [Beijing GlobalLink Computer Corp., 2, 5, 0, 6]
    [C:\Program Files\Globallink\Game\share\RIconEx.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 1, 45]
    [C:\Program Files\Globallink\Game\share\people.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 3]
    [C:\Program Files\Globallink\Game\share\Image\Room\Table0.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Table1.dll]  [Beijing GlobalLink Computer Corp., 2, 1, 2, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Table2.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx0.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx1.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx2.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx3.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx4.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx5.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx6.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx7.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx8.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx9.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx10.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx11.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx12.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx13.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 2]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx14.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\peopleEx15.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_0.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_1.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_2.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_3.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_4.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_5.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_6.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_7.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_8.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_9.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_10.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_11.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 0, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_12.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_13.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_14.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player0_15.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_0.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]

[C:\Program Files\Globallink\Game\share\Image\Room\Player1_1.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_2.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_3.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_4.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_5.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_6.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_7.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_8.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_9.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_10.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_11.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_12.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_13.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_14.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player1_15.dll]  [Beijing GlobalLink Computer Corp., 2, 2, 0, 1]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_0.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_1.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_2.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_3.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_4.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_5.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_6.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_7.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_8.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_9.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_10.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_11.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_12.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_13.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_14.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\Program Files\Globallink\Game\share\Image\Room\Player2_15.dll]  [Beijing GlobalLink Computer Corp., 2, 0, 1, 255]
    [C:\PROGRA~1\GLOBAL~1\Game\share\GLAvatar.ocx]  [, 2, 2, 0, 32]
    [c:\program files\globallink\game\share\glacm.dll]  [N/A, N/A]
    [C:\PROGRA~1\GLOBAL~1\Game\share\GLChatEx.ocx]  [GlobalLink, 2, 5, 1, 30]
    [C:\PROGRA~1\GLOBAL~1\Game\share\glchatex.dll]  [GlobalLink, 2, 5, 1, 30]
    [C:\PROGRA~1\GLOBAL~1\Game\share\odctrls\ourfriend_skn.dll]  [, 1, 0, 5, 4]
    [C:\WINDOWS\system32\codecvt.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\GLGIFTGA.dll]  [globallink(ourgame) , 1, 0, 0, 2]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2724][C:\Program Files\Globallink\Game\share\GLOTV\GLOTVCLIENT.EXE]  [北京联众电脑技术有限责任公司, 1, 0, 0, 1]
    [C:\Program Files\Globallink\Game\share\GLOTV\live.dll]  [N/A, N/A]
    [C:\Program Files\Globallink\Game\share\GLOTV\livesvr.dll]  [N/A, N/A]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 2, 5, 0, 2]
    [c:\program files\globallink\game\share\glacm.dll]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 304][E:\重装系统备份文件\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 2, 5, 0, 2]
    [c:\program files\globallink\game\share\glacm.dll]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================

弹出的广告网页其中就有http://www.sms591.com/  还在桌面生成快捷方式,自动添加收藏夹....

重新启动电脑，自动检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式(Safe Mode)进入Windows。）


运行(双击)SRENG2，点“启动项目，服务，点“驱动程序”
勾选“隐藏已认证的微软项目”选中病毒服务abp480n5选择“删除服务”
点“设置”选择“否”


运行(双击)SRENG2，点“启动项目，服务，点“Win32服务应用程序”
勾选“隐藏微软服务”选中病毒服务
B302EC43
Win32 Display Driver
Windows DHCP Service
，选择“删除服务”
点“设置”选择“否”

关闭所有浏览窗口以及一些不必要的程序
运行SREng2,使用：系统修复－－浏览器加载项－－选中以下的项删除
C:\WINDOWS\system32\WinSC32.dll

关闭所有浏览窗口以及一些不必要的程序
运行SREng2,使用“启动项目”－－注册表－－选中以下的项删除
c:\program files\microsoft\gcxhmjes.dll

显示隐藏文件
删除：
C:\WINDOWS\system32\B302EC43.EXE
C:\WINDOWS\system32\windds32.dll
C:\WINDOWS\system32\windhcp.ocx
C:\WINDOWS\SYSTEM32\DRIVERS\abp480n5.SYS
c:\program files\microsoft\gcxhmjes.dll
C:\WINDOWS\system32\WinSC32.dll