瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 我被www.86vod.com緾上了求求大家帮下忙。

1   1  /  1  页   跳转

我被www.86vod.com緾上了求求大家帮下忙。

我被www.86vod.com緾上了求求大家帮下忙。

我被www.86vod.com緾上了,好惨啊,请大家帮下手好吗,谢谢!
我用HIJACKTHIS道出日志不过搞不懂

Logfile of HijackThis v1.99.1
Scan saved at 2:07:44, on 2007-2-9
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\tp4serv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\zts3.exe
C:\WINDOWS\rxs3.exe
C:\Program Files\rising\rav\CCenter.exe
C:\WINDOWS\system\1.exe
C:\Program Files\rising\rav\RavMonD.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\BitComet\BitComet.exe
D:\Tools\ha_hijackthis_1991\HijackThis.exe

R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: Flash 7 - {492B8F66-B8CF-4F7A-B0EE-B7383B92F5BA} - C:\WINDOWS\system\IceHBO.dll (file missing)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: (no name) - {669751ED-D558-49AE-B01A-3B374CC7910E} - C:\WINDOWS\system32\ssup.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - (no file)
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [BMMMONWND] rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor
O4 - HKLM\..\Run: [ExFilter] Rundll32.exe C:\WINDOWS\system32\hookdll.dll,ExecFilter solo
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE USB PC Camera 301P
O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - HKLM\..\Run: [mytsf] C:\DOCUME~1\previa\LOCALS~1\Temp\csrss.exe
O4 - HKLM\..\Run: [zts3] C:\WINDOWS\zts3.exe
O4 - HKLM\..\Run: [rxs3] C:\WINDOWS\rxs3.exe
O4 - HKLM\..\Run: [InternetEx] C:\WINDOWS\system\1.exe
O4 - HKLM\..\Run: [wsttrs] C:\WINDOWS\wsttrs.exe
O4 - HKLM\..\Run: [gwfjeqxs0] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [7zh1] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [qkylwlufcy] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [6hmg3jrdclvweg6] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [lukx16w7b] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [xhtyf7t] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [r4b32] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [ddi5] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [g8qv4] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [gft6bwmfeu2] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [zlrzu5d9grqlf25] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [bu08ehglx0l] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [5934026yej8yg1r] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [ztwg] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [jmw1jm3j3w] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [yfmh7] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [r0f12ucul8] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [9j4slt7] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [bd6u] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [z7i8] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [t3ls4m9m7w5gex] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [xme51b2] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [ku640zshkfg5] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [w0u6mtv2v2] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [j0rcrhmtlvu] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [2zlhq6ibm] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [w8t8y6g] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [isu6m4v3x4eh] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [1wkbqcr4e9gt] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [bgw9zecczq4xle5] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [91scdtymed49uf3] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [yvbh22qkdl634sr] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [4kxrdqhf9wxemud] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [Internet] C:\WINDOWS\system\svchost.exe
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [2mccqtr1wlgkk7] C:\DOCUME~1\previa\LOCALS~1\Temp\lexplore.exe
O4 - HKCU\..\Run: [t8ry1msbtddlm] C:\DOCUME~1\previa\LOCALS~1\Temp\iexp1ore.exe
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: !搜一搜 - res://C:\WINDOWS\downlo~1\CnsMinEx.dll/1003
O8 - Extra context menu item: &Download by NetAnts - C:\PROGRA~1\NetAnts\NAGet.htm
O8 - Extra context menu item: Download &All by NetAnts - C:\PROGRA~1\NetAnts\NAGetAll.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm?pid=U_3721_assist (file missing)
O9 - Extra button: Web反病毒保护 - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file missing)
O9 - Extra button: NetAnts - {57E91B47-F40A-11D1-B792-444553540000} - C:\PROGRA~1\NetAnts\NetAnts.exe
O9 - Extra 'Tools' menuitem: &NetAnts - {57E91B47-F40A-11D1-B792-444553540000} - C:\PROGRA~1\NetAnts\NetAnts.exe
O9 - Extra button: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://hot.3721.com/rd/shop_btn.htm (file missing)
O9 - Extra button: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - Extra button: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - Extra 'Tools' menuitem: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - Extra 'Tools' menuitem: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O11 - Options group: [!CNS]  上网助手-地址栏搜索
O11 - Options group: [TBH] 中文搜搜
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093529759179
O17 - HKLM\System\CCS\Services\Tcpip\..\{0280FBB4-5EC4-4357-A4AE-98E141A3E64A}: NameServer = 202.96.128.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{8ABDA3F7-6F99-44F4-9DDB-155999D45377}: NameServer = 202.96.128.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{0280FBB4-5EC4-4357-A4AE-98E141A3E64A}: NameServer = 202.96.128.68
O17 - HKLM\System\CS2\Services\Tcpip\..\{0280FBB4-5EC4-4357-A4AE-98E141A3E64A}: NameServer = 202.96.128.68
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O23 - Service: 卡巴斯基反病毒6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: EnvSec - Unknown owner - C:\WINDOWS\system32\envsec.exe (file missing)
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\Program Files\rising\rav\CCenter.exe
O23 - Service: Rising Realtime Monitor Service (RsRavMon) - rising - C:\Program Files\rising\rav\RavMonD.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe

最后编辑2007-02-09 12:22:00
分享到:
gototop
 

用HijackThis 修复下面选项然后在目录下删除
C:\WINDOWS\zts3.exe
C:\WINDOWS\rxs3.exe
C:\WINDOWS\system\1.exe
R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: (no name) - {669751ED-D558-49AE-B01A-3B374CC7910E} - C:\WINDOWS\system32\ssup.dll
O4 - HKLM\..\Run: [ExFilter] Rundll32.exe C:\WINDOWS\system32\hookdll.dllO4 - HKLM\..\Run: [mytsf] C:\DOCUME~1\previa\LOCALS~1\Temp\csrss.exe
O4 - HKLM\..\Run: [zts3] C:\WINDOWS\zts3.exe
O4 - HKLM\..\Run: [rxs3] C:\WINDOWS\rxs3.exe
O4 - HKLM\..\Run: [InternetEx] C:\WINDOWS\system\1.exe
O4 - HKLM\..\Run: [wsttrs] C:\WINDOWS\wsttrs.exe  11111111
O4 - HKLM\..\Run: [gwfjeqxs0] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [7zh1] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [qkylwlufcy] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [6hmg3jrdclvweg6] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [lukx16w7b] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [xhtyf7t] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [r4b32] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [ddi5] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [g8qv4] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [gft6bwmfeu2] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [zlrzu5d9grqlf25] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [bu08ehglx0l] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [5934026yej8yg1r] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [ztwg] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [jmw1jm3j3w] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [yfmh7] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [r0f12ucul8] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [9j4slt7] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [bd6u] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [z7i8] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [t3ls4m9m7w5gex] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [xme51b2] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [ku640zshkfg5] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [w0u6mtv2v2] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [j0rcrhmtlvu] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [2zlhq6ibm] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [w8t8y6g] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [isu6m4v3x4eh] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [1wkbqcr4e9gt] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [bgw9zecczq4xle5] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [91scdtymed49uf3] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [yvbh22qkdl634sr] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [4kxrdqhf9wxemud] C:\DOCUME~1\previa\LOCALS~1\Temp\iexpiore.exe
O4 - HKLM\..\Run: [Internet] C:\WINDOWS\system\svchost.exe
O4 - HKCU\..\Run: [2mccqtr1wlgkk7] C:\DOCUME~1\previa\LOCALS~1\Temp\lexplore.exe
O4 - HKCU\..\Run: [t8ry1msbtddlm] C:\DOCUME~1\previa\LOCALS~1\Temp\iexp1ore.exe

建议在添加删除中删除以下
上网助手-地址栏搜索
中文搜搜
下载木马专杀。。。全盘查杀
gototop
 

在用System Repair Engineer把日志扫描上来
gototop
 

我的也是,效果图如下

gototop
 

刚刚看到。该文件下载木马登陆器。建议使用木马查杀。升级到最新。。。
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT