123   3  /  3  页   跳转

求助!!!!!!!!!!!!

[C:\WINDOWS\system32\MsHttpApp.dll]  [Microsoft Corporation, 1.0.0.1]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 1892][D:\Program Files\多特软件合集\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5, 6, 2, 300]
    [D:\Program Files\多特软件合集\Thunder\Program\ThunderEx.dll]  [, 1, 1, 2, 6]
    [D:\Program Files\多特软件合集\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 1, 0, 21]
    [D:\Program Files\多特软件合集\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 15, 2, 85]
    [D:\Program Files\多特软件合集\Thunder\Program\stlport_vc646.dll]  [STLport Consulting, Inc., 4.6.2003.1031]
    [D:\Program Files\多特软件合集\Thunder\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 15, 2, 85]
    [D:\Program Files\多特软件合集\Thunder\Program\iTargetAD.dll]  [N/A, ]
    [D:\Program Files\多特软件合集\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 1, 0, 8]
    [D:\Program Files\多特软件合集\Thunder\Components\DownAndPlay\DownAndPlay.dll]  [, 1, 0, 0, 3]
    [D:\Program Files\多特软件合集\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 0, 7, 29]
    [D:\Program Files\多特软件合集\Thunder\Components\Security\ThunderSafe.dll]  [深圳市迅雷网络技术有限公司, 1.0.0.10]
    [D:\Program Files\多特软件合集\Thunder\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 12]
    [D:\Program Files\多特软件合集\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 15]
    [D:\Program Files\多特软件合集\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 13, 2, 61]
    [D:\Program Files\多特软件合集\Thunder\Program\XLNet.Dll]  [Thunder Networking Technologies,LTD, 1, 2, 0, 8]
    [D:\Program Files\多特软件合集\Thunder\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 3368][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 3680][E:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [E:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 6, 0, 200, 320]
    [E:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [E:\Program Files\Tencent\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [E:\Program Files\Tencent\QQ\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
    [E:\Program Files\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [e:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [E:\Program Files\Tencent\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [E:\Program Files\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [E:\Program Files\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQAllInOne.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\GroupLive.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
    [E:\Program Files\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [E:\Program Files\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [E:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [E:\Program Files\Tencent\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [E:\Program Files\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [E:\Program Files\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 271]
    [E:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, ]
    [E:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技(深圳)有限公司, 2, 1, 9, 93]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [E:\Program Files\Tencent\QQ\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [E:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, ]
    [C:\WINDOWS\system32\msadp32.acm]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [E:\Program Files\Tencent\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [C:\WINDOWS\system32\WNPY.IME]  [ , 3, 0, 0, 1]
    [C:\Program Files\ShiQiang\wnpy\Dll32\wnpy_Query.dll]  [万能软件开发部, 1, 0, 0, 1]
    [C:\Program Files\ShiQiang\wnpy\Dll32\PyCodingUser.dll]  [万能软件开发部, 1.0.0.1]
    [C:\Program Files\ShiQiang\wnpy\Dll32\wnpy_StatusWnd.dll]  [万能软件开发部, 1.0.0.1]
    [C:\Program Files\ShiQiang\wnpy\Dll32\wnpy_CompWnd.dll]  [万能软件开发部, 1.0.0.1]
    [C:\WINDOWS\system32\UNISPIM6.IME]  [北京紫光华宇软件股份有限公司, 6.0.0.6077]
    [E:\Program Files\Tencent\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
gototop
 

[PID: 2132][C:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6]
    [C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2684][C:\Program Files\AVG Anti-Spyware\guard.exe]  [GRISOFT s.r.o., 7, 5, 1, 22]
    [C:\Program Files\AVG Anti-Spyware\engine.dll]  [GRISOFT s.r.o., 4, 2, 0, 19]
[PID: 2508][C:\Program Files\AVG Anti-Spyware\avgas.exe]  [GRISOFT s.r.o., 7, 5, 1, 43]
    [C:\Program Files\AVG Anti-Spyware\engine.dll]  [GRISOFT s.r.o., 4, 2, 0, 19]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2960][C:\Documents and Settings\endless waltz\桌面\me\Maxthon V1.5\Maxthon1.5.9puls\Maxthon.exe]  [Maxthon International Ltd., 1, 5, 9, 80]
    [C:\Documents and Settings\endless waltz\桌面\me\Maxthon V1.5\Maxthon1.5.9puls\maxzlib.dll]  [ , 1, 0, 0, 2]
    [C:\WINDOWS\system32\odbcbcp.dll]  [Microsoft Corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\Documents and Settings\endless waltz\桌面\me\Maxthon V1.5\Maxthon1.5.9puls\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\Msjava.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\WINDOWS\system32\VMHELPER.DLL]  [Microsoft Corporation, 5.00.3810]
    [C:\WINDOWS\system32\JIT.DLL]  [Microsoft Corporation, 5.00.3810]
    [C:\WINDOWS\system32\javart.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\WINDOWS\system32\msawt.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\WINDOWS\system32\javacypt.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\WINDOWS\system32\WNPY.IME]  [ , 3, 0, 0, 1]
    [C:\Program Files\ShiQiang\wnpy\Dll32\wnpy_Query.dll]  [万能软件开发部, 1, 0, 0, 1]
    [C:\Program Files\ShiQiang\wnpy\Dll32\PyCodingUser.dll]  [万能软件开发部, 1.0.0.1]
    [C:\Program Files\ShiQiang\wnpy\Dll32\wnpy_StatusWnd.dll]  [万能软件开发部, 1.0.0.1]
    [C:\Program Files\ShiQiang\wnpy\Dll32\wnpy_CompWnd.dll]  [万能软件开发部, 1.0.0.1]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 1932][C:\WINDOWS\sreng2\abc.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [notepad.exe %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
0.0.0.0      www.yoxiw.com
.
0.0.0.0      www.uusee.com/zt/tuiguang/uusee_ciqing.htm?u=dazhong1&c=11&d=0
.
0.0.0.0      www.xgamew.com
.
0.0.0.0      http://www.yoxiw.com/
.

==================================
进程特权扫描
特殊特权被允许: SeLoadDriverPrivilege [PID = 1952, C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 1964, C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2000, C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2260, C:\PROGRAM FILES\CHINANET\VNETCLIENT.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2528, C:\PROGRAM FILES\鱼鱼软件\鱼鱼桌面秀2\XDESKSHOW2.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 1892, D:\PROGRAM FILES\多特软件合集\THUNDER\PROGRAM\THUNDER5.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 3680, E:\PROGRAM FILES\TENCENT\QQ\QQ.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2132, C:\PROGRAM FILES\RISING\ANTISPYWARE\RUNIEP.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2960, C:\DOCUMENTS AND SETTINGS\ENDLESS WALTZ\桌面\ME\MAXTHON V1.5\MAXTHON1.5.9PULS\MAXTHON.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]
gototop
 

好了,这个完整的………………………………
gototop
 

顶…………………………………………………………
gototop
 

试试吧。可能还有我不认识的。

断网,关闭一切能关闭的东西,包括防火墙,杀软,网页,QQ,已断网了,所有加入内存的软件,都尽量退出。

尽量进安全模式

用扫日志的SRENG工具将下面的各项启动类型改为“Disabled”,(如果有自己认识的,可以不做)

==================================
服务
[Remote Help Session Manager / Rasautol][Stopped/Auto Start]
<><N/A>

[Volume Shadow Copyreit1 / ServiceCopyreit1][Running/Auto Start]
<c:\windows\system32\it1\svchost.exe><>

[Volume Shadow Copyremd5 / ServiceCopyremd5][Running/Auto Start]
<c:\windows\system32\md5\svchost.exe><>

驱动程序
[ADProt / ADProt][Stopped/System Start]
<\SystemRoot\system32\drivers\ADProt.sys><N/A>

[npkycryp / npkycryp][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\npkycryp.sys><N/A>

[PnpWmkDrv / PnpWmkDrv][Stopped/System Start]
<\??\C:\WINDOWS\system32\drivers\PnpWmkDrv.sys><N/A>

[tipktijk / tipktijk][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\tipktijk.sys><Yahoo! China Corporation>

[yaskp / yaskp][Stopped/Manual Start]
<2 - 系统找不到指定的文件。
><N/A>
————————————————————————————————————————————————
删除下面文件
c:\windows\system32\it1\svchost.exe
c:\windows\system32\md5\svchost.exe
————————————————————————————————————————————————————
用扫日志的SRENG工具删除下面或重置
HOSTS 文件
0.0.0.0 www.yoxiw.com
.
0.0.0.0 www.uusee.com/zt/tuiguang/uusee_ciqing.htm?u=dazhong1&c=11&d=0
.
0.0.0.0 www.xgamew.com
.
0.0.0.0 http://www.yoxiw.com/

————————————————————————————————————————————
重启电脑,不行,就再扫日志。
没异常,就安装并升级杀软至最新版本,全盘杀毒。
gototop
 

试下先。。。。。。。。。。。
gototop
 

从下午到现在都没事,应该是解决了…………感谢“天月来了”
gototop
 
123   3  /  3  页   跳转
页面顶部
Powered by Discuz!NT