中毒了,删除不了,高手教下.最好有专杀工具.(菜鸟表看,越看越菜) - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛中毒了,删除不了,高手教下.最好有专杀工具.(菜鸟表看,越看越菜)

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

3 / 4 页

跳转页

中毒了,删除不了,高手教下.最好有专杀工具.(菜鸟表看,越看越菜)

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 11:22 \| 只看楼主短消息资料字号：小中大 21楼 [C:\WINDOWS\system32\mlang.dll] [Microsoft Corporation, 6.00.2900.2530 (xpsp.040919-1030)] [C:\WINDOWS\system32\msimtf.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\USERENV.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\LINKINFO.dll] [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)] [C:\WINDOWS\system32\ntshrui.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\ATL.DLL] [Microsoft Corporation, 3.05.2284] [C:\WINDOWS\system32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\MSACM32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\midimap.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\wsock32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WS2_32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WS2HELP.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mswsock.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\hnetcfg.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\wshtcpip.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\RASAPI32.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rasman.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\TAPI32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rtutils.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msv1_0.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\iphlpapi.dll] [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)] [C:\WINDOWS\system32\DNSAPI.dll] [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [C:\WINDOWS\System32\winrnr.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\sensapi.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rasadhlp.dll] [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\vbscript.dll] [Microsoft Corporation, 5.6.0.8825] [C:\WINDOWS\system32\MFC42.DLL] [Microsoft Corporation, 6.02.4131.0] [C:\WINDOWS\system32\MFC42LOC.DLL] [Microsoft Corporation, 6.00.8665.0] [C:\WINDOWS\system32\jscript.dll] [Microsoft Corporation, 5.6.0.8831] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINDOWS\system32\comdlg32.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\schannel.dll] [Microsoft Corporation, 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226)] [C:\WINDOWS\system32\ddrawex.dll] [Microsoft Corporation, 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\DDRAW.dll] [Microsoft Corporation, 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\DCIMAN32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mshtmled.dll] [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302)] [C:\WINDOWS\system32\ImgUtil.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\pngfilt.dll] [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302)] [C:\WINDOWS\system32\winabc.ime] [Microsoft Corporation, 5.1.2600.2180] [PID: 1952 / 沈威][C:\Documents and Settings\沈威\桌面\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\WINDOWS\system32\ntdll.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\kernel32.dll] [Microsoft Corporation, 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301)] [C:\WINDOWS\system32\USER32.dll] [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)] [C:\WINDOWS\system32\GDI32.dll] [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)] [C:\WINDOWS\system32\comdlg32.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SHLWAPI.dll] [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302)] [C:\WINDOWS\system32\ADVAPI32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\RPCRT4.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msvcrt.dll] [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SHELL32.dll] [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)] [C:\WINDOWS\system32\WINSPOOL.DRV] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\oledlg.dll] [Microsoft Corporation, 1.0 (xpsp_sp2_gdr.061016-0148)] [C:\WINDOWS\system32\ole32.dll] [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)] [C:\WINDOWS\system32\OLEAUT32.dll] [Microsoft Corporation, 5.1.2600.2180] [C:\WINDOWS\system32\VERSION.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\CRYPT32.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\MSASN1.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WINMM.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WS2_32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WS2HELP.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\LPK.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\USP10.dll] [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)]
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 11:23 \| 只看楼主短消息资料字号：小中大 22楼 [C:\WINDOWS\system32\RICHED20.DLL] [Microsoft Corporation, 5.30.23.1228] [C:\WINDOWS\system32\NTMARTA.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WLDAP32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SAMLIB.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Secur32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [D:\Program Files\360\360safe-v3.521003f\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [C:\WINDOWS\system32\MSCTF.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msctfime.ime] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\sfc.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WINTRUST.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\IMAGEHLP.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Documents and Settings\沈威\桌面\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] [C:\WINDOWS\system32\wsock32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\RASAPI32.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rasman.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\NETAPI32.dll] [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)] [C:\WINDOWS\system32\TAPI32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rtutils.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msv1_0.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\iphlpapi.dll] [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)] [C:\WINDOWS\system32\USERENV.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\urlmon.dll] [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302)] [C:\WINDOWS\System32\mswsock.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\DNSAPI.dll] [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [C:\WINDOWS\System32\winrnr.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\sensapi.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rasadhlp.dll] [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [C:\WINDOWS\system32\hnetcfg.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\wshtcpip.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Winsta.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\utildll.dll] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\SETUPAPI.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xpsp2res.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rsaenh.dll] [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629)]
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 11:23 \| 只看楼主短消息资料字号：小中大 23楼文件关联 .TXT Error. [C:\WINDOWS\notepad.exe %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeLoadDriverPrivilege [PID = 728, C:\WINDOWS\SYSTEM32\NVSVC32.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1852, C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 192, C:\PROGRAM FILES\CONEXANT\ACCESSRUNNER ADSL\CNXDSLTB.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 324, C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 360, D:\PROGRAM FILES\D-TOOLS\DAEMON.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 416, D:\PROGRAM FILES\360\360SAFE-V3.521003F\360SAFE\SAFEMON\360TRAY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 416, D:\PROGRAM FILES\360\360SAFE-V3.521003F\360SAFE\SAFEMON\360TRAY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2748, D:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 11:24 \| 只看楼主短消息资料字号：小中大 24楼终于发完了,大大看看啊.
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 12:51 \| 只看楼主短消息资料字号：小中大 25楼看了的大大来回个帖啊.
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 17:53 \| 只看楼主短消息资料字号：小中大 26楼都来看下啊,没人可以弄明白啊?
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 18:23 \| 只看楼主短消息资料字号：小中大 27楼不要沉底了啊.大家看啊
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 18:59 \| 只看楼主短消息资料字号：小中大 28楼救救我吧，我好惨啊．
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:	发表于： 2007-07-12 21:08 \| 只看楼主短消息资料字号：小中大 29楼帮我看下啊,不要沉了.
新神父初生襁褓狮帖子:28 注册: 2007-07-11 来自:

agee 飘泊而立狮帖子:543 注册: 2007-01-26 来自:	发表于： 2007-07-12 21:13 \| 短消息资料字号：小中大 30楼删除以下服务 [Windows eeqd RunThem / eeqd][Stopped/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\zzly\jjvi.dll><N/A> [WebPrint / WebPrint][Stopped/Auto Start] <c:\windows\system32\webprint.exe><N/A> 删除以下驱动 [mszstb / mszstb][Stopped/Auto Start] <\??\C:\WINDOWS\system32\drivers\mszstb.sys><N/A> [mxdispdr / mxdispdr][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\mxdispdr.sys><N/A> 并按地址删除原文件
agee 飘泊而立狮帖子:543 注册: 2007-01-26 来自:

<<上一主题|下一主题>>

3 / 4 页

跳转页

页面顶部

Powered by Discuz!NT