| 引用: |
【甛甛圏οo的贴子】
现在死马当活马医。要是不行的话。。只能重新格盘分区弄过。。可电脑里的资料就太可惜了
U盘插上去马上染毒。。不知道该怎么办好了
……………… |
1、请参考置顶帖子，用XDELBOX删除下列病毒文件：
C:\windows\system32\zinforms.dll
C:\windows\system32\14799B55.DLL
C:\windows\system32\DbgHlp32.dll
C:\windows\system32\msccrt.dll
C:\windows\system32\upxdnd.dll
C:\windows\system32\cmdbcs.dll]
C:\windows\system32\MsPrint32D.dll
C:\windows\system32\NVDispDrv.dll
C:\windows\system32\MsIMMs32.dll
C:\windows\system32\mppds.dll
C:\windows\system32\AVPSrv.dll
C:\windows\system32\Kvsc3.dll
C:\windows\system32\GenProtect.dll
C:\windows\system32\nwizAsktao.exe
C:\windows\IGM.exe
C:\windows\system32\LYLoader.exe
C:\windows\system32\LYLoadbr.exe
C:\windows\system32\LYLeador.exe
C:\windows\system32\LYLoador.exe
C:\windows\system32\LYLoadar.exe
C:\windows\system32\LYLoadmr.exe
C:\windows\system32\LYLoadhr.exe
C:\windows\system32\LYLoadqr.exe
C:\windows\system32\mydata.exeC:\windows\system32\nwiztlbu.exe
C:\windows\system32\nwizwlwzs.exe
C:\windows\logo1_.EXE
C:\windows\rundl132.EXE
C:\windows\lsass.exe
C:\windows\system32\651E690B.EXE
C:\windows\system32\DbgHlp32.dll
C:\windows\system32\msccrt.dll
C:\windows\system32\upxdnd.dll
C:\windows\system32\cmdbcs.dll
C:\windows\system32\MsPrint32D.dll
C:\windows\system32\zinforms.dll
C:\windows\system32\csdoor1.dll
C:\windows\system32\55551.dll
C:\windows\system32\tldoor1.dll
C:\windows\system32\mydoor0.dll
C:\windows\system32\rxdoor1.dll
C:\windows\system32\dadoor0.dll
C:\windows\system32\dh3oor0.dll
C:\windows\system32\wddoor1.dll
C:\windows\system32\zxdoor1.dll
C:\windows\system32\qhdoor0.dll
C:\windows\system32\wldoor0.dll
C:\windows\system32\wodoor1.dll
C:\windows\system32\mhdoor2.dll
C:\Autorun.inf
C:\auto.exe
D:\Autorun.inf
D:\auto.exe
E:\Autorun.inf
E:\auto.exe
F:\Autorun.inf
F:\auto.exe
2、XDELBOX删除、重启后，立即用杀软全盘杀毒一遍。
3、用SRENG删除下列注册表项：
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<MsIMMs32><C:\windows\MsIMMs32.exe> []
<Kvsc3><C:\windows\Kvsc3.exe> []
<AVPSrv><C:\windows\AVPSrv.exe> []
<msccrt><C:\windows\msccrt.exe> []
<cmdbcs><C:\windows\cmdbcs.exe> []
<upxdnd><C:\windows\upxdnd.exe> []
<mppds><C:\windows\mppds.exe> []
<MsPrint32D><C:\windows\MsPrint32D.exe> []
<GenProtect><C:\windows\GenProtect.exe> []
<WinSysM><C:\windows\IGM.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<MSDEG32><LYLoader.exe> []
<MSDWG32><LYLoadbr.exe> [N/A]
<MSDCG32 ><LYLeador.exe> [N/A]
<MSDOG32><LYLoador.exe> [N/A]
<MSDSG32><LYLoadar.exe> [N/A]
<MSDMG32><LYLoadmr.exe> [N/A]
<MSDHG32><LYLoadhr.exe> [N/A]
<MSDQG32><LYLoadqr.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{63202121-F04D-11cf-64CD-33FF5FE1CF20}]
<N/A><C:\windows\system32\nwizAsktao.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6A202101-A04D-21cf-65CD-31FF5FE1CF20}]
<N/A><C:\windows\system32\mydata.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6A202101-F04D-11cf-64CD-31FF5FE1CF20}]
<N/A><C:\windows\system32\nwiztlbu.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{99371217-A10D-11cf-64CD-316F9FE1CF41}]
<N/A><C:\windows\system32\nwizwlwzs.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\logo1_.EXE]
<IFEO[logo1_.EXE]><logo1_.EXE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rundl132.EXE]
<IFEO[rundl132.EXE]><rundl132.EXE> [N/A]
服务
[Kerberos Key Distribution Centers / kkdc][Stopped/Auto Start]
<C:\windows\lsass.exe -netsvcs><N/A>
[6078EDA / 6078EDA][Stopped/Auto Start]
<C:\windows\system32\651E690B.EXE -k><Microsoft Corporation>
