12   2  /  2  页   跳转

[求助] 无法杀掉的病毒,求救..

回复: 无法杀掉的病毒,求救..

一.请先使用WINDOWS清理助手清理一下系统
  (点击下载)更新后使用


如果还不行,用下面的方法


使用XDelBox删除以下文件:(XDelBox,点击后进原创软件下载)
使用说明:删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。

没有路径的,请先搜索再添加到XDELBOX
c:\windows\system32\dndsaf.dll
c:\windows\system32\hhrdxd.dll
c:\windows\system32\jfrwdh.dll
c:\windows\system32\jggtsr.dll
c:\windows\system32\jhfrxz.dll
c:\windows\system32\wyhesm.dll
c:\windows\system32\zycdex.dll
c:\windows\system32\tdfhex.dll
mmkafnfw1111.dll
c:\program files\internet explorer\plugins\windows64.sys
yzztnmsn.dll
arjrkler.dll
tisqdtyu.dll
nhmxejkl.dll
c:\windows\system32\wmpuiqhx.dll
c:\windows\system32\drivers\hbkernel.sys

删除重启后使用SREng修复下面各项:

    启动项目 -- 注册表之如下项删除:
[{7914E0AA-ECCB-4311-B584-C49538227824}]    <C:\WINDOWS\system32\jhfrxz.dll>
[{0B846B26-BFE6-4E8E-A948-1DB17B77B483}]    <C:\WINDOWS\system32\tdfhex.dll>
[{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}]    <C:\WINDOWS\system32\jggtsr.dll>
[{168dbb0c-c4b7-4d7d-afc1-ab847a0b1a1c}]    <MMKAFNFW1111.dll>
[{D47A61B8-0EAB-417F-8DF4-5C949982A2AF}]    <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys>
[{45AADFAA-DD36-42AB-83AD-0521BBF58C24}]    <C:\WINDOWS\system32\zycdex.dll>
[{EB71E0B3-E97D-4D30-8733-E28266467617}]    <C:\WINDOWS\system32\wyhesm.dll>
[{259BF3CF-194D-4FE6-9ADB-DE6544B098B6}]    <C:\WINDOWS\system32\dndsaf.dll>
[{841529CB-7F77-4B99-A895-B5441E0D302F}]    <C:\WINDOWS\system32\jfrwdh.dll>
[{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}]    <C:\WINDOWS\system32\hhrdxd.dll>
注意该项[AppInit_DLLs]修改:把<yzztnmsn.dll,arjrkler.dll,tisqdtyu.dll,nhmxejkl.dll>修改为<>即清空
[{E490415F-65F8-B5C5-D8BA-9405FB12054E}]    <C:\WINDOWS\system32\yzztnmsn.dll>
[{6C648541-1025-9650-9057-6541258720C6}]    <C:\WINDOWS\system32\mndhfdwd.dll>
[{B629FF4F-ACDB-5C90-A098-FACB3456A26B}]    <C:\WINDOWS\system32\hdf453d.dll>
[{8A041F13-A111-12A3-B0CF-F99818AA68A8}]    <C:\WINDOWS\system32\zxmsewin.dll>
[{7FD45A54-9875-698F-E56E-65102358FDF7}]    <C:\WINDOWS\system32\apsggjba.dll>
[{A1954FAC-1023-154F-895A-1458258AD81A}]    <C:\WINDOWS\system32\ypdjhbmp.dll>
[{87FD640A-158F-48AC-FD14-1597F14A9778}]    <C:\WINDOWS\system32\mndshsrv.dll>
[{30618412-C528-C784-C056-C164D1F7C503}]    <C:\WINDOWS\system32\detxciua.dll>
[{2A698452-C5D8-C584-C256-C264C987C5A2}]    <C:\WINDOWS\system32\ijdybpaw.dll>
[{4D698451-2015-6358-9871-2015987452D4}]    <C:\WINDOWS\system32\apzhdtde.dll>
[{4A698102-5904-AFD0-20DF-CD1A65829CA4}]    <C:\WINDOWS\system32\zycbdime.dll>
[{AA59145F-315D-BC23-AC1F-145DF81A34AA}]    <C:\WINDOWS\system32\zyzxjime.dll>
[{50940F85-F015-14F1-A05F-F69858AC6D05}]    <C:\WINDOWS\system32\zptlcsys.dll>
[{DC69134A-F15F-D14D-A31A-C31C4D124FCD}]    <C:\WINDOWS\system32\arjrkler.dll>
[{6A908760-8000-4000-A000-9000322145A6}]    <C:\WINDOWS\system32\akjsfkaq.dll>
[{5D098345-6785-1098-5413-678067AE03D5}]    <C:\WINDOWS\system32\tysqbkol.dll>
[{57AC9076-C898-B098-D098-A18319080975}]    <C:\WINDOWS\system32\nhmxejkl.dll>
[{45671234-7890-ABCD-CDEF-567801237654}]    <C:\WINDOWS\system32\yxcsdhlp.dll>
[{7319A1F1-9410-9654-3201-345FFA349137}]    <C:\WINDOWS\system32\zywmgime.dll>
[{91698482-6555-3666-1222-954784129019}]    <C:\WINDOWS\system32\zxptejpg.dll>
[{80AF1289-F140-A140-D012-C1458759FC08}]    <C:\WINDOWS\system32\ypcqghlp.dll>
[{37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73}]    <C:\WINDOWS\system32\zywlcime.dll>
[{14698742-2059-3025-9058-954023874141}]    <C:\WINDOWS\system32\jkhxaklo.dll>
[{39109876-7619-9101-7012-901938475193}]    <C:\WINDOWS\system32\ietzcpaq.dll>
[{25FD6584-698F-BCD2-602C-698745210352}]    <C:\WINDOWS\system32\rijxbkin.dll>
[{528DF602-9541-A985-210A-984A698C6F25}]    <C:\WINDOWS\system32\ptjhehlp.dll>
[{38093456-9012-4568-9076-908765467183}]    <C:\WINDOWS\system32\tisqctyu.dll>
[{97FD640A-158F-48AC-FD14-1597F14A9779}]    <C:\WINDOWS\system32\mndsisrv.dll>
[{40618412-C528-C784-C056-C164D1F7C504}]    <C:\WINDOWS\system32\detxdiua.dll>
[{8319A1F1-9410-9654-3201-345FFA349138}]    <C:\WINDOWS\system32\zywmhime.dll>
[{49109876-7619-9101-7012-901938475194}]    <C:\WINDOWS\system32\ietzdpaq.dll>
[{9319A1F1-9410-9654-3201-345FFA349139}]    <C:\WINDOWS\system32\zywmiime.dll>
[{C629FF4F-ACDB-5C90-A098-FACB3456A26C}]    <C:\WINDOWS\system32\hdf453d1.dll>
[{8FD45A54-9875-698F-E56E-65102358FDF8}]    <C:\WINDOWS\system32\apsghjba.dll>
[{50618412-C528-C784-C056-C164D1F7C505}]    <C:\WINDOWS\system32\detxeiua.dll>
[{90AF1289-F140-A140-D012-C1458759FC09}]    <C:\WINDOWS\system32\ypcqhhlp.dll>
[{47A924AF-1A5F-CF21-AB1D-1D5CF82A8A74}]    <C:\WINDOWS\system32\zywldime.dll>
[{48093456-9012-4568-9076-908765467184}]    <C:\WINDOWS\system32\tisqdtyu.dll>
[wmpuiqhx.dll]    <C:\WINDOWS\system32\wmpuiqhx.dll>
[IFEO[360Loader.exe]]    <svchost.exe>
[IFEO[360Safe.exe]]    <svchost.exe>
[IFEO[360tray.exe]]    <svchost.exe>
[IFEO[ctfmon.exe]]    <SoundMan.exe>
[IFEO[IceSword]]    <svchost.exe>
[IFEO[Iparmor.exe]]    <svchost.exe>
[IFEO[kmailmon.exe]]    <svchost.exe>
[IFEO[ras]]    <svchost.exe>
[IFEO[runiep]]    <svchost.exe>
[IFEO[taskmgr.exe]]    <svchost.exe>

    启动项目 -- 服务-- 驱动程序之如下项禁用:
[HBKernel Driver / HBKernel]    <\SystemRoot\system32\DRIVERS\HBKernel.sys>

    系统修复-- 浏览器加载项之如下项删除:
[]    <C:\WINDOWS\system32\apsggjba.dll>
[]    <C:\WINDOWS\system32\tysqbkol.dll>
[]    <C:\WINDOWS\system32\zptlcsys.dll>
[]    <C:\WINDOWS\system32\tisqctyu.dll>
[]    <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys>
[]    <C:\WINDOWS\system32\apsggjba.dll>
[]    <C:\WINDOWS\system32\tysqbkol.dll>
[]    <C:\WINDOWS\system32\zptlcsys.dll>
[]    <C:\WINDOWS\system32\tisqctyu.dll>
[]    <C:\WINDOWS\system32\jkhxaklo.dll>
最后编辑天云一剑 最后编辑于 2008-07-15 21:15:22
汰丸,你妈妈六十大寿让你回家吃饭

http://hi.baidu.com/roxiel
gototop
 

回复:无法杀掉的病毒,求救..

请问各位高手在吗 又出新的问题了 网页里面打不出汉字了    只能是拼音 可能还有点小问题  这写字都是复制的
gototop
 

回复:无法杀掉的病毒,求救..

瑞星刚才检测出这个病毒 RootKit.Win32.RESSDT.ap  有两个
gototop
 

回复:无法杀掉的病毒,求救..

启动项
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]下
  <fmsiocps><C:\WINDOWS\fmsiocps.exe>  [File is missing]
    <HBmhly><"C:\WINDOWS\system32\HBmhly.exe" -r>  []
    <SoundMan><SoundMan.exe>  [1]
文件不正常,建议到http://www.virscan.org/测试
改注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><yzztnmsn.dll,arjrkler.dll,tisqdtyu.dll,nhmxejkl.dll>  [N/A]
为  <AppInit_DLLs><>
删除启动项[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]下注册表项目及<>内文件
    <{8C8D1401-A58D-A81C-CD24-A5915C4517C8}><C:\WINDOWS\system32\mnmhhsrv.dll>  [File is missing]
    <{00270027-0027-0027-0027-00270027BB15}><C:\WINDOWS\system32\wmpuiqhx.dll>  [File is missing]
    <{55694105-5108-9405-3695-954187462155}><C:\WINDOWS\system32\mpwdeapi.dll>  [File is missing]
    <{E490415F-65F8-B5C5-D8BA-9405FB12054E}><C:\WINDOWS\system32\yzztnmsn.dll>  [File is missing]
    <{6C648541-1025-9650-9057-6541258720C6}><C:\WINDOWS\system32\mndhfdwd.dll>  [File is missing]
    <{B629FF4F-ACDB-5C90-A098-FACB3456A26B}><C:\WINDOWS\system32\hdf453d.dll>  [File is missing]
    <{8A041F13-A111-12A3-B0CF-F99818AA68A8}><C:\WINDOWS\system32\zxmsewin.dll>  [File is missing]
    <{7FD45A54-9875-698F-E56E-65102358FDF7}><C:\WINDOWS\system32\apsggjba.dll>  [File is missing]
    <{A1954FAC-1023-154F-895A-1458258AD81A}><C:\WINDOWS\system32\ypdjhbmp.dll>  [File is missing]
    <{87FD640A-158F-48AC-FD14-1597F14A9778}><C:\WINDOWS\system32\mndshsrv.dll>  [File is missing]
    <{30618412-C528-C784-C056-C164D1F7C503}><C:\WINDOWS\system32\detxciua.dll>  [File is missing]
    <{2A698452-C5D8-C584-C256-C264C987C5A2}><C:\WINDOWS\system32\ijdybpaw.dll>  [File is missing]
    <{4D698451-2015-6358-9871-2015987452D4}><C:\WINDOWS\system32\apzhdtde.dll>  [File is missing]
    <{4A698102-5904-AFD0-20DF-CD1A65829CA4}><C:\WINDOWS\system32\zycbdime.dll>  [File is missing]
    <{AA59145F-315D-BC23-AC1F-145DF81A34AA}><C:\WINDOWS\system32\zyzxjime.dll>  [File is missing]
    <{50940F85-F015-14F1-A05F-F69858AC6D05}><C:\WINDOWS\system32\zptlcsys.dll>  [File is missing]
    <{DC69134A-F15F-D14D-A31A-C31C4D124FCD}><C:\WINDOWS\system32\arjrkler.dll>  [File is missing]
    <{6A908760-8000-4000-A000-9000322145A6}><C:\WINDOWS\system32\akjsfkaq.dll>  [File is missing]
    <{5D098345-6785-1098-5413-678067AE03D5}><C:\WINDOWS\system32\tysqbkol.dll>  [File is missing]
    <{57AC9076-C898-B098-D098-A18319080975}><C:\WINDOWS\system32\nhmxejkl.dll>  [File is missing]
    <{45671234-7890-ABCD-CDEF-567801237654}><C:\WINDOWS\system32\yxcsdhlp.dll>  [File is missing]
    <{7319A1F1-9410-9654-3201-345FFA349137}><C:\WINDOWS\system32\zywmgime.dll>  [File is missing]
    <{91698482-6555-3666-1222-954784129019}><C:\WINDOWS\system32\zxptejpg.dll>  [File is missing]
    <{80AF1289-F140-A140-D012-C1458759FC08}><C:\WINDOWS\system32\ypcqghlp.dll>  [File is missing]
    <{37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73}><C:\WINDOWS\system32\zywlcime.dll>  [File is missing]
    <{14698742-2059-3025-9058-954023874141}><C:\WINDOWS\system32\jkhxaklo.dll>  [File is missing]
    <{39109876-7619-9101-7012-901938475193}><C:\WINDOWS\system32\ietzcpaq.dll>  [File is missing]
    <{25FD6584-698F-BCD2-602C-698745210352}><C:\WINDOWS\system32\rijxbkin.dll>  [File is missing]
    <{528DF602-9541-A985-210A-984A698C6F25}><C:\WINDOWS\system32\ptjhehlp.dll>  [File is missing]
    <{38093456-9012-4568-9076-908765467183}><C:\WINDOWS\system32\tisqctyu.dll>  [File is missing]
    <{97FD640A-158F-48AC-FD14-1597F14A9779}><C:\WINDOWS\system32\mndsisrv.dll>  [File is missing]
    <{40618412-C528-C784-C056-C164D1F7C504}><C:\WINDOWS\system32\detxdiua.dll>  [File is missing]
    <{8319A1F1-9410-9654-3201-345FFA349138}><C:\WINDOWS\system32\zywmhime.dll>  [File is missing]
    <{49109876-7619-9101-7012-901938475194}><C:\WINDOWS\system32\ietzdpaq.dll>  [File is missing]
    <{9319A1F1-9410-9654-3201-345FFA349139}><C:\WINDOWS\system32\zywmiime.dll>  [File is missing]
    <{C629FF4F-ACDB-5C90-A098-FACB3456A26C}><C:\WINDOWS\system32\hdf453d1.dll>  [File is missing]
    <{8FD45A54-9875-698F-E56E-65102358FDF8}><C:\WINDOWS\system32\apsghjba.dll>  [File is missing]
    <{50618412-C528-C784-C056-C164D1F7C505}><C:\WINDOWS\system32\detxeiua.dll>  [File is missing]
    <{90AF1289-F140-A140-D012-C1458759FC09}><C:\WINDOWS\system32\ypcqhhlp.dll>  [File is missing]
    <{47A924AF-1A5F-CF21-AB1D-1D5CF82A8A74}><C:\WINDOWS\system32\zywldime.dll>  [File is missing]
    <{48093456-9012-4568-9076-908765467184}><C:\WINDOWS\system32\tisqdtyu.dll>  [File is missing]
    <{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}><C:\WINDOWS\system32\hhrdxd.dll>  []
    <{841529CB-7F77-4B99-A895-B5441E0D302F}><C:\WINDOWS\system32\jfrwdh.dll>  []
    <{259BF3CF-194D-4FE6-9ADB-DE6544B098B6}><C:\WINDOWS\system32\dndsaf.dll>  []
    <{EB71E0B3-E97D-4D30-8733-E28266467617}><C:\WINDOWS\system32\wyhesm.dll>  []
    <{45AADFAA-DD36-42AB-83AD-0521BBF58C24}><C:\WINDOWS\system32\zycdex.dll>  []
    <{D47A61B8-0EAB-417F-8DF4-5C949982A2AF}><C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys>  []
    <{168dbb0c-c4b7-4d7d-afc1-ab847a0b1a1c}><MMKAFNFW1111.dll>  [N/A]
    <{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}><C:\WINDOWS\system32\jggtsr.dll>  []
    <{0B846B26-BFE6-4E8E-A948-1DB17B77B483}><C:\WINDOWS\system32\tdfhex.dll>  []
    <{7914E0AA-ECCB-4311-B584-C49538227824}><C:\WINDOWS\system32\jhfrxz.dll>  []
删除启动项
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360Loader.exe]
    <IFEO[360Loader.exe]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360Safe.exe]
    <IFEO[360Safe.exe]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360tray.exe]
    <IFEO[360tray.exe]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ctfmon.exe]
    <IFEO[ctfmon.exe]><SoundMan.exe>  [1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IceSword]
    <IFEO[IceSword]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Iparmor.exe]
    <IFEO[Iparmor.exe]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kmailmon.exe]
    <IFEO[kmailmon.exe]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ras]
    <IFEO[ras]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\runiep]
    <IFEO[runiep]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe]
    <IFEO[taskmgr.exe]><svchost.exe>  [(Verified)Microsoft Windows Publisher]
删除IE浏览器加载项
[]
  {14698742-2059-3025-9058-954023874141} <C:\WINDOWS\system32\jkhxaklo.dll, N/A>

[]
  {38093456-9012-4568-9076-908765467183} <C:\WINDOWS\system32\tisqctyu.dll, N/A>
[]
  {50940F85-F015-14F1-A05F-F69858AC6D05} <C:\WINDOWS\system32\zptlcsys.dll, N/A>
[]
  {5D098345-6785-1098-5413-678067AE03D5} <C:\WINDOWS\system32\tysqbkol.dll, N/A>
[]
  {7FD45A54-9875-698F-E56E-65102358FDF7} <C:\WINDOWS\system32\apsggjba.dll, N/A>
[]
  {D47A61B8-0EAB-417F-8DF4-5C949982A2AF} <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys, N/A>
[]
  {14698742-2059-3025-9058-954023874141} <C:\WINDOWS\system32\jkhxaklo.dll, N/A>
[]
  {38093456-9012-4568-9076-908765467183} <C:\WINDOWS\system32\tisqctyu.dll, N/A>
[]
  {50940F85-F015-14F1-A05F-F69858AC6D05} <C:\WINDOWS\system32\zptlcsys.dll, N/A>
[]
  {5D098345-6785-1098-5413-678067AE03D5} <C:\WINDOWS\system32\tysqbkol.dll, N/A>
[]
  {7FD45A54-9875-698F-E56E-65102358FDF7} <C:\WINDOWS\system32\apsggjba.dll, N/A>
[]
  {D47A61B8-0EAB-417F-8DF4-5C949982A2AF} <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys, N/A>

Ps:1.楼主在局域网??
2.弄完后再上传次新的日志
gototop
 

回复 14F aaccbbdd 的帖子

谢谢你 在家里的宽带 刚才用了WINDOWS清理助手 现在可以在网页里打出字了 平常不打游戏 只看电影新闻 聊Q 没想到也能中毒 瑞星一直保持着同步更新.
gototop
 

回复: 无法杀掉的病毒,求救..



引用:
原帖由 aaccbbdd 于 2008-7-16 11:26:00 发表
启动项
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]下
  <fmsiocps><C:\WINDOWS\fmsiocps.exe>  [File is missing]
    <HBmhly><"C:\WINDOWS\system32\HBm......





不好意思,由于本人真的动手能力有限,修复删除没能彻底,这份日志你在帮我看看吧!

附件附件:

文件名:SREngLOG.log
下载次数:107
文件类型:application/octet-stream
文件大小:
上传时间:2008-7-16 12:59:03
描述:log

gototop
 

回复:无法杀掉的病毒,求救..

还有问题嘛 没问题的话我改标题了
gototop
 

回复:无法杀掉的病毒,求救..

————————————————————————————————————
在扫日志的SRENG工具》启动项目》注册表》里面找下面项目删除:
启动项目
注册表
    <SoundMan><SoundMan.exe>  [N/A]
    <{E490415F-65F8-B5C5-D8BA-9405FB12054E}><C:\WINDOWS\system32\yzztnmsn.dll>  [File is missing]
    <{A1954FAC-1023-154F-895A-1458258AD81A}><C:\WINDOWS\system32\ypdjhbmp.dll>  [File is missing]
    <{97FD640A-158F-48AC-FD14-1597F14A9779}><C:\WINDOWS\system32\mndsisrv.dll>  [File is missing]
    <{40618412-C528-C784-C056-C164D1F7C504}><C:\WINDOWS\system32\detxdiua.dll>  [File is missing]
    <{8319A1F1-9410-9654-3201-345FFA349138}><C:\WINDOWS\system32\zywmhime.dll>  [File is missing]
    <{49109876-7619-9101-7012-901938475194}><C:\WINDOWS\system32\ietzdpaq.dll>  [File is missing]
    <{9319A1F1-9410-9654-3201-345FFA349139}><C:\WINDOWS\system32\zywmiime.dll>  [File is missing]
    <{C629FF4F-ACDB-5C90-A098-FACB3456A26C}><C:\WINDOWS\system32\hdf453d1.dll>  [File is missing]
    <{8FD45A54-9875-698F-E56E-65102358FDF8}><C:\WINDOWS\system32\apsghjba.dll>  [File is missing]
    <{50618412-C528-C784-C056-C164D1F7C505}><C:\WINDOWS\system32\detxeiua.dll>  [File is missing]
    <{90AF1289-F140-A140-D012-C1458759FC09}><C:\WINDOWS\system32\ypcqhhlp.dll>  [File is missing]
    <{47A924AF-1A5F-CF21-AB1D-1D5CF82A8A74}><C:\WINDOWS\system32\zywldime.dll>  [File is missing]
    <{48093456-9012-4568-9076-908765467184}><C:\WINDOWS\system32\tisqdtyu.dll>  [File is missing]
    <{168dbb0c-c4b7-4d7d-afc1-ab847a0b1a1c}><MMKAFNFW1111.dll>  [N/A]
————————————————————————————————————
在扫日志的SRENG工具》启动项目》服务》驱动程序》里面找下面项删除
==================================
驱动程序
[HBKernel Driver / HBKernel][Stopped/Manual Start]
  <2 - 系统找不到指定的文件。
><N/A>
—————————————————————————————————————
用下载的“清理临时文件工具ATF-Cleaner-cn”,全选所有项目,点击“立即清理”
下载:http://bbs.ikaka.com/attachment.aspx?attachmentid=386491

用W i n d o w s 清理助手 ,清理你那系统。
W i n d o w s 清理助手 下载:http://www.arswp.com/
————————————————————————————————————
再重启电脑,反复检查,操作的结果,

杀毒软件如果有异常,可能需要卸载重装,升级至最新版本全盘杀。

其他任何个人软件的异常,都可能需要卸载重装了。

记得打打系统漏洞补丁

这补丁很重要
http://bbs.ikaka.com/showtopic-8509685.aspx

部分工具的操作看这贴:http://bbs.ikaka.com/showtopic-8442813.aspx
百年以后,你的墓碑旁 刻着的名字不是我
gototop
 

回复:无法杀掉的病毒,求救..

谢谢 麻烦各位朋友了 机器恢复的差不多了  如有问题我开新贴找大家 .
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT