瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 红夜鬼再么》?????帮我看看!不知道该怎么做!!

1   1  /  1  页   跳转

红夜鬼再么》?????帮我看看!不知道该怎么做!!

红夜鬼再么》?????帮我看看!不知道该怎么做!!

着里那些东西该删掉呀!!!机子现在隐藏文件打不开,杀不了毒,还有流氓软件!
麻烦你给看看!实在不知道该怎么办了!!谢谢
2006-11-15,21:33:06

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows Millennium Edition -

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><ctfmon.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <SystemTray><SysTray.Exe>  [Microsoft Corporation]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
    <RavMon><"C:\Program Files\Rising\Rav\RavMon.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <*StateMgr><C:\WINDOWS\System\Restore\StateMgr.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><EXPLORER.EXE>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]

==================================
启动文件夹
[027B28]
  <C:\WINDOWS\All Users\Start Menu\Programs\启动\027B28.exe -->  [N/A]><N>
[腾讯QQ]
  <C:\WINDOWS\Start Menu\Programs\启动\腾讯QQ.lnk --> C:\PROGRA~1\TENCENT\QQ\QQ.EXE [TENCENT]><N>
[027B28]
  <C:\WINDOWS\Start Menu\Programs\启动\027B28.exe -->  [N/A]><N>

==================================
服务
N/A

==================================
驱动程序
N/A

==================================
浏览器加载项
[DDDMon Class]
  {6BDE1669-B490-48E3-B668-456314F2D6C3} <C:\PROGRAM FILES\DUDU\DDDCLIENT\DDDIEMON.DLL, N/A>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASBAR.DLL, Yahoo!>
[Yahoo!Photo]
  {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YPHTB.DLL, Yahoo! China>
[DragSearch BHO]
  {EF1D17A9-089F-40cc-8D64-7324CDEBA0DB} <C:\PROGRA~1\YISOU\YISOUB.DLL, N/A>
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\SYSTEM\XUNLEIBHO_V14.DLL, Thunder Networking Technologies,LTD>
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSHOOK.DLL, 北京三七二一科技有限公司>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YANGLING.DLL, Yahoo.>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[雅虎助手]
  {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[名品折扣]
  {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://adtaobao.allyes.com/main/adfclick?db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816, N/A>
[Yahoo 3.5G电邮]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[雅虎WIDGET]
  {6354ABE6-05F1-49ed-B850-E423120EC338} <http://cn.widget.yahoo.com/index.htm?source=Cns, N/A>
[]
  {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[]
  {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[新浪点点通阅读器]
  {F0646DC8-58CD-4C64-8F6B-525043914685} <C:\WINDOWS\DOWNLOADED PROGRAM FILES\RSSBAND.DLL, 北京新浪信息技术有限公司>
[]
  {974AD624-EA50-4831-A6C0-3040F6665396} <C:\WINDOWS\DOWNLOADED PROGRAM FILES\RSSBAND.DLL, 北京新浪信息技术有限公司>
[&使用迅雷下载]
  <C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\Program\GetAllUrl.htm, N/A>
[!搜一搜]
  <res://C:\PROGRAM FILES\YISOU\YISOU.DLL/232, N/A>
[雅虎搜索]
  <res://C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASBAR.DLL/246, N/A>
[添加到雅虎订阅(&Y)]
  <res://C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YRSS.DLL/YRSSMENUEXT, N/A>

==================================
正在运行的进程
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\COMMON FILES\SYSTEM\4802B287.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\SYSTEM\LG32PPRT.DLL]  [Legend Computer Systems Limited, 3.2.1]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
    [C:\WINDOWS\SYSTEM\LEXLMPM.DLL]  [Lexmark International, Inc., 96,05,12,00]
    [C:\WINDOWS\SYSTEM\LG32LMDL.DLL]  [Lexmark International, Inc., 5, 11, 00, 00]
    [C:\WINDOWS\SYSTEM\LEXBCE.DLL]  [Lexmark International, Inc., 5,12,00,00]
最后编辑2006-11-17 13:10:33
分享到:
gototop
 

[C:\WINDOWS\SYSTEM\LG32LMON.DLL]  [Legend Computer Systems Limited, 3.2.1]
[PID: 4294947699][C:\WINDOWS\SYSTEM\SPOOL32.EXE]  [Microsoft Corporation, 4.90.3000]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294937875][C:\WINDOWS\SYSTEM\MPREXE.EXE]  [Microsoft Corporation, 4.90.3000]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMINEX.DLL]  [国风因特软件(北京)有限公司, 1, 0, 3, 4]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\COMMON FILES\SYSTEM\4802B287.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSIO.DLL]  [北京三七二一科技有限公司, 1, 0, 2, 6]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMINIO.DLL]  [北京三七二一科技有限公司, 1, 0, 3, 5]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294770983][C:\RUNDLL32.EXE]  [Microsoft Corporation, 4.90.3000]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\SYSTEM\LEXUSB32.DLL]  [Lexmark International, Inc., 5,12,00,00]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294799695][C:\WINDOWS\SYSTEM\LEXBCES.EXE]  [Lexmark International, Inc., 5,12,00,00]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  [N/A, N/A]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294782903][C:\WINDOWS\SYSTEM\RPCSS.EXE]  [Microsoft Corporation, 4.71.3328]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294730175][C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE]  [Microsoft Corporation, 4.90.0.2533]
    [C:\WINDOWS\SYSTEM\DCIMAN32.DLL]  [Intel(R) Corp., Microsoft Corp., 4.90.3000]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YPHTB.DLL]  [Yahoo! China, 1, 1, 2, 1034]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASBAR.DLL]  [Yahoo!, 2, 1, 9, 1049]
    [C:\WINDOWS\SYSTEM\XUNLEIBHO_V14.DLL]  [Thunder Networking Technologies,LTD, 4, 6, 0, 62]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YALIVE.DLL]  [$, 2, 1, 8, 1048]
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YHELPER.DLL]  [$, 2, 0, 9, 1027]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YCLICKON.DLL]  [YAHOO Corporation Limited, 2, 0, 1, 1002]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSHOOK.DLL]  [北京三七二一科技有限公司, 1, 0, 4, 2]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\COMMON FILES\SYSTEM\4802B287.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294760163][C:\WINDOWS\EXPLORER.EXE]  [Microsoft Corporation, 5.50.4134.100]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294642915][C:\WINDOWS\SYSTEM\SYSTRAY.EXE]  [Microsoft Corporation, 4.90.3000]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294687399][C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE]  [RealNetworks, Inc., 0.1.0.3510]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
[PID: 4294656443][C:\WINDOWS\SYSTEM\CTFMON.EXE]  [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 4294696947][C:\WINDOWS\SYSTEM\WMIEXE.EXE]  [Microsoft Corporation, 4.90.2452.1]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YNOTIFIER.DLL]  [$, 1, 0, 0, 5]
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YALIVE.DLL]  [$, 2, 1, 8, 1048]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YHELPER.DLL]  [$, 2, 0, 9, 1027]
[PID: 4294497007][C:\PROGRAM FILES\YAHOO!\ASSISTANT\YLIVE.EXE]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSIO.DLL]  [北京三七二一科技有限公司, 1, 0, 2, 6]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMINIO.DLL]  [北京三七二一科技有限公司, 1, 0, 3, 5]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YEHEOCX.DLL]  [$, 9, 0, 1, 1010]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\SHELL\YASSECBLK.DLL]  [Yahoo, 1, 0, 2, 1002]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YOPTIMUM.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YREPAIR.DLL]  [Yahoo, 1, 0, 8, 1321]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASFSKS.DLL]  [3721.com, 2, 1, 1, 87]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YADFILTER.DLL]  [ , 1, 0, 3, 1002]
    [C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YANGLING.DLL]  [Yahoo., 1, 0, 6, 1007]
    [C:\WINDOWS\SYSTEM\XUNLEIBHO_V14.DLL]  [Thunder Networking Technologies,LTD, 4, 6, 0, 62]
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\COMMON FILES\SYSTEM\4802B287.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YCLICKON.DLL]  [YAHOO Corporation Limited, 2, 0, 1, 1002]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSHOOK.DLL]  [北京三七二一科技有限公司, 1, 0, 4, 2]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YPHTB.DLL]  [Yahoo! China, 1, 1, 2, 1034]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASNOAD.DLL]  [$, 1, 1, 4, 1006]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YZSNETPROTO.DLL]  [Yahoo, 1, 0, 0, 1]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASIESEC.DLL]  [Yahoo, 1, 0, 2, 1003]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASWIPER.DLL]  [Yahoo, 1, 0, 1, 1004]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASBAR.DLL]  [Yahoo!, 2, 1, 9, 1049]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSPLUS.DLL]  [3721, 1, 0, 0, 2]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YALIVE.DLL]  [$, 2, 1, 8, 1048]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSHINT.DLL]  [3721, 1, 0, 1, 1]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YHELPER.DLL]  [$, 2, 0, 9, 1027]
[PID: 4294571295][C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE]  [Microsoft Corporation, 5.50.4134.100]
[PID: 4294422403][C:\WINDOWS\SYSTEM\PSTORES.EXE]  [Microsoft Corporation, 5.00.2133.2]
    [C:\WINDOWS\SYSTEM\I81XDD.DLL]  [Intel Corporation, 4.12.01.2570]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YHELPER.DLL]  [$, 2, 0, 9, 1027]
[PID: 4294279827][C:\WINDOWS\SYSTEM\DDHELP.EXE]  [Microsoft Corporation, 4.08.01.0881]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\ITARGETAD.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 1, 55]
    [C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\PROGRAM FILES\COMMON FILES\SYSTEM\4802B287.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMPONENTS\P4PCLIENT\P4PCLIENT.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 3, 8]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMPONENTS\INMEDIA\IEMBED04.DLL]  [ , 2, 3, 0, 37]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMPONENTS\INMEDIA\IEMBEDSHELL.DLL]  [ , 1, 0, 0, 11]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PLUGINS\TINGTING\TINGTING.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 7]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\FLOATBAR.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\REGISTERDLL.DLL]  [Thunder Networking Technologies,LTD, 2, 1, 0, 18]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YHELPER.DLL]  [$, 2, 0, 9, 1027]
[PID: 4294587879][C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\THUNDER5.EXE]  [Thunder Networking Technologies,LTD, 5.3.0.220]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\HISTORYINFO_MANAGE.DLL]  [Thunder Networking Technologies,LTD, 5, 2, 0, 148]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\MSGMANAGE.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 15]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\UPDATEDOWNLOAD.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 1, 8]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\DOWNLOAD_INTERFACE.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 4, 71]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\ASYN_DNS.DLL]  [N/A, N/A]
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\LOG4CPLUS.DLL]  [ , 1, 0, 2, 1]
    [C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\STLPORT_VC646.DLL]  [STLport Consulting, Inc., 4.6.2003.1031]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YHELPER.DLL]  [$, 2, 0, 9, 1027]
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  [N/A, N/A]
    [C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\228804B7.DLL]  [N/A, N/A]
    [C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSMIN.DLL]  [北京三七二一科技有限公司, 1, 5, 3, 9]
    [C:\PROGRAM FILES\YAHOO!\ASSISTANT\YHELPER.DLL]  [$, 2, 0, 9, 1027]
    [G:\1.BAT]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  [N/A, N/A]

gototop
 

==================================
文件关联
.TXT  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [C:\WINDOWS\winhlp32.exe %1]
.INI  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.VBS  OK. [C:\WINDOWS\WScript.exe "%1" %*]
.JS  OK. [C:\WINDOWS\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1localhost

==================================
gototop
 

运行SREng2,使用“启动项目”--注册表--删除
[027B28]
<C:\WINDOWS\All Users\Start Menu\Programs\启动\027B28.exe --> [N/A]><N>
[027B28]
<C:\WINDOWS\Start Menu\Programs\启动\027B28.exe --> [N/A]><N>
搜索一下027B28.exe 这个文件删除

下载:显示隐藏文件,将显示文件导入注册表

下载地址
http://free5.ys168.com/?ufwihgu168

gototop
 

安全模式下 开始 所有程序 启动 删除027B28.exe
然后打开sreng 启动项注册表 删除<*StateMgr><C:\WINDOWS\System\Restore\StateMgr.exe>
删除文件C:\WINDOWS\System\Restore\StateMgr.exe
搜索027B28.exe 找到的都删除
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT