1   1  /  1  页   跳转

求new win32病毒解决方案【求助】

求new win32病毒解决方案【求助】

系统安装了McAfee,杀毒时McAfee居然把它自己的安装程序setup.exe都删除了!
现在发现整个硬盘内所有的EXE文件都被MCAFEE移动到C:\quarantine内.导致所有的文件都不能使用了.
我找到日至,发现中了MCAFE认为这种为new win32病毒。
求解决方案,谢谢!!


现在发现一进系统就重启,无法扫描SERNG日志.......郁闷中..

[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; MyIE2)
最后编辑2007-08-31 10:54:56
分享到:
gototop
 

请帮忙解决,万分感激!!!!

<BootClean><smartdrv.exe>  这项删掉后,每次重启都会再出现,很郁闷,不知是否挂在另外的进程上了.
C:\Program Files\Serve\Server  这个也已经被我删掉了.

[CODE]

2007-08-31,10:42:25

System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <ScExecute><ScExecute.exe>  [N/A]
    <McAfeeUpdaterUI><"C:\ePOAgent\Common Framework\UpdaterUI.exe" /StartedFromRunKey>  [N/A]
    <ShStatEXE><"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE>  [N/A]
    <Network Associates Error Reporting Service><"C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe">  [Network Associates, Inc.]
    <BootClean><smartdrv.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><C:\WINDOWS\System32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]

==================================
启动文件夹
[Adobe Reader Speed Launch]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk --> C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [N/A]><H>
[Canon LBP-810 状态窗口]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Canon LBP-810 状态窗口.LNK --> C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE [CANON INC.]><H>
[SnagIt 8]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\SnagIt 8.lnk --> C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe [N/A]><H>
[Utility Tray]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Utility Tray.lnk --> C:\WINDOWS\system32\sistray.exe [Silicon Integrated Systems Corporation]><H>

==================================
服务
[Distributed Tr?
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT