1   1  /  1  页   跳转

【求助】中毒了:(

【求助】中毒了:(

帮忙看下日志,先谢谢了~~

附件附件:

下载次数:59
文件类型:application/octet-stream
文件大小:
上传时间:2008-1-24 18:45:18
描述:

最后编辑2008-01-25 10:03:38
分享到:
gototop
 

1.建议使用XDelBox删除以下文件:

c:\windows\system32\avpsrv.dll
c:\windows\system32\cmdbcs.dll
c:\windows\system32\dbghlp32.dll
c:\windows\system32\lotushlp.dll
c:\windows\system32\msimms32.dll
c:\windows\system32\msprint32d.dll
c:\windows\system32\nvdispdrv.dll
c:\windows\system32\shaproc.dll
c:\windows\system32\upxdnd.dll
c:\windows\system32\wsockdrv32.dll

c:\windows\system32\gjtmayc.dll
c:\windows\system32\jsqxayc.dll
c:\windows\system32\kvsc3.dll
c:\windows\system32\rarjepi.dll
c:\windows\system32\kawdizy.dll
c:\windows\system32\kvdxsmma.dll
c:\windows\system32\ratbspi.dll
c:\windows\system32\wsmsezx.dll
c:\windows\system32\rsmyjpm.dll
c:\windows\system32\okmhdzy.dll
c:\windows\system32\avwlimn.dll
c:\windows\system32\avzxmmn.dll
c:\windows\system32\gjfhayc.dll
c:\windows\system32\avwlhmn.dll

c:\windows\system32\kvdxlma.dll
c:\windows\system32\swrcfzc.dll
c:\program files\common files\microsoft shared\msinfo\system76.ins
c:\windows\system32\kaqhlzy.dll
c:\windows\system32\avwghmn.dll
c:\windows\system32\avzxlmn.dll
c:\windows\system32\kvdxkma.dll
c:\windows\system32\kvdxjma.dll
c:\windows\kvsc3.exe
c:\windows\shaproc.exe
c:\windows\msimms32.exe
c:\windows\nrguqr.exe
c:\windows\nvdispdrv.exe
c:\windows\338448l.exe
c:\windows\qchtwk.exe
c:\windows\338448m.exe
c:\windows\avpsrv.exe
c:\windows\lotushlp.exe
c:\windows\dbghlp32.exe
c:\windows\upxdnd.exe
c:\windows\cmdbcs.exe
c:\windows\ssldyn.exe
c:\docume~1\admini~1\locals~1\temp\tmp8a2e.tmp
c:\windows\system32\fat32.sys

2.删除重启后使用SREng修复下面各项:

    启动项目 -- 注册表之如下项删除:
[{F859245F-345D-BC13-AC4F-145D47DA34FF}]    <C:\WINDOWS\Fonts\avzxomn.dll>
[{992FADFA-BCDE-ACDF-CDEF-21054865CBA9}]    <C:\WINDOWS\Fonts\wsmsgzx.dll>
[{6598FF45-DA60-F48A-BC43-10AC47853D56}]    <C:\WINDOWS\Fonts\rarjfpi.dll>
[{A8907901-1416-3389-9981-37217856998A}]    <C:\WINDOWS\Fonts\kawdjzy.dll>
[{B960356A-458E-DE24-BD50-268F589A56AB}]    <C:\WINDOWS\Fonts\avwlkmn.dll>
[{DC87A354-ABC3-DEDE-FF33-3213FD7447CD}]    <C:\WINDOWS\Fonts\kvdxmma.dll>
[{D7D81718-1314-5200-2597-58790101807D}]    <C:\WINDOWS\Fonts\kaqhmzy.dll>
[{5598FF45-DA60-F48A-BC43-10AC47853D55}]    <C:\WINDOWS\system32\rarjepi.dll>
[{98907901-1416-3389-9981-372178569989}]    <C:\WINDOWS\system32\kawdizy.dll>
[{DD561258-45F3-A451-F908-A258458226DD}]    <C:\WINDOWS\system32\kvdxsmma.dll>
[{47650011-3344-6688-4899-345FABCD1574}]    <C:\WINDOWS\system32\ratbspi.dll>
[{792FADFA-BCDE-ACDF-CDEF-21054865CBA7}]    <C:\WINDOWS\system32\wsmsezx.dll>
[{AE32FA58-3453-FA2D-BC49-F340348ACCEA}]    <C:\WINDOWS\system32\rsmyjpm.dll>
[{4A57CAD1-412F-9547-713F-9641FA3FC7A4}]    <C:\WINDOWS\system32\okmhdzy.dll>
[{9960356A-458E-DE24-BD50-268F589A56A9}]    <C:\WINDOWS\system32\avwlimn.dll>
[{D859245F-345D-BC13-AC4F-145D47DA34FD}]    <C:\WINDOWS\system32\avzxmmn.dll>
[{1C098A56-F90F-A789-901F-8906546720C1}]    <C:\WINDOWS\system32\gjtmayc.dll>
[{1D908534-AD45-920F-AC89-4024FA9D26D1}]    <C:\WINDOWS\system32\gjfhayc.dll>
[{1C098A56-F90F-A789-901F-8906546720C1}]    <C:\WINDOWS\system32\gjtmayc.dll>
[{8960356A-458E-DE24-BD50-268F589A56A8}]    <C:\WINDOWS\system32\avwlhmn.dll>
[{1D098345-9012-8750-8910-9128098134D1}]    <C:\WINDOWS\system32\jsqxayc.dll>
[{0096957E-9758-4887-9755-C8761F5FDE61}]    <>
[{CC87A354-ABC3-DEDE-FF33-3213FD7447CC}]    <C:\WINDOWS\system32\kvdxlma.dll>
[{778A7521-FA87-34AB-34C2-4893F3AD34C7}]    <C:\WINDOWS\system32\swrcfzc.dll>
[{A693A5AB-BDBA-4AE7-A1C8-E41FEE1C020B}]    <C:\Program Files\Common Files\Microsoft Shared\MSINFO\System76.Ins>
[{C7D81718-1314-5200-2597-58790101807C}]    <C:\WINDOWS\system32\kaqhlzy.dll>
[{8A1247C1-53DA-FF43-ABD3-345F323A48D8}]    <C:\WINDOWS\system32\avwghmn.dll>
[{C859245F-345D-BC13-AC4F-145D47DA34FC}]    <C:\WINDOWS\system32\avzxlmn.dll>
[{BC87A354-ABC3-DEDE-FF33-3213FD7447CB}]    <C:\WINDOWS\system32\kvdxkma.dll>
[{AC87A354-ABC3-DEDE-FF33-3213FD7447CA}]    <C:\WINDOWS\system32\kvdxjma.dll>
[Kvsc3]    <C:\WINDOWS\Kvsc3.exE>
[SHAProc]    <C:\WINDOWS\SHAProc.exe>
[MsIMMs32]    <C:\WINDOWS\MsIMMs32.exE>
[WSockDrv32]    <C:\WINDOWS\nrguqr.exe>
[NVDispDrv]    <C:\WINDOWS\NVDispDRV.EXE>
[WinSysW]    <C:\WINDOWS\338448L.exe>
[MsPrint32D]    <C:\WINDOWS\qchtwk.exe>
[WinSysM]    <C:\WINDOWS\338448M.exe>
[AVPSrv]    <C:\WINDOWS\AVPSrv.exE>
[LotusHlp]    <C:\WINDOWS\LotusHlp.exe>
[DbgHlp32]    <C:\WINDOWS\DbgHlp32.exe>
[upxdnd]    <C:\WINDOWS\upxdnd.exe>
[cmdbcs]    <C:\WINDOWS\cmdbcs.exe>
[SSLDyn]    <C:\WINDOWS\SSLDyn.exE>

    启动项目 -- 服务-- 驱动程序之如下项删除:
[ZX / ZX]    <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp8A2E.tmp>
[PciHardDisk / PciHardDisk]    <\??\C:\WINDOWS\system32\fat32.sys>

    系统修复-- HOSTS文件--重置

gototop
 

谢谢:)
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT