不认识的项目甚多,自己检查一下对应的文件(红色为病毒):
注册表
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Desktop><; C:\WINDOWS\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<load><; C:\WINDOWS\uninstall\rundl132.exe> [N/A] <mhs2><; C:\DOCUME~1\shj\LOCALS~1\Temp\mhs2.exe> [N/A][HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ravshell><; C:\WINDOWS\system32\SVCH0ST.EXE> [N/A]服务
[Background Intelligent Transfer Service / BITS][Stopped/Auto Start]
<C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\nbjs.dll><N/A>
[BlackHole Remote Control Services / BRC_Services][Running/Auto Start]
<"C:\WINDOWS\system32\brc_Server.exe" /service><N/A>
[gellsdriverss / gellsdriverss][Running/Auto Start]
<C:\WINDOWS\system32\gellsdriverss.exe><N/A>
[INTERgells / INTERgells][Running/Auto Start]
<C:\WINDOWS\system32\INTERgells.exe><N/A>
[keyboarddriverss / keyboarddriverss][Running/Auto Start]
<C:\WINDOWS\system32\keyboarddriverss.exe><N/A>
[myersras32 / myersras32][Running/Auto Start]
<C:\WINDOWS\system32\myersras32.exe><N/A>
[niboyw / niboyw][Running/Auto Start]
<C:\WINDOWS\system32\svchost.exe -k niboyw-->%SystemRoot%\System32\etmnzt.dll><N/A>
[portable / portable][Stopped/Auto Start]
<C:\WINDOWS\system32\tcpip.exe><N/A>
[regerlkeyboard / regerlkeyboard][Running/Auto Start]
<C:\WINDOWS\system32\regerlkeyboard.exe><N/A>
[System Event loader / sysloader][Stopped/Auto Start]
<"C:\Documents and Settings\All Users\Application Data\Microsoft\Office\SYSTEM\sysloader.exe"><Microsoft>
[Windows Accounts Driver / Windows Micropoint][Stopped/Auto Start]
<C:\WINDOWS\system32\2388.exe><N/A>
驱动程序
[1204956519 / 1204956519][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205115474 / 1205115474][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205129765 / 1205129765][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205130130 / 1205130130][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205136841 / 1205136841][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205211281 / 1205211281][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205263064 / 1205263064][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205284431 / 1205284431][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205288235 / 1205288235][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205288760 / 1205288760][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205310915 / 1205310915][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205372181 / 1205372181][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205375537 / 1205375537][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205375894 / 1205375894][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205376566 / 1205376566][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205376997 / 1205376997][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[1205378271 / 1205378271][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
[apcdli / apcdli][Running/Auto Start]
<\??\C:\Program Files\Microsoft Office\SYSTEM\apcdli.sys><>
[b7a6egtm7 / b7a6egtm75][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\b7a6egtm75.sys><N/A>
[n3opl / n3opl][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\n3opl.sys><N/A>
[SVKP / SVKP][Running/Auto Start]
<\??\C:\WINDOWS\system32\SVKP.sys><AntiCracking>
[yiboywya / yiboywya][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\etmnzt.SYS><N/A>
[1205379683 / 1205379683][Running/Manual Start]
<\??\C:\WINDOWS\system32\x86netdriver.sys><N/A>
浏览器加载项
[发布信息]
{0713E8D1-850A-101B-AFC0-5210102A8DAA} <C:\Program Fi, N/A>
[Adobe Common
Objects]
{C86488AF-13D5-4FEF-9DDF-9FB88698CFC1} <C:\Documents and Settings\All Users\Application Data\Microsoft\OFFICE\USERDATA\bJzGJ2jNJi.dll, Microsoft Corporation>
[发布信息]
{0713E8D1-850A-101B-AFC0-5210102A8DAA} <C:\Program Fi, N/A>
[Search Web 2.0]
{6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89} <C:\WINDOWS\Downloaded Program Files\00110.dll, >
正在运行的进程
C:\WINDOWS\system32\brc_Server.exe
C:\WINDOWS\system32\gellsdriverss.exe
C:\WINDOWS\system32\INTERgells.exe
C:\WINDOWS\system32\policedriverc.exe
C:\WINDOWS\system32\keyboarddriverss.exe
C:\WINDOWS\system32\myersras32.exe
c:\windows\system32\etmnzt.dll
C:\WINDOWS\system32\regerlkeyboard.exe