1   1  /  1  页   跳转

[求助] 中招了!!SOS!!!!

中招了!!SOS!!!!

电脑不让装病毒软件,上网后不断有网页弹出!怎办!请高手指教!
扫描结果:
[CODE]

2009-05-17,10:02:45

System Repair Engineer 2.7.1.1261 Emergency Scan Mode
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描
    计划任务



启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]

    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    <AppInit_DLLs><C:\WINDOWS\system32\dnsq.dll>  []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

    <GinaDLL><MyGina.dll>  []

    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

    <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

    <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]

    <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]

    <WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Windows Publisher]

    <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Publisher]

    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]

    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]

    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]

    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]

    <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]

    <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]

    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]

    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]

    <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]

    <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]

    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]

    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]

    <Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]

    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]



==================================
启动文件夹
[QQ游戏启动加速程序]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> C:\Program Files\Tencent\QQGame\Accel.exe [File is missing]><N>


==================================
服务
[CSNetManagerXp / CSNetManagerXp][Running/Auto Start]

  <"C:\WINDOWS\system32\isass.exe"><N/A>

[DCOM Server Process Launcher / DcomLaunch][Running/Auto Start]

  <C:\WINDOWS\system32\svchost -k DcomLaunch-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation>

[DHCP Client / Dhcp][Running/Auto Start]

  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\dhcpcsvc.dll><Microsoft Corporation>

[Human Interface Device Access / HidServ][Stopped/Disabled]

  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>

[Server / lanmanserver][Running/Auto Start]

  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\srvsvc.dll><Microsoft Corporation>

[Windows Installer / MSIServer][Stopped/Manual Start]

  <C:\WINDOWS\system32\msiexec.exe /V><Microsoft Corporation>

[Network Connections / Netman][Running/Manual Start]

  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\netman.dll><Microsoft Corporation>

[Remote Access Connection Manager / RasMan][Running/Manual Start]

  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasmans.dll><Microsoft Corporation>

[Remote Procedure Call (RPC) / RpcSs][Running/Auto Start]

  <C:\WINDOWS\system32\svchost -k rpcss-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation>

[Print Spooler / Spooler][Running/Auto Start]

  <C:\WINDOWS\system32\spoolsv.exe><Microsoft Corporation>

[Telephony / TapiSrv][Running/Manual Start]

  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\tapisrv.dll><Microsoft Corporation>

[WebClient / WebClient][Stopped/Manual Start]

  <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\webclnt.dll><Microsoft Corporation>



==================================
驱动程序
[aeaudio / aeaudio][Running/Manual Start]

  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>

[Microsoft Kernel Acoustic Echo Canceller / aec][Stopped/Manual Start]

  <system32\drivers\aec.sys><Microsoft Corporation>

[AliIde / AliIde][Running/Boot Start]

  <\SystemRoot\System32\DRIVERS\aliide.sys><Acer Laboratories Inc.>

[AMD K8 Processor Driver / AmdK8][Stopped/Manual Start]

  <System32\DRIVERS\amdk8.sys><Advanced Micro Devices>

[ShareBit PCI device / CaaaPci][Stopped/Manual Start]

  <System32\Drivers\aaaPci.sys><ShareBit>

[CmdIde / CmdIde][Running/Boot Start]

  <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>

[HTTP / HTTP][Running/Manual Start]

  <System32\Drivers\HTTP.sys><Microsoft Corporation>

[IP Network Address Translator / IpNat][Stopped/Manual Start]

  <system32\DRIVERS\ipnat.sys><Microsoft Corporation>

[Netgroup Packet Filter / NPF][Running/Manual Start]

  <system32\drivers\npf.sys><Politecnico di Torino>

[nv / nv][Running/Manual Start]

  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>

[Direct Parallel Link Driver / Ptilink][Running/Manual Start]

  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>

[Rdbss / Rdbss][Running/System Start]

  <system32\DRIVERS\rdbss.sys><Microsoft Corporation>

[Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Running/Manual Start]

  <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation>

[WDM Driver for NV700X / SAA7134][Running/Manual Start]

  <System32\Drivers\NV700X.sys><>

[Secdrv / Secdrv][Stopped/Manual Start]

  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>

[senfilt / senfilt][Running/Manual Start]

  <system32\drivers\senfilt.sys><Sensaura>

[SHXLock / SHXLock][Stopped/Disabled]

  <\??\C:\WINDOWS\system32\drivers\SHXLock.sys><N/A>

[smwdm / smwdm][Running/Manual Start]

  <system32\drivers\smwdm.sys><Analog Devices, Inc.>

[TCP/IP Protocol Driver / Tcpip][Running/System Start]

  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>

[zlportio / zlportio][Stopped/Manual Start]

  <\??\D:\7130 系列\HB1_v5.5_cn\nv700x_v5.5\zlportio.sys><N/A>




用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
分享到:
gototop
 

回复:中招了!!SOS!!!!

gototop
 

回复:中招了!!SOS!!!!

不是小鸡1鸡(机11机)吗
你怎么上来这个网站的
应该关111闭窗111口才对啊
gototop
 

回复 2F aaccbbdd 的帖子

他别想上来了
已包括【专杀】这个字眼
gototop
 

回复:中招了!!SOS!!!!

C:\WINDOWS\system32\dnsq.dll
gototop
 

回复:中招了!!SOS!!!!

磁碟机...
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT