程序将处理下面各项目
启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><C:\WINDOWS\system32\userinit.exe,C:\PROGRA~1\COMMON~1\Tencent\QQPlug\QQdoctor.exe> [File is missing]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><C:\WINDOWS\Tasks\CgbYR44s5jCmgAd6ar.inf,> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{136F4843-F6B1-459F-83B5-7B0F982FDDA5}><C:\WINDOWS\Tasks\FkTQEF2gVvZ9fR7v5HE.inf> [File is missing]
<{610B6886-2A1A-475A-A842-65A613C70460}><C:\WINDOWS\system32\SrNRKs5F7Rkv9hp.inf> [File is missing]
<{6049BC02-7EDA-4C41-B4AB-D5398607C39E}><C:\WINDOWS\Tasks\yGfdVUegEQm9fhY5rnN.inf> [File is missing]
<{79462C10-DB9A-4CA0-B3DB-24AE72636B75}><C:\WINDOWS\system32\R8ZdwYqnBwz3JS4TseHvTJ.inf> [File is missing]
<{526EB425-7F56-4773-8D70-B8E45AA8E2B6}><C:\WINDOWS\Downloaded Program Files\WUstNjhyfQfpv8PQbC.cur> [File is missing]
<{11FDB6D4-166A-47BF-A0F8-A09DABA75FC1}><C:\WINDOWS\Tasks\CgbYR44s5jCmgAd6ar.inf> [File is missing]
<{87DE8A1A-96C5-4420-B222-EF998F697CE7}><C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.inf> [File is missing]
<{E9C84B05-22D2-4820-99B0-4AAAA7CD6A5D}><C:\WINDOWS\Downloaded Program Files\6YYnDBbzHzrrmenHmv.cur> [File is missing]
<{122B901E-493F-4AD9-BC69-7DE8C3E52FCC}><C:\WINDOWS\system32\122B901E.dll> [File is missing]
<{CD478099-014D-4B3A-A4BB-B518F1019BC7}><C:\WINDOWS\system32\SCEVFJRCmaB7.dll> [File is missing]
<{93DA1E7D-7C46-4F90-8674-EC90511FCA72}><C:\WINDOWS\system32\CDuAUVkGy9.dll> [File is missing]
<{704C3595-DB85-40F6-A601-8D6F346907BD}><C:\WINDOWS\system32\704C3595.dll> [File is missing]
<{1719B301-B494-4185-9379-242461F9CF02}><C:\WINDOWS\system32\BtmBAnd89jc9PsPq5EKNj.inf> [File is missing]
<{76CBCF38-0583-44C7-A1AE-D463DFE625EC}><C:\WINDOWS\system32\skcfujQ5EDN.dll> [File is missing]
<{8708994F-1758-4C2C-9A3F-FA22D6CCCB41}><C:\WINDOWS\fonts\A97CRaCB.fon> [File is missing]
<{74DA2FEC-F68F-4DC7-9A45-9174AC044427}><C:\WINDOWS\system32\z6FVkEF47huPzgaXee.inf> [File is missing]
<{B7D21764-31A1-4B15-B975-8AAA398CE07F}><C:\WINDOWS\system32\FXNEE8UE86dAU4wwQSW.inf> [File is missing]
<{E16EA4C8-040B-4A12-A0F5-783963AD665D}><C:\WINDOWS\system32\P6VyQtQJUYa3rFan7J.inf> [File is missing]
<{C1B34818-3883-4A0A-9665-189A8A39EAB0}><C:\WINDOWS\system32\B4yNKrEEhEerKFeeA4.inf> [File is missing]
<{4F5EEDE5-1687-49D2-8A17-FF0B454FB37B}><C:\WINDOWS\system32\qzp3jTZCSfSh.dll> [File is missing]
<{23DA65D2-C696-4EE4-BEE8-B4841DEC3E30}><C:\WINDOWS\system32\ndxq9awMc.dll> [File is missing]
<{36AC68E6-0C26-4D39-B98E-54B49DAB6BAA}><C:\WINDOWS\system32\dhDhwS7fFW.dll> [File is missing]
<{2EF0D734-21FD-4225-A1A2-BCD296182AAF}><C:\WINDOWS\system32\2EF0D734.dll> [File is missing]
<{C2EE4B05-6467-40E1-8638-C8B895AE335A}><C:\WINDOWS\fonts\CtZ8uc499k.fon> [File is missing]
<{A8939870-6CD5-40FC-8708-32215AF7DFEB}><C:\WINDOWS\Tasks\eHcEcHCEmwjD8CyZDd.inf> [File is missing]
<{FE23FF53-3B2C-4DBE-92F8-90CF9F4C1480}><C:\Program Files\Internet Explorer\Top.dll> [File is missing]
<{7BACC4F8-0754-4BA0-BB18-9DDB1B8C6C48}><C:\WINDOWS\Tasks\7xa6vJPUxshvgQhTZH.inf> [File is missing]
<{51716C09-6B08-4CCF-B526-718E912C0573}><C:\WINDOWS\system32\PERrGx5DkqSbQdwauCRQH.dll> [File is missing]
<{B9D0F4D7-C809-4C27-9CB4-63201DFB3D05}><C:\WINDOWS\Tasks\c2nH4numz9knY5zqnC.inf> [File is missing]
<{84639C2D-CD75-4081-B515-329AFCECBF19}><C:\WINDOWS\Downloaded Program Files\SjRjQgREDp3P8B4rEEg.cur> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\egui.exe]
<IFEO[egui.exe]><services.exe> [(Verified)Microsoft Windows Component Publisher]
==================================
驱动程序
[vb / vb][Stopped/Manual Start]
<\??\C:\DOCUME~1\hp\LOCALS~1\Temp\~4422296.ex><Microsoft Corporation>
==================================
浏览器加载项
[adad Class]
{F28CF86E-FCE7-48F5-B3AC-4743AA1B2754} <C:\WINDOWS\system32\wingelu.dll, >
[adad Class]
{F28CF86E-FCE7-48F5-B3AC-4743AA1B2754} <C:\WINDOWS\system32\wingelu.dll, >
==================================
正在运行的进程
[C:\WINDOWS\Tasks\CgbYR44s5jCmgAd6ar.inf] [N/A, ]
[C:\WINDOWS\system32\COMRes.dll] [N/A, ]
[C:\WINDOWS\system32\dfc8ac3ed7da.dll] [Microsoft Corporation, 2001.12.4414.258]
[C:\WINDOWS\system32\wingelu.dll] [, 1.0.0.1]
==================================
HOSTS 文件
127.0.0.1 b.nmbrx.com
127.0.1.1 zsmdo.cn
127.1.1.1
www.114baines.com127.1.1.1 bmw8x.cn
127.1.1.1 demo.jikesoft.cn