从日志来看,电脑里乱七八糟,很难做出准确的判断。可以试试下面的方法
建议:下载xdelbox地址http://forum.ikaka.com/topic.asp?board=28&artid=8391345这帖子三楼附件,使用方法参看该帖子图文。
运行xdelbox删除以下文件
C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe
C:\Documents and Settings\Me\Local Settings\Application Data\b57dbff6.exe
C:\WINDOWS\system32\Launcher.exe
C:\WINDOWS\system32\explore.exe
C:\WINDOWS\system32\intenet.exe
C:\WINDOWS\system32\pucivce.exe
C:\WINDOWS\system32\NeroCheck.exe
C:\WINDOWS\system32\e8fd1db0.dll
C:\WINDOWS\SYSTEM32\WBEM\SMTPCONFS.DLL
C:\WINDOWS\system32\mssapi.dll
C:\WINDOWS\system32\win32k.exe
C:\WINDOWS\system32\wupsex.exe
C:\WINDOWS\system32\drivers\fsprot.sys
C:\WINDOWS\SystemRoot\system32\DRIVERS\ini910u.sys
C:\WINDOWS\system32\drivers\moprot.sys
C:\WINDOWS\system32\DRIVERS\npf.sys
运行SREng删除下列项目
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<shell><"C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"> [N/A]
<b57dbff6.exe><C:\Documents and Settings\Me\Local Settings\Application Data\b57dbff6.exe> [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<wow><C:\WINDOWS\system32\Launcher.exe> [N/A]
<rx><C:\WINDOWS\system32\explore.exe> [N/A]
<zz><C:\WINDOWS\system32\intenet.exe> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<pucivce><C:\WINDOWS\system32\pucivce.exe> [N/A]
<NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad]
<DelayRun><C:\WINDOWS\system32\e8fd1db0.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{3F143C3A-1457-6CCA-03A7-7AA23B61E40F}><> [N/A]
开始菜单
[IE-Bar]
<C:\Documents and Settings\All Users\Start Menu\Programs\Startup\IE-Bar.lnk --> C:\PROGRA~1\COMMON~1\IE-Bar\iebar.exe [N/A]
服务
[Print Manager / Mercha2][Stopped/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL.EXE C:\WINDOWS\SYSTEM32\WBEM\SMTPCONFS.DLL,Export 1087><Microsoft Corporation>
[Windows Gateway / Tech][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\mssapi.dll><N/A>
[wup sex / wupsex][Stopped/Auto Start]
<C:\WINDOWS\system32\wupsex.exe><N/A>
驱动
[fsprot / fsprot][Running/System Start]
<system32\drivers\fsprot.sys><Microsoft Corporation>
[ini910u / ini910u][Stopped/Disabled]
<\SystemRoot\system32\DRIVERS\ini910u.sys><Microsoft Corporation>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
<system32\DRIVERS\npf.sys><CACE Technologies>