1   1  /  1  页   跳转

[求助] 中毒了,帮帮忙

中毒了,帮帮忙

请看附件,帮忙杀掉

用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; WPS;  EmbeddedWB 14.52; EmbeddedWB 14.52 from: http://www.bsalsa.com/ EmbeddedWB 14.52; CIBA)

附件附件:

文件名:SREngLOG.log
下载次数:89
文件类型:application/octet-stream
文件大小:
上传时间:2008-7-2 10:28:21
描述:log

分享到:
gototop
 

回复: 中毒了,帮帮忙

用附件的XDELBOX删除文件
C:\WINDOWS\system32\sgdewg.dll
C:\Program Files\Microsoft Office\Temp.ex

复制他们,从剪贴板导入,点上抑制再生,右键点击要删除的文件列表,选择立即重起删除(如果说找不到文件,不用管,继续操作)

重起以后进入XDELBOX工具,执行删除~

删除过后,打开SRENG

注册表中删除
    <Runonce><C:\WINDOWS\system32\runouce.exe>  []
    <RavMont><C:\WINDOWS\system32\mp3.exe>  [China]
    <Patah Hati><C:\WINDOWS\system\ISASS.exe>  []
    <user logon><C:\WINDOWS\Help\user logon.exe>  []
编辑    <shell><Explorer.exe "C:\Program Files\Microsoft Office\Temp.exe">  [File is missing]
为  <shell><Explorer.exe>
  编辑 <Userinit><C:\WINDOWS\system32\userinit.exe, explorer.exe>  [(Verified)Microsoft Windows Publisher]
为<Userinit><C:\WINDOWS\system32\userinit.exe, >

删除<{81AF1CF6-D1C9-4C6A-AC01-EDE54E71945B}><C:\WINDOWS\system32\jfdses.dll>  [File is missing]
    <{00050005-0005-0005-0005-00050005BB15}><C:\WINDOWS\system32\cliconfgzx.dll>  [File is missing]
    <{00060006-0006-0006-0006-00060006BB15}><C:\WINDOWS\system32\dispexcb.dll>  [File is missing]
    <{7C8D1401-A58D-A81C-CD24-A5915C4517C7}><C:\WINDOWS\system32\mnmhgsrv.dll>  [File is missing]
    <{528DF602-9541-A985-210A-984A698C6F25}><C:\WINDOWS\system32\ptjhehlp.dll>  [File is missing]
    <{8C41B7F7-3168-400D-A702-0E7EFE0BA304}><C:\WINDOWS\system32\sgdewg.dll>  []
    <{6C648541-1025-9650-9057-6541258720C6}><C:\WINDOWS\system32\mndhfdwd.dll>  [File is missing]
    <{87FD640A-158F-48AC-FD14-1597F14A9778}><C:\WINDOWS\system32\mndshsrv.dll>  [File is missing]
    <{17DFD111-BF3A-4CB4-ADB0-88FCBFE69821}><C:\WINDOWS\system32\hhrdxd.dll>  [File is missing]
    <{55694105-5108-9405-3695-954187462155}><C:\WINDOWS\system32\mpwdeapi.dll>  [File is missing]
    <{00040004-0004-0004-0004-00040004BB15}><C:\WINDOWS\system32\catsrvwl.dll>  [File is missing]
    <{00010001-0001-0001-0001-00010001BB15}><C:\WINDOWS\system32\adsntzt.dll>  [File is missing]
    <{7A041F13-A111-12A3-B0CF-F99818AA68A7}><C:\WINDOWS\system32\zxmsdwin.dll>  [File is missing]
    <{00070007-0007-0007-0007-00070007BB15}><C:\WINDOWS\system32\dpvvoxmh.dll>  [File is missing]
    <adsntzt.dll><C:\WINDOWS\system32\adsntzt.dll>  [File is missing]
    <cliconfgzx.dll><C:\WINDOWS\system32\cliconfgzx.dll>  [File is missing]
    <dispexcb.dll><C:\WINDOWS\system32\dispexcb.dll>  [File is missing]
    <catsrvwl.dll><C:\WINDOWS\system32\catsrvwl.dll>  [File is missing]
    <dpvvoxmh.dll><C:\WINDOWS\system32\dpvvoxmh.dll>  [File is missing]

删除驱动
[Atixeve26937 / Atixeve26937][Stopped/Manual Start]
  <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~wxp2ins.765.tmp><N/A>

删除浏览器加载项
[]
  {528DF602-9541-A985-210A-984A698C6F25} <C:\WINDOWS\system32\ptjhehlp.dll, N/A>
[]
  {55694105-5108-9405-3695-954187462155} <C:\WINDOWS\system32\mpwdeapi.dll, N/A>
[]
  {6C648541-1025-9650-9057-6541258720C6} <C:\WINDOWS\system32\mndhfdwd.dll, N/A>
[]
  {7A041F13-A111-12A3-B0CF-F99818AA68A7} <C:\WINDOWS\system32\zxmsdwin.dll, N/A>
[]
  {7C8D1401-A58D-A81C-CD24-A5915C4517C7} <C:\WINDOWS\system32\mnmhgsrv.dll, N/A>
[]
  {87FD640A-158F-48AC-FD14-1597F14A9778} <C:\WINDOWS\system32\mndshsrv.dll, N/A>


修复文件关联

下载arswp(Windows清理助手)清理下..
http://www.arswp.com/download/arswp/arswp.rar

清理临时文件夹:
打开我的电脑-工具-文件夹选项-查看-显示隐藏文件-隐藏受保护的系统文件(勾去掉)-确定
重起进入安全模式(开机不停的按F8,选择安全模式启动) 清空下列临时文件夹中所有内容:
C:\Documents and Settings\用户名\Local Settings\Temporary Internet Files
C:\Documents and Settings\用户名\Local Settings\Temp
C:\WINDOWS\TEMP

更新杀软全盘杀毒

附件附件:

文件名:xdelboxnN.rar
下载次数:75
文件类型:application/octet-stream
文件大小:
上传时间:2008-7-2 10:51:48
描述:rar

gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT