12   1  /  2  页   跳转

[求助] 瑞星为什么杀不了这毒。

瑞星为什么杀不了这毒。

Trojan.PSW.Win32.GameOL.olx
    我杀了好多次都杀不干净。
    写着重新启动计算机后删除文件。
    每次重启查毒后又有。

用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)

附件附件:

文件名:SREngLOG.log
下载次数:98
文件类型:application/octet-stream
文件大小:
上传时间:2008-7-4 12:42:18
描述:log

分享到:
gototop
 

回复:瑞星为什么杀不了这毒。

谁帮帮我啊。
gototop
 

回复:瑞星为什么杀不了这毒。

启动项目--注册表--删除
    <{7C8D1401-A58D-A81C-CD24-A5915C4517C7}><C:\WINDOWS\system32\mnmhgsrv.dll>  [File is missing]
    <{B629FF4F-ACDB-5C90-A098-FACB3456A26B}><C:\WINDOWS\system32\hdf453d.dll>  [File is missing]
    <{6B1AEF69-DDAE-FDAD-DCAB-698F026ABDB6}><C:\WINDOWS\system32\oohxebyt.dll>  [File is missing]
    <{50940F85-F015-14F1-A05F-F69858AC6D05}><>  [N/A]
    <{528DF602-9541-A985-210A-984A698C6F25}><>  [N/A]
    <{80AF1289-F140-A140-D012-C1458759FC08}><C:\WINDOWS\system32\ypcqghlp.dll>  [File is missing]
    <{55694105-5108-9405-3695-954187462155}><C:\WINDOWS\system32\mpwdeapi.dll>  [File is missing]
    <{7A041F13-A111-12A3-B0CF-F99818AA68A7}><C:\WINDOWS\system32\zxmsdwin.dll>  [File is missing]
    <{3D698451-2015-6358-9871-2015987452D3}><C:\WINDOWS\system32\apzhctde.dll>  [File is missing]
    <{AA59145F-315D-BC23-AC1F-145DF81A34AA}><C:\WINDOWS\system32\zyzxjime.dll>  [File is missing]
    <{B490415F-65F8-B5C5-D8BA-9405FB12054B}><C:\WINDOWS\system32\yzztlmsn.dll>  [File is missing]
    <{35671234-7890-ABCD-CDEF-567801237653}><>  [N/A]
    <{37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73}><C:\WINDOWS\system32\zywlcime.dll>  [File is missing]
    <{87FD640A-158F-48AC-FD14-1597F14A9778}><C:\WINDOWS\system32\mndshsrv.dll>  [File is missing]
    <{4A908760-8000-4000-A000-9000322145A4}><C:\WINDOWS\system32\akjsdkaq.dll>  [File is missing]
    <{7FD45A54-9875-698F-E56E-65102358FDF7}><C:\WINDOWS\system32\apsggjba.dll>  [File is missing]
    <{8C69034A-F45F-D34D-A33A-C33C4D324FC8}><C:\WINDOWS\system32\arjrfler.dll>  [File is missing]
    <{43512378-9874-5641-1025-985420368734}><C:\WINDOWS\system32\oswxdttb.dll>  [File is missing]
    <{6C648541-1025-9650-9057-6541258720C6}><C:\WINDOWS\system32\mndhfdwd.dll>  [File is missing]
    <{4A698102-5904-AFD0-20DF-CD1A65829CA4}><C:\WINDOWS\system32\zycbdime.dll>  [File is missing]
    <{7319A1F1-9410-9654-3201-345FFA349137}><C:\WINDOWS\system32\zywmgime.dll>  [File is missing]
    <{9C69034A-F45F-D34D-A33A-C33C4D324FC9}><C:\WINDOWS\system32\arjrgler.dll>  [File is missing]
    <{32596546-2036-9451-6058-658402589723}><C:\WINDOWS\system32\opshcbty.dll>  [File is missing]
    <{20909876-4567-3908-4056-909834565102}><C:\WINDOWS\system32\erxybloe.dll>  [File is missing]
    <{39109876-7619-9101-7012-901938475193}><C:\WINDOWS\system32\ietzcpaq.dll>  [File is missing]
    <{2B69874A-C58C-458D-69F0-698F874E41B2}><C:\WINDOWS\system32\lassaplo.dll>  [File is missing]
    <{C490415F-65F8-B5C5-D8BA-9405FB12054C}><C:\WINDOWS\system32\yzztlmsn.dll>  [File is missing]
    <{57AC9076-C898-B098-D098-A18319080975}><C:\WINDOWS\system32\nhmxejkl.dll>  [File is missing]
    <{00070007-0007-0007-0007-00070007BB15}><C:\WINDOWS\system32\dpvvoxmh.dll>  [File is missing]
    <{00180018-0018-0018-0018-00180018BB15}><C:\WINDOWS\system32\mstimewd.dll>  [File is missing]
    <{00170017-0017-0017-0017-00170017BB15}><C:\WINDOWS\system32\msobjstl.dll>  [File is missing]
    <{00050005-0005-0005-0005-00050005BB15}><C:\WINDOWS\system32\cliconfgzx.dll>  [File is missing]
    <{00230023-0023-0023-0023-00230023BB15}><C:\WINDOWS\system32\rasdlgcq.dll>  [File is missing]
    <{00010001-0001-0001-0001-00010001BB15}><C:\WINDOWS\system32\adsntzt.dll>  [File is missing]
    <{00060006-0006-0006-0006-00060006BB15}><C:\WINDOWS\system32\dispexcb.dll>  [File is missing]
    <{4F4F0064-71E0-4f0d-0021-708476C7815F}><C:\WINDOWS\system32\midimappt.dll>  [File is missing]
    <{4372FE4D-E2C2-45FE-A893-E2B1691A7DD0}><C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys>  [File is missing]
    <{00130013-0013-0013-0013-00130013BB15}><C:\WINDOWS\system32\ksuserfy.dll>  [File is missing]
    <{E6C0D0E3-9E9A-489D-AE19-BBCFC7047A59}><C:\Program Files\Internet Explorer\IEXPLORE32.Sys>  [File is missing]
    <{1FD4696C-E95A-44E2-A03A-FDBDF4CCC305}><C:\Program Files\Internet Explorer\IEXPLORE32.win>  [File is missing]
    <{0B497AE8-3F6C-440C-AB87-52ED0182464A}><C:\Program Files\Internet Explorer\IEXPLORE32.Dat>  [File is missing]
    <dpvvoxmh.dll><C:\WINDOWS\system32\dpvvoxmh.dll>  [File is missing]
    <mstimewd><C:\WINDOWS\system32\mstimewd.dll>  [File is missing]
    <msobjstl.dll><C:\WINDOWS\system32\msobjstl.dll>  [File is missing]
    <cliconfgzx.dll><C:\WINDOWS\system32\cliconfgzx.dll>  [File is missing]
    <rasdlgcq.dll><C:\WINDOWS\system32\rasdlgcq.dll>  [File is missing]
    <adsntzt.dll><C:\WINDOWS\system32\adsntzt.dll>  [File is missing]
    <dispexcb.dll><C:\WINDOWS\system32\dispexcb.dll>  [File is missing]
    <midimappt><C:\WINDOWS\system32\midimappt.dll>  [File is missing]
    <ksuserfy.dll><C:\WINDOWS\system32\ksuserfy.dll>  [File is missing]
==================================
删除浏览器加载项
[]
  {0B497AE8-3F6C-440C-AB87-52ED0182464A} <C:\Program Files\Internet Explorer\IEXPLORE32.Dat, N/A>
[]
  {1FD4696C-E95A-44E2-A03A-FDBDF4CCC305} <C:\Program Files\Internet Explorer\IEXPLORE32.win, N/A>
[]
  {20909876-4567-3908-4056-909834565102} <C:\WINDOWS\system32\erxybloe.dll, N/A>
[]
  {2B69874A-C58C-458D-69F0-698F874E41B2} <C:\WINDOWS\system32\lassaplo.dll, N/A>
[]
  {32596546-2036-9451-6058-658402589723} <C:\WINDOWS\system32\opshcbty.dll, N/A>
[]
  {37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73} <C:\WINDOWS\system32\zywlcime.dll, N/A>
[]
  {39109876-7619-9101-7012-901938475193} <C:\WINDOWS\system32\ietzcpaq.dll, N/A>
[]
  {3D698451-2015-6358-9871-2015987452D3} <C:\WINDOWS\system32\apzhctde.dll, N/A>
[]
  {43512378-9874-5641-1025-985420368734} <C:\WINDOWS\system32\oswxdttb.dll, N/A>
[]
  {4372FE4D-E2C2-45FE-A893-E2B1691A7DD0} <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys, N/A>
[]
  {4A698102-5904-AFD0-20DF-CD1A65829CA4} <C:\WINDOWS\system32\zycbdime.dll, N/A>
[]
  {4A908760-8000-4000-A000-9000322145A4} <C:\WINDOWS\system32\akjsdkaq.dll, N/A>
[]
  {55694105-5108-9405-3695-954187462155} <C:\WINDOWS\system32\mpwdeapi.dll, N/A>
[]
  {57AC9076-C898-B098-D098-A18319080975} <C:\WINDOWS\system32\nhmxejkl.dll, N/A>
[]
  {6B1AEF69-DDAE-FDAD-DCAB-698F026ABDB6} <C:\WINDOWS\system32\oohxebyt.dll, N/A>
[]
  {6C648541-1025-9650-9057-6541258720C6} <C:\WINDOWS\system32\mndhfdwd.dll, N/A>
[]
  {7319A1F1-9410-9654-3201-345FFA349137} <C:\WINDOWS\system32\zywmgime.dll, N/A>
[]
  {7A041F13-A111-12A3-B0CF-F99818AA68A7} <C:\WINDOWS\system32\zxmsdwin.dll, N/A>
[]
  {7C8D1401-A58D-A81C-CD24-A5915C4517C7} <C:\WINDOWS\system32\mnmhgsrv.dll, N/A>
[]
  {7FD45A54-9875-698F-E56E-65102358FDF7} <C:\WINDOWS\system32\apsggjba.dll, N/A>
[]
  {80AF1289-F140-A140-D012-C1458759FC08} <C:\WINDOWS\system32\ypcqghlp.dll, N/A>
[]
  {87FD640A-158F-48AC-FD14-1597F14A9778} <C:\WINDOWS\system32\mndshsrv.dll, N/A>
[]
  {8C69034A-F45F-D34D-A33A-C33C4D324FC8} <C:\WINDOWS\system32\arjrfler.dll, N/A>
[]
  {9C69034A-F45F-D34D-A33A-C33C4D324FC9} <C:\WINDOWS\system32\arjrgler.dll, N/A>
[]
  {AA59145F-315D-BC23-AC1F-145DF81A34AA} <C:\WINDOWS\system32\zyzxjime.dll, N/A>
[]
  {B490415F-65F8-B5C5-D8BA-9405FB12054B} <C:\WINDOWS\system32\yzztlmsn.dll, N/A>
[]
  {B629FF4F-ACDB-5C90-A098-FACB3456A26B} <C:\WINDOWS\system32\hdf453d.dll, N/A>
[]
  {C490415F-65F8-B5C5-D8BA-9405FB12054C} <C:\WINDOWS\system32\yzztlmsn.dll, N/A>
[]
  {E6C0D0E3-9E9A-489D-AE19-BBCFC7047A59} <C:\Program Files\Internet Explorer\IEXPLORE32.Sys, N/A>
[]
  {0B497AE8-3F6C-440C-AB87-52ED0182464A} <C:\Program Files\Internet Explorer\IEXPLORE32.Dat, N/A>
[]
  {1FD4696C-E95A-44E2-A03A-FDBDF4CCC305} <C:\Program Files\Internet Explorer\IEXPLORE32.win, N/A>
[]
  {20909876-4567-3908-4056-909834565102} <C:\WINDOWS\system32\erxybloe.dll, N/A>
[]
  {2B69874A-C58C-458D-69F0-698F874E41B2} <C:\WINDOWS\system32\lassaplo.dll, N/A>
[]
  {32596546-2036-9451-6058-658402589723} <C:\WINDOWS\system32\opshcbty.dll, N/A>
[]
  {37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73} <C:\WINDOWS\system32\zywlcime.dll, N/A>
[]
  {39109876-7619-9101-7012-901938475193} <C:\WINDOWS\system32\ietzcpaq.dll, N/A>
[]
  {3D698451-2015-6358-9871-2015987452D3} <C:\WINDOWS\system32\apzhctde.dll, N/A>
[]
  {43512378-9874-5641-1025-985420368734} <C:\WINDOWS\system32\oswxdttb.dll, N/A>
[]
  {4372FE4D-E2C2-45FE-A893-E2B1691A7DD0} <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys, N/A>
[]
  {4A698102-5904-AFD0-20DF-CD1A65829CA4} <C:\WINDOWS\system32\zycbdime.dll, N/A>
[]
  {4A908760-8000-4000-A000-9000322145A4} <C:\WINDOWS\system32\akjsdkaq.dll, N/A>
[]
  {55694105-5108-9405-3695-954187462155} <C:\WINDOWS\system32\mpwdeapi.dll, N/A>
[]
  {57AC9076-C898-B098-D098-A18319080975} <C:\WINDOWS\system32\nhmxejkl.dll, N/A>
[]
  {6B1AEF69-DDAE-FDAD-DCAB-698F026ABDB6} <C:\WINDOWS\system32\oohxebyt.dll, N/A>
[]
  {6C648541-1025-9650-9057-6541258720C6} <C:\WINDOWS\system32\mndhfdwd.dll, N/A>
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[]
  {7319A1F1-9410-9654-3201-345FFA349137} <C:\WINDOWS\system32\zywmgime.dll, N/A>
[]
  {7A041F13-A111-12A3-B0CF-F99818AA68A7} <C:\WINDOWS\system32\zxmsdwin.dll, N/A>
[]
  {7C8D1401-A58D-A81C-CD24-A5915C4517C7} <C:\WINDOWS\system32\mnmhgsrv.dll, N/A>
[]
  {7FD45A54-9875-698F-E56E-65102358FDF7} <C:\WINDOWS\system32\apsggjba.dll, N/A>
[]
  {80AF1289-F140-A140-D012-C1458759FC08} <C:\WINDOWS\system32\ypcqghlp.dll, N/A>
[]
  {87FD640A-158F-48AC-FD14-1597F14A9778} <C:\WINDOWS\system32\mndshsrv.dll, N/A>
[]
  {8C69034A-F45F-D34D-A33A-C33C4D324FC8} <C:\WINDOWS\system32\arjrfler.dll, N/A>
[]
  {9C69034A-F45F-D34D-A33A-C33C4D324FC9} <C:\WINDOWS\system32\arjrgler.dll, N/A>
[]
  {AA59145F-315D-BC23-AC1F-145DF81A34AA} <C:\WINDOWS\system32\zyzxjime.dll, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[]
  {B490415F-65F8-B5C5-D8BA-9405FB12054B} <C:\WINDOWS\system32\yzztlmsn.dll, N/A>
[]
  {B629FF4F-ACDB-5C90-A098-FACB3456A26B} <C:\WINDOWS\system32\hdf453d.dll, N/A>
[]
  {C490415F-65F8-B5C5-D8BA-9405FB12054C} <C:\WINDOWS\system32\yzztlmsn.dll, N/A>
[]
  {E6C0D0E3-9E9A-489D-AE19-BBCFC7047A59} <C:\Program Files\Internet Explorer\IEXPLORE32.Sys, N/A>
==================================


文件好像都不存在了...安全模式下再扫描下
清理下临时文件
为什么是菜鸟
gototop
 

回复:楼上的

可以具体一点吗?
不懂什么意思?~~
gototop
 

瑞星为什么杀不了这毒。

Trojan.DL.Script.JS.Agent.bu是什么病毒,为什么瑞星杀不掉!
最后编辑yangyannan 最后编辑于 2008-07-04 19:44:29
gototop
 

回复:瑞星为什么杀不了这毒。

尝试一下进入安全模式查杀!!!
gototop
 

回复:瑞星为什么杀不了这毒。

楼主切换到安全模式下,用瑞星杀毒,记得把病毒库更新到最新。
gototop
 

回复:瑞星为什么杀不了这毒。

1.建议使用XDelBox删除以下文件:(XDelBox1.6下载)
使用说明:删除时复制所有要删除文件的路径,在待删除文件列表里点击右键选择从剪贴板导入,导入后在要删除文件上点击右键,选择立刻重启删除,电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质(包括U盘,MP3,手机存储卡等)。


explorer.exe,qtca16.exe
c:\windows\system32\mnmhgsrv.dll
c:\windows\system32\hdf453d.dll
c:\windows\system32\oohxebyt.dll
c:\windows\system32\ypcqghlp.dll
c:\windows\system32\mpwdeapi.dll
c:\windows\system32\zxmsdwin.dll
c:\windows\system32\apzhctde.dll
c:\windows\system32\zyzxjime.dll
c:\windows\system32\yzztlmsn.dll
c:\windows\system32\zywlcime.dll
c:\windows\system32\mndshsrv.dll
c:\windows\system32\akjsdkaq.dll
c:\windows\system32\apsggjba.dll
c:\windows\system32\arjrfler.dll
c:\windows\system32\oswxdttb.dll
c:\windows\system32\mndhfdwd.dll
c:\windows\system32\zycbdime.dll
c:\windows\system32\zywmgime.dll
c:\windows\system32\arjrgler.dll
c:\windows\system32\opshcbty.dll
c:\windows\system32\erxybloe.dll
c:\windows\system32\ietzcpaq.dll
c:\windows\system32\lassaplo.dll
c:\windows\system32\nhmxejkl.dll
c:\windows\system32\dpvvoxmh.dll
c:\windows\system32\mstimewd.dll
c:\windows\system32\msobjstl.dll
c:\windows\system32\cliconfgzx.dll
c:\windows\system32\rasdlgcq.dll
c:\windows\system32\adsntzt.dll
c:\windows\system32\dispexcb.dll
c:\windows\system32\midimappt.dll
c:\program files\internet explorer\plugins\windows64.sys
c:\windows\system32\ksuserfy.dll
c:\program files\internet explorer\iexplore32.sys
c:\program files\internet explorer\iexplore32.win
c:\program files\internet explorer\iexplore32.dat
c:\windows\system32\npkycryp.sys
c:\windows\system32\npkcrypt.sys

2.删除重启后使用SREng修复下面各项:

    启动项目 -- 注册表之如下项删除:
[{35671234-7890-ABCD-CDEF-567801237653}]    <>
[{528DF602-9541-A985-210A-984A698C6F25}]    <>
[{50940F85-F015-14F1-A05F-F69858AC6D05}]    <>
注意该项[shell]修改:把<Explorer.exe,qtca16.exe>修改为<Explorer.exe>即清除Explorer.exe后面的内容
[{7C8D1401-A58D-A81C-CD24-A5915C4517C7}]    <C:\WINDOWS\system32\mnmhgsrv.dll>
[{B629FF4F-ACDB-5C90-A098-FACB3456A26B}]    <C:\WINDOWS\system32\hdf453d.dll>
[{6B1AEF69-DDAE-FDAD-DCAB-698F026ABDB6}]    <C:\WINDOWS\system32\oohxebyt.dll>
[{80AF1289-F140-A140-D012-C1458759FC08}]    <C:\WINDOWS\system32\ypcqghlp.dll>
[{55694105-5108-9405-3695-954187462155}]    <C:\WINDOWS\system32\mpwdeapi.dll>
[{7A041F13-A111-12A3-B0CF-F99818AA68A7}]    <C:\WINDOWS\system32\zxmsdwin.dll>
[{3D698451-2015-6358-9871-2015987452D3}]    <C:\WINDOWS\system32\apzhctde.dll>
[{AA59145F-315D-BC23-AC1F-145DF81A34AA}]    <C:\WINDOWS\system32\zyzxjime.dll>
[{B490415F-65F8-B5C5-D8BA-9405FB12054B}]    <C:\WINDOWS\system32\yzztlmsn.dll>
[{37A924AF-1A5F-CF21-AB1D-1D5CF82A8A73}]    <C:\WINDOWS\system32\zywlcime.dll>
[{87FD640A-158F-48AC-FD14-1597F14A9778}]    <C:\WINDOWS\system32\mndshsrv.dll>
[{4A908760-8000-4000-A000-9000322145A4}]    <C:\WINDOWS\system32\akjsdkaq.dll>
[{7FD45A54-9875-698F-E56E-65102358FDF7}]    <C:\WINDOWS\system32\apsggjba.dll>
[{8C69034A-F45F-D34D-A33A-C33C4D324FC8}]    <C:\WINDOWS\system32\arjrfler.dll>
[{43512378-9874-5641-1025-985420368734}]    <C:\WINDOWS\system32\oswxdttb.dll>
[{6C648541-1025-9650-9057-6541258720C6}]    <C:\WINDOWS\system32\mndhfdwd.dll>
[{4A698102-5904-AFD0-20DF-CD1A65829CA4}]    <C:\WINDOWS\system32\zycbdime.dll>
[{7319A1F1-9410-9654-3201-345FFA349137}]    <C:\WINDOWS\system32\zywmgime.dll>
[{9C69034A-F45F-D34D-A33A-C33C4D324FC9}]    <C:\WINDOWS\system32\arjrgler.dll>
[{32596546-2036-9451-6058-658402589723}]    <C:\WINDOWS\system32\opshcbty.dll>
[{20909876-4567-3908-4056-909834565102}]    <C:\WINDOWS\system32\erxybloe.dll>
[{39109876-7619-9101-7012-901938475193}]    <C:\WINDOWS\system32\ietzcpaq.dll>
[{2B69874A-C58C-458D-69F0-698F874E41B2}]    <C:\WINDOWS\system32\lassaplo.dll>
[{C490415F-65F8-B5C5-D8BA-9405FB12054C}]    <C:\WINDOWS\system32\yzztlmsn.dll>
[{57AC9076-C898-B098-D098-A18319080975}]    <C:\WINDOWS\system32\nhmxejkl.dll>
[{00070007-0007-0007-0007-00070007BB15}]    <C:\WINDOWS\system32\dpvvoxmh.dll>
[{00180018-0018-0018-0018-00180018BB15}]    <C:\WINDOWS\system32\mstimewd.dll>
[{00170017-0017-0017-0017-00170017BB15}]    <C:\WINDOWS\system32\msobjstl.dll>
[{00050005-0005-0005-0005-00050005BB15}]    <C:\WINDOWS\system32\cliconfgzx.dll>
[{00230023-0023-0023-0023-00230023BB15}]    <C:\WINDOWS\system32\rasdlgcq.dll>
[{00010001-0001-0001-0001-00010001BB15}]    <C:\WINDOWS\system32\adsntzt.dll>
[{00060006-0006-0006-0006-00060006BB15}]    <C:\WINDOWS\system32\dispexcb.dll>
[{4F4F0064-71E0-4f0d-0021-708476C7815F}]    <C:\WINDOWS\system32\midimappt.dll>
[{4372FE4D-E2C2-45FE-A893-E2B1691A7DD0}]    <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys>
[{00130013-0013-0013-0013-00130013BB15}]    <C:\WINDOWS\system32\ksuserfy.dll>
[{E6C0D0E3-9E9A-489D-AE19-BBCFC7047A59}]    <C:\Program Files\Internet Explorer\IEXPLORE32.Sys>
[{1FD4696C-E95A-44E2-A03A-FDBDF4CCC305}]    <C:\Program Files\Internet Explorer\IEXPLORE32.win>
[{0B497AE8-3F6C-440C-AB87-52ED0182464A}]    <C:\Program Files\Internet Explorer\IEXPLORE32.Dat>
[dpvvoxmh.dll]    <C:\WINDOWS\system32\dpvvoxmh.dll>
[mstimewd]    <C:\WINDOWS\system32\mstimewd.dll>
[msobjstl.dll]    <C:\WINDOWS\system32\msobjstl.dll>
[cliconfgzx.dll]    <C:\WINDOWS\system32\cliconfgzx.dll>
[rasdlgcq.dll]    <C:\WINDOWS\system32\rasdlgcq.dll>
[adsntzt.dll]    <C:\WINDOWS\system32\adsntzt.dll>
[dispexcb.dll]    <C:\WINDOWS\system32\dispexcb.dll>
[midimappt]    <C:\WINDOWS\system32\midimappt.dll>
[ksuserfy.dll]    <C:\WINDOWS\system32\ksuserfy.dll>

    启动项目 -- 服务-- 驱动程序之如下项禁用:
[npkycryp / npkycryp]    <\??\C:\WINDOWS\system32\npkycryp.sys>
[npkcrypt / npkcrypt]    <\??\C:\WINDOWS\system32\npkcrypt.sys>

    系统修复-- 浏览器加载项之如下项删除:
[]    <C:\WINDOWS\system32\yzztlmsn.dll>
[]    <C:\WINDOWS\system32\hdf453d.dll>
[]    <C:\WINDOWS\system32\yzztlmsn.dll>
[]    <C:\WINDOWS\system32\zyzxjime.dll>
[]    <C:\WINDOWS\system32\arjrgler.dll>
[]    <C:\WINDOWS\system32\arjrfler.dll>
[]    <C:\WINDOWS\system32\mndshsrv.dll>
[]    <C:\WINDOWS\system32\ypcqghlp.dll>
[]    <C:\WINDOWS\system32\apsggjba.dll>
[]    <C:\WINDOWS\system32\mnmhgsrv.dll>
[]    <C:\WINDOWS\system32\zxmsdwin.dll>
[]    <C:\WINDOWS\system32\zywmgime.dll>
[]    <C:\WINDOWS\system32\mndhfdwd.dll>
[]    <C:\WINDOWS\system32\oohxebyt.dll>
[]    <C:\WINDOWS\system32\nhmxejkl.dll>
[]    <C:\WINDOWS\system32\mpwdeapi.dll>
[]    <C:\WINDOWS\system32\akjsdkaq.dll>
[]    <C:\WINDOWS\system32\zycbdime.dll>
[]    <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys>
[]    <C:\WINDOWS\system32\oswxdttb.dll>
[]    <C:\WINDOWS\system32\apzhctde.dll>
[]    <C:\WINDOWS\system32\ietzcpaq.dll>
[]    <C:\WINDOWS\system32\zywlcime.dll>
[]    <C:\WINDOWS\system32\opshcbty.dll>
[]    <C:\WINDOWS\system32\lassaplo.dll>
[]    <C:\WINDOWS\system32\erxybloe.dll>
[]    <C:\WINDOWS\system32\erxybloe.dll>
[]    <C:\Program Files\Internet Explorer\IEXPLORE32.win>
[]    <C:\Program Files\Internet Explorer\IEXPLORE32.Dat>
[]    <C:\Program Files\Internet Explorer\IEXPLORE32.Sys>
[]    <C:\WINDOWS\system32\yzztlmsn.dll>
[]    <C:\WINDOWS\system32\hdf453d.dll>
[]    <C:\WINDOWS\system32\yzztlmsn.dll>
[]    <C:\WINDOWS\system32\zyzxjime.dll>
[]    <C:\WINDOWS\system32\arjrgler.dll>
[]    <C:\WINDOWS\system32\arjrfler.dll>
[]    <C:\WINDOWS\system32\mndshsrv.dll>
[]    <C:\WINDOWS\system32\ypcqghlp.dll>
[]    <C:\WINDOWS\system32\apsggjba.dll>
[]    <C:\WINDOWS\system32\mnmhgsrv.dll>
[]    <C:\WINDOWS\system32\zxmsdwin.dll>
[]    <C:\WINDOWS\system32\zywmgime.dll>
[]    <C:\WINDOWS\system32\mndhfdwd.dll>
[]    <C:\WINDOWS\system32\oohxebyt.dll>
[]    <C:\WINDOWS\system32\nhmxejkl.dll>
[]    <C:\WINDOWS\system32\mpwdeapi.dll>
[]    <C:\WINDOWS\system32\akjsdkaq.dll>
[]    <C:\WINDOWS\system32\zycbdime.dll>
[]    <C:\Program Files\Internet Explorer\PLUGINS\Windows64.Sys>
[]    <C:\WINDOWS\system32\oswxdttb.dll>
[]    <C:\WINDOWS\system32\apzhctde.dll>
[]    <C:\WINDOWS\system32\ietzcpaq.dll>
[]    <C:\WINDOWS\system32\zywlcime.dll>
[]    <C:\WINDOWS\system32\opshcbty.dll>
[]    <C:\WINDOWS\system32\lassaplo.dll>
[]    <C:\WINDOWS\system32\erxybloe.dll>
[]    <C:\Program Files\Internet Explorer\IEXPLORE32.win>
[]    <C:\Program Files\Internet Explorer\IEXPLORE32.Dat>
gototop
 

回复:瑞星为什么杀不了这毒。

可以尝试一下进入安全模式用瑞星查杀!!!
gototop
 

回复:瑞星为什么杀不了这毒。

LZ中的是典型的木马群病毒。升级杀毒软件后,断开网络,清理IE临时文件,全盘杀毒即可
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT