瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】Backdoor.Ginwui.a怎么杀?谢谢!!!在线等

12   2  /  2  页   跳转

【求助】Backdoor.Ginwui.a怎么杀?谢谢!!!在线等

接楼上:

[PID: 348][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe]  <Microsoft Corporation><7.00.9064.9150>
[PID: 464][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1708][C:\WINDOWS\system32\wbem\wmiprvse.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1824][C:\windows\system32\wincfgs.exe]  <N/A><N/A>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
[PID: 1484][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1860][C:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1996][C:\Program Files\rising\rav\RavTimer.exe]  <rising><16, 0, 0, 23>
    [C:\Program Files\rising\rav\Language.dll]  <RiSing><15, 0, 0, 17>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [C:\Program Files\rising\rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1368][C:\Program Files\rising\rav\RavMon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 32>
    [C:\Program Files\rising\rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\rising\rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\rising\rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\rising\rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\rising\rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\rising\rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\rising\rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [C:\Program Files\SearchNet\SrvNet32.dll]  <中搜在线><1, 0, 2, 7>
[PID: 2116][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3510>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
[PID: 2156][D:\程序1\结巴\SysExplr.EXE]  <N/A><N/A>
    [D:\程序1\结巴\HttpReq.dll]  <N/A><N/A>
    [D:\程序1\结巴\CoolMenu.dll]  <N/A><N/A>
    [D:\程序1\结巴\httphlp.dll]  <N/A><N/A>
    [D:\程序1\结巴\AVCDROM.dll]  <N/A><N/A>
    [D:\程序1\结巴\Sys936.DLL]  <N/A><N/A>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [C:\Program Files\SearchNet\SrvNet32.dll]  <中搜在线><1, 0, 2, 7>
[PID: 2456][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.0.14>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
[PID: 2500][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
[PID: 2704][C:\Program Files\Messenger\msmsgs.exe]  <Microsoft Corporation><4.7.3001>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
[PID: 2732][D:\程序1\MagicSet\SRIECLI.EXE]  <Super Rabbit Soft><7.76>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [D:\程序1\MagicSet\shlobj71.ocx]  <Sky Software (http://www.ssware.com)><7, 1, 0, 0>
[PID: 3540][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [C:\PROGRA~1\baidu\bar\baidubar.dll]  <Baidu.com, Inc.><2, 0, 2, 99>
    [C:\Program Files\SearchNet\SNHpr.dll]  <Beijing Zhongsou Online Software><1, 0, 3, 0>
    [C:\WINDOWS\Downlo~1\f3l.dll]  <中搜在线软件有限公司><2, 0, 2, 5>
    [C:\Program Files\SearchNet\SrvNet32.dll]  <中搜在线><1, 0, 2, 7>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
[PID: 3816][C:\WINDOWS\system32\wuauclt.exe]  <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
[PID: 3176][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [C:\Program Files\SearchNet\SrvNet32.dll]  <中搜在线><1, 0, 2, 7>
[PID: 3320][C:\DOCUME~1\1\LOCALS~1\Temp\Rar$EX00.015\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [C:\Program Files\SearchNet\SrvNet32.dll]  <中搜在线><1, 0, 2, 7>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 

【回复“westbeck”的帖子】
发上去了,谢谢帮忙!!!
gototop
 

【回复“oo123oo3”的帖子】
照做了,第二天还是出来!!!
gototop
 

高手哪里去了???
唔唔唔······
gototop
 

高手那里去了?
斑竹帮帮忙吧!
即使解决不了也回话好吗???
:(
gototop
 

斑竹????
gototop
 

ding
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT