瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 我的电脑是否有毒,帮帮忙解决下~~~~~~~~~~~【讨论】【求助】

12   2  /  2  页   跳转

我的电脑是否有毒,帮帮忙解决下~~~~~~~~~~~【讨论】【求助】

PID: 6536 / Administrator][D:\迅雷\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5, 6, 8, 329]
    [c:\progra~1\ljjv\ywwi.dll]  [, 5, 0, 0, 7]
    [c:\progra~1\ljjv\dbbn.dll]  [ , 5, 0, 0, 7]
    [D:\迅雷\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 26]
    [D:\迅雷\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 16, 2, 108]
    [D:\迅雷\Program\stlport_vc646.dll]  [STLport Consulting, Inc., 4.6.2003.1031]
    [D:\迅雷\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 16, 2, 108]
    [D:\迅雷\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 1, 0, 8]
    [D:\迅雷\Components\DownAndPlay\DownAndPlay.dll]  [, 1, 0, 0, 18]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\迅雷\Program\iTargetAD.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 29]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx]  [Adobe Systems, Inc., 9,0,47,0]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [D:\迅雷\Components\InMedia\iEmbedShell.dll]  [ , 1, 0, 0, 19]
    [D:\迅雷\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 2, 1, 36]
    [D:\迅雷\Components\Security\ThunderSafe.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 3, 18]
    [D:\迅雷\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 1, 4, 15]
    [D:\迅雷\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 2, 2, 2, 60]
    [D:\迅雷\Program\LiveUpdate.dll]  [Thunder Networking Technologies,LTD, 1, 2, 1, 20]
    [D:\迅雷\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 15]
    [D:\迅雷\Components\Tips\TipsClient.dll]  [Thunder Networking Technologies,LTD, 2, 1, 4, 72]
    [D:\迅雷\Components\VPSHELL\VPSHELL.dll]  [XunLei, 1, 2, 0, 10]
    [D:\迅雷\Components\UserExperience\UserExperience.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [D:\迅雷\Components\ResWorker\DsXlCom.dll]  [, 1, 0, 0, 16]
    [D:\迅雷\Components\InMedia\iEmbed10.dll]  [ , 3, 3, 1, 83]
    [D:\迅雷\Program\XLNet.Dll]  [Thunder Networking Technologies,LTD, 1, 2, 1, 9]
    [D:\迅雷\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 13, 4, 58]
    [D:\迅雷\Program\MSVCIRT.dll]  [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\shdocvw32.dll]  [Microsoft Corporation, 6.00.3790.2783 ]
    [D:\迅雷\Plugins\GouGouTop\GouGouTop.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [D:\迅雷\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
    [D:\迅雷\Plugins\ThunderKAV\ThunderKAV.dll]  [深圳市迅雷网络技术有限公司, 1.0.3.22]
    [d:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\迅雷\Components\VPSHELL\VideoPicture.dll]  [XunLei, 1, 2, 0, 11]
    [D:\迅雷\Plugins\ThunderKAV\bin\ikave.dll]  [, 5, 0, 0, 62]
    [D:\迅雷\Plugins\ThunderKAV\bin\kave.dll]  [Kaspersky Lab., 5, 0, 0, 62]
    [D:\迅雷\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 6]
    [D:\迅雷\Components\ResWorker\MediaWorker.dll]  [Thunder Networking Technologies,LTD, 1, 2, 0, 18]
    [C:\Program Files\TENCENT\SSPlus\SAddr.dll]  [Tencent, 5, 0, 1, 17]
    [C:\PROGRA~1\OCINS\srchsp.dll]  [中国互联网络信息中心(CNNIC), 2, 6, 0, 0]
[PID: 7816 / Administrator][D:\迅雷\Plugins\ThunderKAV\bin\ScanningProcess.exe]  [N/A, ]
    [D:\迅雷\Plugins\ThunderKAV\bin\prloader.dll]  [Kaspersky Lab, 6.0.1.305]
    [c:\progra~1\ljjv\ywwi.dll]  [, 5, 0, 0, 7]
    [c:\progra~1\ljjv\dbbn.dll]  [ , 5, 0, 0, 7]
    [D:\迅雷\Plugins\ThunderKAV\bin\prkernel.ppl]  [Kaspersky Lab, 6.0.1.305]
    [d:\迅雷\plugins\thunderkav\bin\prefetch.ppl]  [Kaspersky Labs, 1, 0, 0, 56]
    [d:\迅雷\plugins\thunderkav\bin\avpmgr.ppl]  [Kaspersky Lab, 6.0.1.305]
    [d:\迅雷\plugins\thunderkav\bin\wdiskio.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\nfio.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\avlib.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\dtreg.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\prutil.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\avp1.ppl]  [Kaspersky Lab, 6.0.0.299]
    [d:\迅雷\plugins\thunderkav\bin\l_llio.ppl]  [Kaspersky Labs, 6.0.9.75]
    [d:\迅雷\plugins\thunderkav\bin\ichstrms.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\hashcont.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\hccmp.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\uniarc.ppl]  [Kaspersky Lab, 6.0.0.16]
    [d:\迅雷\plugins\thunderkav\bin\minizip.ppl]  [Kaspersky Lab, 6.0.0.16]
    [d:\迅雷\plugins\thunderkav\bin\prseqio.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\hashmd5.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\inflate.ppl]  [Kaspersky Lab, 6.0.0.16]
    [d:\迅雷\plugins\thunderkav\bin\tempfile.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\cab.ppl]  [Kaspersky Lab, 6.0.0.16]
    [d:\迅雷\plugins\thunderkav\bin\arj.ppl]  [Kaspersky Lab, 6.0.0.16]
    [d:\迅雷\plugins\thunderkav\bin\rar.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\mdb.ppl]  [Kaspersky Lab, 6.0.0.300]
    [C:\WINDOWS\system32\MAPI32.dll]  [Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148)]
    [d:\迅雷\plugins\thunderkav\bin\msoe.ppl]  [Kaspersky Lab, 6.0.0.276]
    [d:\迅雷\plugins\thunderkav\bin\iwgen.ppl]  [Kaspersky Lab, 6.0.0.276]
[PID: 4852 / SYSTEM][c:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\shdocvw32.dll]  [Microsoft Corporation, 6.00.3790.2783 ]
    [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1601, 4978]
    [D:\迅雷\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 3, 11]
    [D:\迅雷\Components\ResWorker\DsBho_00.dll]  [, 1, 0, 0, 4]
    [D:\迅雷\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 6]
    [D:\迅雷\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.2.9]
    [C:\WINDOWS\system32\msurlpar.dll]  [Statistics, 1, 0, 0, 1]
    [C:\PROGRA~1\OCINS\ieaux.dll]  [中国互联网络信息中心(CNNIC), 2, 6, 0, 2]
    [C:\PROGRA~1\OCINS\idnsvr.dll]  [中国互联网信息中心(CNNIC), 2, 6, 0, 2]
    [C:\WINDOWS\ILOVEG~1\google.dll]  [Microsoft Corporation, 4, 0, 2, 111]
    [C:\PROGRA~1\bho\DIEMON~1.DLL]  [N/A, ]
    [d:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 6932 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX04.453\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [c:\progra~1\ljjv\ywwi.dll]  [, 5, 0, 0, 7]
    [c:\progra~1\ljjv\dbbn.dll]  [ , 5, 0, 0, 7]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX04.453\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
gototop
 

文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>无法找到该页</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=GB2312">
<STYLE type="text/css">
BODY { font: 9pt/12pt 宋体 }
H1 { font: 12pt/15pt 宋体 }
H2 { font: 9pt/12pt 宋体 }
A:link { color: red }
A:visited { color: maroon }
</STYLE>
</HEAD><BODY><TABLE width=500 border=0 cellspacing=10><TR><TD>
<h1>无法找到该页</h1>
您正在搜索的页面可能已经删除、更名或暂时不可用。
<hr>
<p>请尝试以下操作:</p>
<ul>
<li>确保浏览器的地址栏中显示的网站地址的拼写和格式正确无误。</li>
<li>如果通过单击链接而到达了该网页,请与网站管理员联系,通知他们该链接的格式不正确。
</li>
<li>单击<a href="javascript:history.back(1)">后退</a>按钮尝试另一个链接。</li>
</ul>
<h2>HTTP 错误 404 - 文件或目录未找到。<br>Internet 信息服务 (IIS)</h2>
<hr>
<p>技术信息(为技术支持人员提供)</p>
<ul>
<li>转到 <a href="http://go.microsoft.com/fwlink/?linkid=8180">Microsoft 产品支持服务</a>并搜索包括“HTTP”和“404”的标题。</li>
<li>打开“IIS 帮助”(可在 IIS 管理器 (inetmgr) 中访问),然后搜索标题为“网站设置”、“常规管理任务”和“关于自定义错误消息”的主题。</li>
</ul>
</TD></TR></TABLE></BODY></HTML>

==================================
进程特权扫描
特殊特权被允许: SeLoadDriverPrivilege [PID = 1916, C:\WINDOWS\SYSTEM32\NVSVC32.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 2052, C:\WINDOWS\SOUNDMAN.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2052, C:\WINDOWS\SOUNDMAN.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 2108, C:\HEROSOFT\HEROV8\SYSEXPLR.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2108, C:\HEROSOFT\HEROV8\SYSEXPLR.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 2132, C:\PROGRAM FILES\RISING\ANTISPYWARE\RUNIEP.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2132, C:\PROGRAM FILES\RISING\ANTISPYWARE\RUNIEP.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 2144, D:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2144, D:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 2164, D:\PROGRAM FILES\RISING\RAV\RAVMON.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2164, D:\PROGRAM FILES\RISING\RAV\RAVMON.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 844, D:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 844, D:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 6536, D:\迅雷\PROGRAM\THUNDER5.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 6536, D:\迅雷\PROGRAM\THUNDER5.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 7816, D:\迅雷\PLUGINS\THUNDERKAV\BIN\SCANNINGPROCESS.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 7816, D:\迅雷\PLUGINS\THUNDERKAV\BIN\SCANNINGPROCESS.EXE]
特殊特权被允许: SeDebugPrivilege [PID = 6588, C:\PROGRAM FILES\WINRAR\WINRAR.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 6588, C:\PROGRAM FILES\WINRAR\WINRAR.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]
gototop
 

我都发上去了杂还米人来解决啊
gototop
 

我晕死一个都米找到杂搞啊~~~~~
gototop
 

我晕死一个都米找到,在那找啊教教我方法啊谢谢咯~~~~~~~~
gototop
 

<{12311A42-AC1B-158F-FD32-5674345F23A1}><{D8E0E3BA-D55F-4A08-8EE4-0A59E0284124}>这2个删除了其他的找不到在那里找谢谢
gototop
 

AppInit_DLLs><mycpri.dll> [N/A]只有这个删除不了  其他的嘿嘿还有1个了谢谢
gototop
 

下你的什么文件啊没效果啊~~~~~
gototop
 

你的方法帮我解决了百度卡的问题了谢谢了哈~可还有问题有待解决啊
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT