收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 原创工具区 › 高手求助！！杀不死的病毒！！已经发上报告,到底有没有 ...
返回列表 发新帖
查看: 2125|回复: 9
收起左侧

高手求助！！杀不死的病毒！！已经发上报告,到底有没有高手?

[复制链接]
yln0803
发表于 2007-9-1 20:16:31 | 显示全部楼层 |阅读模式
前几天中了时间病毒，当时没注意，后来突然间电脑自动关机，重启后2分多种又关机，没办法磁盘重新分区，格式化，装上卡巴提示病毒库被破坏，更新后再杀，没有病毒。我怀疑是一种内存病毒，用了很多方法，也杀不掉！只好求助了！

[ 本帖最后由 yln0803 于 2007-9-2 19:35 编辑 ]
回复

举报

wangjay1980
发表于 2007-9-1 20:17:54 | 显示全部楼层
置顶有SRE和其他一些工具，你可以先用清理工具进行清理，最后用SRE扫个报告
回复

举报

yln0803
 楼主| 发表于 2007-9-1 21:34:14 | 显示全部楼层
  1. 2007-09-01,21:31:08

  3. System Repair Engineer 2.5.16.900
  4. Smallfrogs (http://www.KZTechs.com)

  6. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

  8. 以下内容被选中：
  9.     所有的启动项目（包括注册表、启动文件夹、服务等）
  10.     浏览器加载项
  11.     正在运行的进程（包括进程模块信息）
  12.     文件关联
  13.     Winsock 提供者
  14.     Autorun.inf
  15.     HOSTS 文件
  16.     进程特权扫描


  19. 启动项目
  20. 注册表
  21. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  22.       [(Verified)Microsoft Windows Publisher]
  23. [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  24.     <>  [N/A]
  25. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  26.     <; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
  27.     <; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
  28.     <; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
  29.     <"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe">  [Kaspersky Lab]
  30.     <; SOUNDMAN.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  31.     <; C:\WINDOWS\system32\igfxtray.exe>  [(Verified)Microsoft Windows Publisher]
  32.     <; C:\WINDOWS\system32\hkcmd.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  33.     <"C:\Program Files\Thunder Network\WebThunder\WebThunder.exe" /autostart>  [深圳市迅雷网络技术有限公司]
  34. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  35.       [(Verified)Microsoft Windows Publisher]
  36.       [(Verified)Microsoft Windows Publisher]
  37. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  38.       [Kaspersky Lab]
  39. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  40.       [(Verified)Microsoft Windows Publisher]
  41. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
  42.       [Kaspersky Lab]
  43. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
  44.     <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
  45. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  46.     <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
  47. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  48.     <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
  49. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  50.     <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
  51. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  52.       [(Verified)Microsoft Windows Publisher]
  53. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  54.       [(Verified)Microsoft Windows Publisher]
  55. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  56.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]

  58. ==================================
  59. 启动文件夹
  60. N/A

  62. ==================================
  63. 服务
  64. [卡巴斯基互联网安全套装6.0个人版 / AVP][Running/Auto Start]
  65.   <"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r>
  66. [Human Interface Device Access / HidServ][Stopped/Disabled]
  67.   %SystemRoot%\System32\hidserv.dll>

  69. ==================================
  70. 驱动程序
  71. [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  72.   
  73. [ialm / ialm][Running/Manual Start]
  74.   
  75. [kl1 / kl1][Running/Boot Start]
  76.   <\SystemRoot\system32\drivers\kl1.sys>
  77. [klif / klif][Running/System Start]
  78.   <\??\C:\WINDOWS\system32\drivers\klif.sys>
  79. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  80.   
  81. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  82.   
  83. [Secdrv / Secdrv][Stopped/Manual Start]
  84.   
  85. 浏览器加载项
  86. [WebThunder Browser Helper]
  87.   {00000AAA-A363-466E-BEF5-9BB68697AA7F}
  88.   [添加到反广告黑名单]
  89.   

  91. ==================================
  92. 正在运行的进程
  93. [PID: 500 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  94. [PID: 564 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  95. [PID: 588 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  96.     [C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 6.0.2.621]
  97.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  98. [PID: 632 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  99. [PID: 644 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  100. [PID: 792 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  101. [PID: 836 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  102. [PID: 900 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  103.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.2.621]
  104.     [C:\WINDOWS\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
  105. [PID: 944 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  106. [PID: 1072 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  107. [PID: 1208 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  108. [PID: 1436 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  109.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
  110.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  111.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.2.621]
  112.     [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.3751]
  113.     [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.3751]
  114.     [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.3751]
  115.     [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.3751]
  116.     [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.3751]
  117.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll]  [Kaspersky Lab, 6.0.2.621]
  118.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  119.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prremote.dll]  [Kaspersky Lab, 6.0.2.621]
  120.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  121.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll]  [Kaspersky Lab, 6.0.2.621]
  122.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.2.621]
  123.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl]  [Kaspersky Lab, 6.0.2.621]
  124.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.2.621]
  125.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.2.621]
  126.     [C:\WINDOWS\system32\msdmo.dll]  [, ]
  127.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.2.621]
  128.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.2.621]
  129.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\basegui.ppl]  [Kaspersky Lab, 6.0.2.621]
  130.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\thpimpl.ppl]  [Kaspersky Lab, 6.0.2.621]
  131.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\FSSync.dll]  [Kaspersky Lab, 6.0.5.621]
  132.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\winreg.ppl]  [Kaspersky Lab, 6.0.2.621]
  133.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
  134.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ShellEx.dll]  [Kaspersky Lab, 6.0.2.621]
  135.     [C:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5076]
  136.     [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 2, 10]
  137.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
  138.     [C:\WINDOWS\system32\mpg2splt.ax]  [, ]
  139.     [C:\WINDOWS\system32\macromed\flash\flash.ocx]  [Macromedia, Inc., 6,0,79,0]
  140. [PID: 1548 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  141. [PID: 748 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  142. [PID: 4004 / Administrator][C:\Program Files\Globallink\Game\share\gldclient.exe]  [北京联众电脑有限责任公司, 1, 0, 0, 9]
  143.     [C:\Program Files\Globallink\Game\share\live.dll]  [N/A, ]
  144.     [C:\Program Files\Globallink\Game\share\livesvr.dll]  [N/A, ]
  145. [PID: 2504 / Administrator][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
  146.     [C:\WINDOWS\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
  147. [PID: 1164 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  148.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
  149.     [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 2, 10]
  150.     [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
  151.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.2.621]
  152.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll]  [Kaspersky Lab, 6.0.2.621]
  153.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  154.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prremote.dll]  [Kaspersky Lab, 6.0.2.621]
  155.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  156.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll]  [Kaspersky Lab, 6.0.2.621]
  157.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.2.621]
  158.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl]  [Kaspersky Lab, 6.0.2.621]
  159.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.2.621]
  160.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.2.621]
  161.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.2.621]
  162.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.2.621]
  163.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\basegui.ppl]  [Kaspersky Lab, 6.0.2.621]
  164.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\thpimpl.ppl]  [Kaspersky Lab, 6.0.2.621]
  165.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\FSSync.dll]  [Kaspersky Lab, 6.0.5.621]
  166.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\winreg.ppl]  [Kaspersky Lab, 6.0.2.621]
  167.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  168.     [C:\WINDOWS\system32\macromed\flash\flash.ocx]  [Macromedia, Inc., 6,0,79,0]
  169. [PID: 1936 / Administrator][C:\Program Files\Thunder Network\WebThunder\WebThunder.exe]  [深圳市迅雷网络技术有限公司, 1, 10, 1, 172]
  170.     [C:\Program Files\Thunder Network\WebThunder\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  171.     [C:\Program Files\Thunder Network\WebThunder\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 2, 1, 26]
  172.     [C:\Program Files\Thunder Network\WebThunder\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 17, 5, 130]
  173.     [C:\Program Files\Thunder Network\WebThunder\stlport_vc646.dll]  [STLport Consulting, Inc., 4.6.2003.1031]
  174.     [C:\Program Files\Thunder Network\WebThunder\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 17, 5, 130]
  175.     [C:\Program Files\Thunder Network\WebThunder\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 16, 5, 59]
  176.     [C:\Program Files\Thunder Network\WebThunder\CacheServer.dll]  [, 1, 0, 0, 1]
  177.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
  178.     [C:\Program Files\Thunder Network\WebThunder\XLSafe\WebThunderSafe.dll]  [N/A, ]
  179.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll]  [Kaspersky Lab, 6.0.2.621]
  180.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  181.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prremote.dll]  [Kaspersky Lab, 6.0.2.621]
  182.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  183.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll]  [Kaspersky Lab, 6.0.2.621]
  184.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.2.621]
  185.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl]  [Kaspersky Lab, 6.0.2.621]
  186.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.2.621]
  187.     [c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.2.621]
  188.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.2.621]
  189.     [C:\WINDOWS\system32\macromed\flash\flash.ocx]  [Macromedia, Inc., 6,0,79,0]
  190.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  191.     [C:\Program Files\Thunder Network\WebThunder\Inmedia\iEmbedShell.dll]  [　, 1, 0, 0, 21]
  192.     [C:\Program Files\Thunder Network\WebThunder\InMedia\iEmbed11.dll]  [　, 3, 3, 2, 91]
  193.     [C:\Program Files\Thunder Network\WebThunder\InMedia\PlayerHelper.dll]  [thunder, 1, 1, 0, 24]
  194.     [C:\Program Files\Thunder Network\WebThunder\DownAndPlay\WebDownAndPlay.dll]  [ShenZhen Thunder Networking Technologies Ltd., 1, 0, 1, 19]
  195.     [C:\Program Files\Thunder Network\WebThunder\XLStatistic\XLStatisticAddin.dll]  [深圳市迅雷网络技术有限公司, 1, 1, 0, 1]
  196.     [C:\Program Files\Thunder Network\WebThunder\XLNet.Dll]  [Thunder Networking Technologies,LTD, 1, 2, 1, 9]
  197. [PID: 2452 / Administrator][D:\My Documents\My Music\新建文件夹\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
  198.     [D:\My Documents\My Music\新建文件夹\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
  199.     [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.2.621]

  201. ==================================
  202. 文件关联
  203. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  204. .EXE  OK. ["%1" %*]
  205. .COM  OK. ["%1" %*]
  206. .PIF  OK. ["%1" %*]
  207. .REG  OK. [regedit.exe "%1"]
  208. .BAT  OK. ["%1" %*]
  209. .SCR  OK. ["%1" /S]
  210. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  211. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  212. .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  213. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  214. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  215. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  216. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]

  218. ==================================
  219. Winsock 提供者
  220. N/A

  222. ==================================
  223. Autorun.inf
  224. N/A

  226. ==================================
  227. HOSTS 文件
  228. 127.0.0.1       localhost

  230. ==================================
  231. 进程特权扫描
  232. 特殊特权被允许： SeLoadDriverPrivilege [PID = 4004, C:\PROGRAM FILES\GLOBALLINK\GAME\SHARE\GLDCLIENT.EXE]
  233. 特殊特权被允许： SeLoadDriverPrivilege [PID = 1936, C:\PROGRAM FILES\THUNDER NETWORK\WEBTHUNDER\WEBTHUNDER.EXE]

  235. ==================================
  236. API HOOK
  237. RVA  错误： LoadLibraryA (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
  238. RVA  错误： LoadLibraryExA (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
  239. RVA  错误： LoadLibraryExW (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
  240. RVA  错误： LoadLibraryW (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
  241. RVA  错误： GetProcAddress (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)

  243. ==================================
  244. 隐藏进程
  245. N/A

  247. ==================================
复制代码
回复

举报

wangjay1980
发表于 2007-9-1 21:41:54 | 显示全部楼层
报告没问题，只是病毒库损坏吗？如果是，就卸载重装一下
回复

举报

yln0803
 楼主| 发表于 2007-9-1 22:33:13 | 显示全部楼层
我已经分区3次了（格式化后断电2个小时），卡巴7。0 、6。0都装了，每次装完，第一次更新都提示病毒库被破坏（怀疑是内存病毒修改了病毒库，获得免疫），再次更新就可以了，但是怎么杀都没有病毒。但是经常提示错误、或下一些乱七八招的程序。
回复

举报

afire521
发表于 2007-9-1 22:50:50 | 显示全部楼层
建议去DOS下杀  杀完后修复系统~
回复

举报

yln0803
 楼主| 发表于 2007-9-1 23:29:59 | 显示全部楼层
试过了，用的木马专杀，不好使，如果能杀死重做系统都可以，关键是杀不死！
回复

举报

freedog
发表于 2007-9-2 10:24:42 | 显示全部楼层
不怀疑是硬件有问题了？
回复

举报

yln0803
 楼主| 发表于 2007-9-2 19:34:38 | 显示全部楼层
绝对不是硬件问题,今天换了一内存,开始好了一会,结果一会提示管理员修改注册表什么的,在开机都进不了,只好重装!
回复

举报

liulzj02
发表于 2007-9-2 19:59:24 | 显示全部楼层
用绿色的DR。WEB杀下，如果有毒，相信会有好效果
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-3-19 11:49 , Processed in 0.139674 second(s), 17 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表