谁可以干掉这个超级大流氓？

显示全部楼层 · 发表于 2008-8-5 18:57:25

[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo , 4.40]
[C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo , 4.40]
[C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll]  [Lenovo, 4.40]
[C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll]  [Lenovo, 4, 0, 0, 0]
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\SvcHlprRes.dll]  [Lenovo, 4, 0, 0, 0]
[PID: 3152 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
[C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWRMGRRT.DLL]  [N/A, ]
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL]  [N/A, ]
[C:\WINDOWS\system32\Sensor.dll]  [Lenovo., 1.52.0.7]
[C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 6.14.10.4785]
[C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 6.14.10.4785]
[C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 6.14.10.4785]
[C:\WINDOWS\system32\igfxress.dll]  [Intel Corporation, 6.14.10.4785]
[C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4785]
[C:\WINDOWS\system32\btncopy.dll]  [Broadcom Corporation., 5.1.0.3100]
[PID: 3560 / Administrator][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
[C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWRMGRRT.DLL]  [N/A, ]
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL]  [N/A, ]
[C:\WINDOWS\system32\Sensor.dll]  [Lenovo., 1.52.0.7]
[C:\WINDOWS\system32\OEMDSPIF.DLL]  [NVIDIA Corporation, 6.14.11.0133]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3584 / Administrator][C:\WINDOWS\system32\TpShocks.exe]  [Lenovo., 1.52.0.2]
[C:\Program Files\ThinkPad\TpShocks\MUI\0804\TpShocks.dll]  [, ]
[C:\WINDOWS\system32\Sensor.dll]  [Lenovo., 1.52.0.7]
[PID: 3592 / Administrator][C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe]  [Lenovo Group Limited, 1, 0, 0, 2]
[C:\PROGRA~1\THINKV~2\PrdCtr\SC\LPRESMGR.DLL]  [N/A, ]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\TrayRes.dll]  [Lenovo, 4, 0, 0, 0]
[PID: 3600 / Administrator][C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe]  [Lenovo Group Limited, 1.00]
[C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.dll]  [N/A, ]
[C:\Program Files\Lenovo\HOTKEY\hkvolkey.dll]  [N/A, ]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3644 / Administrator][C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe]  [Lenovo Group Limited, 1.00]
[PID: 3652 / Administrator][C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe]  [Lenovo Group Limited, 1.17]
[PID: 3812 / Administrator][C:\Program Files\Linkwork\EPolCC\EPolCCControl.Exe]  [Linkwork, 3, 71, 517, 1]
[C:\Program Files\Linkwork\EPolCC\CommonFunc.dll]  [Linkwork, 3, 65, 912, 1]
[C:\Program Files\Linkwork\EPolCC\MFC42.DLL]  [Microsoft Corporation, 6.02.4131.0]
[C:\Program Files\Linkwork\EPolCC\MSVCP60.dll]  [Microsoft Corporation, 6.02.3104.0]
[PID: 2284 / Administrator][C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe]  [Avira GmbH, 8.00.70.02]
[C:\Program Files\Avira\AntiVir PersonalEdition Classic\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Avira\AntiVir PersonalEdition Classic\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Avira\AntiVir PersonalEdition Classic\cclib.dll]  [Avira GmbH, 8.00.70.04]
[C:\Program Files\Avira\AntiVir PersonalEdition Classic\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
[c:\program files\avira\antivir personaledition classic\ccgen.dll]  [Avira GmbH, 8.00.70.03]
[c:\program files\avira\antivir personaledition classic\ccgenrc.dll]  [Avira GmbH, 8.00.70.00]
[c:\program files\avira\antivir personaledition classic\ccguard.dll]  [Avira GmbH, 8.00.70.04]
[c:\program files\avira\antivir personaledition classic\ccgrdrc.dll]  [Avira GmbH, 8.00.72.00]
[c:\program files\avira\antivir personaledition classic\avipc.dll]  [Avira GmbH, 1.0.6.0]
[c:\program files\avira\antivir personaledition classic\ccupdate.dll]  [Avira GmbH, 8.00.70.02]
[c:\program files\avira\antivir personaledition classic\ccupdrc.dll]  [Avira GmbH, 8.00.70.00]
[c:\program files\avira\antivir personaledition classic\cclic.dll]  [Avira GmbH, 8.00.70.04]
[c:\program files\avira\antivir personaledition classic\cclicrc.dll]  [Avira GmbH, 8.00.70.00]
[c:\program files\avira\antivir personaledition classic\ccmsg.dll]  [Avira GmbH, 8.00.00.06]
[PID: 3020 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3196 / Administrator][C:\Program Files\ProSecurity\Alarm.exe]  [ISecSoft Inc., 1.0.0.21]
[C:\Program Files\ProSecurity\DVIOCTRL.DLL]  [N/A, ]
[PID: 3200 / Administrator][C:\Program Files\ProSecurity\RuleEditor.exe]  [ISecSoft Inc., 1.0.7.18]
[C:\Program Files\ProSecurity\DVIOCTRL.DLL]  [N/A, ]
[PID: 3436 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3532 / Administrator][D:\Program Files\BitComet0.64 苹果MAC美化去广告深度优化IP过滤绿色版＋最新稳定版发布\BitComet mac.exe]  [www.BitComet.com, 0.64.]
[D:\Program Files\BitComet0.64 苹果MAC美化去广告深度优化IP过滤绿色版＋最新稳定版发布\dbghelp.dll]  [Microsoft Corporation, 6.3.0011.3 (DbgBuild.040120-1256)]
[C:\WINDOWS\system32\msdmo.dll]  [, ]
[PID: 11000 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[d:\Program Files\easyMule\modules\IE2EM.dll]  [VeryCD.com, 1.0.0.1]
[D:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 4, 1007]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[C:\Program Files\Lenovo\HOTKEY\hkvolkey.dll]  [N/A, ]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]
[PID: 12604 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[d:\Program Files\easyMule\modules\IE2EM.dll]  [VeryCD.com, 1.0.0.1]
[D:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 4, 1007]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]
[PID: 10504 / Administrator][D:\Program Files\sreng\SREngLdr.EXE]  [Smallfrogs Studio, 2.6.12.1018]
[PID: 9072 / Administrator][D:\Program Files\sreng\SRE8c545eaa.EXE]  [Smallfrogs Studio, 2.6.12.1018]
[D:\Program Files\sreng\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
[C:\PROGRA~1\MICROS~2\OFFICE11\MCPS.DLL]  [Microsoft Corporation, 11.0.8164]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1    localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 432, C:\PROGRAM FILES\THINKPAD\BLUETOOTH SOFTWARE\BIN\BTWDINS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 536, C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24EVMON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 364, C:\PROGRAM FILES\AVIRA\ANTIVIR PERSONALEDITION CLASSIC\SCHED.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 720, C:\PROGRAM FILES\AVIRA\ANTIVIR PERSONALEDITION CLASSIC\AVGUARD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 760, C:\PROGRAM FILES\LINKWORK\EPOLCC\EPOLCC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 512, C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\ACSVC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2760, C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\SVCGUIHLPR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3652, C:\PROGRAM FILES\LENOVO\PKGMGR\HOTKEY_1\TPSCREX.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3812, C:\PROGRAM FILES\LINKWORK\EPOLCC\EPOLCCCONTROL.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2284, C:\PROGRAM FILES\AVIRA\ANTIVIR PERSONALEDITION CLASSIC\AVGNT.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3196, C:\PROGRAM FILES\PROSECURITY\ALARM.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3200, C:\PROGRAM FILES\PROSECURITY\RULEEDITOR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3532, D:\PROGRAM FILES\BITCOMET0.64 苹果MAC美化去广告深度优化IP过滤绿色版＋最新稳定版发布\BITCOMET MAC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 10504, D:\PROGRAM FILES\SRENG\SRENGLDR.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

显示全部楼层 · 发表于 2008-8-5 19:40:40

你用附件上传不就好了……

显示全部楼层 · 发表于 2008-8-5 20:33:10

开始->运行中，输入msconfig，回车，在“服务”选项卡中找到”Contrl Center of Storm Media”，把勾去掉

控制面板–> 管理工具–> 服务,找到“Contrl Center of Storm Media”，双击，在服务状态下点“停止”，启动类型中选“已禁用”或者“手动”

把stormliv.exe , 直接改成 stormliv99.exe, 用记事本在本目录下建一 stormliv.exe 文件

显示全部楼层 · 发表于 2008-8-5 20:56:58

多谢各位啊。恢复了D盘数据以后。貌似发现现在是比较正常了，现在ps里面也可以删除暴风规则了，Wsyscheck找暴风的服务也找不到了。。。。。有点奇怪啊，可能已经被Wsyscheck强行删除了吧，所以它顺带暴力清空了我的D盘。。
现在没敢去动暴风的目录里的uninst了

[ 本帖最后由肉包子于 2008-8-5 21:04 编辑 ]

显示全部楼层 · 发表于 2008-8-5 21:59:42

软件问题，且问题已解决，关闭并移至解疑答难区。请楼主理解。^_^

[已解决] 谁可以干掉这个超级大流氓？