收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 原创工具区 › 登陆时总是提示加载*dll出错
返回列表 发新帖
查看: 3291|回复: 4
收起左侧

[已解决] 登陆时总是提示加载*dll出错

[复制链接]
shunyi
发表于 2007-4-5 16:50:21 | 显示全部楼层 |阅读模式
中过wsttrs.exe病毒杀掉之后，
每次登陆总是提示加载dll出错的对话框，要点击确定才能进入桌面。
但并没有发现相关的启动项目。

附上图片和日志，希望高手帮忙解决
  1. 2007-04-05,18:27:22
  2. System Repair Engineer 2.4.12.806
  3. Smallfrogs (http://www.KZTechs.com)
  4. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
  5. 以下内容被选中：
  6.     所有的启动项目（包括注册表、启动文件夹、服务等）
  7.     浏览器加载项
  8.     正在运行的进程（包括进程模块信息）
  9.     文件关联
  10.     Winsock 提供者
  11.     Autorun.inf
  12.     HOSTS 文件

  14. 启动项目
  15. 注册表
  16. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  17.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  18. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  19.     <AVP><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe">  [Kaspersky Lab]
  20.     <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [NVIDIA Corporation]
  21. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  22.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
  23.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  24.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
  25. ==================================
  26. 启动文件夹
  27. N/A
  28. ==================================
  29. 服务
  30. [卡巴斯基反病毒6.0个人版 / AVP][Running/Auto Start]
  31.   <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab>
  32. [Human Interface Device Access / HidServ][Stopped/Disabled]
  33.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  34. [Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start]
  35.   <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><>
  36. [NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  37.   <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
  38. ==================================
  39. 驱动程序
  40. [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
  41.   <System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
  42. [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
  43.   <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
  44. [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  45.   <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
  46. [iwlc / iwlcp][Running/Boot Start]
  47.   <\SystemRoot\System32\DRIVERS\iwlcp.sys><N/A>
  48. [kl1 / kl1][Running/Boot Start]
  49.   <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
  50. [klif / klif][Running/System Start]
  51.   <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
  52. [Motorola Inc. USB Device / MotDev][Stopped/Manual Start]
  53.   <system32\DRIVERS\motodrv.sys><Motorola Inc>
  54. [Motorola USB CDC ACM Driver / motmodem][Stopped/Manual Start]
  55.   <system32\DRIVERS\motmodem.sys><Motorola>
  56. [npkcrypt / npkcrypt][Running/Auto Start]
  57.   <\??\D:\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
  58. [nv / nv][Running/Manual Start]
  59.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
  60. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  61.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  62. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  63.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
  64. [Secdrv / Secdrv][Stopped/Manual Start]
  65.   <system32\DRIVERS\secdrv.sys><N/A>
  66. ==================================
  67. 浏览器加载项
  68. [Thunder Browser Helper]
  69.   {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
  70. [Web反病毒统计]
  71.   {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
  72. [QQ]
  73.   {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Tencent\QQ\QQ.EXE, TENCENT>
  74. [Windows Media Player]
  75.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
  76. [HTML Document]
  77.   {25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
  78. [XML DOM Document]
  79.   {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, N/A>
  80. [XML Document]
  81.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A>
  82. [Thunder Agent Class]
  83.   {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <D:\Thunder Network\Thunder\ComDlls\ThunderAgent_007.dll, Thunder Networking Technologies,LTD>
  84. [Windows Media Player]
  85.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  86. [MediaComm Class]
  87.   {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <D:\Thunder Network\Thunder\Components\InMedia\MediaAddin11.dll, Thunder Networking Technologies,LTD>
  88. [360SafeLive]
  89.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <D:\360safe\live.dll, 360safe.COM>
  90. [Microsoft Web Browser]
  91.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
  92. [Thunder Browser Helper]
  93.   {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
  94. [RDS.DataSpace]
  95.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
  96. [QQPlayerSvr Proxy Control]
  97.   {CD108273-D434-43E6-AA90-1469F97EB398} <D:\Tencent\QQ\QQPlayerProxy.dll, Tencent>
  98. [AUDIO__MP3 Moniker Class]
  99.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  100. [VIDEO__X_MS_WMV Moniker Class]
  101.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  102. [Shockwave Flash Object]
  103.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
  104. [paaf]
  105.   {E533743E-38F7-4C54-866F-A5C536EDA8F9} <C:\PROGRA~1\vjjo\snns.dll, N/A>
  106. [CPasswordEditCtrl Object]
  107.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
  108. [XML HTTP Request]
  109.   {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A>
  110. [XML DOM Document 3.0]
  111.   {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
  112. [XML HTTP 3.0]
  113.   {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
  114. [XML DOM Document]
  115.   {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
  116. [XML HTTP]
  117.   {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
  118. [&使用迅雷下载]
  119.   <D:\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
  120. [&使用迅雷下载全部链接]
  121.   <D:\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
  122. [上传到QQ网络硬盘]
  123.   <D:\Tencent\QQ\AddToNetDisk.htm, N/A>
  124. [添加到QQ自定义面板]
  125.   <D:\Tencent\QQ\AddPanel.htm, N/A>
  126. [添加到QQ表情]
  127.   <D:\Tencent\QQ\AddEmotion.htm, N/A>
  128. [用QQ彩信发送该图片]
  129.   <D:\Tencent\QQ\SendMMS.htm, N/A>
  130. ==================================
  131. 正在运行的进程
  132. [PID: 508][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  133. [PID: 568][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  134. [PID: 592][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  135.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  136. [PID: 636][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  137.     [C:\WINDOWS\AppPatch\AcAdProc.dll]  [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)]
  138. [PID: 648][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  139. [PID: 800][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  140. [PID: 860][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  141. [PID: 1528][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  142.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  143.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
  144.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
  145.     [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
  146.     [C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  147. [PID: 1420][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  148. [PID: 256][D:\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
  149.     [D:\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
  150.     [D:\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
  151.     [D:\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 7, 0, 101, 80]
  152.     [D:\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
  153.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  154.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
  155.     [D:\Tencent\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
  156.     [D:\Tencent\QQ\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
  157.     [D:\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
  158.     [D:\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
  159.     [D:\Tencent\QQ\LoginCtrl.dll]  [N/A, ]
  160.     [D:\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
  161.     [D:\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
  162.     [D:\Tencent\QQ\LoginCtrlRes.dll]  [, 1, 0, 0, 1]
  163.     [D:\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
  164.     [D:\Tencent\QQ\WizardCtrl.dll]  [, 1, 0, 0, 1]
  165.     [D:\Tencent\QQ\QQMainFrame.dll]  [N/A, ]
  166.     [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
  167.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  168.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
  169.     [D:\Tencent\QQ\CQQApplication.dll]  [N/A, ]
  170.     [D:\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
  171.     [D:\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
  172.     [D:\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
  173.     [D:\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
  174.     [D:\Tencent\QQ\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
  175.     [D:\Tencent\QQ\QQAllInOne.dll]  [N/A, ]
  176.     [D:\Tencent\QQ\GroupLive.dll]  [N/A, ]
  177.     [D:\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
  178.     [D:\Tencent\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
  179.     [D:\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
  180.     [D:\Tencent\QQ\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
  181.     [C:\WINDOWS\system32\msdmo.dll]  [, ]
  182.     [D:\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
  183.     [D:\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
  184.     [D:\Tencent\QQ\QQAvatar.dll]  [N/A, ]
  185.     [D:\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
  186.     [D:\Tencent\QQ\QQPlugin.dll]  [N/A, ]
  187.     [D:\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
  188.     [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
  189.     [D:\Tencent\QQ\QRingMng.dll]  [N/A, ]
  190.     [D:\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
  191.     [D:\Tencent\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
  192.     [D:\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
  193.     [D:\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
  194.     [D:\Tencent\QQ\QQCustomFace.dll]  [N/A, ]
  195.     [D:\Tencent\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
  196.     [D:\Tencent\QQ\QQSceneMng.dll]  [N/A, ]
  197.     [D:\Tencent\QQ\BQQApplication.dll]  [N/A, ]
  198.     [D:\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
  199.     [D:\Tencent\QQ\QQSysMsgMng.dll]  [N/A, ]
  200.     [D:\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
  201.     [D:\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 280]
  202.     [D:\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 6, 60]
  203.     [D:\Tencent\QQ\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
  204. [PID: 444][D:\Tencent\QQ\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
  205.     [D:\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
  206. [PID: 1224][E:\网络电视\PPStream V1.0.4.725\PPStream V1.0.4\PPStream\PPStream.exe]  [PPStream.com, 1, 0, 4, 725]
  207.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  208.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
  209.     [E:\网络电视\PPSTRE~1.725\PPSTRE~1.4\PPStream\POWERP~1.DLL]  [PPStream Inc., 1,0,0,3302]
  210.     [E:\网络电视\PPSTRE~1.725\PPSTRE~1.4\PPStream\PSNetwork.dll]  [PPStream, inc., 1, 0, 0, 2468]
  211.     [E:\网络电视\PPSTRE~1.725\PPSTRE~1.4\PPStream\POWERL~1.OCX]  [PPStream.com, 1, 0, 0, 2003]
  212.     [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16414 (vista_gdr.070108-1520)]
  213.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
  214.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.2.621]
  215.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  216.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prremote.dll]  [Kaspersky Lab, 6.0.2.621]
  217.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  218.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.2.621]
  219.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.2.621]
  220.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.2.621]
  221.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.2.621]
  222.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.2.621]
  223.     [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
  224.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  225.     [E:\网络电视\PPStream V1.0.4.725\PPStream V1.0.4\PPStream\pp2play.dll]  [, 1, 0, 0, 365]
  226.     [C:\WINDOWS\system32\msdmo.dll]  [, ]
  227.     [C:\WINDOWS\system32\mfplat.dll]  [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)]
  228.     [C:\WINDOWS\system32\iac25_32.ax]  [Intel Corporation, 2.05.53]
  229.     [C:\WINDOWS\system32\msaud32.acm]  [Microsoft Corporation, 8.00.00.4487]
  230.     [C:\WINDOWS\system32\WMVDECOD.dll]  [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)]
  231. ==================================
  232. 文件关联
  233. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  234. .EXE  OK. ["%1" %*]
  235. .COM  OK. ["%1" %*]
  236. .PIF  OK. ["%1" %*]
  237. .REG  OK. [regedit.exe "%1"]
  238. .BAT  OK. ["%1" %*]
  239. .SCR  OK. ["%1" /S]
  240. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  241. .HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
  242. .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  243. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  244. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  245. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  246. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
  247. ==================================
  248. Winsock 提供者
  249. N/A
  250. ==================================
  251. Autorun.inf
  252. N/A
  253. ==================================
  254. HOSTS 文件
  255. 127.0.0.1       localhost
  256. ==================================
  257. API HOOK
  258. RVA  错误： LoadLibraryA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF3FABAF0)
  259. RVA  错误： LoadLibraryExA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF3FABCD0)
  260. RVA  错误： LoadLibraryExW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF3FABE30)
  261. RVA  错误： LoadLibraryW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF3FABBE0)
  262. RVA  错误： GetProcAddress (危险等级: 高,  被下面模块所HOOK: Dest Addr: 0xF3FABDE0)
  263. ==================================
  264. 隐藏进程
  265. N/A
  266. ==================================
复制代码




问题已解决
谢谢wangjay1980

[ 本帖最后由 shunyi 于 2007-4-5 22:43 编辑 ]
{32828C7D-0727-42D9-95BE-CA2F6CB73F0B}0.jpg
{F5B3756E-D619-473D-A819-8283C907D8D6}0.jpg
回复

举报

wangjay1980
发表于 2007-4-5 16:59:36 | 显示全部楼层
C:\WINDOWS\SYSTEM32\RUNDLL2000.EXE
这个删除
用这个清理

arswp.rar

590.29 KB, 下载次数: 77
回复

举报

shunyi
 楼主| 发表于 2007-4-5 18:22:28 | 显示全部楼层
已经把C:\WINDOWS\SYSTEM32\RUNDLL2000.EXE删掉
现在没有这个进程了

但还是提示“加载C：\windows\system32\ampha.dll”出错
回复

举报

wangjay1980
发表于 2007-4-5 20:22:14 | 显示全部楼层
[iwlc / iwlcp][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\iwlcp.sys><N/A>
这个驱动删除或设置为disabled
回复

举报

shunyi
 楼主| 发表于 2007-4-5 22:42:13 | 显示全部楼层
问题已解决
谢谢wangjay1980
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-4-21 22:06 , Processed in 0.115231 second(s), 21 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表