收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 原创工具区 › 请大家帮个忙啊!(卡巴杀不掉啊!)
返回列表 发新帖
查看: 2100|回复: 4
收起左侧

请大家帮个忙啊!(卡巴杀不掉啊!)

[复制链接]
fingerling
发表于 2007-5-23 02:22:11 | 显示全部楼层 |阅读模式
请大家帮忙看看这个到底该怎么办啊?!
上周六晚上在迅雷博客上下东西,好象是中木马了,用AVG7.5在线杀毒,杀完了,重杀的时候,上面还有,有几个一直杀完又有了(图1),还有,卡巴根本就杀不出来,
用IceSword1.2看见图2所示,还有很多这样的红色的东西.

  1. 2007-06-24,02:15:47
  2. System Repair Engineer 2.4.12.806
  3. Smallfrogs (http://www.KZTechs.com)
  4. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
  5. 以下内容被选中：
  6.     所有的启动项目（包括注册表、启动文件夹、服务等）
  7.     浏览器加载项
  8.     正在运行的进程（包括进程模块信息）
  9.     文件关联
  10.     Winsock 提供者
  11.     Autorun.inf
  12.     HOSTS 文件

  14. 启动项目
  15. 注册表
  16. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  17.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  18. [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  19.     <load><>  [N/A]
  20.     <run><>  [N/A]
  21. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  22.     <Windows木马防火墙><E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\Trojanwall.exe>  [风云谷]
  23.     <AVP><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe">  [(Verified)Kaspersky Lab]
  24.     <!AVG Anti-Spyware><"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized>  [Anti-Malware Development a.s.]
  25.     <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  26. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  27.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
  28.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  29. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  30.     <AppInit_DLLs><>  [N/A]
  31. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  32.     <UIHost><C:\WINDOWS\Resources\Themes\Login\logonui-3.1.exe>  [N/A]
  33. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  34.     <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll>  [Anti-Malware Development a.s.]
  35. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  36.     <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]
  37. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
  38.     <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll>  [(Verified)Kaspersky Lab]
  39. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
  40.     <IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Windows Component Publisher]
  41. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  42.     <!AVG Anti-Spyware><; "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized>  [Anti-Malware Development a.s.]
  43.     <5QIM><; d:\Program Files\5Q\校园通\5QIM.exe>  [xiaonei.com]
  44.     <FlashGet><; "C:\Program Files\FlashGet\FlashGet.exe" /min>  [N/A]
  45.     <NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  46.     <NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  47.     <nwiz><; nwiz.exe /install>  []
  48.     <SoundMan><; SOUNDMAN.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  49.     <Super Rabbit SRRestore><; C:\PROGRA~1\SUPERR~1\MagicSet\SRRest.exe /autosave>  [N/A]
  50. ==================================
  51. 启动文件夹
  52. N/A
  53. ==================================
  54. 服务
  55. [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start]
  56.   <C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe><Anti-Malware Development a.s.>
  57. [卡巴斯基反病毒 7.0 / AVP][Running/Auto Start]
  58.   <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r><Kaspersky Lab>
  59. [Human Interface Device Access / HidServ][Stopped/Disabled]
  60.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  61. [NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  62.   <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
  63. ==================================
  64. 驱动程序
  65. [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  66.   <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
  67. [AMD Processor Driver / AmdK8][Running/System Start]
  68.   <system32\DRIVERS\AmdK8.sys><Advanced Micro Devices>
  69. [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start]
  70.   <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys><N/A>
  71. [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
  72.   <System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
  73. [GMSIPCI / GMSIPCI][Stopped/Manual Start]
  74.   <\??\H:\INSTALL\GMSIPCI.SYS><N/A>
  75. [kl1 / kl1][Running/Boot Start]
  76.   <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
  77. [klif / klif][Running/System Start]
  78.   <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
  79. [nv / nv][Running/Manual Start]
  80.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
  81. [nvata / nvata][Running/Boot Start]
  82.   <\SystemRoot\system32\DRIVERS\nvata.sys><NVIDIA Corporation>
  83. [NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
  84.   <system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
  85. [NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
  86.   <system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
  87. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  88.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  89. [Secdrv / Secdrv][Stopped/Manual Start]
  90.   <system32\DRIVERS\secdrv.sys><N/A>
  91. [PCANDIS5 NDIS Protocol Driver / PCANDIS5][Running/Manual Start]
  92.   <\??\C:\WINDOWS\system32\PCANDIS5.SYS><Printing Communications Assoc., Inc. (PCAUSA)>
  93. ==================================
  94. 浏览器加载项
  95. [SrchHook Class]
  96.   {F08555B0-9CC3-11D2-AA8E-000000000000} <C:\WINDOWS\system32\IEBHO.dll, >
  97. [Web反病毒 统计]
  98.   {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll, Kaspersky Lab>
  99. [番茄花园]
  100.   {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.tomatolei.com, N/A>
  101. [番茄工具条3.1.5]
  102.   {6451F285-9E41-4D8C-813D-794CA7BFEAB4} <C:\WINDOWS\system32\IETool.dll, N/A>
  103. [ewidoOnlineScan Control]
  104.   {193C772A-87BE-4B19-A7BB-445B226FE9A1} <C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL, Anti-Malware Development a.s.>
  105. [ewidoOnlineScan Control]
  106.   {193C772A-87BE-4B19-A7BB-445B226FE9A1} <C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL, Anti-Malware Development a.s.>
  107. [FGCatchUrl]
  108.   {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <C:\Program Files\FlashGet\jccatch.dll, N/A>
  109. [CImWebObj Object]
  110.   {5C56F4A7-71FC-4FFD-A9D7-18FB87A9DFC6} <d:\Program Files\5Q\校园通\5QImWeb2009.dll, 5Q校内网>
  111. [番茄工具条3.1.5]
  112.   {6451F285-9E41-4D8C-813D-794CA7BFEAB4} <C:\WINDOWS\system32\IETool.dll, N/A>
  113. [Microsoft Shell UI Helper]
  114.   {64AB4BB7-111E-11D1-8F79-00C04FC2FBE1} <C:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
  115. [AUDIO__MID Moniker Class]
  116.   {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  117. [AUDIO__MP3 Moniker Class]
  118.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  119. [AUDIO__X_MS_WMA Moniker Class]
  120.   {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  121. [Shockwave Flash Object]
  122.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
  123. [SrchHook Class]
  124.   {F08555B0-9CC3-11D2-AA8E-000000000000} <C:\WINDOWS\system32\IEBHO.dll, >
  125. [FlashGet GetFlash Class]
  126.   {F156768E-81EF-470C-9057-481BA8380DBA} <C:\Program Files\FlashGet\getflash.dll, N/A>
  127. [XML HTTP]
  128.   {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
  129. [FGCatchUrl]
  130.   {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <C:\Program Files\FlashGet\jccatch.dll, N/A>
  131. [添加到QQ表情]
  132.   <d:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
  133. ==================================
  134. 正在运行的进程
  135. [PID: 652][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  136. [PID: 728][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  137.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  138. [PID: 760][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  139.     [C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 7.0.0.60]
  140.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  141.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  142. [PID: 1672][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  143.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  144.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16441 (vista_gdr.070219-1500)]
  145.     [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16441 (vista_gdr.070219-1500)]
  146.     [C:\WINDOWS\system32\WPDShServiceObj.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  147.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  148.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  149.     [C:\WINDOWS\system32\PortableDeviceTypes.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  150.     [C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  151.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
  152.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\ShellEx.dll]  [Kaspersky Lab, 7.0.0.60]
  153.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  154.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  155.     [E:\软件\安全防护\WINDOW~1.8上\ftcsetup\Commenu.dll]  [Fygsoft and Microsoft, 3.0.0.63]
  156.     [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.9136]
  157.     [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.9136]
  158.     [C:\WINDOWS\system32\nvshell.dll]  [, ]
  159.     [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll]  [Anti-Malware Development a.s., 7, 5, 0, 49]
  160.     [C:\WINDOWS\system32\wpdshext.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  161.     [C:\WINDOWS\system32\Audiodev.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  162.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prremote.dll]  [Kaspersky Lab, 7.0.0.60]
  163.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prloader.dll]  [Kaspersky Lab, 7.0.0.60]
  164.     [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll]  [Anti-Malware Development a.s., 7, 5, 0, 47]
  165. [PID: 1816][E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\Trojanwall.exe]  [风云谷, 4.7.0.1405]
  166.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  167.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16441 (vista_gdr.070219-1500)]
  168.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ftcapi.dll]  [fygsoft, 1.0.0.0]
  169.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  170.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\PSAPI.dll]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
  171.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  172. [PID: 1832][C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe]  [Anti-Malware Development a.s., 7, 5, 0, 50]
  173.     [C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\engine.dll]  [Anti-Malware Development a.s., 4, 2, 0, 15]
  174.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  175. [PID: 1920][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  176.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  177. [PID: 2236][C:\Program Files\锐捷网络\Ruijie Supplicant\8021x.exe]  [锐捷网络, 3, 2, 0, 0]
  178.     [C:\WINDOWS\system32\W32N50.dll]  [Printing Communications Assoc., Inc. (PCAUSA), 5.03.16.54]
  179.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  180.     [C:\PROGRA~1\锐捷网络\RUIJIE~1\EXRGPA~1.OCX]  [锐捷网络, 1, 0, 0, 1]
  181.     [C:\PROGRA~1\锐捷网络\RUIJIE~1\HIDetect.dll]  [锐捷网络, 1, 0, 0, 1]
  182.     [C:\PROGRA~1\锐捷网络\RUIJIE~1\Vx_API.dll]  [锐捷网络, 1, 0, 0, 1]
  183.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16441 (vista_gdr.070219-1500)]
  184. [PID: 2728][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  185.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  186. [PID: 3964][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 7.00.6000.16441 (vista_gdr.070219-1500)]
  187.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16441 (vista_gdr.070219-1500)]
  188.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  189.     [C:\WINDOWS\system32\IEFRAME.dll]  [Microsoft Corporation, 7.00.6000.16441 (vista_gdr.070219-1500)]
  190.     [C:\WINDOWS\system32\IEUI.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  191.     [C:\WINDOWS\system32\xmllite.dll]  [Microsoft Corporation, 1.00.1018.0]
  192.     [C:\Program Files\Internet Explorer\ieproxy.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  193.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  194.     [C:\WINDOWS\system32\IETool.dll]  [N/A, ]
  195.     [C:\WINDOWS\system32\IEBHO.dll]  [, 1, 0, 0, 1]
  196.     [C:\WINDOWS\system32\ieapfltr.dll]  [Microsoft Corporation, 7.0.6000.16461]
  197.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.60]
  198.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\klscav.dll]  [Kaspersky Lab, 7.0.0.60]
  199.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  200.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prremote.dll]  [Kaspersky Lab, 7.0.0.60]
  201.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  202.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prloader.dll]  [Kaspersky Lab, 7.0.0.60]
  203.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prkernel.ppl]  [Kaspersky Lab, 7.0.0.60]
  204.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\params.ppl]  [Kaspersky Lab, 7.0.0.60]
  205.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\pxstub.ppl]  [Kaspersky Lab, 7.0.0.60]
  206.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\tempfile.ppl]  [Kaspersky Lab, 7.0.0.60]
  207.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\nfio.ppl]  [Kaspersky Lab, 7.0.0.60]
  208.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\fsdrvplg.ppl]  [Kaspersky Lab, 7.0.0.60]
  209.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\basegui.ppl]  [Kaspersky Lab, 7.0.0.60]
  210.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\thpimpl.ppl]  [Kaspersky Lab, 7.0.0.60]
  211.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\FSSync.dll]  [Kaspersky Lab, 7.0.5.60]
  212.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\winreg.ppl]  [Kaspersky Lab, 7.0.0.60]
  213.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  214.     [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
  215.     [C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL]  [Anti-Malware Development a.s., 1.0.0.4]
  216.     [C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Z1QCLGLC\engine[1].dll]  [Anti-Malware Development a.s., 4, 2, 0, 15]
  217. [PID: 3056][G:\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
  218.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  219.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16441 (vista_gdr.070219-1500)]
  220.     [E:\软件\安全防护\Windows木马清道夫 8.8上网必备绿色注册可升级版\ftcsetup\ProcessHook.dll]  [Fygsoft and Microsoft, 1.0.0.33]
  221. ==================================
  222. 文件关联
  223. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  224. .EXE  OK. ["%1" %*]
  225. .COM  OK. ["%1" %*]
  226. .PIF  OK. ["%1" %*]
  227. .REG  OK. [regedit.exe "%1"]
  228. .BAT  OK. ["%1" %*]
  229. .SCR  OK. ["%1" /S]
  230. .CHM  Error. ["hh.exe" %1]
  231. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  232. .INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
  233. .INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  234. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  235. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  236. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
  237. ==================================
  238. Winsock 提供者
  239. N/A
  240. ==================================
  241. Autorun.inf
  242. N/A
  243. ==================================
  244. HOSTS 文件
  245. 127.0.0.1       localhost
  246. ==================================
  247. API HOOK
  248. 入口点错误：FreeLibrary (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0x5F00002D)
  249. ==================================
  250. 隐藏进程
  251. N/A
  252. ==================================
复制代码

[ 本帖最后由 fingerling 于 2007-5-23 06:33 编辑 ]
木马.jpg
IceSword120.jpg
回复

举报

fingerling
 楼主| 发表于 2007-5-23 02:23:08 | 显示全部楼层
日期应该是5.23
回复

举报

fingerling
 楼主| 发表于 2007-5-23 02:25:25 | 显示全部楼层
小弟是新手,请大家帮忙的时候给点具体的办法,先谢了
回复

举报

wangjay1980
发表于 2007-5-23 09:30:54 | 显示全部楼层
入口点错误：FreeLibrary (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0x5F00002D)
用你的SRE修复一下这个入口点错误，然后在扫个报告
回复

举报

fingerling
 楼主| 发表于 2007-5-24 14:47:35 | 显示全部楼层

回复 #4 wangjay1980 的帖子

谢谢了,我已经重分区了,用卡巴和AVG7.5都杀过了,AVG杀了来两个木马,别的已经没什么了,再次感谢版主
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-12-23 12:44 , Processed in 0.133884 second(s), 20 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表