求助：type_win32(修改）怎么清除呀？

显示全部楼层 · 发表于 2007-6-18 21:40:15

正在运行的进程
[PID: 1604][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1668][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1696][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2645 (xpsp.050331-1524)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [Lenovo , 4.40]
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [Lenovo , 4.40]
[C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [Lenovo , 4.40]
[C:\WINDOWS\system32\Ati2evxx.dll]  [ATI Technologies Inc., 6.14.10.4142]
[C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\WINDOWS\system32\tphklock.dll]  [N/A, ]
[C:\WINDOWS\system32\WgaLogon.dll]  [Microsoft Corporation, 1.7.0018.5]
[C:\Program Files\Lenovo\AwayTask\AwayNotify.dll]  [Lenovo Group Limited, 2, 0, 0, 0]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 4072][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 6, 0]
[C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 8.0.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll]  [, 1, 0, 0, 1]
[d:\Program Files\Thunder Network\Thunder\Components\ResWorker\DSIeHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
[d:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
[D:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
[d:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll]  [Anti-Malware Development a.s., 7, 5, 0, 49]
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\pdshell.dll]  [Utimaco Safeware AG, 1.10.2.1]
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDLib.dll]  [Utimaco Safeware AG, 1.10.2.1]
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDLib0804.dll]  [Utimaco Safeware AG, 1.10.2.1]
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDShell0804.dll]  [Utimaco Safeware AG, 1.10.2.1]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ShellEx.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\WINDOWS\system32\wpdshext.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\Audiodev.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\btncopy.dll]  [Broadcom Corporation., 5.1.0.2100]
[C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 8.0.0.2006102200]
[d:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 2, 17]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[PID: 3340][C:\WINDOWS\system32\TpShocks.exe]  [Lenovo., 1.51.0.0]
[C:\Program Files\ThinkPad\TpShocks\MUI\0804\TpShocks.dll]  [, ]
[C:\WINDOWS\system32\Sensor.dll]  [Lenovo., 1.51.0.0]
[PID: 3560][C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe]  [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\Oemdspif.dll]  [ATI Technologies, Inc., 6.14.0016]
[C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\tpfnf7.dll]  [N/A, ]
[PID: 2196][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
[C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWRMGRRT.DLL]  [N/A, ]
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL]  [N/A, ]
[C:\WINDOWS\system32\Sensor.dll]  [Lenovo., 1.51.0.0]
[C:\WINDOWS\system32\OEMDSPIF.DLL]  [ATI Technologies, Inc., 6.14.0016]
[PID: 3788][C:\Program Files\Lenovo\AwayTask\AwaySch.EXE]  [Lenovo Group Limited, 2, 0, 8, 0]
[C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 6, 0]
[C:\Program Files\Lenovo\AwayTask\AwayAPI.dll]  [Lenovo Group Limited, 2, 0, 5, 2]
[C:\Program Files\Lenovo\AwayTask\AwayDB.dll]  [Lenovo Group Limited, 2, 0, 0, 0]
[PID: 3828][C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe]  [N/A, ]
[PID: 3836][C:\WINDOWS\system32\TpScrLk.exe]  [N/A, ]
[PID: 3220][C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe]  [Lenovo Group Limited, 1.17]
[PID: 3916][C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe]  [Lenovo Group Limited, 3,10,7,0]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
[PID: 3960][C:\Program Files\iTunes\iTunesHelper.exe]  [Apple Computer, Inc., 6.0.5.20]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[C:\Program Files\iTunes\iTunesHelper.Resources\zh_CN.lproj\iTunesHelperLocalized.DLL]  [Apple Computer, Inc., 6.0.5.17]
[C:\Program Files\iTunes\iTunesHelper.Resources\iTunesHelper.DLL]  [Apple Computer, Inc., 6.0.5.20]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[PID: 3972][C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe]  [Lenovo Group Limited, 1, 0, 0, 2]
[C:\PROGRA~1\THINKV~1\PrdCtr\SC\LPRESMGR.DLL]  [N/A, ]
[C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\TrayRes.dll]  [Lenovo, 4, 0, 0, 0]
[PID: 828][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 6, 0]
[PID: 1064][C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe]  [SRS Labs, Inc., 2.0.2.0]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 2232][C:\Program Files\FastInternet\FastInternet3.1.0\FastInternet.exe]  [, 3.1.0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 6, 0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.120]
[PID: 876][D:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
[D:\Program Files\Tencent\QQ\CoralAssist.DLL]  [Coral Team, 5.0.0 build 20060829]
[D:\Program Files\Tencent\QQ\CoralQQ.DLL]  [Coral Team, 5.0 Build 20070111]
[D:\Program Files\Tencent\QQ\kql.dll]  [Coral Team, 5.0.0 build 20070111]
[D:\Program Files\Tencent\QQ\mfc42.dll]  [Microsoft Corporation, 6.00.8665.0]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[D:\Program Files\Tencent\QQ\ipsearcher.dll]  [, 1.0.0.3]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 6, 0, 200, 320]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[D:\Program Files\Tencent\QQ\NoDisturbFilter.cqx]  [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\ConfigHotkey.cqx]  [Coral Team, 1.0]
[C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 6, 0]
[D:\Program Files\Tencent\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
[D:\Program Files\Tencent\QQ\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
[D:\Program Files\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
[d:\Program Files\Tencent\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[D:\Program Files\Tencent\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
[D:\Program Files\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[D:\Program Files\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, ]
[C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll]  [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.120]
[D:\Program Files\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\CoralHotkey.cqx]  [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\QQAllInOne.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\GroupLive.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
[D:\Program Files\Tencent\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
[C:\WINDOWS\system32\msdmo.dll]  [, ]
[D:\Program Files\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
[C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.120]
[D:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, ]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\Program Files\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
[D:\Program Files\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
[D:\Program Files\Tencent\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
[D:\Program Files\Tencent\QQ\VPortal.dll]  [, 1, 0, 0, 4]
[D:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 271]
[D:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, ]
[D:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 9, 93]
[C:\WINDOWS\system32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[D:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, ]
[C:\WINDOWS\system32\btncopy.dll]  [Broadcom Corporation., 5.1.0.2100]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\klscav.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prremote.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prloader.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prkernel.ppl]  [Kaspersky Lab, 7.0.0.120]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl]  [Kaspersky Lab, 7.0.0.120]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl]  [Kaspersky Lab, 7.0.0.120]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl]  [Kaspersky Lab, 7.0.0.120]
[D:\Program Files\Tencent\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
[C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL]  [Microsoft Corporation, 11.0.5510]
[D:\Program Files\Tencent\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
[PID: 3660][d:\Program Files\Tencent\QQ\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
[C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 6, 0]
[d:\Program Files\Tencent\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[PID: 1576][D:\Program Files\Maxthon2\Maxthon.exe]  [Maxthon International ltd., 2, 0, 1, 8313]
[D:\Program Files\Maxthon2\mxpp.dll]  [Maxthon, 1, 0, 0, 12]
[D:\Program Files\Maxthon2\MxSk.dll]  [Maxthon, 1, 0, 0, 104]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[D:\Program Files\Maxthon2\MxProxy2.dll]  [, 1, 0, 0, 2497]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 6, 0]
[D:\Program Files\Maxthon2\MxFav.dll]  [Maxthon, 1, 0, 0, 9]
[D:\Program Files\Maxthon2\maxzlib.dll]  [, 1.2.3]
[D:\Program Files\Maxthon2\mxtool.dll]  [, 1, 0, 0, 1]
[D:\Program Files\Maxthon2\mxfeedU.dll]  [, 1, 0, 45, 45]
[C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL]  [Microsoft Corporation, 11.0.5510]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll]  [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\klscav.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prremote.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prloader.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prkernel.ppl]  [Kaspersky Lab, 7.0.0.120]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl]  [Kaspersky Lab, 7.0.0.120]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl]  [Kaspersky Lab, 7.0.0.120]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl]  [Kaspersky Lab, 7.0.0.120]
[C:\WINDOWS\system32\FOURI_M3.IME]  [北京紫光华宇软件股份有限公司, 4.0.0.5027]
[C:\WINDOWS\system32\IMSC40A.IME]  [Microsoft Corporation, 6.0.0.2527]
[C:\PROGRA~1\COMMON~1\MICROS~1\IME\SHARED2.0\MSCAND20.DLL]  [Microsoft Corporation, 9.0.5510.0]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Internet Explorer\ieproxy.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[PID: 3576][C:\Documents and Settings\sunyang\My Documents\sreng2\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16473 (vista_gdr.070420-1500)]
[C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 6, 0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.120]
[C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll]  [N/A, ]

显示全部楼层 · 发表于 2007-6-18 21:40:46

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
MSAFD Tcpip [TCP/IP]
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD Tcpip [UDP/IP]
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD Tcpip [RAW/IP]
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
RSVP UDP Service Provider
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
RSVP TCP Service Provider
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD nwlnkipx [IPX]
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD nwlnkspx [SPX]
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD nwlnkspx [SPX] [Pseudo Stream]
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD nwlnkspx [SPX II]
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD nwlnkspx [SPX II] [Pseudo Stream]
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{F5D7DE63-C1E3-422D-ACFE-3561031C2439}] SEQPACKET 3
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{F5D7DE63-C1E3-422D-ACFE-3561031C2439}] DATAGRAM 3
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9722B85E-0831-4AC7-B4DB-A2400B7BB61F}] SEQPACKET 0
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9722B85E-0831-4AC7-B4DB-A2400B7BB61F}] DATAGRAM 0
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{882E3AE6-F9C7-47B6-9725-FCE286D7E87F}] SEQPACKET 1
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{882E3AE6-F9C7-47B6-9725-FCE286D7E87F}] DATAGRAM 1
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{27676B63-A53C-4C05-863A-AF29F8531188}] SEQPACKET 2
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{27676B63-A53C-4C05-863A-AF29F8531188}] DATAGRAM 2
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{DC893831-4704-46F3-801B-18D0C986B900}] SEQPACKET 4
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{DC893831-4704-46F3-801B-18D0C986B900}] DATAGRAM 4
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{D4F56811-2388-4BDC-B1A0-DB4DF571513A}] SEQPACKET 5
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{D4F56811-2388-4BDC-B1A0-DB4DF571513A}] DATAGRAM 5
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1    localhost
==================================
API HOOK
RVA  错误： LoadLibraryA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xB22B4AF0)
RVA  错误： LoadLibraryExA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xB22B4CD0)
RVA  错误： LoadLibraryExW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xB22B4E30)
RVA  错误： LoadLibraryW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xB22B4BE0)
RVA  错误： GetProcAddress (危险等级: 高,  被下面模块所HOOK: Dest Addr: 0xB22B4DE0)
==================================
隐藏进程
N/A
==================================

[/CODE]

显示全部楼层 · 发表于 2007-6-19 07:47:44

求助

显示全部楼层 · 发表于 2007-6-21 11:50:13

大家帮忙看看有没有不重做系统的办法

显示全部楼层 · 发表于 2007-8-17 06:44:52

顶一下, 我也中了这个病毒, 有什么办法清干净啊?
它不停感染Exe, 我的执行文件都快被杀光了, 郁闷啊.

显示全部楼层 · 发表于 2007-8-17 20:52:00

断开网线,关闭系统还原,清空临时文件夹

手动删除这个
C:\WINDOWS\system32\drivers\system32\drivers\%s.sys.sys
已防XDelBox1.3认不到路径

1.建议使用XDelBox删除以下文件：(XDelBox1.3下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择从剪贴板导入，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。
C:\WINDOWS\system32\drivers\aajhjjdj.sys
C:\WINDOWS\system32\drivers\behjfgbe.sys
C:\WINDOWS\System32\Drivers\dtscsi.sys
C:\WINDOWS\system32\drivers\hcefegee.sys
C:\WINDOWS\System32\DRIVERS\midixt95.sys
C:\WINDOWS\System32\DRIVERS\npf.sys
C:\WINDOWS\System32\DRIVERS\veoutf27.sys
C:\WINDOWS\system32\drivers\system32\drivers\%s.sys.sys
C:\WINDOWS\system32\4ce1ntos.dll
C:\WINDOWS\system32\4b0dcfsb.dll

2.删除重启后使用SREng修复下面各项：

[aajhjjdj / aajhjjdj][Stopped/Boot Start]
  <\SystemRoot\system32\drivers\aajhjjdj.sys>
[behjfgbe / behjfgbe][Stopped/Boot Start]
  <\SystemRoot\system32\drivers\behjfgbe.sys>
[dtscsi / dtscsi][Stopped/Manual Start]
  <\SystemRoot\System32\Drivers\dtscsi.sys>
[hcefegee / hcefegee][Stopped/Boot Start]
  <\SystemRoot\system32\drivers\hcefegee.sys>
[midixt9 / midixt95][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\midixt95.sys>
[NetGroup Packet Filter Driver / NPF][Stopped/Manual Start]

[veoutf2 / veoutf27][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\veoutf27.sys>
[vllpbu56 / vllpbu56][Stopped/Boot Start]
  <\SystemRoot\system32\\drivers\\system32\\drivers\\%s.sys.sys>
[Kerberos Key Distribution Centers / kkdc][Stopped/Auto Start]
  <><N/A>
[MazeServer / MazeServer][Stopped/Manual Start]
  <><N/A>
[ODBC Administration Service / odbcasvc][Stopped/Auto Start]
  <><N/A>
浏览器加载项
{db86b66c-6764-4c57-ae2b-1b294ae19f4f}
[]
  {e5bbb75f-06a5-4d2b-8b0d-4e03f37a8dbf}

{3C9652F4-9343-4B0D-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\4b0dcfsb.dll, N/A>

{C08986C9-14DF-4CE1-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4ce1ntos.dll, N/A>
{db86b66c-6764-4c57-ae2b-1b294ae19f4f} <C:\WINDOWS\system32\4c57ntos.dll, N/A>
[]
  {e5bbb75f-06a5-4d2b-8b0d-4e03f37a8dbf} <C:\WINDOWS\system32\4d2bcfsb.dll, N/A>

以下自己判断:
<C:\WINDOWS\system32\4d2bcfsb.dll, N A
删除以下文件
C:\Program Files\FastInternet\FastInternet3.1.0\daili.dll(, N/A)(有用过代理么，没有删!有用过保留下一步也不用做了)

用SRENG重置Winsock

卸载QQ 删除QQ整个文件夹
完后重起卡巴全盘扫
windows清理助手升到最新清理下

[讨论] 求助：type_win32(修改） 怎么清除呀？

[讨论] 求助：type_win32(修改）怎么清除呀？