收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 原创工具区 › 病毒 Virus.Win32.Delf.bz EXE文件全被删除
返回列表 发新帖
查看: 4373|回复: 2
收起左侧

病毒 Virus.Win32.Delf.bz EXE文件全被删除

[复制链接]
ljy81984
发表于 2007-6-22 22:47:54 | 显示全部楼层 |阅读模式

  2. 2007-06-23,00:19:04
  3. System Repair Engineer 2.4.12.806
  4. Smallfrogs (http://www.KZTechs.com)
  5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
  6. 以下内容被选中：
  7.     所有的启动项目（包括注册表、启动文件夹、服务等）
  8.     浏览器加载项
  9.     正在运行的进程（包括进程模块信息）
  10.     文件关联
  11.     Winsock 提供者
  12.     Autorun.inf
  13.     HOSTS 文件

  15. 启动项目
  16. 注册表
  17. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  18.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  19. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  20.     <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
  21.     <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
  22.     <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
  23.     <kav><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe">  [Kaspersky Lab]
  24.     <mynewpad><C:\Program Files\Handpad\mynewpad.exe>  []
  25.     <BigDogPath><; C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera>  [N/A]
  26.     <MSConfig><C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto>  [(Verified)Microsoft Windows XP Publisher]
  27. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  28.     <shell><Explorer.exe>  [(Verified)Microsoft Windows XP Publisher]
  29.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  30. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  31.     <AppInit_DLLs><>  [N/A]
  32. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  33.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
  34. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
  35.     <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll>  [Kaspersky Lab]
  36. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  37.     <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>  [N/A]
  38. ==================================
  39. 启动文件夹
  40. N/A
  41. ==================================
  42. 服务
  43. [Kaspersky Anti-Virus 6.0 / AVP][Running/Auto Start]
  44.   <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab>
  45. [Human Interface Device Access / HidServ][Stopped/Disabled]
  46.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  47. [SoundMAX Agent Service / SoundMAX Agent Service (default)][Running/Auto Start]
  48.   <C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>
  49. ==================================
  50. 驱动程序
  51. [aeaudio / aeaudio][Running/Manual Start]
  52.   <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
  53. [ASUSTeK/Broadcom 440x 10/100 Integrated Controller XP Driver / bcm4sbxp][Running/Manual Start]
  54.   <system32\DRIVERS\bcm4sbxp.sys><Broadcom Corporation>
  55. [kl1 / kl1][Running/Boot Start]
  56.   <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
  57. [klif / klif][Running/System Start]
  58.   <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
  59. [npkcrypt / npkcrypt][Running/Auto Start]
  60.   <\??\C:\Program Files\Tencent\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
  61. [nv / nv][Running/Manual Start]
  62.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
  63. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  64.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  65. [Secdrv / Secdrv][Stopped/Manual Start]
  66.   <system32\DRIVERS\secdrv.sys><N/A>
  67. [smwdm / smwdm][Running/Manual Start]
  68.   <system32\drivers\smwdm.sys><Analog Devices, Inc.>
  69. [TCP/IP Protocol Driver / Tcpip][Running/System Start]
  70.   <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
  71. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  72.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
  73. [VIMICRO USB PC Camera / ZSMC301b][Running/Manual Start]
  74.   <System32\Drivers\usbVM31b.sys><VM>
  75. ==================================
  76. 浏览器加载项
  77. [Promote Class]
  78.   {0FA24E3E-422C-4D94-A125-104F32352C90} <C:\WINDOWS\system32\promote.dll, >
  79. [Thunder Browser Helper]
  80.   {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
  81. [Web Anti-Virus]
  82.   {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
  83. [信息检索(&R)]
  84.   {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
  85. [Messenger]
  86.   {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
  87. [DopLivePlayer Class]
  88.   {A567B0E6-7392-4F5F-B556-AD89529185BD} <C:\WINDOWS\DopLiveCom.dll, 闪动科技>
  89. [BoBoControl Class]
  90.   {EC0978ED-24E3-403C-AB7A-060E388553E6} <C:\WINDOWS\system32\BoBo_ActiveX_V3.ocx, 广州易播信息科技有限公司>
  91. [WebThunder Class]
  92.   {03507A1A-E0C5-4404-AA26-205385C0892D} <, N/A>
  93. [Promote Class]
  94.   {0FA24E3E-422C-4D94-A125-104F32352C90} <C:\WINDOWS\system32\promote.dll, >
  95. [PhotoDraw Class]
  96.   {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} <C:\Program Files\Tencent\qq\Qzone\QQPhotoDraw.dll, TENCENT>
  97. [Recorder Control]
  98.   {2423AB16-9F42-457B-A337-FE3B11964DB0} <C:\PROGRA~1\bluesky\BLUESK~1\recorder.ocx, Bluesky Studio (http://www.bluesky.cn)>
  99. [BlueskyVideo Control]
  100.   {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} <C:\PROGRA~1\bluesky\BLUESK~1\v2.ocx, 蓝天工作室(http://www.bluesky.cn)>
  101. [Ppd Control]
  102.   {2F2BA87D-385E-4922-B41C-06E190B06AA9} <C:\PROGRA~1\bluesky\BLUESK~1\ppd.ocx, Bluesky Studio(http://www.bluesky.cn)>
  103. [Share Control]
  104.   {3072B1F1-0C4D-4E76-A7C6-FBAF129DBCC9} <C:\PROGRA~1\bluesky\BLUESK~1\share.ocx, Bluesky Studio(http://www.bluesky.cn)>
  105. [Traceppd Control]
  106.   {5910C66C-F9BA-4306-8175-C098B7F0ED62} <C:\PROGRA~1\bluesky\BLUESK~1\traceppd.ocx, BlueskyStudio(http://www.bluesky.cn)>
  107. [PP Control]
  108.   {616DACC1-C5E6-4646-B36A-3FA4FC726BAD} <C:\PROGRA~1\bluesky\BLUESK~1\ppc.ocx, Bluesky Studio (http://www.bluesky.cn)>
  109. [Windows Media Player]
  110.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  111. [Active Desktop Mover]
  112.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
  113. [Videohelp Control]
  114.   {75B75D86-D88B-4BEA-BC59-BFD9D7300518} <C:\PROGRA~1\bluesky\BLUESK~1\VIDEOH~1.OCX, Bluesky Studio(http://www.bluesky.cn)>
  115. [Microsoft Web 浏览器]
  116.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
  117. [Filetran Control]
  118.   {88734439-46D0-42C0-A13F-7E881EE550CF} <C:\PROGRA~1\bluesky\BLUESK~1\filetran.ocx, Bluesky Studio(http://www.bluesky.cn)>
  119. [Thunder Browser Helper]
  120.   {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
  121. [Chat Control]
  122.   {94EFE58C-E678-4808-AD65-24CE4B94C1FE} <C:\PROGRA~1\bluesky\BLUESK~1\chat.ocx, Bluesky Studio(http://www.bluesky.cn)>
  123. [Blueskyvoice Control]
  124.   {991481A7-4669-4e15-8C24-100404E1F5CB} <C:\PROGRA~1\bluesky\BLUESK~1\BLUESK~1.OCX, 蓝天工作室(http://www.bluesky.cn)>
  125. [Display Control]
  126.   {A1D97DB3-E564-4743-B2E7-6F5182CBF406} <C:\PROGRA~1\bluesky\BLUESK~1\display.ocx, Bluesky Studio (http://www.bluesky.cn)>
  127. [Tracechat Control]
  128.   {A40335C4-D3D1-4E7B-9130-039CDA5B603C} <C:\PROGRA~1\bluesky\BLUESK~1\TRACEC~1.OCX, Bluesky Studio(http://www.bluesky.cn)>
  129. [PPChat Control]
  130.   {AFB97F16-B7E8-4EB1-8133-FBD5AA2EBB3B} <C:\PROGRA~1\bluesky\BLUESK~1\ppchat.ocx, Bluesky Studio(http://www.bluesky.cn)>
  131. [SearchAssistantOC]
  132.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
  133. [Blueskyvoice Control]
  134.   {BA0F088C-72C1-475a-92F8-42391DEF6961} <C:\PROGRA~1\bluesky\BLUESK~1\BLUESK~2.OCX, 蓝天工作室(http://www.bluesky.cn)>
  135. [RDS.DataSpace]
  136.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
  137. [Client Control]
  138.   {C7B0C764-5D4E-433E-A854-591F28520577} <C:\PROGRA~1\bluesky\BLUESK~1\client.ocx, >
  139. [Play Control]
  140.   {CC20DDA1-9A21-4DEC-B5BE-E61E0351FCA9} <C:\PROGRA~1\bluesky\BLUESK~1\play.ocx, Bluesky Studio (http://www.bluesky.cn)>
  141. [Shockwave Flash Object]
  142.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
  143. [&使用迅雷下载]
  144.   <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
  145. [&使用迅雷下载全部链接]
  146.   <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
  147. [上传到QQ网络硬盘]
  148.   <C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
  149. [使用网际快车下载]
  150.   <D:\下载工具\网际快车\jc_link.htm, N/A>
  151. [使用网际快车下载全部链接]
  152.   <D:\下载工具\网际快车\jc_all.htm, N/A>
  153. [导出到 Microsoft Office Excel(&X)]
  154.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
  155. [添加到QQ自定义面板]
  156.   <C:\Program Files\Tencent\qq\AddPanel.htm, N/A>
  157. [添加到QQ表情]
  158.   <C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
  159. [用QQ彩信发送该图片]
  160.   <C:\Program Files\Tencent\qq\SendMMS.htm, N/A>
  161. [用比特精灵下载(&B)]
  162.   <D:\下载工具\BT精灵\BitSpirit\bsurl.htm, N/A>
  163. ==================================
  164. 正在运行的进程
  165. [PID: 592][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  166. [PID: 692][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  167. [PID: 1556][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2649 (xpsp.050406-1732)]
  168.     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
  169.     [C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.2]
  170.     [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
  171.     [C:\WINDOWS\system32\msdmo.dll]  [, ]
  172.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
  173.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll]  [Kaspersky Lab, 6.0.0.299]
  174. [PID: 584][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  175.     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
  176.     [C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.2]
  177. [PID: 2488][C:\Program Files\Maxthon\Maxthon.exe]  [Maxthon International Ltd., 1, 5, 9, 30]
  178.     [C:\Program Files\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
  179.     [C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.2]
  180.     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
  181.     [C:\Program Files\Common Files\Microsoft Shared\INK\PENCHS.DLL]  [Microsoft Corporation, 1.0.1038.0]
  182.     [C:\Program Files\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
  183.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.299]
  184.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.0.299]
  185.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.299]
  186.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.299]
  187.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.299]
  188.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.299]
  189.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.299]
  190.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.0.299]
  191.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.0.299]
  192.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.299]
  193.     [C:\WINDOWS\system32\BoBo_ActiveX_V3.ocx]  [广州易播信息科技有限公司, 3.4.612.2]
  194. [PID: 272][C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe]  [Kaspersky Lab, 6.0.0.299]
  195.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.299]
  196.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\FSSync.dll]  [Kaspersky Lab, 6.0.5.0]
  197.     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
  198.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\AVPGS.PPL]  [Kaspersky Lab, 6.0.0.299]
  199.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.299]
  200.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.299]
  201.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.299]
  202.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.299]
  203.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\winreg.ppl]  [Kaspersky Lab, 6.0.0.299]
  204.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avpgui.ppl]  [Kaspersky Lab, 6.0.0.299]
  205.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\basegui.dll]  [Kaspersky Lab, 6.0.0.299]
  206.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.0.299]
  207.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.299]
  208.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\thpimpl.ppl]  [Kaspersky Lab, 6.0.0.299]
  209.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\qb.ppl]  [Kaspersky Lab, 6.0.0.299]
  210.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\inflate.ppl]  [Kaspersky Lab, 6.0.0.16]
  211.     [C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.2]
  212.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\report.ppl]  [Kaspersky Lab, 6.0.0.299]
  213.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\prutil.ppl]  [Kaspersky Lab, 6.0.0.299]
  214. [PID: 2212][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  215.     [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
  216.     [C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.2]
  217. [PID: 3028][C:\Documents and Settings\Administrator\桌面\12\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
  218.     [C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.2]
  219.     [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
  220. ==================================
  221. 文件关联
  222. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  223. .EXE  OK. ["%1" %*]
  224. .COM  OK. ["%1" %*]
  225. .PIF  OK. ["%1" %*]
  226. .REG  OK. [regedit.exe "%1"]
  227. .BAT  OK. ["%1" %*]
  228. .SCR  OK. ["%1" /S]
  229. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  230. .HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
  231. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  232. .INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  233. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  234. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  235. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
  236. ==================================
  237. Winsock 提供者
  238. N/A
  239. ==================================
  240. Autorun.inf
  241. N/A
  242. ==================================
  243. HOSTS 文件
  244. 127.0.0.1       localhost
  245. ==================================
  246. API HOOK
  247. RVA  错误： LoadLibraryA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF6A89B25)
  248. RVA  错误： LoadLibraryExA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF6A89D67)
  249. RVA  错误： LoadLibraryExW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF6A89F0B)
  250. RVA  错误： LoadLibraryW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xF6A89C49)
  251. RVA  错误： GetProcAddress (危险等级: 高,  被下面模块所HOOK: Dest Addr: 0xF6A89E8F)
  252. ==================================
  253. 隐藏进程
  254. N/A
  255. ==================================
复制代码


卡巴把带有EXE的文件全删除了
已删除: 病毒 Virus.Win32.Delf.bz        文件: D:\实用软件\浩方对战平台\CGAEditor.exe
已删除: 病毒 Virus.Win32.Delf.bz        文件: D:\下载工具\网际快车\FlashGet.exe
已删除: 病毒 Virus.Win32.Delf.bz        文件: E:\劲乐团\O2CUBE FREE.exe
已删除: 病毒 Virus.Win32.Delf.bz        文件: D:\下载工具\网际快车\FlashGet.exe
已删除: 病毒 Virus.Win32.Delf.bz        文件: D:\Program Files\Funshion.exe
已删除: 病毒 Virus.Win32.Delf.bz        文件: D:\安全相关\系统测试工\3DMark03_v360_patch.exe
已删除: 病毒 Virus.Win32.Delf.bz        文件: D:\安全相关\security suite\ewidoctrl.exe
已删除: 病毒 Virus.Win32.Delf.bz        文件: D:\安全相关\windows清理大师\ArSwp.exe
已感染: 病毒 Virus.Win32.Delf.bz        D:\播放工具\千千静听\ttpsetup468.exe
整了一个晚上,没有整出个结果,求高手帮助!!!!

[ 本帖最后由 ljy81984 于 2007-6-23 00:16 编辑 ]
回复

举报

xiaowangzi
发表于 2007-6-22 23:56:12 | 显示全部楼层
你还是在用sreng在扫描一下，把报告再贴上来让高手看看吧，hijack主要是用来看浏览器劫持的。
回复

举报

xiaowangzi
发表于 2007-6-23 09:33:29 | 显示全部楼层
貌似没什么问题，就是插件太多了，不知道里面有没有恶意插件。可以用windows清理助手（去华军下就行，一般是最新的）清理一下。
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-12-23 20:54 , Processed in 0.112734 second(s), 17 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表