求助，关于杀毒高手进

桃花 · 发表于 2007-3-15 14:32:06

昨天电脑中毒，正版VirusScan杀不掉

2007-3-15 2:32:52 引擎版本                                                 =5100
2007-3-15 2:32:52 DAT 版本                                                 =4981
2007-3-15 2:32:52 EXTRA.DAT 中的病毒签名数量                               =无
2007-3-15 2:32:52 EXTRA.DAT 可以检测到的病毒名称                            =无
2007-3-15 2:32:51 扫描已启动 245B8149B45D42A\姜婷婷按需扫描
2007-3-15 2:33:43 已移动（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\csrss.exe New Malware.w(特洛伊)
2007-3-15 2:33:44 移动失败（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\jts0.dll New Malware.w(特洛伊)
2007-3-15 2:33:44 移动失败（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\wgs0.dll New Malware.w(特洛伊)
2007-3-15 2:35:31 已移动（清除失败，因为文件不可清除） c:\WINDOWS\mys3.exe New Malware.w(特洛伊)
2007-3-15 2:35:34 已移动（清除失败，因为文件不可清除） c:\WINDOWS\wos3.exe New Malware.w(特洛伊)
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷扫描摘要
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已扫描的进程: 36
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已检测进程: 0
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的进程: 0
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已扫描的引导区: 1
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已检测引导区: 0
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的引导区: 0
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已扫描的文件: 8411
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已感染病毒的文件: 5
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷文件中发现的病毒: 5
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的文件： 0
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已移动的文件: 3
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷已删除的文件: 0
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷未扫描的文件: 13
2007-3-15 2:37:42 扫描摘要 245B8149B45D42A\姜婷婷运行时间: 0:04:51
2007-3-15 2:37:42 扫描已终止 245B8149B45D42A\姜婷婷按需扫描

2007-3-15 2:37:47 引擎版本                                                 =5100
2007-3-15 2:37:47 DAT 版本                                                 =4981
2007-3-15 2:37:47 EXTRA.DAT 中的病毒签名数量                               =无
2007-3-15 2:37:47 EXTRA.DAT 可以检测到的病毒名称                            =无
2007-3-15 2:37:46 扫描已启动 245B8149B45D42A\姜婷婷按需扫描
2007-3-15 2:38:25 移动失败（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\jts0.dll New Malware.w(特洛伊)
2007-3-15 2:38:26 移动失败（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\wgs0.dll New Malware.w(特洛伊)
2007-3-15 2:41:03 未采取操作（删除失败） c:\Documents and Settings\姜婷婷\Local Settings\Temp\wgs0.dll
2007-3-15 2:41:12 未采取操作（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\wgs0.dll New Malware.w(特洛伊)
2007-3-15 2:44:17 未采取操作（删除失败） c:\Documents and Settings\姜婷婷\Local Settings\Temp\wgs0.dll
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷扫描摘要
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已扫描的进程: 35
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已检测进程: 0
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的进程: 0
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已扫描的引导区: 1
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已检测引导区: 0
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的引导区: 0
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已扫描的文件: 11833
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已感染病毒的文件: 2
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷文件中发现的病毒: 2
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的文件： 0
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已移动的文件: 0
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷已删除的文件: 0
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷未扫描的文件: 23
2007-3-15 2:46:15 扫描摘要 245B8149B45D42A\姜婷婷运行时间: 0:08:29
2007-3-15 2:46:15 扫描已终止 245B8149B45D42A\姜婷婷按需扫描

2007-3-15 2:51:46 引擎版本                                                 =5100
2007-3-15 2:51:46 DAT 版本                                                 =4981
2007-3-15 2:51:46 EXTRA.DAT 中的病毒签名数量                               =无
2007-3-15 2:51:46 EXTRA.DAT 可以检测到的病毒名称                            =无
2007-3-15 2:51:44 扫描已启动 245B8149B45D42A\姜婷婷按需扫描
2007-3-15 2:52:40 已删除（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\jts0.dll New Malware.w(特洛伊)
2007-3-15 2:52:41 已删除（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\wgs0.dll New Malware.w(特洛伊)
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷扫描摘要
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已扫描的进程: 35
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已检测进程: 0
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的进程: 0
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已扫描的引导区: 1
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已检测引导区: 0
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的引导区: 0
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已扫描的文件: 25114
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已感染病毒的文件: 2
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷文件中发现的病毒: 2
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的文件： 0
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已移动的文件: 0
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷已删除的文件: 0
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷未扫描的文件: 24
2007-3-15 3:07:38 扫描摘要 245B8149B45D42A\姜婷婷运行时间: 0:15:54
2007-3-15 3:07:38 扫描结束 245B8149B45D42A\姜婷婷按需扫描

2007-3-15 3:16:53 引擎版本                                                 =5100
2007-3-15 3:16:53 DAT 版本                                                 =4981
2007-3-15 3:16:53 EXTRA.DAT 中的病毒签名数量                               =无
2007-3-15 3:16:53 EXTRA.DAT 可以检测到的病毒名称                            =无
2007-3-15 3:16:51 扫描已启动 245B8149B45D42A\姜婷婷按需扫描
2007-3-15 3:17:59 移动失败（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\jts0.dll New Malware.w(特洛伊)
2007-3-15 3:17:59 移动失败（清除失败，因为文件不可清除） c:\Documents and Settings\姜婷婷\Local Settings\Temp\wgs0.dll New Malware.w(特洛伊)
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷扫描摘要
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已扫描的进程: 33
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已检测进程: 0
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的进程: 0
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已扫描的引导区: 1
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已检测引导区: 0
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的引导区: 0
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已扫描的文件: 2660
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已感染病毒的文件: 2
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷文件中发现的病毒: 2
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已清除病毒的文件： 0
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已移动的文件: 0
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷已删除的文件: 0
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷未扫描的文件: 13
2007-3-15 3:18:23 扫描摘要 245B8149B45D42A\姜婷婷运行时间: 0:01:32
2007-3-15 3:18:23 扫描已终止 245B8149B45D42A\姜婷婷按需扫描

这是杀毒失败日记，高手分析

桃花 · 发表于 2007-3-15 14:35:43

提示: 该帖被管理员或版主屏蔽

北岸℃清清 · 发表于 2007-3-15 14:39:06

姜婷婷

跟我初中同学一个名

桃花 · 发表于 2007-3-15 14:43:06

---------------------
查毒日期:2007年3月15日3时28分
查毒结果:
文件:C:\DOCUME~1\姜婷婷\LOCALS~1\Temp\mhs0.dll,病毒名称:怀疑为木马:如果您不能确定,请发查毒报告交我们分析.,状态:已清除!
文件:C:\DOCUME~1\姜婷婷\LOCALS~1\Temp\wms0.dll,病毒名称:怀疑为木马:如果您不能确定,请发查毒报告交我们分析.,状态:已清除!
文件:C:\DOCUME~1\姜婷婷\LOCALS~1\Temp\wgs0.dll,病毒名称:怀疑为木马:如果您不能确定,请发查毒报告交我们分析.,状态:已清除!
文件:C:\DOCUME~1\姜婷婷\LOCALS~1\Temp\jts0.dll,病毒名称:怀疑为木马:如果您不能确定,请发查毒报告交我们分析.,状态:已清除!
            完美卸载 - 系统检查检测报告!
建议:修复时请按照高手的反馈编号在修复工具中打勾进行修复.

--------------------------系统环境-------------------------
检测日期: 2007-3-15 14:29
Windows: Microsoft Windows XP
ServicePack: Service Pack 2
Update: 2600.xpsp_sp2_rtm.040803-2158
Internet Explorer: 6.0.2900.2180

-----------------------网络基础安全测试--------------------
密码安全检测:已经设置了管理员密码,建议:将密码复杂度和长度提高!
网络漏洞检测:存在IPC$空连接,容易被黑客攻击! 方案:找到 E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\IPCRepair.reg, 双击此文件导入注册表!</a>

服务名称       是否运行             描述
RemoteRegistry [运行中] [说明:这个服务可能被利用远程操作注册表]
Windows Time [运行中] [说明:这个服务可能被黑客利用来启动木马]
Telnet       [已停止] [说明:这个服务可能被黑客登录到您计算机]
Messenger    [已停止] [说明:这个服务常被广告商用来发垃圾广告]
Server       [运行中] [说明:如果你的电脑不用局域网中,可以关闭]
建议在[控制面板]-[管理工具]-[服务]中,找到这些服务关闭并设置为[禁用].

-----------------------计算机网络端口----------------------
协议    端口号             端口类型
TCP       135       微软DCE RPC end-point mapper服务
TCP       445       Microsoft-DS
TCP    1030       未知类型
TCP       139       微软Netbios Name服务(用于文件及打印机共享)
TCP    1156       未知类型
TCP    1158       未知类型
TCP       445       公共Internet文件系统(CIFS)
TCP       500       Internet密钥交换
TCP    1025       Maverick's Matrix 1.2 - 2.0
TCP    1068       未知类型
TCP    1155       未知类型
TCP    4500       sae-urn
TCP       123       未知类型
TCP    1026       Remote Explorer 2000
TCP    1058       未知类型
TCP    1152       未知类型
TCP    1153       未知类型
TCP    1154       未知类型
TCP    1900       未知类型
TCP       123       未知类型
TCP       137       未知类型
TCP       138       未知类型
TCP    1900       未知类型

--------------------计算机系统组件体检----------------------
[编号:0]
[名称:\SystemRoot\System32\smss.exe]
[类型:运行进程]
[内容:未知]

[编号:1]
[名称:\??\C:\WINDOWS\system32\winlogon.exe]
[类型:运行进程]
[内容:未知]

[编号:2]
[名称:C:\WINDOWS\system32\services.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:3]
[名称:C:\WINDOWS\system32\lsass.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:4]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:5]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:6]
[名称:C:\WINDOWS\system32\spoolsv.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:7]
[名称:C:\WINDOWS\Explorer.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:8]
[名称:C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE]
[类型:运行进程]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:9]
[名称:C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe]
[类型:运行进程]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:10]
[名称:C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe]
[类型:运行进程]
[内容:TalkBack Monitor ?2003 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:11]
[名称:C:\Program Files\SkyNet\FireWall\PFW.exe]
[类型:运行进程]
[内容:天网防火墙个人版 ]

[编号:12]
[名称:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\Memory Booster.exe]
[类型:运行进程]
[内容:Memory Booster Copyright (C) 2003]

[编号:13]
[名称:C:\WINDOWS\mhs3.exe]
[类型:运行进程]
[内容:未知]

[编号:14]
[名称:C:\WINDOWS\jts3.exe]
[类型:运行进程]
[内容:未知]

[编号:15]
[名称:C:\WINDOWS\wls3.exe]
[类型:运行进程]
[内容:未知]

[编号:16]
[名称:C:\WINDOWS\wgs3.exe]
[类型:运行进程]
[内容:未知]

[编号:17]
[名称:C:\WINDOWS\wms3.exe]
[类型:运行进程]
[内容:未知]

[编号:18]
[名称:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\WmSysPro.exe]
[类型:运行进程]
[内容:系统保护防毒墙版权所有 (C)剑锋工作室]

[编号:19]
[名称:C:\WINDOWS\system32\ctfmon.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:20]
[名称:C:\Program Files\Network Associates\Common Framework\FrameworkService.exe]
[类型:运行进程]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:21]
[名称:C:\Program Files\Network Associates\VirusScan\Mcshield.exe]
[类型:运行进程]
[内容:VirusScan (Enterprise, ASaP & Retail.) Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:22]
[名称:C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe]
[类型:运行进程]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:23]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:24]
[名称:C:\Program Files\Internet Explorer\iexplore.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:25]
[名称:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\MainCon.exe]
[类型:运行进程]
[内容:完美卸载V2006 主控制台版权所有 (C) 2005]

[编号:26]
[名称:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\SysSec.exe]
[类型:运行进程]
[内容:完美卸载V2006-ChinaHijackThis 版权所有 (C) 2006]

[编号:27]
[名称:E

默然 · 发表于 2007-3-15 14:44:15

我想知道姜婷婷是谁

285525483 · 发表于 2007-3-15 14:45:47

原来你就是传说中的变态粉丝

桃花 · 发表于 2007-3-15 14:46:46

[编号:27]
[名称:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\SysSec.exe]
[类型:运行进程]
[内容:完美卸载V2006-ChinaHijackThis 版权所有 (C) 2006]

[编号:28]
[分隔符:---------------------------------------------------------------------]

[编号:29]
[名称:C:\WINDOWS\system32\EntApi.dll]
[类型:已加载DLL]
[内容:Virus Scan Enterprise, Entercept Copyright ? 2004 Networks Associates Technology, Inc. All Rights Reserved]

[编号:30]
[名称:C:\DOCUME~1\姜婷婷\LOCALS~1\Temp\wgs0.dll]
[类型:已加载DLL]
[内容:未知]

[编号:31]
[名称:C:\DOCUME~1\姜婷婷\LOCALS~1\Temp\mhs0.dll]
[类型:已加载DLL]
[内容:未知]

[编号:32]
[名称:C:\DOCUME~1\姜婷婷\LOCALS~1\Temp\wms0.dll]
[类型:已加载DLL]
[内容:未知]

[编号:33]
[名称:C:\DOCUME~1\姜婷婷\LOCALS~1\Temp\jts0.dll]
[类型:已加载DLL]
[内容:未知]

[编号:34]
[名称:C:\WINDOWS\system32\Protect.sys]
[类型:已加载DLL]
[内容:未知]

[编号:35]
[名称:C:\Program Files\Network Associates\VirusScan\SHUTIL.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2005 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:36]
[名称:C:\Program Files\Network Associates\VirusScan\naiwmain.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:37]
[名称:C:\Program Files\Network Associates\VirusScan\RES04\shstat.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:38]
[名称:C:\Program Files\Network Associates\VirusScan\RES04\Product.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:39]
[名称:C:\Program Files\Network Associates\VirusScan\RES04\McShield.dll]
[类型:已加载DLL]
[内容:VirusScan (Enterprise, ASaP & Retail.) Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:40]
[名称:C:\Program Files\Network Associates\VirusScan\RES04\Shutilrc.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:41]
[名称:C:\Program Files\Network Associates\VirusScan\Graphics.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:42]
[名称:C:\Program Files\Network Associates\Common Framework\nailog.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:43]
[名称:C:\Program Files\Network Associates\Common Framework\naCmnLib.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:44]
[名称:C:\Program Files\Network Associates\Common Framework\naXML.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:45]
[名称:C:\Program Files\Network Associates\Common Framework\0804\UpdRes.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:46]
[名称:C:\Program Files\Network Associates\Common Framework\0804\AgentRes.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:47]
[名称:C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:48]
[名称:C:\Program Files\SkyNet\FireWall\SKYMISC.DLL]
[类型:已加载DLL]
[内容:未知]

[编号:49]
[名称:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\ScanEngine.dll]
[类型:已加载DLL]
[内容:ScanEngine 完美病毒引擎文件版权所有 (C) 2005]

[编号:50]
[名称:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\SkinMagic.dll]
[类型:已加载DLL]
[内容:Appspeed SkinMagic Toolkit Copyright ? 2002-2006]

[编号:51]
[名称:C:\Program Files\Network Associates\Common Framework\applib.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:52]
[名称:C:\Program Files\Network Associates\Common Framework\Logging.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:53]
[名称:C:\Program Files\Network Associates\Common Framework\InternetManager.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:54]
[名称:C:\Program Files\Network Associates\Common Framework\naInet.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:55]
[名称:C:\Program Files\Network Associates\Common Framework\UserSpace.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:56]
[名称:C:\Program Files\Network Associates\Common Framework\Management.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:57]
[名称:C:\Program Files\Network Associates\Common Framework\cmalib.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:58]
[名称:C:\Program Files\Network Associates\Common Framework\naPolicyManager.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:59]
[名称:C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:60]
[名称:C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:61]
[名称:C:\Program Files\Network Associates\Common Framework\Scheduler.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:62]
[名称:C:\Program Files\Network Associates\Common Framework\TCSubSys.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:63]
[名称:C:\Program Files\Network Associates\VirusScan\FTL.Dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:64]
[名称:C:\Program Files\Network Associates\VirusScan\naiann.dll]
[类型:已加载DLL]
[内容:VirusScan Copyright? 1995-2005 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:65]
[名称:C:\Program Files\Network Associates\VirusScan\mytilus.dll]
[类型:已加载DLL]
[内容:VirusScan Copyright? 1995-2005 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:66]
[名称:C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll]
[类型:已加载DLL]
[内容:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:67]
[名称:C:\Program Files\Network Associates\VirusScan\NaEventU.DLL]
[类型:已加载DLL]
[内容:McAfee Common Components Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:68]
[名称:C:\Program Files\Network Associates\VirusScan\Res04\naEvtRes.dll]
[类型:已加载DLL]
[内容:McAfee Common Components Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:69]
[名称:C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll]
[类型:已加载DLL]
[内容:VirusScan (Enterprise, ASaP & Retail.) Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:70]
[名称:C:\Program Files\Network Associates\VirusScan\EntSrv.Dll]
[类型:已加载DLL]
[内容:Virus Scan Enterprise, Entercept Copyright ? 2004 Networks Associates Technology, Inc. All Rights Reserved]

[编号:71]
[名称:C:\Program Files\Network Associates\VirusScan\naicondl.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

桃花 · 发表于 2007-3-15 14:49:50

[编号:72]
[名称:C:\Program Files\Network Associates\VirusScan\RES04\VsTskMgr.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:73]
[名称:C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll]
[类型:已加载DLL]
[内容:McAfee Installation Designer Copyright? 1999-2005 McAfee, Inc. All Rights Reserved.]

[编号:74]
[名称:C:\Program Files\Network Associates\VirusScan\BBCpl.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:75]
[名称:C:\Program Files\Network Associates\VirusScan\coptcpl.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:76]
[名称:C:\Program Files\Network Associates\VirusScan\EmCfgCpl.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:77]
[名称:C:\Program Files\Network Associates\VirusScan\RES04\SEmalRes.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:78]
[名称:C:\Program Files\Network Associates\VirusScan\nvpcpl.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:79]
[名称:C:\Program Files\Network Associates\VirusScan\ftcfg.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:80]
[名称:C:\Program Files\Network Associates\VirusScan\OASCpl.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:81]
[名称:C:\Program Files\Network Associates\VirusScan\vsodscpl.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2005 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:82]
[名称:C:\Program Files\Network Associates\VirusScan\vsupdcpl.dll]
[类型:已加载DLL]
[内容:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]

[编号:83]
[名称:C:\WINDOWS\system32\xunleibho_v13.dll]
[类型:已加载DLL]
[内容:xunleibho Module Copyright 2004-2006]

[编号:84]
[名称:C:\WINDOWS\system32\Sbhoplin.dll]
[类型:已加载DLL]
[内容:SBHOPlin Module Copyright 2004]

[编号:85]
[名称:C:\WINDOWS\system32\Macromed\flash\flash8.ocx]
[类型:已加载DLL]
[内容:Shockwave Flash Copyright ? 1996-2005 Macromedia, Inc.]

[编号:86]
[名称:C:\WINDOWS\system32\UNISPIM.IME]
[类型:已加载DLL]
[内容:紫光拼音输入法 Copyright (c) 北京清华紫光软件股份有限公司]

[编号:87]
[名称:C:\WINDOWS\system32\upengine.dll]
[类型:已加载DLL]
[内容:紫光拼音输入法 Copyright (c) 北京清华紫光软件股份有限公司]

[编号:88]
[分隔符:---------------------------------------------------------------------]

[编号:89]
[名称:ShStatEXE]
[类型:开机启动]
[内容:"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE]

[编号:90]
[名称:McAfeeUpdaterUI]
[类型:开机启动]
[内容:"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey]

[编号:91]
[名称:Network Associates Error Reporting Service]
[类型:开机启动]
[内容:"C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"]

[编号:92]
[名称:SKYNET Personal FireWall]
[类型:开机启动]
[内容:C:\Program Files\SkyNet\FireWall\PFW.exe]

[编号:93]
[名称:MemoryIdle]
[类型:开机启动]
[内容:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\Memory Booster.exe -PowerOn]

[编号:94]
[名称:mhs3]
[类型:开机启动]
[内容:C:\WINDOWS\mhs3.exe]

[编号:95]
[名称:jts3]
[类型:开机启动]
[内容:C:\WINDOWS\jts3.exe]

[编号:96]
[名称:wls3]
[类型:开机启动]
[内容:C:\WINDOWS\wls3.exe]

[编号:97]
[名称:wgs3]
[类型:开机启动]
[内容:C:\WINDOWS\wgs3.exe]

[编号:98]
[名称:wms3]
[类型:开机启动]
[内容:C:\WINDOWS\wms3.exe]

[编号:99]
[名称:RegFireWall]
[类型:开机启动]
[内容:E:\注册表减肥\完美卸载\完美卸载V2007 完整版\完美卸载V2007 完整版\WmSysPro.exe -PowerOn]

[编号:100]
[名称:ctfmon.exe]
[类型:开机启动]
[内容:C:\WINDOWS\system32\ctfmon.exe]

[编号:101]
[分隔符:---------------------------------------------------------------------]

[编号:102]
[名称:AFD]
[类型:服务:未知]
[内容:\SystemRoot\System32\drivers\afd.sys]

[编号:103]
[名称:C-Media WDM Audio Interface]
[类型:服务:C-Media Audio Driver (WDM) Copyright (C) C-Media Inc. 1998-2002]
[内容:C:\WI

桃花 · 发表于 2007-3-15 14:52:21

NDOWS\system32\drivers\cmuda.sys]

[编号:104]
[名称:CnsMinKP]
[类型:服务:KMD Copyright (c) 3721 Corporation.]
[内容:C:\WINDOWS\system32\drivers\cnsminkp.sys]

[编号:105]
[名称:DCOM Server Process Launcher]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\svchost ]

[编号:106]
[名称:EntDrv51]
[类型:服务:Virus Scan Enterprise, Entercept Copyright ? 2004 Networks Associates Technology, Inc. All Rights Reserved]
[内容:c:\windows\system32\drivers\entdrv51.sys]

[编号:107]
[名称:McAfee Framework 服务]
[类型:服务:McAfee Common Framework Copyright? 2000-2004 Networks Associates Technology, Inc. All Rights Reserved.]
[内容:C:\Program Files\Network Associates\Common Framework\FrameworkService.exe /ServiceStart]

[编号:108]
[名称:Network Associates McShield]
[类型:服务:VirusScan (Enterprise, ASaP & Retail.) Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]
[内容:"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"]

[编号:109]
[名称:Network Associates Task Manager]
[类型:服务:VirusScan Enterprise Copyright? 1995-2004 Networks Associates Technology, Inc. All Rights Reserved.]
[内容:"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"]

[编号:110]
[名称:npkcrypt]
[类型:服务:未知]
[内容:d:\program files\tencent\qq\npkcrypt.sys]

[编号:111]
[名称:PnpWmkDrv]
[类型:服务:未知]
[内容:c:\windows\system32\drivers\pnpwmkdrv.sys]

[编号:112]
[名称:Remote Procedure Call (RPC)]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\svchost ]

[编号:113]
[名称:Secdrv]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\drivers\secdrv.sys]

[编号:114]
[名称:Servies Unknow Srv]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\001.exe]

[编号:115]
[名称:SetupNT]
[类型:服务:未知]
[内容:\SystemRoot\system32\SetupNT.sys]

[编号:116]
[名称:SiS AGP Filter]
[类型:服务:SiS (R) NT AGP Filter for Windows XP Copyright (C) Silion Integrated Systems Corp. 1999-2001]
[内容:C:\WINDOWS\system32\drivers\sisagp.sys]

[编号:117]
[名称:sisidex]
[类型:服务:Windows (R) 2000 DDK driver ]
[内容:C:\WINDOWS\system32\drivers\sisidex.sys]

[编号:118]
[名称:SiS PCI Fast Ethernet Adapter Driver]
[类型:服务:NDIS 5.1 NIC Driver SiS Corporation]
[内容:C:\WINDOWS\system32\drivers\sisnic.sys]

[编号:119]
[名称:Add Performance Filter Driver]
[类型:服务:SiS Filer Driver Silicon Integrated Systems Corp.]
[内容:C:\WINDOWS\system32\drivers\sisperf.sys]

[编号:120]
[名称:SKNFW]
[类型:服务:未知]
[内容:c:\windows\system32\drivers\sknfw.sys]

[编号:121]
[名称:System Restore Filter Driver]
[类型:服务:未知]
[内容:\SystemRoot\system32\DRIVERS\sr.sys]

[编号:122]
[名称:Terminal Services]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\svchost ]

[编号:123]
[名称:WmRegProDrv]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\drivers\wmregprodrv.sys]

[编号:124]
[分隔符:---------------------------------------------------------------------]

[编号:125]
[名称:Start Page]
[类型:IE主页-当前用户]
[内容:about:blank]

[编号:126]
[名称:Search Page]
[类型:IE搜索-当前用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]

[编号:127]
[名称:Start Page]
[类型:IE主页-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home]

[编号:128]
[名称:Search Page]
[类型:IE搜索-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]

[编号:129]
[名称:Default_Page_URL]
[类型:默认IE主页-所有用户]
[内容:http://www.microsoft.com/isapi/r ... er=6&ar=msnhome]

[编号:130]
[名称:Default_Search_URL]
[类型:默认IE搜索-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]

[编号:131]
[分隔符:---------------------------------------------------------------------]

[编号:132]
[名称:ThunderIEHelper Class]
[类型:IE 嵌入对象]
[内容:C:\WINDOWS\system32\xunleibho_v13.dll]

[编号:133]
[名称:SFP Class]
[类型:IE 嵌入对象]
[内容:C:\WINDOWS\system32\Sbhoplin.dll]

[编号:134]
[分隔符:---------------------------------------------------------------------]

[编号:135]
[名称:{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6}]
[类型:IE 扩展按钮]
[内容: 路径:]

[编号:136]
[分隔符:---------------------------------------------------------------------]

[编号:137]
[名称:PostBootReminder]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\SHELL32.dll]

[编号:138]
[名称:CDBurn]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\SHELL32.dll]

[编号:139]
[名称:WebCheck]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\webcheck.dll]

[编号:140]
[名称:SysTray]
[类型:正常嵌入对象]
[内容:C:\WINDOWS\system32\stobject.dll]

[编号:141]
[分隔符:---------------------------------------------------------------------]

[编号:142]
[名称:]
[类型:EXE关联]
[内容:"%1" %*]

[编号:143]
[名称:]
[类型:TXT关联]
[内容:%SystemRoot%\system32\NOTEPAD.EXE %1]

[编号:144]
[名称:]
[类型:vbs关联]
[内容:%SystemRoot%\System32\WScript.exe "%1" %*]

[编号:145]
[名称:]
[类型:Js关联]
[内容:%SystemRoot%\System32\WScript.exe "%1" %*]

[编号:146]
[名称:]
[类型:htmlfile关联]
[内容:"C:\Program Files\Internet Explorer\iexplore.exe" -nohome]

[编号:147]
[名称:]
[类型:HTTP协议]
[内容:"C:\Program Files\Internet Explorer\iexplore.exe" -nohome]

[编号:148]
[名称:]
[类型:FTP协议]
[内容:"C:\Program Files\Internet Explorer\iexplore.exe" %1]

[编号:149]
[分隔符:---------------------------------------------------------------------]

[编号:150]
[名称:c:\windows\system32\deskpan.dll]
[类型:第三方 COM/ActiveX组件]
[内容:显示摇曳 CPL 扩展---发布公司:未知]

[编号:151]
[名称:c:\windows\system32\audio3d.dll]
[类型:第三方 COM/ActiveX组件]
[内容:Audio3DObject---发布公司:Sensaura ? Copyright 1997-2001 Sensaura Ltd]

--------------------感谢您关注我们的软件---------------------
网站: http://www.killsoft.cn 产品:完美卸载V2006

飘过飘过 · 发表于 2007-3-15 14:53:26

提示: 该帖被管理员或版主屏蔽

diwuxiaoxue · 发表于 2007-3-15 14:54:27

开了这么多启动项，你机器不慢吗？
我教你万能杀毒法：
自己检查运行进程
比如：
[编号:14]
[名称:C:\WINDOWS\jts3.exe]
[类型:运行进程]
[内容:未知]
打开百度或GOOGLE搜索jts3.exe
下面就有高人给你解决了。
技术专利哦

三水傍心 · 发表于 2007-3-15 14:55:21

开机的时候按F8进安全模式扫描杀一遍试试...一般能解决...

桃花 · 发表于 2007-3-15 14:55:39

电脑现在很慢，游戏不敢上

我是不知道该怎么办，才来这里找高手求助，发了所有的进程日记

我发的东西我看不懂，不会暴露我的隐私吧

怎么样才能杀掉这种毒呢，告诉我好用的软件业行

diwuxiaoxue · 发表于 2007-3-15 15:03:10

用瑞星吧！
照我13楼也一定可以解决，熟悉的话不用查几个进程的！

diwuxiaoxue · 发表于 2007-3-15 15:08:21

提示: 该帖被管理员或版主屏蔽

桃花桃花当前离线积分 367 头像被屏蔽今日未签到	沙发楼主\| 发表于 2007-3-15 14:35:43 \| 只看该作者来自：山东提示: 该帖被管理员或版主屏蔽
桃花桃花当前离线积分 367 头像被屏蔽今日未签到
	回复支持反对使用道具举报

飘过飘过飘过飘过当前离线积分 611 头像被屏蔽今日未签到	10楼发表于 2007-3-15 14:53:26 \| 只看该作者来自：江苏提示: 该帖被管理员或版主屏蔽
飘过飘过飘过飘过当前离线积分 611 头像被屏蔽今日未签到
	回复支持反对使用道具举报

diwuxiaoxue diwuxiaoxue 当前离线积分 3452 头像被屏蔽今日未签到	15楼发表于 2007-3-15 15:08:21 \| 只看该作者来自：辽宁提示: 该帖被管理员或版主屏蔽
diwuxiaoxue diwuxiaoxue 当前离线积分 3452 头像被屏蔽今日未签到
	回复支持反对使用道具举报

求助，关于杀毒高手进

相关帖子

回复 #2 桃花的帖子

回复 #2 桃花的帖子

回复 #7 桃花的帖子

回复 #8 桃花的帖子

回复 #9 桃花的帖子

求助，关于杀毒高手进

相关帖子

回复 #2 桃花 的帖子

回复 #2 桃花 的帖子

回复 #7 桃花 的帖子

回复 #8 桃花 的帖子

回复 #9 桃花 的帖子

回复 #2 桃花的帖子

回复 #2 桃花的帖子

回复 #7 桃花的帖子

回复 #8 桃花的帖子

回复 #9 桃花的帖子