七月网

phime2002a(win7垃圾清理工具bet在哪)

七月网5190

其实phime2002a的问题并不复杂,但是又很多的朋友都不太了解win7垃圾清理工具bet在哪,因此呢,今天小编就来为大家分享phime2002a的一些知识,希望可以帮助到大家,下面我们一起来看看这个问题的分析吧!

phime2002a(win7垃圾清理工具bet在哪)

comres.dall找不到怎么办

把下面这段代码复制到记事本中,然后把扩展名改为.bat,双击打开就行啦,代码如下:

@ECHOOFF

@ECHO.

@ECHO.

@ECHO--------------------------------------------------------------

@ECHO

@ECHO欢迎使用

@ECHO

@ECHO--------------------------------------------------------------

PAUSE

regdelete"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"/va/f

regdelete"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"/va/f

regadd"HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run"/vctfmon.exe/dC:\WINDOWS\system32\ctfmon.exe

regdelete"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg"/f

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vcommand/d""C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"/Spoil/RemAdvDef/Migration32"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vhkey/dHKLM

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vinimapping/d0

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vitem/dIMJPMIG

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\Run

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vcommand/d"C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE/IMEName"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vhkey/dHKLM

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vinimapping/d0

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vitem/dTINTSETP

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\Run

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vcommand/d""C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"/Spoil/RemAdvDef/Migration32"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vhkey/dHKLM

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vinimapping/d0

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vitem/dTINTSETP

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\Run

del"C:\DocumentsandSettings\AllUsers\「开始」菜单\程序\启动\*.*"/q/f

del"C:\DocumentsandSettings\DefaultUser\「开始」菜单\程序\启动\*.*"/q/f

del"%userprofile%\「开始」菜单\程序\启动\*.*"/q/f

startC:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe

@echooff

echo×××××××××××××××××××××××......

del/f/s/q%systemdrive%\*.tmp

del/f/s/q%systemdrive%\*._mp

del/f/s/q%systemdrive%\*.log

del/f/s/q%systemdrive%\*.gid

del/f/s/q%systemdrive%\*.chk

del/f/s/q%systemdrive%\*.old

del/f/s/q%systemdrive%\recycled\*.*

del/f/s/q%windir%\*.bak

del/f/s/q%windir%\prefetch\*.*

rd/s/q%windir%\temp&md%windir%\temp

del/f/q%userprofile%\cookies\*.*

del/f/q%userprofile%\recent\*.*

del/f/s/q"%userprofile%\LocalSettings\TemporaryInternetFiles\*.*"

del/f/s/q"%userprofile%\LocalSettings\Temp\*.*"

del/f/s/q"%userprofile%\recent\*.*"

echo您的操作完毕

echo.&pause

win7垃圾清理工具bet在哪

你说的是bat吧,我给你一个史上最完整的bat程序:

@echooff

color1F

@title=优化系统

echo您好我是优化软件,先为您查询今日日期和现在的时间。

ping127.0.0.1/n2>nul

echo%date:~0,4%年%date:~5,2%月%date:~8,2%日%time:~0,8%

pause

ping127.0.0.1/n2>nul

echo我是专门优化电脑的,可以为您优化电脑

echo.

echo此工具可以帮您系统提速!

echo.&pause

echo第一步,WindowsbAT正在清理C盘的系统垃圾和临时文件,请稍后……

del/f/s/q%systemdrive%\*.tmp

del/f/s/q%systemdrive%\*._mp

del/f/s/q%systemdrive%\*.log

del/f/s/q%systemdrive%\*.gid

del/f/s/q%systemdrive%\*.chk

del/f/s/q%systemdrive%\*.old

del/f/s/q%systemdrive%\recycled\*.*

del/f/s/q%windir%\*.bak

del/f/s/q%windir%\prefetch\*.*

rd/s/q%windir%\temp&md%windir%\temp

del/f/q%userprofile%\COOKIESs\*.*

del/f/q%userprofile%\recent\*.*

del/f/s/q"%userprofile%\LocalSettings\TemporaryInternetFiles\*.*"

del/f/s/q"%userprofile%\LocalSettings\Temp\*.*"

del/f/s/q"C:\WINDOWS\HELP\*.*"

del/f/s/q"%userprofile%\recent\*.*"

echo完成√,下一步将会使用磁盘清理实用程序清理其他盘的垃圾文件。

echo.&pause

cleanmgr

echo第二步:清理开机启动项,加快系统开机速度!

echo.&pause

regdeleteHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run/va/f

regdeleteHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run/va/f

regaddHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run/vctfmon.exe/dC:\WINDOWS\system32\ctfmon.exe

regdelete"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg"/f

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vcommand/d""C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"/Spoil/RemAdvDef/Migration32"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vhkey/dHKLM

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vinimapping/d0

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vitem/dIMJPMIG

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\IMJPMIG8.1"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\Run

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vcommand/d"C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE/IMEName"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vhkey/dHKLM

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vinimapping/d0

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vitem/dTINTSETP

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002A"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\Run

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vcommand/d""C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"/Spoil/RemAdvDef/Migration32"

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vhkey/dHKLM

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vinimapping/d0

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vitem/dTINTSETP

regadd"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\PHIME2002ASync"/vkey/dSOFTWARE\Microsoft\Windows\CurrentVersion\Run

del"C:\DocumentsandSettings\AllUsers\「开始」菜单\程序\启动\*.*"/q/f

del"C:\DocumentsandSettings\DefaultUser\「开始」菜单\程序\启动\*.*"/q/f

del"%userprofile%\「开始」菜单\程序\启动\*.*"/q/f

echo第三步:使用“添加或删除程序”来卸载不需要的软件,提高系统运行速度。(需要手动删除)

echo.&pause

appwiz.cpl

echo第四步:更多性能优化,请:在“我的电脑”点右键,按“属性”,高级选项卡页,在性能部分的设置打开点击调整为最佳性能,即可。(需要手动设置)

echo.&pause

echo第五步:快速查毒杀毒,不损伤系统!

echo.&pause

delc:\winnt\logo1_.exe

delc:\windows\logo1_.exe

delc:\winnt\0sy.exe

delc:\windows\0sy.exe

delc:\winnt\1sy.exe

delc:\windows\1sy.exe

delc:\winnt\2sy.exe

delc:\windows\2sy.exe

delc:\winnt\3sy.exe

delc:\windows\3sy.exe

delc:\winnt\4sy.exe

delc:\windows\4sy.exe

delc:\winnt\5sy.exe

delc:\windows\5sy.exe

delc:\winnt\6sy.exe

delc:\windows\6sy.exe

delc:\winnt\7sy.exe

delc:\windows\7sy.exe

delc:\winnt\8sy.exe

delc:\windows\8sy.exe

delc:\winnt\9sy.exe

delc:\windows\9sy.exe

delc:\winnt\rundl132.exe

delc:\windows\rundl132.exe

netsharec$/d

netshared$/d

netsharee$/d

netshareF$/d

netshareG$/d

netshareh$/d

netsharei$/d

netsharej$/d

netshareadmin$/d

netshareipc$/d

delc:\winnt\logo1_.exe

delc:\windows\logo1_.exe

delc:\windows\vdll.dll

delc:\winnt\vdll.dll

delc:\windows\tdll.dll

delc:\winnt\tdll.dll

delc:\windows\dll.dll

delc:\winnt\dll.dll

delc:\winnt\kill.exe

delc:\windows\kill.exe

delc:\winnt\sws32.dll

delc:\windows\sws32.dll

delc:\winnt\rundl132.exe

delc:\windows\rundl132.exe

echo.

echo.

echo.

echo.*****************************

echo.

echo.正在查毒...请不要关闭......

echo.

echo.*****************************

echo.

echo.

echo.

echo.

ping127.0.0.1-n5

delc:\winnt\logo1_.exe

delc:\windows\logo1_.exe

delC:\winnt\system32\Logo1_.exe

delC:\winnt\system32\rundl132.exe

delC:\winnt\system32\bootconf.exe

delC:\winnt\system32\kill.exe

delC:\winnt\system32\sws32.dll

delC:\windows\Logo1_.exe

delC:\windows\rundl132.exe

delC:\windows\bootconf.exe

delC:\windows\kill.exe

delC:\windows\sws32.dll

delC:\windows\dll.dll

delC:\windows\vdll.dll

delc:\windows\tdll.dll

delC:\windows\system32\ShellExt\svchs0t.exe

delC:\windows\system32\Logo1_.exe

delC:\windows\system32\rundl132.exe

delC:\windows\system32\bootconf.exe

delC:\windows\system32\kill.exe

delC:\windows\system32\sws32.dll

delc:\_desktop.ini/f/s/q/a

deld:\_desktop.ini/f/s/q/a

dele:\_desktop.ini/f/s/q/a

delf:\_desktop.ini/f/s/q/a

delg:\_desktop.ini/f/s/q/a

delh:\_desktop.ini/f/s/q/a

deli:\_desktop.ini/f/s/q/a

delj:\_desktop.ini/f/s/q/a

delk:\_desktop.ini/f/s/q/aAbc[/hide]

netstop"McAfee.comVirusScanOnlineRealtimeEngine"

netstop"McAfeeAgent"

netstop"McAfeeSecurityCenterUpdateManager"

netstop"McShield"

netstop"SyGateService"

netstop"SygatePersonalFirewallPro"

netstop"SygatePersonalFirewall"

netstop"SophosAnti-Virus"

netstop"SophosAnti-VirusNetwork"

netstop"eTrustAntivirusJobServer"

netstop"eTrustAntivirusRealtimeServer"

netstop"eTrustAntivirusRPCServer"

netstop"ViRobotExpertMonitoring"

netstop"ViRobotLiteMonitoring"

netstop"QuickHealOnlineProtection"

netstop"V3MonNT"

netstop"V3MonSvc"

netstop"SecurityCenter"

netstop"WindowsFirewall"

netstop"WindowsInternetConnectionSharing(ICS)"

netstop"NAVAlert"

netstop"NAVAuto-Protect"

netstop"ScriptBlockingService"

netstop"DefWatch"

netstop"BackgroundIntelligentTransferService"

netstop"SystemEventNotification"

netstop"BlackICE"

netstop"AVSyncManager"

netstop"AVG7AlertManagerServer"

netstop"AVG7UpdateService"

netstop"InVircibleScheduler"

netstop"kavsvc"

netstop"avast!Antivirus"

netstop"avast!iAVS4ControlService"

netstop"TrendServerProtectAgent"

netstop"TrendServerProtect"

echo查毒杀毒完毕

pause

echo第六步:优化系统服务。

pause

scconfigAlerterstart=DISABLED

scconfigALGstart=DISABLED

scconfigAppMgmtstart=DEMAND

scconfigAudioSrvstart=AUTO

scconfigBITSstart=DISABLED

scconfigBrowserstart=DISABLED

scconfigClipSrvstart=DISABLED

scconfigCOMSysAppstart=DEMAND

scconfigCryptSvcstart=DEMAND

scconfigDcomLaunchstart=AUTO

scconfigDhcpstart=AUTO

scconfigdmadminstart=DEMAND

scconfigdmserverstart=DEMAND

scconfigDnscachestart=DISABLED

scconfigEventlogstart=AUTO

scconfigEventSystemstart=DEMAND

scconfigFastUserSwitchingCompatibilitystart=DISABLED

scconfigHidServstart=DISABLED

scconfigHTTPFilterstart=DEMAND

scconfigImapiServicestart=DISABLED

scconfiglanmanserverstart=DISABLED

scconfiglanmanworkstationstart=DISABLED

scconfigLmHostsstart=DISABLED

scconfigMessengerstart=DISABLED

scconfigmnmsrvcstart=DISABLED

scconfigMSDTCstart=DISABLED

scconfigMSIServerstart=DEMAND

scconfigNetDDEstart=DISABLED

scconfigNetDDEdsdmstart=DISABLED

scconfigNetlogonstart=DISABLED

scconfigNetmanstart=DEMAND

scconfigNlastart=DISABLED

scconfigNtLmSspstart=DEMAND

scconfigPlugPlaystart=AUTO

scconfigPolicyAgentstart=DISABLED

scconfigProtectedStoragestart=AUTO

scconfigRasAutostart=DISABLED

scconfigRasmanstart=DEMAND

scconfigRDSessmgrstart=DISABLED

scconfigRemoteAccessstart=DISABLED

scconfigRemoteRegistrystart=DISABLED

scconfigRpcLocatorstart=DISABLED

scconfigRpcSsstart=AUTO

scconfigRSVPstart=DISABLED

scconfigSamSsstart=DISABLED

scconfigSCardSvrstart=DEMAND

scconfigSchedulestart=DISABLED

scconfigseclogonstart=DISABLED

scconfigSENSstart=DISABLED

scconfigSharedAccessstart=DISABLED

scconfigShellHWDetectionstart=DISABLED

scconfigSpoolerstart=AUTO

scconfigsrservicestart=DISABLED

scconfigSSDPSRVstart=DISABLED

scconfigstisvcstart=DEMAND

scconfigSwPrvstart=DISABLED

scconfigSysmonLogstart=DISABLED

scconfigTapiSrvstart=DEMAND

scconfigTermServicestart=DISABLED

scconfigThemesstart=AUTO

scconfigTlntSvrstart=DISABLED

scconfigTrkWksstart=DISABLED

scconfigUMWdfstart=DEMAND

scconfigWMPNetworkSvcstart=DISABLED

scconfigupnphoststart=DISABLED

scconfigVSSstart=DISABLED

scconfigW32Timestart=DISABLED

scconfigWebClientstart=DISABLED

scconfigwinmgmtstart=AUTO

scconfigWmdmPmSNstart=DISABLED

scconfigWmistart=DEMAND

scconfigWmiApSrvstart=DISABLED

scconfigwscsvcstart=DISABLED

scconfigwuauservstart=DISABLED

scconfigWZCSVCstart=DEMAND

scconfigxmlprovstart=DEMAND

scconfighelpsvcstart=DISABLED

scconfigCiSvcstart=DISABLED

scconfigERSvcstart=DISABLED

scconfigNtmsSvcstart=DEMAND

scconfigNVSvcstart=DEMAND

pause

Exploit.JS.Phel.av是什么病毒

部分报告如下。

已清除:病毒Worm.Win32.Viking.bb文件:D:\安装软件\AcdSee3.0.exe/UPack

已删除:木马程序Trojan-Dropper.Win32.Agent.awb文件:C:\7003cafi.exe/UPX

已删除:木马程序Trojan-PSW.Win32.WOW.da文件:C:\jijy99.exe

已删除:广告程序not-a-virus:AdWare.Win32.Zhongsou.d文件:C:\setup.exe/ASPack

已删除:广告程序not-a-virus:AdWare.Win32.Hengbang.t文件:C:\DocumentsandSettings\Administrator\LocalSettings\Temp\199019002.exe/hbcast.dll

已删除:广告程序not-a-virus:AdWare.Win32.IEHlpr.e文件:C:\DocumentsandSettings\Administrator\LocalSettings\Temp\5001.exe

已删除:木马程序Trojan-Dropper.Win32.Delf.zg文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\0B4JC389\19790205[1].exe/PE_Patch.UPX/UPX

已删除:木马程序Trojan-Dropper.Win32.Agent.axt文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\0B4JC389\update6[1].exe/ASPack

已删除:木马程序Trojan-PSW.Win32.Nilage.aks文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\0DU3MLIZ\2[1].exe/UPX

已删除:木马程序Trojan-PSW.Win32.Agent.ix文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\0DU3MLIZ\4[1].exe/FSG

已删除:木马程序Trojan-Dropper.Win32.Agent.axt文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\0DU3MLIZ\update71[1].exe/ASPack

已删除:木马程序Trojan-PSW.Win32.Nilage.and文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\6X2BANW7\1[1].exe/UPX

已删除:木马程序Trojan-PSW.Win32.Agent.ix文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\6X2BANW7\3[1].exe/FSG

已删除:木马程序Trojan-Downloader.VBS.Psyme.cr文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\6X2BANW7\haha168[1].htm

已删除:木马程序Trojan-Dropper.Win32.Agent.axt文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\6X2BANW7\update52[1].exe/ASPack

已删除:木马程序Backdoor.Win32.Hupigon.crp文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\SZKD6D4V\5[1].exe

已删除:木马程序Trojan-Dropper.Win32.Agent.axt文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\SZKD6D4V\update41[1].exe/ASPack

已删除:木马程序Trojan-Dropper.Win32.Agent.axt文件:C:\DocumentsandSettings\Administrator\LocalSettings\TemporaryInternetFiles\Content.IE5\SZKD6D4V\update81[1].exe/ASPack

未发现:木马程序Trojan-Spy.Win32.Agent.ct文件:C:\DocumentsandSettings\AllUsers\ApplicationData\Microsoft\UserData\IE.exe

未发现:广告程序not-a-virus:AdWare.Win32.IEHlpr.e文件:C:\DocumentsandSettings\AllUsers\ApplicationData\Microsoft\UserData\IEHelper_5001.dll

已删除:木马程序Trojan-Dropper.Win32.Agent.axt文件:C:\DocumentsandSettings\NetworkService\LocalSettings\TemporaryInternetFiles\Content.IE5\0J0L1U3C\update31[1].exe/ASPack

已删除:木马程序Trojan-PSW.Win32.Nilage.aoi文件:C:\DocumentsandSettings\tiger\LocalSettings\Temp\z.exe.exe/UPX

已删除:木马程序Trojan-PSW.Win32.Nilage.ann文件:C:\DocumentsandSettings\tiger\LocalSettings\TemporaryInternetFiles\Content.IE5\0B4JC389\ads2[1].exe

已删除:木马程序Trojan-PSW.Win32.Lmir.bca文件:C:\DocumentsandSettings\tiger\LocalSettings\TemporaryInternetFiles\Content.IE5\0DU3MLIZ\ads3[1].exe/ASPack

已删除:木马程序Trojan-PSW.Win32.QQPass.hv文件:C:\DocumentsandSettings\tiger\LocalSettings\TemporaryInternetFiles\Content.IE5\6X2BANW7\ads1[1].exe/PE_Patch/UPack

已删除:恶意程序Exploit.JS.Phel.av文件:C:\DocumentsandSettings\tiger\LocalSettings\TemporaryInternetFiles\Content.IE5\8LQB0XAZ\young[1].gif

已删除:恶意程序Exploit.VBS.Phel.bw文件:C:\DocumentsandSettings\tiger\LocalSettings\TemporaryInternetFiles\Content.IE5\KLER49Q3\index[4].htm

已删除:木马程序Backdoor.Win32.Agent.ahj文件:C:\DocumentsandSettings\tiger\LocalSettings\TemporaryInternetFiles\Content.IE5\KLER49Q3\young[1].css/PE_Patch/UPack

已删除:木马程序Trojan-Dropper.Win32.small.ata文件:C:\DocumentsandSettings\tiger\LocalSettings\TemporaryInternetFiles\Content.IE5\SZKD6D4V\ads[1].exe/UPX

已删除:木马程序Trojan-PSW.Win32.Lineage.anq文件:C:\ProgramFiles\svhost32.exe/UPack

已删除:木马程序Trojan-PSW.Win32.QQRob.iw文件:C:\ProgramFiles\CommonFiles\MicrosoftShared\MSInfo\DC75976D.dat/UPX

已清除:病毒Worm.Win32.Viking.bb文件:C:\ProgramFiles\Copyso\Copyso.exe/UPack

已删除:广告程序not-a-virus:AdWare.Win32.Zhongsou.d文件:C:\ProgramFiles\DeskAdTop\fshook.dll

已删除:广告程序not-a-virus:AdWare.Win32.WSearch.j文件:C:\ProgramFiles\DeskAdTop\Mrup.exe

已删除:木马程序Trojan-PSW.Win32.Nilage.and文件:C:\ProgramFiles\InternetExplorer\0Sy.exe/UPX

已删除:木马程序Trojan-PSW.Win32.Nilage.aks文件:C:\ProgramFiles\InternetExplorer\1Sy.exe/UPX

已删除:广告程序not-a-virus:AdWare.Win32.Boran.s文件:C:\ProgramFiles\MMSAssist\Mmsass~1.dll

已删除:广告程序not-a-virus:AdWare.Win32.Boran.s文件:C:\ProgramFiles\MMSAssist\MMSSVER.DLL

已删除:木马程序Trojan-PSW.Win32.QQRob.iw文件:C:\ProgramFiles\Tencent\QQ\DC75976D.EXE/UPX

已清除:病毒Worm.Win32.Viking.bb文件:C:\ProgramFiles\Tencent\QQ1\QQ.exe/UPack

已清除:病毒Worm.Win32.Viking.bb文件:C:\ProgramFiles\Tencent\QQGame\P2PDownload.exe/UPack

已删除:木马程序Trojan-Downloader.Win32.Dadobra.mr文件:D:\3dsmax5\adlmswitch.exe/UPack

已删除:木马程序Trojan-Downloader.Win32.Dadobra.mr文件:D:\3dsmax5\MaxFind.exe/UPack

已删除:木马程序Trojan-Downloader.Win32.Dadobra.mr文件:D:\3dsmax5\PMAN32.EXE/UPack

已删除:木马程序Trojan-Downloader.Win32.Dadobra.mr文件:D:\3dsmax5\help\answerworks\SETUP.EXE/UPack

已清除:病毒Worm.Win32.Viking.bb文件:D:\3dsmax5\backburner2\serversvc.exe/UPack

已删除:木马程序Trojan-Downloader.Win32.Dadobra.mr文件:D:\3dsmax5\backburner2\server.exe/UPack

已删除:木马程序Trojan-Downloader.Win32.Dadobra.mr文件:D:\3dsmax5\backburner2\monitor.exe/UPack

已清除:病毒Worm.Win32.Viking.bb文件:D:\3dsmax5\backburner2\managersvc.exe/UPack

其中还残留着两个可疑文件。

未发现:木马程序Trojan-Spy.Win32.Agent.ct文件:C:\DocumentsandSettings\AllUsers\ApplicationData\Microsoft\UserData\IE.exe

未发现:广告程序not-a-virus:AdWare.Win32.IEHlpr.e文件:C:\DocumentsandSettings\AllUsers\ApplicationData\Microsoft\UserData\IEHelper_5001.dll

删不掉。。用卡巴司机杀不了。。写访问被拒绝。

用360安全卫士进行检测。报告如下。:

各位高手:

非常感谢您留心我这份系统诊断报告,小菜鸟十万火急等待您的帮助!

该诊断报告由360安全卫士提供[url=http://www.360safe.com]http://www.360safe.com[/url]

诊断时间:2006-10-1808:39:17

诊断平台:MicrosoftWindowsXPServicePack2

IE版本:InternetExplorerV6.0.2900.2180Build:62900.2180

计算机物理内存:767MB-当前可用内存:402MB

100-中危险-Process:DuDuAcc.exe[dudu下载加速器的相关进程。]-"C:\ProgramFiles\DuDu\Speed\DuDuAcc.exe"/m1

100-中危险-Process:dudupros.exe[Dudu下载加速器相关进程。]-"C:\ProgramFiles\DuDu\Speed\dudupros.exe"

R0-未知-HKCU\Software\Microsoft\InternetExplorer\Main,StartPage=http://www.baidu.com/

R0-未知-HKLM\Software\Microsoft\InternetExplorer\Search,SearchAssistant=

R3-低危险-URLSearchHook:(bhoClass)-[CopySo拷贝搜,强制安装、无法彻底删除]-{ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270}-C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll

O2-中危险-BHO:(dddmontClass)-[Dudu下载加速器,强制安装、恶意软件共享、无法彻底删除。]-{00018593-C6BD-46F7-9349-DBA1AA674C90}-C:\ProgramFiles\DuDu\Speed\dddiemon.dll

O2-低危险-BHO:(bhoClass)-[CopySo拷贝搜,强制安装、无法彻底删除]-{ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270}-C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll

O4-中危险-Startupfolder:[DuDu下载加速器.lnk][dudu加速器相关程序。]C:\DocumentsandSettings\AllUsers.WINDOWS\「开始」菜单\程序\启动\DuDu下载加速器.lnk

O8-未知-Extracontextmenuitem:&使用DuDu下载-res://C:\ProgramFiles\DuDu\Speed\dddmext.dll/202

O8-未知-Extracontextmenuitem:&使用DuDu下载全部链接-res://C:\ProgramFiles\DuDu\Speed\dddmext.dll/203

O8-未知-Extracontextmenuitem:&使用DuDu下载选择链接-res://C:\ProgramFiles\DuDu\Speed\dddmext.dll/204

O8-未知-Extracontextmenuitem:&使用DuDu捕获页面视频-res://C:\ProgramFiles\DuDu\Speed\dddmext.dll/205

O8-未知-Extracontextmenuitem:上传到QQ网络硬盘-C:\ProgramFiles\Tencent\QQ\AddToNetDisk.htm

O8-未知-Extracontextmenuitem:添加到QQ自定义面板-C:\ProgramFiles\Tencent\QQ\AddPanel.htm

O8-未知-Extracontextmenuitem:添加到QQ表情-C:\ProgramFiles\Tencent\QQ\AddEmotion.htm

O8-未知-Extracontextmenuitem:用QQ彩信发送该图片-C:\ProgramFiles\Tencent\QQ\SendMMS.htm

O9-未知-Extrabutton:新浪UC(HKLM)

O9-未知-Extrabutton:腾讯QQ(HKLM)

O17-未知-HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{65CC5F48-5BEA-40EF-A73D-51E3ECC1AB97}:NameServer=202.97.230.4,202.97.224.68

=======================================

100-安全-Process:smss.exe[进程为会话管理子系统用以初始化系统变量,ms-dos驱动名称类似lpt1以及com,调用win32壳子系统和运行在windows登陆过程。]-\SystemRoot\System32\smss.exe

100-安全-Process:csrss.exe[客户端服务子系统,用以控制windows图形相关子系统。]-C:\WINDOWS\system32\csrss.exeObjectDirectory=\WindowsSharedSection=1024,3072,512Windows=OnSubSystemType=WindowsServerDll=basesrv,1ServerDll=winsrv:UserServerDllInitialization,3ServerDll=winsrv:ConServerDllInitialization,2ProfileControl=OffMaxRequestT

100-安全-Process:winlogon.exe[windowsnt用户登陆程序。]-winlogon.exe

100-安全-Process:services.exe[用于管理windows服务系统进程。]-C:\WINDOWS\system32\services.exe

100-安全-Process:lsass.exe[本地安全权限服务控制windows安全机制。]-C:\WINDOWS\system32\lsass.exe

100-安全-Process:svchost.exe[servicehostprocess是一个标准的动态连接库主机处理服务。]-C:\WINDOWS\system32\svchost-kDcomLaunch

100-安全-Process:svchost.exe[servicehostprocess是一个标准的动态连接库主机处理服务。]-C:\WINDOWS\system32\svchost-krpcss

100-安全-Process:svchost.exe[servicehostprocess是一个标准的动态连接库主机处理服务。]-C:\WINDOWS\System32\svchost.exe-knetsvcs

100-安全-Process:svchost.exe[servicehostprocess是一个标准的动态连接库主机处理服务。]-C:\WINDOWS\system32\svchost.exe-kNetworkService

100-安全-Process:svchost.exe[servicehostprocess是一个标准的动态连接库主机处理服务。]-C:\WINDOWS\system32\svchost.exe-kLocalService

100-安全-Process:spoolsv.exe[windows打印任务控制程序,用以打印机就绪。]-C:\WINDOWS\system32\spoolsv.exe

100-安全-Process:explorer.exe[windowsprogrammanager或者windowsexplorer用于控制windows图形shell,包括开始菜单、任务栏,桌面和文件管理。]-C:\WINDOWS\Explorer.EXE

100-安全-Process:avp.exe[卡巴斯基杀毒软件相关程序。]-"C:\ProgramFiles\KasperskyLab\KasperskyInternetSecurity6.0\avp.exe"

100-安全-Process:ctfmon.exe[officexp输入法图标。]-"C:\WINDOWS\system32\ctfmon.exe"

100-中危险-Process:DuDuAcc.exe[dudu下载加速器的相关进程。]-"C:\ProgramFiles\DuDu\Speed\DuDuAcc.exe"/m1

100-安全-Process:avp.exe[卡巴斯基杀毒软件相关程序。]-"C:\ProgramFiles\KasperskyLab\KasperskyInternetSecurity6.0\avp.exe"-r

100-中危险-Process:dudupros.exe[Dudu下载加速器相关进程。]-"C:\ProgramFiles\DuDu\Speed\dudupros.exe"

100-安全-Process:alg.exe[这是一个应用层网关服务用于网络共享。]-C:\WINDOWS\System32\alg.exe

100-安全-Process:wuauclt.exe[windows操作系统后台程序,用于系统升级。]-"C:\WINDOWS\system32\wuauclt.exe"

100-安全-Process:iexplore.exe[microsoftinternetexplorer浏览器用于浏览网页。]-"C:\ProgramFiles\InternetExplorer\IEXPLORE.EXE"

100-安全-Process:iexplore.exe[microsoftinternetexplorer浏览器用于浏览网页。]-"C:\ProgramFiles\InternetExplorer\IEXPLORE.EXE"

100-安全-Process:iexplore.exe[microsoftinternetexplorer浏览器用于浏览网页。]-"C:\ProgramFiles\InternetExplorer\IEXPLORE.EXE"

100-安全-Process:iexplore.exe[microsoftinternetexplorer浏览器用于浏览网页。]-"C:\ProgramFiles\InternetExplorer\IEXPLORE.EXE"

100-安全-Process:iexplore.exe[microsoftinternetexplorer浏览器用于浏览网页。]-"C:\ProgramFiles\InternetExplorer\IEXPLORE.EXE"

100-安全-Process:iexplore.exe[microsoftinternetexplorer浏览器用于浏览网页。]-"C:\ProgramFiles\InternetExplorer\IEXPLORE.EXE"

100-安全-Process:iexplore.exe[microsoftinternetexplorer浏览器用于浏览网页。]-"C:\ProgramFiles\InternetExplorer\IEXPLORE.EXE"

100-安全-Process:CheckTool.exe[360Toolsmicrosoft基础类应用程序]-"C:\DocumentsandSettings\Administrator.16A189B893E14EA\桌面\CheckTool\CheckTool.exe"

R0-未知-HKCU\Software\Microsoft\InternetExplorer\Main,StartPage=http://www.baidu.com/

R0-未知-HKLM\Software\Microsoft\InternetExplorer\Search,SearchAssistant=

R1-安全-HKLM\Software\Microsoft\InternetExplorer\Main,LocalPage=C:\WINDOWS\system32\blank.htm

R1-安全-HKCU\Software\Microsoft\InternetExplorer\Main,LocalPage=C:\WINDOWS\system32\blank.htm

R3-低危险-URLSearchHook:(bhoClass)-[CopySo拷贝搜,强制安装、无法彻底删除]-{ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270}-C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll

O2-中危险-BHO:(dddmontClass)-[Dudu下载加速器,强制安装、恶意软件共享、无法彻底删除。]-{00018593-C6BD-46F7-9349-DBA1AA674C90}-C:\ProgramFiles\DuDu\Speed\dddiemon.dll

O2-安全-BHO:(QQBrowserHelperObjectClass)-[腾讯QQ的一个插件。]-{54EBD53A-9BC1-480B-966A-843A333CA162}-C:\ProgramFiles\Tencent\QQ\QQIEHelper.dll

O2-低危险-BHO:(bhoClass)-[CopySo拷贝搜,强制安装、无法彻底删除]-{ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270}-C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll

O4-安全-HKLM\..\Run:[IMJPMIG8.1][微软Microsoft输入法编辑器程序。]"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"/Spoil/RemAdvDef/Migration32

O4-安全-HKLM\..\Run:[PHIME2002ASync][输入法软件相关程序。]C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE/SYNC

O4-安全-HKLM\..\Run:[PHIME2002A][输入法软件相关程序。]C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE/IMEName

O4-安全-HKLM\..\Run:[kis][卡巴斯基反病毒软件相关程序。]"C:\ProgramFiles\KasperskyLab\KasperskyInternetSecurity6.0\avp.exe"

O4-安全-HKLM\..\Run:[kav][卡巴斯基杀毒软件相关程序。]"C:\ProgramFiles\KasperskyLab\KasperskyInternetSecurity6.0\avp.exe"

O4-安全-HKLM\..\Run:[NMGameX_AutoRun][新浪igame游戏大厅相关程序。]C:\WINDOWS\system32\Rundll32.exeNMGameX.dll,LiveProcess/aa

O4-安全-HKCU\..\Run:[ctfmon.exe][officexp输入法图标。]C:\WINDOWS\system32\ctfmon.exe

好了,文章到此结束,希望可以帮助到大家。