中左[snap.do],求救!![附上Hijackthis ,SUPERAntiSpyware, JRT, AdwCleaner, Rkill]

AdwCleaner[S0].txt (7 KB)

2013-10-19 11:39 AM, 下载次数: 3

hijackthis.log (10 KB)

2013-10-19 11:39 AM, 下载次数: 2

JRT.txt (7.09 KB)

2013-10-19 11:39 AM, 下载次数: 2

Rkill.txt (2.71 KB)

2013-10-19 11:39 AM, 下载次数: 2

SUPERAntiSpyware Scan Log - 10-19-2013 - 11-28-25.log (33 KB)

2013-10-19 11:39 AM, 下载次数: 2

引用:
O4 - HKLM\..\Run: [STCAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCAgent.exe"
O4 - HKLM\..\Run: [ZyngaGamesAgent] "C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe"
O4 - HKCU\..\Run: [foxy] "C:\Program Files (x86)\Foxy\Foxy.exe" -tray
O4 - HKUS\S-1-5-21-3525145145-3036102457-560527597-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\GetAllUrl.htm
O8 - Extra context menu item: &使用迅雷离线下载 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm
O8 - Extra context menu item: 使用迅雷看看播放器播放 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm
O9 - Extra button: (no name) - {4F9FD89A-24F0-4fb7-9635-D54B3593B85B} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: @"C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe",-101 - {4F9FD89A-24F0-4fb7-9635-D54B3593B85B} - (no file) (HKCU)
O9 - Extra button: @"C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe",-103 - {9E508DD9-844C-4985-AC11-AFE5DD71E0BF} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (file missing) (HKCU)
O9 - Extra button: (no name) - {B771147A-4CC8-450e-8AB1-7D47821751B1} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: @"C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe",-102 - {B771147A-4CC8-450e-8AB1-7D47821751B1} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (file missing) (HKCU)
O9 - Extra button: @"C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STCHelper.exe",-104 - {EB89B163-2474-4734-9E93-68B61BC5BED5} - C:\Program Files (x86)\Splashtop\Splashtop Connect IE\STC.dll (file missing) (HKCU)
O23 - Service: Ask Update Service (APNMCP) - Unknown owner - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Splashtop Connect Firefox Software Updater Service (WCUService_STC_FF) - Unknown owner - C:\Program Files (x86)\Splashtop\Splashtop Connect Firefox Software Updater\WCUService.exe (file missing)

引用:
:files
C:\Program Files (x86)\Splashtop\Splashtop Connect\ZyngaGamesAgent.exe
C:\Program Files (x86)\Foxy\Foxy.exe

引用:原帖由 SILVESTERABEND 於 2013-10-19 02:41 PM 发表
开机按F8,入安全模式做Fix checked & OTM 删除。
1. 执行Hijackthis > Do a system scan only > 勾选下列项目 > 按Fix Checked (fix checked时关闭所有browsers/程式) > 按"是"。

2. 下载/执行 OTM做删除。
cop ...

OTL.Txt (92.83 KB)

2013-10-19 06:24 PM, 下载次数: 2

probe.png (6.7 KB)

2013-10-19 06:24 PM

引用:原帖由 peter19220 於 2013-10-19 06:24 PM 发表

SILVESTERABEND您好
我已经跟足指示做了,请指教!
另外我在"解除安装程式"仍见到snap.do,可以点做?
感谢!!!

引用::OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
FF - HKLM\Software\MozillaPlugins\@xunlei.com/DapCtrl: C:\Program Files (x86)\Common Files\Thunder Network\KanKan\npDapCtrl.3.1.0.7.(143).dll (ShenZhen Thunder Networking Technologies Ltd.)
FF - HKLM\Software\MozillaPlugins\@xunlei.com/npxunlei;version=1.0.0.2: C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll ( )
FF - HKCU\Software\MozillaPlugins\@xunlei.com/npxunlei;version=1.0.0.2: C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll ( )

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a1}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{91c612bf-2a7a-48b8-8c8c-6de28589b7a0}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{d9284e50-81fc-11da-a72b-0800200c9a66}: C:\Program Files (x86)\Splashtop\Splashtop Connect for Firefox\{d9284e50-81fc-11da-a72b-0800200c9a66}
CHR - default_search_provider: Web (Enabled)
CHR - default_search_provider: search_url = http://feed.snapdo.com/?publisher=SnapdoEMonYB&dpid=SnapdoEMonYB&co=HK&userid=9f9681b7-4638-3f54-4137-fd54c390f786&searchtype=ds&q={searchTerms}&installDate=19/10/2013
CHR - homepage: http://feed.snapdo.com/?publisher=SnapdoEMonYB&dpid=SnapdoEMonYB&co=HK&userid=9f9681b7-4638-3f54-4137-fd54c390f786&searchtype=hp&installDate=19/10/2013
CHR - plugin: Thunder DapCtrl NPAPI Plugin (Enabled) = C:\Program Files (x86)\Common Files\Thunder Network\KanKan\npDapCtrl.3.1.0.7.(143).dll
CHR - plugin: XunLei Plugin (Enabled) = C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll
O2:64bit: - BHO: (捃泞狟婥盓厥) - {004B0726-A010-4ABF-8556-FCDB7F1FCA1E} - C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO647.9.9.4578.dll (深圳市迅雷网络技术有限公司)
O2 - BHO: (no name) - {41564952-412D-5637-00A7-7A786E7484D7} - No CLSID value found.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8:64bit: - Extra context menu item: &使用迅雷下载 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm ()
O8:64bit: - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\getAllurl.htm ()
O8:64bit: - Extra context menu item: &使用迅雷离线下载 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm ()
O8:64bit: - Extra context menu item: 使用迅雷看看播放器播放 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm ()
O8:64bit: - Extra context menu item: 添加当前页到迅雷看看播放器标签 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenuAddStoreTab.htm ()
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm ()
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\getAllurl.htm ()
O8 - Extra context menu item: &使用迅雷离线下载 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm ()
O8 - Extra context menu item: 使用迅雷看看播放器播放 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm ()
O8 - Extra context menu item: 添加当前页到迅雷看看播放器标签 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenuAddStoreTab.htm ()




:Commands
[PURITY]
[emptyjava]
[EMPTYFLASH]
[reboot]

引用:原帖由 peter19220 於 2013-10-19 11:42 PM 发表
原帖由 SILVESTERABEND 於 2013-10-19 06:46 PM 发表



1. 双按OTL.exe > 将下列档案copy & paste 到Custom Scans/Fixes框架内 > 按左上角[Run Fix];执行fi ...

引用:原帖由 SILVESTERABEND 於 2013-10-20 10:15 AM 发表



1. 冇弹fix log唔紧要,开浏览器重见唔见到snap.do/smartbar ?
2. 程式集重有冇 snap.do ?

problem.png (4.83 KB)

2013-10-21 04:39 PM

引用:原帖由 peter19220 於 2013-10-21 04:38 PM 发表

SILVESTERABEND您好!
浏览器和程式集已经没有了snap.do
但我见程式集有Splashtop
之下得知是远端控制软体
但我没有手动安装过请问可以点delete?
再次麻烦到您不好意思

引用:原帖由 peter19220 於 2013-10-21 04:38 PM 发表

SILVESTERABEND您好!
浏览器和程式集已经没有了snap.do
但我见程式集有Splashtop
之下得知是远端控制软体
但我没有手动安装过请问可以点delete?
再次麻烦到您不好意思

引用:原帖由 SILVESTERABEND 於 2013-10-23 07:45 PM 发表



删左splashtop未?

引用:原帖由 peter19220 於 2013-10-24 02:01 PM 发表


SILVESTERABEND 兄您好!
要您主动跟进不好意思了

我入左安全模式,在程式和功能想delete splashtop, 但佢话"windows installer"无法存取, 无法delete splashtop
我就跟#9在regedit delete,
但delete哂之就, ...

引用:原帖由 KRally 於 2013-10-24 06:58 PM 发表



路过......
检查IE/Firefox的附加元件/扩充元件有冇splashtop残留?

ps....ccleaner > 工具 > 移除程式 > 按splashtop > 删除此项目......

problem.png (126.23 KB)

2013-10-25 11:07 PM

firefox plugin.png (661.04 KB)

2013-10-25 11:07 PM