中左wuaudit.exe病毒 不停黑屏

引用:原帖由 六月猫 於 2013-9-16 12:28 AM 发表
已爬过其他文章 貌似每部电脑方法不同？ 已被此病毒困扰多日……求高人帮忙
avast不停报毒，显示卡经常停止运作。

引用:原帖由 六月猫 於 2013-9-16 12:28 AM 发表
已爬过其他文章 貌似每部电脑方法不同？ 已被此病毒困扰多日……求高人帮忙
avast不停报毒，显示卡经常停止运作。

引用:
O2 - BHO: QQCycloneHelper - {00000000-12C9-4305-82F9-43058F20E8D2} - D:\其他程式\QQDownload\QQIEHelper01.dll
O2 - BHO: XlBrowserAddinBho.XlBrowserAddinBhoObject - {0EA37B17-6B8B-4085-8257-F3A4AA69C27A} - D:\坻最宒\捃泞\BHO\XlBrowserAddin1.0.8.71.dll
O2 - BHO: XunleiBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\坻最宒\捃泞\BHO\XunleiBHO7.2.9.3634.dll
O2 - BHO: Help the General-Search Project - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - D:\Users\CELIAC~1\AppData\Roaming\MEDIAF~1\EXTENS~1\GENCRA~1.DLL (file missing)
O2 - BHO: iToolsBHO - {E1499FE7-129D-4B6E-B681-DDF21E14172C} - D:\Users\CeLia Chu\Documents\iTools\Plugin\iToolsBHO.dll
O2 - BHO: 肮祭珨莹假蚾盓厥 - {F72C8153-7140-4FEE-8F69-CA4579D71195} - D:\Program Files\Tongbu\Addin\tbIEAddin.dll


O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "D:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] D:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "D:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QvodTerminal] "D:\Program Files\QvodPlayer\QvodTerminal.exe" -autorun
O4 - HKLM\..\Run: [duomi] D:\Program Files\DuoMi\DuoMi.exe /hide
O4 - HKLM\..\Run: [duomitip] D:\Program Files\DuoMi\dmdeskbox.exe /hide
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "D:\其他程式\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [XMP] "D:\其他程式\迅雷看看\program\XMP.exe" /embedding /sstartfrom Startup
O4 - HKCU\..\Run: [PPS Accelerator] D:\其他程式\PPStream\PPSKernel.exe
O4 - HKCU\..\Run: [Pando Media Booster] D:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [PPAP] "D:\Program Files\Common Files\PPLiveNetwork\PPAP.exe" -background
O4 - HKCU\..\Run: [Steam] "D:\GAME\STEAM\Steam.exe" -silent
O4 - HKCU\..\Run: [UnInstallShell] D:\Users\CELIAC~1\AppData\Local\Temp\Uninstall.exe uuu "D:\其他程式\MSNShell\"
O4 - HKCU\..\Run: [tsiVideo] rundll32.exe D:\Users\CELIAC~1\AppData\Local\Temp\\tsiVi032.dll,start
O4 - HKUS\S-1-5-18\..\Run: [PPS Accelerator] D:\其他程式\PPStream\PPSKernel.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [PPS Accelerator] D:\其他程式\PPStream\PPSKernel.exe (User 'Default user')
O4 - Startup: 百度云管家.lnk = C:\Program Files\BaiduYunGuanjia\BaiduYunGuanjia.exe

O8 - Extra context menu item: &妏蚚&捃泞烛盄狟婥 - D:\坻最宒\捃泞\BHO\OfflineDownload.htm
O8 - Extra context menu item: &妏蚚&捃泞狟婥 - D:\坻最宒\捃泞\BHO\geturl.htm
O8 - Extra context menu item: &妏蚚&捃泞狟婥窒蝈诿 - D:\坻最宒\捃泞\BHO\GetAllUrl.htm
O8 - Extra context menu item: 使用迅雷看看播放器播放 - D:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm
O8 - Extra context menu item: 使用电驴下载 - D:\其他程式\easyMule\IE2EM.htm
O8 - Extra context menu item: 妏蚚捃泞艘艘畦温畦温 - D:\ProgramData\Thunder Network\XMP4\core\program\XmpIEMenu.htm
O9 - Extra button: (no name) - {14c1d00e-0b92-4379-880b-444fa2d740dd} - D:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEToolMenu.htm
O9 - Extra 'Tools' menuitem: ??迅雷看看播放器 - {14c1d00e-0b92-4379-880b-444fa2d740dd} - D:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEToolMenu.htm
O9 - Extra button: ??迅雷看看播放器 - {24c1d00e-0b92-4379-880b-444fa2d740dd} - D:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEToolBar.htm
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - D:\Windows\System32\mshtml.dll
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\其他程式\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - D:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: Yontoo Desktop Updater - Unknown owner - D:\Program Files\Yontoo\Y2Desktop.Updater.exe (file missing)

引用:
:files
D:\Program Files\QvodPlayer\QvodTerminal.exe
D:\Program Files\Pando Networks\Media Booster\PMB.exe
D:\Users\CeLia Chu\Documents\iTools\Plugin\iToolsBHO.dll
D:\Program Files\Tongbu\Addin\tbIEAddin.dll
D:\Program Files\DuoMi\DuoMi.exe
D:\Program Files\DuoMi\dmdeskbox.exe
D:\Program Files\Common Files\PPLiveNetwork\PPAP.exe
D:\Users\CELIAC~1\AppData\Local\Temp\Uninstall.exe
D:\Users\CELIAC~1\AppData\Local\Temp\\tsiVi032.dll

引用:原帖由 六月猫 於 2013-9-18 11:27 PM 发表
感谢版主 貌似已经清除左病毒
无再弹出警告及黑屏，非常感谢！