上网慢左..开唔到新视窗.bt唔到.又中左恶意程式? (附上hijackthis）

hijackthis2014+2+19.txt (9.9 KB)

2014-2-19 05:02 AM, 下载次数: 6

引用:
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
R3 - URLSearchHook: (no name) - {4cff1016-c2e2-4fdd-9c67-e32200c25ff9} - C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wSrcAs.dll
O2 - BHO: Toolbar BHO - {03123bb6-a811-407e-b323-66cf0be510b1} - C:\PROGRA~2\RETROG~2\bar\2.bin\4wbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O2 - BHO: Search Assistant BHO - {d757dbfc-1494-4647-a8b3-abd654988dd8} - C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wSrcAs.dll
O2 - BHO: GomPicker - {F0181C6E-9218-4792-9F3C-E8DF52B2F1AC} - C:\Program Files (x86)\GRETECH\GomPicker\GomPickerBHO.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Retrogamer - {3392cfec-56f8-41ee-bdb4-4e301efd2c93} - C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wbar.dll


O4 - HKLM\..\Run: [BCU] "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Bing Bar] "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [ACPW05EN] "C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe" /pid ACPW05EN
O4 - HKLM\..\Run: [Retrogamer_4w Browser Plugin Loader 64] C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wbrmon64.exe
O4 - HKLM\..\Run: [Retrogamer EPM Support] "C:\PROGRA~2\RETROG~2\bar\2.bin\4wmedint.exe" T8EPMSUP.DLL,S
O4 - HKLM\..\Run: [Retrogamer Search Scope Monitor] "C:\PROGRA~2\RETROG~2\bar\2.bin\4wsrchmn.exe" /m=2 /w /h
O4 - HKLM\..\Run: [Retrogamer_4w Browser Plugin Loader] C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wbrmon.exe
O4 - HKCU\..\Run: [YodaoDict] "C:\Program Files (x86)\Youdao\Dict4\RunDict.exe" -hide
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
O4 - Startup: 雄沧厒芩饪.lnk = C:\Users\chi\AppData\Local\Tudou\FeisuTudou\TudouVa.exe


O8 - Extra context menu item: &使用BitComet下载 - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &使用BitComet下载全部连结 - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm


O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - www.BitComet.com - C:\Program Files\BitComet\tools\BitCometService.exe
O23 - Service: RetrogamerService (Retrogamer_4wService) - COMPANYVERS_NAME - C:\PROGRA~2\RETROG~2\bar\2.bin\4wbarsvc.exe

引用:
:files
C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wSrcAs.dll
C:\PROGRA~2\RETROG~2\bar\2.bin\4wbar.dll
C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wSrcAs.dll
C:\Program Files (x86)\GRETECH\GomPicker\GomPickerBHO.dll
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wbar.dll
C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wbrmon64.exe
C:\PROGRA~2\RETROG~2\bar\2.bin\4wmedint.exe
C:\PROGRA~2\RETROG~2\bar\2.bin\4wsrchmn.exe
C:\Program Files (x86)\Retrogamer_4w\bar\2.bin\4wbrmon.exe
C:\Program Files (x86)\Youdao\Dict4\RunDict.exe
C:\Program Files\BitComet\BitComet.exe
C:\Users\chi\AppData\Local\Tudou\FeisuTudou\TudouVa.exe

引用:原帖由 SILVESTERABEND 於 2014-2-19 12:23 PM 发表
开机按F8,入安全模式做Fix checked & OTM 删除。
1.执行Hijackthis > Do a system scan only > 勾选下列项目 > 按Fix Checked (fix checked时关闭所有browsers/程式) > 按"是"。

2. 下载/执行 OTM做删除。
copy ...

引用:原帖由 nbachung 於 2014-2-19 02:01 PM 发表


先thank..今日开com.发现又暂时全部正常.重需唔需做?thank

引用:原帖由 SILVESTERABEND 於 2014-2-19 03:41 PM 发表



建议要做#2帖扫瞄,恶意程式唔会自动消失。

引用:原帖由 nbachung 於 2014-2-19 11:59 PM 发表
发现又冇左google搜寻器..?系咪要重做no.3步骤修正winosock 先有番.thank