紧急！！！上唔到facebook同youtube
时间：2013-12-25
来源：互联网
求解决，
dasdasdasd.jpg (110.72 KB)
2013-12-8 07:03 PM
作者: chiuken 发布时间: 2013-12-25
引用:原帖由 chiuken 於 2013-12-8 07:03 PM 发表
求解决，
请先做Hijackthis扫瞄报告贴上:
求解决，
引用:
下载 Hijackthis至桌面 > 按 Install > 按[ Accept] > 按 [Do a system scan and save a logfile ] > 完成扫瞄系统，hijackthis会弹出报告。
储存该扫瞄报告於桌面。请把Hijackthis 扫瞄报告贴上。
下载 Hijackthis至桌面 > 按 Install > 按[ Accept] > 按 [Do a system scan and save a logfile ] > 完成扫瞄系统，hijackthis会弹出报告。
储存该扫瞄报告於桌面。请把Hijackthis 扫瞄报告贴上。
作者: SILVESTERABEND 发布时间: 2013-12-25
okkkk
hijackthis.log (9.5 KB)
hijackthis.log (9.5 KB)
2013-12-8 07:18 PM, 下载次数: 7
作者: chiuken 发布时间: 2013-12-25
引用:原帖由 chiuken 於 2013-12-8 07:18 PM 发表
okkkk
楼主先移除360所有程式。 okkkk
作者: SILVESTERABEND 发布时间: 2013-12-25
删除完再sacn多次
2hijackthis.log (10.61 KB)
2hijackthis.log (10.61 KB)
2013-12-8 07:30 PM, 下载次数: 5
作者: chiuken 发布时间: 2013-12-25
开机按F8,入安全模式做Fix checked & OTM 删除。
1.执行Hijackthis > Do a system scan only > 勾选下列项目 > 按Fix Checked (fix checked时关闭所有browsers/程式) > 按"是"。
copy & paste 以下项目於Paste Instructions for Items to be Moved的框格内。
按MoveIt > OK > 重启电脑。
(JRT会自动删除附於浏览器的恶意程式/档案/登录档)
4. 关闭所有防毒软件(包括Windows Defender),下载ComboFix至桌面 ,执行 ComboFix 扫毒。
扫瞄时不要执行其他程式或点击 ComboFix视窗。
完成扫瞄后,ComboFix 报告会自动弹出。
请贴上以下报告:
a. JRT扫毒报告。
b. ComboFix扫毒报告。
c. 新1份Hijackthis扫瞄报告。
1.执行Hijackthis > Do a system scan only > 勾选下列项目 > 按Fix Checked (fix checked时关闭所有browsers/程式) > 按"是"。
引用:
O2 - BHO: VideoUrlSniffer - {00000ADA-7E0D-47C1-986C-F017D09C4304} - C:\Users\Public\Thunder Network\XMP4\Addins\VideoUrlSniffer.2.2.0.146.(237).dll
O2 - BHO: ed2k Dectector - {56746166-BC44-45f4-ADCE-52EAC919BB79} - (no file)
O2 - BHO: XunleiBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO7.9.13.4666.dll
O2 - BHO: QvodExtend - {A8502600-B272-4F68-A67B-A0305D46D297} - C:\Program Files (x86)\QvodPlayer\QvodExtend\5.0.95.0\QvodExtend.dll
O2 - BHO: Xunlei BHO Platform - {DE05CF4A-7B0A-4775-B5E5-396244938679} - C:\Program Files (x86)\Thunder Network\Thunder\Thunder BHO Platform\np_tdieplat.dll
O3 - Toolbar: (no name) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - (no file)
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: &V妏蚚Vagaa阺蜃狟婥 - C:\Vagaa\Data\vg.htm
O8 - Extra context menu item: &妏蚚&捃泞烛盄狟婥 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm
O8 - Extra context menu item: &妏蚚&捃泞狟婥 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm
O8 - Extra context menu item: &妏蚚&捃泞狟婥窒蝈诿 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\GetAllUrl.htm
O8 - Extra context menu item: Foxy 下载 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/download.htm
O8 - Extra context menu item: Foxy 搜寻 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/search.htm
O8 - Extra context menu item: 使用迅雷看看播放器播放 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm
O16 - DPF: {643D82AD-AE93-40DA-AD4A-A306E6B5A4F6} (FTAtxCtrl Control) - https://www.avaonline.com.tw/Facebook/FTAtxCtrl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{95A8DBD6-EB73-4831-B9AD-D516140DD7BA}: NameServer = 101.226.4.6,114.114.114.114
O20 - AppInit_DLLs: C:\PROGRA~3\Wincert\WIN32C~1.DLL c:\progra~2\movies~1\safety~1\safety~2.dll
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
2. 下载/执行 OTM做删除。O2 - BHO: VideoUrlSniffer - {00000ADA-7E0D-47C1-986C-F017D09C4304} - C:\Users\Public\Thunder Network\XMP4\Addins\VideoUrlSniffer.2.2.0.146.(237).dll
O2 - BHO: ed2k Dectector - {56746166-BC44-45f4-ADCE-52EAC919BB79} - (no file)
O2 - BHO: XunleiBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO7.9.13.4666.dll
O2 - BHO: QvodExtend - {A8502600-B272-4F68-A67B-A0305D46D297} - C:\Program Files (x86)\QvodPlayer\QvodExtend\5.0.95.0\QvodExtend.dll
O2 - BHO: Xunlei BHO Platform - {DE05CF4A-7B0A-4775-B5E5-396244938679} - C:\Program Files (x86)\Thunder Network\Thunder\Thunder BHO Platform\np_tdieplat.dll
O3 - Toolbar: (no name) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - (no file)
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: &V妏蚚Vagaa阺蜃狟婥 - C:\Vagaa\Data\vg.htm
O8 - Extra context menu item: &妏蚚&捃泞烛盄狟婥 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\OfflineDownload.htm
O8 - Extra context menu item: &妏蚚&捃泞狟婥 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\geturl.htm
O8 - Extra context menu item: &妏蚚&捃泞狟婥窒蝈诿 - C:\Program Files (x86)\Thunder Network\Thunder\BHO\GetAllUrl.htm
O8 - Extra context menu item: Foxy 下载 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/download.htm
O8 - Extra context menu item: Foxy 搜寻 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/search.htm
O8 - Extra context menu item: 使用迅雷看看播放器播放 - C:\Users\Public\Thunder Network\XMP4\Core\Program\XmpIEMenu.htm
O16 - DPF: {643D82AD-AE93-40DA-AD4A-A306E6B5A4F6} (FTAtxCtrl Control) - https://www.avaonline.com.tw/Facebook/FTAtxCtrl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{95A8DBD6-EB73-4831-B9AD-D516140DD7BA}: NameServer = 101.226.4.6,114.114.114.114
O20 - AppInit_DLLs: C:\PROGRA~3\Wincert\WIN32C~1.DLL c:\progra~2\movies~1\safety~1\safety~2.dll
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
copy & paste 以下项目於Paste Instructions for Items to be Moved的框格内。
按MoveIt > OK > 重启电脑。
引用:
:files
u:\vyXpJPp SoxtQ (I86)\igRpTO qtnouFI\yCRIWprvG\wTPiFPEnD.jNW
C:\Program Files (x86)\Baidu\BaiduMusic\BaiduMusic.exe
C:\Program Files (x86)\SogouInput\6.7.0.0413\SogouCloud.exe
C:\Users\Public\Thunder Network\XMP4\Addins\VideoUrlSniffer.2.2.0.146.(237).dll
C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO7.9.13.4666.dll
C:\Program Files (x86)\QvodPlayer\QvodExtend\5.0.95.0\QvodExtend.dll
C:\Program Files (x86)\Thunder Network\Thunder\Thunder BHO Platform\np_tdieplat.dll
C:\PROGRA~3\Wincert\WIN32C~1.DLL
c:\progra~2\movies~1\safety~1\safety~2.dll
3. 下载/执行Junkware Removal Tool扫毒。执行扫毒前请关闭所有浏览器同程式。:files
u:\vyXpJPp SoxtQ (I86)\igRpTO qtnouFI\yCRIWprvG\wTPiFPEnD.jNW
C:\Program Files (x86)\Baidu\BaiduMusic\BaiduMusic.exe
C:\Program Files (x86)\SogouInput\6.7.0.0413\SogouCloud.exe
C:\Users\Public\Thunder Network\XMP4\Addins\VideoUrlSniffer.2.2.0.146.(237).dll
C:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO7.9.13.4666.dll
C:\Program Files (x86)\QvodPlayer\QvodExtend\5.0.95.0\QvodExtend.dll
C:\Program Files (x86)\Thunder Network\Thunder\Thunder BHO Platform\np_tdieplat.dll
C:\PROGRA~3\Wincert\WIN32C~1.DLL
c:\progra~2\movies~1\safety~1\safety~2.dll
(JRT会自动删除附於浏览器的恶意程式/档案/登录档)
4. 关闭所有防毒软件(包括Windows Defender),下载ComboFix至桌面 ,执行 ComboFix 扫毒。
扫瞄时不要执行其他程式或点击 ComboFix视窗。
完成扫瞄后,ComboFix 报告会自动弹出。
请贴上以下报告:
a. JRT扫毒报告。
b. ComboFix扫毒报告。
c. 新1份Hijackthis扫瞄报告。
作者: SILVESTERABEND 发布时间: 2013-12-25
整完啦ComboFix 扫毒完自动重新开机所以无 重开完有个360出翻离但系卡死左点关都关唔到工作管理员都无用
3hijackthis.log (8.82 KB)
JRT.txt (3.54 KB)
3hijackthis.log (8.82 KB)
2013-12-8 08:15 PM, 下载次数: 2
JRT.txt (3.54 KB)
2013-12-8 08:15 PM, 下载次数: 2
sssss.jpg (58.45 KB)2013-12-8 08:15 PM
作者: chiuken 发布时间: 2013-12-25
仲系上唔到facebook
作者: chiuken 发布时间: 2013-12-25
引用:原帖由 chiuken 於 2013-12-8 08:15 PM 发表
整完啦ComboFix 扫毒完自动重新开机所以无 重开完有个360出翻离但系卡死左点关都关唔到工作管理员都无用
360软件系易请难送的流氓软件。整完啦ComboFix 扫毒完自动重新开机所以无 重开完有个360出翻离但系卡死左点关都关唔到工作管理员都无用
先删完系统恶意程式同PUP后至再删。
有冇ComboFix报告?
作者: SILVESTERABEND 发布时间: 2013-12-25
引用:原帖由 chiuken 於 2013-12-8 08:28 PM 发表
仲系上唔到facebook
1. 下载/执行 AdwCleaner (Xplode) 扫毒。(按[Clean] 扫毒/删除)仲系上唔到facebook
(执行AdwCleaner关闭所有浏览器/程式)
2. 下载/安装Malwarebytes Anti-Malware Free 扫毒。更新后做全面扫瞄,扫到毒按Select all > 再按Remove Selected做删除。
3. 下载 OTL.exe於桌面。双按OTL.exe > 按Run Scan > 完成后请将OTL扫瞄报告(OTL.txt)贴上。
(OTL扫瞄需时较长,请耐心等候)
请贴上以下报告:
a. AdwCleaner删毒报告。
b. MBAM扫毒报告。
c. OTL.txt扫瞄报告。
作者: SILVESTERABEND 发布时间: 2013-12-25
删除左啦跟住点？
作者: chiuken 发布时间: 2013-12-25
跟#10帖做扫瞄同贴上报告。
作者: SILVESTERABEND 发布时间: 2013-12-25
okkkk
protection-log-2013-12-08.txt (2.02 KB)
AdwCleaner[S0].txt (5.36 KB)
MBAM-log-2013-12-08 (21-03-26).txt (6.78 KB)
OTL.Txt (133.68 KB)
protection-log-2013-12-08.txt (2.02 KB)
2013-12-8 09:08 PM, 下载次数: 3
AdwCleaner[S0].txt (5.36 KB)
2013-12-8 09:08 PM, 下载次数: 2
MBAM-log-2013-12-08 (21-03-26).txt (6.78 KB)
2013-12-8 09:08 PM, 下载次数: 2
OTL.Txt (133.68 KB)
2013-12-8 09:08 PM, 下载次数: 2
作者: chiuken 发布时间: 2013-12-25
引用:原帖由 chiuken 於 2013-12-8 09:08 PM 发表
okkkk
双按OTL.exe > 将下列档案copy & paste 到Custom Scans/Fixes框架内 > 按左上角[Run Fix];执行fix前要关闭浏览器。okkkk
成功fixed (删除)会有通知(Fix complete! Click OK to open the fix log.) >按OK > 重启电脑。
请将fixed log贴上。
引用:
:OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0E7B197B-A3DE-4FD4-A19A-1EECF791D16F}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{0E7B197B-A3DE-4FD4-A19A-1EECF791D16F}: "URL" = http://www.baidu.com/s?tn=mswin_oem_dg&ie=utf-8&word={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=105&systemid=473&v=a9397-135&apn_uid=1610540051314223&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=105&systemid=473&v=a9397-135&apn_uid=1610540051314223&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKCU\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=105&systemid=473&v=a9397-135&apn_uid=1610540051314223&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
IE - HKCU\..\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}: "URL" = http://www.baidu.com/s?tn=mswin_oem_dg&ie=utf-8&word={searchTerms}
FF:64bit: - HKLM\Software\MozillaPlugins\@qvod.com/QvodShare: C:\Program Files (x86)\QvodPlayer\npShareModule_x64.dll (Shenzhen QVOD Technology Co.,Ltd)
FF - HKLM\Software\MozillaPlugins\@qvod.com/QvodInsert: C:\Program Files (x86)\QvodPlayer\npQvodInsert.dll (Shenzhen QVOD Technology Co.,Ltd)
FF - HKLM\Software\MozillaPlugins\@qvod.com/QvodShare: C:\Program Files (x86)\QvodPlayer\npShareModule.dll (Shenzhen QVOD Technology Co.,Ltd)
FF - HKCU\Software\MozillaPlugins\duowan.com/Checker: C:\Program Files (x86)\Common Files\duowan\yy\YYSSO\1.0.0.3\npChecker.dll (广州多玩信息技术有限公司)
FF - HKCU\Software\MozillaPlugins\KuaiWanInsert: C:\Program Files (x86)\QvodPlayer\AddIn\KWWebgame\npKWWebGame.dll (Shenzhen QVOD Technology Co.,Ltd)
CHR - default_search_provider: Ask.com (Enabled)
CHR - default_search_provider: search_url = http://dts.search.ask.com/sr?src=crb&gct=ds&appid=105&systemid=473&v=a9397-135&apn_uid=1610540051314223&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
CHR - plugin: 360MMPlugin (Enabled) = C:\Program Files (x86)\360\360safe\MobileMgr\np360MMPlugIn.dll
CHR - plugin: 360\u5B89\u5168\u536B\u58EB \u5FEB\u901F\u767B\u5F55 (Enabled) = C:\Program Files (x86)\360\360safe\Utils\npaxlogin.dll
CHR - plugin: Thunder DapCtrl NPAPI Plugin (Enabled) = C:\Program Files (x86)\Common Files\Thunder Network\KanKan\npDapCtrl.3.1.0.7.(237).dll
CHR - plugin: QvodInsert (Enabled) = C:\Program Files (x86)\QvodPlayer\npQvodInsert.dll
CHR - plugin: QvodShareModule (Enabled) = C:\Program Files (x86)\QvodPlayer\npShareModule.dll
CHR - plugin: XunLei Plugin (Enabled) = C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll
O2:64bit: - BHO: (no name) - {004B0726-A010-4ABF-8556-FCDB7F1FCA1E} - No CLSID value found.
O2:64bit: - BHO: (QvodExtend) - {A8502600-B272-4F68-A67B-A0305D46D298} - C:\Program Files (x86)\QvodPlayer\QvodExtend\5.0.95.0\QvodExtend_x64.dll (Shenzhen QVOD Technology Co.,Ltd)
O2 - BHO: (QQDownload IE Left Helper) - {00000000-12C9-4305-82F9-43058F20E8D2} - C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper01.dll File not found
O2 - BHO: (no name) - {56746166-BC44-45f4-ADCE-52EAC919BB79} - No CLSID value found.
O2 - BHO: (QvodExtend) - {A8502600-B272-4F68-A67B-A0305D46D297} - C:\Program Files (x86)\QvodPlayer\QvodExtend\5.0.95.0\QvodExtend.dll (Shenzhen QVOD Technology Co.,Ltd)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O8:64bit: - Extra context menu item: &V妏蚚Vagaa阺蜃狟婥 - C:\Vagaa\Data\vg.htm File not found
O8:64bit: - Extra context menu item: &使用QQ旋风下载 - C:\Program Files (x86)\Tencent\QQDownload\geturl.htm File not found
O8:64bit: - Extra context menu item: &使用QQ旋风下载全部链接 - C:\Program Files (x86)\Tencent\QQDownload\getAllurl.htm File not found
O8:64bit: - Extra context menu item: &使用QQ旋风离线下载 - C:\Program Files (x86)\Tencent\QQDownload\xfofflinedown.htm File not found
O8:64bit: - Extra context menu item: Foxy 下载 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/download.htm File not found
O8:64bit: - Extra context menu item: Foxy 搜寻 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/search.htm File not found
O8:64bit: - Extra context menu item: 收藏到搜狐影音 - Reg Error: Value error. File not found
O8:64bit: - Extra context menu item: 使用快播按图找片 - C:\Program Files (x86)\QvodPlayer\AddIn\ImgSeed.htm ()
O8 - Extra context menu item: &V妏蚚Vagaa阺蜃狟婥 - C:\Vagaa\Data\vg.htm File not found
O8 - Extra context menu item: &使用QQ旋风下载 - C:\Program Files (x86)\Tencent\QQDownload\geturl.htm File not found
O8 - Extra context menu item: &使用QQ旋风下载全部链接 - C:\Program Files (x86)\Tencent\QQDownload\getAllurl.htm File not found
O8 - Extra context menu item: &使用QQ旋风离线下载 - C:\Program Files (x86)\Tencent\QQDownload\xfofflinedown.htm File not found
O8 - Extra context menu item: Foxy 下载 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/download.htm File not found
O8 - Extra context menu item: Foxy 搜寻 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/search.htm File not found
O8 - Extra context menu item: 收藏到搜狐影音 - Reg Error: Value error. File not found
O8 - Extra context menu item: 使用快播按图找片 - C:\Program Files (x86)\QvodPlayer\AddIn\ImgSeed.htm ()
O16 - DPF: {643D82AD-AE93-40DA-AD4A-A306E6B5A4F6} https://www.avaonline.com.tw/Facebook/FTAtxCtrl.cab (FTAtxCtrl Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{95A8DBD6-EB73-4831-B9AD-D516140DD7BA}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{95A8DBD6-EB73-4831-B9AD-D516140DD7BA}: NameServer = 101.226.4.6,114.114.114.114
O20:64bit: - AppInit_DLLs: (c:\progra~2\movies~1\safety~1\x64\safety~2.dll) - File not found
O20 - AppInit_DLLs: (c:\progra~2\movies~1\safety~1\safety~2.dll) - File not found
:Commands
[PURITY]
[emptyjava]
[EMPTYFLASH]
[reboot]
:OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0E7B197B-A3DE-4FD4-A19A-1EECF791D16F}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{0E7B197B-A3DE-4FD4-A19A-1EECF791D16F}: "URL" = http://www.baidu.com/s?tn=mswin_oem_dg&ie=utf-8&word={searchTerms}
IE:64bit: - HKLM\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=105&systemid=473&v=a9397-135&apn_uid=1610540051314223&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=105&systemid=473&v=a9397-135&apn_uid=1610540051314223&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR
IE - HKCU\..\SearchScopes\{52db1893-8a90-4192-aede-08e00b8f8473}: "URL" = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=105&systemid=473&v=a9397-135&apn_uid=1610540051314223&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
IE - HKCU\..\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}: "URL" = http://www.baidu.com/s?tn=mswin_oem_dg&ie=utf-8&word={searchTerms}
FF:64bit: - HKLM\Software\MozillaPlugins\@qvod.com/QvodShare: C:\Program Files (x86)\QvodPlayer\npShareModule_x64.dll (Shenzhen QVOD Technology Co.,Ltd)
FF - HKLM\Software\MozillaPlugins\@qvod.com/QvodInsert: C:\Program Files (x86)\QvodPlayer\npQvodInsert.dll (Shenzhen QVOD Technology Co.,Ltd)
FF - HKLM\Software\MozillaPlugins\@qvod.com/QvodShare: C:\Program Files (x86)\QvodPlayer\npShareModule.dll (Shenzhen QVOD Technology Co.,Ltd)
FF - HKCU\Software\MozillaPlugins\duowan.com/Checker: C:\Program Files (x86)\Common Files\duowan\yy\YYSSO\1.0.0.3\npChecker.dll (广州多玩信息技术有限公司)
FF - HKCU\Software\MozillaPlugins\KuaiWanInsert: C:\Program Files (x86)\QvodPlayer\AddIn\KWWebgame\npKWWebGame.dll (Shenzhen QVOD Technology Co.,Ltd)
CHR - default_search_provider: Ask.com (Enabled)
CHR - default_search_provider: search_url = http://dts.search.ask.com/sr?src=crb&gct=ds&appid=105&systemid=473&v=a9397-135&apn_uid=1610540051314223&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
CHR - plugin: 360MMPlugin (Enabled) = C:\Program Files (x86)\360\360safe\MobileMgr\np360MMPlugIn.dll
CHR - plugin: 360\u5B89\u5168\u536B\u58EB \u5FEB\u901F\u767B\u5F55 (Enabled) = C:\Program Files (x86)\360\360safe\Utils\npaxlogin.dll
CHR - plugin: Thunder DapCtrl NPAPI Plugin (Enabled) = C:\Program Files (x86)\Common Files\Thunder Network\KanKan\npDapCtrl.3.1.0.7.(237).dll
CHR - plugin: QvodInsert (Enabled) = C:\Program Files (x86)\QvodPlayer\npQvodInsert.dll
CHR - plugin: QvodShareModule (Enabled) = C:\Program Files (x86)\QvodPlayer\npShareModule.dll
CHR - plugin: XunLei Plugin (Enabled) = C:\Program Files (x86)\Thunder Network\Thunder\Data\npxunlei1.0.0.2.dll
O2:64bit: - BHO: (no name) - {004B0726-A010-4ABF-8556-FCDB7F1FCA1E} - No CLSID value found.
O2:64bit: - BHO: (QvodExtend) - {A8502600-B272-4F68-A67B-A0305D46D298} - C:\Program Files (x86)\QvodPlayer\QvodExtend\5.0.95.0\QvodExtend_x64.dll (Shenzhen QVOD Technology Co.,Ltd)
O2 - BHO: (QQDownload IE Left Helper) - {00000000-12C9-4305-82F9-43058F20E8D2} - C:\Program Files (x86)\Tencent\QQDownload\QQIEHelper01.dll File not found
O2 - BHO: (no name) - {56746166-BC44-45f4-ADCE-52EAC919BB79} - No CLSID value found.
O2 - BHO: (QvodExtend) - {A8502600-B272-4F68-A67B-A0305D46D297} - C:\Program Files (x86)\QvodPlayer\QvodExtend\5.0.95.0\QvodExtend.dll (Shenzhen QVOD Technology Co.,Ltd)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O8:64bit: - Extra context menu item: &V妏蚚Vagaa阺蜃狟婥 - C:\Vagaa\Data\vg.htm File not found
O8:64bit: - Extra context menu item: &使用QQ旋风下载 - C:\Program Files (x86)\Tencent\QQDownload\geturl.htm File not found
O8:64bit: - Extra context menu item: &使用QQ旋风下载全部链接 - C:\Program Files (x86)\Tencent\QQDownload\getAllurl.htm File not found
O8:64bit: - Extra context menu item: &使用QQ旋风离线下载 - C:\Program Files (x86)\Tencent\QQDownload\xfofflinedown.htm File not found
O8:64bit: - Extra context menu item: Foxy 下载 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/download.htm File not found
O8:64bit: - Extra context menu item: Foxy 搜寻 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/search.htm File not found
O8:64bit: - Extra context menu item: 收藏到搜狐影音 - Reg Error: Value error. File not found
O8:64bit: - Extra context menu item: 使用快播按图找片 - C:\Program Files (x86)\QvodPlayer\AddIn\ImgSeed.htm ()
O8 - Extra context menu item: &V妏蚚Vagaa阺蜃狟婥 - C:\Vagaa\Data\vg.htm File not found
O8 - Extra context menu item: &使用QQ旋风下载 - C:\Program Files (x86)\Tencent\QQDownload\geturl.htm File not found
O8 - Extra context menu item: &使用QQ旋风下载全部链接 - C:\Program Files (x86)\Tencent\QQDownload\getAllurl.htm File not found
O8 - Extra context menu item: &使用QQ旋风离线下载 - C:\Program Files (x86)\Tencent\QQDownload\xfofflinedown.htm File not found
O8 - Extra context menu item: Foxy 下载 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/download.htm File not found
O8 - Extra context menu item: Foxy 搜寻 - res://C:\Users\0User\AppData\Local\Temp\Rar$EXa0.443\foxyxiazai\Foxy.exe/search.htm File not found
O8 - Extra context menu item: 收藏到搜狐影音 - Reg Error: Value error. File not found
O8 - Extra context menu item: 使用快播按图找片 - C:\Program Files (x86)\QvodPlayer\AddIn\ImgSeed.htm ()
O16 - DPF: {643D82AD-AE93-40DA-AD4A-A306E6B5A4F6} https://www.avaonline.com.tw/Facebook/FTAtxCtrl.cab (FTAtxCtrl Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{95A8DBD6-EB73-4831-B9AD-D516140DD7BA}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{95A8DBD6-EB73-4831-B9AD-D516140DD7BA}: NameServer = 101.226.4.6,114.114.114.114
O20:64bit: - AppInit_DLLs: (c:\progra~2\movies~1\safety~1\x64\safety~2.dll) - File not found
O20 - AppInit_DLLs: (c:\progra~2\movies~1\safety~1\safety~2.dll) - File not found
:Commands
[PURITY]
[emptyjava]
[EMPTYFLASH]
[reboot]
作者: SILVESTERABEND 发布时间: 2013-12-25
多谢版主现已恢复正常
作者: chiuken 发布时间: 2013-12-25
引用:原帖由 chiuken 於 2013-12-9 08:05 PM 发表
多谢版主现已恢复正常
You're welcome。多谢版主现已恢复正常
1. 如果系统运作正常,请跟#8帖移除Hijackthis/ComboFix等等的扫瞄软件。
http://computer.uwants.com/viewthread.php?tid=12999541&extra=page%3D1
2. 请用CCleaner Free删除temp files/登录档,用Windows预载defrag功能,做番1次磁碟重组(defrag)。
3. 请将[病毒移除]主题改为[已解决]。Tks.
作者: SILVESTERABEND 发布时间: 2013-12-25
相关阅读 更多
热门阅读
-
office 2019专业增强版最新2021版激活秘钥/序列号/激活码推荐 附激活工具
阅读：74
-
如何安装mysql8.0
阅读：31
-
Word快速设置标题样式步骤详解
阅读：28
-
20+道必知必会的Vue面试题（附答案解析）
阅读：37
-
HTML如何制作表单
阅读：22
-
百词斩可以改天数吗？当然可以，4个步骤轻松修改天数！
阅读：31
-
ET文件格式和XLS格式文件之间如何转化？
阅读：24
-
react和vue的区别及优缺点是什么
阅读：121
-
支付宝人脸识别如何关闭?
阅读：21
-
腾讯微云怎么修改照片或视频备份路径?
阅读：28
