症状:启动资源管理器同时弹出浏览器并且自动访问www.1717kan.cn,不启动资源管理器连续使用浏览器都没问题。 解决办法:下载System Repair Engineer(SREng)(全名System Repair Engineer,可到各大下载站搜索下载)
O23 - Service: KSD2Service - Unknown owner - E:\WINDOWS\system32\ravsvc.exe 安全模式...打开注册表编辑器,展开:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services 搜索 KSD2Service 删除... 删除 E:\WINDOWS\system32\ravsvc.exe
修复 R3 - URLSearchHook: SrchHook Class - {6E1BC898-505A-44f4-BC88-BCE43016AC96} - E:\WINDOWS\system32\BarSea.dll O1 - Hosts: 125.65.77.72 www.qo263.com O2 - BHO: netup - {0A44CDEC-87D0-4D4D-BF97-DE9AFB9B104A} - E:\WINDOWS\system32\netiup.dll O2 - BHO: ChajianHelper Class - {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} - E:\WINDOWS\system32\SYSREA~1.DLL O2 - BHO: AdPopup - {11F09AFD-75AD-4E51-AB43-E09E9351CE16} - E:\Program Files\Common Files\CPUSH\cpush0.dll O2 - BHO: 5940bar BHO - {15953528-6C01-481A-8DB4-01888FB85B7D} - E:\WINDOWS\system32\CN5940~1.DLL O2 - BHO: WinSearch - {27E96DE0-8211-42CF-9A1E-FA6246A95B77} - E:\WINDOWS\system32\winsearch.dll O2 - BHO: SYM - {36BF6929-DCBC-4CCD-A620-C5E3BBA77B95} - E:\WINDOWS\system32\usercrd.dll O2 - BHO: Macrosoft Class - {58DB541D-F15A-4e95-A5D9-5DF5EE13920C} - c:\windows\system32\winlogin.dll (file missing) O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - E:\WINDOWS\SYSTEM32\stdup.dll O2 - BHO: SrchHook Class - {6E1BC898-505A-44f4-BC88-BCE43016AC96} - E:\WINDOWS\system32\BarSea.dll O2 - BHO: (no name) - {930FD663-1720-4E8A-BC62-681A8BCEA428} - E:\WINDOWS\system32\adsnwer.dll O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - E:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll (file missing) O2 - BHO: internet explorer helper - {F7911E65-B01C-4A58-AEC7-53085ECA70A5} - E:\WINDOWS\system32\mshlink.dll O3 - Toolbar: 5940bar - {1A45F0FB-9586-4742-8343-8732C7AAFB88} - E:\WINDOWS\system32\CN5940~1.DLL O4 - HKLM\..\Run: [rzt] E:\WINDOWS\Intel\rundll32.exe O4 - HKCU\..\Run: [DrvMon.exe] E:\WINDOWS\system32\DrvMon.exe O21 - SSODL: NetWork - {FC055E7D-8144-4706-8586-2F1C49FCDD2A} - E:\WINDOWS\system32\cmspl.dll 删除 E:\WINDOWS\system32\BarSea.dll E:\WINDOWS\system32\netiup.dll E:\WINDOWS\system32\SYSREA~1.DLL E:\Program Files\Common Files\CPUSH\cpush0.dll E:\WINDOWS\system32\CN5940~1.DLL E:\WINDOWS\system32\winsearch.dll E:\WINDOWS\system32\usercrd.dll E:\WINDOWS\SYSTEM32\stdup.dll E:\WINDOWS\system32\BarSea.dll E:\WINDOWS\system32\adsnwer.dll E:\WINDOWS\system32\mshlink.dll E:\WINDOWS\Intel\rundll32.exe E:\WINDOWS\system32\DrvMon.exe E:\WINDOWS\system32\cmspl.dll 电脑软硬件应用网站长的建议:如果以上步骤无法为你解决问题请在正常模式用HijackThis扫描一份日志到我的邮箱我给你处理。邮件地址:jinjunhe@21cn.com,主题千万注明电脑门诊多少号读者。不然可能会当垃圾邮件拒收!提示:以上提到的软件到各大下载站搜索都可以找到并下载!以上文件可能你电脑中没有,处理有的即可。
然后用超级兔子清理王在安全模式下卸载流氓软件(可到各大下载站搜索下载)...
|