遭遇sqmapi32.dll,kvmxfma.dll,rarjdpi.dll,google.dll,a0b1.dll等

最新推荐文章于 2023-10-17 10:45:34 发布
最新推荐文章于 2023-10-17 10:45:34 发布
阅读量2.5k 收藏
点赞数
分类专栏： pe_xscan 系统维护 文章标签： microsoft c windows system module service
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/Purpleendurer/article/details/1871409
版权

遭遇sqmapi32.dll,kvmxfma.dll,rarjdpi.dll,google.dll,a0b1.dll等

endurer 原创
2007-11-07 第1版

中招后IE工作不正常，电脑不定期弹广告窗口，打开任意网页顶部都出现推荐FireFox的信息；

启动程序时会报告 svchost.exe 出错，无法运行cmd.exe、WinRAR……进入安全模式时出现蓝屏错误：Unknown hard error


pe_xscan 07-08-30 by Purple Endurer
2007-11-6 16:54:44
Windows XP Service Pack 2(5.1.2600)
管理员用户组


[System Process] * 0
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/WINDOWS/Explorer.EXE * 1436 | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 6.00.2900.2180 | Windows Explorer | (C) Microsoft Corporation. All rights reserved. | 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | explorer | EXPLORER.EXE
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/WINDOWS/system32/RavExt.dll | 2007-10-22 9:53:0 | Rising AntiVirus 2008 | 20.00 | Rising Shell Ext Module | Rising Corp. All rights reserved. | 20.0.0.16 | Beijing Rising Technology Co., Ltd.| ? | Beijing Rising Technology Co., Ltd. | RavExt.DLL
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/qdshm.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22


C:/WINDOWS/system32/ctfmon.exe * 1764 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | CTF Loader | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | CTFMON | CTFMON.EXE
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/WINDOWS/System32/svchost.exe * 1820 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Generic Host Process for Win32 Services | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | svchost.exe | svchost.exe
    c:/progra~1/wqjm/gatw.dll | 2007-11-5 11:32:6 |   AdDm | 5, 0, 1, 1 | AdDm | Copyright ? 2006 | 5, 0, 1, 1 |  |  | AdDm | AdDm.exe
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    c:/progra~1/wqjm/lfyb.dll | 2007-11-5 11:32:6 | stdvote | 5, 0, 1, 1 | stdvote | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdvote.dll
    c:/progra~1/wqjm/cwps.dll | 2007-11-5 11:32:6 |  | 5, 0, 1, 1 | stdseg | Copyright ? 2007 | 5, 0, 1, 1 |  |  | stdseg | 
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22


C:/WINDOWS/System32/svchost.exe * 1832 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Generic Host Process for Win32 Services | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | svchost.exe | svchost.exe
    c:/windows/system32/conime/conime.dll | 2007-11-5 11:22:4 | pc inetinfo | 1, 0, 0, 1 | 用于支持windows网络服务的除错。 | (C) Microsoft Corporation. All rights reserved. | 1, 0, 0, 1 | Microsoft Corporation |  | upnp | inetinfo.dll


C:/WINDOWS/system32/0b911.exe * 1864 | 2007-10-25 9:29:58 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Windows Progman Group Converter | Copyright Zhongsou(C) 2005 | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | GrpConv| ?


C:/WINDOWS/system32/nvsvc32.exe * 124 | 2006-10-22 12:22:0 | NVIDIA Driver Helper Service, Version 93.71 | 6.14.10.9371 | NVIDIA Driver Helper Service, Version 93.71 | (C) NVIDIA Corporation. All rights reserved. | 6.14.10.9371 | NVIDIA Corporation| ? | NVSVC | nvsvc32.exe
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/WINDOWS/system32/winlogon.exe * 340 | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Windows NT Logon Application | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | winlogon | WINLOGON.EXE
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/qdshm.dll | 2007-11-6 14:51:6


C:/WINDOWS/system32/svchost.exe * 352 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Generic Host Process for Win32 Services | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | svchost.exe | svchost.exe
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22


C:/WINDOWS/system32/rundll32.exe * 2368 | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Run a DLL as an App | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | rundll | RUNDLL.EXE
    C:/WINDOWS/system32/0a1.dll | 2007-10-29 10:3:36 |  Player 动态链接库 | 1, 0, 0, 3 | Player 动态链接库 |    版权所有 (C) 2006 | 1, 0, 0, 3 |   | ? | Player | Player.dll
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/Program Files/Internet Explorer/IEXPLORE.EXE * 2260 | 2004-8-17 20:0:0 | Microsoft(R) Windows(R) Operating System | 6.00.2900.2180 | Internet Explorer | (C) Microsoft Corporation. All rights reserved. | 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | iexplore | IEXPLORE.EXE
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/WINDOWS/system32/a0b1.dll | 2007-10-29 10:3:36 | IEHpr Module | 1, 0, 0, 2 | IEHpr Module | Copyright 2007 | 1, 0, 0, 2 |  |  | IEHpr | IEHpr.DLL
    C:/WINDOWS/system32/msurlpar.dll | 2007-9-25 10:5:12 | MSURLPAR Module | 1, 0, 0, 1 | MSURLPAR Module | Copyright 2007 | 1, 0, 0, 1 | Statistics |  | MSURLPAR | MSURLPAR.DLL
    C:/WINDOWS/system32/gujxvpzjcsrlu.dll | 2007-11-2 14:57:4 |  | 1.0.0.0 |  |  | 1.0.0.0 |  |  |  | 
    C:/WINDOWS/ILOVEG~1/google.dll | 2007-11-6 8:11:38 | Microsoft Module | 4, 0, 2, 111 | Microsoft Module | (C) Microsoft Corporation. All rights reserved. | 4, 0, 2, 111 | Microsoft Corporation |  | Microsoft | Microsoft.DLL
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22
    C:/Program Files/雪冰五笔速成/msdxm.ocx | 2001-6-8 12:18:16 | DirectShow | 6.4.07.1119 | Windows Media Player 2 ActiveX Control | Copyright (C) 1992-1999 Microsoft Corp. | 6.4.07.1119 | Microsoft Corporation| ? | MSDXM.OCX | MSDXM.OCX


C:/WINDOWS/system32/conime.exe * 1188 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Console IME | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | Console | CONIME.EXE
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/PROGRAM FILES/RISING/RAV/Ravmond.exe * 3444 | 2007-11-5 15:45:8 | Rising AntiVirus 2008 | 20.00 | Rising Realtime Moniter | Rising Corp. All rights reserved. | 20.0.0.59 | Beijing Rising Technology Co., Ltd.| ? | Beijing Rising Technology Co., Ltd. | ravmond.exe
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22


C:/Program Files/Rising/Rav/RAVMON.EXE * 2548 | 2007-10-22 9:53:40 | Rising AntiVirus 2008 | 20.00 | Rising realtime monitor shell | Rising Corp. All rights reserved. | 20.0.0.98 | Beijing Rising Technology Co., Ltd.| ? | Beijing Rising Technology Co., Ltd. | RavTray.EXE
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/Program Files/Rising/Rav/Rsguilib.dll | 2007-10-22 9:53:16 | Rising AntiVirus 2008 | 20, 0, 0, 0 | Rising GUI Library Loader | Rising Corp. All rights reserved. | 20, 0, 0, 79 | Beijing Rising Technology Co., Ltd.| ? | Beijing Rising Technology Co., Ltd. | RsGuiLib.dll


d:/Program Files/Rising/AntiSpyware/runiep.exe * 2404 | 2007-11-6 16:52:2 | runiep 应用程序 | 4.00 | Rising AntiSpyware Monitor | Rising Corp. All rights reserved. | 4.0.0.18 | Beijing Rising Technology Co., Ltd. |  | Beijing Rising Technology Co., Ltd. | runiep.exe
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


O2 - BHO Invoke Class - {3AA0903B-1E13-4865-B114-15792D413C41} - C:/WINDOWS/system32/a0b1.dll
O2 - BHO MSURL Class - {6CDD9D1F-7501-4B0F-90CD-5ADA4F15E6E8} - C:/WINDOWS/system32/msurlpar.dll
O2 - BHO  - {98836B5F-4E24-4207-952D-A5EA63C7A645} - C:/WINDOWS/system32/gujxvpzjcsrlu.dll
O2 - BHO google Class - {CE7C3CF0-4B15-11D1-ABED-709549C10531} - C:/WINDOWS/ILOVEG~1/google.dll
O3 - IE工具栏: 快捷工具条3.1 - {BE830FD4-E393-417F-9F4B-CC70ABB3384C} - C:/WINDOWS/system32/IETool.dll
O3 - IE工具栏: PopocyToolBar - {691AFBC1-3C46-406D-AD22-EB3A0F665FC1} - C:/Program Files/HXNotify/PopocyBar.dll
O3 - IE工具栏:  - {8E718888-423F-11D2-876E-00A0C9082467} - C:/Program Files/雪冰五笔速成/msdxm.ocx


O23 - 服务: ADProt (ADProt) - C:/WINDOWS/system32/drivers/ADProt.sys(系统)


O23 - 服务: bvor (Windows bvor RunThem) - C:/WINDOWS/System32/svchost.exe -k netsvcs -> C:/PROGRA~1/wqjm/gatw.dll | 2007-11-5 11:32:6 |   AdDm | 5, 0, 1, 1 | AdDm | Copyright ? 2006 | 5, 0, 1, 1 |  |  | AdDm | AdDm.exe(自动)


O23 - 服务: conime (conime) - C:/WINDOWS/System32/svchost.exe -k netsvcs -> C:/WINDOWS/system32/conime/conime.dll | 2007-11-5 11:22:4 | pc inetinfo | 1, 0, 0, 1 | 用于支持windows网络服务的除错。 | (C) Microsoft Corporation. All rights reserved. | 1, 0, 0, 1 | Microsoft Corporation |  | upnp | inetinfo.dll(自动)


O23 - 服务: ms_2fax (ms_2fax) - C:/WINDOWS/system32/0b911.exe | 2007-10-25 9:29:58 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Windows Progman Group Converter | Copyright Zhongsou(C) 2005 | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | GrpConv| ?(自动)


O23 - 服务: Provisioning (Shell Logs and Alerts) - C:/WINDOWS/system32/drpcoev.exe | 2007-11-6 10:50:14(自动)


O23 - 服务: wuauserv (Automatic Updates) - C:/WINDOWS/system32/drivers/svchost.exe | 2007-11-6 10:50:24(自动)


O24 - ShlExecHook: [6] - {6D47B341-43DF-4563-753F-345FFA3157D6} = C:/WINDOWS/system32/kvmxfma.dll


O24 - ShlExecHook: [4] - {4598FF45-DA60-F48A-BC43-10AC47853D54} = C:/WINDOWS/system32/rarjdpi.dll
紫郢剑侠
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
专栏目录
sqmapi.dll文件
04-02
sqmapi.dll文件
sqmapi.dll
最新发布
12-27
sqmapi
system.exe,alien32.exe,ftsKetNt.7ps,SysKetNt.Sys, iexpe.exe等1
caobihole
01-05 897
system.exe,alien32.exe,ftsKetNt.7ps,SysKetNt.Sys, iexpe.exe等1 endurer 原创 2009-01-05 第1版 昨天中午，一位网友说他电脑中IE首页被强制修改为hxxp://www.35029.com，输入法无法切换，请偶帮忙检修。 使用pe_xscan 扫描log并分析，发现如下可疑项(进程模块部分有省略)： p...
又遇Trojan.PSW.Win32.QQPass,Trojan.PSW.Win32.GameOL等1
caobihole
06-13 173
又遇Trojan.PSW.Win32.QQPass,Trojan.PSW.Win32.GameOL等1 endurer 原创 2008-06-13 第1版 一位朋友说最近他的电脑中的瑞星杀毒软件和防火墙软件的实时监控图标不见了，电脑反应很慢，请偶帮忙检修。 下载 pe_xscan 扫描 log 并分析，发现如下可疑项： pe_xscan 08-04-26 by Purple Endur...
遭遇EBUIITI.SYS,QBNLWVQCIMQBOS.DLL,JSRLDZLVYUNXEO.DLL,JSRLDZLVYUNXEO.DLL等
Purpleendurer@CSDN
11-08 1475
遭遇EBUIITI.SYS,QBNLWVQCIMQBOS.DLL,JSRLDZLVYUNXEO.DLL,JSRLDZLVYUNXEO.DLL等endurer 原创2007-11-08 第1版昨天，一位网友说的电脑中的AntiVir不停地报告发现病毒，工作速度很慢，让偶通过QQ帮他检修。检查AntiVir的日志，如下（去掉了重复的病毒项目）：/---Exported events:2
遭遇Backdoor.Gpigeon.2007.ca,Trojan-PSW.Win32.QQRob.lg,Backdoor.Win32.Agent.bcn等1
caobihole
06-20 215
endurer 原创2007-06-20 第1版 这两天晚上都在忙着帮一位网友清除电脑中的病毒~ 先用网友电脑中原有的 HijackThis 扫描 log，发现如下可疑项：/---Logfile of HijackThis v1.99.1Scan saved at 23:35:36, on 2005-12-30Platform: Windows XP SP2 (WinNT 5.01.2600)...
IE主页被改为http://www.9348.cn?原来是QQ2009.exe,TXP1atform.exe,svchoct.exe,klan.sys等作怪1
热门推荐
Purpleendurer@CSDN
06-13 1万+
endurer 原创2009-06-13 第1版今晚一位朋友说他的电脑可能中毒了，系统反应很慢，IE主页被改为hxxp://www.9348.cn，不定期弹广告窗口，在桌面上添加广告快捷方式，硬盘双击打不开……请偶帮忙检修。下载 pe_xscan扫描 log并分析，发现如下可疑项（进程模块部分有省略）：/---pe_xscan 09-04-28 by Purple Endurer200
Windows系统丢失sqmapi.dll文件导致程序无法运行问题
file
10-17 146
其实很多用户玩单机游戏或者安装软件的时候就出现过这种问题，如果是新手第一时间会认为是软件或游戏出错了，其实并不是这样，其主要原因就是你电脑系统的该dll文件丢失了或没有安装一些系统软件平台所需要的动态链接库，这时你可以下载这个sqmapi.dll文件(挑选合适的版本文件)把它放入到程序或系统目录中，当我们执行某一个.exe程序时，相应的DLL文件就会被调用，因此将缺失的文件放回到原目录之后就能打开你的软件或游戏了.那么出现sqmapi.dll丢失要怎么解决？
sqmapi.rar
09-19
sqmapi.rar
IE浏览器插件.zip
07-28
│ iedkcs32.dll │ ieframe.dll │ iertutil.dll │ iesetup.dll │ IEShims.dll │ ieui.dll │ imgutil.dll │ inetcpl.cpl │ inseng.dll │ jscript9.dll │ jsdbgui.dll │ jsdebuggeride.dll │...
系统安装引导(WinNTSetup) V3.7.5 Final 官方正式版.zip
07-14
* 在线复制系统文件后再复制sqmapi.dll等文件。 * 删除EFI引导文件的创建当没有选为EFI系统分区引导驱动器的情况下。 WinNTSetup3.4 Beta 1 (更新日期：2014年4月10日） -添加支持XP/2003 的WIM文件格式安装   ...
遭遇 kupqytu.dll/Trojan.Win32.Undef.fzq,kmwprnp.dll/Trojan.Win32.Agent.lmo 等1
Purpleendurer@CSDN
06-03 1034
遭遇 kupqytu.dll/Trojan.Win32.Undef.fzq,kmwprnp.dll/Trojan.Win32.Agent.lmo 等1endurer 原创2008-06-03 第1版今天，上回遭遇 gjlbj.vya / Trojan.Win32.Agent.kle的网友（详见：遭遇 gjlbj.vya / Trojan.Win32.Agent.kle 等）说病毒又复发了~
再见avwgdmn.dll,LYLoadbr.exe,LYLoadar.exe,LYLoador.exe等
Purpleendurer@CSDN
11-03 1913
再见avwgdmn.dll,LYLoadbr.exe,LYLoadar.exe,LYLoador.exe等endurer 原创2007-11-03 第1版昨晚，一位网友说他的电脑中的瑞星提示并清除了一些病毒，心里不太放心，让偶再帮忙检查。把 pe_xscan 传给他扫描 log传回来分析，在 log 发现如下可疑启动项：/=====pe_xscan 07-08-30 by Purp
pe_xscan 做了2处改进
Purpleendurer@CSDN
01-15 1741
对LOG着色代码作了2处改进 使LOG更容易阅读 
11-26>pe_xscan 改进 O10-Winsock LSP(Layered Service Provider)项的显示内容
Purpleendurer@CSDN
11-26 1593
近来有不少朋友询问 pe_xscan 的 log 中的项目 与 瑞星卡卡上网安全助手 之间的对应的关系，看来有必要参照 瑞星卡卡上网安全助手 改进一下 pe_xscan 的log的显示内容……就从 O10 -Winsock LSP 项开始罢。新的log显示格式为：O10 - LSP: MSAFD Tcpip [TCP/IP] = C:/WINDOWS/system32/mswsock.dl
08-03-03>pe_xscan 增加对文件类型扩展名隐藏性的检测
Purpleendurer@CSDN
03-03 1442
在原有的检测常用文件类型的关联程序的功能基础上，增加了对EXE、COM、SCR、CMD、JS、VBS等常用可执行文件类型扩展名隐藏性的检测。
pe_xscan作了3点更新
Purpleendurer@CSDN
03-27 1431
pe_xscan作了3点更新
pe_xscan 修正文件时间的一个bug
Purpleendurer@CSDN
12-29 1420
修正了获取文件最新时间(创建时间或修改时间)的一个bug

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

紫郢剑侠

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值