遭遇sqmapi32.dll,kvmxfma.dll,rarjdpi.dll,google.dll,a0b1.dll等

最新推荐文章于 2021-05-25 09:02:00 发布
最新推荐文章于 2021-05-25 09:02:00 发布
阅读量2.6k 收藏
点赞数
分类专栏： pe_xscan 系统维护 文章标签： microsoft c windows system module service
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/Purpleendurer/article/details/1871409
版权

遭遇sqmapi32.dll,kvmxfma.dll,rarjdpi.dll,google.dll,a0b1.dll等

endurer 原创
2007-11-07 第1版

中招后IE工作不正常，电脑不定期弹广告窗口，打开任意网页顶部都出现推荐FireFox的信息；

启动程序时会报告 svchost.exe 出错，无法运行cmd.exe、WinRAR……进入安全模式时出现蓝屏错误：Unknown hard error


pe_xscan 07-08-30 by Purple Endurer
2007-11-6 16:54:44
Windows XP Service Pack 2(5.1.2600)
管理员用户组


[System Process] * 0
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/WINDOWS/Explorer.EXE * 1436 | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 6.00.2900.2180 | Windows Explorer | (C) Microsoft Corporation. All rights reserved. | 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | explorer | EXPLORER.EXE
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/WINDOWS/system32/RavExt.dll | 2007-10-22 9:53:0 | Rising AntiVirus 2008 | 20.00 | Rising Shell Ext Module | Rising Corp. All rights reserved. | 20.0.0.16 | Beijing Rising Technology Co., Ltd.| ? | Beijing Rising Technology Co., Ltd. | RavExt.DLL
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/qdshm.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22


C:/WINDOWS/system32/ctfmon.exe * 1764 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | CTF Loader | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | CTFMON | CTFMON.EXE
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/WINDOWS/System32/svchost.exe * 1820 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Generic Host Process for Win32 Services | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | svchost.exe | svchost.exe
    c:/progra~1/wqjm/gatw.dll | 2007-11-5 11:32:6 |   AdDm | 5, 0, 1, 1 | AdDm | Copyright ? 2006 | 5, 0, 1, 1 |  |  | AdDm | AdDm.exe
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    c:/progra~1/wqjm/lfyb.dll | 2007-11-5 11:32:6 | stdvote | 5, 0, 1, 1 | stdvote | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdvote.dll
    c:/progra~1/wqjm/cwps.dll | 2007-11-5 11:32:6 |  | 5, 0, 1, 1 | stdseg | Copyright ? 2007 | 5, 0, 1, 1 |  |  | stdseg | 
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22


C:/WINDOWS/System32/svchost.exe * 1832 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Generic Host Process for Win32 Services | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | svchost.exe | svchost.exe
    c:/windows/system32/conime/conime.dll | 2007-11-5 11:22:4 | pc inetinfo | 1, 0, 0, 1 | 用于支持windows网络服务的除错。 | (C) Microsoft Corporation. All rights reserved. | 1, 0, 0, 1 | Microsoft Corporation |  | upnp | inetinfo.dll


C:/WINDOWS/system32/0b911.exe * 1864 | 2007-10-25 9:29:58 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Windows Progman Group Converter | Copyright Zhongsou(C) 2005 | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | GrpConv| ?


C:/WINDOWS/system32/nvsvc32.exe * 124 | 2006-10-22 12:22:0 | NVIDIA Driver Helper Service, Version 93.71 | 6.14.10.9371 | NVIDIA Driver Helper Service, Version 93.71 | (C) NVIDIA Corporation. All rights reserved. | 6.14.10.9371 | NVIDIA Corporation| ? | NVSVC | nvsvc32.exe
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/WINDOWS/system32/winlogon.exe * 340 | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Windows NT Logon Application | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | winlogon | WINLOGON.EXE
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/qdshm.dll | 2007-11-6 14:51:6


C:/WINDOWS/system32/svchost.exe * 352 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Generic Host Process for Win32 Services | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | svchost.exe | svchost.exe
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22


C:/WINDOWS/system32/rundll32.exe * 2368 | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Run a DLL as an App | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | rundll | RUNDLL.EXE
    C:/WINDOWS/system32/0a1.dll | 2007-10-29 10:3:36 |  Player 动态链接库 | 1, 0, 0, 3 | Player 动态链接库 |    版权所有 (C) 2006 | 1, 0, 0, 3 |   | ? | Player | Player.dll
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/Program Files/Internet Explorer/IEXPLORE.EXE * 2260 | 2004-8-17 20:0:0 | Microsoft(R) Windows(R) Operating System | 6.00.2900.2180 | Internet Explorer | (C) Microsoft Corporation. All rights reserved. | 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | iexplore | IEXPLORE.EXE
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/WINDOWS/system32/a0b1.dll | 2007-10-29 10:3:36 | IEHpr Module | 1, 0, 0, 2 | IEHpr Module | Copyright 2007 | 1, 0, 0, 2 |  |  | IEHpr | IEHpr.DLL
    C:/WINDOWS/system32/msurlpar.dll | 2007-9-25 10:5:12 | MSURLPAR Module | 1, 0, 0, 1 | MSURLPAR Module | Copyright 2007 | 1, 0, 0, 1 | Statistics |  | MSURLPAR | MSURLPAR.DLL
    C:/WINDOWS/system32/gujxvpzjcsrlu.dll | 2007-11-2 14:57:4 |  | 1.0.0.0 |  |  | 1.0.0.0 |  |  |  | 
    C:/WINDOWS/ILOVEG~1/google.dll | 2007-11-6 8:11:38 | Microsoft Module | 4, 0, 2, 111 | Microsoft Module | (C) Microsoft Corporation. All rights reserved. | 4, 0, 2, 111 | Microsoft Corporation |  | Microsoft | Microsoft.DLL
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22
    C:/Program Files/雪冰五笔速成/msdxm.ocx | 2001-6-8 12:18:16 | DirectShow | 6.4.07.1119 | Windows Media Player 2 ActiveX Control | Copyright (C) 1992-1999 Microsoft Corp. | 6.4.07.1119 | Microsoft Corporation| ? | MSDXM.OCX | MSDXM.OCX


C:/WINDOWS/system32/conime.exe * 1188 | 2004-8-17 12:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | Console IME | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | Console | CONIME.EXE
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


C:/PROGRAM FILES/RISING/RAV/Ravmond.exe * 3444 | 2007-11-5 15:45:8 | Rising AntiVirus 2008 | 20.00 | Rising Realtime Moniter | Rising Corp. All rights reserved. | 20.0.0.59 | Beijing Rising Technology Co., Ltd.| ? | Beijing Rising Technology Co., Ltd. | ravmond.exe
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/WINDOWS/system32/sqmapi32.dll | 2007-11-6 15:21:22


C:/Program Files/Rising/Rav/RAVMON.EXE * 2548 | 2007-10-22 9:53:40 | Rising AntiVirus 2008 | 20.00 | Rising realtime monitor shell | Rising Corp. All rights reserved. | 20.0.0.98 | Beijing Rising Technology Co., Ltd.| ? | Beijing Rising Technology Co., Ltd. | RavTray.EXE
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll
    C:/Program Files/Rising/Rav/Rsguilib.dll | 2007-10-22 9:53:16 | Rising AntiVirus 2008 | 20, 0, 0, 0 | Rising GUI Library Loader | Rising Corp. All rights reserved. | 20, 0, 0, 79 | Beijing Rising Technology Co., Ltd.| ? | Beijing Rising Technology Co., Ltd. | RsGuiLib.dll


d:/Program Files/Rising/AntiSpyware/runiep.exe * 2404 | 2007-11-6 16:52:2 | runiep 应用程序 | 4.00 | Rising AntiSpyware Monitor | Rising Corp. All rights reserved. | 4.0.0.18 | Beijing Rising Technology Co., Ltd. |  | Beijing Rising Technology Co., Ltd. | runiep.exe
    C:/WINDOWS/system32/allatl.dll | 2007-11-6 15:21:22
    C:/WINDOWS/system32/dh3atl.dll | 2007-11-6 14:51:20
    C:/WINDOWS/system32/myatl.dll | 2007-11-6 14:51:18
    C:/WINDOWS/system32/qqsgatl.dll | 2007-11-6 14:51:10
    C:/WINDOWS/system32/wlatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/msatl.dll | 2007-11-6 14:51:14
    C:/WINDOWS/system32/addrz_thelp.dll | 2007-11-6 14:51:6
    C:/WINDOWS/system32/dhatl.dll | 2007-11-6 14:51:12
    c:/progra~1/wqjm/jdwz.dll | 2007-11-5 11:32:6 | stdstub | 5, 0, 1, 1 | stdstub | Copyright 2005 | 5, 0, 1, 1 |  |  | stdstub | 
    c:/progra~1/wqjm/oibe.dll | 2007-11-5 11:32:6 | stdplay | 5, 0, 1, 1 | stdplay | Copyright ? 2006 | 5, 0, 1, 1 |  |  | stdvote | stdplay.dll


O2 - BHO Invoke Class - {3AA0903B-1E13-4865-B114-15792D413C41} - C:/WINDOWS/system32/a0b1.dll
O2 - BHO MSURL Class - {6CDD9D1F-7501-4B0F-90CD-5ADA4F15E6E8} - C:/WINDOWS/system32/msurlpar.dll
O2 - BHO  - {98836B5F-4E24-4207-952D-A5EA63C7A645} - C:/WINDOWS/system32/gujxvpzjcsrlu.dll
O2 - BHO google Class - {CE7C3CF0-4B15-11D1-ABED-709549C10531} - C:/WINDOWS/ILOVEG~1/google.dll
O3 - IE工具栏: 快捷工具条3.1 - {BE830FD4-E393-417F-9F4B-CC70ABB3384C} - C:/WINDOWS/system32/IETool.dll
O3 - IE工具栏: PopocyToolBar - {691AFBC1-3C46-406D-AD22-EB3A0F665FC1} - C:/Program Files/HXNotify/PopocyBar.dll
O3 - IE工具栏:  - {8E718888-423F-11D2-876E-00A0C9082467} - C:/Program Files/雪冰五笔速成/msdxm.ocx


O23 - 服务: ADProt (ADProt) - C:/WINDOWS/system32/drivers/ADProt.sys(系统)


O23 - 服务: bvor (Windows bvor RunThem) - C:/WINDOWS/System32/svchost.exe -k netsvcs -> C:/PROGRA~1/wqjm/gatw.dll | 2007-11-5 11:32:6 |   AdDm | 5, 0, 1, 1 | AdDm | Copyright ? 2006 | 5, 0, 1, 1 |  |  | AdDm | AdDm.exe(自动)


O23 - 服务: conime (conime) - C:/WINDOWS/System32/svchost.exe -k netsvcs -> C:/WINDOWS/system32/conime/conime.dll | 2007-11-5 11:22:4 | pc inetinfo | 1, 0, 0, 1 | 用于支持windows网络服务的除错。 | (C) Microsoft Corporation. All rights reserved. | 1, 0, 0, 1 | Microsoft Corporation |  | upnp | inetinfo.dll(自动)


O23 - 服务: ms_2fax (ms_2fax) - C:/WINDOWS/system32/0b911.exe | 2007-10-25 9:29:58 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Windows Progman Group Converter | Copyright Zhongsou(C) 2005 | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | GrpConv| ?(自动)


O23 - 服务: Provisioning (Shell Logs and Alerts) - C:/WINDOWS/system32/drpcoev.exe | 2007-11-6 10:50:14(自动)


O23 - 服务: wuauserv (Automatic Updates) - C:/WINDOWS/system32/drivers/svchost.exe | 2007-11-6 10:50:24(自动)


O24 - ShlExecHook: [6] - {6D47B341-43DF-4563-753F-345FFA3157D6} = C:/WINDOWS/system32/kvmxfma.dll


O24 - ShlExecHook: [4] - {4598FF45-DA60-F48A-BC43-10AC47853D54} = C:/WINDOWS/system32/rarjdpi.dll
紫郢剑侠
关注
专栏目录
sqmapi.dll文件
04-02
sqmapi.dll文件
sqmapi.dll
最新发布
12-27
sqmapi
遭遇 kupqytu.dll/Trojan.Win32.Undef.fzq,kmwprnp.dll/Trojan.Win32.Agent.lmo 等1
Purpleendurer@CSDN
06-03 1065
遭遇 kupqytu.dll/Trojan.Win32.Undef.fzq,kmwprnp.dll/Trojan.Win32.Agent.lmo 等1endurer 原创2008-06-03 第1版今天，上回遭遇 gjlbj.vya / Trojan.Win32.Agent.kle的网友（详见：遭遇 gjlbj.vya / Trojan.Win32.Agent.kle 等）说病毒又复发了~
遭遇EBUIITI.SYS,QBNLWVQCIMQBOS.DLL,JSRLDZLVYUNXEO.DLL,JSRLDZLVYUNXEO.DLL等
Purpleendurer@CSDN
11-08 1511
遭遇EBUIITI.SYS,QBNLWVQCIMQBOS.DLL,JSRLDZLVYUNXEO.DLL,JSRLDZLVYUNXEO.DLL等endurer 原创2007-11-08 第1版昨天，一位网友说的电脑中的AntiVir不停地报告发现病毒，工作速度很慢，让偶通过QQ帮他检修。检查AntiVir的日志，如下（去掉了重复的病毒项目）：/---Exported events:2
又遇Trojan.PSW.Win32.QQPass,Trojan.PSW.Win32.GameOL等1
caobihole
06-13 211
又遇Trojan.PSW.Win32.QQPass,Trojan.PSW.Win32.GameOL等1 endurer 原创 2008-06-13 第1版 一位朋友说最近他的电脑中的瑞星杀毒软件和防火墙软件的实时监控图标不见了，电脑反应很慢，请偶帮忙检修。 下载 pe_xscan 扫描 log 并分析，发现如下可疑项： pe_xscan 08-04-26 by Purple Endur...
system.exe,alien32.exe,ftsKetNt.7ps,SysKetNt.Sys, iexpe.exe等1
caobihole
01-05 977
system.exe,alien32.exe,ftsKetNt.7ps,SysKetNt.Sys, iexpe.exe等1 endurer 原创 2009-01-05 第1版 昨天中午，一位网友说他电脑中IE首页被强制修改为hxxp://www.35029.com，输入法无法切换，请偶帮忙检修。 使用pe_xscan 扫描log并分析，发现如下可疑项(进程模块部分有省略)： p...
conda 和 pip 常用命令+ python虚拟环境
zhaojiafu的博客
05-25 833
文章目录1、镜像源：2、pip一些常用命令：3、conda一些常用命令：4、tensorflow的安装：5、3070显卡安装1.14版本的tensorflow： 1、镜像源： 阿里云 http://mirrors.aliyun.com/pypi/simple/ 中国科技大学 https://pypi.mirrors.ustc.edu.cn/simple/ 豆瓣(douban) http://pypi.douban.com/simple/ 清华大学 https://pypi.tuna.tsinghua.
sqmapi.rar
09-19
sqmapi.rar
IE浏览器插件.zip
07-28
│ iedkcs32.dll │ ieframe.dll │ iertutil.dll │ iesetup.dll │ IEShims.dll │ ieui.dll │ imgutil.dll │ inetcpl.cpl │ inseng.dll │ jscript9.dll │ jsdbgui.dll │ jsdebuggeride.dll │...
遭遇Trojan.DL.Win32.Autorun.yuz,Trojan.Win32.Inject.gh,Trojan.Win32.Agent.zsq等
caobihole
10-23 316
遭遇Trojan.DL.Win32.Autorun.yuz,Trojan.Win32.Inject.gh,Trojan.Win32.Agent.zsq等 endurer 原创2007-10-23 第1版 pe_xscan 07-08-30 by Purple Endurer2007-10-22 13:13:44Windows XP Service Pack 2(5.1.2600)管理员用户组...
遭遇Backdoor.Gpigeon.2007.ca,Trojan-PSW.Win32.QQRob.lg,Backdoor.Win32.Agent.bcn等1
caobihole
06-20 227
endurer 原创2007-06-20 第1版 这两天晚上都在忙着帮一位网友清除电脑中的病毒~ 先用网友电脑中原有的 HijackThis 扫描 log，发现如下可疑项：/---Logfile of HijackThis v1.99.1Scan saved at 23:35:36, on 2005-12-30Platform: Windows XP SP2 (WinNT 5.01.2600)...
IE主页被改为http://www.9348.cn?原来是QQ2009.exe,TXP1atform.exe,svchoct.exe,klan.sys等作怪1
热门推荐
Purpleendurer@CSDN
06-13 1万+
endurer 原创2009-06-13 第1版今晚一位朋友说他的电脑可能中毒了，系统反应很慢，IE主页被改为hxxp://www.9348.cn，不定期弹广告窗口，在桌面上添加广告快捷方式，硬盘双击打不开……请偶帮忙检修。下载 pe_xscan扫描 log并分析，发现如下可疑项（进程模块部分有省略）：/---pe_xscan 09-04-28 by Purple Endurer200
系统安装引导(WinNTSetup) V3.7.5 Final 官方正式版.zip
07-14
* 在线复制系统文件后再复制sqmapi.dll等文件。 * 删除EFI引导文件的创建当没有选为EFI系统分区引导驱动器的情况下。 WinNTSetup3.4 Beta 1 (更新日期：2014年4月10日） -添加支持XP/2003 的WIM文件格式安装   ...
再见avwgdmn.dll,LYLoadbr.exe,LYLoadar.exe,LYLoador.exe等
Purpleendurer@CSDN
11-03 1965
再见avwgdmn.dll,LYLoadbr.exe,LYLoadar.exe,LYLoador.exe等endurer 原创2007-11-03 第1版昨晚，一位网友说他的电脑中的瑞星提示并清除了一些病毒，心里不太放心，让偶再帮忙检查。把 pe_xscan 传给他扫描 log传回来分析，在 log 发现如下可疑启动项：/=====pe_xscan 07-08-30 by Purp
pe_xscan 做了2处改进
Purpleendurer@CSDN
01-15 1771
对LOG着色代码作了2处改进 使LOG更容易阅读 
11-26>pe_xscan 改进 O10-Winsock LSP(Layered Service Provider)项的显示内容
Purpleendurer@CSDN
11-26 1625
近来有不少朋友询问 pe_xscan 的 log 中的项目 与 瑞星卡卡上网安全助手 之间的对应的关系，看来有必要参照 瑞星卡卡上网安全助手 改进一下 pe_xscan 的log的显示内容……就从 O10 -Winsock LSP 项开始罢。新的log显示格式为：O10 - LSP: MSAFD Tcpip [TCP/IP] = C:/WINDOWS/system32/mswsock.dl
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

紫郢剑侠

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值