遭遇 gjlbj.vya / Trojan.Win32.Agent.kle 等1

最新推荐文章于 2024-07-24 23:05:54 发布
最新推荐文章于 2024-07-24 23:05:54 发布
阅读量1.1k 收藏
点赞数
分类专栏： 系统维护 文章标签： microsoft windows system c api dll
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/Purpleendurer/article/details/2443219
版权

遭遇 gjlbj.vya / Trojan.Win32.Agent.kle 等1

endurer 原创
2008-05-13 第1版
一位网友说他的电脑中的AntiVir不停的报告发现病毒，请偶帮忙检修。

下载 pe_xscan 扫描 log 并 分析，发现如下可疑项（进程模块有省略）：

/===
pe_xscan 08-05-09 by Purple Endurer 
2008-5-13 11:46:55 
Windows XP Service Pack 2(5.1.2600) 
MSIE:6.0.2900.2180 
管理员用户组 
正常模式 
[System Process] * 0 
　　 C:/WINDOWS/system32/fdzzb.fqz | 1630-6-3 16:33:38 
　　 C:/WINDOWS/system32/fvjbv.dll | 2008-4-18 13:37:32 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/fhhlr.dll | 2008-4-18 14:56:5 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/dgxvl.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/vypnd.dll | 2008-4-18 13:41:42 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/hkbzp.dll | 2008-4-18 14:56:5 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/gjlbj.vya | 2008-1-9 8:59:13 
　　 C:/WINDOWS/system32/ybdtb.dll | 2008-4-18 13:41:41 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/knpfn.dll | 2008-4-18 14:41:12 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fpkltop.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/xhcdlgh.dll | 2008-4-25 1:5:42 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/jtopxst.dll | 2008-4-25 1:5:43 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fhrkmik.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/xzjceac.dll | 2008-4-29 15:53:50 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/jlvoqmo.dll | 2008-4-29 15:53:52 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
 C:/WINDOWS/System32/BoBoTurbo/BoBoTurbo.exe * 1456 | 2007-10-11 10:6:54 | BoBo P2P多媒体网络点播/广播/直播系统 加速器 | 1, 4, 0, 0 | BoBo P2P多媒体网络点播/广播/直播系统 加速器 | Copyright (C) 2005-2007 17BoBo.com | 1, 4, 1011, 2 | 广州易播信息科技有限公司 | 17BoBo.com | BoBoTurbo | BoBoTurbo.EXE 
C:/WINDOWS/Explorer.EXE* 336 | 2004-8-17 4:0:0 | Microsoft(R) Windows(R) Operating System | 6.00.2900.3156 | Windows Explorer | (C) Microsoft Corporation. All rights reserved. | 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234) | Microsoft Corporation| ? | explorer | EXPLORER.EXE 
　　 C:/WINDOWS/system32/gjlbj.vya | 2008-1-9 8:59:13 
　　 C:/WINDOWS/system32/fdzzb.fqz | 1630-6-3 16:33:38 
　　 C:/WINDOWS/system32/dgxvl.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/fpkltop.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/fhrkmik.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/QTVYP.dll | 2004-8-17 4:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/CmdLineExt03.dll | 2006-10-6 3:27:12 
D:/Program Files/Avira/AntiVir PersonalEdition Classic/avgnt.exe* 580 | 2008-4-18 15:6:43 | AntiVir Workstation | 8.00.00.07 | Antivirus System Tray Tool | Copyright ? 2008 Avira GmbH. All rights reserved. | 8.00.00.07 | Avira GmbH | AntiVir? is a registered trademark of Avira GmbH, Germany. | avsystray.exe | avgnt.exe 
　　 C:/WINDOWS/system32/gjlbj.vya | 2008-1-9 8:59:13 
　　 C:/WINDOWS/system32/ybdtb.dll | 2008-4-18 13:41:41 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/knpfn.dll | 2008-4-18 14:41:12 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fhrkmik.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/xzjceac.dll | 2008-4-29 15:53:50 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/jlvoqmo.dll | 2008-4-29 15:53:52 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fpkltop.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/xhcdlgh.dll | 2008-4-25 1:5:42 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/jtopxst.dll | 2008-4-25 1:5:43 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/dgxvl.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/vypnd.dll | 2008-4-18 13:41:42 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/hkbzp.dll | 2008-4-18 14:56:5 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fdzzb.fqz | 1630-6-3 16:33:38 
　　 C:/WINDOWS/system32/fvjbv.dll | 2008-4-18 13:37:32 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/fhhlr.dll | 2008-4-18 14:56:5 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
C:/WINDOWS/System32/ctfmon.exe* 724 | 2004-8-17 4:0:0 | Microsoft? Windows? Operating System | 5.1.2600.2180 | CTF Loader | ? Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | CTFMON | CTFMON.EXE 
　　 C:/WINDOWS/system32/fhrkmik.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/xzjceac.dll | 2008-4-29 15:53:50 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/jlvoqmo.dll | 2008-4-29 15:53:52 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fpkltop.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/xhcdlgh.dll | 2008-4-25 1:5:42 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/jtopxst.dll | 2008-4-25 1:5:43 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/dgxvl.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/vypnd.dll | 2008-4-18 13:41:42 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/hkbzp.dll | 2008-4-18 14:56:5 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fdzzb.fqz | 1630-6-3 16:33:38 
　　 C:/WINDOWS/system32/fvjbv.dll | 2008-4-18 13:37:32 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/fhhlr.dll | 2008-4-18 14:56:5 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/gjlbj.vya | 2008-1-9 8:59:13 
　　 C:/WINDOWS/system32/ybdtb.dll | 2008-4-18 13:41:41 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/knpfn.dll | 2008-4-18 14:41:12 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
C:/WINDOWS/System32/rundll32.exe* 1512 | 2004-8-17 4:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Run a DLL as an App | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | rundll | RUNDLL.EXE 
　　 C:/WINDOWS/system32/QTVYP.dll | 2004-8-17 4:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fhrkmik.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/xzjceac.dll | 2008-4-29 15:53:50 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/jlvoqmo.dll | 2008-4-29 15:53:52 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fpkltop.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/xhcdlgh.dll | 2008-4-25 1:5:42 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/jtopxst.dll | 2008-4-25 1:5:43 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/dgxvl.dll | 2004-8-17 4:0:0 
　　 C:/WINDOWS/system32/vypnd.dll | 2008-4-18 13:41:42 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/hkbzp.dll | 2008-4-18 14:56:5 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/fdzzb.fqz | 1630-6-3 16:33:38 
　　 C:/WINDOWS/system32/fvjbv.dll | 2008-4-18 13:37:32 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | Advanced Windows 32 Base API | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation| ? | advapi32.dll | advapi32.dll 
　　 C:/WINDOWS/system32/fhhlr.dll | 2008-4-18 14:56:5 | Microsoft(R) Windows(R) Operating System | 5.1.2600.3119 | Windows NT BASE API Client DLL | (C) Microsoft Corporation. All rights reserved. | 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301) | Microsoft Corporation| ? | kernel32 | kernel32 
　　 C:/WINDOWS/system32/gjlbj.vya | 2008-1-9 8:59:13 
O22 - SharedTaskScheduler: () - {851D962F-A63E-51E9-63FB-0C941DA62FB8} = C:/WINDOWS/system32/QTVNP.dll
O22 - SharedTaskScheduler: () - {62EA63FC-730B-2EB6-30C8-D961EA730C95} = C:/WINDOWS/system32/YACUW.dll
O22 - SharedTaskScheduler: () - {2FB730C9-40D8-FB83-0D95-A63EB740C952} = C:/WINDOWS/system32/WZBTV.dll
O22 - SharedTaskScheduler: () - {D962EA73-EB74-962F-B740-41DA52EB740D} = C:/WINDOWS/system32/NPSUM.dll
O22 - SharedTaskScheduler: () - {FB830C95-0D95-B840-D961-63FB740D962F} = C:/WINDOWS/system32/BDGXA.dll
O22 - SharedTaskScheduler: () - {EA73FB74-FB84-A73F-C841-51EA62FB841D} = C:/WINDOWS/system32/MORTL.dll
O22 - SharedTaskScheduler: () - {FB74FC85-0C95-B740-C952-62FB730C952E} = C:/WINDOWS/system32/NPRUL.dll
O22 - SharedTaskScheduler: () - {C851D962-DA63-851E-A63F-30C941D962FB} = C:/WINDOWS/system32/CEHJB.dll
O22 - SharedTaskScheduler: () - {C850D962-DA62-851D-A63E-30C841D962FB} = C:/WINDOWS/system32/WYBSV.dll
O22 - SharedTaskScheduler: () - {730C841D-851E-30C9-51EA-EB74FC851EA7} = C:/WINDOWS/system32/DFIKC.dll
O22 - SharedTaskScheduler: () - {63FB730C-740D-3FB8-40D9-DA63EB740D96} = C:/WINDOWS/system32/KNPRJ.dll
O22 - SharedTaskScheduler: () - {1EA62FB8-3FC7-EA72-FC84-952DA63FC851} = C:/WINDOWS/system32/HKMEG.dll
O22 - SharedTaskScheduler: () - {B740C851-C952-740D-952E-2FB830C951EA} = C:/WINDOWS/system32/VXACU.dll
O22 - SharedTaskScheduler: () - {D962EA63-EA73-962E-B730-40D951EA730C} = C:/WINDOWS/system32/JLOQI.dll
O22 - SharedTaskScheduler: () - {41D952EA-62EA-1DA5-2FB7-C840C952EB74} = C:/WINDOWS/system32/EHJBD.dll
O22 - SharedTaskScheduler: () - {EA63EB74-FB84-A63F-B841-51EA62FB841D} = C:/WINDOWS/system32/MOQTK.dll
O22 - SharedTaskScheduler: () - {0D951EA7-2EB6-D961-EB73-841C952EB740} = C:/WINDOWS/system32/CFHZB.dll
O22 - SharedTaskScheduler: () - {A63FB740-B841-63FC-841D-1EA72FB840D9} = C:/WINDOWS/system32/EGJLD.dll
O22 - SharedTaskScheduler: () - {62FB730C-740D-2FB8-40D9-DA63EB740D96} = C:/WINDOWS/system32/IKNPH.dll
O22 - SharedTaskScheduler: () - {52EA62FB-63FB-2EA6-3FC7-C951DA63FC85} = C:/WINDOWS/system32/TWYQS.dll
O22 - SharedTaskScheduler: () - {1EA62FB8-3FC7-EA72-FC84-952DA63FC841} = C:/WINDOWS/system32/ZCEWY.dll
O22 - SharedTaskScheduler: () - {40C841DA-51E9-0C94-1EA6-B74FC851EA73} = C:/WINDOWS/system32/KMOGI.dll
O22 - SharedTaskScheduler: () - {FC850D96-1DA6-C851-DA63-730C841DA63F} = C:/WINDOWS/system32/PSUXO.dll
O22 - SharedTaskScheduler: () - {EA62EB74-FB83-A63E-B840-51E962FB841D} = C:/WINDOWS/system32/MOQIK.dll
O22 - SharedTaskScheduler: () - {FC840D96-1DA5-C850-DA62-730B841DA63F} = C:/WINDOWS/system32/DGIAC.dll
O22 - SharedTaskScheduler: () - {C851D962-DA62-851E-A63F-30C840D962FB} = C:/WINDOWS/system32/SUXZR.dll
O22 - SharedTaskScheduler: () - {EB73FC85-0C94-B74F-C951-62FA730C952E} = C:/WINDOWS/system32/ORTLN.dll
O22 - SharedTaskScheduler: () - {841D952E-962F-41DA-62FB-FC850D962FB8} = C:/WINDOWS/system32/MORTL.dll
O22 - SharedTaskScheduler: () - {D961EA63-EA72-962E-B73F-40D851EA730C} = C:/WINDOWS/system32/DFIZC.dll
O22 - SharedTaskScheduler: () - {EB74FC85-0C95-B740-C952-62FB730C952E} = C:/WINDOWS/system32/QTVYP.dll
O22 - SharedTaskScheduler: () - {EA73FB84-FC85-A730-C851-52EB63FC851E} = C:/WINDOWS/system32/GILNF.dll
O22 - SharedTaskScheduler: () - {1DA62EB7-2FB8-DA63-FB84-851E962EB740} = C:/WINDOWS/system32/JLOQI.dll
O22 - SharedTaskScheduler: () - {EA72FB84-FC84-A73F-C850-52EA63FC851E} = C:/WINDOWS/system32/OQTKN.dll
O22 - SharedTaskScheduler: () - {740D851E-952E-40D9-52EB-FB840C952EA7} = C:/WINDOWS/system32/XACFW.dll
O22 - SharedTaskScheduler: () - {63FC740D-841D-3FC8-41DA-EA73FB841DA6} = C:/WINDOWS/system32/MPRUL.dll
O22 - SharedTaskScheduler: () - {C851D962-DA63-851E-A63F-30C941DA63FC} = C:/WINDOWS/system32/GILNF.dll
O22 - SharedTaskScheduler: () - {3FC740D9-41D9-FC84-1DA5-A73FB740D962} = C:/WINDOWS/system32/ZBEVY.dll
O22 - SharedTaskScheduler: () - {B841C951-D952-841D-962E-3FB830C952EB} = C:/WINDOWS/system32/BEGJA.dll
O22 - SharedTaskScheduler: () - {2EB63FC8-30C8-EB73-0C94-962EA63FC851} = C:/WINDOWS/system32/ACFWZ.dll
O22 - SharedTaskScheduler: () - {52EA63FB-73FB-2EB6-30C8-D951DA63FC85} = C:/WINDOWS/system32/BEGYA.dll
O22 - SharedTaskScheduler: () - {B840C851-C952-840D-952E-2FB830C952EB} = C:/WINDOWS/system32/FIKME.dll
O22 - SharedTaskScheduler: () - {3FC840C9-40D9-FC84-1D96-A63FB740D962} = C:/WINDOWS/system32/RTWYQ.dll
O22 - SharedTaskScheduler: () - {0C941DA6-1EA6-C951-EA72-740C851EA63F} = C:/WINDOWS/system32/YADUX.dll
O22 - SharedTaskScheduler: () - {0C951DA6-1EA7-C952-EA73-740D851EA63F} = C:/WINDOWS/system32/MORTL.dll
O22 - SharedTaskScheduler: () - {40D951DA-51EA-0D95-2EA7-B740C851EA73} = C:/WINDOWS/system32/YADFX.dll
O22 - SharedTaskScheduler: () - {3FC740C9-40D8-FC84-1D95-A63EB740D962} = C:/WINDOWS/system32/PRULO.dll
O22 - SharedTaskScheduler: () - {30C941DA-51EA-0C95-1EA7-B740C841DA63} = C:/WINDOWS/system32/TWYBS.dll
O22 - SharedTaskScheduler: () - {0D961EA7-2EB7-D962-EB74-841D952EB740} = C:/WINDOWS/system32/WZBEV.dll
O22 - SharedTaskScheduler: () - {30C841DA-51E9-0C94-1EA6-B74FC841DA63} = C:/WINDOWS/system32/DGIAC.dll
O22 - SharedTaskScheduler: () - {841C952E-962E-41D9-62FA-FC840D962FB8} = C:/WINDOWS/system32/OQTKN.dll
O22 - SharedTaskScheduler: () - {1EA72FB8-3FC8-EA73-FC85-952EA63FC841} = C:/WINDOWS/system32/XACFW.dll
O22 - SharedTaskScheduler: () - {730B841D-851D-30C8-51E9-EB73FC851EA7} = C:/WINDOWS/system32/XZCTW.dll
O22 - SharedTaskScheduler: () - {952EA63F-A730-52EB-730C-0D961EA730C8} = C:/WINDOWS/system32/PRUWO.dll
O22 - SharedTaskScheduler: () - {41DA52EA-62EB-1DA6-2FB7-C841C952EB74} = C:/WINDOWS/system32/QTVYP.dll
O22 - SharedTaskScheduler: () - {62FA730C-740C-2FB7-40D8-DA62EB740D96} = C:/WINDOWS/system32/WYBSV.dll
O22 - SharedTaskScheduler: () - {B740C851-C952-740D-952E-2FB830C851EA} = C:/WINDOWS/system32/TVYAS.dll
O23 - 服务: BoBoTurbo (BoBoTurbo) - C:/WINDOWS/system32/boboturbo/boboturbo.exe | 2007-10-11 10:6:54 | BoBo P2P多媒体网络点播/广播/直播系统 加速器 | 1, 4, 0, 0 | BoBo P2P多媒体网络点播/广播/直播系统 加速器 | Copyright (C) 2005-2007 17BoBo.com | 1, 4, 1011, 2 | 广州易播信息科技有限公司 | 17BoBo.com | BoBoTurbo | BoBoTurbo.EXE(自动)
===/

(未完待续)

紫郢剑侠
关注
  • 0
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
专栏目录
turbo c.exe
04-29
返璞归真，一个地道的c编辑器，想重温c梦的，不能缺少这个~~~
BoBoTurbo.EXE,100多个svhost.exe/1
Purpleendurer@CSDN
04-21 1536
BoBoTurbo.EXE,100多个svhost.exe1endurer 原创2008-04-21 第1版开机后多次提示 NSIS 出错，虚拟内存不足，电脑反应很慢。好不容易打开任务管理器一看，居然有170多个进程，其中大部分是 svchost.exe。运行 cmd.exe 打开命令提示符窗口。把 BoBoTurbo.EXE、explorer.exe 及 所有属于用户 user 的 sv
再谈www.71791.com劫持浏览器问题(第3版)
Purpleendurer@CSDN
05-03 1万+
endurer　原创2006-05-10　第3版　补充一个实例2006-05-06　第2版　补充卡巴斯基的反应2006-05-03　第1版有网友遇到71791.com浏览器劫持问题，与我以前写的分析和解决方法（见：关于www.71791.com的问题 ）不同，并把HijackThis扫描的log发了过来。在log中，发现如下可疑项目：  操作系统：  Windows X
遭遇my123.com劫持浏览器和yok
Purpleendurer@CSDN
11-28 4575
endurer 原创2006-11-28 第1版一位网友的电脑，最近江民杀毒软件总示发现yok*.*感染病毒，开机时会提示找不到文件，让偶帮忙检查。打开IE，发现首页被设置为 hxxp://www.my123.com，到瑞星网站下载my123.com专杀工具，到 http://endurer.ys168.com 下载 HijackThis, ProcView。用瑞星my123.co
一个下载木马的网站
Purpleendurer@CSDN
08-21 2504
endurer　原创2006-08-21　第1版网站首页插入如下代码：/------------＜iframe src="hxxp://www.ac***66.cn/8***8/index.htm" width="0" height="0" frameborder="0"＞＜/iframe＞------------/hxxp://www.ac***66.cn/8***8/index.h
遭遇 gjlbj.vya / Trojan.Win32.Agent.kle 等2
caobihole
05-15 87
遭遇 Trojan.Win32.Agent.kle 等2 endurer 原创2008-05-15 第1版 （续1） 让网友进入如下处理： 把 O23项对应的服务停止并禁用 用IceSword强制删除红色标记的文件 安装瑞星卡卡安全助手删除O22和O23项 用WinRAR 删除Windows临时文件夹，IE临时文件夹，c:/windows/prefetch 中可以删除的文件。 重启...
遭遇 kupqytu.dll/Trojan.Win32.Undef.fzq,kmwprnp.dll/Trojan.Win32.Agent.lmo 等1
caobihole
06-03 106
遭遇 kupqytu.dll/Trojan.Win32.Undef.fzq,kmwprnp.dll/Trojan.Win32.Agent.lmo 等1 endurer 原创2008-06-03 第1版 今天，上回遭遇 gjlbj.vya / Trojan.Win32.Agent.kle的网友（详见：遭遇 gjlbj.vya / Trojan.Win32.Agent.kle 等）说病毒又复发了~...
Vue设置全局loading（加载动画）功能：
SunPeng的博客
03-04 1万+
Vue设置全局loading（加载动画）功能：
用Node.js做一个火车票查询小工具
Destiny的专栏
08-14 2826
TrainTicket12306这是一款用于在铁道部12306官网爬取车票等信息的node.js应用。An app to query Tickects and other information from 123
广东省深圳市耀华实验学校2020学年高一物理下学期第二次月考试题.doc
10-13
而下落高度h = (1/2)*g*t²，故hA/hB = (tA/tB)² = (√3/1)² = 3/1。 总结：这份试卷涵盖了高中物理中曲线运动、匀速圆周运动、向心加速度、功与功率、摩擦力做功、重力做功的平均功率和瞬时功率、平抛运动等多个...
wireguard-vyatta-ubnt:适用于Ubiquiti设备的WireGuard
03-19
适用于Ubiquiti的WireGuard 该存储库包含Vyatta配置文件，以将WireGuard与Ubiquiti Networks设备集成。 请参阅以下有关如何安装列出的预构建deb软件包的说明。...curl -OL https://github.com/WireGuard/wireguard-vya
weixin-sell-portal:微信公众号前端页面项目，实现连接后台数据，实现微信登陆、支付等，与上一个项目“weixin-sell-backend“衔接
05-01
vue-sell Vue.js 高仿饿了么外卖 App ... server_name vya8m7.natappfree.cc; access_log D:\\nginx\\nginx-1.13.8\logs\access.log combined; location / { #前端项目路径 root D:\wamp64\www\sell; index ind
rainbow-poem:关于彩虹诗
03-16
彩虹诗 ...bhdbhbhd hdhsbhs ueegybj shruthi pandian shruthi shurhti vya 诗1 shruthishruthishruthi shruthi shruthi shruthi shruthi shruthishruthishruthishruhtisshruhtisssssshhruhtishrut
signature=2f5f7776a12b849050f88bd5b555c78c,yarn.lock · wolfx/verdaccio-server - Gitee.com
热门推荐
weixin_28723171的博客
05-29 1万+
# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.# yarn lockfile v1"@verdaccio/commons-api@9.7.1", "@verdaccio/commons-api@^9.7.1":version "9.7.1"resolved "https://registry.npm.taobao.o...
硅纪元视角 | 语音克隆突破：微软VALL-E 2，Deepfake新纪元！
guijiyuantech的博客
07-24 686
此外，VALL-E 2 的创新技术，如重复感知采样和分组代码建模，为提高语音合成的稳定性和效率提供了新的解决方案，这可能对其他领域的语音处理技术产生深远影响。同时，开源AI模型在数据隐私和安全性方面的优势，也为用户提供了更多的选择和保障。综上所述，AI Playground的推出不仅为用户提供了一个功能丰富的AI应用平台，也为AI技术的进一步发展和应用提供了广阔的空间和可能性。总体来看，AI技术在巴黎奥运会的广泛应用，不仅提升了赛事的专业性和观赏性，也为体育赛事的智能化、个性化发展提供了新的思路和方向。
“微软蓝屏”事件暴露了网络安全哪些问题？
数字人生
07-23 948
微软蓝屏事件是对全球网络安全的一次深刻警示。面对日益复杂的网络安全威胁，我们必须采取更加积极和有效的措施，构建一个更加稳固和安全的网络环境。通过不断的技术创新和制度完善，我们能够更好地保护我们的数字世界，确保其安全、稳定和可靠。这篇文章深入分析了微软蓝屏事件暴露的网络安全问题，并提出了具体的应对策略和建议，旨在为构建更加稳固和安全的网络环境提供参考和启示。希望这些内容能为网络安全领域的进一步发展贡献一份力量。
使用Ollama和OpenWebUI，轻松探索Meta Llama3–8B
最新发布
csdn1561168266的博客
07-24 535
大家好，2024年4月，Meta公司开源了Llama 3 AI模型，迅速在AI社区引起轰动。紧接着，Ollama工具宣布支持Llama 3，为本地部署大型模型提供了极大的便利。本文将介绍如何利用Ollama工具，实现Llama 3–8B模型的本地部署与应用，以及通过Open WebUI进行模型交互的方法。
微软正式推出适用于WSL Linux的D3D12 GPU视频加速技术
weixin_41446370的博客
07-24 447
今天，微软正式向 Windows Subsystem for Linux (WSL) 用户发布了 Direct3D 12 GPU 视频加速支持。在微软通过 WSL 允许在 Linux 下使用 OpenGL、OpenCL 和 Vulkan API 进行 GPU 加速的工程工作之后，他们现在已经准备好提供官方视频加速支持。
CrowdStrike更新致850万Windows设备宕机，微软紧急救火！
夕小瑶科技说
07-22 1271
7月18日，网络安全公司CrowdStrike发布了一次软件更新，导致全球大范围Windows系统宕机。预估，多行业服务因此停滞，全球打工人原地放假，坐等吃瓜，网络上爆梗不断。一起蓝屏事件，一瞬间将微软拉入水深火热之中。而作为本次事件的核心主体，微软在蓝屏期间都干了啥？微软当地时间20日发布《帮助客户度过CrowdStrike故障期》，提供有关微软与CrowdStrike及其他合作伙伴采取的措施的最新情况，并表示“众击”公司已经开发了一个解决方案来加速故障修复。
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

紫郢剑侠

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值