求助 - 中毒Trojan-psw.win32.magania.im

[plunderer]

C:\WINDOWS\system\svchost.exe
C:\WINDOWS\Installer\services.exe

F2 - REG:system.ini: UserInit=userinit.exe,C:\WINDOWS\system\svchost.exe,C:\WINDOWS\Installer\service s.exe,

O16 - DPF: {07597574-DADB-4209-96A0-C4F07CF8E841} (LikeInstaller Class) - http://10.1.15.179/ishare/Patch/RHLSetup.cab

O16 - DPF: {43C8A007-1C98-4994-8B9C-B16F7FACCA7E} (emakerx Control) - http://10.1.150.72/emakerx.cab

O16 - DPF: {476AB17F-EBF8-402D-82F8-3532A4A7A997} (SKBankICX Control) - https://skatm.skbank.com.tw/WebATMCl.../SKBankICX.cab

O16 - DPF: {C4847596-972C-11D0-9567-00A0C9273C2A} (Crystal Report Viewer Control) - http://10.1.15.230/skhod/rpt/activexviewer.cab

O18 - Protocol: ipp - (no CLSID) - (no file)

O18 - Protocol: msdaipp - (no CLSID) - (no file)

勾選修復上述項目, 重新開機後刪除這兩個檔案
C:\WINDOWS\system\svchost.exe
C:\WINDOWS\Installer\services.exe

下面幾項我不確定是什麼軟體, 若你也不清楚, 那最好也修復並卸載該軟體
C:\WINDOWS\system32\PhxPsSvr.exe
C:\Program Files\Easy File Sharing Web Server\fsws.exe

O23 - Service: Easy File Sharing Web Service - EFS Software, Inc. - C:\Program Files\Easy File Sharing Web Server\fswsService.exe

O23 - Service: Phoenix Vault Service (PhnxVaultService) - Phoenix Technologies Ltd. - C:\WINDOWS\system32\PhxVtSvr.exe