求助 - 學校電腦中毒了!

[john860504]

作者: tyc8008

O2 - BHO: BHOAd - {85589B5D-D53D-4237-A677-46B82EA275F3} - C:\WINDOWS\xhelper.dll (file missing)
O4 - HKLM\..\Run: [System] C:\WINDOWS\system32\kernelwind32.exe
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\retadpu27.exe 61A847B5BBF72810358B2B27128065E9C084320161C4661227A755E9C2933154389A284662EA4EBF968951185EFC412806867680AEC1775663CF781370FE0FB68AD6
O4 - HKLM\..\Run: [solmreg] C:\WINDOWS\system32\sewsol.exe
O4 - HKLM\..\Run: [fwddls] C:\WINDOWS\system32\atlfwuke.exe
O4 - HKLM\..\Run: [klibinst] C:\WINDOWS\system32\kbldoc.exe
O4 - HKLM\..\Run: [winsaavc] C:\WINDOWS\system32\assched.exe
O4 - HKLM\..\Run: [xpsysmt] C:\WINDOWS\system32\winygyiq.exe
O4 - HKLM\..\Run: [mplaut] C:\WINDOWS\system32\ldcdx.exe
O4 - HKLM\..\Run: [wsmssl] C:\WINDOWS\system32\umcdmohw.exe
O4 - HKLM\..\Run: [lsitdm] C:\WINDOWS\system32\mfsysnv.exe
O4 - HKLM\..\Run: [plmer32] C:\WINDOWS\system32\schskgol.exe
O4 - HKLM\..\Run: [stdmce] igfrbror.exe
O4 - HKCU\..\Run: [Service Pack 1] C:\WINDOWS\system32\vedxg6ame4.exe
O4 - HKCU\..\Run: [WinPop] C:\Program Files\WinPop\winpop.exe
O4 - HKCU\..\Run: [solmreg] C:\WINDOWS\system32\sewsol.exe
O4 - HKCU\..\Run: [fwddls] C:\WINDOWS\system32\atlfwuke.exe
O4 - HKCU\..\Run: [klibinst] C:\WINDOWS\system32\kbldoc.exe
O4 - HKCU\..\Run: [winsaavc] C:\WINDOWS\system32\assched.exe
O4 - HKCU\..\Run: [xpsysmt] C:\WINDOWS\system32\winygyiq.exe
O4 - HKCU\..\Run: [mplaut] C:\WINDOWS\system32\ldcdx.exe
O4 - HKCU\..\Run: [wsmssl] C:\WINDOWS\system32\umcdmohw.exe
O4 - HKCU\..\Run: [lsitdm] C:\WINDOWS\system32\mfsysnv.exe
O4 - HKCU\..\Run: [plmer32] C:\WINDOWS\system32\schskgol.exe
O4 - HKCU\..\Run: [stdmce] igfrbror.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')
O20 - Winlogon Notify: botreg - C:\Documents and Settings\All Users.WINDOWS\Documents\Settings\bot.dll
O21 - SSODL: MXVpcXVtCS - {44BF7ECB-EE15-D461-1205-98866BF5C237} - C:\WINDOWS\system32\afx.dll
O21 - SSODL: DCOM Server 20509 - {2C1CD3D7-86AC-4068-93BC-A02304B20509} - C:\WINDOWS\system32\ffdqhvq.dll (file missing)
O21 - SSODL: CDRecorder036 - {A3BC5E20-0235-1ABF-9CE1-00AA00512036} - C:\WINDOWS\system32\frkd32.dll (file missing)
O22 - SharedTaskScheduler: DCOM Server 20509 - {2C1CD3D7-86AC-4068-93BC-A02304B20509} - C:\WINDOWS\system32\ffdqhvq.dll (file missing)
O23 - Service: Microsoft ASPI Manager (aspimgr) - Unknown owner - C:\WINDOWS\system32\aspimgr.exe
O23 - Service: ICF - Unknown owner - C:\WINDOWS\system32\svchost.exe:exe.exe



中毒很深 - 建議請學校重灌

這樣的話... 得請電腦老師了...