[GaMNiA]

作者: mary

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [inetsrv] C:\WINDOWS\system32\inetsrv.exe
O4 - HKLM\..\Run: [WinSysM] C:\WINDOWS\350102M.exe
O4 - HKCU\..\Run: [PHIME2006ASyn] C:\DOCUME~1\ADMINI~1\LOCALS~1\alvsvpd.exe
O20 - AppInit_DLLs: thermnc.dll,woodken.dll,delnice.dll,HBASKTAO.dll,meyotme.dll,zesttns.dll,lenyuns.dll,fliecods.dll,xuntxn.dll,mirwznt.dll,qanhllao.dll,zongxim.dll,rexljeh.dll,kodens.dll,xsisco.dll,wonlins.dll,avgrsstx.dll
O21 - SSODL: pyzbjbnk.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mecgjwvi.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: apkrmhyf.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: zkbcvshp.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: kmoigdzb.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: coligvzh.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: qasujhce.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: qtrxffdq.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mhurkwqk.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: blapfxwe.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: zgdymrhd.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mffhsbpb.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O23 - Service: 53F7B9A5 - Unknown owner - C:\WINDOWS\Fonts\83226AD2.EXE (file missing)

果然有中毒～

執行 HJT.exe 勾選上列項目，再按 [Fix checked] 完後，請重新開機。
另外用 KVTOOLS 修復 IFEO。
http://residence.educities.edu.tw/all3c/tool/KVTOOLS%202.0.rar

上列步驟完成後，請更新 Avira AntiVir 小紅傘病毒碼，再做一下完整掃描...