關於msplus.dll quartz32.dll導致IE彈窗的的修復
 

關於msplus.dll quartz32.dll導致IE彈窗的的修復

--------------------------------------------------------------------------------

關鍵字 msplus.dll quartz32.dll IE彈出視窗 MSTCP Provider

大概在三四個月前，我的電腦上時有IE視窗彈出，時多時少，有時一二周沒有，有時一天彈個不停，我以前還一直以為是ISP的問題，就沒去管了。

前段時間，因為要用httplook，伹是安裝完後，不能啟動，提示
Warning!
Another layered service provider is installed in your system.
If you encounter network problems when running HTTPLook
try to deinstall/disable the following program(s):
MSTCP Provider

因我在另一台電腦上使用正常，就找辦法解決。

google後得到訊息可能是msplus.dll 的作用，其為一廣告軟體，在硬碟上c:\windows\system32下找到msplus.dll，看他的內容就是addll,明顯不對勁，可以正常移除，移除重新啟動後發現httplook還是不能啟動。

因找到資料說httplook工作前底層不能有別的winsocks程序作伺服。我用
netsh winsock show catalog檢視了一下。發現MSTCP Provider這段，是quartz32.dll的dll在起作用。搜尋查到後quartz32.dll在c:\windows\system32目錄下。試著正常移除不能。

使用unlocker把文件移除，輸入指令netsh winsock reset重置winsock。重新啟動後一切都正常了。

真憤怒， 現在病毒都已經作到這一步了。。忽然想到之前的IE彈窗就是因為這個底層的dll在工作，不知道這二個dll是不是一個軟體綁進來的，有可能是msplus.dll先進來，然後quartz32.dll被另一個軟體綁進來，把msplus.dll擠開的。

之前在CCF搜尋過，沒有相關的說明和解決方法，特把解決經過寫出來給大概參考。如果有兄弟有不明IE彈窗的最好搜尋一下這二個文件看是否存在。

殺毒軟體為norton，無任何報警。


msplus.dll殺毒結果如下：
Antivirus Version Update Result
AntiVir 6.35.0.21 07.21.2006 TR/Spy.Agent.KD
Authentium 4.93.8 07.20.2006 no virus found
Avast 4.7.844.0 07.19.2006 no virus found
AVG 386 07.21.2006 PSW.Agent.BUQ
BitDefender 7.2 07.21.2006 Trojan.Spy.Agent.OB
CAT-QuickHeal 8.00 07.20.2006 no virus found
ClamAV devel-20060426 07.20.2006 no virus found
DrWeb 4.33 07.21.2006 Adware.Roogoo
eTrust-InoculateIT 23.72.74 07.20.2006 no virus found
eTrust-Vet 12.6.2305 07.21.2006 no virus found
Ewido 4.0 07.21.2006 Logger.Agent.kd
Fortinet 2.77.0.0 07.21.2006 Spy/Agent
F-Prot 3.16f 07.20.2006 no virus found
F-Prot4 4.2.1.29 07.20.2006 no virus found
Ikarus 0.2.65.0 07.21.2006 no virus found
Kaspersky 4.0.2.24 07.21.2006 not-a-virus:AdWare.Win32.AdAgent.d
McAfee 4811 07.20.2006 no virus found
Microsoft 1.1508 07.21.2006 no virus found
NOD32v2 1.1672 07.21.2006 no virus found
Norman 5.90.23 07.21.2006 no virus found
Panda 9.0.0.4 07.20.2006 Suspicious file
Sophos 4.07.0 07.21.2006 no virus found
Symantec 8.0 07.21.2006 no virus found
TheHacker 5.9.8.179 07.21.2006 Adware/AdAgent.d
UNA 1.83 07.20.2006 Adware.AdAgent
VBA32 3.11.0 07.20.2006 Trojan-Spy.Win32.Agent.kd
VirusBuster 4.3.7:9 07.21.2006 TrojanSpy.Agent.DDC


quartz32.dll殺毒結果如下：

AntiVir 6.35.0.21 07.21.2006 ADSPY/AdAgent.D
Authentium 4.93.8 07.20.2006 no virus found
Avast 4.7.844.0 07.19.2006 no virus found
AVG 386 07.21.2006 Adware Generic.OZC
BitDefender 7.2 07.21.2006 no virus found
CAT-QuickHeal 8.00 07.20.2006 no virus found
ClamAV devel-20060426 07.20.2006 no virus found
DrWeb 4.33 07.21.2006 Adware.Roogoo
eTrust-InoculateIT 23.72.74 07.20.2006 no virus found
eTrust-Vet 12.6.2305 07.21.2006 no virus found
Ewido 4.0 07.21.2006 Adware.AdAgent
Fortinet 2.77.0.0 07.21.2006 Adware/AdAgent
F-Prot 3.16f 07.20.2006 no virus found
F-Prot4 4.2.1.29 07.20.2006 no virus found
Ikarus 0.2.65.0 07.21.2006 no virus found
Kaspersky 4.0.2.24 07.21.2006 not-a-virus:AdWare.Win32.AdAgent.d
McAfee 4811 07.20.2006 no virus found
Microsoft 1.1508 07.21.2006 no virus found
NOD32v2 1.1672 07.21.2006 no virus found
Norman 5.90.23 07.21.2006 no virus found
Panda 9.0.0.4 07.20.2006 Suspicious file
Sophos 4.07.0 07.21.2006 no virus found
Symantec 8.0 07.21.2006 no virus found
TheHacker 5.9.8.179 07.21.2006 no virus found
UNA 1.83 07.20.2006 Adware.AdAgent
VBA32 3.11.0 07.20.2006 AdWare.Win32.AdAgent.d
VirusBuster 4.3.7:9 07.21.2006 no virus found