我不知道这是病毒吗?

Posted 2023-05-09

我一旦上网后,经常出现不能正常进入网站,重新连接后上网进入的速度明显减慢,后来发现C盘内只要一出现winhlp32.exe的文件时就会出现这种现象。无奈只要给电脑还原重启。好不了多长时间又出现类似现象，简直苦恼死了！有时一天就要还原一次到两次！希望高手们给我指点！谢谢！

winhlp32 - winhlp32.exe - 进程信息
进程文件： winhlp32 或者 winhlp32.exe
进程名称： Microsoft Windows Help

描述：
winhlp32.exe是微软Microsoft Windows帮助文件察看器程序。

出品者： Microsoft Corp.
属于： Microsoft Windows

系统进程： 否
后台程序： 否
使用网络： 否
硬件相关： 否
常见错误： 未知N/A
内存使用： 未知N/A
安全等级 (0-5): 0
间谍软件： 否
Adware: 否
病毒： 否
木马： 否

其它进程列表

Other Processes
00thotkey.exe 12popup.exe 2portalmon.exe
3capplnk.exe 3cdminic.exe 3cmcnkw.exe
3cmlink.exe 3cmlinkw.exe 3cmlnkw.exe
3deepctl.exe 3dfxman.exe 3dldemon.exe
3dlman.exe 3dxsrv.exe 3qdctl.exe
a4proxy.exe absr.exe abyssws.exe
acbtnmgr_xxx.exe accelerate.exe access.exe
acmonitor_xxx.exe acombo3d.exe aconti.exe
acoustic.exe acroaum.exe acrobat elements.exe
acrodist.exe act.exe actionagent.exe
activation.exe activeeyes.exe activemenu.exe
activeplus.exe ad-aware.exe ad-watch.exe
ad2kclient.exe adblck.exe adc.exe
addestroyer.exe addrbook.exe adg.exe
AdManCtl.exe admillikeep.exe admilliserv.exe
admlib32.exe admunch.exe Adobe Gamma Loader.exe
adobes.exe adp.exe adsgone.exe
adss.exe adstatserv.exe adsub.exe
adtray.exe advapi.exe advchk.exe
aeiwlsta.exe aelaunch.exe aexswdusr.exe
agfaclnk.exe agsatellite.exe ahfp.exe
ahnsd.exe ahqinit.exe ahqtb.exe
aiepk.exe aiepk2.exe aimaol.exe
aimingclick.exe airplus.exe airsvcu.exe
akiller.exe alarm.app.exe AlarmApp.exe
alarmwatcher.exe ALCMTR.EXE ALCWZRD.EXE
alcxmntr.exe aldaemon.exe alertserver.exe
AlertSvc.exe almxptray.exe ALUNotify.exe
am32.exe amoumain.exe anote.exe
AOLServiceHost.exe aoltpspd.exe aoltray.exe
aoltsmon.exe aornum.exe ap9h4qmo.exe
Apache.exe appservices.exe aptezbp.exe
apvxdwin.exe AquariumDesktop.exe armon32.exe
armon32a.exe arupld32.exe ashDisp.exe
ashmaisv.exe ashserv.exe asmproserver.exe
aspi_me.exe aspnet_admin.exe asupport.exe
aswupdsv.exe athoc.exe ati2mdxx.exe
ati2plab.exe aticwd32.exe ATIDtct.EXE
atitask.exe atwtusb.exe ausvc.exe
autoreg.exe autorun.exe autoupdate.exe
avgamsvr.exe avgcc.exe avgcc32.exe
avgemc.exe avgnt.exe avguard.exe
avpm.exe avsched32.exe avwupsrv.exe
awhost32.exe awrem32.exe babylon.exe
BackItUp.exe backupnotify.exe bagent.exe
bass.exe bboy.exe bcb.exe
bcmwltry.exe bdmcon.exe bdss.exe
bearshare.exe benetns.exe bengine.exe
benser.exe beremote.exe beserver.exe
bigfix.exe billmind.exe bkupexec.exe
blocker.exe bmupdate.exe boot.exe
bp.exe bpftp.exe bpk.exe
bpsinstall.exe brad32.exe brmecom.exe
bsoft.exe btstackserver.exe bttray.exe
bwgo0000 cagent.exe cagent32.exe
calcheck.exe CAP2LAK.EXE CAP2RSK.EXE
CAP2SWK.EXE capfax.exe cc.exe
cclaw.exe ccmagent.exe cconnect.exe
ccsetmgr.exe cd_load.exe cdf.exe
cdspeed.exe ceekey.exe cepmtray.exe
cgtask.exe chkadmin.exe chkras.exe
choke.exe cij3p2ps.exe client.exe
clipsrv.exe clonecdtray.exe cmgrdian.exe
cmluc.exe cnqmax.exe CnxMon.exe
comctl_32.exe comet.exe command.exe
compaq-rba.exe conf.exe config.exe
conmgr.exe ConquerCam.exe consol32.exe
cool.exe CoverDesigner.exe cpdclnt.exe
cpqa1000.exe cpqdfwag.exe cpqeadm.exe
cpqinet.exe Cpqset.exe cpunumber.exe
createcd.exe createcd50.exe crsss.exe
csinject.exe csinsm32.exe csinsmnt.exe
Csrrs.exe csrsc.exe csrss32.exe
ct_load.exe ctbclick.exe ctdvddet.exe
cteaxspl.exe ctfmon32.exe ctrlvol.exe
ctsrreg.exe ctsysvol.exe cusrvc.exe
cuteftp.exe cutftp.exe cyb2k.exe
cygrunsrv.exe cz.exe d4.exe
daconfig.exe daemon.exe datalayer.exe
ddhelper32.exe de_serv.exe defscangui.exe
delldmi.exe dellmmkb.exe delmsbb.exe
desk98.exe DeskAdKeep.exe DeskAdServ.exe
dexplore.exe diagent.exe dialer.exe
directx.exe directxset.exe dla.exe
dlgli.exe dlt.exe dluca.exe
dmremote.exe dmxlauncher.exe dnar.exe
dnetc.exe dns.exe download.exe
downloadplus.exe dragdrop.exe dreamweaver.exe
drgtodsc.exe drivespeed.exe drvddll.exe
drvlsnr.exe DRWTSN16.EXE dsagnt.exe
dseraser.exe dslagent.exe dslmon.exe
dsnthapp.exe dsnthser.exe dvdlauncher.exe
DVDRegionFree.exe dvldr32.exe dvremind.exe
DWHeartbeatMonitor.exe DxDebugService.exe DXEnum.exe
dxnf.exe e-s0bic1.exe e_s0hic1.exe
e_srcv03.exe eabservr.exe EasyAV.exe
ebrr.exe edisk.exe edonkey.exe
ee.exe ehmsas.exe ehrec.exe
ehSched.exe ehshell.exe ehtray.exe
elbycheck.exe elccest.exe emule.exe
enbiei.exe encmontr.exe engutil.exe
ensmix32.exe enternet.exe essdc.exe
eudora.exe eusexe.exe EvtEng.exe
expl32.exe explorer32.exe explorere.exe
express.exe exshow95.exe ezejmnap.exe
ezulumain.exe fameh32.exe fan.exe
farmmext.exe fastdown.exe faxsvc.exe
fbdirect.exe fc.exe fch32.exe
fgadmin.exe fih32.exe finder.exe
flashfxp.exe flashksk.exe flatbed.exe
fnrb32.exe FONTVIEW.EXE forte.exe
fpdisp4.exe fpxpress.exe frameworkservic.exe
freedom.exe frontpage.exe frsk.exe
fs20.exe fsaa.exe fsav32.exe
fsbwlan.exe fsdfwd.exe fsg.exe
fsg_3202.exe fsgk32.exe fsgk32st.exe
fsm32.exe fsma32.exe fsmb32.exe
fsscrctl.exe fssm32.exe fsw.exe
ftpte.exe fts.exe fwenc.exe
fxredir.exe gah95on6.exe gain_trickler_3202.exe
gbtray.exe gcASCleaner.exe gcasDtServ.exe
gcasInstallHelper.exe gcASNotice.exe gcasServ.exe
gcasServAlert.exe gcasSWUpdater.exe gdonkey.exe
gesfm32.exe gfxacc.exe Ghostexp.exe
GHOSTS~2.EXE ghoststartservice.exe ghoststarttrayapp.exe
giantantispywaremain.exe GIANTAntiSpywareUpdater.exe gnetmous.exe
gnotify.exe go.exe GoogleDesktop.exe
gozilla.exe gra.exe graph.exe
GrpWise.exe gsicon.exe gstartup.exe
gtwatch.exe gwmdmpi.exe gwsystemservice.exe
hcontrol.exe helpexp.exe HelpHost.exe
helpsvc.exe hhw.exe hidden32.exe
hjym.exe hkserv.exe hkss.exe
hkwnd.exe hotkeyapp.exe hotsync.exe
hottray.exe hpbpro.exe hpdrv.exe
hphmon03.exe hphmon04.exe hphmon06.exe
hphupd04.exe hphupd05.exe hphupd06.exe
hpnra.exe hpobnz08.exe hpoddt01.exe
hpodev07.exe hpoevm07.exe hpohmr08.exe
hpoopm07.exe hposol08.exe hpqcmon.exe
hpqgalry.exe hpsjvxd.exe hpwuschd.exe
HPWuSchd2.exe hpzstatn.exe hpztsb03.exe
hpztsb09.exe hpztsb10.exe htmdeng.exe
hypertrm.exe i8kfangui.exe iaanotif.exe
iaantmon.exe ibmpmsvc.exe iconfig.exe
icqlite.exe icsmgr.exe icwconn2.exe
icwtutor.exe iexpiore.exe iexplore32.exe
iFrmewrk.exe igfxsrvc.dll ImageDrive.exe
IMApp.exe IMEKRMIG.EXE imjpmig.exe
imonnt.exe imontray.exe imscinst.exe
incd.exe InCDsrv.exe IncMail.exe
incredimail.exe inetd32.exe InfoTool.exe
inicio.exe initsdk.exe inotask.exe
IntelMEM.exe internet.exe ipclient.exe
ipssvc.exe ireike.exe isignup.exe
islp2sta.exe ismserv.exe isstart.exe
itouch.exe iwctrl.exe ixapplet.exe
JAMMER2ND.EXE javaws.exe jetcar.exe
jucheck.exe jushed.exe jushed32.exe
kavsvc.exe kazaalite.exe KB891711.EXE
kencapi.exe kencli.exe kencron.exe
kendns.exe kenftpgw.exe keninet.exe
kenmail.exe kenmap.exe kenproxy.exe
kenserv.exe kensocks.exe kentbcli.exe
kernal32.exe keyhook.exe keylogger.exe
keyword.exe KHALMNPR.exe khooker.exe
kmw_run.exe kodakccs.exe kodakimage.exe
kodakprv.exe kodorjan.exe kpf4gui.exe
lao.exe launch.exe launchap.exe
launcher.exe launchpd.exe leerlaufprozess
lexplore.exe lexstart.exe lights.exe
lmgrd.exe lmpdpsrv.exe load32.exe
logitray.exe logon.exe lorena.exe
LSAS.exe Lsass32.exe lsassa.exe
lsasss.exe lsserv.exe ltcm000c.exe
ltdmgr.exe ltmoh.exe ltmsg.exe
lxdboxcp.exe main.exe mainserv.exe
manager.exe mapiicon.exe master.exe
matcli.exe mathchk.exe mbm4.exe
mbm5.exe mc.exe mcagent.exe
mcappins.exe mcdlc.exe McEPOC.exe
McEPOCfg.exe mcinfo.exe mcmnhdlr.exe
mcpalmcfg.exe mcpserver.exe mcupdate.exe
mcvsshld.exe McWCE.exe McWCECfg.exe
mediaaccess.exe MediaAccK.exe mediaman.exe
mediapass.exe mediapassk.exe members-area.exe
memorymeter.exe messenger.exe mgactrl.exe
mgaqdesk.exe mgasc.exe mgavrtcl.exe
mgui.exe mhotkey.exe microsoft.exe
mim.exe minibug.exe minilog.exe
mirc.exe MIRC32.exe mm_server.exe
mmdiag.exe mmtray.exe mmtray2k.exe
mmtraylsi.exe mmups.exe mmusbkb2.exe
mnsvc.exe mnyexpr.exe monitor.exe
monitr32.exe morpheus.exe moviemk.exe
movieplace.exe Mozilla.exe mp3serch.exe
mpbtn.exe mpf.exe mpfagent.exe
mpfservice.exe mpftray.exe mpservic.exe
mpsetup.exe mqtgsvc.exe msaccess.exe
msams.exe msc32.exe mscifapp.exe
mscnsz.exe mscommand.exe msconfig32.exe
mscvb32.exe MSD.EXE mse7.exe
msg32.exe msgloop.exe msgplus.exe
mskagent.exe msmgs.exe msndc.exe
MSNIASVC.EXE msoffice.exe mspmspv.exe
mspub.exe msqry32.exe msscli.exe
mssearch.exe msstat.exe mssvr.exe
mstore.exe MSupdate.exe msvcmm32.exe
mtx.exe muamgr.exe musirc4.71.exe
mwd.exe mxoaldr.exe mxtask.exe
myfastupdate.exe mysqld-nt.exe nail.exe
naimag32.exe navapp.exe nbj.exe
nbr.exe nclaunch.exe nddeagnt.exe
NDSTray.exe neo.exe neoCapture.exe
neoCopy.exe neoDVD.exe neoDVDstd.exe
neotrace.exe nero.exe nerosmartstart.exe
nerosvc.exe netmail.exe netsurf.exe
newdot.exe newsupd.exe ngctw32.exe
nilaunch.exe NIP.exe nipsvc.exe
NJeeves.exe nkvmon.exe noads.exe
notify.exe npfmntor.exe NPFMSG.exe
npscheck.exe npssvc.exe NRMENCTB.exe
nscheck.exe 参考技术A 用木马克星扫描！如果发现但不能清除！但它给出被侵入文件目录！只能手动删除！然后只有取消系统查看中的隐藏受保护的系统文件前面的钩！找出被侵入的文件！用一些粉碎文件软件强制删除（不能直接删除系统会提示保护）！然后找出系统盘来修复！！粉碎软件比较多优化大师和雅虎助手等都有这个功能！！ 参考技术B 用卡巴斯基杀一下啊,可能中招了

实时监控技术

【中文标题】实时监控技术

【英文标题】：Real-time monitoring technique

【发布时间】：2011-11-05 09:12:40

【问题描述】：

大多数已知的防病毒软件都具有实时监控功能，这意味着它可以在文件被访问或执行之前扫描文件。如何实现这样的技术？ .NET 中有一个名为filewatcher 的东西，我不知道这是否与 AntiVirus 中使用的相同。

【问题讨论】：

我不知道为什么有人对这个问题投反对票？

我也没有。这绝不是一个坏问题。

【参考方案1】：

通常，防病毒软件会安装一个过滤器驱动程序，该驱动程序附加到 Windows 内核中的文件系统驱动程序。因此，对文件系统驱动程序的所有请求首先被传递给过滤器，然后过滤器决定是转发还是拒绝请求。

请注意，在用户模式下挂钩 Windows API 或任何其他 API 通常是不够的，因为恶意软件总是可以绕过挂钩的 API 直接向内核发出调用。

【参考方案2】：

挂钩 (Win)API 函数是此类任务的通用解决方案，但我想这只是冰山一角。在wiki（Detection 小节）中几乎没有关于它的说明。因此，您需要了解如何挂钩 API 函数以及一般的 Windows 内部结构。我建议将Windows via C++ 作为解决这一全球性问题的良好起点。