瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 为什么有几个我以前可以访问的网站不能够访问了？

12   1  /  2  页   跳转页

为什么有几个我以前可以访问的网站不能够访问了？

收藏
QDI
头像
初生襁褓狮
  • 帖子:398
  • 注册: 2003-11-08
  • 来自:
发表于： 2005-07-31 23:50 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

为什么有几个我以前可以访问的网站不能够访问了？

问题如题目
另外同寝室的都可以上的
就我的不可以上
难道是被劫持？
最后编辑2005-08-01 22:14:00
分享到：
gototop
 
魔法学徒
头像
卡卡技术团队
  • 帖子:11465
  • 注册: 2004-10-03
  • 来自:
发表于： 2005-07-31 23:52 | 短消息 资料
字号： 小 中 大 2楼

请用最新版Hijackthis1.99.1扫描一个log贴上来。

hijackThis下载地址见置顶贴
[必读]本版说明及常用小软件下载
http://forum.ikaka.com/topic.asp?board=67&artid=5188931

hijackthis使用方法请参考——瑞星HijackThis专题
http://it.rising.com.cn/newSite/Channels/anti_virus/Antivirus_Faq/TopicExplorerPagePackage/hijackthis.htm

运行HijackThis，先点[扫描系统并保存日志]或[Do a system scan and save a logfile]按钮，扫描完成后，LOG将会在自动弹出的记事本中显示，再从记事本里复制/粘贴到贴子里。如果LOG比较长，一贴发不完，你可以分成几个部分发在回贴里。
gototop
 
QDI
头像
初生襁褓狮
  • 帖子:398
  • 注册: 2003-11-08
  • 来自:
发表于： 2005-08-01 00:01 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

【回复“魔法学徒”的帖子】1
Logfile of HijackThis v1.99.1
Scan saved at 23:59:56, on 2005-7-31
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\Explorer.EXE
C:\Program Files\SkyNet\FireWall\PFW.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
E:\Program Files\DUMeter.exe
C:\WINNT\system32\ctfmon.exe
C:\Documents and Settings\chenduo\My Documents\Huawei\PortalServer\218.75.95.241\PortalClient.exe
C:\Program Files\Tencent\QQ\QQ.exe
C:\Program Files\Tencent\QQ\TIMPlatform.exe
E:\Program Files\Real\RealPlayer\realplay.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINNT\system32\mshta.exe
D:\新建文件夹 (2)\HijackThis.exe
gototop
 
QDI
头像
初生襁褓狮
  • 帖子:398
  • 注册: 2003-11-08
  • 来自:
发表于： 2005-08-01 00:02 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

【回复“魔法学徒”的帖子】2
R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
O1 - Hosts: 202.108.36.212 education.163.com
O1 - Hosts: 218.28.6.248 doudou.10169.net
O1 - Hosts: 202.205.11.69 www.edu.cn
O1 - Hosts: 61.175.208.43 www.luofu.yje.cn
O1 - Hosts: 69.50.131.86 www.directorbbs.com
O1 - Hosts: 61.153.34.22 frf.zjnu.net.cn
O1 - Hosts: 211.154.167.77 www.ayao.net
O1 - Hosts: 211.154.167.76 www.psy-test.net
O1 - Hosts: 209.238.253.190 www.shrinktank.com
O1 - Hosts: 211.152.33.51 www.kaoyantj.com
O1 - Hosts: 218.108.245.119 www.zjedusri.com.cn
O1 - Hosts: 219.129.216.4 www.yufeng21.com
O1 - Hosts: 128.186.6.10 edf5481-01.fa01.fsu.edu
O1 - Hosts: 203.215.253.134 www.hkjc.com
O1 - Hosts: 195.69.215.32 www.pearsoned.co.uk
O1 - Hosts: 65.61.162.215 www.searchnugget.com
O1 - Hosts: 202.205.107.58 www.bigc.edu.cn
O1 - Hosts: 221.208.49.2 www.shiye.cc
O1 - Hosts: 61.153.34.22 lib.zjnu.net.cn
O1 - Hosts: 198.81.200.2 www.sciencedirect.com
O1 - Hosts: 199.98.88.6 gateway.ut.ovid.com
O1 - Hosts: 130.235.140.168 www.doaj.org
O1 - Hosts: 128.227.148.254 www.clas.ufl.edu
O1 - Hosts: 128.8.182.10 pareonline.net
O1 - Hosts: 204.179.122.59 web31.epnet.com
O1 - Hosts: 221.236.21.95 www.duba.net
O1 - Hosts: 219.238.233.205 it.rising.com.cn
O1 - Hosts: 219.238.233.202 www.rising.com.cn
O1 - Hosts: 211.155.225.154 www.zjinfosec.net
O1 - Hosts: 60.191.2.47 www.symantec.com
O1 - Hosts: 202.120.83.71 psy.ecnu.edu.cn
O1 - Hosts: 137.189.166.194 www.psy.cuhk.edu.hk
O1 - Hosts: 140.112.62.2 www.psy.ntu.edu.tw
O1 - Hosts: 162.105.161.100 www.psy.pku.edu.cn
O1 - Hosts: 159.226.113.145 www.psych.ac.cn
O1 - Hosts: 202.109.72.131 www.psychccnu.com
O1 - Hosts: 202.112.83.191 dep.psych.bnu.edu.cn
O1 - Hosts: 218.65.113.46 www.jxnu.edu.cn
O1 - Hosts: 202.96.106.6 www.wz.zj.cn
O1 - Hosts: 61.153.44.251 www.yjnet.cn
O1 - Hosts: 211.152.50.194 www.wzxlzx.com
O1 - Hosts: 211.152.50.194 www.wzxlzx.com
O1 - Hosts: 61.175.208.83 www.yje.cn
O1 - Hosts: 61.172.198.176 www.fm1003.net
O1 - Hosts: 61.153.44.251 bbs.yjnet.cn
O1 - Hosts: 218.5.74.62 www.xlal.com
O1 - Hosts: 61.185.51.21 bbs.kingsoft.net
O1 - Hosts: 219.238.233.203 community.rising.com.cn
O1 - Hosts: 218.30.113.25 forum.jiangmin.com
O1 - Hosts: 211.140.137.99 www.aedu.cn
O1 - Hosts: 61.153.34.19 bbs.zjnu.edu.cn
O1 - Hosts: 202.106.185.114 bbs5.netease.com
O1 - Hosts: 61.153.44.233 www.it1818.com
O1 - Hosts: 202.108.205.74 www.e4in1.com
O1 - Hosts: 69.93.247.170 forums.grohol.com
O1 - Hosts: 218.30.124.84 www.spssbj.com.cn
O1 - Hosts: 61.152.94.137 pchina.cn
O1 - Hosts: 218.8.252.137 www.dxy.cn
O1 - Hosts: 61.129.81.220 www.xhyf.net
O1 - Hosts: 202.101.62.45 www.booklhh.com
O1 - Hosts: 210.76.106.17 www.baidao.net
O1 - Hosts: 61.130.8.215 voc107bbs.zjol.com.cn
O1 - Hosts: 202.99.23.177 bbs.cosn.net
O1 - Hosts: 218.30.110.172 www.psyhealth.org
O1 - Hosts: 220.163.11.76 www.ynpsy.com
O1 - Hosts: 61.129.70.70 www.deafedu.com
O1 - Hosts: 202.101.43.202 bbs.mengya.com
O1 - Hosts: 61.153.34.4 teacher.zjnu.cn
O1 - Hosts: 69.5.5.82 behavior.net
O1 - Hosts: 211.144.136.131 www.muduo.net
O1 - Hosts: 38.116.156.116 tinypic.com
O1 - Hosts: 202.99.23.162 bbs.cyol.com
O1 - Hosts: 218.20.159.104 www.8sta.com
O1 - Hosts: 202.116.45.58 www.psyonline.cn
O1 - Hosts: 207.46.249.252 www.microsoft.com
O1 - Hosts: 207.46.249.252 www.microsoft.com
O1 - Hosts: 207.46.249.252 www.microsoft.com
O1 - Hosts: 61.153.34.21 www.zjnu.edu.cn
O1 - Hosts: 202.96.140.8 www.kim4u.8u8.com
O1 - Hosts: 220.189.244.76 www.v181.com
O1 - Hosts: 202.130.239.216 psychology.xici.net
O1 - Hosts: 218.30.110.151 www.socialpsy.org
O1 - Hosts: 210.32.0.71 www.css.zju.edu.cn
O1 - Hosts: 220.194.59.157 info.psychcn.com
O1 - Hosts: 159.226.113.131 lib.psych.ac.cn
O1 - Hosts: 202.202.96.61 cyber.swnu.edu.cn
O1 - Hosts: 210.73.88.99 www.psychotherapist.com.cn
O1 - Hosts: 211.91.13.5 www.wzxl.org
O1 - Hosts: 61.151.252.220 www.wzpn.com
O1 - Hosts: 61.175.209.188 www.xl51.com
O1 - Hosts: 218.246.195.84 www.nandaoxl.com
O1 - Hosts: 129.67.15.11 www.psych.ox.ac.uk
O1 - Hosts: 128.32.178.4 psychology.berkeley.edu
O1 - Hosts: 171.64.40.15 www-psych.stanford.edu
O1 - Hosts: 61.132.138.124 www.xlxcn.net
O1 - Hosts: 140.119.175.39 psy.nccu.edu.tw
O1 - Hosts: 61.153.34.4 teacher.zjnu.cn
O1 - Hosts: 158.36.78.13 home.hio.no
O1 - Hosts: 205.174.62.130 www.psychology.org
O1 - Hosts: 69.20.125.200 www.learner.org
O1 - Hosts: 69.72.219.185 counsellingresource.com
gototop
 
QDI
头像
初生襁褓狮
  • 帖子:398
  • 注册: 2003-11-08
  • 来自:
发表于： 2005-08-01 00:02 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

【回复“魔法学徒”的帖子】3
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINNT\system32\xunleibho_v4.dll
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: Get IE Address - {1B7E3842-6F78-4EA8-92AC-05278C698689} - (no file)
O2 - BHO: NavErrRedir Class - {269B6797-664E-48AA-B283-B012BDF6E525} - C:\PROGRA~1\INCRED~1\BHO\BHO.dll
O2 - BHO: NaviHelperObj Class - {3E422F49-1566-40D3-B43D-077EF739AC32} - C:\WINNT\system32\NaviHelper.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: ltmenu Class - {78C21EFD-53BA-406C-AF1A-33A38ABD3958} - C:\Program Files\LtUcx\1002\c0.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\软件\Adobe Acrobat\Acrobat\AcroIEFavClient.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: (no name) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\软件\Adobe Acrobat\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Dr.eye WebPage Translation - {92B255FE-94E2-4BCA-958D-3926CE38913F} - E:\PROGRA~1\Inventec\Dreye\DreyeMT\DREYEI~1.DLL
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - F:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SKYNET Personal FireWall] C:\Program Files\SkyNet\FireWall\PFW.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [DU Meter] E:\Program Files\DUMeter.exe
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [eMuleAutoStart] E:\软件\verycd\eMule\eMule.exe -AutoStart
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: 下载页面上的ED2(&K)链接 - E:\软件\verycd\eMule\ed2k.html
O8 - Extra context menu item: 使用影音传送带下载 - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: 使用影音传送带下载全部链接 - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: 使用超级解霸播放 - D:\Program Files\Herosoft\Hero 9\MPURLGET.HTM
O8 - Extra context menu item: 加入天天网摘 - http://www.365key.com/include/rightClick.aspx
O8 - Extra context menu item: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: 导出当前页到超星阅览器(&A) - F:\Program Files\SSREADER36\ss_all.htm
O8 - Extra context menu item: 导出选中部分到超星阅览器(&S) - F:\Program Files\SSREADER36\ss_select.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\WINNT\system32\shdocvw.dll
O9 - Extra button: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - D:\Program Files\Herosoft\Hero 9\STHSDVD.EXE
O9 - Extra 'Tools' menuitem: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - D:\Program Files\Herosoft\Hero 9\STHSDVD.EXE
O9 - Extra button: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing)
O9 - Extra 'Tools' menuitem: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing)
O9 - Extra button: 寻论网--中学作业解答 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing)
O9 - Extra 'Tools' menuitem: 中学作业 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing)
O9 - Extra button: ICQ 4.0 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\软件\ICQ\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\软件\ICQ\ICQLite\ICQLite.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: ATS专业网络心理测评系统(v4.640) - {D317CB61-1A2E-4B7D-ABFC-40A2129792A2} - C:\PROGRA~1\ATS-WW~1.NET\ats.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: 开心消费 - {6713E8D2-850A-101B-AFC0-4210102A8DA7} - http://www32.websamba.com/ppmmpic/c/?t=7/2/2005&j=66529&i=&f=hs (file missing) (HKCU)
O9 - Extra button: 炫彩图铃 - {7713E8D2-850A-101B-AFC0-4210102A8DA7} - http://www32.websamba.com/ppmmpic/mms/ (file missing) (HKCU)
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://virus1.zjnu.net.cn/officescan/console/ClientInstall/WinNTChk.cab
O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupINICtrl Class) - https://virus1.zjnu.net.cn/officescan/console/ClientInstall/setupini.cab
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://virus1.zjnu.net.cn/officescan/console/ClientInstall/setup.cab
O16 - DPF: {11111111-1111-1111-1111-111111111123} - ms-its:mhtml:file://D:est.mht!http://yanliangbbs.com/Skins/Default/_notes/test.chm::/test.exe
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://cn.download.yahoo.com/dl/install/yinst0401.cab
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {414E7D87-8073-4EFB-9E4B-C8DF04C979EE} (PortalCom AAA 1.0) - http://218.75.95.241/PortalAX02.cab
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) - https://virus1.zjnu.net.cn/officescan/console/ClientInstall/RemoveCtrl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (趋势科技在线扫毒程序) - http://61.153.34.34:8080/housecall/xscan53.cab
O16 - DPF: {AB9D376E-390B-40A0-A30D-F1660C006EC1} (ActiveNetDisk Control) - http://mail.zjnu.net/web_storage/ActiveNetDiskOcx.cab
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Security Driver NetBT Proxy (nbproxy) - Unknown owner - G:\不用钱上网\新建文件夹 (2)\nbproxy.exe
gototop
 
QDI
头像
初生襁褓狮
  • 帖子:398
  • 注册: 2003-11-08
  • 来自:
发表于： 2005-08-01 00:03 | 只看楼主 短消息 资料
字号： 小 中 大 6楼

【回复“魔法学徒”的帖子】4
(file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
gototop
 
QDI
头像
初生襁褓狮
  • 帖子:398
  • 注册: 2003-11-08
  • 来自:
发表于： 2005-08-01 00:03 | 只看楼主 短消息 资料
字号： 小 中 大 7楼

好了
怎么看？
gototop
 
天天泡泡
头像
卡卡技术团队
  • 帖子:17486
  • 注册: 2004-01-21
  • 来自:安徽安庆
论坛8周年活动礼物卡卡名人堂
发表于： 2005-08-01 00:13 | 短消息 资料
字号： 小 中 大 8楼

先修复R3和O1项，其他的在看
gototop
 
魔法学徒
头像
卡卡技术团队
  • 帖子:11465
  • 注册: 2004-10-03
  • 来自:
发表于： 2005-08-01 00:14 | 短消息 资料
字号： 小 中 大 9楼

重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows

终止下列进程

C:\WINNT\system32\mshta.exe

运行Hijackthis，扫描结束后在下列选项前打上勾，然后选修复“Fix Checked”：

R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
01项如果不是楼主设置的，请全部选中修复
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: Get IE Address - {1B7E3842-6F78-4EA8-92AC-05278C698689} - (no file)
O2 - BHO: NaviHelperObj Class - {3E422F49-1566-40D3-B43D-077EF739AC32} - C:\WINNT\system32\NaviHelper.dll
O2 - BHO: ltmenu Class - {78C21EFD-53BA-406C-AF1A-33A38ABD3958} - C:\Program Files\LtUcx\1002\c0.dll
O16 - DPF: {11111111-1111-1111-1111-111111111123} - ms-its:mhtml:file://D:est.mht!http://yanliangbbs.com/Skins/Default/_notes/test.chm::/test.exe

显示隐藏文件

双击我的电脑--工具---文件夹选项--查看选项卡--单击选取"显示隐藏文件或文件夹"--清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示您确定更改时，单击“是”--单击“确定”。

然后找到如下文件并删除（如果有的话）。
C:\WINNT\system32\NaviHelper.dll
C:\Program Files\LtUcx\整个目录
D:est.mht

以下几项需要楼主根据相应的文件确定是否有用
O2 - BHO: NavErrRedir Class - {269B6797-664E-48AA-B283-B012BDF6E525} - C:\PROGRA~1\INCRED~1\BHO\BHO.dll
O3 - Toolbar: Dr.eye WebPage Translation - {92B255FE-94E2-4BCA-958D-3926CE38913F} - E:\PROGRA~1\Inventec\Dreye\DreyeMT\DREYEI~1.DLL
gototop
 
QDI
头像
初生襁褓狮
  • 帖子:398
  • 注册: 2003-11-08
  • 来自:
发表于： 2005-08-01 00:15 | 只看楼主 短消息 资料
字号： 小 中 大 10楼

01这么多
我是新手我不懂
上不了想上的网
gototop
 
<<上一主题|下一主题>>
12   1  /  2  页   跳转页
页面顶部
Powered by Discuz!NT