一打开IE就转到www.168wz.net，以下是扫描日志，请各位帮忙看一下 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛一打开IE就转到www.168wz.net，以下是扫描日志，请各位帮忙看一下

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第四十七次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

一打开IE就转到www.168wz.net，以下是扫描日志，请各位帮忙看一下

88668866 初生襁褓狮帖子:58 注册: 2005-07-26 来自:	发表于： 2005-09-15 20:06 \| 只看楼主短消息资料字号：小中大 1楼一打开IE就转到www.168wz.net，以下是扫描日志，请各位帮忙看一下 HijackThis_815汉化版扫描日志 V1.99.1 保存于 20:03:59, 日期 2005-9-15 操作系统： Windows XP (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 (6.00.2600.0000) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE C:\Program Files\Common Files\Real\Update_OB\realsched.exe D:\PROGRAM FILES\RISING\RAV\Ravmond.exe C:\WINDOWS\System32\usb.exe D:\PROGRA~1\RISING\RAV\RAVTIMER.EXE D:\PROGRA~1\RISING\RAV\RAVMON.EXE C:\WINDOWS\System32\ctfmon.exe D:\PROGRAM FILES\RISING\RAV\RavStub.exe C:\WINDOWS\System32\conime.exe C:\Program Files\BitSpirit\BitSpirit.exe C:\WINDOWS\System32\mshta.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\System32\mshta.exe C:\Documents and Settings\tjy\Local Settings\Temp\temp.fr1BD8\ske\trojanassistant.exe C:\Downloads\4842302005817230232\HijackThis1991zww.exe O1 - Hosts: 218.85.139.122 minisite.qq.com O1 - Hosts: 218.85.139.122 www.minisite.qq.com O1 - Hosts: 218.85.139.122 zhao114.com O1 - Hosts: 218.85.139.122 www.zhao114.com O1 - Hosts: 218.85.139.122 zhao114.com O1 - Hosts: 218.85.139.122 www.zhao114.com O1 - Hosts: 218.85.139.122 yan88.com O1 - Hosts: 218.85.139.122 www.yan88.com O1 - Hosts: 218.85.139.122 yan88.com O1 - Hosts: 218.85.139.122 www.yan88.com O1 - Hosts: 218.85.139.122 cnww.net O1 - Hosts: 218.85.139.122 www.cnww.net O1 - Hosts: 218.85.139.122 zhao123.com O1 - Hosts: 218.85.139.122 www.zhao123.com O1 - Hosts: 218.85.139.122 4399.com O1 - Hosts: 218.85.139.122 www.4399.com O1 - Hosts: 218.85.139.122 chinagames.net O1 - Hosts: 218.85.139.122 www.chinagames.net O1 - Hosts: 218.85.139.122 tiexue.net O1 - Hosts: 218.85.139.122 www.tiexue.net O1 - Hosts: 218.85.139.122 qq163.com O1 - Hosts: 218.85.139.122 www.qq163.com O1 - Hosts: 218.85.139.122 tt67.com O1 - Hosts: 218.85.139.122 www.tt67.com O1 - Hosts: 218.85.139.122 chinamp3.com O1 - Hosts: 218.85.139.122 www.chinamp3.com O1 - Hosts: 218.85.139.122 pg168.com O1 - Hosts: 218.85.139.122 www.pg168.com O1 - Hosts: 218.85.139.122 yymp3.com O1 - Hosts: 218.85.139.122 www.yymp3.com O1 - Hosts: 218.85.139.122 yy138.com O1 - Hosts: 218.85.139.122 www.yy138.com O1 - Hosts: 218.85.139.122 dj99.com O1 - Hosts: 218.85.139.122 www.dj99.com O1 - Hosts: 218.85.139.122 sogua.com O1 - Hosts: 218.85.139.122 www.sogua.com O1 - Hosts: 218.85.139.122 snsn.net O1 - Hosts: 218.85.139.122 www.snsn.net O1 - Hosts: 218.85.139.122 flash8.net O1 - Hosts: 218.85.139.122 www.flash8.net O1 - Hosts: 218.85.139.122 mop.com O1 - Hosts: 218.85.139.122 www.mop.com O1 - Hosts: 218.85.139.122 tianyaclub.com O1 - Hosts: 218.85.139.122 www.tianyaclub.com O1 - Hosts: 218.85.139.122 xici.net O1 - Hosts: 218.85.139.122 www.xici.net O1 - Hosts: 218.85.139.122 ucanlove.com O1 - Hosts: 218.85.139.122 www.ucanlove.com O1 - Hosts: 218.85.139.122 cmfu.com O1 - Hosts: 218.85.139.122 www.cmfu.com O1 - Hosts: 218.85.139.122 21red.net O1 - Hosts: 218.85.139.122 www.21red.net O1 - Hosts: 218.85.139.122 pconline.com.cn O1 - Hosts: 218.85.139.122 www.pconline.com.cn O1 - Hosts: 218.85.139.122 donews.com O1 - Hosts: 218.85.139.122 www.donews.com O1 - Hosts: 218.85.139.122 pcauto.com.cn O1 - Hosts: 218.85.139.122 www.pcauto.com.cn O1 - Hosts: 218.85.139.122 265.com O1 - Hosts: 218.85.139.122 www.265.com O1 - Hosts: 218.85.139.122 wo99.com O1 - Hosts: 218.85.139.122 www.wo99.com O1 - Hosts: 218.85.139.122 familydoctor.com.cn O1 - Hosts: 218.85.139.122 www.familydoctor.com.cn O1 - Hosts: 218.85.139.122 flashempire.com O1 - Hosts: 218.85.139.122 www.flashempire.com O1 - Hosts: 218.85.139.122 showgood.tv O1 - Hosts: 218.85.139.122 www.showgood.tv O1 - Hosts: 218.85.139.122 flashfan.net O1 - Hosts: 218.85.139.122 www.flashfan.net O1 - Hosts: 218.85.139.122 long21.net O1 - Hosts: 218.85.139.122 www.long21.net O1 - Hosts: 218.85.139.122 socom O1 - Hosts: 218.85.139.122 www.socom O1 - Hosts: 218.85.139.122 flashhome.net O1 - Hosts: 218.85.139.122 www.flashhome.net O1 - Hosts: 218.85.139.122 cnflash.net O1 - Hosts: 218.85.139.122 www.cnflash.net O1 - Hosts: 218.85.139.122 flashsky.com O1 - Hosts: 218.85.139.122 www.flashsky.com O1 - Hosts: 218.85.139.122 hunansky.com O1 - Hosts: 218.85.139.122 www.hunansky.com O1 - Hosts: 218.85.139.122 52flash.net O1 - Hosts: 218.85.139.122 www.52flash.net O1 - Hosts: 218.85.139.122 flashh.com O1 - Hosts: 218.85.139.122 www.flashh.com O1 - Hosts: 218.85.139.122 flashsun.com O1 - Hosts: 218.85.139.122 www.flashsun.com O1 - Hosts: 218.85.139.122 7k7k.com O1 - Hosts: 218.85.139.122 www.7k7k.com O1 - Hosts: 218.85.139.122 xuanxuan.com O1 - Hosts: 218.85.139.122 www.xuanxuan.com O1 - Hosts: 218.85.139.122 flash88.net O1 - Hosts: 218.85.139.122 www.flash88.net O1 - Hosts: 218.85.139.122 91flash.com O1 - Hosts: 218.85.139.122 www.91flash.com O1 - Hosts: 218.85.139.122 doingflash.com O1 - Hosts: 218.85.139.122 www.doingflash.com O1 - Hosts: 218.85.139.122 5see.com O1 - Hosts: 218.85.139.122 www.5see.com O1 - Hosts: 218.85.139.122 skyhits.com O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\Program Files\FlashGet\jccatch.dll O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - IE工具栏增项: 卡卡安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\System32\KakaTool.dll O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [YDTMain.exe] C:\PROGRA~1\YDT\YDTMain.exe O4 - 启动项HKLM\\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - 启动项HKLM\\Run: [usb] C:\WINDOWS\System32\usb.exe O4 - 启动项HKLM\\Run: [hosts] C:\WINDOWS\system32\hosts.bat O4 - 启动项HKLM\\Run: [3721] C:\$NtUninstallQ9494$\3721.bat O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [hosts] C:\WINDOWS\system32\hosts.bat O4 - HKCU\..\Run: [3721] C:\$NtUninstallQ9494$\3721.bat O4 - Startup: hosts.bat O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/ravkill/rsonline.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{269E0FBE-26D9-49C1-8121-D23AC4877580}: NameServer = 61.233.9.9 211.98.2.4 O23 - NT 服务: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - rising - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe 2005-09-15 21:05:19
88668866 初生襁褓狮帖子:58 注册: 2005-07-26 来自:	分享到：

天使之剑社区嘉宾帖子:2961 注册: 2005-09-15 来自:	发表于： 2005-09-15 20:14 \| 短消息资料字号：小中大 2楼【回复“88668866”的帖子】清空IE临时文件，暂时关闭系统还原。重新启动至安全模式，使用HijackThis扫描后修复（在需要修复的项目前面打对勾，然后按“Fix checked”或“修复”）： O1 - Hosts: 218.85.139.122 minisite.qq.com O1 - Hosts: 218.85.139.122 www.minisite.qq.com O1 - Hosts: 218.85.139.122 zhao114.com O1 - Hosts: 218.85.139.122 www.zhao114.com O1 - Hosts: 218.85.139.122 zhao114.com O1 - Hosts: 218.85.139.122 www.zhao114.com O1 - Hosts: 218.85.139.122 yan88.com O1 - Hosts: 218.85.139.122 www.yan88.com O1 - Hosts: 218.85.139.122 yan88.com O1 - Hosts: 218.85.139.122 www.yan88.com O1 - Hosts: 218.85.139.122 cnww.net O1 - Hosts: 218.85.139.122 www.cnww.net O1 - Hosts: 218.85.139.122 zhao123.com O1 - Hosts: 218.85.139.122 www.zhao123.com O1 - Hosts: 218.85.139.122 4399.com O1 - Hosts: 218.85.139.122 www.4399.com O1 - Hosts: 218.85.139.122 chinagames.net O1 - Hosts: 218.85.139.122 www.chinagames.net O1 - Hosts: 218.85.139.122 tiexue.net O1 - Hosts: 218.85.139.122 www.tiexue.net O1 - Hosts: 218.85.139.122 qq163.com O1 - Hosts: 218.85.139.122 www.qq163.com O1 - Hosts: 218.85.139.122 tt67.com O1 - Hosts: 218.85.139.122 www.tt67.com O1 - Hosts: 218.85.139.122 chinamp3.com O1 - Hosts: 218.85.139.122 www.chinamp3.com O1 - Hosts: 218.85.139.122 pg168.com O1 - Hosts: 218.85.139.122 www.pg168.com O1 - Hosts: 218.85.139.122 yymp3.com O1 - Hosts: 218.85.139.122 www.yymp3.com O1 - Hosts: 218.85.139.122 yy138.com O1 - Hosts: 218.85.139.122 www.yy138.com O1 - Hosts: 218.85.139.122 dj99.com O1 - Hosts: 218.85.139.122 www.dj99.com O1 - Hosts: 218.85.139.122 sogua.com O1 - Hosts: 218.85.139.122 www.sogua.com O1 - Hosts: 218.85.139.122 snsn.net O1 - Hosts: 218.85.139.122 www.snsn.net O1 - Hosts: 218.85.139.122 flash8.net O1 - Hosts: 218.85.139.122 www.flash8.net O1 - Hosts: 218.85.139.122 mop.com O1 - Hosts: 218.85.139.122 www.mop.com O1 - Hosts: 218.85.139.122 tianyaclub.com O1 - Hosts: 218.85.139.122 www.tianyaclub.com O1 - Hosts: 218.85.139.122 xici.net O1 - Hosts: 218.85.139.122 www.xici.net O1 - Hosts: 218.85.139.122 ucanlove.com O1 - Hosts: 218.85.139.122 www.ucanlove.com O1 - Hosts: 218.85.139.122 cmfu.com O1 - Hosts: 218.85.139.122 www.cmfu.com O1 - Hosts: 218.85.139.122 21red.net O1 - Hosts: 218.85.139.122 www.21red.net O1 - Hosts: 218.85.139.122 pconline.com.cn O1 - Hosts: 218.85.139.122 www.pconline.com.cn O1 - Hosts: 218.85.139.122 donews.com O1 - Hosts: 218.85.139.122 www.donews.com O1 - Hosts: 218.85.139.122 pcauto.com.cn O1 - Hosts: 218.85.139.122 www.pcauto.com.cn O1 - Hosts: 218.85.139.122 265.com O1 - Hosts: 218.85.139.122 www.265.com O1 - Hosts: 218.85.139.122 wo99.com O1 - Hosts: 218.85.139.122 www.wo99.com O1 - Hosts: 218.85.139.122 familydoctor.com.cn O1 - Hosts: 218.85.139.122 www.familydoctor.com.cn O1 - Hosts: 218.85.139.122 flashempire.com O1 - Hosts: 218.85.139.122 www.flashempire.com O1 - Hosts: 218.85.139.122 showgood.tv O1 - Hosts: 218.85.139.122 www.showgood.tv O1 - Hosts: 218.85.139.122 flashfan.net O1 - Hosts: 218.85.139.122 www.flashfan.net O1 - Hosts: 218.85.139.122 long21.net O1 - Hosts: 218.85.139.122 www.long21.net O1 - Hosts: 218.85.139.122 socom O1 - Hosts: 218.85.139.122 www.socom O1 - Hosts: 218.85.139.122 flashhome.net O1 - Hosts: 218.85.139.122 www.flashhome.net O1 - Hosts: 218.85.139.122 cnflash.net O1 - Hosts: 218.85.139.122 www.cnflash.net O1 - Hosts: 218.85.139.122 flashsky.com O1 - Hosts: 218.85.139.122 www.flashsky.com O1 - Hosts: 218.85.139.122 hunansky.com O1 - Hosts: 218.85.139.122 www.hunansky.com O1 - Hosts: 218.85.139.122 52flash.net O1 - Hosts: 218.85.139.122 www.52flash.net O1 - Hosts: 218.85.139.122 flashh.com O1 - Hosts: 218.85.139.122 www.flashh.com O1 - Hosts: 218.85.139.122 flashsun.com O1 - Hosts: 218.85.139.122 www.flashsun.com O1 - Hosts: 218.85.139.122 7k7k.com O1 - Hosts: 218.85.139.122 www.7k7k.com O1 - Hosts: 218.85.139.122 xuanxuan.com O1 - Hosts: 218.85.139.122 www.xuanxuan.com O1 - Hosts: 218.85.139.122 flash88.net O1 - Hosts: 218.85.139.122 www.flash88.net O1 - Hosts: 218.85.139.122 91flash.com O1 - Hosts: 218.85.139.122 www.91flash.com O1 - Hosts: 218.85.139.122 doingflash.com O1 - Hosts: 218.85.139.122 www.doingflash.com O1 - Hosts: 218.85.139.122 5see.com O1 - Hosts: 218.85.139.122 www.5see.com O1 - Hosts: 218.85.139.122 skyhits.com O4 - 启动项HKLM\\Run: [usb] C:\WINDOWS\System32\usb.exe O4 - 启动项HKLM\\Run: [hosts] C:\WINDOWS\system32\hosts.bat O4 - 启动项HKLM\\Run: [3721] C:\$NtUninstallQ9494$\3721.bat O4 - HKCU\..\Run: [hosts] C:\WINDOWS\system32\hosts.bat O4 - HKCU\..\Run: [3721] C:\$NtUninstallQ9494$\3721.bat O4 - Startup: hosts.bat 删除： C:\$NtUninstallQ9494$文件夹 C:\WINDOWS\system32\hosts.bat C:\WINDOWS\System32\usb.exe 以上建议仅供参考，如果您认识其中的一些设置抑或是您的手动设置，就不必执行。
天使之剑社区嘉宾帖子:2961 注册: 2005-09-15 来自:

88668866 初生襁褓狮帖子:58 注册: 2005-07-26 来自:	发表于： 2005-09-15 21:00 \| 只看楼主短消息资料字号：小中大 3楼【回复“天使之剑”的帖子】我按你的方法试过了，04项O4 - Startup: hosts.bat修复不了，所有hosts.后缀都要删除吗
88668866 初生襁褓狮帖子:58 注册: 2005-07-26 来自:

天使之剑社区嘉宾帖子:2961 注册: 2005-09-15 来自:	发表于： 2005-09-15 21:05 \| 短消息资料字号：小中大 4楼【回复“88668866”的帖子】请重新启动至安全模式，关闭所有窗口，使用HijackThis扫描后修复O4 - 启动项HKLM\\Run: [hosts] C:\WINDOWS\system32\hosts.bat，删除C:\WINDOWS\system32\hosts.bat。
天使之剑社区嘉宾帖子:2961 注册: 2005-09-15 来自:

天使之剑社区嘉宾帖子:2961 注册: 2005-09-15 来自:	发表于： 2006-01-12 18:26 \| 短消息资料字号：小中大 5楼瑞星防火墙的说明附件: 文件名:5822402006112182606.JPG 下载次数:239 文件类型:image/pjpeg 文件大小: 上传时间:2006-1-12 18:26:06 描述: 预览信息:EXIF信息 User Comment : LEAD Technologies Inc. V1.01
天使之剑社区嘉宾帖子:2961 注册: 2005-09-15 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT