1   1  /  1  页   跳转

请您帮助看一下,有日志。谢谢

请您帮助看一下,有日志。谢谢

请帮忙看下,哪还有问题

Logfile of HijackThis v1.99.1
Scan saved at 19:20:43, on 2006-9-2
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
F:\瑞星\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
f:\瑞星\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
F:\瑞星\Rising\Rav\RavTask.exe
F:\瑞星\Rising\Rfw\rfwmain.exe
C:\WINDOWS\system32\ctfmon.exe
F:\瑞星\Rising\Rav\Ravmond.exe
F:\瑞星\Rising\Rav\RavStub.exe
F:\瑞星\Rising\Rav\RAVMON.EXE
E:\play\QQ\QQ.exe
E:\play\QQ\TIMPlatform.exe
C:\WINDOWS\system32\conime.exe
E:\play\传奇世界\Woool\woool.exe
E:\play\传奇世界\Woool\data\woool.dat
C:\DOCUME~1\user\LOCALS~1\Temp\Dyn5C.tmp
E:\play\传奇世界\挂机\新建文件夹\破解\51便宜传家宝2.54C特别版\51cjb.dat
E:\play\传奇世界\挂机\新建文件夹\破解\51便宜传家宝2.54C特别版\51cjb.dat
E:\play\传奇世界\挂机\新建文件夹\破解\51便宜传家宝2.54C特别版\51cjb.dat
E:\play\传奇世界\挂机\新建文件夹\破解\51便宜传家宝2.54C特别版\51cjb.dat
E:\play\传奇世界\挂机\新建文件夹\传家宝2.63b版\main.dat
C:\Program Files\Winamp\Winamp.exe
C:\WINDOWS\system32\Realplayer.exe
F:\瑞星\hj\HijackThis.exe

O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - F:\迅雷\ComDlls\XunLeiBHO_002.dll
O2 - BHO: UrtTkocj Class - {9A110647-2ADD-6467-9B60-22191D6EBEA5} - C:\WINDOWS\DOWNLO~1\hoazkz.dll (file missing)
O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [RavTask] "F:\瑞星\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "F:\瑞星\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [Realplayer.exe] C:\WINDOWS\system32\Realplayer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Realplayer.exe] C:\WINDOWS\system32\Realplayer.exe
O8 - Extra context menu item: &使用迅雷下载 - F:\迅雷\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - F:\迅雷\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - E:\play\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\play\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\play\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\play\QQ\SendMMS.htm
O9 - Extra button: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - Extra 'Tools' menuitem: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - Extra button: JUJU猫 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.jujumao.net (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll
O11 - Options group: [CDNCLIENT]  中文上网
O17 - HKLM\System\CCS\Services\Tcpip\..\{09C8678A-2FE9-4937-BA11-FC8750BFF25F}: NameServer = 202.96.64.68 202.96.69.38
O17 - HKLM\System\CCS\Services\Tcpip\..\{B12FA395-D14E-48E4-B412-ADE280F504C8}: NameServer = 12.21.21.21,212.12.22.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{09C8678A-2FE9-4937-BA11-FC8750BFF25F}: NameServer = 202.96.64.68 202.96.69.38
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\瑞星\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\瑞星\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\瑞星\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\瑞星\Rising\Rav\Ravmond.exe

最后编辑2006-09-02 20:00:12
分享到:
gototop
 

C:\WINDOWS\system32\Realplayer.exe
病毒,请参照置顶帖
gototop
 

请说明白些。。我看那个帖子
gototop
 

http://forum.ikaka.com/topic.asp?board=28&artid=8157088
gototop
 

我的现象没有帖子说的那样

我的主页没有被改  只是有的时候 会弹出一个网站
gototop
 

不是吧......
那么那个C:\WINDOWS\system32\Realplayer.exe怎么来的......
我也不懂了......
gototop
 

那我直接 用HJ 把这个修复了

没事吧
gototop
 

这样不太好,还是等等高手吧~
gototop
 

没看到高手啊 谢谢你  谁来帮帮我啊
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT