★★非常棘手的问题请电脑达人帮忙★★ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛 ★★非常棘手的问题请电脑达人帮忙★★

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12 3 4

1 / 4 页

跳转页

★★非常棘手的问题请电脑达人帮忙★★

一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:	发表于： 2005-08-14 01:49 \| 只看楼主短消息资料字号：小中大 1楼 ★★非常棘手的问题请电脑达人帮忙★★ 我的机器只要一拨号过一会儿就会弹出一个网页网址是 http://217.170.4.137/_vti_bin/index.html 弹出来还不要紧可恶的是它一出来就会自己创建一个拨号连接然后我就会吊线还会在C盘出一个EXE的文件文件名一天和不一样删不掉的删了又会出还原系统都没有用啊！就在我发贴这段时间就掉了N次已经几天了真的快崩溃了！~ 请高人相助！小弟先谢谢了附件: 文件名:562465200581420155.BMP 下载次数:0 文件类型:application/octet-stream 文件大小: 上传时间:2005-8-14 1:49:54 描述: 2005-08-14 04:31:45
一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:	分享到：

一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:	发表于： 2005-08-14 01:51 \| 只看楼主短消息资料字号：小中大 2楼弹出来拨号的图附件: 文件名:562465200581415210.BMP 下载次数:0 文件类型:application/octet-stream 文件大小: 上传时间:2005-8-14 1:51:11 描述:
一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:

一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:	发表于： 2005-08-14 01:55 \| 只看楼主短消息资料字号：小中大 3楼哪位好心的人告诉我解决的办法啊？以身相许也可以啊！~
一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:

晓肚肚自信弱冠狮帖子:339 注册: 2005-07-16 来自:	发表于： 2005-08-14 02:12 \| 短消息资料字号：小中大 4楼 http://forum.ikaka.com/topic.asp?board=28&artid=6979213 看来你需要到这个帖子1楼,下附件里的工具,扫个日志上来
晓肚肚自信弱冠狮帖子:339 注册: 2005-07-16 来自:

一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:	发表于： 2005-08-14 02:22 \| 只看楼主短消息资料字号：小中大 5楼请大大看看 Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\Rpcmon.exe D:\Tencent\qq\QQ.exe C:\WINDOWS\sounddv.exe C:\WINDOWS\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\155847200541134207\HijackThis.exe O1 - Hosts: 141.225.152.142 onlineaccounts2.abbeynational.co.uk O1 - Hosts: 141.225.152.142 www3.aibgbonline.co.uk O1 - Hosts: 141.225.152.142 www.bank.alliance-leicester.co.uk O1 - Hosts: 141.225.152.142 login.iblogin.com O1 - Hosts: 141.225.152.142 ww2.bankofscotlandhalifax-online.co.uk O1 - Hosts: 141.225.152.142 inet.barclays.co.uk O1 - Hosts: 141.225.152.142 iibank.barclays.co.uk O1 - Hosts: 141.225.152.142 iibank.cahoot.com O1 - Hosts: 141.225.152.142 www3.coventrybuildingsociety.co.uk O1 - Hosts: 141.225.152.142 ww.hsbc.co.uk O1 - Hosts: 141.225.152.142 login.ebank.offshore.hsbc.co.je O1 - Hosts: 141.225.152.142 ww3.online-offshore.lloydstsb.com O1 - Hosts: 141.225.152.142 ww3.online-business.lloydstsb.co.uk O1 - Hosts: 141.225.152.142 ww3.online.lloydstsb.co.uk O1 - Hosts: 141.225.152.142 ww3.online.lloydstsb.co.uk O1 - Hosts: 141.225.152.142 ww3.online-business.lloydstsb.co.uk O1 - Hosts: 141.225.152.142 ob2.nationet.com O1 - Hosts: 141.225.152.142 ww3.onlinebanking.natwestoffshore.com O1 - Hosts: 141.225.152.142 ww1.nwolb.com O1 - Hosts: 141.225.152.142 ww1.onlinebanking.iombank.com O1 - Hosts: 141.225.152.142 ww1.www.rbsdigital.com O1 - Hosts: 141.225.152.142 welcome.smile.co.uk O1 - Hosts: 141.225.152.142 login.365online.com O1 - Hosts: 141.225.152.142 wvw.citizensbankonline.com O1 - Hosts: 141.225.152.142 esecure.regionsnet.com O1 - Hosts: 141.225.152.142 rollb.associatedbank.com O1 - Hosts: 141.225.152.142 upb.unionplanters.com O1 - Hosts: 141.225.152.142 www.onlinebanking.huntington.com O1 - Hosts: 141.225.152.142 inet.southtrustonlinebanking.com O1 - Hosts: 141.225.152.142 logon.personal.wamu.com O1 - Hosts: 141.225.152.142 login.compassweb.com O1 - Hosts: 141.225.152.142 logon.firstmeritib.com O1 - Hosts: 141.225.152.142 login.ccfcuonline.org O1 - Hosts: 141.225.152.142 ww3.etimebanker.bankofthewest.com O1 - Hosts: 141.225.152.142 ww2.onlinebanking.lasallebank.com O1 - Hosts: 141.225.152.142 wvw.totallyfreebanking.com O1 - Hosts: 141.225.152.142 www.online.wellsfargo.com O1 - Hosts: 141.225.152.142 www.onlinebanking.bankofoklahoma.com O1 - Hosts: 141.225.152.142 accounts4.keybank.com O1 - Hosts: 141.225.152.142 logon.bankone.com O1 - Hosts: 141.225.152.142 www.secure.tdbanknorth.com O1 - Hosts: 141.225.152.142 www.secure.mvnt4.com O1 - Hosts: 141.225.152.142 ww.mynfbonline.com O1 - Hosts: 141.225.152.142 login.forumcuonline.com O1 - Hosts: 141.225.152.142 www.eds.usersonlnet.com O1 - Hosts: 141.225.152.142 www.onlineid.bankofamerica.com O1 - Hosts: 141.225.152.142 wvw.e-gold.com O1 - Hosts: 141.225.152.142 pcbs.peoples.com O1 - Hosts: 141.225.152.142 www.global1.onlinebank.com O1 - Hosts: 141.225.152.142 ww2.mybranch.lafcu.com O1 - Hosts: 141.225.152.142 login.webbanking.comerica.com O1 - Hosts: 141.225.152.142 web.banking.firsttennessee.com O1 - Hosts: 141.225.152.142 logon.members1st.org O1 - Hosts: 141.225.152.142 www.cib.ibanking-services.com O1 - Hosts: 141.225.152.142 www.miwebbusbank.ebanking-services.com O1 - Hosts: 141.225.152.142 wvw.paypal.com O1 - Hosts: 141.225.152.142 www.signin.ebay.com O1 - Hosts: 141.225.152.142 wvw.etrade.com O1 - Hosts: 141.225.152.142 ww4.fleethomelink.fleet.com O1 - Hosts: 141.225.152.142 ww3.connect.skyfi.com O1 - Hosts: 141.225.152.142 www6.usbank.com O1 - Hosts: 141.225.152.142 www.bvi.bancodevalencia.es O1 - Hosts: 141.225.152.142 extrant.banesto.es O1 - Hosts: 141.225.152.142 banesnt.banesto.es O1 - Hosts: 141.225.152.142 activia.caixagalicia.es O1 - Hosts: 141.225.152.142 www.bancae.caixapenedes.com O1 - Hosts: 141.225.152.142 login.caixasabadell.net O1 - Hosts: 141.225.152.142 oii.cajamadrid.es O1 - Hosts: 141.225.152.142 login.cajamar.es O1 - Hosts: 141.225.152.142 login.ccm.es O1 - Hosts: 141.225.152.142 ww.unicaja.es O1 - Hosts: 141.225.152.142 www5.bancopopular.es O1 - Hosts: 141.225.152.142 ww3.bbvanet.com O1 - Hosts: 141.225.152.142 ww.bayernlb.de O1 - Hosts: 141.225.152.142 ww2.berliner-volksbank.de O1 - Hosts: 141.225.152.142 ww7.homebanking-berlin.de O1 - Hosts: 141.225.152.142 portal09.commerzbanking.de O1 - Hosts: 141.225.152.142 www.meine.deutsche-bank.de O1 - Hosts: 141.225.152.142 ww2.dresdner-privat.de O1 - Hosts: 141.225.152.142 ww.e-banking.helaba.de O1 - Hosts: 141.225.152.142 ww.hsh-nordbank.de O1 - Hosts: 141.225.152.142 www.my.hypovereinsbank.de O1 - Hosts: 141.225.152.142 ww3.homebanking-berlin.de O1 - Hosts: 141.225.152.142 ww3.homebanking-berlin.de O1 - Hosts: 141.225.152.142 www.banking.lbbw.de O1 - Hosts: 141.225.152.142 lrp.sparkasse-banking.de O1 - Hosts: 141.225.152.142 ww3.homebanking-niedersachsen.de O1 - Hosts: 141.225.152.142 www.onlinebanking.norisbank.de O1 - Hosts: 141.225.152.142 www.banking.postbank.de O1 - Hosts: 141.225.152.142 wvw.internetbanking.gad.de O1 - Hosts: 141.225.152.142 ww1.portal.izb.de O1 - Hosts: 141.225.152.142 wvw.kunden-service.lbs.de O1 - Hosts: 141.225.152.142 ibanking.seb.de O1 - Hosts: 141.225.152.142 bw7.sparkasse-banking.de O1 - Hosts: 141.225.152.142 ww2.homebanking-sparkasse.de O1 - Hosts: 141.225.152.142 ww2.vr-networld-ebanking.de O1 - Hosts: 141.225.152.142 ww.bics.fr O1 - Hosts: 141.225.152.142 www.co.caixabank.fr O1 - Hosts: 141.225.152.142 ww.creditmutuel.fr O1 - Hosts: 141.225.152.142 internetbank.intesabci.it O1 - Hosts: 141.225.152.142 ww.extensive.bancalombarda.it O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v4.dll O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - C:\WINDOWS\System32\aclayer.dll O2 - BHO: Microsoft Javascript Class - {6E28339B-7A2A-47B6-AEB2-46BA53782373} - C:\WINDOWS\System32\dllcache\javascript.dll O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\RunServices: [Windows File System Checkd] ntfsckd.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O8 - Extra context menu item: 使用影音传送带下载 - C:\Program Files\Xi\NetTransport 2\NTAddLink.html O8 - Extra context menu item: 使用影音传送带下载全部链接 - C:\Program Files\Xi\NetTransport 2\NTAddList.html O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\hfgame3\GameClient.exe O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra button: 易趣购物 - {DE607141-AC19-421e-862A-2D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing) O9 - Extra 'Tools' menuitem: 易趣购物 - {DE607141-AC19-421e-862A-2D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing) O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Remote Procedure Call (RPC) Monitoring (Rpcmon) - Unknown owner - C:\WINDOWS\System32\Rpcmon.exe O23 - Service: WIN32Sound - Unknown owner - C:\WINDOWS\sounddv.exe
一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:

bobo无极限初生襁褓狮帖子:12325 注册: 2005-07-08 来自:	发表于： 2005-08-14 02:27 \| 短消息资料字号：小中大 6楼 O1 - Hosts: 141.225.152.142 onlineaccounts2.abbeynational.co.uk O1 - Hosts: 141.225.152.142 www3.aibgbonline.co.uk O1 - Hosts: 141.225.152.142 www.bank.alliance-leicester.co.uk O1 - Hosts: 141.225.152.142 login.iblogin.com O1 - Hosts: 141.225.152.142 ww2.bankofscotlandhalifax-online.co.uk O1 - Hosts: 141.225.152.142 inet.barclays.co.uk O1 - Hosts: 141.225.152.142 iibank.barclays.co.uk O1 - Hosts: 141.225.152.142 iibank.cahoot.com O1 - Hosts: 141.225.152.142 www3.coventrybuildingsociety.co.uk O1 - Hosts: 141.225.152.142 ww.hsbc.co.uk O1 - Hosts: 141.225.152.142 login.ebank.offshore.hsbc.co.je O1 - Hosts: 141.225.152.142 ww3.online-offshore.lloydstsb.com O1 - Hosts: 141.225.152.142 ww3.online-business.lloydstsb.co.uk O1 - Hosts: 141.225.152.142 ww3.online.lloydstsb.co.uk O1 - Hosts: 141.225.152.142 ww3.online.lloydstsb.co.uk O1 - Hosts: 141.225.152.142 ww3.online-business.lloydstsb.co.uk O1 - Hosts: 141.225.152.142 ob2.nationet.com O1 - Hosts: 141.225.152.142 ww3.onlinebanking.natwestoffshore.com O1 - Hosts: 141.225.152.142 ww1.nwolb.com O1 - Hosts: 141.225.152.142 ww1.onlinebanking.iombank.com O1 - Hosts: 141.225.152.142 ww1.www.rbsdigital.com O1 - Hosts: 141.225.152.142 welcome.smile.co.uk O1 - Hosts: 141.225.152.142 login.365online.com O1 - Hosts: 141.225.152.142 wvw.citizensbankonline.com O1 - Hosts: 141.225.152.142 esecure.regionsnet.com O1 - Hosts: 141.225.152.142 rollb.associatedbank.com O1 - Hosts: 141.225.152.142 upb.unionplanters.com O1 - Hosts: 141.225.152.142 www.onlinebanking.huntington.com O1 - Hosts: 141.225.152.142 inet.southtrustonlinebanking.com O1 - Hosts: 141.225.152.142 logon.personal.wamu.com O1 - Hosts: 141.225.152.142 login.compassweb.com O1 - Hosts: 141.225.152.142 logon.firstmeritib.com O1 - Hosts: 141.225.152.142 login.ccfcuonline.org O1 - Hosts: 141.225.152.142 ww3.etimebanker.bankofthewest.com O1 - Hosts: 141.225.152.142 ww2.onlinebanking.lasallebank.com O1 - Hosts: 141.225.152.142 wvw.totallyfreebanking.com O1 - Hosts: 141.225.152.142 www.online.wellsfargo.com O1 - Hosts: 141.225.152.142 www.onlinebanking.bankofoklahoma.com O1 - Hosts: 141.225.152.142 accounts4.keybank.com O1 - Hosts: 141.225.152.142 logon.bankone.com O1 - Hosts: 141.225.152.142 www.secure.tdbanknorth.com O1 - Hosts: 141.225.152.142 www.secure.mvnt4.com O1 - Hosts: 141.225.152.142 ww.mynfbonline.com O1 - Hosts: 141.225.152.142 login.forumcuonline.com O1 - Hosts: 141.225.152.142 www.eds.usersonlnet.com O1 - Hosts: 141.225.152.142 www.onlineid.bankofamerica.com O1 - Hosts: 141.225.152.142 wvw.e-gold.com O1 - Hosts: 141.225.152.142 pcbs.peoples.com O1 - Hosts: 141.225.152.142 www.global1.onlinebank.com O1 - Hosts: 141.225.152.142 ww2.mybranch.lafcu.com O1 - Hosts: 141.225.152.142 login.webbanking.comerica.com O1 - Hosts: 141.225.152.142 web.banking.firsttennessee.com O1 - Hosts: 141.225.152.142 logon.members1st.org O1 - Hosts: 141.225.152.142 www.cib.ibanking-services.com O1 - Hosts: 141.225.152.142 www.miwebbusbank.ebanking-services.com O1 - Hosts: 141.225.152.142 wvw.paypal.com O1 - Hosts: 141.225.152.142 www.signin.ebay.com O1 - Hosts: 141.225.152.142 wvw.etrade.com O1 - Hosts: 141.225.152.142 ww4.fleethomelink.fleet.com O1 - Hosts: 141.225.152.142 ww3.connect.skyfi.com O1 - Hosts: 141.225.152.142 www6.usbank.com O1 - Hosts: 141.225.152.142 www.bvi.bancodevalencia.es O1 - Hosts: 141.225.152.142 extrant.banesto.es O1 - Hosts: 141.225.152.142 banesnt.banesto.es O1 - Hosts: 141.225.152.142 activia.caixagalicia.es O1 - Hosts: 141.225.152.142 www.bancae.caixapenedes.com O1 - Hosts: 141.225.152.142 login.caixasabadell.net O1 - Hosts: 141.225.152.142 oii.cajamadrid.es O1 - Hosts: 141.225.152.142 login.cajamar.es O1 - Hosts: 141.225.152.142 login.ccm.es O1 - Hosts: 141.225.152.142 ww.unicaja.es O1 - Hosts: 141.225.152.142 www5.bancopopular.es O1 - Hosts: 141.225.152.142 ww3.bbvanet.com O1 - Hosts: 141.225.152.142 ww.bayernlb.de O1 - Hosts: 141.225.152.142 ww2.berliner-volksbank.de O1 - Hosts: 141.225.152.142 ww7.homebanking-berlin.de O1 - Hosts: 141.225.152.142 portal09.commerzbanking.de O1 - Hosts: 141.225.152.142 www.meine.deutsche-bank.de O1 - Hosts: 141.225.152.142 ww2.dresdner-privat.de O1 - Hosts: 141.225.152.142 ww.e-banking.helaba.de O1 - Hosts: 141.225.152.142 ww.hsh-nordbank.de O1 - Hosts: 141.225.152.142 www.my.hypovereinsbank.de O1 - Hosts: 141.225.152.142 ww3.homebanking-berlin.de O1 - Hosts: 141.225.152.142 ww3.homebanking-berlin.de O1 - Hosts: 141.225.152.142 www.banking.lbbw.de O1 - Hosts: 141.225.152.142 lrp.sparkasse-banking.de O1 - Hosts: 141.225.152.142 ww3.homebanking-niedersachsen.de O1 - Hosts: 141.225.152.142 www.onlinebanking.norisbank.de O1 - Hosts: 141.225.152.142 www.banking.postbank.de O1 - Hosts: 141.225.152.142 wvw.internetbanking.gad.de O1 - Hosts: 141.225.152.142 ww1.portal.izb.de O1 - Hosts: 141.225.152.142 wvw.kunden-service.lbs.de O1 - Hosts: 141.225.152.142 ibanking.seb.de O1 - Hosts: 141.225.152.142 bw7.sparkasse-banking.de O1 - Hosts: 141.225.152.142 ww2.homebanking-sparkasse.de O1 - Hosts: 141.225.152.142 ww2.vr-networld-ebanking.de O1 - Hosts: 141.225.152.142 ww.bics.fr O1 - Hosts: 141.225.152.142 www.co.caixabank.fr O1 - Hosts: 141.225.152.142 ww.creditmutuel.fr O1 - Hosts: 141.225.152.142 internetbank.intesabci.it O1 - Hosts: 141.225.152.142 ww.extensive.bancalombarda.it 这都是一些什么东东啊,我也不知道,帮顶,
bobo无极限初生襁褓狮帖子:12325 注册: 2005-07-08 来自:

晓肚肚自信弱冠狮帖子:339 注册: 2005-07-16 来自:	发表于： 2005-08-14 02:28 \| 短消息资料字号：小中大 7楼结束这两个进程C:\WINDOWS\System32\Rpcmon.exe C:\WINDOWS\sounddv.exe 在注册表里删掉这两个服务O23 - Service: Remote Procedure Call (RPC) Monitoring (Rpcmon) - Unknown owner - C:\WINDOWS\System32\Rpcmon.exe O23 - Service: WIN32Sound - Unknown owner - C:\WINDOWS\sounddv.exe 应该是这样你的机子连杀软也不装,厉害
晓肚肚自信弱冠狮帖子:339 注册: 2005-07-16 来自:

晓肚肚自信弱冠狮帖子:339 注册: 2005-07-16 来自:	发表于： 2005-08-14 02:29 \| 短消息资料字号：小中大 8楼 IP ： 141.225.152.142 地址：美国孟菲斯大学更厉害
晓肚肚自信弱冠狮帖子:339 注册: 2005-07-16 来自:

一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:	发表于： 2005-08-14 02:29 \| 只看楼主短消息资料字号：小中大 9楼都是HijackThis扫描出来的日志啊
一发初生襁褓狮帖子:28 注册: 2005-08-13 来自:

晓肚肚自信弱冠狮帖子:339 注册: 2005-07-16 来自:	发表于： 2005-08-14 02:32 \| 短消息资料字号：小中大 10楼不然你在忍受一晚,明天版主还给你看看,他可是高手
晓肚肚自信弱冠狮帖子:339 注册: 2005-07-16 来自:

<<上一主题|下一主题>>

12 3 4

1 / 4 页

跳转页

页面顶部

Powered by Discuz!NT