瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】请各位大虾帮帮忙!本人机子不知中了何种病毒???

1   1  /  1  页   跳转

【求助】请各位大虾帮帮忙!本人机子不知中了何种病毒???

【求助】请各位大虾帮帮忙!本人机子不知中了何种病毒???

本人在一次整里IE收藏夹时发现几个不曾收藏过的网址,于是把它们删除,但以后开机再打开浏览器时,又发现了这几个网址,怎么删除都不能删去,用瑞星杀毒也没有发现任何病毒。请教各位大虾:怎样才能把收藏夹中的网址删去呢???
最后编辑2005-08-19 14:49:21
分享到:
gototop
 

您好,为了方便帮您解决问题,请您使用hijackthis把扫描的日志贴到贴子上来。



运行HijackThis,先点[扫描系统并保存日志]或[Do a system scan and save a logfile]按钮,扫描完成后,LOG将会在自动弹出的记事本中
显示,再从记事本里复制/粘贴到贴子里。如果LOG比较长,一贴发不完,你可以分成几个部分发在回贴里。
gototop
 

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      13:04:09, 日期 2005-08-19
操作系统:  Windows XP SP1 (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Maxthon\Maxthon.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\3721\assistse.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Maxthon\Maxthon.exe
C:\Documents and Settings\hcx\桌面\4483172005624221516\HijackThis1991zww.exe

R3 - URLSearchHook: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O1 - Hosts: 1159680172 auto.search.msn.com
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - IE右键菜单中的新增项目: !搜一搜 - res://C:\WINDOWS\DOWNLO~1\CnsMinEx.dll/1003
O9 - 浏览器额外的按钮: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm?pid=206671_1006 (file missing)
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://hot.3721.com/rd/shop_btn.htm (file missing)
O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: 百万图库 - {6713E8D2-850A-101B-AFC0-4210102A8DA7} - http://www.26-3.com/p (file missing) (HKCU)
O9 - 浏览器额外的按钮: 铃声图片下载 - {7713E8D2-850A-101B-AFC0-4210102A8DA7} - http://www.26-3.com/sms/index.htm (file missing) (HKCU)
O11 - Options group: [!CNS]  上网助手-地址栏搜索
O17 - HKLM\System\CCS\Services\Tcpip\..\{01AEA1C5-15BC-4B02-86DA-F615F6F43D2F}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{05741DFB-498E-4EDB-BBC5-96884B3C6F85}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{080A79D3-131A-4FA3-8216-4AB5F5ECCFEB}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{0F32C01A-DB4A-4787-AFA9-8E40FC50577A}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{105086A3-1EB2-43CD-98F8-325F55B288EC}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{15CBBD1F-CE20-46B5-A23C-69E4C42D8039}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{165B73CC-A856-4E00-80C4-4F41F7FB59F2}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D90954C-DB7A-4F27-9891-61A5420C4DE4}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{4EB9949D-46E6-4269-B7D9-2C46BFC7E08E}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{5071EBB3-72C9-4B22-B85F-5418A09B4F79}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{50DD8112-B368-4B35-8970-4198111BC53A}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{52AD8725-871C-4C4D-A9BA-F541FBDF1D0F}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{55EA1389-6959-4FED-B751-3000FB87DF07}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{61AA3A0F-2098-46EF-8D9A-3D4CC99455D9}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{72B3D315-9B3B-4C41-A406-8E972EDC66EC}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{7499EE40-3117-4DB9-8995-4867B5FA8277}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{76B45C42-62E0-41F5-89C5-909190771E60}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{82C61315-44F3-4A96-B138-03A116543219}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{8938EA51-9AB8-478B-95C2-0717D2B21A78}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{8A81EB9F-12F2-4B0F-BEA2-3BA702D60D0C}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C5ABA90-2FB6-42FD-95C0-D4F977F1CF36}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{8E48523F-A0C2-4083-B045-AD9BAA05F00D}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{937F6C96-7778-49B0-8082-89B6410DE660}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{97AF5CB6-45A9-44FA-B70C-A3558E247984}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F352B76-D075-4213-B547-CB8E92BCBDBB}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{9FAD3B62-7DDA-4FCA-8D9B-C839301F843F}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{A2079021-D9A2-4A71-AA43-034F310BC751}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8232B15-93BA-4ED7-B859-F0B08083D89E}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{B87B85B2-31BB-4983-8AF3-9DC4E45F880C}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{BB7F2A37-25BB-4C30-BF07-D469835FDE90}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{BC109661-E1D6-4CAB-87CD-3BC73CF64E5F}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{DBEBBBD3-BCE7-4D39-A2E0-584FC64AC26B}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{DD25FC81-89B0-49C0-87AD-44A629AEB1A7}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{E7B61301-BFFA-4BD3-B9E1-F95CB689F1DA}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{E88D7C4C-F868-4DA7-B9E5-EE1EF7C75322}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{F08F0A9D-9E0F-4A15-B21E-F864BA707DAF}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{F65BEBD0-C9D3-47D6-91E2-BE8E6D2B8999}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CCS\Services\Tcpip\..\{FA6A3FC9-8AD8-4906-B7B2-2280FAA90680}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{01AEA1C5-15BC-4B02-86DA-F615F6F43D2F}: NameServer = 69.50.176.198,85.255.112.12
O17 - HKLM\System\CS2\Services\Tcpip\..\{01AEA1C5-15BC-4B02-86DA-F615F6F43D2F}: NameServer = 69.50.176.198,85.255.112.12
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll

gototop
 

打全补丁修复:O1 - Hosts: 1159680172 auto.search.msn.com
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT