1   1  /  1  页   跳转

HIJACKTHIS不能用了

HIJACKTHIS不能用了

朋友的笔记本,他也不知道防护,电脑里全是病毒,下下来HIJACKTHIS1。991也不能用,显示没有找到MSVBM60。DLL,重新安装应用程序可能会修复次问题,所以也没办法传日志,
具体的就是www.611mms.com,这个网页也去不掉,不停的刷新,还有baido,goost等小窗口跳出来,sysgrst也不知道是什么东西也删不掉,希望大家帮忙
最后编辑2006-05-11 14:06:19
分享到:
gototop
 

【回复“悲魔剑”的帖子】
HijackThis是用VB开发的, 运行时需要VB的运行库文件MSVBVM60.DLL支持。


MSVBVM60.DLL本地下载(感谢moonforest朋友上传):

http://forum.ikaka.com/download.asp?id=6313956


也可以到http://www.onlinedown.net/soft/1294.htm下载.
gototop
 

多谢,HIJACKTHIS已经能用,我扫描了一份
Logfile of HijackThis v1.99.1
Scan saved at 12:51:36, on 2006-5-11
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Svchost.dat
C:\Documents and Settings\user\×ÀÃæ\ɱ¶¾\HijackThis.exe

O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll (file missing)
O2 - BHO: VeryCD³¬¼¶ËÑË÷ - {75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: µç̨(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: VeryCD³¬¼¶ËÑË÷ - {F869BB38-FFEF-4589-B986-610B7AD0ADA2} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [RavTimer] C:\PROGRA~1\rising\Rav\RavTimer.exe
O4 - HKLM\..\Run: [RavMon] C:\PROGRA~1\rising\Rav\RavMon.exe
O4 - HKLM\..\Run: [GCXX-Manager-Class] "C:\Program Files\Sony Ericsson\Wireless Manager\GCXXManager.exe" -startup
O4 - HKLM\..\RunServices: [RavMon] C:\PROGRA~1\rising\Rav\RavMon.exe /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Documents and Settings\user\×ÀÃæ\eMule\emule.exe -AutoStart
O8 - Extra context menu item: >>²ÊÐÅ·¢ËÍ<< - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O8 - Extra context menu item: Google ËÑË÷(&G) - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: ÉÏ´«µ½QQÍøÂçÓ²ÅÌ - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: ·´ÏòÁ´½Ó - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ìí¼Óµ½QQ×Ô¶¨ÒåÃæ°å - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: Ìí¼Óµ½QQ±íÇé - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: ÓÃQQ²ÊÐÅ·¢Ë͸ÃͼƬ - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: ÀàËÆÍøÒ³ - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: »º´æµÄÍøÒ³¿ìÕÕ - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: ·­ÒëÓ¢ÎÄ×Ö´Ê(&T) - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O9 - Extra button: ºÀ½Ü³¬¼¶½â°ÔV8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE
O9 - Extra 'Tools' menuitem: ºÀ½Ü³¬¼¶½â°ÔV8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll (file missing)
O9 - Extra 'Tools' menuitem: ²ÊE¾«ÁéÉèÖà - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQìŲʹ¤¾ßÌõÉèÖà - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O14 - IERESET.INF: START_PAGE_URL=about:blank
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll (file missing)
O23 - Service: IpServicer - Unknown owner - c:\windows\system32\svcip.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Pacsptisvr.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\Program Files\rising\rav\CCenter.exe
O23 - Service: Rising Realtime Monitor Service (RsRavMon) - rising - C:\Program Files\rising\rav\RavMonD.exe
O23 - Service: SmartLinkService (SLService) -  - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe
由于实在太多太杂我自己先把那些清掉了,下面是清后的日志
Logfile of HijackThis v1.99.1
Scan saved at 12:58:15, on 2006-5-11
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\rising\rav\CCenter.exe
C:\Program Files\rising\rav\RavMonD.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Svchost.dat
C:\PROGRA~1\rising\Rav\RavTimer.exe
C:\PROGRA~1\rising\Rav\RavMon.exe
C:\Program Files\Sony Ericsson\Wireless Manager\GCXXManager.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\user\×ÀÃæ\ɱ¶¾\HijackThis.exe

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [RavTimer] C:\PROGRA~1\rising\Rav\RavTimer.exe
O4 - HKLM\..\Run: [RavMon] C:\PROGRA~1\rising\Rav\RavMon.exe
O4 - HKLM\..\Run: [GCXX-Manager-Class] "C:\Program Files\Sony Ericsson\Wireless Manager\GCXXManager.exe" -startup
O4 - HKLM\..\RunServices: [RavMon] C:\PROGRA~1\rising\Rav\RavMon.exe /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: Google ËÑË÷(&G) - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: ·´ÏòÁ´½Ó - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ìí¼Óµ½QQ±íÇé - C:\Program Files\Tencent\QQ\AddEmotion.htm
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Pacsptisvr.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\Program Files\rising\rav\CCenter.exe
O23 - Service: Rising Realtime Monitor Service (RsRavMon) - rising - C:\Program Files\rising\rav\RavMonD.exe
O23 - Service: SmartLinkService (SLService) -  - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe

只是把上面清掉了,不知电脑里还有什么病毒文件,还有上面那个O23 - Service: SmartLinkService (SLService) -  - C:\WINDOWS\SYSTEM32\slserv.exe是什么
gototop
 

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
修复这一项
建议这样修复
开始→运行→输入services.msc,打开“服务”→查找 SmartLinkService→双击→启动类型→禁止→停止→应用→确定。禁止SmartLinkService这个服务
修复并删除相关的东东。
gototop
 

引用:
【我无邪的贴子】O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
修复这一项
建议这样修复
开始→运行→输入services.msc,打开“服务”→查找 SmartLinkService→双击→启动类型→禁止→停止→应用→确定。禁止SmartLinkService这个服务
修复并删除相关的东东。
...........................


晕倒
修复后或许楼主就不能上网了
gototop
 

这个是有争议的进程,很多程序和病毒都会用它。
如果楼主也不知道的话,我建议修复。
至于上不了网,不至于吧?
gototop
 

【回复“我无邪”的帖子】
C:\WINDOWS\SYSTEM32\slserv.exe应该是调制解调器连接的服务吧

既然是有争议的程序
我们就应该有争议的对待
呵呵
再说我也没有看过有关于slserv.exe有争议的文章
gototop
 

是的,如果楼主本人也不知道的话。
就要修复

gototop
 

引用:
【我无邪的贴子】是的,如果楼主本人也不知道的话。
就要修复


...........................

或许你是对的
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT