瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 我的进程突然多了两项..(有日志...

1   1  /  1  页   跳转

我的进程突然多了两项..(有日志...

我的进程突然多了两项..(有日志...

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      7:43:10, 日期 2006-9-19
操作系统:  Windows 2003  (WinNT 5.02.3790)
浏览器:    Internet Explorer v6.00 (6.00.3790.0000)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\msdtc.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Dfssvc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Maxthon\Maxthon.exe
C:\Program Files\Super Rabbit\MagicSet\MagicSet.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ADMINI~1.RKA\LOCALS~1\Temp\Rar$EX00.422\HijackThis1991zww.exe

O1 - Hosts: 218.65.34.6 pk.mir666.com
O1 - Hosts: 218.65.34.6 769web.mir666.com
O1 - Hosts: 218.65.34.6 web772.jsy666.com
O1 - Hosts: 218.65.34.6 b1.hxwg.cn
O1 - Hosts: 218.65.34.6 ww2.58cqsf.com
O1 - Hosts: 218.65.34.6 77ip.com
O1 - Hosts: 218.65.34.6 bywg2.gamescoco.com
O1 - Hosts: 218.65.34.6 bywg.gamescoco.com
O1 - Hosts: 218.65.34.6 bywg1.gamescoco.com
O1 - Hosts: 218.65.34.6 go.bczwg.com
O1 - Hosts: 218.65.34.6 go1.bczwg.com
O1 - Hosts: 218.65.34.6 go.babywg.net
O1 - Hosts: 218.65.34.6 go1.babywg.net
O1 - Hosts: 218.65.34.6 news.lovewg.com
O1 - Hosts: 218.65.34.6 www.4000sf.com
O1 - Hosts: 218.65.34.6 bywg.92095.com
O1 - Hosts: 218.65.34.6 news.jb123.com
O3 - IE工具栏增项: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - IE右键菜单中的新增项目: 使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: 使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\Program Files\GameDotNet\Gameclient.exe
O9 - 浏览器额外的“工具”菜单项: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\Program Files\GameDotNet\Gameclient.exe
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\cdnns.dll' missing
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B09A988-7359-4445-947F-0614079AE417}: NameServer = 202.98.0.68 202.106.196.115
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe



不包括杀软 前天还是24项.今天就26项了?!
最后编辑2006-09-20 07:33:17
分享到:
gototop
 

还有F盘里出现了奇怪的程序??(我根本没下过这东西
http://ww2.pc2n.com/web/2006/9/19/265989-1158624399208.html
http://ww2.pc2n.com/web/2006/9/19/265989-1158624611490.html
gototop
 

```````````````````
gototop
 

`````````````````````````````````````````````````````````````
gototop
 

不只2项,下面这些都需要修复:

O1 - Hosts: 218.65.34.6 pk.mir666.com
O1 - Hosts: 218.65.34.6 769web.mir666.com
O1 - Hosts: 218.65.34.6 web772.jsy666.com
O1 - Hosts: 218.65.34.6 b1.hxwg.cn
O1 - Hosts: 218.65.34.6 ww2.58cqsf.com
O1 - Hosts: 218.65.34.6 77ip.com
O1 - Hosts: 218.65.34.6 bywg2.gamescoco.com
O1 - Hosts: 218.65.34.6 bywg.gamescoco.com
O1 - Hosts: 218.65.34.6 bywg1.gamescoco.com
O1 - Hosts: 218.65.34.6 go.bczwg.com
O1 - Hosts: 218.65.34.6 go1.bczwg.com
O1 - Hosts: 218.65.34.6 go.babywg.net
O1 - Hosts: 218.65.34.6 go1.babywg.net
O1 - Hosts: 218.65.34.6 news.lovewg.com
O1 - Hosts: 218.65.34.6 www.4000sf.com
O1 - Hosts: 218.65.34.6 bywg.92095.com
O1 - Hosts: 218.65.34.6 news.jb123.com
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\cdnns.dll' missing


此外,最后O10一项需要下载LSPFix与WinsockxpFix帮助修复:
首先用LSPFix来修复,然后需要使用WinsockxpFix解决不能修复后上网问题。
下载:http://free5.ys168.com/?aqfrs
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT