瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 http://www.filost.com/banner2.aspx?day=4&hour=20

12   1  /  2  页   跳转

http://www.filost.com/banner2.aspx?day=4&hour=20

http://www.filost.com/banner2.aspx?day=4&hour=20

我的IE打开网页时,会自动打开新窗口,网址如上,是不是被劫持了?
怎么办啊?

求救!!!!!!!!!!1
最后编辑2005-07-04 21:42:54
分享到:
gototop
 

用HijackThis扫描,没发现什么东西啊。
gototop
 

你下载用hijackthis1.99.1扫个log上来,方便大家分析、解决问题!1。下载HijackThis

HijackThis1.99.1可以到本版(反浏览器劫持版)置顶贴
[必读]本版说明及常用小软件下载
http://forum.ikaka.com/topic.asp?board=67&artid=5188931

中下载
gototop
 

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      16:42:24, 日期 2005-7-4
操作系统:  Windows 2000 SP4 (WinNT 5.00.2195)
浏览器:    Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程:         
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\drivers\CDAC11BA.EXE
D:\PTC\flexlm\i486_nt\obj\lmgrd.exe
C:\WINNT\System32\llssrv.exe
C:\Program Files\tmosce\ntrtscan.exe
C:\WINNT\system32\nvsvc32.exe
C:\Program Files\tmosce\OfcPfwSvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
D:\PTC\flexlm\i486_nt\obj\ptc_d.exe
C:\Program Files\tmosce\tmlisten.exe
C:\WINNT\system32\spool\ugplot\ugiipqd.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Dfssvc.exe
D:\UGS\Imageware Licensing\12.00.000\bin\lmgrd.exe
C:\WINNT\System32\msdtc.exe
D:\UGS\Imageware Licensing\12.00.000\bin\iwlmd.exe
D:\UGS\NX 3.0\UGFLEXLM\lmgrd.exe
C:\WINNT\System32\svchost.exe
D:\UGS\NX 3.0\UGFLEXLM\uglmd.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\TEMP\ODC576.EXE
C:\Program Files\tmosce\pccntmon.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HTime\HTime.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\Program Files\Iparmor\Iparmor.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
E:\temp\GreenBrowser\GreenBrowser.exe
C:\WINNT\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
E:\HijackThis\HijackThis1991zww.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - IE工具栏增项: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - IE工具栏增项: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll
O4 - 启动项HKLM\\Run: [OfficeScanNT Monitor] "C:\Program Files\tmosce\pccntmon.exe" -HideWindow
O4 - 启动项HKLM\\Run: [DAEMON Tools-2052] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [HTime] C:\Program Files\HTime\HTime.exe
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /installquiet
O4 - 启动项HKLM\\Run: [iparmor] C:\Program Files\Iparmor\Iparmor.exe mini
O8 - IE右键菜单中的新增项目: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll/search.htm
O8 - IE右键菜单中的新增项目: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O9 - 浏览器额外的按钮: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - 浏览器额外的“工具”菜单项: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{02481856-753A-41F7-883C-2771FF99026E}: Domain = iee.caep.ac.cn
O17 - HKLM\System\CS1\Services\Tcpip\..\{02481856-753A-41F7-883C-2771FF99026E}: Domain = iee.caep.ac.cn
O17 - HKLM\System\CS2\Services\Tcpip\..\{02481856-753A-41F7-883C-2771FF99026E}: Domain = iee.caep.ac.cn
O20 - AppInit_DLLs: apihookdll.dll,  ,  , 
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - C:\WINNT\system32\vbsys2.dll
O23 - NT 服务: C-DillaCdaC11BA - Macrovision - C:\WINNT\system32\drivers\CDAC11BA.EXE
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: FLEXlm server for PTC - Macrovision Corporation - D:\PTC\flexlm\i486_nt\obj\lmgrd.exe
O23 - NT 服务: Imageware 12 License Manager - GLOBEtrotter Software Inc. - D:\UGS\Imageware Licensing\12.00.000\bin\lmgrd.exe
O23 - NT 服务: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\tmosce\ntrtscan.exe
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - NT 服务: NX3 - Macrovision Corporation - D:\UGS\NX 3.0\UGFLEXLM\lmgrd.exe
O23 - NT 服务: OfficeScanNT Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\tmosce\OfcPfwSvc.exe
O23 - NT 服务: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\tmosce\tmlisten.exe
O23 - NT 服务: Unigraphics Plot Server (ugiipqd) (ugiipqd) - Unigraphics Solutions, Inc - C:\WINNT\system32\spool\ugplot\ugiipqd.exe

gototop
 

这是我扫描的日志,我没发现有什么奇怪的东西啊???
gototop
 

麻烦建能兄帮我看看
gototop
 

O23 - NT 服务: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\tmosce\tmlisten.exe
O23 - NT 服务: OfficeScanNT Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\tmosce\OfcPfwSvc.exe
O23 - NT 服务: NX3 - Macrovision Corporation - D:\UGS\NX 3.0\UO23 - NT 服务: Imageware 12 License Manager - GLOBEtrotter Software Inc. - D:\UGS\Imageware Licensing\12.00.000\bin\lmgrd.exe
GFLEXLM\lmgrd.exe

O23 - NT 服务: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\tmosce\ntrtscan.exe
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - C:\WINNT\system32\vbsys2.dll
O3 - IE工具栏增项: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll
O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll

在安全摸试下修复上面几项)(如果你清楚某项是安全的,可以不处理)
gototop
 

O3 - IE工具栏增项: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll
O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.01.0000.2214\en-us\msntb.dll
这是MSN的内容啊?要处理吗?
gototop
 

O23 - NT 服务: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\tmosce\tmlisten.exe
O23 - NT 服务: OfficeScanNT Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\tmosce\OfcPfwSvc.exe
O23 - NT 服务: NX3 - Macrovision Corporation - D:\UGS\NX 3.0\UO23 - NT 服务: Imageware 12 License Manager - GLOBEtrotter Software Inc. - D:\UGS\Imageware Licensing\12.00.000\bin\lmgrd.exe
GFLEXLM\lmgrd.exe

O23 - NT 服务: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\tmosce\ntrtscan.exe
这些是我的专业软件
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34545} - C:\WINNT\system32\vbsys2.dll
这到是很可疑
gototop
 

我处理了,但还是要出来啊
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT