1   1  /  1  页   跳转

高手看看我的问题

高手看看我的问题

我在进入我的文件夹时,鼠标的右键不能点.点击后就出[现应用程序出现异常未知的软件异常(0x0eedfade),位置为0x77e4d756]我重新装IE也不可以,下面是我扫描的结果C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\Program Files\Common Files\smartde\sde.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\PROGRAM FILES\RISING\RAV\RavStub.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
C:\PROGRA~1\RISING\RAV\RAVMON.EXE
C:\Program Files\SDAstro\SDAstro.exe
C:\PROGRA~1\360so\360Main.exe
F:\日常用具\dvd\PDVDServ.exe
C:\WINDOWS\VM_STI.EXE
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\WINDOWS\System32\ctfmon.exe
E:\工具\超级兔子\srcdnoti.exe
E:\Thunder\Thunder.exe
E:\Thunder\MediaIssue\Issue.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
F:\日常用具\HijackThis1991汉化版\HijackThis1991zww.exe

R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v5.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\CnsHook.dll
O2 - BHO: MEobjectSDT - {D4D5C535-BA95-4327-870D-A33826FDD17A} - C:\WINDOWS\System32\obwbkya.dll
O2 - BHO: 好看123上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} - E:\工具\MagicSet\HaokanBar.dll
O3 - IE工具栏增项: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - (no file)
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: 好看123上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} - E:\工具\MagicSet\HaokanBar.dll
O3 - IE工具栏增项: 卡卡安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\System32\kakatool.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - 启动项HKLM\\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - 启动项HKLM\\Run: [RavMon] C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [SDAstro] C:\Program Files\SDAstro\SDAstro.exe
O4 - 启动项HKLM\\Run: [迅雷4] E:\Thunder\TDUpdate.exe
O4 - 启动项HKLM\\Run: [360Main.exe] C:\PROGRA~1\360so\360Main.exe
O4 - 启动项HKLM\\Run: [RemoteControl] F:\日常用具\dvd\PDVDServ.exe
O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE ZSMC USB PC Camera
O4 - 启动项HKLM\\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Super Rabbit CDNotify] E:\工具\超级兔子\srcdnoti.exe /LOAD
O4 - Startup: 迅雷4.lnk = E:\Thunder\Thunder.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - E:\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - E:\Thunder\getAllurl.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - F:\日常用具\珊瑚\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - F:\日常用具\珊瑚\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - F:\日常用具\珊瑚\qq\SendMMS.htm
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26}? - http://hot.3721.com/rd/shop_btn.htm (file missing)
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O11 - Options group: [!CNS]  上网助手-地址栏搜索
O16 - DPF: {59CCB4A0-727D-11CF-AC36-00AA00A47DD2} (Timer Object) - http://www.xintv.com/download/ietimer.cab
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: ASUS Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - NT 服务: SDAgent Service (SDAgentService) - 北京兴华基业软件技术有限公司 - C:\Program Files\Common Files\smartde\sde.exe
O23 - NT 服务: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

最后编辑2005-11-05 20:23:31
分享到:
gototop
 

急需帮助!
请大侠,指正!
gototop
 

开始→控制面板→性能和维护→管理工具→服务→查找 SDAgent Service→右击→属性→启动类型→禁止→应用→停止→确定。

卸载360搜

重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows

运行Hijackthis,扫描结束后在下列选项前打上勾,然后选修复“Fix Checked”:

O2 - BHO: MEobjectSDT - {D4D5C535-BA95-4327-870D-A33826FDD17A} - C:\WINDOWS\System32\obwbkya.dll

显示隐藏文件

双击我的电脑--工具---文件夹选项--查看选项卡--单击选取"显示隐藏文件或文件夹"--清除"隐藏受保护的操作系统文件(推荐)"复选框。在提示您确定更改时,单击“是”--单击“确定”。

然后找到如下文件并删除(如果有的话)。

C:\WINDOWS\System32\obwbkya.dll
gototop
 

运行时,运行Hijackthis,无法扫描!
gototop
 

我的症状一样。麻烦给看看。
Logfile of HijackThis v1.99.1
Scan saved at 20:06:37 上午, on 2005-11-5
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
I:\WINDOWS\System32\smss.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\System32\svchost.exe
D:\RISING\RAV\Ravmond.exe
D:\RISING\RAV\RavStub.exe
I:\WINDOWS\system32\spoolsv.exe
I:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\rising\Rav\RavTray.exe
I:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Super Rabbit\MagicSet\srcdnoti.exe
D:\Maze\MazeSvr.exe
I:\Program Files\P4P\p2psvr.exe
D:\rising\Rav\RavService.exe
D:\rising\Rav\CCenter.exe
I:\WINDOWS\system32\taskmgr.exe
D:\rising\Rav\Rav.exe
D:\rising\Rav\RsAgent.exe
I:\WINDOWS\msagent\AgentSvr.exe
D:\realplayer\RealPlay.exe
I:\WINDOWS\system32\cmd.exe
I:\WINDOWS\system32\conime.exe
D:\Maxthon\Maxthon.exe
I:\WINDOWS\regedit.exe
F:\SoftwereDownload\Internet\IPMsg.exe
I:\WINDOWS\system32\drwtsn32.exe
I:\WINDOWS\system32\drwtsn32.exe
I:\WINDOWS\system32\rundll32.exe
I:\WINDOWS\system32\drwtsn32.exe
I:\WINDOWS\explorer.exe
I:\WINDOWS\system32\mmc.exe
F:\SoftwereDownload\Internet\ha_hijackthis\HijackThis.exe

R3 - URLSearchHook: MyURLSearchHook Class - {982CB676-38F0-4D9A-BB72-D9371ABE876E} - I:\Program Files\P4P\ToolBar.dll
O1 - Hosts: 202.204.105.7 sun250.cugb.edu.cn
O1 - Hosts: 218.30.105.133 www.tol24.com
O1 - Hosts: 202.100.222.1 www.tianyaclub.com
O1 - Hosts: 61.142.80.88 www.86film.com
O1 - Hosts: 218.30.110.209 lj1006.51.net
O1 - Hosts: 222.89.175.138 angelchen1020.ik8.com
O1 - Hosts: 61.145.112.142 www.dk123.com
O1 - Hosts: 210.51.168.62 www.cnenglish.net
O1 - Hosts: 202.100.222.25 www3.tianyaclub.com
O1 - Hosts: 61.172.244.164 log.hjbbs.com
O1 - Hosts: 61.142.80.88 www.86film.com
O1 - Hosts: 219.139.240.39 www.blogchinese.com
O1 - Hosts: 219.238.238.118 www.265.com
O1 - Hosts: 219.153.33.10 www.5566.net
O1 - Hosts: 61.172.198.177 www.suoyou.com
O1 - Hosts: 219.153.7.50 www.qq533.com
O1 - Hosts: 61.139.126.241 www.sowang.com
O1 - Hosts: 61.129.81.68 www.ca183.com
O1 - Hosts: 220.194.62.158 wysw.com
O1 - Hosts: 219.146.10.108 www.page.com.cn
O1 - Hosts: 61.153.48.250 www.da123.com
O1 - Hosts: 61.135.145.201 www.hao123.com
O1 - Hosts: 202.102.245.46 www.k369.com
O1 - Hosts: 202.165.103.236 www.yahoo-cool.com
O1 - Hosts: 60.195.250.111 wy.cnii.com.cn
O1 - Hosts: 218.201.44.82 bbs.cpcw.com
O1 - Hosts: 211.154.205.43 www.zol.com.cn
O1 - Hosts: 211.151.233.9 shcny.blogchina.com
O1 - Hosts: 219.239.88.110 www.yesky.com
O1 - Hosts: 218.12.56.248 dos.qiee.com
O1 - Hosts: 211.154.205.24 product.zol.com.cn
O1 - Hosts: 211.147.5.165 fun.ccidnet.com
O1 - Hosts: 61.172.200.244 www.169s.com
O1 - Hosts: 219.136.248.149 www.goeway.com
O1 - Hosts: 61.155.107.13 www.blogcn.com
O1 - Hosts: 211.151.233.9 winamp.blogchina.com
O1 - Hosts: 219.239.88.110 soft.yesky.com
O1 - Hosts: 219.239.88.110 soft.yesky.com
O1 - Hosts: 222.39.47.90 news.onlinedown.net
O1 - Hosts: 210.51.187.165 www.cnproxy.com
O1 - Hosts: 210.51.187.165 www.cnproxy.com
O1 - Hosts: 210.51.187.165 www.cnproxy.com
O1 - Hosts: 210.51.187.165 www.cnproxy.com
O1 - Hosts: 219.238.233.238 www.ikaka.com
O1 - Hosts: 219.239.88.110 www.yesky.com
O1 - Hosts: 61.140.60.69 download.21cn.com
O1 - Hosts: 202.100.72.25 it.westcn.com
O1 - Hosts: 61.185.81.109 www.easte.cn
O1 - Hosts: 219.136.248.149 www.goeway.com
O1 - Hosts: 222.189.228.87 ww1.supcode.com
O1 - Hosts: 218.7.188.61 www.17sun.net
O1 - Hosts: 218.5.79.140 www.wancd.com
O1 - Hosts: 222.77.177.163 www.58bt.com
O1 - Hosts: 218.5.79.75 www.tekin.cn
O1 - Hosts: 210.76.106.155 www.polsnet.com
O1 - Hosts: 61.129.33.155 www.emule.org.cn
O1 - Hosts: 61.129.33.155 www.emule.org.cn
O1 - Hosts: 202.204.105.8 www.cugb.edu.cn
O1 - Hosts: 202.204.105.22 jwc.cugb.edu.cn
O1 - Hosts: 202.204.105.8 www.cugb.edu.cn
O1 - Hosts: 202.204.105.7 sun250.cugb.edu.cn
O1 - Hosts: 202.108.9.77 mail.126.com
O1 - Hosts: 218.30.110.158 www.supersk8.net
O1 - Hosts: 61.147.118.206 www.y130.com
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - I:\WINDOWS\system32\xunleibho_v5.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SohuDAIEHelper - {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} - I:\Program Files\P4P\sodaie.dll
O2 - BHO: URLMonitor Class - {3ED9FFDA-79DB-4B2D-99B7-16EA3C4A3A92} - I:\WINDOWS\system32\hap.dll
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\QQ\QQIEHelper.dll
O2 - BHO: DownloadValue Class - {616D4040-5712-4F0F-BCF1-5C6420A99E14} - I:\WINDOWS\system32\winhtp.dll
O2 - BHO: IeCapture Class - {67B6599D-1ACF-4EA9-9EAB-578DF0FE6F78} - I:\Program Files\Common Files\Baidu\Disk Search\dsie.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - I:\Program Files\3721\Assist\asbar.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - D:\NetTransport 2\NTIEHelper.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - I:\WINDOWS\downlo~1\CnsHook.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - D:\FlashFXP\IEFlash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: i&Bar搜索引擎 - {2E7D3330-EB94-4518-B0FE-E05379A5C1DA} - I:\PROGRA~1\iBar\10002\iBar.dll
O3 - Toolbar: 完美网译通 - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - I:\WINDOWS\WORLD2\TOOLBAR\hmtoolbar.dll
O3 - Toolbar: 搜狗直通车 - {DBBB7978-AF21-4EF4-9AD1-B2F4BC75696C} - I:\Program Files\P4P\ToolBar.dll
O3 - Toolbar: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - I:\Program Files\3721\Assist\asbar.dll
O4 - HKLM\..\Run: [CnsMin] ; Rundll32.exe I:\WINDOWS\downlo~1\CnsMin.dll,Rundll32
O4 - HKLM\..\Run: [WhenUSearchWHSE] ; "I:\Program Files\WhenUSearch\whse.exe"
O4 - HKLM\..\Run: [RavMon] D:\rising\Rav\RavMon.exe -system
O4 - HKLM\..\Run: [TkBellExe] "I:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [ProxyThorn] ; D:\ProxyThorn\ProxyThorn.exe
gototop
 

O4 - HKLM\..\Run: [StormCodec_Helper] ; "D:\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [MINI_BFYY] ; D:\Storm Downloader\StormDownloader.exe
O4 - HKLM\..\Run: [helper.dll] ; I:\WINDOWS\system32\rundll32.exe I:\PROGRA~1\3721\helper.dll,Rundll32
O4 - HKLM\..\Run: [RavTray] D:\rising\Rav\RavTray.exe
O4 - HKLM\..\Run: [TuoTu] ; D:\Tuotu\TuoTu.exe -Min
O4 - HKLM\..\Run: [IMJPMIG8.1] "I:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] I:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] I:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [RavTimer] D:\rising\Rav\RavTimer.exe
O4 - HKLM\..\Run: [RavService] D:\rising\Rav\RavService.exe
O4 - HKLM\..\Run: [IMSCMig] I:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\RunOnce: [I:\PROGRA~1\3721\alrex.dll] regsvr32 /s I:\PROGRA~1\3721\alrex.dll
O4 - HKCU\..\Run: [ctfmon.exe] I:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [eMuleAutoStart] ; D:\eMule\eMule.exe -AutoStart
O4 - HKCU\..\Run: [Super Rabbit CDNotify] D:\Program Files\Super Rabbit\MagicSet\srcdnoti.exe /LOAD
O4 - Global Startup: Waterfall Pro 2.99 Demo.lnk = D:\Waterfall Pro 2.99 Demo\Wfp.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item:  >> 彩信发送 << - res://I:\PROGRA~1\MMSASS~1\MMSASS~1.DLL/mms.htm
O8 - Extra context menu item: !搜一搜 - res://I:\WINDOWS\downlo~1\CnsMinEx.dll/1003
O8 - Extra context menu item: !搜一搜(&S) - res://I:\PROGRA~1\YiSou\yisou.dll/232
O8 - Extra context menu item: &使用暴风下载器下载 - D:\Storm Downloader\geturl.htm
O8 - Extra context menu item: &使用迅雷下载 - D:\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Thunder\getAllurl.htm
O8 - Extra context menu item: 使用FlashExplorer搜索动画 - d:\FlashExplorer\IELinkAll.htm
O8 - Extra context menu item: 使用FlashExplorer播放 - d:\FlashExplorer\IELink.htm
O8 - Extra context menu item: 使用影音传送带下载 - D:\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: 使用影音传送带下载全部链接 - D:\NetTransport 2\NTAddList.html
O8 - Extra context menu item: 使用搜狗直通车下载 - I:\Program Files\P4P\dl.htm
O8 - Extra context menu item: 使用网际快车下载 - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 使用脱兔下载 - d:\Tuotu\xdownGeturl.htm
O8 - Extra context menu item: 发送图片到手机 - I:\Program Files\P4P\cx.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\QQ\SendMMS.htm
O8 - Extra context menu item: 用比特精灵下载(&B) - D:\BitSpirit\bsurl.htm
O8 - Extra context menu item: 闪电Flash播放器 - C:\SaveSWF.htm
O9 - Extra button: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm?pid=U_superrsoft_62756 (file missing)
O9 - Extra 'Tools' menuitem: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm?pid=U_superrsoft_62756 (file missing)
O9 - Extra button: 常用网址 - {36B39F01-7B48-44AD-A165-5849CD8EF562} - I:\WINDOWS\system32\SHDOCVW.DLL
O9 - Extra button: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file missing)
O9 - Extra 'Tools' menuitem: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file missing)
O9 - Extra button: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://hot.3721.com/rd/shop_btn.htm (file missing)
O9 - Extra 'Tools' menuitem: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://hot.3721.com/rd/shop_btn.htm (file missing)
O9 - Extra button: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing)
O9 - Extra 'Tools' menuitem: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing)
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - I:\PROGRA~1\MMSASS~1\MMSASS~1.DLL
O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - I:\PROGRA~1\MMSASS~1\MMSASS~1.DLL
O9 - Extra button: SoQ - {8F67DCF3-B1DF-4A39-A787-3775784BF737} - http://www.soq.com (file missing)
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\OFFICE11\REFIEBAR.DLL
O9 - Extra 'Tools' menuitem: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\OFFICE11\REFIEBAR.DLL
O9 - Extra button: 词霸 - {9A687CA6-D585-4947-9ED9-BE96071F5CD9} - D:\Kingsoft\POWERW~1\XDictExB.dll
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\QQ\QQ.EXE
O9 - Extra button: 脱兔下载 - {D5C1CCC2-811B-4bf2-BF22-0D3B89600F5B} - d:\Tuotu\TuoTu.exe
O9 - Extra 'Tools' menuitem: &TuoTu - {D5C1CCC2-811B-4bf2-BF22-0D3B89600F5B} - d:\Tuotu\TuoTu.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\QQ\QQIEHelper.dll
O9 - Extra button: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - Extra 'Tools' menuitem: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - Extra button: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - Extra 'Tools' menuitem: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - Extra button: 易趣购物 - {EE60714F-AC19-427e-861A-FD60ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - Extra 'Tools' menuitem: 易趣购物 - {EE60714F-AC19-427e-861A-FD60ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - Extra 'Tools' menuitem: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O11 - Options group: [!CNS]  网络实名
O18 - Protocol: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} - D:\Kingsoft\POWERW~1\XDictExB.dll
O20 - AppInit_DLLs: I:\WINDOWS\system32\SoDAHK.DLL
O23 - Service: MazeServer - Unknown owner - D:\Maze\MazeSvr.exe
O23 - Service: P4P Service - Sohu.com Inc. - I:\Program Files\P4P\p2psvr.exe
O23 - Service: RavService - Unknown owner - D:\rising\Rav\RavService.exe" /service (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\RISING\RAV\Ravmond.exe
O23 - Service: SDAgent Service (SDAgentService) - 北京兴华基业软件技术有限公司 - I:\Program Files\Common Files\smartde\sde.exe

gototop
 

重新启动到安全模式(进入安全模式的方法:重新启动电脑, 开机自动检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式(Safe Mode)进入Windows。)

开始→控制面板→性能和维护→管理工具→服务→查找SDAgent Service→右击→属性→启动类型→禁止→应用→停止→确定。

请关闭所有IE界面,重新使用HijackThis扫描一次,选中下面建议修复的项目,让HijackThis修复,修复前请允许HijackThis保留备份。(如果楼主知道是安全的可以不必勾选)
所有01项
O2 - BHO: URLMonitor Class - {3ED9FFDA-79DB-4B2D-99B7-16EA3C4A3A92} - I:\WINDOWS\system32\hap.dll
O2 - BHO: DownloadValue Class - {616D4040-5712-4F0F-BCF1-5C6420A99E14} - I:\WINDOWS\system32\winhtp.dll
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: >> 彩信发送 << - res://I:\PROGRA~1\MMSASS~1\MMSASS~1.DLL/mms.htm

然后打开我的电脑→再点工具→打开文件夹选项→查看→把隐藏受保护的系统文件(推荐)和隐藏已知文件类型的扩展名的勾去掉→再显示所有文件→找到以下文件并删除:(如果有的话)
I:\WINDOWS\system32\hap.dll
I:\WINDOWS\system32\winhtp.dll
删除文件夹I:\Program Files\Common Files\smartde


gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT