1   1  /  1  页   跳转

求助

求助

问题:

浏览器的字符突然变大..大概是上面那个蓝条里文字的2倍大.在查看里修改大小不起作用.

机器的运行速度明显变慢.

在这些出现前我下载过3721(已删除,但貌似这个要删干净有点困难.在目录里还有)
官网下载了QQ2005最新版.好象装上了搜索条.用卡卡处理了.

扫描图.

HijackThis_815汉化版扫描日志 V1.99.1
保存于      18:54:00, 日期 2005-10-22
操作系统:  Windows XP SP2 (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\S24EvMon.exe
C:\Program Files\Rising\Rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\System32\RegSrvc.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Rising\Rfw\RfwMain.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\MINIPP\MINIPP.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MINIPP\TDUpdate.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BitComet\BitComet.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\SuperSoft\RdfSnap\RdfSnap.exe
C:\Documents and Settings\All Users\Documents\HijackThis1991zww.exe

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\downlo~1\CnsHook.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4}? - (no file)
O3 - IE工具栏增项: 卡卡安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - 启动项HKLM\\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - 启动项HKLM\\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - 启动项HKLM\\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [MINI_MINIPP] C:\Program Files\MINIPP\MINIPP.exe
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [桌面图标文字自动透明] C:\Program Files\Wom\WinMem.exe XP
O4 - 启动项HKLM\\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - IE右键菜单中的新增项目: !搜一搜 - res://C:\WINDOWS\downlo~1\CnsMinEx.dll/1003
O11 - Options group: [!CNS]  网络实名
O14 - IERESET.INF: START_PAGE_URL=http://www.greatwall.com.cn/
O16 - DPF: _{15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c9.cab
O16 - DPF: _{21CEEC1E-4187-4B9B-915C-2BBD96E7E1F9} - http://www.0-100.com.cn/lcchen/hj_browser_mainProj.cab
O16 - DPF: _{56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/276bbe6d91d6d2095705/netzip/RdxIE601_cn.cab
O16 - DPF: _{FC87A650-207D-4392-A6A1-82ADBC56FA64} - http://xbs.mtree.com/mt/dialers/fc/MultiDistFC.CAB
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O17 - HKLM\System\CCS\Services\Tcpip\..\{88B052FF-6E7B-441C-992B-FF2509AF2269}: NameServer = 221.7.34.10 221.7.34.11
O20 - Winlogon Notify: Sebring - C:\WINDOWS\System32\LgNotify.dll
O23 - NT 服务: 适配器切换 (IntelRoam) - Intel Corporation - C:\Program Files\Intel\Switching\User\RoamSvc.exe
O23 - NT 服务: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - NT 服务: Kingsoft Personal Firewall Service (KPfwSvc) - Unknown owner - (no file)
O23 - NT 服务: Kingsoft Antivirus KWatch Service (KWatchSvc) - Unknown owner - (no file)
O23 - NT 服务: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - NT 服务: RegSrvc - Intel Corporation - C:\WINDOWS\System32\RegSrvc.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - C:\Program Files\Rising\Rfw\rfwsrv.exe
O23 - NT 服务: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\WINDOWS\System32\S24EvMon.exe
O23 - NT 服务: Windows User Mode Driver Framework (UMWdf) - Unknown owner - (no file)


平在这里谢谢了.
最后编辑2005-10-22 19:41:54
分享到:
gototop
 

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4}? - (no file)
O23 - NT 服务: Kingsoft Personal Firewall Service (KPfwSvc) - Unknown owner - (no file)
O23 - NT 服务: Kingsoft Antivirus KWatch Service (KWatchSvc) - Unknown owner - (no file)
O23 - NT 服务: Windows User Mode Driver Framework (UMWdf) - Unknown owner - (no file)
O14 - IERESET.INF: START_PAGE_URL=http://www.greatwall.com.cn/
修复上面各项。
gototop
 

无限谢谢一楼
gototop
 

关于3721的卸载您可以看看:
【分享】常用软件的卸载方法(逐步更新,请勿跟贴)
http://forum.ikaka.com/topic.asp?board=36&artid=6770535
gototop
 

回3楼.
用他带的工具删除了3721.
回2楼.
O23 - NT 服务: Kingsoft Personal Firewall Service (KPfwSvc) - Unknown owner - (no file)
O23 - NT 服务: Kingsoft Antivirus KWatch Service (KWatchSvc) - Unknown owner - (no file)
O23 - NT 服务: Windows User Mode Driver Framework (UMWdf) - Unknown owner - (no file)
这3个东西修复不了我用Killbox不知道该怎么填路径.
最后:问题依旧,我该怎么办?

gototop
 

023项已经没有文件,不用删除文件。

请截个图上来看看...
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT