1   1  /  1  页   跳转

求高人救命啊高人都进来看看啊

求高人救命啊高人都进来看看啊

本人已经被一个弹出式网站折磨的死去活来,还望大家伸出援手,情况如下,每当我打开一个网站,该网站自动弹出,百弹不厌,我郁闷之极下面是该网站地址还望高手帮我,小弟感激不尽,害我吃不香睡不着的网址:“http://www.winfixer.com/download/2006/?p=20&ex=1&ax=2&aid=vm_sv_wfx6h_5&lid=keyin”还望各位路过的高手赐教啊~~~~
最后编辑2006-01-10 00:58:42
分享到:
gototop
 

请用hijackthis扫个LOG发上来:
hijackthis下载:http://forum.ikaka.com/download.asp?id=5188960
扫描日志:运行hijackthis-选择"Do a system scan and save a log"(做一次系统扫描并保存日志)-然后hijackthis会生成一个TXT文本日志,请将日志内容复制然后贴出来.
gototop
 

**** Run Keys ****

RUN: [SoundMan] rem SOUNDMAN.EXE
RUN: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
RUN: [nwiz] nwiz.exe /install
RUN: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
RUN: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
RUN: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot


**** Browser Helper Objects ****

BHO: [ThunderIEHelper Class] C:\WINDOWS\System32\xunleibho_v8.dll
BHO: [雅虎助手] C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
BHO: [DragSearch BHO] C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
BHO: [MSEvents Object] C:\WINDOWS\System32\khffe.dll


**** IE Toolbars ****

TOOLBAR: [电台(&R)] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [雅虎助手] C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
TOOLBAR: [卡卡上网安全助手] C:\WINDOWS\System32\kakatool.dll


**** IE Extensions ****

IEExt: [浩方对战平台] C:\Program Files\浩方对战平台\GameClient.exe
IEExt: [雅虎助手] http://cn.zs.yahoo.com/?source=Cns
IEExt: [@shdoclc.dll,-866] http://cn.zs.yahoo.com/?source=Cns


**** Hosts File Entries ****

HOSTS: 127.0.0.1      localhost
HOSTS: 127.0.0.1      localhost


**** IE Settings ****

Default Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default Search: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch


**** IE Context Menu (Right click) ****

IEContext: [&使用迅雷下载] C:\Program Files\Sandai Technologies Inc\Thunder\geturl.htm
IEContext: [&使用迅雷下载全部链接] C:\Program Files\Sandai Technologies Inc\Thunder\getallurl.htm
IEContext: [上传到QQ网络硬盘] C:\Program Files\Tencent\QQ\AddToNetDisk.htm
IEContext: [添加到QQ自定义面板] C:\Program Files\Tencent\QQ\AddPanel.htm
IEContext: [添加到QQ表情] C:\Program Files\Tencent\QQ\AddEmotion.htm
IEContext: [用QQ彩信发送该图片] C:\Program Files\Tencent\QQ\SendMMS.htm


**** Layered Service Providers ****

LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{21D11CF3-26C2-4759-908D-FCB5E07B8845}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{21D11CF3-26C2-4759-908D-FCB5E07B8845}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{060493A0-CDD7-485E-8B82-5DE4E3ABB411}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{060493A0-CDD7-485E-8B82-5DE4E3ABB411}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8F0E4736-7F94-49AA-A417-DFE04D8F8D14}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8F0E4736-7F94-49AA-A417-DFE04D8F8D14}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BBBD50BF-A605-47FD-A43F-E115D36E5B55}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BBBD50BF-A605-47FD-A43F-E115D36E5B55}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2C09D867-380A-49C2-B60C-97DAE01E70C8}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2C09D867-380A-49C2-B60C-97DAE01E70C8}] DATAGRAM 4


**** Blocked Control Panel Items ****

BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No


**** Downloaded Program Files ****

DirectAnimation Java Classes [file://C:\WINDOWS\Java\classes\dajava.cab]
Microsoft XML Parser for Java [file://C:\WINDOWS\Java\classes\xmldso.cab]
{3334504D-9980-0010-8000-00AA00389B71} [http://download.microsoft.com/download/0/C/8/0C8EDFAB-30BC-4792-898E-2DABE27B2C4D/mp43dmo.CAB]
{33564D57-9980-0010-8000-00AA00389B71} [http://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab]
{5334504D-9980-0010-8000-00AA00389B71} [http://download.microsoft.com/download/0/8/D/08D91A3B-CFF6-45DE-95DF-64415075E344/mpg4sdmo.cab]
{C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} [http://zs.kingsoft.com/duba/OCX/KAVClean.CAB]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} [https://www.tenpay.com/download/qqedit.cab]


**** Custom IE Search Items ****

SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
gototop
 

HijackThis_815汉化版扫描日志 V1.99.1
保存于      19:48:20, 日期 2006-1-8
操作系统:  Windows XP SP1 (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\pcnj\桌面\4842302005817230232\HijackThis1991zww.exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v8.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
O2 - BHO: MSEvents Object - {B313D637-F405-4052-AC37-E2119AB3C8F8} - C:\WINDOWS\System32\khffe.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\System32\kakatool.dll
O4 - 启动项HKLM\\Run: [SoundMan] rem SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - 启动项HKLM\\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Sandai Technologies Inc\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Sandai Technologies Inc\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\Program Files\浩方对战平台\GameClient.exe
O9 - 浏览器额外的按钮: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/?source=Cns (file missing)
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} (Kingsoft DUBA OnlineScan) - http://zs.kingsoft.com/duba/OCX/KAVClean.CAB
O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl Object) - https://www.tenpay.com/download/qqedit.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2C09D867-380A-49C2-B60C-97DAE01E70C8}: NameServer = 61.134.1.4 218.30.19.40
O20 - AppInit_DLLs: KB2153661.LOG
O20 - Winlogon Notify: khffe - C:\WINDOWS\System32\khffe.dll
O23 - NT 服务: Local Security Authority Subsystem Service (lsass) - Unknown owner - C:\WINDOWS\lsass.exe (file missing)
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

gototop
 

以上是按你所说的软件扫描的日志,请帮忙分析下,我弹出的是同一个网站网站就是 我在1帖中提到的哪个网址 还望大侠多多帮忙~~~
gototop
 

比较麻烦的一个劫持,请参考
【推荐】VundoFix简介
http://forum.ikaka.com/topic.asp?board=67&artid=7358637
中的办法处理
gototop
 

表示感谢 问题得到解决~~~谢谢
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT