跪求！点击上网提示有错误。 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛跪求！点击上网提示有错误。

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第四十七次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

跪求！点击上网提示有错误。

hua01 初生襁褓狮帖子:9 注册: 2006-02-10 来自:	发表于： 2006-02-13 18:45 \| 只看楼主短消息资料字号：小中大 1楼跪求！点击上网提示有错误。我同事的电脑这几天一点击上网就会出现一个错误提示窗口，请各位高手指点，谢谢！ HijackThis_815汉化版扫描日志 V1.99.1 保存于 18:11:11, 日期 2006-02-13 操作系统： Windows 2000 SP4 (WinNT 5.00.2195) 浏览器： Internet Explorer v5.00 SP4 (5.00.2920.0000) 当前运行的进程： C:\WINNT\System32\smss.exe C:\WINNT\system32\csrss.exe C:\WINNT\SYSTEM32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\system32\svchost.exe C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe C:\WINNT\system32\ServeHost.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\CAPRPCSK.EXE C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Trend Micro\OfficeScan Client\ofcdog.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\Rundll32.exe C:\WINNT\services.exe C:\WINNT\SOUNDMAN.EXE C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe C:\Program Files\Common Files\CMEII\CMESys.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\HuaCi\huaci\zsearch.exe C:\WINNT\system32\rundll32.exe C:\WINNT\system32\internat.exe C:\WINNT\NIW.exe C:\Program Files\jj4\jjsvr4.exe C:\Program Files\Common Files\GMT\GMT.exe C:\WINNT\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\WINNT\system32\spool\drivers\w32x86\3\CAPPSWK.EXE C:\WINNT\system32\RUNDLL32.EXE C:\Program Files\Tencent\qq\QQ.exe C:\Program Files\Tencent\qq\TIMPlatform.exe C:\Program Files\Tencent\BQQ\rtxc.exe C:\Program Files\网络猪\PIG.exe C:\Program Files\网络猪\login.exe C:\Program Files\网络猪\PigIM.exe C:\Documents and Settings\Administrator\桌面\注册表分析HijackThis1991zww.exe R3 - URLSearchHook: BdSearchHook Class - {02496EBD-8455-48db-B3C7-5DAC97D9F5A7} - C:\PROGRA~1\baidu\iexp\BDSrHook.dll F3 - REG:win.ini: run=C:\WINNT\services.exe O2 - BHO: BdSearch - {02496EBD-8455-48db-B3C7-5DAC97D9F5A7} - C:\PROGRA~1\baidu\iexp\BDSrHook.dll O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - C:\PROGRA~1\DESKAD~1\deskipn.dll O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\AdPlus\IEHelp.dll O2 - BHO: Zhongsou Browser Helper - {2A0176FE-008B-4706-90F5-BBA532A49731} - C:\Program Files\SearchNet\SNHpr.dll O2 - BHO: 360so BHOHelper - {472101C2-1109-43f4-9112-31F33E3F2127} - C:\PROGRA~1\360so\360so.dll O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\qq\QQIEHelper.dll O2 - BHO: DownloadBHO T2BHO - {B1D147E7-873E-4909-8127-695D9BB78728} - C:\WINNT\Downloaded Program Files\barhelp24.0.dll O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINNT\DOWNLO~1\CnsHook.dll O3 - IE工具栏增项: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O3 - IE工具栏增项: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\PROGRA~1\Kingsoft\FASTAI~1\IEBand.dll O3 - IE工具栏增项: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - IE工具栏增项: (no name) - {25DA6678-8D7F-466B-963A-03D7CC7E2577} - (no file) O3 - IE工具栏增项: 天下搜索 - {56A7DC70-E102-4408-A34A-AE06FEF01586} - C:\WINNT\Downloaded Program Files\iebar23.0.dll O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINNT\DOWNLO~1\CnsMin.dll,Rundll32 O4 - 启动项HKLM\\Run: [MS-4011 Memory Patch] C:\杀毒软件\震荡波专杀工具.exe -Patch O4 - 启动项HKLM\\Run: [OfficeScanNT 监控程序] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow O4 - 启动项HKLM\\Run: [CMESys] "C:\Program Files\Common Files\CMEII\CMESys.exe" O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [360Main.exe] C:\PROGRA~1\360so\360Main.exe O4 - 启动项HKLM\\Run: [CAPON] C:\WINNT\system32\Spool\Drivers\w32x86\3\CAPONN.EXE O4 - 启动项HKLM\\Run: [PigLocalSearch] C:\Program Files\网络猪\PigStart.exe O4 - 启动项HKLM\\Run: [MoveSearch] C:\Program Files\HuaCi\huaci\zsearch.exe O4 - 启动项HKLM\\Run: [SearchNet_Up] "C:\Program Files\SearchNet\ServeUp.exe" O4 - 启动项HKLM\\Run: [Desktop] C:\WINNT\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll O4 - 启动项HKLM\\Run: [services] C:\WINNT\services.exe O4 - 启动项HKLM\\Run: [AddrPlus3] C:\PROGRA~1\TENCENT\AdPlus\Runner.exe C:\PROGRA~1\TENCENT\AdPlus\QAHook.dll Rundll32 O4 - 启动项HKLM\\RunServices: [services] C:\WINNT\services.exe O4 - HKCU\..\Run: [internat.exe] internat.exe O4 - HKCU\..\Run: [DrvMon.exe] C:\WINNT\system32\DrvMon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [NIW] C:\WINNT\NIW.exe O4 - HKCU\..\Run: [services] C:\WINNT\services.exe O4 - HKCU\..\Run: [pyjj] C:\Program Files\jj4\jjsvr4.exe O4 - HKCU\..\RuunServices:[services] C:\WINNT\services.exe O4 - Startup: 划词搜索.lnk = C:\Program Files\HuaCi\huaci\zsearch.exe O4 - Startup: 网络猪风行天下版.lnk = ? O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\qq\QQ.exe O4 - Startup: 腾讯TM.lnk = C:\Program Files\Tencent\qq\TMShell.exe O4 - Startup: 腾讯通.lnk = C:\Program Files\Tencent\BQQ\rtxc.exe O4 - Global Startup: Canon LBP-800 状态窗口.LNK = C:\WINNT\system32\spool\drivers\w32x86\3\CAPPSWK.EXE O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe O4 - Global Startup: 腾讯通.lnk = C:\Program Files\Tencent\BQQ\rtxc.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\qq\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\PROGRA~1\FlashGet\jc_link.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\PROGRA~1\FlashGet\jc_all.htm O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\qq\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\qq\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\qq\SendMMS.htm O9 - 浏览器额外的按钮: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm?pid=207 (file missing) O9 - 浏览器额外的按钮: 百度首页 - {02496EBD-8455-48db-B3C7-5DAC97D9F5A7} - http://baidu.com/index.php?tn=bainiudg (file missing) O9 - 浏览器额外的按钮: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll O9 - 浏览器额外的“工具”菜单项: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file missing) O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://hot.3721.com/rd/shop_btn.htm (file missing) O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing) O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (file missing) O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe (file missing) O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\qq\QQIEHelper.dll O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\qq\QQIEHelper.dll O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing) O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing) O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing) O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing) O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing) O11 - Options group: [!CNS] 网络实名 O11 - Options group: [!IESearch] 百度搜索伴侣 O11 - Options group: [TBH] QQ地址栏搜索插件 O14 - IERESET.INF: SEARCH_PAGE_URL= O14 - IERESET.INF: START_PAGE_URL= O16 - DPF: {56A7DC70-E102-4408-A34A-AE06FEF01586} (天下搜索) - http://iebar.t2t2.com/iebar.cab O16 - DPF: {69A05C8A-3914-4891-B457-A0CD8F7B8B36} (OMenu Control) - http://192.168.16.108/OCX/OFormCtrl.ocx O16 - DPF: {8B3B8135-9DAA-40E7-8941-962795F9C1CB} - http://scripts.downloadv3.com/binaries/IA/syswbsvc32_EN.cab O16 - DPF: {98FA5667-513F-4F15-8A15-C171477B8847} - http://image2.sina.com.cn/home/source/search.cab O16 - DPF: {BA0F088C-72C1-475A-92F8-42391DEF6961} (Blueskyvoice Control) - http://chat1.xeyo.com/blueskyvoice_25.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{300DABE0-FFBE-4C0B-9A86-CF6A4E2833BB}: NameServer = 202.106.0.20 O17 - HKLM\System\CS1\Services\Tcpip\..\{300DABE0-FFBE-4C0B-9A86-CF6A4E2833BB}: NameServer = 202.106.0.20 O17 - HKLM\System\CS2\Services\Tcpip\..\{300DABE0-FFBE-4C0B-9A86-CF6A4E2833BB}: NameServer = 202.106.0.20 O17 - HKLM\System\CS3\Services\Tcpip\..\{300DABE0-FFBE-4C0B-9A86-CF6A4E2833BB}: NameServer = 202.106.0.20 O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll O23 - NT 服务: .Net Boot Service - Unknown owner - C:\WINNT\system32\big5_gb2312.exe (file missing) O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - NT 服务: OfficeScanNT 实时扫描 (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe O23 - NT 服务: Remote Log - Unknown owner - C:\WINNT\system32\ServeHost.exe O23 - NT 服务: OfficeScanNT 侦听程序 (tmlisten) - Unknown owner - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe O23 - NT 服务: Windows Management NetWork Service Extensions - Unknown owner - NetManager.exe (file missing) 2006-02-14 00:42:44
hua01 初生襁褓狮帖子:9 注册: 2006-02-10 来自:	分享到：

魔法学徒卡卡技术团队帖子:11465 注册: 2004-10-03 来自:	发表于： 2006-02-14 00:42 \| 短消息资料字号：小中大 2楼问题较多开始→控制面板→管理工具→服务→查找Remote Log→右击→属性→启动类型→禁止→应用→停止→确定。重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows 运行Hijackthis，扫描结束后在下列选项前打上勾，然后选修复“Fix Checked”： F3 - REG:win.ini: run=C:\WINNT\services.exe O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - C:\PROGRA~1\DESKAD~1\deskipn.dll O2 - BHO: Zhongsou Browser Helper - {2A0176FE-008B-4706-90F5-BBA532A49731} - C:\Program Files\SearchNet\SNHpr.dll O2 - BHO: 360so BHOHelper - {472101C2-1109-43f4-9112-31F33E3F2127} - C:\PROGRA~1\360so\360so.dll O2 - BHO: DownloadBHO T2BHO - {B1D147E7-873E-4909-8127-695D9BB78728} - C:\WINNT\Downloaded Program Files\barhelp24.0.dll O3 - IE工具栏增项: 天下搜索 - {56A7DC70-E102-4408-A34A-AE06FEF01586} - C:\WINNT\Downloaded Program Files\iebar23.0.dll O4 - 启动项HKLM\\Run: [CMESys] "C:\Program Files\Common Files\CMEII\CMESys.exe" O4 - 启动项HKLM\\Run: [360Main.exe] C:\PROGRA~1\360so\360Main.exe O4 - 启动项HKLM\\Run: [PigLocalSearch] C:\Program Files\网络猪\PigStart.exe O4 - 启动项HKLM\\Run: [MoveSearch] C:\Program Files\HuaCi\huaci\zsearch.exe O4 - 启动项HKLM\\Run: [SearchNet_Up] "C:\Program Files\SearchNet\ServeUp.exe" O4 - 启动项HKLM\\Run: [Desktop] C:\WINNT\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll O4 - 启动项HKLM\\Run: [services] C:\WINNT\services.exe O4 - 启动项HKLM\\RunServices: [services] C:\WINNT\services.exe O4 - HKCU\..\Run: [NIW] C:\WINNT\NIW.exe O4 - HKCU\..\Run: [services] C:\WINNT\services.exe O4 - HKCU\..\RuunServices:[services] C:\WINNT\services.exe O4 - Startup: 划词搜索.lnk = C:\Program Files\HuaCi\huaci\zsearch.exe O4 - Startup: 网络猪风行天下版.lnk = ? O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O16 - DPF: {56A7DC70-E102-4408-A34A-AE06FEF01586} (天下搜索) - http://iebar.t2t2.com/iebar.cab O16 - DPF: {8B3B8135-9DAA-40E7-8941-962795F9C1CB} - http://scripts.downloadv3.com/binaries/IA/syswbsvc32_EN.cab O23 - NT 服务: .Net Boot Service - Unknown owner - C:\WINNT\system32\big5_gb2312.exe (file missing) O23 - NT 服务: Windows Management NetWork Service Extensions - Unknown owner - NetManager.exe (file missing) 显示隐藏文件双击我的电脑--工具---文件夹选项--查看选项卡--单击选取"显示隐藏文件或文件夹"--清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示您确定更改时，单击“是”--单击“确定”。然后找到如下文件并删除（如果有的话）。 C:\WINNT\services.exe C:\PROGRA~1\DESKAD~1\ C:\Program Files\SearchNet\ C:\PROGRA~1\360so\ C:\WINNT\Downloaded Program Files\barhelp24.0.dll C:\WINNT\Downloaded Program Files\iebar23.0.dll C:\Program Files\Common Files\CMEII\ C:\Program Files\网络猪\ C:\Program Files\HuaCi\ C:\Program Files\DeskAdTop\ C:\WINNT\NIW.exe C:\WINNT\system32\impai.exe 下载System Repair Engineer修复文件关联下载地址见置顶贴 [必读]本版说明及常用小软件下载 http://forum.ikaka.com/topic.asp?board=67&artid=5188931
魔法学徒卡卡技术团队帖子:11465 注册: 2004-10-03 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT