高手请帮我看下卡卡上网助手的日志扫描有没有什么问题? - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛高手请帮我看下卡卡上网助手的日志扫描有没有什么问题?

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

高手请帮我看下卡卡上网助手的日志扫描有没有什么问题?

宠物精灵初生襁褓狮帖子:5 注册: 2006-01-23 来自:	发表于： 2006-02-17 12:21 \| 只看楼主短消息资料字号：小中大 1楼高手请帮我看下卡卡上网助手的日志扫描有没有什么问题? 昨天,魔兽号被盗,高手请帮我看下我的日志文件有什么问题,先谢谢了! Logfile of Kaka v2. 0. 0. 8 Scan Module v2. 0. 0. 1 Scan saved at 11:57:18, on 2006-02-17 Platform: Microsoft Windows XP Professional Service Pack 2 (Build 2600) MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)) Running processes: [smss.exe] CommandLine = [csrss.exe] CommandLine = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 [winlogon.exe] CommandLine = winlogon.exe [SERVICES.EXE] CommandLine = C:\WINDOWS\system32\services.exe [LSASS.EXE] CommandLine = C:\WINDOWS\system32\lsass.exe [SVCHOST.EXE] CommandLine = C:\WINDOWS\system32\svchost -k DcomLaunch [SVCHOST.EXE] CommandLine = C:\WINDOWS\system32\svchost -k rpcss [CCenter.exe] CommandLine = "C:\Program Files\Rising\Rav\CCenter.exe" [SVCHOST.EXE] CommandLine = C:\WINDOWS\System32\svchost.exe -k netsvcs [SVCHOST.EXE] CommandLine = C:\WINDOWS\system32\svchost.exe -k NetworkService [SVCHOST.EXE] CommandLine = C:\WINDOWS\system32\svchost.exe -k LocalService [RavMonD.exe] CommandLine = "C:\Program Files\Rising\Rav\Ravmond.exe" [rfwProxy.exe] CommandLine = "c:\program files\rising\rfw\rfwproxy.exe" [rfwsrv.exe] CommandLine = "c:\program files\rising\rfw\rfwsrv.exe" [EXPLORER.EXE] CommandLine = C:\WINDOWS\Explorer.EXE [spoolsv.exe] CommandLine = C:\WINDOWS\system32\spoolsv.exe [RavStub.exe] CommandLine = "C:\Program Files\Rising\Rav\RavStub.exe" /RAVMOND [SOUNDMAN.EXE] CommandLine = "C:\WINDOWS\SOUNDMAN.EXE" [rfwmain.exe] CommandLine = -StartUp [RavTask.exe] CommandLine = "C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE" -SYSTEM [RavMon.exe] CommandLine = "C:\Program Files\Rising\Rav\Ravmon.exe" -SYSTEM [RUNDLL32.EXE] CommandLine = "C:\WINDOWS\system32\RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit [ctfmon.exe] CommandLine = "C:\WINDOWS\system32\ctfmon.exe" [nvsvc32.exe] CommandLine = C:\WINDOWS\system32\nvsvc32.exe [WDFMGR.EXE] CommandLine = C:\WINDOWS\system32\wdfmgr.exe [UPHCLEAN.EXE] CommandLine = "C:\Program Files\UPHClean\uphclean.exe" [ALG.EXE] CommandLine = C:\WINDOWS\System32\alg.exe [KkScan.exe] CommandLine = "C:\Program Files\Rising\KakaToolBar\KkScan.exe" [wuauclt.exe] CommandLine = "C:\WINDOWS\system32\wuauclt.exe" /RunStoreAsComServer Local\[3dc]SUSDS424d97c4eaaac545abc451c7810db155 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://wow.17173.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=%SystemRoot%\system32\blank.htm R3 - Default URLSearchHook is missing O1 - Hosts: 218.5.76.71 1ting.com O1 - Hosts: 218.5.76.71 www.1ting.com O1 - Hosts: 218.5.76.71 yy138.com O1 - Hosts: 218.5.76.71 www.yy138.com O1 - Hosts: 218.5.76.71 dj99.com O1 - Hosts: 218.5.76.71 www.dj99.com O1 - Hosts: 218.5.76.71 520music.com O1 - Hosts: 218.5.76.71 www.520music.com O1 - Hosts: 218.5.76.71 vv66.com O1 - Hosts: 218.5.76.71 www.vv66.com O1 - Hosts: 218.5.76.71 666ccc.com O1 - Hosts: 218.5.76.71 www.666ccc.com O1 - Hosts: 218.5.76.71 666qqq.com O1 - Hosts: 218.5.76.71 www.666qqq.com O1 - Hosts: 218.5.76.71 100yy.com O1 - Hosts: 218.5.76.71 www.100yy.com O1 - Hosts: 218.5.76.71 006.net O1 - Hosts: 218.5.76.71 www.006.net O1 - Hosts: 218.5.76.71 2t.cn O1 - Hosts: 218.5.76.71 www.2t.cn O1 - Hosts: 218.5.76.71 cococ.com O1 - Hosts: 218.5.76.71 www.cococ.com O1 - Hosts: 218.5.76.71 ting.cococ.com O1 - Hosts: 218.5.76.71 yymp3.com O1 - Hosts: 218.5.76.71 www.yymp3.com O1 - Hosts: 218.5.76.71 qq163.com O1 - Hosts: 218.5.76.71 www.qq163.com O1 - Hosts: 218.5.76.71 7760.com O1 - Hosts: 218.5.76.71 www.7760.com O1 - Hosts: 218.5.76.71 568.com O1 - Hosts: 218.5.76.71 www.568.com O1 - Hosts: 218.5.76.71 nowok.net O1 - Hosts: 218.5.76.71 www.nowok.net O1 - Hosts: 218.5.76.71 chinamp3.com O1 - Hosts: 218.5.76.71 www.chinamp3.com O1 - Hosts: 218.5.76.71 99music.net O1 - Hosts: 218.5.76.71 www.99music.net O1 - Hosts: 218.5.76.71 6621.com O1 - Hosts: 218.5.76.71 www.6621.com O1 - Hosts: 218.5.76.71 7t7t.com O1 - Hosts: 218.5.76.71 www.7t7t.com O1 - Hosts: 218.5.76.71 haoting.com O1 - Hosts: 218.5.76.71 www.haoting.com O1 - Hosts: 218.5.76.71 mtv110.com O1 - Hosts: 218.5.76.71 www.mtv110.com O1 - Hosts: 218.5.76.71 st020.com O1 - Hosts: 218.5.76.71 www.st020.com O1 - Hosts: 218.5.76.71 music.jschina.com.cn O1 - Hosts: 218.5.76.71 real2000.org O1 - Hosts: 218.5.76.71 www.real2000.org O1 - Hosts: 218.5.76.71 6bb.com O1 - Hosts: 218.5.76.71 www.6bb.com O1 - Hosts: 218.5.76.71 5474.com O1 - Hosts: 218.5.76.71 www.5474.com O1 - Hosts: 218.5.76.71 qq163.com O1 - Hosts: 218.5.76.71 www.qq163.com O1 - Hosts: 218.5.76.71 ting88.com O1 - Hosts: 218.5.76.71 www.ting88.com O1 - Hosts: 218.5.76.71 tt78.com O1 - Hosts: 218.5.76.71 www.tt78.com O1 - Hosts: 218.5.76.71 8yh.com O1 - Hosts: 218.5.76.71 mp3.8yh.com O1 - Hosts: 218.5.76.71 ibmp3.com O1 - Hosts: 218.5.76.71 www.ibmp3.com O1 - Hosts: 218.5.76.71 feifa.com O1 - Hosts: 218.5.76.71 www.feifa.com O1 - Hosts: 218.5.76.71 music.feifa.com O1 - Hosts: 218.5.76.71 91f.net O1 - Hosts: 218.5.76.71 www.91f.net O1 - Hosts: 218.5.76.71 6621.com O1 - Hosts: 218.5.76.71 www.6621.com O1 - Hosts: 218.5.76.71 ting163.com O1 - Hosts: 218.5.76.71 www.ting163.com O1 - Hosts: 218.5.76.71 99music.net O1 - Hosts: 218.5.76.71 www.99music.net O1 - Hosts: 218.5.76.71 wo99.com O1 - Hosts: 218.5.76.71 www.wo99.com O1 - Hosts: 218.5.76.71 jnnc.com O1 - Hosts: 218.5.76.71 www.jnnc.com O1 - Hosts: 218.5.76.71 mtv123.com O1 - Hosts: 218.5.76.71 www.mtv123.com O1 - Hosts: 218.5.76.71 dj520.com O1 - Hosts: 218.5.76.71 www.dj520.com O1 - Hosts: 218.5.76.71 7xi.net O1 - Hosts: 218.5.76.71 www.7xi.net O1 - Hosts: 218.5.76.71 mtv110.com O1 - Hosts: 218.5.76.71 www.mtv110.com O1 - Hosts: 218.5.76.71 mtvtop.net O1 - Hosts: 218.5.76.71 www.mtvtop.net O1 - Hosts: 218.5.76.71 mtvtop.com O1 - Hosts: 218.5.76.71 www.mtvtop.com O1 - Hosts: 218.5.76.71 xaonline.com O1 - Hosts: 218.5.76.71 music.xaonline.com O1 - Hosts: 218.5.76.71 musictea.com O1 - Hosts: 218.5.76.71 www.musictea.com O1 - Hosts: 218.5.76.71 tfol.com O1 - Hosts: 218.5.76.71 www.tfol.com O1 - Hosts: 218.5.76.71 yyue.com O1 - Hosts: 218.5.76.71 www.yyue.com O1 - Hosts: 218.5.76.71 yyue.net O1 - Hosts: 218.5.76.71 www.yyue.net O1 - Hosts: 218.5.76.71 qq150.com O1 - Hosts: 218.5.76.71 www.qq150.com O1 - Hosts: 218.5.76.71 517tg.com O1 - Hosts: 218.5.76.71 www.517tg.com O1 - Hosts: 218.5.76.71 souting.com O1 - Hosts: 218.5.76.71 www.souting.com O1 - Hosts: 218.5.76.71 tt67.com O1 - Hosts: 218.5.76.71 www.tt67.com O1 - Hosts: 218.5.76.71 tt78.com O1 - Hosts: 218.5.76.71 www.tt78.com O1 - Hosts: 218.5.76.71 funmtv.com O1 - Hosts: 218.5.76.71 www.funmtv.com O1 - Hosts: 218.5.76.71 gz163.cn O1 - Hosts: 218.5.76.71 www.gz163.cn O1 - Hosts: 218.5.76.71 51y.com O1 - Hosts: 218.5.76.71 www.51y.com O1 - Hosts: 218.5.76.71 tt90.com O1 - Hosts: 218.5.76.71 www.tt90.com O1 - Hosts: 218.5.76.71 cns.3721.com O1 - Hosts: 218.5.76.71 assistant.3721.com O1 - Hosts: 218.5.76.71 auto.search.msn.com O1 - Hosts: 218.5.76.71 so.qq.com O1 - Hosts: 218.5.76.71 4yt.net O1 - Hosts: 218.5.76.71 www.4yt.net O1 - Hosts: 218.5.76.71 qq533.net O1 - Hosts: 218.5.76.71 www.qq533.net O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Program Files\QQ2005\QQIEHelper.dll (file missing) O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll (file missing) O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - Startup: desktop.ini = O4 - Global Startup: desktop.ini = O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\QQ2005\AddToNetDisk.htm O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\QQ2005\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\QQ2005\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\QQ2005\SendMMS.htm O9 - Extra Button: 微软 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.microsoft.com/china/index.htm (file missing) O9 - Extra Button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\QQ2005\QQ.EXE O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\QQ2005\QQ.EXE O9 - Extra Button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\QQ2005\QQIEHelper.dll (file missing) O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\QQ2005\QQIEHelper.dll (file missing) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome O15 - Trusted Zone: http://www.icbc.com.cn O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1139483602453 ********************* 下面还有 2006-02-17 21:05:44
宠物精灵初生襁褓狮帖子:5 注册: 2006-01-23 来自:	分享到：

宠物精灵初生襁褓狮帖子:5 注册: 2006-01-23 来自:	发表于： 2006-02-17 12:23 \| 只看楼主短消息资料字号：小中大 2楼以下接上面 O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ipp - (no CLSID) - (no file) O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - Protocol: msdaipp - (no CLSID) - (no file) O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll O23 - Service: Human Interface Device Access (HidServ) - - C:\WINDOWS\system32\svchost.exe -k netsvcs O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - "C:\Program Files\Rising\Rav\CCenter.exe" O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - "C:\Program Files\Rising\Rav\Ravmond.exe"
宠物精灵初生襁褓狮帖子:5 注册: 2006-01-23 来自:

宠物精灵初生襁褓狮帖子:5 注册: 2006-01-23 来自:	发表于： 2006-02-17 12:30 \| 只看楼主短消息资料字号：小中大 3楼另外怎么彻底关掉硬盘的共享,开始-控制面板-计算机管理-共享文件夹-共享下关掉了之后,重新启动电脑又会重新共享.
宠物精灵初生襁褓狮帖子:5 注册: 2006-01-23 来自:

宠物精灵初生襁褓狮帖子:5 注册: 2006-01-23 来自:	发表于： 2006-02-17 18:30 \| 只看楼主短消息资料字号：小中大 4楼没人理我.....麻烦帮我看看啊,在线等,谢谢了!
宠物精灵初生襁褓狮帖子:5 注册: 2006-01-23 来自:

魔法学徒卡卡技术团队帖子:11465 注册: 2004-10-03 来自:	发表于： 2006-02-17 21:05 \| 短消息资料字号：小中大 5楼修复 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://wow.17173.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=%SystemRoot%\system32\blank.htm R3 - Default URLSearchHook is missing 所有01项可以建立一个内容为 net share c$ /delete net share admin$ /delete net share ipc$ /delete 的批处理命令，文件名可以为noshare.bat 然后放到启动里，使得其开机自动运行。提示：如果还有其他盘使用了共享，如D盘，则添加“net share d /delete”即可
魔法学徒卡卡技术团队帖子:11465 注册: 2004-10-03 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT