老是会跳出输入手机号码的广告！帮看下，实在不行只好重装系统了！ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛老是会跳出输入手机号码的广告！帮看下，实在不行只好重装系统了！

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

老是会跳出输入手机号码的广告！帮看下，实在不行只好重装系统了！

3211123 初生襁褓狮帖子:4 注册: 2006-04-19 来自:	发表于： 2006-04-30 13:10 \| 只看楼主短消息资料字号：小中大 1楼老是会跳出输入手机号码的广告！帮看下，实在不行只好重装系统了！ http://61.184.142.182/soft/down_6005.exe 估计是中了里面的流氓广告和病毒~ 病毒瑞星能发现。。 HijackThis_815汉化版扫描日志 V1.99.1 保存于 12:38:57, 日期 2006-4-30 操作系统： Windows 2000 SP4 (WinNT 5.00.2195) 浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106) 当前运行的进程： C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe c:\program files\rising\rfw\rfwsrv.exe C:\WINNT\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\Program Files\Rising\Rav\Ravmond.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Rising\Rav\RavStub.exe C:\WINNT\Explorer.EXE c:\program files\rising\rfw\RfwMain.exe C:\WINNT\system32\hkcmd.exe C:\Program Files\Rising\Rav\RavTask.exe C:\WINNT\system32\internat.exe C:\Program Files\Rising\Rav\Ravmon.exe C:\Program Files\ChinaNet\VnetClient.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Downloads\HijackThis\HijackThis1991zww.exe O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINNT\system32\wmpdrm.dll O2 - BHO: MyIEHelper Class - {16A770A0-0E87-4278-B748-2460D64A8386} - C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper2006424_1100.dll O2 - BHO: VnetCookie Class - {4E83D567-4697-4F7B-B1F0-A513B01DB89A} - c:\PROGRA~1\chinanet\VNETTR~1.DLL O2 - BHO: DTSvc Class - {6B280AC7-8B18-46A4-BF70-FC579A1B2F76} - C:\Program Files\DTSVC\DTS\DTS.dll (file missing) O2 - BHO: NewWeb Controller - {9ACEEE30-143F-471A-AA45-72B061FE7D60} - (no file) O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll O2 - BHO: (no name) - {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} - (no file) O3 - IE工具栏增项: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon O4 - 启动项HKLM\\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKCU\..\Run: [Internat.exe] internat.exe O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\qq\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\qq\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\qq\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\qq\SendMMS.htm O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O16 - DPF: {F553811C-C2CE-4A33-90B4-A6D333FDF794} (DreamSetup Control) - http://222.217.240.23/ddvod/user/help/player/DreamPlayer/DreamSetup.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3FB9D456-B7FF-4041-B1F4-E743A8443A2B}: NameServer = 202.103.224.68 202.103.225.68 O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe 2006-04-30 13:22:22
3211123 初生襁褓狮帖子:4 注册: 2006-04-19 来自:	分享到：

3211123 初生襁褓狮帖子:4 注册: 2006-04-19 来自:	发表于： 2006-04-30 13:16 \| 只看楼主短消息资料字号：小中大 2楼付上瑞星扫的！未知家族病毒分析扫描结果: 无可疑文件系统活动进程 C:\WINNT\SYSTEM32\SMSS.EXE C:\WINNT\SYSTEM32\CSRSS.EXE C:\WINNT\SYSTEM32\WINLOGON.EXE C:\WINNT\SYSTEM32\WDMAUD.DRV C:\WINNT\SYSTEM32\MSACM32.DRV C:\WINNT\SYSTEM32\SERVICES.EXE C:\WINNT\SYSTEM32\LSASS.EXE C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE C:\PROGRAM FILES\RISING\RFW\RFWRULE.DLL C:\PROGRAM FILES\RISING\RFW\RFWLOG.DLL C:\PROGRAM FILES\RISING\RFW\RFWDRV.DLL C:\PROGRAM FILES\RISING\RFW\PSAPI.DLL C:\PROGRAM FILES\RISING\RFW\MONDRV.DLL C:\PROGRAM FILES\RISING\RFW\PROCLIB.DLL C:\WINNT\SYSTEM32\SVCHOST.EXE C:\WINNT\SYSTEM32\SVCHOST.EXE C:\WINNT\SYSTEM32\UNIMDM.TSP C:\WINNT\SYSTEM32\KMDDSP.TSP C:\WINNT\SYSTEM32\NDPTSP.TSP C:\WINNT\SYSTEM32\IPCONF.TSP C:\WINNT\SYSTEM32\H323.TSP C:\WINNT\SYSTEM32\MSTASK.EXE C:\WINNT\SYSTEM32\WBEM\WINMGMT.EXE C:\DOWNLOADS\HIJACKTHIS\HIJACKTHIS1991ZWW.EXE C:\WINNT\SYSTEM32\MSVBVM60.DLL C:\WINNT\SYSTEM32\SVCHOST.EXE C:\PROGRAM FILES\CHINANET\VNETCLIENT.EXE C:\PROGRAM FILES\CHINANET\COMMUNICATE.DLL C:\PROGRAM FILES\CHINANET\DIALMODULE.DLL C:\PROGRAM FILES\CHINANET\MFC42.DLL C:\PROGRA~1\CHINANET\CLIENT~1.DLL C:\PROGRA~1\CHINANET\PLUGIN~1.OCX C:\PROGRA~1\CHINANET\SIGN.DLL C:\PROGRA~1\CHINANET\POSTPLUG.DLL C:\PROGRA~1\CHINANET\ADVERT~1.OCX C:\PROGRA~1\CHINANET\GIF89A.DLL C:\PROGRA~1\CHINANET\VNETBS.OCX C:\PROGRA~1\CHINANET\ACCOUN~2.DLL C:\PROGRA~1\CHINANET\ACCOUNTMGR.DLL C:\PROGRA~1\CHINANET\VNETSKIN.OCX C:\PROGRA~1\CHINANET\DIALOGSTYLE.DLL C:\PROGRA~1\CHINANET\TIMER.OCX C:\PROGRA~1\CHINANET\PLUGIN~2.OCX C:\PROGRA~1\CHINANET\NEWMES~1.DLL C:\PROGRA~1\CHINANET\PASSCTRL.DLL C:\WINNT\SYSTEM32\WPCAP.DLL C:\WINNT\SYSTEM32\PTHREADVC.DLL C:\WINNT\SYSTEM32\PACKET.DLL C:\PROGRA~1\CHINANET\PLUGPUSH.DLL C:\PROGRA~1\CHINANET\ALLINT~1.DLL C:\PROGRA~1\CHINANET\VNETLOG.OCX C:\PROGRA~1\CHINANET\STATNUM.DLL C:\PROGRA~1\CHINANET\VNETON~1.OCX C:\PROGRA~1\CHINANET\ALLFUN~1.DLL C:\PROGRA~1\CHINANET\VNETOPTLOG.DLL C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL C:\WINNT\SYSTEM32\WDMAUD.DRV C:\WINNT\SYSTEM32\MSACM32.DRV C:\WINNT\SYSTEM32\MSADP32.ACM C:\PROGRA~1\CHINANET\DLGSKIN.OCX C:\WINNT\SYSTEM32\MACROMED\FLASH\FLASH8.OCX C:\WINNT\EXPLORER.EXE C:\WINNT\APPPATCH\ACLAYERS.DLL C:\WINNT\SYSTEM32\WDMAUD.DRV C:\WINNT\SYSTEM32\MSACM32.DRV C:\WINNT\SYSTEM32\RAVEXT.DLL C:\PROGRA~1\FLASHGET\JCCATCH.DLL C:\WINNT\SYSTEM32\MSADP32.ACM C:\PROGRAM FILES\WINRAR\RAREXT.DLL C:\WINNT\SYSTEM32\IGFXPPH.DLL C:\WINNT\SYSTEM32\HCCUTILS.DLL C:\PROGRAM FILES\RISING\RFW\RFWMAIN.EXE C:\WINNT\SYSTEM32\MSVCP60.DLL C:\PROGRAM FILES\RISING\RFW\RSGUILIB.DLL C:\PROGRAM FILES\RISING\RFW\RSCOMMON.DLL C:\PROGRAM FILES\RISING\RFW\PNGDLL.DLL C:\WINNT\SYSTEM32\HKCMD.EXE C:\WINNT\SYSTEM32\HCCUTILS.DLL C:\WINNT\SYSTEM32\IGFXDEV.DLL C:\WINNT\SYSTEM32\IGFXSRVC.DLL C:\WINNT\SYSTEM32\IGFXHK.DLL C:\WINNT\SYSTEM32\IGFXRES.DLL C:\WINNT\SYSTEM32\INTERNAT.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE C:\WINNT\SYSTEM32\WMPDRM.DLL C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\MICROSOFT\IEHELPER\IEHELPER2006424_1100.DLL C:\PROGRA~1\CHINANET\VNETTR~1.DLL C:\PROGRA~1\CHINANET\COMMUNICATE.DLL C:\PROGRA~1\CHINANET\CLIENT~1.DLL C:\PROGRA~1\FLASHGET\JCCATCH.DLL C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL C:\WINNT\SYSTEM32\MACROMED\FLASH\FLASH8.OCX C:\WINNT\SYSTEM32\WDMAUD.DRV C:\WINNT\SYSTEM32\MSACM32.DRV C:\WINNT\SYSTEM32\MSADP32.ACM C:\WINNT\SYSTEM32\MSRATELC.DLL C:\WINNT\SYSTEM32\WINABC.IME C:\DOWNLOADS\RSDETECT.EXE C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE 普通自启动项 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Synchronization Manager = MOBSYNC.EXE /LOGON HotKeysCmds = C:\WINNT\SYSTEM32\HKCMD.EXE RfwMain = "C:\PROGRAM FILES\RISING\RFW\RFWMAIN.EXE" -STARTUP RavTask = "C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE" -SYSTEM HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Internat.exe = INTERNAT.EXE AppInit_DLLs HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs = 系统文件关联 .exe ==> exefile = "%1" %* .com ==> comfile = "%1" %* .cmd ==> cmdfile = "%1" %* .bat ==> batfile = "%1" %* .txt ==> txtfile = %SystemRoot%\system32\NOTEPAD.EXE %1 .scr ==> scrfile = "%1" /S .reg ==> regfile = regedit.exe "%1" .doc ==> Word.Document.8 = "C:\Program Files\Microsoft Office\Office\WINWORD.EXE" /n 其它启动项 WIN.INI 无信息 SYSTEM.INI SHELL = Explorer.exe SCRNSAVE.EXE = C:\WINNT\system32\ssbezier.scr Winlogon 启动项 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify crypt32chain = CRYPT32.DLL cryptnet = CRYPTNET.DLL cscdll = CSCDLL.DLL igfxcui = IGFXSRVC.DLL sclgntfy = SCLGNTFY.DLL SensLogn = WLNOTIFY.DLL wzcnotif = WZCDLG.DLL HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Userinit = C:\WINNT\SYSTEM32\USERINIT.EXE, shell = EXPLORER.EXE IE - BHO HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {0E674588-66B7-4E19-9D0E-2053B800F69F} = C:\WINNT\system32\wmpdrm.dll {16A770A0-0E87-4278-B748-2460D64A8386} = C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper2006424_1100.dll {4E83D567-4697-4F7B-B1F0-A513B01DB89A} = c:\PROGRA~1\chinanet\VNETTR~1.DLL {6B280AC7-8B18-46A4-BF70-FC579A1B2F76} = C:\Program Files\DTSVC\DTS\DTS.dll {9ACEEE30-143F-471A-AA45-72B061FE7D60} = NULL {A5366673-E8CA-11D3-9CD9-0090271D075B} = C:\PROGRA~1\FLASHGET\jccatch.dll {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} = NULL Winsock SPI MSAFD Tcpip [TCP/IP] = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD Tcpip [UDP/IP] = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD Tcpip [RAW/IP] = C:\WINNT\SYSTEM32\MSAFD.DLL RSVP UDP Service Provider = C:\WINNT\SYSTEM32\RSVPSP.DLL RSVP TCP Service Provider = C:\WINNT\SYSTEM32\RSVPSP.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{5A7BE7D8-1831-40A6-B1C2-6AEB75D53D87}] SEQPACKET 0 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{5A7BE7D8-1831-40A6-B1C2-6AEB75D53D87}] DATAGRAM 0 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{D0D5DED0-1DE2-4B52-88C8-FA29E84636C9}] SEQPACKET 1 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{D0D5DED0-1DE2-4B52-88C8-FA29E84636C9}] DATAGRAM 1 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{1ED7B956-6F78-485A-9298-2F2B535C420C}] SEQPACKET 2 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{1ED7B956-6F78-485A-9298-2F2B535C420C}] DATAGRAM 2 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{3424F414-E250-4800-A429-7D55B8F176A9}] SEQPACKET 3 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{3424F414-E250-4800-A429-7D55B8F176A9}] DATAGRAM 3 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{CD762F2E-F209-46BE-A9A5-E8AE6752EDA2}] SEQPACKET 4 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{CD762F2E-F209-46BE-A9A5-E8AE6752EDA2}] DATAGRAM 4 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{3FB9D456-B7FF-4041-B1F4-E743A8443A2B}] SEQPACKET 5 = C:\WINNT\SYSTEM32\MSAFD.DLL MSAFD NetBIOS [\Device\NetBT_Tcpip_{3FB9D456-B7FF-4041-B1F4-E743A8443A2B}] DATAGRAM 5 = C:\WINNT\SYSTEM32\MSAFD.DLL
3211123 初生襁褓狮帖子:4 注册: 2006-04-19 来自:

3211123 初生襁褓狮帖子:4 注册: 2006-04-19 来自:	发表于： 2006-04-30 13:17 \| 只看楼主短消息资料字号：小中大 3楼系统服务项 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services Alerter = C:\WINNT\SYSTEM32\SERVICES.EXE AppMgmt = C:\WINNT\SYSTEM32\SERVICES.EXE BITS = C:\WINNT\SYSTEM32\SVCHOST.EXE -K BITSGROUP Browser = C:\WINNT\SYSTEM32\SERVICES.EXE CiSvc = C:\WINNT\SYSTEM32\CISVC.EXE ClipSrv = C:\WINNT\SYSTEM32\CLIPSRV.EXE Dhcp = C:\WINNT\SYSTEM32\SERVICES.EXE dmadmin = C:\WINNT\SYSTEM32\DMADMIN.EXE /COM dmserver = C:\WINNT\SYSTEM32\SERVICES.EXE Dnscache = C:\WINNT\SYSTEM32\SERVICES.EXE Eventlog = C:\WINNT\SYSTEM32\SERVICES.EXE EventSystem = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS Fax = C:\WINNT\SYSTEM32\FAXSVC.EXE lanmanserver = C:\WINNT\SYSTEM32\SERVICES.EXE lanmanworkstation = C:\WINNT\SYSTEM32\SERVICES.EXE LmHosts = C:\WINNT\SYSTEM32\SERVICES.EXE Messenger = C:\WINNT\SYSTEM32\SERVICES.EXE mnmsrvc = C:\WINNT\SYSTEM32\MNMSRVC.EXE MSDTC = C:\WINNT\SYSTEM32\MSDTC.EXE MSIServer = C:\WINNT\SYSTEM32\MSIEXEC.EXE /V NetDDE = C:\WINNT\SYSTEM32\NETDDE.EXE NetDDEdsdm = C:\WINNT\SYSTEM32\NETDDE.EXE Netlogon = C:\WINNT\SYSTEM32\LSASS.EXE Netman = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS NtLmSsp = C:\WINNT\SYSTEM32\LSASS.EXE NtmsSvc = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS PlugPlay = C:\WINNT\SYSTEM32\SERVICES.EXE PolicyAgent = C:\WINNT\SYSTEM32\LSASS.EXE ProtectedStorage = C:\WINNT\SYSTEM32\SERVICES.EXE RasAuto = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS RasMan = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS RemoteAccess = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS RemoteRegistry = C:\WINNT\SYSTEM32\REGSVC.EXE RfwProxySrv = C:\PROGRAM FILES\RISING\RFW\RFWPROXY.EXE RfwService = C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE RpcLocator = C:\WINNT\SYSTEM32\LOCATOR.EXE RpcSs = C:\WINNT\SYSTEM32\SVCHOST -K RPCSS RsCCenter = "C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE" RsRavMon = "C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE" RSVP = C:\WINNT\SYSTEM32\RSVP.EXE -S SamSs = C:\WINNT\SYSTEM32\LSASS.EXE SCardDrv = C:\WINNT\SYSTEM32\SCARDSVR.EXE SCardSvr = C:\WINNT\SYSTEM32\SCARDSVR.EXE Schedule = C:\WINNT\SYSTEM32\MSTASK.EXE seclogon = C:\WINNT\SYSTEM32\SERVICES.EXE SENS = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS SharedAccess = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS SysmonLog = C:\WINNT\SYSTEM32\SMLOGSVC.EXE TapiSrv = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS TlntSvr = C:\WINNT\SYSTEM32\TLNTSVR.EXE TrkWks = C:\WINNT\SYSTEM32\SERVICES.EXE UPS = C:\WINNT\SYSTEM32\UPS.EXE UtilMan = C:\WINNT\SYSTEM32\UTILMAN.EXE W32Time = C:\WINNT\SYSTEM32\SERVICES.EXE WinMgmt = C:\WINNT\SYSTEM32\WBEM\WINMGMT.EXE WmdmPmSN = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS Wmi = C:\WINNT\SYSTEM32\SERVICES.EXE wuauserv = C:\WINNT\SYSTEM32\SVCHOST.EXE -K WUGROUP WZCSVC = C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS 文件驱动 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services FltMgr = C:\WINNT\SYSTEM32\DRIVERS\FLTMGR.SYS MRxSmb = C:\WINNT\SYSTEM32\DRIVERS\MRXSMB.SYS NetBIOS = C:\WINNT\SYSTEM32\DRIVERS\NETBIOS.SYS Rdbss = C:\WINNT\SYSTEM32\DRIVERS\RDBSS.SYS Srv = C:\WINNT\SYSTEM32\DRIVERS\SRV.SYS 系统驱动项 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services ACPI = C:\WINNT\SYSTEM32\DRIVERS\ACPI.SYS AFD = C:\WINNT\SYSTEM32\DRIVERS\AFD.SYS ALCXWDM = C:\WINNT\SYSTEM32\DRIVERS\ALCXWDM.SYS AsyncMac = C:\WINNT\SYSTEM32\DRIVERS\ASYNCMAC.SYS atapi = C:\WINNT\SYSTEM32\DRIVERS\ATAPI.SYS Atmarpc = C:\WINNT\SYSTEM32\DRIVERS\ATMARPC.SYS audstub = C:\WINNT\SYSTEM32\DRIVERS\AUDSTUB.SYS BaseTDI = C:\WINNT\SYSTEM32\DRIVERS\BASETDI.SYS ccdecode = C:\WINNT\SYSTEM32\DRIVERS\CCDECODE.SYS Cdrom = C:\WINNT\SYSTEM32\DRIVERS\CDROM.SYS Disk = C:\WINNT\SYSTEM32\DRIVERS\DISK.SYS dmboot = C:\WINNT\SYSTEM32\DRIVERS\DMBOOT.SYS dmio = C:\WINNT\SYSTEM32\DRIVERS\DMIO.SYS dmload = C:\WINNT\SYSTEM32\DRIVERS\DMLOAD.SYS DMusic = C:\WINNT\SYSTEM32\DRIVERS\DMUSIC.SYS ExpScaner = C:\PROGRAM FILES\RISING\RAV\EXPSCAN.SYS Fdc = C:\WINNT\SYSTEM32\DRIVERS\FDC.SYS Flpydisk = C:\WINNT\SYSTEM32\DRIVERS\FLPYDISK.SYS FsVga = C:\WINNT\SYSTEM32\DRIVERS\FSVGA.SYS Ftdisk = C:\WINNT\SYSTEM32\DRIVERS\FTDISK.SYS gameenum = C:\WINNT\SYSTEM32\DRIVERS\GAMEENUM.SYS GNetPPPoE = C:\WINNT\SYSTEM32\DRIVERS\PPPOE.SYS Gpc = C:\WINNT\SYSTEM32\DRIVERS\MSGPC.SYS HookCont = C:\PROGRAM FILES\RISING\RAV\HOOKCONT.SYS HookReg = C:\PROGRAM FILES\RISING\RAV\HOOKREG.SYS HookSys = C:\PROGRAM FILES\RISING\RAV\HOOKSYS.SYS HookUrl = C:\PROGRAM FILES\RISING\RFW\HOOKURL.SYS i8042prt = C:\WINNT\SYSTEM32\DRIVERS\I8042PRT.SYS ialm = C:\WINNT\SYSTEM32\DRIVERS\IALMNT5.SYS IdeBusDr = C:\WINNT\SYSTEM32\DRIVERS\IDEBUSDR.SYS IdeChnDr = C:\WINNT\SYSTEM32\DRIVERS\IDECHNDR.SYS IntelIde = C:\WINNT\SYSTEM32\DRIVERS\INTELIDE.SYS IpFilterDriver = C:\WINNT\SYSTEM32\DRIVERS\IPFLTDRV.SYS IpInIp = C:\WINNT\SYSTEM32\DRIVERS\IPINIP.SYS IpNat = C:\WINNT\SYSTEM32\DRIVERS\IPNAT.SYS IPSEC = C:\WINNT\SYSTEM32\DRIVERS\IPSEC.SYS IRENUM = C:\WINNT\SYSTEM32\DRIVERS\IRENUM.SYS isapnp = C:\WINNT\SYSTEM32\DRIVERS\ISAPNP.SYS Kbdclass = C:\WINNT\SYSTEM32\DRIVERS\KBDCLASS.SYS kmixer = C:\WINNT\SYSTEM32\DRIVERS\KMIXER.SYS MEMSCAN = C:\PROGRAM FILES\RISING\RAV\MEMSCAN.SYS Mouclass = C:\WINNT\SYSTEM32\DRIVERS\MOUCLASS.SYS MPE = C:\WINNT\SYSTEM32\DRIVERS\MPE.SYS mProcRs = C:\PROGRAM FILES\RISING\RFW\MPROCRS.SYS MSKSSRV = C:\WINNT\SYSTEM32\DRIVERS\MSKSSRV.SYS MSPCLOCK = C:\WINNT\SYSTEM32\DRIVERS\MSPCLOCK.SYS MSPQM = C:\WINNT\SYSTEM32\DRIVERS\MSPQM.SYS MSTEE = C:\WINNT\SYSTEM32\DRIVERS\MSTEE.SYS ms_mpu401 = C:\WINNT\SYSTEM32\DRIVERS\MSMPU401.SYS NABTSFEC = C:\WINNT\SYSTEM32\DRIVERS\NABTSFEC.SYS NdisTapi = C:\WINNT\SYSTEM32\DRIVERS\NDISTAPI.SYS Ndisuio = C:\WINNT\SYSTEM32\DRIVERS\NDISUIO.SYS NdisWan = C:\WINNT\SYSTEM32\DRIVERS\NDISWAN.SYS NetBT = C:\WINNT\SYSTEM32\DRIVERS\NETBT.SYS NetDetect = C:\WINNT\SYSTEM32\DRIVERS\NETDTECT.SYS NPF = C:\WINNT\SYSTEM32\DRIVERS\NPF.SYS npkcrypt = C:\PROGRAM FILES\TENCENT\QQ\NPKCRYPT.SYS NwlnkFlt = C:\WINNT\SYSTEM32\DRIVERS\NWLNKFLT.SYS NwlnkFwd = C:\WINNT\SYSTEM32\DRIVERS\NWLNKFWD.SYS Parallel = C:\WINNT\SYSTEM32\DRIVERS\PARALLEL.SYS Parport = C:\WINNT\SYSTEM32\DRIVERS\PARPORT.SYS PCI = C:\WINNT\SYSTEM32\DRIVERS\PCI.SYS PptpMiniport = C:\WINNT\SYSTEM32\DRIVERS\RASPPTP.SYS Ptilink = C:\WINNT\SYSTEM32\DRIVERS\PTILINK.SYS RasAcd = C:\WINNT\SYSTEM32\DRIVERS\RASACD.SYS Rasl2tp = C:\WINNT\SYSTEM32\DRIVERS\RASL2TP.SYS Raspti = C:\WINNT\SYSTEM32\DRIVERS\RASPTI.SYS RCA = C:\WINNT\SYSTEM32\DRIVERS\RCA.SYS redbook = C:\WINNT\SYSTEM32\DRIVERS\REDBOOK.SYS RsFwDrv = C:\PROGRAM FILES\RISING\RFW\RSFWDRV.SYS rtl8139 = C:\WINNT\SYSTEM32\DRIVERS\RTL8139.SYS serenum = C:\WINNT\SYSTEM32\DRIVERS\SERENUM.SYS Serial = C:\WINNT\SYSTEM32\DRIVERS\SERIAL.SYS SLIP = C:\WINNT\SYSTEM32\DRIVERS\SLIP.SYS streamip = C:\WINNT\SYSTEM32\DRIVERS\STREAMIP.SYS swenum = C:\WINNT\SYSTEM32\DRIVERS\SWENUM.SYS swmidi = C:\WINNT\SYSTEM32\DRIVERS\SWMIDI.SYS sysaudio = C:\WINNT\SYSTEM32\DRIVERS\SYSAUDIO.SYS Tcpip = C:\WINNT\SYSTEM32\DRIVERS\TCPIP.SYS uhcd = C:\WINNT\SYSTEM32\DRIVERS\UHCD.SYS Update = C:\WINNT\SYSTEM32\DRIVERS\UPDATE.SYS usbehci = C:\WINNT\SYSTEM32\DRIVERS\USBEHCI.SYS usbhub = C:\WINNT\SYSTEM32\DRIVERS\USBHUB.SYS usbhub20 = C:\WINNT\SYSTEM32\DRIVERS\USBHUB20.SYS USBSTOR = C:\WINNT\SYSTEM32\DRIVERS\USBSTOR.SYS VgaSave = C:\WINNT\SYSTEM32\DRIVERS\VGA.SYS Wanarp = C:\WINNT\SYSTEM32\DRIVERS\WANARP.SYS wdmaud = C:\WINNT\SYSTEM32\DRIVERS\WDMAUD.SYS WSTCODEC = C:\WINNT\SYSTEM32\DRIVERS\WSTCODEC.SYS {6080A529-897E-4629-A488-ABA0C29B635E} = C:\WINNT\SYSTEM32\DRIVERS\IALMSBW.SYS {D31A0762-0CEB-444e-ACFF-B049A1F6FE91} = C:\WINNT\SYSTEM32\DRIVERS\IALMKCHW.SYS
3211123 初生襁褓狮帖子:4 注册: 2006-04-19 来自:

建能横据古稀狮帖子:5755 注册: 2005-04-01 来自:	发表于： 2006-04-30 13:18 \| 短消息资料字号：小中大 4楼 O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINNT\system32\wmpdrm.dll O2 - BHO: VnetCookie Class - {4E83D567-4697-4F7B-B1F0-A513B01DB89A} - c:\PROGRA~1\chinanet\VNETTR~1.DLL O2 - BHO: DTSvc Class - {6B280AC7-8B18-46A4-BF70-FC579A1B2F76} - C:\Program Files\DTSVC\DTS\DTS.dll (file missing) O2 - BHO: NewWeb Controller - {9ACEEE30-143F-471A-AA45-72B061FE7D60} - (no file) O2 - BHO: (no name) - {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} - (no file) 修复上面各项
建能横据古稀狮帖子:5755 注册: 2005-04-01 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-04-30 13:20 \| 短消息资料字号：小中大 5楼 O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINNT\system32\wmpdrm.dll O2 - BHO: MyIEHelper Class - {16A770A0-0E87-4278-B748-2460D64A8386} - C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper2006424_1100.dll O4 - HKCU\..\Run: [Internat.exe] internat.exe 关闭所有浏览窗口以及一些不必要的程序运行Hijackthis，扫描结束后在下列选项前打上勾，然后选"修复"“Fix Checked 双击我的电脑--工具---文件夹选项--查看选项卡--单击选取"显示隐藏文件或文件夹"--清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示您确定更改时，单击“是” 然后找到如下文件并删除（如果有的话）C:\WINNT\system32\wmpdrm.dll C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper2006424_1100.dll
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-04-30 13:22 \| 短消息资料字号：小中大 6楼【回复“建能”的帖子】 O2 - BHO: VnetCookie Class - {4E83D567-4697-4F7B-B1F0-A513B01DB89A} - c:\PROGRA~1\chinanet\VNETTR~1.DLL 这项修不得，这是极速星空的东东。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT