请帮我看下HijackThis日志有什么问题. - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请帮我看下HijackThis日志有什么问题.

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

[求助] 请帮我看下HijackThis日志有什么问题.

特攻队2 锋芒艾服狮帖子:1126 注册: 2006-08-25 来自:深圳市	发表于： 2009-01-06 19:09 \| 只看楼主短消息资料字号：小中大 1楼请帮我看下HijackThis日志有什么问题. Logfile of HijackThis v1.99.1 Scan saved at 19:06:55, on 2009-1-6 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\conime.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\System.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe E:\金山毒霸\Kingsoft Internet Security\KAVStart.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\explorer.exe C:\Program Files\Tencent\QQ\TIMPlatform.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Kingsoft\KAC\Service\kaccore.exe C:\Program Files\Tencent\QQ\QQ.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.985\HijackThis.exe O1 - Hosts: 127.1 localhost O1 - Hosts: 127.1 fffff8888fsgfbghj88.cn O1 - Hosts: 127.1 61.134.37.12 O1 - Hosts: 127.1 ko.ssa387.cn O1 - Hosts: 127.1 www.ndxrr.cn O1 - Hosts: 127.1 12345.ssa387.cn O1 - Hosts: 127.1 lihai88.com O1 - Hosts: 127.1 wwwwhf.cn O1 - Hosts: 127.1 a89369093.sq.u9idc.com O1 - Hosts: 127.1 www.mmd178.cn O1 - Hosts: 127.1 www.178mmd.cn O1 - Hosts: 127.1 www.wenzhuoyyy.cn O1 - Hosts: 127.1 tw.lovechina.tw.cn O1 - Hosts: 127.1 222.189.238.151 O1 - Hosts: 127.1 222.179.185.78 O1 - Hosts: 127.1 www.wq9q.cn O1 - Hosts: 127.1 593ffcey.cn O1 - Hosts: 127.1 set.yay520.cn O1 - Hosts: 127.1 tenmoc999.cn O1 - Hosts: 127.1 lihai88.com O1 - Hosts: 127.1 121.kcuf-01.com O1 - Hosts: 127.1 www.ew1q.cn O1 - Hosts: 127.1 www.b3sk.cn O1 - Hosts: 127.1 up.bizmd.cn O1 - Hosts: 127.1 www.ms2a.cn O1 - Hosts: 127.1 www.wo9188.cn O1 - Hosts: 127.1 www.fgetchr.cn O1 - Hosts: 127.1 www.e6zx.cn O1 - Hosts: 127.1 hai067.com O1 - Hosts: 127.1 hai088.com O1 - Hosts: 127.1 778899.jd8j.cn O1 - Hosts: 127.1 sql.78-11.net O1 - Hosts: 127.1 www.bbbirdy.com O1 - Hosts: 127.1 www.s1na1.com.cn O1 - Hosts: 127.1 www.dianyinjzd.cn O1 - Hosts: 127.1 www.dj5201314dj.com O1 - Hosts: 127.1 max-2.cn O1 - Hosts: 127.1 a.asp-o.cn O1 - Hosts: 127.1 b.asp-o.cn O1 - Hosts: 127.1 c.asp-o.cn O1 - Hosts: 127.1 x.kprobb.cn O1 - Hosts: 127.1 js.php-k.cn O1 - Hosts: 127.1 max-1.cn O1 - Hosts: 127.1 max-3.cn O1 - Hosts: 127.1 max-4.cn O1 - Hosts: 127.1 max-5.cn O1 - Hosts: 127.1 max-6.cn O1 - Hosts: 127.1 max-7.cn O1 - Hosts: 127.1 max-8.cn O1 - Hosts: 127.1 max-9.cn O1 - Hosts: 127.1 max-10.cn O1 - Hosts: 127.1 max-11.cn O1 - Hosts: 127.1 max-12.cn O1 - Hosts: 127.1 twocannon250.com.cn O1 - Hosts: 127.1 www.133mm.cn O1 - Hosts: 127.1 www.51vmm.cn O1 - Hosts: 127.1 www.7mmoo.cn O1 - Hosts: 127.1 www.99mmm.org.cn O1 - Hosts: 127.1 www.hdec.cn O1 - Hosts: 127.1 www.picc18.com O1 - Hosts: 127.1 www.kissdh.com O1 - Hosts: 127.1 www.x7v.cn O1 - Hosts: 127.1 biqulu.cn O1 - Hosts: 127.1 2008.qq2006.com.cn O1 - Hosts: 127.1 giaitrisex.com O1 - Hosts: 127.1 www.giaitrisex.com O1 - Hosts: 127.1 www.giaitrituoitre.net O1 - Hosts: 127.1 mekiep.com O1 - Hosts: 127.1 www.1sex1day.com O1 - Hosts: 127.1 a.9ymm.com O1 - Hosts: 127.1 bobo.7wyt.com O1 - Hosts: 127.1 www.591caobi.cn O1 - Hosts: 127.1 www.hrz008.cn O1 - Hosts: 127.1 asp-15.cn O1 - Hosts: 127.1 asp-12.cn O1 - Hosts: 127.1 www.jb88.net O1 - Hosts: 127.1 6.a88a.com O1 - Hosts: 127.1 w.b2c3.cn O1 - Hosts: 127.1 m.c5x8.com O1 - Hosts: 127.1 www.518sfw.cn O1 - Hosts: 127.1 www.jjyyzmj.cn O1 - Hosts: 127.1 u.cnmrx.net O1 - Hosts: 127.1 duowan.czm.cn O1 - Hosts: 127.1 xccxcxcxcxcx.cn O1 - Hosts: 127.1 google-yahoo.org.cn O1 - Hosts: 127.1 tudou-net.org.cn O1 - Hosts: 127.1 downloads.zango.com O1 - Hosts: 127.1 ftp.surfnet.nl O1 - Hosts: 127.1 bis.180solutions.com O1 - Hosts: 127.1 installs.hotbar.com O1 - Hosts: 127.1 www.hbdownloads.com O1 - Hosts: 127.1 static.zangocash.com O1 - Hosts: 127.1 www.qq-songli.cn O1 - Hosts: 127.1 aa.9234.net O1 - Hosts: 127.1 www.97love.info O1 - Hosts: 127.1 97love.info O1 - Hosts: 127.1 www.zyzhuiku.cn O1 - Hosts: 127.1 zyzhuiku.cn O1 - Hosts: 127.1 www.lang18.com O1 - Hosts: 127.1 lang18.com O1 - Hosts: 127.1 sao6666.com 用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
特攻队2 锋芒艾服狮帖子:1126 注册: 2006-08-25 来自:深圳市	分享到：

特攻队2 锋芒艾服狮帖子:1126 注册: 2006-08-25 来自:深圳市	发表于： 2009-01-06 19:10 \| 只看楼主短消息资料字号：小中大 2楼回复：请帮我看下HijackThis日志有什么问题. O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: artlbbdll.dll - {5A041F13-A111-12A4-B0CF-F99818AA68A5} - C:\WINDOWS\system32\artlbbdll.dll O2 - BHO: artiandaodll.dll - {5A041F13-A111-12B2-B0CF-F99818AA68A5} - C:\WINDOWS\system32\artiandaodll.dll O2 - BHO: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll O2 - BHO: kingsoft browser shield - {D963BE1A-6B35-47DB-B002-49FAE71D85CC} - E:\金山毒霸\Kingsoft Internet Security\KASBrowserShield.DLL O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [HBService32] System.exe O4 - HKLM\..\Run: [WinSysM] C:\WINDOWS\255528M.exe O4 - HKLM\..\Run: [3PMmUpdate] rundll32 "C:\WINDOWS\Update.dll",Main O4 - HKLM\..\Run: [MPKrnl] rundll32 "C:\WINDOWS\MPKrnl.dll",KrnlMsgProc O4 - HKLM\..\Run: [KavStart] "E:\金山毒霸\Kingsoft Internet Security\KAVStart.exe" -startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE O4 - HKCU\..\Run: [KavPFW] "E:\金山毒霸\Kingsoft Internet Security\KPFW32.EXE" -startup O8 - Extra context menu item: &使用快车(FlashGet)下载 - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &使用快车(FlashGet)下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm O9 - Extra button: 金山网页防挂马模块设置 - {3AECD3C1-7085-4731-96DC-47B6CF7EF749} - E:\金山毒霸\Kingsoft Internet Security\IEBuddyExt.DLL O9 - Extra 'Tools' menuitem: 金山网页防挂马模块设置 - {3AECD3C1-7085-4731-96DC-47B6CF7EF749} - E:\金山毒霸\Kingsoft Internet Security\IEBuddyExt.DLL O9 - Extra button: 快车 - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: 快车(FlashGet) - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\flashget.exe O9 - Extra button: YlmF - {E8F87883-C795-452E-B41D-354558F0811E} - http://www.ylmf.com (file missing) (HKCU) O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ipp - (no CLSID) - (no file) O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: KuGoo - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O18 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O18 - Protocol: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll O18 - Protocol: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - Protocol: msdaipp - (no CLSID) - (no file) O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll O20 - AppInit_DLLs: HBmhly.dll,HBZHUXIAN.dll,jefkeioh.dll,HBASKTAO.dll,HBZG.dll,HBWULIN2.dll,A52F5B52.dll,HBCHIBI.dll,HBSHQ.dll,B3B78448.dll,HBFS2.dll,7D272D26.dll,B19031BD.dll,90CD5601.dll,045D32AC.dll,HBWOW.dll,B2B8ED3D.dll,A97A6EF5.dll,DA7B531C.dll,BBD080FB.dll,HBKDXY.dll,logkeckf.dll,HBFY.dll O21 - SSODL: msnmsg - {DA191DE0-AA86-4ED0-4B87-293D48B2AE99} - C:\Program Files\Messenger\msgmr.dll O21 - SSODL: 3EF4E281 - {3EF4E281-4D5B-4BB4-AB79-41DED8C38E21} - C:\WINDOWS\system32\jefkeioh.dll O21 - SSODL: A52F5B52 - {A52F5B52-D4C4-425A-89C0-1AF40EBFEFDA} - C:\WINDOWS\system32\A52F5B52.dll O21 - SSODL: B3B78448 - {B3B78448-08CE-427B-A3D6-9DA61DBB207D} - C:\WINDOWS\system32\B3B78448.dll O21 - SSODL: 7D272D26 - {7D272D26-F1DE-450C-8E4B-00A996F5C5FA} - C:\WINDOWS\system32\7D272D26.dll O21 - SSODL: B19031BD - {B19031BD-2570-4438-AAD3-DA1BCC00A8C9} - C:\WINDOWS\system32\B19031BD.dll O21 - SSODL: 90CD5601 - {90CD5601-2324-41BF-BFC4-1D64729BA551} - C:\WINDOWS\system32\90CD5601.dll
特攻队2 锋芒艾服狮帖子:1126 注册: 2006-08-25 来自:深圳市

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT