瑞星卡卡安全论坛技术交流区系统软件 有没有有效的遏制上网过程中垃圾广告网页弹出的办法???

12   1  /  2  页   跳转

有没有有效的遏制上网过程中垃圾广告网页弹出的办法???

有没有有效的遏制上网过程中垃圾广告网页弹出的办法???

最近上网过程中老是弹出些什么彩铃下载啊~~~护肤化妆品啊~~易趣之类的垃圾网站的广告,非常的烦人。
我用卡卡助手修复过,但是没有丝毫的好转。
请问各位高手,有没有什么有效的手段,可以完全删除这些垃圾广告!!
最后编辑2006-08-07 13:16:30
分享到:
gototop
 

你的IE被劫持了,用HijackThis扫个日志上来看看.

http://www.skycn.com/soft/15753.html       

gototop
 

HijackThis_815汉化版扫描日志 V1.99.1
保存于      上午 10:44:21, 日期 2006-08-07
操作系统:  Windows XP SP2 (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\COMM\Network.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\Rising\Rav\RavTask.exe
D:\Program Files\Rising\Rav\Ravmon.exe
D:\桌面天气秀\XDeskWeather.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\jj4\jjsvr4.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
D:\木马杀客\mmsk.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\HijackThis1991汉化版\HijackThis1991zww.exe

R3 - 默认的URLSearchHook丢失。用HijackThis修复
O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINDOWS\system32\wmpdrm.dll (file missing)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: MacroMediapd - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\system32\microapmddt.dll (file missing)
O2 - BHO: (no name) - {D24CF84E-46D7-4479-A4D8-D7E06E91FAC5} - C:\WINDOWS\system32\weatherdll.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - 启动项HKLM\\Run: [RavTask] "D:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [XDeskWeather] D:\桌面天气秀\XDeskWeather.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [pyjj] C:\Program Files\jj4\jjsvr4.exe
O4 - Global Startup: 服务管理器.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: Password Manager XP - {7379d689-cc96-451d-b46e-6bbe4ca6b02d} - F:\新建文件夹\22222\Password Manager XP\PwdManager.exe (file missing) (HKCU)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0AD04473-5155-4969-92D9-8EDE16D27A9F}: NameServer = 202.96.104.16,192.168.0.181
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F702C77-3B7C-459C-BD3A-8BB555A12CCF}: NameServer = 202.96.104.16,202.96.104.17
O17 - HKLM\System\CS1\Services\Tcpip\..\{0AD04473-5155-4969-92D9-8EDE16D27A9F}: NameServer = 202.96.104.16,192.168.0.181
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - NT 服务: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: Network System (Universal Disk Manager) - COMENET TECHNOLOGY - C:\Program Files\Common Files\COMM\Network.exe
O23 - NT 服务: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)
gototop
 

C:\Program Files\Common Files\COMM\Network.exe

貌似木马,建议用ewido扫描
gototop
 

修复

O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINDOWS\system32\wmpdrm.dll (file missing)

O2 - BHO: MacroMediapd - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\system32\microapmddt.dll (file missing)

gototop
 

O17 - HKLM\System\CCS\Services\Tcpip\..\{0AD04473-5155-4969-92D9-8EDE16D27A9F}: NameServer = 202.96.104.16,192.168.0.181
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F702C77-3B7C-459C-BD3A-8BB555A12CCF}: NameServer = 202.96.104.16,202.96.104.17
O17 - HKLM\System\CS1\Services\Tcpip\..\{0AD04473-5155-4969-92D9-8EDE16D27A9F}: NameServer = 202.96.104.16,192.168.0.181

有问题
gototop
 

嗯,好的,我先去修复下看看
gototop
 

017项先别修复
gototop
 

017后面的 NameServer = 202.96.104.16,192.168.0.181
是我的DNS服务 IP
202.96.104.16是  宁波的
192.168.0.181   是我自己建的DNS服务器IP
gototop
 

用upiea清理免疫一下流氓:

http://anding.ys168.com/ ——常用软件
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT