瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 求帮忙(截止7月18日下午3点,问题仍然没解决,求大家帮忙)

12   2  /  2  页   跳转页

求帮忙(截止7月18日下午3点,问题仍然没解决,求大家帮忙)

收藏
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 13:59 | 显示全部 短消息 资料
字号： 小 中 大 11楼

正在运行的进程
[PID: 512][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 560][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 584][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 632][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 652][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 784][C:\WINDOWS\system32\Ati2evxx.exe]  <ATI Technologies Inc.><6.14.10.4114>
    [C:\WINDOWS\system32\Ati2edxx.dll]  <ATI Technologies, Inc.><6, 14, 10, 2496>
[PID: 808][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 876][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 928][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 964][C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe]  <><0, 20, 0, 3000>
[PID: 1040][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1084][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1196][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
    [C:\WINDOWS\system32\bthcrp.dll]  <Broadcom Corporation.><4.0.1.2601>
    [C:\WINDOWS\system32\WidcommSdk.dll]  <Broadcom Corporation.><4.0.1.2601>
    [C:\WINDOWS\system32\wbtapi.dll]  <Broadcom Corporation.><4.0.1.2601>
[PID: 1312][D:\Bluetooth Software\bin\btwdins.exe]  <Broadcom Corporation.><4.0.1.2601>
[PID: 1340][C:\WINDOWS\system32\inetsrv\inetinfo.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1416][D:\Symantec Client Firewall\NISUM.EXE]  <Symantec Corporation><5.0.0.375>
    [C:\WINDOWS\system32\SYMSTORE.dll]  <Symantec Corporation><4.6.0.53>
    [D:\Symantec Client Firewall\NISUMPS.DLL]  <Symantec Corporation><5.0.0.375>
[PID: 1500][D:\Symantec Client Firewall\SymPxSvc.exe]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\SymProxy.dll]  <Symantec Corporation><5.0.0.375>
    [C:\WINDOWS\system32\SYMREDIR.dll]  <Symantec Corporation><4.6.0.53>
    [C:\WINDOWS\system32\SYMSTORE.dll]  <Symantec Corporation><4.6.0.53>
    [D:\Symantec Client Firewall\NISALERT.DLL]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\NISRES.DLL]  <N/A><N/A>
    [D:\Symantec Client Firewall\ProxyIM.DLL]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\StrmFilt.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\SymIConv.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\SymPxAlt.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\SymURL.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\iamevent.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\PrxyNNTP.DLL]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\PrxyHTTP.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\NISUMPS.DLL]  <Symantec Corporation><5.0.0.375>
[PID: 1552][D:\Symantec Client Firewall\NISSERV.EXE]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\IAMLOG.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\iamevent.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\NISRES.DLL]  <N/A><N/A>
    [C:\WINDOWS\system32\SYMSTORE.dll]  <Symantec Corporation><4.6.0.53>
    [D:\Symantec Client Firewall\NISUMPS.DLL]  <Symantec Corporation><5.0.0.375>
[PID: 1948][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1116][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\WINDOWS\system32\l3codeca.acm]  <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
    [D:\NetTransport\NTIEHelper.dll]  <Xi><1.91.12>
[PID: 1408][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 2096][D:\SYMANT~1\IAMAPP.EXE]  <Symantec Corporation><5.0.0.375>
    [D:\SYMANT~1\iamevent.dll]  <Symantec Corporation><5.0.0.375>
    [D:\SYMANT~1\NISRES.DLL]  <N/A><N/A>
    [C:\WINDOWS\system32\SYMSTORE.dll]  <Symantec Corporation><4.6.0.53>
    [D:\SYMANT~1\IAMLOG.dll]  <Symantec Corporation><5.0.0.375>
    [D:\SYMANT~1\N32USERL.DLL]  <Symantec Corporation><5.0.0.375>
    [D:\SYMANT~1\UMCBK.DLL]  <Symantec Corporation><5.0.0.375>
    [D:\SYMANT~1\NISALERT.DLL]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\NISUMPS.DLL]  <Symantec Corporation><5.0.0.375>
    [D:\SYMANT~1\IAMCPL.CPL]  <Symantec Corporation><5.0.0.375>
    [D:\SYMANT~1\tlevel.dll]  <Symantec Corporation><5.0.0.375>
    [D:\SYMANT~1\NAVAPI32.DLL]  <Symantec Corp.><4.1.0.15>
    [C:\Program Files\Common Files\Symantec Shared\BRUNOALE.DLL]  <Symantec Corporation><5.0.0.375>
    [C:\Program Files\Common Files\Symantec Shared\PProfile.dll]  <Symantec Corporation><5.0.0.375>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 2324][D:\Symantec Client Firewall\ATRACK.EXE]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\iamevent.dll]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\NISRES.DLL]  <N/A><N/A>
    [C:\WINDOWS\system32\SYMSTORE.dll]  <Symantec Corporation><4.6.0.53>
    [D:\Symantec Client Firewall\NISUMPS.DLL]  <Symantec Corporation><5.0.0.375>
    [D:\Symantec Client Firewall\tdit_msg.dll]  <Symantec Corporation><5.0.0.375>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 3276][C:\Program Files\ChinaNet\VnetClient.exe]  <><2005, 3, 7, 1>
    [C:\Program Files\ChinaNet\Communicate.dll]  <0><2005, 3, 3, 1>
    [C:\Program Files\ChinaNet\DialModule.dll]  <><2005, 1, 18, 1>
    [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL]  <><2004, 2, 28, 1>
    [C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX]  <><2005, 3, 7, 1>
    [C:\PROGRA~1\ChinaNet\sign.dll]  <0><2004, 12, 1, 1>
    [C:\PROGRA~1\ChinaNet\WEBPLU~1.DLL]  <><2005, 2, 17, 1>
    [C:\PROGRA~1\ChinaNet\PostPlug.dll]  <><2004, 12, 16, 2>
    [C:\PROGRA~1\ChinaNet\ADVERT~1.OCX]  <><2004, 12, 30, 0>
    [C:\PROGRA~1\ChinaNet\VnetBs.ocx]  <><2004, 11, 18, 1>
    [C:\PROGRA~1\ChinaNet\ACCOUN~2.DLL]  <><2005, 3, 3, 1>
    [C:\PROGRA~1\ChinaNet\AccountMgr.dll]  <><2005, 3, 7, 2>
    [C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX]  <><2005, 2, 24, 1>
    [C:\PROGRA~1\ChinaNet\NEWMES~1.DLL]  <><2004, 11, 25, 0>
    [C:\PROGRA~1\ChinaNet\PassCtrl.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\wpcap.dll]  <Politecnico di Torino><3, 0, 0, 18>
    [C:\WINDOWS\system32\pthreadVC.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\packet.dll]  <Politecnico di Torino><3, 0, 0, 18>
    [C:\PROGRA~1\ChinaNet\PlugPush.dll]  <><2004, 12, 21, 1>
    [C:\PROGRA~1\ChinaNet\ALLINT~1.DLL]  <><2004, 11, 23, 1>
    [C:\PROGRA~1\ChinaNet\VNetLog.ocx]  <><2005, 10, 9, 1>
    [C:\PROGRA~1\ChinaNet\StatNum.dll]  <><2004, 11, 18, 1>
    [C:\PROGRA~1\ChinaNet\VNETON~1.OCX]  <><2005, 3, 2, 1>
    [C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL]  <><2005, 3, 9, 1>
    [C:\PROGRA~1\ChinaNet\VnetOptLog.dll]  <><2004, 11, 23, 1>
    [C:\PROGRA~1\ChinaNet\DialogStyle.dll]  <><1, 0, 0, 1>
    [C:\PROGRA~1\ChinaNet\Timer.ocx]  <><2004, 11, 25, 1>
    [C:\PROGRA~1\ChinaNet\VnetSkin.ocx]  <GDDC><1, 0, 0, 1>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  <Kaspersky Lab><1.0.142.342>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  <Kaspersky Lab><1.0.142.3>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  <Kaspersky Lab><5.0.0.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  <Kaspersky Lab><5.0.142.0>
    [C:\PROGRA~1\ChinaNet\DlgSkin.ocx]  <><1, 0, 0, 1>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 2732][D:\qq\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [D:\qq\CoralAssist.DLL]  <N/A><4.0.0 Build 20051112>
    [D:\qq\CoralQQ.DLL]  <Coral Team><4.2.1 Build 20060127>
    [D:\qq\IPSearcher.dll]  <N/A><1.0.0.4>
    [D:\qq\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [D:\qq\QQHelperDll.dll]  <><1, 0, 0, 1>
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 14:00 | 显示全部 短消息 资料
字号： 小 中 大 12楼

[D:\qq\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 14>
    [D:\qq\QQAPI.dll]  <><1, 0, 0, 1>
    [d:\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [D:\qq\LoginCtrl.dll]  <><1, 0, 0, 1>
    [D:\qq\npkcntc.dll]  <INCA Internet Co., Ltd.><2005, 9, 1, 1>
    [D:\qq\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [D:\qq\QQRes.dll]  <tencent><1, 0, 0, 1>
    [D:\qq\QQMainFrame.dll]  <N/A><N/A>
    [D:\qq\CQQApplication.dll]  <N/A><N/A>
    [D:\qq\NewSkin.dll]  <><1, 0, 0, 1>
    [D:\qq\HostingMgr.dll]  <><1, 0, 0, 1>
    [D:\qq\CameraDll.dll]  <><1, 0, 0, 1>
    [D:\qq\MailSummary.dll]  <><1, 0, 0, 1>
    [D:\qq\QQSpace.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [D:\qq\QQGroupMng.dll]  <><1, 0, 0, 1>
    [D:\qq\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [D:\qq\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [D:\qq\QRingMng.dll]  <N/A><N/A>
    [D:\qq\PhoneAPI.dll]  <><1, 0, 0, 1>
    [D:\qq\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [D:\qq\QQAllInOne.dll]  <N/A><N/A>
    [D:\qq\SCCore.dll]  <N/A><N/A>
    [D:\qq\QQCustomFace.dll]  <N/A><N/A>
    [D:\qq\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
    [D:\qq\ImageOle.dll]  <TODO: <Company name>><1.0.0.1>
    [D:\qq\QQAvatar.dll]  <N/A><N/A>
    [D:\qq\QQSceneMng.dll]  <N/A><N/A>
    [D:\qq\LongConnection.dll]  <tencent><0, 3, 3, 8>
    [D:\qq\QQPet.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [D:\qq\QQPlugin.dll]  <N/A><N/A>
    [D:\qq\BQQApplication.dll]  <N/A><N/A>
    [D:\qq\CommercesMng.dll]  <><1, 0, 0, 1>
    [D:\qq\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [D:\qq\QQUdpGetFileLib.dll]  <tencent><0, 2, 2, 3>
    [D:\qq\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 141>
    [D:\qq\QQPhoneHelper.dll]  <腾讯科技（深圳）有限公司><2, 0, 4, 40>
    [D:\qq\QQSysMsgMng.dll]  <N/A><N/A>
    [D:\qq\GroupConnection.dll]  <Tencent><5, 0, 202, 30>
    [D:\qq\ShareFiles.dll]  <N/A><N/A>
    [D:\qq\QQZip.dll]  <tencent><0, 3, 2, 4>
    [D:\qq\qqgroupdisk.dll]  <深圳腾讯科技><2, 7, 0, 1022>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  <Kaspersky Lab><1.0.142.342>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  <Kaspersky Lab><1.0.142.3>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  <Kaspersky Lab><5.0.0.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  <Kaspersky Lab><5.0.142.0>
    [D:\qq\QQFileTransfer.dll]  <Tencent><5, 0, 202, 40>
    [C:\WINDOWS\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
    [D:\qq\QQMagicFace.dll]  <><1, 0, 0, 1>
[PID: 2808][D:\qq\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [d:\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 2672][D:\本本常用\mobmeter.exe]  <hexmagic><0, 3, 1, 0>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 3544][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 656][D:\mcombocn\Maxthon\Maxthon.exe]  <MY Soft Technology><1, 5, 0, 95>
    [D:\mcombocn\Maxthon\maxzlib.dll]  < ><1, 0, 0, 2>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
    [D:\mcombocn\Maxthon\Services\RealTime\real_time.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  <Kaspersky Lab><1.0.142.342>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  <Kaspersky Lab><1.0.142.3>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  <Kaspersky Lab><5.0.0.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  <Kaspersky Lab><5.0.142.0>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 2800][E:\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 14:00 | 显示全部 短消息 资料
字号： 小 中 大 13楼

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 14:26 | 显示全部 短消息 资料
字号： 小 中 大 14楼

回楼上大哥~我刚才重启了,重启后暂时未发现weatherdll.dll
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 14:28 | 显示全部 短消息 资料
字号： 小 中 大 15楼

另外.以前系统进程总共总是25-27现在为什么开机就30呢?
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 14:33 | 显示全部 短消息 资料
字号： 小 中 大 16楼

引用:
【我无邪的贴子】没有关系，你的系统如果没有异常的话，就这么罢了。

...........................

555555555555555555555555555555
还是异常啊!!!!!还是莫名其妙弹出广告比如刚刚弹的这个:http://ad.aaahaatv.com/sz.html?classid=4914¶m=ADdXNuMj1GODU3RUU4MDQzNzZCQ0JDRUEzQjFFNzU3MDQ0ODExNyZwcm92aW5jZWlkPTE2JmNpdHlpZD04JnVzZXJpcD0yMTguMi44Ny44NyZjbGFzc2lkPTQ5MTQmc291cmNldXJsPXd3dy55YWhvby5jb20uY24v
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 14:36 | 显示全部 短消息 资料
字号： 小 中 大 17楼

最新的hijackthis日志
Logfile of HijackThis v1.99.1
Scan saved at 14:26:17, on 2006-7-18
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
D:\Symantec Client Firewall\NISUM.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
D:\SYMANT~1\IAMAPP.EXE
D:\Symantec Client Firewall\SymPxSvc.exe
D:\Symantec Client Firewall\NISSERV.EXE
D:\Symantec Client Firewall\ATRACK.EXE
C:\Program Files\ChinaNet\VnetClient.exe
D:\mcombocn\Maxthon\Maxthon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
D:\HijackThis.exe

O2 - BHO: VnetCookie Class - {4E83D567-4697-4F7B-B1F0-A513B01DB89A} -

c:\PROGRA~1\chinanet\VNETTR~1.DLL
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} -

D:\NetTransport\NTIEHelper.dll
O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky

Anti-Virus Personal\kav.exe /minimize
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [iamapp] D:\SYMANT~1\IAMAPP.EXE
O4 - HKLM\..\Run: [ATIPTA] ; C:\Program Files\ATI Technologies\ATI Control

Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DAEMON Tools] ; "d:\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil

/RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMSCMig] ; C:\PROGRA~1\COMMON~1\MICROS~1

\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [Mirabilis ICQ] ; D:\ICQ\ICQNet.exe
O4 - HKLM\..\Run: [MSPY2002] ; C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe

/SYNC
O4 - HKLM\..\Run: [NeroFilterCheck] ; ; C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PHIME2002A] ; ; C:\WINDOWS\system32

\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PHIME2002ASync] ; ; C:\WINDOWS\system32

\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common

Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Zone Labs Client] ;
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Any To-Do List] ; "D:\备忘小纸条\AnyToDo.exe"
O4 - HKCU\..\Run: [STYLEXP] ; C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -

Hide
O4 - HKCU\..\Run: [Super Rabbit IEPro] ;
O8 - Extra context menu item: 使用影音传送带下载 -

D:\NetTransport\NTAddLink.html
O8 - Extra context menu item: 使用影音传送带下载全部链接 -

D:\NetTransport\NTAddList.html
O8 - Extra context menu item: 使用网际快车下载 - C:\Program

Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program

Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) -

res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\qq\AddPanel.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuwe

b_site.cab?1094285144061
O16 - DPF: {9BBD100C-E820-4930-9937-E8F3AA40E584} (DFVSScanFile Control) -

http://antivirus3.sunv.com/dfvsolDown/dfvsol.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0728C570-A8DF-4FEC-B273-

364ADB4FDEE6}: NameServer = 210.34.240.100,202.101.107.55
O17 - HKLM\System\CCS\Services\Tcpip\..\{88E7A528-48DB-4E86-902F-

20808E774B3E}: NameServer = 61.147.37.1 61.177.7.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0728C570-A8DF-4FEC-B273-

364ADB4FDEE6}: NameServer = 210.34.240.100,202.101.107.55
O17 - HKLM\System\CS2\Services\Tcpip\..\{0728C570-A8DF-4FEC-B273-

364ADB4FDEE6}: NameServer = 210.34.240.100,202.101.107.55
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1

\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -

C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. -

D:\Bluetooth Software\bin\btwdins.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision

Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel

32\IDriverT.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky

Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program

Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Symantec Client Firewall Service (NISSERV) - Symantec

Corporation - D:\Symantec Client Firewall\NISSERV.EXE
O23 - Service: Symantec Client Firewall Accounts Manager (NISUM) - Symantec

Corporation - D:\Symantec Client Firewall\NISUM.EXE
O23 - Service: StyleXPService - Unknown owner - C:\Program

Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: Symantec Client Firewall Proxy Service (SymPxSvc) - Symantec

Corporation - D:\Symantec Client Firewall\SymPxSvc.exe
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 14:42 | 显示全部 短消息 资料
字号： 小 中 大 18楼

回楼上.应该不是快车的问题,因为我用了一年多了,但我还是删了吧.迅雷我基本用不着,因为平常在学校是用内网的
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 14:45 | 显示全部 短消息 资料
字号： 小 中 大 19楼

晕倒,flashget这么说找不到卸载的程序了?
gototop
 
huaxue05
头像
初生襁褓狮
  • 帖子:45
  • 注册: 2006-07-15
  • 来自:
发表于： 2006-07-18 22:53 | 显示全部 短消息 资料
字号： 小 中 大 20楼

请问楼上老大说的是什么目录?
gototop
 
<<上一主题|下一主题>>
12   2  /  2  页   跳转页
页面顶部
Powered by Discuz!NT