瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 哪位老大帮看看日志!老是弹出不知名网站!@

1   1  /  1  页   跳转

哪位老大帮看看日志!老是弹出不知名网站!@

哪位老大帮看看日志!老是弹出不知名网站!@

以下为不知名网站地址
http://www.xixitv.com/
http://www.qqjoy.com/
http://wwwn.nikeqin.com/
http://www.jqwang.com/
http://www.jqwang.com/vip/4index4.html
http://www.jqwang.com/index.htm
http://tv.mofile.com/cn/register/index.do?ch=29
http://tv.mofile.com/cn/register/index.do?ch=27
http://www.flash35.com/
http://www.watchdy.com/
http://gd.hiu.cn/ad/index32.html
什么东西都拦截不了!!  是不是中了什么木马 病毒之类的  麻烦帮看下!!
  下附 日志!

最后编辑2006-08-05 01:56:55
分享到:
gototop
 

Logfile of HijackThis v1.99.1
Scan saved at 1:16:51, on 2006-8-5
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\瑞星\瑞星\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\瑞星\瑞星\Rising\Rav\Ravmond.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
D:\瑞星\瑞星\Rising\Rav\RavStub.exe
C:\WINDOWS\lm\server.exe
D:\瑞星\瑞星\Rising\Rfw\rfwmain.exe
d:\瑞星\瑞星\rising\rfw\rfwsrv.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\VM303_STI.EXE
D:\瑞星\瑞星\Rising\Rav\RavTask.exe
C:\Program Files\Messenger\msmsgs.exe
D:\瑞星\瑞星\Rising\Rav\Ravmon.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\ChinaNet\VnetClient.exe
C:\WINDOWS\System32\svchost.exe
D:\qq\TT\TTraveler.exe
D:\瑞星\瑞星\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
D:\HijackThis1.99.1\HijackThis1.99.1\HijackThis.exe

O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - D:\kugoo\kugoo\KuGoo3\KuGoo3DownXControl.ocx
O2 - BHO: 超级兔子上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} - D:\超级兔~1\超级兔~1\MagicSet\HAOKAN~1.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: 超级兔子上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} - D:\超级兔~1\超级兔~1\MagicSet\HAOKAN~1.DLL
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [RfwMain] "D:\瑞星\瑞星\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [RavTask] "D:\瑞星\瑞星\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RavScanBD] "D:\瑞星\瑞星\Rising\Rav\ScanBD.exe" /INST
O4 - HKLM\..\RunOnce: [RavStub] "D:\瑞星\瑞星\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: &使用迅雷下载 - D:\迅雷 Thunder5.2.0.207\Thunder5.2.0.207\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\迅雷 Thunder5.2.0.207\Thunder5.2.0.207\Program\GetAllUrl.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - D:\kugoo\kugoo\KuGoo3\KuGoo3DownX.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\MICROS~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: 相关站点 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: 相关站点 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\新建文件夹\QQ\QQIEHelper.dll (file missing)
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\新建文件夹\QQ\QQIEHelper.dll (file missing)
O17 - HKLM\System\CCS\Services\Tcpip\..\{517871BB-2090-4325-AC8C-D4AA9C81E1AD}: NameServer = 202.96.128.166 202.96.134.133
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\瑞星\瑞星\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\瑞星\瑞星\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\瑞星\瑞星\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\瑞星\瑞星\Rising\Rav\Ravmond.exe
O23 - Service: Distributed Link Tracking ClientXyfne (ServiceXyfne) - Unknown owner - C:\WINDOWS\lm\server.exe

gototop
 

偶也不知道诶~
每次一出现这些网站进程里就会有一个IEXPLORE.exe进程出现
  结束后网页也就没了~
        而且现在偶的瑞星还在禁止一些个IP进入.
偶是不是受攻击拉?>?
gototop
 

注册表可以压缩备份的吗??
gototop
 

还是删不了的啊 !!!
说访问被拒绝@!!
gototop
 

注册表都已经删了 没有备份 !!
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT