瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】IE不定时弹出不明网页_附hijackthis雅虎助手日志

1   1  /  1  页   跳转

【求助】IE不定时弹出不明网页_附hijackthis雅虎助手日志

【求助】IE不定时弹出不明网页_附hijackthis雅虎助手日志

那天安装了电炉(emule)以后,IE就不定时的自动弹出如下的网页(以下只是其中一部分),实在是烦人,希望论坛里的高手帮帮忙,现在这里谢谢了,以下附上雅虎助手和hijackthis的扫描报告。

http://www.che168.com/
http://u.7town.com/ivr/776_1762/jgl1/index.html?uid=12252
http://www.56.com/reg/index5.html
http://u.7town.com/MMV/780_2152/ly1/index.html?uid=12252
http://cococok.cococ.com.cn/tuiguang/index.html??pid=dahui&uid=9999&
http://u.sh.xoyo.com/union/sh/style_458.html?uid=20847
http://img.u1th.com/u1thwuxian/all/09.asp?userid=509
http://www.ku000.com/music/index.htm





各位大虾:

感谢您关注我的这份报告,小菜鸟急需您的帮助!
本扫描/诊断报告由 雅虎助手IE修复专家 生成
操作系统: Windows XP
IE版本号: 6.0.2900.2180

===============================================================

以下是我的扫描报告正文:

*** 扫描项列表 ***


进程中依赖的非微软模块

1.037 - 进程 explorer.exe 依赖的非微软模块  - ppgaxea.dll,Unknow Owner,
相关文件:C:\WINDOWS\system32\ppgaxea.dll


IE修复专家扫描到的系统信息

2.P00 - 正在运行的服务 - Application Layer Gateway Service,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\alg.exe
内容:C:\WINDOWS\System32\alg.exe

3.P00 - 正在运行的服务 - Windows Audio,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\audiosrv.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

4.P00 - 正在运行的服务 - Computer Browser,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\browser.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

5.P00 - 正在运行的服务 - Cryptographic Services,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\cryptsvc.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

6.P00 - 正在运行的服务 - DCOM Server Process Launcher,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\rpcss.dll
内容:C:\WINDOWS\system32\svchost -k DcomLaunch

7.P00 - 正在运行的服务 - DefWatch,Symantec Corporation,
相关文件:C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
内容:C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe

8.P00 - 正在运行的服务 - DHCP Client,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\dhcpcsvc.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

9.P00 - 正在运行的服务 - Logical Disk Manager,Microsoft Corp.,
相关文件:C:\WINDOWS\system32\dmserver.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

10.P00 - 正在运行的服务 - DNS Client,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\dnsrslvr.dll
内容:C:\WINDOWS\system32\svchost.exe -k NetworkService

11.P00 - 正在运行的服务 - Error Reporting Service,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\ersvc.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

12.P00 - 正在运行的服务 - Event Log,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\services.exe
内容:C:\WINDOWS\system32\services.exe

13.P00 - 正在运行的服务 - COM+ Event System,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\es.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

14.P00 - 正在运行的服务 - Fast User Switching Compatibility,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\shsvcs.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

15.P00 - 正在运行的服务 - Help and Support,Microsoft Corporation,
相关文件:C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

16.P00 - 正在运行的服务 - iPodService,Apple Computer, Inc.,
相关文件:C:\Program Files\iPod\bin\iPodService.exe
内容:C:\Program Files\iPod\bin\iPodService.exe

17.P00 - 正在运行的服务 - Infrared Monitor,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\irmon.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

18.P00 - 正在运行的服务 - Server,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\srvsvc.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

19.P00 - 正在运行的服务 - Workstation,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\wkssvc.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

20.P00 - 正在运行的服务 - TCP/IP NetBIOS Helper,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\lmhsvc.dll
内容:C:\WINDOWS\system32\svchost.exe -k LocalService

21.P00 - 正在运行的服务 - Network Connections,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\netman.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

22.P00 - 正在运行的服务 - Network Location Awareness (NLA),Microsoft Corporation,
相关文件:C:\WINDOWS\system32\mswsock.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

23.P00 - 正在运行的服务 - Symantec AntiVirus Client,Symantec Corporation,
相关文件:C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
内容:C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe

24.P00 - 正在运行的服务 - Plug and Play,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\services.exe
内容:C:\WINDOWS\system32\services.exe

25.P00 - 正在运行的服务 - IPSEC Services,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\lsass.exe
内容:C:\WINDOWS\system32\lsass.exe

26.P00 - 正在运行的服务 - Protected Storage,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\lsass.exe
内容:C:\WINDOWS\system32\lsass.exe

27.P00 - 正在运行的服务 - Remote Access Connection Manager,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\rasmans.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

28.P00 - 正在运行的服务 - Remote Registry,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\regsvc.dll
内容:C:\WINDOWS\system32\svchost.exe -k LocalService

29.P00 - 正在运行的服务 - Remote Procedure Call (RPC),Microsoft Corporation,
相关文件:C:\WINDOWS\system32\rpcss.dll
内容:C:\WINDOWS\system32\svchost -k rpcss

30.P00 - 正在运行的服务 - Security Accounts Manager,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\lsass.exe
内容:C:\WINDOWS\system32\lsass.exe

31.P00 - 正在运行的服务 - Task Scheduler,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\schedsvc.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

32.P00 - 正在运行的服务 - Secondary Logon,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\seclogon.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

33.P00 - 正在运行的服务 - System Event Notification,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\sens.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

34.P00 - 正在运行的服务 - Windows Firewall/Internet Connection Sharing (ICS),Microsoft Corporation,
相关文件:C:\WINDOWS\system32\ipnathlp.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

35.P00 - 正在运行的服务 - Shell Hardware Detection,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\shsvcs.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

36.P00 - 正在运行的服务 - Print Spooler,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\spoolsv.exe
内容:C:\WINDOWS\system32\spoolsv.exe

37.P00 - 正在运行的服务 - System Restore Service,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\srsvc.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

38.P00 - 正在运行的服务 - SSDP Discovery Service,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\ssdpsrv.dll
内容:C:\WINDOWS\system32\svchost.exe -k LocalService

39.P00 - 正在运行的服务 - Telephony,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\tapisrv.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

40.P00 - 正在运行的服务 - Terminal Services,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\termsrv.dll
内容:C:\WINDOWS\System32\svchost -k DComLaunch

41.P00 - 正在运行的服务 - Themes,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\shsvcs.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

42.P00 - 正在运行的服务 - Distributed Link Tracking Client,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\trkwks.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

43.P00 - 正在运行的服务 - Windows User Mode Driver Framework,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\wdfmgr.exe
内容:C:\WINDOWS\system32\wdfmgr.exe

44.P00 - 正在运行的服务 - Windows Time,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\w32time.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

45.P00 - 正在运行的服务 - WebClient,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\webclnt.dll
内容:C:\WINDOWS\system32\svchost.exe -k LocalService

46.P00 - 正在运行的服务 - Windows Management Instrumentation,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\wbem\wmisvc.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

47.P00 - 正在运行的服务 - Security Center,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\wscsvc.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

48.P00 - 正在运行的服务 - Automatic Updates,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\wuauserv.dll
内容:C:\WINDOWS\system32\svchost.exe -k netsvcs

49.P00 - 正在运行的服务 - Wireless Zero Configuration,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\wzcsvc.dll
内容:C:\WINDOWS\System32\svchost.exe -k netsvcs

50.R00 - IE自定义搜索引擎 - http://seek.yisou.com/srchcust.htm,Unknow Owner,
内容:http://seek.yisou.com/srchcust.htm
最后编辑2006-10-24 11:27:20
分享到:
gototop
 

51.R00 - IE备用搜索引擎 - http://seek.yisou.com/srchasst.htm,Unknow Owner,
内容:http://seek.yisou.com/srchasst.htm

52.R01 - IE地址栏缺省搜索引擎 - http://www.google.com/keyword/%s,Unknow Owner,
内容:http://www.google.com/keyword/%s

53.R03 - 搜索挂接 - 雅虎助手,yahoo! china,
CLSID:{406F94F0-504F-4a40-8DFD-58B0666ABEBD}
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll
内容:coolbar

54.O01 - 域名解析文件(HOSTS) - 127.0.0.1 www.ccnnic.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 www.ccnnic.com

55.O01 - 域名解析文件(HOSTS) - 127.0.0.1 www.ccnnlc.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 www.ccnnlc.com

56.O01 - 域名解析文件(HOSTS) - 127.0.0.1 www.bodoto.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 www.bodoto.com

57.O01 - 域名解析文件(HOSTS) - 127.0.0.1 bj.bodoto.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 bj.bodoto.com

58.O01 - 域名解析文件(HOSTS) - 127.0.0.1 nb.bodoto.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 nb.bodoto.com

59.O01 - 域名解析文件(HOSTS) - 127.0.0.1 hangzhou.bodoto.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 hangzhou.bodoto.com

60.O01 - 域名解析文件(HOSTS) - 127.0.0.1 jh.bodoto.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 jh.bodoto.com

61.O01 - 域名解析文件(HOSTS) - 127.0.0.1 shangh.bodoto.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 shangh.bodoto.com

62.O01 - 域名解析文件(HOSTS) - 127.0.0.1 my.bodoto.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 my.bodoto.com

63.O01 - 域名解析文件(HOSTS) - 127.0.0.1 mail.bodoto.com,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts
内容:127.0.0.1 mail.bodoto.com

64.O01 - 域名解析文件(HOSTS) - 127.0.0.1 www.... 等 33 项相似内容,Unknow Owner,
相关文件:C:\WINDOWS\system32\drivers\etc\hosts

65.O02 - 浏览器辅助对象(BHO) - AcrobatReader AcroIEHlprObj,Adobe Systems Incorporated,
CLSID:{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
相关文件:C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

66.O02 - 浏览器辅助对象(BHO) - Yahoo!Photo,Yahoo! China,
CLSID:{33BBE430-0E42-4f12-B075-8D21ACB10DCB}
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll

67.O02 - 浏览器辅助对象(BHO) - (反钓鱼专家),yahoo! china,
CLSID:{38928D50-8A48-44C2-945F-D2F23F771410}
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\yangling.dll

68.O02 - 浏览器辅助对象(BHO) - DragSearch BHO,yahoo! china,
CLSID:{62EED7C6-9F02-42f9-B634-98E2899E147B}
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\ydragsearch.dll

69.O02 - 浏览器辅助对象(BHO) - FlashGet 监视网页点击插件,Amaze Soft,
CLSID:{A5366673-E8CA-11D3-9CD9-0090271D075B}
相关文件:C:\Program Files\FlashGet\Jccatch.dll

70.O02 - 浏览器辅助对象(BHO) - Google 工具条,Google Inc.,
CLSID:{AA58ED58-01DD-4d91-8333-CF10577473F7}
相关文件:c:\program files\Google\googletoolbar2.dll

71.O02 - 浏览器辅助对象(BHO) - assist,Yahoo! China,
CLSID:{FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8}
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\yassist.dll

72.O03 - IE第三方工具条 - FlashGet 工具条,Amaze Soft,
CLSID:{E0E899AB-F487-11D5-8D29-0050BA6940E3}
相关文件:C:\Program Files\FlashGet\fgiebar.dll
内容:FlashGet Bar

73.O03 - IE第三方工具条 - Google 工具条,Google Inc.,
CLSID:{2318C2B1-4965-11d4-9B18-009027A5CD4F}
相关文件:c:\program files\Google\googletoolbar2.dll

74.O03 - IE第三方工具条 - 雅虎助手,yahoo! china,
CLSID:{406F94F0-504F-4A40-8DFD-58B0666ABEBD}
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll
内容:雅虎助手

75.O04 - 公用自启动目录 - Adobe Reader Speed Launch,Adobe Systems Incorporated,
相关文件:C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

76.O04 - 自动运行项(Run) - 微软日语输入法,Microsoft Corporation,
相关文件:C:\WINDOWS\ime\IMJP8_1\imjpmig.exe /Spoil /RemAdvDef /Migration32
内容:"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

77.O04 - 自动运行项(Run) - 微软智能输入法2002A(动态),Microsoft Corporation,
相关文件:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

78.O04 - 自动运行项(Run) - 微软智能输入法2002A(名称),Microsoft Corporation,
相关文件:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

79.O04 - 自动运行项(Run) - Intel图形系统托盘图标,Intel Corporation,
相关文件:C:\WINDOWS\system32\igfxtray.exe
内容:C:\WINDOWS\system32\igfxtray.exe


gototop
 

80.O04 - 自动运行项(Run) - Intel芯片组显卡驱动程序工具,Intel Corporation,
相关文件:C:\WINDOWS\system32\hkcmd.exe
内容:C:\WINDOWS\system32\hkcmd.exe

81.O04 - 自动运行项(Run) - 宏碁公司出品的多媒体键盘相关程序。,Dritek System Inc.,
相关文件:C:\Program Files\Launch Manager\QtZgAcer.EXE
内容:C:\Program Files\Launch Manager\QtZgAcer.EXE

82.O04 - 自动运行项(Run) - 输入法,Microsoft Corporation,
相关文件:C:\Program Files\Common Files\Microsoft Shared\IME\IMSC40A\IMSCMIG.EXE /Preload
内容:C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload

83.O04 - 自动运行项(Run) - Apple iTunes助手,Apple Computer, Inc.,
相关文件:C:\Program Files\iTunes\iTunesHelper.exe
内容:"C:\Program Files\iTunes\iTunesHelper.exe"

84.O04 - 自动运行项(Run) - QuickTime播放器的自动执行程序,Apple Computer, Inc.,
相关文件:C:\Program Files\QuickTime\qttask.exe -atboottime
内容:"C:\Program Files\QuickTime\qttask.exe" -atboottime

85.O04 - 自动运行项(Run) - Antiy Auto Update,安天信息技术有限公司,
相关文件:C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
内容:C:\Program Files\Antiy Labs\Alive\AliveCenter.exe

86.O04 - 自动运行项(Run) - AGB5Monitor,Unknow Owner,
相关文件:(文件不存在)(隐藏)(系统)C:\Program Files\Antiy Labs\AGuard\AGuard.exe /AutoRun
内容:C:\Program Files\Antiy Labs\AGuard\AGuard.exe /AutoRun

87.O04 - 自动运行项(Run) - 诺顿病毒防火墙-盾牌图标程序,Symantec Corporation,
相关文件:C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\VPTray.exe
内容:C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe

88.O04 - 自动运行项(Run) - YLive.exe,Yahoo! China,
相关文件:C:\Program Files\Yahoo!\Assistant\ylive.exe
内容:C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe

89.O04 - 自动运行项(Run) - yassistse,Yahoo! China,
相关文件:C:\Program Files\Yahoo!\Assistant\yassistse.exe
内容:"C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"

90.O04 - 自动运行项(Run) - Windows多种输入技术的支持程序,Microsoft Corporation,
相关文件:C:\WINDOWS\system32\ctfmon.exe
内容:C:\WINDOWS\system32\ctfmon.exe

91.O04 - 自动运行项(Policies\Run) - Galaxy,Unknow Owner,
相关文件:C:\WINDOWS\system32\ppgaxea.dll
内容:rundll32.exe C:\WINDOWS\system32\ppgaxea.dll,Su

92.O04 - 自动运行项(Policies\Run) - Power,Unknow Owner,
相关文件:(文件不存在)(隐藏)(系统)C:\WINDOWS\system32\alxklt.dll
内容:rundll32.exe C:\WINDOWS\system32\alxklt.dll,Start

93.O08 - IE右键菜单 - Google 搜索(&G),Google Inc.,
相关文件:c:\program files\Google\GoogleToolbar2.dll /cmsearch.html

94.O08 - IE右键菜单 - 使用网际快车下载,Unknow Owner,
相关文件:C:\Program Files\FlashGet\jc_link.htm

95.O08 - IE右键菜单 - 使用网际快车下载全部链接,Unknow Owner,
相关文件:C:\Program Files\FlashGet\jc_all.htm

96.O08 - IE右键菜单 - 反向链接,Google Inc.,
相关文件:c:\program files\Google\GoogleToolbar2.dll /cmbacklinks.html

97.O08 - IE右键菜单 - 导出到 Microsoft Office Excel(&X),Microsoft Corporation,
相关文件:C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE /3000

98.O08 - IE右键菜单 - 添加到雅虎订阅(&Y),Yahoo! China,
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\yrss.dll /YRSSMENUEXT

99.O08 - IE右键菜单 - 类似网页,Google Inc.,
相关文件:c:\program files\Google\GoogleToolbar2.dll /cmsimilar.html

100.O08 - IE右键菜单 - 缓存的网页快照,Google Inc.,
相关文件:c:\program files\Google\GoogleToolbar2.dll /cmcache.html

101.O08 - IE右键菜单 - 翻译英文字词(&T),Google Inc.,
相关文件:c:\program files\Google\GoogleToolbar2.dll /cmwordtrans.html

102.O08 - IE右键菜单 - 雅虎搜索,yahoo! china,
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll /203

103.O09 - IE工具栏按钮 - 信息检索,Microsoft Corporation,
相关文件:C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL

104.O09 - IE菜单项和工具栏按钮 - &FlashGet,Amaze Soft,
相关文件:C:\Program Files\FlashGet\flashget.exe

105.O09 - IE菜单项和工具栏按钮 - Windows Messenger,Microsoft Corporation,
相关文件:C:\Program Files\Messenger\msmsgs.exe

106.O15 - 限制网站 - *.008k.com... 等 1020 项相似内容,Unknow Owner,
网页路径:*.008k.com

107.O16 - 下载的ActiveX插件 - CEditCtrl Object,www.alipay.com,
CLSID:{488A4255-3236-44B3-8F27-FA1AECAA8844}
相关文件:C:\WINDOWS\system32\aliedit\AliEdit.dll
网页路径:https://img.alipay.com/download/1007/aliedit.cab

108.O16 - 下载的ActiveX插件 - Flash播放器,Adobe Systems, Inc.,
CLSID:{D27CDB6E-AE6D-11CF-96B8-444553540000}
相关文件:C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx
网页路径:http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

109.O17 - 本机网络设置 NameServer - 202.96.209.6,202.96.209.133,Unknow Owner,
内容:202.96.209.6,202.96.209.133

110.O18 - 网络协议过滤器 - OFFICE 相关,Microsoft Corporation,
CLSID:{807553E5-5146-11D5-A672-00B0D022E945}
相关文件:C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL

111.O18 - 网络协议处理器 - MSN 相关,Microsoft Corporation,
CLSID:{828030A1-22C1-4009-854F-8E305202313F}
相关文件:C:\Program Files\MSN Messenger\msgrapp.dll

112.O18 - 网络协议处理器 - OFFICE 相关,Microsoft Corporation,
CLSID:{32505114-5902-49B2-880A-1F7738E5A384}
相关文件:C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL

113.O21 - 自启动项SSODL - 管理托盘图标对象的程序,Microsoft Corporation,
CLSID:{35CEC8A3-2BE6-11D2-8773-92E220524153}
相关文件:C:\WINDOWS\system32\stobject.dll
内容:{35CEC8A3-2BE6-11D2-8773-92E220524153}

114.O27 - 文件执行挂钩 - PatchCom,Yahoo! China,
CLSID:{E568441B-9EF3-49F8-9A67-4141AC41ADD4}
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\ypatch.dll

115.O27 - 文件执行挂钩 - HookExecute,YAHOO Corporation Limited,
CLSID:{4BAB150F-DD97-476D-9C1E-41B6CDC0CA7A}
相关文件:C:\Program Files\Yahoo!\Assistant\yclickon.dll

116.O28 - IE阻止的Cookies(IE6) - ad08.focalink.... 等 98 项相似内容,Unknow Owner,

117.O31 - 浏览栏区对象 - 每日提示,Microsoft Corporation,
CLSID:{4D5C8C25-D075-11d0-B416-00C04FB90376}
相关文件:C:\WINDOWS\system32\shdocvw.dll

118.O31 - 浏览栏区对象 - 雅虎订阅(&Y),Yahoo! China,
CLSID:{19CE93DE-8334-42C6-B2CA-BFE3DF5196A3}
相关文件:C:\Program Files\Yahoo!\Assistant\Assist\yrss.dll

119.O36 - Winlogon通知包管理器 - Intel通用界面管理器,Intel Corporation,
相关文件:C:\WINDOWS\system32\igfxsrvc.dll

120.O36 - Winlogon通知包管理器 - 诺顿杀毒WinLogon包管理器,Unknow Owner,
相关文件:C:\WINDOWS\system32\NavLogon.dll
gototop
 

以下是 HijackThis 的报告

Logfile of HijackThis v1.99.1
Scan saved at 19:18:43, on 2006-10-10
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Antiy Labs\Alive\AliveCenter_.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\FlashGet\flashget.exe
C:\Program Files\MYIE2\MyIE.exe
C:\WINDOWS\system32\NOTEPAD.EXE
D:\Software Backup\Hijackthis\HijackThis.exe

R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AssistHelper - {FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4A40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Antiy Auto Update] C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
O4 - HKLM\..\Run: [AGB5Monitor] C:\Program Files\Antiy Labs\AGuard\AGuard.exe /AutoRun
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - HKLM\..\Run: [yassistse] "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 反向链接 - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT
O8 - Extra context menu item: 类似网页 - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/203
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{890C2EBB-0B91-4A1C-A781-A15215DAE04C}: NameServer = 202.96.209.6,202.96.209.133
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe

gototop
 

小弟先在这里说声谢谢了,请各位大虾帮忙看看吧。
gototop
 

高手高手,帮帮忙吧!
gototop
 

天哪,又发现一个惊人的秘密,昨天在线上超过8个小时,不明网页一共只跳出了3次,(今天又恢复正常了)真是奇了,所以刚才又用hijackthis扫描了一次希望对各大高手大虾会有帮助,谢谢了。

Logfile of HijackThis v1.99.1
Scan saved at 12:24:30, on 2006-10-12
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Antiy Labs\Alive\AliveCenter_.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MYIE2\MyIE.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Software Backup\Hijackthis\HijackThis.exe

R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AssistHelper - {FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4A40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Antiy Auto Update] C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
O4 - HKLM\..\Run: [AGB5Monitor] C:\Program Files\Antiy Labs\AGuard\AGuard.exe /AutoRun
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - HKLM\..\Run: [yassistse] "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 反向链接 - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT
O8 - Extra context menu item: 类似网页 - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/203
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3A701EA1-8848-44AB-96A4-EFC4A2EF50C8}: NameServer = 202.96.209.134 202.96.209.6
O17 - HKLM\System\CCS\Services\Tcpip\..\{890C2EBB-0B91-4A1C-A781-A15215DAE04C}: NameServer = 202.96.209.6,202.96.209.133
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT