刚才在网络服务商的影院，突然中毒提示！然后不停的弹网页！杀完毒后电脑就不正常了，一开始瑞星监控和防火墙都看不到了！然后修复，还是不行，瑞星监控老是启动后就变成红色的小雨伞，瑞星防火墙还是不能打开，超级兔子打开后一下就自动关闭！郁闷!请问是什么原因啊！顺便上传一个用完美卸载扫描的系统日志！请高手帮忙看看，是什么原因，不想重装系统啊！谢谢了
完美卸载 - 系统检查检测报告!
建议:修复时请按照高手的反馈编号在修复工具中打勾进行修复.
--------------------------系统环境-------------------------
检测日期: 2006-10-11 23:46
Windows: Microsoft Windows XP
ServicePack: Service Pack 2
Update: 2600.xpsp_sp2_gdr.050301-1519
Internet Explorer: 6.0.2900.2180
-----------------------网络基础安全测试--------------------
密码安全检测:已经设置了管理员密码,建议:将密码复杂度和长度提高!
网络漏洞检测:存在IPC$空连接,但已经禁止匿名访问,安全!
服务名称 是否运行 描述
RemoteRegistry [已停止] [说明:这个服务可能被利用远程操作注册表]
Windows Time [运行中] [说明:这个服务可能被黑客利用来启动木马]
Telnet [已停止] [说明:这个服务可能被黑客登录到您计算机]
Messenger [已停止] [说明:这个服务常被广告商用来发垃圾广告]
Server [运行中] [说明:如果你的电脑不用局域网中,可以关闭]
建议在[控制面板]-[管理工具]-[服务]中,找到这些服务关闭并设置为[禁用].
-----------------------计算机网络端口----------------------
协议 端口号 端口类型
TCP 135 微软DCE RPC end-point mapper服务
TCP 445 Microsoft-DS
TCP 139 微软Netbios Name服务(用于文件及打印机共享)
TCP 1036 未知类型
TCP 1090 未知类型
TCP 1091 未知类型
TCP 1092 未知类型
TCP 1093 未知类型
TCP 1094 未知类型
TCP 1096 未知类型
TCP 1097 未知类型
TCP 1098 未知类型
TCP 1099 未知类型
TCP 1101 未知类型
TCP 1029 未知类型
TCP 445 公共Internet文件系统(CIFS)
TCP 500 Internet密钥交换
TCP 1025 Maverick's Matrix 1.2 - 2.0
TCP 4500 sae-urn
TCP 123 未知类型
TCP 137 未知类型
TCP 138 未知类型
TCP 123 未知类型
TCP 1027 UC聊天软件,Trojan.Huigezi.e
TCP 1035 未知类型
TCP 1037 未知类型
TCP 1088 未知类型
TCP 1095 未知类型
--------------------计算机系统组件体检----------------------
[编号:0]
[名称:\SystemRoot\System32\smss.exe]
[类型:运行进程]
[内容:未知]
[编号:1]
[名称:\??\C:\WINDOWS\system32\csrss.exe]
[类型:运行进程]
[内容:未知]
[编号:2]
[名称:\??\C:\WINDOWS\system32\winlogon.exe]
[类型:运行进程]
[内容:未知]
[编号:3]
[名称:C:\WINDOWS\system32\services.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:4]
[名称:C:\WINDOWS\system32\lsass.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:5]
[名称:C:\WINDOWS\system32\Ati2evxx.exe]
[类型:运行进程]
[内容:ATI External Event Utility for WindowsNT and Windows9X Copyright ? 1999-2004 ATI Technologies Inc.]
[编号:6]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:7]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:8]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:9]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:10]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:11]
[名称:C:\WINDOWS\system32\Ati2evxx.exe]
[类型:运行进程]
[内容:ATI External Event Utility for WindowsNT and Windows9X Copyright ? 1999-2004 ATI Technologies Inc.]
[编号:12]
[名称:C:\WINDOWS\system32\spoolsv.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:13]
[名称:C:\WINDOWS\Explorer.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:14]
[名称:C:\WINDOWS\system32\ctfmon.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:15]
[名称:C:\Program Files\Internet Explorer\IEXPLORE.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:16]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:17]
[名称:C:\WINDOWS\system32\tpamon.exe]
[类型:运行进程]
[内容:UrlClient Module Copyright 2006]
[编号:18]
[名称:C:\WINDOWS\System32\alg.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:19]
[名称:C:\WINDOWS\system32\conime.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:20]
[名称:C:\WINDOWS\WINLOGON.EXE]
[类型:运行进程]
[内容:GtE8w0l9NLysBCdvZTRh (null)]
[编号:21]
[名称:C:\Program Files\南海视讯宽带网认证软件 V(3.1.1.NH03)\client.exe]
[类型:运行进程]
[内容:未知]
[编号:22]
[名称:C:\Program Files\Maxthon\Maxthon.exe]
[类型:运行进程]
[内容:Maxthon Application Copyright (C) 2002]
[编号:23]
[名称:C:\Program Files\完美卸载V2006\MainCon.exe]
[类型:运行进程]
[内容:完美卸载V2006 主控制台 版权所有 (C) 2005]
[编号:24]
[名称:C:\Program Files\完美卸载V2006\SysSec.exe]
[类型:运行进程]
[内容:完美卸载V2006-ChinaHijackThis 版权所有 (C) 2006]
[编号:25]
[分隔符:---------------------------------------------------------------------]
[编号:26]
[名称:C:\WINDOWS\919331M.BMP]
[类型:已加载DLL]
[内容:未知]
[编号:27]
[名称:C:\WINDOWS\system32\Ati2evxx.dll]
[类型:已加载DLL]
[内容:ATI External Event Utility for NT, W2K and W9X Copyright ? 1999-2004 ATI Technologies Inc.]
[编号:28]
[名称:C:\WINDOWS\system32\Ati2edxx.dll]
[类型:已加载DLL]
[内容:ATI External Device Utility Copyright (c) ATI Technologies Inc. 2003]
[编号:29]
[名称:C:\WINDOWS\system32\mywow.dll]
[类型:已加载DLL]
[内容:未知]
[编号:30]
[名称:C:\WINDOWS\system32\msdmo.dll]
[类型:已加载DLL]
[内容:(null) (null)]
[编号:31]
[名称:C:\Program Files\WinRAR\rarext.dll]
[类型:已加载DLL]
[内容:未知]
[编号:32]
[名称:C:\Program Files\Rising\Rav\RSCOMMON.DLL]
[类型:已加载DLL]
[内容:Rising Antivirus Software Copyright (c) 1998-2006 Rising Corp.]
[编号:33]
[名称:C:\WINDOWS\system32\sptd.dll]
[类型:已加载DLL]
[内容:IEGuard Module Copyright 2002]
[编号:34]
[名称:C:\WINDOWS\system32\SecurityC1.dll]
[类型:已加载DLL]
[内容:CNNET, Security Certification Copyright (C) 2003-2006 CNNET, INC.]
[编号:35]
[名称:C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX]
[类型:已加载DLL]
[内容:未知]
[编号:36]
[名称:C:\Program Files\Maxthon\maxzlib.dll]
[类型:已加载DLL]
[内容: maxzlib Copyright ? 2005]
[编号:37]
[名称:C:\Program Files\Maxthon\Services\RealTime\real_time.dll]
[类型:已加载DLL]
[内容:RealTime Module Copyright 2003]
[编号:38]
[名称:C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]
[类型:已加载DLL]
[内容:Shockwave Flash ? 1996-2006 Adobe Macromedia Software LLC. All rights reserved.]
[编号:39]
[名称:C:\WINDOWS\system32\UNISPIM5.IME]
[类型:已加载DLL]
[内容:紫光华宇拼音 Copyright (c) Thunisoft]
[编号:40]
[名称:C:\Program Files\完美卸载V2006\SkinMagic.dll]
[类型:已加载DLL]
[内容:Appspeed SkinMagic Toolkit Copyright ? 2002-2006]
[编号:41]
[分隔符:---------------------------------------------------------------------]
