我用的是正版的瑞星,现在绿伞不见了,主页被换了,我想上卡卡,就会转到3w.ads3721.com上来,现在瑞星杀毒软件瘫痪了,好像卡在那儿,
下面是我的扫描日志,恳请帮助,我现在真不知道怎么办了,
多谢了!!
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Ahead\InCD\InCDsrv.exe
c:\program files\rising\rfw\RfwMain.exe
C:\WINDOWS\System32\CAPRPCSK.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\PROGRA~1\阿里巴巴\贸易通\AliTalk.EXE
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Rising\Rav\RavTask.exe
C:\WINDOWS\System32\wdfmgr32.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\CAPPSWK.EXE
D:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
D:\THIS\HijackThis1991zww.exe
R3 - URLSearchHook: SearchCar - {BD328E49-38AB-42CB-8EEA-73AA4CD2A6FD} - C:\Program Files\SearchCar\SearchCar.dll
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 222.88.90.22 www.4199.com
O1 - Hosts: 222.88.90.22 4199.com
O1 - Hosts: 222.88.90.22 www.9505.com
O1 - Hosts: 222.88.90.22 9505.com
O1 - Hosts: 60safe.com
O1 - Hosts: 59.188.2.225 360safe.com
O1 - Hosts: 59.188.2.225 update.360safe.com
O1 - Hosts: 59.188.2.225 dl.360safe.com
O1 - Hosts: 59.188.2.225 bbs.360safe.com
O1 - Hosts: 59.188.2.225 count16.51yes.com
O1 - Hosts: 59.188.2.225 count18.51yes.com
O1 - Hosts: 59.188.2.225 count20.51yes.com
O1 - Hosts: 59.188.2.225 www.btbaicai.com
O1 - Hosts: 59.188.2.225 btbaicai.com
O1 - Hosts: 59.188.2.225 www.pctutu.com
O1 - Hosts: 59.188.2.225 www.7322.com
O1 - Hosts: 59.188.2.225 www.5566.net
O1 - Hosts: 59.188.2.225 www.9991.com
O1 - Hosts: 59.188.2.225 forum.ikaka.com
O1 - Hosts: 59.188.2.225 www.ikaka.com
O1 - Hosts: 59.188.2.225 www.piaoxue.com
O1 - Hosts: 59.188.2.225 forum.jiangmin.com
O1 - Hosts: 59.188.2.225 update.jiangmin.com
O1 - Hosts: 59.188.2.225 post.baidu.com
O1 - Hosts: 59.188.2.225 zhidao.baidu.com
O1 - Hosts: 59.188.2.225 update.rising.com.cn
O1 - Hosts: 59.188.2.225 online.rising.com.cn
O1 - Hosts: 59.188.2.225 dl.pconline.com.cn
O1 - Hosts: 59.188.2.225 space.uwants.com
O1 - Hosts: 59.188.2.225 www.pcav.cn
O1 - Hosts: 59.188.2.225 mopery.hits.io
O1 - Hosts: 59.188.2.225 www.goodmv.cn
O1 - Hosts: 59.188.2.225 www.5566.net
O1 - Hosts: 59.188.2.225 www.piaoxue.com
O1 - Hosts: 59.188.2.225 www.luosoft.com
O1 - Hosts: 59.188.2.225 luosoft.com
O1 - Hosts: 59.188.2.225 www.7255.com
O1 - Hosts: 59.188.2.225 dl.pconline.com.cn
O1 - Hosts: 59.188.2.225 www.spjoy.com
O1 - Hosts: 59.188.2.225 c01.caishow.com
O1 - Hosts: 59.188.2.225 c02.caishow.com
O1 - Hosts: 59.188.2.225 c03.caishow.com
O1 - Hosts: 59.188.2.225 c04.caishow.com
O1 - Hosts: 59.188.2.225 www.caishow.com
O1 - Hosts: 59.188.2.225 union.caishow.com
O1 - Hosts: 59.188.2.225 ad01.a8.com
O1 - Hosts: 59.188.2.225 ad02.a8.com
O1 - Hosts: 59.188.2.225 sg.a8.com
O1 - Hosts: 59.188.2.225 www.adanywhere.cn
O1 - Hosts: 59.188.2.225 ip.adanywhere.cn
O1 - Hosts: 59.188.2.225 ip1.adanywhere.cn
O1 - Hosts: 59.188.2.225 ip2.adanywhere.cn
O1 - Hosts: 59.188.2.225 www.bannerbox.cn
O1 - Hosts: 59.188.2.225 www.caiqiyue.com
O1 - Hosts: 59.188.2.225 toolsbar.kuaiso.com
O1 - Hosts: 59.188.2.225 www.kuaiso.com
O1 - Hosts: 59.188.2.225 www.2t2t.cn
O1 - Hosts: 59.188.2.225 3.a.kal.cn
O1 - Hosts: 59.188.2.225 ip.alexaanywhere.com
O1 - Hosts: 59.188.2.225 go.ipcenter.cn
O1 - Hosts: 59.188.2.225 www.2yin.cn
O1 - Hosts: 59.188.2.225 wwww.systeel.com.cn
O1 - Hosts: 59.188.2.225 go.baibaoxiang.cn
O1 - Hosts: 59.188.2.225 www.gao58.com
O1 - Hosts: 59.188.2.225 www.2tu.cn
O1 - Hosts: 59.188.2.225 www.91tu.cn
O1 - Hosts: 59.188.2.225 www.haotop.com
O1 - Hosts: 59.188.2.225 news01.virussky.com
O1 - Hosts: 59.188.2.225 news02.virussky.com
O1 - Hosts: 59.188.2.225 news03.virussky.com
O1 - Hosts: 59.188.2.225 news04.virussky.com
O1 - Hosts: 59.188.2.225 news40.virussky.com
O1 - Hosts: 59.188.2.225 news41.virussky.com
O1 - Hosts: 59.188.2.225 news42.virussky.com
O1 - Hosts: 59.188.2.225 www.an85.com
O1 - Hosts: 59.188.2.225 an85.com
O1 - Hosts: 59.188.2.225 www.ycdy.com
O1 - Hosts: 59.188.2.225 ycdy.com
O1 - Hosts: 59.188.2.225 down.virussky.com
O1 - Hosts: 59.188.2.225 update.virussky.com
O1 - Hosts: 59.188.2.225 www.maipao.com
O1 - Hosts: 59.188.2.225 www.sina-baidu.com
O1 - Hosts: 59.188.2.225 www.maohehe.com
O1 - Hosts: 59.188.2.225 www.1717kan.cn
O1 - Hosts: 59.188.2.225 www.feixue.net
O1 - Hosts: 59.188.2.225 www.xingkongitv.com
O1 - Hosts: 59.188.2.225 about-blank.cc
O1 - Hosts: 59.188.2.225 www.xfkz.com
O1 - Hosts: 59.188.2.225 xfkz.com
O1 - Hosts: 59.188.2.225 www.365tan.com
O1 - Hosts: 59.188.2.225 cg.9e3.com
O1 - Hosts: 59.188.2.225 www.qqplayer.net
O1 - Hosts: 59.188.2.225 www.sosok.com
O1 - Hosts: 59.188.2.225 img.zhangxiu.com
O1 - Hosts: 59.188.2.225 www.okeaa.com
O1 - Hosts: 59.188.2.225 www.winopen.cn
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: XBTP03129 - {71E000D6-C63D-4d95-85A0-76DF890982A3} - C:\PROGRA~1\SEARCH~1\SEARCH~1.DLL
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {B10343BD-1DC6-442F-9BA2-D44C708CEE83} - (no file)
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - IE工具栏增项: SearchCar - {BD328E49-38AB-42CB-8EEA-73AA4CD2A6FD} - C:\Program Files\SearchCar\SearchCar.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [CAPON] C:\WINDOWS\System32\Spool\Drivers\w32x86\3\CAPONN.EXE
O4 - 启动项HKLM\\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - 启动项HKLM\\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - 启动项HKLM\\Run: [Alitalk] C:\PROGRA~1\阿里巴巴\贸易通\AliTalk.EXE -hideframe
O4 - 启动项HKLM\\Run: [Install Alitalk] C:\WINDOWS\temp\alitalk\alitalk.exe -hideframe
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [wdfmgr32] C:\WINDOWS\System32\wdfmgr32.exe
O4 - 启动项HKLM\\Run: [xy] C:\WINDOWS\Download\svhost32.exe
O4 - 启动项HKLM\\Run: [R] C:\WINDOWS\System32\rundll32.exe ctfmon.dll s
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Canon LBP-800 状态窗口.LNK = C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Acrobat Assistant.lnk = D:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\skype\新建文件夹\200602041216\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\skype\新建文件夹\200602041216\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\skype\新建文件夹\200602041216\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\skype\新建文件夹\200602041216\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: 词霸 - {9A687CA6-D585-4947-9ED9-BE96071F5CD9} - C:\PROGRA~1\Kingsoft\POWERW~1\XDictExB.dll
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE (file missing)
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE (file missing)
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - 浏览器额外的“工具”菜单项: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by18fd.bay18.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan
Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O18 - 列举现有的协议: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} - C:\PROGRA~1\Kingsoft\POWERW~1\XDictExB.dll
O23 - NT 服务: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - NT 服务: InCD File System Service (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
?ÙõÇ®Y£6bbs.ikaka.comL(±äÃ)¨
