瑞星卡卡安全论坛

cpu总是100%    应用程序  总是没响应~~~~

有时连关机都关不上~~~~~~~~~~

附件: 2376822005717100311.jpg

看看


附件: 2376822005717100355.jpg

大虾们呀

怎么不帮忙呀~~~~~~~~~~~~~~~~

你用HIJACKTHIS扫个日志上来大家分析一下吧~

我也遇见过,没有人帮助,郁闷.后来我开机进入时按F8,在安全模式下杀毒一次,后来就没有这样了.你也试下

HIJACKTHIS 是什么呀
怎么用呀

HijackThis

附件: 5362492005717173408.rar

【回复“泪水”的帖子】
HijackThis下载地址请参考：
http://forum.ikaka.com/topic.asp?board=67&artid=5188931

HijackThis的使用方法-----请参考--瑞星HijackThis专题
http://it.rising.com.cn/newSite/Channels/anti_virus/Antivirus_Faq/TopicExplorerPagePackage/hijackthis.htm

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
C:\Program Files\KAV2005\KWatch.EXE
C:\Program Files\Stardock\Object Desktop\ThemeManager\wbload.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\KAV2005\KAVStart.exe
F:\WINDOWS\system32\ctfmon.exe
C:\Program Files\KAV2005\KavPFW.exe
C:\Program Files\KAV2005\KMailMon.EXE
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\KAV2005\KPfwSvc.EXE
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\wuauclt.exe
E:\tools\Winamp\winamp.exe
E:\tools\QQ2004\TIMPlatform.exe
E:\tools\QQ2004\QQ.exe
C:\Program Files\Thunder Network\Thunder\Thunder.exe
C:\Program Files\Thunder Network\Thunder\MediaIssue\Issue.exe
E:\tools\QQGame\QQBattleZone\QQBattleZone.exe
F:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\download\hijackthis\HijackThis.exe

O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - F:\WINDOWS\system32\xunleibho_v5.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - E:\tools\QQ2004\QQIEHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: (no name) - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - (no file)
O3 - Toolbar: (no name) - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - (no file)
O3 - Toolbar: (no name) - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [KavStart] "C:\Program Files\KAV2005\KAVStart.exe" -startup
O4 - HKLM\..\Run: [迅雷4] C:\Program Files\Thunder Network\Thunder\MediaIssue\TDUpdate.exe
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [KavPFW] "C:\Program Files\KAV2005\KavPFW.exe"
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getAllurl.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\tools\QQ2004\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\tools\QQ2004\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\tools\QQ2004\SendMMS.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\浩方对战平台\GameClient.exe
O9 - Extra 'Tools' menuitem: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\浩方对战平台\GameClient.exe
O9 - Extra button: (no name) - {2253922F-1B26-4C74-8B57-E3AEE748DBB8} - (no file)
O9 - Extra 'Tools' menuitem: 新浪UC - {2253922F-1B26-4C74-8B57-E3AEE748DBB8} - (no file)
O9 - Extra button: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - Extra 'Tools' menuitem: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\tools\QQ2004\QQ.EXE
O9 - Extra 'Tools' menuitem: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\tools\QQ2004\QQ.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [!CNS]  上网助手-地址栏搜索
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1121487852875
O17 - HKLM\System\CCS\Services\Tcpip\..\{51869F28-92A6-4B6E-864C-62074E274B93}: NameServer = 202.99.160.68 202.99.168.8
O23 - Service: EPSON Printer Status Agent2 - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Kingsoft Personal Firewall Service - Kingsoft Corporation - C:\Program Files\KAV2005\KPfwSvc.EXE
O23 - Service: Kingsoft Antivirus KWatch Service - Kingsoft Corporation - C:\Program Files\KAV2005\KWatch.EXE

【回复“泪水”的帖子】
请关闭所有IE界面，重新使用HijackThis扫描一次，选中下面建议修复的项目，让HijackThis修复，修复前请允许HijackThis保留备份。（如果楼主知道是安全的可以不必勾选）
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O3 - Toolbar: (no name) - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - (no file)
O3 - Toolbar: (no name) - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - (no file)
O3 - Toolbar: (no name) - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - (no file)
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {2253922F-1B26-4C74-8B57-E3AEE748DBB8} - (no file)
O9 - Extra 'Tools' menuitem: 新浪UC - {2253922F-1B26-4C74-8B57-E3AEE748DBB8} - (no file)
O9 - Extra button: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - Extra 'Tools' menuitem: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)

该用户帖子内容已被屏蔽

该用户帖子内容已被屏蔽

引用:

【魅影007的贴子】什么哦，看你的图，没100%啊。才41%啊。 ...........................

回 12楼

这是一个主题~

引用:

【魅影007的贴子】WINDOWS\system32\wuauclt.exe 这个是什么？ ...........................

Wuauclt.exe是windows的自动更新程序。