不在叛逆 - 2007-9-7 3:14:00
帮我看看我日志一下!不知道怎么了电脑出现了梦幻和QQ等很多的盗号木马!删了又有好多.还乱跳出很多东西!高手帮我看一下我的日志还有什么问题?在此谢谢大家
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:54:52, on 2007-9-7
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
D:\360安全卫士\360safe\safemon\360Tray.exe
C:\Program Files\Internet Explorer\iexplore.exe
F:\QQ\QQ.exe
F:\QQ\TIMPlatform.exe
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\Logo1_.exe
F:\QQDownload\QDAutoUpdate.exe
D:\扫描工具\HijackThis.exe
O2 - BHO: QQCycloneHelper - {00000000-12C9-4305-82F9-43058F20E8D2} - F:\QQDownload\QQIEHelper01.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: 腾讯QQ.lnk = F:\QQ\QQ.exe
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F62D73-0B22-4706-AB95-1B7B9E749E16}: NameServer = 202.103.224.68 202.103.225.68
O20 - AppInit_DLLs: kaqhczy.dll
--
End of file - 1619 bytes
[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
© 2000 - 2026 Rising Corp. Ltd.