1   1  /  1  页   跳转

求助:是不是木马?

求助:是不是木马?

这是日志,请帮我看看该怎么办?
我不懂,请尽量详细一些,谢谢!


HijackThis_zww汉化版扫描日志 V1.99.1
保存于      4:29:58, 日期 2005-11-26
操作系统:  Windows 2000 SP4 (WinNT 5.00.2195)
浏览器:    Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程:         

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [RfwMain] "D:\瑞星\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [RavTimer] D:\瑞星\RAV\RAVTIMER.EXE
O4 - 启动项HKLM\\Run: [NMGameX_AutoRun] C:\WINNT\system32\Rundll32.exe nmgamex.dll,LiveProcess /aa
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [SystemSafetyMonitor] D:\System Safety Monitor\SysSafe.exe
O4 - Startup: VP-EYE.lnk = C:\VP-EYE\control\vpeyev1.exe
O4 - Startup: 腾讯QQ.lnk = D:\qq\QQ.exe
O4 - Global Startup: Microsoft Office.lnk = D:\office\Office\OSA9.EXE
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - D:\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - D:\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\qq\SendMMS.htm
O18 - 列举现有的协议: mbox - {7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6} - C:\WINNT\system32\mbprot.dll
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - NT 服务: bahbnb - Unknown owner - \\61.49.181.15\E$\vbrun6nt.exe" -service (file missing)
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: Gray_Pigeon_Server (GrayPigeonServer) - Unknown owner - C:\WINNT\G_Server1.2.exe
O23 - NT 服务: htboy - Unknown owner - \\61.49.181.155\D$\vbrun6nt.exe" -service (file missing)
O23 - NT 服务: jeaaq - Unknown owner - \\61.49.180.202\E$\fensvc32.exe" -service (file missing)
O23 - NT 服务: Logica1 Disk Manager (Logica1 Manager) - Unknown owner - C:\WINNT\G_Server.exe
O23 - NT 服务: lzzmu - Unknown owner - \\61.49.181.246\E$\vbrun6nt.exe" -service (file missing)
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - NT 服务: nzpyuh - Unknown owner - \\61.51.93.112\E$\vbrun6nt.exe" -service (file missing)
O23 - NT 服务: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\北京通信\宽带E~1\app\pppoeservice.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - D:\瑞星\Rising\Rfw\rfwsrv.exe
O23 - NT 服务: rnpgy - Unknown owner - \\61.49.181.155\E$\fnesvc32.exe" -service (file missing)
O23 - NT 服务: Remote Administrator Service (r_server) - Unknown owner - C:\WINNT\system\svchast.exe" /service (file missing)
O23 - NT 服务: yhrngkx - Unknown owner - \\61.51.92.162\E$\fnesvc32.exe" -service (file missing)
O23 - NT 服务: yjxifso - Unknown owner - \\61.49.105.54\D$\vcvhost.exe" -service (file missing)
O23 - NT 服务: zzbfu - Unknown owner - \\61.49.105.10\E$\vbrun6nt.exe" -service (file missing)

最后编辑2005-11-26 07:48:06
分享到:
gototop
 

你的机器挺牛啊,这么多病毒
灰鸽子
O23 - NT 服务: Logica1 Disk Manager (Logica1 Manager) - Unknown owner - C:\WINNT\G_Server.exe
灰鸽子
O23 - NT 服务: Gray_Pigeon_Server (GrayPigeonServer) - Unknown owner - C:\WINNT\G_Server1.2.exe
不知道是什么,估计不是什么好东西
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT