紧急求助：我的浏览器被劫持了。 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛紧急求助：我的浏览器被劫持了。

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

紧急求助：我的浏览器被劫持了。

一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:	发表于： 2005-12-27 12:56 \| 只看楼主短消息资料字号：小中大 1楼紧急求助：我的浏览器被劫持了。斑竹，快帮帮我吧。这个网站也太强了。3721都对他没办法。我用上网助手把主业该回来了。过不了多久，就又被该回去了。这个垃圾网站是 http://www.9991.com/ 也希望大家都警惕这个网站下面是我用HijickThis1.991扫描的结果。 Logfile of HijackThis v1.99.1 Scan saved at 12:52:30, on 2005-12-27 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\csrss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\Rundll32.exe D:\WINDOWS\system\rundll32.exe D:\WINDOWS\system32\wdfmgr.exe D:\PROGRA~1\Yahoo!\Assistant\yassistse.exe D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\Common Files\Real\Update_OB\realsched.exe D:\Program Files\Sandai\ThunderMini\ThunderMini.exe D:\WINDOWS\System32\alg.exe D:\WINDOWS\system32\wscntfy.exe D:\Program Files\Internet Explorer\iexplore.exe E:\下载\050224ha_hijackthis_1991\ha_hijackthis_1991\HijackThis.exe R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - D:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - D:\WINDOWS\system32\xunleibho_v8.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - D:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yAngling.dll O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - D:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - D:\WINDOWS\System32\aclayer.dll O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - D:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - D:\PROGRA~1\baidu\bar\baidubar.dll O2 - BHO: SnapFlash Class - {A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E} - D:\Program Files\Common Files\justDo\Jd2002.dll O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - D:\WINDOWS\downlo~1\CnsHook.dll O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - D:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll O3 - Toolbar: 东方卫士 - {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF} - D:\PROGRA~1\DFVSIE~1\DFVSIEBR.dll O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - D:\PROGRA~1\baidu\bar\baidubar.dll O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [helper.dll] D:\WINDOWS\system32\rundll32.exe D:\PROGRA~1\3721\helper.dll,Rundll32 O4 - HKLM\..\Run: [SEDMAD] rem D:\WINDOWS\system32\dmad.exe "-sedmreg" O4 - HKLM\..\Run: [yassistse] "D:\PROGRA~1\Yahoo!\Assistant\yassistse.exe" O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Thunder] "D:\Program Files\Thunder Network\Thunder\ThunderShell.exe" /s O4 - HKLM\..\Run: [thunder_mini] D:\Program Files\Sandai\ThunderMini\ThunderMini.exe O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [updateMgr] D:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0 O8 - Extra context menu item: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\geturl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - Extra context menu item: &使用迷你迅雷下载 - D:\Program Files\Sandai\ThunderMini\geturl.htm O8 - Extra context menu item: Save Flash with Flash Catcher - res://D:\Program Files\Common Files\justDo\IECatcher.DLL/FlashCatcher.htm O8 - Extra context menu item: 添加到QQ自定义面板 - E:\Program Files\QQ2005_Lite\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - E:\Program Files\QQ2005_Lite\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\Program Files\QQ2005_Lite\SendMMS.htm O8 - Extra context menu item: 用比特精灵下载(&B) - D:\Program Files\BitSpirit\bsurl.htm O8 - Extra context menu item: 百度-搜索MP3 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM O8 - Extra context menu item: 百度-搜索图片 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM O8 - Extra context menu item: 百度-搜索新闻 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM O8 - Extra context menu item: 百度-搜索歌词 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM O8 - Extra context menu item: 百度-搜索网页 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM O8 - Extra context menu item: 百度-搜索贴吧 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM O8 - Extra context menu item: 百度-词典搜索 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\Program Files\浩方对战平台\GameClient.exe O9 - Extra button: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/?source=Cns (file missing) O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: 东方卫士 - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CE} - D:\PROGRA~1\DFVSIE~1\DFVSIEBR.dll O9 - Extra 'Tools' menuitem: 东方卫士工具条 - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CE} - D:\PROGRA~1\DFVSIE~1\DFVSIEBR.dll O9 - Extra button: 东方卫士2005下载版 - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9EE} - D:\Program Files\DFVSX\DFVSX.exe O9 - Extra 'Tools' menuitem: 东方卫士 - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9EE} - D:\Program Files\DFVSX\DFVSX.exe O9 - Extra button: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing) O9 - Extra 'Tools' menuitem: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing) O9 - Extra button: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing) O9 - Extra 'Tools' menuitem: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing) O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O11 - Options group: [!CNS] 上网助手-地址栏搜索 O16 - DPF: _{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - http://cn.download.zs.yahoo.com/partner/kavwebscan_unicode.cab O16 - DPF: _{ACFE8232-03C5-4AEC-AF5E-42B806724096} - http://safe.qq.com/scan/KAllScan.CAB O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1131673655115 O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/QQ/QQkill/rsonline.cab O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/Ver2005/OL2005.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{1A3D1F80-0FE2-4A34-8B22-A21B8668C305}: NameServer = 211.98.192.3 61.233.65.3 2005-12-27 17:23:03
一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:	分享到：

玉面修罗初生襁褓狮帖子:403 注册: 2005-09-20 来自:	发表于： 2005-12-27 13:18 \| 短消息资料字号：小中大 2楼安全模式(开机自检后启动过程中按F8)下修复: O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - D:\WINDOWS\System32\aclayer.dll O4 - HKLM\..\Run: [SEDMAD] rem D:\WINDOWS\system32\dmad.exe "-sedmreg" 注意修复的时候什么都不要打开. 修复完毕之后显示系统文件和隐藏文件,然后找到 D:\WINDOWS\System32\aclayer.dll D:\WINDOWS\system32\dmad.exe 并删除.如果没有找到就不管了. 另外你贴的日志是否完整?
玉面修罗初生襁褓狮帖子:403 注册: 2005-09-20 来自:

一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:	发表于： 2005-12-27 13:19 \| 只看楼主短消息资料字号：小中大 3楼可能是太长了。后面没贴上。我重新贴
一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:

一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:	发表于： 2005-12-27 13:20 \| 只看楼主短消息资料字号：小中大 4楼 Logfile of HijackThis v1.99.1 Scan saved at 13:19:55, on 2005-12-27 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: D:\WINDOWS\System32\smss.exe D:\WINDOWS\system32\csrss.exe D:\WINDOWS\system32\winlogon.exe D:\WINDOWS\system32\services.exe D:\WINDOWS\system32\lsass.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\System32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\svchost.exe D:\WINDOWS\system32\spoolsv.exe D:\WINDOWS\Explorer.EXE D:\WINDOWS\system32\Rundll32.exe D:\WINDOWS\system\rundll32.exe D:\WINDOWS\system32\wdfmgr.exe D:\PROGRA~1\Yahoo!\Assistant\yassistse.exe D:\WINDOWS\system32\rundll32.exe D:\WINDOWS\system32\ctfmon.exe D:\Program Files\Common Files\Real\Update_OB\realsched.exe D:\Program Files\Sandai\ThunderMini\ThunderMini.exe D:\WINDOWS\System32\alg.exe D:\WINDOWS\system32\wscntfy.exe D:\Program Files\Internet Explorer\iexplore.exe D:\Program Files\Thunder Network\Thunder\Thunder.exe D:\Program Files\Internet Explorer\IEXPLORE.EXE E:\下载\050224ha_hijackthis_1991\ha_hijackthis_1991\HijackThis.exe R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - D:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - D:\WINDOWS\system32\xunleibho_v8.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing) O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - D:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yAngling.dll O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - D:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - D:\WINDOWS\System32\aclayer.dll O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - D:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - D:\PROGRA~1\baidu\bar\baidubar.dll O2 - BHO: SnapFlash Class - {A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E} - D:\Program Files\Common Files\justDo\Jd2002.dll O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - D:\WINDOWS\downlo~1\CnsHook.dll O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - D:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll O3 - Toolbar: 东方卫士 - {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF} - D:\PROGRA~1\DFVSIE~1\DFVSIEBR.dll O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - D:\PROGRA~1\baidu\bar\baidubar.dll O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [helper.dll] D:\WINDOWS\system32\rundll32.exe D:\PROGRA~1\3721\helper.dll,Rundll32 O4 - HKLM\..\Run: [SEDMAD] rem D:\WINDOWS\system32\dmad.exe "-sedmreg" O4 - HKLM\..\Run: [yassistse] "D:\PROGRA~1\Yahoo!\Assistant\yassistse.exe" O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Thunder] "D:\Program Files\Thunder Network\Thunder\ThunderShell.exe" /s O4 - HKLM\..\Run: [thunder_mini] D:\Program Files\Sandai\ThunderMini\ThunderMini.exe O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:

一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:	发表于： 2005-12-27 13:21 \| 只看楼主短消息资料字号：小中大 5楼 O8 - Extra context menu item: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\geturl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - Extra context menu item: &使用迷你迅雷下载 - D:\Program Files\Sandai\ThunderMini\geturl.htm O8 - Extra context menu item: Save Flash with Flash Catcher - res://D:\Program Files\Common Files\justDo\IECatcher.DLL/FlashCatcher.htm O8 - Extra context menu item: 添加到QQ自定义面板 - E:\Program Files\QQ2005_Lite\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - E:\Program Files\QQ2005_Lite\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\Program Files\QQ2005_Lite\SendMMS.htm O8 - Extra context menu item: 用比特精灵下载(&B) - D:\Program Files\BitSpirit\bsurl.htm O8 - Extra context menu item: 百度-搜索MP3 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM O8 - Extra context menu item: 百度-搜索图片 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM O8 - Extra context menu item: 百度-搜索新闻 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM O8 - Extra context menu item: 百度-搜索歌词 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM O8 - Extra context menu item: 百度-搜索网页 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM O8 - Extra context menu item: 百度-搜索贴吧 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM O8 - Extra context menu item: 百度-词典搜索 - res://D:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\Program Files\浩方对战平台\GameClient.exe O9 - Extra button: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/?source=Cns (file missing) O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: 东方卫士 - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CE} - D:\PROGRA~1\DFVSIE~1\DFVSIEBR.dll O9 - Extra 'Tools' menuitem: 东方卫士工具条 - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CE} - D:\PROGRA~1\DFVSIE~1\DFVSIEBR.dll O9 - Extra button: 东方卫士2005下载版 - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9EE} - D:\Program Files\DFVSX\DFVSX.exe O9 - Extra 'Tools' menuitem: 东方卫士 - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9EE} - D:\Program Files\DFVSX\DFVSX.exe O9 - Extra button: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing) O9 - Extra 'Tools' menuitem: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing) O9 - Extra button: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing) O9 - Extra 'Tools' menuitem: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing) O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O10 - Unknown file in Winsock LSP: d:\windows\system32\sunvlsp.dll O11 - Options group: [!CNS] 上网助手-地址栏搜索 O16 - DPF: _{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - http://cn.download.zs.yahoo.com/partner/kavwebscan_unicode.cab O16 - DPF: _{ACFE8232-03C5-4AEC-AF5E-42B806724096} - http://safe.qq.com/scan/KAllScan.CAB O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1131673655115 O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/QQ/QQkill/rsonline.cab O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/Ver2005/OL2005.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{1A3D1F80-0FE2-4A34-8B22-A21B8668C305}: NameServer = 211.98.192.3 61.233.65.3
一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:

玉面修罗初生襁褓狮帖子:403 注册: 2005-09-20 来自:	发表于： 2005-12-27 13:28 \| 短消息资料字号：小中大 6楼先按照我在2楼的回复操作.. 另外请把023的NT服务项贴出来.
玉面修罗初生襁褓狮帖子:403 注册: 2005-09-20 来自:

一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:	发表于： 2005-12-27 13:48 \| 只看楼主短消息资料字号：小中大 7楼十分感谢！我的浏览器有回来了。哈哈！太感谢你了。另外我的机器还中了myRunner 该怎么解决？我搞了好几天了。各种杀毒软件都杀不掉它
一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:

一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:	发表于： 2005-12-27 13:50 \| 只看楼主短消息资料字号：小中大 8楼还有我不知道023的NT服务项是个什么东西。
一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:

玉面修罗初生襁褓狮帖子:403 注册: 2005-09-20 来自:	发表于： 2005-12-27 14:01 \| 短消息资料字号：小中大 9楼 023项是NT服务项..实现启动加载的...这项对检查病毒很重要许多病毒就是利用这个加载.比如有名的灰鸽子. 另外你中了myRunner吗? 这个毒好象有点麻烦.. 你最好另起一帖然后用置顶帖子中的工具SRENG扫描一个日志发上来.另外把杀软的杀毒报告也贴出来,你提供的信息越详细越好.
玉面修罗初生襁褓狮帖子:403 注册: 2005-09-20 来自:

一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:	发表于： 2005-12-27 14:18 \| 只看楼主短消息资料字号：小中大 10楼谢谢！我已经另外写了一个帖子，用SRENG扫描的结果贴上去了。在下面这个帖子里。 http://forum.ikaka.com/topic.asp?board=28&artid=7599527 请帮我看看吧。
一条懒鱼初生襁褓狮帖子:25 注册: 2005-12-27 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT