瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】我电脑启动1TB 和Y5Y5网页 就自动打开,请帮忙!

1   1  /  1  页   跳转

【求助】我电脑启动1TB 和Y5Y5网页 就自动打开,请帮忙!

【求助】我电脑启动1TB 和Y5Y5网页 就自动打开,请帮忙!

2006-09-08,23:29:58

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
    <run><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <NvCplDaemon><RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup>  [NVIDIA Corporation]
    <Synchronization Manager><mobsync.exe /logon>  [Microsoft Corporation]
    <inetinfo><C:\WINNT\system32\inetinfo.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINNT\system32\Userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []

==================================
启动文件夹
服务
[Symantec Event Manager / ccEvtMgr]
  <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><N/A>
[Symantec Settings Manager / ccSetMgr]
  <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><N/A>
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Norton AntiVirus Auto-Protect Service / navapsvc]
  <"C:\Program Files\Norton AntiVirus\navapsvc.exe"><N/A>
[Norton AntiVirus Firewall Monitor Service / NPFMntor]
  <"C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe"><N/A>
[Norton Protection Center Service / NSCService]
  <"C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSrvce.exe"><N/A>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINNT\system32\nvsvc32.exe><NVIDIA Corporation>
[SAVScan / SAVScan]
  <"C:\Program Files\Norton AntiVirus\SAVScan.exe"><N/A>
[Symantec Network Drivers Service / SNDSrvc]
  <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><N/A>
[Symantec SPBBCSvc / SPBBCSvc]
  <"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><N/A>
[Svchost Service For Windows / svchost]
  <C:\WINNT\svchost.exe><N/A>
[Symantec Core LC / Symantec Core LC]
  <"C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe"><N/A>
[Windows Manger Control / windowmgr]
  <C:\WINNT\WindowMgr.exe><N/A>
[Update Service For Windows / winupdate]
  <C:\WINNT\winupdate.exe><N/A>

==================================
浏览器加载项
[AdPutHelper.AdHelper]
  {631EDC67-F035-49BA-B8BC-983B474E9BB4} <C:\WINNT\system32\AdPutHelper.dll, chuangya>
[]
  {8D139DD1-6BB5-4103-8C89-41560FF2E107} <C:\WINNT\system32\3721_5.dll, 3721公司<推荐使用>>
[]
  {E730189A-9973-4121-B046-AD1C161EC3AF} <C:\WINNT\system32\37211.dll, 3721公司<推荐使用>>
[&使用迅雷下载]
  <E:\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <E:\Thunder\Program\GetAllUrl.htm, N/A>

==================================
正在运行的进程
[PID: 136][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 164][\??\C:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\C:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6714>
[PID: 212][C:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.6700>
    [C:\WINNT\system32\dmserver.dll]  <VERITAS Software Corp.><2195.6605.297.3>
[PID: 224][C:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6695>
[PID: 396][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 444][C:\WINNT\system32\spoolsv.exe]  <Microsoft Corporation><5.00.2195.6659>
    [C:\WINNT\system32\DELS1LMK.DLL]  <><1.0.1.0>
[PID: 472][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 500][C:\WINNT\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.7184>
[PID: 564][C:\WINNT\system32\MSTask.exe]  <Microsoft Corporation><4.71.2195.6704>
[PID: 636][C:\WINNT\svchost.exe]  <N/A><N/A>
[PID: 704][C:\WINNT\WindowMgr.exe]  <N/A><N/A>
[PID: 740][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
[PID: 756][C:\WINNT\system32\OpenSSL.exe]  <Microsoft Corporation><4.4.3760.1822>
[PID: 784][C:\WINNT\winupdate.exe]  <N/A><N/A>
[PID: 804][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 980][C:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3700.6690>
    [C:\WINNT\system32\3721_5.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\WINNT\system32\nvshell.dll]  <NVIDIA Corporation><6.14.10.10035>
    [C:\WINNT\system32\msdmo.dll]  <N/A><N/A>
    [C:\WINNT\system32\l3codeca.acm]  <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
    [C:\WINNT\system32\AdPutHelper.dll]  <chuangya><1.00>
    [C:\WINNT\system32\37211.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
[PID: 364][C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe]  <Yahoo! China><3, 0, 0, 1001>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAsMenu.dll]  <Yahoo! China><3, 0, 0, 1001>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAssecblk.dll]  <Yahoo! China><3, 0, 1, 1003>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yIEAngel.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yMenuInfo.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\WINNT\system32\3721_5.dll]  <3721公司<推荐使用>><1.0.0.0>
[PID: 1084][C:\WINNT\system32\inetinfo.exe]  <Microsoft Corporation><5.3.3680.1831>
    [C:\WINNT\system32\WinSSLCore.dll]  <N/A><N/A>
    [C:\WINNT\system32\WinSSLRun.dll]  <N/A><N/A>
    [C:\WINNT\system32\SSLSina.dll]  <N/A><N/A>
    [C:\WINNT\system32\FlashRun.dll]  <N/A><N/A>
[PID: 1024][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2800.1106>
    [C:\WINNT\system32\AdPutHelper.dll]  <chuangya><1.00>
    [C:\WINNT\system32\3721_5.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\WINNT\system32\37211.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yassist.dll]  <Yahoo! China><3, 0, 7, 1012>
    [C:\WINNT\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
[PID: 1356][C:\program files\internet explorer\iexplore.exe]  <Microsoft Corporation><6.00.2800.1106>
[PID: 1344][C:\WINNT\system32\conime.exe]  <Microsoft Corporation><5.00.2195.6655>
[PID: 1444][C:\WINNT\system32\conime.exe]  <Microsoft Corporation><5.00.2195.6655>
[PID: 1448][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2800.1106>
    [C:\WINNT\system32\AdPutHelper.dll]  <chuangya><1.00>
    [C:\WINNT\system32\3721_5.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\WINNT\system32\37211.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yassist.dll]  <Yahoo! China><3, 0, 7, 1012>
    [C:\WINNT\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
    [E:\Thunder\ComDlls\XunLeiBHO_002.dll]  <Thunder Networking Technologies,LTD><5, 0, 0, 2>
    [E:\Thunder\ComDlls\ThunderAgent_003.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 10>
[PID: 1728][C:\Documents and Settings\zzy\My Documents\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINNT\system32\3721_5.dll]  <3721公司<推荐使用>><1.0.0.0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
最后编辑2006-09-08 23:54:36
分享到:
gototop
 

运行(双击)SRENG2,点“启动项目,服务,点“Win32服务应用程序”
勾选“隐藏微软服务”选中病毒服务Svchost Service For Windows ,,Windows Manger Control ,,Update Service For Windows ,选择“删除三个服务”用逗号已分开
点“设置”选择“否”


删除:
<C:\WINNT\svchost.exe
C:\WINNT\WindowMgr.exe
C:\WINNT\winupdate.exe

修复后请重新扫描上来
gototop
 

2006-09-08,23:49:41

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
    <run><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <NvCplDaemon><RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup>  [NVIDIA Corporation]
    <Synchronization Manager><mobsync.exe /logon>  [Microsoft Corporation]
    <inetinfo><C:\WINNT\system32\inetinfo.exe>  [Microsoft Corporation]
    <yassistse><"C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">  [Yahoo! China]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINNT\system32\Userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []

==================================
启动文件夹
服务
[Symantec Event Manager / ccEvtMgr]
  <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><N/A>
[Symantec Settings Manager / ccSetMgr]
  <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><N/A>
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Norton AntiVirus Auto-Protect Service / navapsvc]
  <"C:\Program Files\Norton AntiVirus\navapsvc.exe"><N/A>
[Norton AntiVirus Firewall Monitor Service / NPFMntor]
  <"C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe"><N/A>
[Norton Protection Center Service / NSCService]
  <"C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSrvce.exe"><N/A>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINNT\system32\nvsvc32.exe><NVIDIA Corporation>
[SAVScan / SAVScan]
  <"C:\Program Files\Norton AntiVirus\SAVScan.exe"><N/A>
[Symantec Network Drivers Service / SNDSrvc]
  <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><N/A>
[Symantec SPBBCSvc / SPBBCSvc]
  <"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><N/A>
[Symantec Core LC / Symantec Core LC]
  <"C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe"><N/A>

==================================
浏览器加载项
[AdPutHelper.AdHelper]
  {631EDC67-F035-49BA-B8BC-983B474E9BB4} <C:\WINNT\system32\AdPutHelper.dll, chuangya>
[]
  {8D139DD1-6BB5-4103-8C89-41560FF2E107} <C:\WINNT\system32\3721_5.dll, 3721公司<推荐使用>>
[]
  {E730189A-9973-4121-B046-AD1C161EC3AF} <C:\WINNT\system32\37211.dll, 3721公司<推荐使用>>
[&使用迅雷下载]
  <E:\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <E:\Thunder\Program\GetAllUrl.htm, N/A>

==================================
正在运行的进程
[PID: 136][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 164][\??\C:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\C:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6714>
[PID: 212][C:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.6700>
    [C:\WINNT\system32\dmserver.dll]  <VERITAS Software Corp.><2195.6605.297.3>
[PID: 224][C:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6695>
[PID: 388][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 436][C:\WINNT\system32\spoolsv.exe]  <Microsoft Corporation><5.00.2195.6659>
    [C:\WINNT\system32\DELS1LMK.DLL]  <><1.0.1.0>
[PID: 464][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 496][C:\WINNT\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.7184>
[PID: 540][C:\WINNT\system32\MSTask.exe]  <Microsoft Corporation><4.71.2195.6704>
[PID: 648][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
[PID: 668][C:\WINNT\system32\OpenSSL.exe]  <Microsoft Corporation><4.4.3760.1822>
[PID: 680][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 796][C:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3700.6690>
    [C:\WINNT\system32\3721_5.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\WINNT\system32\AdPutHelper.dll]  <chuangya><1.00>
    [C:\WINNT\system32\37211.dll]  <3721公司<推荐使用>><1.0.0.0>
[PID: 940][C:\WINNT\system32\inetinfo.exe]  <Microsoft Corporation><5.3.3680.1831>
    [C:\WINNT\system32\WinSSLCore.dll]  <N/A><N/A>
    [C:\WINNT\system32\FlashRun.dll]  <N/A><N/A>
[PID: 956][C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe]  <Yahoo! China><3, 0, 0, 1001>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAsMenu.dll]  <Yahoo! China><3, 0, 0, 1001>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAssecblk.dll]  <Yahoo! China><3, 0, 1, 1003>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yIEAngel.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yMenuInfo.dll]  <Yahoo! China><3, 0, 0, 1000>
[PID: 896][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2800.1106>
    [C:\WINNT\system32\AdPutHelper.dll]  <chuangya><1.00>
    [C:\WINNT\system32\3721_5.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\WINNT\system32\37211.dll]  <3721公司<推荐使用>><1.0.0.0>
    [C:\WINNT\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
[PID: 1092][C:\Documents and Settings\zzy\My Documents\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINNT\system32\3721_5.dll]  <3721公司<推荐使用>><1.0.0.0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 

请问还有什么异常


日志看不出问题
gototop
 

haha 哈哈。。。我也没再发现。。 发现了,我在上来。。 谢谢你了。。!支持!
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT