1   1  /  1  页   跳转

自动有网页弹出

自动有网页弹出

大概10-20分钟,就会自动弹出网页(全是中文网页,一些小网站),请高手帮忙看看

Logfile of HijackThis v1.99.1
Scan saved at 2:19:48, on 2006-8-27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\KV2004\KVMonXP.kxp
C:\KV2004\KVSrvXp.exe
C:\WINDOWS\system32\ctfmon.exe
c:\windows\system32\kav.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\system32\DllHost.exe
D:\Program Files\Super Rabbit\HappyPlayer\srmpc.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\HijackThis.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: BrowseHelper Class - {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} - C:\KV2004\KVShell_1.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: 江民杀毒工具栏 - {B5A34A93-D538-43A7-8371-864CB6148D12} - C:\KV2004\KVShell_1.dll
O4 - HKLM\..\Run: [KvMonXP] C:\KV2004\KVMonXP.kxp /auto
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [Super Rabbit Winspeed] "D:\Program Files\MagicSet\winspeed.exe" /autokill:12
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: 使用网际快车下载 - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\Program Files\FlashGet\jc_all.htm
O10 - Unknown file in Winsock LSP: c:\windows\system32\kvwspxp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\kvwspxp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\kvwspxp.dll
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0B33E47F-F936-4C80-B3C4-59CE256B9ED4}: NameServer = 202.96.104.17 202.96.104.15
O17 - HKLM\System\CCS\Services\Tcpip\..\{FDB01C28-7AF2-4D22-8CE7-BD3C255F899D}: NameServer = 202.96.104.17,202.96.104.15
O17 - HKLM\System\CS1\Services\Tcpip\..\{0B33E47F-F936-4C80-B3C4-59CE256B9ED4}: NameServer = 202.96.104.17 202.96.104.15
O23 - Service: KVSrvXp - JiangMin Ltd. - C:\KV2004\KVSrvXp.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Network Location Awareness (NAL) (ServiceNAL) - Unknown owner - c:\windows\system32\kav.exe

最后编辑2006-08-27 09:44:43.140000000
分享到:
gototop
 

控制面板--管理工具--服务--查找 Remote Packet Capture Protocol v.0 禁止这个服务

运行Hijackthis,把下面的选中打上钩,修复
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
gototop
 

和你一样.
gototop
 

引用:
【gjdhyl12的贴子】和你一样.
………………




理论上一样,实际不一样
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT