【讨论】我是中木马了还是被捆绑了？ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【讨论】我是中木马了还是被捆绑了？

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第四十七次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

【讨论】我是中木马了还是被捆绑了？

爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:	发表于： 2005-12-03 17:23 \| 显示全部短消息资料字号：小中大 1楼【讨论】我是中木马了还是被捆绑了？今天回到家打开电脑，用IE上网，不论我打开什么网页都显示为下图~~~请问我是电脑是怎么了？连IE那个“转到”按钮都不见了~~~ 附件: 文件名:5072602005123172347.JPG 下载次数:0 文件类型:image/pjpeg 文件大小: 上传时间:2005-12-3 17:23:47 描述: 2005-12-03 22:49:51
爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:	分享到：

爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:	发表于： 2005-12-03 17:32 \| 显示全部短消息资料字号：小中大 2楼好的，hijackthis我有~~~就来
爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:

爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:	发表于： 2005-12-03 17:33 \| 显示全部短消息资料字号：小中大 3楼 Logfile of HijackThis v1.99.1 Scan saved at 17:33:23, on 2005-12-3 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe F:\美化世界\主题桌面\Vista Inspirat\ObjectDock\ObjectDock.exe F:\美化世界\主题桌面\Vista Inspirat\YzToolbar\YzToolBar.exe F:\软件大集合\浏览器\GreenBrowserGB\GreenBrowser.exe C:\WINDOWS\system32\mspaint.exe F:\软件大集合\绿色软件\hijackthis_1991\HijackThis.exe O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v8.dll O2 - BHO: SohuDAIEHelper - {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} - (no file) O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - (no file) O2 - BHO: SafeIE Utility - {B5D4581D-ED6A-4905-A267-25BAF7BE79C1} - C:\WINDOWS\system32\safeie.dll O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [KAVPersonal50] "F:\软件大集合\杀毒防毒\Kaspersky\kav.exe" /minimize O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: Stardock ObjectDock.lnk = ? O4 - Startup: Y'z Toolbar.lnk = ? O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: &使用迅雷下载 - F:\软件大集合\下载工具\Thunder\geturl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - F:\软件大集合\下载工具\Thunder\getallurl.htm O8 - Extra context menu item: 使用WellGet下载(&W) - F:\软件大集合\下载工具\WellGet\nxcatch.htm O8 - Extra context menu item: 使用WellGet下载全部链接(&D) - F:\软件大集合\下载工具\WellGet\nxall.htm O8 - Extra context menu item: 导出到 Microsoft Excel(&x) - res://F:\软件大~1\常用工具\OFFICE~1\Office10\EXCEL.EXE/3000 O9 - Extra button: WellGet - {35980F6E-A258-4E50-953D-813BB8556899} - F:\软件大集合\下载工具\WellGet\WellGet.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{DBDC7F83-3377-464B-AC5E-47EC98A70F88}: NameServer = 202.96.128.86 202.96.128.166 O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: kavsvc - Kaspersky Lab - F:\软件大集合\杀毒防毒\Kaspersky\kavsvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:

爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:	发表于： 2005-12-03 17:46 \| 显示全部短消息资料字号：小中大 4楼斑竹救救我呀
爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:

爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:	发表于： 2005-12-03 17:51 \| 显示全部短消息资料字号：小中大 5楼还是不行呀~~~ Logfile of HijackThis v1.99.1 Scan saved at 17:50:25, on 2005-12-3 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe F:\美化世界\主题桌面\Vista Inspirat\ObjectDock\ObjectDock.exe F:\美化世界\主题桌面\Vista Inspirat\YzToolbar\YzToolBar.exe F:\软件大集合\浏览器\GreenBrowserGB\GreenBrowser.exe C:\WINDOWS\system32\mspaint.exe F:\软件大集合\绿色软件\hijackthis_1991\HijackThis.exe O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v8.dll O2 - BHO: SohuDAIEHelper - {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} - (no file) O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - (no file) O2 - BHO: SafeIE Utility - {B5D4581D-ED6A-4905-A267-25BAF7BE79C1} - C:\WINDOWS\system32\safeie.dll O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [KAVPersonal50] "F:\软件大集合\杀毒防毒\Kaspersky\kav.exe" /minimize O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: &使用迅雷下载 - F:\软件大集合\下载工具\Thunder\geturl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - F:\软件大集合\下载工具\Thunder\getallurl.htm O8 - Extra context menu item: 使用WellGet下载(&W) - F:\软件大集合\下载工具\WellGet\nxcatch.htm O8 - Extra context menu item: 使用WellGet下载全部链接(&D) - F:\软件大集合\下载工具\WellGet\nxall.htm O8 - Extra context menu item: 导出到 Microsoft Excel(&x) - res://F:\软件大~1\常用工具\OFFICE~1\Office10\EXCEL.EXE/3000 O9 - Extra button: WellGet - {35980F6E-A258-4E50-953D-813BB8556899} - F:\软件大集合\下载工具\WellGet\WellGet.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{DBDC7F83-3377-464B-AC5E-47EC98A70F88}: NameServer = 202.96.128.86 202.96.128.166 O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - Protocol: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ic32pp - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll O18 - Protocol: ipp - (no CLSID) - (no file) O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - Protocol: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\System32\msvidctl.dll O18 - Protocol: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - Protocol: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\WINDOWS\System32\inetcomm.dll O18 - Protocol: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll O18 - Protocol: msdaipp - (no CLSID) - (no file) O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\System32\mshtml.dll O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\System32\wiascr.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: kavsvc - Kaspersky Lab - F:\软件大集合\杀毒防毒\Kaspersky\kavsvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:

爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:	发表于： 2005-12-03 18:03 \| 显示全部短消息资料字号：小中大 6楼先去吃饭~~~回来弄~~~谢谢斑竹先
爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:

爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:	发表于： 2005-12-03 19:27 \| 显示全部短消息资料字号：小中大 7楼 # Copyright (c) 1993-1999 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host 127.0.0.1 localhost 是不是只要保留“127.0.0.1 localhost”就可以了？
爱琴烨初生襁褓狮帖子:14 注册: 2005-05-23 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT