各位版主和网络高手们你们好,我这有问题向你们请教.我的是笔记本电脑,可最近总往外弹出恶意网页,而且每次弹出都是一个页面两个窗口.下面我把这些恶意网址发给你们:
http://www.firefox-box.com/(火狐Firefox)
http://www.chn139.com/index.htm(淘金网)
http://www.a9000.com/pring/website/y/9885.php?a=18&b=2054&c=1240&d=1477&e=85&g=&k=null&exs_1=&x=&d=1477&c=1240&g=&a=18&e=85&n2= (玲声下载)
http://www.17joy.net/mkt/mov/60331/index.html?CID=202934&BID=5951
(电影)
http://www.yourfreewebspace.com/404.shtml(不知名)
http://digg.ikankan.com/(不知名)
下面还附有HijackThis_zww汉化版扫描日志扫描出来的结果:请帮忙~!
HijackThis_zww汉化版扫描日志 V1.99.1
保存于 14:06:51, 日期 2006-8-25
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\KAV2006\KWatch.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe
c:\windows\system32\SVCH0ST.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\KAV2006\KPFW32.EXE
C:\KAV2006\KPfwSvc.EXE
C:\WINDOWS\lm\svchsot.exe
c:\windows\system32\SP00LSV.EXE
C:\WINDOWS\system32\slmdmsr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\QQ2005\QQ.exe
C:\Program Files\QQ2005\TIMPlatform.exe
C:\Program Files\TT\TTraveler.exe
D:\HijackThis\HijackThis1991zww.exe
R3 - URLSearchHook: (no name) - {02496EBD-8455-48db-B3C7-5DAC97D9F5A7}
- (no file)
R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} -
C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: MyIEHelper Class - {16B770A0-0E87-4278-B748-2460D64A8386} -
(no file)
O2 - BHO: Yahoo!Photo - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} -
C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: AntiFish Class - {38928D50-8A48-44C2-945F-D2F23F771410} -
C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} -
C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: DragSearch BHO - {62EED7C6-9F02-42f9-B634-98E2899E147B} -
C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} -
C:\Progra~1\Baidu\bar\BaiDuBar.dll
O2 - BHO: (no name) - {77FEF28E-EB96-44FF-B511-3185DEA48697}? - (no
file)
O2 - BHO: 超级兔子上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} -
C:\PROGRA~1\SUPERR~1\IEG\HAOKAN~2.DLL (file missing)
O3 - IE工具栏增项: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-
70B13FCA8E86} - C:\Progra~1\Baidu\bar\BaiDuBar.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-
90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} -
C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O3 - IE工具栏增项: 超级兔子上网精灵 - {FEDF637B-F631-4583-A210-
33CC828D42DB} - C:\PROGRA~1\SUPERR~1\IEG\HAOKAN~2.DLL (file missing)
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - 启动项HKLM\\Run: [yassistse] "C:\PROGRA~1\Yahoo!
\Assistant\yassistse.exe"
O4 - 启动项HKLM\\RunOnce: [ANetFox ADClean] "C:\PROGRA~1\WINDOW~4
\clean.exe" /autokill:132
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [KavPFW] "C:\KAV2006\KPFW32.EXE"
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\QQ2005\QQ.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program
Files\QQ2005\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program
Files\QQ2005\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\QQ2005
\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program
Files\QQ2005\SendMMS.htm
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O16 - DPF: {C14D003A-DA41-4FEE-8204-62A94EAA29D1} (GLWebAvt Control) -
http://bbs.ourgame.com/image/GLWebAvt.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F0DB7C5-5316-4837-B7F1-
A88D0437C4DF}: NameServer = 202.102.152.3 202.102.154.3
O23 - NT 服务: Distributed Link Tracking Clienter (HService2) - Unknown
owner - c:\windows\system32\SVCH0ST.EXE
O23 - NT 服务: Kingsoft Personal Firewall Service (KPfwSvc) - Kingsoft
Corporation - C:\KAV2006\KPfwSvc.EXE
O23 - NT 服务: Kingsoft Antivirus KWatch Service (KWatchSvc) - Kingsoft
Corporation - C:\KAV2006\KWatch.EXE
O23 - NT 服务: Security Accounts Manager huahua101 (Servicehuahua101) -
Unknown owner - C:\WINDOWS\lm\svchsot.exe
O23 - NT 服务: Windows User Mode Driver Frameworkre (Serviceikankan4) -
Unknown owner - c:\windows\system32\SP00LSV.EXE
O23 - NT 服务: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32
\slmdmsr.exe
如果这个扫描结果看不出来还需要什么请加上我的QQ66453485告诉我.谢谢了.
