图1 Global.asax是一个oa的配置文件
图2 点击打开方式出现的错误提示
图3 新建一个记事本 打开——》找到Global.asax这个文件 就可以顺利打开
图4 下次在打开这个文档是 只需要鼠标右键 -》打开方式-》 记事本 顺利打开文档
以前没有这麻烦 不知道是不是病毒 或是 我删了什么文件 请高手指点
HijackThis_815汉化版扫描日志 V1.99.1
保存于 9:46:57, 日期 2006-10-13
操作系统： Windows 2000 SP4 (WinNT 5.00.2195)
浏览器： Internet Explorer v6.00 (6.00.2600.0000)
当前运行的进程：
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Kingview\HistorySvr.exe
C:\PROGRA~1\MICROS~4\MSSQL\binn\sqlservr.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\WINNT\Explorer.EXE
c:\program files\rising\rfw\RfwMain.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\WINNT\SOUNDMAN.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\Microsoft.NET\Framework\v1.0.3705\aspnet_wp.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Rising\Rav\RsAgent.exe
C:\WINNT\msagent\AgentSvr.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\Program Files\Rising\Rav\RAVMON.EXE
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINNT\System32\mspaint.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\cy1\LOCALS~1\Temp\Rar$EX00.328\HijackThis1991zww.exe
F2 - REG:system.ini: UserInit=C:\WINNT\system32\Userinit.exe
O1 - Hosts: 221.130.176.199 www.chenshijituan.com
O1 - Hosts: 222.208.183.246 www.realwinxp.com
O1 - Hosts: 61.152.90.31 www.chenshijituan.com
O2 - BHO: IEHlprObj Class - {242ED84B-61BE-476c-BEDF-C3F11A7B0CB3} -
C:\WINNT\Downloaded Program Files\IEHelper.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - (no file)
O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [NvMediaCenter] RUNDLL32.EXE
C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [ISUSScheduler] "C:\Program Files\Common
Files\InstallShield\UpdateService\issch.exe" -start
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe"
-Startup
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: 卓越 - {8DE0FCD4-5EB5-11D3-AD25-00002100131B} -
C:\POWERW~1\IEPlugin.dll
O9 - 浏览器额外的按钮: 词霸 - {9A687CA6-D585-4947-9ED9-BE96071F5CD9} -
C:\POWERW~1\XDictExB.dll
O9 - 浏览器额外的按钮: 金山词霸 - {C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} -
C:\POWERW~1\IEPlugin.dll
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -
C:\WINNT\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links -
{c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O10 - 未知的文件在 Winsock LSP: c:\winnt\downloaded program
files\conflict.1\proxyie.dll
O10 - 未知的文件在 Winsock LSP: c:\winnt\downloaded program
files\conflict.1\proxyie.dll
O10 - 未知的文件在 Winsock LSP: c:\winnt\downloaded program
files\conflict.1\proxyie.dll
O10 - 未知的文件在 Winsock LSP: c:\winnt\downloaded program
files\conflict.1\proxyie.dll
O10 - 未知的文件在 Winsock LSP: c:\winnt\downloaded program
files\conflict.1\proxyie.dll
O16 - DPF: {250587D2-6704-4479-8718-3C7E163BCD75} (CSClientManager Class) -
https://vpn.bjchy.gov.cn/images/CSClientManagerPrj.dll
O16 - DPF: {53EC2F48-968E-4A42-B99B-9F657147919D} (CSProxy Class) -
https://vpn.bjchy.gov.cn/images/ProxyIE.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.
cab?1150852238765
O18 - 列举现有的协议: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} -
C:\POWERW~1\XDictExB.dll
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS
Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: HistorySvr - Unknown owner - C:\Program
Files\Kingview\HistorySvr.exe
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -
C:\WINNT\System32\nvsvc32.exe
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology
Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising
Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising
Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd.
- C:\Program Files\Rising\Rav\Ravmond.exe
