昨天中毒,杀好后下了25个windows更新,今天一打开IE还好,只要输入网址回车就跳出很多新的IE窗口,系统也没卡掉,alt+F4全部关掉后就好了,不过只能用其他浏览器,大家给个解决办法!!
下面是我用hijackthis扫描的日志,谁帮忙看看啊 !
==========================================================================
日志文件: 趋势科技 HijackThis v2.0.0 (BETA)
保存时间: 17:08:38 nlg, on 2007-5-29
操作系统: Windows XP SP2 (WinNT 5.01.2600)
启动模式: 正常
正在运行的进程:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
D:\Kaspersky\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
D:\下载工具\pppoe.exe
D:\Kaspersky\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\wscntfy.exe
E:\Tencent\QQ\QQ.exe
E:\Tencent\QQ\TIMPlatform.exe
D:\浏览器\Maxthon\Max.exe
D:\下载工具\迅雷5\Program\Thunder5.exe
C:\Documents and Settings\sevenlg\桌面\ha_HiJackThis_v2\HiJackThis_v2.exe
O2 - BHO: DsHelper - {0D42E1BD-09DD-4873-A826-9C7E793EB7B6} - D:\下载工具\迅雷5\Components\ResWorker\DSIeHelper.dll (file missing)
O4 - HKLM\..\Run: [AVP] "D:\Kaspersky\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: pppoe.lnk = ?
O8 - 扩展右键菜单项: 使用迅雷下载 - D:\下载工具\迅雷5\Program\GetUrl.htm
O8 - 扩展右键菜单项: 使用迅雷下载全部链接 - D:\下载工具\迅雷5\Program\GetAllUrl.htm
O8 - 扩展右键菜单项: 收藏到QQ书签 -
http://shuqian.qq.com/favit.htmlO8 - 扩展右键菜单项: 添加到反广告黑名单 - D:\Kaspersky\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O9 - Extra button: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\下载工具\迅雷5\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\下载工具\迅雷5\Thunder.exe
O16 - DPF: {1DABF8D5-8430-4985-9B7F-A30E53D709B3} (InstallHelper Class) -
http://cache.tv.qq.com/qqlive_ocx/QQLiveInstaller.cabO16 - DPF: {1DE88635-1C72-401E-B23B-93FA86D30F3B} (SSReaderPlug) -
http://reg.ssreader.com/SSReaderPlug.cabO16 - DPF: {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} (PhotoDraw Class) -
http://qz-photo.qq.com/qzone_v4/QzoneMediaTools.cabO16 - DPF: {B4D9857D-8A55-4442-A577-6B3ED5D4E41B} (ScreenCapture Class) -
http://m37.mail.qq.com/activex/fmo.cabO16 - DPF: {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} (Tencent Safety Online Base Module) -
http://safe.qq.com/cgi-bin/tso/TSOBase.ocxO17 - HKLM\System\CCS\Services\Tcpip\..\{D02082A1-BBFE-411B-9F52-82D88AD6D31C}: NameServer = 220.187.24.2 172.16.25.21
O22 - SharedTaskScheduler: Browseui 预加载程序 - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: 组件类别缓存程序 - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: 卡巴斯基互联网安全套装6.0个人版 (AVP) - Kaspersky Lab - D:\Kaspersky\Kaspersky Internet Security 6.0\avp.exe
O23 - Service: PnpWMmng - Unknown owner - D:\木马专杀\流氓软件清理工具合集\SafeUninst\PnpWMmng.exe (file missing)
O23 - Service: wampapache - Unknown owner - d:\wamp\apache\Apache.exe
O23 - Service: wampmysqld - Unknown owner - d:\wamp\mysql\bin\mysqld-nt.exe
--
文件结束 - 3529 字节