.Wxk580
这是日志，高手帮忙看看
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe
C:\Program Files\CNNIC\Cdn\cdnup.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\NetCounter\NetCount.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE dngz.net版权所有
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
E:\Downloads\新建文件夹\HijackThis汉华版\HijackThis1991zww.exe
R3 - 默认的URLSearchHook丢失。用HijackThis修复
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\All
Users\Application Data\Microsoft\Crypto\eebjm.exe
O2 - BHO: Query Class - {01C2F1E8-5C69-4B5C-B052-26941B6C23A6} - C:\WINDOWS\system32\iequery.dll
O2 - BHO: AdPopup - {11F09AFD-75AD-4E51-AB43-E09E9351CE16} - C:\Program Files\Common
Files\CPUSH\cpush0.dll
O2 - BHO: FltSetUp Class - {1D49D58D-5C84-4B50-8359-D9809BEB2B32} - C:\Program Files\Internet
Explorer\Connection Wizard\icwuti1.dll
O2 - BHO: CAISHOW TOOLBAR - {3AF40CB8-B3BA-4E2D-8968-4BF8DB172997} - C:\Program Files\CaiShow
Tech\CaiShow\BrowerHelper.dll
O2 - BHO: 网络加速 - {5673A7C0-95CC-4646-BB07-3BD71234CEF9} - C:\WINDOWS\system32\wuwebex.dll
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O2 - BHO: ActiveBHO Class - {63C55A7F-6E29-8D4F-5C76-4F850F28D13A} - C:\Progra~1
\DoDoorRSSFinder\ActiveBandObject.dll
,
O2 - BHO: WAB Importer/Exporter - {AA158CA5-93B4-4cd4-8D8C-BB6F9F515213} - C:\WINDOWS\System32\wabimp.dll
O2 - BHO: (no name) - {D424FE4E-CAF9-4fdd-BC5F-E6E6B91D53BF} - (no file)
O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll
O3 - IE工具栏增项: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - IE工具栏增项: 捜狗直通车 - {DBBB7978-AF21-4EF4-9AD1-B2F4BC75696C} - C:\PROGRA~1\p4p\TB13056.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ＂C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE＂ /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] ＂C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE＂ /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] ＂C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE＂ /IMEName
O4 - 启动项HKLM\\Run: [TkBellExe] ＂C:\Program Files\Common Files\Real\Update_OB\realsched.exe＂ -osboot
O4 - 启动项HKLM\\Run: [MSPY2002] ＂C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe＂ /SYNC
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [NvCplDaemon] ＂RUNDLL32.EXE＂ C:\WINDOWS\system32\NvCpl.dll,NvStartup 本文来自(www.dngz.net)
O4 - 启动项HKLM\\Run: [nwiz] ＂nwiz.exe＂ /install
O4 - 启动项HKLM\\Run: [NvMediaCenter] ＂RUNDLL32.EXE＂ C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [MSService_v1.0] C:\WINDOWS\system\realsched.exe
O4 - 启动项HKLM\\Run: [vptray] ＂C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe＂
O4 - 启动项HKLM\\Run: [CdnCtr] ＂C:\Program Files\CNNIC\Cdn\cdnup.exe＂
O4 - 启动项HKLM\\Run: [RavAV] C:\WINDOWS\AdobeR.exe
O4 - 启动项HKLM\\Run: [SpySweeper] ＂C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe＂ /startintray
O4 - 启动项HKLM\\Run: [renewup] C:\Program Files\CNNIC\Cdn\cdnrenew.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] ＂C:\Program Files\MSN Messenger\MsnMsgr.Exe＂ /background
O4 - HKCU\..\Run: [MyShares] c:\program Files\忆多多\MyShares.exe /tray
O4 - HKCU\..\Run: [NetCounter] ＂c:\Program Files\NetCounter\NetCount.exe＂
O4 - HKCU\..\Run: [caishowmanage] ＂C:\Program Files\CaiShow Tech\CaiShow\UpdateManager.EXE＂
O4 - Startup: 腾讯QQ.lnk = ? .
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - F:\新建文件夹\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11
\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - F:\新建文件夹\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - F:\新建文件夹\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - F:\新建文件夹\SendMMS.htm
O8 - IE右键菜单中的新增项目: 用炫彩图铃发送该图片 - C:\Program Files\CaiShow Tech\CaiShow\SendMMS.htm
O8 - IE右键菜单中的新增项目: 访问通用网址 - C:\Program Files\CNNIC\Cdn\cnnic.htm
O9 - 浏览器额外的按钮: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1
\CNNIC\Cdn\cdnforie.dll
O9 - 浏览器额外的“工具”菜单项: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1
\CNNIC\Cdn\cdnforie.dll
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\新建文件夹\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\新建文件夹\QQ.EXE
O9 - 浏览器额外的按钮: 5chaa - {D6E814A0-E0C5-11d4-8D29-0050BA6940E4} - http://www.5chaa.com (file
,
missing)
O9 - 浏览器额外的“工具”菜单项: 5chaa - {D6E814A0-E0C5-11d4-8D29-0050BA6940E4} - http://www.5chaa.com
(file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - F:\新建文件夹\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - F:\新建文件
夹\QQIEHelper.dll
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\cdnns.dll
O11 - Options group: [CDNCLIENT] 中文上网
O17 - HKLM\System\CCS\Services\Tcpip\..\{E59116D6-207D-44EA-9E3F-DED9D4F3FA45}: NameServer =
192.168.0.1,202.118.80.2
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - ＂C:\PROGRA~1\MSNMES~1\msgrapp.dll＂
(file missing)
O18 - Filter: text/html - {E7009873-0D40-45B1-8D59-5B9AE98C7D38} - C:\Program Files\Internet (www.dngz.net)
Explorer\Connection Wizard\icwuti1.dll
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - NT 服务: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - NT 服务: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1
\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
\nvsvc32.exe
O23 - NT 服务: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. -
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
你的工具条项目过多（恶意插件建议用恶意软件清理大师清理，本站里就有）有而已插件就存在病毒 建议全盘杀２变毒（安全模式） 还有就是网络加速 搜狗直通车 感觉不是什么好东西能卸就卸了把
先斩后奏哦哦
我也遇过, 应该是＂病毒＂
学习了，谢谢分享
学习了，谢谢分享
遇到相同问题,正打算重装呢.
不光是网页,我的右下角还弹小网页呢~~郁闷,先用各位高手的方法试试:)
哇...几天没来.怎么全变样了??
多谢爱丽舍帮忙哦！
用超级兔子，先升级再K更爽哦！试试吧！
C:\Program Files\Internet Explorer\IEXPLORE.EXE www.dngz.net
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
连续的三个IEXPLORE。EXE是病毒吗?
谢稿分享了,