杭州交通信息网三国志9联动性最强组合:哪位大侠救救急，我的电脑中毒了，这是我用hijackthis 扫描的
来源：百度文库 编辑：杭州交通信息网 时间：2024/04/28 15:17:04
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: FltSetUp Class - {1D49D58D-5C84-4B50-8359-D9809BEB2B32} - C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll
O4 - 启动项HKLM\\Run: [IMSCMig] ; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 启动项HKLM\\Run: [Synchronization Manager] ; mobsync.exe /logon O9 - 浏览器额外的按钮: (no name) - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - (no file)
O10 - Broken Internet access because of LSP provider 'c:\winnt\system32\cdnns.dll' missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.3.1_03) -
O16 - DPF: {CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA} (Java Plug-in 1.3.1_03) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B316F0D-093D-4E9E-B53F-BCCB61519D71}: NameServer = 202.194.133.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{2B316F0D-093D-4E9E-B53F-BCCB61519D71}: NameServer = 202.194.133.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{2B316F0D-093D-4E9E-B53F-BCCB61519D71}: NameServer = 202.194.133.1
O18 - Filter: text/html - {E7009873-0D40-45B1-8D59-5B9AE98C7D38} - C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: Microsoft NetWork FireWall Services - Unknown owner - NetServices.exe (file missing)
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: Windows Management NetWork Service Extensions - Unknown owner - NetManager.exe (file missing)
O2 - BHO: FltSetUp Class - {1D49D58D-5C84-4B50-8359-D9809BEB2B32} - C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll
O4 - 启动项HKLM\\Run: [IMSCMig] ; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 启动项HKLM\\Run: [Synchronization Manager] ; mobsync.exe /logon O9 - 浏览器额外的按钮: (no name) - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - (no file)
O10 - Broken Internet access because of LSP provider 'c:\winnt\system32\cdnns.dll' missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.3.1_03) -
O16 - DPF: {CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA} (Java Plug-in 1.3.1_03) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B316F0D-093D-4E9E-B53F-BCCB61519D71}: NameServer = 202.194.133.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{2B316F0D-093D-4E9E-B53F-BCCB61519D71}: NameServer = 202.194.133.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{2B316F0D-093D-4E9E-B53F-BCCB61519D71}: NameServer = 202.194.133.1
O18 - Filter: text/html - {E7009873-0D40-45B1-8D59-5B9AE98C7D38} - C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: Microsoft NetWork FireWall Services - Unknown owner - NetServices.exe (file missing)
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: Windows Management NetWork Service Extensions - Unknown owner - NetManager.exe (file missing)
日志没问题。
建议发 sreng 的日志 ，hijackthis 的经常遗漏重要项。将日志发到我的贴吧 http://post.baidu.com/f?kw=%B4%DE%D1%DC%C7%FE
如果发日志的时候被百度贴吧提示含有不恰当内容，请将日志分成几段来发。就可以了。我将第一时间内给你解答。保证解决你的问题。
如果嫌麻烦就算了。
>>> 关于什么是日志等请参考 http://post.baidu.com/f?kz=93382818
晕死我了
hijackthis主要是用来扫描劫持浏览器的恶意程序,对于某些电脑病毒或木马来说,还是要用杀毒软件结合木马扫描程序来查杀.从你上面的分析日志来看,你的电脑还算干净,没有找到有恶意程序,建议修复O4 - 启动项HKLM\\Run: [Synchronization Manager] ; mobsync.exe /logon O9 - 浏览器额外的按钮: (no name) - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - (no file)
如果怀疑中毒,建议用卡马斯基加EWIDO查杀.
将日志交给上面那位专家看看。