1 6兵人设备:高手们给看看这里有什么异常吗

来源:百度文库 编辑:高考问答 时间:2024/05/09 11:49:28
当前运行的进程:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\KAV6\KAVSvc.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\NTService.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\KAV6\KpopMon.EXE
C:\KAV6\KWatchUI.EXE
C:\WINDOWS\AdobeR.exe
C:\WINDOWS\system32\ctfmon.exe
C:\KAV6\Kavpfw.EXE
D:\Program Files\Netease\popo2004\popo.exe
C:\KAV6\KAVPlus.EXE
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Documents and Settings\jn\lsas.exe
C:\Program Files\MYIE2\MyIE.exe
d:\Program Files\Thunder Network\Thunder\Thunder.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\jn\LOCALS~1\Temp\Rar$EX00.968\HijackThis1991.exe

O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v14.dll
O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - C:\PROGRA~1\DESKAD~1\deskipn.dll (file missing)
O2 - BHO: ChajianHelper Class - {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} - C:\WINDOWS\system32\SYSREA~1.DLL
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - d:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll
O3 - IE工具栏增项: 金山毒霸 - {A9BE2902-C447-420A-BB7F-A5DE921E6138} - C:\KAV6\KAIEPlus.DLL
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - 启动项HKLM\\Run: [SiS Windows KeyHook] ; C:\WINDOWS\system32\keyhook.exe
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 启动项HKLM\\Run: [KAVRun] C:\KAV6\KAVRun.EXE

查查
C:\DOCUME~1\jn\LOCALS~1\Temp\Rar$EX00.968\HijackThis1991.exe
这个是什么?

HijackThis1991.exe is just a renamed filename for Hijackthis. If you\'re finding this you should know what it is ;)
HijackThis1991.exe is made by a Third Party but is most likely safe

病毒

我刚刚欲到了~~~
那是个病毒
告诉你我的方法
先关我的电脑服务项 就是PRINT SOOPLSR那个
然后在安全模式下
删了SYSTEM32下的1161和msin什么的还有SPOOLSV那个!~~
恢复RUN
就OK了~~~
不知道在问我56341931
当面说