發新話題
打印

求救!!!首頁變左6700.cn...附Hijack This報告

求救!!!首頁變左6700.cn...附Hijack This報告

format之後我部電腦問題:
1. 首頁set唔返
2. 15mins 自動重新開機
3. run唔到regedit
有邊個可以幫到我...
誠心誠意講聲「唔該」!!!

report如下

le of Trend Micro HijackThis v2.0.2
Scan saved at 0:29:18, on 26/1/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
d:\Program Files\BeatTrojan2008\BeatTrojanShields.exe
C:\WINDOWS\system32\wscntfy.exe
D:\Program Files\My Lockbox\flockbox.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\rundll32.exe
D:\Program Files\BeatTrojan2008\BeatTrojanMon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Integrator.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

TOP

BHO: Info cache - {296AB8C6-FB22-4D17-8834-064E2BA0A6F0} - C:\WINDOWS\Intel\baiduc.dll
O2 - BHO: ar12A401dll.dll - {5A041F13-A111-12A4-B0CF-F99818AA68A5} - C:\WINDOWS\system32\ar12A401dll.dll (file missing)
O2 - BHO: (no name) - {D38EC95C-0BEE-4404-A0E0-8FF9764F6D74} - C:\Program Files\Internet Explorer\JooNt08.Dzx
O2 - BHO: (no name) - {D94B22C9-7CA6-4FC7-BE64-52B968F1B84F} - C:\Program Files\Internet Explorer\JoooNt8.Jzx
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [flockbox] d:\Program Files\My Lockbox\flockbox.exe /a
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Startwd] rundll32.exe C:\WINDOWS\system32\wd0105.dll,Hook
O4 - HKLM\..\Run: [BeatTrojan] D:\Program Files\BeatTrojan2008\BeatTrojanMon.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [Alcmtr] anymie360.exe
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Foxy 下載 - res://D:\Program Files\Foxy\Foxy.exe/download.htm
O8 - Extra context menu item: Foxy 搜尋 - res://D:\Program Files\Foxy\Foxy.exe/search.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{652EDCD1-FFA3-49C2-8162-0B3CE4D87383}: NameServer = 210.0.255.144 210.0.128.241
O20 - AppInit_DLLs: C:\WINDOWS\fonts\CtmRes.dll johpdaba.dll,decofjkm.dll,lllfncfn.dll,lfgmochi.dll,jkilmbee.dll,nkahadfn.dll,lfkfilce.dll,fjjbeknp.dll,jkbiglll.dll,caidapag.dll,mgagjcdg.dll,dfmofdbp.dll,aemcebka.dll,blhbjpjf.dll
O21 - SSODL: AE6CEB4A - {AE6CEB4A-A881-439F-9710-6B89DE6B8768} - C:\WINDOWS\system32\aemcebka.dll
O21 - SSODL: DF68FDB9 - {DF68FDB9-C835-427D-8615-71A3473C73C5} - C:\WINDOWS\system32\dfmofdbp.dll
O21 - SSODL: 60A03CD0 - {60A03CD0-36EF-42CB-ACCE-FE0B39CD4519} - C:\WINDOWS\system32\mgagjcdg.dll
O21 - SSODL: CA2DA9A0 - {CA2DA9A0-6E72-442B-A295-0B42419F04E1} - C:\WINDOWS\system32\caidapag.dll
O21 - SSODL: 34B20555 - {34B20555-F222-4D64-9B32-97332624E85D} - C:\WINDOWS\system32\jkbiglll.dll
O21 - SSODL: B51B393F - {B51B393F-5E8E-425B-BBA8-8F4B14B1009C} - C:\WINDOWS\system32\blhbjpjf.dll
O21 - SSODL: BD9F3A7E - {BD9F3A7E-ABBC-4921-ABFA-16A8D088CDE2} - C:\WINDOWS\system32\bdpfjane.dll (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: 木馬清除大師即時監控 - Unknown owner - d:\Program Files\BeatTrojan2008\BeatTrojanSvc.exe
--
End of file - 4790 bytes

TOP

發新話題
最近訪問的版塊