齐鲁交通发展集团客服:我电脑XP 开机后到滚动条那响几声 到欢迎那又响几声 很乱的响 高手进来

来源:百度文库 编辑:高校问答 时间:2024/05/11 04:10:12
我电脑是XP2 不象BIOS报警 响完能进系统 一切正常 第一次响硬盘灯闪
昨天不知道运行什么软件 输入法都变了 请高手帮忙 附日志
Logfile of HijackThis v1.99.0
Scan saved at 15:38:15, on 2006-7-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5450.0004)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HelloNet\HNMainUI.exe
D:\GreenBrowserGB\GreenBrowser.exe
C:\WINDOWS\system32\svchost.exe
F:\跑跑咔叮车\KartRider.exe
C:\WINDOWS\system32\NOTEPAD.EXE
G:\进程\HijackThis\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - (no file)
O2 - BHO: MSHlper Class - {721E6521-4CAD-4A8D-A7F1-4E230B31EF19} - C:\WINDOWS\system32\mshlp.dll (file missing)
O3 - Toolbar: (no name) - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - (no file)
O3 - Toolbar: (no name) - {F869BB38-FFEF-4589-B986-610B7AD0ADA2} - (no file)
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [Outpost Firewall] C:\Program Files\Agnitum\Outpost Firewall\outpost.exe /waitservice
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: 使用 IDM 下载 - D:\IDM\IEExt.htm
O8 - Extra context menu item: 使用 IDM 下载所有链接 - D:\IDM\IEGetAll.htm
O10 - Broken Internet access because of LSP provider 'w2pxdrv.dll' missing
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O17 - HKLM\System\CCS\Services\Tcpip\..\{340035F0-17B4-453B-9027-AEA436EFD35F}: NameServer = 202.102.128.68 202.102.134.68
O23 - Service: Kaspersky Anti-Virus 6.0 - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Outpost Firewall Service - Agnitum Ltd. - C:\Program Files\Agnitum\Outpost Firewall\outpost.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

先找出可疑的进程.不懂怎么找你一个一个进程的在电脑上搜索然后属性查看把文件在安全模式下删除 然后还原 开始 所有程序 附件 系统工具 还原 OK 前提是你建有还原点.

Explorer.EXE 被插入了进程