小弟的电脑是WIN2000系统,连续刷新桌面三次以上就会出现explorer.exe出错,实在不知是咋回事,请高手帮帮忙~以下是我扫出来的日志:
Logfile of HijackThis v1.99.1
Scan saved at 14:33:11, on 2006-7-1
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\SYSTEM32\DWRCS.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
F:\Program Files\Network Associates\Common Framework\FrameworkService.exe
F:\Program Files\Network Associates\VirusScan\Mcshield.exe
F:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe
F:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\SYSTEM32\DWRCST.exe
C:\WINNT\system32\internat.exe
F:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\Program Files\Rising\Rav\RavMon.exe
C:\Program Files\Rising\Rav\RavTimer.exe
C:\Program Files\Rising\Rav\RavTray.exe
F:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\WINNT\system32\conime.exe
C:\WINNT\system32\dllhost.exe
C:\WINNT\system32\dllhost.exe
D:\Program Files\Tencent\QQ\QQ.exe
D:\Program Files\Tencent\QQ\TIMPlatform.exe
C:\Program Files\Microsoft Office\Office\WINWORD.EXE
C:\Program Files\Dataway\PCB.net\mainproj.exe
C:\Program Files\Dataway\PCB.net\mktproj.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Maxthon\Max.exe
D:\Program Files\Tencent\QQ\QQ.exe
C:\Program Files\Dataway\PCB.net\ppcproj.exe
C:\WINNT\explorer.exe
C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\jsyang\LOCALS~1\Temp\Rar$EX00.188\HijackThis.exe
F2 - REG:system.ini: UserInit=userinit.exe,
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(＆R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: 珊瑚虫 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll (file missing)
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\KakaTool.dll
O4 - HKLM\..\Run: [internat.exe> internat.exe
O4 - HKLM\..\Run: [McAfeeUpdaterUI> ＂F:\Program Files\Network Associates\Common Framework\UpdaterUI.exe＂ /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service> ＂C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe＂
O4 - HKLM\..\Run: [RavMon> C:\Program Files\Rising\Rav\RavMon.exe -system
O4 - HKLM\..\Run: [RavTimer> C:\Program Files\Rising\Rav\RavTimer.exe
O4 - HKLM\..\Run: [RavTray> C:\Program Files\Rising\Rav\RavTray.exe
O4 - HKLM\..\Run: [ShStatEXE> ＂F:\Program Files\Network Associates\VirusScan\SHSTAT.EXE＂ /STANDALONE
O4 - HKLM\..\Run: [Synchronization Manager> mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe> ＂C:\Program Files\Common Files\Real\Update_OB\realsched.exe＂ -osboot
O4 - Startup: 腾讯qq珊瑚虫版.lnk = D:\Program Files\Tencent\QQ\CoralQQ.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: ＆使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: ＆使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用Web迅雷下载 - C:\Program Files\Thunder Network\WebThunder\GetUrl.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - F:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show ＆Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = jijin.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{D0B5F241-AEA5-40E4-AFB2-19EBAA6AC580}: NameServer = 202.96.128.68,202.96.134.133
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = jijin.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = jijin.com
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINNT\SYSTEM32\DWRCS.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee Framework 服务 (McAfeeFramework) - Network Associates, Inc. - F:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - F:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - F:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: RavService - Unknown owner - D:\Program Files\Rising\Rav\RavService.exe＂ /service (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe＂ -d -f ＂%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Unknown owner - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE (file missing)
O23 - Service: RsRavMon Service (RsRavMon) - Unknown owner - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
烦请阅,谢谢~
楼主机子里运行了太多的垃圾软件,如果用不到的话自己删了.
023项服务太多,不知道是不是装了什么大的软件还是怎么了..............
建议先清理垃圾软件,再清理启动项.最后看下023项里的服务用不着的就删了......
没心情太细看,等版主帮你解答
谢谢~
版主啊.你何时到来呀...
explorer.exe出错
大致有几种情况
1.系统资源不足。
2.软件冲突。
3.系统文件损坏。
4.病毒。
5.其他原因。
6.系统内核错误。
楼主的却是每一样都有可能，郁闷了！！
楼主的杀毒软件重装过？楼主的远程控制软件是自己装的还是给人“肉”了？还有就是楼上所说023项的服务太多了！
建议楼主修复以下~
F2 - REG:system.ini: UserInit=userinit.exe,
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = jijin.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = jijin.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = jijin.com
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
对一些软件进行卸载如那几个远程控制软件！再进行注册垃圾清理试试~~
呵,远程软件是我自己装的,我的机子是在运作ERP的,装的防毒软件件是McAfee软件,以前装的是瑞星的,之前IE有问题,沙了几个木马,还有灰鸽子...之后就出现了这种现象,,IE就是没问题了...现在就有这毛病...
杀软。。。二去一~~
版主,杀软二去一也不行哇...
再导出个日志来看看~~
Logfile of HijackThis v1.99.1
Scan saved at 10:55:42, on 2006-7-5
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\SYSTEM32\DWRCS.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
F:\Program Files\Network Associates\Common Framework\FrameworkService.exe
F:\Program Files\Network Associates\VirusScan\Mcshield.exe
F:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\SYSTEM32\DWRCST.exe
C:\WINNT\system32\internat.exe
F:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
F:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Tencent\QQ\QQ.exe
D:\Program Files\Tencent\QQ\TIMPlatform.exe
D:\Program Files\Tencent\QQ\QQ.exe
C:\Program Files\Foxmail\Foxmail.exe
C:\WINNT\system32\mmc.exe
C:\WINNT\system32\conime.exe
D:\Program Files\Tencent\QQ\QQ.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\ISQLW.EXE
C:\Program Files\Dataway\PCB.net\mainproj.exe
C:\Program Files\Dataway\PCB.net\mktproj.exe
C:\WINNT\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Telephone Billing System\Logon.exe
C:\Program Files\Thunder\Program\Thunder5.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\jsyang\LOCALS~1\Temp\Rar$EX00.766\HijackThis.exe
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program
Files\Thunder\ComDlls\XunLeiBHO_002.dll
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(＆R) - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: 珊瑚虫 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo
Bar\infofobar.dll (file missing)
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} -
C:\WINNT\system32\KakaTool.dll
O4 - HKLM\..\Run: [internat.exe> internat.exe
O4 - HKLM\..\Run: [McAfeeUpdaterUI> ＂F:\Program Files\Network Associates\Common
Framework\UpdaterUI.exe＂ /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service> ＂C:\Program Files\Common
Files\Network Associates\TalkBack\TBMon.exe＂
O4 - HKLM\..\Run: [ShStatEXE> ＂F:\Program Files\Network Associates\VirusScan\SHSTAT.EXE＂ /STANDALONE
O4 - HKLM\..\Run: [Synchronization Manager> mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe> ＂C:\Program Files\Common Files\Real\Update_OB\realsched.exe＂ -osboot
O4 - Startup: 腾讯qq珊瑚虫版.lnk = D:\Program Files\Tencent\QQ\CoralQQ.exe
O8 - Extra context menu item: ＆使用迅雷下载 - C:\Program Files\Thunder
Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: ＆使用迅雷下载全部链接 - C:\Program Files\Thunder
Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用Web迅雷下载 - C:\Program Files\Thunder
Network\WebThunder\GetUrl.htm
O8 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - F:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show ＆Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -
C:\WINNT\web\related.htm
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = jijin.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{D0B5F241-AEA5-40E4-AFB2-19EBAA6AC580}: NameServer =
202.96.128.68,202.96.134.133
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = jijin.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = jijin.com
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems
Shared\Service\Adobelmsvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. -
C:\WINNT\System32\dmadmin.exe
O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC -
C:\WINNT\SYSTEM32\DWRCS.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) -
Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee Framework 服务 (McAfeeFramework) - Network Associates, Inc. - F:\Program
Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - F:\Program
Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. -
F:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program
Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner -
%ProgramFiles%\WinPcap\rpcapd.exe＂ -d -f ＂%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. -
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe |
|
设为首页
加入收藏
联系我们
打印本文 
返回顶部 
加入收藏 
关闭窗口
