|
2008-12-25, 09:37 PM
|
#1 |
|
註冊會員
|
求助 - 奇怪了.....控制台裡的資料夾選項怎麼不見了...
-------------------- 閱讀本主題的最佳解答 -------------------- 有好幾次電腦玩一玩.....控制台裡的資料夾選項怎麼不見了.....找都找不到....連登錄檔(regedit)都提示禁止使用...我是不是中毒了...我記得沒刪除什麼阿..... 有哪為大大可以救一下...我不想在重灌了.... |
|
送花文章: 22,
|
|
向 rc3d 送花的會員:
|
|
2008-12-25, 10:05 PM
|
#2 (permalink) |
|
長老會員
 
|
下面 CODE 語法內容，用記事本存檔，再用滑鼠連按二下匯入：(需重新開機，才會生效)
修復資料夾選項.reg 語法:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoFolderOptions"=- 啟用登錄檔_REGEDIT.reg 語法:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"=- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableRegistryTools"=- |
|
__________________ 我就是我 |
|
|
|
送花文章: 96,
|
|
2008-12-26, 09:30 AM
|
#5 (permalink) |
|
註冊會員
|
感謝以上網友回覆..問題還是存在...
本想用版主的Trend Micro™ HijackThis™ v2.02 貼上系統檔 想不到連要下戴此程式時..電腦既然自動重新開機.還連開5次.跑完xp後到桌面.有瞄到一個四方形顯示一個xx.速度太快了沒看清楚又重開.. 不信邪..在下戴一次..按'確定'又自動重開機.我是用ie內定的下戴器.. 這個問題...我遇到好幾次...記得沒亂刪檔案...每次重灌都是用網路不同版本的xp.三部五時就遇到一次..我已重灌到怕了...因為每次都要重新設定好久... |
|
|
送花文章: 22,
|
|
向 rc3d 送花的會員:
|
|
2008-12-26, 10:05 AM
|
#6 (permalink) | |
|
長老會員
|
引用:
你的LOG檔無法傳上來，很難判斷。 不然你用 Firefox 或 Google Chrome 瀏覽器下載試試看... Google Chrome 瀏覽器 下載： http://www.google.com/chrome Firefox 3 瀏覽器 下載： http://www.moztw.org/ 另一種匯入登錄碼的方法： 到命令提示字元([開始] -> [執行] -> CMD -> [確定]) 語法:
reg import "(PATH)修復資料夾選項.reg" reg import "(PATH)啟用登錄檔_REGEDIT.reg" 此帖於 2008-12-26 10:32 AM 被 GaMNiA 編輯. |
|
|
|
送花文章: 96,
|
|
2008-12-26, 11:05 AM
|
#7 (permalink) |
|
註冊會員
|
感謝各位回覆...
我每天幾乎要使用電腦9.10小時以上.爾且電腦重來不關機.應該不是硬體的問題.. 剛剛試了好多次下戴.也重開了好多次..裝了FlashGet後總算把檔案下戴下來.以下是.. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 上午 10:55:16, on 2008/12/26 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Raxco\PerfectDisk\PD91Agent.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3T1.EXE C:\Documents and Settings\RC3D\Local Settings\Application Data\winlogon.exe C:\Program Files\Win2\Mouse\Amoumain.exe C:\Program Files\WowUSBProtector\WowUSBSecurity.exe C:\Program Files\WowUSBProtector\WowUSBAutoUpdate.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\services.exe C:\WINDOWS\system32\conime.exe C:\Program Files\WowUSBProtector\WowUSBAutoUpdate.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\lsass.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe C:\WINDOWS\system32\ping.exe C:\Downloads\HiJackThis.exe F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\eksplorasi.exe" O1 - Hosts: <!doctype html public "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> O1 - Hosts: <html><head><title>Yahoo! - 503 Service Temporarily Unavailable</title><style> O1 - Hosts: /* nn4 hide */ O1 - Hosts: /*/*/ O1 - Hosts: body {font:small/1.2em arial,helvetica,clean,sans-serif;font:x-small;text-align:center;}table {font-size:inherit;font:x-small;} O1 - Hosts: html>body {font:83%/1.2em arial,helvetica,clean,sans-serif;}input {font-size:100%;vertical-align:middle;}p, form {margin:0;padding:0;} O1 - Hosts: p {padding-bottom:6px;margin-bottom:10px;}#doc {width:48.5em;margin:0 auto;border:1px solid #fff;text-align:center;}#ygma {text-align:right;margin-bottom:53px} O1 - Hosts: h1 {font-size:135%;text-align:center;margin:0 0 15px;}legend {display:none;}fieldset {border:0 solid #fff;padding:.8em 0 .8em 4.5em;} O1 - Hosts: form {position:relative;background:#eee;margin-bottom:15px;border:1px solid #ccc;border-width:1px 0;} O1 - Hosts: form span {position:absolute;left:70%;top:.8em;}form a {font:78%/1.2em arial;display:block;padding-left:.8em;white-space:nowrap;background: url(http://us.i1.yimg.com/us.yimg.com/i/s/bullet.gif) no-repeat left center;} O1 - Hosts: form .sep {display:none;}.more {text-align:center;}#ft {padding-top:10px;border-top:1px solid #999;}#ft p {text-align:center;font:78% arial;} O1 - Hosts: /* end nn4 hide */ O1 - Hosts: </style></head> O1 - Hosts: <body><div id="doc"> O1 - Hosts: <div id="ygma"><a href="http://us.rd.yahoo.com/503/*http://www.yahoo.com"><img O1 - Hosts: src=http://us.i1.yimg.com/us.yimg.com/i/yahoo.gif O1 - Hosts: width=147 height=31 border=0 alt="Yahoo!"></a><div><a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://www.yahoo.com">Yahoo!</a> O1 - Hosts: - <a href="http://us.rd.yahoo.com/503/*http://help.yahoo.com">Help</a></div></div> O1 - Hosts: <div id="bd"><h1>Sorry, Service Temporarily Unavailable.</h1> O1 - Hosts: The server is temporarily unable to service your O1 - Hosts: request due to maintenance downtime or capacity O1 - Hosts: problems. Please try again later. O1 - Hosts: <P>Additionally, a 503 Service Temporarily Unavailable O1 - Hosts: error was encountered while trying to use an ErrorDocument to handle the request. O1 - Hosts: <p>Please check the URL for proper spelling and capitalization. If O1 - Hosts: you're having trouble locating a destination on Yahoo!, try visiting the O1 - Hosts: <strong><a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://www.yahoo.com">Yahoo! home O1 - Hosts: page</a></strong> or look through a list of <strong><a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://docs.yahoo.com/docs/family/more/">Yahoo!'s O1 - Hosts: online services</a></strong>. Also, you may find what you're looking for O1 - Hosts: if you try searching below.</p> O1 - Hosts: <form name="s1" action="http://us.rd.yahoo.com/503/*-http://search.yahoo.com/search"><fieldset> O1 - Hosts: <legend><label for="s1p">Search the Web</label></legend> O1 - Hosts: <input type="text" size=30 name="p" id="s1p" title="enter search terms here"> O1 - Hosts: <input type="submit" value="Search"> O1 - Hosts: <span><a href="http://us.rd.yahoo.com/503/*http://search.yahoo.com/search/options?p=">advanced search</a> <span class=sep>|</span> <a href="http://us.rd.yahoo.com/503/*http://buzz.yahoo.com">most popular</a></span> O1 - Hosts: </fieldset></form> O1 - Hosts: <p class="more">Please try <strong><a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://help.yahoo.com">Yahoo! O1 - Hosts: Help Central</a></strong> if you need more assistance.</p> O1 - Hosts: </div><div id="ft"><p>Copyright © 2008 Yahoo! Inc. O1 - Hosts: All rights reserved. <a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://privacy.yahoo.com">Privacy O1 - Hosts: Policy</a> - <a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://docs.yahoo.com/info/terms/">Terms O1 - Hosts: of Service</a></p></div> O1 - Hosts: </div></body></html> O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: ALiBaBar_Helper - {CE439C63-384A-747A-A357-23D96B5D652B} - C:\PROGRA~1\ALiBaBar\ALiBaBar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: ALiBaBar - {0A1375E1-56C2-11D6-8E45-8933A0FB5235} - C:\PROGRA~1\ALiBaBar\ALiBaBar.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [RTHDCPL] ; RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [EPSON Stylus C45 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3T1.EXE /P23 "EPSON Stylus C45 Series" /O6 "USB001" /M "Stylus C45" O4 - HKLM\..\Run: [SunJavaUpdateSched] ; "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Super Rabbit SRRestore] ; C:\PROGRA~1\SUPERR~1\magicset\SRRest.exe /FIRST O4 - HKLM\..\Run: [WowUSBSecurity] "C:\Program Files\WowUSBProtector\start.bat" O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\Win2\Mouse\Amoumain.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\bronstab.exe" O4 - HKLM\..\Run: [] C:\Program Files\BT Helper\BT_Helper.exe -nosplash O4 - HKLM\..\Run: [Flashget] "C:\Program Files\FlashGet\FlashGet.exe" /min O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [Tok-Cirrhatus] "C:\Documents and Settings\RC3D\Local Settings\Application Data\smss.exe" O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] ctfmon.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] ctfmon.exe (User 'Default user') O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &使用 FlashGet 下載 - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &全部使用 FlashGet 下載 - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: 剪貼簿文字: 簡 > 繁 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/ClipToTrad O8 - Extra context menu item: 剪貼簿文字: 繁 > 簡 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/ClipToSim O8 - Extra context menu item: 網頁: [簡體] 顯示 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/PageToSim O8 - Extra context menu item: 網頁: [繁體] 顯示 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/PageToTrad O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O14 - IERESET.INF: START_PAGE_URL=tw.yahoo.com O15 - ESC Trusted Zone: http://*.update.microsoft.com O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_srl.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-03.sun.com/s/ESD5/JSC...ws-i586-jc.cab O16 - DPF: {C0F4471E-DF4F-4D02-9D2D-CF33B0724A1C} (TRUSTATMPOST Control) - https://webatm.post.gov.tw/postatm/TRUSTATMPOST5.cab O16 - DPF: {EA71C52E-75B1-4A60-BCB7-48E6410FDC26} (TBBICX Control) - https://eatm.tbb.com.tw/TBBICX.cab O16 - DPF: {F2D522AB-2980-4CDF-A776-2E403644F811} (Security Class) - https://ebank.landbank.com.tw/EATM/LandBankATX.cab O16 - DPF: {FECA83B5-8E6A-4E3E-B8FD-C2162EE722B5} (NetATM Class) - https://ebank.landbank.com.tw/EATM/TWCA.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{941C6F72-B3F5-4B31-AE1D-35234BC719CA}: NameServer = 168.95.192.1 168.95.1.1 O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: PD91Agent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PD91Agent.exe O23 - Service: PD91Engine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PD91Engine.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 11756 bytes 請各位大大檢視...謝謝 |
|
|
送花文章: 22,
|
|
向 rc3d 送花的會員:
|
|
2008-12-26, 11:35 AM
|
#8 (permalink) | |
|
長老會員
|
引用:
好像中不少惡意程式，而且 HOSTS 被改的亂七八遭... |
|
|
|
送花文章: 96,
|
|
2008-12-26, 02:16 PM
|
#9 (permalink) |
|
註冊會員
|
感謝網友的努力.....問題還是在...
不修護xp也是可以用..只是想要改副檔名.. 和想要用隱藏的資料夾很不方便... 最討厭的是重灌後3不五時就來一次..  以下是最近的資料.... 各位大大看看還有沒有救... Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 下午 02:05:24, on 2008/12/26 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Raxco\PerfectDisk\PD91Agent.exe C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3T1.EXE C:\Program Files\Win2\Mouse\Amoumain.exe C:\WINDOWS\system32\conime.exe C:\Program Files\WowUSBProtector\WowUSBSecurity.exe C:\Program Files\WowUSBProtector\WowUSBAutoUpdate.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\winlogon.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\services.exe C:\Program Files\WowUSBProtector\WowUSBAutoUpdate.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\lsass.exe C:\Program Files\office2003\Excel.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\ping.exe C:\BT\修護電腦\HiJackThis.exe F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\eksplorasi.exe" O1 - Hosts: <!doctype html public "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> O1 - Hosts: <html><head><title>Yahoo! - 503 Service Temporarily Unavailable</title><style> O1 - Hosts: /* nn4 hide */ O1 - Hosts: /*/*/ O1 - Hosts: body {font:small/1.2em arial,helvetica,clean,sans-serif;font:x-small;text-align:center;}table {font-size:inherit;font:x-small;} O1 - Hosts: html>body {font:83%/1.2em arial,helvetica,clean,sans-serif;}input {font-size:100%;vertical-align:middle;}p, form {margin:0;padding:0;} O1 - Hosts: p {padding-bottom:6px;margin-bottom:10px;}#doc {width:48.5em;margin:0 auto;border:1px solid #fff;text-align:center;}#ygma {text-align:right;margin-bottom:53px} O1 - Hosts: h1 {font-size:135%;text-align:center;margin:0 0 15px;}legend {display:none;}fieldset {border:0 solid #fff;padding:.8em 0 .8em 4.5em;} O1 - Hosts: form {position:relative;background:#eee;margin-bottom:15px;border:1px solid #ccc;border-width:1px 0;} O1 - Hosts: form span {position:absolute;left:70%;top:.8em;}form a {font:78%/1.2em arial;display:block;padding-left:.8em;white-space:nowrap;background: url(http://us.i1.yimg.com/us.yimg.com/i/s/bullet.gif) no-repeat left center;} O1 - Hosts: form .sep {display:none;}.more {text-align:center;}#ft {padding-top:10px;border-top:1px solid #999;}#ft p {text-align:center;font:78% arial;} O1 - Hosts: /* end nn4 hide */ O1 - Hosts: </style></head> O1 - Hosts: <body><div id="doc"> O1 - Hosts: <div id="ygma"><a href="http://us.rd.yahoo.com/503/*http://www.yahoo.com"><img O1 - Hosts: src=http://us.i1.yimg.com/us.yimg.com/i/yahoo.gif O1 - Hosts: width=147 height=31 border=0 alt="Yahoo!"></a><div><a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://www.yahoo.com">Yahoo!</a> O1 - Hosts: - <a href="http://us.rd.yahoo.com/503/*http://help.yahoo.com">Help</a></div></div> O1 - Hosts: <div id="bd"><h1>Sorry, Service Temporarily Unavailable.</h1> O1 - Hosts: The server is temporarily unable to service your O1 - Hosts: request due to maintenance downtime or capacity O1 - Hosts: problems. Please try again later. O1 - Hosts: <P>Additionally, a 503 Service Temporarily Unavailable O1 - Hosts: error was encountered while trying to use an ErrorDocument to handle the request. O1 - Hosts: <p>Please check the URL for proper spelling and capitalization. If O1 - Hosts: you're having trouble locating a destination on Yahoo!, try visiting the O1 - Hosts: <strong><a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://www.yahoo.com">Yahoo! home O1 - Hosts: page</a></strong> or look through a list of <strong><a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://docs.yahoo.com/docs/family/more/">Yahoo!'s O1 - Hosts: online services</a></strong>. Also, you may find what you're looking for O1 - Hosts: if you try searching below.</p> O1 - Hosts: <form name="s1" action="http://us.rd.yahoo.com/503/*-http://search.yahoo.com/search"><fieldset> O1 - Hosts: <legend><label for="s1p">Search the Web</label></legend> O1 - Hosts: <input type="text" size=30 name="p" id="s1p" title="enter search terms here"> O1 - Hosts: <input type="submit" value="Search"> O1 - Hosts: <span><a href="http://us.rd.yahoo.com/503/*http://search.yahoo.com/search/options?p=">advanced search</a> <span class=sep>|</span> <a href="http://us.rd.yahoo.com/503/*http://buzz.yahoo.com">most popular</a></span> O1 - Hosts: </fieldset></form> O1 - Hosts: <p class="more">Please try <strong><a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://help.yahoo.com">Yahoo! O1 - Hosts: Help Central</a></strong> if you need more assistance.</p> O1 - Hosts: </div><div id="ft"><p>Copyright © 2008 Yahoo! Inc. O1 - Hosts: All rights reserved. <a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://privacy.yahoo.com">Privacy O1 - Hosts: Policy</a> - <a O1 - Hosts: href="http://us.rd.yahoo.com/503/*http://docs.yahoo.com/info/terms/">Terms O1 - Hosts: of Service</a></p></div> O1 - Hosts: </div></body></html> O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: ALiBaBar_Helper - {CE439C63-384A-747A-A357-23D96B5D652B} - C:\PROGRA~1\ALiBaBar\ALiBaBar.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O3 - Toolbar: ALiBaBar - {0A1375E1-56C2-11D6-8E45-8933A0FB5235} - C:\PROGRA~1\ALiBaBar\ALiBaBar.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [RTHDCPL] ; RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [EPSON Stylus C45 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3T1.EXE /P23 "EPSON Stylus C45 Series" /O6 "USB001" /M "Stylus C45" O4 - HKLM\..\Run: [SunJavaUpdateSched] ; "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Super Rabbit SRRestore] ; C:\PROGRA~1\SUPERR~1\magicset\SRRest.exe /FIRST O4 - HKLM\..\Run: [WowUSBSecurity] "C:\Program Files\WowUSBProtector\start.bat" O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\Win2\Mouse\Amoumain.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [] C:\Program Files\BT Helper\BT_Helper.exe -nosplash O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\bronstab.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Tok-Cirrhatus] "C:\Documents and Settings\RC3D\Local Settings\Application Data\smss.exe" O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] ctfmon.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] ctfmon.exe (User 'Default user') O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &使用 FlashGet 下載 - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &全部使用 FlashGet 下載 - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: 剪貼簿文字: 簡 > 繁 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/ClipToTrad O8 - Extra context menu item: 剪貼簿文字: 繁 > 簡 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/ClipToSim O8 - Extra context menu item: 網頁: [簡體] 顯示 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/PageToSim O8 - Extra context menu item: 網頁: [繁體] 顯示 - res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/PageToTrad O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O14 - IERESET.INF: START_PAGE_URL=tw.yahoo.com O15 - ESC Trusted Zone: http://*.update.microsoft.com O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_srl.cab O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-03.sun.com/s/ESD5/JSC...ws-i586-jc.cab O16 - DPF: {C0F4471E-DF4F-4D02-9D2D-CF33B0724A1C} (TRUSTATMPOST Control) - https://webatm.post.gov.tw/postatm/TRUSTATMPOST5.cab O16 - DPF: {EA71C52E-75B1-4A60-BCB7-48E6410FDC26} (TBBICX Control) - https://eatm.tbb.com.tw/TBBICX.cab O16 - DPF: {F2D522AB-2980-4CDF-A776-2E403644F811} (Security Class) - https://ebank.landbank.com.tw/EATM/LandBankATX.cab O16 - DPF: {FECA83B5-8E6A-4E3E-B8FD-C2162EE722B5} (NetATM Class) - https://ebank.landbank.com.tw/EATM/TWCA.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{941C6F72-B3F5-4B31-AE1D-35234BC719CA}: NameServer = 168.95.192.1 168.95.1.1 O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: PD91Agent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PD91Agent.exe O23 - Service: PD91Engine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PD91Engine.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- End of file - 11571 bytes |
|
|
送花文章: 22,
|
|
向 rc3d 送花的會員:
|
|
2008-12-26, 07:06 PM
|
#10 (permalink) |
|
長老會員
|
請到下面網址下載 WsysCheck 來修復： http://sites.google.com/site/gwebhd168/files/WsysCheck16833.rar (1).執行 WsysCheck.exe (2).勾選你要結束的處理程序，請注意「映像路徑」要正確 (語法裡面才是惡意程式的路徑)，圖片內是我舉例隨便勾選的 (3).反白標示選取，按住 [Ctrl] 不放，再用滑鼠左鍵選取 (4).選取好後，再按滑鼠右鍵 -> 選擇 [結束處理序並刪除檔案] 語法:
C:\Documents and Settings\RC3D\Local Settings\Application Data\winlogon.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\services.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\lsass.exe  (5).點選 [安全檢查] -> [重啟刪除檔案] -> 按 [加入待刪檔案] -> 選擇要待刪的檔案 (6).選擇完畢後，按 [執行重啟刪除] 語法:
C:\Documents and Settings\RC3D\Local Settings\Application Data\winlogon.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\services.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\lsass.exe C:\WINDOWS\eksplorasi.exe C:\WINDOWS\ShellNew\bronstab.exe C:\Documents and Settings\RC3D\Local Settings\Application Data\smss.exe  (7).修復完畢後，用記事本編輯 C:\WINDOWS\system32\drivers\etc\HOSTS 這個檔案， 將裡面內容全部清空，只留下面那一行即可： 127.0.0.1 localhost (8).再用 HijackThis 清除殘餘的文件。 語法:
F2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\eksplorasi.exe" O4 - HKLM\..\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\bronstab.exe" O4 - HKCU\..\Run: [Tok-Cirrhatus] "C:\Documents and Settings\RC3D\Local Settings\Application Data\smss.exe" O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 http://forum.slime.com.tw/thread240975.html#post2076579 不過...我是有點懷疑你其他的磁碟機或USB隨身碟可能有殘餘病毒，才會不斷地重複感染， 如果那些病毒不清除的話，永遠沒完沒了的解毒... |
|
|
送花文章: 96,
|
|
2008-12-26, 10:34 PM
|
#13 (permalink) |
|
長老會員
|
免費的話：Avast AntiVirus Home 繁體中文版，Avira AntiVir 小紅傘(英文版)
要花錢的防毒：諾頓2009，KAV/KIS 卡巴斯基 2009，BitDefender 2009 我都是用小紅傘，不過你中的病毒不少，我怕你安裝小紅傘後會一直叫個不停(報毒聲音)， 而且會卡住殺不掉，因為你的病毒類似母子型的，會互相保護， 殺了這隻，另一隻會立即生一隻出來，來取代原本被殺掉那隻的位置。 你先用上面的方法先清掉那些主要發作中的病毒，再安裝防毒軟體，然後再做完整掃描就好~ 反正都已經中招了，先裝防毒和後裝防毒都差不多啦... |
|
|
送花文章: 96,
|
 |
|
|
相似的主題
|
||||
| 主題 | 主題作者 | 討論區 | 回覆 | 最後發表 |
| win2000的共用資料夾選項不見了，怎麼辦？ | sdanli | 軟體應用問題討論區 | 2 | 2005-11-27 12:45 AM |
| 資料夾選項不見了>"< | fantasy1943 | 一般電腦疑難討論區 | 3 | 2004-01-18 11:03 PM |
平板模式
