求助 - IE開新索引被綁架了

[aceryang]

--------------------
閱讀本主題的最佳解答
--------------------


不知何時起IE開啟新索引時都會自動跑到一個〝329網址導航〞的網站，如下截圖：



求助各位先進要如何才能使它不出現，謝謝指教！

[ancle]

作者: aceryang

不知何時起IE開啟新索引時都會自動跑到一個〝329網址導航〞的網站，如下截圖：



求助各位先進要如何才能使它不出現，謝謝指教！

以下文章有包含你說的網址
http://tw.myblog.yahoo.com/pia-ddovw...mid=48115&sc=1
以下則是最新新聞消息
http://tw.news.yahoo.com/article/url.../78/2a3og.html

[aceryang]

作者: ancle

以下文章有包含你說的網址
http://tw.myblog.yahoo.com/pia-ddovw...mid=48115&sc=1
以下則是最新新聞消息
http://tw.news.yahoo.com/article/url.../78/2a3og.html

可是那網站沒有網址啊...

怎麼去找啊？

[a471]

作者: aceryang

可是那網站沒有網址啊...

怎麼去找啊？

他說你中了木馬，有解決方案阿....

你的3932導航網畫面就是中毒後的結果

[丹楓]

版大：
建議先用 HijackThis 產生報告，讓大家幫您解決看看。
http://forum.slime.com.tw/thread208952.html

[aceryang]

作者: 丹楓

版大：
建議先用 HijackThis 產生報告，讓大家幫您解決看看。
http://forum.slime.com.tw/thread208952.html

首先出現這個視窗：



點確定後出現一大堆看不懂的，勞請各位幫忙！內容如下：

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 下午 11:11:46, on 2010/7/30
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerHIDReceiver.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp2std.exe
C:\Program Files\WowUSBProtector\WowUSBSecurity.exe
C:\Program Files\WowUSBProtector\WowUSBAutoUpdate.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Inventec\Dreye\DreyeMT\DreyeIMplugin.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\Acer\LOCALS~1\Temp\RarSFX8\ppsap.exe
C:\Program Files\ScrollWall\ScrollWall.exe
C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\WowUSBProtector\WowUSBAutoUpdate.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Going32\Utils\Going8.exe
G:\DL\迅雷(Thunder)\Thunder 5.9.3.951\Program\Thunder.exe
C:\Documents and Settings\Acer\桌面\HiJackThis.exe
G:\DL\影像擷取\TechSmith SnagIt 9.1.3 Build 19\Snagit 9\Snagit32.exe
G:\DL\影像擷取\TechSmith SnagIt 9.1.3 Build 19\Snagit 9\TSCHelp.exe
G:\DL\影像擷取\TechSmith SnagIt 9.1.3 Build 19\Snagit 9\SnagPriv.exe
G:\DL\影像擷取\TechSmith SnagIt 9.1.3 Build 19\Snagit 9\snagiteditor.exe
C:\WINDOWS\system32\svchost.exe

O1 - Hosts: ***************************************
O1 - Hosts: 惡意網站實驗室(mwsl)
O1 - Hosts: 惡意網站hosts封鎖檔案-2010.3.29
O1 - Hosts: www.mwsl.org.cn
O1 - Hosts: 心動總是.無來由(重新編輯)
O1 - Hosts: ---------------------------------------
O1 - Hosts: 注意：115.47.219.95為mwsl的封鎖警示視窗
O1 - Hosts: 警告：不得將此資料用於違法犯罪動作！
O1 - Hosts: ---------------------------------------
O1 - Hosts: all rights reserved 2007-2010
O1 - Hosts: ***************************************
O1 - Hosts: 115.47.219.95 www.zzzz1.com
O1 - Hosts: 115.47.219.95 zzzz1.com
O1 - Hosts: 115.47.219.95 www.baidu345.com
O1 - Hosts: 115.47.219.95 baidu345.com
O1 - Hosts: 115.47.219.95 www.ttsou.cn
O1 - Hosts: 115.47.219.95 ttsou.cn
O1 - Hosts: 115.47.219.95 www.zhaomeimei.cn
O1 - Hosts: 115.47.219.95 www.511u.com
O1 - Hosts: 115.47.219.95 www.37698.com
O1 - Hosts: 115.47.219.95 37698.com
O1 - Hosts: 115.47.219.95 www.hk0707.com
O1 - Hosts: 115.47.219.95 www.hk0909.com
O1 - Hosts: 115.47.219.95 www2.99vod.net
O1 - Hosts: 115.47.219.95 www.99vod.net
O1 - Hosts: 115.47.219.95 www.51mxd.com
O1 - Hosts: 115.47.219.95 www.meizi7472831.com
O1 - Hosts: 115.47.219.95 www.game929.com
O1 - Hosts: 115.47.219.95 www.91d2d.com
O1 - Hosts: 115.47.219.95 91d2d.com
O1 - Hosts: 115.47.219.95 www.wangxiangad.com
O1 - Hosts: 115.47.219.95 music.wangxiangad.com
O1 - Hosts: 115.47.219.95 www.59552.com
O1 - Hosts: 115.47.219.95 qq.59552.com
O1 - Hosts: 115.47.219.95 2007.5ixp.com
O1 - Hosts: 115.47.219.95 www.lmaq.com
O1 - Hosts: 115.47.219.95 lmaq.com
O1 - Hosts: 115.47.219.95 www.3yyy.cn
O1 - Hosts: 115.47.219.95 old.3yyy.cn
O1 - Hosts: 115.47.219.95 www.kkpic.net
O1 - Hosts: 115.47.219.95 kkpic.net
O1 - Hosts: 115.47.219.95 www.habao.net
O1 - Hosts: 115.47.219.95 habao.net
O1 - Hosts: 115.47.219.95 www.sms591.com
O1 - Hosts: 115.47.219.95 www.sms591.net
O1 - Hosts: 115.47.219.95 www.kx99.cn
O1 - Hosts: 115.47.219.95 www.odwy.com
O1 - Hosts: 115.47.219.95 www.99mmm.com
O1 - Hosts: 115.47.219.95 www.sqqd.com
O1 - Hosts: 115.47.219.95 www.sqqd.net
O1 - Hosts: 115.47.219.95 www.6781.com
O1 - Hosts: 115.47.219.95 6781.com
O1 - Hosts: 115.47.219.95 www.dj015.com
O1 - Hosts: 115.47.219.95 www.mtvrm.com
O1 - Hosts: 115.47.219.95 a.d3a.us
O1 - Hosts: 115.47.219.95 www.69262.com
O1 - Hosts: 115.47.219.95 www.an188.com
O1 - Hosts: 115.47.219.95 www.bobcn.net
O1 - Hosts: 115.47.219.95 www.pkzz.net
O1 - Hosts: 115.47.219.95 www.jily.net
O1 - Hosts: 115.47.219.95 jily.net
O1 - Hosts: 115.47.219.95 cn.errorsafe.com
O1 - Hosts: 115.47.219.95 www.errorsafe.com
O1 - Hosts: 115.47.219.95 www.1717kan.cn
O1 - Hosts: 115.47.219.95 www.verycr.com
O1 - Hosts: 115.47.219.95 verycr.com
O1 - Hosts: 115.47.219.95 www.82wg.com
O1 - Hosts: 115.47.219.95 www.kuaiso.com
O1 - Hosts: 115.47.219.95 www.64xz.com
O1 - Hosts: 115.47.219.95 64xz.com
O1 - Hosts: 115.47.219.95 www.newok.com
O1 - Hosts: 115.47.219.95 www.top000.com
O1 - Hosts: 115.47.219.95 top000.com
O1 - Hosts: 115.47.219.95 www.tianmp3.cn
O1 - Hosts: 115.47.219.95 tianmp3.cn
O1 - Hosts: 115.47.219.95 59552.com
O1 - Hosts: 115.47.219.95 www.xf520.cn
O1 - Hosts: 115.47.219.95 www.ysbr.cn
O1 - Hosts: 115.47.219.95 www.lvrzj.com
O1 - Hosts: 115.47.219.95 lvrzj.com
O1 - Hosts: 115.47.219.95 www.toxx.info
O1 - Hosts: 115.47.219.95 www.11990.com
O1 - Hosts: 115.47.219.95 www.xzqx88.com
O1 - Hosts: 115.47.219.95 xzqx88.com
O1 - Hosts: 115.47.219.95 11990.com
O1 - Hosts: 115.47.219.95 www.qbbd.com
O1 - Hosts: 115.47.219.95 w.qbbd.com
O1 - Hosts: 115.47.219.95 www.wuyeav.com
O1 - Hosts: 115.47.219.95 wuyeav.com
O1 - Hosts: 115.47.219.95 www.87895.com
O1 - Hosts: 115.47.219.95 87895.com
O1 - Hosts: 115.47.219.95 www.henbang.net
O1 - Hosts: 115.47.219.95 files.henbang.net
O1 - Hosts: 115.47.219.95 www.yayalao.com
O1 - Hosts: 115.47.219.95 yayalao.com
O1 - Hosts: 115.47.219.95 yxgm78.com
O1 - Hosts: 115.47.219.95 http://www.8888888888888888888888888...8888888888.com
O1 - Hosts: 115.47.219.95 www.50-8.com
O1 - Hosts: 115.47.219.95 www.50ge8.com
O1 - Hosts: 115.47.219.95 www.klyx8.com
O1 - Hosts: 115.47.219.95 klyx8.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\桌酯面崤\0623\Internet Download Manager 5.19 Build 1\Internet Download Manager\IDMIECC.dll (file missing)
O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - (no file)
O2 - BHO: WebDetectorBHO - {43BEAFD9-E005-483D-A367-146BA6C8A32E} - C:\Program Files\Tudou\滄厒Tudou\tudouDetector.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: AddTask Class - {6A19C29D-ED45-4483-8999-9F939C8161F2} - (no file)
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - G:\DL\迅雷(Thunder)\迅雷(Thunder) V5.9.1.922 去廣告綠色精簡版\ComDlls\xunleiBHO_Now.dll (file missing)
O2 - BHO: Windows Live 登入小幫手 - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: 笢弊馱妀窅俴BHO - {BB4491A2-D11A-4c6b-91C0-B53246A3122B} - C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\Icbc_AntiPhishing.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Dr.eye WebPage Translation - {92B255FE-94E2-4BCA-958D-3926CE38913F} - C:\Program Files\Inventec\Dreye\DreyeMT\DreyeIEBar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [NMGameX_AutoRun] C:\WINDOWS\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa
O4 - HKLM\..\Run: [PHIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp2std] C:\WINDOWS\tsnp2std.exe
O4 - HKLM\..\Run: [WowUSBSecurity] "C:\Program Files\WowUSBProtector\start.bat"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [IMDreyePlugin] "C:\Program Files\Inventec\Dreye\DreyeMT\DreyeIMplugin.exe" /h
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [CJIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [PPS Accelerator] C:\DOCUME~1\Acer\LOCALS~1\Temp\RarSFX8\ppsap.exe
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] ctfmon.exe (User 'Default user')
O8 - Extra context menu item: &使用BitComet下載 - res://G:\DL\BitComet_1.14免安\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &使用BitComet下載全部影片 - res://G:\DL\BitComet_1.14免安\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &使用BitComet下載全部連結 - res://G:\DL\BitComet_1.14免安\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &使用优蛋下载 - C:\Program Files\UDown\getUrl.htm
O8 - Extra context menu item: &使用优蛋下载全部链接 - C:\Program Files\UDown\getAllUrl.htm
O8 - Extra context menu item: Foxy 下載 - res://G:\FOXY 1.9.9 繁體中文免安裝版\Foxy.exe/download.htm
O8 - Extra context menu item: Foxy 搜尋 - res://G:\FOXY 1.9.9 繁體中文免安裝版\Foxy.exe/search.htm
O8 - Extra context menu item: 使用 IDM 下載 - D:\桌面\0623\Internet Download Manager 5.19 Build 1\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: 使用 IDM 下載所有連結 - D:\桌面\0623\Internet Download Manager 5.19 Build 1\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: 使用 IDM 下載視訊內容 - D:\桌面\0623\Internet Download Manager 5.19 Build 1\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: 使用迅雷下載 - G:\DL\迅雷(Thunder)\Thunder 5.9.3.951\Program\geturl.htm
O8 - Extra context menu item: 使用迅雷下載全部連結 - G:\DL\迅雷(Thunder)\Thunder 5.9.3.951\Program\getallurl.htm
O8 - Extra context menu item: 匯出至 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 轉換為 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 轉換連結目標到現有 PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 轉換連結目標為 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 轉換選定的連結到現有 PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: 轉換選定的連結為 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: 轉換選擇內容到現有 PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 轉換選擇內容為 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: 附加至現有 PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - (no file)
O9 - Extra button: 新浪UC - {2253922F-1B26-4C74-8B57-E3AEE748DBB8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: 參考資料 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://G:\DL\BitComet_1.14免安\tools\bitcometbho.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O14 - IERESET.INF: START_PAGE_URL=tw.yahoo.com
O15 - Trusted Zone: http://www.icbc.com.cn
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/Driver...reqlab_nvd.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/Driver...aSmartScan.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/...Uploader55.cab
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (AxSubmitControl Class) - https://mybank.icbc.com.cn/icbc/newp...feControls.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira Firewall (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira 小紅傘 MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira 小紅傘 Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira 小紅傘 Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Upgrade Service (AntiVirUpgradeService) - Avira GmbH - (no file)
O23 - Service: Avira 小紅傘 WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVerRemote - AVerMedia - C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
O23 - Service: AVerScheduleService - Unknown owner - C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICBC Daemon Service - Unknown owner - C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\IcbcDaemon.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Acer/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg

--
End of file - 16935 bytes

謝謝各位幫忙

[米奇]

首頁被綁架，按資安會已有的案例，與2樓 ancle 大提供的新聞消息處理方式相同，

是從 regedit 刪除所有該網址的登錄值，

方法:

於開始工作列 → 執行→ 輸入 regedit [按確定]

帶出如下畫面:






選編輯 → 尋找目標欄內輸入該329導航網址，

因 aceryang 版大未提供網址 ，這就以2樓提供的資訊 hXXp://www.3932.cooom/?one 為例 ，(為免誤入 HTTP 已修改)，

並請重複按 F3 鍵，將所有與該網址有關的登錄值全數刪除應可恢復。



或另請參閱拙文...

解決 IE7 無法設定首頁的方法...

http://forum.slime.com.tw/thread242589.html

[aceryang]

作者: chenhan2603

首頁被綁架，按資安會已有的案例，與2樓 ancle 大提供的新聞消息處理方式相同，

是從 regedit 刪除所有該網址的登錄值，

方法:

於開始工作列 → 執行→ 輸入 regedit [按確定]

帶出如下畫面:






選編輯 → 尋找目標欄內輸入該329導航網址，

因 aceryang 版大未提供網址 ，這就以2樓提供的資訊 hXXp://www.3932.cooom/?one 為例 ，(為免誤入 HTTP 已修改)，

並請重複按 F3 鍵，將所有與該網址有關的登錄值全數刪除應可恢復。



或另請參閱拙文...

解決 IE7 無法設定首頁的方法...

http://forum.slime.com.tw/thread242589.html

依照指導方式操作，所得結果是一片空白。如下截圖：



還有一事，我不是首頁被綁而是開新索引時才會這樣！

謝謝你.....

[cttwyk]

建議版主試試＂360衛士＂這套軟體看看，它有多種功能可選擇，之前本人電腦就曾出現類似版主這種問題，
遍尋各種方法都無效，最後就是以此軟體解決的。

[aceryang]

作者: cttwyk

建議版主試試＂360衛士＂這套軟體看看，它有多種功能可選擇，之前本人電腦就曾出現類似版主這種問題，
遍尋各種方法都無效，最後就是以此軟體解決的。

下載360安全衛士7.1版的掃瞄了好長一段時間！
總算那討厭的木馬被刪除了！
中國的木馬還是需要中國的殺木馬軟體有效！