史萊姆論壇

史萊姆論壇 (http://forum.slime.com.tw/)
-   一般電腦疑難討論區 (http://forum.slime.com.tw/f17.html)
-   -   網頁無法使用 (http://forum.slime.com.tw/thread240854.html)

mary 2008-12-23 01:48 PM

網頁無法使用
 
各位大大:

我用google搜尋某些topic, 但是搜尋到之後, 網頁會出現如下警告訊息的視窗:

應用程式發生例外 unknown software exception (0xc000000d) 於位置0x7817f029。
請按[確定]終止程式
請按[取消]進行程式偵錯

但是按[確定]或[取消]都會結束視窗

請問有人知道要如何解決嗎?
Thanks a lot.

Mary

GaMNiA 2008-12-23 02:17 PM

引用:

作者: mary (文章 2074852)
各位大大:
應用程式發生例外 unknown software exception (0xc000000d) 於位置0x7817f029。

它應該有寫是那個應用程式發生錯誤,貼個圖上來看看,不然無法判斷...

mary 2008-12-23 02:23 PM

引用:

作者: GaMNiA (文章 2074875)
它應該有寫是那個應用程式發生錯誤,貼個圖上來看看,不然無法判斷...

請問G大,我要如何把圖貼上論壇?

Mary

GaMNiA 2008-12-23 03:24 PM

你在應用程式錯誤那個畫面,按一下鍵盤有個 [Print Screen/SysRq] 鍵 (大概在 [F12] 右邊附近),
然後到 [小畫家] 那邊 [貼上] ,存成 .PNG 格式(檔案體積比較小)
上傳圖片和貼上連結,請看下圖...

http://img68.imageshack.us/img68/6319/picupload01wg0.png

http://img224.imageshack.us/img224/8659/picupload02dk0.png

mary 2008-12-28 10:38 PM

感謝G大, 抱歉, 最近較忙, 今天才又回史萊姆.
錯誤頁面如下圖:
http://img504.imageshack.us/img504/3464/ieerrorhu9.png

謝謝.

God bless you and Happy New Year!

Mary

plunderer 2008-12-28 11:05 PM

"開始" => "執行" 輸入 regsvr32 jscript.dll => enter
試試

GaMNiA 2008-12-29 10:45 AM

是 IEXPLORE.EXE 應用程式(IE)發生錯誤~

可否再貼出 HijackThis LOG 檔呢?...
http://forum.slime.com.tw/thread208952.html

Happy New Year~

mary 2008-12-29 04:22 PM

感謝p大.
不知那個指令是做什麼用的, 不過執行的結果如下圖:
http://img205.imageshack.us/img205/740/resultst9.png

Mary

mary 2008-12-29 04:34 PM

引用:

作者: GaMNiA (文章 2078190)
是 IEXPLORE.EXE 應用程式(IE)發生錯誤~

可否再貼出 HijackThis LOG 檔呢?...
http://forum.slime.com.tw/thread208952.html

Happy New Year~

感謝G大:

我下載了HiJackThis.exe, but好像不能執行.
我在icon上按滑鼠左鍵兩下之後,沒有任何反應....
是不是不能這樣執行??

Mary

GaMNiA 2008-12-29 04:56 PM

引用:

作者: mary (文章 2078284)
我下載了HiJackThis.exe, but好像不能執行.
我在icon上按滑鼠左鍵兩下之後,沒有任何反應....
是不是不能這樣執行??

覺得你好像有中毒~可能是IFEO映像劫持...
IFEO : Image File Execution Options

你把 HiJackThis.exe 重新命名為 HJT.exe 再執行試試看...

另外,你去下載 KVTOOLS 來修復 IFEO,如下圖:
http://tw.myblog.yahoo.com/jw!VFZCb..QEQWi3mo.bkq_NLUk/article?mid=4488

http://sites.google.com/site/gwebhd168/images/KVTools_IFEO_fix.png

mary 2008-12-29 05:57 PM

感謝G大, 您太厲害了.
掃描結果如下:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 下午 05:53:44, on 2008/12/29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\UPHClean\uphclean.exe
E:\Program\VMware\VMware Workstation\vmware-authd.exe
C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
C:\WINDOWS\system32\vmnat.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
E:\Program\VMware\VMware Workstation\vmware-tray.exe
E:\Program\VMware\VMware Workstation\hqtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\tool\scan_virus\HJT.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live 登入小幫手 - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [CJIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync
O4 - HKLM\..\Run: [PHIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [inetsrv] C:\WINDOWS\system32\inetsrv.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WinSysM] C:\WINDOWS\350102M.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [vmware-tray] E:\Program\VMware\VMware Workstation\vmware-tray.exe
O4 - HKLM\..\Run: [VMware hqtray] "E:\Program\VMware\VMware Workstation\hqtray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PHIME2006ASyn] C:\DOCUME~1\ADMINI~1\LOCALS~1\alvsvpd.exe
O4 - HKCU\..\Run: [VoipStunt] "C:\Program Files\VoipStunt.com\VoipStunt\VoipStunt.exe" -nosplash -minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')
O8 - Extra context menu item: 匯出至 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: 參考資料 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5F4D222D-5EEE-40A8-8810-5642B4E4F441} (KENCAPI Class) - https://ebank.tcb-bank.com.tw/netban.../FSCAPIATL.cab
O16 - DPF: {9DA9F061-B243-11D4-8B44-0000E88F2063} (XMSStockPen Class) - http://cabak.rsc.com.tw/ni_pki/MSSTOCK.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{F3AF49C3-EE02-416C-AEB9-1C5B91AED6D7}: NameServer = 139.175.55.244 139.175.252.16
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: thermnc.dll,woodken.dll,delnice.dll,HBASKTAO.dll,meyotme.dll,zesttns.dll,lenyuns.dll,fliecods.dll,xuntxn.dll,mirwznt.dll,qanhllao.dll,zongxim.dll,rexljeh.dll,kodens.dll,xsisco.dll,wonlins.dll,avgrsstx.dll
O21 - SSODL: pyzbjbnk.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mecgjwvi.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: apkrmhyf.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: zkbcvshp.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: kmoigdzb.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: coligvzh.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: qasujhce.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: qtrxffdq.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mhurkwqk.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: blapfxwe.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: zgdymrhd.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mffhsbpb.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O23 - Service: 53F7B9A5 - Unknown owner - C:\WINDOWS\Fonts\83226AD2.EXE (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - E:\Program\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - E:\Program\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe

--
End of file - 9779 bytes

GaMNiA 2008-12-29 06:10 PM

引用:

作者: mary (文章 2078362)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [inetsrv] C:\WINDOWS\system32\inetsrv.exe
O4 - HKLM\..\Run: [WinSysM] C:\WINDOWS\350102M.exe
O4 - HKCU\..\Run: [PHIME2006ASyn] C:\DOCUME~1\ADMINI~1\LOCALS~1\alvsvpd.exe
O20 - AppInit_DLLs: thermnc.dll,woodken.dll,delnice.dll,HBASKTAO.dll,meyotme.dll,zesttns.dll,lenyuns.dll,fliecods.dll,xuntxn.dll,mirwznt.dll,qanhllao.dll,zongxim.dll,rexljeh.dll,kodens.dll,xsisco.dll,wonlins.dll,avgrsstx.dll
O21 - SSODL: pyzbjbnk.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mecgjwvi.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: apkrmhyf.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: zkbcvshp.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: kmoigdzb.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: coligvzh.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: qasujhce.dll - {9E8287B0-0F3A-48ae-99C5-A6E0AAC36BC5} - C:\WINDOWS\system32\qasujhce.dll (file missing)
O21 - SSODL: qtrxffdq.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mhurkwqk.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: blapfxwe.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: zgdymrhd.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O21 - SSODL: mffhsbpb.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\mffhsbpb.dll (file missing)
O23 - Service: 53F7B9A5 - Unknown owner - C:\WINDOWS\Fonts\83226AD2.EXE (file missing)

果然有中毒~

執行 HJT.exe 勾選上列項目,再按 [Fix checked] 完後,請重新開機。
另外用 KVTOOLS 修復 IFEO。
http://residence.educities.edu.tw/all3c/tool/KVTOOLS%202.0.rar

上列步驟完成後,請更新 Avira AntiVir 小紅傘病毒碼,再做一下完整掃描...

mary 2008-12-29 06:23 PM

引用:

作者: GaMNiA (文章 2078365)
果然有中毒~

執行 HJT.exe 勾選上列項目,再按 [Fix checked] 完後,請重新開機。
另外用 KVTOOLS 修復 IFEO。
http://residence.educities.edu.tw/al...OOLS%202.0.rar

上列步驟完成後,請更新 Avira AntiVir 小紅傘病毒碼,再做一下完整掃描...

感謝G大, 我已經用KVTOOLS修復過了.
請問是出現在畫面上所有的項目都要做勾選嗎?
還是只要您引用的部份勾選就好了? 因為我看不懂log,怕勾錯了, 電腦開不起來....

GaMNiA 2008-12-29 06:49 PM

引用:

作者: mary (文章 2078370)
還是只要您引用的部份勾選就好了? 因為我看不懂log,怕勾錯了, 電腦開不起來....

我「引用」的部份勾選就好。

gahhy40731 2012-11-14 10:05 PM

右上角點擊X符號直接關閉.就能進入作業系統


所有時間均為台北時間。現在的時間是 08:12 PM

Powered by vBulletin® 版本 3.6.8
版權所有 ©2000 - 2024, Jelsoft Enterprises Ltd.

『服務條款』

* 有問題不知道該怎麼解決嗎?請聯絡本站的系統管理員 *


SEO by vBSEO 3.6.1