广告窗口一直弹出来, 怎么办

滅天

1.
经常有广告窗口跳出
2.
连结有问题, 经常不能连结
3.
数据夹或浏览器都会自动关闭
以下是combofix报告, 请帮忙解决



ComboFix 07-10-12.4 - Administrator 2007-10-16  1:13:47.1 - NTFSx86
Microsoft Windows XP Professional  5.1.2600.2.950.1.1028.18.691 [GMT 8:00]
执行位置?: C:\Documents and Settings\Administrator\桌面\ComboFix.exe
* 已建立新的还原点
.
((((((((((((((((((((((((((((((((((((((   其它遭删除的档案   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\LV5F5IBX\cnsminex_empty[1].htm
C:\Documents and Settings\All Users\Application Data.\microsoft\pctools
C:\Documents and Settings\All Users\Application Data.\microsoft\pctools\pctools.dll
C:\Documents and Settings\All Users\Application Data\microsoft\pctools\pctools.dll
C:\WINDOWS\installreg.exe
C:\WINDOWS\KB611311.log
C:\WINDOWS\mwinsys.ini
C:\WINDOWS\System\AlxRes071015.exe
C:\WINDOWS\system32\d3d1caps.srg
C:\WINDOWS\system32\drivers\acpidisk.sys
C:\WINDOWS\system32\inf\scrsys071015.scr
C:\WINDOWS\system32\inf\scrsys16_071015.dll
C:\WINDOWS\system32\jshelp.exe
C:\WINDOWS\system32\jsshow.dll
C:\WINDOWS\system32\mprmsgse.axz
C:\WINDOWS\system32\mywebhit.ini
C:\WINDOWS\system32\mywebhit.ini.tmp
C:\WINDOWS\system32\winsys16_071015.dll
C:\WINDOWS\system32\winsys32_071015.dll
.
((((((((((((((((((((((((((((   2007-09-15 - 2007-10-15 之间建立的档案  )))))))))))))))))))))))))))))))))
.
2007-10-16 01:16 44 --a------ C:\downf.bat
2007-10-16 01:13 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-10-11 18:26 40 --a------ C:\WINDOWS\system32\HTXQJPWP.DLL
2007-10-11 18:03 <DIR> d-------- C:\Program Files\Java
2007-10-11 18:02 <DIR> d-------- C:\Program Files\Common Files\Java
2007-10-11 16:41 <DIR> d-------- C:\Program Files\Lavasoft
2007-10-11 16:06 1,839,616 --a------ C:\WINDOWS\system32\drivers\jsshow.sys
2007-10-11 16:06 373,760 --a------ C:\WINDOWS\system32\drivers\jshelp.sys
2007-10-11 16:06 1,267 --a------ C:\WINDOWS\system32\10D0ugkgu.dll
2007-10-11 16:06 77 --a------ C:\WINDOWS\system32\NARUPJTQ.DLL
2007-10-11 15:42 <DIR> d-------- C:\Program Files\eREAD6.0
2007-10-11 13:06 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2007-10-11 13:03 102,800 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2007-10-11 12:36 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-10-11 04:52 166,086 --a------ C:\WINDOWS\dodolook153.exe
2007-10-11 04:52 33,060 -r-hs---- C:\WINDOWS\system\nm071004.exe
2007-10-11 04:52 31,744 -r-hs---- C:\WINDOWS\system\nm32.dll
2007-10-11 04:52 28,160 -r-hs---- C:\WINDOWS\system\nm071004.dll
2007-10-11 04:51 <DIR> d-------- C:\WINDOWS\system32\inf
2007-09-30 20:04 <DIR> d-------- C:\Program Files\iTunes
2007-09-30 20:04 <DIR> d-------- C:\Program Files\iPod
2007-09-30 20:04 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Apple Computer
2007-09-30 20:03 <DIR> d-------- C:\Program Files\QuickTime
2007-09-30 20:03 <DIR> d-------- C:\Program Files\Apple Software Update
2007-09-30 20:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2007-09-18 09:50 <DIR> d-------- C:\Program Files\ChineseGamer
2007-09-17 10:59 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2007-09-17 10:59 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2007-09-17 10:58 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys
2007-09-17 10:58 51,712 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-09-17 10:58 19,328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2007-09-17 10:58 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys
2007-09-17 10:58 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2007-09-17 10:58 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2007-09-15 17:35 4,682 --a------ C:\WINDOWS\system32\npptNT2.sys
2007-09-15 17:31 <DIR> d-------- C:\Gamania
.
((((((((((((((((((((((((((((((((((((   近三个月内更动的档案   )))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-21 18:47 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-09-15 08:27 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2007-09-15 03:18 --------- d-----w C:\Documents and Settings\Administrator\Application Data\DivX
2007-09-14 07:29 --------- d-----w C:\Program Files\Electronic Arts
2007-09-14 07:24 --------- d-----w C:\Program Files\Foxy
2007-09-14 07:24 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Foxy
2007-09-14 05:14 --------- d-----w C:\Program Files\KMPlayer
2007-09-14 04:41 --------- d-----w C:\Program Files\DVD Decrypter
2007-09-14 04:40 --------- d-----w C:\Program Files\DivX
2007-09-13 12:13 --------- d-----w C:\Program Files\Winamp
2007-09-13 09:21 --------- d-----w C:\Program Files\Real
2007-09-13 09:21 --------- d-----w C:\Program Files\Common Files\xing shared
2007-09-13 09:21 --------- d-----w C:\Program Files\Common Files\Real
2007-09-13 09:19 --------- d-----w C:\Program Files\BitComet
2007-09-13 09:15 --------- d-----w C:\Program Files\MSN Messenger
2007-09-13 09:14 --------- d-----w C:\Program Files\Vimicro
2007-09-13 09:14 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-09-13 09:12 --------- d-----w C:\Program Files\Realtek Sound Manager
2007-09-13 09:12 --------- d-----w C:\Program Files\AvRack
2007-09-13 09:11 --------- d-----w C:\Program Files\D-Tools
2007-09-13 09:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Eset
2007-09-13 08:51 --------- d-----w C:\Program Files\Windows Media Connect 2
2007-09-13 08:51 --------- d-----w C:\Program Files\UPHClean
2007-09-13 08:50 --------- d-----w C:\Program Files\HighMAT CD Writing Wizard
2007-09-13 08:40 --------- d-----w C:\Program Files\microsoft frontpage
2007-08-23 04:10 28,168 ----a-w C:\WINDOWS\system32\drivers\epfwtdir.sys
2007-08-23 04:08 33,288 ----a-w C:\WINDOWS\system32\drivers\eamon.sys
2007-08-23 04:08 25,096 ----a-w C:\WINDOWS\system32\drivers\easdrv.sys
2007-08-15 22:33 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-08-15 22:33 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-08-15 22:33 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys
.
((((((((((((((((((((((((((((((((((((((((((   重要登录档   )))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*注意* 空白或合法的登录值将不会显示
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{24F06550-65E3-4D1C-8CFE-839C296B5530}]
2007-06-28 17:24 57344 --a------ C:\Program Files\eREAD6.0\eREAD6.0\IEeREAD.dll
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{385AB8C6-FB22-4D17-8834-064E2BA0A6F0}]
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6A19C29D-ED45-4483-8999-9F939C8161F2}]
2007-06-29 14:03 77824 --a------ C:\Program Files\eREAD6.0\eREAD6.0\WebHook.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"@"="" []
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2005-11-09 20:00]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2005-11-09 20:00]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2005-11-09 20:00]
"egui"="C:\Program Files\Eset\ESET NOD32 Antivirus\egui.exe" [2007-08-23 12:09]
"SoundMan"="SOUNDMAN.EXE" [2003-08-05 13:59 C:\WINDOWS\SOUNDMAN.EXE]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-09-13 17:21]
"BigDogPath"="C:\WINDOWS\VM_STI.exe" [2003-01-21 15:19]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-09-24 03:24]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2006-09-25 14:54]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe" [2005-04-13 03:48]
"UnlockerAssistant"="C:\Program Files\Unlocker\UnlockerAssistant.exe" [2006-05-06 21:29]
"combofix"="C:\WINDOWS\system32\cmd.exe" [2005-11-09 20:00]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"@"="" []
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2005-11-09 20:00]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"nlsf"=cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll"
"tscuninstall"=%systemroot%\system32\tscupgrd.exe
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"ctfmon.exe"=ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoSharedDocuments"=1 (0x1)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSharedDocuments"=1 (0x1)
"NoRecentDocsHistory"=1 (0x1)
"NoRecentDocsMenu"=1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Shell"="Explorer.exe jshelp.exe"

.
排程工作数据夹的内容
"2007-09-30 12:03:23 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************
catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-16 01:16:18
Windows 5.1.2600 Service Pack 2 NTFS
扫描隐藏的程序...
扫描隐藏的进程...
扫描隐藏的档案...
扫描完成

隐藏档案?: 0
**************************************************************************
.
完成时间?: 2007-10-16  1:16:47 - machine was rebooted
.
--- E O F ---

spiderss

中木马了

滅天

=.=关于这点我都知道....请问如何解决??

shuipao

扫描个sreng日志发上来。