開機都會齣現cmd.exe的視窗 - 趣味新聞網

你可以试着到 开始->所有程式->启动 中去看看~
是不是有人把 cmd.exe 的捷径放到那里去了~

我的启动是空的耶
意思是我把cmd.exe 丢进去就好了吗

会不会跟微软的安全性更新有关阿~去看了一下有一些安装失败
还是我安装了小精灵☆随身碟病毒清除程式和张书维的
所以开机会扫瞄一下
我用google找了一下
发现有人跟我一样...但是他们的视窗会显示文件名
我的没有显示...大概1~2秒视窗就消失了
那我的电脑是没事了吗?还是病毒强到可以隐藏不让我发现

check you registry RunOnce and Run. You might want to use Hijackthis to check your system for spyware.

我不太会看...几乎都打V因该是没有问题对吧...
防火强也显示Very safe

把 HiJackThis 的 log 贴上来看看. 不然, 试试 MalwareBytes - http://www.malwarebytes.org/mbam.php

C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesF-SecureAnti-Virusfsgk32st.exe
C:Program FilesF-SecureCommonFSMA32.EXE
C:Program FilesF-SecureAnti-VirusFSGK32.EXE
C:Program FilesNeroNero 7InCDInCDsrv.exe
C:Program FilesF-SecureCommonFSMB32.EXE
C:Program FilesF-SecureCommonFCH32.EXE
C:Program FilesJavajre6injqs.exe
C:Program FilesCommon FilesLightScribeLSSrvc.exe
C:Program FilesF-SecureCommonFAMEH32.EXE
C:Program FilesF-SecureAnti-Virusfsqh.exe
C:Program FilesMicrosoftSearch Enhancement PackSeaPortSeaPort.exe
C:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe
C:Program FilesF-SecureCommonFNRB32.EXE
C:Program FilesF-SecureAnti-Virusfssm32.exe
C:Program FilesF-SecureFSAUAprogramfsaua.exe
C:Program FilesF-SecureCommonFIH32.EXE
C:Program FilesF-SecureFWESProgramfsdfwd.exe
C:Program FilesCommon FilesAheadLibNMIndexingService.exe
C:Program FilesF-SecureAnti-Virusfsav32.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32ctfmon.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe
C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe
C:Program FilesATI TechnologiesATI.ACECore-Staticccc.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesNeroNero 7InCDNBHGui.exe
C:Program FilesNeroNero 7InCDInCD.exe
C:Program FilesF-SecureCommonFSM32.EXE
C:WINDOWSsystem32conime.exe
C:Program FilesWowUSBProtectorWowUSBSecurity.exe
C:Program FilesJavajre6injusched.exe
C:Program FilesF-SecureFSGUIfsguidll.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesBitCometBitComet.exe
C:Program FilesCommon FilesLightScribeLightScribeControlPanel.exe
C:Program FilesCommon FilesAheadLibNMBgMonitor.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesCommon FilesAheadLibNMIndexStoreSvr.exe
C:PROGRA~1Yahoo!MESSEN~1YAHOOM~1.EXE
C:Program FilesWindows LiveContactswlcomm.exe
C:Program FilesBitCometplugin_emuleplugin_eMule.exe
E:应用程式系统侦测系统侦测系统侦测everest.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesWindows LiveToolbarwltuser.exe
C:Program FilesThunder NetworkThunderProgramThunder5.exe
C:Program FilesInternet Exploreriexplore.exe
D:HiJackThis.exe

R3 - URLSearchHook: Yahoo!奇摩捷径列 - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:PROGRA~1Yahoo!CompanionInstallscpnyt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:PROGRA~1Yahoo!CompanionInstallscpnyt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: Thunder Browser Helper - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:Program FilesThunder NetworkThunderComDllsxunleiBHO_Now.dll
O2 - BHO: Windows Live 登入小帮手 - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: 超级兔子上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} - C:PROGRA~1SUPERR~1magicsetHAOKAN~2.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: Yahoo!奇摩捷径列 - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:PROGRA~1Yahoo!CompanionInstallscpnyt.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:Program FilesWindows LiveToolbarwltcore.dll
O3 - Toolbar: 超级兔子上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} - C:PROGRA~1SUPERR~1magicsetHAOKAN~2.DLL
O4 - HKLM..Run: [IMJPMIG8.1] ; "C:WINDOWSIMEimjp8_1IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM..Run: [JMB36X IDE Setup] C:WINDOWSRaidToolxInsIDE.exe
O4 - HKLM..Run: [36X Raid Configurer] C:WINDOWSsystem32xRaidSetup.exe boot
O4 - HKLM..Run: [StartCCC] "C:Program FilesATI TechnologiesATI.ACECore-StaticCLIStart.exe" MSRun
O4 - HKLM..Run: [MSI Live] C:Program FilesMSIMSI LiveSetWallpaper.exe
O4 - HKLM..Run: [GrooveMonitor] "C:Program FilesMicrosoft OfficeOffice12GrooveMonitor.exe"
O4 - HKLM..Run: [ISUSPM Startup] C:PROGRA~1COMMON~1INSTAL~1UPDATE~1ISUSPM.exe -startup
O4 - HKLM..Run: [ISUSScheduler] "C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe" -start
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [NeroFilterCheck] C:Program FilesCommon FilesAheadLibNeroCheck.exe
O4 - HKLM..Run: [SecurDisc] C:Program FilesNeroNero 7InCDNBHGui.exe
O4 - HKLM..Run: [InCD] C:Program FilesNeroNero 7InCDInCD.exe
O4 - HKLM..Run: [F-Secure Manager] "C:Program FilesF-SecureCommonFSM32.EXE" /splash
O4 - HKLM..Run: [F-Secure TNB] "C:Program FilesF-SecureFSGUITNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM..Run: [WowUSBSecurity] "C:Program FilesWowUSBProtectorstart.bat"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 8.0ReaderReader_sl.exe"
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre6injusched.exe"
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background
O4 - HKCU..Run: [BitComet] "C:Program FilesBitCometBitComet.exe" /tray
O4 - HKCU..Run: [DAEMON Tools Lite] ; "C:Program FilesDAEMON Tools Litedaemon.exe" -autorun
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [Messenger (Yahoo!)] "C:PROGRA~1Yahoo!MESSEN~1YAHOOM~1.EXE" -quiet
O4 - HKCU..Run: [LightScribe Control Panel] C:Program FilesCommon FilesLightScribeLightScribeControlPanel.exe -hidden
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:Program FilesCommon FilesAheadLibNMBgMonitor.exe"
O4 - HKCU..Run: [DeskSearch] ; C:Program Files360DeskSearchDeskSearch.exe
O4 - HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [PPS Accelerator] ; C:Program FilesPPStreamppsap.exe
O4 - HKUSS-1-5-19..Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:WINDOWSsystem32Oobe" (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [nlpo_03] rundll32 advpack.dll,DelNodeRunDLL32 "C:WINDOWSHelpTours" (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [nlpo_06] rundll32 advpack.dll,DelNodeRunDLL32 "%SystemRoot%System32dllcache" (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [nlpo_07] cmd.exe /c md "%SystemRoot%System32dllcache" (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [nlpo_08] cmd.exe /C move /Y "%SystemRoot%System32syssetub.dll" "%SystemRoot%System32syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [nlpo_09] rundll32 advpack.dll,LaunchINFSection nlite.inf,nLiteReg (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-19..RunOnce: [nlpo_10] rundll32 advpack.dll,LaunchINFSection nlite.inf,S (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-20..Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-20..RunOnce: [nlpo_01] rundll32 advpack.dll,DelNodeRunDLL32 "C:WINDOWSsystem32Oobe" (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-18..Run: [ctfmon.exe] ctfmon.exe (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [ctfmon.exe] ctfmon.exe (User 'Default user')
O8 - Extra context menu item: 汇出至 Microsoft Excel(&X) - res://C:PROGRA~1MICROS~4Office12EXCEL.EXE/3000
O8 - Extra context menu item: 妏蚚捃泞狟婥 - C:Program FilesThunder NetworkThunderProgramGetUrl.htm
O8 - Extra context menu item: 妏蚚捃泞狟婥窒蝈诿 - C:Program FilesThunder NetworkThunderProgramGetAllUrl.htm
O9 - Extra button: 运行迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:Program FilesThunder NetworkThunderThunder.exe
O9 - Extra 'Tools' menuitem: 运行迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:Program FilesThunder NetworkThunderThunder.exe
O9 - Extra button: 发佈至部落格 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: 使用 Windows Live Writer 发佈至部落格(&B) - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: 传送至 OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~4Office12ONBttnIE.dll
O9 - Extra 'Tools' menuitem: 传送至 OneNote(E) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~4Office12ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~4Office12REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:Program FilesBitComet oolsBitCometBHO_1.3.1.15.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1232903309203
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1232904429171
O16 - DPF: {A22B8FD2-4CAA-4EFB-82F7-680CD656D9B0} (NowStarter Control) - http://www.gogobox.com.tw/neo.fld/GNowStarter.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:Program FilesMicrosoft OfficeOffice12GrooveSystemServices.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:Program FilesF-SecureAnti-Virusfsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:Program FilesF-SecureCommonFNRB32.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:Program FilesF-SecureFSAUAprogramfsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:Program FilesF-SecureFWESProgramfsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:Program FilesF-SecureCommonFSMA32.EXE
O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:Program FilesF-SecureORSP Clientfsorsp.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesCommon FilesInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:Program FilesNeroNero 7InCDInCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:Program FilesJavajre6injqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesCommon FilesLightScribeLSSrvc.exe
O23 - Service: NBService - Nero AG - C:Program FilesNeroNero 7Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesCommon FilesAheadLibNMIndexingService.exe

试试把以上的打勾删除吧

是要去哪里删呢?
麻烦告知一下

用 HijackThis - 直接打勾后按 Fix Selected 就可以啦

删好自动重新开机后还是有出现
不过都是快闪而过....有如过眼云烟一般
虽然在下觉得可能不是中毒
不过还是很想知道原因

我也想知道原因???
我也会出现这状况
但时有时无

也可以去 执行-> msconfig 里面看看有没有

台中力挺！3X3.EXE籃球聯盟全台開打

丹‧布朗：陰影的魔力激發好奇心

iPad Pro爆齣充電會當機 蘋果怎迴應

快速開機、人流偵測 科技部推産學鏈結創10億産值

前一篇新聞

開機進入桌麵後就當0x000000D1 再加上klif.sys (有圖)

后一篇新聞

開機開到一半就卡住瞭