瑞星卡卡安全论坛

劳烦斑主帮忙看一下有没有问题：

Logfile of HijackThis v1.99.1
Scan saved at 21:49:48, on 2006-4-20
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\msdtc.exe
D:\programe\WEBEAS~1\EMSVR.EXE
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\llssrv.exe
C:\Program Files\DMonitor.com\Sentry4\SentryDog.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\DMonitor.com\Sentry4\SentryAgentB.exe
C:\Program Files\DMonitor.com\Sentry4\SentryAgentC.exe
C:\WINNT\System32\snmp.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\DMonitor.com\Sentry4\SentryAgentA.exe
C:\WINNT\Explorer.EXE
C:\Program Files\rising\Rfw\Rfw.exe
C:\iActive\ActiveMeeting\Server\ACSrv.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Rising\Rav\Ravmon.exe
D:\programe\WebEasyMail\easymail.exe
C:\Program Files\DMonitor.com\Sentry4\SentryCenter.exe
C:\iActive\ActiveMeeting\Server\SrvDet.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINNT\_ds6.tmp
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_ds7.tmp\demo32.exe
C:\WINNT\system32\ntvdm.exe
C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\_ds27D.tmp
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_ds27E.tmp\demo32.exe
\YA9210\MYDATA$\DOWN\SQL2K_~1\STANDARD\x86\setup\setupsql.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\_ISTMP1.DIR\_INS5576._MP
\YA9210\MYDATA$\DOWN\SQL2K_~1\STANDARD\x86\setup\_ISDEL.EXE
C:\Program Files\Rising\Rav\Rav.exe
C:\Program Files\Iparmor\Iparmor.exe
D:\myfiles\常用软件\网络软件\杀毒\HijackThis.exe

O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [rfw] C:\Program Files\rising\Rfw\Rfw.exe
O4 - HKLM\..\Run: [WebEasyMail] D:\programe\WEBEAS~1\easymail.exe -src
O4 - HKLM\..\Run: [ActiveMeeting] c:\iActive\ActiveMeeting\Server\ACSrv.exe
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [iparmor] C:\Program Files\Iparmor\Iparmor.exe mini
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - Startup: WebEasyMail 3.6.0.1.lnk = D:\programe\WebEasyMail\easymail.exe
O4 - Startup: 网动视频会议系统 - 服务器.lnk = C:\iActive\ActiveMeeting\Server\ACSrv.exe
O4 - Startup: 网路岗.企业金版.lnk = C:\Program Files\DMonitor.com\Sentry4\SentryCenter.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1145539078625
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://61.188.199.29/ameeting/system/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1B716265-B2C7-469C-9603-9315F0D9755B}: NameServer = 61.139.2.69
O17 - HKLM\System\CCS\Services\Tcpip\..\{9427DEDC-33FE-4667-A148-D714D96A5FDD}: NameServer = 61.139.2.69
O17 - HKLM\System\CS1\Services\Tcpip\..\{1B716265-B2C7-469C-9603-9315F0D9755B}: NameServer = 61.139.2.69
O17 - HKLM\System\CS2\Services\Tcpip\..\{1B716265-B2C7-469C-9603-9315F0D9755B}: NameServer = 61.139.2.69
O20 - AppInit_DLLs: APIHookDll.dll
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: EasyMail NT Service (EasyMail) - Ma Jian - D:\programe\WEBEAS~1\EMSVR.EXE
O23 - Service: [Sentry]Monitor SentryServices (Mr.Dog) - Unknown owner - C:\Program Files\DMonitor.com\Sentry4\SentryDog.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - Service: [Sentry]Monitor Web-Activities (SentryAgentA) - Unknown owner - C:\Program Files\DMonitor.com\Sentry4\SentryAgentA.exe
O23 - Service: [Sentry]Monitor Web-Files (SentryAgentB) - Unknown owner - C:\Program Files\DMonitor.com\Sentry4\SentryAgentB.exe
O23 - Service: [Sentry]Data Communication (SentryAgentC) - Unknown owner - C:\Program Files\DMonitor.com\Sentry4\SentryAgentC.exe

其中SentryAgentA、SentryAgentB和SentryAgentC都是“网路岗”程序的进程。