瑞星卡卡安全论坛

Logfile of HijackThis v1.99.1
Scan saved at 1:06:07, on 2007-3-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
D:\soft\Rising\Rising\Rav\CCenter.exe
C:\windows\System32\svchost.exe
D:\soft\Rising\Rising\Rav\Ravmond.exe
C:\windows\system32\spoolsv.exe
D:\soft\Rising\Rising\Rav\RavStub.exe
C:\windows\system32\nvsvc32.exe
C:\windows\system32\shadow\ShadowService.exe
C:\windows\Explorer.EXE
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
D:\soft\dt\DAEMON Tools\daemon.exe
D:\soft\Rising\Rising\Rav\RavTask.exe
D:\soft\Rising\Rising\Rav\Ravmon.exe
D:\soft\jj4\jiajiasr.exe
C:\Program Files\ADSL拨号王\HNMainUI.exe
D:\soft\TheWord\TheWorld.exe
D:\soft\HjackThis\HijackThis.exe

O3 - Toolbar: 快车(FlashGet) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\soft\FlashGet\FLASHGET\fgiebar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] ; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] ; nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] ; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AudioDeck] ; C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [DAEMON Tools] "D:\soft\dt\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [RunShadowTip] C:\windows\system32\shadow\ShadowTip.exe
O4 - HKLM\..\Run: [RavTask] "D:\soft\Rising\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [jiajiasr] D:\soft\jj4\jiajiasr.exe
O8 - Extra context menu item: &使用快车(FlashGet)下载 - D:\soft\FlashGet\FLASHGET\jc_link.htm
O8 - Extra context menu item: &使用快车(FlashGet)下载全部链接 - D:\soft\FlashGet\FLASHGET\jc_all.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\soft\qq2006\AddToNetDisk.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - D:\soft\KuGoo3\KuGoo3DownX.htm
O8 - Extra context menu item: 使用迅雷下载 - D:\soft\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: 使用迅雷下载全部链接 - D:\soft\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\soft\qq2006\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\soft\qq2006\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\soft\qq2006\SendMMS.htm
O8 - Extra context menu item: 用比特精灵下载(&B) - D:\soft\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\soft\qq2006\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\soft\qq2006\QQ.EXE
O15 - Trusted Zone: http://www.icbc.com.cn
O16 - DPF: imgupldr - http://download.clients.hexun.com/tools/imgupldr/imgupldr.CAB
O16 - DPF: {05C1004E-2596-48E5-8E26-39362985EEB9} (MMCPlayer Class) - http://p3p.sogou.com/MMCShell.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (AxSubmitControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3271FC9C-0F3D-4F06-8756-D83453CF67D2}: NameServer = 202.96.64.68 202.96.69.38
O17 - HKLM\System\CS1\Services\Tcpip\..\{3271FC9C-0F3D-4F06-8756-D83453CF67D2}: NameServer = 202.96.64.68 202.96.69.38
O18 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - D:\soft\KuGoo3\InExtend\KuGoo3DownXControl.ocx
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\soft\Rising\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\soft\Rising\Rising\Rav\Ravmond.exe
O23 - Service: Shadow System Service (ShadowSystemService) - Unknown owner - C:\windows\system32\shadow\ShadowService.exe
O23 - Service: WebClient XML - Unknown owner - C:\windows\system32\webcxml.exe (file missing)






请大大帮忙看看哪里有问题 小弟我实在看不出来了 谢谢拉