HijackThis@Qoo的扫描日志 V1.97.7
Scan saved at 0:53:15, on 2005-7-15
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\瑞星杀毒\杀毒\RAV\Ravmond.exe
D:\瑞星杀毒\杀毒\RAV\RavStub.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
D:\瑞星杀毒\防火墙\FireWall\PFW.exe
D:\瑞星杀毒\杀毒\RAV\RAVTIMER.EXE
D:\瑞星杀毒\杀毒\RAV\RAVMON.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Thunder Network\ThunderMini\ThunderMini.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\racer-henan-cnc\racer.exe
C:\WINDOWS\System32\NOTEPAD.EXE
C:\Program Files\racer-henan-cnc\RacerKp.exe
D:\QQ\极品QQ绿色版\腾讯QQ\QQ.exe
D:\QQ\极品QQ绿色版\腾讯QQ\TIMPlatform.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\nvsvc32.exe
D:\瑞星杀毒\杀毒\RAV\CCENTER.EXE
D:\QQ\极品QQ绿色版\腾讯QQ\QQ.exe
D:\QQ\极品QQ绿色版\腾讯QQ\QQ.exe
D:\Program Files\工具\winamp\winamp.exe
D:\Maxthon\遨游\Maxthon\Maxthon.exe
D:\计算机\3714982004121212758\HijackThis.exe
O2 - BHO: (no name) - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v6.dll
O2 - BHO: (no name) - {3ED9FFDA-79DB-4B2D-99B7-16EA3C4A3A92} - C:\WINDOWS\System32\hap.dll
O2 - BHO: (no name) - {616D4040-5712-4F0F-BCF1-5C6420A99E14} - C:\WINDOWS\System32\winhtp.dll
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\
O2 - BHO: (no name) - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - C:\WINDOWS\System32\bho.dll
O2 - BHO: (no name) - {F236CC5A-F6E4-4011-9EED-C52FDF51CE3D} - C:\WINDOWS\system32\Sbhoplin.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\
O3 - Toolbar: ????? - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: ????? - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - C:\WINDOWS\WORLD2\TOOLBAR\hmtoolbar.dll
O3 - Toolbar: ????? - {00000011-04FA-11D1-B7DA-00A0C9032222} - C:\WINDOWS\System32\bhoiea.dll
O3 - Toolbar: ????? - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\Program Files\Rising\KaKaToolBar\kakatool.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SKYNET Personal FireWall] D:\
O4 - HKLM\..\Run: [MS-4011 Memory Patch] C:\RavSasser.exe -Patch
O4 - HKLM\..\Run: [RavTimer] D:\
O4 - HKLM\..\Run: [RavMon] D:\
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [thunder_mini] C:\Program Files\Thunder Network\ThunderMini\ThunderMini.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Startup: NTUSER.DAT
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O8 - Extra context menu item: &使用迷你迅雷下载 - C:\Program Files\Thunder Network\ThunderMini\geturl.htm
O8 - Extra context menu item: 使用Kugoo下载 - D:\kugou\KuGoo2\KugooDownX.htm
O8 - Extra context menu item: 使用影音传送带下载 - D:\
O8 - Extra context menu item: 使用影音传送带下载全部链接 - D:\
O8 - Extra context menu item: 使用网际快车下载 - D:\
O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\
O9 - Extra button: FlashGet (HKLM)
O9 - Extra 'Tools' menuitem: &FlashGet (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash
Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
