请问这个可以吗?
Logfile of HijackThis v1.99.1
Scan saved at 19:57:58, on 2005-8-16
Platform: Windows XP SP2 (WinNT
5.01.2600)
MSIE: Internet Explorer v6.00 SP2
(6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\rising\Rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32
\drivers\CDAC11BA.EXE
C:\Program Files\Common Files\Microsoft
Shared\VS7Debug\mdm.exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\rising\Rfw\RfwMain.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
C:\PROGRA~1\RISING\RAV\RAVMON.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet
Explorer\iexplore.exe
C:\Documents and Settings\pc\My
Documents\HijackThis.exe
R3 - URLSearchHook: 上网助手 -
{BB936323-19FA-4521-BA29-ECA6A121BC78}
- C:\PROGRA~1\3721\Assist\asbar.dll
O2 - BHO: AcroIEHlprObj Class -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
- C:\Program Files\Adobe\Acrobat 5.0
\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: URLMonitor Class - {3ED9FFDA
-79DB-4B2D-99B7-16EA3C4A3A92} -
C:\WINDOWS\system32\hap.dll (file
missing)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-
480B-966A-843A333CA162} - D:\Program
Files\腾讯 QQ2004 II 简体中文正式版
\QQIEHelper.dll (file missing)
O2 - BHO: DownloadValue Class -
{616D4040-5712-4F0F-BCF1-5C6420A99E14}
- C:\WINDOWS\system32\winhtp.dll (file
missing)
O2 - BHO: EyeOnIE Class - {95F2C82E-
F0CE-4842-B565-2274EACC5FB9} -
c:\windows\system32\xpieknl.dll
O2 - BHO: IeCatch2 Class - {A5366673-
E8CA-11D3-9CD9-0090271D075B} -
C:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-CF10577473F7}
- c:\program
files\google\googletoolbar2.dll
O2 - BHO: AssistII - {BB936323-19FA-
4521-BA29-ECA6A121BC78} - C:\PROGRA~1
\3721\Assist\asbar.dll
O2 - BHO: NTIECatcher Class -
{C56CB6B0-0D96-11D6-8C65-B2868B609932}
- D:\NetTransport 2\NTIEHelper.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-
9A67-4141AC41ADD4} - (no file)
O3 - Toolbar: FlashGet Bar - {E0E899AB
-F487-11D5-8D29-0050BA6940E3} -
C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: 东方快车 - {3EA85E14-
887D-4E2F-91E2-3158CE58ED62} -
D:\Program Files\东方快车\IEBand.DLL
O3 - Toolbar: 金山快译(&K) - {6C3797D2
-3FEF-4cd4-B654-D3AE55B4128C} -
D:\Program Files\金山快译\IEBand.dll
O3 - Toolbar: &Google - {2318C2B1-4965
-11d4-9B18-009027A5CD4F} - c:\program
files\google\googletoolbar2.dll
O3 - Toolbar: 上网助手 - {BB936323-
19FA-4521-BA29-ECA6A121BC78} -
C:\PROGRA~1\3721\Assist\asbar.dll
O3 - Toolbar: 卡卡安全助手 - {DB9ECD4F
-FB8F-4311-B3CE-90B976C2707C} -
C:\WINDOWS\system32\KakaTool.dll
O4 - HKLM\..\Run: [IMJPMIG8.1]
"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE"
/Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync]
C:\WINDOWS\System32
\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A]
C:\WINDOWS\System32
\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon]
RUNDLL32.EXE C:\WINDOWS\System32
\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe
/install
O4 - HKLM\..\Run: [SoundMan]
SOUNDMAN.EXE
O4 - HKLM\..\Run: [RfwMain] "C:\Program
Files\rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [RavTimer]
C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] C:\PROGRA~1
\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKLM\..\Run: [helper.dll]
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - HKLM\..\RunServices: [RavMon]
C:\Program Files\rising\rav\RavMon.exe
/AUTO
O4 - HKCU\..\Run: [ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: noshare.bat
O8 - Extra context menu item: &Download
by NetAnts - D:\PROGRA~1
\NETANTS\NAGet.htm
O8 - Extra context menu item: &Google
Search - res://c:\program
files\google\GoogleToolbar2.dll/cmsearc
h.html
O8 - Extra context menu item: Download
&All by NetAnts - D:\PROGRA~1
\NETANTS\NAGetAll.htm
O8 - Extra context menu item: 东方快车-
保存翻译后的网页 - D:\Program Files\东
方快车\ExtSave.htm
O8 - Extra context menu item: 使用影音
传送带下载 - D:\NetTransport 2
\NTAddLink.html
O8 - Extra context menu item: 使用影音
传送带下载全部链接 - D:\NetTransport 2
\NTAddList.html
O8 - Extra context menu item: 使用网际
快车下载 - C:\Program
Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际
快车下载全部链接 - C:\Program
Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 反向链接
- res://c:\program
files\google\GoogleToolbar2.dll/cmbackl
inks.html
O8 - Extra context menu item: 导出到
Microsoft Excel(&x) -
res://C:\PROGRA~1\MICROS~2\Office10
\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ
自定义面板 - D:\Program Files\腾讯
QQ2005IP\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ
表情 - D:\Program Files\腾讯
QQ2005IP\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信
发送该图片 - D:\Program Files\腾讯
QQ2005IP\qq\SendMMS.htm
O8 - Extra context menu item: 类似网页
- res://c:\program
files\google\GoogleToolbar2.dll/cmsimil
ar.html
O8 - Extra context menu item: 缓存的网
页快照 - res://c:\program
files\google\GoogleToolbar2.dll/cmcache
.html
O9 - Extra button: 浩方对战平台 -
{0A155D3C-68E2-4215-A47A-E800A446447A}
- F:\HFGame3\GameClient.exe
O9 - Extra button: 东方快车 -
{0B66EBA4-5F53-40e4-B17B-A0E9BC1E8D50}
- D:\Program Files\东方快车\IEBand.DLL
O9 - Extra button: Yahoo 1G电邮 -
{507F9113-CD77-4866-BA92-0E86DA3D0B97}
- http://cn.mail.yahoo.com/promo/rd1
(file missing)
O9 - Extra button: 上网助手 -
{5D73EE86-05F1-49ed-B850-E423120EC338}
- http://assistant.3721.com/index.htm?
fb=Cns (file missing)
O9 - Extra button: 词霸 - {9A687CA6-
D585-4947-9ED9-BE96071F5CD9} -
C:\Program Files\Kingsoft\Powerword
2003\XDictExB.dll
O9 - Extra button: QQ - {c95fe080-8f5d
-11d2-a20b-00aa003c157b} - D:\Program
Files\腾讯 QQ2004 II 简体中文正式版
\QQ.EXE (file missing)
O9 - Extra 'Tools' menuitem: 腾讯QQ -
{c95fe080-8f5d-11d2-a20b-00aa003c157b}
- D:\Program Files\腾讯 QQ2004 II 简体
中文正式版\QQ.EXE (file missing)
O9 - Extra button: Yahoo!儊僢僙儞僕儍乕
- {CEBF73C0-BA2E-11d4-A73A-
00508B33FB82} - D:\PROGRA~1\YAHOO!
J\MESSEN~1\YPAGERJ.EXE
O9 - Extra 'Tools' menuitem: Yahoo!儊僢
僙儞僕儍乕 - {CEBF73C0-BA2E-11d4-A73A-
00508B33FB82} - D:\PROGRA~1\YAHOO!
J\MESSEN~1\YPAGERJ.EXE
O9 - Extra button: FlashGet -
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}
- C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet
- {D6E814A0-E0C5-11d4-8D29-
0050BA6940E3} - C:\PROGRA~1
\FLASHGET\flashget.exe
O9 - Extra button: Yahoo! Messenger -
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}
- C:\PROGRA~1\YAHOO!\MESSEN~1
\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo!
Messenger - {E5D12C4E-7B4F-11D3-B5C9-
0050045C3C96} - C:\PROGRA~1\YAHOO!
\MESSEN~1\YPAGER.EXE
O9 - Extra button: (no name) -
{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71}
-
http://assistant.3721.com/security1.htm
?fb=Cns (file missing)
O9 - Extra 'Tools' menuitem: 修复浏览器
- {ECF2E268-F28C-48d2-9AB7-
8F69C11CCB71} -
http://assistant.3721.com/security1.htm
?fb=Cns (file missing)
O9 - Extra button: Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683}
- C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows
Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) -
{FD00D911-7529-4084-9946-A29F1BDF4FE5}
-
http://assistant.3721.com/clean1.htm?
fb=Cns (file missing)
O9 - Extra 'Tools' menuitem: 清理上网记
录 - {FD00D911-7529-4084-9946-
A29F1BDF4FE5} -
http://assistant.3721.com/clean1.htm?
fb=Cns (file missing)
O9 - Extra button: 访问瑞星网站 -
{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444}
- http://www.rising.com.cn (file
missing)
O9 - Extra button: 访问卡卡社区 -
{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445}
- http://www.ikaka.com (file missing)
O11 - Options group: [!CNS] 上网助手-
地址栏搜索
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-
31909CB9515D} (Edit Class) -
https://www.sz1.cmbchina.com/download/C
MBEdit.cab
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-
ADC34DA30CFF}
(PatchInstaller.Installer) -
file://G:\content\include\XPPatchInstal
ler.CAB
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-
2D05CB959537} (MSN Photo Upload Tool) -
http://spaces.msn.com//PhotoUpload/MsnP
Upld.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-
00C04F9A3B61} (趋势科技在线扫毒程序) -
http://www.trendmicro.com.cn/housecall/
xscan53.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-
5009F29E09E1} (ActiveScan Installer
Class) -
http://www.pandasoftware.com/activescan
/as5/asinst.cab
O16 - DPF: {DA984A6D-508E-11D6-AA49-
0050FF3C628D} (Ravonline) -
http://download.rising.com.cn/QQ/QQkill
/rsonline.cab
O18 - Protocol: dic - {C21F5C32-F57A-
4A0D-8E0A-B672691C52D0} - C:\Program
Files\Kingsoft\Powerword 2003
\XDictExB.dll
O23 - Service: C-DillaCdaC11BA -
Macrovision - C:\WINDOWS\system32
\drivers\CDAC11BA.EXE
O23 - Service: Macromedia Licensing
Service - Unknown owner - C:\Program
Files\Common Files\Macromedia
Shared\Service\Macromedia Licensing.exe
O23 - Service: Rising Personal Firewall
Service (RfwService) - Beijing Rising
Technology Corporation Limited -
C:\Program Files\rising\Rfw\rfwsrv.exe
O23 - Service: Rising Process
Communication Center (RsCCenter) -
rising - C:\PROGRAM
FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service
(RsRavMon) - Beijing Rising Technology
Co., Ltd. - C:\PROGRAM
FILES\RISING\RAV\Ravmond.exe