C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\netdde.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\WINNT\system32\svchost.exe
C:\KAV5\KAVSVC.EXE
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\System32\snmp.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\Explorer.EXE
E:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe
E:\clock\clock.exe
C:\WINNT\system32\ctfmon.exe
E:\Program Files\TuneUp Utilities 2004\MemOptimizer.exe
C:\KAV5\KAVSvcUI.EXE
C:\Program Files\Holtek\Hotkey Driver\Program\HotKeyEx.exe
C:\KAV5\KAVPlus.exe
C:\KAV5\MailMon.exe
E:\Program Files\SkyNet\FireWall\PFW.exe
C:\Program Files\JJOL\IME\JJSvr.EXE
E:\Program Files\Maxthon\Plugin\clock\ClockPlugin.EXE
E:\Program Files\vstart\VStart.exe
E:\Program Files\vstart\netsee.exe
E:\Program Files\ZX Messenger\ZX Messenger.exe
E:\Program Files\Maxthon\Maxthon.exe
C:\Program Files\Foxie Suite\Firewall.exe
E:\Program Files\Tencent\qq\QQ.exe
E:\hijackerthis\HijackThis1991zww.exe
R3 - 默认的URLSearchHook丢失。用HijackThis修复
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINNT\system32\xunleibho_v8.dll
O2 - BHO: CSaveTarget
Object - {0E7505F8-8F30-41E0-9D1E-D9DEABD36D38} - C:\Program Files\MiniTuoTu\MiniTuoTu.dll
O2 - BHO: FoxieToolbar Class - {432CAE3B-690F-4C3B-BD97-070EBDA210D5} - C:\Program Files\Foxie Suite\foxietoolbaru.dll
O2 - BHO: EyeOnIE Class - {82925498-364E-4419-B3BF-CD12FC7A8815} - e:\Program Files\Tuotu\xDownDll2.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - e:\Program Files\FlashGet\JCCatch.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - e:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: FoxieSecurityModule Class - {C65185B1-D52B-44A9-861F-8201B50D1F37} - C:\Program Files\Foxie Suite\foxiecoreu.dll
O3 - IE工具栏增项: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - IE工具栏增项: 金山毒霸 - {A9BE2902-C447-420A-BB7F-A5DE921E6138} - C:\KAV5\KAIEPlus.DLL
O3 - IE工具栏增项: MSN 工具栏 - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\zh-cn\msntb.dll
O3 - IE工具栏增项: 全能助手广告拦截专家 - {ED51E9A3-16C5-4236-99E0-9F093B021433} - e:\Program Files\TweakAssist\AssistIEBar.dll
O3 - IE工具栏增项: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - e:\Program Files\Save Flash\SaveFlash.dll
O3 - IE工具栏增项: Foxie - {09C02180-3B46-4CD8-83FF-34DAF442BDEF} - C:\Program Files\Foxie Suite\foxiecoreu.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\KakaTool.dll
O4 - 启动项HKLM\\Run: [Acronis?True?Image Monitor] "E:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe"
O4 - 启动项HKLM\\Run: [systime] E:\clock\clock.exe
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon
O4 - 启动项HKLM\\Run: [KAVRUN] C:\KAV5\KAVRUN.EXE
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "E:\Program Files\TuneUp Utilities 2004\MemOptimizer.exe" autostart
O4 - Global Startup: Hotkey Driver.lnk = C:\Program Files\Holtek\Hotkey Driver\Program\HotKeyEx.exe
O9 - 浏览器额外的按钮: Desktop Search - {306BBB66-D9E4-4481-833E-C1D5FCA06774} - C:\Program Files\Foxie Suite\Resources\HTML\Desktop.htm
O9 - 浏览器额外的“工具”菜单项: Desktop Search - {306BBB66-D9E4-4481-833E-C1D5FCA06774} - C:\Program Files\Foxie Suite\Resources\HTML\Desktop.htm
O9 - 浏览器额外的按钮: Privacy Cleaner - {546E08AA-809F-4F1A-BE1A-6B122EBFCD5A} - C:\Program Files\Foxie Suite\Cleaner.exe
O9 - 浏览器额外的“工具”菜单项: Privacy Cleaner - {546E08AA-809F-4F1A-BE1A-6B122EBFCD5A} - C:\Program Files\Foxie Suite\Cleaner.exe
O9 - 浏览器额外的按钮: 网博士保存网页 - {5885C17B-E8C2-4649-941F-1C7FB6F29C03} - E:\Program Files\Websaver\config\ieext\网博士保存网页.htm (file missing)
O9 - 浏览器额外的“工具”菜单项: 网博士保存网页 - {5885C17B-E8C2-4649-941F-1C7FB6F29C03} - E:\Program Files\Websaver\config\ieext\网博士保存网页.htm (file missing)
O9 - 浏览器额外的按钮: Swift Sweeper - {61039B22-563D-4922-B844-B076C318A66A} - C:\Program Files\Foxie Suite\Sweeper.exe
O9 - 浏览器额外的“工具”菜单项: Swift Sweeper - {61039B22-563D-4922-B844-B076C318A66A} - C:\Program Files\Foxie Suite\Sweeper.exe
O9 - 浏览器额外的按钮: FlashSave - {745DBD89-EEEE-4787-B874-5400222CBD2D} - C:\Program Files\Internet Explorer\PLUGINS\FlashSave.htm
O9 - 浏览器额外的“工具”菜单项: 保存所有 Flash(&W) - {745DBD89-EEEE-4787-B874-5400222CBD2D} - C:\Program Files\Internet Explorer\PLUGINS\FlashSave.htm
O9 - 浏览器额外的按钮: 金山卓越 - {8DE0FCD4-5EB5-11D3-AD25-00002100131B} - url:http://www.joyo.com (file missing)
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\Program Files\Tencent\qq\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\Program Files\Tencent\qq\QQ.EXE
O9 - 浏览器额外的按钮: 脱兔下载 - {D5C1CCC2-811B-4bf2-BF22-0D3B89600F5B} - e:\Program Files\Tuotu\TuoTu.exe
O9 - 浏览器额外的“工具”菜单项: &TuoTu - {D5C1CCC2-811B-4bf2-BF22-0D3B89600F5B} - e:\Program Files\Tuotu\TuoTu.exe
O9 - 浏览器额外的按钮: 金山毒霸网站 - {ede25120-9867-44ae-a56e-4f4cfc225c3d} - url:http://www.duba.net (file missing)
O9 - 浏览器额外的按钮: 在线查毒 - {f58d36c3-40be-4418-a786-d8fbe3eb3554} - C:\KAV5\kavie.htm
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} (photo_uploader Control) - http://upload.photo.163.com/photoup.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{20BFADB8-E1B4-4599-98EE-62C93CF59FAE}: NameServer = 202.102.152.3,202.102.128.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{20BFADB8-E1B4-4599-98EE-62C93CF59FAE}: NameServer = 202.102.152.3,202.102.128.68
O17 - HKLM\System\CS2\Services\Tcpip\..\{20BFADB8-E1B4-4599-98EE-62C93CF59FAE}: NameServer = 202.102.152.3,202.102.128.68
O23 - NT 服务: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - NT 服务: Kingsoft AntiVirus Service (KAVSvc) - kingsoft Antivirus - C:\KAV5\KAVSVC.EXE
O23 - NT 服务: MPSVC Service (MPSVCService) - Micropoint Corporation - e:\Program Files\Micropoint\MPSVC.exe
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - NT 服务: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe
