我扫描了一下,看来伤得不轻,请高手帮帮忙~~~~~
HijackThis@Qoo的扫描日志 V1.97.7
Scan saved at 18:10:24, on 2005-12-8
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
G:\瑞星下载版\Ravmond.exe
G:\瑞星下载版\RavStub.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\smartde\sde.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
G:\瑞星下~1\RAVMON.EXE
G:\瑞星下~1\RAVTIMER.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\DOCUME~1\BLUEWA~1\LOCALS~1\Temp\Rar$EX03.146\HijackThis.exe
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: ????? - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Super Rabbit SRRestore] G:\MagicSet\srrest.exe /autosave
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RavMon] G:\
O4 - HKLM\..\Run: [RavTimer] G:\
O4 - HKLM\..\Run: [winsync] C:\WINDOWS\System32\kpoopp.exe reg_run
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [RegBar] regsvr32.exe /u C:\progra~1\blogmark\bocaitoolbar.dll /s /i /n
O4 - Startup: ntuser.dat
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Startup: dmlog.txt
O4 - Startup: sys_log_14868889.upt
O4 - Startup: 请稍候desktop.ini
O4 - Global Startup: NTUSER.DAT
O4 - Global Startup: NTUSER.DAT.LOG
O8 - Extra context menu item: &使用迷你迅雷下载 - g:\ThunderMini\geturl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\qq\SendMMS.htm
O8 - Extra context menu item: 用比特精灵下载(&B) - G:\
O9 - Extra button: iebook (HKLM)
O9 - Extra 'Tools' menuitem: iebook (HKLM)
O9 - Extra button: QQ (HKLM)
O9 - Extra 'Tools' menuitem: QQ (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{7107CC1B-0439-4639-BF45-294A1683AA58}: NameServer = 195.95.218.18,85.255.112.11
O17 - HKLM\System\CCS\Services\Tcpip\..\{B283EB22-5E92-4E4D-A757-5F6EE14FF779}: NameServer = 195.95.218.18,85.255.112.11
O17 - HKLM\System\CCS\Services\Tcpip\..\{BEA9AF2E-1597-4190-AF17-45C27CE7CCB5}: NameServer = 195.95.218.18,85.255.112.11
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2EF9AFF-E01B-4F06-BD98-A1A737915B51}: NameServer = 202.96.128.86 202.96.128.166
O17 - HKLM\System\CS1\Services\Tcpip\..\{7107CC1B-0439-4639-BF45-294A1683AA58}: NameServer = 195.95.218.18,85.255.112.11
快点回复我喔~~~等着你救我呢~~~~谢谢啦!!!
