原本想自己装个记录密码的软件（为了看看QQ）
艾~~~~

HijackThis_815汉化版扫描日志 V1.99.1
保存于      19:58:46, 日期 2006-9-24
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Rav.exe
C:\Program Files\Rising\Rav\RavMon.exe
C:\Program Files\Internet Explorer\iexplore.exe
F:\t\HijackThis1991zww.exe

F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - D:\PROGRA~1\KuGoo2\KUGOO3~1.OCX
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [DAEMON Tools-2052] "C:\Program Files\D-Tools\daemon.exe"  -lang 2052
O4 - 启动项HKLM\\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - 启动项HKLM\\RunOnce: [RavStub] "C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - D:\Program Files\KuGoo2\KuGoo3DownX.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - C:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - 浏览器额外的“工具”菜单项: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - C:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - E:\浩方对战平台\GameClient.exe
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\cdnns.dll
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{67028123-EB0D-4B1C-B4A9-C81E673396CF}: NameServer = 202.101.10.10
O18 - 列举现有的协议: bw+0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw+0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw-0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw-0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw00 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw00s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw10 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw10s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw20 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw20s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw30 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw30s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw40 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw40s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - 列举现有的协议: bw50 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw50s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw60 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw60s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw70 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw70s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw80 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw80s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw90 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw90s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwa0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwa0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwb0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwb0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwc0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwc0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwd0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwd0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwe0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwe0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwf0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwf0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwg0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwg0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwh0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwh0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwi0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwi0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwj0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwj0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwk0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwk0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwl0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwl0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwm0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwm0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwn0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwn0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwo0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwo0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwp0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwp0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwq0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwq0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwr0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwr0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bws0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bws0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwt0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwt0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwu0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwu0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwv0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwv0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bww0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bww0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwx0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwx0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwy0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwy0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwz0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwz0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - 列举现有的协议: offline-8876480 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - NT 服务: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VXNlcg\command.exe (file missing)
O23 - NT 服务: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe (file missing)
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe

O23 - NT 服务: Command Service (cmdService) - Unknown owner - C:\WINDOWS\VXNlcg\command.exe (file missing)
鸽子