Logfile of HijackThis v1.99.1
Scan saved at 12:30:10, on 2005-09-07
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\联想\联想键盘驱动\Ps2Kbdriver.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\联想\联想键盘驱动\fastkey.exe
C:\WINDOWS\System32\svchost.exe
D:\HijackThis\HijackThis.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\新建文~2\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\Program Files\FlashGet\downbest.net-flashget\downbest.net-flashget\jccatch.dll
O2 - BHO: InsIII - {DDDE2452-AF9E-4577-AE6C-465DBCB54D49} - C:\WINDOWS\system32\obdc16tg.dll
O4 - HKLM\..\Run: [HuaShanTGEKBDPS2] C:\Program Files\联想\联想键盘驱动\Ps2Kbdriver.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\qqyx\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\qqyx\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\qqyx\qq\SendMMS.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet\downbest.net-flashget\downbest.net-flashget\Flashget.v1.71\FlashGet.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet\downbest.net-flashget\downbest.net-flashget\Flashget.v1.71\FlashGet.exe
O16 - DPF: {098A3F72-3110-4004-B954-2F9DC44934B4} (AddSHCARoot Control) - http://www.sheca.com/AddSHCARootCert.cab
O16 - DPF: {14DD0EC3-98B0-48F2-84BB-09B8403C7C71} (TrainerOCX Control) - http://www.lenovohelp.com/ccversions/8/install/installer.cab
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/095b ... zip/RdxIE601_cn.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/wind ... e.cab?1121090436253
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {7FC22A16-79E6-4787-9C96-B6359BB1106D} (DigitalTrafic Control) - http://www.jt.sh.cn/trafficmap/jtj.cab
O16 - DPF: {CDC9134A-ABEB-4611-947D-E4DEC7EBD83E} (QDiagLEUpdateObj Class) - http://www.lenovohelp.com/html/qdiagle.cab
O16 - DPF: {D8B23265-10CA-4844-B2E3-E2840DF7EEF3} (WebRun Control) - http://www.59ie.com/online/webrun.cab
O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/QQ/QQkill/rsonline.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan
Object) - http://download.rising.com.cn/re ... /Ver2005/OL2005.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D550508A-C35E-4ED5-AA3B-56B6C18C9038}: NameServer = 202.96.209.6 202.96.209.133
O20 - AppInit_DLLs: APIHookDll.dll
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
这是小弟的日志,斑竹帮忙看看有没有问题 昨天启动瑞星杀毒,结果不知道杀出来了个什么病毒 在重启就是显示找不到RONVIDIAT.DLL的模块,结果点机确定后系统正常 现在点瑞星的升级他马上就自动卸载瑞星了,不知道是中了什么木马没有啊
