HijackThis_zww汉化版扫描日志 V1.99.1
保存于 13:01:48, 日期 2005-12-11
操作系统: Windows 2000 SP4 (WinNT 5.00.2195)
浏览器: Internet Explorer v6.00 SP1 (6.00.2800.1106)
当前运行的进程:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\瑞星\Rav\CCenter.exe
C:\Program Files\瑞星\Rav\Ravmond.exe
C:\WINNT\System32\cisvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\TT\TTraveler.exe
C:\Program Files\瑞星\Rav\RavMon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.367\HijackThis1991zww.exe
O2 - BHO: (no name) - _{14626814-42DA-4791-95B8-CD99A8426FFB} - (no file)
O2 - BHO: yPhtb - _{33BBE430-0E42-4f12-B075-8D21ACB10DCB} - (no file)
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - (no file)
O3 - IE工具栏增项: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [StormCodec_Helper] "C:\Program Files\风暴\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [RavMon] C:\PROGRA~1\瑞星杀\RAV\RAVMON.EXE -SYSTEM
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\瑞星\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [RavScanBD] "C:\Program Files\瑞星\Rav\ScanBD.exe" /INST
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [e2bf698e3dd45f5e44365f33f80239c8] "C:\Program Files\qq强行\wpsdls.14520.10.exe" -t 14520.10
O8 - IE右键菜单中的新增项目: &使用下载加速专家下载 - C:\Program Files\3721\Dlaccel\geturl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\qq\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\qq\SendMMS.htm
O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm
O9 - 浏览器额外的按钮: 商机直通车 - {13b0c05c-ef05-4bf6-b0ea-f6111af25544} - C:\WINNT\system32\alitb1\bar.dll (file missing)
O9 - 浏览器额外的按钮: 清理 - {FC5F1910-F130-11DB-BB90-00C04F79FFC0} - C:\Program Files\完美卸载V2006\TrackClean.exe (file missing)
O9 - 浏览器额外的“工具”菜单项: 完美卸载嵌入IE清理 - {FC5F1910-F130-11DB-BB90-00C04F79FFC0} - C:\Program Files\完美卸载V2006\TrackClean.exe (file missing)
O15 - “受信任的站点”中添加项: http://www.icbc.com.cn
O16 - DPF: _{14626814-42DA-4791-95B8-CD99A8426FFB} - http://210.192.100.92/dnsaii.cab
O16 - DPF: _{488A4255-3236-44B3-8F27-FA1AECAA8844} - https://img.alipay.com/download/aliedit.cab
O16 - DPF: _{8135EF31-FE8C-4C6E-A18A-F59944C3A488} - http://ddddl.dudu.com/ddd/update/plugin/dddspocx.cab
O16 - DPF: _{EF9F1C48-1A63-495A-9317-B7B71B34A9CF} - http://ddddl.dudu.com/ddd/update/plugin/dudumsp.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {5EC7C511-CD0F-42E6-830C-1BD9882F3458} (PowerPlayer Control) - http://www.ppstream.com/bin/powerplayer.cab
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} - http://static.zangocash.com/cab/Zango/ie/bridge-c6.cab
O16 - DPF: {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} (QQPlayer Control) - http://219.133.62.236/QQPlayer.cab
O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl
Object) - https://www.tenpay.com/download/qqedit.cab
O23 - NT 服务: cmj_desktop_server - Unknown owner - C:\Documents and Settings\Administrator\桌面\server.exe" service (file missing)
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\瑞星\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\瑞星\Rav\Ravmond.exe