好晕``电脑中毒了``中毒后到现在最好有100多个``杀都杀不完``好晕哦`
各位帮帮忙``帮我看看那里不行``谢谢了!~
Logfile of HijackThis v1.99.1
Scan saved at 14:02:14, on 2006-6-8
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
F:\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
F:\Rising\Rav\Ravmond.exe
f:\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
F:\Rising\Rav\RavStub.exe
C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wscntfy.exe
F:\超级兔子魔法设置\safeedit.EXE
C:\WINDOWS\system32\RUNDLL32.exe
C:\WINDOWS\system32\Rundll32.exe
F:\Rising\Rfw\rfwmain.exe
D:\Program Files\Tencent\QQ\QQ.exe
D:\Program Files\Tencent\QQ\TIMPlatform.exe
F:\Rising\Rav\Rav.exe
C:\WINDOWS\explorer.exe
F:\Rising\Rav\RsLogVw.exe
D:\Program Files\Tencent\TT\TTraveler.exe
F:\下载\hijackthis\HijackThis.exe
R3 - URLSearchHook: (no name) - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - (no file)
R3 - URLSearchHook: (no name) - {1F7C5765-1CE9-4505-8043-9DCC248F7D15} - (no file)
R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr1.dll (file missing)
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v8.dll
O2 - BHO: Ad Engine - {077FD0C3-1291-4104-A356-41E36B252682} - C:\Program Files\Yayad\AdCore.dll
O2 - BHO: (no name) - {0BC59351-060C-43A4-A5BA-1920A1151BA2} - C:\WINDOWS\system32\Wthlq.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr1.dll (file missing)
O2 - BHO: (no name) - {0DF26731-C0F8-4E26-8E39-A455D9055C5B} - C:\WINDOWS\system32\Qira.dll
O2 - BHO: (no name) - {120DC595-A8E1-4C9E-BE6D-2CFCCBD8519C} - C:\WINDOWS\system32\Opad.dll
O2 - BHO: EyeOnBrowser Class - {1272F701-349D-4DB3-BBCD-10CBDCD049FE} - C:\WINDOWS\Downlo~1\_IS_WEBH.dll
O2 - BHO: (no name) - {1F7C5765-1CE9-4505-8043-9DCC248F7D15} - (no file)
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: (no name) - {4744CE87-8B85-4B04-8A41-354AE23BDF6B} - C:\WINDOWS\system32\Kkpns.dll
O2 - BHO: (no name) - {47B8B180-2D8F-4107-8A2D-59FF5DCB3AE6} - C:\WINDOWS\system32\Oyunqp.dll
O2 - BHO: (no name) - {4EB068BE-9FC2-4865-9854-800AD33882C3} - C:\WINDOWS\system32\Nthuvn.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
O2 - BHO: (no name) - {65142FE0-4BB8-4067-8530-8E83261A723E} - C:\WINDOWS\system32\Pbgyu.dll
O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - (no file)
O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O2 - BHO: (no name) - {6DE305B7-E6F2-46B5-8ECB-0EA5A1D9A566} - C:\WINDOWS\system32\Qcdlp.dll
O2 - BHO: (no name) - {6EF39EC7-E64B-4323-989E-5EBAEC449F4E} - C:\WINDOWS\system32\Haev.dll
O2 - BHO: (no name) - {7289C252-F443-4E71-9DD3-790D0FBAF889} - C:\WINDOWS\system32\Neqq.dll
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\Progra~1\Baidu\bar\BaiDuBar.dll
O2 - BHO: ShowBar
Object Class - {850B69E4-90DB-4F45-8621-891BF35A5B53} - C:\WINDOWS\system32\alitb\bar.dll
O2 - BHO: (no name) - {8CC8976B-1142-408B-9A31-59F69CB187B1} - C:\WINDOWS\system32\Azjgu.dll
O2 - BHO: (no name) - {9DFDD4A8-B130-4061-A67D-C1281C345FC6} - C:\WINDOWS\system32\Udis.dll
O2 - BHO: (no name) - {A8AA099D-B095-49B1-A6EB-F51C6D1457C4} - C:\WINDOWS\system32\Fbcha.dll
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX
O2 - BHO: HB
Object Class - {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} - C:\PROGRA~1\HBClient\tbhelper.dll
O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - C:\WINDOWS\system32\IEHelper.dll
O2 - BHO: QuickBtn - {D1BB7CF4-4463-4e91-88D7-ECC3CE0A13B7} - C:\Program Files\CoolWebsite\QuickLink.dll
O2 - BHO: (no name) - {D1E46391-2F78-4B1B-A966-37CBAA066D28} - C:\WINDOWS\system32\Hyafs.dll
O2 - BHO: (no name) - {F36EAE5E-915A-4229-8414-187C39CDF229} - C:\WINDOWS\system32\Dzof.dll
O2 - BHO: (no name) - {F560B6FF-130B-43FD-AD8E-9244DA512164} - C:\WINDOWS\system32\Znmjp.dll
O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll
O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\Progra~1\Baidu\bar\BaiDuBar.dll
O4 - HKLM\..\Run: [SafeEdit] F:\超级兔子魔法设置\safeedit.EXE /Load /LockFile
O4 - HKLM\..\Run: [KvMonXP] "F:\KV2006\KVMonXP.kxp" /auto
O4 - HKLM\..\Run: [advapi32] RUNDLL32 C:\WINDOWS\Downlo~1\_IS_ISC.dll,isc
O4 - HKLM\..\Run: [RichMedia] C:\WINDOWS\system32\Rundll32.exe "C:\PROGRA~1\HBClient\tbhelper.dll",WaitWindows
O4 - HKLM\..\Run: [stup1.exe] C:\PROGRA~1\TENCENT\Adplus\stup1.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &RSDN Search - res://C:\Program Files\ScanToolbar\ScanBar.dll/GoRSDN.dll.htm
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder\getAllurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - C:\Program Files\KuGoo3\KuGoo3DownX.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\浩方对战平台\GameClient.exe
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra 'Tools' menuitem: 彩E精灵设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra button: 易趣购物 - {BE9C13C3-9E46-4db1-BC05-BD8DA44599F2} - http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-209?cn=song;icon;hp&mpro=http://www.ebay.com.cn (file missing)
O9 - Extra 'Tools' menuitem: 易趣购物 - {BE9C13C3-9E46-4db1-BC05-BD8DA44599F2} - http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-209?cn=song;icon;hp&mpro=http://www.ebay.com.cn (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{D653D873-A57C-41F0-84CF-5329F6794908}: NameServer = 202.96.128.166 202.96.128.86
O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O23 - Service: kavsvc - Unknown owner - F:\Kaspersky Anti-Virus Personal\kavsvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\Ravmond.exe
