找到日志了!
当前运行的进程:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
D:\Program Files\Ringz Studio\Storm Downloader\StormDownloader.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\NTdhcp.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Thunder Network\ThunderMini\program\ThunderMini.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
c:\MSDOS.EXE
D:\Program Files\HijackThis1991zww.exe
R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr1.dll
O1 - Hosts: 9.9.9.9 skypetools.tom.com
O1 - Hosts: 9.9.9.9 www.cool-pic.com
O1 - Hosts: 9.9.9.9 www.511ku.com
O1 - Hosts: 9.9.9.9 www.511q.com
O1 - Hosts: 9.9.9.9 www.fvip.cn
O1 - Hosts: 9.9.9.9 17rm.com
O1 - Hosts: 9.9.9.9 www.mv23.com
O1 - Hosts: 9.9.9.9 www.911y.com
O1 - Hosts: 9.9.9.9 www.kanhaha.com
O1 - Hosts: 9.9.9.9 168.tu9.cn
O1 - Hosts: 9.9.9.9 liao8.top22.cn
O1 - Hosts: 9.9.9.9 top22.cn
O1 - Hosts: 9.9.9.9 tu9.cn
O1 - Hosts: 9.9.9.9 liao8.tu9.cn
O1 - Hosts: 9.9.9.9 www.haha9999.com
O1 - Hosts: 9.9.9.9 haha9999.com
O1 - Hosts: 9.9.9.9 www.mmm168.com
O1 - Hosts: 9.9.9.9 www.rm78.com
O1 - Hosts: 9.9.9.9 rm78.com
O1 - Hosts: 9.9.9.9 v.511.cc
O1 - Hosts: 9.9.9.9 www.kvip.cn
O1 - Hosts: 9.9.9.9 assistant.3721.com
O1 - Hosts: 9.9.9.9 www.10uu.com
O1 - Hosts: 9.9.9.9 168.8799.com
O1 - Hosts: 9.9.9.9 www.movieon.net
O1 - Hosts: 9.9.9.9 www.18mei.com
O1 - Hosts: 9.9.9.9 vod.xp99.net
O1 - Hosts: 9.9.9.9 vcd.58so.com
O1 - Hosts: 9.9.9.9 www.movie78.com
O1 - Hosts: 9.9.9.9 www.103h.com
O1 - Hosts: 9.9.9.9 www.kan8dy.com
O1 - Hosts: 9.9.9.9 www.yk88.com
O1 - Hosts: 9.9.9.9 www.qq500.cn
O1 - Hosts: 9.9.9.9 www.921mn.com
O1 - Hosts: 9.9.9.9 www.38mtv.com
O1 - Hosts: 9.9.9.9 www.591mn.com
O1 - Hosts: 9.9.9.9 liao2.sees8.com
O1 - Hosts: 9.9.9.9 www.66pp.net
O1 - Hosts: 9.9.9.9 www.581mm.com
O1 - Hosts: 9.9.9.9 www.cl258.com
O1 - Hosts: 9.9.9.9 www.sedy8.com
O1 - Hosts: 9.9.9.9 www.531kdy.com
O1 - Hosts: 9.9.9.9 www.ku90.com
O1 - Hosts: 9.9.9.9 www.47028.com
O1 - Hosts: 9.9.9.9 client.jogo.cn
O1 - Hosts: 9.9.9.9 iebar.t2t2.com
O1 - Hosts: 9.9.9.9 download.3721.com
O1 - Hosts: 9.9.9.9 vod.mmm168.com
O1 - Hosts: 9.9.9.9 www.521lan.com
O1 - Hosts: 9.9.9.9 www.dy87.com
O1 - Hosts: 9.9.9.9 www.55p5.com
O1 - Hosts: 9.9.9.9 liao.kkddd.com
O1 - Hosts: 9.9.9.9 www.ddkkk.com
O1 - Hosts: 9.9.9.9 www.setu8.com
O1 - Hosts: 9.9.9.9 www.mfvo.com
O1 - Hosts: 9.9.9.9 vod.soucn.net
O1 - Hosts: 9.9.9.9 vod.88997.com
O1 - Hosts: 9.9.9.9 www.777dy.com
O1 - Hosts: 9.9.9.9 pi.51.net
O1 - Hosts: 9.9.9.9 liao8.ip33.cn
O1 - Hosts: 9.9.9.9 2liao8.ip33.cn
O1 - Hosts: 9.9.9.9 www.kku98.com
O1 - Hosts: 9.9.9.9 wwv.86565.com
O1 - Hosts: 9.9.9.9 wwv.vbdy.com
O1 - Hosts: 9.9.9.9 00565.com
O1 - Hosts: 9.9.9.9 www.88588cc.com
O1 - Hosts: 9.9.9.9 www.bb90dy.com
O1 - Hosts: 9.9.9.9 www.0011222.com
O1 - Hosts: 9.9.9.9 www.5k8dy.com
O1 - Hosts: 9.9.9.9 www.0730dy.com
O1 - Hosts: 9.9.9.9 www.5111dy.com
O1 - Hosts: 9.9.9.9 www.999ko.com
O1 - Hosts: 9.9.9.9 www.gongzhusms.com
O1 - Hosts: 9.9.9.9 www.cc911.com
O1 - Hosts: 9.9.9.9 www.rongtv.com
O1 - Hosts: 9.9.9.9 www.94lm.com
O1 - Hosts: 9.9.9.9 365tan.com
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v4.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr1.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - C:\WINDOWS\System32\aclayer.dll (file missing)
O2 - BHO: ThunderMiniBHO - {8E6C1C49-F9CE-4311-9FB4-D70E8B0AEAEB} - C:\Program Files\Thunder Network\ThunderMini\ComDlls\XunLeiMiniBHO_002.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: 金山超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - D:\Program Files\Powerword 2006\BaiduBar.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\zh-cn\msntb.dll
O2 - BHO: YiSou - {EF1D17A9-089F-40cc-8D64-7324CDEBA0DB} - C:\PROGRA~1\YiSou\yisoub.dll
O3 - IE工具栏增项: 一搜工具条 - {115F6E46-FCBC-41ed-B3B5-3BDDD4AAB5E5} - C:\Program Files\YiSou\yisou.dll
O3 - IE工具栏增项: 金山超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - D:\Program Files\Powerword 2006\BaiduBar.dll
O3 - IE工具栏增项: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\zh-cn\msntb.dll
O4 - 启动项HKLM\\Run: [MINI_BFYY] D:\Program Files\Ringz Studio\Storm Downloader\StormDownloader.exe
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [NTdhcp] C:\WINDOWS\system32\NTdhcp.exe
O4 - 启动项HKLM\\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - 启动项HKLM\\Run: [ThunderMini] C:\Program Files\Thunder Network\ThunderMini\ThunderMiniShell.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
O8 - IE右键菜单中的新增项目: !搜一搜(&S) - res://C:\Program Files\YiSou\yisou.dll/232
O8 - IE右键菜单中的新增项目: &使用暴风下载器下载 - D:\Program Files\Ringz Studio\Storm Downloader\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迷你迅雷下载 - C:\Program Files\Thunder Network\ThunderMini\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 在Foxmail中添加该RSS频道/频道组 - res://C:\WINDOWS\system32\fmrsslink.dll/201
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - IE右键菜单中的新增项目: 百度-搜索MP3 - res://D:\Program Files\Powerword 2006\BaiduBar.dll/BAIDUMP3.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索图片 - res://D:\Program Files\Powerword 2006\BaiduBar.dll/BAIDUIMG.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索新闻 - res://D:\Program Files\Powerword 2006\BaiduBar.dll/BAIDUNEWS.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索歌词 - res://D:\Program Files\Powerword 2006\BaiduBar.dll/BAIDULYRIC.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索网页 - res://D:\Program Files\Powerword 2006\BaiduBar.dll/BAIDUSEARCH.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索贴吧 - res://D:\Program Files\Powerword 2006\BaiduBar.dll/BAIDUPOST.HTM
O8 - IE右键菜单中的新增项目: 百度-词典搜索 - res://D:\Program Files\Powerword 2006\BaiduBar.dll/BAIDU_DIC.HTM
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: 易趣购物 - {DE607143-AC19-423e-861A-1D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE607143-AC19-423e-861A-1D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [TBH] 搜搜地址栏搜索
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan
Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{22DEB8F1-5279-4995-B491-0000252F69E1}: NameServer = 61.153.177.196,61.153.177.198
O17 - HKLM\System\CS1\Services\Tcpip\..\{22DEB8F1-5279-4995-B491-0000252F69E1}: NameServer = 61.153.177.196,61.153.177.198
O17 - HKLM\System\CS2\Services\Tcpip\..\{22DEB8F1-5279-4995-B491-0000252F69E1}: NameServer = 61.153.177.196,61.153.177.198
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe