HijackThis_zww汉化版扫描日志 V1.99.1
保存于 21:09:30, 日期 2006-12-27
操作系统: Windows XP SP2 (WinNT
5.01.2600)
浏览器: Internet Explorer v6.00 SP2
(6.00.2900.2180)
当前运行的进程:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\Program Files\Common Files\Microsoft
Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Common
Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program
Files\Rising\AntiSpyware\runiep.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MyIE\MyIE.exe
C:\Program Files\Tencent\QQ\QQ.exe
C:\Program
Files\Tencent\QQ\TIMPlatform.exe
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\explorer.exe
C:\Program Files\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Rising\Rav\Rav.exe
E:\HijackThis1991汉化版
\HijackThis1991zww.exe
F2 - REG:system.ini: UserInit=userinit.exe
explorer.exe
O2 - BHO: ThunderIEHelper Class -
{0005A87D-D626-4B3A-84F9-
1D9571695F55} -
C:\WINDOWS\system32\xunleibho_v8.dll
O2 - BHO: AcroIEHlprObj Class -
{06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\Program
Files\Adobe\Acrobat 6.0
\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: QQBrowserHelper
Object Class -
{54EBD53A-9BC1-480B-966A-
843A333CA162} - C:\Program
Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: BandIE Class - {77FEF28E-EB96
-44FF-B511-3185DEA48697} -
C:\PROGRA~1\baidu\bar\baidubar.dll
(file missing)
O3 - IE工具栏增项: 百度超级搜霸 -
{B580CF65-E151-49C3-B73F-
70B13FCA8E86} - C:\PROGRA~1
\baidu\bar\baidubar.dll (file missing)
O4 - 启动项HKLM\\Run: [TkBellExe]
"C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -
osboot
O4 - 启动项HKLM\\Run: [IgfxTray]
C:\WINDOWS\system32\igfxtray.exe
O4 - 启动项HKLM\\Run: [HotKeysCmds]
C:\WINDOWS\system32\hkcmd.exe
O4 - 启动项HKLM\\Run: [RavTask]
"C:\Program Files\Rising\Rav\RavTask.exe"
-system
O4 - 启动项HKLM\\Run: [IMSCMig]
C:\PROGRA~1\COMMON~1\MICROS~1
\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 启动项HKLM\\Run:
[StormCodec_Helper] "C:\Program
Files\Ringz Studio\Storm
Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [runeip]
C:\Program
Files\Rising\AntiSpyware\runiep.exe
O4 - 启动项HKLM\\Run: [Barsaka]
explorer.exe
O4 - HKCU\..\Run: [ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: desktop.ini
O4 - Global Startup: desktop.ini
O8 - IE右键菜单中的新增项目: 上传到QQ
网络硬盘 - C:\Program
Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用迅雷
下载 - C:\Program Files\Thunder5
\geturl.htm
O8 - IE右键菜单中的新增项目: 使用迅雷
下载全部链接 - C:\Program
Files\Thunder5\getAllurl.htm
O8 - IE右键菜单中的新增项目: 导出到
Microsoft Office Excel(&X) -
res://C:\PROGRA~1\MICROS~2
\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ
自定义面板 - C:\Program
Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ
表情 - C:\Program
Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信
发送该图片 - C:\Program
Files\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: 信息检索 -
{92780B25-18CC-41C8-B9BE-
3C9C571A8263} - C:\PROGRA~1
\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - 浏览器额外的按钮: QQ - {c95fe080
-8f5d-11d2-a20b-00aa003c157b} -
C:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ
- {c95fe080-8f5d-11d2-a20b-
00aa003c157b} - C:\Program
Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: (no name) -
{DEDEB80D-FA35-45d9-9460-
4983E5A8AFE6} - C:\Program
Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩
工具条设置 - {DEDEB80D-FA35-45d9-
9460-4983E5A8AFE6} - C:\Program
Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: Messenger -
{FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项:
Windows Messenger - {FB5F1910-F110-
11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8
-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupda
te/v6/V5Controls/en/x86/client/wuweb_s
ite.cab?1130645093906
O18 - 列举现有的协议: msnim -
{828030A1-22C1-4009-854F-
8E305202313F} - "C:\PROGRA~1
\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui -
C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - NT 服务: Rising Process
Communication Center (RsCCenter) -
Beijing Rising Technology Co., Ltd. -
C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: Rising RealTime Monitor
(RsRavMon) - Beijing Rising Technology
Co., Ltd. - C:\Program
Files\Rising\Rav\Ravmond.exe
扫描好了,给看看啊!~~先谢谢了