好复杂啊,到底我先干什么啊?

HijackThis_815汉化版扫描日志 V1.99.1
保存于      23:01:23, 日期 2006-8-3
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Unable to get Internet Explorer version!

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
d:\program files\rising\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
D:\Program Files\Storm Downloader\StormDownloader.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\SVOHOST.exe
D:\鱼鱼桌面秀\XDeskShow.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\conime.exe
d:\program files\rising\rising\rfw\RfwMain.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Founder\Emergency Center\Hotkey.exe
C:\PROGRA~1\founder\IP_Phone\slpc.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\cidaemon.exe
D:\Program Files\Rising\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\founder\LOCALS~1\Temp\Rar$EX00.767\HijackThis1991zww.exe

R3 - URLSearchHook: (no name) - {13DE3980-C869-4DEF-9083-52094C3744A9} - C:\WINDOWS\system32\Zoxune.dll
R3 - URLSearchHook: (no name) - {ACE1BA50-853A-42C6-963B-C49BE9066345} - C:\WINDOWS\system32\Pkqfzz.dll
R3 - URLSearchHook: (no name) - {F3F45CF6-DF51-49CA-9265-411FE8593B43} - C:\WINDOWS\system32\Ndkbb.dll
R3 - URLSearchHook: (no name) - {E1BEE320-36E7-43E6-800C-FE526732F1E1} - C:\WINDOWS\system32\Earsqe.dll
R3 - URLSearchHook: (no name) - {6BD7C196-0A35-4AB8-A967-EB12743C1435} - C:\WINDOWS\system32\Vfcdrl.dll
R3 - URLSearchHook: (no name) - {96CAE4C7-0944-49EC-BAA6-5A38B3772467} - C:\WINDOWS\system32\Qnxevt.dll
R3 - URLSearchHook: (no name) - {E555DEC9-6E43-42A5-AD3D-DCA0B7DC30EF} - C:\WINDOWS\system32\Sabeek.dll (file missing)
R3 - URLSearchHook: (no name) - {1E140AB7-DE95-43CA-B484-86FF1EE0B6CC} - C:\WINDOWS\system32\Ehwb.dll (file missing)
R3 - URLSearchHook: (no name) - {6897D9A6-F09E-4751-A8AB-7E14729C477B} -

C:\WINDOWS\system32\Vbbi.dll (file missing)
R3 - URLSearchHook: (no name) - {E990D38F-B449-40F9-96F1-063150283A7C} - C:\WINDOWS\system32\Ifix.dll (file missing)
R3 - URLSearchHook: (no name) - {F75E8353-6E16-4AAF-8A08-C15315945E0A} - C:\WINDOWS\system32\Apgpet.dll (file missing)
R3 - URLSearchHook: (no name) - {7A523483-3FC6-4396-850D-016D7296A74C} - C:\WINDOWS\system32\Vlnsi.dll (file missing)
R3 - URLSearchHook: (no name) - {E3429333-E9D7-4B2D-9A9B-9C82E212842E} - C:\WINDOWS\system32\Wacz.dll (file missing)
R3 - URLSearchHook: (no name) - {52F8726E-4496-4714-A6AE-7ACC6D069A4F} - C:\WINDOWS\system32\Yzuzk.dll (file missing)
R3 - URLSearchHook: (no name) - {68515421-048D-4163-9E59-ED5CF7AE1220} - C:\WINDOWS\system32\Iblsm.dll (file missing)
R3 - URLSearchHook: (no name) - {1C7199DB-BF9D-4DA4-A3E9-3B4DD49F13B5} - C:\WINDOWS\system32\Okus.dll (file missing)
R3 - URLSearchHook: (no name) - {128B2DAA-D21F-41AC-B130-4EC0DDCC689A} - C:\WINDOWS\system32\Ctkj.dll (file missing)
R3 - URLSearchHook: QQ Search Hook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\AddrPlus\IEHelp.dll (file missing)
R3 - URLSearchHook: SrchHook Class - {EED92A43-CFCE-4548-BD73-B0A405470ED5} - C:\PROGRA~1\CNNIC\Cdn\iesrch.dll
R3 - URLSearchHook: (no name) - {800BE87E-AF2C-463D-96E8-81E8B17DB28D} - C:\WINDOWS\system32\Lnqt.dll
R3 - URLSearchHook: (no name) - {B4F21247-CAD6-4386-B009-7E584761C8B4} - C:\WINDOWS\system32\Fkar.dll
R3 - URLSearchHook: (no name) - {0922DDF0-C4BB-49AA-B468-F198DE160396} - C:\WINDOWS\system32\Hukuo.dll
R3 - URLSearchHook: (no name) - {BDB758E2-B60C-4CD0-B790-A4B24A9B82E4} - C:\WINDOWS\system32\Gltuuh.dll
R3 - URLSearchHook: (no name) - {071565F0-EDF9-4FDE-AB15-DE0299FADC09} - C:\WINDOWS\system32\Ffrom.dll
R3 - URLSearchHook: (no name) - {01DEB9A8-2472-496C-9240-C170F0A35389} - C:\WINDOWS\system32\Ijnunf.dll
R3 - URLSearchHook: (no name) - {D3599BB1-C794-4AD4-999F-337AD4009217} - C:\WINDOWS\system32\Nigcg.dll
R3 - URLSearchHook: (no name) - {2D79EA17-CA3F-4B7D-99A3-3FE8A1EC5823} - C:\WINDOWS\system32\Azsoof.dll
R3 - URLSearchHook: (no name) - {E9D8AC7B-CBE7-4B94-BDA3-9B4C766D5669} - C:\WINDOWS\system32\Bkcp.dll
R3 - URLSearchHook: (no name) - {9266F138-0C00-468A-A80B-970AC3C3E64F} - C:\WINDOWS\system32\Ingos.dll
R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v14.dll
O2 - BHO: (no name) - {01DEB9A8-2472-496C-9240-C170F0A35389} - C:\WINDOWS\system32\Ijnunf.dll
O2 - BHO: (no name) - {071565F0-EDF9-4FDE-AB15-DE0299FADC09} - C:\WINDOWS\system32\Ffrom.dll
O2 - BHO: (no name) - {0922DDF0-C4BB-49AA-B468-F198DE160396} - C:\WINDOWS\system32\Hukuo.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - (no file)
O2 - BHO: (no name) - {105E4D0C-5E21-41ED-90F9-013EEF271BD6} - C:\WINDOWS\system32\widgetdownload.dll
O2 - BHO: (no name) - {128B2DAA-D21F-41AC-B130-4EC0DDCC689A} - C:\WINDOWS\system32\Ctkj.dll (file missing)
O2 - BHO: (no name) - {13DE3980-C869-4DEF-9083-52094C3744A9} - C:\WINDOWS\system32\Zoxune.dll
O2 - BHO: (no name) - {1C7199DB-BF9D-4DA4-A3E9-3B4DD49F13B5} - C:\WINDOWS\system32\Okus.dll (file missing)
O2 - BHO: (no name) - {1E140AB7-DE95-43CA-B484-86FF1EE0B6CC} - C:\WINDOWS\system32\Ehwb.dll (file missing)
O2 - BHO: (no name) - {2D79EA17-CA3F-4B7D-99A3-3FE8A1EC5823} - C:\WINDOWS\system32\Azsoof.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll
O2 - BHO: IfhXsrzz Class - {46B31D34-7255-2871-99FA-1CAF7954F389} - C:\WINDOWS\DOWNLO~1\ewcdw.dll
O2 - BHO: (no name) - {52F8726E-4496-4714-A6AE-7ACC6D069A4F} - C:\WINDOWS\system32\Yzuzk.dll (file missing)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\download\QQIEHelper.dll
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL
O2 - BHO: (no name) - {68515421-048D-4163-9E59-ED5CF7AE1220} - C:\WINDOWS\system32\Iblsm.dll (file missing)
O2 - BHO: (no name) - {6897D9A6-F09E-4751-A8AB-7E14729C477B} - C:\WINDOWS\system32\Vbbi.dll (file missing)
O2 - BHO: (no name) - {6BD7C196-0A35-4AB8-A967-EB12743C1435} - C:\WINDOWS\system32\Vfcdrl.dll
O2 - BHO: (no name) - {7A523483-3FC6-4396-850D-016D7296A74C} - C:\WINDOWS\system32\Vlnsi.dll (file missing)
O2 - BHO: bg - {7BDAF75A-0D6F-4F50-AFE9-333D08DF4005} - C:\Program Files\baigoo\BGooBHO.dll (file missing)
O2 - BHO: (no name) - {800BE87E-AF2C-463D-96E8-81E8B17DB28D} - C:\WINDOWS\system32\Lnqt.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\download\ComDlls\XUNLEIBHO_001.dll
O2 - BHO: ThunderMiniBHO - {8E6C1C49-F9CE-4311-9FB4-D70E8B0AEAEB} - C:\Program Files\Thunder Network\ThunderMini\ComDlls\XunLeiMiniBHO_002.dll
O2 - BHO: (no name) - {9266F138-0C00-468A-A80B-970AC3C3E64F} - C:\WINDOWS\system32\Ingos.dll
O2 - BHO: (no name) - {96CAE4C7-0944-49EC-BAA6-5A38B3772467} - C:\WINDOWS\system32\Qnxevt.dll
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - E:\kugoo\KuGoo3\KuGoo3DownXControl.ocx
O2 - BHO: (no name) - {ACE1BA50-853A-42C6-963B-C49BE9066345} - C:\WINDOWS\system32\Pkqfzz.dll

O2 - BHO: (no name) - {B4F21247-CAD6-4386-B009-7E584761C8B4} - C:\WINDOWS\system32\Fkar.dll
O2 - BHO: (no name) - {BDB758E2-B60C-4CD0-B790-A4B24A9B82E4} - C:\WINDOWS\system32\Gltuuh.dll
O2 - BHO: (no name) - {D3599BB1-C794-4AD4-999F-337AD4009217} - C:\WINDOWS\system32\Nigcg.dll
O2 - BHO: (no name) - {E1BEE320-36E7-43E6-800C-FE526732F1E1} - C:\WINDOWS\system32\Earsqe.dll
O2 - BHO: (no name) - {E3429333-E9D7-4B2D-9A9B-9C82E212842E} - C:\WINDOWS\system32\Wacz.dll (file missing)
O2 - BHO: (no name) - {E555DEC9-6E43-42A5-AD3D-DCA0B7DC30EF} - C:\WINDOWS\system32\Sabeek.dll (file missing)
O2 - BHO: (no name) - {E990D38F-B449-40F9-96F1-063150283A7C} - C:\WINDOWS\system32\Ifix.dll (file missing)
O2 - BHO: (no name) - {E9D8AC7B-CBE7-4B94-BDA3-9B4C766D5669} - C:\WINDOWS\system32\Bkcp.dll
O2 - BHO: (no name) - {F3F45CF6-DF51-49CA-9265-411FE8593B43} - C:\WINDOWS\system32\Ndkbb.dll
O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll
O2 - BHO: (no name) - {F75E8353-6E16-4AAF-8A08-C15315945E0A} - C:\WINDOWS\system32\Apgpet.dll (file missing)
O2 - BHO: AssistHelper - {FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll (file missing)
O3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4A40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [RfwMain] "D:\Program Files\Rising\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [MINI_BFYY] D:\Program Files\Storm Downloader\StormDownloader.exe
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [SoundMam] C:\WINDOWS\system32\SVOHOST.exe
O4 - HKCU\..\Run: [XDeskShow] D:\鱼鱼桌面秀\XDeskShow.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - IE右键菜单中的新增项目: &使用暴风下载器下载 - D:\Program Files\Storm Downloader\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迷你迅雷下载 - C:\Program Files\Thunder Network\ThunderMini\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\download\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - E:\kugoo\KuGoo3\KuGoo3DownX.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Excel(&x) - res://D:\PROGRA~1\Office10\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\download\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\download\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\download\SendMMS.htm
O8 - IE右键菜单中的新增项目: 访问通用网址 - C:\Program Files\CNNIC\Cdn\cnnic.htm
O8 - IE右键菜单中的新增项目: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/203
O9 - 浏览器额外的按钮: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - 浏览器额外的“工具”菜单项: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\download\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\download\QQIEHelper.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\cdnns.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\quartz32.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\quartz32.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.foundertech.com
O16 - DPF: {52DF16E3-6C4F-4B22-8BAF-09263E463B48} (金山毒霸在线产品升级) - http://zs.kingsoft.com/KOSInit.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ADCCCA7F-719A-4675-B5CA-D13787D343F0}: NameServer = 219.150.32.132 219.146.0.130
O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - NT 服务: iPod 服务 (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - NT 服务: Network Logon (NetWorkLogon) - Unknown owner - rundll32.exe (file missing)
O23 - NT 服务: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rising\rfw\rfwsrv.exe
O23 - NT 服务: Sysbak hotkey Server (Sysbak_hotkey_Server) - Unknown owner - C:\Program Files\Founder\Emergency Center\Hotkey.exe
O23 - NT 服务: TeamSun LPC - Unknown owner - C:\PROGRA~1\founder\IP_Phone\slpc.exe

谢谢! 我明天再弄,眼镜都挣不开了!谢谢!!!!!!!!
这么晚了还在答复我这个菜鸟,谢谢!!!!!

上面的问题解决了,但怎么小绿伞变红了,监控打不开,声名:我已经删除了搜搜.

修复不了.点了修复就没反应了

哦,知道了.