扫了一下，结果如下
HijackThis_815汉化版扫描日志 V1.99.1
保存于 17:58:54, 日期 2005-12-7
操作系统： Windows XP (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 (6.00.2600.0000)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
c:\program files\rising\rfw\rfwsrv.exe
C:\Program Files\rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\nvsvc32.exe
c:\program files\rising\rfw\RfwMain.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\Rundll32.exe
C:\Program Files\rising\Rav\RavTask.exe
C:\Program Files\rising\Rav\Ravmon.exe
C:\WINDOWS\System32\ctfmon.exe
D:\Program Files\MSNShell\BIN\MSNShell.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
D:\Program Files\Tencent\qq\QQ.exe
D:\Program Files\Netease\popo2004\Popo.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Alien\桌面\4842302005817230232\HijackThis1991zww.exe
O1 - Hosts: 210.17.251.234 bbbppp.com
O1 - Hosts: 210.17.251.234 www.bbbppp.com
O1 - Hosts: 210.17.251.234 666fff.com
O1 - Hosts: 210.17.251.234 www.666fff.com
O1 - Hosts: 210.17.251.234 qq558899.com
O1 - Hosts: 210.17.251.234 www.qq558899.com
O1 - Hosts: 210.17.251.234 hkqw.com
O1 - Hosts: 210.17.251.234 www.hkqw.com
O1 - Hosts: 210.17.251.234 65188.com
O1 - Hosts: 210.17.251.234 www.65188.com
O1 - Hosts: 210.17.251.234 665858.com
O1 - Hosts: 210.17.251.234 www.665858.com
O1 - Hosts: 210.17.251.234 tm5656.com
O1 - Hosts: 210.17.251.234 www.tm5656.com
O1 - Hosts: 210.17.251.234 88235.com
O1 - Hosts: 210.17.251.234 www.88235.com
O1 - Hosts: 210.17.251.234 k88688.com
O1 - Hosts: 210.17.251.234 www.k88688.com
O1 - Hosts: 210.17.251.234 22688.cn
O1 - Hosts: 210.17.251.234 www.22688.cn
O1 - Hosts: 210.17.251.234 30887.com
O1 - Hosts: 210.17.251.234 www.30887.com
O1 - Hosts: 210.17.251.234 331188.net
O1 - Hosts: 210.17.251.234 www.331188.net
O1 - Hosts: 210.17.251.234 50958.com
O1 - Hosts: 210.17.251.234 www.50958.com
O1 - Hosts: 210.17.251.234 518778.com
O1 - Hosts: 210.17.251.234 www.518778.com
O1 - Hosts: 210.17.251.234 hongkong3618.com
O1 - Hosts: 210.17.251.234 www.hongkong3618.com
O1 - Hosts: 210.17.251.234 kk4444.com
O1 - Hosts: 210.17.251.234 www.kk4444.com
O1 - Hosts: 210.17.251.234 xp668.com
O1 - Hosts: 210.17.251.234 www.xp668.com
O1 - Hosts: 210.17.251.234 iebar.t2t2.com
O1 - Hosts: 210.17.251.234 fh94.com
O1 - Hosts: 210.17.251.234 www.fh94.com
O1 - Hosts: 210.17.251.234 ww678.com
O1 - Hosts: 210.17.251.234 www.ww678.com
O1 - Hosts: 210.17.251.234 00559.com
O1 - Hosts: 210.17.251.234 www.00559.com
O1 - Hosts: 210.17.251.234 25889.com
O1 - Hosts: 210.17.251.234 www.25889.com
O1 - Hosts: 210.17.251.234 49558.com
O1 - Hosts: 210.17.251.234 www.49558.com
O1 - Hosts: 210.17.251.234 6868888.com
O1 - Hosts: 210.17.251.234 www.6868888.com
O1 - Hosts: 210.17.251.234 7575333.com
O1 - Hosts: 210.17.251.234 www.7575333.com
O1 - Hosts: 210.17.251.234 85599.com
O1 - Hosts: 210.17.251.234 www.85599.com
O1 - Hosts: 210.17.251.234 88993.com
O1 - Hosts: 210.17.251.234 www.88993.com
O1 - Hosts: 210.17.251.234 f689.com
O1 - Hosts: 210.17.251.234 www.f689.com
O1 - Hosts: 210.17.251.234 hk3728.com
O1 - Hosts: 210.17.251.234 www.hk3728.com
O1 - Hosts: 210.17.251.234 k3355.com
O1 - Hosts: 210.17.251.234 www.k3355.com
O1 - Hosts: 210.17.251.234 kk766.com
O1 - Hosts: 210.17.251.234 www.kk766.com
O1 - Hosts: 210.17.251.234 kkkiii.com
O1 - Hosts: 210.17.251.234 www.kkkiii.com
O1 - Hosts: 210.17.251.234 kkkjjj.com
O1 - Hosts: 210.17.251.234 www.kkkjjj.com
O1 - Hosts: 210.17.251.234 pp678.com
O1 - Hosts: 210.17.251.234 www.pp678.com
O1 - Hosts: 210.17.251.234 56598.com
O1 - Hosts: 210.17.251.234 www.56598.com
O1 - Hosts: 210.17.251.234 hk5868.com
O1 - Hosts: 210.17.251.234 hk5868.com
O1 - Hosts: 210.17.251.234 qq558899.com
O1 - Hosts: 210.17.251.234 www.qq558899.com
O1 - Hosts: 210.17.251.234 tm669.com
O1 - Hosts: 210.17.251.234 www.tm669.com
O1 - Hosts: 210.17.251.234 68599.com
O1 - Hosts: 210.17.251.234 www.68599.com
O1 - Hosts: 210.17.251.234 358619.com
O1 - Hosts: 210.17.251.234 www.358619.com
O1 - Hosts: 210.17.251.234 3c6.com
O1 - Hosts: 210.17.251.234 www.3c6.com
O1 - Hosts: 210.17.251.234 f888888.com
O1 - Hosts: 210.17.251.234 www.f888888.com
O1 - Hosts: 210.17.251.234 hh8hh.com
O1 - Hosts: 210.17.251.234 www.hh8hh.com
O1 - Hosts: 210.17.251.234 hongkong998.com
O1 - Hosts: 210.17.251.234 www.hongkong998.com
O1 - Hosts: 210.17.251.234 lh8688.com
O1 - Hosts: 210.17.251.234 www.lh8688.com
O1 - Hosts: 210.17.251.234 lh8688.net
O1 - Hosts: 210.17.251.234 www.lh8688.net
O1 - Hosts: 210.17.251.234 p888888.com
O1 - Hosts: 210.17.251.234 www.p888888.com
O1 - Hosts: 210.17.251.234 vv6888.com
O1 - Hosts: 210.17.251.234 www.vv6888.com
O1 - Hosts: 210.17.251.234 y8y88.com
O1 - Hosts: 210.17.251.234 www.y8y88.com
O1 - Hosts: 210.17.251.234 y8y88.net
O1 - Hosts: 210.17.251.234 www.y8y88.net
O1 - Hosts: 210.17.251.234 lh6688.com
O1 - Hosts: 210.17.251.234 www.lh6688.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - IE工具栏增项: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [rfw] C:\Program Files\rising\Rfw\Rfw.exe
O4 - 启动项HKLM\\Run: [ExFilter] Rundll32.exe C:\WINDOWS\System32\hookdll.dll,ExecFilter solo
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSNShell] D:\Program Files\MSNShell\BIN\MSNShell.exe autorun
O4 - HKCU\..\Run: [cnmail] regedit -s C:\$NtUninstallQ5926809$\spcust0m.dll
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - IE右键菜单中的新增项目: &Download by NetAnts - D:\PROGRA~1\NETANTS\NAGet.htm
O8 - IE右键菜单中的新增项目: Download &All by NetAnts - D:\PROGRA~1\NETANTS\NAGetAll.htm
O8 - IE右键菜单中的新增项目: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - IE右键菜单中的新增项目: 反向链接 - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Program Files\Tencent\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Program Files\Tencent\qq\SendMMS.htm
O8 - IE右键菜单中的新增项目: 类似网页 - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - IE右键菜单中的新增项目: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - IE右键菜单中的新增项目: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - E:\Program Files\HFGame3\GameClient.exe
O9 - 浏览器额外的按钮: NetAnts - {57E91B47-F40A-11D1-B792-444553540000} - D:\PROGRA~1\NETANTS\NetAnts.exe
O9 - 浏览器额外的“工具”菜单项: &NetAnts - {57E91B47-F40A-11D1-B792-444553540000} - D:\PROGRA~1\NETANTS\NetAnts.exe
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {2D4851FD-0BFE-11D4-9260-9AF666D52059} (GameX Class) - http://210.51.5.80/game/system/activex/gamex.cab
O16 - DPF: {2FD1EEC1-796A-4658-B1AB-41989D65161A} (Testocx222 Control) - http://www.k65.net/classes/testocx222.ocx
O16 - DPF: {33331111-1111-1111-1111-611111193458} -
file://c:\ex.cab
O16 - DPF: {33331111-1111-1111-1111-622221193458} -
file://c:\ex.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {64311111-1111-1121-1111-111191113457} -
file://c:\eied_s7.cab
O16 - DPF: {ABA7CC7F-019D-47DB-A0D2-B3C2B3AC1B44} (Fc2Boot Class) - http://h5.kele8.com/onet/ActiveX/fc2boot.cab
O16 - DPF: {C0C13879-6A17-429E-80F1-60B23FC1F720} (FcBoot Class) - http://210.51.5.80/game/system/activex/fcboot.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8A67D059-E90E-4764-B0DC-8685299F3D16}: NameServer = 202.96.209.6 202.96.209.133
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34546} - C:\WINDOWS\System32\vbsys2.dll
O23 - NT 服务: C-DillaCdaC11BA - Unknown owner - C:\WINDOWS\System32\drivers\CDAC11BA.EXE (file missing)
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\rising\Rav\Ravmond.exe
