失败。。。。。。www.ad-w-a-r-e.com依旧弹出
还不停说什么没邮件客户，IEEXPLORER错误
HijackThis_815汉化版扫描日志 V1.99.1
保存于 10:24:45, 日期 2005-12-20
操作系统： Windows 2000 SP4 (WinNT 5.00.2195)
浏览器： Internet Explorer v6.00 (6.00.2600.0000)
当前运行的进程：
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\cFosSpeed\spd.exe
C:\Program Files\CA-Jinchen\KILL\InoRpc.exe
C:\Program Files\CA-Jinchen\KILL\InoRT.exe
C:\Program Files\CA-Jinchen\KILL\InoTask.exe
D:\usr\local\mysql\bin\mysqld-nt.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\tlntsvr.exe
C:\WINNT\system32\NetManager.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\rundll32.exe
C:\Program Files\Raxco\PerfectDisk\PDSched.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\CA-JIN~1\KILL\realmon.exe
C:\Program Files\Tencent\RTX\rtxc.exe
C:\WINNT\system32\conime.exe
C:\Program Files\SuperLocker\SuperLocker.exe
C:\WINNT\system32\NetMeeting.exe
C:\Program Files\Tencent\qq\QQ.exe
C:\Program Files\Tencent\qq\TIMPlatform.exe
C:\PROGRAM FILES\MAXTHON\MAXTHON.EXE
C:\Documents and Settings\ly\桌面\hijackthis1.99.1第二版(8月15日更新)\HijackThis1991zww.exe
C:\WINNT\system32\IEXPLORE.EXE
R3 - 默认的URLSearchHook丢失。用HijackThis修复
F3 - REG:win.ini: run=RAVMOND.exe
O2 - BHO: 卡卡上网安全助手 - {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} - C:\WINNT\system32\kakatool.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [Realtime Monitor] C:\PROGRA~1\CA-JIN~1\KILL\realmon.exe
O4 - 启动项HKLM\\Run: [WinHelp] C:\WINNT\system32\WinHelp.exe
O4 - 启动项HKLM\\Run: [Hardware Profile] C:\WINNT\system32\hxdef.exe
O4 - 启动项HKLM\\Run: [VFW Encoder/Decoder Settings] RUNDLL32.EXE MSSIGN30.DLL ondll_reg
O4 - 启动项HKLM\\Run: [Microsoft NetMeeting Associates, Inc.] NetMeeting.exe
O4 - 启动项HKLM\\Run: [Program In Windows] C:\WINNT\system32\IEXPLORE.EXE
O4 - 启动项HKLM\\Run: [Protected Storage] RUNDLL32.EXE MSSIGN30.DLL ondll_reg
O4 - 启动项HKLM\\Run: [Shell Extension] C:\WINNT\system32\spollsv.exe
O4 - 启动项HKLM\\RunServices: [SystemTra] C:\WINNT\SysTra.EXE
O4 - Startup: 超级桌面锁定器(免费版).lnk = C:\Program Files\SuperLocker\SuperLocker.exe
O4 - Startup: RouteADD.bat
O4 - Global Startup: 腾讯通.lnk = C:\Program Files\Tencent\RTX\rtxc.exe
O8 - IE右键菜单中的新增项目: &使用DuDu 加速器下载 - res://C:\Program Files\DuDu\DddClient\dddmext.dll/202
O8 - IE右键菜单中的新增项目: &使用DuDu 加速器下载全部链接 - res://C:\Program Files\DuDu\DddClient\dddmext.dll/203
O8 - IE右键菜单中的新增项目: &使用暴风下载器下载 - C:\Program Files\Ringz Studio\Storm Downloader\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Sandai Technologies Inc\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Sandai Technologies Inc\Thunder\getAllurl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\qq\SendMMS.htm
O9 - 浏览器额外的按钮: 下载管理 - {3DB9F45E-AA74-4373-A466-C18A9F1C500D} - C:\Program Files\DuDu\DddClient\DuDuAcc.exe
O9 - 浏览器额外的“工具”菜单项: 下载管理 - {3DB9F45E-AA74-4373-A466-C18A9F1C500D} - C:\Program Files\DuDu\DddClient\DuDuAcc.exe
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - http://www.rising.com.cn/?u=RSTB (file missing)
O9 - 浏览器额外的按钮: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - http://www.ikaka.com/?u=RSTB (file missing)
O9 - 浏览器额外的按钮: 百万图库 - {6713E8D2-850A-101B-AFC0-4210102A8DA7} - http://www.26-3.com/p (file missing) (HKCU)
O12 - IE插件，支持文件类型.tif: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin5.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{AC2A6F3A-28B5-47F7-9C39-7F8E75B91936}: NameServer = 10.9.1.15
O17 - HKLM\System\CS1\Services\Tcpip\..\{AC2A6F3A-28B5-47F7-9C39-7F8E75B91936}: NameServer = 10.9.1.15
O17 - HKLM\System\CS2\Services\Tcpip\..\{AC2A6F3A-28B5-47F7-9C39-7F8E75B91936}: NameServer = 10.9.1.15
O18 - 列举现有的协议: mbox - {7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6} - C:\WINNT\system32\mbprot.dll (file missing)
O20 - Winlogon Notify: RunServices - C:\WINNT\system32\mvr2l99o1.dll
O23 - NT 服务: cFosSpeed System Service (cFosSpeedS) - Unknown owner - C:\Program Files\cFosSpeed\spd.exe" -service (file missing)
O23 - NT 服务: Client Access Express 远程命令 (Cwbrxd) - IBM Corporation - C:\WINNT\CWBRXD.EXE
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: KILL RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA-Jinchen\KILL\InoRpc.exe
O23 - NT 服务: KILL Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA-Jinchen\KILL\InoRT.exe
O23 - NT 服务: KILL Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA-Jinchen\KILL\InoTask.exe
O23 - NT 服务: MySQL - Unknown owner - D:\usr\local\mysql\bin\mysqld-nt.exe
O23 - NT 服务: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - NT 服务: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - NT 服务: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - NT 服务: Windows Management NetWork Service Extensions - Unknown owner - NetManager.exe (file missing)
O23 - NT 服务: Windows Management Protocol v.0 (experimental) - Unknown owner - Rundll32.exe (file missing)
