Logfile of HijackThis v1.99.1
Scan saved at 12:33:33, on 2006-6-11
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Vrv\Client\vrvnet.exe
C:\Program Files\3721\Dlaccel\YDownloader.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Vrv\Client\vrvmon.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\3721\ske\TrojanAssistant.exe
C:\Program Files\Tencent\TT\TTraveler.exe
C:\PROGRA~1\Tencent\TT\TCPlus.exe
F:\我的下载\tools\杀毒软件\HijackThis\HijackThis.exe
R3 - URLSearchHook: (no name) - {E39B5886-A9DA-4C61-991C-5328D1C4BADC} - C:\WINDOWS\System32\Gziw.dll
R3 - URLSearchHook: (no name) - {33959E3A-83E0-40BF-9201-4EABAFB13290} - C:\WINDOWS\System32\Lxfe.dll
R3 - URLSearchHook: (no name) - {4EFF3681-9A37-4FD3-A5F4-F933CC713B84} - C:\WINDOWS\System32\Qpzwyh.dll
R3 - URLSearchHook: (no name) - {6885D138-DA78-4B60-8933-4C4748D262C1} - C:\WINDOWS\System32\Obkp.dll
R3 - URLSearchHook: (no name) - {68D5F391-E6A3-419C-948E-206937F4670B} - C:\WINDOWS\System32\Zrkmgg.dll
R3 - URLSearchHook: (no name) - {228DD4FC-7EFE-48DD-A9F7-22C5AC5DD80D} - C:\WINDOWS\System32\Ktvq.dll
R3 - URLSearchHook: (no name) - {0FBA3A53-CBE2-4C8A-BD9E-8BD8AC253894} - C:\WINDOWS\System32\Cxgcl.dll
R3 - URLSearchHook: (no name) - {42CC14D5-60B2-4883-B115-0F010E5EA668} - C:\WINDOWS\System32\Unead.dll
R3 - URLSearchHook: (no name) - {B2EE0F40-53D4-43AD-BF84-65DC24FFE20A} - C:\WINDOWS\System32\Gokrk.dll
R3 - URLSearchHook: (no name) - {012F83A5-2F2A-4899-A5CF-27E50B59C345} - C:\WINDOWS\System32\Gprwmt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit.exe
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\Program Files\Yahoo!\Assistant\Assist\yAngling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [vrvnet] C:\Vrv\Client\vrvnet.exe
O4 - HKLM\..\Run: [xysecond] C:\Vrv\Client\vrvmon.exe
O4 - HKLM\..\Run: [dl_accel] C:\Program Files\3721\Dlaccel\YDownloader.exe
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [SOUNDM] winsmd.exe
O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O11 - Options group: [!CNS] 上网助手-地址栏搜索
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (AxSubmitControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{85387B3F-AC75-4FDE-878F-3E329642F922}: NameServer = 61.139.2.69 202.98.96.68
O21 - SSODL: DLMon - {590498A3-4131-4D8F-BA4B-36791A0803B1} - C:\WINDOWS\System32\DLMain.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: 瑞星杀毒软件2006 (瑞星杀毒软件) - Unknown owner - C:\WINDOWS\Hacker.com.cn.exe
