| 引用: |
| 【我的蓝莓的贴子】Logfile of HijackThis v1.99.1 Scan saved at 15:58:27, on 2007-5-29 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe D:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe D:\Program Files\Rising\Rav\Ravmond.exe C:\WINDOWS\Explorer.EXE d:\program files\rising\rfw\rfwsrv.exe C:\WINDOWS\system32\spoolsv.exe D:\Program Files\Rising\Rav\RavStub.exe d:\program files\rising\rfw\RfwMain.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\service.exe C:\WINDOWS\system32\ctfmon.exe D:\Program Files\DuDu\Speed\dudupros.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\SkyTel.EXE C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Rising\AntiSpyware\runiep.exe D:\Program Files\Rising\Rav\RavTask.exe D:\Program Files\Rising\Rav\Ravmon.exe C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\intranet.exe C:\Program Files\Movie Maker\udjjkhc.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe D:\Program Files\DuDu\Speed\DuDuAcc.exe D:\Program Files\Rising\Rav\RsAgent.exe C:\WINDOWS\msagent\AgentSvr.exe D:\HijackThis\HijackThis.exe R3 - Default URLSearchHook is missing F3 - REG:win.ini: load=? x7 O2 - BHO: DuDu.com - {00018593-C6BD-46F7-9349-DBA1AA674C90} - D:\Program Files\DuDu\Speed\dddiemon.dll O2 - BHO: BDHlprObj Class - {CA92B524-BC8A-4610-BD2C-6BD3E28155D0} - C:\WINDOWS\DOWNLO~1\BDHelper.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [runeip] C:\Program Files\Rising\AntiSpyware\runiep.exe O4 - HKLM\..\Run: [RavTask] "D:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [RfwMain] "D:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload O4 - HKLM\..\Run: [BIE] Rundll32 C:\WINDOWS\DOWNLO~1\BDPlugin.dll,Rundll32 O4 - HKLM\..\Run: [testrun] C:\DOCUME~1\cld\LOCALS~1\Temp\testexe.exe O4 - HKLM\..\Run: [Intranet] C:\WINDOWS\intranet.exe O4 - HKLM\..\Run: [udjjkhc] C:\Program Files\Movie Maker\udjjkhc.exe O4 - HKLM\..\Run: [vekklie] C:\Program Files\Online Services\vekklie.exe O4 - HKLM\..\Run: [wgcccjf] C:\Program Files\WindowsUpdate\wgcccjf.exe O4 - HKLM\..\RunOnce: [RavStub] "D:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Startup: 腾讯QQ.lnk = D:\Program Files\Tencent\QQ\QQ.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: zckkli.lnk = C:\Program Files\InstallShield Installation Information\zckklie.exe O4 - Global Startup: ~djjkh.lnk = C:\Program Files\Microsoft Works\~djjkhc.exe O4 - Global Startup: ecccj.lnk = ? O4 - Global Startup: DuDu下载加速器.lnk = D:\Program Files\DuDu\Speed\DuDuAcc.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &使用DuDu下载 - res://D:\Program Files\DuDu\Speed\dddmext.dll/202 O8 - Extra context menu item: &使用DuDu下载全部链接 - res://D:\Program Files\DuDu\Speed\dddmext.dll/203 O8 - Extra context menu item: &使用DuDu下载选择链接 - res://D:\Program Files\DuDu\Speed\dddmext.dll/204 O8 - Extra context menu item: &使用DuDu捕获页面视频 - res://D:\Program Files\DuDu\Speed\dddmext.dll/205 O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - d:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra ''Tools'' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - d:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra ''Tools'' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{D795513E-ACE3-4AFE-98E9-2AB127E9FD9E}: NameServer = 61.128.99.133,61.128.99.134 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwproxy.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\CCenter.exe O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\Ravmond.exe O23 - Service: SystemSet Service (SystemSet) - Unknown owner - C:\WINDOWS\system32\service.exe ……………… |