HijackThis_zww汉化版扫描日志 V1.99.1
保存于 20:46:51, 日期 2006-5-1
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
G:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
G:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
G:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\devldr32.exe
E:\PROGRA~1\SkyNet\FireWall\pfw.exe
G:\Program Files\Rising\Rav\RavTask.exe
G:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\UAService7.exe
C:\WINDOWS\System32\DRIVERS\WtSrv.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\jingyangs\桌面\SREng.exe
E:\Program Files\tencent\qq\QQ.exe
E:\Program Files\tencent\qq\TIMPlatform.exe
C:\Program Files\Tencent\TT\TTraveler.exe
C:\Documents and Settings\jingyangs\桌面\HijackThis1991zww.exe
R3 - URLSearchHook: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v4.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - E:\Program Files\tencent\qq\QQIEHelper.dll
O2 - BHO: DDDMon Class - {6BDE1669-B490-48E3-B668-456314F2D6C3} - C:\Program Files\DuDu\DddClient\dddiemon.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - E:\PROGRA~1\KuGoo\KUGOO3~1.OCX
O2 - BHO: (no name) - {B3ECCAC9-C7FA-462C-894B-8E9930A70E14} - E:\PROGRA~1\KuGoo\IEHELP~2.DLL
O2 - BHO: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O2 - BHO: SFP Class - {F236CC5A-F6E4-4011-9EED-C52FDF51CE3D} - C:\WINDOWS\system32\Sbhoplin.dll
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\PROGRA~1\FlashGet\fgiebar.dll
O3 - IE工具栏增项: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O4 - 启动项HKLM\\Run: [NvCplDaemon] ; RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [SKYNET Personal FireWall] E:\PROGRA~1\SkyNet\FireWall\pfw.exe
O4 - 启动项HKLM\\Run: [RavTask] "G:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [AudioHQ] ; g:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE
O4 - 启动项HKLM\\Run: [Babylon Client] ; ; e:\Program Files\Babylon\Babylon.exe -AutoStart
O4 - 启动项HKLM\\Run: [Creative Launcher] ; ; g:\Program Files\Creative\SBLive2k\Launcher\CTLauncher.exe
O4 - 启动项HKLM\\Run: [DAEMON Tools-2052] ; ; "E:\Program Files\D-Tools\daemon.exe" -lang 2052 -noicon
O4 - 启动项HKLM\\Run: [DevconDefaultDB] ; ; C:\WINDOWS\READREG /PSCONV={NO} /NO_DEFPS
O4 - 启动项HKLM\\Run: [helper.dll] ; ; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [IMSCMig] ; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 启动项HKLM\\Run: [ISUSPM Startup] ; ; C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - 启动项HKLM\\Run: [ISUSScheduler] ; ; "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - 启动项HKLM\\Run: [Jet Detection] ; ; "g:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - 启动项HKLM\\Run: [KDTAnywhere] ; ; "C:\Program Files\快递通\KDTAnywhereS.exe" -servicehelper
O4 - 启动项HKLM\\Run: [KernelFaultCheck] ; ; %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [MINI_BFYY] ; ; E:\Program Files\Storm Downloader\StormDownloader.exe
O4 - 启动项HKLM\\Run: [NbFloatBar] ; ; C:\Program Files\Netease\NeteaseBar\NbStart.exe
O4 - 启动项HKLM\\Run: [NeroFilterCheck] ; ; C:\WINDOWS\system32\NeroCheck.exe
O4 - 启动项HKLM\\Run: [NewsUpd] ; ; C:\Program Files\Creative\News\NewsUpd.EXE /q
O4 - 启动项HKLM\\Run: [NMGameX_AutoRun] ; ; C:\WINDOWS\System32\Rundll32.exe NMGameX.dll,LiveProcess /aa
O4 - 启动项HKLM\\Run: [NvMediaCenter] ; ; RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [nwiz] ; ; nwiz.exe /install
O4 - 启动项HKLM\\Run: [PHIME2002A] ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [PHIME2002ASync] ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [popo2004] ; ;
O4 - 启动项HKLM\\Run: [QuickTime Task] ; ; "E:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - 启动项HKLM\\Run: [StormCodec_Helper] ; ; "E:\Program Files\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [SubOlccr] ; ; C:\UCPen\SubOlccr.exe
O4 - 启动项HKLM\\Run: [TkBellExe] ; ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [UpdReg] ; ; C:\WINDOWS\Updreg.exe
O4 - 启动项HKLM\\Run: [WangWang] ; ; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
O4 - 启动项HKLM\\Run: [WINDVDPatch] ; ; CTHELPER.EXE
O4 - 启动项HKLM\\Run: [WService] ; ; WService.EXE
O4 - 启动项HKLM\\RunOnce: [RavStub] "G:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [MSMSGS] ; ; "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [SetDefaultMIDI] ; ; MIDIDef.exe
O8 - IE右键菜单中的新增项目: &使用DuDu 加速器下载 - res://C:\Program Files\DuDu\DddClient\dddmext.dll/202
