HijackThis_815汉化版扫描日志 V1.99.1
保存于      14:06:13, 日期 2006-7-19
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wincup\wincup.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Administrator\桌面\t\HijackThis1991zww.exe

O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [KernelFaultCheck] ; %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [KuGoo3] ; D:\Program Files\KuGoo2\KuGoo.exe
O4 - 启动项HKLM\\Run: [Logitech Hardware Abstraction Layer] ; KHALMNPR.EXE
O4 - 启动项HKLM\\Run: [mmtask] ; ; "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - 启动项HKLM\\RunOnce: [RavStub] "C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [LDM] ; C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - IE右键菜单中的新增项目: >>彩信发送<< - res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - E:\浩方对战平台\GameClient.exe
O9 - 浏览器额外的按钮: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O9 - 浏览器额外的“工具”菜单项: 彩E精灵设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O18 - 列举现有的协议: bw+0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw+0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw-0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw-0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw00 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw00s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw10 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw10s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw20 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw20s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw30 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw30s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw40 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw40s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw50 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw50s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw60 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw60s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw70 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw70s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw80 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw80s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw90 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bw90s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwa0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwa0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwb0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwb0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwc0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwc0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwd0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwd0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwe0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwe0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwf0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwf0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwg0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwg0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwh0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwh0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwi0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwi0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwj0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwj0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwk0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwk0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwl0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwl0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwm0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwm0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwn0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwn0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwo0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwo0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwp0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwp0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwq0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwq0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwr0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - 列举现有的协议: bwr0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bws0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bws0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwt0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwt0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwu0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwu0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwv0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwv0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bww0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bww0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwx0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwx0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwy0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwy0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwz0 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: bwz0s - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - 列举现有的协议: offline-8876480 - {E3D6F6E5-F316-4F31-BE77-11123AE48F5D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O21 - SSODL: SysTime - {724C75F1-B757-408D-A50A-4CF99DA35D73} - C:\PROGRA~1\WinKld\WinKld.dll
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: WinWrCup - MsWinCup - C:\WINDOWS\wincup\wincup.exe

开始→运行→输入services.msc，打开“服务”→查找 WinWrCup→双击→启动类型→禁止→停止→应用→确定。禁止WinWrCup这个服务
进入控制面版的添加删除程序中卸载Winstdup,MMSASS~1彩信
关闭所有浏览窗口以及一些不必要的程序
运行Hijackthis，扫描结束后在下列选项前打上勾，然后选"修复""（如果有的话）
O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O8 - IE右键菜单中的新增项目: >>彩信发送<< - res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm
O9 - 浏览器额外的按钮: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O9 - 浏览器额外的“工具”菜单项: 彩E精灵设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
重启后
删除
C:\WINDOWS\wincup
C:\WINDOWS\SYSTEM32\stdup.dll
C:\PROGRA~1\MMSASS~1