HijackThis_815汉化版扫描日志 V1.99.1
保存于 10:40:24, 日期 2007-5-7
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRAM FILES\RISING\RAV\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\LHotkey.exe
C:\WINDOWS\ZSSnp211.exe
C:\WINDOWS\Domino.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\shualai.exe
C:\WINDOWS\System32\alg32.exe
C:\Program Files\Rising\Rav\RavMon.exe
C:\Progra~1\Eset\1explore.exe
C:\Program Files\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\TDdownload\Hijackthis1991zww\HijackThis1991zww.exe
O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - BHO: ThunderBHO - {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobatchs\ActiveX\AcroIEHelper.dll
O2 - BHO: DsHelper - {0D42E1BD-09DD-4873-A826-9C7E793EB7B6} - (no file)
O2 - BHO: (no name) - {F79B2338-A6E7-46D4-9202-422AA6E74F43} - C:\WINDOWS\EagleFlt.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [LHotkey] LHotkey.exe
O4 - 启动项HKLM\\Run: [EagleEye] C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe
O4 - 启动项HKLM\\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe
O4 - 启动项HKLM\\Run: [Domino] C:\WINDOWS\Domino.exe
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [wosa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\woso.exe
O4 - 启动项HKLM\\Run: [ztsa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso.exe
O4 - 启动项HKLM\\Run: [shualai] C:\WINDOWS\shualai.exe /i
O4 - 启动项HKLM\\Run: [qjsa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso.exe
O4 - 启动项HKLM\\Run: [nwiztlbb] C:\WINDOWS\system32\nwiztlbb.exe
O4 - 启动项HKLM\\Run: [cmdbcs] C:\WINDOWS\cmdbcs.exe
O4 - 启动项HKLM\\Run: [wgsa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso.exe
O4 - 启动项HKLM\\Run: [wlsa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso.exe
O4 - 启动项HKLM\\Run: [wmsa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso.exe
O4 - 启动项HKLM\\Run: [upxdnd] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\f2.exe
O4 - 启动项HKLM\\Run: [winform] C:\WINDOWS\winform.exe
O4 - 启动项HKLM\\Run: [tlsa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso.exe
O4 - 启动项HKLM\\Run: [fysa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso.exe
