Logfile of HijackThis v1.99.1
Scan saved at 13:27:22, on 2006-6-27
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
运行进程:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\VIPTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe
G:\ha-hijackthis1991-xqb\HijackThis.exe
R3 - URLSearchHook: SrchHook Class - {EED92A43-CFCE-4548-BD73-B0A405470ED5} - C:\PROGRA~1\CNNIC\Cdn\iesrch.dll
R3 - URLSearchHook: (no name) - {D200C788-33F9-4E9C-91F0-543C74D9E38D} - C:\WINDOWS\system32\Xexpf.dll
R3 - URLSearchHook: (no name) - {C1FF1D98-ACBB-4F9B-B052-129930891F34} - C:\WINDOWS\system32\Ksqf.dll
R3 - URLSearchHook: (no name) - {AEFA2AE8-AEE8-4F2F-ACAF-FC16236DEF66} - C:\WINDOWS\system32\Dpamv.dll
R3 - URLSearchHook: (no name) - {1DB2F461-9354-47C6-B68C-4472F1A9D7DF} - C:\WINDOWS\system32\Vyelk.dll
R3 - URLSearchHook: (no name) - {45BB24FE-A89D-47F2-A9E9-9DF398837C13} - C:\WINDOWS\system32\Tstffl.dll
R3 - URLSearchHook: (no name) - {291DC3D8-138D-470D-9BA6-84F273ED53D2} - C:\WINDOWS\system32\Mtdwf.dll
R3 - URLSearchHook: (no name) - {F76CC353-4EE0-4C5D-99FE-2FC8F03067AE} - C:\WINDOWS\system32\Ggphq.dll
R3 - URLSearchHook: (no name) - {3BF1FDC7-900A-49BF-8C45-8194B4A08BA2} - C:\WINDOWS\system32\Fnddcu.dll
R3 - URLSearchHook: (no name) - {FF44EA8F-EFE7-4835-8472-7C36F3A266F7} - C:\WINDOWS\system32\Wwpz.dll
R3 - URLSearchHook: (no name) - {53CD4845-297F-49B2-BFCA-0E2D56D66A60} - C:\WINDOWS\system32\Plmuzj.dll (文件故障)
R3 - URLSearchHook: (no name) - {3CF635DF-A223-4DBA-B306-380DA6C577B2} - C:\WINDOWS\system32\Ifqvg.dll
R3 - URLSearchHook: (no name) - {BC044417-98F7-45C9-9427-FD9D9E6AD955} - C:\WINDOWS\system32\Psvaun.dll
R3 - URLSearchHook: (no name) - {5C52A52A-5997-4155-8FF0-8327FCFA128C} - C:\WINDOWS\system32\Xazypp.dll
R3 - URLSearchHook: (no name) - {89240C2D-D297-468F-BB49-AEFB9EA3936A} - C:\WINDOWS\system32\Hkyix.dll
R3 - URLSearchHook: (no name) - {CC0DEB24-7818-4E2D-B49B-5B9BE65DEF8C} - C:\WINDOWS\system32\Ewkoim.dll
R3 - URLSearchHook: (no name) - {442E4223-5F49-4208-B924-8E10CB7C6692} - C:\WINDOWS\system32\Upob.dll
R3 - URLSearchHook: (no name) - {1C0ACD56-E72C-4C0D-9EC8-F86CC45D6013} - C:\WINDOWS\system32\Fdxq.dll
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v8.dll (文件故障)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1C0ACD56-E72C-4C0D-9EC8-F86CC45D6013} - C:\WINDOWS\system32\Fdxq.dll
O2 - BHO: (no name) - {1DB2F461-9354-47C6-B68C-4472F1A9D7DF} - C:\WINDOWS\system32\Vyelk.dll
O2 - BHO: (no name) - {291DC3D8-138D-470D-9BA6-84F273ED53D2} - C:\WINDOWS\system32\Mtdwf.dll
O2 - BHO: BrowserHelper Class - {2D99E8F4-56B7-457B-9A92-61B5D247D263} - C:\WINDOWS\system32\WinDefendor.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: (no name) - {3BF1FDC7-900A-49BF-8C45-8194B4A08BA2} - C:\WINDOWS\system32\Fnddcu.dll
O2 - BHO: (no name) - {3CF635DF-A223-4DBA-B306-380DA6C577B2} - C:\WINDOWS\system32\Ifqvg.dll
O2 - BHO: NaviHelperObj Class - {3E422F49-1566-40D3-B43D-077EF739AC32} - C:\WINDOWS\system32\NaviHelper.dll
O2 - BHO: (no name) - {442E4223-5F49-4208-B924-8E10CB7C6692} - C:\WINDOWS\system32\Upob.dll
O2 - BHO: (no name) - {45BB24FE-A89D-47F2-A9E9-9DF398837C13} - C:\WINDOWS\system32\Tstffl.dll
O2 - BHO: (no name) - {53CD4845-297F-49B2-BFCA-0E2D56D66A60} - C:\WINDOWS\system32\Plmuzj.dll (文件故障)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: (no name) - {5C52A52A-5997-4155-8FF0-8327FCFA128C} - C:\WINDOWS\system32\Xazypp.dll
O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - C:\WINDOWS\System32\aclayer.dll (文件故障)
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XUNLEIBHO_002.dll
O2 - BHO: (no name) - {89240C2D-D297-468F-BB49-AEFB9EA3936A} - C:\WINDOWS\system32\Hkyix.dll
O2 - BHO: (no name) - {AEFA2AE8-AEE8-4F2F-ACAF-FC16236DEF66} - C:\WINDOWS\system32\Dpamv.dll
O2 - BHO: (no name) - {B9E914B5-6B61-401f-A49F-9E84E547D3DD} - C:\WINDOWS\system32\leftup.dll (文件故障)
O2 - BHO: (no name) - {BC044417-98F7-45C9-9427-FD9D9E6AD955} - C:\WINDOWS\system32\Psvaun.dll
O2 - BHO: (no name) - {C1FF1D98-ACBB-4F9B-B052-129930891F34} - C:\WINDOWS\system32\Ksqf.dll
O2 - BHO: (no name) - {CC0DEB24-7818-4E2D-B49B-5B9BE65DEF8C} - C:\WINDOWS\system32\Ewkoim.dll
O2 - BHO: (no name) - {D200C788-33F9-4E9C-91F0-543C74D9E38D} - C:\WINDOWS\system32\Xexpf.dll
O2 - BHO: YiSou - {EF1D17A9-089F-40cc-8D64-7324CDEBA0DB} - C:\PROGRA~1\YiSou\yisoub.dll
O2 - BHO: (no name) - {F76CC353-4EE0-4C5D-99FE-2FC8F03067AE} - C:\WINDOWS\system32\Ggphq.dll
O2 - BHO: (no name) - {FF44EA8F-EFE7-4835-8472-7C36F3A266F7} - C:\WINDOWS\system32\Wwpz.dll
O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - Toolbar: BitComet工具栏 - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - E:\BT工具\BitComet\BitCometBar\BitCometBar0.6.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - HKLM\..\Run: [yassistse] "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - HKLM\..\Run: [KAVPersonal50] "D:\卡巴斯基\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Kaspersky Anti-Hacker.lnk = ?
O4 - Global Startup: IE-BAR.lnk = ?
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 百度--MP3搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM
O8 - Extra context menu item: 百度--图片搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM
O8 - Extra context menu item: 百度--新闻搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM
O8 - Extra context menu item: 百度--歌词搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM
O8 - Extra context menu item: 百度--网页搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM
O8 - Extra context menu item: 百度--词典搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM
O8 - Extra context menu item: 百度--贴吧搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM
O9 - Extra button: 游一游 - {29269350-EC07-4274-821F-F2E0E2697149} - http://act.youyy.com/YoyyLink.html (文件故障)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05DA0521-0B6B-458C-BFB1-1EFEF1F3C8FF} (SSOClientAgent Class) - http://member.segame.com/common/SEGAme.cab
O16 - DPF: {5932517A-3326-4439-A708-1C98EDB5C549} (Downloader Class) -
file://C:\Documents and Settings\All Users\Application Data\Share Helper\Cast\GGS\d21f472918a\js\iMopDl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{957B61F0-67B0-4702-9733-9477D5F8D2E8}: NameServer = 220.170.64.68,220.170.64.96
O17 - HKLM\System\CCS\Services\Tcpip\..\{E96F2801-010E-4037-89CE-EA26B08484E9}: NameServer = 220.170.64.96 220.170.64.68
