HijackThis_zww汉化版扫描日志 V1.99.1
保存于      20:25:06, 日期 2006-8-4
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\PROGRA~1\ANSYSI~1\SHARED~1\LICENS~1\Intel\lmgrd.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Ansys Inc\Shared Files\Licensing\intel\ansyslmd.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\wincup\wincup.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\CNNIC\Cdn\cdnup.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Tencent\QQ\QQ.exe
C:\Program Files\Tencent\QQ\TIMPlatform.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\conime.exe
D:\HijackThis1[1].99.1\HijackThis1[1].99.1\HijackThis1991zww.exe

R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
R3 - URLSearchHook: (no name) - {18EA6B2B-0A7D-439C-B186-676E8CAD2A05} - C:\WINDOWS\system32\Whmjby.dll (file missing)
R3 - URLSearchHook: (no name) - {2378E588-748F-43AA-BFBF-035A3AB6F6DD} - C:\WINDOWS\system32\Mayrj.dll (file missing)
R3 - URLSearchHook: (no name) - {9320A6A0-3E22-4741-936D-750F72C05CD1} - C:\WINDOWS\system32\Ahkpj.dll (file missing)
R3 - URLSearchHook: (no name) - {C4CF75DA-8566-4429-8E2D-C1DA5108B943} - C:\WINDOWS\system32\Iscwx.dll (file missing)
R3 - URLSearchHook: (no name) - {EA0E13A0-ED27-469E-B1BF-839F67FEADCB} - C:\WINDOWS\system32\Jqzsgs.dll (file missing)
R3 - URLSearchHook: (no name) - {CA2B4F81-3866-4BF5-A689-933B9F1CE302} - C:\WINDOWS\system32\Euoqg.dll (file missing)
R3 - URLSearchHook: (no name) - {E70824BE-9B37-4671-B229-5DC0034DABB9} - C:\WINDOWS\system32\Rctg.dll (file missing)
R3 - URLSearchHook: (no name) - {A1AD645D-D45D-48CA-92CB-214237142955} - C:\WINDOWS\system32\Jdduc.dll (file missing)
R3 - URLSearchHook: (no name) - {7911E562-ECC9-4005-A7EA-13F4841E6A32} - C:\WINDOWS\system32\Jtttjm.dll (file missing)
R3 - URLSearchHook: (no name) - {E9EE149C-0BB2-47A9-A2F7-AD99ED140E50} - C:\WINDOWS\system32\Tuawe.dll (file missing)
R3 - URLSearchHook: (no name) - {12E01412-E328-4683-B8FB-E689F55EA871} - C:\WINDOWS\system32\Btyeg.dll (file missing)
R3 - URLSearchHook: (no name) - {BD623FE2-B27F-49A5-A081-B0D24B820526} - C:\WINDOWS\system32\Gclg.dll (file missing)
R3 - URLSearchHook: (no name) - {3312ACD0-A144-4B24-AF8C-174B17FC9322} - C:\WINDOWS\system32\Xtsovo.dll (file missing)
R3 - URLSearchHook: (no name) - {51892ED4-DACA-42A3-8A51-5EB02B389531} - C:\WINDOWS\system32\Etabsx.dll (file missing)
R3 - URLSearchHook: (no name) - {B9CD9A30-82D6-47BD-8106-6120C23614A1} - C:\WINDOWS\system32\Zzikwe.dll (file missing)
R3 - URLSearchHook: (no name) - {D5F257A1-8675-415D-BE89-08EF258176BB} - C:\WINDOWS\system32\Fnam.dll (file missing)
R3 - URLSearchHook: (no name) - {5982FEDD-6387-448A-888E-767A5F942620} - C:\WINDOWS\system32\Aekg.dll (file missing)
R3 - URLSearchHook: Kuaiso Toolsbar - {6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89} - C:\WINDOWS\Downloaded Program Files\CONFLICT.1\kuaiso_06040.dll
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: (no name) - {04BC42B8-D186-4DCA-964A-1EB4FCB45FAC} - C:\WINDOWS\system32\Qcencl.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {06A2B292-8C6E-4E20-9E11-C1099A0F1A37} - C:\WINDOWS\system32\Vfdqtd.dll (file missing)
O2 - BHO: (no name) - {08E107FB-42B6-4448-8098-D4DD0D633AD9} - C:\WINDOWS\system32\Dvvgv.dll (file missing)
O2 - BHO: (no name) - {0CE5D7E4-5A64-4CF6-8F9D-745F9578DE97} - C:\WINDOWS\system32\Uaznru.dll
O2 - BHO: (no name) - {12E01412-E328-4683-B8FB-E689F55EA871} - C:\WINDOWS\system32\Btyeg.dll (file missing)
O2 - BHO: (no name) - {18EA6B2B-0A7D-439C-B186-676E8CAD2A05} - C:\WINDOWS\system32\Whmjby.dll (file missing)
O2 - BHO: Gmail网络磁盘文件分割器 - {19741013-C829-11D1-8233-0020AF3E97A0} - C:\WINDOWS\system32\ShellExt\GMailFC.dll
O2 - BHO: (no name) - {2378E588-748F-43AA-BFBF-035A3AB6F6DD} - C:\WINDOWS\system32\Mayrj.dll (file missing)
O2 - BHO: (no name) - {27CD33E0-B479-434F-AEE8-8FE7F04204DF} - C:\WINDOWS\system32\Wuzt.dll (file missing)
O2 - BHO: (no name) - {28E0C832-3497-43B3-A1A5-48B455AC4983} - C:\WINDOWS\system32\Kunx.dll (file missing)
O2 - BHO: (no name) - {30E83EE7-A147-49EC-B28D-995905BED85C} - C:\WINDOWS\system32\Kaxfw.dll (file missing)
O2 - BHO: (no name) - {3312ACD0-A144-4B24-AF8C-174B17FC9322} - C:\WINDOWS\system32\Xtsovo.dll (file missing)
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: (no name) - {51892ED4-DACA-42A3-8A51-5EB02B389531} - C:\WINDOWS\system32\Etabsx.dll (file missing)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: (no name) - {5982FEDD-6387-448A-888E-767A5F942620} - C:\WINDOWS\system32\Aekg.dll (file missing)
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O2 - BHO: XBTP03129 - {6029B367-250A-4696-925C-641709CA7381} - C:\WINDOWS\DOWNLO~1\CONFLICT.1\KUAISO~1.DLL
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O2 - BHO: (no name) - {73AD5B6D-462A-43C2-83B5-3F031197EAEF} - C:\WINDOWS\system32\Ijaw.dll (file missing)
O2 - BHO: (no name) - {7911E562-ECC9-4005-A7EA-13F4841E6A32} - C:\WINDOWS\system32\Jtttjm.dll (file missing)
O2 - BHO: (no name) - {792CEABE-E1AA-4862-9137-EBC96F4709D2} - C:\WINDOWS\system32\Xiiipd.dll
O2 - BHO: (no name) - {7A363B4B-BB1F-45AA-90A0-640E5A14A8DF} - C:\WINDOWS\system32\Jbahyh.dll (file missing)
O2 - BHO: (no name) - {81DB2761-C700-403B-BE68-0FF4A672A356} - C:\WINDOWS\system32\Ocufmp.dll
O2 - BHO: (no name) - {841CEC96-E5DE-4563-A093-75BF705DA58B} - C:\WINDOWS\system32\Ezxi.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {9320A6A0-3E22-4741-936D-750F72C05CD1} - C:\WINDOWS\system32\Ahkpj.dll (file missing)
O2 - BHO: (no name) - {9A7204AB-8B73-4B62-9A99-513AE14B00C5} - C:\WINDOWS\system32\Yhcy.dll (file missing)
O2 - BHO: (no name) - {A1AD645D-D45D-48CA-92CB-214237142955} - C:\WINDOWS\system32\Jdduc.dll (file missing)
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX
O2 - BHO: (no name) - {A9E87E28-253A-492F-8620-8E72354A6E88} - C:\WINDOWS\system32\Uodysj.dll
O2 - BHO: DownloadBHO T2BHO - {B1D147E7-873E-4909-8127-695D9BB78728} - C:\WINDOWS\Downloaded Program Files\barhelp24.0.dll
O2 - BHO: (no name) - {B27D2352-FF8F-44CE-BD07-C23D5D943D56} - C:\WINDOWS\system32\Dmyrd.dll (file missing)
O2 - BHO: (no name) - {B620747B-EA08-4C76-B73E-DE8A70487A4C} - C:\WINDOWS\system32\Wdqie.dll
O2 - BHO: (no name) - {B9CD9A30-82D6-47BD-8106-6120C23614A1} - C:\WINDOWS\system32\Zzikwe.dll (file missing)
O2 - BHO: (no name) - {BD623FE2-B27F-49A5-A081-B0D24B820526} - C:\WINDOWS\system32\Gclg.dll (file missing)
O2 - BHO: (no name) - {C4CF75DA-8566-4429-8E2D-C1DA5108B943} - C:\WINDOWS\system32\Iscwx.dll (file missing)
O2 - BHO: (no name) - {C56A0D96-65A9-4372-87EB-207142FFC4B7} - C:\WINDOWS\system32\Zjse.dll (file missing)
O2 - BHO: (no name) - {CA2B4F81-3866-4BF5-A689-933B9F1CE302} - C:\WINDOWS\system32\Euoqg.dll (file missing)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\CnsHook.dll
O2 - BHO: (no name) - {D32B3C4C-D398-4305-9EAE-DD20E9D661F0} - C:\WINDOWS\system32\Igedw.dll (file missing)
O2 - BHO: (no name) - {D5F257A1-8675-415D-BE89-08EF258176BB} - C:\WINDOWS\system32\Fnam.dll (file missing)
O2 - BHO: (no name) - {D7E16DC9-22DB-4046-8D66-064CEED94489} - C:\WINDOWS\system32\Hmvld.dll (file missing)
O2 - BHO: (no name) - {DC628117-69AE-48E8-8980-F7D744841747} - C:\WINDOWS\system32\Cuzfdm.dll (file missing)
O2 - BHO: (no name) - {DF859DE9-F1DD-40A5-861A-1475699A753E} - C:\WINDOWS\system32\Xzjoi.dll
O2 - BHO: (no name) - {E3C02790-CEAC-40AC-8234-A622BC73DB44} - C:\WINDOWS\system32\Uxiopl.dll (file missing)
O2 - BHO: (no name) - {E426053C-B4F7-42B0-BE26-167998B2A3AC} - C:\WINDOWS\system32\Rbwp.dll (file missing)
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O2 - BHO: (no name) - {E70824BE-9B37-4671-B229-5DC0034DABB9} - C:\WINDOWS\system32\Rctg.dll (file missing)
O2 - BHO: WvnHtivc Class - {E92BD8FB-D25F-AC51-AC4D-64A68912ADAF} - C:\WINDOWS\DOWNLO~1\jotemtv.dll
O2 - BHO: (no name) - {E9EE149C-0BB2-47A9-A2F7-AD99ED140E50} - C:\WINDOWS\system32\Tuawe.dll (file missing)
O2 - BHO: (no name) - {EA0E13A0-ED27-469E-B1BF-839F67FEADCB} - C:\WINDOWS\system32\Jqzsgs.dll (file missing)
O2 - BHO: (no name) - {EB68AFD2-FE73-41A3-816B-0F515A9F8539} - C:\WINDOWS\system32\Hgnq.dll (file missing)
O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll
O2 - BHO: (no name) - {FA56E78C-47B7-420A-BC5C-5A60F8A3379D} - C:\WINDOWS\system32\Hajcdw.dll (file missing)
O3 - IE工具栏增项: 系统标准按钮(&E) - {6B2455FD-3669-4555-8DF8-69FD5BC846F8} - C:\WINDOWS\system32\SystemToolbar.dll (file missing)
O3 - IE工具栏增项: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\Program Files\BitComet\BitCometBar\BitCometBar0.3.dll
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O3 - IE工具栏增项: 天下搜索 - {56A7DC70-E102-4408-A34A-AE06FEF01586} - C:\WINDOWS\Downloaded Program Files\CONFLICT.1\iebar23.0.dll

O3 - IE工具栏增项: Kuaiso Toolsbar - {6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89} - C:\WINDOWS\Downloaded Program Files\CONFLICT.1\kuaiso_06040.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - 启动项HKLM\\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - 启动项HKLM\\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [CdnCtr] C:\Program Files\CNNIC\Cdn\cdnup.exe
O4 - 启动项HKLM\\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O8 - IE右键菜单中的新增项目:  >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O8 - IE右键菜单中的新增项目: >>彩信发送<< - res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - C:\Program Files\KuGoo3\KuGoo3DownX.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 添加到雅虎收藏+ - http://myweb.cn.yahoo.com/post.html?F=D2_A
O8 - IE右键菜单中的新增项目: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - IE右键菜单中的新增项目: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/246
O9 - 浏览器额外的按钮: Hot Flash - {1DD00580-1EBE-11D6-B336-95364C649934} - C:\PROGRA~1\HOTFLA~1\save.htm (file missing)
O9 - 浏览器额外的“工具”菜单项: &Search SWF Files - {1DD00580-1EBE-11D6-B336-95364C649934} - C:\PROGRA~1\HOTFLA~1\save.htm (file missing)
O9 - 浏览器额外的按钮: Yahoo 3.5G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao (file missing)
O9 - 浏览器额外的按钮: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - 浏览器额外的“工具”菜单项: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
O9 - 浏览器额外的按钮: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing)
O9 - 浏览器额外的按钮: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O9 - 浏览器额外的“工具”菜单项: 彩E精灵设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - 浏览器额外的按钮: 易趣购物 - {DE607145-AC19-425e-860A-0D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE607145-AC19-425e-860A-0D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - 浏览器额外的按钮: 易趣购物 - {EE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=86 (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {EE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=86 (file missing)
O9 - 浏览器额外的按钮: YOK超级搜索 - {F869BB38-FFEF-4589-B986-610B7AD0ADA2} - http://www.yok.com (file missing)
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\cdnns.dll
O11 - Options group: [!CNS]  网络实名
O11 - Options group: [CDNCLIENT]  中文上网
O15 - “受信任的站点”中添加项: http://www.icbc.com.cn
O16 - DPF: {05C1004E-2596-48E5-8E26-39362985EEB9} (MMCPlayer Class) - http://p3p.sogou.com/MMCShell.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {56A7DC70-E102-4408-A34A-AE06FEF01586} (天下搜索) - http://iebar.t2t2.com/iebar.cab
O16 - DPF: {6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89} (Kuaiso Toolsbar) - http://bar2.29183.com/9598.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C83CCF7B-A4EE-4028-BC75-ACB9D5D7C172}: NameServer = 202.120.127.220
O18 - 列举现有的协议: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: SysTime - {724C75F1-B757-408D-A50A-4CF99DA35D73} - C:\PROGRA~1\WinKld\WinKld.dll
O23 - NT 服务: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - NT 服务: ANSYS FLEXlm license manager - Macrovision Corporation - C:\PROGRA~1\ANSYSI~1\SHARED~1\LICENS~1\Intel\lmgrd.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: WinWrCup - MsWinCup - C:\WINDOWS\wincup\wincup.exe