1   1  /  1  页   跳转页

求助! 内附hijack日志

收藏
hx918
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-02-02
  • 来自:
发表于： 2006-02-14 10:35 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

求助! 内附hijack日志

浏览器最近显得特别慢....自己原来修过一次,可能每修好~ 

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      10:31:37, 日期 2006-2-14
操作系统：  Windows XP SP1 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
E:\rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\rising\Rav\Ravmond.exe
e:\rising\rfw\rfwproxy.exe
e:\rising\rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
E:\rising\Rav\RavStub.exe
E:\rising\Rav\RavTask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\Rundll32.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
E:\rising\Rav\Ravmon.exe
e:\rising\rfw\RfwMain.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
G:\Program Files\eMule\eMule.exe
G:\Program Files\Wom\WinMem.exe
C:\Program Files\Internet Explorer\iexplore.exe
G:\HijackThis1991汉化版\HijackThis1991zww.exe

R3 - URLSearchHook: 虎翼DIY吧! - {0A00D11E-B1E7-44b5-AD88-C9190876AAC4} - C:\WINDOWS\System32\diybar2\diybar2.dll
O1 - Hosts: 65.214.39.56 www.ask.com
O1 - Hosts: 63.208.55.206 www.garfield.com
O1 - Hosts: 211.147.20.21 www.chinaculture.org
O1 - Hosts: 67.15.151.20 www.fan-sites.org
O1 - Hosts: 72.232.47.205 www.anistoncenter.com
O1 - Hosts: 61.177.95.126 pengyouquan.go.2288.org
O1 - Hosts: 60.191.12.136 www.cn1980.com
O1 - Hosts: 61.172.244.156 blog.hjenglish.com
O1 - Hosts: 60.28.251.193 blog.hexun.com
O1 - Hosts: 60.28.251.193 blog.hexun.com
O1 - Hosts: 202.108.205.74 www.ecp.com.cn
O1 - Hosts: 211.157.27.139 forum.chasedream.com
O1 - Hosts: 211.100.255.38 matrix.hongen.com
O1 - Hosts: 61.172.244.164 www.hjenglish.com
O1 - Hosts: 38.119.130.61 www.newgrounds.com
O1 - Hosts: 69.32.153.10 www.petersons.com
O1 - Hosts: 216.251.43.11 www.daytrippin.com
O1 - Hosts: 61.129.32.9 www.wordology.net
O1 - Hosts: 216.251.43.11 www.daytrippin.com
O1 - Hosts: 207.171.175.23 www.imdb.com
O1 - Hosts: 61.172.250.83 bbs.wwenglish.org
O1 - Hosts: 218.30.105.130 www.chinaorg.tol24.com
O1 - Hosts: 199.85.4.62 www.organicsenglish.com
O1 - Hosts: 208.254.3.166 www.westudyenglish.com
O1 - Hosts: 208.254.3.166 www.westudyenglish.com
O1 - Hosts: 210.51.168.200 www.51test.net
O1 - Hosts: 61.155.39.142 www.icansay.com
O1 - Hosts: 61.129.51.84 www.oxford.net.cn
O1 - Hosts: 203.28.234.37 www.planetenglish.com
O1 - Hosts: 60.191.43.29 www.studycn.cn
O1 - Hosts: 211.196.154.81 www.discovery.com
O1 - Hosts: 213.174.199.70 www.discoverychannel.co.uk
O1 - Hosts: 67.19.23.186 www.languageguide.org
O1 - Hosts: 61.172.255.37 bbs.taisha.org
O1 - Hosts: 202.104.237.237 www.violinbbs.com
O1 - Hosts: 211.147.7.112 bbs.superticket.com.cn
O1 - Hosts: 61.135.151.48 club.yule.sohu.com
O1 - Hosts: 211.152.51.66 fenmo.net
O1 - Hosts: 211.152.51.106 www.d2kcad.com
O1 - Hosts: 219.153.18.170 www.fan-theatre.com
O1 - Hosts: 210.77.223.3 www.cqedu.com.cn
O1 - Hosts: 219.239.238.42 chat.pep.com.cn
O1 - Hosts: 211.144.68.71 www.chinazikao.com
O1 - Hosts: 59.36.99.4 bbs.cncatholic.org
O1 - Hosts: 211.154.222.21 gb.chinabroadcast.cn
O1 - Hosts: 222.36.40.122 www.pkucn.com
O1 - Hosts: 61.152.104.90 www.shnosbbs.com
O1 - Hosts: 211.157.1.29 bbs.neworiental.org
O1 - Hosts: 211.100.16.160 club.dangdang.com
O1 - Hosts: 202.114.64.139 www.whu.edu.cn
O1 - Hosts: 202.113.16.211 zsb.nankai.edu.cn
O1 - Hosts: 202.120.224.104 www.ao.fudan.edu.cn
O1 - Hosts: 218.75.70.222 www-2.zju.edu.cn
O1 - Hosts: 202.112.112.212 www.ruc.edu.cn
O1 - Hosts: 219.239.227.58 www.buaa.edu.cn
O1 - Hosts: 61.135.150.104 daxue.learning.sohu.com
O1 - Hosts: 61.175.193.62 zdzsc.zju.edu.cn
O1 - Hosts: 61.131.36.102 sj.smez.net
O1 - Hosts: 61.182.66.16 www.clubzone.cn
O1 - Hosts: 59.42.10.7 free.activeclub.net
O1 - Hosts: 210.72.224.62 www.ticketnet.cn
O1 - Hosts: 210.51.168.12 www.peking-art.com
O1 - Hosts: 211.147.7.112 www.superticket.com.cn
O1 - Hosts: 61.172.245.198 www.china-drama.com
O1 - Hosts: 168.160.224.144 www.xjb.cn.net
O1 - Hosts: 61.145.126.101 www.cnvm.net
O1 - Hosts: 210.51.162.25 www.bjry.com
O1 - Hosts: 211.99.194.252 bbs.yyjy.com
O1 - Hosts: 221.238.195.85 www.cnviolin.cn
O1 - Hosts: 221.229.241.246 pp.25pp.com
O1 - Hosts: 218.246.34.79 www.piao.com
O1 - Hosts: 218.201.44.87 www.17o8.com
O1 - Hosts: 218.5.76.79 www.mp3www.com
O1 - Hosts: 211.151.90.58 www.piaohoo.com
O1 - Hosts: 61.135.135.233 www.piao88.com
O1 - Hosts: 210.21.115.45 www.heatmovie.com
O1 - Hosts: 80.69.12.47 www.thebeatles.com
O1 - Hosts: 60.28.239.89 book.newdu.com
O1 - Hosts: 211.144.32.43 www.soofan.com
O1 - Hosts: 219.139.108.178 www.ruoyu.net
O1 - Hosts: 61.152.160.205 www.epicbook.com
O1 - Hosts: 211.157.102.21 www.audio-books.cn
O1 - Hosts: 202.108.43.234 iask.edu.sina.com.cn
O1 - Hosts: 63.240.119.114 wwwcn.kodak.com
O1 - Hosts: 211.100.26.164 www.dofund.com
O1 - Hosts: 211.100.17.157 www.weimin.cn
O1 - Hosts: 211.157.104.122 www.kpworld.com
O1 - Hosts: 211.153.22.46 www.cnesp.com
O1 - Hosts: 222.66.2.147 www.99read.com
O1 - Hosts: 60.28.11.137 learning.sohu.com
O1 - Hosts: 61.135.130.194 www.go2map.com
O1 - Hosts: 219.146.153.140 www.9flash.com
O1 - Hosts: 210.72.224.61 www.zhinet.com
O1 - Hosts: 218.75.144.18 www.cd520.net
O1 - Hosts: 203.212.1.69 bbs.sunyanzicc.net
O1 - Hosts: 210.77.144.76 www.yanzibj.com
O1 - Hosts: 210.78.148.87 www.yanwo.com
O1 - Hosts: 61.152.90.172 enetway.net
O1 - Hosts: 210.21.118.120 www.pconline.com.cn
O1 - Hosts: 210.192.98.21 www.800buy.com.cn
O1 - Hosts: 202.108.59.132 www.confuchina.com
O2 - BHO: XLink Class - {18F57D30-EF36-4C0E-9343-7BFA6DF79B4A} - C:\WINDOWS\System32\msfps32.dll
O2 - BHO: Link Filter - {4022F902-ABC7-4C79-924F-BB26F1D355A2} - C:\WINDOWS\System32\diybar2\diybar2.dll
最后编辑2006-02-14 21:28:54
分享到：
gototop
 
hx918
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-02-02
  • 来自:
发表于： 2006-02-14 10:35 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

O2 - BHO: Link Filter - {4022F902-ABC7-4C79-924F-BB26F1D355A2} - C:\WINDOWS\System32\diybar2\diybar2.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - g:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - G:\PROGRA~1\KuGoo2\KUGOO3~1.OCX
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\CnsHook.dll
O3 - IE工具栏增项: ICQ  Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Program Files\ICQToolbar\toolbaru.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: 虎翼DIY吧! - {0A00D11E-B1E7-44b5-AD88-C9190876AAC4} - C:\WINDOWS\System32\diybar2\diybar2.dll
O4 - 启动项HKLM\\Run: [RavTask] "E:\rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [NeroFilterCheck] ; C:\WINDOWS\system32\NeroCheck.exe
O4 - 启动项HKLM\\Run: [QuickTime Task] ; "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - 启动项HKLM\\Run: [RemoteControl] ; "h:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSCalsClocks] ; H:\Program Files\Microsoft Chinese Date & Time\ICalClk.exe
O4 - Startup: 腾讯QQ.lnk = G:\Program Files\Tencent\QQ\QQ.exe
O4 - Global Startup: 柯达 EasyShare 软件.lnk = C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - G:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - G:\Program Files\KuGoo2\KuGoo3DownX.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - G:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - G:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - G:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: (no name) - {3F686D91-4AFA-4ed1-B43F-F1DB46ED480C} - C:\WINDOWS\System32\shdocvw.dll
O9 - 浏览器额外的“工具”菜单项: Link Filter - {3F686D91-4AFA-4ed1-B43F-F1DB46ED480C} - C:\WINDOWS\System32\shdocvw.dll
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao (file missing)
O9 - 浏览器额外的按钮: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing)
O9 - 浏览器额外的按钮: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - 浏览器额外的“工具”菜单项: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - g:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - g:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - g:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - g:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - 浏览器额外的“工具”菜单项: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O11 - Options group: [!CNS]  网络实名
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {18F57D30-EF36-4C0E-9343-7BFA6DF79B4A} (XLink Class) - http://active.micr0media.com/swflash.cab
O16 - DPF: {28E0FA88-ABA8-4937-A247-3031F1A11165} (Installer Class) - http://dl.51.net/download/diybar2.cab
O16 - DPF: {3359C0B1-2363-40B3-AFCA-1ABC799AC486} (SSReaderPlug Control) - http://reg.ssreader.com/ssreaderplug.ocx
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/aliedit.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/QQ/QQkill/rsonline.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{838F5A38-88F5-43AC-A4AA-608F5C719A6E}: NameServer = 202.106.0.20 202.106.46.151
O23 - NT 服务: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - NT 服务: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - NT 服务: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - NT 服务: PsShutdown (PsShutdownSvc) - Unknown owner - C:\WINDOWS\System32\PSSDNSVC.EXE
O23 - NT 服务: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - e:\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - e:\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - E:\rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - E:\rising\Rav\Ravmond.exe
O23 - NT 服务: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
gototop
 
魔法学徒
头像
卡卡技术团队
  • 帖子:11465
  • 注册: 2004-10-03
  • 来自:
发表于： 2006-02-14 21:28 | 短消息 资料
字号： 小 中 大 3楼

建议修复
O2 - BHO: XLink Class - {18F57D30-EF36-4C0E-9343-7BFA6DF79B4A} - C:\WINDOWS\System32\msfps32.dll

删除
C:\WINDOWS\System32\msfps32.dll
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT