这是我分析的！我现在是只要没有连接的站或打不开的站，就直接跳转265了！
Logfile of HijackThis v1.99.1
Scan saved at 23:10:56, on 2006-3-10
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Richtech\GxpClient\CltSrv.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\Program Files\HC\HCard\smss.exe
C:\Program Files\HC\HCard\RunMe.exe
D:\Program Files\Tencent\TT\TTraveler.exe
C:\WINNT\system32\internat.exe
D:\Program Files\Thunder Network\Thunder\Thunder.exe
D:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\TCWY\LOCALS~1\Temp\Rar$EX00.250\HijackThis.exe
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINNT\system32\xunleibho_v13.dll
O2 - BHO: IEHlprObj Class - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - C:\WINNT\system32\IEHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\kakatool.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RunStar] C:\Program Files\HC\HCard\smss.exe
O4 - HKLM\..\Run: [MyApp] C:\Program Files\HC\HCard\RunMe.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Gsp2k] C:\Program Files\Richtech\GxpClient\AutoStar.EXE
O4 - HKCU\..\Run: [internat.exe] internat.exe
O8 - Extra context menu item: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\getallurl.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/
object/Dldrv.ocx
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1141576858187
O17 - HKLM\System\CCS\Services\Tcpip\..\{54303F39-1EFD-4F84-BF68-10C547D42458}: NameServer = 218.56.57.58,219.146.0.130
O17 - HKLM\System\CS1\Services\Tcpip\..\{54303F39-1EFD-4F84-BF68-10C547D42458}: NameServer = 218.56.57.58,219.146.0.130
O17 - HKLM\System\CS2\Services\Tcpip\..\{54303F39-1EFD-4F84-BF68-10C547D42458}: NameServer = 218.56.57.58,219.146.0.130
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: 锐起游戏共享精灵XP客户端服务 (GspClient) - Unknown owner - C:\Program Files\Richtech\GxpClient\CltSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
