HijackThis_zww汉化版扫描日志 V1.99.1
保存于 0:27:03, 日期 2006-4-26
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\ylive.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\Program Files\Rising\Rav\RAVMON.EXE
C:\Program Files\Rising\Rav\RavStub.exe
D:\waigua\这\HijackThis1991汉化版\HijackThis1991zww.exe
R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O1 - Hosts: 202.102.55.132 vod.58028.net
O1 - Hosts: 222.85.127.196 www.99wx.com
O1 - Hosts: 210.72.145.8 www.time.ac.cn
O1 - Hosts: 218.16.120.18 www.linkwan.com
O1 - Hosts: 202.165.103.236 www.yahoo-cool.com
O1 - Hosts: 59.42.10.50 pfw.sky.net.cn
O1 - Hosts: 202.102.3.132 www.czinfo.net
O1 - Hosts: 220.231.20.229 www.flashf.com
O1 - Hosts: 58.215.65.49 www.haopp.com
O1 - Hosts: 60.190.69.99 www.51live.com
O1 - Hosts: 218.10.216.140 www.btbbt.com
O1 - Hosts: 218.16.119.99 www.sogua.com
O1 - Hosts: 61.144.255.245 www.guqu.net
O1 - Hosts: 202.104.237.248 www.st020.com
O1 - Hosts: 218.94.123.19 www.jsxnw.gov.cn
O1 - Hosts: 222.191.251.9 soft666.com
O1 - Hosts: 211.154.219.63 www4.readnovel.com
O1 - Hosts: 61.132.74.83 www.zhulang.com
O1 - Hosts: 220.161.123.158 www.yunxiaoge.com
O1 - Hosts: 61.145.112.145 www.hhyi.com
O1 - Hosts: 202.104.237.63 www.qmsy.net
O1 - Hosts: 219.146.57.253 book.kuku100.com
O1 - Hosts: 221.231.130.209 www.cmfu.com
O1 - Hosts: 222.85.127.196 www.99wx.com
O1 - Hosts: 218.5.76.59 www.110city.com
O1 - Hosts: 60.28.9.67 www.code365.com
O1 - Hosts: 218.30.70.56 www.cctv.com
O1 - Hosts: 202.108.119.193 www3.xinhuanet.com
O1 - Hosts: 202.101.42.62 www.dreye.com.cn
O1 - Hosts: 218.16.120.18 www.linkwan.com
O1 - Hosts: 202.105.31.86 www.21softs.com
O1 - Hosts: 61.185.51.24 www.iciba.net
O1 - Hosts: 222.52.116.157 www.sz1001.net
O1 - Hosts: 202.165.103.210 assistant.3721.com
O1 - Hosts: 211.93.137.139 down.sanhaoonline.com
O1 - Hosts: 218.22.223.164 www.gupin.com
O1 - Hosts: 222.73.4.27 soft.winzheng.com
O1 - Hosts: 210.74.232.168 www.crsky.com
O1 - Hosts: 202.102.249.40 www.mydrivers.com
O1 - Hosts: 61.143.210.48 www.jujumao.com
O1 - Hosts: 218.30.80.30 bbs.winzheng.com
O1 - Hosts: 61.175.239.22 school.21tx.com
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
O2 - BHO: DDDMon Class - {6BDE1669-B490-48E3-B668-456314F2D6C3} - C:\Program Files\mini ddd\dddiemon.dll
O3 - IE工具栏增项: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - D:\天骄1\BT\BitComet\BitCometBar\BitCometBar0.2.dll (file missing)
O3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKCU\\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - “启动”文件夹: 宽带连接.lnk = ?
O8 - IE右键菜单中的新增项目: &使用DuDu加速器下载 - res://C:\Program Files\mini ddd\dddmext.dll/202
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\QQ2005\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT
O8 - IE右键菜单中的新增项目: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/246
O9 - 浏览器额外的按钮: 微软 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.microsoft.com/china/index.htm (file missing)
O9 - 浏览器额外的按钮: 易趣购物 - {DE607142-AC19-422e-866A-6D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE607142-AC19-422e-866A-6D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2354A44B-3CEB-4829-9940-545B03103538} (PowerPlr Control) - http://vod.58028.net/plugin/PowerPlr.ocx
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {88734439-46D0-42C0-A13F-7E881EE550CF} (Filetran Control) - http://www.bluesky.cn/download/filetran.cab
O16 - DPF: {EF9F1C48-1A63-495A-9317-B7B71B34A9CF} (Msp Class) - http://ddddl.dudu.com/ddd/update/plugin/dudumsp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A4CBB16D-7337-42B2-8CD7-56299C3B7DBB}: NameServer = 202.96.128.86,202.96.128.166
O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - NT 服务: Internet services - Unknown owner - C:\WINDOWS\system32\nvpel.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
