Logfile of HijackThis v1.99.1
Scan saved at 20:18:48, on 2007-3-3
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\xing\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\xing\Rising\Rav\Ravmond.exe
c:\xing\rising\rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
C:\xing\Rising\Rav\RavStub.exe
c:\xing\rising\rfw\RfwMain.exe
C:\xing\Rising\Rav\RavTask.exe
C:\xing\Rising\Rav\Ravmon.exe
D:\xun\WebThunder.exe
C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
D:\新建文件夹\Program\Thunder5.exe
E:\Nokia PC Suite 6\LaunchApplication.exe
C:\xing\runiep.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
D:\kuan\和平宽带\和平宽带.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\新建文件夹\新建文件夹\HijackThis.exe
R3 - Default URLSearchHook is missing
O1 - Hosts: P|?P|?
O2 - BHO: WebThunderBHO - {00000AAA-A363-466E-BEF5-9BB68697AA7F} - D:\xun\WebThunderBHO_016.dll
O2 - BHO: ThunderBHO - {08A312BA-5409-49FC-9347-54BB7D069AC6} - D:\新建文件夹\ComDlls\XunLeiBHO_006.dll
O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\PROGRA~1\Kingsoft\FastAIT\IEBand.dll
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RfwMain] "C:\xing\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [RavTask] "C:\xing\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [hm] C:\WINDOWS\system32\rundll32.exe ty38d.dll a
O4 - HKLM\..\Run: [Thunder] "D:\新建文件夹\Thunder.exe" /s
O4 - HKLM\..\Run: [WebThunder] D:\xun\WebThunder.exe
O4 - HKLM\..\Run: [DataLayer] C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] E:\Nokia PC Suite 6\LaunchApplication.exe -onlytray
O4 - HKLM\..\Run: [runeip] C:\xing\runiep.exe
O4 - HKLM\..\Run: [syshost] C:\WINDOWS\system32\syshost.exe
O4 - HKLM\..\Run: [StormCodec_Helper] "D:\feng\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\RunOnce: [RavStub] "C:\xing\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ns.exe] C:\WINDOWS\system32\ns.exe C:\WINDOWS\system32\drivers\nmprt.sys a
O4 - HKCU\..\Run: [PcSync] E:\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Startup: QQ游戏启动加速程序.lnk = D:\qq\QQGAME\Accel.exe
O4 - Global Startup: QQ.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &使用迅雷下载 - D:\新建文件夹\Program\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\新建文件夹\Program\getallurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\qq\AddToNetDisk.htm
O8 - Extra context menu item: 使用Web迅雷下载 - D:\xun\GetUrl.htm
O8 - Extra context menu item: 使用Web迅雷下载全部链接 - D:\xun\GetAllUrl.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\qq\SendMMS.htm
O9 - Extra button: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\新建文件夹\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\新建文件夹\Thunder.exe
O9 - Extra button: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra 'Tools' menuitem: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra button: 金山词霸 - {C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} - C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdog1.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdog1.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdog1.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdogr0.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdogr0.dll
O14 - IERESET.INF: START_PAGE_URL=
about:blank
O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\xing\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\xing\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\xing\Rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\xing\Rising\Rav\Ravmond.exe
