HijackThis@Qoo的扫描日志  V1.97.7
Scan saved at 8:04:02, on 2005-8-25
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Documents and Settings\wekent\桌面\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {002AF282-E42D-4B51-9F70-F1570C02FAAD} - C:\Progra~1\NetMeting\Target\0.9.0.3\Target.dll
O2 - BHO: (no name) - {21B4ACC4-8874-4AEC-AEAC-F567A249B4D4} - c:\program files\180searchassistant\saishook.dll (file missing)
O2 - BHO: (no name) - {54EBD53A-9BC1-480B-966A-843A333CA162} - E:\backup\04.01.11\Tencent\qq\QQIEHelper.dll
O2 - BHO: (no name) - {da7ff3f8-08be-4cac-bc00-94d91c6ae7f4} - C:\WINNT\pumba3.dll
O3 - Toolbar: ????? - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: IEMenuName - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - C:\WINNT\pumba3.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [rfw] C:\Program Files\rising\Rfw\Rfw.exe
O4 - HKLM\..\Run: [RecSche] C:\TV Capture Card\RecSche.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MS-4011 Memory Patch] C:\Documents and Settings\wekent\
O4 - HKLM\..\Run: [iTunesHelper] E:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [随便聊聊] C:\Program Files\IMU\MiniChat\chatatwill.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Media Gateway] C:\Program Files\Media Gateway\MediaGateway.exe
O4 - HKLM\..\Run: [PSGuard] C:\Program Files\PSGuard\PSGuard.exe
O4 - HKLM\..\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [Kuro_M3] ?
?
.exe
O4 - HKCU\..\Run: [Kugoo] E:\KUGOO2\KUGOO.EXE
O4 - HKCU\..\Run: [Failed Test] bndsdx.exe
O4 - HKCU\..\Run: [Kuro_M7] ?
x?
A~1\RISI
O4 - Startup: default.pls
O4 - Startup: Logfile.txt
O4 - Startup: NTUSER.DAT
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Startup: status.txt
O4 - Global Startup: ntuser.pol
O8 - Extra context menu item: &Download by NetAnts - E:\NETANTS\NAGet.htm
O8 - Extra context menu item: Download &All by NetAnts - E:\NETANTS\NAGetAll.htm
O8 - Extra context menu item: Save Flash with Flash Catcher - res://C:\Program Files\Common Files\justDo\IECatcher.DLL/FlashCatcher.htm
O8 - Extra context menu item: 使用Kugoo下载 - E:\KUGOO2\KugooDownX.htm
O8 - Extra context menu item: 使用影音传送带下载 - E:\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: 使用影音传送带下载全部链接 - E:\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: 使用搜狗直通车下载 - C:\Program Files\P4P\dl.htm
O8 - Extra context menu item: 查看 Exif 信息(&V) - res://C:\Program Files\Exif Show\ExShow.dll/EXSHOW.HTML
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\backup\04.01.11\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\backup\04.01.11\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\backup\04.01.11\Tencent\qq\SendMMS.htm
O9 - Extra button: NetAnts (HKLM)
O9 - Extra 'Tools' menuitem: &NetAnts (HKLM)
O9 - Extra button: Flash Catcher (HKLM)
O9 - Extra 'Tools' menuitem: Flash Catcher (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: QQ (HKLM)
O11 - Options group: [!MySearch]

—ïDŒœv_èˆbbs.ikaka.com»n¿¼¸A~ÌÙ

前天开始，一进入WINDOWS只要打开IE CPU资源就100%被使用，接近死机，后来连“我的电脑”、桌面上的文件夹也打不开了，瑞星查不出问题，想重装，可是还得备份呀，天哪~~~~—ïDŒœv_èˆbbs.ikaka.com»n¿¼¸A~ÌÙ

引用:

【傻蛋3的贴子】你电脑中有drwtsn32.exe进程吗 ...........................

好象没有—ïDŒœv_èˆbbs.ikaka.com»n¿¼¸A~ÌÙ