HijackThis_zww汉化版扫描日志 V1.99.1
保存于 15:52:34, 日期 2005-9-28
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
R3 - 默认的URLSearchHook丢失。用HijackThis修复
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit.exe
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} -
C:\WINDOWS\DOWNLO~1\CONFLICT.1\cnshook.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1
\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32
\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32
\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common
Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [inetinfo] inetinfo.exe
O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe
C:\WINDOWS\DOWNLO~1\CONFLICT.1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [helper.dll] C:\WINDOWS\system32
\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - 启动项HKLM\\Run: [MSPY2002] C:\WINDOWS\system32
\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - 启动项HKLM\\Run: [RavTimer] C:\PROGRA~1
\RISING\RAV\RAVTIMER.EXE
O4 - 启动项HKLM\\Run: [RavMon] C:\PROGRA~1
\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uninstall.exe] C:\WINDOWS\uninstall.exe
O8 - IE右键菜单中的新增项目: !搜一搜 -
res://C:\WINDOWS\DOWNLO~1\CONFLICT.1\CnsMinEx.dll/1003
O8 - IE右键菜单中的新增项目: &Download by NetAnts -
D:\PROGRA~1\NETANTS\NAGet.htm
O8 - IE右键菜单中的新增项目: Download &All by NetAnts -
D:\PROGRA~1\NETANTS\NAGetAll.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Excel(&x) -
res://C:\Office10\EXCEL.EXE/3000
O9 - 浏览器额外的按钮: 手机短信 - {00000000-0000-0001-0001-
596BAEDD1289} - http://sms.3721.com/ie/index.htm (file
missing)
O9 - 浏览器额外的按钮: pp点点通 - {0713E8D2-850A-101B-AFC0-
4210102A8DA7} - D:\PP25\Pp.exe (file missing)
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-
BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file
missing)
O9 - 浏览器额外的按钮: NetAnts - {57E91B47-F40A-11D1-B792-
444553540000} - D:\PROGRA~1\NETANTS\NetAnts.exe
O9 - 浏览器额外的“工具”菜单项: &NetAnts - {57E91B47-F40A-
11D1-B792-444553540000} - D:\PROGRA~1\NETANTS\NetAnts.exe
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-
432D58746E26} - http://hot.3721.com/rd/shop_btn.htm (file
missing)
O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-
E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns
(file missing)
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-
0050045C3C96} -
http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?
http://cn.messenger.yahoo.com/ (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-
8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns
(file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-
48d2-9AB7-8F69C11CCB71} -
http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-
A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns
(file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-
7529-4084-9946-A29F1BDF4FE5} -
http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O11 - Options group: [!CNS] 网络实名
O16 - DPF: {11111111-1111-1111-1111-111191113457} -
file://c:\ied_s7.cab
O16 - DPF: {24311111-1111-1121-1111-111191113457} -
file://c:\eied_s7.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE
Class) - http://software-
dl.real.com/18b8aceb5258d0a70806/netzip/RdxIE601_cn.cab
O16 - DPF: {59CCB4A0-727D-11CF-AC36-00AA00A47DD2} (Timer
Object) - http://www.xintv.com/download/ietimer.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9D0643B3-A6DB-4457-
98F0-E641C321FA44}: NameServer = 202.102.192.68 202.102.199.68
O23 - NT 服务: Rising Process Communication Center (RsCCenter)
- rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising
Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - NT 服务: windox.exe - Unknown owner -
C:\WINDOWS\windox.exe
