HijackThis_815汉化版扫描日志 V1.99.1
保存于 10:14:18, 日期 2005-11-14
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
d:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
d:\Program Files\Founder\Emergency Center\Hotkey.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\jmesoft\hotkey.exe
D:\Program Files\Rising\Rfw\rfwmain.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\internat.exe
C:\PROGRA~1\jmesoft\hkload.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\阿里巴巴\贸易通\AliTalk.exe
D:\Program Files\Tencent\TMDlls\TM.exe
D:\Program Files\Tencent\TIMPlatform.exe
D:\Program Files\TheWorld\TheWorld.exe
D:\Program Files\DreamMail2005_dao\DM2005.exe
C:\Documents and Settings\canson\桌面\4842302005817230232\HijackThis1991zww.exe
R3 - URLSearchHook: 全能助手广告拦截专家 - {ED51E9A3-16C5-4236-99E0-9F093B021433} - d:\Program Files\TweakAssist\AssistIEBar.dll
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v8.dll
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX
O3 - IE工具栏增项: 全能助手广告拦截专家 - {ED51E9A3-16C5-4236-99E0-9F093B021433} - d:\Program Files\TweakAssist\AssistIEBar.dll
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [jmekey] C:\Program Files\jmesoft\hotkey.exe
O4 - 启动项HKLM\\Run: [KAVPersonal50] "d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - 启动项HKLM\\Run: [RfwMain] "d:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [internat.exe] internat.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - d:\Program Files\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - d:\Program Files\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: DailyPim: 保存当前网页 - C:\DOCUME~1\canson\LOCALS~1\Temp\DailyPimHtml.htm
O8 - IE右键菜单中的新增项目: DailyPim: 保存当前链接 - C:\DOCUME~1\canson\LOCALS~1\Temp\DailyPimHtmlLink.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Program Files\Tencent\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - D:\Program Files\KuGoo3\KuGoo3DownX.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Program Files\Tencent\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 添加到广告杀手 - d:\Program Files\TweakAssist\AdKiller.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Program Files\Tencent\SendMMS.htm
O9 - 浏览器额外的按钮: 网中漫步 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://bbs.hz0752.net (file missing)
O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O14 - IERESET.INF: START_PAGE_URL=http://www.hz0752.net
O16 - DPF: {2354A44B-3CEB-4829-9940-545B03103538} (PowerPlr Control) - http://vod.wx.js.cn/plugin/PowerPlr.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{0F87CEEE-F7B8-41E5-A66D-32456BF0A963}: NameServer = 221.228.225.1,218.2.135.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{0F87CEEE-F7B8-41E5-A66D-32456BF0A963}: NameServer = 221.228.225.1,218.2.135.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{0F87CEEE-F7B8-41E5-A66D-32456BF0A963}: NameServer = 221.228.225.1,218.2.135.1
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - NT 服务: kavsvc - Kaspersky Lab - d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - NT 服务: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - d:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Sysbak hotkey Server (Sysbak_hotkey_Server) - Unknown owner - d:\Program Files\Founder\Emergency Center\Hotkey.exe
