HijackThis_zww汉化版扫描日志 V1.99.1
保存于 21:12:05, 日期 2006-5-6
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Unable to get Internet Explorer version!
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lenovo\幸福一键通\Kbdriver.exe
c:\program files\rising\rfw\RfwMain.exe
E:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
C:\WINDOWS\VM303_STI.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Program Files\jj4\jjsvr4.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
E:\Program Files\Thunder Network\Thunder\Thunder.exe
E:\Program Files\TTPlayer\TTPlayer.exe
C:\WINDOWS\system32\conime.exe
E:\Program Files\ChinaNetSn\bin\DialTerminal.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\Program Files\Tencent\QQ\QQ.exe
E:\Program Files\Tencent\QQ\TIMPlatform.exe
D:\Downloads\2535952005811174944\HijackThis1991zww.exe
O1 - Hosts: 61.152.144.243 www.btchina.net
O1 - Hosts: 81.196.2.17 www.computergames.ro
O1 - Hosts: 219.238.233.252 forum.ikaka.com
O1 - Hosts: 12.129.217.201 www.worldofwarcraft.com
O1 - Hosts: 61.134.60.2 www.ssfeng.com
O1 - Hosts: 220.181.18.66 www.hao123.com
O1 - Hosts: 61.141.8.87 www.tomatolei.com
O1 - Hosts: 218.246.21.13 smkp.985985.com
O1 - Hosts: 220.181.26.137 www.chinaren.com
O1 - Hosts: 61.152.246.161 www.chinabbs.com
O1 - Hosts: 211.154.45.139 bbs.cfan.com.cn
O1 - Hosts: 219.133.60.91 entry.q-zone.qq.com
O1 - Hosts: 210.21.119.26 free.activeclub.net
O1 - Hosts: 222.191.251.199 wow.replays.net
O1 - Hosts: 219.238.233.238 www.ikaka.com
O1 - Hosts: 218.77.130.19 www.tianya.cn
O1 - Hosts: 61.135.170.231 www.mop.com
O1 - Hosts: 61.172.246.183 www.mengya.com
O1 - Hosts: 211.151.230.73 www.xici.net
O1 - Hosts: 64.111.126.144 www.googlechinablog.com
O1 - Hosts: 61.155.107.199 www.blogcn.com
O1 - Hosts: 222.83.6.72 www.bokee.com
O1 - Hosts: 61.142.254.210 home.anyp.cn
O1 - Hosts: 61.142.254.218 wxc543.anyp.cn
O1 - Hosts: 207.46.217.246 spaces.msn.com
O1 - Hosts: 219.239.89.53 www.enet.com.cn
O1 - Hosts: 219.239.94.45 www.it.com.cn
O1 - Hosts: 222.39.47.9 www.onlinedown.net
O1 - Hosts: 219.239.88.110 www.yesky.com
O1 - Hosts: 211.154.222.56 www.cctv.com
O1 - Hosts: 61.172.246.54 www.e0593.com
O1 - Hosts: 210.73.88.170 www.flashempire.com
O1 - Hosts: 202.102.249.40 www.mydrivers.com
O1 - Hosts: 58.19.254.135 www.fzgj.ful.cn
O1 - Hosts: 211.100.33.174 msn.mop.com
O1 - Hosts: 61.152.103.113 www.poptang.com
O1 - Hosts: 128.238.3.21 utopia.poly.edu
O1 - Hosts: 210.192.97.115 www.utalk.com.cn
O1 - Hosts: 61.172.246.118 www.tom365.com
O1 - Hosts: 61.172.252.18 www.shanda.com.cn
O1 - Hosts: 61.151.243.217 wxc543.home4u.china.com
O1 - Hosts: 211.136.91.68 www.chinamobile.com
O1 - Hosts: 219.153.14.163 www.99music.net
O1 - Hosts: 202.101.62.196 zk1225.web196.dikavan.com
O1 - Hosts: 61.151.243.217 home4u.china.com
O1 - Hosts: 61.142.254.217 yu2003.anyp.cn
O1 - Hosts: 61.134.60.151 vod.ssfeng.com
O1 - Hosts: 61.145.113.76 www.pcauto.com.cn
O1 - Hosts: 211.100.28.170 www.paipaikan.com
O1 - Hosts: 64.84.29.53 bbs.snggame.com
O1 - Hosts: 203.175.255.45 my.nbip.net
O1 - Hosts: 218.30.64.121 www.chinavnet.com
O1 - Hosts: 61.135.170.231 top.mop.com
O1 - Hosts: 211.152.49.12 www.caixiong.com
O1 - Hosts: 61.153.48.56 www.lbxx.net
O1 - Hosts: 218.30.70.34 www.nokia.com.cn
O1 - Hosts: 218.30.88.24 push.cb.kingsoft.com
O1 - Hosts: 202.102.249.40 www.mydrivers.com
O1 - Hosts: 58.215.64.133 www.firefoxcn.com
O1 - Hosts: 61.151.253.175 www.sony.com.cn
O1 - Hosts: 61.129.78.49 www.verycd.com
O1 - Hosts: 61.151.239.223 www.hcty.com
O1 - Hosts: 222.38.176.90 www.china1000.net
O1 - Hosts: 222.39.47.9 www.onlinedown.net
O1 - Hosts: 211.158.10.198 www5.skycn.com
O1 - Hosts: 222.52.116.157 www.sz1001.net
O1 - Hosts: 61.142.254.210 www.anyp.cn
O1 - Hosts: 218.1.64.165 www.yesure.com
O1 - Hosts: 202.108.59.242 www.cfan.com.cn
O1 - Hosts: 222.39.47.9 www.onlinedown.net
O1 - Hosts: 61.55.138.127 download.pcpop.com
O1 - Hosts: 218.201.44.152 hot.xunlei.com
O1 - Hosts: 221.238.195.5 bt.btzero.net
O1 - Hosts: 210.21.206.208 pub.xunlei.com
O1 - Hosts: 210.21.206.208 pub.xunlei.com
O1 - Hosts: 219.136.249.78 www1.crsky.com
O1 - Hosts: 218.66.104.132 www.crsky.com
O1 - Hosts: 59.42.10.54 pfw.sky.net.cn
O1 - Hosts: 219.238.233.202 www.rising.com.cn
O1 - Hosts: 218.30.88.24 www.kingsoft.com
O1 - Hosts: 222.77.177.56 woool.17173.com
O1 - Hosts: 222.77.177.56 woool.17173.com
O1 - Hosts: 222.73.251.42 www.eve-online.com.cn
O1 - Hosts: 61.129.93.111 www.wowchina.com
O1 - Hosts: 61.152.248.40 game.the9.com
O1 - Hosts: 61.172.252.87 woool.sdo.com
O1 - Hosts: 61.172.252.94 home.woool.poptang.com
O1 - Hosts: 58.215.64.154 www.yongzhewg.com
O1 - Hosts: 211.99.201.143 www.popsoft.com
O1 - Hosts: 60.195.252.108 www.whoyo.com.cn
O1 - Hosts: 61.145.127.236 www.dkonline.com.cn
O1 - Hosts: 222.73.250.189 patch.ali213.net
O1 - Hosts: 61.172.254.238 bnb.poptang.com
O1 - Hosts: 222.73.250.188 www.ali213.net
O1 - Hosts: 61.172.254.87 home.mir2.poptang.com
O1 - Hosts: 61.129.57.16 bbs.ngacn.com
O1 - Hosts: 60.191.144.83 wstatic.xunlei.com
O1 - Hosts: 221.231.129.32 ac.sdo.com
O1 - Hosts: 61.129.93.111 www.wowchina.com
O1 - Hosts: 61.129.93.111 www.wowchina.com
O1 - Hosts: 61.129.57.17 ngacn.com
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v14.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - (no file)
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [Lskbdrv] C:\Program Files\Lenovo\幸福一键通\Kbdriver.exe
O4 - 启动项HKLM\\Run: [LenSoft] C:\Program Files\Lenovo\幸福一键通\FlyShuttle.exe
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [SKYNET Personal FireWall] E:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
O4 - 启动项HKLM\\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - 启动项HKLM\\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [pyjj] E:\Program Files\jj4\jjsvr4.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - E:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - E:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - E:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - E:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - E:\Program Files\浩方对战平台\GameClient.exe
O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O14 - IERESET.INF: START_PAGE_URL=http://update.microsoft.com/windowsupdate/v6/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (PhotoUploadCtrl Control) - http://imgcache.qq.com/qzone/photo/QzoneMediaTools.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABEFA754-D396-41D0-B6CC-6E0A9F29E585}: NameServer = 61.134.1.4 218.30.19.40
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABFEEC04-715C-4D51-9AE5-9D75F1313937}: NameServer = 61.144.56.101,202.96.128.68,202.96.134.133,205.252.144.228,202.175.3.8,192.168.1.1
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - NT 服务: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - NT 服务: Explroer (Explroer用于控制Windows图形She) - Unknown owner - C:\Program Files\Common Files\explore.exe
O23 - NT 服务: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - NT 服务: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - NT 服务: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - NT 服务: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
