HijackThis_zww汉化版扫描日志 V1.99.1
保存于 12:30:59, 日期 2006-06-09
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Unable to get Internet Explorer version!
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\瑞星\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\瑞星\Rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
D:\瑞星\Rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE
D:\Tencent\TT\TTraveler.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Tencent\QQ\QQ.exe
D:\瑞星\Rising\Rav\RavTask.exe
C:\WINDOWS\VM_STI.EXE
D:\瑞星\Rising\Rav\Ravmon.exe
D:\Tencent\QQ\TIMPlatform.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\反病毒常用工具\HijackThis1991zww.exe
R3 - URLSearchHook: (no name) - {448B50C4-DED9-4D93-8A9A-FF536C86EA58} - C:\WINDOWS\system32\Zugh.dll
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v13.dll
O2 - BHO: (no name) - {04B523CF-AA06-435E-88A2-554F02D3B7C6} - C:\WINDOWS\system32\Crzlh.dll
O2 - BHO: (no name) - {087EF310-5B31-4AA7-B7B3-26183E879670} - C:\WINDOWS\system32\Okfg.dll
O2 - BHO: (no name) - {0A82DA35-9D49-4976-8A5E-833F1286233B} - C:\WINDOWS\system32\Rcmorq.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: (no name) - {157DCBA9-09C2-4E56-9E8D-F161DA8CD382} - C:\WINDOWS\system32\Mhnnu.dll
O2 - BHO: (no name) - {15F7499B-4513-4588-9F4E-2E1C5E262531} - C:\WINDOWS\system32\Vfqrl.dll
O2 - BHO: (no name) - {22C81F4D-B838-40BA-B15B-FA97E16AED1E} - C:\WINDOWS\system32\Cyiyez.dll
O2 - BHO: (no name) - {32923D0C-43C0-4C3D-8275-0C4DE7361B7D} - C:\WINDOWS\system32\Bbhvbp.dll
O2 - BHO: (no name) - {3E25EAF2-DAF7-43F9-B33F-F7C9E680A12F} - C:\WINDOWS\system32\Ruvyt.dll
O2 - BHO: (no name) - {448B50C4-DED9-4D93-8A9A-FF536C86EA58} - C:\WINDOWS\system32\Zugh.dll
O2 - BHO: (no name) - {46634F22-7EEF-4724-8118-1DE44F169874} - C:\WINDOWS\system32\Acijut.dll
O2 - BHO: (no name) - {5A2FA382-D8E4-4354-B205-684A10F94F02} - C:\WINDOWS\system32\Jddof.dll
O2 - BHO: (no name) - {5D435B43-EFD3-4771-B0FB-32DEEE211961} - C:\WINDOWS\system32\Krth.dll
O2 - BHO: (no name) - {6D3F6BE0-86E7-446E-B683-72BAB47768C8} - C:\WINDOWS\system32\Eixu.dll
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - BHO: (no name) - {88130C58-A1EB-4117-BB4B-04813355FF0D} - C:\WINDOWS\system32\Uoiz.dll
O2 - BHO: (no name) - {8F8BDFC1-3A38-4B35-BA62-1D4937223A3D} - C:\WINDOWS\system32\Dfkfl.dll
O2 - BHO: (no name) - {98F8D48D-E278-41EF-BE1C-7C949E9997D8} - C:\WINDOWS\system32\Seiu.dll
O2 - BHO: (no name) - {9EE225A0-1AC1-4E41-B76F-5BB95BAAB7C7} - C:\WINDOWS\system32\Gzjjla.dll
O2 - BHO: (no name) - {A60E9DC4-5305-49D4-952E-DAB6D66D2B65} - C:\WINDOWS\system32\Mjsi.dll
O2 - BHO: (no name) - {AE06806E-128A-4C00-B794-C2435EA417B5} - C:\WINDOWS\system32\Wejcd.dll
O2 - BHO: (no name) - {AFC1363E-79D9-4CA6-84B8-704355C1A1B8} - C:\WINDOWS\system32\Rgbv.dll
O2 - BHO: (no name) - {B442809E-36CF-47BD-A3C2-3B37479FEE11} - C:\WINDOWS\system32\Hftsr.dll
O2 - BHO: (no name) - {CA02A680-4B41-4521-802B-E480247C9448} - C:\WINDOWS\system32\Gukxn.dll
O2 - BHO: (no name) - {CBF7367D-70A0-4BB2-A7CF-9634365D1392} - C:\WINDOWS\system32\Wchpob.dll
O2 - BHO: (no name) - {D27C9597-57D3-4BB5-939B-2397D305DD56} - C:\WINDOWS\system32\Uehtbi.dll
O2 - BHO: (no name) - {D795D1CD-DD89-421F-8EF5-9A6783355947} - C:\WINDOWS\system32\Etmtgf.dll
O2 - BHO: (no name) - {E0FCF87A-9051-44DF-B2FF-64612522C977} - C:\WINDOWS\system32\Xzsnis.dll
O2 - BHO: (no name) - {EBA6475B-BC8F-43A0-AD57-5C18E85461FD} - C:\WINDOWS\system32\Uhquo.dll
O2 - BHO: (no name) - {F183A20C-9043-4F83-BF7B-DBB760EADEFD} - C:\WINDOWS\system32\Fhdt.dll
O3 - IE工具栏增项: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - IE工具栏增项: BitComet工具栏 - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - F:\马柏松\软件\BitComet\BitCometBar\BitCometBar0.5.dll (file missing)
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 启动项HKLM\\Run: [RavTask] "D:\瑞星\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - 启动项HKLM\\Run: [BIE] Rundll32 C:\WINDOWS\DOWNLO~1\BDPlugin.dll,Rundll32
O4 - 启动项HKLM\\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - 启动项HKLM\\Run: [KAVPersonal50] "D:\新建文件夹 (3)\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SDO2005] C:\Program Files\盛大圈圈\SDOClient.exe
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: 服务管理器.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - F:\迅雷\迅雷\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - F:\迅雷\迅雷\getallurl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 加入POCO网摘(&K) - http://my.poco.cn/fav/rightClick.php
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 我的POCO网摘(&O) - http://my.poco.cn/fav/open_myfav.php
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Tencent\QQ\SendMMS.htm
O8 - IE右键菜单中的新增项目: 百度--MP3搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM
O8 - IE右键菜单中的新增项目: 百度--图片搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM
O8 - IE右键菜单中的新增项目: 百度--新闻搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM
O8 - IE右键菜单中的新增项目: 百度--歌词搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM
O8 - IE右键菜单中的新增项目: 百度--网页搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM
O8 - IE右键菜单中的新增项目: 百度--词典搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM
O8 - IE右键菜单中的新增项目: 百度--贴吧搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM
O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE (file missing)
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [TBH] 搜搜地址栏搜索
O20 - Winlogon Notify: System Safety Monitor - C:\WINDOWS\SYSTEM32\SSMWinlogonEx.dll
O23 - NT 服务: kavsvc - Unknown owner - D:\新建文件夹 (3)\Kaspersky Anti-Virus Personal\kavsvc.exe (file missing)
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\瑞星\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\瑞星\Rising\Rav\Ravmond.exe
O23 - NT 服务: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:\WINDOWS\system32\wdfmgr.exe (file missing)
