HijackThis_815汉化版扫描日志 V1.99.1
保存于 14:49:40, 日期 2006-6-18
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Unable to get Internet Explorer version!
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
F:\KAV2005\KWatch.EXE
C:\WINDOWS\system32\spoolsv.exe
F:\KAV2005\KPfwSvc.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
F:\KAV2005\KPFW32.EXE
E:\Tencent\QQ\QQ.exe
E:\Tencent\QQ\TIMPlatform.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\user\My Documents\日志\HijackThis1991zww.exe
R3 - URLSearchHook: (no name) - {265100A4-E115-4A0F-8D84-C6082A7F4701} - C:\WINDOWS\system32\Aclo.dll
R3 - URLSearchHook: (no name) - {2B71C3E0-AB06-4828-ADA6-7F745B2DEAFF} - C:\WINDOWS\system32\Ncrk.dll
R3 - URLSearchHook: (no name) - {38F3A2C0-B587-45FD-B59D-0DB5655D0804} - C:\WINDOWS\system32\Mkpq.dll
R3 - URLSearchHook: (no name) - {74F9910B-A58F-4FEF-95A2-4EC106BB5032} - C:\WINDOWS\system32\Gjfi.dll
R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr1.dll (file missing)
R3 - URLSearchHook: (no name) - {325759C9-17CA-4B29-B83A-F99B92ED61AE} - C:\WINDOWS\system32\Iaqrdi.dll
R3 - URLSearchHook: (no name) - {DABD943A-5572-4112-9960-05253CCE7048} - C:\WINDOWS\system32\Jesdk.dll
R3 - URLSearchHook: (no name) - {B91D5B0A-B86A-4A1E-A2DC-8102CD0EFD84} - C:\WINDOWS\system32\Szrm.dll
R3 - URLSearchHook: (no name) - {1509E3EE-6899-4FD2-9E8F-A4B7973038BB} - C:\WINDOWS\system32\Nimu.dll
R3 - URLSearchHook: (no name) - {6AE00CD0-56AF-4FD9-A397-E828A7E9BC31} - C:\WINDOWS\system32\Ratr.dll
R3 - URLSearchHook: (no name) - {B0A8F666-064B-41E4-A51F-23C1B0624524} - C:\WINDOWS\system32\Lnsfk.dll
R3 - URLSearchHook: (no name) - {DF0C1F4B-6F18-4EA0-95E8-E1758CC226C0} - C:\WINDOWS\system32\Qavnp.dll
R3 - URLSearchHook: (no name) - {F67DC490-05AD-4F51-B122-577F23419AAA} - C:\WINDOWS\system32\Ogrfo.dll
O1 - Hosts: 255.0.0.1 b1.hxwg.cn
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v14.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr1.dll (file missing)
O2 - BHO: (no name) - {1509E3EE-6899-4FD2-9E8F-A4B7973038BB} - C:\WINDOWS\system32\Nimu.dll
O2 - BHO: (no name) - {265100A4-E115-4A0F-8D84-C6082A7F4701} - C:\WINDOWS\system32\Aclo.dll
O2 - BHO: (no name) - {2B71C3E0-AB06-4828-ADA6-7F745B2DEAFF} - C:\WINDOWS\system32\Ncrk.dll
O2 - BHO: (no name) - {325759C9-17CA-4B29-B83A-F99B92ED61AE} - C:\WINDOWS\system32\Iaqrdi.dll
O2 - BHO: (no name) - {38F3A2C0-B587-45FD-B59D-0DB5655D0804} - C:\WINDOWS\system32\Mkpq.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - E:\Tencent\QQ\QQIEHelper.dll
O2 - BHO: (no name) - {6AE00CD0-56AF-4FD9-A397-E828A7E9BC31} - C:\WINDOWS\system32\Ratr.dll
O2 - BHO: (no name) - {74F9910B-A58F-4FEF-95A2-4EC106BB5032} - C:\WINDOWS\system32\Gjfi.dll
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {B0A8F666-064B-41E4-A51F-23C1B0624524} - C:\WINDOWS\system32\Lnsfk.dll
O2 - BHO: (no name) - {B91D5B0A-B86A-4A1E-A2DC-8102CD0EFD84} - C:\WINDOWS\system32\Szrm.dll
O2 - BHO: (no name) - {DABD943A-5572-4112-9960-05253CCE7048} - C:\WINDOWS\system32\Jesdk.dll
O2 - BHO: (no name) - {DF0C1F4B-6F18-4EA0-95E8-E1758CC226C0} - C:\WINDOWS\system32\Qavnp.dll
O2 - BHO: (no name) - {F67DC490-05AD-4F51-B122-577F23419AAA} - C:\WINDOWS\system32\Ogrfo.dll
O3 - IE工具栏增项: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - IE工具栏增项: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - IE工具栏增项: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [KavPFW] "F:\KAV2005\KPFW32.EXE"
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - F:\Thunder Network\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - F:\Thunder Network\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - E:\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 反向链接 - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - E:\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - E:\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - E:\Tencent\QQ\SendMMS.htm
O8 - IE右键菜单中的新增项目: 百度--MP3搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM
O8 - IE右键菜单中的新增项目: 百度--图片搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM
O8 - IE右键菜单中的新增项目: 百度--新闻搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM
O8 - IE右键菜单中的新增项目: 百度--歌词搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM
O8 - IE右键菜单中的新增项目: 百度--网页搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM
O8 - IE右键菜单中的新增项目: 百度--词典搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM
O8 - IE右键菜单中的新增项目: 百度--贴吧搜索 - RES://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM
O8 - IE右键菜单中的新增项目: 类似网页 - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - IE右键菜单中的新增项目: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - IE右键菜单中的新增项目: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O9 - 浏览器额外的按钮: 番茄花园 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://tomatolei.com (file missing)
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - E:\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - E:\Tencent\QQ\QQIEHelper.dll
O11 - Options group: [TBH] 搜搜地址栏搜索
O17 - HKLM\System\CCS\Services\Tcpip\..\{C9BA2D55-1907-49BA-B76F-09C972CCC32A}: NameServer = 202.102.134.68 202.102.128.68
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - NT 服务: Kingsoft Personal Firewall Service (KPfwSvc) - Kingsoft Corporation - F:\KAV2005\KPfwSvc.EXE
O23 - NT 服务: Kingsoft Antivirus KWatch Service (KWatchSvc) - Kingsoft Corporation - F:\KAV2005\KWatch.EXE
O23 - NT 服务: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
