Logfile of HijackThis v1.99.1
Scan saved at 8:09:25, on 2006-8-13
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\解压\HijackThis.exe
R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
O1 - Hosts: 60.191.47.200 pchome.aa.topzj.com
O1 - Hosts: 222.77.177.58 xyq.17173.com
O1 - Hosts: 211.140.138.37 www.hcdj.com
O1 - Hosts: 218.90.192.83 www.9911.com
O1 - Hosts: 221.209.150.2 www.dqtvnet.com
O1 - Hosts: 61.172.255.24 www.eoool.com
O1 - Hosts: 202.108.9.77 www.126.com
O1 - Hosts: 221.1.204.248 www.bw515.com
O1 - Hosts: 220.181.30.40 xyq.netease.com
O1 - Hosts: 219.153.14.163 www.99music.net
O1 - Hosts: 61.152.188.75 www.pp265.com
O1 - Hosts: 219.157.11.83 bt1.btchina.net
O1 - Hosts: 221.208.170.10 o2jam.9you.com
O1 - Hosts: 219.238.233.252 forum.ikaka.com
O1 - Hosts: 219.148.120.141 www.wallcoo.com
O1 - Hosts: 59.42.10.54 pfw.sky.net.cn
O1 - Hosts: 61.129.33.123 ok.wo99.com
O1 - Hosts: 202.108.12.68 read.hjsm.net
O1 - Hosts: 218.10.91.87 vod.daqing.net
O1 - Hosts: 218.66.104.201 www.crsky.com
O1 - Hosts: 218.5.76.219 bt.fkee.com
O1 - Hosts: 59.151.10.35 www.biuke.com
O1 - Hosts: 59.151.10.35 fm.biuke.com
O1 - Hosts: 59.151.10.35 files.biuke.com
O1 - Hosts: 59.151.10.35 bbs.biuke.com
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v14.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\QQ\QQIEHelper.dll
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - D:\项目\KuGoo3\KuGoo3DownXControl.ocx
O2 - BHO: (no name) - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: 好看123上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} - D:\项目\MagicSet\HaokanBar.dll (file missing)
O3 - Toolbar: (no name) - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - (no file)
O4 - HKLM\..\Run: [KAVPersonal50] "D:\项目\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SKYNET Personal FireWall] C:\PROGRA~1\SkyNet\Firewall\pfw.exe
O4 - HKLM\..\Run: [StormCodec_Helper] "D:\项目\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &使用迅雷下载 - D:\项目\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\项目\Thunder\getallurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - D:\项目\KuGoo3\KuGoo3DownX.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\QQ\AddEmotion.htm
O8 - Extra context menu item: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\QQ\SendMMS.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\项目\浩方对战平台\GameClient.exe (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\QQ\QQ.EXE
O9 - Extra button: 易趣购物 - {DE607142-AC19-422e-860A-0D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - Extra 'Tools' menuitem: 易趣购物 - {DE607142-AC19-422e-860A-0D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\QQ\QQIEHelper.dll
O16 - DPF: {BCA9A936-F557-408E-8301-D5B2B302EFD6} (SiUpdaterCtrl Class) - http://web.spaceillusion.com/help/iDanceUpdater1015.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{59AC45EB-96FF-40E7-AD02-0D607810A098}: NameServer = 202.97.224.69 202.97.224.68
O20 - AppInit_DLLs: APIHookDll.dll
O23 - Service: kavsvc - Kaspersky Lab - D:\项目\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: Network Associates McShield (McShield) - Unknown owner - D:\项目\新建文件夹 (2)\Mcshield.exe (file missing)
O23 - Service: Network Associates Task Manager (McTaskManager) - Unknown owner - D:\项目\新建文件夹 (2)\VsTskMgr.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: WintUPp - Unknown owner - C:\DOCUME~1\ddd\LOCALS~1\Temp\wt\wt.exe (file missing)