HijackThis_815汉化版扫描日志 V1.99.1
保存于 18:48:18, 日期 2006-8-23
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
D:\腾讯\QQ\QQ.exe
D:\腾讯\QQ\TIMPlatfrom.exe
D:\Program Files\Winamp2.95\winamp.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\chow\Hijackthis1991zww\HijackThis1991zww.exe
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\RunOnce: [RavStub] "C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: 宽带连接.lnk = ?
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O14 - IERESET.INF: START_PAGE_URL=
about:blank
O17 - HKLM\System\CCS\Services\Tcpip\..\{1C341F36-479B-4A9C-AC40-1F434C5C8CDE}: NameServer = 202.103.224.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{28D58D52-5870-4D71-A65B-4B0A67D1B360}: NameServer = 202.103.224.68 202.103.225.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{1C341F36-479B-4A9C-AC40-1F434C5C8CDE}: NameServer = 202.103.224.68
O17 - HKLM\System\CS2\Services\Tcpip\..\{1C341F36-479B-4A9C-AC40-1F434C5C8CDE}: NameServer = 202.103.224.68
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
请帮忙看看.每次重新启动都显示有病毒.而且显示是重新启动后删除
高手帮帮忙
万分感谢
