Logfile of HijackThis v1.99.1
Scan saved at 21:53:30, on 2006-10-1
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\瑞星杀毒软件\shadu\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\瑞星杀毒软件\shadu\Rising\Rav\Ravmond.exe
d:\瑞星杀毒软件\fanghuo\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
D:\瑞星杀毒软件\shadu\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
d:\瑞星杀毒软件\fanghuo\rising\rfw\RfwMain.exe
D:\瑞星杀毒软件\shadu\Rising\Rav\RavTask.exe
D:\瑞星杀毒软件\shadu\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\conime.exe
D:\Program Files\腾迅QQ\QQ.exe
D:\Program Files\腾迅QQ\TIMPlatform.exe
C:\WINDOWS\system32\ping.exe
F:\电脑日志扫描\HijackThis.exe
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {732A61D2-CD1E-44F2-9AD8-B48A801FD7A2} - C:\WINDOWS\system32\Cwrq.dll (file missing)
O2 - BHO: (no name) - {733E9DE9-D7ED-414B-A647-1574C68A584E} - C:\WINDOWS\system32\Qlffe.dll (file missing)
O2 - BHO: (no name) - {786904FA-8887-4971-9B6D-AF47358D6238} - C:\WINDOWS\system32\Nmylsj.dll (file missing)
O2 - BHO: (no name) - {953C97BB-466D-4DE4-B90C-71A678D2023B} - C:\WINDOWS\system32\Zqwr.dll (file missing)
O2 - BHO: (no name) - {99388986-D32E-467F-BCDF-3CB71DB4C370} - C:\WINDOWS\system32\Emavnv.dll (file missing)
O2 - BHO: (no name) - {A1191041-376A-4401-AADF-A84C4D918726} - C:\WINDOWS\system32\Jfwg.dll (file missing)
O2 - BHO: 信息帮助 - {A753ED20-5836-4642-A71C-08AE83F21492} - C:\WINDOWS\webhelp3.dll (file missing)
O2 - BHO: (no name) - {AC1953D4-9AA8-4D9D-9B60-C0F9C3E1346D} - C:\WINDOWS\system32\Zyhyzb.dll (file missing)
O2 - BHO: (no name) - {DBBE5F9F-B52D-4ACF-978C-B6E35EF0CACC} - C:\WINDOWS\system32\Ebdou.dll (file missing)
O2 - BHO: (no name) - {F7AC8D5E-8800-4251-9807-17332E046902} - C:\WINDOWS\system32\Qomrhn.dll (file missing)
O4 - HKLM\..\Run: [RavTask] "D:\瑞星杀毒软件\shadu\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "D:\瑞星杀毒软件\fanghuo\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &使用迅雷下载 - E:\迅雷\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - E:\迅雷\getAllurl.htm
O8 - Extra context menu item: Google 搜索(&G) - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\腾迅QQ\AddToNetDisk.htm
O8 - Extra context menu item: 加入POCO网摘(&K) - http://my.poco.cn/fav/rightClick.php
O8 - Extra context menu item: 反向链接 - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: 我的POCO网摘(&O) - http://my.poco.cn/fav/open_myfav.php
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\腾迅QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\腾迅QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\腾迅QQ\SendMMS.htm
O8 - Extra context menu item: 百度Flash搜索 - res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/FLASHSEARCH.HTM
O8 - Extra context menu item: 百度mp3搜索 - res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUMP3.HTM
O8 - Extra context menu item: 百度信息快递搜索 - res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUIE.HTM
O8 - Extra context menu item: 百度图片搜索 - res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUIMG.HTM
O8 - Extra context menu item: 百度搜索 - res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUSEARCH.HTM
O8 - Extra context menu item: 百度新闻搜索 - res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUNEWS.HTM
O8 - Extra context menu item: 类似网页 - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: 缓存的网页快照 - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: 翻译英文字词(&T) - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: 豪杰超级解霸V8实时播放 - C:\Herosoft\HeroV8\MPURLGET.HTM
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O16 - DPF: {2354A44B-3CEB-4829-9940-545B03103538} (PowerPlr Control) - http://movie.xnol.com/plugin/PowerPlr.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{91EFCFB1-EB06-4BF2-89E6-129A89639A34}: NameServer = 202.103.0.117
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\瑞星杀毒软件\fanghuo\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\瑞星杀毒软件\fanghuo\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\瑞星杀毒软件\shadu\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\瑞星杀毒软件\shadu\Rising\Rav\Ravmond.exe
