瑞星卡卡安全论坛技术交流区系统软件 麻烦大家给看看,这个我不会!

1   1  /  1  页   跳转

麻烦大家给看看,这个我不会!

麻烦大家给看看,这个我不会!

麻烦你给分析下,看有无问题,另外能给说说怎样看这个东西么?谢谢。


Logfile of HijackThis v1.99.1
Scan saved at 北京时间 13:26:02, on 2006-10-5
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
H:\WINNT\System32\smss.exe
H:\WINNT\system32\winlogon.exe
H:\WINNT\system32\services.exe
H:\WINNT\system32\lsass.exe
H:\WINNT\system32\svchost.exe
H:\Program Files\Rising\Rav\CCenter.exe
H:\Program Files\Rising\Rav\Ravmond.exe
H:\WINNT\system32\spoolsv.exe
H:\WINNT\System32\svchost.exe
H:\WINNT\system32\stisvc.exe
H:\WINNT\System32\WBEM\WinMgmt.exe
H:\WINNT\system32\svchost.exe
H:\Program Files\Rising\Rav\RavStub.exe
H:\WINNT\Explorer.EXE
H:\Program Files\Common Files\Real\Update_OB\realsched.exe
H:\WINNT\system32\Rundll32.exe
H:\Program Files\Rising\Rav\RavTask.exe
H:\Program Files\Rising\Rav\Ravmon.exe
H:\WINNT\system32\internat.exe
H:\Program Files\Internet Explorer\iexplore.exe
H:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe
H:\下载\ha_hijackthis_1991\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - H:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - H:\WINNT\system32\msdxm.ocx
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - H:\WINNT\system32\KakaTool.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe] "H:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [桌面图标文字自动透明] H:\Program Files\Wom\WinMem.exe XP
O4 - HKLM\..\Run: [StormCodec_Helper] "H:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [ExFilter] Rundll32.exe H:\WINNT\system32\hookdll.dll,ExecFilter solo
O4 - HKLM\..\Run: [RavTask] "H:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O8 - Extra context menu item: !搜一搜(&S) - res://H:\WINNT\DOWNLO~1\CnsMinEx.dll/1003
O8 - Extra context menu item: &使用迅雷下载 - H:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - H:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O9 - Extra button: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - H:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - H:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra button: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - Extra 'Tools' menuitem: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - H:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - H:\WINNT\web\related.htm
O9 - Extra button: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - Extra 'Tools' menuitem: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - Extra button: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - http://www.rising.com.cn (file missing)
O9 - Extra button: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - http://www.ikaka.com (file missing)
O12 - Plugin for .spop: H:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1143723806804
O16 - DPF: {6DBED0B2-1FF5-11D8-A26A-0050BA1B2930} (portalAXForm Control) - http://211.99.133.194/portal/PortalAX.cab
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - H:\WINNT\System32\dmadmin.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - H:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - H:\Program Files\Rising\Rav\Ravmond.exe

最后编辑2006-10-05 16:22:30
分享到:
gototop
 

我顶
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT