HijackThis_815汉化版扫描日志 V1.99.1
保存于 11:05:45, 日期 2006-12-7
操作系统： Windows XP (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 (6.00.2600.0000)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
C:\WINDOWS\TEMP\CT8C76.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
C:\WINDOWS\down\rundll32.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Trend Micro\OfficeScan Client\pccntupd.exe
C:\WINDOWS\System32\conime.exe
C:\Program Files\Trend Micro\OfficeScan Client\Pop3Trap.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\MAWENL~1\LOCALS~1\Temp\Rar$EX00.234\HijackThis1991zww.exe
C:\Program Files\Trend Micro\OfficeScan Client\TSC.EXE
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - 启动项HKLM\\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
O4 - 启动项HKLM\\Run: [wdfmgr32] C:\WINDOWS\System32\wdfmgr32.exe
O4 - 启动项HKLM\\Run: [r] C:\WINDOWS\down\rundll32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{C9343841-F5B4-473A-A1B7-DC87431B6A25}: NameServer = 10.99.1.200
O17 - HKLM\System\CS1\Services\Tcpip\..\{C9343841-F5B4-473A-A1B7-DC87431B6A25}: NameServer = 10.99.1.200
O17 - HKLM\System\CS2\Services\Tcpip\..\{C9343841-F5B4-473A-A1B7-DC87431B6A25}: NameServer = 10.99.1.200
O17 - HKLM\System\CS3\Services\Tcpip\..\{C9343841-F5B4-473A-A1B7-DC87431B6A25}: NameServer = 10.99.1.200
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - NT 服务: internet - Unknown owner - C:\WINDOWS\internet.exe
O23 - NT 服务: Network DDE Server (Network DDE PigeonServer) - Unknown owner - C:\WINDOWS\SVCH0ST.exe (file missing)
O23 - NT 服务: Network Logon (NetWorkLogon) - Unknown owner - rundll32.exe (file missing)
O23 - NT 服务: OfficeScanNT 实时扫描 (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
O23 - NT 服务: OfficeScanNT 个人防火墙 (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
O23 - NT 服务: OfficeScanNT 侦听程序 (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
O23 - NT 服务: Windows Management Instruments - Unknown owner - C:\WINDOWS\system32\bootefg.exe
O23 - NT 服务: WinSysLoginSorver (WinSysLoginServise) - Unknown owner - C:\WINDOWS\System32\sysligin.exe
O23 - NT 服务: internet - Unknown owner - C:\WINDOWS\internet.exe这个我肯定是病毒,已手工删了
O23 - NT 服务: Network DDE Server (Network DDE PigeonServer) - Unknown owner - C:\WINDOWS\SVCH0ST.exe (file missing)不太确定,请看帮忙一下吧
