HijackThis_815汉化版扫描日志 V1.99.1
保存于      23:41:15, 日期 2007-9-28
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\PROGRAM FILES\RISING\RAV\RavStub.exe
c:\program files\rising\rfw\RfwMain.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Rising\KakaToolBar\runiep.exe
C:\WINDOWS\VM_STI.EXE
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
E:\超级兔子\MagicSet\SRIECLI.EXE
C:\Program Files\Internet Explorer\iexplore.exe
E:\hijackthis日志扫描\HijackThis1991zww.exe

O2 - BHO: QQCycloneHelper Class - {00000AA9-A363-466E-BEF5-9BB68697AA7F} - E:\超级旋风\QQDownload\QQIEHelper01.dll
O2 - BHO: WebThunderBHO - {00000AAA-A363-466E-BEF5-9BB68697AA7F} - C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll
O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - E:\超级兔子\MAGICSET\haokanbar.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - IE工具栏增项: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - E:\超级兔子\MAGICSET\haokanbar.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - 启动项HKLM\\Run: [wallpaper] c:\windows\system32\壁纸自动换.exe
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [NvCplDaemon] ; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] ; nwiz.exe /install
O4 - 启动项HKLM\\Run: [NvMediaCenter] ; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [WebThunder] C:\Program Files\Thunder Network\WebThunder\WebThunder.exe
O4 - 启动项HKLM\\Run: [runeip] "C:\Program Files\Rising\KakaToolBar\runiep.exe" /startup
O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (ZC0301PL)
O4 - 启动项HKLM\\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [HF_GameClient] F:\浩方网络对战平台\浩方对战平台\gameclient.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Super Rabbit IEPro] E:\超级兔子\MagicSet\SRIECLI.EXE /LOAD
O4 - Startup: QQ游戏启动加速程序.lnk = ?
O4 - Startup: 腾讯QQ.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - IE右键菜单中的新增项目: 使用Web迅雷下载 - C:\Program Files\Thunder Network\WebThunder\GetUrl.htm
O8 - IE右键菜单中的新增项目: 使用Web迅雷下载全部链接 - C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm
O8 - IE右键菜单中的新增项目: 使用迅雷下载 - E:\迅雷 5\Thunder\Program\geturl.htm
O8 - IE右键菜单中的新增项目: 使用迅雷下载全部链接 - E:\迅雷 5\Thunder\Program\getallurl.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - E:\腾讯QQ\QQ2006\AddEmotion.htm
O9 - 浏览器额外的按钮: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - E:\迅雷 5\Thunder\Thunder.exe
O9 - 浏览器额外的“工具”菜单项: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - E:\迅雷 5\Thunder\Thunder.exe
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - F:\浩方网络对战平台\浩方对战平台\gameclient.exe
O9 - 浏览器额外的按钮: 启动WEB迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - 浏览器额外的“工具”菜单项: 启动WEB迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (PasswordEditCtrl Class) - https://password.qq.com/download/qqedit2.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A0A256DF-CCDA-4623-AB94-E7810A4BA2B8}: NameServer = 202.99.160.68 202.99.166.4
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - NT 服务: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - NT 服务: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe



[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

怎么找啊?  瑞星 说有病毒  有纪录?  不知道在哪啊!

不行啊 找不出来 纪录没有  不是手送扫描的 是他自己蹦不 病毒的~ 找不到!  日至能看出什么来么? 
谢谢

病毒名称处理结果发现日期扫描方式路径文件
未知病毒删除成功2007-08-15 16:00文件监控C:\Program Files\装机人员工具\自动填IP地址填写IP为192.168.0.178.exe
未知病毒删除成功2007-08-15 16:00文件监控C:\Program Files\装机人员工具\自动填IP地址填写IP为192.168.1.178.exe
Hack.SuspiciousAni删除成功2007-08-28 10:27文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\SI5S0QMPani[1].c
Hack.SuspiciousAni忽略2007-09-21 12:26文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F89body[1].jpg
Hack.SuspiciousAni删除成功2007-09-21 12:26文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXGtitle[2].jpg
Hack.SuspiciousAni删除成功2007-09-21 12:27文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXGbody[1].jpg
Worm.VB.inv删除成功2007-09-24 11:30文件监控J:\RECYCLERLcass.exe
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 20:17文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F89ah[1].c
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:09文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F891[1].js
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:09文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F891[1].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:09文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F891[1].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:09文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:09文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I5C1EX811[1].js
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:09文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].js
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F891[2].gif
Trojan.PSW.Win32.OnlineGames.yyd删除成功2007-09-28 23:10文件监控c:\documents and settings\administrator\local settings\temporary internet files\content.ie5\i5c1ex813[1].exe>>upx_c
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F891[2].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I5C1EX811[1].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I5C1EX811[1].js
Trojan.PSW.Win32.OnlineGames.yyd删除成功2007-09-28 23:10文件监控c:\documents and settings\administrator\local settings\temporary internet files\content.ie5\9ytx1nis3[1].exe>>upx_c
Hack.SuspiciousAni忽略2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I5C1EX811[1].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I5C1EX811[1].js
Hack.SuspiciousAni忽略2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F891[2].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:10文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[2].js
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:11文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].js
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:11文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IZCL6F891[1].js
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:11文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[2].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:11文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXG1[1].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:11文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXG1[1].js
Trojan.PSW.Win32.OnlineGames.yyd删除成功2007-09-28 23:11文件监控c:\documents and settings\administrator\local settings\temporary internet files\content.ie5\izcl6f893[1].exe>>upx_c
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:14文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].js
Hack.SuspiciousAni忽略2007-09-28 23:15文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXG1[1].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:15文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXG1[2].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:15文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXG1[1].js
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:16文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXG1[2].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:16文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:16文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].js
Hack.SuspiciousAni忽略2007-09-28 23:17文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:17文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I5C1EX811[1].js
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:17文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[2].gif
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:17文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[2].gif
Trojan.DL.JS.Agent.lli删除成功2007-09-28 23:17文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9YTX1NIS1[1].js
Hack.SuspiciousAni重新启动计算机后删除文件2007-09-28 23:17文件监控C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\US8UGNXG1[1].gif

麻烦你说的再详细些吗??
具体怎么做?
IE文件什么的都不会删啊