用很多杀毒软件杀过毒,杀出200多个.可杀完还是在.
------------------
HijackThis_zww汉化版扫描日志 V1.99.1
保存于 20:33:20, 日期 2007-12-28
操作系统: Windows XP SP2 (WinNT 5.01.2600)
浏览器: Internet Explorer v7.00 (7.00.6000.16574)
当前运行的进程:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
D:\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\CMBCHINA\WebProtect\WPService.exe
D:\McAfee\Common Framework\UdaterUI.exe
C:\WINDOWS\system32\ctfmon.exe
D:\McAfee\Common Framework\FrameworkService.exe
C:\Documents and Settings\Administrator.EA6B9E6CBA64479\blin\blin.exe
D:\McAfee\Common Framework\McTray.exe
D:\McAfee\VirusScan Enterprise\mcshield.exe
D:\McAfee\VirusScan Enterprise\vstskmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Administrator.EA6B9E6CBA64479\blin\BLinUI.dll
E:\优化大师\WoptiProcess.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\Maxthon\Maxthon.exe
E:\小软件\IE修复工具\HijackThis1991汉化版\HijackThis1991zww.exe
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,,
O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - E:\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - BHO: ThunderBHO - {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Thunder\ComDlls\xunleiBHO_Now.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WebProtect.IEHlpObj - {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B} - C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - D:\McAfee\VirusScan Enterprise\scriptcl.dll
O2 - BHO: (no name) - {9963387B-212E-4643-B207-82DAEA0E713D} - C:\Program Files\Internet Explorer\PLUGINS\Wn_Sys8x.Sys
O2 - BHO: BLin IeDoor Class - {A7934164-66CE-4B01-AD28-A42F734E448D} - C:\Documents and Settings\Administrator.EA6B9E6CBA64479\blin\blinplug.dll
O3 - IE工具栏增项: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - 启动项HKLM\\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\CRavgas.exe" /minimized
O4 - 启动项HKLM\\Run: [McAfeeUpdaterUI] "D:\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PPS Accelerator] C:\Program Files\PPStream\ppsap.exe
O4 - HKCU\..\Run: [blin] "C:\Documents and Settings\Administrator.EA6B9E6CBA64479\blin\blin.exe" -background 1
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - IE右键菜单中的新增项目: &使用BitComet下载 - res://E:\Bitcomet\BitComet.exe/AddLink.htm
O8 - IE右键菜单中的新增项目: &使用BitComet下载全部链接 - res://E:\Bitcomet\BitComet.exe/AddAllLink.htm
O8 - IE右键菜单中的新增项目: &使用BitComet下载本页视频 - res://E:\Bitcomet\BitComet.exe/AddVideo.htm
O8 - IE右键菜单中的新增项目: &使用比邻下载(&B) - C:\Documents and Settings\Administrator.EA6B9E6CBA64479\blin\ctxmenu.htm
O8 - IE右键菜单中的新增项目: 使用迅雷下载 - E:\Thunder\Program\geturl.htm
O8 - IE右键菜单中的新增项目: 使用迅雷下载全部链接 - E:\Thunder\Program\getallurl.htm
O8 - IE右键菜单中的新增项目: 添加到反广告条 - D:\卡巴斯基\ie_banner_deny.htm
O9 - 浏览器额外的按钮: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - E:\Thunder\Thunder.exe
O9 - 浏览器额外的“工具”菜单项: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - E:\Thunder\Thunder.exe
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - E:\浩方\GameClient.exe
O11 - Options group: [INTERNATIONAL] International*
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://site.cmbchina.com/download/CMBEdit.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{96A82935-AAF3-47B2-90BB-90602B42BAE2}: NameServer = 220.189.127.108 220.189.127.107
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - NT 服务: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - NT 服务: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\AVG Anti-Spyware 7.5\guard.exe
O23 - NT 服务: Cmb WebProtect Support (CMBWPS) - China Merchants Bank - C:\Program Files\CMBCHINA\WebProtect\WPService.exe
O23 - NT 服务: Crypkey License - Unknown owner - crypserv.exe (file missing)
O23 - NT 服务: McAfee Framework Service (McAfeeFramework) - Unknown owner - D:\McAfee\Common Framework\FrameworkService.exe" /ServiceStart (file missing)
O23 - NT 服务: McAfee McShield (McShield) - McAfee, Inc. - D:\McAfee\VirusScan Enterprise\mcshield.exe
O23 - NT 服务: McAfee Task Manager (McTaskManager) - McAfee, Inc. - D:\McAfee\VirusScan Ent
[用户系统信息]Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; Maxthon)