日志文件 Trend Micro HijackThis v 2.0.2
日志保存时间: 7:46:57,2010/9/8
操作系统: Windows Vista SP1 (WinNT 6.00.1905)
IE版本: Internet Explorer v7.00 (7.00.6001.18498)
启动模式: 正常
正在运行的进程:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
D:\Program Files\Rising\Rav\RsTray.exe
D:\Program Files\Rising\AntiSpyware\RSTray.exe
D:\Program Files\联创通信\宽带上网助手\Dot1xClient.exe
D:\Program Files\Tencent\QQ\Bin\QQ.exe
d:\Program Files\Tencent\QQ\Bin\TXPlatform.exe
D:\Program Files\KuGou\KuGou2008\KuGoo.exe
D:\Program Files\Maxthon2\Maxthon.exe
D:\Program Files\MopGames\TianShuQiTan\TianShu.exe
D:\Program Files\MopGames\TianShuQiTan\TianShu.exe
C:\Windows\system32\wuauclt.exe
D:\Program Files\Rising\AntiSpyware\knownsvr.exe
C:\Windows\System32\wsqmcons.exe
D:\Program Files\Thunder Network\Thunder\Program\Thunder.exe
C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.79\ThunderService.exe
D:\Program Files\SogouInput\5.0.1.4192\SogouCloud.exe
D:\Program Files\WinRAR\WinRAR.exe
C:\Users\王东华\AppData\Local\Temp\Rar$EX00.028\HijackThis.exe
O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - d:\Program Files\Thunder Network\Thunder\ComDlls\TDMediaDetector5.9.24.1506.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: XLLiteView BrowserHelper Object - {2D90D33C-DE76-42D0-9040-E4466DDC24AC} - d:\Program Files\Thunder Network\Thunder\Program\EmbedDetectNow.dll
O2 - BHO: QvodExtend - {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} - D:\Program Files\QvodPlayer\QvodExtend.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - d:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O2 - BHO: Windows Live 登录帮助程序 - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: 卡卡上网安全助手 - {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} - C:\Windows\system32\UrlFilter.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - IE 工具栏: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [RavTray] "d:\Program Files\Rising\Rav\RsTray.exe" -system
O4 - HKLM\..\Run: [runeip] "d:\Program Files\Rising\AntiSpyware\rstray.exe" /startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O8 - 扩展右键菜单项: 使用迅雷下载 - d:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - 扩展右键菜单项: 使用迅雷下载全部链接 - d:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - 扩展右键菜单项: 使用迅雷查看图片 - d:\Program Files\Thunder Network\Thunder\Program\repairimage.htm
O8 - 扩展右键菜单项: 导出到 Microsoft Office Excel(&X) - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O13 - Gopher Prefix:
O15 - ESC Trusted Zone:
http://*.update.microsoft.comO18 - Protocol: KuGoo - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\Windows\System32\KuGoo3DownXControl.ocx
O18 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\Windows\System32\KuGoo3DownXControl.ocx
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O23 - NT 服务: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
O23 - NT 服务: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - NT 服务: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - NT 服务: Advanced Networking Service (hnmsvc) - Dell Inc. - c:\Program Files\Common Files\Dell\Advanced Networking Service\hnm_svc.exe
O23 - NT 服务: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - NT 服务: Rav Service (RsRavMon) - Beijing Rising Information Technology Co., Ltd. - d:\Program Files\Rising\Rav\RavMonD.exe
O23 - NT 服务: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - NT 服务: Tencent Software Update Service (TSUSVC) - Tencent - d:\Program Files\Tencent\QQSoftMgr\1.0.375.203\TencentUpdateSvc.exe
--
文件结束 - 5093 字节
用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.5.21022; .NET CLR 3.5.30729; .NET CLR 3.0.30618; MDDC; Maxthon 2.0)
