BYR Achieve · 镜像论坛

HijackThis_zww汉化版扫描日志 V1.99.1 保存于 16:17:39, 日期 2006-10-13 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\WINDOWS\system32\ctfmon.exe D:\系统软件\虚拟光驱\Alcohol\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE D:\网络\qq\QQ.exe D:\网络\Maxthon\Maxthon.exe D:\网络\qq\TIMPlatform.exe C:\WINDOWS\system32\ctfmon.exe D:\多媒体\foobar2000\foobar2000.exe F:\DiabloII\YZ-bot\GlobalCtrl.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe C:\WINDOWS\system32\conime.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe F:\DiabloII\YZ-bot\D2Bot.exe E:\Dev-Cpp\devcpp.exe C:\WINDOWS\system32\taskmgr.exe C:\Documents and Settings\TCC\桌面\hijackthis1[1].99.1\HijackThis1991zww.exe O1 - Hosts: 125.91.1.20 localhost O1 - Hosts: 125.91.1.20 www.7322.com O1 - Hosts: 125.91.1.20 www.5566.net O1 - Hosts: 125.91.1.20 www.v111.com O1 - Hosts: 125.91.1.20 www.gjj.cc O1 - Hosts: 125.91.1.20 www.hao123.com O1 - Hosts: 125.91.1.20 hao123.com O1 - Hosts: 125.91.1.20 www.265.com O1 - Hosts: 125.91.1.20 265.com O1 - Hosts: 125.91.1.20 www.9991.com O1 - Hosts: 125.91.1.20 9991.com O1 - Hosts: 125.91.1.20 www.v111.com O1 - Hosts: 125.91.1.20 www.gjj.cc O1 - Hosts: 61.162.230.31 www.7939.com O1 - Hosts: 61.162.230.31 7939.com O1 - Hosts: 61.162.230.31 59.34.148.98 O1 - Hosts: 61.162.230.31 about:blank O1 - Hosts: 61.141.31.11 down.Virussky.com O1 - Hosts: 61.141.31.11 60.191.60.108 O1 - Hosts: 61.141.31.11 219.153.20.209 O1 - Hosts: 61.141.31.11 forum.ikaka.com O1 - Hosts: 61.141.31.11 bbs.360safe.com O1 - Hosts: 61.141.31.11 www.360safe.com O1 - Hosts: 61.141.31.11 www.piaoxue.com O1 - Hosts: 61.141.31.11 61.129.58.12 O1 - Hosts: 61.141.31.11 forum.jiangmin.com O1 - Hosts: 61.141.31.11 luosoft.com O1 - Hosts: 125.91.1.20 post.baidu.com O1 - Hosts: 61.141.31.11 60.191.60.107 O1 - Hosts: 61.141.31.11 219.139.58.97 O1 - Hosts: 61.141.31.11 59.34.148.81 O1 - Hosts: 125.91.1.20 60.191.60.114 O1 - Hosts: 125.91.1.20 www.ycdy.com O1 - Hosts: 61.141.31.11 cn.zs.yahoo.com O1 - Hosts: 61.141.31.11 www.znmq.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\AdobeReader\ActiveX\AcroIEHelper.dll O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\网络\Thunder\ComDlls\XunLeiBHO_002.dll O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file) O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll O2 - BHO: 金山超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll (file missing) O2 - BHO: 信息检索 - {CE7C3CF0-98A8-474D-B2B5-1ED7E2E3B004} - C:\WINDOWS\system32\IEHelper.dll O3 - IE工具栏增项: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll O3 - IE工具栏增项: 金山超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll (file missing) O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE O4 - 启动项HKLM\\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - 启动项HKLM\\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - 启动项HKLM\\Run: [StormCodec_Helper] "D:\多媒体\暴风影音\StormSet.exe" /S /opti O4 - 启动项HKLM\\Run: [run] C:\WINDOWS\system32\rundll32.exe rsrc.dll s O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [updatereal] C:\WINDOWS\realupdate.exe other O4 - HKCU\..\Run: [msnnt] C:\WINDOWS\winampa.exe O4 - HKCU\..\Run: [MyShares] c:\program Files\忆多多\MyShares.exe /tray O4 - Global Startup: Adobe Reader Speed Launch.lnk = E:\Program Files\AdobeReader\Reader\reader_sl.exe O8 - IE右键菜单中的新增项目: 使用网际快车下载 - D:\网络\JetCar-v1.71\jc_link.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - D:\网络\JetCar-v1.71\jc_all.htm O8 - IE右键菜单中的新增项目: 使用迅雷下载 - D:\网络\Thunder\Program\GetUrl.htm O8 - IE右键菜单中的新增项目: 使用迅雷下载全部链接 - D:\网络\Thunder\Program\GetAllUrl.htm O8 - IE右键菜单中的新增项目: 百度-搜索MP3 - res://E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll/BAIDUMP3.HTM O8 - IE右键菜单中的新增项目: 百度-搜索图片 - res://E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll/BAIDUIMG.HTM O8 - IE右键菜单中的新增项目: 百度-搜索新闻 - res://E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll/BAIDUNEWS.HTM O8 - IE右键菜单中的新增项目: 百度-搜索歌词 - res://E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll/BAIDULYRIC.HTM O8 - IE右键菜单中的新增项目: 百度-搜索网页 - res://E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll/BAIDUSEARCH.HTM O8 - IE右键菜单中的新增项目: 百度-搜索贴吧 - res://E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll/BAIDUPOST.HTM O8 - IE右键菜单中的新增项目: 百度-词典搜索 - res://E:\Program Files\金鹕山酱词拾霸診\BaiduBar.dll/BAIDU_DIC.HTM O14 - IERESET.INF: START_PAGE_URL=about:blank O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - NT 服务: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - NT 服务: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - NT 服务: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - NT 服务: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - NT 服务: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - NT 服务: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe O23 - NT 服务: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE O23 - NT 服务: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - NT 服务: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - NT 服务: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - NT 服务: StarWind iSCSI Service (StarWindService) - Rocket Division Software - D:\系统软件\虚拟光驱\Alcohol\Alcohol 120\StarWind\StarWindService.exe O23 - NT 服务: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

帮看看我的日志，似乎有问题了