coolmao99 coolmao99
关注数: 0 粉丝数: 15 发帖数: 1,045 关注贴吧数: 1
请高手帮忙看下我的日志,急! HijackThis_zww汉化版扫描日志 V1.99.1保存于 14:46:25, 日期 2007-5-10操作系统: Windows XP SP2 (WinNT 5.01.2600)浏览器: Internet Explorer v6.00 SP2 (6.00.2900.2180)当前运行的进程: C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Rising\Rav\CCenter.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Rising\Rav\Ravmond.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Rising\Rfw\rfwsrv.exeC:\Program Files\Rising\Rav\RavStub.exeC:\Program Files\Rising\Rfw\RfwMain.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\drivers\WDelMgr20.exeC:\Program Files\Rising\Rav\RavTask.exeC:\Program Files\Rising\Rav\Ravmon.exeC:\WINDOWS\system32\SafeSignCertReg.exeC:\Program Files\Permeo\e-Border Driver\s5credmgr.exeC:\Program Files\Rising\AntiSpyware\runiep.exeC:\WINDOWS\SOUNDMAN.EXEC:\WINDOWS\system32\Internat.exeC:\Program Files\MSN Messenger\MsnMsgr.ExeC:\Program Files\wnwb\wnwb.exeD:\tools\QQ\QQ.exeC:\Program Files\MSN Messenger\usnsvc.exeD:\tools\QQ\TIMPlatform.exeC:\Program Files\Symantec\pcAnywhere\awrem32.exeD:\tools\QQ\QQ.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Common Files\Real\Update_OB\realsched.exeD:\tools\HijackThis1991【teyqiu】.exeO2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -systemO4 - 启动项HKLM\\Run: [CertificateRegistration] SafeSignCertReg.exeO4 - 启动项HKLM\\Run: [e-Border Credential] C:\Program Files\Permeo\e-Border Driver\s5credmgr.exeO4 - 启动项HKLM\\Run: [runeip] C:\Program Files\Rising\AntiSpyware\runiep.exeO4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -StartupO4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXEO4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - HKCU\..\Run: [Internat.exe] Internat.exeO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - Startup: QQ游戏启动加速程序.lnk = C:\Program Files\Tencent\QQGAME\Accel.exeO4 - Startup: wnwb.lnk = C:\Program Files\wnwb\wnwb.exeO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\tools\QQ\AddToNetDisk.htmO8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\tools\QQ\AddPanel.htmO8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\tools\QQ\AddEmotion.htmO8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\tools\QQ\SendMMS.htmO10 - 未知的文件在 Winsock LSP: c:\program files\permeo\e-border driver\s5spi.dllO10 - 未知的文件在 Winsock LSP: c:\program files\permeo\e-border driver\s5spi.dll
请高手帮我看一下我的日志,看看我的电脑倒底有没有问题 HijackThis_zww汉化版扫描日志 V1.99.1保存于 9:47:34, 日期 2007-2-23操作系统: Windows XP SP2 (WinNT 5.01.2600)浏览器: Internet Explorer v6.00 SP2 (6.00.2900.2180)当前运行的进程: C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Rising\Rav\CCenter.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Rising\Rav\Ravmond.exec:\program files\rising\rfw\rfwsrv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\nvsvc32.exec:\program files\rising\rfw\RfwMain.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\WINDOWS\system32\SafeSignCertReg.exeC:\Program Files\Rising\Rav\RavTask.exeC:\Program Files\Rising\Rav\Ravmon.exeC:\Program Files\Rising\AntiSpyware\runiep.exeC:\WINDOWS\system32\internat.exeC:\Program Files\MSN Messenger\usnsvc.exeE:\tools\wnwb\wnwb.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\mmc.exeC:\WINDOWS\system32\DfrgFat.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS\system32\DfrgNtfs.exeC:\Program Files\MSN Messenger\msnmsgr.exeE:\tools\QQ\QQ.exeE:\tools\QQ\TIMPlatform.exeC:\WINDOWS\system32\DfrgFat.exeC:\Program Files\Internet Explorer\IEXPLORE.EXEE:\tools\HijackThis1991【teyqiu】.exeO2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)O4 - 启动项HKLM\\Run: [CertificateRegistration] SafeSignCertReg.exeO4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -systemO4 - 启动项HKLM\\Run: [runeip] C:\Program Files\Rising\AntiSpyware\runiep.exeO4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartupO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /backgroundO4 - Startup: INTERNAT.lnk = C:\WINDOWS\system32\internat.exeO4 - Startup: 腾讯QQ.lnk = E:\tools\QQ\QQ.exeO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - E:\tools\QQ\AddToNetDisk.htmO8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - E:\tools\QQ\AddPanel.htmO8 - IE右键菜单中的新增项目: 添加到QQ表情 - E:\tools\QQ\AddEmotion.htmO8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - E:\tools\QQ\SendMMS.htmO9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\tools\QQ\QQ.EXEO9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\tools\QQ\QQ.EXEO15 - “受信任的站点”中添加项: easyabc.95599.cnO15 - “受信任的站点”中添加项: www.95599.cnO15 - “受信任的站点”中添加项: http://www.icbc.com.cnO16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1009/aliedit.cabO16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cabO16 - DPF: {A3CD7F74-93C9-4BC4-B892-CCDF1514F714} (Submit Class) - https://pbank.95559.com.cn/personbank/ocx/safe.cabO16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl Object) - https://www.tenpay.com/download/qqedit.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{14996093-E79C-4366-8BF0-289481E01BB2}: NameServer = 202.98.5.68,202.98.0.68O18 - 列举现有的协议: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO23 - NT 服务: pcAnywhere Host Service (awhost32) - Symantec Corporation - C:\Program Files\Symantec\pcAnywhere\awhost32.exeO23 - NT 服务: 杀马清除模块 (DefendioService) - 智能实验室 - E:\tools\defendio\defendio\DefendioService.exeO23 - NT 服务: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXEO23 - NT 服务: npkcsvc - INCA Internet Co., Ltd. - C:\WINDOWS\system32\npkcsvc.exeO23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exeO23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exeO23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exeO23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exeO23 - NT 服务: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exeO23 - NT 服务: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe感谢不尽!
1 下一页