level 1
我的电脑老是过一段食神的对白那些说QQ炫铃的可以不用提了 我不上QQ我现在快郁闷死了
2006年07月10日 01点07分
1
level 1
HijackThis_zww汉化版扫描日志 V1.99.1保存于 9:39:10, 日期 2006-7-10操作系统: Windows XP SP2 (WinNT 5.01.2600)浏览器: Unable to get Internet Explorer version!当前运行的进程: D:\WINDOWS\System32\smss.exeD:\WINDOWS\system32\winlogon.exeD:\WINDOWS\system32\services.exeD:\WINDOWS\system32\lsass.exeD:\WINDOWS\system32\Ati2evxx.exeD:\WINDOWS\system32\svchost.exeD:\WINDOWS\System32\svchost.exeD:\WINDOWS\Explorer.EXED:\WINDOWS\system32\spoolsv.exeD:\WINDOWS\system32\wscntfy.exeD:\WINDOWS\SOUNDMAN.EXED:\program files\malata\mau-201\CnxDslTb.exeD:\WINDOWS\system32\ctfmon.exeC:\Maxthon\Maxthon.exeC:\工具\HijackThis1991【teyqiu】.exeO2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - C:\MagicSet\haokanbar.dllO3 - IE工具栏增项: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - C:\MagicSet\haokanbar.dllO4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXEO4 - 启动项HKLM\\Run: [CnxDslTaskBar] "d:\program files\malata\mau-201\CnxDslTb.exe" "MALATA\MAU-201"O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32O4 - 启动项HKLM\\Run: [PHIME2002A] ; D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMENameO4 - 启动项HKLM\\Run: [PHIME2002ASync] ; D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNCO4 - 启动项HKLM\\Run: [加速度升级程序] D:\Documents and Settings\All Users\Application Data\jsd\upjsd.exeO4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exeO8 - IE右键菜单中的新增项目: &使用迅雷下载 - c:\Thunder1\Program\GetUrl.htmO8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - c:\Thunder1\Program\GetAllUrl.htmO8 - IE右键菜单中的新增项目: 使用Web迅雷下载 - D:\Program Files\Thunder Network\WebThunder\GetUrl.htmO9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - F:\网络游戏\浩方对战平台\GameClient.exeO9 - 浏览器额外的按钮: 创建移动收藏 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - c:\INetRepl.dll (file missing)O9 - 浏览器额外的按钮: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - c:\INetRepl.dll (file missing)O9 - 浏览器额外的“工具”菜单项: 创建移动收藏... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - c:\INetRepl.dll (file missing)O9 - 浏览器额外的按钮: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)O9 - 浏览器额外的“工具”菜单项: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)O14 - IERESET.INF: START_PAGE_URL=about:blankO17 - HKLM\System\CCS\Services\Tcpip\..\{412AA717-E0CB-4247-A35B-4901BBF54F09}: NameServer = 202.99.192.68 202.99.192.66O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exeO23 - NT 服务: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
2006年07月10日 01点07分
2
level 1
2006-07-10,09:43:15System Repair Engineer 2.0.21.505 (2.0 RC 2)Smallfrogs (http://www.KZTechs.com)Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中: 所有的启动项目(包括注册表、启动文件夹、服务等) 浏览器加载项 正在运行的进程(包括进程模块信息) 文件关联启动项目注册表[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
[Microsoft Corporation][HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<> [][HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
[Realtek Semiconductor Corp.]
<"d:\program files\malata\mau-201\CnxDslTb.exe" "MALATA\MAU-201"> []
<%systemroot%\system32\dumprep 0 -k> []
<; "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<; D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<; D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <加速度升级程序>
[www.flashget.net ][HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
[Microsoft Corporation]
[Microsoft Corporation][HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<> [][HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
[Microsoft Corporation][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
[ATI Technologies Inc.]==================================启动文件夹服务[Ati HotKey Poller / Ati HotKey Poller] <2 - 系统找不到指定的文件。>
[GrayPigeon_Hacker.com.cn / GrayPigeon_Hacker.com.cn]
[InstallDriver Table Manager / IDriverT] <"D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe">
==================================浏览器加载项[超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3}
[浩方对战平台] {0A155D3C-68E2-4215-A47A-E800A446447A}
[Create Mobile Favorite] {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F}
[Create Mobile Favorite] {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F}
[启动Web迅雷] {962EFB8E-2683-42d4-AC74-AAA4C759B9C6}
[超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E}
[Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000}
[WebThunder Browser Helper] {00000AAA-A363-466E-BEF5-9BB68697AA7F}
2006年07月10日 01点07分
3
level 1
[一搜工具条] {115F6E46-FCBC-41ED-B3B5-3BDDD4AAB5E5}
[IE Browser Helper] {3CE496D1-1746-41CD-9489-3C0B93DF10E2} <, N/A>[NaviHelperObj Class] {3E422F49-1566-40D3-B43D-077EF739AC32}
[Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>[Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6}
[超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3}
[Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283}
[SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>[VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127}
[Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000}
[DragSearch BHO] {EF1D17A9-089F-40CC-8D64-7324CDEBA0DB}
[&使用迅雷下载]
[&使用迅雷下载全部链接]
[使用Web迅雷下载]
==================================正在运行的进程[PID: 388][\SystemRoot\System32\smss.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 452][\??\D:\WINDOWS\system32\csrss.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 480][\??\D:\WINDOWS\system32\winlogon.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [D:\WINDOWS\system32\Ati2evxx.dll]
<6.14.10.4124>[PID: 524][D:\WINDOWS\system32\services.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 544][D:\WINDOWS\system32\lsass.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 720][D:\WINDOWS\system32\svchost.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 788][D:\WINDOWS\system32\svchost.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 824][D:\WINDOWS\System32\svchost.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 932][D:\WINDOWS\system32\svchost.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 948][D:\WINDOWS\system32\svchost.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 1180][D:\WINDOWS\Explorer.EXE]
<6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [D:\WINDOWS\system32\mp3infp.dll]
<2.44.3.0> [D:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll] <><1, 0, 0, 1>[PID: 1244][D:\WINDOWS\system32\spoolsv.exe]
<5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>[PID: 1416][D:\WINDOWS\system32\wdfmgr.exe]
<5.2.3790.1230 built by: DNSRV(bld4act)>[PID: 1800][D:\WINDOWS\SOUNDMAN.EXE]
<5.1.0.39>[PID: 1808][D:\program files\malata\mau-201\CnxDslTb.exe]
<040.001.014.000>[PID: 1908][D:\WINDOWS\system32\ctfmon.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 1944][D:\WINDOWS\system32\wbem\wmiprvse.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 1988][D:\WINDOWS\system32\wscntfy.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 2028][D:\WINDOWS\System32\alg.exe]
<5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>[PID: 1052][D:\WINDOWS\system32\wuauclt.exe]
<5.8.0.2469 built by: lab01_n(wmbla)>[PID: 184][C:\工具\SREng2\SREng.exe]
<2.0.21.505>==================================文件关联.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1].EXE OK. ["%1" %*].COM OK. ["%1" %*].PIF OK. ["%1" %*].REG OK. [regedit.exe "%1"].BAT OK. ["%1" %*].SCR OK. ["%1" /S].CHM OK. ["D:\WINDOWS\hh.exe" %1].HLP OK. [%SystemRoot%\System32\winhlp32.exe %1].INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1].INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1].VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*].JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*].LNK OK. [{00021401-0000-0000-C000-000000000046}]==================================Winsock 提供者==================================
2006年07月10日 01点07分
4