HijackThis_zww汉化版扫描日志 V1.99.1保存于 08:52:54 上午, 日期 2007-1-23操作系统： Windows XP SP2 (WinNT 5.01.2600)浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)当前运行的进程： C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\KAV6\KAVSvc.EXEC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\WINDOWS\system32\wdfmgr.exeC:\WINDOWS\System32\alg.exeC:\WINDOWS\system32\Explorer.exeC:\WINDOWS\system32\wsctf.exeC:\WINDOWS\Explorer.exeC:\KAV6\KpopMon.EXEC:\KAV6\KWatchUI.EXEC:\WINDOWS\system32\VTTimer.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\WINDOWS\system32\Rundll32.exeC:\WINDOWS\system32\ctfmon.exeC:\KAV6\MailMon.EXEC:\Documents and Settings\Administrator\Local Settings\Application Data\winlogon.exeC:\Program Files\EbayShop\EbayShop.exeC:\KAV6\KAVPlus.EXEC:\WINDOWS\system32\com\lsass.exeC:\Documents and Settings\Administrator\Local Settings\Application Data\services.exeC:\Documents and Settings\Administrator\Local Settings\Application Data\lsass.exeC:\WINDOWS\system32\conime.exeC:\WINDOWS\system32\com\smss.exe

C:\Documents and Settings\Administrator\桌面\HB_Hijackthis1991zww814_Pconline.exeC:\Program Files\HijackThis1991汉化版\HijackThis1991zww.exeC:\Documents and Settings\Administrator\Local Settings\Application Data\csrss.exeF2 - REG:system.ini: Shell=Explorer.exe "C:\WINDOWS\eksplorasi.exe"F2 - REG:system.ini: UserInit=userinit.exe,EXPLORER.EXEO2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dllO2 - BHO: BHOImp Class - {70AFF2CB-9DA2-499C-8D15-900729FCE83D} - C:\WINDOWS\system32\YHBO.dllO2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\Progra~1\Baidu\bar\BaiDuBar.dllO3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dllO3 - IE工具栏增项: (no name) - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - (no file)O3 - IE工具栏增项: 金山毒霸 - {A9BE2902-C447-420A-BB7F-A5DE921E6138} - C:\KAV6\KAIEPlus.DLLO3 - IE工具栏增项: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\Program Files\Kingsoft\FastAIT 2006\IEBand.dllO4 - 启动项HKLM\\Run: [KAVRun] C:\KAV6\KAVRun.EXE

O4 - 启动项HKLM\\Run: [Kulansyn] C:\KAV6\Kulansyn.EXEO4 - 启动项HKLM\\Run: [KpopMon] C:\KAV6\KpopMon.EXEO4 - 启动项HKLM\\Run: [VTTimer] VTTimer.exeO4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osbootO4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /PreloadO4 - 启动项HKLM\\Run: [Bron-Spizaetus] "C:\WINDOWS\ShellNew\bronstab.exe"O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [wsctf.exe] wsctf.exeO4 - HKCU\..\Run: [EXPLORER.EXE] EXPLORER.EXEO4 - HKCU\..\Run: [Tok-Cirrhatus] "C:\Documents and Settings\Administrator\Local Settings\Application Data\smss.exe"O4 - Startup: desktop.iniO4 - Startup: Empty.pif = ?O4 - Startup: 金山词霸 2006.lnk = C:\Program Files\Kingsoft\PowerWord 2006\XDICT.EXE

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exeO4 - Global Startup: desktop.iniO4 - Global Startup: eBay易趣--全球商品一网打尽.lnk = C:\Program Files\EbayShop\EbayShop.exeO6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\Microsoft Office\OFFICE11\EXCEL.EXE/3000O8 - IE右键菜单中的新增项目: 百度-搜索MP3 - res://C:\Program Files\Kingsoft\PowerWord 2006\BaiduBar.dll/BAIDUMP3.HTMO8 - IE右键菜单中的新增项目: 百度-搜索图片 - res://C:\Program Files\Kingsoft\PowerWord 2006\BaiduBar.dll/BAIDUIMG.HTMO8 - IE右键菜单中的新增项目: 百度-搜索新闻 - res://C:\Program Files\Kingsoft\PowerWord 2006\BaiduBar.dll/BAIDUNEWS.HTMO8 - IE右键菜单中的新增项目: 百度-搜索歌词 - res://C:\Program Files\Kingsoft\PowerWord 2006\BaiduBar.dll/BAIDULYRIC.HTMO8 - IE右键菜单中的新增项目: 百度-搜索网页 - res://C:\Program Files\Kingsoft\PowerWord 2006\BaiduBar.dll/BAIDUSEARCH.HTMO8 - IE右键菜单中的新增项目: 百度-搜索贴吧 - res://C:\Program Files\Kingsoft\PowerWord 2006\BaiduBar.dll/BAIDUPOST.HTMO8 - IE右键菜单中的新增项目: 百度-词典搜索 - res://C:\Program Files\Kingsoft\PowerWord 2006\BaiduBar.dll/BAIDU_DIC.HTMO9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\OFFICE11\REFIEBAR.DLLO11 - Options group: [!CNS] 网络实名O23 - NT 服务: Kingsoft AntiVirus Service (KAVSvc) - kingsoft Antivirus - C:\KAV6\KAVSvc.EXEO23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe