zhao315384548
新手上路
积分 8
发帖 8
注册 2008-4-9
|
#4
日志文件 Trend Micro HijackThis v 2.0.2
日志保存时间: 20:43:19,2008-4-21
操作系统: Windows XP SP2 (WinNT 5.01.2600)
IE版本: Internet Explorer v7.00 (7.00.6000.16640)
启动模式: 正常
正在运行的进程:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
F:\Micropoint\MPSVC.exe
F:\Micropoint\MPSVC2.exe
F:\Micropoint\MPSVC1.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
F:\Micropoint\MPMon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TheWorld 2.0\TheWorld.exe
E:\hijackthis.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsv19.tmp\hijackthis.exe
O2 - BHO: flashget2 urlcatch - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - F:\FlashGet\ComDlls\bhoCATCH.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - 扩展右键菜单项: 使用快车(Flas&hGet)下载 - F:\FlashGet\ComDlls\Bholink.htm
O8 - 扩展右键菜单项: 使用快车(Flash&Get)下载全部链接 - F:\FlashGet\ComDlls\Bhoall.htm
O9 - 额外的按钮: 深度技术论坛 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://bbs.deepin.org(文件不存在)
O9 - 额外的按钮: (未命名) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - 额外的“工具”菜单项目: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{6E723B53-DD3F-497C-9836-8EB13E778E95}: NameServer = 61.147.37.1 61.177.7.1
O23 - NT 服务: MPSVC Service (MPSVCService) - Micropoint Corporation - F:\Micropoint\MPSVC.exe
--
文件结束 - 2683 字节
| |
※ ※ ※ 本文纯属【zhao315384548】个人意见，与【 微点交流论坛 】立场无关※ ※ ※
|
 |
|
