电脑自动装不明软件(附HIJACKLOG)

hijackthis.log (15.57 KB)

2014-1-8 08:49 PM, 下载次数: 9

引用:
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: ShowHKToolbar Class - {06433BFE-4946-4E89-823D-CD359C81CD06} - C:\Program Files\881903\IETOOLBAR2\hktbar.dll
O2 - BHO: °ï5ÌÔ-°ï5ÂòÆìϹºÎïÖúÊÖ-ä¯ÀÀÆ÷À©Õ¹ - {260669B1-FC2C-41C0-BAA2-6EF3BB188660} - C:\Users\user\AppData\LocalLow\B5TUpdate\B5TShoppingAssistant.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Hong Kong Toolbar - {481EE3EC-C026-4F9A-BA22-FD07654ADFC0} - C:\Program Files\881903\IETOOLBAR2\hktbar.dll
O2 - BHO: ·ç&ETH;&ETH;ÊÓ&AElig;µ²¥·Å¼°ÏÂÔØ×é¼þ - {4ADBABBD-E1CA-4f11-BD01-73B0B6E4B5BA} - C:\Users\user\funshion\funshiontools\FunshionHelper.dll
O2 - BHO: Browse2save - {755BFC46-CFB7-4806-D9D7-03C422FB6B80} - C:\ProgramData\Browse2save\510a87604bc8f.dll
O2 - BHO: XunleiBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\BHO\XunleiBHO7.9.7.4524.dll
O2 - BHO: Xunlei BHO Platform - {DE05CF4A-7B0A-4775-B5E5-396244938679} - C:\Program Files\Thunder Network\Thunder\Thunder BHO Platform\IEPlatform.dll
O2 - BHO: iToolsBHO - {E1499FE7-129D-4B6E-B681-DDF21E14172C} - C:\Users\user\Documents\iTools\Plugin\iToolsBHO.dll
O3 - Toolbar: Hong Kong Toolbar - {481EE3EC-C026-4F9A-BA22-FD07654ADFC0} - C:\Program Files\881903\IETOOLBAR2\hktbar.dll

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HiveProcExplorer] "C:\Program Files\HiveProcExplorer\HiveProcExplorer.exe" -min -pair
O4 - HKLM\..\Run: [Client Server Runtime Process] C:\Users\user\AppData\Roaming\csrss.exe
O4 - HKLM\..\Run: [Host-process Windows (Rundll32.exe)] c:\users\user\appdata\roaming\system32\csrss.exe
O4 - HKLM\..\Run: [Service Host Process for Windows] C:\Users\user\AppData\Roaming\svchost.exe
O4 - HKLM\..\Run: [YyfmPlay_201413] "C:\Program Files\Yyfm\201413\YyfmPlay.exe" -mini
O4 - HKLM\..\Run: [BoxNews_201413] "C:\Program Files\Yyfm\201413\YYNews.exe" -mini
O4 - HKCU\..\Run: [PPS Accelerator] D:\PPS.tv\PPStream\ppsap.exe
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Users\user\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKCU\..\Run: [Client Server Runtime Process] C:\Users\user\AppData\Roaming\csrss.exe
O4 - HKCU\..\Run: [Host-process Windows (Rundll32.exe)] c:\users\user\appdata\roaming\system32\csrss.exe
O4 - HKCU\..\Run: [Service Host Process for Windows] C:\Users\user\AppData\Roaming\svchost.exe
O4 - HKCU\..\Run: [Funshion] "C:\Program Files\Funshion Online\2.8.6.56\Funshion.exe" startbywindows tray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.130\SSScheduler.exe

O8 - Extra context menu item: &¨Ï¥Î¨³¹p¤U¸ü - C:\Program Files\Thunder Network\Thunder\BHO\geturl.htm
O8 - Extra context menu item: &¨Ï¥Î¨³¹p¤U¸ü¥þ³¡Ãì±µ - C:\Program Files\Thunder Network\Thunder\BHO\GetAllUrl.htm
O8 - Extra context menu item: &¨Ï¥Î¨³¹pÂ÷½u¤U¸ü - C:\Program Files\Thunder Network\Thunder\BHO\OfflineDownload.htm
O8 - Extra context menu item: ʹÓÃUUSee¼ÓËÙ²¥·Å - C:\Program Files\uusee\geturltoplay.htm
O8 - Extra context menu item: ʹÓÃUUSeeÏÂÔØ - C:\Program Files\uusee\geturltodown.htm
O8 - Extra context menu item: ²K¥[¬°ªü¨½©ô©ôªí±¡ - C:\Program Files\AliWangWang\7.10.08C\AddNewEmotion.htm
O9 - Extra button: PPLive - {95B3F550-91C4-4627-BCC4-521288C52977} - C:\Program Files\PPLive\PPTV\PPLive.exe
O9 - Extra 'Tools' menuitem: PPLive - {95B3F550-91C4-4627-BCC4-521288C52977} - C:\Program Files\PPLive\PPTV\PPLive.exe
O9 - Extra button: &ETH;¡ÓÎÏ· - {998A88A0-A355-809B-831C-B83A80000991} - http://www.ugege.com/ (file missing)
O9 - Extra 'Tools' menuitem: &ETH;¡ÓÎÏ· - {998A88A0-A355-809B-831C-B83A80000991} - http://www.ugege.com/ (file missing)
O9 - Extra button: &AElig;ô¶¯UUSee ÍøÂçµçÊÓ - {998A88A0-A355-809B-831C-B83A80000992} - C:\Program Files\uusee\UUSeePlayer.exe (file missing)
O9 - Extra 'Tools' menuitem: &AElig;ô¶¯UUSee ÍøÂçµçÊÓ - {998A88A0-A355-809B-831C-B83A80000992} - C:\Program Files\uusee\UUSeePlayer.exe (file missing)
O16 - DPF: {5FD02BE8-6E7E-4A10-8EF8-3EDA4532EA77} (SpeedTestActiveX Control) - http://218.189.113.11/SpeedTestActiveX.cab
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O23 - Service: B5TService - Unknown owner - C:\Program Files\B5TService\B5TService.exe
O23 - Service: GuangSuShuRuFaFuWu - Unknown owner - C:\Program Files\gssoft\gswb\2.8.1.0113\Config.exe (file missing)
O23 - Service: UUSee Live Update Service - - C:\Program Files\Common Files\uusee\UUSeeLUS.exe

引用:
:files
c:\users\user\appdata\roaming\system32\csrss.exe
C:\Program Files\Yyfm\201413\YYNews.exe
D:\PPS.tv\PPStream\PPSAP.exe
C:\Program Files\Funshion Online\2.8.6.56\Funshion.exe
C:\Program Files\Funshion Online\2.8.6.56\FunshionService.exe
C:\Program Files\Common Files\uusee\UUSeeMediaCenter.exe
C:\Program Files\881903\IETOOLBAR2\hktbar.dll
C:\Users\user\AppData\LocalLow\B5TUpdate\B5TShoppingAssistant.dll
C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
C:\Users\user\funshion\funshiontools\FunshionHelper.dll
C:\ProgramData\Browse2save\510a87604bc8f.dll
C:\Program Files\Thunder Network\Thunder\BHO\XunleiBHO7.9.7.4524.dll
C:\Program Files\Thunder Network\Thunder\Thunder BHO Platform\IEPlatform.dll
C:\Users\user\Documents\iTools\Plugin\iToolsBHO.dll
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\HiveProcExplorer\HiveProcExplorer.exe
C:\Users\user\AppData\Roaming\csrss.exe
C:\Users\user\AppData\Roaming\svchost.exe
C:\Program Files\Yyfm\201413\YyfmPlay.exe
C:\Program Files\Yyfm\201413\YYNews.exe
C:\Program Files\B5TService\B5TService.exe
C:\Program Files\Common Files\uusee\UUSeeLUS.exe