【分析】HijackThis【研究】

[過去ﾛｸﾞ] 【分析】HijackThis【研究】 (957ﾚｽ)
上下前次 1-新
通常表示 512ﾊﾞｲﾄ分割ﾚｽ栞

このｽﾚｯﾄﾞは過去ﾛｸﾞ倉庫に格納されています｡
次ｽﾚ検索歴削→次ｽﾚ栞削→次ｽﾚ過去ﾛｸﾞﾒﾆｭｰ

771: 名無しさん＠お腹いっぱい。 [sage] 2006/08/25(金) 21:55:29

>>763
一応ここで調べた結果ね
http://hijackthis.de/
問題になりそうなのがいくつかあるみたい

C:\WINDOWS\SYSTEM\IMEJP98M.EXE　　　unknown process
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCTSKSHD.EXE　　　unknown process
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCSHLD9X.EXE　　　unknown process
O4 - HKLM\..\Run: [Kernel32] C:\WINDOWS\SYSTEM\Kernel.dll　　　Added as a result of the REDLOF.M VIRUS! Must be fixed!
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCTSKSHD.EXE　　　Unknown application.
O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE　　　Unknown application.
O4 - HKLM\..\RunServices: [McShld9x] C:\Program Files\McAfee.com\VSO\mcshld9x.exe　　　Unknown application.
O4 - Startup: folder.htt　　　Unknown application.
O4 - Global Startup: folder.htt　　　Unknown application.

その他Safeってある中にもPossibly nasty!ってコメントついてるのがある
理由は通常のフォルダと違うところにあるかららしい

C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSSHLD.EXE
C:\PROGRAM FILES\MCAFEE.COM\VSO\MCVSESCN.EXE

他は全部Safeだったよ
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\PROGRAM FILES\MCAFEE.COM\AGENT\MCAGENT.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFTRAY.EXE
C:\PROGRAM FILES\MCAFEE.COM\PERSONAL FIREWALL\MPFAGENT.EXE

unknown processとかUnknown applicationって言うところだけ確認したら？
McAfeeアンインストしてからHiJackThisとっても残ってるようなら
その段階でレジストリ消して再インストするとか

http://tamae.5ch.net/test/read.cgi/sec/1091346741/771

794:  ◆EK3LEdG1.M  [sage] 2006/10/25(水) 06:53:14

続き

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe

http://tamae.5ch.net/test/read.cgi/sec/1091346741/794

795: 名無しさん＠お腹いっぱい。 [sage] 2006/10/25(水) 06:53:48

O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun の Java コンソール - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

以上です；　お願いします orz

http://tamae.5ch.net/test/read.cgi/sec/1091346741/795

811: 名無しさん＠お腹いっぱい。 [sage] 2006/11/29(水) 20:34:08

ちょっと質問よろしいでしょうか？
今日このソフトの存在を知り使ってみたところ01の項目に以下のように出ました。

O1 - Hosts: 2001:d70:100::80 nc27web00.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:0002::80 nc27web20.w2.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:0003::80 nc27web40.w3.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:0004::80 nc27web50.w4.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:0005::80 nc27web60.w5.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:0006::80 nc27web70.w6.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:0007::80 nc27web80.w7.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:0008::80 nc27web90.w8.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:0009::80 nc27weba0.w9.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:000a::80 nc27webb0.w10.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:000b::80 nc27webc0.w11.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100:000c::80 nc27webd0.w12.v2.fletsnet.com # CommunicationTool
O1 - Hosts: 2001:d70:100::5060 nc27scc00.v2.fletsnet.com # CommunicationTool
・・・・・・
・・・・・・
以下ずらっと同様の表示。

これは一体なんでしょうか？
ググっても、ログ読んでもわかりませんでした。

http://tamae.5ch.net/test/read.cgi/sec/1091346741/811

822: 名無しさん＠お腹いっぱい。 [] 2007/03/11(日) 16:04:20

O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

この中で何か問題あるものってありますか？

http://tamae.5ch.net/test/read.cgi/sec/1091346741/822

865: 名無しさん＠お腹いっぱい。 [] 2008/05/04(日) 13:29:28

C:\Documents and Settings\Administrator\デスクトップ\新しいフォルダ (2)\HijackThis.exe
C:\WINDOWS\System32\atievxx.exe
C:\WINDOWS\System32\irdvxc.exe
C:\WINDOWS\System32\sdpasvc.exe

R3 - URLSearchHook: MyUrlSrcHook Class - {D2A5245A-B682-4C26-A507-173A774B2E70} - C:\WINDOWS\DOWNLO~1\CNSMIN~1.DLL
O3 - Toolbar: ラジオ(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Windows Anti Verifier] Windows-Anti.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Microsoft Windows Lsass Schedule] Win32.exe
O4 - HKLM\..\Run: [Windows32 Lsass Verifier] Win32lsass.exe
O4 - HKLM\..\Run: [Windows Sound Verifier] Winlp32.exe
O4 - HKLM\..\Run: [Microsoft MSDTC Microsoft HotFix KB5456] msdtcsp2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Networking Monitoring] C:\WINDOWS\System32\mdm.exe
O4 - HKLM\..\Run: [f0a12f2b] rundll32.exe "C:\WINDOWS\System32\stjbirnk.dll",b
O4 - HKLM\..\Run: [BMf3921cb7] Rundll32.exe "C:\WINDOWS\System32\ktvxshwn.dll",s
O4 - HKLM\..\RunServices: [Windows Anti Verifier] Windows-Anti.exe
O4 - HKLM\..\RunServices: [Microsoft Windows Lsass Schedule] Win32.exe
O4 - HKLM\..\RunServices: [Windows32 Lsass Verifier] Win32lsass.exe
O4 - HKLM\..\RunServices: [Windows Sound Verifier] Winlp32.exe
O4 - HKLM\..\RunServices: [Microsoft MSDTC Microsoft HotFix KB5456] msdtcsp2.exe

http://tamae.5ch.net/test/read.cgi/sec/1091346741/865

866: 名無しさん＠お腹いっぱい。 [] 2008/05/04(日) 13:31:04

4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Networking Monitoring] C:\WINDOWS\System32\mdm.exe
O4 - HKLM\..\Run: [f0a12f2b] rundll32.exe "C:\WINDOWS\System32\stjbirnk.dll",b
O4 - HKLM\..\Run: [BMf3921cb7] Rundll32.exe "C:\WINDOWS\System32\ktvxshwn.dll",s
O4 - HKLM\..\RunServices: [Windows Anti Verifier] Windows-Anti.exe
O4 - HKLM\..\RunServices: [Microsoft Windows Lsass Schedule] Win32.exe
O4 - HKLM\..\RunServices: [Windows32 Lsass Verifier] Win32lsass.exe
O4 - HKLM\..\RunServices: [Windows Sound Verifier] Winlp32.exe
O4 - HKLM\..\RunServices: [Microsoft MSDTC Microsoft HotFix KB5456] msdtcsp2.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft Windows Lsass Schedule] Win32.exe
O4 - HKCU\..\Run: [Windows Networking Monitoring] C:\WINDOWS\System32\mdm.exe
O4 - HKCU\..\Run: [Microsoft MSDTC Microsoft HotFix KB5456] msdtcsp2.exe
O4 - HKCU\..\RunServices: [Microsoft Windows Lsass Schedule] Win32.exe
O8 - Extra context menu item: Easy-WebPrint プレビュー - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint 印刷 - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint 印刷リストに追加 - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint 高速印刷 - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: JWordでウェブ検索(&J) - res://C:\WINDOWS\DOWNLO~1\CnsMin.dll/203

http://tamae.5ch.net/test/read.cgi/sec/1091346741/866

868: 名無しさん＠お腹いっぱい。 [sage] 2008/05/04(日) 21:37:54

>>867
削除した後再起動を忘れずに

O4 - HKLM\..\Run: [Windows Anti Verifier] Windows-Anti.exe
O4 - HKLM\..\Run: [Microsoft Windows Lsass Schedule] Win32.exe
O4 - HKLM\..\Run: [Windows32 Lsass Verifier] Win32lsass.exe
O4 - HKLM\..\Run: [Windows Sound Verifier] Winlp32.exe
O4 - HKLM\..\Run: [Microsoft MSDTC Microsoft HotFix KB5456] msdtcsp2.exe
O4 - HKLM\..\Run: [Windows Networking Monitoring] C:\WINDOWS\System32\mdm.exe
O4 - HKLM\..\Run: [f0a12f2b] rundll32.exe "C:\WINDOWS\System32\stjbirnk.dll",b
O4 - HKLM\..\Run: [BMf3921cb7] Rundll32.exe "C:\WINDOWS\System32\ktvxshwn.dll",s
O4 - HKLM\..\RunServices: [Windows Anti Verifier] Windows-Anti.exe
O4 - HKLM\..\RunServices: [Microsoft Windows Lsass Schedule] Win32.exe
O4 - HKLM\..\RunServices: [Windows32 Lsass Verifier] Win32lsass.exe
O4 - HKLM\..\RunServices: [Windows Sound Verifier] Winlp32.exe
O4 - HKLM\..\RunServices: [Microsoft MSDTC Microsoft HotFix KB5456] msdtcsp2.exe
O4 - HKCU\..\Run: [Microsoft Windows Lsass Schedule] Win32.exe
O4 - HKCU\..\Run: [Windows Networking Monitoring] C:\WINDOWS\System32\mdm.exe
O4 - HKCU\..\Run: [Microsoft MSDTC Microsoft HotFix KB5456] msdtcsp2.exe
O4 - HKCU\..\RunServices: [Microsoft Windows Lsass Schedule] Win32.exe
O23 - Service: Network helper Service (MSDisk) - Unknown owner - C:\WINDOWS\System32\irdvxc.exe" /service (file missing)

あとこの辺もいらないかと
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O16 - DPF: {0FDF9D23-AB1C-41DE-B371-6BACECDED6F6} (PccEasyUpdate Class) - http://www.trendmicro.com/ftp/jp/support/vb2008/kantan/0911/PccEasyUpdate.cab

http://tamae.5ch.net/test/read.cgi/sec/1091346741/868

885: 名無しさん＠お腹いっぱい。 [sage] 2008/10/06(月) 11:17:07

C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Justsystem\ATOK19\ATOK19MN.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\SQ931STI.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Kami\Station.exe
C:\Documents and Settings\ayumi\デスクトップ\HiJackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0C041AB9-BED4-4B3B-8161-A7C36622AC5F} - C:\WINDOWS\system32\tuvVLbAT.dll (file missing)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: (no name) - {285F8EB1-9CA5-48A8-B3D7-1E3C46601242} - C:\WINDOWS\system32\yayvvvvW.dll (file missing)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {42B7ADE9-F3E6-4662-8E45-F5897E94529E} - C:\WINDOWS\system32\rqRHawvt.dll (file missing)
O2 - BHO: (no name) - {46632180-53B9-4AC3-AB03-F061C4A85B8B} - C:\WINDOWS\system32\hgGaYpPG.dll (file missing)

http://tamae.5ch.net/test/read.cgi/sec/1091346741/885

886: 名無しさん＠お腹いっぱい。 [sage] 2008/10/06(月) 11:18:21

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

http://tamae.5ch.net/test/read.cgi/sec/1091346741/886

887: 名無しさん＠お腹いっぱい。 [sage] 2008/10/06(月) 11:18:56

O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [SQ931STI] C:\WINDOWS\SQ931STI.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IMJPMIG9.0] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMJP9\IMJPMIG.EXE /Preload /Migration32
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [f45d4506] rundll32.exe "C:\WINDOWS\system32\tyrxlfsb.dll",b
O4 - HKLM\..\Run: [BMf76e769a] Rundll32.exe "C:\WINDOWS\system32\rjhdjvwy.dll",s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] ctfmon.exe (User 'Default user')
O8 - Extra context menu item: Microsoft Excel にエクスポート(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

http://tamae.5ch.net/test/read.cgi/sec/1091346741/887

888: 名無しさん＠お腹いっぱい。 [sage] 2008/10/06(月) 11:19:43

O8 - Extra context menu item: 紙にページを取り込む(&K) - C:\Program Files\Kami\Script\km_script.htm
O8 - Extra context menu item: 紙にページ全体を取り込む(&K) - C:\Program Files\Kami\Script\km_script.htm
O8 - Extra context menu item: 紙に画像を取り込む(&I) - C:\Program Files\Kami\Script\km_image.htm
O8 - Extra context menu item: 紙に選択箇所の文字だけ取り込む(&I) - C:\Program Files\Kami\Script\km_text.htm
O8 - Extra context menu item: 紙に選択箇所を取り込む(&K) - C:\Program Files\Kami\Script\km_script.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun の Java コンソール - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: リサーチ - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

http://tamae.5ch.net/test/read.cgi/sec/1091346741/888

889: 名無しさん＠お腹いっぱい。 [sage] 2008/10/06(月) 11:21:27

O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/jp/partner/default/kavwebscan_unicode.cab
O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendflexsecurity.jp/service_components/control/activex/TmHcmsX.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {3BA66EC1-3F6A-49DD-A359-CBAA1290469F} (ToonsXYJ Control) - http://comics.yahoo.co.jp/component/ToonsXYJ.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1223237062437
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: hgGaYpPG - hgGaYpPG.dll (file missing)

http://tamae.5ch.net/test/read.cgi/sec/1091346741/889

890: 名無しさん＠お腹いっぱい。 [sage] 2008/10/06(月) 11:23:17

O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod サービス (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe

http://tamae.5ch.net/test/read.cgi/sec/1091346741/890

上下前次 1-新書関写板覧索設栞歴

あと 65 ﾚｽあります
ｽﾚ情報赤ﾚｽ抽出画像ﾚｽ抽出歴の未読ｽﾚ

ぬこの手ぬこTOP 0.013s