瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 【求助】灰鸽子2
温柔的凤姐 - 2006-4-28 20:55:00
2006-04-28,20:48:09

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows XP Professional Service Pack 2 - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <Kugoo><; E:\PROGRA~1\KuGoo\kugoo.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <MSMSGS><; "C:\Program Files\Messenger\MSMSGS.EXE" /background>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <SetDefaultMIDI><; MIDIDef.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SKYNET Personal FireWall><E:\PROGRA~1\SkyNet\FireWall\pfw.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <QuickTime Task><; "E:\Program Files\QuickTime\qttask.exe" -atboottime>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RavTask><"G:\Program Files\Rising\Rav\RavTask.exe" -system>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <ats><; C:\WINDOWS\System32\asd\adtimer.exe noshow>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <AudioHQ><; g:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Babylon Client><; e:\Program Files\Babylon\Babylon.exe -AutoStart>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Creative Launcher><; g:\Program Files\Creative\SBLive2k\Launcher\CTLauncher.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <DAEMON Tools-2052><; "E:\Program Files\D-Tools\daemon.exe" -lang 2052 -noicon>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <DevconDefaultDB><; C:\WINDOWS\READREG /PSCONV={NO} /NO_DEFPS>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <helper.dll><; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <ISUSPM Startup><; C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <ISUSScheduler><; "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Jet Detection><; "g:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KDTAnywhere><; "C:\Program Files\快递通\KDTAnywhereS.exe" -servicehelper>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Kernel32><; Kernel32.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <MINI_BFYY><; E:\Program Files\Storm Downloader\StormDownloader.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NbFloatBar><; C:\Program Files\Netease\NeteaseBar\NbStart.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NewsUpd><; C:\Program Files\Creative\News\NewsUpd.EXE /q>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NMGameX_AutoRun><; C:\WINDOWS\System32\Rundll32.exe NMGameX.dll,LiveProcess /aa>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <nwiz><; nwiz.exe /install>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002A><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002ASync><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <popo2004><; >
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <StormCodec_Helper><; "E:\Program Files\Storm Codec\StormSet.exe" /S /opti>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SubOlccr><; C:\UCPen\SubOlccr.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <UpdReg><; C:\WINDOWS\Updreg.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WangWang><; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WINDVDPatch><; CTHELPER.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WService><; WService.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  <RavStub><"G:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
[腾讯QQ]
温柔的凤姐 - 2006-4-28 20:57:00
启动文件夹
[腾讯QQ]
  <C:\Documents and Settings\jingyangs\「开始」菜单\程序\启动\腾讯QQ.lnk><N>

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
  <C:\WINDOWS\System32\drivers\CDAC11BA.EXE><Macrovision>
[C-DillaSrv / C-DillaSrv]
  <C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE><C-Dilla Ltd>
[Creative Service for CDROM Access / Creative Service for CDROM Access]
  <C:\WINDOWS\system32\CTsvcCDA.EXE><Creative Technology Ltd>
[KDTAnywhere Server / kdtanywhere]
  <"C:\Program Files\快递通\KDTAnywhereS.exe" -service><Transtong co., Ltd.>
[Macromedia Licensing Service / Macromedia Licensing Service]
  <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Neraptninatw / Neraptninatw]
  <><N/A>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
  <"G:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"G:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SecuROM User Access Service (V7) / UserAccess7]
  <C:\WINDOWS\System32\UAService7.exe><N/A>
[WinTab Service / WinTabService]
  <C:\WINDOWS\System32\DRIVERS\WtSrv.exe><N/A>

==================================
浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v4.dll, >
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <E:\Program Files\tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[DDDMon Class]
  {6BDE1669-B490-48E3-B668-456314F2D6C3} <C:\Program Files\DuDu\DddClient\dddiemon.dll, >
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <E:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <E:\PROGRA~1\KuGoo\KUGOO3~1.OCX, N/A>
[]
  {B3ECCAC9-C7FA-462C-894B-8E9930A70E14} <E:\PROGRA~1\KuGoo\IEHELP~2.DLL, N/A>
[上网助手]
  {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\Program Files\3721\Assist\asbar.dll, 3721>
[SFP Class]
  {F236CC5A-F6E4-4011-9EED-C52FDF51CE3D} <C:\WINDOWS\system32\Sbhoplin.dll, 广州众达天网技术有限公司>
[浩方对战平台]
  {0A155D3C-68E2-4215-A47A-E800A446447A} <E:\Program Files\浩方对战平台\GameClient.exe, N/A>
[]
  {3DB9F45E-AA74-4373-A466-C18A9F1C500D} <C:\Program Files\DuDu\DddClient\DuDuAcc.exe, DuDu>
[视频聊天]
  {6924091F-CD97-41E1-B1D4-D9079409D413} <http://www.liantang.net, N/A>
[寻论网--中学作业解答]
  {6924091F-CD97-41E1-B1D4-D9079409D423} <http://www.xunlun.com, N/A>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <G:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\Program Files\tencent\qq\QQ.EXE, TENCENT>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <E:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[易趣购物]
  {DE60714F-AC19-427e-861A-FD60ABDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=1, N/A>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <E:\Program Files\tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <E:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[上网助手]
  {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\Program Files\3721\Assist\asbar.dll, 3721>
[WebActivater Control]
  {3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINDOWS\System32\WEBACT~1.OCX, QQ>
[VnetAnprIns Class]
  {74447F9C-5691-4A9A-8BE4-564092E40B03} <C:\WINDOWS\Downloaded Program Files\anprins.dll, 中国电信股份有限公司>
[LiveMediaOcx Control]
  {9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} <E:\PROGRA~1\tencent\QQLIVE~1\QQLive.ocx, Tencent>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v4.dll, >
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corp.>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <E:\Program Files\tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\System32\wuweb.dll, Microsoft Corporation>
[DDDMon Class]
  {6BDE1669-B490-48E3-B668-456314F2D6C3} <C:\Program Files\DuDu\DddClient\dddiemon.dll, >
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <E:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <E:\PROGRA~1\KuGoo\KUGOO3~1.OCX, N/A>
[]
  {B3ECCAC9-C7FA-462C-894B-8E9930A70E14} <E:\PROGRA~1\KuGoo\IEHELP~2.DLL, N/A>
[上网助手]
  {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\Program Files\3721\Assist\asbar.dll, 3721>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <E:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[SFP Class]
  {F236CC5A-F6E4-4011-9EED-C52FDF51CE3D} <C:\WINDOWS\system32\Sbhoplin.dll, 广州众达天网技术有限公司>
[&使用DuDu 加速器下载]
  <res://C:\Program Files\DuDu\DddClient\dddmext.dll/202, N/A>
[&使用暴风下载器下载]
  <E:\Program Files\Storm Downloader\geturl.htm, N/A>
[上传到QQ网络硬盘]
  <E:\Program Files\tencent\qq\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
  <E:\Program Files\KuGoo\KuGoo3DownX.htm, N/A>
[使用网际快车下载]
  <E:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <E:\Program Files\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://G:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[导出当前页到超星阅览器(&A)]
  <e:\Program Files\SSREADER36\ss_all.htm, N/A>
[导出选中部分到超星阅览器(&S)]
  <e:\Program Files\SSREADER36\ss_select.htm, N/A>
[添加到QQ自定义面板]
  <E:\Program Files\tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\Program Files\tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <E:\Program Files\tencent\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
温柔的凤姐 - 2006-4-28 20:57:00
==================================
正在运行的进程
[PID: 480][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 536][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 560][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 604][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 616][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 768][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 828][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 896][G:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 912][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 956][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1084][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1132][G:\Program Files\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
    [G:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [G:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [G:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [G:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Program Files\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [G:\Program Files\Rising\Rav\HOOKSYS.dll]  <Rising><18, 1, 0, 9>
    [G:\Program Files\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
    [G:\Program Files\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [G:\Program Files\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 1>
    [G:\Program Files\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [G:\Program Files\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Program Files\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [G:\Program Files\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [G:\Program Files\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [G:\Program Files\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
    [G:\Program Files\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [G:\Program Files\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [G:\Program Files\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [G:\Program Files\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [G:\Program Files\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [G:\Program Files\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [G:\Program Files\Rising\Rav\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [G:\Program Files\Rising\Rav\ExtMail.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [G:\Program Files\Rising\Rav\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1276][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\PROGRA~1\3721\Assist\asnoad.dll]  <><1, 0, 0, 9>
    [E:\PROGRA~1\FlashGet\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [E:\PROGRA~1\KuGoo\IEHELP~2.DLL]  <N/A><N/A>
[PID: 1496][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1600][G:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [G:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [G:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 164][C:\WINDOWS\system32\devldr32.exe]  <Creative Technology Ltd.><1, 0, 0, 17>
    [C:\WINDOWS\system32\DEVCON32.DLL]  <Creative Technology Ltd.><4.06.651>
    [C:\WINDOWS\system32\SFMAN32.DLL]  <Creative Technology Ltd.><4.06.501>
[PID: 200][E:\PROGRA~1\SkyNet\FireWall\pfw.exe]  <天网><2.7.3.1100>
    [E:\PROGRA~1\SkyNet\FireWall\SKYMISC.DLL]  <N/A><N/A>
[PID: 228][G:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [G:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [G:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 268][G:\Program Files\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 17>
    [G:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [G:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [G:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [G:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [G:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1200][C:\WINDOWS\System32\drivers\CDAC11BA.EXE]  <Macrovision><4.20.030>
[PID: 1312][C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE]  <C-Dilla Ltd><3.25.010>
[PID: 1380][C:\WINDOWS\system32\CTsvcCDA.EXE]  <Creative Technology Ltd><1.0.1.0>
[PID: 1440][C:\WINDOWS\System32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.6111>
[PID: 1868][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 404][C:\WINDOWS\System32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 284][C:\WINDOWS\System32\UAService7.exe]  <N/A><N/A>
[PID: 340][C:\WINDOWS\System32\DRIVERS\WtSrv.exe]  <N/A><N/A>
    [C:\WINDOWS\system32\WinTab32.DLL]  <N/A><N/A>
[PID: 392][C:\WINDOWS\system32\MsPMSPSv.exe]  <Microsoft Corporation><7.00.00.1954>
[PID: 2344][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2020][C:\Documents and Settings\jingyangs\桌面\SREng.exe]  <Smallfrogs Studio><2.0.12.350>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
温柔的凤姐 - 2006-4-28 21:01:00
SOFTWARE只有小写，没有大写的

INETWRV这个文件夹也只有小写，没有大写的。

另外，现在启动时运转特别慢，鼠标要等好久才能动。公司同事说瑞星特别占用内存，会拖慢机子，不知是不是。
轩辕小聪 - 2006-4-28 21:08:00
晕，不区分大小写的。瑞星占用内存的情况已经好多了，不应引起太大的问题。我再回顾一下楼主之前的帖子解决得怎么样，再来看看。
温柔的凤姐 - 2006-4-28 21:40:00
不区分大小写啊，那我先去把那些解决了

如果不区分大小写的话，HKEY_LOCAL_MWCHINE\Microsoft\Windows\CurrentVersion\run有很多个，但名字和值不一样，都要删除吗？
我无邪 - 2006-4-28 21:56:00
我觉得你至少还得修复这一项
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Kernel32><; Kernel32.exe>

这项建议修复，虽然我不知道它是什么不东东。
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<ats><; C:\WINDOWS\System32\asd\adtimer.exe noshow>



以下这些我也不知道，暂不修复吧，修复以上两项后，重启看看有什么好的情况没有。
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<WINDVDPatch><; CTHELPER.EXE>
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<ats><; C:\WINDOWS\System32\asd\adtimer.exe noshow>
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<NbFloatBar><; C:\Program Files\Netease\NeteaseBar\NbStart.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SubOlccr><; C:\UCPen\SubOlccr.exe>
我无邪 - 2006-4-28 22:01:00
引用:
【温柔的凤姐的贴子】不区分大小写啊，那我先去把那些解决了

如果不区分大小写的话，HKEY_LOCAL_MWCHINE\Microsoft\Windows\CurrentVersion\run有很多个，但名字和值不一样，都要删除吗？
...........................


不要这样，HKEY_LOCAL_MWCHINE\Microsoft\Windows\CurrentVersion\run只是注册表里的路径是一成不变的，变化在于它的值，比如中的Kernel32.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Kernel32><; Kernel32.exe>
你只需要把它整个项都删除就可以了。
温柔的凤姐 - 2006-4-28 22:01:00
6楼的，我在5楼说过了，如果这个HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]要删除的话，那这个有很多个，只是名字和值不一样，都要删除吗？好担心。

晕啊，你怎么不早说啊，我刚才已经把昨天那贴子里的第一个删除了

你刚才说的二项已经找到删除了，按理说要重启。可我好害怕，不知刚才那个删除有什么坏事，万一系统崩溃了怎么办。
我无邪 - 2006-4-28 22:19:00
我看了，昨天你是删除了，是对的。有个广告程序就这么给你弄死了。你再删除这两项吧。
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Kernel32><; Kernel32.exe>

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<ats><; C:\WINDOWS\System32\asd\adtimer.exe noshow
温柔的凤姐 - 2006-4-28 22:22:00
阿弥陀佛，我又能回来了。刚才关机的时候，手都在抖。幸好删除的是一个与QQ有关的，可以重新下载。

你刚才说的二项我已经删除了，现在已经重启，要不要再导日志上来？
我无邪 - 2006-4-28 22:30:00
你说系统启动慢，可以考虑除掉一些不必要跟随系统启动的软件
运行System Repair Engineer，使用“启动项目，注册表”中，清除一些不必要跟随系统启动的软件旁的勾选，比如，酷狗，快递通等，如果是我，就只保留瑞星，天网与输入法图标这三个进程。
这样，启动时就不会全部加项它们。自然会快些。


附件: 3176972006428223052.jpg
温柔的凤姐 - 2006-4-28 22:45:00
启动项目--注册表里面，只有SKYNET Personal Firewall
IMSCMIg
RavTask
只这三项前面有勾，其他的都没有。
我无邪 - 2006-4-28 22:52:00
这样啊，粘报告上来瞧瞧。
温柔的凤姐 - 2006-4-28 23:04:00
粘什么报告？重新扫描吗？

怎么别人的日志只有一点点，我的日志怎么那么长，象老太婆的裹脚布。
我无邪 - 2006-4-28 23:11:00
是的，把报告粘上来我瞧瞧。
不知现在你的机子怎么样了，瑞星不报了吧？不弹广告了吧？系统还慢吗？
如果都正常了，不折腾也罢了。
温柔的凤姐 - 2006-4-28 23:21:00
2006-04-28,23:19:45

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows XP Professional Service Pack 2 - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <MSMSGS><; "C:\Program Files\Messenger\MSMSGS.EXE" /background>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <SetDefaultMIDI><; MIDIDef.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SKYNET Personal FireWall><E:\PROGRA~1\SkyNet\FireWall\pfw.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <QuickTime Task><; "E:\Program Files\QuickTime\qttask.exe" -atboottime>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RavTask><"G:\Program Files\Rising\Rav\RavTask.exe" -system>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <AudioHQ><; g:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Babylon Client><; e:\Program Files\Babylon\Babylon.exe -AutoStart>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Creative Launcher><; g:\Program Files\Creative\SBLive2k\Launcher\CTLauncher.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <DAEMON Tools-2052><; "E:\Program Files\D-Tools\daemon.exe" -lang 2052 -noicon>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <DevconDefaultDB><; C:\WINDOWS\READREG /PSCONV={NO} /NO_DEFPS>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <helper.dll><; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <ISUSPM Startup><; C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <ISUSScheduler><; "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Jet Detection><; "g:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KDTAnywhere><; "C:\Program Files\快递通\KDTAnywhereS.exe" -servicehelper>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <MINI_BFYY><; E:\Program Files\Storm Downloader\StormDownloader.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NbFloatBar><; C:\Program Files\Netease\NeteaseBar\NbStart.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NewsUpd><; C:\Program Files\Creative\News\NewsUpd.EXE /q>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NMGameX_AutoRun><; C:\WINDOWS\System32\Rundll32.exe NMGameX.dll,LiveProcess /aa>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <nwiz><; nwiz.exe /install>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002A><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002ASync><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <popo2004><; >
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <StormCodec_Helper><; "E:\Program Files\Storm Codec\StormSet.exe" /S /opti>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SubOlccr><; C:\UCPen\SubOlccr.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <UpdReg><; C:\WINDOWS\Updreg.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WangWang><; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WINDVDPatch><; CTHELPER.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WService><; WService.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
[腾讯QQ]
温柔的凤姐 - 2006-4-28 23:22:00
启动文件夹
[腾讯QQ]
  <C:\Documents and Settings\jingyangs\「开始」菜单\程序\启动\腾讯QQ.lnk><H>

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
  <C:\WINDOWS\System32\drivers\CDAC11BA.EXE><Macrovision>
[C-DillaSrv / C-DillaSrv]
  <C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE><C-Dilla Ltd>
[Creative Service for CDROM Access / Creative Service for CDROM Access]
  <C:\WINDOWS\system32\CTsvcCDA.EXE><Creative Technology Ltd>
[KDTAnywhere Server / kdtanywhere]
  <"C:\Program Files\快递通\KDTAnywhereS.exe" -service><Transtong co., Ltd.>
[Macromedia Licensing Service / Macromedia Licensing Service]
  <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Neraptninatw / Neraptninatw]
  <><N/A>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
  <"G:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"G:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SecuROM User Access Service (V7) / UserAccess7]
  <C:\WINDOWS\System32\UAService7.exe><N/A>
[WinTab Service / WinTabService]
  <C:\WINDOWS\System32\DRIVERS\WtSrv.exe><N/A>

==================================
浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v4.dll, >
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <E:\Program Files\tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[DDDMon Class]
  {6BDE1669-B490-48E3-B668-456314F2D6C3} <C:\Program Files\DuDu\DddClient\dddiemon.dll, >
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <E:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <E:\PROGRA~1\KuGoo\KUGOO3~1.OCX, N/A>
[]
  {B3ECCAC9-C7FA-462C-894B-8E9930A70E14} <E:\PROGRA~1\KuGoo\IEHELP~2.DLL, N/A>
[上网助手]
  {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\Program Files\3721\Assist\asbar.dll, 3721>
[SFP Class]
  {F236CC5A-F6E4-4011-9EED-C52FDF51CE3D} <C:\WINDOWS\system32\Sbhoplin.dll, 广州众达天网技术有限公司>
[浩方对战平台]
  {0A155D3C-68E2-4215-A47A-E800A446447A} <E:\Program Files\浩方对战平台\GameClient.exe, N/A>
[]
  {3DB9F45E-AA74-4373-A466-C18A9F1C500D} <C:\Program Files\DuDu\DddClient\DuDuAcc.exe, DuDu>
[视频聊天]
  {6924091F-CD97-41E1-B1D4-D9079409D413} <http://www.liantang.net, N/A>
[寻论网--中学作业解答]
  {6924091F-CD97-41E1-B1D4-D9079409D423} <http://www.xunlun.com, N/A>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <G:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\Program Files\tencent\qq\QQ.EXE, TENCENT>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <E:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[易趣购物]
  {DE60714F-AC19-427e-861A-FD60ABDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=1, N/A>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <E:\Program Files\tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <E:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[上网助手]
  {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\Program Files\3721\Assist\asbar.dll, 3721>
[WebActivater Control]
  {3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINDOWS\System32\WEBACT~1.OCX, QQ>
[VnetAnprIns Class]
  {74447F9C-5691-4A9A-8BE4-564092E40B03} <C:\WINDOWS\Downloaded Program Files\anprins.dll, 中国电信股份有限公司>
[LiveMediaOcx Control]
  {9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} <E:\PROGRA~1\tencent\QQLIVE~1\QQLive.ocx, Tencent>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v4.dll, >
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corp.>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <E:\Program Files\tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\System32\wuweb.dll, Microsoft Corporation>
[DDDMon Class]
  {6BDE1669-B490-48E3-B668-456314F2D6C3} <C:\Program Files\DuDu\DddClient\dddiemon.dll, >
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <E:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <E:\PROGRA~1\KuGoo\KUGOO3~1.OCX, N/A>
[]
  {B3ECCAC9-C7FA-462C-894B-8E9930A70E14} <E:\PROGRA~1\KuGoo\IEHELP~2.DLL, N/A>
[上网助手]
  {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\Program Files\3721\Assist\asbar.dll, 3721>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <E:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[SFP Class]
  {F236CC5A-F6E4-4011-9EED-C52FDF51CE3D} <C:\WINDOWS\system32\Sbhoplin.dll, 广州众达天网技术有限公司>
[&使用DuDu 加速器下载]
  <res://C:\Program Files\DuDu\DddClient\dddmext.dll/202, N/A>
[&使用暴风下载器下载]
  <E:\Program Files\Storm Downloader\geturl.htm, N/A>
[上传到QQ网络硬盘]
  <E:\Program Files\tencent\qq\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
  <E:\Program Files\KuGoo\KuGoo3DownX.htm, N/A>
[使用网际快车下载]
  <E:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <E:\Program Files\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://G:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[导出当前页到超星阅览器(&A)]
  <e:\Program Files\SSREADER36\ss_all.htm, N/A>
[导出选中部分到超星阅览器(&S)]
  <e:\Program Files\SSREADER36\ss_select.htm, N/A>
[添加到QQ自定义面板]
  <E:\Program Files\tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\Program Files\tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <E:\Program Files\tencent\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
温柔的凤姐 - 2006-4-28 23:24:00
正在运行的进程
[PID: 484][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 540][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 564][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 608][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 620][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 772][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 820][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 900][G:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 916][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 960][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1084][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1172][G:\Program Files\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
    [G:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [G:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [G:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [G:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Program Files\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [G:\Program Files\Rising\Rav\HOOKSYS.dll]  <Rising><18, 1, 0, 9>
    [G:\Program Files\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
    [G:\Program Files\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [G:\Program Files\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 1>
    [G:\Program Files\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [G:\Program Files\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Program Files\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [G:\Program Files\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [G:\Program Files\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [G:\Program Files\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
    [G:\Program Files\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [G:\Program Files\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [G:\Program Files\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [G:\Program Files\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [G:\Program Files\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [G:\Program Files\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [G:\Program Files\Rising\Rav\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [G:\Program Files\Rising\Rav\ExtMail.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [G:\Program Files\Rising\Rav\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1284][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\PROGRA~1\3721\Assist\asnoad.dll]  <><1, 0, 0, 9>
    [E:\PROGRA~1\FlashGet\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [E:\PROGRA~1\KuGoo\IEHELP~2.DLL]  <N/A><N/A>
[PID: 1496][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1720][E:\PROGRA~1\SkyNet\FireWall\pfw.exe]  <天网><2.7.3.1100>
    [E:\PROGRA~1\SkyNet\FireWall\SKYMISC.DLL]  <N/A><N/A>
[PID: 1736][G:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [G:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [G:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1772][G:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [G:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [G:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1808][G:\Program Files\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 17>
    [G:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [G:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [G:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [G:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [G:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [G:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [G:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 256][C:\WINDOWS\system32\devldr32.exe]  <Creative Technology Ltd.><1, 0, 0, 17>
    [C:\WINDOWS\system32\DEVCON32.DLL]  <Creative Technology Ltd.><4.06.651>
    [C:\WINDOWS\system32\SFMAN32.DLL]  <Creative Technology Ltd.><4.06.501>
[PID: 1212][C:\WINDOWS\System32\drivers\CDAC11BA.EXE]  <Macrovision><4.20.030>
[PID: 1292][C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE]  <C-Dilla Ltd><3.25.010>
[PID: 1052][C:\WINDOWS\system32\CTsvcCDA.EXE]  <Creative Technology Ltd><1.0.1.0>
[PID: 1824][C:\WINDOWS\System32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.6111>
[PID: 1852][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 216][C:\WINDOWS\System32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 400][C:\WINDOWS\System32\UAService7.exe]  <N/A><N/A>
[PID: 436][C:\WINDOWS\System32\DRIVERS\WtSrv.exe]  <N/A><N/A>
    [C:\WINDOWS\system32\WinTab32.DLL]  <N/A><N/A>
[PID: 524][C:\WINDOWS\system32\MsPMSPSv.exe]  <Microsoft Corporation><7.00.00.1954>
[PID: 2420][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2708][E:\Program Files\tencent\qq\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [E:\Program Files\tencent\qq\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\QQHelperDll.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 14>
    [E:\Program Files\tencent\qq\QQAPI.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [E:\Program Files\tencent\qq\LoginCtrl.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\npkcntc.dll]  <INCA Internet Co., Ltd.><2005, 9, 1, 1>
    [E:\Program Files\tencent\qq\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [E:\Program Files\tencent\qq\QQRes.dll]  <tencent><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\QQMainFrame.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\CQQApplication.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\NewSkin.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\HostingMgr.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\CameraDll.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\MailSummary.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\QQSpace.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\QQGroupMng.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\QQSysMsgMng.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\QQPlugin.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\QRingMng.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\PhoneAPI.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [E:\Program Files\tencent\qq\QQAvatar.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [E:\Program Files\tencent\qq\LongConnection.dll]  <tencent><5, 0, 201, 14>
    [E:\Program Files\tencent\qq\QQPet.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\BQQApplication.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [E:\Program Files\tencent\qq\CommercesMng.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
温柔的凤姐 - 2006-4-28 23:25:00
[E:\Program Files\tencent\qq\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [E:\Program Files\tencent\qq\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 140>
    [E:\Program Files\tencent\qq\QQSceneMng.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\QQPhoneHelper.dll]  <腾讯科技（深圳）有限公司><2, 0, 2, 21>
    [C:\WINDOWS\System32\macromed\flash\Flash.ocx]  <Macromedia, Inc.><7,0,19,0>
    [E:\Program Files\tencent\qq\QQAllInOne.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\SCCore.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\QQCustomFace.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [E:\Program Files\tencent\qq\QQMagicFace.dll]  <><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\ImageOle.dll]  <TODO: <Company name>><1.0.0.1>
    [C:\WINDOWS\system32\kdtext_1.dll]  <N/A><1, 0, 0, 1>
    [E:\Program Files\tencent\qq\ShareFiles.dll]  <N/A><N/A>
    [E:\Program Files\tencent\qq\QQZip.dll]  <tencent><0, 3, 2, 4>
[PID: 880][E:\Program Files\tencent\qq\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [E:\Program Files\tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 2896][C:\Documents and Settings\jingyangs\桌面\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
[PID: 3436][C:\Program Files\Tencent\TT\TTraveler.exe]  <腾讯公司><3.0.0.246>
    [C:\Program Files\Tencent\TT\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
    [G:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\WINDOWS\System32\macromed\flash\Flash.ocx]  <Macromedia, Inc.><7,0,19,0>
    [C:\WINDOWS\system32\JPWB.IME]  <常诚研制><4.00.950>
    [C:\WINDOWS\system32\PYJJU.IME]  <北京六合源软件技术有限公司><2, 2, 0, 4>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
温柔的凤姐 - 2006-4-28 23:27:00
【回复“我无邪”的帖子】

是的，第一天晚上删除选项后开机就不报病毒了，不弹广告，现在在桌面弹右键和关闭窗口也不心肌梗死了。
我无邪 - 2006-4-29 0:37:00
如果现在正常了，也就罢了。（还有一项据说是病毒，但问题不大）
哧哧，凤姐儿辛苦了。
温柔的凤姐 - 2006-4-29 22:03:00
楼上的，已经晚了。昨晚不知哪里出错，正要回复时，鼠标一点反应都没有，我还以为鼠标坏了，只好关机。今天买了个新的回来，插上还是没反应。请个朋友来看，重装了一个驱动程序，鼠标就能用了。唉。现在能用了，阿弥陀佛，再也不搞了。

不过，还是谢谢你们的帮助。88
我无邪 - 2006-4-29 22:40:00
难道是我说错了？？？
如果有人看出来，请给我回个悄悄话。
温柔的凤姐 - 2006-4-29 23:03:00
可能是我误操作引起的问题吧。
温柔的凤姐 - 2006-5-1 0:29:00
不知何故，今天晚上浏览器总是自动关闭，气人。
我无邪 - 2006-5-1 1:05:00
如果方便，请扫个报告粘上来。
1
查看完整版本: 【求助】灰鸽子2
© 2000 - 2026 Rising Corp. Ltd.