系统自带的功能都不能用了(new) bbs.ikaka.com

eleyuzhong - 2006-6-4 14:30:00

“我的电脑”、“我的文档”、“IE”、“资源管理器”及“控制面板”等系统自带的功能都不能用了，双击以上项目后，屏幕闪烁一下，然后什么反应也没有了；用右键菜单，效果相同。而其他应用程序仍能正常运行，QQ、FLASHFXP等仍能访问网络。

错误日志:
Applicatio n Error 错误应用程序 drwtsn32.exe，版本 5.1.2600.0，错误模块 dbghelp.dll，版本 5.1.2600.2180，错误地址 0x0001295d。

Applicatio n Error 故障存储段 00842596。

DCOM 服务器 {0002DF01-0000-0000-C000-00000 0000046} 没有在限定的时间内用 DCOM 注册。

Service Control Manager Application Management服务因下列错误而停止: 找不到指定的模块。

eleyuzhong - 2006-6-4 14:24:00

2006-06-04,13:57:44

System Repair Engineer 2.0.12.350 (2.0 RC 1)
Windows XP Home Edition Service Pack 2 - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PCTVOICE><pctspk.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE NvQTwk,NvCplDaemon initialize>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<nwiz><nwiz.exe /install>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<QtEiBenQ><C:\PROGRA~1\BENQMA~1\QtEiBenQ.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Ulead Memory Card Detector><C:\Program Files\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<o2cd><C:\Program Files\O2Micro\SuperDJ\o2mdj.exe>

eleyuzhong - 2006-6-4 14:24:00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<QMusic><"C:\Program Files\BenQ\QMusic\QMAgent.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Q-MediaBar><"C:\Program Files\BenQ\Q-MediaBar\QBar.exe" Minimize>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Check Mplayer><C:\windows\runoncew.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMEKRMIG6.1><C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<MSPY2002><C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<ServiceLayer><C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Nokia Tray Application><C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<pccguide.exe><"C:\Program Files\Trend Micro\VirusBuster 2002\pccguide.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PCCClient.exe><"C:\Program Files\Trend Micro\VirusBuster 2002\PCCClient.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Pop3trap.exe><"C:\Program Files\Trend Micro\VirusBuster 2002\Pop3trap.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<YDTMain.exe><C:\PROGRA~1\YDT\YDTMain.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<yassistse><"C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<CnsMin><Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<bdupdate><C:\WINDOWS\Temp\ppwb02.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<zcom><\zPlatform.exe MIN>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SCIntruder.dll><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

eleyuzhong - 2006-6-4 14:25:00

<Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>

==================================
启动文件夹
[Flash Video]
<C:\Documents and Settings\tgy.BENQ-GTK38WPBWI\「开始」菜单\程序\启动\Flash Video.lnk><N>

==================================
服务
[NVIDIA Driver Helper Service / NVSvc]
<C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[PC-cillin PersonalFirewall / PCCPFW]
<C:\Program Files\Trend Micro\VirusBuster 2002\PCCPFW.exe><Trend Micro Inc.>
[Trend NT Realtime Service / Tmntsrv]
<"C:\Program Files\Trend Micro\VirusBuster 2002\Tmntsrv.exe"><Trend Micro Inc.>

==================================
浏览器加载项
[Yahoo!Photo]
{33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
{38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, Yahoo.>
[雅虎助手]
{406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[DragSearch BHO]
{62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[NewWebController Class]
{9ACEEE30-143F-471A-AA45-72B061FE7D60} <C:\WINDOWS\system32\WinSC.dll, N/A>
[CnsHook Class]
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[Yahoo 1G电邮]
{507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[寻宝乐趣多]
{59BC54A2-56B3-44a0-93E5-432D58746E26} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao, N/A>

eleyuzhong - 2006-6-4 14:26:00

[雅虎助手]
{5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[]
{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[]
{FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[雅虎助手]
{406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[Shockwave ActiveX Control]
{166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINDOWS\System32\macromed\Shockwave 10\Download.dll, >
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.>
[Yahoo!Photo]
{33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
{38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, Yahoo.>
[雅虎助手]
{406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[DragSearch BHO]
{62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[NewWebController Class]
{9ACEEE30-143F-471A-AA45-72B061FE7D60} <C:\WINDOWS\system32\WinSC.dll, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000}

eleyuzhong - 2006-6-4 14:26:00

<C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.>

==================================
正在运行的进程
[PID: 496][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 552][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 576][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 620][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 632][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 808][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 852][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 888][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 952][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1060][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1300][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\PROGRA~1\3721\alrex.dll] <><1, 0, 1, 1001>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 5>
[C:\Program Files\Trend Micro\VirusBuster 2002\Tmdshell.dll] <Trend Micro Inc.><9.0.5.1389>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ywiper.dll] <N/A><1, 0, 1, 1014>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\PROGRA~1\3721\木马助手\contmenu.dll] <N/A><N/A>
[PID: 1396][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\system32\CNMLM47.DLL] <CANON INC.><1.60.2.0>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD47.DLL] <CANON INC.><1.60.2.0>

eleyuzhong - 2006-6-4 14:27:00

[PID: 1528][C:\WINDOWS\System32\nvsvc32.exe] <NVIDIA Corporation><6.13.10.3220>
[PID: 1612][C:\Program Files\Trend Micro\VirusBuster 2002\Tmntsrv.exe] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\tmdbg.dll] <N/A><N/A>
[C:\Program Files\Trend Micro\VirusBuster 2002\pewnt2.dll] <Trend Micro Inc.><9.0.6.1409>
[PID: 1668][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 268][C:\WINDOWS\system32\wscntfy.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 448][C:\Program Files\Trend Micro\VirusBuster 2002\PCCPFW.exe] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\pccfwapi.dll] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\pcc_pfw.dll] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\tmdbg.dll] <N/A><N/A>
[PID: 668][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 288][C:\WINDOWS\system32\Rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 5>
[C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 6>
[PID: 144][C:\WINDOWS\system32\pctspk.exe] <><1, 0, 0, 1>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 472][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 916][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\WINDOWS\System32\SynCOM.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\system32\SynTPAPI.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[PID: 1348][C:\PROGRA~1\BENQMA~1\QtEiBenQ.EXE] <Dritek System Inc.><1,2,0,1>
[C:\PROGRA~1\BENQMA~1\ComFnUtl.dll] <Dritek System Inc.><1.00>
[C:\PROGRA~1\BENQMA~1\Wnd2File.dll] <Dritek System Inc.><3.00>
[C:\PROGRA~1\BENQMA~1\SzUPFUtl.dll] <Dritek System Inc.><1.00>
[C:\PROGRA~1\BENQMA~1\OSDUtl.dll] <Dritek System Inc.><1.00>
[C:\PROGRA~1\BENQMA~1\RgnMaker.dll] <Dritek System Inc.><12.07.1999 ( VC60 )>
[C:\PROGRA~1\BENQMA~1\CDRomUtl.dll] <Dritek System Inc.><1.00>

eleyuzhong - 2006-6-4 14:28:00

[C:\PROGRA~1\BENQMA~1\MixerUtl.dll] <Dritek System Inc.><1.00>
[C:\PROGRA~1\BENQMA~1\LgKCUtl.dll] <Dritek System Inc.><2, 0, 1, 1>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[PID: 1032][C:\Program Files\Ulead Systems\Ulead Photo Explorer 7.0\Monitor.exe] <Ulead Systems, Inc.><1, 0, 0, 1>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 1044][C:\Program Files\O2Micro\SuperDJ\o2mdj.exe] <N/A><N/A>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 1264][C:\Program Files\BenQ\QMusic\QMAgent.exe] <><1, 0, 0, 1>
[C:\Program Files\BenQ\QMusic\BenqMp3.dll] <><1, 0, 0, 1>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[PID: 1296][C:\Program Files\BenQ\Q-MediaBar\QBar.exe] <><1, 0, 8, 0>
[C:\Program Files\BenQ\Q-MediaBar\QBBrain.DLL] <N/A><N/A>
[C:\Program Files\BenQ\Q-MediaBar\QBSetting.DLL] <N/A><N/A>
[C:\Program Files\BenQ\Q-MediaBar\HKSensor.DLL] <N/A><N/A>
[C:\Program Files\BenQ\Q-MediaBar\MLTran.DLL] <N/A><N/A>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[PID: 2060][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\PROGRA~1\3721\autolive.dll] <><1, 1, 2, 1023>
[C:\PROGRA~1\3721\regkper.dll] <N/A><N/A>
[PID: 2068][C:\Program Files\Common Files\Nokia\Services\ServiceLayer.exe] <Nokia Mobile Phones><5.00.013>
[C:\Program Files\Common Files\Nokia\Transports\NCLUSBMM.dll] <Nokia Mobile Phones><5, 0, 0, 21>
[C:\Program Files\Common Files\Nokia\Transports\NCLRSMM.dll] <Nokia Mobile Phones><5.01.006>
[C:\Program Files\Common Files\Nokia\Transports\NCLBTMM.dll] <Nokia Mobile Phones><5.01.003>
[C:\Program Files\Common Files\Nokia\Transports\NCLIrDAMM.dll] <Nokia Mobile Phones><5.01.004>

eleyuzhong - 2006-6-4 14:33:00

[PID: 2100][C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe] <Nokia Mobile Phones><5, 0, 0, 18>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\Program Files\Common Files\Nokia\NCLTools\Lang\NclTray_eng.NLR] <N/A><N/A>
[PID: 2160][C:\Program Files\Trend Micro\VirusBuster 2002\pccguide.exe] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\pccfwapi.dll] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\pcc_pfw.dll] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\tmdbg.dll] <N/A><N/A>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 2212][C:\Program Files\Trend Micro\VirusBuster 2002\PCCClient.exe] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\Program Files\Trend Micro\VirusBuster 2002\tmdbg.dll] <N/A><N/A>
[PID: 2284][C:\Program Files\Trend Micro\VirusBuster 2002\Pop3trap.exe] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\POP3UTIL.dll] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\tmdbg.dll] <N/A><N/A>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\Program Files\Trend Micro\VirusBuster 2002\pewnt2.dll] <Trend Micro Inc.><9.0.6.1409>
[PID: 2296][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe] < ><2, 0, 0, 1001>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] <><2, 0, 2, 1025>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] < ><2, 0, 1, 1007>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro

eleyuzhong - 2006-6-4 14:34:00

Inc.><9.0.6.1409>
[C:\PROGRA~1\3721\notifier.dll] <><1, 0, 0, 4>
[PID: 2388][C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe] <Yahoo!><1, 0, 1, 1001>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\PROGRA~1\Yahoo!\Assistant\shell\yAssecblk.dll] <Yahoo><1, 0, 2, 1002>
[C:\PROGRA~1\Yahoo!\Assistant\shell\yAsMenu.dll] <Yahoo><1, 0, 1, 1006>
[C:\PROGRA~1\Yahoo!\Assistant\shell\yIEAngel.dll] <Yahoo><1, 0, 1, 1001>
[C:\PROGRA~1\Yahoo!\Assistant\shell\yMenuInfo.dll] <Yahoo><1, 0, 0, 2>
[PID: 2420][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3510>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 2548][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[PID: 2772][C:\Program Files\Messenger\msmsgs.exe] <Microsoft Corporation><4.7.3001>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[PID: 2916][C:\Program Files\Trend Micro\VirusBuster 2002\WebTrap.EXE] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\tmdbg.dll] <N/A><N/A>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\Program Files\Trend Micro\VirusBuster 2002\pewnt2.dll] <Trend Micro Inc.><9.0.6.1409>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>

eleyuzhong - 2006-6-4 14:35:00

[PID: 2452][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2628][C:\WINDOWS\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 2436][C:\Program Files\Real\RealPlayer\realplay.exe] <RealNetworks, Inc.><6.0.12.1483>
[C:\WINDOWS\system32\PNCRT.dll] <Real Networks, Inc><6.0.0.0>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\Program Files\Common Files\Real\Common\objb3201.dll] <RealNetworks, Inc.><0.1.0.6391>
[C:\Program Files\Real\RealPlayer\rpplugins\rpap3260.dll] <RealNetworks, Inc.><6.0.9.3039>
[C:\Program Files\Common Files\Real\Common\pnrs3260.dll] <RealNetworks, Inc.><6.0.9.4068>
[C:\Program Files\Real\RealPlayer\lang\cdplay_cn.dll] <RealNetworks, Inc.><6.0.12.298>
[C:\Program Files\Real\RealPlayer\lang\dbcomp_cn.dll] <RealNetworks, Inc.><6.0.12.298>
[C:\Program Files\Real\RealPlayer\lang\embed_cn.dll] <RealNetworks, Inc.><6.0.12.298>
[C:\Program Files\Real\RealPlayer\lang\gemctl_cn.dll] <RealNetworks, Inc.><6.0.12.298>
[C:\Program Files\Real\RealPlayer\lang\pngui_cn.dll] <RealNetworks, Inc.><6.0.12.298>
[C:\Program Files\Real\RealPlayer\lang\pdgenxfer_cn.dll] <N/A><N/A>
[C:\Program Files\Real\RealPlayer\lang\rjctl_cn.dll] <RealNetworks, Inc.><6.0.12.298>
[C:\Program Files\Real\RealPlayer\lang\rjeq_cn.dll] <RealNetworks, Inc.><6.0.12.298>
[C:\Program Files\Real\RealPlayer\lang\rjres_cn.dll] <RealNetworks, Inc.><6.0.12.298>
[C:\Program Files\Real\RealPlayer\lang\rjskin_cn.dll] <RealNetworks, Inc.><6.0.12.298>

eleyuzhong - 2006-6-4 14:36:00

[C:\Program Files\Real\RealPlayer\lang\mydevices_cn.dll] <RealNetworks, Inc.><6.0.12.299>
[C:\Program Files\Real\RealPlayer\rpplugins\rpcl3260.dll] <RealNetworks, Inc.><6.0.9.3112>
[C:\Program Files\Common Files\Real\RCAPlugins\uisy3201.dll] <RealNetworks, Inc.><0.1.0.3832>
[C:\Program Files\Common Files\Real\Plugins\zipf3260.dll] <RealNetworks, Inc.><6.0.8.2550>
[C:\Program Files\Common Files\Real\RCAPlugins\rpcontrols1.dll] <RealNetworks, Inc.><6.0.1.2234>
[C:\Program Files\Common Files\Real\Plugins\pxcb3210.dll] <RealNetworks, Inc.><1.0.0.3995>
[C:\Program Files\Real\RealPlayer\rpplugins\rpmn3260.dll] <RealNetworks, Inc.><6.0.9.2934>
[C:\Program Files\Real\RealPlayer\rpplugins\rpms3260.dll] <RealNetworks, Inc.><6.0.1.2271>
[C:\Program Files\Real\RealPlayer\rpplugins\MPACore.dll] <RealNetworks, Inc.><1.0.3.2290>
[C:\Program Files\Common Files\Real\Update_OB\faus3270.dll] <RealNetworks, Inc.><7.0.0.3206>
[C:\Program Files\Common Files\Real\Update_OB\setu3270.dll] <RealNetworks, Inc.><7.0.0.4369>
[C:\Program Files\Common Files\Real\RCAPlugins\rpcontrols2.dll] <RealNetworks><6.0.1.2234>
[C:\Program Files\Common Files\Real\RCAPlugins\gema3201.dll] <RealNetworks, Inc.><0.1.0.3815>
[C:\Program Files\Real\RealPlayer\rpplugins\rpwe3260.dll] <RealNetworks, Inc.><6.0.1.2277>
[C:\Program Files\Common Files\Real\Common\twebbrowse.dll] <RealNetworks, Inc.><1.0.2.1594>
[C:\Program Files\Real\RealPlayer\tnetdtct.dll] <RealNetworks, Inc.><1.0.3.2240>
[C:\Program Files\Real\RealPlayer\rpplugins\ierpplug.dll] <RealNetworks, Inc.><1.0.1.2254>
[C:\Program Files\Common Files\Real\Update_OB\rnad3201.dll] <RealNetworks, Inc.><0.1.0.3510>
[C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0>
[C:\Program Files\Real\RealPlayer\rpplugins\rpme3260.dll] <RealNetworks, Inc.><6.0.10.2270>
[C:\Program Files\Real\RealPlayer\rpplugprot.dll] <RealNetworks, Inc.><6.0.10.2238>
[PID: 3524][C:\Program Files\Windows NT\Accessories\wordpad.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>

eleyuzhong - 2006-6-4 14:38:00

[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMUI47.DLL] <CANON INC.><1.60.2.0>
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMDR47.DLL] <CANON INC.><1.60.2.0>
[PID: 3500][C:\Program Files\Windows NT\Accessories\wordpad.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMUI47.DLL] <CANON INC.><1.60.2.0>
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMDR47.DLL] <CANON INC.><1.60.2.0>
[PID: 5192][C:\WINDOWS\PCHealth\HelpCtr\Binaries\helpctr.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 5424][C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 5500][C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 4268][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>

eleyuzhong - 2006-6-4 14:38:00

[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>
[PID: 2176][C:\DOCUME~1\TGY~1.BEN\LOCALS~1\Temp\Rar$EX13.797\SREng.exe] <Smallfrogs Studio><2.0.12.350>
[C:\Program Files\Trend Micro\VirusBuster 2002\JavaHook.DLL] <Trend Micro Inc.><9.0.6.1409>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 1, 1018>
[C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.4 18Apr03>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 0>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

瑞星卡卡安全论坛