关于Maxthon浏览器弹出窗口 bbs.ikaka.com

上网七年还是菜 - 2006-6-9 7:01:00

最近几天我用遨游(版本1.5.2.21 Unicode)浏览网站,用百度搜索,一按搜索除了搜索页面出来以外,总爱弹个电影之家(http://www.163qz.com/tw18/index.htm?hb=popunder_ad)这个广告窗口(有时又不弹,一弹就两个),用Maxthon自己的广告猎手也不能过滤,郁闷啊,怪就怪在只要百度一搜索就弹,点击其他链接它又不弹,用IE浏览也不弹!!!奇怪啊!!!请您帮治治吗!
问题补充：我用卡巴斯基差不到毒,搜索注册表也没找到这个网址,我很想把这个广告的幕后黑手抓出来!!!

我无邪 - 2006-6-9 14:01:00

请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

上网七年还是菜 - 2006-6-10 15:00:00

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<BigDogPath><C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RichMedia><C:\WINDOWS\system32\Rundll32.exe "C:\WINDOWS\DOWNLO~1\hbhelper.dll",WaitWindows>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<AGB5Monitor><; >
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<caishowmanage><; C:\Program Files\CaiShow Tech\CaiShow\UpdateManager.EXE>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<CdnCtr><; RunDll32 "C:\WINDOWS\Downlo~1\Gladiator.dll",Boot>
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><; C:\WINDOWS\system32\ctfmon.exe>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<hxgame-update><; C:\Program Files\hxupdate\hxgame-update.exe>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<iebook><; C:\Program Files\iebook\iebook.exe -minimize>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<IESAddr><; RunDll32 "C:\WINDOWS\Downlo~1\Gladiator.dll",Boot>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<MSService_v1.0><; >
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<RichMedia><; C:\WINDOWS\system32\Rundll32.exe "C:\WINDOWS\DOWNLO~1\hbhelper.dll",WaitWindows>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<rundll32><; >
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<spoolsv><; >
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Tok-Cirrhatus><; "C:\Documents and Settings\Administrator\Local Settings\Application Data\br7911on.exe">
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Tok-Cirrhatus-3444><; "C:\Documents and Settings\Administrator\Local Settings\Application Data\br7911on.exe">
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Update><; >
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<WinAntiSpyware 2006><; C:\Program Files\WinAntiSpyware 2006\was6.exe /min>
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<XDeskShow><; >
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<YLive.exe><; >

==================================
启动文件夹
服务
[kavsvc / kavsvc]
<"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe"><Kaspersky Lab>
[Macromedia Licensing Service / Macromedia Licensing Service]
<"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><Macromedia>
[Network Location Manager / Nlm]
<C:\Program Files\NetMeeting\NetMeeting.exe><N/A>
[NVIDIA Driver Helper Service / NVSvc]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[PDEngine / PDEngine]
<"C:\Program Files\Raxco\PerfectDisk\PDEngine.exe"><Raxco Software, Inc.>
[PDScheduler / PDSched]
<"C:\Program Files\Raxco\PerfectDisk\PDSched.exe"><Raxco Software, Inc.>
[Distributed Application Client / SHipING]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[Network Management Center Task / W32Tasks]
<C:\WINDOWS\system32\taskman32.exe><N/A>

上网七年还是菜 - 2006-6-10 15:01:00

==================================
浏览器加载项
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v14.dll, Thunder Networking Technologies,LTD>
[]
{A7845CA1-2DFC-43EE-BF65-1D1BEF4D8A20} <C:\PROGRA~1\iebook\iebook.dll, N/A>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[HBObject Class]
{AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} <C:\WINDOWS\DOWNLO~1\hbhelper.dll, Shanghai Henbang Technology Co., Ltd>
[iebook]
{2334096A-4521-42C5-98F9-158AF59031A5} <C:\Program Files\iebook\iebook.exe, 飞天传播>
[全能助手广告拦截专家]
{ED51E9A3-16C5-4236-99E0-9F093B021433} <C:\Program Files\TweakAssist\AssistIEBar.dll, 全能助手工作室>
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v14.dll, Thunder Networking Technologies,LTD>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[]
{A7845CA1-2DFC-43EE-BF65-1D1BEF4D8A20} <C:\PROGRA~1\iebook\iebook.dll, N/A>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[HBObject Class]
{AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} <C:\WINDOWS\DOWNLO~1\hbhelper.dll, Shanghai Henbang Technology Co., Ltd>
[AUDIO__X_MS_WMA Moniker Class]
{CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[全能助手广告拦截专家]
{ED51E9A3-16C5-4236-99E0-9F093B021433} <C:\Program Files\TweakAssist\AssistIEBar.dll, 全能助手工作室>
[&使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\geturl.htm, N/A>
[上传到QQ网络硬盘]
<D:\greedsoft\Tencent\qq\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
<C:\Program Files\KuGoo3\KuGoo3DownX.htm, N/A>
[添加到QQ自定义面板]
<D:\greedsoft\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\greedsoft\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\greedsoft\Tencent\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 676][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 732][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 756][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 800][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 812][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>
[PID: 964][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1008][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1100][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>
[PID: 1144][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>
[PID: 1224][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>
[PID: 1516][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\TweakAssist\AssistDeskBar.dll] <全能助手工作室><5, 0, 2, 0>
[C:\WINDOWS\system32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62>
[C:\PROGRA~1\iebook\iebook.dll] <N/A><N/A>
[C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\qdshm.dll] <><1, 0, 1, 2>
[C:\Program Files\TweakAssist\AssistQRunShell.dll] <全能助手工作室><3, 0, 0, 3>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\shellex.dll] <Kaspersky Lab><5.0.383.1>
[PID: 1608][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1768][C:\Program Files\TweakAssist\AssistQRun.exe] <全能助手工作室><5, 0, 2, 0>
[PID: 1804][C:\WINDOWS\VM_STI.EXE] <Vimicro><4, 2, 1225, 6>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[PID: 1812][C:\WINDOWS\system32\Rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\DOWNLO~1\hbhelper.dll] <Shanghai Henbang Technology Co., Ltd><1, 1, 3, 7>
[C:\PROGRA~1\HBClient\hplus.dll] <><1, 0, 0, 1>
[PID: 1820][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1896][C:\WINDOWS\system32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.4523>
[PID: 408][D:\greedsoft\Tencent\qq\QQ.exe] <TENCENT><0, 0, 0, 0>
[D:\greedsoft\Tencent\qq\CoralAssist.DLL] <N/A><4.0.0 Build 20051112>
[D:\greedsoft\Tencent\qq\CoralQQ.DLL] <Coral Team><4.2.2 Build 20060318>
[D:\greedsoft\Tencent\qq\IPSearcher.dll] <N/A><1.0.0.4>
[D:\greedsoft\Tencent\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\BasicCtrlDll.dll] <Tencent><5, 0, 200, 14>
[D:\greedsoft\Tencent\qq\QQAPI.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[D:\greedsoft\Tencent\qq\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2005, 9, 1, 1>
[D:\greedsoft\Tencent\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[D:\greedsoft\Tencent\qq\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\QQMainFrame.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\CQQApplication.dll] <N/A><N/A>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>
[C:\WINDOWS\DOWNLO~1\hbhelper.dll] <Shanghai Henbang Technology Co., Ltd><1, 1, 3, 7>
[D:\greedsoft\Tencent\qq\NewSkin.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\HostingMgr.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\CameraDll.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\MailSummary.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\QQSpace.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\QQAllInOne.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\SCCore.dll] <N/A><N/A>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\QQPlugin.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\QRingMng.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\QQCustomFace.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\FlashAvatarDll.dll] <><1, 4, 0, 1>
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[D:\greedsoft\Tencent\qq\GroupConnection.dll] <Tencent><5, 0, 202, 30>
[D:\greedsoft\Tencent\qq\QQAvatar.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\QQSceneMng.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\LongConnection.dll] <tencent><5, 0, 201, 14>
[D:\greedsoft\Tencent\qq\QQPet.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\QQSysMsgMng.dll] <N/A><N/A>
[D:\greedsoft\Tencent\qq\ImageOle.dll] <TODO: <Company name>><1.0.0.1>
[D:\greedsoft\Tencent\qq\QQZip.dll] <tencent><0, 3, 2, 4>
[D:\greedsoft\Tencent\qq\CommercesMng.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[D:\greedsoft\Tencent\qq\QQUdpGetFileLib.dll] <tencent><0, 2, 2, 3>
[D:\greedsoft\Tencent\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 140>

上网七年还是菜 - 2006-6-10 15:01:00

[D:\greedsoft\Tencent\qq\QQPhoneHelper.dll] <腾讯科技（深圳）有限公司><2, 0, 3, 30>
[D:\greedsoft\Tencent\qq\QQMagicFace.dll] <><1, 0, 0, 1>
[D:\greedsoft\Tencent\qq\QQFileTransfer.dll] <Tencent><5, 0, 202, 40>
[PID: 436][D:\greedsoft\Tencent\qq\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[D:\greedsoft\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 484][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 500][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 580][C:\Program Files\Raxco\PerfectDisk\PDSched.exe] <Raxco Software, Inc.><7, 0, 0, 42>
[C:\Program Files\Raxco\PerfectDisk\PDCommon.dll] <Raxco Software, Inc.><7, 0, 0, 42>
[C:\Program Files\Raxco\PerfectDisk\PDLangEN.dll] <Raxco 软件公司><7, 0, 0, 42>
[C:\Program Files\Raxco\PerfectDisk\PDSchedPS.dll] <Raxco Software, Inc.><7, 0, 0, 42>
[C:\Program Files\Raxco\PerfectDisk\PDEnginePS.dll] <Raxco Software, Inc.><7, 0, 0, 42>
[PID: 572][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1716][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3524][C:\Program Files\TTPlayer\TTPlayer.exe] <N/A><4, 6, 7, 0>
[C:\Program Files\TTPlayer\ttpcomm.dll] <N/A><N/A>
[C:\Program Files\TTPlayer\ttpres.dll] <N/A><4, 6, 7, 0>
[C:\Program Files\TTPlayer\AddIn\ttp_lrcsh.dll] <N/A><N/A>
[PID: 2640][C:\Program Files\BitComet\BitComet.exe] <www.BitComet.com><0.62.>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>
[PID: 1212][C:\Program Files\Maxthon\Maxthon.exe] <Maxthon International Ltd.><1, 5, 2, 21>
[C:\Program Files\Maxthon\maxzlib.dll] < ><1, 0, 0, 2>
[C:\WINDOWS\system32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>
[C:\Program Files\Maxthon\Services\RealTime\real_time.dll] <><1, 0, 0, 1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrchpg.dll] <Kaspersky Lab><5.0.1.18>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrch_ag.dll] <Kaspersky Lab><5.0.383.1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\FSSync.dll] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\pr_rmt.dll] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ccclient.dll] <Kaspersky Lab><5.0.383.1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\klipc.dll] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\KLUtil.dll] <Kaspersky Lab><5.0.383.1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\rpt.dll] <Kaspersky Lab><5.0.383.2>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\CCIFACE.dll] <Kaspersky Lab><5.0.383.1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prloader.dll] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prkernel.ppl] <Kaspersky Lab><5.0.383.0>
[c:\program files\kaspersky lab\kaspersky anti-virus personal pro\prstring.ppl] <Kaspersky Lab><5.0.383.0>
[c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_srv.ppl] <Kaspersky Lab><5.0.383.0>
[c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_clnt.ppl] <Kaspersky Lab><5.0.383.0>
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[PID: 2076][C:\Program Files\Thunder Network\Thunder\Thunder.exe] <Thunder Networking Technologies,LTD><5.1.5.189>
[C:\Program Files\Thunder Network\Thunder\UpdateDownload.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2>
[C:\Program Files\Thunder Network\Thunder\download_interface.dll] <Thunder Networking Technologies,LTD><1, 0, 2, 74>
[C:\Program Files\Thunder Network\Thunder\log4cplus.dll] <><1, 0, 2, 1>
[C:\Program Files\Thunder Network\Thunder\stlport_vc646.dll] <STLport Consulting, Inc.><4.6.2003.1031>
[C:\Program Files\Thunder Network\Thunder\msgmanage.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 15>
[C:\Program Files\Thunder Network\Thunder\historyinfo_manage.dll] <Thunder Networking Technologies,LTD><5, 2, 0, 148>
[C:\Program Files\Thunder Network\Thunder\iEmbed.dll] <Thunder Networking Technologies,LTD><1, 1, 0, 22>
[C:\Program Files\Thunder Network\Thunder\RegisterDll.dll] <Thunder Networking Technologies,LTD><1, 2, 0, 7>
[C:\Program Files\Thunder Network\Thunder\FloatBar.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrchpg.dll] <Kaspersky Lab><5.0.1.18>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\scrch_ag.dll] <Kaspersky Lab><5.0.383.1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\FSSync.dll] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\pr_rmt.dll] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ccclient.dll] <Kaspersky Lab><5.0.383.1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\klipc.dll] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\KLUtil.dll] <Kaspersky Lab><5.0.383.1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\rpt.dll] <Kaspersky Lab><5.0.383.2>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\CCIFACE.dll] <Kaspersky Lab><5.0.383.1>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prloader.dll] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\prkernel.ppl] <Kaspersky Lab><5.0.383.0>
[c:\program files\kaspersky lab\kaspersky anti-virus personal pro\prstring.ppl] <Kaspersky Lab><5.0.383.0>
[c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_srv.ppl] <Kaspersky Lab><5.0.383.0>
[c:\program files\kaspersky lab\kaspersky anti-virus personal pro\pr_clnt.ppl] <Kaspersky Lab><5.0.383.0>
[C:\Program Files\Thunder Network\Thunder\iTargetAd.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 59>
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[PID: 2400][F:\down\sreng2\SREng.exe] <Smallfrogs Studio><2.0.12.350>
[C:\WINDOWS\system32\hbmter.dll] <><1, 3, 0, 0>

==================================
文件关联
.TXT Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. [C:\WINDOWS\hh.exe %1]
.HLP Error. [C:\WINDOWS\winhlp32.exe %1]
.INI Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
HB_IP
C:\WINDOWS\system32\hbmter.dll(, hbmter DLL)
UDP_CHAIN
C:\WINDOWS\system32\hbmter.dll(, hbmter DLL)

==================================

魔法学徒 - 2006-6-10 17:11:00

下载个恶意软件清理助手清理一下
http://www.tommsoft.com/Products.aspx?pid=2

瑞星卡卡安全论坛