用在线杀毒杀不了！哪个大哥哥帮帮我啊！！ bbs.ikaka.com

小小酷腾 - 2006-6-9 18:19:00

在线杀毒更新好了
在杀的时候提示（脚本错误）
谁帮帮我啊！！！

小小酷腾 - 2006-6-9 18:29:00

哥哥姐姐帮帮我把！！！！！

我无邪 - 2006-6-9 20:49:00

这个也许你恢复IE的默认设置，应该可以解决问题
另也不排除流氓软件与病毒的缘故
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

小小酷腾 - 2006-6-10 14:08:00

谢谢！
恩我去试试看！！！

小小酷腾 - 2006-6-10 14:20:00

2006-06-10,14:01:05

System Repair Engineer 2.0.12.350 (2.0 RC 1)
Windows 2000 Advanced Server Service Pack 4 - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<vptray><C:\Program Files\NavNT\vptray.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<wxbak><E:\Octopus\wxbackup.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><C:\WINNT\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>

==================================
启动文件夹
服务
[DefWatch / DefWatch]
<C:\Program Files\NavNT\defwatch.exe><Symantec Corporation>
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[FG3000 Server / FG3000Server]
<e:\Winfgate\winntfgate.exe><Zhuhai Zetronic Ltd.>
[Norton AntiVirus 客户端 / Norton AntiVirus Server]
<C:\Program Files\NavNT\rtvscan.exe><Symantec Corporation>
[NVIDIA Display Driver Service / NVSvc]
<C:\WINNT\system32\nvsvc32.exe><NVIDIA Corporation>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
<"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><N/A>
[Rising Process Communication Center / RsCCenter]
<"D:\瑞星\CCenter.exe"><N/A>
[RsRavMon Service / RsRavMon]
<"D:\瑞星\Update\Ravmond.exe"><N/A>
[StdService / StdService]
<C:\WINNT\system32\rundll32.exe C:\WINNT\System32\STDSVER.DLL,Service><N/A>

小小酷腾 - 2006-6-10 14:21:00

浏览器加载项
[MMSAssist BHO]
{6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[stdup]
{6A512BF7-EC78-4e8d-9841-6C02E8FA9838} <C:\WINNT\SYSTEM32\stdup.dll, MStdup Co Ltd.>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\KuGoo3\KuGoo3DownXControl.ocx, N/A>
[就要你]
{42CE9921-7259-11D6-B76A-0010A48548DC}? <url:http://www.91ni.com, N/A>
[网吧.net计划]
{64187580-726B-11D6-B76A-0010A48548DC}? <url:http://www.sicent.net, N/A>
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191}? <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}? <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[易趣购物]
{DE607145-AC19-425e-867A-7D70ABDF119A}? <http://click2.ad4all.net/url2/urlmanage/url.asp?id=5, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}? <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[@msdxmLC.dll,-1@2052,电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINNT\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[WebActivater Control]
{3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINNT\system32\WEBACT~1.OCX, QQ>
[WebPing Class]
{52090A38-E692-4832-993D-E1808ABC139A} <C:\WINNT\DOWNLO~1\PINGPE~1.OCX, 福建省电信公司信息产业分公司>
[WebFtp Class]
{68B0399F-9B38-4B5C-9206-A23F20A71017} <C:\WINNT\DOWNLO~1\FTPPER~1.OCX, 福建省电信公司信息产业分公司>
[Update Class]
{9F1C11AA-197B-4942-BA54-47A8489BB47F} <C:\WINNT\System32\iuctl.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINNT\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[>>彩信发送<<]
<res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm, N/A>
[上传到QQ网络硬盘]
<D:\复件 QQ\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
<D:\KuGoo3\KuGoo3DownX.htm, N/A>
[使用网际快车下载]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[添加到QQ自定义面板]
<D:\复件 QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\复件 QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\复件 QQ\SendMMS.htm, N/A>

小小酷腾 - 2006-6-10 14:21:00

正在运行的进程
[PID: 164][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 188][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6898>
[C:\WINNT\system32\NavLogon.dll] <N/A><N/A>
[PID: 236][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.6700>
[PID: 248][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.6902>
[PID: 432][C:\Program Files\NavNT\defwatch.exe] <Symantec Corporation><7.60.00.926>
[PID: 444][e:\Winfgate\winntfgate.exe] <Zhuhai Zetronic Ltd.><2.8.0.11>
[C:\WINNT\system32\LIBDB41.DLL] <Sleepycat Software><4.1.25>
[C:\WINNT\system32\PACKET.DLL] <Politecnico di Torino><3, 0, 0, 18>
[C:\WINNT\system32\WPCAP.DLL] <Politecnico di Torino><3, 0, 0, 18>
[C:\WINNT\system32\pthreadVC.dll] <N/A><N/A>
[PID: 480][C:\Program Files\NavNT\rtvscan.exe] <Symantec Corporation><7.60.00.926>
[C:\Program Files\NavNT\Dec2.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2ARJ.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2ID.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2LHA.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\SymLHA.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2LZ.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2MIME.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2Zip.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2AMG.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\SYMAMG32.DLL] <Symantec Corporation with portions by FUJITSU DEVICES INC.><2.50.31.52>
[C:\Program Files\NavNT\Dec2UUE.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2SS.dll] <Symantec Corporation><2.50.31.52>
[C:\Program Files\NavNT\Dec2RTF.dll] <Symantec Corporation><2.50.31.52>
[C:\WINNT\system32\CBA.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\WINNT\system32\MsgSys.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINNT\system32\NTS.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINNT\system32\PDS.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\Program Files\NavNT\NAVLU.dll] <Symantec Corporation><7.60.00.926>
[C:\Program Files\NavNT\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\NavNT\i2ldvp3.dll] <Symantec Corporation><7.60.00.926>
[C:\Program Files\NavNT\NAVAPI32.DLL] <Symantec Corp.><4.1.0.15>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060607.018\NAVEX32a.DLL] <Symantec Corporation><20061.1.0.14>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060607.018\NAVENG32.DLL] <Symantec Corporation><20061.1.0.14>
[C:\Program Files\NavNT\NAVAP32.DLL] <Symantec Corporation><5.3.1.39>
[C:\WINNT\system32\amslib.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINNT\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[C:\Program Files\NavNT\NotesExt.dll] <Symantec Corporation><7.60.00.926>
[C:\Program Files\NavNT\vpmsece.dll] <Symantec Corporation><7.60.00.926>
[PID: 572][C:\WINNT\system32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.6072>
[PID: 584][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 600][C:\WINNT\system32\rundll32.exe] <Microsoft Corporation><5.00.2134.1>
[C:\WINNT\System32\STDSVER.DLL] <MStdup Co Ltd.><3, 2, 1, 7>
[PID: 616][C:\WINNT\System32\MsPMSPSv.exe] <Microsoft Corporation><7.00.00.1956>
[PID: 696][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 716][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6704>
[PID: 732][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 888][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690>
[C:\WINNT\SYSTEM32\stdup.dll] <MStdup Co Ltd.><3, 2, 1, 7>
[C:\PROGRA~1\MMSASS~1\Mmsass~1.dll] <><1, 2, 0, 3>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll] <Yahoo! China><1, 1, 3, 1035>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll] <Yahoo!><2, 1, 8, 1048>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL] <><1, 2, 7, 1006>
[D:\KuGoo3\KuGoo3DownXControl.ocx] <N/A><N/A>
[D:\TOOLS\TOOLS\WinRAR\rarext.dll] <N/A><N/A>
[PID: 964][C:\Program Files\NavNT\vptray.exe] <Symantec Corporation><7.60.00.926>
[C:\Program Files\NavNT\Cliproxy.dll] <Symantec Corporation><7.60.00.926>
[C:\Program Files\NavNT\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\NavNT\Cliscan.dll] <Symantec Corporation><7.60.00.926>
[PID: 1004][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.1622>
[PID: 1068][C:\WINNT\system32\MsgSys.EXE] <Intel Corporation><6.0.201.0940 E>
[C:\WINNT\system32\NTS.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINNT\system32\CBA.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\WINNT\system32\MsgSys.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINNT\system32\PDS.DLL] <Intel Corporation><6.0.201.0940 E>
[PID: 1116][e:\Winfgate\ServerGuard.exe] <N/A><N/A>
[PID: 892][C:\WINNT\system32\taskmgr.exe] <Microsoft Corporation><5.00.2195.6620>
[PID: 1256][E:\过滤王网吧版2.8 - 控制台\PW_Manager.exe] <珠海捷朗菱网络科技有限公司><2.8.0.11>
[PID: 1312][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 1032][E:\Octopus\Server.exe] <吉胜科技><15.3.10.659>
[E:\Octopus\PrintCard.dll] <N/A><N/A>
[E:\Octopus\RegCode.dll] <N/A><N/A>
[E:\Octopus\RemoteClientDll.dll] <N/A><N/A>
[E:\Octopus\IcDevice.dll] <N/A><N/A>
[E:\Octopus\wxhelper.dll] <N/A><N/A>
[E:\Octopus\UserOperate.dll] <N/A><N/A>
[PID: 688][D:\复件 QQ\QQ.exe] <TENCENT><0, 0, 0, 0>
[D:\复件 QQ\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\复件 QQ\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\复件 QQ\BasicCtrlDll.dll] <Tencent><5, 0, 200, 14>
[D:\复件 QQ\QQAPI.dll] <><1, 0, 0, 1>
[D:\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[D:\复件 QQ\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\复件 QQ\npkcntc.dll] <INCA Internet Co., Ltd.><2005, 9, 1, 1>
[D:\复件 QQ\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[D:\复件 QQ\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\复件 QQ\QQMainFrame.dll] <N/A><N/A>
[D:\复件 QQ\CQQApplication.dll] <N/A><N/A>
[D:\复件 QQ\NewSkin.dll] <><1, 0, 0, 1>
[D:\复件 QQ\HostingMgr.dll] <><1, 0, 0, 1>
[D:\复件 QQ\CameraDll.dll] <><1, 0, 0, 1>
[D:\复件 QQ\MailSummary.dll] <><1, 0, 0, 1>
[D:\复件 QQ\QQSpace.dll] <><1, 0, 0, 1>
[C:\WINNT\system32\msdmo.dll] <N/A><N/A>
[D:\复件 QQ\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\复件 QQ\QQSysMsgMng.dll] <N/A><N/A>
[D:\复件 QQ\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\复件 QQ\QQPlugin.dll] <N/A><N/A>
[D:\复件 QQ\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\复件 QQ\LongConnection.dll] <tencent><5, 0, 201, 14>
[D:\复件 QQ\ShareFiles.dll] <N/A><N/A>
[D:\复件 QQ\QQZip.dll] <tencent><0, 3, 2, 4>
[D:\复件 QQ\QRingMng.dll] <N/A><N/A>
[D:\复件 QQ\PhoneAPI.dll] <><1, 0, 0, 1>
[D:\复件 QQ\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[D:\复件 QQ\QQAvatar.dll] <N/A><N/A>
[D:\复件 QQ\FlashAvatarDll.dll] <><1, 4, 0, 1>
[D:\复件 QQ\QQAllInOne.dll] <N/A><N/A>
[D:\复件 QQ\SCCore.dll] <N/A><N/A>
[D:\复件 QQ\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 140>
[D:\复件 QQ\QQPet.dll] <><1, 0, 0, 1>
[D:\复件 QQ\BQQApplication.dll] <N/A><N/A>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[D:\复件 QQ\CommercesMng.dll] <><1, 0, 0, 1>
[D:\复件 QQ\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[PID: 648][D:\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[D:\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 1540][D:\软件\sreng2\SREng.exe] <Smallfrogs Studio><2.0.12.350>

小小酷腾 - 2006-6-10 14:23:00

文件关联
.TXT Error. [NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

就这些了
大哥哥帮我看下！！！

小小酷腾 - 2006-6-10 16:27:00

怎么没人啊！！！

魔法学徒 - 2006-6-10 16:58:00

用sreng修复

[StdService / StdService]
<C:\WINNT\system32\rundll32.exe C:\WINNT\System32\STDSVER.DLL,Service><N/A>
浏览器加载项
[MMSAssist BHO]
{6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[stdup]
{6A512BF7-EC78-4e8d-9841-6C02E8FA9838} <C:\WINNT\SYSTEM32\stdup.dll, MStdup Co Ltd.>
[就要你]
{42CE9921-7259-11D6-B76A-0010A48548DC}? <url:http://www.91ni.com, N/A>
[网吧.net计划]
{64187580-726B-11D6-B76A-0010A48548DC}? <url:http://www.sicent.net, N/A>
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191}? <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >

重启后删除

C:\WINNT\System32\STDSVER.DLL
C:\PROGRA~1\MMSASS~1\
C:\WINNT\SYSTEM32\stdup.dll

小小酷腾 - 2006-6-11 12:59:00

好的我试试看！！！
谢谢了！

瑞星卡卡安全论坛