【求助】IE的地址栏里面总是有3个网址删不掉请高手帮忙 bbs.ikaka.com

从一数到三 - 2006-6-10 23:35:00

http://www.51.com/
http://www.7mp3.com/
http://www.9991.com/
IE地址栏里面总是有这3个幽灵在
怎么也删不掉
请高手帮帮忙啊

从一数到三 - 2006-6-10 23:41:00

顶上去啊
帮忙啊!!!!!!

轩辕小聪 - 2006-6-11 0:46:00

http://www.kztechs.com/sreng/sreng2.zip下载System Repair Engineer 2.0.21.505 (2.0 RC 2)导出全部日志。
这个新版本刚刚出来，楼主将成为最早使用这个版本的人之一。

从一数到三 - 2006-6-11 2:02:00

2006-06-11,01:51:33

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation]
<MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<KAVPersonal50><d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize> [Kaspersky Lab]
<RemoteControlService><d:\Program Files\10Moons\TM300\rs.exe> []
<TVTray><; D:\PROGRA~1\10Moons\TM300\TVTray.exe> []
<StormCodec_Helper><"d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> []
<DAEMON Tools-2052><; "D:\Program Files\D-Tools\daemon.exe" -lang 2052> [DAEMON'S HOME]
<helper.dll><; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> []
<KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k> []
<KuGoo3><; D:\Program Files\KuGoo2\KuGoo.exe> []
<MenuOrder><; C:\Program Files\ICBCPe~1\ICBC\BHDC(Personal)\MenuOrder\MenuOrder.exe> []
<NetVideoNews><; C:\Program Files\BBsee\BBsee.exe> []
<RemoteControl><; "d:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"> [Cyberlink Corp.]
<res><; C:\WINDOWS\System32\res.exe> []
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
<WinlogonNotify: AtiExtEvent><Ati2evxx.dll> []

==================================
启动文件夹
服务
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINDOWS\System32\Ati2evxx.exe><N/A>
[ATI Smart / ATI Smart]
<C:\WINDOWS\system32\ati2sgag.exe><>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
<C:\WINDOWS\System32\drivers\CDAC11BA.EXE><Macrovision>
[Intranet Messenger / DiRVIn]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[kavsvc / kavsvc]
<d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe><Kaspersky Lab>
[10moons Remote Control Service / RemoteControlService]
<C:\Program Files\10Moons\RemoteService\RS.exe><>
[rundll32 / rundll32]
<><N/A>
[Network Management Center Task / W32Tasks]
<><N/A>

==================================
浏览器加载项
[AddSHCARoot Control]
{098A3F72-3110-4004-B954-2F9DC44934B4} <C:\WINDOWS\DOWNLO~1\ADDCAR~1.OCX, SHECA>
[InfoSecNetSign Class]
{62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\WINDOWS\System32\NetSign.dll, Infosec Technologies Co., Ltd.>
[BDC Control]
{7253A666-8D4A-11D7-A4DC-00E04C504779} <C:\WINDOWS\DOWNLO~1\BDC.ocx, BLUE>
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\System32\INPUTC~1.DLL, >
[Filetran Control]
{88734439-46D0-42C0-A13F-7E881EE550CF} <C:\PROGRA~1\Bluesky\BLUESK~1\filetran.ocx, Bluesky Studio(http://www.bluesky.cn)>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[CPasswordEditCtrl Object]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\System32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>

==================================
正在运行的进程
[PID: 472][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 532][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 556][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\system32\Ati2evxx.dll] <N/A><N/A>
[PID: 600][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 612][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 760][C:\WINDOWS\System32\Ati2evxx.exe] <N/A><N/A>
[PID: 784][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 852][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 956][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 972][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1244][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620>
[PID: 2032][C:\WINDOWS\system32\Ati2evxx.exe] <N/A><N/A>
[PID: 208][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\AcSignIcon.dll] <Autodesk><16.0.0.86>
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] <Autodesk><16.0.0.86>
[d:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[D:\PROGRA~1\Kingsoft\KnightV\Tools\KVD\kscdrush.dll] <金山软件股份有限公司><5, 0, 0, 0>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\shellex.dll] <Kaspersky Lab><5.0.142.1>
[D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><6.0.1.2003110300>
[d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 1>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll] <Kaspersky Lab><1.0.142.342>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll] <Kaspersky Lab><1.0.142.3>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.0.0>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll] <Kaspersky Lab><5.0.142.0>
[C:\WINDOWS\System32\tssoft32.acm] <DSP GROUP, INC.><1.01>
[C:\WINDOWS\System32\tsd32.dll] <N/A><N/A>
[PID: 364][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 392][C:\WINDOWS\System32\drivers\CDAC11BA.EXE] <Macrovision><4.20.020>
[PID: 916][C:\Program Files\10Moons\RemoteService\RS.exe] <><1, 0, 0, 1>
[C:\Program Files\10Moons\RemoteService\TMRemote.dll] <><1, 0, 0, 1>
[PID: 1188][C:\WINDOWS\System32\SCardSvr.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1344][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1436][C:\WINDOWS\System32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 1984][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 2648][D:\Program Files\浩方对战平台\GameClient.exe] <上海浩方在线信息技术有限公司><4, 0, 0, 0>

从一数到三 - 2006-6-11 2:03:00

[D:\Program Files\浩方对战平台\GameShell.dll] <上海浩方在线信息技术有限公司><3, 6, 0, 0>
[D:\Program Files\浩方对战平台\Proxy.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\MeteorCheck.dll] <N/A><N/A>
[D:\Program Files\浩方对战平台\ComCtrlLib.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\SkinPlusPlusDLL.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\GameData.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\UserAvatar.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\IShowSocket.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\IMUIDll.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\IMbase.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\IMRes.dll] <><1, 0, 0, 1>
[D:\Program Files\浩方对战平台\GameRes.dll] <上海浩方在线信息技术有限公司><3, 6, 0, 0>
[D:\Program Files\浩方对战平台\AdsManager.dll] <N/A><N/A>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll] <Kaspersky Lab><1.0.142.342>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll] <Kaspersky Lab><1.0.142.3>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.0.0>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll] <Kaspersky Lab><5.0.142.0>
[D:\Program Files\浩方对战平台\FNSocket.dll] <><4, 0, 1, 0>
[PID: 1696][D:\Program Files\Tencent\QQ\QQ.exe] <TENCENT><0, 0, 0, 0>
[D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\BasicCtrlDll.dll] <Tencent><5, 0, 200, 14>
[D:\Program Files\Tencent\QQ\QQAPI.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[D:\Program Files\Tencent\QQ\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\npkcntc.dll] <INCA Internet Co., Ltd.><2005, 9, 1, 1>
[D:\Program Files\Tencent\QQ\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[D:\Program Files\Tencent\QQ\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\QQMainFrame.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\CQQApplication.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\NewSkin.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\HostingMgr.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\CameraDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\MailSummary.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\QQSpace.dll] <><1, 0, 0, 1>
[C:\WINDOWS\System32\msdmo.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\QQPlugin.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\QQAllInOne.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\SCCore.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\QQCustomFace.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\QQPet.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\FlashAvatarDll.dll] <><1, 4, 0, 1>
[D:\Program Files\Tencent\QQ\QQAvatar.dll] <N/A><N/A>
[C:\WINDOWS\System32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[D:\Program Files\Tencent\QQ\QQSceneMng.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\QRingMng.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\PhoneAPI.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[C:\WINDOWS\System32\JPWB.IME] <常诚研制><4.00.950>
[D:\Program Files\Tencent\QQ\GroupConnection.dll] <Tencent><5, 0, 202, 30>
[D:\Program Files\Tencent\QQ\QQSysMsgMng.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\LongConnection.dll] <tencent><0, 3, 3, 8>
[D:\Program Files\Tencent\QQ\ImageOle.dll] <TODO: <Company name>><1.0.0.1>
[D:\Program Files\Tencent\QQ\QQZip.dll] <tencent><0, 3, 2, 4>
[D:\Program Files\Tencent\QQ\BQQApplication.dll] <N/A><N/A>
[D:\Program Files\Tencent\QQ\CommercesMng.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[D:\Program Files\Tencent\QQ\QQUdpGetFileLib.dll] <tencent><0, 2, 2, 3>
[D:\Program Files\Tencent\QQ\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 141>
[D:\Program Files\Tencent\QQ\OEMApplication.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\QQ\QQFileTransfer.dll] <Tencent><5, 0, 202, 40>
[D:\Program Files\Tencent\QQ\QQMagicFace.dll] <><1, 0, 0, 1>
[PID: 3292][D:\Program Files\Tencent\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[D:\Program Files\Tencent\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 3548][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\AcSignIcon.dll] <Autodesk><16.0.0.86>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll] <Kaspersky Lab><1.0.142.342>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll] <Kaspersky Lab><1.0.142.3>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.0.0>
[d:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll] <Kaspersky Lab><5.0.142.0>
[C:\WINDOWS\System32\JPWB.IME] <常诚研制><4.00.950>
[C:\WINDOWS\System32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[PID: 3616][D:\游戏\WC3\war3.exe] <egamestar kenshin><1, 0, 20, 6056>
[D:\游戏\WC3\storm.dll] <Blizzard Entertainment><1.09>
[D:\游戏\WC3\mss32.dll] <N/A><N/A>
[D:\Program Files\浩方对战平台\FNSocket.dll] <><4, 0, 1, 0>
[D:\游戏\WC3\Game.dll] <Blizzard Entertainment><1, 0, 20, 6056>
[D:\游戏\WC3\ijl15.dll] <Intel Corporation><1,5,4,36>
[D:\游戏\WC3\redist\miles\Mp3dec.asi] <N/A><N/A>
[D:\游戏\WC3\redist\miles\Mssdolby.m3d] <N/A><N/A>
[D:\游戏\WC3\redist\miles\Msseax2.m3d] <N/A><N/A>
[D:\游戏\WC3\redist\miles\Mssfast.m3d] <N/A><N/A>
[D:\游戏\WC3\redist\miles\Reverb3.flt] <N/A><N/A>
[C:\WINDOWS\System32\JPWB.IME] <常诚研制><4.00.950>
[PID: 1724][d:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[C:\WINDOWS\System32\AcSignIcon.dll] <Autodesk><16.0.0.86>
[PID: 2772][C:\DOCUME~1\FIRE\LOCALS~1\Temp\Rar$EX01.234\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

从一数到三 - 2006-6-11 2:03:00

这个软件有什么用处啊!?

我无邪 - 2006-6-11 9:25:00

双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示确定更改时，单击“是”，清除“隐藏已知文件类型的扩展名

运行System Repair Engineer，点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Intranet Messenger，rundll32 ，Network Management Center Task选择“删除服务”点“设置”选择“否”最后重启。（每一个逗号隔开的就是一个病毒的服务，请逐一删除）
重启后
运行System Repair Engineer，使用“启动项目，注册表”来删除以下选项。
（如果在注册表里无法识别那一下，可以选中一项后，点“编辑”这样会有很明细的路径）
res><; C:\WINDOWS\System32\res.exe
删除
C:\WINDOWS\System32\res.exe
C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL

abc555efg - 2006-6-11 12:56:00

我的朋友QQ发给我一个网站。我一按就出现了一个黄网。10多分钟出现一次。原来不会改主页的。但是过了几天会改主页了。用了瑞星的注册表修复了就好了。过了一下又弹出来。主页又改了。我是新手。不会开注册表看。也不会看启动项，你能教我吗。或开QQ给你控制，谢谢

从一数到三 - 2006-6-11 13:21:00

6楼的大哥怎么用了你的方法还是不行啊
那3个网站还在地址栏里面

小书童在唱歌 - 2006-6-11 14:11:00

从一数到三大哥：
哎，我好烦啊，我电脑的问题和你一样啊，和你一样的那该死的网站怎么都去不掉，看了烦啊！怎么都删不掉，我单位的电脑和我家的电脑都是这样，肯定是我看什么网页弄的，我最后总是上网查我爸心脏病的东西，不知道是这个染的。好烦啊！
高手们，求求你们了！

我无邪 - 2006-6-11 15:08:00

烦重启后，再扫个报告粘上来。

瑞星卡卡安全论坛