麻烦各位高手进来帮忙看下，（附Hijackthis扫描日志） bbs.ikaka.com

DJ之大非 - 2006-6-11 9:00:00

我的IE症状为刚开始正常，但是到访问第二个或者第三个新的任务的时候就会停止响应！我扫描病毒没有发现异常！不知道是不是杀毒软件不太好还是什么？（诺顿企业版）但是其他的网络访问是正常的（网游、QQ什么的都可以访问，但是QQ有时会不定时的掉线）
扫描日志如下：
Logfile of HijackThis v1.99.1
Scan saved at 8:37:34, on 2006-6-11
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavProt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\Firewall\PavFires.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavFnSvr.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\Pavkre.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavsrv51.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\prevsrv.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\AVENGINE.EXE
C:\Program Files\Panda Software\熊猫卫士钛金版2005\PsImSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\WebProxy.exe
H:\新建文件夹\腾讯QQ\TIMPlatform.exe
H:\新建文件夹\QQ\QQ.exe
C:\Program Files\KVFW\KVwsc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
H:\新建文件夹\QQ\QQ.exe
C:\Program Files\KVFW\kvfw.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\Apvxdwin.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\WebProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Panda Software\熊猫卫士钛金版2005\avciman.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\dmadmin.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.672\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {3D503C16-EFC5-425A-965C-9D34414BF387}? - (no file)
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5}? - (no file)
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\熊猫卫士钛金版2005\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [LUPGCONF] "C:\Program Files\Panda Software\熊猫卫士钛金版2005\LUpgConf.exe" /RunOnce:4_02_01
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [KVFW] C:\Program Files\KVFW\kvfw.exe -silent
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - H:\新建文件夹\KuGoo3\KuGoo3DownX.htm
O8 - Extra context menu item: 使用Web迅雷下载 - C:\Program Files\Thunder Network\WebThunder\GetUrl.htm
O8 - Extra context menu item: 添加到天极收藏夹 - C:\WINDOWS\system32\YeskyComponents\AddFavorite.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A}? - I:\8003\123\浩方对战平台\GameClient.exe
O9 - Extra button: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra 'Tools' menuitem: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra button: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - http://www.rising.com.cn/?u=RSTB (file missing)
O9 - Extra button: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - http://www.ikaka.com/?u=RSTB (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll
O10 - Broken Internet access because of LSP provider 'c:\program files\panda software\
O14 - IERESET.INF: START_PAGE_URL=http://www.tomatolei.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1149985082843
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: KVWSC - Jiangmin Co - C:\Program Files\KVFW\KVwsc.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\Firewall\PavFires.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavFnSvr.exe
O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\Pavkre.exe
O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavProt.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavsrv51.exe
O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\prevsrv.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\熊猫卫士钛金版2005\PsImSvc.exe

另外，麻烦帮我看下我自己开启的服务，有那些是没必要开的。（自己搞的不是太清楚！偶是菜鸟哈~~）

附件: 693637200661185226.jpg

我无邪 - 2006-6-11 9:13:00

修复O2 - BHO: (no name) - {3D503C16-EFC5-425A-965C-9D34414BF387}? - (no file)
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5}? - (no file)
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
如果还未解决问题
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

DJ之大非 - 2006-6-11 9:36:00

谢谢”我无邪“大哥！刚才想回帖都忙活了半天哈，现在好象可以了，不过，我还是把用”System Repair Engineer“扫描的日志发上来请你帮忙看下！
日志如下：这次扫描是把熊猫卸载后扫的！

DJ之大非 - 2006-6-11 9:37:00

2006-06-11,09:18:58

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<KVFW><C:\Program Files\KVFW\kvfw.exe -silent> [Beijing Jiangmin.]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
<AvLiteBr><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
<UIHost><logonui.exe> [Microsoft Corporation]

==================================
启动文件夹
服务
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
[KVWSC / KVWSC]
<"C:\Program Files\KVFW\KVwsc.exe"><Jiangmin Co>
[Panda Firewall Service / PAVFIRES]
<2 - 系统找不到指定的文件。
><N/A>
[Panda Function Service / PAVFNSVR]
<2 - 系统找不到指定的文件。
><N/A>
[Panda Process Protection Service / PavPrSrv]
<"C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe"><Panda Software>
[Panda anti-virus service / PAVSRV]
<2 - 系统找不到指定的文件。
><N/A>
[Panda Preventium+ Service / PREVSRV]
<2 - 系统找不到指定的文件。
><N/A>
[Panda IManager Service / PSIMSVC]
<2 - 系统找不到指定的文件。
><N/A>

==================================
浏览器加载项
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A}? <I:\8003\123\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[启动Web迅雷]
{962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[访问瑞星网站]
{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} <http://www.rising.com.cn/?u=RSTB, N/A>
[访问卡卡社区]
{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} <http://www.ikaka.com/?u=RSTB, N/A>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[IEHOOK Class]
{3D503C16-EFC5-425A-965C-9D34414BF387} <C:\WINDOWS\system32\crc33.dll, >
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <H:\新建文件夹\KuGoo3\KuGoo3DownXControl.ocx, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[使用KuGoo3下载(&K)]
<H:\新建文件夹\KuGoo3\KuGoo3DownX.htm, N/A>
[使用Web迅雷下载]
<C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>
[添加到天极收藏夹]
<C:\WINDOWS\system32\YeskyComponents\AddFavorite.htm, N/A>

我无邪 - 2006-6-11 9:38:00

嗯，我也有这个意思，HJ扫描太不让人放心了。

DJ之大非 - 2006-6-11 9:38:00

==================================
正在运行的进程
[PID: 464][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 524][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[PID: 548][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[PID: 592][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[PID: 604][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[PID: 772][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[PID: 960][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavlsp.dll] <Panda Software ><5, 4, 12, 36>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavTrc.dll] <Panda Software ><5, 4, 13, 13>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\icl_cfg.dll] <Panda Software ><5, 2, 12, 3>
[C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0>
[PID: 1048][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\System32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\System32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\System32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavlsp.dll] <Panda Software ><5, 4, 12, 36>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavTrc.dll] <Panda Software ><5, 4, 13, 13>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\icl_cfg.dll] <Panda Software ><5, 2, 12, 3>
[PID: 1128][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavlsp.dll] <Panda Software ><5, 4, 12, 36>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavTrc.dll] <Panda Software ><5, 4, 13, 13>
[C:\Program Files\Panda Software\熊猫卫士钛金版2005\icl_cfg.dll] <Panda Software ><5, 2, 12, 3>
[PID: 1276][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0>
[PID: 1548][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[C:\WINDOWS\system32\mp3infp.dll] <win32lab.com><2.52.6.0>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[PID: 1804][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[PID: 1836][C:\Program Files\KVFW\kvfw.exe] <Beijing Jiangmin.><9.0.5.1205>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[C:\Program Files\KVFW\KVFWUtil.DLL] <><1, 0, 0, 1>
[PID: 1832][C:\Program Files\KVFW\KVwsc.exe] <Jiangmin Co><1, 0, 0, 10>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[PID: 952][C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe] <Panda Software><1.3.0.0>
[PID: 1428][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0>
[C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0>
[PID: 400][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0>
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[H:\新建文件夹\KuGoo3\KuGoo3DownXControl.ocx] <N/A><N/A>
[C:\WINDOWS\system32\mp3infp.dll] <win32lab.com><2.52.6.0>
[PID: 892][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[PID: 1584][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.203\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

我无邪 - 2006-6-11 9:40:00

请问你卸载熊猫后，有没有重启过？？？
如果没有，请重启后，再扫个报告粘上来。

DJ之大非 - 2006-6-11 10:21:00

好，，这是我重启过后扫描的，其他只运行了一个江民防火墙。
日志如下：
2006-06-11,10:06:58

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<KVFW><C:\Program Files\KVFW\kvfw.exe -silent> [Beijing Jiangmin.]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
<UIHost><logonui.exe> [Microsoft Corporation]

==================================
启动文件夹
服务
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
[KVWSC / KVWSC]
<"C:\Program Files\KVFW\KVwsc.exe"><Jiangmin Co>

==================================
浏览器加载项
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A}? <I:\8003\123\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[启动Web迅雷]
{962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[访问瑞星网站]
{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} <http://www.rising.com.cn/?u=RSTB, N/A>
[访问卡卡社区]
{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} <http://www.ikaka.com/?u=RSTB, N/A>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[IEHOOK Class]
{3D503C16-EFC5-425A-965C-9D34414BF387} <C:\WINDOWS\system32\crc33.dll, >
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <H:\新建文件夹\KuGoo3\KuGoo3DownXControl.ocx, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[使用KuGoo3下载(&K)]
<H:\新建文件夹\KuGoo3\KuGoo3DownX.htm, N/A>
[使用Web迅雷下载]
<C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>
[添加到天极收藏夹]
<C:\WINDOWS\system32\YeskyComponents\AddFavorite.htm, N/A>

DJ之大非 - 2006-6-11 10:22:00

==================================
正在运行的进程
[PID: 436][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 496][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 520][\??\C:\WINDOWS\SYSTEM32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 564][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 576][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 728][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 776][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0>
[PID: 852][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 892][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1072][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0>
[PID: 1168][C:\WINDOWS\system32\imapi.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1200][C:\Program Files\KVFW\KVwsc.exe] <Jiangmin Co><1, 0, 0, 10>
[PID: 1256][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1948][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\mp3infp.dll] <win32lab.com><2.52.6.0>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[PID: 2012][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2020][C:\Program Files\KVFW\kvfw.exe] <Beijing Jiangmin.><9.0.5.1205>
[C:\Program Files\KVFW\KVFWUtil.DLL] <><1, 0, 0, 1>
[PID: 640][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[PID: 736][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.907\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

瑞星卡卡安全论坛