本地连接出来太慢，要2分钟，［有扫描日志]【求助】 bbs.ikaka.com

烂笔头1 - 2006-7-4 23:04:00

HijackThis_815汉化版扫描日志 V1.99.1
保存于 23:01:16 上午, 日期 2006-7-4
操作系统： Windows 2000 SP4 (WinNT 5.00.2195)
浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程：
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINNT\system32\cisvc.exe
D:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
D:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
D:\Program Files\QuickTime\qttask.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
D:\Program Files\Tencent\qq\TIMPlatform.exe
D:\Program Files\Tencent\qq\qqpet\qqpet.exe
C:\WINNT\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINNT\explorer.exe
D:\我的文档\CG\cd\VI摸版\QQPetNurse0701(2.15SP1)\QQPetNurse0701(2.15SP1)\QQPetNurse.exe
D:\绿色\GreenBrowser\GreenBrowser.exe
D:\Program Files\Tencent\qq\QQ.exe
D:\绿色\SREng2\HijackThis1991zww.exe

R3 - URLSearchHook: SrchHook Class - {EED92A43-CFCE-4548-BD73-B0A405470ED5} - C:\PROGRA~1\CNNIC\Cdn\iesrch.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Program Files\Tencent\qq\QQIEHelper.dll (file missing)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - :C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (file missing)
O2 - BHO: AlxTB BHO - {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} - C:\WINNT\system32\AlxTB1.dll
O3 - IE工具栏增项: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - IE工具栏增项: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll
O3 - IE工具栏增项: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - IE工具栏增项: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINNT\system32\SHDOCVW.DLL
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon
O4 - 启动项HKLM\\Run: [vptray] D:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - 启动项HKLM\\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: 腾讯QQ.lnk = D:\Program Files\Tencent\qq\QQ.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - d:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: Alexa Web Search - http://client.alexa.com/holiday/script/actions/search.htm
O8 - IE右键菜单中的新增项目: Get Alexa Data - http://client.alexa.com/holiday/script/actions/sitedata.htm
O8 - IE右键菜单中的新增项目: Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm
O8 - IE右键菜单中的新增项目: RoboForm工具栏 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - IE右键菜单中的新增项目: See Related Links - http://client.alexa.com/holiday/script/actions/related.htm
O8 - IE右键菜单中的新增项目: Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 保存表单 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - IE右键菜单中的新增项目: 填写表单 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - IE右键菜单中的新增项目: 定制菜单 - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Program Files\Tencent\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Program Files\Tencent\qq\SendMMS.htm
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\Program Files\浩方对战平台\GameClient.exe
O9 - 浏览器额外的按钮: 填写表单 - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - 浏览器额外的“工具”菜单项: 填写表单 - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - 浏览器额外的按钮: 保存 - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - 浏览器额外的“工具”菜单项: 保存表单 - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - 浏览器额外的按钮: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - 浏览器额外的“工具”菜单项: RoboForm工具栏 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\Tencent\qq\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\Tencent\qq\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\qq\QQIEHelper.dll (file missing)
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\qq\QQIEHelper.dll (file missing)
O16 - DPF: {C661F36D-DF85-4EF4-83C7-E107B83D04B1} (WebActivater Control) - http://dl_dir.qq.com/3dshow/3DShowVM.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B416C68A-4E8F-47B1-A891-2AC170708D37}: NameServer = 218.85.157.99,202.101.98.55
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - NT 服务: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - NT 服务: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - NT 服务: DefWatch - Symantec Corporation - D:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - D:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe

烂笔头1 - 2006-7-4 23:05:00

2006-07-04,23:02:40

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<internat.exe><internat.exe> [Microsoft Corporation]
<RoboForm><"C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"> [Siber Systems]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
<NvMediaCenter><RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation]
<SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.]
<Synchronization Manager><mobsync.exe /logon> [Microsoft Corporation]
<vptray><D:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe> [Symantec Corporation]
<QuickTime Task><"D:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Computer, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINNT\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
<WinlogonNotify: NavLogon><C:\WINNT\system32\NavLogon.dll> []

==================================
启动文件夹
[腾讯QQ]
<C:\Documents and Settings\ahao\「开始」菜单\程序\启动\腾讯QQ.lnk><N>

==================================

烂笔头1 - 2006-7-4 23:09:00

服务
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Autodesk Licensing Service / Autodesk Licensing Service]
<"C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe"><Autodesk, Inc.>
[DefWatch / DefWatch]
<D:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe><Symantec Corporation>
[QoS Service / DiRVIn]
<C:\WINNT\SYSTEM32\RUNDLL32.EXE C:\WINNT\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[Macromedia Licensing Service / Macromedia Licensing Service]
<"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Symantec AntiVirus Client / Norton AntiVirus Server]
<D:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe><Symantec Corporation>
[NVIDIA Display Driver Service / NVSvc]
<C:\WINNT\system32\nvsvc32.exe><NVIDIA Corporation>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Program Files\Tencent\qq\QQIEHelper.dll, N/A>
[]
{724d43a9-0d85-11d4-9908-00400523e39a} <:C:\Program Files\Siber Systems\AI RoboForm\roboform.dll, N/A>
[AlxTB BHO Class]
{F1FABE79-25FC-46de-8C5A-2C6DB9D64333} <C:\WINNT\system32\AlxTB1.dll, Alexa Internet>
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A} <D:\Program Files\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[填写表单]
{320AF880-6646-11D3-ABEE-C5DBF3571F46} <, N/A>
[保存]
{320AF880-6646-11D3-ABEE-C5DBF3571F49} <, N/A>
[RoboForm]
{724d43aa-0d85-11d4-9908-00400523e39a} <, N/A>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\qq\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Program Files\Tencent\qq\QQIEHelper.dll, N/A>
[@msdxmLC.dll,-1@2052,电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[Infofo 工具栏]
{D74EC18E-3DDD-4174-B1B1-949FE3B8366D} <C:\Program Files\Infofo Bar\infofobar.dll, 珊瑚虫工作室泰格工作室>
[&RoboForm]
{724d43a0-0d85-11d4-9908-00400523e39a} <C:\Program Files\Siber Systems\AI RoboForm\roboform.dll, Siber Systems>
[Alexa]
{3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} <C:\WINNT\system32\SHDOCVW.DLL, Microsoft Corporation>
[WebActivater Control]
{C661F36D-DF85-4EF4-83C7-E107B83D04B1} <C:\WINNT\system32\3DShowVM.ocx, QQ>
[&使用迅雷下载全部链接]
<d:\Program Files\Thunder Network\Thunder\getallurl.htm, N/A>
[Alexa Web Search]
<http://client.alexa.com/holiday/script/actions/search.htm, N/A>
[Get Alexa Data]
<http://client.alexa.com/holiday/script/actions/sitedata.htm, N/A>
[Mail to a Friend...]
<http://client.alexa.com/holiday/script/actions/mailto.htm, N/A>
[RoboForm工具栏]
<file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html, N/A>
[See Related Links]
<http://client.alexa.com/holiday/script/actions/related.htm, N/A>
[Write a Review...]
<http://client.alexa.com/holiday/script/actions/review.htm, N/A>
[上传到QQ网络硬盘]
<D:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[保存表单]
<file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html, N/A>
[填写表单]
<file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html, N/A>
[定制菜单]
<file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html, N/A>
[添加到QQ自定义面板]
<D:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\Program Files\Tencent\qq\SendMMS.htm, N/A>

==================================

烂笔头1 - 2006-7-4 23:10:00

正在运行的进程
[PID: 176][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 200][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 196][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6997>
[C:\WINNT\system32\NavLogon.dll] <N/A><N/A>
[PID: 248][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.7035>
[C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 260][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.7011>
[PID: 440][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 464][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059>
[PID: 492][C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe] <Autodesk, Inc.><2.51.000>
[PID: 524][C:\WINNT\system32\cisvc.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 532][D:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe] <Symantec Corporation><8.1.0.821>
[PID: 332][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 608][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] <Microsoft Corporation><7.00.9466>
[PID: 668][D:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe] <Symantec Corporation><8.1.0.821>
[C:\WINNT\system32\CBA.DLL] <Intel? Corporation><6.12.0.105 E>
[C:\WINNT\system32\MsgSys.dll] <Intel? Corporation><6.12.0.105 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.105 E>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.105 E>
[D:\PROGRA~1\SYMANT~1\SYMANT~1\NAVLU.dll] <Symantec Corporation><8.1.0.821>
[D:\PROGRA~1\SYMANT~1\SYMANT~1\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[D:\PROGRA~1\SYMANT~1\SYMANT~1\i2ldvp3.dll] <Symantec Corporation><8.1.0.821>
[D:\PROGRA~1\SYMANT~1\SYMANT~1\NAVAPI32.DLL] <Symantec Corp.><4.2.0.7>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060628.020\NAVEX32a.DLL] <Symantec Corporation><20061.1.0.14>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060628.020\NAVENG32.DLL] <Symantec Corporation><20061.1.0.14>
[D:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAP32.DLL] <Symantec Corporation><9.1.0.26>
[PID: 616][C:\WINNT\system32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.8133>
[PID: 740][C:\WINNT\system32\regsvc.exe] <Microsoft Corporation><5.00.2195.6701>
[PID: 756][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6972>
[PID: 788][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 836][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 852][C:\WINNT\system32\inetsrv\inetinfo.exe] <Microsoft Corporation><5.00.0984>
[PID: 1244][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690>
[D:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll] <Symantec Corporation><8.1.0.821>
[C:\WINNT\system32\alsndmgr.cpl] <Realtek Semiconductor Corp.><2, 2, 0, 48>
[C:\WINNT\system32\nvtuicpl.cpl] <N/A><N/A>
[C:\WINNT\system32\NVWRSZHC.DLL] <NVIDIA Corporation><6.14.10.10540>
[C:\WINNT\system32\AlxTB1.dll] <Alexa Internet><7, 0, 1, 57>
[D:\Program Files\Tencent\qq\qdshm.dll] <><1, 0, 101, 20>
[PID: 1316][C:\WINNT\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5, 1, 0, 43>
[PID: 1332][D:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe] <Symantec Corporation><8.1.0.821>
[D:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Cliproxy.dll] <Symantec Corporation><8.1.0.821>
[D:\PROGRA~1\SYMANT~1\SYMANT~1\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[D:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Cliscan.dll] <Symantec Corporation><8.1.0.821>
[PID: 1340][D:\Program Files\QuickTime\qttask.exe] <Apple Computer, Inc.><7.0.4>
[PID: 1348][C:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000>
[PID: 1356][C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe] <Siber Systems><6-6-8>
[C:\Program Files\Siber Systems\AI RoboForm\RoboForm.DLL] <Siber Systems><6-6-8>
[PID: 1324][D:\Program Files\Tencent\qq\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[D:\Program Files\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 1628][D:\Program Files\Tencent\qq\qqpet\qqpet.exe] <腾讯公司><2, 38, 101, 55>
[D:\Program Files\Tencent\qq\qqpet\QQPetResDownload.dll] <><6, 1, 101, 55>
[D:\Program Files\Tencent\qq\qqpet\QQPetCommunity.dll] <><6, 1, 101, 55>
[C:\WINNT\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[PID: 1084][C:\WINNT\system32\cidaemon.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 1484][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106>
[C:\Program Files\Siber Systems\AI RoboForm\roboform.dll] <Siber Systems><6-6-8>
[C:\WINNT\system32\AlxTB1.dll] <Alexa Internet><7, 0, 1, 57>
[C:\WINNT\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[PID: 1788][C:\WINNT\explorer.exe] <Microsoft Corporation><5.00.3700.6690>
[C:\WINNT\system32\AlxTB1.dll] <Alexa Internet><7, 0, 1, 57>
[D:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\qdshm.dll] <><1, 0, 101, 20>
[C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll] <Symantec Corporation><8.1.0.821>
[PID: 1892][D:\我的文档\CG\cd\VI摸版\QQPetNurse0701(2.15SP1)\QQPetNurse0701(2.15SP1)\QQPetNurse.exe] <永恒E网><2.1.5.1>
[C:\WINNT\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[PID: 1908][D:\绿色\GreenBrowser\GreenBrowser.exe] <MoreQuick><1, 0, 0, 0>
[C:\WINNT\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[C:\Program Files\Siber Systems\AI RoboForm\RoboForm.DLL] <Siber Systems><6-6-8>
[C:\WINNT\system32\ffdshow.ax] <N/A><1, 0, 0, 1>
[C:\WINNT\system32\msdmo.dll] <N/A><N/A>
[C:\WINNT\system32\FREEWB.IME] <Delphi Fan Studio><5.1>
[C:\Program Files\freewb\plugin\date.plg] <><1, 0, 0, 1>
[PID: 1700][D:\Program Files\Tencent\qq\QQ.exe] <TENCENT><0, 0, 0, 0>
[D:\Program Files\Tencent\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160>
[D:\Program Files\Tencent\qq\QQAPI.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[D:\Program Files\Tencent\qq\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1>
[D:\Program Files\Tencent\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[D:\Program Files\Tencent\qq\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQMainFrame.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\CQQApplication.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\NewSkin.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\HostingMgr.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\CameraDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\MailSummary.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQSpace.dll] <><1, 0, 0, 1>
[C:\WINNT\system32\msdmo.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\GroupLive.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQAllInOne.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\SCCore.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQCustomFace.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQSysMsgMng.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQPlugin.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQPet.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\FlashAvatarDll.dll] <><1, 4, 0, 1>
[C:\WINNT\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[D:\Program Files\Tencent\qq\QQSceneMng.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QRingMng.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\PhoneAPI.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[D:\Program Files\Tencent\qq\QQAvatar.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\LongConnection.dll] <tencent><5, 0, 200, 160>
[D:\Program Files\Tencent\qq\ImageOle.dll] <TODO: <Company name>><1.0.0.1>
[C:\WINNT\system32\FREEWB.IME] <Delphi Fan Studio><5.1>
[C:\Program Files\freewb\plugin\date.plg] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\BQQApplication.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\CommercesMng.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[D:\Program Files\Tencent\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
[D:\Program Files\Tencent\qq\QQPhoneHelper.dll] <腾讯科技（深圳）有限公司><2, 0, 4, 40>
[C:\Program Files\Siber Systems\AI RoboForm\RoboForm.DLL] <Siber Systems><6-6-8>
[D:\Program Files\Tencent\qq\GroupConnection.dll] <Tencent><5, 0, 202, 170>
[PID: 1820][D:\绿色\SREng2\HijackThis1991zww.exe] <Soeperman Enterprises Ltd.><1.99.0001>
[PID: 1712][C:\WINNT\system32\NOTEPAD.EXE] <Microsoft Corporation><5.00.2140.1>
[PID: 1652][D:\绿色\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>

==================================

烂笔头1 - 2006-7-4 23:10:00

文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

我无邪 - 2006-7-5 0:37:00

关闭所有浏览窗口以及一些不必要的程序
运行Hijackthis，扫描结束后在下列选项前打上勾，然后选"修复
O2 - BHO: AlxTB BHO - {F1FABE79-25FC-46de-8C5A-2C6DB9D64333} - C:\WINNT\system32\AlxTB1.dll
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
运行(双击)System Repair Engineer，点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务，选择“删除服务”点“设置”选择“否”最后重启
双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示确定更改时，单击“是”，清除“隐藏已知文件类型的扩展名
删除
C:\WINNT\system32\AlxTB1.dll
C:\WINNT\SYSTEM32\WBEM\IRJIT.DLL
试着给网卡指定一个IP看看
网上邻居的属性，本地连接（网卡）的属性，Internet协议（双击）
点“使用下面的IP地址”
在IP地址栏里输入，192.168.0.1
子网掩码255.225.255.0
看看启动是不是快了。

烂笔头1 - 2006-7-5 19:22:00

运行(双击)System Repair Engineer，点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务，选择“删除服务”点“设置”选择“否”最后重启

哪服务啊，

瑞星卡卡安全论坛