請大俠幫忙，急　　　。。。。。 bbs.ikaka.com

coolqi - 2006-7-10 12:06:00

經常有幾個不知是什麼東東的網頁自動彈出來，很是惱火，請大俠指教。
以下是我掃描的結果：
Logfile of HijackThis v1.99.1
Scan saved at 上午 11:54:03, on 2006/7/10
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP1 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\Program Files\rising\Rav\Ravmond.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\llssrv.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\rising\Rav\RavStub.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\System32\msdtc.exe
C:\WINNT\Explorer.EXE
C:\Program Files\rising\Rav\RavTask.exe
F:\chenhu2\chenqxms.exe
C:\Program Files\rising\Rav\Ravmon.exe
F:\Program Files\Distillr\Acrotray.exe
C:\WINNT\system32\internat.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Common Files\smartde\sde.exe
F:\Program Files\KINGSOFT2002\xdict.exe
C:\Program Files\rising\Rav\Rav.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.104\HijackThis.exe

R3 - URLSearchHook: (no name) - {ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - F:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\新資料夾 (2)\ISO\DVB\QQIEHelper.dll (file missing)
O2 - BHO: HSProgSDT - {5D15CEAC-3B27-4863-AAEA-93A4C8A6C57D} - C:\WINNT\system32\hssdtobm.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL (file missing)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Acrobat\AcroIEFavClient.dll
O2 - BHO: MEobjectSDT - {D4D5C535-BA95-4327-870D-A33826FDD17A} - C:\WINNT\system32\obwbkya.dll
O3 - Toolbar: 收音機(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - F:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [SoundMan] soundman.exe
O4 - HKLM\..\Run: [qcsszjcz] f:\chenhu2\chenqxms.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\Program Files\Distillr\Acrotray.exe"
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O8 - Extra context menu item: ????? Adobe PDF - res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: ??????有 PDF - res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: ????有 PDF - res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: ???定的?接? Adobe PDF - res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: ???定的?接??有 PDF - res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: ???接目?? Adobe PDF - res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: ???接目???有 PDF - res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: 使用 FlashGet 下載 - F:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 全部使用 FlashGet 下載 - F:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 新增到QQ自定義面板 - D:\新資料夾 (2)\ISO\DVB\AddPanel.htm
O8 - Extra context menu item: 新增到QQ表情 - D:\新資料夾 (2)\ISO\DVB\AddEmotion.htm
O8 - Extra context menu item: 添加到QQ自定義面板 - D:\新資料夾 (2)\ISO\DVB\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\新資料夾 (2)\ISO\DVB\AddEmotion.htm
O8 - Extra context menu item: 用QQ MMS傳送該圖片 - D:\新資料夾 (2)\ISO\DVB\SendMMS.htm
O8 - Extra context menu item: 用QQ彩信發送該圖片 - D:\新資料夾 (2)\ISO\DVB\SendMMS.htm
O9 - Extra button: Joyo - {8DE0FCD4-5EB5-11D3-AD25-00002100131B} - F:\PROGRA~1\KINGSO~1\IEPlugin.dll
O9 - Extra button: PowerWord - {C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} - F:\PROGRA~1\KINGSO~1\IEPlugin.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\新資料夾 (2)\ISO\DVB\QQ.EXE (file missing)
O9 - Extra 'Tools' menuitem: 騰訊QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\新資料夾 (2)\ISO\DVB\QQ.EXE (file missing)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1143248682779
O16 - DPF: {87CCFDB0-C4BE-4BC2-A78C-9EAA7CF96667} - http://ps.itv.mop.com/dn/files/vodupdate_1.0.0.9_20060425.cab
O16 - DPF: {A3CD7F74-93C9-4BC4-B892-CCDF1514F714} (Submit Class) - https://pbank.95559.com.cn/personbank/ocx/safe.cab
O16 - DPF: {BE9535B7-76FB-4572-AD20-B32BADB3643B} (TV Stream Source) - http://image2.sina.com.cn/cctv/Chaos203b.cab
O16 - DPF: {F138084D-84D7-48CD-BEA8-04772457516E} (VqqSpeedDlProxy Class) - http://59.36.97.38/jsxz/vqqsdl1009.cab
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: ipp - (no CLSID) - (no file)
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINNT\System32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\WINNT\system32\inetcomm.dll
O18 - Protocol: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINNT\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINNT\System32\itss.dll
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINNT\system32\mshtml.dll
O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINNT\system32\msdxm.ocx
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Database information combine (DbooInfo) - 易易加速科技有限公司 - C:\WINNT\dbmsinfo.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\rising\Rav\Ravmond.exe
O23 - Service: SDAgent Service (SDAgentService) - 北京??基??件技?有限公司 - C:\Program Files\Common Files\smartde\sde.exe
O23 - Service: Network System (Universal Disk Manager) - Unknown owner - C:\Program Files\Common Files\COMM\Network.exe (file missing)

zq77 - 2006-7-10 12:35:00

O2 - BHO: HSProgSDT - {5D15CEAC-3B27-4863-AAEA-93A4C8A6C57D} - C:\WINNT\system32\hssdtobm.dll
O2 - BHO: MEobjectSDT - {D4D5C535-BA95-4327-870D-A33826FDD17A} - C:\WINNT\system32\obwbkya.dll
修复后删除
O23 - Service: SDAgent Service (SDAgentService) - 北京??基??件技?有限公司 - C:\Program Files\Common Files\smartde\sde.exe
修复后卸载
O23 - Service: Network System (Universal Disk Manager) - Unknown owner - C:\Program Files\Common Files\COMM\Network.exe (file missing)
禁止其服务
修复

coolqi - 2006-7-10 14:29:00

【回复“zq77”的帖子】
我還是不怎麼理解
具體該怎麼做啊？

我无邪 - 2006-7-10 14:52:00

开始→运行→输入services.msc，打开“服务”→查找 Network System ，SDAgent Service→双击→启动类型→禁止→停止→应用→确定。禁止 Network System ，SDAgent Service这2个服务（每一个逗号隔开的就是一个病毒的服务，请逐一禁用）
重启
关闭所有浏览窗口以及一些不必要的程序
运行Hijackthis，扫描结束后在下列选项前打上勾，然后选"修复"
R3 - URLSearchHook: (no name) - {ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: HSProgSDT - {5D15CEAC-3B27-4863-AAEA-93A4C8A6C57D} - C:\WINNT\system32\hssdtobm.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL (file missing)
O2 - BHO: MEobjectSDT - {D4D5C535-BA95-4327-870D-A33826FDD17A} - C:\WINNT\system32\obwbkya.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示确定更改时，单击“是”，清除“隐藏已知文件类型的扩展名
删除
C:\Program Files\Common Files\COMM
C:\Program Files\Common Files\smartde
C:\WINNT\system32\obwbkya.dll
C:\WINNT\system32\hssdtobm.dll
如果还没有解决问题
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改

game - 2006-7-10 15:00:00

O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - F:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: MEobjectSDT - {D4D5C535-BA95-4327-870D-A33826FDD17A} - C:\WINNT\system32\obwbkya.dll
O2 - BHO: HSProgSDT - {5D15CEAC-3B27-4863-AAEA-93A4C8A6C57D} - C:\WINNT\system32\hssdtobm.dll
O23 - Service: SDAgent Service (SDAgentService) - 北京??基??件技?有限公司 - C:\Program Files\Common Files\smartde\sde.exe

coolqi - 2006-7-10 15:28:00

【回复“我无邪”的帖子】
“C:\WINNT\system32\hssdtobm.dll；
C:\Program Files\Common Files\COMM”
這兩個文件都沒找到，不知是否正常？
我先按你教的試一下，
非常感謝！！！！

coolqi - 2006-7-10 15:34:00

剛做完，這個“http://www.zn5b.com/chenpy.htm“網址又自動彈出來了。還有這個“http://top.mop.com/”，關掉它時又會彈出另一個網址。

coolqi - 2006-7-10 15:37:00

這個怎麼這麼麻煩呀，
真是太氣憤了！！！！
這些該死的網頁。

我无邪 - 2006-7-10 20:53:00

请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

coolqi - 2006-7-11 9:04:00

掃描報告：
2006-07-11,08:58:42

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Server Service Pack 4 (Build 2195)
- Administrative User - Completed Functions Allowed

Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations

Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<Internat.exe><internat.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
<nwiz><nwiz.exe /install> [NVIDIA Corporation]
<RavTask><"C:\Program Files\rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<SoundMan><soundman.exe> [Avance Logic, Inc.]
<qcsszjcz><f:\chenhu2\chenqxms.exe> [?虎]
<Acrobat Assistant 7.0><"F:\Program Files\Distillr\Acrotray.exe"> [Adobe Systems Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINNT\system32\Userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINNT\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]

==================================
Startup Folders
[AutoCAD 啟動加速器]
<C:\Documents and Settings\All Users\「開始」功能表\程式集\啟動\AutoCAD 啟動加速器.lnk><N>

==================================
Services
[Autodesk Licensing Service / Autodesk Licensing Service]
<"C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe"><Autodesk>
[Database information combine / DbooInfo]
<C:\WINNT\dbmsinfo.exe><易易加速科技有限公司>
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[NVIDIA Driver Helper Service / NVSvc]
<C:\WINNT\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
<C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"C:\Program Files\rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SDAgent Service / SDAgentService]
<C:\Program Files\Common Files\smartde\sde.exe><N/A>
[Intranet Messenger / SOCEESe]
<C:\WINNT\SYSTEM32\RUNDLL32.EXE C:\WINNT\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[Network System / Universal Disk Manager]
<C:\Program Files\Common Files\COMM\Network.exe><N/A>

==================================
Browser Add-ons
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <F:\Program Files\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[IeCatch5 Class]
{2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <F:\PROGRA~1\FLASHGET\jccatch.dll, FlashGet>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <D:\新資料夾 (2)\ISO\DVB\QQIEHelper.dll, 深圳市騰訊計算機系統有限公司>
[AcroIEToolbarHelper Class]
{AE7CD045-E861-484f-8273-0445EE161910} <F:\Program Files\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[CibaCtrl Class]
{8DE0FCD4-5EB5-11D3-AD25-00002100131B} <F:\PROGRA~1\KINGSO~1\IEPlugin.dll, >
[JoyoCtrl Class]
{C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} <F:\PROGRA~1\KINGSO~1\IEPlugin.dll, >
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\新資料夾 (2)\ISO\DVB\QQ.EXE, TENCENT>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <F:\PROGRA~1\FLASHGET\flashget.exe, FlashGet.com>
[收音機(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <F:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[Adobe PDF]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} <F:\Program Files\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[Shockwave ActiveX Control]
{166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINNT\system32\macromed\Director\SwDir.dll, Macromedia, Inc.>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINNT\system32\LegitCheckControl.DLL, Microsoft Corporation>
[MUWebControl Class]
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINNT\system32\muweb.dll, Microsoft Corporation>
[Submit Class]
{A3CD7F74-93C9-4BC4-B892-CCDF1514F714} <C:\WINNT\Downloaded Program Files\safein.dll, Beijing eChannels Century Technology Co.,Ltd>
[TV Stream Source]
{BE9535B7-76FB-4572-AD20-B32BADB3643B} <C:\WINNT\system32\FAggr.ax, www.sina.com.cn>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[VqqSpeedDlProxy Class]
{F138084D-84D7-48CD-BEA8-04772457516E} <C:\WINNT\vqqsdl.dll, Tencent>
[????? Adobe PDF]
<res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[??????有 PDF]
<res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[????有 PDF]
<res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[???定的?接? Adobe PDF]
<res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html, N/A>
[???定的?接??有 PDF]
<res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html, N/A>
[???接目?? Adobe PDF]
<res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[???接目???有 PDF]
<res://F:\Program Files\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[使用 FlashGet 下載]
<F:\Program Files\FlashGet\jc_link.htm, N/A>
[全部使用 FlashGet 下載]
<F:\Program Files\FlashGet\jc_all.htm, N/A>
[????接目?? Adobe PDF]
<, N/A>
[??定的?容??? Adobe PDF]
<, N/A>
[??定的?容??到?有的 PDF]
<, N/A>
[??定的?接??到?有的 PDF]
<, N/A>
[??接目???到?有的 PDF]
<, N/A>
[新增到QQ自定義面板]
<D:\新資料夾 (2)\ISO\DVB\AddPanel.htm, N/A>
[新增到QQ表情]
<D:\新資料夾 (2)\ISO\DVB\AddEmotion.htm, N/A>
[添加到QQ自定義面板]
<D:\新資料夾 (2)\ISO\DVB\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\新資料夾 (2)\ISO\DVB\AddEmotion.htm, N/A>
[用QQ MMS傳送該圖片]
<D:\新資料夾 (2)\ISO\DVB\SendMMS.htm, N/A>
[用QQ彩信發送該圖片]
<D:\新資料夾 (2)\ISO\DVB\SendMMS.htm, N/A>
[??? Adobe PDF]
<, N/A>
[??到?有的 PDF]
<, N/A>
[???定的?接? Adobe PDF ]
<, N/A>

coolqi - 2006-7-11 9:08:00

接樓上
==================================
Running Processes
[PID: 160][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 180][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6997>
[PID: 232][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.7035>
[C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 244][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.7011>
[PID: 420][C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 440][C:\Program Files\rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26>
[C:\Program Files\rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[C:\Program Files\rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9>
[C:\Program Files\rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[C:\Program Files\rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[C:\Program Files\rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1>
[C:\Program Files\rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[C:\Program Files\rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[C:\Program Files\rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[C:\Program Files\rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[C:\Program Files\rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[C:\Program Files\rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[C:\Program Files\rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
[C:\Program Files\rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[C:\Program Files\rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[C:\Program Files\rising\Rav\ScanNet.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[C:\Program Files\rising\Rav\ExtMail.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[PID: 480][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 516][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059>
[C:\WINNT\system32\AdobePDF.dll] <Adobe Systems Incorporated.><7.0.0.00>
[F:\Program Files\Distillr\AdistRes.CHS] <N/A><N/A>
[C:\WINNT\system32\pxc25pm.dll] <Tracker Software><2.50.0002>
[C:\WINNT\system32\prnmnt.dll] <N/A><N/A>
[PID: 564][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 596][C:\WINNT\System32\llssrv.exe] <Microsoft Corporation><5.00.2195.7021>
[PID: 632][C:\WINNT\System32\nvsvc32.exe] <NVIDIA Corporation><6.14.01.4351>
[PID: 664][C:\WINNT\system32\regsvc.exe] <Microsoft Corporation><5.00.2195.6701>
[PID: 712][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6972>
[PID: 848][C:\Program Files\rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 776][C:\WINNT\system32\stisvc.exe] <Microsoft Corporation><5.00.2195.6656>
[PID: 964][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 972][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 1004][C:\WINNT\system32\Dfssvc.exe] <Microsoft Corporation><5.00.2195.6664>
[PID: 1036][C:\WINNT\System32\msdtc.exe] <Microsoft Corporation><1999.9.3421.3>
[PID: 1268][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690>
[C:\WINNT\system32\AcSignIcon.dll] <Autodesk><16.2.54.0>
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] <Autodesk><16.2.54.0>
[F:\Program Files\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[F:\PROGRA~1\FLASHGET\jccatch.dll] <FlashGet><1, 1, 5, 0>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[F:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[PID: 1316][C:\Program Files\rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 1328][C:\Program Files\rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28>
[C:\Program Files\rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[C:\Program Files\rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[PID: 1356][F:\chenhu2\chenqxms.exe] <?虎><1.000>
[C:\WINNT\system32\dmshell.dll] <千橡互?><2, 1, 3, 0>
[C:\WINNT\system32\220~1.0\dmplayer.dll] <千橡互?><2, 2, 0, 0>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[C:\WINNT\system32\AcSignIcon.dll] <Autodesk><16.2.54.0>
[PID: 1376][F:\Program Files\Distillr\Acrotray.exe] <Adobe Systems Inc.><6.0.1.2004121400>
[F:\Program Files\Distillr\AcroTray.CHS] <Adobe Systems Inc.><6.0.0.0>
[PID: 1388][C:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[PID: 1520][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 1656][F:\Program Files\CAD2006\acad.exe] <Autodesk, Inc.><R16.2.54.10>

coolqi - 2006-7-11 9:13:00

接樓上
[C:\PROGRA~1\COMMON~1\AUTODE~1\ac1st16.dll] <Autodesk, Inc.><16.2.54.0>
[C:\PROGRA~1\COMMON~1\AUTODE~1\acdb16.dll] <Autodesk, Inc.><16.2.54.0>
[C:\PROGRA~1\COMMON~1\AUTODE~1\AcGe16.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\acui16.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\ANav.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\adui16.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\UserData.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\dswhip.dll] <Autodesk Inc.><16.2.54.0>
[F:\Program Files\CAD2006\heidi8.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\dlint8.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\SFTTABAC.dll] <Softel vdm><16.2.54.0>
[F:\Program Files\CAD2006\adlmdll.dll] <Autodesk, Inc.><6.0.0.17>
[F:\Program Files\CAD2006\adctrls.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\adui16res.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AnavRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\acui16res.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\DsWhipRes.dll] <Autodesk Inc.><16.2.54.0>
[F:\Program Files\CAD2006\sfttabacRes.dll] <Softel vdm><16.2.54.0>
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AdskCleanup.0001.dir.0000\~df394b.tmp] <N/A><N/A>
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AdskCleanup.0001.dir.0000\~de6c66.tmp] <N/A><2.66.000>
[F:\Program Files\CAD2006\ADCtrlsRes.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\acadbtn.xmx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\acadres.dll] <Autodesk, Inc.><16.2.54.0>
[C:\PROGRA~1\COMMON~1\AUTODE~1\acdb16chtres.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\adlmres.dll] <Autodesk, Inc.><6.0.0.17>
[c:\winnt\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_ef63c9f8\mscorlib.dll] <N/A><N/A>
[f:\program files\cad2006\acdbmgdhost.dll] <Autodesk, Inc><16.2.54.0>
[F:\Program Files\CAD2006\acdbmgd.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\acmgd.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\PrxyInet.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\PrxyInetRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\oleaprot.arx] <Autodesk><16.2.54.0>
[c:\winnt\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0aea2df9\system.dll] <N/A><N/A>
[c:\winnt\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_2b4d2a6a\system.xml.dll] <N/A><N/A>
[c:\winnt\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_0499b801\system.drawing.dll] <N/A><N/A>
[c:\winnt\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_0c8f5560\system.windows.forms.dll] <N/A><N/A>
[F:\Program Files\CAD2006\colorRes.dll] <Autodesk><16.2.54.0>
[C:\WINNT\system32\AcSignIcon.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\drv\gdi8.hdi] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\drv\gdi8Res.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\drv\szb8.hdi] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\drv\rblast8.hdi] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\drv\gdifont8.hdi] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\acgs.dll] <Autodesk Inc.><16.2.54.0>
[F:\Program Files\CAD2006\acgsRes.dll] <Autodesk Inc.><16.2.54.0>
[c:\progra~1\common~1\autode~1\achapi16.dbx] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\hcreg8.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\hcreg8Res.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\vl.arx] <Autodesk Inc.><16.2.54.0>
[F:\Program Files\CAD2006\VLMSG.DLL] <Autodesk Inc.><16.2.54.0>
[F:\Program Files\CAD2006\VLLIB.DLL] <Autodesk Inc.><16.2.54.0>
[F:\Program Files\CAD2006\AcApp.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcAppRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcDblClkEdit.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcDblClkEditPE.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcDblClkEditRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\acdim.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\ShareMFC.dll] <Autodesk, Inc><16.2.54.0>
[F:\Program Files\CAD2006\AcDimRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\aceplotx.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcEplotXRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\achlnkui.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\achlnkuiRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcIDropMgr.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcIDropMgrRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcLayerP.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcLayerPRes.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\AcSign.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcSignRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcSpaceTrans.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcSpaceTransRes.dll] <Autodesk, Inc.><16.2.54.0>

coolqi - 2006-7-11 9:14:00

接樓上
[F:\Program Files\CAD2006\AcStd.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcStStdRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcStMgr.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcStRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcTaskBar.arx] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\AcTaskBarRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcTp.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcTc.DLL] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcUt.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcTcUi.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcTcRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcTcUiRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\whohas.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\whohasRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcDwgRecovery.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcDwgRecoveryRes.dll] <Autodesk><16.2.54.0>
[f:\program files\cad2006\acdxui.dll] <Autodesk, Inc><16.2.54.0>
[f:\program files\cad2006\acdx.dll] <Autodesk, Inc><16.2.54.0>
[f:\program files\cad2006\zh-tw\acdxui.resources.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcDxNotify.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcDxNotifyRes.dll] <Autodesk, Inc.><16.2.54.0>
[f:\program files\cad2006\acmgdshared.dll] <Autodesk, Inc><16.2.54.0>
[F:\Program Files\CAD2006\acetlodr.arx] <Autodesk, Inc.><16.2.54.0>
[f:\program files\cad2006\aclayer.dll] <Autodesk, Inc><16.2.54.0>
[f:\program files\cad2006\zh-tw\aclayer.resources.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcPrevInput.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcSmNav.arx] <Autodesk><16.2.54.0>
[c:\progra~1\common~1\autode~1\AcSmComponents16.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\axdb16.dll] <N/A><N/A>
[F:\Program Files\CAD2006\AcSmPublishUtils.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcSmDwgMine.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcSmNavRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\WSCommCntrAcCon.arx] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\WSCommCntrAcConRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcPrevInputRes.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\AcTpCatalogRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcTcToolsRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcProject16.dll] <Autodesk><16.2.54.0>
[f:\program files\cad2006\bzlocation.dll] <Autodesk, Inc><16.2.54.0>
[f:\program files\cad2006\projectpointclientlib.dll] <Autodesk, Inc.><6.1.1158.0>
[F:\Program Files\CAD2006\AcProject16res.dll] <Autodesk><16.2.54.0>
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcFdEval.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcCalcEngine.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcFieldRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcCalcEngineRes.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\AcMgdInternal.dll] <Autodesk, Inc.><16.2.54.0>
[f:\program files\cad2006\zh-tw\acdx.resources.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\dwgaids.arx] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\Dwgaidsres.dll] <Autodesk><16.2.54.0>
[F:\Program Files\CAD2006\apperr.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\plotcfg8.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\pctres8.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\apperrRes.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\plcfmgr.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\plcfmgrRes.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\plcferr.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\pm8.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\pmres8.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\pmutil8.dll] <Autodesk, Inc.><8.2.54.0>
[F:\Program Files\CAD2006\AcSecOpt.arx] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\CAD2006\AcSecOptRes.dll] <Autodesk, Inc.><16.2.54.0>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AdskCleanup.0001] <Macrovision Europe Ltd.><1, 0, 0, 1>
[PID: 1412][C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe] <Autodesk><2.66.000>
[PID: 1228][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><5.00.2920.0000>
[C:\WINNT\system32\AcSignIcon.dll] <Autodesk><16.2.54.0>

coolqi - 2006-7-11 9:14:00

接樓上
[F:\Program Files\Acrobat\AcroIEFavClient.dll] <Adobe Systems Incorporated><7.0.0.0>
[F:\Program Files\Acrobat\AcroIEFavClient.CHS] <Adobe Systems Incorporated><7.0.0.0>
[F:\Program Files\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.7.2006011200>
[F:\PROGRA~1\FLASHGET\jccatch.dll] <FlashGet><1, 1, 5, 0>
[D:\新資料夾 (2)\ISO\DVB\QQIEHelper.dll] <深圳市騰訊計算機系統有限公司><1, 1, 0, 5>
[C:\WINNT\system32\macromed\flash\Flash.ocx] <Macromedia, Inc.><7,0,19,0>
[C:\WINNT\system32\Macromed\Common\SwSupport.dll] <Macromedia, Inc.><10.1.1r16>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[PID: 1672][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 1816][C:\Program Files\Common Files\Autodesk Shared\WSCommCntr1.exe] <Autodesk, Inc.><1.2.0.1>
[C:\Program Files\Common Files\Autodesk Shared\WebServices1.dll] <Autodesk, Inc.><1.2.0.1>
[PID: 1736][D:\新資料夾 (2)\ISO\DVB\QQ.exe] <TENCENT><13, 85, 0, 15>
[D:\新資料夾 (2)\ISO\DVB\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\BasicCtrlDll.dll] <Tencent><0, 3, 1, 0>
[D:\新資料夾 (2)\ISO\DVB\QQAPI.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\TIMProxy.dll] <tencent><2.05>
[D:\新資料夾 (2)\ISO\DVB\HostingMgr.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\QQMainFrame.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\CQQApplication.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\NewSkin.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\PersonalDesktop.dll] <深圳市???算机系?公司QQ工作小?><1, 0, 0, 2>
[D:\新資料夾 (2)\ISO\DVB\QQAddr.dll] <深圳市騰訊電腦系統有限公司><2, 1, 0, 10>
[D:\新資料夾 (2)\ISO\DVB\QQSpace.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\BQQApplication.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\QQPlugin.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\QQAllInOne.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\CameraDll.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\SCCore.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\QQCustomFace.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\QQPet.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\QQAvatar.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\FlashAvatarDll.dll] <><1, 4, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\QQSysMsgMng.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\PhoneAPI.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[D:\新資料夾 (2)\ISO\DVB\LongConnection.dll] <tencent><0, 3, 1, 7>
[D:\新資料夾 (2)\ISO\DVB\QRingMng.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\GroupConnection.dll] <Tencent><0, 3, 1, 14>
[C:\WINNT\system32\AcSignIcon.dll] <Autodesk><16.2.54.0>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[D:\新資料夾 (2)\ISO\DVB\QQUdpGetFileLib.dll] <tencent><0, 2, 2, 3>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[D:\新資料夾 (2)\ISO\DVB\QQSceneMng.dll] <N/A><N/A>
[C:\WINNT\system32\macromed\flash\Flash.ocx] <Macromedia, Inc.><7,0,19,0>
[PID: 1260][D:\新資料夾 (2)\ISO\DVB\TIMPlatform.exe] <tencent><3.17>
[D:\新資料夾 (2)\ISO\DVB\TIMProxy.dll] <tencent><2.05>
[PID: 1644][E:\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[PID: 1732][F:\Program Files\KINGSOFT2002\xdict.exe] <Kingsoft Co, Ltd.><5, 5, 0, 0>
[F:\Program Files\KINGSOFT2002\IHooks.dll] <N/A><N/A>
[F:\Program Files\KINGSOFT2002\ITextOut.dll] <N/A><N/A>
[F:\Program Files\KINGSOFT2002\CJKTAB32.dll] <N/A><N/A>
[F:\Program Files\KINGSOFT2002\XImage32.dll] <N/A><N/A>
[F:\Program Files\KINGSOFT2002\NewWord.dll] <N/A><N/A>
[F:\Program Files\KINGSOFT2002\xfile.dll] <N/A><N/A>
[F:\Program Files\KINGSOFT2002\ITTSEngine.dll] <N/A><N/A>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[PID: 696][D:\新資料夾 (2)\ISO\DVB\QQexternal.exe] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\BasicCtrlDll.dll] <Tencent><0, 3, 1, 0>
[D:\新資料夾 (2)\ISO\DVB\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\新資料夾 (2)\ISO\DVB\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[PID: 1924][C:\Program Files\Microsoft Office\Office\WINWORD.EXE] <Microsoft Corporation><9.0.2717>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[C:\Program Files\rising\Rav\RsPlugIn.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 1>
[C:\Program Files\rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[C:\WINNT\system32\AcSignIcon.dll] <Autodesk><16.2.54.0>
[C:\Program Files\Common Files\Microsoft Shared\Proof\wdbrkcht.dll] <MSTC><2, 0, 1, 1>
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] <Autodesk><16.2.54.0>
[PID: 1756][C:\Program Files\Foxmail\Foxmail.exe] <Boda Network Technology Inc.><5.0>
[F:\Program Files\KINGSOFT2002\Cjktl32.dll] <N/A><N/A>
[C:\Program Files\Foxmail\FoxAntiSpam.dll] <N/A><N/A>
[C:\WINNT\system32\AcSignIcon.dll] <Autodesk><16.2.54.0>
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] <Autodesk><16.2.54.0>
[C:\Program Files\Foxmail\3rdParty\punylib.dll] <CNNIC><1, 0, 0, 3>
[C:\Program Files\Foxmail\3rdParty\cmplugin.dll] <N/A><N/A>

coolqi - 2006-7-11 9:14:00

==================================
File Associations
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR Error. [AutoCADScriptFile]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider

==================================
報告完成

coolqi - 2006-7-11 9:17:00

今天又出現了這些網頁：
http://211.100.33.109/dm_lp/99yhtml060626/99yhtml060626.html
http://www.zn5b.com/chenpy.htm

b00d - 2006-7-11 9:45:00

和我机器的问题几乎一样,出来的网页差不多就是这么几个.我在这喊了N天了也没人能给解决了.

b00d - 2006-7-11 9:48:00

刚才又从右下角升起来个flash广告,叫流行度NO1,是易趣的,就单独一个flash,不是在网页内的

我无邪 - 2006-7-11 13:46:00

【回复“coolqi”的帖子】
运行(双击)System Repair Engineer，点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Database information combine，SDAgent Service，Network System选择“删除服务”点“设置”选择“否”最后重启。（每一个逗号隔开的就是一个病毒的服务，请逐一删除）
重启
双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示确定更改时，单击“是”，清除“隐藏已知文件类型的扩展名
删除
C:\Program Files\Common Files\COMM
C:\Program Files\Common Files\smartde
C:\WINNT\dbmsinfo.exe

我无邪 - 2006-7-11 13:46:00

【回复“b00d”的帖子】
请自己立个帖子
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

瑞星卡卡安全论坛