xboxcenter的问题，求助！ bbs.ikaka.com

xmuxsp - 2006-7-11 21:58:00

我不是用hijackThis发现的，而是卡巴斯基发现的，卡巴斯基把xboxcenter.dll删除了，结果现在不能上网

用lspfix进行修复，即使在安全模式下，lspfix提示找到问题，按finish却又报告no changes necessary
改用winsockXPfix修复后还是不能上网

看了几个类似的，去文件夹里搜了一下，什么都没找到，估计是被卡巴斯基删掉了。
自己当时又没在意，直接让卡巴斯基把文件彻底删除......

只好用HijackThis查了查，不得其解

Logfile of HijackThis v1.99.1
Scan saved at 21:34:14, on 2006-7-11
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\System32\QCONSVC.EXE
C:\WINDOWS\system32\RegSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
C:\WINDOWS\system32\TpShocks.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\mmc.exe
C:\Documents and Settings\user\桌面\ha_hijackthis_1991\HijackThis.exe

R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\zh-cn\msntb.dll (file missing)
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [BMMMONWND] rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [PRONoMgrWired] C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [QCWLIcon] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [DAEMON Tools-1033] ; "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Fairy_Ape] ; "c:\fairy_ape.exe" /mode=icon
O4 - HKLM\..\Run: [hbpassport] ; C:\PROGRA~1\HBClient\hbast.exe
O4 - HKLM\..\Run: [hxgame-update] ; C:\Program Files\幻想游戏系列\幻想游戏4.2\hxgameupdate\hxgame-update.exe
O4 - HKLM\..\Run: [ibmmessages] ; C:\Program Files\IBM\Messages By IBM\\ibmmessages.exe
O4 - HKLM\..\Run: [iTunesHelper] ; "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] ; C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] ; C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [MINI_BFYY] ; C:\Program Files\Ringz Studio\Storm Downloader\StormDownloader.exe
O4 - HKLM\..\Run: [MoveSearch] ; C:\Program Files\wsearch\Search.exe
O4 - HKLM\..\Run: [pbmini] ; "C:\Program Files\pcast\PodcastbarMini\PodcastBarMini.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] ; "C:\Program Files\Ringz Studio\Storm Codec\qttask.exe" -atboottime
O4 - HKLM\..\Run: [spoolsv] ; C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer
O4 - HKLM\..\Run: [StormCodec_Helper] ; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [Thunder] ; "C:\Program Files\Thunder Network\Thunder\ThunderShell.exe" /s
O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WangWang] ; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
O4 - HKLM\..\Run: [yassistse] ; "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - HKLM\..\Run: [YLive.exe] ; C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - HKCU\..\Run: [ctfmon.exe] ; C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] ; "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [Kugoo] ; C:\PROGRA~1\KuGoo2\KuGoo.exe
O4 - HKCU\..\Run: [MsnMsgr] ; "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MyShares] ; c:\program Files\易虎\MyShares.exe /tray
O4 - HKCU\..\Run: [PhMain] ; C:\Program Files\PeanutHull3\Phmain.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - C:\Program Files\KuGoo3\KuGoo3DownX.htm
O8 - Extra context menu item: 使用影音传送带下载 - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: 使用影音传送带下载全部链接 - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\Program Files\浩方对战平台\GameClient.exe (file missing)
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\windows\xboxcenter.dll' missing
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: QConGina - C:\WINDOWS\SYSTEM32\QConGina.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: ldkano - Unknown owner - C:\WINDOWS\yahu.exe (file missing)
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe
O23 - Service: MazeSvr - Unknown owner - C:\Program Files\天网Maze\MazeSvr.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: QCONSVC - IBM Corp. - C:\WINDOWS\System32\QCONSVC.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe

我无邪 - 2006-7-12 0:00:00

请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

xmuxsp - 2006-7-12 12:01:00

2006-07-12,10:05:02

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><; C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background> [Microsoft Corporation]
<H/PC Connection Agent><; "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"> [Microsoft Corporation]
<Kugoo><; C:\PROGRA~1\KuGoo2\KuGoo.exe> []
<MsnMsgr><; "C:\Program Files\MSN Messenger\msnmsgr.exe" /background> [Microsoft Corporation]
<MyShares><; c:\program Files\易虎\MyShares.exe /tray> []
<PhMain><; C:\Program Files\PeanutHull3\Phmain.exe> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<ATIPTA><C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe> [ATI Technologies, Inc.]
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [Synaptics, Inc.]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [Synaptics, Inc.]
<TP4EX><tp4ex.exe> [IBM Corporation]
<TPHOTKEY><C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe> []
<TpShocks><TpShocks.exe> [IBM Corp.]
<EZEJMNAP><C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe> [IBM Corp.]
<BMMGAG><RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor> [IBM Corp.]
<BMMLREF><C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE> []
<BMMMONWND><rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor> []
<SoundMAXPnP><C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe> [Analog Devices, Inc.]
<SoundMAX><"C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray> [Analog Devices, Inc.]
<TPKMAPHELPER><C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper> [IBM Corp.]
<PRONoMgrWired><C:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe> [Intel(R) Corporation]
<QCWLIcon><C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE> [IBM Corp.]
<KAVPersonal50><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize> [Kaspersky Lab]
<IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [Microsoft Corporation]
<DAEMON Tools-1033><; "C:\Program Files\D-Tools\daemon.exe" -lang 1033> [DAEMON'S HOME]
<Fairy_Ape><; "c:\fairy_ape.exe" /mode=icon> []
<hbpassport><; C:\PROGRA~1\HBClient\hbast.exe> []
<hxgame-update><; C:\Program Files\幻想游戏系列\幻想游戏4.2\hxgameupdate\hxgame-update.exe> []
<ibmmessages><; C:\Program Files\IBM\Messages By IBM\\ibmmessages.exe> [IBM]
<iTunesHelper><; "C:\Program Files\iTunes\iTunesHelper.exe"> [Apple Computer, Inc.]
<LogitechVideoRepair><; C:\Program Files\Logitech\Video\ISStart.exe> [Logitech Inc.]
<LogitechVideoTray><; C:\Program Files\Logitech\Video\LogiTray.exe> [Logitech Inc.]
<MoveSearch><; C:\Program Files\wsearch\Search.exe> []
<pbmini><; "C:\Program Files\pcast\PodcastbarMini\PodcastBarMini.exe" -hide> []
<QuickTime Task><; "C:\Program Files\Ringz Studio\Storm Codec\qttask.exe" -atboottime> [Apple Computer, Inc.]
<StormCodec_Helper><; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> []
<Thunder><; "C:\Program Files\Thunder Network\Thunder\ThunderShell.exe" /s> []
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<WangWang><; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"> []
<yassistse><; "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"> []
<YLive.exe><; C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
<WinlogonNotify: AtiExtEvent><Ati2evxx.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\QConGina]
<WinlogonNotify: QConGina><QConGina.dll> [IBM Corp.]

==================================
启动文件夹
服务
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINDOWS\system32\Ati2evxx.exe><N/A>
[EvtEng / EvtEng]
<C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[IBM PM Service / IBMPMSVC]
<C:\WINDOWS\system32\ibmpmsvc.exe><N/A>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[iPodService / iPodService]
<C:\Program Files\iPod\bin\iPodService.exe><Apple Computer, Inc.>
[kavsvc / kavsvc]
<"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"><Kaspersky Lab>
[ldkano / ldkano]
<C:\WINDOWS\yahu.exe><N/A>
[MATLAB Server / matlabserver]
<C:\MATLAB6p5\webserver\bin\win32\matlabserver.exe><N/A>
[MazeSvr / MazeSvr]
<C:\Program Files\天网Maze\MazeSvr.exe><N/A>
[Intel NCS NetService / NetSvc]
<C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe><Intel(R) Corporation>
[QCONSVC / QCONSVC]
<System32\QCONSVC.EXE><IBM Corp.>
[RegSrvc / RegSrvc]
<C:\WINDOWS\system32\RegSrvc.exe><Intel Corporation>
[Spectrum24 Event Monitor / S24EventMonitor]
<C:\WINDOWS\system32\S24EvMon.exe><Intel Corporation>
[SoundMAX Agent Service / SoundMAX Agent Service (default)]
<C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>
[IBM KCU Service / TpKmpSVC]
<C:\WINDOWS\system32\TpKmpSVC.exe><N/A>
[VMware Authorization Service / VMAuthdService]
<C:\Program Files\VMware\VMware Workstation\vmware-authd.exe><VMware, Inc.>
[VMware DHCP Service / VMnetDHCP]
<C:\WINDOWS\system32\vmnetdhcp.exe><VMware, Inc.>
[VMware NAT Service / VMware NAT Service]
<C:\WINDOWS\system32\vmnat.exe><VMware, Inc.>

==================================

xmuxsp - 2006-7-12 12:03:00

==================================
浏览器加载项
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A} <C:\Program Files\浩方对战平台\GameClient.exe, N/A>
[Create Mobile Favorite]
{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} <C:\PROGRA~1\MICROS~3\INetRepl.dll, Microsoft Corporation>
[Create Mobile Favorite]
{2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} <C:\PROGRA~1\MICROS~3\INetRepl.dll, Microsoft Corporation>
[信息检索(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[BitCometBar]
{3F1ABCDB-A875-46c1-8345-B72A4567E486} <C:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll, N/A>
[MSN]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\zh-cn\msntb.dll, N/A>
[QuickTime Object]
{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} <C:\Program Files\Ringz Studio\Storm Codec\QTPlugin.ocx, Apple Computer, Inc.>
[ActiveMovieControl Object]
{05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, N/A>
[Web Browser Applet Control]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[Tabular Data Control]
{333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation>
[IETag Factory]
{38481807-CA0E-42D2-BF39-B33AF135CC4D} <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, Microsoft Corporation>
[WebActivater Control]
{3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINDOWS\system32\WEBACT~1.OCX, QQ>
[BitCometBar]
{3F1ABCDB-A875-46C1-8345-B72A4567E486} <C:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll, N/A>
[HHCtrl Object]
{52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\HHCTRL.OCX, Microsoft Corporation>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Shell Name Space]
{55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Router Layer]
{5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} <C:\WINDOWS\System32\aclayer.dll, N/A>
[DragSearch BHO]
{62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, N/A>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[ST]
{9394EDE7-C8B5-483E-8773-474BF36AF6E4} <C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll, N/A>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Microsoft DirectAnimation Control]
{B6FFC24C-7E13-11D0-9B47-00C04FC2F51D} <C:\WINDOWS\system32\danim.dll, Microsoft Corporation>
[MSN]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\zh-cn\msntb.dll, N/A>
[MSNToolBandBHO]
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\zh-cn\msntb.dll, N/A>
[NTIECatcher Class]
{C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, N/A>
[AUDIO__MP3 Moniker Class]
{CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
{CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
{CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
{CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[FlashFXP Helper for Internet Explorer]
{E5A1691B-D188-4419-AD02-90002030B8EE} <C:\PROGRA~1\FlashFXP\IEFlash.dll, N/A>
[上传到QQ网络硬盘]
<C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
<C:\Program Files\KuGoo3\KuGoo3DownX.htm, N/A>
[使用影音传送带下载]
<C:\Program Files\Xi\NetTransport 2\NTAddLink.html, N/A>
[使用影音传送带下载全部链接]
<C:\Program Files\Xi\NetTransport 2\NTAddList.html, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>

xmuxsp - 2006-7-12 12:04:00

==================================
正在运行的进程
[PID: 1232][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1304][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1328][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\Ati2evxx.dll] <N/A><N/A>
[PID: 1372][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1384][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1540][C:\WINDOWS\system32\ibmpmsvc.exe] <N/A><N/A>
[PID: 1580][C:\WINDOWS\system32\Ati2evxx.exe] <N/A><N/A>
[PID: 1592][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1652][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1936][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 268][C:\WINDOWS\system32\S24EvMon.exe] <Intel Corporation ><8, 1, 0, 49a>
[PID: 304][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 672][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1300][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620>
[PID: 824][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] <Intel Corporation><9, 0, 1, 79>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 79>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 79>
[PID: 1308][C:\WINDOWS\System32\QCONSVC.EXE] <IBM Corp.><3, 5, 3, 0>
[PID: 1800][C:\WINDOWS\system32\RegSrvc.exe] <Intel Corporation><8, 1, 0, 49a>
[PID: 1908][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe] <Analog Devices, Inc.><3, 2, 6, 0>
[PID: 2004][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 252][C:\WINDOWS\system32\TpKmpSVC.exe] <N/A><N/A>
[PID: 444][C:\Program Files\VMware\VMware Workstation\vmware-authd.exe] <VMware, Inc.><5.0.0 build-13124>
[PID: 560][C:\WINDOWS\system32\vmnat.exe] <VMware, Inc.><5.0.0 build-13124>
[PID: 868][C:\WINDOWS\system32\vmnetdhcp.exe] <VMware, Inc.><5.0.0 build-13124>
[PID: 2532][C:\WINDOWS\system32\wscntfy.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3092][C:\WINDOWS\system32\Ati2evxx.exe] <N/A><N/A>
[PID: 3244][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll] <IBM Corp.><1, 0, 0, 0>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\shellex.dll] <Kaspersky Lab><5.0.372.1>
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0>
[PID: 3600][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe] <Synaptics, Inc.><7.5.17.12 16Jun04>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>
[PID: 3608][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] <Synaptics, Inc.><7.5.17.12 16Jun04>
[C:\WINDOWS\system32\SynCOM.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>
[C:\WINDOWS\system32\SynTPAPI.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>
[PID: 3636][C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe] <N/A><N/A>
[C:\Program Files\ThinkPad\PkgMgr\HOTKEY_2\tphk_2k.dll] <N/A><N/A>
[C:\WINDOWS\system32\Oemdspif.dll] <ATI Technologies, Inc.><6.14.0010>
[C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\tpfnf7.dll] <N/A><N/A>
[PID: 3676][C:\WINDOWS\system32\TpShocks.exe] <IBM Corp.><1, 0, 0, 1>
[C:\WINDOWS\system32\Sensor.dll] <IBM Corporation><1.30.1.0>
[PID: 3684][C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe] <IBM Corp.><1, 0, 0, 0>
[PID: 3704][C:\WINDOWS\system32\RunDll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll] <IBM Corp.><1, 0, 0, 0>
[C:\PROGRA~1\ThinkPad\UTILIT~1\tppwrw32.dll] <IBM Corp.><1, 0, 0, 0>
[C:\WINDOWS\system32\sensor.dll] <IBM Corporation><1.30.1.0>
[PID: 3740][C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe] <N/A><N/A>
[PID: 3748][C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe] <IBM Corporation><1.06>
[PID: 3776][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll] <N/A><N/A>
[C:\PROGRA~1\ThinkPad\UTILIT~1\tppwrw32.dll] <IBM Corp.><1, 0, 0, 0>
[C:\WINDOWS\system32\sensor.dll] <IBM Corporation><1.30.1.0>
[PID: 3808][C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe] <Analog Devices, Inc.><5, 0, 1, 57>
[C:\Program Files\Analog Devices\SoundMAX\SMWDMIF.dll] <Analog Devices, Inc.><5, 0, 0, 473>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>
[PID: 3908][C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE] <IBM Corp.><3, 5, 3, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\QCON.dll] <IBM Corp.><3, 5, 3, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\MerlinC201.dll] <Novatel Wireless Inc.><1, 0, 0, 1>
[C:\WINDOWS\system32\SbrngAPI.dll] <Intel Corporation><8, 1, 0, 49a>
[C:\WINDOWS\system32\PfMgrApi.dll] <Intel Corporation><8, 1, 0, 49a>
[C:\WINDOWS\system32\PsRegApi.dll] <Intel Corporation><8, 1, 0, 49a>
[C:\WINDOWS\system32\WConfig.DLL] <Intel Corporation><8, 1, 0, 49a>
[C:\WINDOWS\system32\WiFiAdap.DLL] <Intel Corporation><8, 1, 0, 49a>
[C:\WINDOWS\system32\C1XStngs.dll] <Intel Corporation><8, 1, 0, 49a>
[C:\WINDOWS\system32\LSAWRAPI.dll] <N/A><N/A>
[C:\WINDOWS\system32\S24MUDLL.dll] <Intel Corporation><8, 1, 0, 49a>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\IconRes.dll] <N/A><N/A>
[PID: 1016][C:\Program Files\foobar2000\foobar2000.exe] <N/A><N/A>
[C:\Program Files\foobar2000\utf8api.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_abx.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_albumlist.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_ape.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_apl.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_bitcompare.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_burninate.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_cdda.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_clienc.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_console.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_convolve.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dbsearch.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_diskwriter.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dsp_crossfade.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dsp_crossfeed.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dsp_extra.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dsp_nogaps.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dsp_pause.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dsp_skip_silence.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dsp_soundtouch.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_dynamics.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_faac.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_flac.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_flaccer.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_freedb.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_history.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_id3v2.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_infobox.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_input_std.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_masstag.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_monkey.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_mpeg4u.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_null.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_oggpreview.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_output_std.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_out_dsound_ex.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_out_ks.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_playlistgen_ex.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_pphsresample.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_read_http.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_rgscan.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_scroll.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_search_ex.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_speex.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_ui_columns.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_ui_std.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_unpack.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_utils.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_vis_manager.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_vis_simple_spectrum.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_vorbisenc.dll] <N/A><N/A>
[C:\Program Files\foobar2000\components\foo_wavpack.dll] <N/A><N/A>
[C:\Program Files\foobar2000\foo_ui_minilyrics.dll] <N/A><N/A>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>
[C:\Program Files\Minilyrics\MiniLyrics.dll] <N/A><N/A>
[PID: 2980][C:\Documents and Settings\user\桌面\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.12 16Jun04>

xmuxsp - 2006-7-12 12:05:00

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

我无邪 - 2006-7-12 20:51:00

这个可疑
ldkano / ldkano]
<C:\WINDOWS\yahu.exe><N/A>
如果你也不知道是什么，建议删除
运行(双击)System Repair Engineer，点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务ldkano ，选择“删除服务”点“设置”选择“否”
关闭所有浏览窗口以及一些不必要的程序
运行(双击)System Repair Engineer，使用“系统修复，浏览器加载项”来删除以下选项。
C:\WINDOWS\System32\aclayer.dll
重启
双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示确定更改时，单击“是”，清除“隐藏已知文件类型的扩展名
删除
C:\WINDOWS\System32\aclayer.dll
C:\WINDOWS\yahu.exe

最后关于流氓软件的问题
建议你到添加删除程序里卸载这几项
c:\program Files\易虎\MyShares.exe
C:\Program Files\wsearch\Search.exe
C:\PROGRA~1\HBClient\hbast.exe
C:\PROGRA~1\Yahoo!
它们分别是，中搜，雅虎，易虎，很棒小秘书。
卸载后
下载超级兔子。
http://www.pctutu.com/srmsdown.asp
安装好后，打开“超级兔子清理王”“专业卸载,卸载所有提示的垃圾软件，卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载。

xmuxsp - 2006-7-12 22:32:00

没有用...不过还是很感谢
找了几乎所有能修复lsp的，lspfix,winsockxspfix,xptcprepair等等，都没有用，看来只有重装啦

我无邪 - 2006-7-13 0:41:00

xboxcenter.dll是可以修复了
你的日志里也没有xboxcenter.dll

wangkz - 2006-7-14 15:39:00

lz问题我也碰到了
我是先用lspfix删除xboxcenter然后在安全模式下删掉c:\windows\xboxcenter.dll
发现不能上网，用winsockxpfix修复后依然不能上网。

运行System Repair Engineer在“系统修复，winsock供应者”下看到
MSAFD TCPIP[TCP/IP]等五项的镜像路径是c:\windows\xboxcenter.dll

我估计是xboxcenter修改tcp/ip协议的指向，删除后无法恢复导致不能上网。

xmuxsp - 2006-7-14 23:17:00

我的是rsvp的路径被改了，用sreng还删不了，提示10107错误....
lspfix打开时提示system\currentcontrolset\winsock2\Parameters\Protocol_catalog9\Catalog_entries不存在

我无邪 - 2006-7-15 1:12:00

你现在系统有什么异常，不能上网了吗？请再扫份日志粘上来。

wangkz - 2006-7-15 21:00:00

2006-07-15,11:51:02

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<MSCalsClocks><C:\Program Files\Microsoft Chinese Date & Time\ICalClk.exe> [Microsoft Corporation]
<ccleaner><"C:\Program Files\CCleaner\ccleaner.exe" /AUTO> [Piriform Ltd]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<igfxtray><C:\WINDOWS\system32\igfxtray.exe> [Intel Corporation]
<vptray><C:\PROGRA~1\SYMANT~1\VPTray.exe> [Symantec Corporation]
<ZCfgSvc.exe><C:\WINDOWS\system32\ZCfgSvc.exe> [Intel Corporation]
<PRONoMgr.exe><C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe> [Intel(R) Corporation]
<Logitech Utility><Logi_MwX.Exe> [Logitech Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
<WinlogonNotify: igfxcui><igfxdev.dll> [Intel Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
<WinlogonNotify: NavLogon><C:\WINDOWS\system32\NavLogon.dll> [Symantec Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Sebring]
<WinlogonNotify: Sebring><C:\WINDOWS\system32\LgNotify.dll> [Intel Corporation]

==================================
启动文件夹
[flashget]
<C:\Documents and Settings\w\「开始」菜单\程序\启动\flashget.lnk><N>

==================================
服务
[Symantec Event Manager / ccEvtMgr]
<"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc]
<"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr]
<"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Symantec AntiVirus Definition Watcher / DefWatch]
<"C:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
[Intel NCS NetService / NetSvc]
<C:\Program Files\Intel\NCS\Sync\NetSvc.exe><Intel(R) Corporation>
[O&O Defrag / O&O Defrag]
<C:\WINDOWS\system32\oodag.exe><O&O Software GmbH>
[RegSrvc / RegSrvc]
<C:\WINDOWS\system32\RegSrvc.exe><Intel Corporation>
[Spectrum24 Event Monitor / S24EventMonitor]
<C:\WINDOWS\system32\S24EvMon.exe><Intel Corporation>
[SavRoam / SavRoam]
<"C:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec>
[Symantec Network Drivers Service / SNDSrvc]
<"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec SPBBCSvc / SPBBCSvc]
<"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><Symantec Corporation>
[Symantec AntiVirus / Symantec AntiVirus]
<"C:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation>

==================================
浏览器加载项
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[TkbVmvpe Class]
{33023E4E-44F5-47A6-97AE-88ACF0AEAE38} <C:\WINDOWS\DOWNLO~1\sszeiq.dll, N/A>
[AcroIEToolbarHelper Class]
{AE7CD045-E861-484f-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Adobe PDF]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll, N/A>
[MMCPlayer Class]
{05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINDOWS\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[MMCPlayer Class]
{05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINDOWS\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Web Browser Applet Control]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\System32\msjava.dll, Microsoft Corporation>
[EWA Control]
{18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <C:\PROGRA~1\COMMON~1\Synacast\SynaLive\SYNACA~1.OCX, Synacast>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\System32\mshtml.dll, N/A>
[TkbVmvpe Class]
{33023E4E-44F5-47A6-97AE-88ACF0AEAE38} <C:\WINDOWS\DOWNLO~1\sszeiq.dll, N/A>
[Adobe PDF]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll, N/A>
[HHCtrl Object]
{52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\System32\shdocvw.dll, Microsoft Corporation>
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\System32\mshtml.dll, Microsoft Corporation>
[AcroIEToolbarHelper Class]
{AE7CD045-E861-484F-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll, N/A>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[Adobe Acrobat Control for ActiveX]
{CA8A9780-280D-11CF-A24D-444553540000} <C:\PROGRA~1\Adobe\ACROBA~1.0\Acrobat\ActiveX\pdf.ocx, Adobe Systems Incorporated>
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[使用网际快车下载]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\Program Files\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000, N/A>

==================================

wangkz - 2006-7-15 21:05:00

正在运行的进程
[PID: 420][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 476][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 500][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\LgNotify.dll] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\NavLogon.dll] <Symantec Corporation><10.0.1.1000>
[PID: 548][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 560][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 720][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 768][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 864][C:\WINDOWS\system32\S24EvMon.exe] <Intel Corporation ><7, 1, 4, 5>
[PID: 884][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 908][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 940][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\ccL40.dll] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><104.0.1.17>
[PID: 1044][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\ccL40.dll] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\ccSet.dll] <Symantec Corporation><104.0.1.17>
[C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\BB.DLL] <Symantec Corporation><1,5,1,3>
[C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL] <Symantec Corporation><2,0,0,73>
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL] <Symantec Corporation><104.0.1.17>
[PID: 1144][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\System32\AdobePDF.dll] <Adobe Systems Incorporated.><6.0.000>
[C:\Program Files\Adobe\Acrobat 6.0\Distillr\AdistRes.CHS] <N/A><N/A>
[PID: 1240][C:\WINDOWS\system32\ZCfgSvc.exe] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\PfMgrApi.dll] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\PsRegApi.dll] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\C1XStngs.dll] <><7, 1, 4, 5>
[C:\WINDOWS\system32\WConfig.DLL] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\WiFiAdap.DLL] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\LsaWrapi.dll] <N/A><N/A>
[C:\Program Files\Intel\PROSet\CHS\ZcSvcCHS.dll] <Intel Corporation><7, 1, 4, 0>
[C:\Program Files\Intel\PROSet\CHS\PmApiCHS.dll] <Intel Corporation><7, 1, 4, 0>
[C:\WINDOWS\system32\S24MUDLL.dll] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\D8021Xps.dll] <N/A><N/A>
[C:\Program Files\Intel\PROSet\CHS\C1XStCHS.dll] <><7, 1, 4, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 1372][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Media Player Classic\Codecs\mmfinfo.dll] <N/A><N/A>
[C:\Program Files\Media Player Classic\Codecs\mkunicode.dll] <N/A><N/A>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Adobe\Acrobat 6.0\Acrobat Elements\ContextMenu.chs] <Adobe Systems Inc.><1.0.0.2003051500>
[C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><6.0.0.2003051500>
[PID: 1460][C:\WINDOWS\system32\1XConfig.exe] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\IntelAE5.dll] <Meetinghouse Data Communications><3, 0, 28, 0>
[C:\WINDOWS\system32\PsRegApi.dll] <Intel Corporation><7, 1, 4, 5>
[C:\WINDOWS\system32\D8021Xps.dll] <N/A><N/A>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 1720][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] <Microsoft Corporation><7.00.9466>
[PID: 1760][C:\WINDOWS\system32\RegSrvc.exe] <Intel Corporation><7, 1, 4, 5>
[PID: 1840][C:\Program Files\Symantec AntiVirus\Rtvscan.exe] <Symantec Corporation><10.0.1.1000>
[C:\WINDOWS\system32\CBA.DLL] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\MsgSys.dll] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\NTS.dll] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\PDS.DLL] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\Program Files\Symantec AntiVirus\NAVLU.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL] <Symantec Corporation><10.0.1.1000>
[c:\program files\common files\symantec shared\ssc\ScsComms.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\I2ldvp3.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\ccL40.dll] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\ccDec.dll] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\decsdk.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll] <Symantec Corporation><3.02.14.03>
[C:\Program Files\Common Files\Symantec Shared\ccScan.dll] <Symantec Corporation><104.0.1.17>
[C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL] <Symantec Corporation><51.2.0.12>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060712.021\ccEraser.dll] <Symantec Corporation><106.1.5.2>
[C:\Program Files\Symantec AntiVirus\DefUtDCD.dll] <Symantec Corporation><3.1.13a.0>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060712.021\ecmsvr32.dll] <Symantec Corporation><61.1.0.11>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060712.021\NAVEX32a.DLL] <Symantec Corporation><20061.1.0.14>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060712.021\NAVENG32.DLL] <Symantec Corporation><20061.1.0.14>
[C:\Program Files\Symantec AntiVirus\NAVAP32.DLL] <Symantec Corporation><9.5.0.44>
[C:\Program Files\Symantec AntiVirus\SAVRT32.DLL] <Symantec Corporation><9.5.0.44>
[C:\Program Files\Symantec AntiVirus\IMail.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\NotesExt.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\vpmsece3.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\SymProtectStorage.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll] <Symantec Corporation><2,0,0,73>
[PID: 1876][C:\WINDOWS\System32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 288][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>

wangkz - 2006-7-15 21:05:00

[PID: 1340][C:\PROGRA~1\SYMANT~1\VPTray.exe] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\SAVRT32.DLL] <Symantec Corporation><9.5.0.44>
[C:\Program Files\Symantec AntiVirus\Cliproxy.dll] <Symantec Corporation><10.0.1.1000>
[C:\PROGRA~1\SYMANT~1\NAVNTUTL.DLL] <Symantec Corporation><10.0.1.1000>
[c:\program files\common files\symantec shared\ssc\ScsComms.dll] <Symantec Corporation><10.0.1.1000>
[C:\WINDOWS\system32\nts.dll] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\cba.dll] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\MsgSys.dll] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\PDS.DLL] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.80.019>
[PID: 948][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 1396][C:\Program Files\Logitech\MouseWare\system\em_exec.exe] <Logitech Inc.><9.80.019>
[C:\Program Files\Logitech\MouseWare\system\EVENTEX.dll] <Logitech Inc.><9.80.019>
[C:\WINDOWS\system32\COMNCTR.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Logitech\MouseWare\system\ccresrce.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Logitech\MouseWare\system\GlbResLt.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Logitech\MouseWare\System\devices.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Logitech\MouseWare\system\ccstmglb.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Logitech\MouseWare\system\ccustom.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Logitech\MouseWare\system\ccmsghk.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.80.019>
[PID: 1544][C:\Program Files\Microsoft Chinese Date & Time\ICalClk.exe] <Microsoft Corporation><1.0.0129.0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 1644][C:\Program Files\FlashGet\flashget.exe] <Amaze Soft><1, 7, 1, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.80.019>
[PID: 3048][C:\WINDOWS\system32\WISPTIS.EXE] <Microsoft Corporation><1.0.2201.0 (xpsp1.020820-1800)>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 3844][C:\Program Files\Intel\NCS\Sync\NetSvc.exe] <Intel(R) Corporation><1.1.301.0>
[C:\Program Files\Intel\NCS\Sync\Csps.dll] <N/A><N/A>
[C:\Program Files\Intel\NCS\Sync\HamSvc.dll] <Intel(R) Corporation><1.1.301.0>
[C:\Program Files\Intel\NCS\Sync\Med8023.dll] <Intel(R) Corporation><1.1.301.0>
[PID: 3788][C:\Documents and Settings\w\桌面\系统\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.80.019>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

xmuxsp - 2006-7-15 23:05:00

无法修改winsock应该就是问题所在，用regedit没法删除winsock2的建值，改了权限，点了应用又自动改回来了~郁闷

xiguachong - 2006-7-16 1:13:00

和楼主遇到同样问题，http://soft.donews.net/516.html，用这个可以删掉winsock2，最后结果等待中。

xiguachong - 2006-7-16 1:16:00

问题解决了。看到lz的帖子，特地进来一起分享。

xmuxsp - 2006-7-16 11:53:00

解决啦~用兵刃果然可以删去winsock2，非常感谢~~

仲夏银筝 - 2006-7-16 12:16:00

跟我一样的。~~~~
我也试试这个~~~~
期待中~~~

sanjingshou - 2006-7-16 12:54:00

我也遇到和你一样的问题，不过那个DLL是被瑞星杀掉了！！后来发现不能上网了，用3721一查，上面说是什么而已代码，可能导致无法上网，但我已经杀掉了啊！郁闷~~~无奈找来维修人员，他先运行ping加我的IP，发现网络已经连接上，之后又有些操作（不懂）。再开IE，可以上网了！但是用3721还是会扫描到那个问题，于是就用hijackthis扫描也发现同样问题，点修复也不行！~~

附件: 7118912006716124652.BMP

仲夏银筝 - 2006-7-16 13:06:00

楼上，我跟你一样，也是这样的毛病。

感谢XIGUACHONG
用你的方法我搞好了，，
真是太爱你了。。
谢谢~~~~~~~~

wangkz - 2006-7-16 14:44:00

折腾了近一个星期的xboxcenter问题终于得到解决，感谢xiguachong提供的文章，也向原创作者benny表示敬意.
为方便大家，全文转发：
当LSPFix和Winsock不管用的时候
今天同事的机器被流氓软件搞的不行了,让我帮忙给看看,不看不知道,一看吓一跳啊,简直就是流氓软件集中营........先嘲笑他一番黄色网站上多了.^_^.基本上用恶意软件清理助手把那些流氓软件都清理干净了,不过还不是很放心,于是又用Hijackthis看了下.这下可看出麻烦了,原来系统中还有病毒!当然,金山把它归到病毒类,叫什么AD.Download什么的.反正就是开机就插入线程到Explorer.exe,在userinit.exe中调用inituser.exe然后更改LSP(就是出问题在这了).用Hijackthis修复了开机插入后,提示O10不能用Hijackthis修复,需要用LSPFIX修复.因为以前没用过LSP,先google了下,发现用了LSPFIX后有可能导致无法上网,还要用个Winsockfix.准备好工具后开始进行修复工作.首先用Lspfix选中要删除的文件(c:\winnt\xboxcenter.dll),用这个完成后,然后用Killbox删除了该文件,在用winsockfix修复.在一开始时Lspfix就提示注册表中缺少相关键值,不过当时没有在意.都完成后重启机器,^_^,好嘛,机器倒是启动起来了,就是没有办法上网了.虽然很确定已经用winsockfix修复了,但是为啥还是不能上网呢?从网上找了半天,发现言论都是一样,心理感觉--垃圾.仔细想想,winsockfix应该是通过修改注册表来修复的.于是准备手动更改注册表.从另外一个2000的机器上倒出注册表相关键值.在hklm-system-currentcontrolset-services-winsock和winsock2下.可不知道是什么原因导致不能导入注册表.每次导入的时候总是说有部分不能导入,有程序正在占用.我晕呐.第一次见这种情况.没办法,到安全模式下导入注册表还是这样.天,这什么破病毒啊!刚开始还以为是权限问题,后来用regedt32打开后,直接删除也不行.当时真是恨死这病毒了.怎么办?上网找Google啊.发现有人说可以通过重装Tcp/IP协议来解决.于是重装了Tcp/IP,不行啊.当时真是没有办法了.重新上Google找了下,发现了另外一个解决办法,还是通过注册表来解决,删除Winsock和Winsock2,让系统重建这2个键值就可以了.不过刚才实践表明删不掉啊,后来才想起来,手边还有IceSword.赶紧用下,还真的删掉这2个键值了.^_^.重启系统后,用Hijackthis扫描后,没有发现O10错误.不过-----还是不能上网!!重新装了下Tcp/IP,不行!!OH,God!!到底是为什么!!再用一次Winsockfix,一切终于恢复正常了.......因为发现网上还有众多兄弟有和我今天同样的疑惑,就写下了这篇文章,希望能对大家有所帮助^_^
出处：http://blog.donews.com/ibenny/

瑞星卡卡安全论坛