求救弹出恶意广告网页218.204.253.144以及www.bestlm.net bbs.ikaka.com

sunsubway1 - 2006-7-23 21:21:00

附日志：

Logfile of HijackThis v1.99.1
Scan saved at 9:11:17 PM, on 7/23/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\ibmpmsvc.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINNT\system32\cba\pds.exe
C:\Program Files\iPass\iPassConnect\iPCAgent.exe
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\System32\QCONSVC.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\Suss.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\wltrysvc.exe
C:\WINNT\System32\bcmwltry.exe
C:\WINNT\system32\cba\xfr.exe
C:\WINNT\system32\MsgSys.EXE
C:\winnt\ECM4\Remote\CSIRemoteCSvc.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
C:\WINNT\system32\RunDll32.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\WINNT\system32\PRPCUI.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\ThinkPad\CONNEC~1\QCWLIcon.exe
C:\WINNT\svchost.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\iPass\iPassConnect\downloader\ipccheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Sony Ericsson\GC79 Manager\GC79 Manager.exe
C:\Program Files\HuaCi\huaci\zsearch.exe
C:\Documents and Settings\zhoum\Desktop\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {999ADFA2-8AD1-47ff-97FC-69FB847458F4} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: ?¨?¨é?í?°2è??úê? - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\kakatool.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [vptray] C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QCWLICON] C:\PROGRA~1\ThinkPad\CONNEC~1\QCWLIcon.exe
O4 - HKLM\..\Run: [svc] C:\WINNT\svchost.exe
O4 - HKLM\..\Run: [MoveSearch] C:\Program Files\HuaCi\huaci\zsearch.exe
O4 - HKCU\..\Run: [svc] C:\WINNT\svchost.exe
O4 - Startup: 划词搜索.lnk = C:\Program Files\HuaCi\huaci\zsearch.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O8 - Extra context menu item: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: 反向链接 - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: 类似网页 - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ap.cpchem.net
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = ap.cpchem.net
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = ap.cpchem.net
O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: Configuresoft ECM Remote Client (CSIRemoteC) - Configuresoft Inc. - C:\winnt\ECM4\Remote\CSIRemoteCSvc.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Unknown owner - C:\WINNT\system32\ibmpmsvc.exe
O23 - Service: Intel File Transfer - Intel? Corporation - C:\WINNT\system32\cba\xfr.exe
O23 - Service: Intel PDS - Intel? Corporation - C:\WINNT\system32\cba\pds.exe
O23 - Service: iPassConnectEngine - iPass - C:\Program Files\iPass\iPassConnect\iPassConnectEngine.exe
O23 - Service: iPCAgent - iPass, Inc. - C:\Program Files\iPass\iPassConnect\iPCAgent.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: QCONSVC - IBM Corp. - C:\WINNT\System32\QCONSVC.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINNT\System32\wltrysvc.exe

sunsubway1 - 2006-7-23 22:31:00

已经用hijackthis和killbox结合解决了。

我无邪 - 2006-7-23 22:51:00

再确定一下
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

sunsubway1 - 2006-7-24 7:27:00

好像还有弹出广告网页，这是日志，帮我看看：

2006-07-24,07:13:30

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- Administrative User - Completed Functions Allowed

Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations

Boot Items
Registry
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Synchronization Manager><mobsync.exe /logon> [Microsoft Corporation]
<vptray><C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe> [Symantec Corporation]
<ATIModeChange><Ati2mdxx.exe> [ATI Technologies, Inc.]
<EZEJMNAP><C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe> [Lenovo Group Limited]
<TPHOTKEY><C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe> []
<BMMGAG><RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor> [IBM Corp.]
<BMMLREF><C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE> []
<PRPCMonitor><PRPCUI.exe> [Intel Corporation]
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [Synaptics, Inc.]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [Synaptics, Inc.]
<QCWLICON><C:\PROGRA~1\ThinkPad\CONNEC~1\QCWLIcon.exe> [IBM Corp.]
<CdnCtr><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINNT\system32\Userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
<WinlogonNotify: NavLogon><C:\WINNT\system32\NavLogon.dll> []

==================================
Startup Folders
[Acrobat Assistant]
<C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk><N>

==================================
Services
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINNT\system32\Ati2evxx.exe><N/A>
[Configuresoft ECM Remote Client / CSIRemoteC]
<C:\winnt\ECM4\Remote\CSIRemoteCSvc.exe><Configuresoft Inc.>
[Cisco Systems, Inc. VPN Service / CVPND]
<c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe><Cisco Systems, Inc.>
[DefWatch / DefWatch]
<C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe><Symantec Corporation>
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[EvtEng / EvtEng]
<C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[ThinkPad PM Service / IBMPMSVC]
<C:\WINNT\system32\ibmpmsvc.exe><N/A>
[Intel File Transfer / Intel File Transfer]
<C:\WINNT\system32\cba\xfr.exe><Intel? Corporation>
[Intel PDS / Intel PDS]
<C:\WINNT\system32\cba\pds.exe><Intel? Corporation>
[iPassConnectEngine / iPassConnectEngine]
<C:\Program Files\iPass\iPassConnect\iPassConnectEngine.exe><iPass>
[iPCAgent / iPCAgent]
<C:\Program Files\iPass\iPassConnect\iPCAgent.exe><iPass, Inc.>
[Symantec AntiVirus Client / Norton AntiVirus Server]
<C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe><Symantec Corporation>
[QCONSVC / QCONSVC]
<System32\QCONSVC.EXE><IBM Corp.>
[RegSrvc / RegSrvc]
<C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Spectrum24 Event Monitor / S24EventMonitor]
<C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>
[WLTRYSVC / WLTRYSVC]
<C:\WINNT\System32\wltrysvc.exe C:\WINNT\System32\bcmwltry.exe><N/A>

==================================
Browser Add-ons
[Google Toolbar Helper]
{AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINNT\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Google 搜索(&G)]
<res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html, N/A>
[上传到QQ网络硬盘]
<C:\Pf20040930\Personal\it\Tencent\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
<C:\Pf20040930\Personal\it\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Pf20040930\Personal\it\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Pf20040930\Personal\it\Tencent\QQ\SendMMS.htm, N/A>

==================================
Running Processes
[PID: 220][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 244][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 240][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6997>
[C:\WINNT\system32\NavLogon.dll] <N/A><N/A>
[PID: 292][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.7035>
[C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 304][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.7011>
[PID: 420][C:\WINNT\system32\ibmpmsvc.exe] <N/A><N/A>
[PID: 472][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 496][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 83>
[PID: 528][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe] <Intel Corporation ><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 83>
[PID: 564][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 664][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059>
[C:\WINNT\system32\pdfports.dll] <Adobe Systems Incorporated.><5.0.000>
[C:\Program Files\Adobe\Acrobat 5.0\Distillr\adistres.dll] <N/A><N/A>
[PID: 724][c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe] <Cisco Systems, Inc.><4.0 (Rel)>
[C:\WINNT\system32\vsdata.dll] <Zone Labs Inc.><3.7.078.001>
[PID: 760][C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe] <Symantec Corporation><8.00.01.425>
[PID: 796][C:\WINNT\system32\cba\pds.exe] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[C:\WINNT\system32\CSL.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\CSSM32s.dll] <Intel Corporation><1, 1, 2, 3>
[PID: 852][C:\Program Files\iPass\iPassConnect\iPCAgent.exe] <iPass, Inc.><3, 35, 0, 0>
[PID: 896][C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe] <Symantec Corporation><8.00.01.425>
[C:\WINNT\system32\CBA.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\MsgSys.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVLU.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\i2ldvp3.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAPI32.DLL] <Symantec Corp.><4.1.0.22>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060719.024\NAVEX32a.DLL] <Symantec Corporation><20061.1.0.14>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060719.024\NAVENG32.DLL] <Symantec Corporation><20061.1.0.14>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAP32.DLL] <Symantec Corporation><9.0.0.15>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NotesExt.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vpmsece.dll] <Symantec Corporation><8.00.01.425>
[C:\WINNT\system32\amslib.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[PID: 928][C:\WINNT\System32\QCONSVC.EXE] <IBM Corp.><3, 7, 1, 0>
[PID: 968][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe] <Intel Corporation><9, 0, 1, 83>
[PID: 1028][C:\WINNT\system32\regsvc.exe] <Microsoft Corporation><5.00.2195.6701>
[PID: 1040][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6972>
[PID: 1104][C:\WINNT\system32\Suss.exe] <Microsoft Corporation><5.00.2195.2097>
[PID: 1048][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 1180][C:\WINNT\System32\wltrysvc.exe] <N/A><N/A>
[PID: 1200][C:\WINNT\System32\bcmwltry.exe] <Sony Ericsson Mobile Communications AB><3.31.19.0>
[PID: 1216][C:\WINNT\system32\cba\xfr.exe] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[C:\WINNT\system32\cbaxfr.dll] <Intel? Corporation><6.12.0.103 E>

sunsubway1 - 2006-7-24 7:27:00

[C:\WINNT\system32\MsgSys.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\CSL.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\CSSM32s.dll] <Intel Corporation><1, 1, 2, 3>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.103 E>
[PID: 1244][C:\WINNT\system32\MsgSys.EXE] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\CBA.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\MsgSys.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTSU2T.DLL] <Intel Corporation><6.12.0.0000 E>
[PID: 1256][C:\winnt\ECM4\Remote\CSIRemoteCSvc.exe] <Configuresoft Inc.><1.2.0.1020>
[C:\winnt\ECM4\Remote\CSIRemoteC.dll] <Configuresoft Inc><1.07.1056>
[PID: 1384][C:\WINNT\system32\WBEM\unsecapp.exe] <Microsoft Corporation><1.50.1085.0007>
[PID: 1596][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690>
[C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll] <IBM Corp.><1, 0, 0, 0>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINNT\system32\PDFShell.dll] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\WINNT\system32\hccutils.DLL] <Intel Corporation><3.0.0.3984>
[C:\WINNT\system32\igfxres.dll] <Intel Corporation><3.0.0.3984>
[C:\WINNT\system32\igfxress.dll] <Intel Corporation><3.0.0.3984>
[C:\WINNT\system32\BCMWLCPL.CPL] <Sony Ericsson Mobile Communications AB><3.31.19.0>
[C:\WINNT\system32\igfxcpl.cpl] <Intel Corporation><3.0.0.3984>
[C:\Program Files\WINZIP\WZSHLSTB.DLL] <WinZip Computing, Inc.><4.1 (32-bit)>
[C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL] <N/A><N/A>
[C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll] <Symantec Corporation><8.00.01.425>
[C:\WINNT\system32\igfxpph.dll] <Intel Corporation><3.0.0.3984>
[PID: 1768][C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Cliproxy.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Cliscan.dll] <Symantec Corporation><8.00.01.425>
[PID: 1800][C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe] <Lenovo Group Limited><1, 0, 0, 0>
[C:\PROGRA~1\ThinkPad\UTILIT~1\SC\EzMApRes.dll] <N/A><N/A>
[PID: 920][C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe] <N/A><N/A>
[C:\Program Files\Lenovo\PkgMgr\HOTKEY_2\tphk_2k.dll] <N/A><N/A>
[C:\WINNT\system32\Oemdspif.dll] <Intel Corporation><3.0.0.3984>
[C:\WINNT\system32\igfxdev.dll] <Intel Corporation><3.0.0.3984>
[PID: 1828][C:\WINNT\system32\RunDll32.exe] <Microsoft Corporation><5.00.2134.1>
[C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll] <IBM Corp.><1, 0, 0, 0>
[C:\PROGRA~1\ThinkPad\UTILIT~1\tppwrw32.dll] <IBM Corp.><1, 0, 0, 0>
[C:\WINNT\system32\PRPCUI.DLL] <Intel Corporation><3.0.0.0>
[PID: 1852][C:\WINNT\system32\PRPCUI.exe] <Intel Corporation><3.0.0.0>
[C:\WINNT\system32\PRPCUI.dll] <Intel Corporation><3.0.0.0>
[C:\WINNT\system32\PRPCLANG.DLL] <Intel Corp.><2.0.0.0>
[PID: 1860][C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe] <N/A><N/A>
[PID: 1876][C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe] <IBM Corporation><1.15>
[PID: 1892][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[PID: 1916][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINNT\system32\SynCOM.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINNT\system32\SynTPAPI.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[PID: 1840][C:\PROGRA~1\ThinkPad\CONNEC~1\QCWLIcon.exe] <IBM Corp.><3, 7, 1, 0>
[C:\PROGRA~1\ThinkPad\CONNEC~1\QCON.dll] <IBM Corp.><3, 7, 1, 0>
[C:\PROGRA~1\ThinkPad\CONNEC~1\MerlinC201.dll] <Novatel Wireless Inc.><1, 0, 0, 1>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\PROGRA~1\ThinkPad\CONNEC~1\Res\SC\IconRes.dll] <N/A><N/A>
[PID: 1936][C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe] <Adobe Systems Inc.><5, 0, 0, 0>
[PID: 1952][C:\Program Files\HuaCi\huaci\ZsUp.exe] <><1, 0, 0, 1>
[PID: 2056][C:\Program Files\iPass\iPassConnect\downloader\ipccheck.exe] <iPass Inc><3.35.0.0>
[C:\Program Files\iPass\iPassConnect\downloader\LIBEAY32.dll] <N/A><N/A>
[PID: 832][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINNT\system32\kakatool.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 28>
[c:\program files\google\googletoolbar2.dll] <Google Inc.><3, 0, 131, 0>
[C:\WINNT\system32\PDFShell.dll] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\WINNT\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[C:\WINNT\system32\Macromed\Common\SwSupport.dll] <Macromedia, Inc.><8.5.1r102>
[PID: 512][C:\WINNT\system32\conime.exe] <Microsoft Corporation><5.00.2195.6655>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[PID: 904][C:\Program Files\Sony Ericsson\GC79 Manager\GC79 Manager.exe] <Sony Ericsson><1, 1, 0, 939>
[C:\Program Files\Sony Ericsson\GC79 Manager\GC75_RC.DLL] <Sony Ericsson><1, 1, 0, 939>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[PID: 816][C:\Program Files\Windows Media Player\wmplayer.exe] <Microsoft Corporation><9.00.00.2980>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINNT\system32\quartz.dll] <N/A><N/A>
[C:\WINNT\system32\msdmo.dll] <N/A><N/A>
[C:\WINNT\system32\l3codeca.acm] <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
[C:\WINNT\system32\devenum.dll] <N/A><N/A>
[PID: 1544][C:\Pf20040930\Personal\it\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINNT\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\Pf20040930\Personal\it\SREng2\Plugins\SREngPluginDemo.SRE] <Smallfrogs Studio><1, 1, 1, 0>

==================================
File Associations
.TXT Error. [NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. [hh.exe %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [notepad.exe %1]
.INF Error. [notepad.exe %1]
.VBS Error. [wscript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider

==================================

瑞星卡卡安全论坛