我的瑞星不能用了，删除不了，也安装不上5555555555555 bbs.ikaka.com

冷月儿 - 2006-8-6 12:14:00

今早打开电脑，没想到开机几秒电影就黑屏，然后好多英文，重启了两次才好了。我以为是中了病毒，赶紧把瑞星给升级了，结果升完了，我的小绿伞再也打不开了，还成了小红伞……唉，现在怎么办，想删了再装也不行了，哪位高人能指点一下，小妹万分感激

以下是我在安装过程中看到的日志：：
2005-12-18 12:38:06:225 SaveConfig...
2005-12-18 12:38:06:486 PatchConfig c:\program files\rising\rav\update\Rav.cfi...
2005-12-18 12:38:06:576 PatchConfig c:\program files\rising\rav\update\RavIn_ST.cfi...
2005-12-18 12:38:06:576 SaveConfig OK
2005-12-18 12:38:09:700 Install RSCENTER R=0
2005-12-18 12:38:09:780 Install RAVTIMER R=0
2005-12-18 12:38:15:128 Install RSENGINE R=0
2005-12-18 12:38:15:519 Install RSCOMMON R=0
2005-12-18 12:38:15:699 Install RSMFC R=0
2005-12-18 12:38:15:909 Install RSGUI R=0
2005-12-18 12:38:15:959 Install SCANNER R=0
2005-12-18 12:38:17:261 Install RSSETUP R=0
2005-12-18 12:38:18:603 Install RSRAV R=0
2005-12-18 12:38:18:883 Install LOGORAV R=0
2005-12-18 12:38:19:024 Install RSCONFIG R=0
2005-12-18 12:38:19:134 Install VIRUSLOG R=0
2005-12-18 12:38:19:294 Install MENUEXT R=0
2005-12-18 12:38:19:304 Install CFIRAV R=0
2005-12-18 12:38:19:695 Install BDENGINE R=0
2005-12-18 12:38:19:865 Install FWBASE2K R=0
2005-12-18 12:38:19:885 Install FWBASENT R=0
2005-12-18 12:38:20:015 Install CRAVSTUB R=0
2005-12-18 12:38:20:065 Install MONFILE R=0
2005-12-18 12:38:20:275 Install MONMAIL R=0
2005-12-18 12:38:21:297 Install MONMEMO R=0
2005-12-18 12:38:21:918 Install MONREG R=0
2005-12-18 12:38:22:509 Install MONLEAK R=0
2005-12-18 12:38:22:659 Install MONWEB R=0
2005-12-18 12:38:23:300 Install MCENTER R=0
2005-12-18 12:38:23:640 Install RSPLUGIN R=0
2005-12-18 12:38:23:750 Install INBUILD R=0
2005-12-18 12:38:23:760 Install PLUGGROUP R=0
2005-12-18 12:38:24:111 Install RSSTORE R=0
2005-12-18 12:38:24:511 Install SCANBD R=0
2005-12-18 12:38:24:882 Install RSHDBACK R=0
2005-12-18 12:38:25:142 Install BACKRAV R=0
2005-12-18 12:38:25:463 Install RAVUSB R=0
2005-12-18 12:38:26:204 Install REGGUIDE R=0
2005-12-18 12:38:28:197 Install RSREGRPR R=0
2005-12-18 12:38:28:227 Install VIRSBASE R=0
2005-12-18 12:38:28:257 Install RSVPATCH R=0
2005-12-18 12:38:28:267 Install VIRUSREP R=0
2005-12-18 12:38:28:517 Install RSLAGENG R=0
2005-12-18 12:38:29:148 Install RSLAGCHS R=0
2005-12-18 12:38:29:348 Install RSLAGCHT R=0
2005-12-18 12:38:29:419 Install RSLAGJPN R=0
2005-12-18 12:38:30:140 Install RSSKIN1 R=0
2005-12-18 12:38:30:310 Install RSSKIN2 R=0
2005-12-18 12:38:30:530 Install RSSKIN3 R=0
2005-12-18 12:38:30:580 Install RSWEB R=0
2005-12-18 12:38:50:799 TailSetup RSCENTER 1 R=1
2005-12-18 12:38:50:799 TailSetup RAVTIMER 1 R=0
2005-12-18 12:38:50:809 TailSetup RSENGINE 1 R=0
2005-12-18 12:38:50:809 TailSetup RSCOMMON 1 R=0
2005-12-18 12:38:50:809 TailSetup RSMFC 1 R=0
2005-12-18 12:38:50:819 TailSetup RSGUI 1 R=0
2005-12-18 12:38:50:819 TailSetup SCANNER 1 R=0
2005-12-18 12:38:50:829 TailSetup RSSETUP 1 R=0
2005-12-18 12:38:50:829 TailSetup RSRAV 1 R=0
2005-12-18 12:38:50:839 TailSetup LOGORAV 1 R=0
2005-12-18 12:38:50:839 TailSetup RSCONFIG 1 R=0
2005-12-18 12:38:50:919 TailSetup VIRUSLOG 1 R=0
2005-12-18 12:38:50:919 TailSetup MENUEXT 1 R=0
2005-12-18 12:38:50:929 TailSetup CFIRAV 1 R=0
2005-12-18 12:38:50:939 TailSetup BDENGINE 1 R=0
2005-12-18 12:38:50:990 TailSetup FWBASE2K 1 R=0
2005-12-18 12:38:51:000 TailSetup FWBASENT 1 R=0
2005-12-18 12:38:51:000 TailSetup CRAVSTUB 1 R=0
2005-12-18 12:38:51:010 TailSetup MONFILE 1 R=0
2005-12-18 12:38:51:010 TailSetup MONMAIL 1 R=0
2005-12-18 12:38:51:020 TailSetup MONMEMO 1 R=0
2005-12-18 12:38:51:020 TailSetup MONREG 1 R=0
2005-12-18 12:38:51:030 TailSetup MONLEAK 1 R=0
2005-12-18 12:38:51:070 TailSetup MONWEB 1 R=0
2005-12-18 12:40:05:497 TailSetup MCENTER 0 R=0
2005-12-18 12:40:05:507 TailSetup RSPLUGIN 1 R=0
2005-12-18 12:40:05:667 TailSetup INBUILD 1 R=0
2005-12-18 12:40:05:667 TailSetup PLUGGROUP 1 R=0
2005-12-18 12:40:05:677 TailSetup RSSTORE 1 R=0
2005-12-18 12:40:05:677 TailSetup SCANBD 1 R=0
2005-12-18 12:40:05:687 TailSetup RSHDBACK 1 R=0
2005-12-18 12:40:05:687 TailSetup BACKRAV 1 R=0
2005-12-18 12:40:05:697 TailSetup RAVUSB 1 R=0
2005-12-18 12:40:05:697 TailSetup REGGUIDE 1 R=0
2005-12-18 12:40:05:707 TailSetup RSREGRPR 1 R=0
2005-12-18 12:40:05:717 TailSetup VIRSBASE 1 R=0
2005-12-18 12:40:24:444 TailSetup RSVPATCH 1 R=0
2005-12-18 12:40:24:514 TailSetup VIRUSREP 1 R=0
2005-12-18 12:40:24:544 TailSetup RSLAGENG 1 R=0
2005-12-18 12:40:24:544 TailSetup RSLAGCHS 1 R=0
2005-12-18 12:40:24:554 TailSetup RSLAGCHT 1 R=0
2005-12-18 12:40:24:564 TailSetup RSLAGJPN 1 R=0
2005-12-18 12:40:24:564 TailSetup RSSKIN1 1 R=0
2005-12-18 12:40:24:564 TailSetup RSSKIN2 1 R=0
2005-12-18 12:40:24:574 TailSetup RSSKIN3 1 R=0
2005-12-18 12:40:24:584 TailSetup RSWEB 1 R=0
2005-12-18 12:40:32:345 RemoveUpFolder
2005-12-18 12:40:32:506 OnTailSetup
2005-12-18 12:40:34:428 UpdateVersionInfo
2005-12-18 12:40:34:448 CloseAllXP
2005-12-18 12:40:34:448 4 Result:1 Reboot:0
2005-12-18 12:40:34:448 OnMissionCompleted:1
2006-01-02 14:03:10:481 校验文件错误，继续安装吗?
2006-01-02 14:03:10:501 2 Result:0 Reboot:0
2006-01-02 14:03:10:902 PatchConfig c:\program files\rising\rav\update\Rav.cfi...
2006-01-02 14:03:11:082 PatchConfig c:\program files\rising\rav\update\RavIn_ST.cfi...
2006-01-02 14:03:54:986 TailUpdate RSENGINE 0 R=0
2006-01-02 14:03:55:006 TailUpdate VIRUSLOG 1 R=0
2006-01-02 14:03:55:026 TailUpdate MCENTER 1 R=0
2006-01-02 14:03:55:026 TailUpdate RAVUSB 0 R=0
2006-01-02 14:04:24:449 TailUpdate RSVPATCH 1 R=0
2006-01-02 14:04:24:469 TailUpdate VIRUSREP 0 R=0
2006-01-02 14:04:24:469 TailUpdate RSLAGJPN 0 R=0
2006-01-02 14:04:24:479 TailUpdate RSSKIN1 0 R=0
2006-01-02 14:04:24:479 TailUpdate RSSKIN2 0 R=0
2006-01-02 14:04:24:489 TailUpdate RSSKIN3 0 R=0
2006-01-02 14:04:33:452 RUN_PROCESS C:\Program Files\rising\Rav\RAVMON.EXE
2006-01-02 14:04:35:195 5 Result:1 Reboot:0
2006-01-02 14:04:35:205 OnMissionCompleted:1
2006-03-03 16:46:14:193 校验文件错误，继续安装吗?
2006-03-03 16:46:14:223 2 Result:0 Reboot:0
2006-03-03 16:46:14:834 PatchConfig c:\program files\rising\rav\update\Rav.cfi...
2006-03-03 16:46:14:934 PatchConfig c:\program files\rising\rav\update\RavIn_ST.cfi...
2006-03-03 16:46:43:726 TailUpdate RSENGINE 0 R=0
2006-03-03 16:47:13:328 TailUpdate RSVPATCH 1 R=0
2006-03-03 16:47:13:428 TailUpdate VIRUSREP 0 R=0
2006-03-03 16:47:15:562 RUN_PROCESS C:\Program Files\rising\Rav\RAV.EXE
2006-03-03 16:47:24:615 RUN_PROCESS C:\Program Files\rising\Rav\RAVMON.EXE
2006-03-03 16:47:26:297 5 Result:1 Reboot:0
2006-03-03 16:47:26:437 OnMissionCompleted:1
2006-03-20 14:02:24:900 校验文件错误，继续安装吗?
2006-03-20 14:02:24:920 2 Result:0 Reboot:0
2006-03-20 14:02:25:711 PatchConfig c:\program files\rising\rav\update\Rav.cfi...
2006-03-20 14:02:25:811 PatchConfig c:\program files\rising\rav\update\RavIn_ST.cfi...
2006-03-20 14:03:11:066 TailUpdate RSENGINE 0 R=0
2006-03-20 14:03:11:086 TailUpdate RSGUI 0 R=0
2006-03-20 14:03:11:096 TailUpdate RSSETUP 0 R=0
2006-03-20 14:03:11:096 TailUpdate RSRAV 0 R=0
2006-03-20 14:03:11:096 TailUpdate RSCONFIG 0 R=0
2006-03-20 14:03:11:457 TailUpdate BDENGINE 1 R=0
2006-03-20 14:03:11:467 TailUpdate MONMAIL 0 R=0
2006-03-20 14:03:11:467 TailUpdate MONMEMO 0 R=0
2006-03-20 14:03:11:487 TailUpdate MCENTER 1 R=0
2006-03-20 14:03:12:398 TailUpdate INBUILD 1 R=0
2006-03-20 14:03:12:438 TailUpdate SCANBD 1 R=0
2006-03-20 14:03:12:448 TailUpdate RAVUSB 0 R=0
2006-03-20 14:04:12:875 TailUpdate RSVPATCH 1 R=0
2006-03-20 14:04:13:977 TailUpdate VIRUSREP 0 R=0
2006-03-20 14:04:14:057 TailUpdate RSLAGCHS 0 R=0
2006-03-20 14:04:14:107 TailUpdate RSLAGCHT 0 R=0
2006-03-20 14:04:14:307 TailUpdate RSLAGJPN 0 R=0
2006-03-20 14:04:14:487 TailUpdate RSSKIN1 0 R=0
2006-03-20 14:04:14:517 TailUpdate RSSKIN2 0 R=0
2006-03-20 14:04:14:648 TailUpdate RSSKIN3 0 R=0
2006-03-20 14:04:18:213 RUN_PROCESS C:\Program Files\rising\Rav\RAVTASK.EXE
2006-03-20 14:04:26:745 RUN_PROCESS C:\Program Files\rising\Rav\RAVMON.EXE
2006-03-20 14:04:43:329 5 Result:1 Reboot:0
2006-03-20 14:04:44:170 OnMissionCompleted:1
2006-05-01 14:04:37:961 校验文件错误，继续安装吗?
2006-05-01 14:04:37:961 2 Result:0 Reboot:0
2006-05-01 14:04:38:662 PatchConfig c:\program files\rising\rav\update\Rav.cfi...
2006-05-01 14:04:38:892 PatchConfig c:\program files\rising\rav\update\RavIn_ST.cfi...
2006-05-01 14:04:59:382 OnMissionCompleted:0
2006-06-10 15:30:37:122 校验文件错误，继续安装吗?
2006-06-10 15:30:37:132 2 Result:2010781785 Reboot:0
2006-06-10 15:30:37:552 PatchConfig C:\PROGRAM FILES\RISING\RAV\Update\Rav.cfi...
2006-06-10 15:30:37:713 PatchConfig C:\PROGRAM FILES\RISING\RAV\Update\RavIn_ST.cfi...
2006-06-10 15:31:35:115 TailUpdate RSENGINE 0 R=0
2006-06-10 15:31:35:115 TailUpdate RSCOMMON 0 R=0
2006-06-10 15:31:35:115 TailUpdate RSGUI 0 R=0
2006-06-10 15:31:35:115 TailUpdate SCANNER 0 R=0
2006-06-10 15:31:35:115 TailUpdate RSSETUP 0 R=0
2006-06-10 15:31:35:115 TailUpdate RSRAV 0 R=0
2006-06-10 15:31:35:185 TailUpdate VIRUSLOG 1 R=0
2006-06-10 15:31:35:185 TailUpdate MENUEXT 0 R=0
2006-06-10 15:31:35:205 TailUpdate BDENGINE 1 R=0
2006-06-10 15:31:35:235 TailUpdate MCENTER 1 R=0
2006-06-10 15:31:35:235 TailUpdate MONMEMO 0 R=0
2006-06-10 15:31:35:235 TailUpdate MONREG 0 R=0
2006-06-10 15:31:35:235 TailUpdate BACKRAV 0 R=0
2006-06-10 15:32:37:495 TailUpdate RSVPATCH 1 R=0
2006-06-10 15:32:37:996 TailUpdate VIRUSREP 0 R=0
2006-06-10 15:32:38:036 TailUpdate RSLAGCHS 0 R=0
2006-06-10 15:32:38:036 TailUpdate RSLAGCHT 0 R=0
2006-06-10 15:32:41:050 RUN_PROCESS C:\Program Files\rising\Rav\RAVTASK.EXE
2006-06-10 15:32:42:702 RUN_PROCESS C:\Program Files\rising\Rav\RAV.EXE
2006-06-10 15:32:55:851 RUN_PROCESS C:\Program Files\rising\Rav\RAVMON.EXE
2006-06-10 15:32:59:467 5 Result:1 Reboot:0
2006-06-10 15:32:59:577 OnMissionCompleted:1
2006-07-24 14:06:59:455 校验文件错误，继续安装吗?
2006-07-24 14:06:59:455 2 Result:2010781785 Reboot:0
2006-07-24 14:07:00:467 PatchConfig C:\PROGRAM FILES\RISING\RAV\Update\Rav.cfi...

冷月儿 - 2006-8-6 12:14:00

2006-07-24 14:07:00:627 PatchConfig C:\PROGRAM FILES\RISING\RAV\Update\RavIn_ST.cfi...
2006-07-24 14:07:56:587 TailUpdate RSENGINE 0 R=0
2006-07-24 14:07:56:607 TailUpdate RSCOMMON 0 R=0
2006-07-24 14:07:56:607 TailUpdate RSSETUP 0 R=0
2006-07-24 14:07:56:607 TailUpdate RSRAV 0 R=0
2006-07-24 14:07:56:607 TailUpdate RSCONFIG 0 R=0
2006-07-24 14:07:56:627 TailUpdate VIRUSLOG 1 R=0
2006-07-24 14:07:56:627 TailUpdate MENUEXT 0 R=0
2006-07-24 14:07:56:687 TailUpdate BDENGINE 1 R=0
2006-07-24 14:07:56:978 TailUpdate MCENTER 1 R=0
2006-07-24 14:07:56:978 TailUpdate CRAVSTUB 0 R=0
2006-07-24 14:07:56:978 TailUpdate MONMEMO 0 R=0
2006-07-24 14:07:57:118 TailUpdate MONWEB 1 R=0
2006-07-24 14:07:57:118 TailUpdate RSPLUGIN 0 R=0
2006-07-24 14:07:57:979 TailUpdate INBUILD 1 R=0
2006-07-24 14:07:57:979 TailUpdate RSSTORE 0 R=0
2006-07-24 14:07:57:979 TailUpdate BACKRAV 0 R=0
2006-07-24 14:07:57:979 TailUpdate RSREGRPR 0 R=0
2006-07-24 14:09:25:385 TailUpdate RSVPATCH 1 R=0
2006-07-24 14:09:25:926 TailUpdate VIRUSREP 0 R=0
2006-07-24 14:09:26:026 TailUpdate RSLAGENG 0 R=0
2006-07-24 14:09:26:046 TailUpdate RSLAGCHS 0 R=0
2006-07-24 14:09:26:066 TailUpdate RSLAGCHT 0 R=0
2006-07-24 14:09:26:076 TailUpdate RSLAGJPN 0 R=0
2006-07-24 14:09:30:492 RUN_PROCESS C:\Program Files\rising\Rav\RAVTASK.EXE
2006-07-24 14:09:43:731 RUN_PROCESS C:\Program Files\rising\Rav\RAVMON.EXE
2006-07-24 14:09:49:069 5 Result:1 Reboot:0
2006-07-24 14:09:50:191 OnMissionCompleted:1
2006-08-06 10:28:14:346 校验文件错误，继续安装吗?
2006-08-06 10:28:14:356 2 Result:2010781785 Reboot:0
2006-08-06 10:28:15:417 PatchConfig C:\PROGRAM FILES\RISING\RAV\Update\Rav.cfi...
2006-08-06 10:28:16:529 PatchConfig C:\PROGRAM FILES\RISING\RAV\Update\RavIn_ST.cfi...
2006-08-06 10:33:35:157 5 Result:1 Reboot:1
2006-08-06 10:33:38:302 OnMissionCompleted:1
2006-08-06 10:43:03:576 PatchConfig C:\Program Files\rising\Rav\Update\Rav.cfi...
2006-08-06 10:43:04:057 PatchConfig C:\Program Files\rising\Rav\Update\RavIn_ST.cfi...
2006-08-06 10:43:04:948 CallProcess RAVMON.EXE+0 EXIT return -302
2006-08-06 10:43:19:940 CallProcess RAVTASK.EXE+0 EXIT return -302
2006-08-06 10:43:19:940 Stop RAVTIMER Fail
2006-08-06 10:43:19:940 Stop SCANNER Fail
2006-08-06 10:43:19:940 Stop RSRAV Fail
2006-08-06 10:43:19:950 Stop MCENTER Fail
2006-08-06 10:43:19:950 Stop MONNOTES Fail
2006-08-06 10:45:11:049 5 Result:1 Reboot:1
2006-08-06 10:45:11:119 OnMissionCompleted:1
2006-08-06 11:30:51:858 PatchConfig C:\Program Files\rising\Rav\Update\Rav.cfi...
2006-08-06 11:30:52:489 PatchConfig C:\Program Files\rising\Rav\Update\RavIn_ST.cfi...
2006-08-06 11:30:53:200 CallProcess RAVMON.EXE+0 EXIT return -302
2006-08-06 11:31:08:392 CallProcess RAVTASK.EXE+0 EXIT return -302
2006-08-06 11:31:08:392 Stop RAVTIMER Fail
2006-08-06 11:31:08:392 Stop SCANNER Fail
2006-08-06 11:31:08:402 Stop RSRAV Fail
2006-08-06 11:31:08:402 Stop MCENTER Fail
2006-08-06 11:31:08:402 Stop MONNOTES Fail
2006-08-06 11:32:53:723 5 Result:1 Reboot:1
2006-08-06 11:32:53:773 OnMissionCompleted:1
2006-08-06 11:47:47:812 3 Result:1 Reboot:0
2006-08-06 11:47:47:822 OnMissionCompleted:1
2006-08-06 11:55:53:791 3 Result:0 Reboot:0
2006-08-06 11:55:53:811 OnMissionCompleted:0
C:\Program Files\rising\Rav\Update\BWList.dll
C:\Program Files\rising\Rav\Update\Rav.exe
C:\Program Files\rising\Rav\Update\RavUIMsg.dll
C:\Program Files\rising\Rav\Update\ravui.dll
C:\Program Files\rising\Rav\Update\RsConfig.dll
C:\Program Files\rising\Rav\Update\RavQu.dll
C:\Program Files\rising\Rav\Update\CfgDll.dll
C:\Program Files\rising\Rav\Update\RsLogVw.exe
C:\Program Files\rising\Rav\Update\RavExt.dll
C:\Program Files\rising\Rav\Update\RavMon.exe
C:\Program Files\rising\Rav\Update\RavMonD.exe
C:\Program Files\rising\Rav\Update\RavStub.exe
C:\Program Files\rising\Rav\Update\HookWeb.dll
C:\Program Files\rising\Rav\Update\RavScrch.dll
C:\Program Files\rising\Rav\Update\RsMonWeb.dll
C:\Program Files\rising\Rav\Update\RsPlugIn.dll
C:\Program Files\rising\Rav\Update\InBuild.dll
C:\Program Files\rising\Rav\Update\RavStore.exe
C:\Program Files\rising\Rav\Update\RsStore.dll
C:\Program Files\rising\Rav\Update\BackRav.exe
C:\Program Files\rising\Rav\Update\RegClean.exe

冷月儿 - 2006-8-6 12:17:00

我没有搜搜，这几天也没用什么优化大师，昨天都很正常啊，到底怎么了……

我无邪 - 2006-8-6 12:19:00

瑞星的问题
你这样试试
开始——程序——瑞星杀毒软件——添加删除组件——修复
如果不行，请卸载瑞星，然后重启，重启后手动删除原瑞星安装目录。再重装瑞星。
但我感觉问题没那么简单
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

冷月儿 - 2006-8-6 12:26:00

谢谢3楼，我立马去下载了，请你看看我的注册表……
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<MSPY2002><rem C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC> []
<PHIME2002ASync><rem C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><rem C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> []
<CnsMin><rem Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32> [北京三七二一科技有限公司]
<Cmaudio><rem RunDll32 cmicnfg.cpl,CMICtrlWnd> []
<BigDogPath><rem C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera> []
<StormCodec_Helper><rem "D:\暴风影音龙卷风专用版 5.03.24\Storm Codec\StormSet.exe" /S /opti> []
<RavTask><"C:\Program Files\rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<wlzznet><rem C:\Program Files\wlzz\wlzz\网际蜘蛛.exe> []
<SECUPDATE><rem C:\Program Files\MySec\secupdateaan.exe -sv> []
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
<CnsMinEx.dll><regsvr32.exe /s > [Microsoft Corporation]
<3721C:\PROGRA~1\3721\alrex.dll977215><regsvr32 /s C:\PROGRA~1\3721\alrex.dll> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><KB75976M.LOG> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><C:\WINDOWS\downlo~1\CnsHook.dll> [北京三七二一科技有限公司]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<SysTrays><C:\WINDOWS\System32\DLMain.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002A><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<PHIME2002ASync><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<RealTray><; C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER> []

冷月儿 - 2006-8-6 12:27:00

==================================
启动文件夹
服务

==================================
浏览器加载项
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v14.dll, Thunder Networking Technologies,LTD>
[Google Toolbar Helper]
{AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[上网助手]
{BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\PROGRA~1\3721\Assist\asbar.dll, 3721>
[CnsHook Class]
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[bho Class]
{ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270} <C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll, 深圳世强软件开发部>
[手机短信]
{00000000-0000-0001-0001-596BAEDD1289} <http://sms.3721.com/ie/index.htm, N/A>
[新浪UC]
{2253922F-1B26-4C74-8B57-E3AEE748DBB8} <D:\UC\uc.exe, 北京新浪信息技术有限公司>
[Yahoo 1G电邮]
{507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.mail.yahoo.com/promo/rd1, N/A>
[寻宝乐趣多]
{59BC54A2-56B3-44a0-93E5-432D58746E26} <http://hot.3721.com/rd/shop_btn.htm, N/A>
[上网助手]
{5D73EE86-05F1-49ed-B850-E423120EC338} <http://assistant.3721.com/index.htm?fb=Cns, N/A>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\2005\QQ.EXE, N/A>
[易趣购物]
{DE60714F-AC17-427e-861A-FD60CBDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=1, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[]
{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://assistant.3721.com/security1.htm?fb=Cns, N/A>
[]
{FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://assistant.3721.com/clean1.htm?fb=Cns, N/A>
[上网助手]
{BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\PROGRA~1\3721\Assist\asbar.dll, 3721>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[PowerPlr Control]
{2354A44B-3CEB-4829-9940-545B03103538} <C:\WINDOWS\DOWNLO~1\PowerPlr.ocx, Powerise Digital>
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\System32\INPUTC~1.DLL, >
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[!搜一搜]
<res://C:\WINDOWS\downlo~1\CnsMinEx.dll/1003, N/A>
[&使用迅雷下载]
<D:\迅雷\geturl.htm, N/A>
[&使用迅雷下载全部链接]

冷月儿 - 2006-8-6 12:28:00

<D:\迅雷\getallurl.htm, N/A>
[Google 搜索(&G)]
<res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html, N/A>
[上传到QQ网络硬盘]
<E:\万能五笔\传美\qq\AddToNetDisk.htm, N/A>
[反向链接]
<res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html, N/A>
[添加到QQ自定义面板]
<E:\万能五笔\传美\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<E:\万能五笔\传美\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<E:\万能五笔\传美\qq\SendMMS.htm, N/A>
[类似网页]
<res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html, N/A>
[缓存的网页快照]
<res://c:\program files\google\GoogleToolbar2.dll/cmcache.html, N/A>
[翻译英文字词(&T)]
<res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html, N/A>

==================================
正在运行的进程
[PID: 540][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 596][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 620][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1557 (xpsp2_gdr.040517-1325)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[PID: 672][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 684][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 860][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 968][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 1124][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 1144][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 1440][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.1699 (xpsp2.050610-1533)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 1688][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 4>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><16, 0, 0, 4>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\PROGRA~1\3721\Assist\asbar.dll] <3721><1, 0, 1, 1008>
[C:\PROGRA~1\3721\Assist\tbwrap.dll] <3721><1, 0, 0, 2>
[C:\PROGRA~1\3721\Assist\asnoad.dll] <><1, 0, 0, 9>
[C:\PROGRA~1\3721\Assist\aswiper.dll] <3721><1, 0, 1, 1004>
[C:\PROGRA~1\3721\Assist\asiesec.dll] <yahoo><1, 0, 0, 9>
[C:\WINDOWS\System32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 4>
[C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 5>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\PROGRA~1\3721\alrex.dll] <><1, 0, 0, 1>
[D:\新建文件夹\WNMKEY.DLL] <深圳世强软件开发部 www.wnwb.com ><2005, 7, 5, 1>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\PROGRA~1\3721\assist\wiper.dll] <N/A><1, 0, 0, 1012>
[PID: 1880][C:\WINDOWS\System32\Rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 4>
[C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 5>
[C:\WINDOWS\downlo~1\CnsMinEx.dll] <国风因特软件(北京)有限公司><1, 0, 2, 4>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[PID: 884][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[PID: 1052][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 1188][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 1296][C:\WINDOWS\System32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[PID: 2900][C:\WINDOWS\System32\conime.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[PID: 3540][D:\新建文件夹\wnwb.exe] <深圳世强软件开发部 www.wnwb.com ><2005, 11, 19, 1>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[D:\新建文件夹\WNMKEY.DLL] <深圳世强软件开发部 www.wnwb.com ><2005, 7, 5, 1>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[PID: 2080][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\PROGRA~1\3721\autolive.dll] <><1, 1, 7, 1326>
[C:\PROGRA~1\3721\notifier.dll] <><1, 0, 0, 5>
[C:\PROGRA~1\3721\alLiveEx.dll] < ><1, 0, 3, 1006>
[PID: 2316][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\PROGRA~1\3721\scrblock.dll] <3721><1, 0, 1, 1000>
[C:\PROGRA~1\3721\alrex.dll] <><1, 0, 0, 1>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\downlo~1\CnsHint.dll] <3721><1, 0, 0, 4>
[C:\PROGRA~1\3721\autolive.dll] <><1, 1, 7, 1326>
[C:\PROGRA~1\3721\alLiveEx.dll] < ><1, 0, 3, 1006>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\WINDOWS\downlo~1\cnsplus.dll] <3721><1, 0, 0, 2>
[C:\PROGRA~1\3721\Assist\asbar.dll] <3721><1, 0, 1, 1008>
[C:\PROGRA~1\3721\Assist\tbwrap.dll] <3721><1, 0, 0, 2>
[C:\PROGRA~1\3721\Assist\asnoad.dll] <><1, 0, 0, 9>
[C:\PROGRA~1\3721\Assist\aswiper.dll] <3721><1, 0, 1, 1004>
[C:\PROGRA~1\3721\Assist\asiesec.dll] <yahoo><1, 0, 0, 9>
[c:\program files\google\googletoolbar2.dll] <Google Inc.><3, 0, 131, 0>
[C:\WINDOWS\System32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62>
[C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 4>
[C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll] <深圳世强软件开发部><2005, 8, 30, 1>
[C:\PROGRA~1\3721\Assist\eheocx.dll] <><9, 0, 0, 9>
[C:\PROGRA~1\3721\Assist\assist.dll] <><2, 0, 3, 3>
[D:\新建文件夹\WNMKEY.DLL] <深圳世强软件开发部 www.wnwb.com ><2005, 7, 5, 1>
[PID: 1644][E:\媒体播放\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\KB75976M.LOG] <N/A><N/A>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>

冷月儿 - 2006-8-6 12:28:00

=================================
文件关联
.TXT Error. [NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

冷月儿 - 2006-8-6 12:49:00

这么快就沉下去了呢

冷月儿 - 2006-8-6 13:17:00

这日志怎么看啊，大家帮帮忙啊

冷月儿 - 2006-8-6 16:57:00

我无邪你去哪了，贴子都沉入大了，看来还得靠自己！！！！！！！
下了橙色八月，居然杀了48个病毒，然后又重新下了个瑞星软件，安装上也杀了9个病毒，再照3楼的办法又调出日志给大家对比一下，看看现在是不是好了
2006-08-06,15:55:36

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<MSPY2002><rem C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC> []
<PHIME2002ASync><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> []
<CnsMin><rem Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32> [北京三七二一科技有限公司]
<Cmaudio><rem RunDll32 cmicnfg.cpl,CMICtrlWnd> []
<BigDogPath><rem C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera> []
<StormCodec_Helper><rem "D:\暴风影音龙卷风专用版 5.03.24\Storm Codec\StormSet.exe" /S /opti> []
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<wlzznet><rem C:\Program Files\wlzz\wlzz\网际蜘蛛.exe> []
<SECUPDATE><rem C:\Program Files\MySec\secupdateaan.exe -sv> []
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> []
<RealTray><; C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER> []
<RavTimer><C:\Program Files\rising\Rav\RavTimer.exe> [rising]
<RavMon><C:\Program Files\rising\Rav\RavMon.exe> [Beijing Rising Technology Co., Ltd.]
<rfw><C:\Program Files\rising\Rfw\Rfw.exe> [Beijing Rising Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
<RavMon><C:\Program Files\rising\Rav\RavMon.exe /AUTO> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><EXPLORER.EXE> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><KB75976M.LOG> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><C:\WINDOWS\downlo~1\CnsHook.dll> [北京三七二一科技有限公司]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<SysTrays><C:\WINDOWS\System32\DLMain.dll> []
<DVDBurn><C:\WINDOWS\Downloaded Program Files\AfxEdit.dll> []

==================================
启动文件夹
服务
[Rising Process Communication Center / RsCCenter]
<C:\Program Files\rising\rav\CCenter.exe><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

冷月儿 - 2006-8-6 16:58:00

==================================
浏览器加载项
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v14.dll, Thunder Networking Technologies,LTD>
[Google Toolbar Helper]
{AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[上网助手]
{BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\PROGRA~1\3721\Assist\asbar.dll, 3721>
[CnsHook Class]
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[bho Class]
{ED8DFC5C-10EF-45AB-9DC2-0639AFF5A270} <C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll, 深圳世强软件开发部>
[新浪UC]
{2253922F-1B26-4C74-8B57-E3AEE748DBB8} <D:\UC\uc.exe, 北京新浪信息技术有限公司>
[Yahoo 3.5G电邮]
{507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[寻宝乐趣多]
{59BC54A2-56B3-44a0-93E5-432D58746E26} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao, N/A>
[雅虎助手]
{5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\2005\QQ.EXE, N/A>
[易趣购物]
{DE60714F-AC17-427e-861A-FD60CBDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=1, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[]
{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[]
{FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[上网助手]
{BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\PROGRA~1\3721\Assist\asbar.dll, 3721>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[PowerPlr Control]
{2354A44B-3CEB-4829-9940-545B03103538} <C:\WINDOWS\DOWNLO~1\PowerPlr.ocx, Powerise Digital>
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\System32\INPUTC~1.DLL, >
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[&使用迅雷下载]
<D:\迅雷\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<D:\迅雷\getallurl.htm, N/A>
[Google 搜索(&G)]
<res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html, N/A>
[上传到QQ网络硬盘]
<E:\万能五笔\传美\qq\AddToNetDisk.htm, N/A>
[反向链接]
<res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html, N/A>
[添加到QQ自定义面板]
<E:\万能五笔\传美\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<E:\万能五笔\传美\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<E:\万能五笔\传美\qq\SendMMS.htm, N/A>

冷月儿 - 2006-8-6 16:59:00

[用QQ彩信发送该图片]
<E:\万能五笔\传美\qq\SendMMS.htm, N/A>
[类似网页]
<res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html, N/A>
[缓存的网页快照]
<res://c:\program files\google\GoogleToolbar2.dll/cmcache.html, N/A>
[翻译英文字词(&T)]
<res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html, N/A>

==================================
正在运行的进程
[PID: 540][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 596][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 620][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1557 (xpsp2_gdr.040517-1325)>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[PID: 664][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 676][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 836][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 936][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1040][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1116][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1136][C:\Program Files\rising\rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1164][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[C:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
[C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 14>
[C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
[C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1356][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.1699 (xpsp2.050610-1533)>
[PID: 1460][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1712][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 4>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 4>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\PROGRA~1\3721\alrex.dll] <><1, 0, 1, 1001>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\PROGRA~1\3721\autolive.dll] <><1, 1, 7, 1326>
[C:\PROGRA~1\3721\alLiveEx.dll] < ><1, 0, 3, 1006>
[C:\PROGRA~1\3721\Assist\asbar.dll] <3721><1, 0, 1, 1008>
[C:\PROGRA~1\3721\Assist\tbwrap.dll] <3721><1, 0, 0, 2>
[C:\PROGRA~1\3721\Assist\asnoad.dll] <><1, 0, 0, 9>
[C:\PROGRA~1\3721\Assist\aswiper.dll] <3721><1, 0, 1, 1004>
[C:\PROGRA~1\3721\Assist\asiesec.dll] <yahoo><1, 0, 0, 9>
[C:\WINDOWS\System32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62>
[C:\PROGRA~1\3721\assist\wiper.dll] <N/A><1, 0, 0, 1012>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 4>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 188][C:\WINDOWS\System32\Rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 4>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 4>
[C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 5>
[PID: 412][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 496][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 516][C:\WINDOWS\System32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 1856][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>

冷月儿 - 2006-8-6 16:59:00

[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 4>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\PROGRA~1\3721\autolive.dll] <><1, 1, 7, 1326>
[C:\PROGRA~1\3721\notifier.dll] <><1, 0, 0, 5>
[C:\PROGRA~1\3721\alLiveEx.dll] < ><1, 0, 3, 1006>
[PID: 1864][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 4>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[PID: 1888][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30>
[C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 4>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[PID: 2036][C:\Program Files\rising\Rfw\Rfw.exe] <Beijing Rising Technology Corporation Limited><2, 1, 0, 0>
[C:\Program Files\rising\Rfw\BmpFace.dll] <Beijing Rising Technology Corporation Limited><2, 1, 0, 0>
[C:\Program Files\rising\Rfw\rfw.dll] <Beijing Rising Technology Corporation Limited><2, 1, 0, 4>
[C:\Program Files\rising\Rfw\chn\rfw.lag] <Beijing Rising Technology Corporation Limited><2, 0, 0, 15>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 4>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[PID: 2044][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 4>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>
[PID: 168][E:\媒体播放\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\PROGRA~1\3721\helper.dll] <><1, 1, 0, 1325>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 4>
[C:\WINDOWS\System32\WNWBIO.IME] <深圳世强软件开发部 www.wnwb.com ><2005, 1, 31, 1>

==================================
文件关联
.TXT Error. [NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

瑞星卡卡安全论坛