gf1982 - 2006-8-27 16:05:00
标题:菜鸟求救!
各位大虾:
感谢您关注我的这份报告,小菜鸟急需您的帮助!
本扫描/诊断报告由 上网助手IE修复专家 生成
操作系统: Windows XP
IE版本号: 6.0.2800.1106
===============================================================
以下是我的扫描报告正文:
*** 扫描项列表 ***
下列条目被IE修复专家判断为危险:
下列条目被IE修复专家判断为有风险:
下列条目被IE修复专家判断为未知:
1.O02 - 浏览器辅助对象(BHO) - 无效的CLSID : _{4FCE0A2B-6D48-4B22-AD7A-1ACACABC0B38},,
安全等级:未知
2.O02 - 浏览器辅助对象(BHO) - ChajianHelper,ChajianHelper,
CLSID:{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}
相关文件:C:\WINDOWS\system32\sysreal32.dll
安全等级:未知
3.O02 - 浏览器辅助对象(BHO) - Shockwave Flash Object,Shockwave Flash Object,
CLSID:{14A21378-5BB1-4BC4-95D5-5D3F51527F6F}
相关文件:C:\WINDOWS\system32\smflash.ocx
安全等级:未知
4.O02 - 浏览器辅助对象(BHO) - MyIEHelper,,
CLSID:{16B770A0-0E87-4278-B748-2460D64A8386}
相关文件:(文件不存在)(隐藏)(系统)C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IEHelper\IEHelper2006815_.dll
安全等级:未知
5.O02 - 浏览器辅助对象(BHO) - FltSetUp,,
CLSID:{1D49D58D-5C84-4B50-8359-D9809BEB2B32}
相关文件:(文件不存在)(隐藏)(系统)C:\Program Files\Internet Explorer\Connection Wizard\icwuti1.dll
安全等级:未知
6.O02 - 浏览器辅助对象(BHO) - CaiShowBH,,
CLSID:{3AF40CB8-B3BA-4E2D-8968-4BF8DB172997}
相关文件:(文件不存在)(隐藏)(系统)C:\Program Files\CaiShow Tech\CaiShow\BrowerHelper.dll
安全等级:未知
7.O02 - 浏览器辅助对象(BHO) - NetAccelerate,NetAccelerate,
CLSID:{5673A7C0-95CC-4646-BB07-3BD71234CEF9}
相关文件:C:\WINDOWS\system32\wuwebex.dll
安全等级:未知
8.O02 - 浏览器辅助对象(BHO) - IEYHlprObj,IEYHlprObj,
CLSID:{5C761D09-377E-4EAC-ADA1-C9CDE39B5674}
相关文件:C:\WINDOWS\IEYHelper.dll
安全等级:未知
9.O02 - 浏览器辅助对象(BHO) - JMX.JmxCenter,JMX.JmxCenter,
CLSID:{63859236-76BF-493C-A587-DF479EBA2D4B}
相关文件:C:\WINDOWS\system32\EJMX.dll
安全等级:未知
10.O02 - 浏览器辅助对象(BHO) - Thunder Browser Helper,Thunder Browser Helper,
CLSID:{889D2FEB-5411-4565-8998-1DD2C5261283}
相关文件:C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll
安全等级:未知
11.O02 - 浏览器辅助对象(BHO) - estAliveObj,estAliveObj,
CLSID:{A2B7A0F0-B697-4A71-8D91-43443F57D7BB}
相关文件:C:\WINDOWS\estAlive.dll
安全等级:未知
12.O02 - 浏览器辅助对象(BHO) - IEHlprObj,,
CLSID:{D424FE4E-CAF9-4fdd-BC5F-E6E6B91D53BF}
相关文件:(文件不存在)(隐藏)(系统)C:\Progra~1\NetMeeting\conf.dll
安全等级:未知
13.O04 - 自动运行项(Run) - 威盛公司的相关产品。,,
相关文件:(文件不存在)(隐藏)(系统)rem VTTimer.exe
内容:rem VTTimer.exe
安全等级:未知
14.O04 - 自动运行项(Run) - Network Associates公司出品的计算机错误报告信息服务相关程序。,Network Associates公司出品的计算机错误报告信息服务相关程序。,
相关文件:C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
内容:"C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
安全等级:未知
15.O08 - IE右键菜单 - 添加到QQ自定义面板,,
相关文件:(文件不存在)(隐藏)(系统)C:\Program Files\Tencent\QQ\AddPanel.htm
安全等级:未知
16.O08 - IE右键菜单 - 添加到QQ表情,,
相关文件:(文件不存在)(隐藏)(系统)C:\Program Files\Tencent\QQ\AddEmotion.htm
安全等级:未知
17.O08 - IE右键菜单 - 用QQ彩信发送该图片,,
相关文件:(文件不存在)(隐藏)(系统)C:\Program Files\Tencent\QQ\SendMMS.htm
安全等级:未知
18.O09 - IE菜单项和工具栏按钮 - The AskYaya VerticalBar,The AskYaya VerticalBar,
相关文件:C:\WINDOWS\YayaBands.dll
安全等级:未知
19.O09 - IE菜单项和工具栏按钮 - 腾讯QQ,,
相关文件:(文件不存在)(隐藏)(系统)C:\Program Files\Tencent\QQ\QQ.EXE
安全等级:未知
20.O16 - 下载的ActiveX插件 - Rising Web Scan Object,Rising Web Scan Object,
CLSID:{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153}
相关文件:C:\WINDOWS\Downloaded Program Files\OL2005.dll
网页路径:http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
安全等级:未知
21.O27 - 文件执行挂钩 - fileaps,,
CLSID:{914B076F-8FC6-4452-93C8-D810062C81F9}
相关文件:C:\WINDOWS\system32\fileap.dll
安全等级:未知
22.O36 - Gina系统登陆程序 - rpcfap.dll,,
内容:rpcfap.dll
安全等级:未知
下列条目被IE修复专家判断为安全:
23.R03 - 搜索挂接 - 上网助手2005,上网助手2005,
CLSID:{BB936323-19FA-4521-BA29-ECA6A121BC78}
相关文件:C:\Program Files\3721\assist\asbar.dll
内容:coolbar
安全等级:安全
24.O02 - 浏览器辅助对象(BHO) - 上网助手2005,上网助手2005,
CLSID:{BB936323-19FA-4521-BA29-ECA6A121BC78}
相关文件:C:\Program Files\3721\assist\asbar.dll
安全等级:安全
25.O03 - IE第三方工具条 - 上网助手2005,上网助手2005,
CLSID:{BB936323-19FA-4521-BA29-ECA6A121BC78}
相关文件:C:\Program Files\3721\assist\asbar.dll
内容:上网助手
安全等级:安全
26.O04 - 自动运行项(Run) - 微软智能输入法2002A(动态),微软智能输入法2002A(动态),
相关文件:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
内容:C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
安全等级:安全
27.O04 - 自动运行项(Run) - 微软智能输入法2002A(名称),微软智能输入法2002A(名称),
相关文件:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
内容:C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
安全等级:安全
28.O04 - 自动运行项(Run) - 天网个人防火墙,天网个人防火墙,
相关文件:C:\Program Files\SkyNet\Firewall\PFW.exe
内容:C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
安全等级:安全
29.O04 - 自动运行项(Run) - McAfee软件升级程序,McAfee软件升级程序,
相关文件:C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe /StartedFromRunKey
内容:"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
安全等级:安全
30.O04 - 自动运行项(Run) - 杀毒软件,杀毒软件,
相关文件:C:\Program Files\Network Associates\VirusScan\shstat.exe /STANDALONE
内容:"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
安全等级:安全
31.O04 - 自动运行项(Run) - Windows Messenger即时通讯工具,Windows Messenger即时通讯工具,
相关文件:(文件不存在)(隐藏)(系统)rem "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
内容:rem "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
安全等级:安全
32.O08 - IE右键菜单 - &使用迅雷下载,,
相关文件:C:\Program Files\Thunder Network\Thunder\Program\geturl.htm
安全等级:安全
33.O08 - IE右键菜单 - &使用迅雷下载全部链接,,
相关文件:C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
安全等级:安全
34.O09 - IE菜单项和工具栏按钮 - 电台,电台,
相关文件:C:\WINDOWS\Web\related.htm
安全等级:安全
35.O12 - IE插件扩展 - AcroBat Reader 插件,AcroBat Reader 插件,
相关文件:C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
安全等级:安全
36.O16 - 下载的ActiveX插件 - Windows升级工具V5,Windows升级工具V5,
CLSID:{6414512B-B978-451D-A0D8-FCFDF33E833C}
相关文件:C:\WINDOWS\system32\wuweb.dll
网页路径:http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1154240944781
安全等级:安全
37.O18 - 网络协议处理器 - MSN 相关,MSN 相关,
CLSID:{828030A1-22C1-4009-854F-8E305202313F}
相关文件:C:\Program Files\MSN Messenger\msgrapp.dll
安全等级:安全
38.O21 - 自启动项SSODL - 管理托盘图标对象的程序,管理托盘图标对象的程序,
CLSID:{35CEC8A3-2BE6-11D2-8773-92E220524153}
相关文件:C:\WINDOWS\system32\stobject.dll
内容:{35CEC8A3-2BE6-11D2-8773-92E220524153}
安全等级:安全
39.O31 - 浏览栏区对象 - 每日提示,每日提示,
CLSID:{4D5C8C25-D075-11d0-B416-00C04FB90376}
相关文件:C:\WINDOWS\system32\SHDOCVW.DLL
安全等级:安全
40.O31 - 浏览栏区对象 - 媒体区,媒体区,
CLSID:{32683183-48a0-441b-a342-7c2a440a9478}
相关文件:C:\WINDOWS\system32\BROWSEUI.DLL
安全等级:安全
41.O31 - 浏览栏区对象 - 收藏区,收藏区,
CLSID:{EFA24E61-B078-11D0-89E4-00C04FC9E26E}
相关文件:C:\WINDOWS\system32\SHDOCVW.DLL
安全等级:安全
我无邪 - 2006-8-27 16:09:00
下载超级兔子,专业卸载。
http://www.pctutu.com/news.asp?id=92
安装好后,打开“winspeed”“专业卸载,卸载所有提示的垃圾软件,卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载。
卸载完后重启。
请下载 System Repair Engineer,使用“智能扫描”,按下“扫描”按钮进行扫描,扫描完成后按下“保存报告”按钮保存报告日志文件(SREng.LOG),把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完,分次粘完,请不要修改。
gf1982 - 2006-8-27 16:15:00
你好!能告诉我这个是什么意思吗?谢谢谢谢!
gf1982 - 2006-8-27 16:43:00
System Repair Engineer这个软件在
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
网站的第个能找到啊,谢谢谢谢!
gf1982 - 2006-8-27 16:56:00
006-08-27,16:46:16
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中:
所有的启动项目(包括注册表、启动文件夹、服务等)
浏览器加载项
正在运行的进程(包括进程模块信息)
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<msnmsgr><rem "C:\Program Files\MSN Messenger\msnmsgr.exe" /background> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<SKYNET Personal FireWall><C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe> [广州众达天网技术有限公司]
<VTTimer><rem VTTimer.exe> []
<McAfeeUpdaterUI><"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey> [Network Associates, Inc.]
<Network Associates Error Reporting Service><"C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"> [Network Associates, Inc.]
<ShStatEXE><"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE> [Network Associates, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
<Super Rabbit Winspeed><"C:\DOCUME~1\abc\LOCALS~1\Temp\Rar$EX00.062\winspeed.exe" /autokill:152,136> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\System32\Userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<GinaDLL><rpcfap.dll> []
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{914B076F-8FC6-4452-93C8-D810062C81F9}><C:\WINDOWS\System32\fileap.dll> []
==================================
启动文件夹
服务
[Autodesk Licensing Service / Autodesk Licensing Service]
<"C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe"><Autodesk>
[Background Intelligent Transfer Services / BITS32]
<2 - 系统找不到指定的文件。
><N/A>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
<C:\WINDOWS\System32\drivers\CDAC11BA.EXE><Macrovision>
[LexBce Server / LexBceS]
<C:\WINDOWS\system32\LEXBCES.EXE><Lexmark International, Inc.>
[McAfee Framework 服务 / McAfeeFramework]
<C:\Program Files\Network Associates\Common Framework\FrameworkService.exe /ServiceStart><Network Associates, Inc.>
[Network Associates McShield / McShield]
<"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"><Network Associates, Inc.>
[Network Associates Task Manager / McTaskManager]
<"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"><Network Associates, Inc.>
[DNS SystemServices / RpcSs32]
<2 - 系统找不到指定的文件。
><N/A>
==================================
浏览器加载项
[MyIEHelper Class]
{16B770A0-0E87-4278-B748-2460D64A8386} <C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IEHelper\IEHelper2006815_.dll, N/A>
[比较购物搜索(&C)]
{A36ABCF0-1C8F-46e7-A67C-0489DC21B9CC} <C:\WINDOWS\YayaBands.dll, Eastday Corporation>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, N/A>
[哇哇网址导航]
{f15c22ef-534e-414d-ab5d-1425cd806e41} <http://www.51viva.com/dlplugin/redirect.jsp?refer=dtoolbar&cur=http://114.yesky.com/, N/A>
[哇哇软件下载]
{f15c22ef-534e-414d-ab5d-1425cd806e42} <http://www.51viva.com/dlplugin/redirect.jsp?refer=dtoolbar&cur=http://www.mydown.com/, N/A>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\System32\wuweb.dll, Microsoft Corporation>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
gf1982 - 2006-8-27 16:57:00
正在运行的进程
[PID: 540][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 612][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 636][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\system32\rpcfap.dll] <><3, 0, 5, 1>
[PID: 680][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[PID: 692][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[PID: 872][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[PID: 972][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[PID: 1176][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[PID: 1188][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[PID: 1332][C:\WINDOWS\system32\LEXBCES.EXE] <Lexmark International, Inc.><8.16>
[C:\WINDOWS\system32\lexp2p32.dll] <Lexmark International, Inc.><8.16>
[C:\WINDOWS\system32\lex2kusb.dll] <Lexmark International, Inc.><8.16>
[PID: 1368][C:\WINDOWS\system32\LEXPPS.EXE] <Lexmark International, Inc.><8.16>
[C:\WINDOWS\system32\LEXBCE.DLL] <Lexmark International, Inc.><8.16>
[PID: 1376][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.1699 (xpsp2.050610-1533)>
[C:\WINDOWS\system32\CNMLM4s.DLL] <CANON INC.><1.63.2.9>
[C:\WINDOWS\system32\LEXLMPM.DLL] <Lexmark International, Inc.><8.16>
[C:\WINDOWS\system32\LexBce.dll] <Lexmark International, Inc.><8.16>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD4s.DLL] <CANON INC.><1.63.2.9>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LGBCPP5C.dll] <Lenovo><1.0.3.0>
[C:\WINDOWS\system32\LGBCpwr.dll] <Lenovo><1, 0, 1, 0>
[PID: 1872][C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe] <广州众达天网技术有限公司><2.7.7.1004>
[C:\PROGRA~1\SKYNET\FIREWALL\SKYMISC.DLL] <N/A><N/A>
[C:\PROGRA~1\SKYNET\FIREWALL\COMPRESSWRAP.DLL] <N/A><N/A>
[PID: 1884][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\nailog.dll] <Network Associates, Inc.><3.5.0.474>
[C:\Program Files\Network Associates\Common Framework\naCmnLib.dll] <Network Associates, Inc.><3.5.0.474>
[C:\Program Files\Network Associates\Common Framework\naXML.dll] <Network Associates, Inc.><3.5.0.474>
[C:\Program Files\Network Associates\Common Framework\0804\UpdRes.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\0804\AgentRes.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] <Network Associates, Inc.><3.5.0.412>
[PID: 1892][C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe] <Network Associates, Inc.><2.0.275.0>
[PID: 1900][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\naiwmain.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\shstat.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\Product.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\McShield.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Network Associates\VirusScan\RES04\Shutilrc.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\Graphics.dll] <Network Associates, Inc.><8.0.0.912>
[PID: 2016][C:\WINDOWS\System32\drivers\CDAC11BA.EXE] <Macrovision><4.20.020>
[PID: 164][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\nailog.dll] <Network Associates, Inc.><3.5.0.474>
[C:\Program Files\Network Associates\Common Framework\naXML.dll] <Network Associates, Inc.><3.5.0.474>
[C:\Program Files\Network Associates\Common Framework\naCmnLib.dll] <Network Associates, Inc.><3.5.0.474>
[C:\Program Files\Network Associates\Common Framework\applib.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\0804\AgentRes.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\Logging.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\InternetManager.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\naInet.dll] <Network Associates, Inc.><3.5.0.474>
[C:\Program Files\Network Associates\Common Framework\UserSpace.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\Management.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\cmalib.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\naPolicyManager.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\Scheduler.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\TCSubSys.dll] <Network Associates, Inc.><3.5.0.412>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[PID: 196][C:\Program Files\Network Associates\VirusScan\Mcshield.exe] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Network Associates\VirusScan\Res04\McShield.DLL] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Network Associates\VirusScan\FTL.Dll] <Network Associates, Inc.><8.0.0.133>
[C:\Program Files\Network Associates\VirusScan\naiann.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Network Associates\VirusScan\mytilus.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\VirusScan\NaEventU.DLL] <Network Associates, Inc.><8.0.0.342>
[C:\Program Files\Network Associates\VirusScan\Res04\naEvtRes.dll] <Network Associates, Inc.><8.0.0.342>
[C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Common Files\Network Associates\Engine\MCSCAN32.DLL] <McAfee, Inc.><4.4.00>
[C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\VirusScan\EntSrv.Dll] <Network Associates, Inc><8.0.0.240>
[PID: 256][C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe] <Network Associates, Inc.><3.5.0.412>
[C:\PROGRA~1\NETWOR~1\COMMON~1\nailog.dll] <Network Associates, Inc.><3.5.0.474>
[C:\PROGRA~1\NETWOR~1\COMMON~1\naCmnLib.dll] <Network Associates, Inc.><3.5.0.474>
[C:\PROGRA~1\NETWOR~1\COMMON~1\naXML.dll] <Network Associates, Inc.><3.5.0.474>
[C:\PROGRA~1\NETWOR~1\COMMON~1\0804\AgentRes.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\VirusScan\VsPlugin.dll] <Network Associates, Inc.><8.0.0.912>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[PID: 400][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\naiwmain.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\naicondl.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\VsTskMgr.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll] <Network Associates, Inc.><8.0.0.145>
[PID: 484][C:\WINDOWS\System32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 1816][C:\WINDOWS\system32\NOTEPAD.EXE] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 2308][C:\WINDOWS\explorer.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[C:\WINDOWS\System32\AcSignIcon.dll] <Autodesk><17.0.54.0>
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] <Autodesk><17.0.54.110>
[C:\WINDOWS\System32\fileap.dll] <><2, 1, 0, 1>
[PID: 2368][C:\WINDOWS\System32\conime.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 2752][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\EntApi.dll] <Network Associates, Inc><8.0.0.240>
[C:\WINDOWS\System32\AcSignIcon.dll] <Autodesk><17.0.54.0>
[C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\mytilus.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Network Associates\VirusScan\Res04\McShield.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Common Files\Network Associates\Engine\mcscan32.dll] <McAfee, Inc.><4.4.00>
[C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[C:\WINDOWS\System32\oleauto32.dll] <><2, 3, 0, 1>
[C:\WINDOWS\System32\ntcoredll.dll] <><4, 0, 2, 1>
[PID: 3032][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[C:\WINDOWS\System32\AcSignIcon.dll] <Autodesk><17.0.54.0>
[PID: 2388][C:\DOCUME~1\abc\LOCALS~1\Temp\Rar$EX00.625\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
gf1982 - 2006-8-27 16:58:00
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
我无邪 - 2006-8-28 20:57:00
运行(双击)System Repair Engineer,点“启动项目,服务,点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Background Intelligent Transfer Services ,DNS SystemServices ,选择“删除服务”点“设置”选择“否”。(每一个逗号隔开的就是一个病毒的服务,请逐一删除)
下载超级兔子,专业卸载。
http://www.pctutu.com/news.asp?id=92
安装好后,打开“winspeed”“专业卸载,卸载所有提示的垃圾软件,卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载。
请到www.27814939.ys168.com,点“我的软件”下载KillBox.exe
重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows
双击打开KillBox.exe,分别删除
C:\DOCUME~1\abc\LOCALS~1\Temp\Rar$EX00.062\winspeed.exe
:\WINDOWS\System32\fileap.dll
(删除时勾选“删除前先结束Explorer.EXE进程”不行再试着勾选"删除DLL文件前反注册此文件"
运行(双击)System Repair Engineer,使用“启动项目,注册表”来删除以下选项。
C:\DOCUME~1\abc\LOCALS~1\Temp\Rar$EX00.062\winspeed.exe
:\WINDOWS\System32\fileap.dll
修复后重启,再扫份日志粘上来。
© 2000 - 2026 Rising Corp. Ltd.