westbeck先生还在吗?又开始乱跳网页了 bbs.ikaka.com

laoshu198466 - 2006-8-28 21:49:00

HijackThis_815汉化版扫描日志 V1.99.1
保存于 21:39:58, 日期 2006-8-28
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\racer-henan-cnc\racer.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Tencent\qq\QQ.exe
C:\Program Files\Tencent\qq\qqpet\qqpet.exe
C:\Program Files\Tencent\qq\QQ.exe
C:\Program Files\Tencent\qq\TIMPlatfrom.exe
D:\瑞星\升级包\超级兔子\MagicSet\iehelp.exe
D:\瑞星\升级包\超级兔子\MagicSet\SRIECLI.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
D:\瑞星\升级包\扫描日志\HijackThis1991zww.exe

F3 - REG:win.ini: load=C:\WINDOWS\system32\0fcicef.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: BHelper Class - {F2E37336-BFDB-409B-8D0E-6F013C438B20} - C:\WINDOWS\system32\0fcocef0.dll
O3 - IE工具栏增项: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - 启动项HKLM\\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [SKYNET Personal FireWall] C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
O4 - 启动项HKLM\\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - 启动项HKLM\\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - 启动项HKLM\\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - 启动项HKLM\\Run: [intranet] C:\WINDOWS\system32\intranet.exe
O4 - 启动项HKLM\\RunOnce: [Super Rabbit Winspeed] "D:\瑞星\升级包\超级兔子\MagicSet\winspeed.exe" /autokill:24
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Super Rabbit Desktop Search] D:\瑞星\升级包\超级兔子\MagicSet\SRSearch.exe
O4 - HKCU\..\Run: [Super Rabbit IEPro] D:\瑞星\升级包\超级兔子\MagicSet\SRIECLI.EXE /LOAD
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: 河南网通宽带用户客户端.lnk = C:\Program Files\racer-henan-cnc\racer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: IE-Bar.lnk = C:\Program Files\Common Files\IE-Bar\iebar.exe
O8 - IE右键菜单中的新增项目: 使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: 使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - 浏览器额外的按钮: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O21 - SSODL: DelayRun - {5A6F2F95-3191-433B-8533-EB0B596A7BAC} - C:\WINDOWS\system32\0fcdcef0.dll
O23 - NT 服务: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - NT 服务: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - NT 服务: Norton AntiVirus 自动防护服务 (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - NT 服务: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - NT 服务: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - NT 服务: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - NT 服务: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

newcenturymoon - 2006-8-28 21:49:00

请到http://forum.ikaka.com/topic.asp?board=28&artid=8105899
下载HijackThis
下载后运行HijackThis.rar,再运行HijackThis.exe
单机＂扫描日志并保存日志＂
把保存的日志复制粘贴上来

laoshu198466 - 2006-8-28 21:50:00

下过了麻烦您看一下哈

westbeck - 2006-8-29 2:07:00

请修复:
F3 - REG:win.ini: load=C:\WINDOWS\system32\0fcicef.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: BHelper Class - {F2E37336-BFDB-409B-8D0E-6F013C438B20} - C:\WINDOWS\system32\0fcocef0.dll
O4 - 启动项HKLM\\Run: [intranet] C:\WINDOWS\system32\intranet.exe
O21 - SSODL: DelayRun - {5A6F2F95-3191-433B-8533-EB0B596A7BAC} - C:\WINDOWS\system32\0fcdcef0.dll
删除:
C:\WINDOWS\system32\0fcicef.exe
C:\WINDOWS\system32\0fcocef0.dll
C:\WINDOWS\system32\intranet.exe
C:\WINDOWS\system32\0fcdcef0.dll

westbeck - 2006-8-29 2:07:00

修复后，请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。谢谢．．．

laoshu198466 - 2006-8-29 9:16:00

westbeck先生
F3 - REG:win.ini: load=C:\WINDOWS\system32\0fcicef.exe
O2 - BHO: BHelper Class - {F2E37336-BFDB-409B-8D0E-6F013C438B20} - C:\WINDOWS\system32\0fcocef0.dll
昨晚扫描时还有　今天扫描就没有了
于是今天只修复了你说的其他项　
那２个找不到没法修复
怎么办啊

laoshu198466 - 2006-8-29 9:21:00

2006-08-29,09:11:20

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<Super Rabbit IEPro><D:\瑞星\升级包\超级兔子\MagicSet\SRIECLI.EXE /LOAD> [Super Rabbit Soft]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
<run><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<SiSUSBRG><C:\WINDOWS\SiSUSBrg.exe> [Silicon Integrated Systems Corp.]
<Smapp><C:\Program Files\Analog Devices\SoundMAX\SMTray.exe> [Analog Devices, Inc.]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<SKYNET Personal FireWall><C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe> []
<ccApp><C:\Program Files\Common Files\Symantec Shared\ccApp.exe> [Symantec Corporation]
<ccRegVfy><C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe> [Symantec Corporation]
<StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> []
<Symantec NetDriver Monitor><C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer> [Symantec Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\SYSTEM32\Userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]

==================================
启动文件夹
[Utility Tray]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Utility Tray.lnk><N>
[河南网通宽带用户客户端]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\河南网通宽带用户客户端.lnk><N>
[Microsoft Office]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N>

==================================
服务
[Symantec Event Manager / ccEvtMgr]
<"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Password Validation Service / ccPwdSvc]
<"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Norton AntiVirus 自动防护服务 / navapsvc]
<C:\Program Files\Norton AntiVirus\navapsvc.exe><Symantec Corporation>
[ScriptBlocking Service / SBService]
<C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe><Symantec Corporation>
[Symantec Network Drivers Service / SNDSrvc]
<"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[SoundMAX Agent Service / SoundMAX Agent Service (default)]
<C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>
[SymWMI Service / SymWSC]
<"C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe"><Symantec Corporation>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[CNavExtBho Class]
{BDF3E430-B101-42AD-A544-FADC6B084872} <C:\Program Files\Norton AntiVirus\NavShExt.dll, Symantec Corporation>
[易趣购物]
{DE60714F-AC17-427e-861A-FD60CBDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=1, N/A>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Norton AntiVirus]
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} <C:\Program Files\Norton AntiVirus\NavShExt.dll, Symantec Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[Norton AntiVirus]
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} <C:\Program Files\Norton AntiVirus\NavShExt.dll, Symantec Corporation>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[CNavExtBho Class]
{BDF3E430-B101-42AD-A544-FADC6B084872} <C:\Program Files\Norton AntiVirus\NavShExt.dll, Symantec Corporation>
[VIDEO__X_MS_ASF Moniker Class]
{CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash.ocx, Macromedia, Inc.>
[使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
<C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[导出到 Microsoft Excel(&x)]
<res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A>

==================================
正在运行的进程
[PID: 388][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 624][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 648][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 692][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 704][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 852][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 932][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 1024][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\System32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 1072][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>

laoshu198466 - 2006-8-29 9:22:00

[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 1128][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 1336][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe] <Symantec Corporation><1.00.37>
[C:\WINDOWS\system32\ccTrust.dll] <Symantec Corporation><1.00.22>
[C:\WINDOWS\system32\SYMSTORE.dll] <Symantec Corporation><4.7.2.15>
[C:\PROGRA~1\NORTON~1\NAVEvent.dll] <Symantec Corporation><9.00.1106>
[C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvt.dll] <Symantec Corporation><1.00.106>
[PID: 1532][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 2>
[C:\Program Files\Norton AntiVirus\NavShExt.dll] <Symantec Corporation><9.00.02>
[C:\WINDOWS\system32\ccTrust.dll] <Symantec Corporation><1.00.22>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[D:\瑞星\反间谍专家\ske\contmenu.dll] <N/A><N/A>
[D:\瑞星\木马\WINDOW~1.8上\ftcsetup\Commenu.dll] <Fygsoft and Microsoft><3.0.0.63>
[PID: 1624][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 588][C:\Program Files\Analog Devices\SoundMAX\SMTray.exe] <Analog Devices, Inc.><3, 2, 17, 0>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 416][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3292>
[PID: 596][C:\Program Files\Common Files\Symantec Shared\ccApp.exe] <Symantec Corporation><1.00.106>
[C:\WINDOWS\system32\SYMSTORE.dll] <Symantec Corporation><4.7.2.15>
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL] <Symantec Corporation><1.00.106>
[C:\WINDOWS\system32\SYMREDIR.dll] <Symantec Corporation><5.5.1.6>
[C:\PROGRA~1\COMMON~1\SYMANT~1\ccErrDsp.DLL] <Symantec Corporation><1.00.106>
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCREGMON.DLL] <Symantec Corporation><1.00.106>
[C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvt.DLL] <Symantec Corporation><1.00.106>
[C:\WINDOWS\system32\ccTrust.dll] <Symantec Corporation><1.00.22>
[C:\PROGRA~1\NORTON~1\CCIMSCAN.DLL] <Symantec Corporation><9.00.1106>
[C:\PROGRA~1\NORTON~1\DEFALERT.DLL] <Symantec Corporation><9.00.02>
[C:\PROGRA~1\NORTON~1\NAVAPW32.DLL] <Symantec Corporation><9.00.1106>
[C:\WINDOWS\system32\ccPasswd.DLL] <Symantec Corporation><1.00.106>
[C:\PROGRA~1\NORTON~1\apwutil.dll] <Symantec Corporation><9.00.1106>
[C:\PROGRA~1\NORTON~1\SavRT32.dll] <Symantec Corporation><9.0.1.36>
[C:\Program Files\Norton AntiVirus\NavEmail.dll] <Symantec Corporation><9.00.1106>
[C:\Program Files\Norton AntiVirus\apwcmdnt.dll] <Symantec Corporation><9.00.1106>
[PID: 668][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 816][D:\瑞星\升级包\超级兔子\MagicSet\SRIECLI.EXE] <Super Rabbit Soft><7.76>
[D:\瑞星\升级包\超级兔子\MagicSet\shlobj71.ocx] <Sky Software (http://www.ssware.com)><7, 1, 0, 0>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 992][C:\WINDOWS\system32\sistray.exe] <Silicon Integrated Systems Corporation><0.0.0.3611>
[C:\WINDOWS\system32\SiSApCom.dll] <Silicon Integrated Systems Corporation><0.0.0.3610>
[C:\WINDOWS\system32\SiSBase.dll] <Silicon Integrated Systems Corporation><6.14.10.3611>
[PID: 1000][C:\Program Files\racer-henan-cnc\racer.exe] <Putian Runway><2, 0, 51, 92>
[C:\Program Files\racer-henan-cnc\rwxre.dll] <Mozilla Foundation><1.7.3: 2005040616>
[C:\Program Files\racer-henan-cnc\nspr4.dll] <Netscape Communications Corporation><4.5 Beta>
[C:\Program Files\racer-henan-cnc\xpcom.dll] <Mozilla Foundation><1.7.3: 2005040616>
[C:\Program Files\racer-henan-cnc\nss3.dll] <Netscape Communications Corporation><3.9.1>
[C:\Program Files\racer-henan-cnc\softokn3.dll] <Netscape Communications Corporation><3.9.1>
[C:\Program Files\racer-henan-cnc\gkgfx.dll] <Mozilla Foundation><1.7.3: 2005040616>
[C:\Program Files\racer-henan-cnc\js3250.dll] <Netscape Communications Corporation><4.0>
[C:\Program Files\racer-henan-cnc\components\racer_base_comp.dll] <Putian Runway><2,0,47,87>
[C:\Program Files\racer-henan-cnc\xpcom_compat.dll] <Mozilla Foundation><1.7.3: 2005040616>
[C:\Program Files\racer-henan-cnc\racer_base.dll] <Putian Runway><2,0,47,87>
[C:\Program Files\racer-henan-cnc\components\pipnss.dll] <Mozilla Foundation><1.7.3: 2005040616>
[C:\Program Files\racer-henan-cnc\components\gklayout.dll] <Mozilla Foundation><1.7.3: 2005040616>
[C:\Program Files\racer-henan-cnc\components\jar50.dll] <Mozilla Foundation><1.7.3: 2005040616>
[C:\Program Files\racer-henan-cnc\components\xpcom_compat_c.dll] <Mozilla Foundation><1.7.3: 2005040616>
[C:\Program Files\racer-henan-cnc\components\racer_ad_comp.dll] <Putian Runway><2,0,47,87>
[C:\Program Files\racer-henan-cnc\components\racer_access_dhcpplus.dll] <Putian Runway><2,0,47,87>
[C:\Program Files\racer-henan-cnc\dhcpplus.dll] <北京润汇科技有限公司><0, 13, 21, 45>
[C:\Program Files\racer-henan-cnc\components\racer_nss4_comp.dll] <Putian Runway><2,0,47,87>
[C:\Program Files\racer-henan-cnc\nss4.dll] <北京普天润汇科技有限公司><1, 0, 0, 3>
[C:\Program Files\racer-henan-cnc\wpcap.dll] <Politecnico di Torino><3, 0, 0, 18>
[C:\Program Files\racer-henan-cnc\pthreadVC.dll] <N/A><N/A>
[C:\Program Files\racer-henan-cnc\packet.dll] <Politecnico di Torino><3, 0, 0, 18>
[PID: 1272][C:\Program Files\Norton AntiVirus\navapsvc.exe] <Symantec Corporation><9.00.1106>
[C:\Program Files\Norton AntiVirus\SavRT32.dll] <Symantec Corporation><9.0.1.36>
[PID: 1456][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe] <Analog Devices, Inc.><3, 2, 6, 0>
[PID: 1756][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 184][C:\WINDOWS\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 236][C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe] <Symantec Corporation><2005.1.2.20>
[C:\Program Files\Common Files\Symantec Shared\Security Center\WSCHlpr.dll] <Symantec Corporation><2005.1.2.20>
[C:\Program Files\Common Files\Symantec Shared\Security Center\sscnav.dll] <Symantec Corporation><2005.1.2.20>
[C:\Program Files\Common Files\Symantec Shared\Security Center\sscnis7.dll] <Symantec Corporation><2005.1.2.20>
[C:\Program Files\Common Files\Symantec Shared\Security Center\sscnis56.dll] <Symantec Corporation><2005.1.2.20>
[C:\Program Files\Norton AntiVirus\navapscr.dll] <Symantec Corporation><9.00.1106>
[C:\WINDOWS\system32\ccTrust.dll] <Symantec Corporation><1.00.22>
[C:\Program Files\Norton AntiVirus\NAVError.dll] <><1, 0, 0, 1>
[C:\PROGRA~1\NORTON~1\NAVOpts.dll] <Symantec Corporation><9.00.02>
[C:\PROGRA~1\NORTON~1\N32Exclu.dll] <Symantec Corporation><9.00.1106>
[C:\PROGRA~1\NORTON~1\S32NAVO.DLL] <Symantec Corporation><5.3.0.182>
[C:\PROGRA~1\NORTON~1\SavRT32.dll] <Symantec Corporation><9.0.1.36>
[C:\Program Files\Symantec\LiveUpdate\NetDetectController.DLL] <Symantec Corporation><1.80.19.0>
[PID: 2296][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\System32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 3124][C:\WINDOWS\system32\NOTEPAD.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 3152][C:\Program Files\Tencent\qq\QQ.exe] <TENCENT><0, 0, 0, 0>
[C:\Program Files\Tencent\qq\CoralAssist.DLL] <Coral Team><4.5.0 build 20060515>
[C:\Program Files\Tencent\qq\CoralQQ.DLL] <Coral Team><4.5.1 Build 20060620>
[C:\Program Files\Tencent\qq\ipsearcher.dll] <N/A><1.0.0.4>
[C:\Program Files\Tencent\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQHelperDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[C:\Program Files\Tencent\qq\QQAPI.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\LoginCtrl.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1>
[C:\Program Files\Tencent\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[C:\Program Files\Tencent\qq\QQRes.dll] <tencent><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\WizardCtrl.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQMainFrame.dll] <N/A><N/A>

laoshu198466 - 2006-8-29 9:22:00

[C:\WINDOWS\system32\Macromed\Flash\Flash.ocx] <Macromedia, Inc.><6,0,84,0>
[C:\Program Files\Tencent\qq\CQQApplication.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\NewSkin.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\HostingMgr.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\CameraDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\MailSummary.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQSpace.dll] <><1, 0, 0, 1>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\QQGroupMng.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\GroupLive.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\UserDefinedHead.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQPlugin.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\QQConfigPlugin.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QRingMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\PhoneAPI.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[C:\Program Files\Tencent\qq\QQAvatar.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\FlashAvatarDll.dll] <><1, 4, 0, 1>
[C:\Program Files\Tencent\qq\LongConnection.dll] <tencent><5, 0, 200, 160>
[C:\Program Files\Tencent\qq\QQPet.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQSysMsgMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\BQQApplication.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\CommercesMng.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[C:\Program Files\Tencent\qq\QQUdpGetFileLib.dll] <tencent><0, 2, 2, 3>
[C:\Program Files\Tencent\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
[C:\Program Files\Tencent\qq\QQSceneMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\QQPhoneHelper.dll] <腾讯科技（深圳）有限公司><2, 0, 6, 60>
[PID: 3308][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\Tencent\QQ\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
[C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 2>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[C:\Program Files\Norton AntiVirus\NavShExt.dll] <Symantec Corporation><9.00.02>
[C:\WINDOWS\system32\ccTrust.dll] <Symantec Corporation><1.00.22>
[C:\Program Files\Common Files\Symantec Shared\Script Blocking\scrauth.dll] <Symantec Corporation><1, 1, 0, 126>
[C:\Program Files\Common Files\Symantec Shared\Script Blocking\ScrBlock.dll] <Symantec Corporation><1, 1, 0, 126>
[C:\WINDOWS\system32\Macromed\Flash\Flash.ocx] <Macromedia, Inc.><6,0,84,0>
[PID: 3788][C:\Program Files\Tencent\qq\qqpet\qqpet.exe] <腾讯公司><2, 40, 102, 1>
[C:\Program Files\Tencent\qq\qqpet\QQPetResDownload.dll] <><6, 1, 101, 55>
[C:\Program Files\Tencent\qq\qqpet\QQPetCommunity.dll] <><6, 2, 101, 1>
[C:\WINDOWS\system32\Macromed\Flash\Flash.ocx] <Macromedia, Inc.><6,0,84,0>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[C:\Program Files\Common Files\Symantec Shared\Script Blocking\scrauth.dll] <Symantec Corporation><1, 1, 0, 126>
[C:\Program Files\Common Files\Symantec Shared\Script Blocking\ScrBlock.dll] <Symantec Corporation><1, 1, 0, 126>
[PID: 1724][D:\瑞星\升级包\扫描日志\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>
[PID: 2368][C:\Program Files\Messenger\msmsgs.exe] <Microsoft Corporation><4.7.3001>
[C:\WINDOWS\system32\SYNCOR11.DLL] <SoundMAX><1.2.3>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

laoshu198466 - 2006-8-29 9:23:00

麻烦帮我看看我的机子是不是还有其他的毛病把？
今天我的机子一直说有病毒

westbeck - 2006-8-29 9:34:00

病毒名称,路径...

laoshu198466 - 2006-8-29 10:24:00

类别: 病毒警报
日期,功能,病毒名,操作及结果,项目类型,目标,可疑的操作,用户名,计算机名,详细信息
2006-8-29 8:11:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:11:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\4H6NO56V\c[1].gif
2006-8-29 8:10:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:10:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:10:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:10:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:10:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:10:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:10:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:09:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:09:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:09:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:09:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:09:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:08:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:08:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:08:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:08:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:08:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:07:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:07:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif

laoshu198466 - 2006-8-29 10:25:00

2006-8-29 8:07:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:07:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:07:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:07:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:07:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:06:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:06:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:06:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:06:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:06:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:06:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:06:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:05:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:05:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:05:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:05:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:05:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:05:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:05:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:04:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:04:37,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:03:37,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif

laoshu198466 - 2006-8-29 10:26:00

2006-8-29 8:03:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:03:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:02:37,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:02:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 8:01:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 8:00:36,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:59:37,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 7:59:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 7:59:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 7:59:36,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 7:59:36,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\AEVH9BL3\c[2].gif
2006-8-29 7:58:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:58:37,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\5LO28J97\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:54,自动防护,Downloader,已被自动删除,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,拒绝访问,文件,N/A,N/

laoshu198466 - 2006-8-29 10:26:00

A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:17,自动防护,Downloader,已被自动删除,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:16,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:57:16,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HX3BFUG2\c[1].gif
2006-8-29 7:55:41,自动防护,Downloader,修复失败,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:55:41,自动防护,Downloader,拒绝访问,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-29 7:55:41,自动防护,Downloader,已被自动删除,文件,N/A,N/A,SYSTEM,VVV-2A142687845,源：C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\IV3IZC8H\c[1].gif
2006-8-27 22:55:25,自动防护,Downloader,已被自动删除,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\47KP4VSF\sys2[1].exe
2006-8-27 22:22:41,自动防护,Bloodhound.NsAnti,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\
2006-8-27 22:22:41,自动防护,Bloodhound.NsAnti,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\
2006-8-27 22:22:39,自动防护,Bloodhound.NsAnti,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\ARY1C5K5\ray[1].exe
2006-8-27 22:22:39,自动防护,Bloodhound.NsAnti,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\ARY1C5K5\ray[1].exe
2006-8-27 22:22:37,自动防护,Downloader,拒绝访问,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Local Settings\Temporary Internet Files\Content.IE5\U187G5UB\index[5].htm
2006-8-27 22:22:37,自动防护,Downloader,修复失败,文件,N/A,N/A,vvv,VVV-2A142687845,源：C:\Documents and Settings\vvv\Loc
al Settings\Temporary Internet Files\Content.IE5\U187G5UB\index[5].htm

westbeck - 2006-8-29 10:27:00

安全模式下清空IE临时文件就行了

laoshu198466 - 2006-8-29 10:29:00

这全部都是希望别看晕了
谢谢

laoshu198466 - 2006-8-29 10:30:00

杂清空啊?
清空后不是等与没有杀吗

westbeck - 2006-8-29 10:36:00

清空以后再扫一遍看有没再报毒...

laoshu198466 - 2006-8-29 10:42:00

westbeck - 2006-8-29 10:48:00

没关系了,你新的日志也看不到了...
安全模式清空IE临时文件,再扫一次看还有没报毒...

laoshu198466 - 2006-8-29 20:52:00

HijackThis_815汉化版扫描日志 V1.99.1
保存于 20:41:13, 日期 2006-8-29
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
D:\瑞星\升级包\超级兔子\MagicSet\SRIECLI.EXE
C:\WINDOWS\system32\sistray.exe
C:\Program Files\racer-henan-cnc\racer.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Tencent\qq\QQ.exe
C:\Program Files\Tencent\qq\QQ.exe
C:\Program Files\Tencent\qq\qqpet\qqpet.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
D:\瑞星\升级包\扫描日志\HijackThis1991zww.exe

O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - IE工具栏增项: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - 启动项HKLM\\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [SKYNET Personal FireWall] C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
O4 - 启动项HKLM\\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - 启动项HKLM\\Run: [ccRegVfy] C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - 启动项HKLM\\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Super Rabbit IEPro] D:\瑞星\升级包\超级兔子\MagicSet\SRIECLI.EXE /LOAD
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: 河南网通宽带用户客户端.lnk = C:\Program Files\racer-henan-cnc\racer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - IE右键菜单中的新增项目: 使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: 使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - 浏览器额外的按钮: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O23 - NT 服务: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - NT 服务: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - NT 服务: Norton AntiVirus 自动防护服务 (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - NT 服务: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - NT 服务: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - NT 服务: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - NT 服务: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

瑞星卡卡安全论坛