【求助】为何IE会默认到拔号链接？ bbs.ikaka.com

pengpeng11111111 - 2006-8-31 20:36:00

本本上有时候用CDMA，有时候用拔号上网，有时候通过别人的交换机上网，但今天拿到别的公司用，接到交换机上，打开IE却自动打开了拔号上网程序，点击取消拔号能正常上网，把拔号上网程序（WINDOWS内建的）删了也能正常上网，再一装拔号就又不行了，(选择的从不进行拔号连接,安装的时候没有勾：任何用户连接到INTER时使用此帐号与密码、把他作为默认连接)怪的很，高手帮帮忙

我无邪 - 2006-8-31 20:49:00

中了某些病毒后会自动排号
下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

pengpeng11111111 - 2006-8-31 21:04:00

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [Microsoft Corporation]
<pbmini><C:\Program Files\pcast\PodcastbarMini\PodcastBarMiniStater.exe> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<0 - HideHelper><> []
<spoolsv><C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer> []
<MSNProxy><"C:\Program Files\MSNProxy\MSNProxy.exe"> []
<WinVNC><"C:\Program Files\RealVNC\WinVNC\winvnc.exe" -servicehelper> [RealVNC Ltd.]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<Update><C:\Program Files\Common Files\UPDAT\Update.exe> []
<vwlgyk><RunDll32 "C:\WINDOWS\Downlo~1\vwlgyk.dll",Run> [Microsoft Corporation]
<CdnCtr><> []
<SearchNet_Up><C:\Program Files\SearchNet\ServeUp.exe> [中搜在线]
<SrvNet32><RunDll32 "C:\Program Files\SearchNet\SrvNet32.dll",Run> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{CF49F9F2-A8D3-464F-83EC-6AFC6573C267}><C:\WINDOWS\system32\jh.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
<WinlogonNotify: NavLogon><C:\WINDOWS\System32\NavLogon.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<DAEMON Tools-2052><; "C:\Program Files\D-Tools\daemon.exe" -lang 2052> [DAEMON'S HOME]

==================================
启动文件夹
[Microsoft Office]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N>
[vptray]
<C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\vptray.lnk><N>
[地址栏搜索]
<C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\地址栏搜索.lnk><N>

==================================
服务
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A>
[IPSEC Client / BRGNS]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[DefWatch / DefWatch]
<C:\Program Files\NavNT\defwatch.exe><Symantec Corporation>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
[Norton AntiVirus Client / Norton AntiVirus Server]
<C:\Program Files\NavNT\rtvscan.exe><Symantec Corporation>
[Rd_rec / Rd_rec]
<><N/A>
[VNC Server / winvnc]
<"C:\Program Files\RealVNC\WinVNC\winvnc.exe" -service><RealVNC Ltd.>

==================================
浏览器加载项
[WebThunder Browser Helper]
{00000AAA-A363-466E-BEF5-9BB68697AA7F} <, N/A>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <, N/A>
[IEMonitor Class]
{08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\Program Files\DeskAdTop\deskipn.dll, N/A>
[wmpdrm]
{0E674588-66B7-4E19-9D0E-2053B800F69F} <, N/A>
[IE Address Browser Helper]
{2A0176FE-008B-4706-90F5-BBA532A49731} <C:\Program Files\SearchNet\SNHpr.dll, Beijing Zhongsou Online Software>
[CNNIC_IDN]
{35980F6E-A137-4E50-953D-813BB8556899} <, N/A>
[IE Browser Helper]
{3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\lwr.dll, 中搜在线软件有限公司>
[DragSearch BHO]
{62EED7C6-9F02-42f9-B634-98E2899E147B} <, N/A>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <, N/A>
[Google Toolbar Helper]
{AA58ED58-01DD-4d91-8333-CF10577473F7} <, N/A>
[AcroIEToolbarHelper Class]
{AE7CD045-E861-484f-8273-0445EE161910} <, N/A>
[QuickBtn]
{D1BB7CF4-4463-4e91-88D7-ECC3CE0A13B7} <, N/A>
[WMHlprObj Class]
{F5824EFB-728A-4726-A5A5-85A68B20EDC3} <, N/A>
[启动迅雷]
{0062C9BD-B349-40DE-91A0-755F37ACD559} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[QuickBtn]
{1D901067-2529-4A9B-9B6B-7A1DB3A44CB5} <, N/A>
[CNNIC_IDN]
{35980F6E-A137-4E50-953D-813BB8556899} <, N/A>
[启动Web迅雷]
{962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Adobe PDF]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll, N/A>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, N/A>
[金山快译(&K)]
{6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll, 金山软件股份有限公司>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\System32\legitcheckcontrol.dll, Microsoft Corporation>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\System32\wuweb.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[WebThunder Browser Helper]
{00000AAA-A363-466E-BEF5-9BB68697AA7F} <, N/A>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <, N/A>
[IEMonitor Class]
{08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\Program Files\DeskAdTop\deskipn.dll, N/A>
[wmpdrm]
{0E674588-66B7-4E19-9D0E-2053B800F69F} <, N/A>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\System32\legitcheckcontrol.dll, Microsoft Corporation>
[IE Address Browser Helper]
{2A0176FE-008B-4706-90F5-BBA532A49731} <C:\Program Files\SearchNet\SNHpr.dll, Beijing Zhongsou Online Software>
[CNNIC_IDN]
{35980F6E-A137-4E50-953D-813BB8556899} <, N/A>
[IE Browser Helper]
{3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\lwr.dll, 中搜在线软件有限公司>
[DragSearch BHO]
{62EED7C6-9F02-42F9-B634-98E2899E147B} <, N/A>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\System32\wuweb.dll, Microsoft Corporation>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <, N/A>
[Google Toolbar Helper]
{AA58ED58-01DD-4D91-8333-CF10577473F7} <, N/A>
[AcroIEToolbarHelper Class]
{AE7CD045-E861-484F-8273-0445EE161910} <, N/A>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[QuickBtn]
{D1BB7CF4-4463-4E91-88D7-ECC3CE0A13B7} <, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[WMHlprObj Class]
{F5824EFB-728A-4726-A5A5-85A68B20EDC3} <, N/A>
[&使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[Google 搜索(&G)]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html, N/A>
[上传到QQ网络硬盘]
<C:\WINDOWS\ime\TQME\AddToNetDisk.htm, N/A>
[使用Web迅雷下载]
<C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>
[反向链接]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html, N/A>
[导出到 Microsoft Excel(&x)]
<res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<C:\WINDOWS\ime\TQME\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\WINDOWS\ime\TQME\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\WINDOWS\ime\TQME\SendMMS.htm, N/A>
[类似网页]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html, N/A>
[缓存的网页快照]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html, N/A>
[翻译英文字词(&T)]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html, N/A>

pengpeng11111111 - 2006-8-31 21:04:00

==================================
正在运行的进程
[PID: 620][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 668][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 692][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\System32\NavLogon.dll] <N/A><N/A>
[PID: 736][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 748][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 908][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 984][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1068][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1120][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1260][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1396][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\System32\AdobePDF.dll] <Adobe Systems Incorporated.><6.0.000>
[C:\Program Files\Adobe\Acrobat 6.0\Distillr\AdistRes.CHT] <N/A><N/A>
[PID: 1612][C:\Program Files\NavNT\defwatch.exe] <Symantec Corporation><7.61.00.928>
[PID: 1652][C:\WINDOWS\system32\inetsrv\inetinfo.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1684][C:\Program Files\NavNT\rtvscan.exe] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\Dec2.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2ARJ.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2ID.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2LHA.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\SymLHA.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2LZ.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2MIME.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2Zip.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2AMG.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\SYMAMG32.DLL] <Symantec Corporation with portions by FUJITSU DEVICES INC.><2.50.33.56>
[C:\Program Files\NavNT\Dec2UUE.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2SS.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2RTF.dll] <Symantec Corporation><2.50.33.56>
[C:\WINDOWS\system32\CBA.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\MsgSys.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\NTS.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\PDS.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\Program Files\NavNT\NAVLU.dll] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\NavNT\i2ldvp3.dll] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\NAVAPI32.DLL] <Symantec Corp.><4.1.0.15>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060830.022\NAVEX32a.DLL] <Symantec Corporation><20061.2.0.26>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060830.022\NAVENG32.DLL] <Symantec Corporation><20061.2.0.26>
[C:\Program Files\NavNT\NAVAP32.DLL] <Symantec Corporation><5.3.1.39>
[C:\Program Files\NavNT\vpmsece.dll] <Symantec Corporation><7.61.00.928>
[C:\WINDOWS\system32\amslib.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[PID: 504][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1180][C:\WINDOWS\system32\MsgSys.EXE] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\NTS.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\CBA.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\MsgSys.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\PDS.DLL] <Intel Corporation><6.0.201.0940 E>
[PID: 1536][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[C:\Program Files\SearchNet\SrvNet32.dll] <中搜在线><1, 0, 2, 7>
[C:\WINDOWS\System32\igfxpph.dll] <Intel Corporation><3,0,0,2104>
[C:\WINDOWS\System32\hccutils.DLL] <Intel Corporation><3,0,0,2104>
[C:\WINDOWS\system32\igfxres.dll] <Intel Corporation><3,0,0,2104>
[C:\WINDOWS\System32\igfxsrvc.dll] <Intel Corporation><3,0,0,2104>
[C:\WINDOWS\System32\igfxdev.dll] <Intel Corporation><3,0,0,2104>
[PID: 1876][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.1622>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 1908][C:\Program Files\MSN Messenger\MsnMsgr.Exe] <Microsoft Corporation><8.0.0792.00>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 340][C:\Program Files\NavNT\vptray.exe] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\Cliproxy.dll] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\NavNT\Cliscan.dll] <Symantec Corporation><7.61.00.928>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 2660][D:\Wingate4.40\aa\PSTrayFactory.exe] <PS Soft Lab><2.0.0.134>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 3220][C:\WINDOWS\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 1864][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 352][C:\Program Files\Maxthon\Maxthon.exe] <Maxthon International Ltd.><1, 5, 6, 42>
[C:\Program Files\Maxthon\maxzlib.dll] < ><1, 0, 0, 2>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[C:\Program Files\RhinoSoft.com\Serv-U\ServUPerfCount.dll] <Rhino Software, Inc. +1(262) 560-9627><6, 3, 0, 0>
[C:\Program Files\Maxthon\Services\RealTime\real_time.dll] <><1, 0, 0, 1>
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[PID: 1224][C:\WINDOWS\system32\NOTEPAD.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 2612][C:\WINDOWS\system32\NOTEPAD.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 640][C:\Program Files\金山词霸 2005 专业版\XDICT.EXE] <Kingsoft Co, Ltd.><8, 5, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\DicMngr.dll] <Kingsoft><1, 0, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\doshow.dll] <N/A><N/A>
[C:\Program Files\金山词霸 2005 专业版\ITextOut.dll] <Kingsoft><1, 1, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\KPic10.dll] <N/A><N/A>
[C:\Program Files\金山词霸 2005 专业版\ijl11.dll] <Intel Corporation><1.1.2>
[C:\Program Files\金山词霸 2005 专业版\NormGrab.DLL] <Kingsoft Co, Ltd.><6, 0, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\toTTSEngine50.dll] <Kingsoft Corporation><1, 0, 0, 1>
[C:\Program Files\金山词霸 2005 专业版\xfile.dll] <N/A><N/A>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[C:\Program Files\金山词霸 2005 专业版\DBCore10.dll] <Kingsoft Corp.><1, 0, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\XdictGrb.dll] <Kingsoft Co, Ltd.><8, 5, 0, 0>
[PID: 1608][C:\PROGRA~1\Kingsoft\FASTAI~1\KTEngine.exe] <Kingsoft><1, 0, 0, 0>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[C:\PROGRA~1\Kingsoft\FASTAI~1\GTS\EnglishSChinese\EngSCh.dll] <N/A><N/A>
[PID: 1940][C:\Documents and Settings\Administrator\桌面\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

我无邪 - 2006-8-31 21:11:00

VNC Server / winvnc]
<"C:\Program Files\RealVNC\WinVNC\winvnc.exe" -service><RealVNC Ltd.>
这个东东是你安装的吗？

你中了一把流氓软件
下载超级兔子,专业卸载。
http://www.pctutu.com/news.asp?id=92
安装好后，打开“winspeed”“专业卸载,卸载所有提示的垃圾软件，卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载
卸载完后重启。
再扫个日志粘上来。

瑞星卡卡安全论坛