[B]求助！！电脑最近经常实际[/B] bbs.ikaka.com

流星花语 - 2006-9-8 16:52:00

HijackThis_815汉化版扫描日志 V1.99.1
保存于 16:33:25, 日期 2006-9-8
操作系统： Windows 2000 SP4 (WinNT 5.00.2195)
浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程：
D:\WINNT\System32\smss.exe
D:\WINNT\system32\winlogon.exe
D:\WINNT\system32\services.exe
D:\WINNT\system32\lsass.exe
D:\WINNT\system32\svchost.exe
D:\Program Files\Rising\Rav\CCenter.exe
D:\Program Files\Rising\Rav\Ravmond.exe
D:\WINNT\system32\spoolsv.exe
D:\WINNT\System32\svchost.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
D:\WINNT\system32\MSTask.exe
D:\WINNT\system32\stisvc.exe
D:\WINNT\system32\drivers\WDelMgr20.exe
D:\WINNT\System32\WBEM\WinMgmt.exe
D:\WINNT\system32\svchost.exe
D:\Program Files\Rising\Rav\RavStub.exe
D:\WINNT\Explorer.EXE
D:\WINNT\SOUNDMAN.EXE
D:\WINNT\System32\hkcmd.exe
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\WINNT\system32\CSMContext.exe
D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
D:\Program Files\Rising\Rav\RavTask.exe
D:\Program Files\Rising\Rav\Ravmon.exe
D:\WINNT\system32\internat.exe
D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Tencent\qq\QQ.exe
C:\Program Files\Tencent\qq\TIMPlatform.exe
D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
D:\Program Files\Microsoft Office\Office\POWERPNT.EXE
D:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\Program Files\Thunder Network\Thunder\Thunder.exe
D:\Program Files\Rising\Rav\RsAgent.exe
D:\WINNT\msagent\AgentSvr.exe
D:\Program Files\WinRAR\WinRAR.exe
D:\DOCUME~1\mjwxh\LOCALS~1\Temp\Rar$EX04.901\HijackThis1991zww.exe

R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - D:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - D:\WINNT\system32\xunleibho_v13.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: 搜搜地址栏搜索 - {0C7C23EF-A848-485B-873C-0ED954731014} - D:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: TeachingHandler - {31EBA2E2-58B2-4980-9C41-F12F5F1422C5} - D:\Program Files\Common Files\Collegesoft\Share Components\TPHANDLE.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\qq\QQIEHelper.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - D:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL (file missing)
O2 - BHO: KPBHO Class - {7C7DE9B8-CAA6-4B31-BC09-45AFC6B90FDE} - D:\WINNT\system32\iesense.dll (file missing)
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINNT\system32\msdxm.ocx
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - D:\WINNT\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [IgfxTray] D:\WINNT\System32\igfxtray.exe
O4 - 启动项HKLM\\Run: [HotKeysCmds] D:\WINNT\System32\hkcmd.exe
O4 - 启动项HKLM\\Run: [SSC_UserPrompt] D:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - 启动项HKLM\\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [CSMContext] D:\WINNT\system32\CSMContext.exe
O4 - 启动项HKLM\\Run: [stup.exe] D:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - 启动项HKLM\\Run: [PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - 启动项HKLM\\Run: [SKYNET Personal FireWall] D:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
O4 - 启动项HKLM\\Run: [RavTask] "D:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\qq\QQ.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: &使用迷你迅雷下载 - C:\Program Files\Maxthon\Thundermini\geturl.htm
O8 - IE右键菜单中的新增项目: Listen→朗读当前选定内容 - C:\PROGRA~1\LISTEN~1.0\page\readsel.htm
O8 - IE右键菜单中的新增项目: Listen→获取当前焦点内容 - C:\PROGRA~1\LISTEN~1.0\page\getactive.htm
O8 - IE右键菜单中的新增项目: Listen→获取当前选定内容 - C:\PROGRA~1\LISTEN~1.0\page\getsel.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - C:\Program Files\KuGoo3\KuGoo3DownX.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 导出当前页到超星阅览器(&A) - C:\Program Files\SSREADER36\ss_all.htm
O8 - IE右键菜单中的新增项目: 导出选中部分到超星阅览器(&S) - C:\Program Files\SSREADER36\ss_select.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\qq\SendMMS.htm
O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm
O8 - IE右键菜单中的新增项目: 豪杰超级解霸V8实时播放 - C:\Herosoft\HeroV8\MPURLGET.HTM
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE
O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O11 - Options group: [TBH] 搜搜地址栏搜索
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1128259906324
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1128259852237
O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (Qzone Media Tools) - http://imgcache.qq.com/qzone/photo/QzoneMediaTools.cab
O16 - DPF: {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} (Qzone Media Tools) - http://219.133.62.247/QQPlayer.cab
O16 - DPF: {ACFE8232-03C5-4AEC-AF5E-42B806724096} (KSHScan Control) - http://scan.kingsoft.com/scan/fangyi/KAllScan.CAB
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - D:\WINNT\System32\dmadmin.exe
O23 - NT 服务: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - D:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: ServiceLayer - Nokia. - D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - NT 服务: SymWMI Service (SymWSC) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - NT 服务: Universal Disk Manager - Unknown owner - D:\WINNT\diskman.exe (file missing)
O23 - NT 服务: WDelMgr20 - Unknown owner - D:\WINNT\system32\drivers\WDelMgr20.exe

[img][/img]

流星花语 - 2006-9-8 17:15:00

不好意思，题目打错了，应该把“实际”改为“死机”呵呵。
以下为卡卡扫描结果：
Logfile of Kaka v2. 0. 0. 9 Scan Module v2. 0. 0. 1
Scan saved at 17:01:31, on 2006-09-08
Platform: Microsoft Windows 2000 Professional Service Pack 4 (Build 2195)
MSIE: Internet Explorer v6.00 SP1;Q828750;Q833989;Q823353; (6.00.2800.1106)

Running processes:
[smss.exe]
CommandLine =

[csrss.exe]
CommandLine = D:\WINNT\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

[winlogon.exe]
CommandLine = winlogon.exe

[services.exe]
CommandLine = D:\WINNT\system32\services.exe

[lsass.exe]
CommandLine = D:\WINNT\system32\lsass.exe

[svchost.exe]
CommandLine = D:\WINNT\system32\svchost -k rpcss

[ccenter.exe]
CommandLine = "D:\Program Files\Rising\Rav\CCenter.exe"

[ravmond.exe]
CommandLine = "D:\Program Files\Rising\Rav\Ravmond.exe"

[spoolsv.exe]
CommandLine = D:\WINNT\system32\spoolsv.exe

[svchost.exe]
CommandLine = D:\WINNT\System32\svchost.exe -k netsvcs

[ewidoctrl.exe]
CommandLine = "C:\Program Files\ewido\security suite\ewidoctrl.exe"

[mstask.exe]
CommandLine = D:\WINNT\system32\MSTask.exe

[stisvc.exe]
CommandLine = D:\WINNT\system32\stisvc.exe

[wdelmgr20.exe]
CommandLine = D:\WINNT\system32\drivers\WDelMgr20.exe

[winmgmt.exe]
CommandLine = D:\WINNT\System32\WBEM\WinMgmt.exe

[svchost.exe]
CommandLine = D:\WINNT\system32\svchost.exe -k wugroup

[ravstub.exe]
CommandLine = "D:\Program Files\Rising\Rav\RavStub.exe" /RAVMOND

[explorer.exe]
CommandLine = D:\WINNT\Explorer.EXE

[soundman.exe]
CommandLine = "D:\WINNT\SOUNDMAN.EXE"

[hkcmd.exe]
CommandLine = "D:\WINNT\System32\hkcmd.exe"

[realsched.exe]
CommandLine = "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

[csmcontext.exe]
CommandLine = "D:\WINNT\system32\CSMContext.exe"

[launch~1.exe]
CommandLine = "D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE" -startup

[ravtask.exe]
CommandLine = "D:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE" -SYSTEM

[ravmon.exe]
CommandLine = "D:\Program Files\Rising\Rav\Ravmon.exe" -SYSTEM

[internat.exe]
CommandLine = "D:\WINNT\system32\internat.exe"

[pcsync2.exe]
CommandLine = "D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog

[qq.exe]
CommandLine = "C:\Program Files\Tencent\qq\QQ.exe"

[mpapi3s.exe]
CommandLine = D:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe -Embedding

[timplatform.exe]
CommandLine = "C:\Program Files\Tencent\qq\TIMPlatform.exe" -Embedding

[iexplore.exe]
CommandLine = "D:\Program Files\Internet Explorer\IEXPLORE.EXE"

[servicelayer.ex]
CommandLine = "D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe"

[kkscan.exe]
CommandLine = "D:\Program Files\Rising\KakaToolBar\KkScan.exe"

流星花语 - 2006-9-8 17:16:00

R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - D:\Program Files\TENCENT\Adplus\SSAddr.dll
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - D:\WINNT\system32\xunleibho_v13.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - D:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: IEHandle Class - {31EBA2E2-58B2-4980-9C41-F12F5F1422C5} - D:\Program Files\Common Files\Collegesoft\Share Components\TPHANDLE.dll
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\qq\QQIEHelper.dll
O2 - BHO: DragSearch BHO - {62EED7C6-9F02-42f9-B634-98E2899E147B} - D:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL (file missing)
O2 - BHO: KPBHO Class - {7C7DE9B8-CAA6-4B31-BC09-45AFC6B90FDE} - D:\WINNT\system32\iesense.dll (file missing)
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINNT\system32\msdxm.ocx
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - D:\WINNT\system32\kakatool.dll
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [PcSync] D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [IgfxTray] D:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] D:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] D:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CSMContext] D:\WINNT\system32\CSMContext.exe
O4 - HKLM\..\Run: [stup.exe] D:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [SKYNET Personal FireWall] D:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
O4 - HKLM\..\Run: [RavTask] "D:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\qq\QQ.exe
O8 - Extra context menu item: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - Extra context menu item: &使用迷你迅雷下载 - C:\Program Files\Maxthon\Thundermini\geturl.htm
O8 - Extra context menu item: Listen→朗读当前选定内容 - C:\PROGRA~1\LISTEN~1.0\page\readsel.htm
O8 - Extra context menu item: Listen→获取当前焦点内容 - C:\PROGRA~1\LISTEN~1.0\page\getactive.htm
O8 - Extra context menu item: Listen→获取当前选定内容 - C:\PROGRA~1\LISTEN~1.0\page\getsel.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - Extra context menu item: 使用KuGoo3下载(&K) - C:\Program Files\KuGoo3\KuGoo3DownX.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 导出当前页到超星阅览器(&A) - C:\Program Files\SSREADER36\ss_all.htm
O8 - Extra context menu item: 导出选中部分到超星阅览器(&S) - C:\Program Files\SSREADER36\ss_select.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\qq\SendMMS.htm
O8 - Extra context menu item: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: 豪杰超级解霸V8实时播放 - C:\Herosoft\HeroV8\MPURLGET.HTM
O9 - Extra Button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE
O9 - Extra Button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O11 - Options group: [TBH] 搜搜地址栏搜索
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
O16 - DPF: DirectAnimation Java Classes - file://D:\WINNT\Java\classes\dajava.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1128259906324
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1128259852237
O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (Qzone Media Tools) - http://imgcache.qq.com/qzone/photo/QzoneMediaTools.cab
O16 - DPF: {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} (Qzone Media Tools) - http://219.133.62.247/QQPlayer.cab
O16 - DPF: {ACFE8232-03C5-4AEC-AF5E-42B806724096} (KSHScan Control) - http://scan.kingsoft.com/scan/fangyi/KAllScan.CAB
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINNT\system32\mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - D:\WINNT\system32\urlmon.dll
O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - D:\WINNT\system32\urlmon.dll
O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - D:\WINNT\system32\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - D:\WINNT\system32\urlmon.dll
O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - D:\WINNT\system32\urlmon.dll
O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - D:\WINNT\system32\urlmon.dll
O18 - Protocol: ic32pp - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - D:\WINNT\wc98pp.dll
O18 - Protocol: ipp - (no CLSID) - (no file)
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - D:\WINNT\system32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINNT\system32\mshtml.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - D:\WINNT\system32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINNT\system32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - D:\WINNT\system32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - D:\WINNT\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - D:\WINNT\system32\itss.dll
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINNT\system32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - D:\WINNT\system32\mshtml.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINNT\system32\mshtml.dll
O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - D:\WINNT\system32\msdxm.ocx
O20 - Winlogon Notify: wzcnotif
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - D:\WINNT\system32\dmadmin.exe /com
O23 - Service: ewido security suite control (ewido security suite control) - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard (ewido security suite guard) - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Macromedia Licensing Service (Macromedia Licensing Service) - - "D:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - "D:\Program Files\Rising\Rav\CCenter.exe"
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - "D:\Program Files\Rising\Rav\Ravmond.exe"
O23 - Service: ServiceLayer (ServiceLayer) - Nokia. - "D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe"
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - D:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Universal Disk Manager (Universal Disk Manager) - - D:\WINNT\diskman.exe
O23 - Service: WDelMgr20 (WDelMgr20) - - D:\WINNT\system32\drivers\wdelmgr20.exe

流星花语 - 2006-9-8 22:12:00

没有人帮我看看么？

流星花语 - 2006-9-8 22:13:00

我无邪 - 2006-9-8 22:26:00

经常死机，有可能是硬件问题
嗯，先软后硬吧，你先这样试试

O23 - Service: WDelMgr20 (WDelMgr20) - - D:\WINNT\system32\drivers\wdelmgr20.exe这一项，你的系统可安装有恢复软件，我记得好像不生成这一服务项的，我觉得可疑，你最好确定一下。

开始→运行→输入services.msc，打开“服务”→查找Universal Disk Manager →双击→启动类型→禁止→停止→应用→确定。禁止Universal Disk Manager这个服务
重启后删除
D:\WINNT\diskman.exe

请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

流星花语 - 2006-9-8 22:49:00

非常感谢超凡脱俗，呵呵
首先，我的机器中装了恢复软件；已将diskman先禁用，还没来得及删除就下载了软件，扫描了一下先传上来；
以下是报告：
2006-09-08,22:40:44

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<internat.exe><internat.exe> [Microsoft Corporation]
<PcSync><D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog> [Time Information Services Ltd.]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Synchronization Manager><mobsync.exe /logon> [Microsoft Corporation]
<SoundMan><SOUNDMAN.EXE> [Avance Logic, Inc.]
<IgfxTray><D:\WINNT\System32\igfxtray.exe> [Intel Corporation]
<HotKeysCmds><D:\WINNT\System32\hkcmd.exe> [Intel Corporation]
<SSC_UserPrompt><D:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe> [Symantec Corporation]
<TkBellExe><"D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<CSMContext><D:\WINNT\system32\CSMContext.exe> [中文之星]
<stup.exe><D:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent]
<PCSuiteTrayApplication><D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup> [Nokia]
<SKYNET Personal FireWall><D:\PROGRA~1\SKYNET\FIREWALL\pfw.exe> [广州众达天网技术有限公司]
<RavTask><"D:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><D:\WINNT\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{54D9498B-CF93-414F-8984-8CE7FDE0D391}><C:\Program Files\ewido\security suite\shellhook.dll> []
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><D:\WINNT\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]

==================================
启动文件夹
[腾讯QQ]
<D:\Documents and Settings\mjwxh\「开始」菜单\程序\启动\腾讯QQ.lnk><N>

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
<D:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[ewido security suite control / ewido security suite control]
<C:\Program Files\ewido\security suite\ewidoctrl.exe><ewido networks>
[ewido security suite guard / ewido security suite guard]
<C:\Program Files\ewido\security suite\ewidoguard.exe><ewido networks>
[Macromedia Licensing Service / Macromedia Licensing Service]
<"D:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Rising Process Communication Center / RsCCenter]
<"D:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"D:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[ServiceLayer / ServiceLayer]
<"D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe"><Nokia.>
[SymWMI Service / SymWSC]
<D:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe><Symantec Corporation>
[Universal Disk Manager / Universal Disk Manager]
<D:\WINNT\diskman.exe><N/A>
[WDelMgr20 / WDelMgr20]
<D:\WINNT\system32\drivers\WDelMgr20.exe><N/A>

==================================
浏览器加载项
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <D:\WINNT\system32\xunleibho_v13.dll, Thunder Networking Technologies,LTD>
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <D:\Program Files\TENCENT\Adplus\SSAddr1.dll, Tencent>
[IEHandle Class]
{31EBA2E2-58B2-4980-9C41-F12F5F1422C5} <D:\Program Files\Common Files\Collegesoft\Share Components\TPHANDLE.dll, 江苏科建教育软件有限责任公司>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[DragSearch BHO]
{62EED7C6-9F02-42f9-B634-98E2899E147B} <D:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL, N/A>
[KPBHO Class]
{7C7DE9B8-CAA6-4B31-BC09-45AFC6B90FDE} <D:\WINNT\system32\iesense.dll, N/A>
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\qq\QQ.EXE, TENCENT>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <D:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <D:\WINNT\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[ewidoOnlineScan Control]
{193C772A-87BE-4B19-A7BB-445B226FE9A1} <D:\WINNT\DOWNLO~1\EWIDOO~1.DLL, Anti-Malware Development a.s.>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <D:\WINNT\system32\wuweb.dll, Microsoft Corporation>
[MUWebControl Class]
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <D:\WINNT\system32\muweb.dll, Microsoft Corporation>
[Qzone Media Tools]
{A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <C:\PROGRA~1\Tencent\qq\QZone\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited>
[Qzone Media Tools]
{AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} <C:\PROGRA~1\Tencent\qq\VQQPLA~1.OCX, Tencent Technology (Shenzhen) Company Limited>
[KSHScan Control]
{ACFE8232-03C5-4AEC-AF5E-42B806724096} <D:\WINNT\system32\kingsoft\ONLINE~1\KSHScan.ocx, kingsoft>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <D:\WINNT\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
<D:\Program Files\Thunder Network\Thunder\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<D:\Program Files\Thunder Network\Thunder\getallurl.htm, N/A>
[&使用迷你迅雷下载]
<C:\Program Files\Maxthon\Thundermini\geturl.htm, N/A>
[Listen→朗读当前选定内容]
<C:\PROGRA~1\LISTEN~1.0\page\readsel.htm, N/A>
[Listen→获取当前焦点内容]
<C:\PROGRA~1\LISTEN~1.0\page\getactive.htm, N/A>
[Listen→获取当前选定内容]
<C:\PROGRA~1\LISTEN~1.0\page\getsel.htm, N/A>
[上传到QQ网络硬盘]
<C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
<C:\Program Files\KuGoo3\KuGoo3DownX.htm, N/A>
[使用网际快车下载]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\Program Files\FlashGet\jc_all.htm, N/A>
[导出当前页到超星阅览器(&A)]
<C:\Program Files\SSREADER36\ss_all.htm, N/A>
[导出选中部分到超星阅览器(&S)]
<C:\Program Files\SSREADER36\ss_select.htm, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\qq\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
<C:\Program Files\BitSpirit\bsurl.htm, N/A>
[豪杰超级解霸V8实时播放]
<C:\Herosoft\HeroV8\MPURLGET.HTM, N/A>

流星花语 - 2006-9-8 22:52:00

==================================
正在运行的进程
[PID: 140][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 164][\??\D:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\D:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6997>
[PID: 212][D:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.7035>
[D:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 224][D:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.7011>
[PID: 376][D:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 412][D:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 428][D:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
[D:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[D:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
[D:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[D:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[D:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[D:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[D:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[D:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34>
[D:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15>
[D:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[D:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 13>
[D:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[D:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[D:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
[D:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[PID: 472][D:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059>
[PID: 504][D:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 524][C:\Program Files\ewido\security suite\ewidoctrl.exe] <ewido networks><3, 0, 0, 1>
[C:\Program Files\ewido\security suite\lang.dll] <privat><1, 0, 0, 1>
[PID: 588][D:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6972>
[PID: 608][D:\WINNT\system32\stisvc.exe] <Microsoft Corporation><5.00.2195.6656>
[PID: 676][D:\WINNT\system32\drivers\WDelMgr20.exe] <N/A><N/A>
[PID: 684][D:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 704][D:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 772][D:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1020][D:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690>
[C:\Program Files\ewido\security suite\shellhook.dll] <N/A><N/A>
[D:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0>
[D:\Program Files\TENCENT\Adplus\SSAddr1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.7.2006011200>
[C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0>
[C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A>
[D:\Program Files\WinRAR\rarext.dll] <N/A><N/A>

流星花语 - 2006-9-8 22:53:00

[PID: 1152][D:\WINNT\SOUNDMAN.EXE] <Avance Logic, Inc.><5.0>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1168][D:\WINNT\System32\hkcmd.exe] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\hccutils.DLL] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\igfxdev.dll] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\igfxsrvc.dll] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\igfxhk.dll] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\igfxres.dll] <Intel Corporation><3,0,0,1241>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1224][D:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3427>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1260][D:\WINNT\system32\CSMContext.exe] <中文之星><1, 0, 0, 1>
[C:\Program Files\ewido\security suite\shellhook.dll] <N/A><N/A>
[D:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1304][D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE] <Nokia><6, 80, 53, 3>
[D:\WINNT\system32\ConnAPI.DLL] <Nokia.><6, 80, 55, 5>
[D:\PROGRA~1\Nokia\NOKIAP~1\PCSCM.dll] <Nokia><6, 80, 66, 0>
[D:\Program Files\Common Files\PCSuite\ConfServer\ConfServer.dll] <Nokia><6, 80, 20, 4>
[D:\WINNT\system32\NclTools.dll] <Nokia.><6, 80, 18, 3>
[D:\PROGRA~1\Nokia\NOKIAP~1\Lang\LaunchApplication_chi-sc.NLR] <Nokia><6, 80, 56, 0>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1156][D:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1324][D:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 32>
[D:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[D:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1344][D:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1368][D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe] <Time Information Services Ltd.><2.00 (486)>
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] <Nokia><6, 80, 66, 0>
[D:\WINNT\system32\ConnAPI.DLL] <Nokia.><6, 80, 55, 5>
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSL.dll] <Nokia><6, 80, 4, 0>
[D:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 6\Lang\PcSync2_chi-sc.nlr] <Time Information Services Ltd.><8.00 (486)>
[D:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 6\Resource\PcSync2_Nokia.ngr] <Time Information Services Ltd.><8.00 (486)>
[D:\Program Files\Common Files\Nokia\Adapters\NclSet.dll] <Nokia><6.80.9.0>
[D:\Program Files\Common Files\Nokia\Adapters\Nclaeo.dsc] <Nokia Mobile Phones Ltd.><4.00.008>
[D:\Program Files\Common Files\Nokia\MPAPI\MPAPIps.dll] <Nokia Corporation><6.80.73.0>
[D:\Program Files\Common Files\PCSuite\ConfServer\ConfServer.dll] <Nokia><6, 80, 20, 4>
[D:\WINNT\system32\NclTools.dll] <Nokia.><6, 80, 18, 3>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\Nokia\Nokia PC Suite 6\CommonSelectDevice.dll] <Nokia><6, 80, 73, 0>
[PID: 1392][C:\Program Files\Tencent\qq\QQ.exe] <TENCENT><14, 27, 0, 082>
[C:\Program Files\Tencent\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQHelperDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\BasicCtrlDll.dll] <Tencent><0, 3, 3, 6>
[C:\Program Files\Tencent\qq\QQAPI.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[C:\Program Files\Tencent\qq\LoginCtrl.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2005, 9, 1, 1>
[C:\Program Files\Tencent\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[C:\Program Files\Tencent\qq\QQRes.dll] <tencent><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQMainFrame.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\CQQApplication.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\NewSkin.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\HostingMgr.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\MailSummary.dll] <><1, 0, 0, 1>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[C:\Program Files\Tencent\qq\QQSpace.dll] <><1, 0, 0, 1>
[D:\WINNT\system32\msdmo.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\QQAllInOne.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\CameraDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\SCCore.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\QRingMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\QQConfigPlugin.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\UserDefinedHead.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\PhoneAPI.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[C:\Program Files\Tencent\qq\LongConnection.dll] <tencent><0, 3, 3, 8>
[C:\Program Files\Tencent\qq\QQSysMsgMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\QQPet.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQAvatar.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\FlashAvatarDll.dll] <><1, 4, 0, 1>
[C:\Program Files\ewido\security suite\shellhook.dll] <N/A><N/A>
[D:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\Program Files\Tencent\qq\QQPlugin.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\QQCustomFace.dll] <N/A><N/A>
[D:\WINNT\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[C:\Program Files\Tencent\qq\ImageOle.dll] <TODO: <Company name>><1.0.0.1>
[C:\Program Files\Tencent\qq\QQSceneMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\qq\BQQApplication.dll] <N/A><N/A>
[D:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll] <Nokia><6, 80, 37, 4>
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] <Nokia><6, 80, 66, 0>
[D:\WINNT\system32\ConnAPI.DLL] <Nokia.><6, 80, 55, 5>
[D:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] <Nokia><6, 80, 26, 0>
[D:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] <Nokia><6, 80, 8, 0>
[D:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Tencent\qq\CommercesMng.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[C:\Program Files\Tencent\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><4, 0, 200, 32>
[C:\Program Files\Tencent\qq\GroupConnection.dll] <Tencent><0, 3, 3, 5>
[C:\Program Files\Tencent\qq\QQPhoneHelper.dll] <腾讯科技（深圳）有限公司><2, 0, 6, 60>
[C:\Program Files\Tencent\qq\QQMagicFace.dll] <><1, 0, 0, 1>
[D:\WINNT\system32\CSMPYIII.IME] <中文之星><3, 3, 0, 1>
[D:\WINNT\system32\CSMPYIme.dll] <N/A><N/A>
[D:\WINNT\system32\CSMConvert.dll] <北京中文之星数码科技有限公司><3, 0, 0, 0>
[D:\WINNT\system32\CSMPYEng.dll] <N/A><N/A>
[D:\WINNT\system32\CSMPinyin.dll] <N/A><N/A>
[D:\WINNT\system32\CSMConfig.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\qq\QQFileTransfer.dll] <Tencent><0, 3, 3, 5>

流星花语 - 2006-9-8 22:53:00

[PID: 1400][D:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe] <Nokia Corporation><6.80.161.0>
[D:\Program Files\Common Files\Nokia\MPAPI\MPAPIps.dll] <Nokia Corporation><6.80.73.0>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1436][C:\Program Files\Tencent\qq\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[C:\Program Files\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 736][D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe] <Nokia.><6, 80, 56, 4>
[D:\WINNT\system32\NclTools.dll] <Nokia.><6, 80, 18, 3>
[D:\Program Files\Common Files\PCSuite\Transports\NCLIrDAMM.dll] <Nokia Corp.><6, 80, 26, 0>
[D:\Program Files\Common Files\PCSuite\Services\NclDS.dll] <Nokia><6, 80, 12, 0>
[D:\Program Files\Common Files\PCSuite\Transports\NCLRSMM.dll] <Nokia><6, 80, 33, 0>
[D:\Program Files\Common Files\PCSuite\Transports\NCLUSBMM.dll] <Nokia><6, 80, 37, 0>
[PID: 1380][D:\Program Files\Rising\Rav\Rav.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 75>
[D:\Program Files\Rising\Rav\PlugIn\RsPgScan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\Program Files\Rising\Rav\RavUI.Dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 61>
[D:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[D:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[D:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\Program Files\Rising\Rav\RavUIMsg.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
[D:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1268][D:\Program Files\Rising\Rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 300][D:\WINNT\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 420][D:\Program Files\Thunder Network\Thunder\Thunder.exe] <Thunder Networking Technologies,LTD><5.1.3.168>
[D:\Program Files\Thunder Network\Thunder\UpdateDownload.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2>
[D:\Program Files\Thunder Network\Thunder\download_interface.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 57>
[D:\Program Files\Thunder Network\Thunder\log4cplus.dll] <><1, 0, 2, 1>
[D:\Program Files\Thunder Network\Thunder\stlport_vc646.dll] <STLport Consulting, Inc.><4.6.2003.1031>
[D:\Program Files\Thunder Network\Thunder\msgmanage.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 13>
[D:\Program Files\Thunder Network\Thunder\historyinfo_manage.dll] <Thunder Networking Technologies,LTD><5, 2, 0, 148>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\Thunder Network\Thunder\iEmbed.dll] <Thunder Networking Technologies,LTD><1, 0, 1, 14>
[D:\Program Files\Thunder Network\Thunder\RegisterDll.dll] <Thunder Networking Technologies,LTD><1, 2, 0, 6>
[D:\Program Files\Thunder Network\Thunder\FloatBar.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2>
[D:\Program Files\Thunder Network\Thunder\iTargetAd.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 51>
[D:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\WINNT\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[C:\Program Files\ewido\security suite\shellhook.dll] <N/A><N/A>
[D:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[PID: 1660][D:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2800.1106>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\TENCENT\Adplus\SSAddr1.dll] <Tencent><4, 2, 4, 40>
[D:\WINNT\system32\kakatool.dll] <Beijing Rising Technology Co., Ltd.><2, 0, 0, 9>
[D:\WINNT\system32\xunleibho_v13.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 48>
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.7.2006011200>
[D:\Program Files\Common Files\Collegesoft\Share Components\TPHANDLE.dll] <江苏科建教育软件有限责任公司><5, 1, 8, 1>
[C:\Program Files\Tencent\qq\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
[C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0>
[C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A>
[D:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\WINNT\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[PID: 1588][D:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll] <Nokia><6, 80, 37, 4>
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] <Nokia><6, 80, 66, 0>
[D:\WINNT\system32\ConnAPI.DLL] <Nokia.><6, 80, 55, 5>
[D:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] <Nokia><6, 80, 26, 0>
[D:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] <Nokia><6, 80, 8, 0>
[PID: 1668][D:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[D:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll] <Nokia><6, 80, 37, 4>
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] <Nokia><6, 80, 66, 0>
[D:\WINNT\system32\ConnAPI.DLL] <Nokia.><6, 80, 55, 5>
[D:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] <Nokia><6, 80, 26, 0>
[D:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] <Nokia><6, 80, 8, 0>
[C:\Program Files\ewido\security suite\shellhook.dll] <N/A><N/A>
[D:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[PID: 1772][D:\WINNT\System32\notepad.exe] <Microsoft Corporation><5.00.2140.1>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>
[PID: 1952][D:\DOCUME~1\mjwxh\LOCALS~1\Temp\Rar$EX05.082\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 40>

==================================
文件关联
.TXT Error. [D:\WINNT\System32\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["D:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

我无邪 - 2006-9-8 23:14:00

打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），使用“启动项目，注册表”选中要修复的项，点“编辑”在“值”里删除

关闭所有浏览窗口以及一些不必要的程序
打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），使用“系统修复，浏览器加载项”来删除以下选项。
D:\WINNT\system32\iesense.dll

打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Universal Disk Manager，选择“删除服务”点“设置”选择“否”
重启后删除
D:\WINNT\system32\iesense.dll

D:\WINNT\diskman.exe
有异常再扫个日志粘上来。

流星花语 - 2006-9-8 23:49:00

第一项：以下内容都做了
“关闭所有浏览窗口以及一些不必要的程序
打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），使用“系统修复，浏览器加载项”来删除以下选项。
D:\WINNT\system32\iesense.dll

打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Universal Disk Manager，选择“删除服务”点“设置”选择“否””

第二项：
“重启后删除
D:\WINNT\system32\iesense.dll

D:\WINNT\diskman.exe
有异常再扫个日志粘上来。”

我重启后用搜索没有找到这两个程序，可真是奇怪了
，有没有操作错误噢？

流星花语 - 2006-9-8 23:55:00

是不是不应该用开始菜单的搜索？

我无邪 - 2006-9-9 11:36:00

最好自己跟着路径去找
找不到也没有关系
烦再扫个日志粘上来。

流星花语 - 2006-9-15 13:02:00

好久没上网了呵呵，现在才回呵呵，以下是我刚扫的，麻烦你了：
2006-09-15,12:57:13

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<internat.exe><internat.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Synchronization Manager><mobsync.exe /logon> [Microsoft Corporation]
<SoundMan><SOUNDMAN.EXE> [Avance Logic, Inc.]
<IgfxTray><D:\WINNT\System32\igfxtray.exe> [Intel Corporation]
<HotKeysCmds><D:\WINNT\System32\hkcmd.exe> [Intel Corporation]
<SSC_UserPrompt><D:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe> [Symantec Corporation]
<TkBellExe><"D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<CSMContext><D:\WINNT\system32\CSMContext.exe> [中文之星]
<stup.exe><D:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent]
<PCSuiteTrayApplication><D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup> [Nokia]
<SKYNET Personal FireWall><D:\PROGRA~1\SKYNET\FIREWALL\pfw.exe> [广州众达天网技术有限公司]
<RavTask><"D:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><D:\WINNT\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{54D9498B-CF93-414F-8984-8CE7FDE0D391}><C:\Program Files\ewido\security suite\shellhook.dll> []
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><D:\WINNT\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]

==================================
启动文件夹
服务
[Logical Disk Manager Administrative Service / dmadmin]
<D:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[ewido security suite control / ewido security suite control]
<C:\Program Files\ewido\security suite\ewidoctrl.exe><ewido networks>
[ewido security suite guard / ewido security suite guard]
<C:\Program Files\ewido\security suite\ewidoguard.exe><ewido networks>
[Macromedia Licensing Service / Macromedia Licensing Service]
<"D:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Rising Process Communication Center / RsCCenter]
<"D:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"D:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[ServiceLayer / ServiceLayer]
<"D:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe"><Nokia.>
[SymWMI Service / SymWSC]
<D:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe><Symantec Corporation>
[WDelMgr20 / WDelMgr20]
<D:\WINNT\system32\drivers\WDelMgr20.exe><N/A>

==================================
浏览器加载项
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <D:\WINNT\system32\xunleibho_v13.dll, Thunder Networking Technologies,LTD>
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <D:\Program Files\TENCENT\Adplus\SSAddr1.dll, Tencent>
[IEHandle Class]
{31EBA2E2-58B2-4980-9C41-F12F5F1422C5} <D:\Program Files\Common Files\Collegesoft\Share Components\TPHANDLE.dll, 江苏科建教育软件有限责任公司>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[DragSearch BHO]
{62EED7C6-9F02-42f9-B634-98E2899E147B} <D:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL, N/A>
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\qq\QQ.EXE, TENCENT>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <D:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <D:\WINNT\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[ewidoOnlineScan Control]
{193C772A-87BE-4B19-A7BB-445B226FE9A1} <D:\WINNT\DOWNLO~1\EWIDOO~1.DLL, Anti-Malware Development a.s.>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <D:\WINNT\system32\wuweb.dll, Microsoft Corporation>
[MUWebControl Class]
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <D:\WINNT\system32\muweb.dll, Microsoft Corporation>
[Qzone Media Tools]
{A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <C:\PROGRA~1\Tencent\qq\QZone\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited>
[Qzone Media Tools]
{AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} <C:\PROGRA~1\Tencent\qq\VQQPLA~1.OCX, Tencent Technology (Shenzhen) Company Limited>
[KSHScan Control]
{ACFE8232-03C5-4AEC-AF5E-42B806724096} <D:\WINNT\system32\kingsoft\ONLINE~1\KSHScan.ocx, kingsoft>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <D:\WINNT\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>

流星花语 - 2006-9-15 13:03:00

[&使用迅雷下载]
<D:\Program Files\Thunder Network\Thunder\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<D:\Program Files\Thunder Network\Thunder\getallurl.htm, N/A>
[&使用迷你迅雷下载]
<C:\Program Files\Maxthon\Thundermini\geturl.htm, N/A>
[Listen→朗读当前选定内容]
<C:\PROGRA~1\LISTEN~1.0\page\readsel.htm, N/A>
[Listen→获取当前焦点内容]
<C:\PROGRA~1\LISTEN~1.0\page\getactive.htm, N/A>
[Listen→获取当前选定内容]
<C:\PROGRA~1\LISTEN~1.0\page\getsel.htm, N/A>
[上传到QQ网络硬盘]
<C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
<C:\Program Files\KuGoo3\KuGoo3DownX.htm, N/A>
[使用网际快车下载]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\Program Files\FlashGet\jc_all.htm, N/A>
[导出当前页到超星阅览器(&A)]
<C:\Program Files\SSREADER36\ss_all.htm, N/A>
[导出选中部分到超星阅览器(&S)]
<C:\Program Files\SSREADER36\ss_select.htm, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\qq\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
<C:\Program Files\BitSpirit\bsurl.htm, N/A>
[豪杰超级解霸V8实时播放]
<C:\Herosoft\HeroV8\MPURLGET.HTM, N/A>

==================================
正在运行的进程
[PID: 140][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 164][\??\D:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\D:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6997>
[PID: 212][D:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.7035>
[D:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 224][D:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.7011>
[PID: 372][D:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 412][D:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 428][D:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35>
[D:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[D:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
[D:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32>
[D:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[D:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[D:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[D:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[D:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34>
[D:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15>
[D:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[D:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 13>
[D:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[D:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[D:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
[D:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[PID: 472][D:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059>
[PID: 504][D:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 524][C:\Program Files\ewido\security suite\ewidoctrl.exe] <ewido networks><3, 0, 0, 1>
[C:\Program Files\ewido\security suite\lang.dll] <privat><1, 0, 0, 1>
[PID: 588][D:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6972>
[PID: 608][D:\WINNT\system32\stisvc.exe] <Microsoft Corporation><5.00.2195.6656>
[PID: 676][D:\WINNT\system32\drivers\WDelMgr20.exe] <N/A><N/A>
[PID: 688][D:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 708][D:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 768][D:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>

流星花语 - 2006-9-15 13:04:00

[PID: 1040][D:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0>
[C:\Program Files\ewido\security suite\shellhook.dll] <N/A><N/A>
[D:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll] <Nokia><6, 80, 37, 4>
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] <Nokia><6, 80, 66, 0>
[D:\WINNT\system32\ConnAPI.DLL] <Nokia.><6, 80, 55, 5>
[D:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] <Nokia><6, 80, 26, 0>
[D:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] <Nokia><6, 80, 8, 0>
[D:\Program Files\TENCENT\Adplus\SSAddr1.dll] <Tencent><4, 2, 4, 43>
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.7.2006011200>
[C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A>
[D:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\ewido\security suite\context.dll] <ewido networks><1.0.0.1>
[C:\Program Files\ewido\security suite\lang.dll] <privat><1, 0, 0, 1>
[D:\WINNT\System32\igfxpph.dll] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\hccutils.DLL] <Intel Corporation><3,0,0,1241>
[PID: 1160][D:\WINNT\SOUNDMAN.EXE] <Avance Logic, Inc.><5.0>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>
[PID: 1196][D:\WINNT\System32\hkcmd.exe] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\hccutils.DLL] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\igfxdev.dll] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\igfxsrvc.dll] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\igfxhk.dll] <Intel Corporation><3,0,0,1241>
[D:\WINNT\System32\igfxres.dll] <Intel Corporation><3,0,0,1241>
[PID: 1236][D:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3427>
[PID: 1264][D:\WINNT\system32\CSMContext.exe] <中文之星><1, 0, 0, 1>
[C:\Program Files\ewido\security suite\shellhook.dll] <N/A><N/A>
[D:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>
[PID: 1304][D:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 1316][D:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
[D:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
[D:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>
[PID: 1328][D:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>
[PID: 392][D:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>
[D:\Program Files\TENCENT\Adplus\SSAddr1.dll] <Tencent><4, 2, 4, 43>
[D:\WINNT\system32\kakatool.dll] <Beijing Rising Technology Co., Ltd.><2, 0, 0, 9>
[D:\WINNT\system32\xunleibho_v13.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 48>
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.7.2006011200>
[D:\Program Files\Common Files\Collegesoft\Share Components\TPHANDLE.dll] <江苏科建教育软件有限责任公司><5, 1, 8, 1>
[C:\Program Files\Tencent\qq\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
[C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0>
[C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A>
[D:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\WINNT\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[D:\WINNT\system32\CSMPYIII.IME] <中文之星><3, 3, 0, 1>
[D:\WINNT\system32\CSMPYIme.dll] <N/A><N/A>
[D:\WINNT\system32\CSMConvert.dll] <北京中文之星数码科技有限公司><3, 0, 0, 0>
[D:\WINNT\system32\CSMPYEng.dll] <N/A><N/A>
[D:\WINNT\system32\CSMPinyin.dll] <N/A><N/A>
[D:\WINNT\system32\CSMConfig.dll] <><1, 0, 0, 1>
[PID: 920][D:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2800.1106>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>
[D:\Program Files\TENCENT\Adplus\SSAddr1.dll] <Tencent><4, 2, 4, 43>
[D:\WINNT\system32\kakatool.dll] <Beijing Rising Technology Co., Ltd.><2, 0, 0, 9>
[D:\WINNT\system32\xunleibho_v13.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 48>
[D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.7.2006011200>
[D:\Program Files\Common Files\Collegesoft\Share Components\TPHANDLE.dll] <江苏科建教育软件有限责任公司><5, 1, 8, 1>
[C:\Program Files\Tencent\qq\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
[C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0>
[C:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A>
[D:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\WINNT\system32\CSMPYIII.IME] <中文之星><3, 3, 0, 1>
[D:\WINNT\system32\CSMPYIme.dll] <N/A><N/A>
[D:\WINNT\system32\CSMConvert.dll] <北京中文之星数码科技有限公司><3, 0, 0, 0>
[D:\WINNT\system32\CSMPYEng.dll] <N/A><N/A>
[D:\WINNT\system32\CSMPinyin.dll] <N/A><N/A>
[D:\WINNT\system32\CSMConfig.dll] <><1, 0, 0, 1>
[D:\WINNT\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[D:\WINNT\system32\msdmo.dll] <N/A><N/A>
[D:\WINNT\system32\ac3filter.ax] <><0.70b>
[D:\WINNT\system32\DVobSub.ax] <Gabest><1, 0, 0, 8>
[D:\WINNT\system32\MMSwitch.ax] <Morgan Multimedia><0, 9, 7, 0>
[D:\WINNT\system32\l3codecp.acm] <Fraunhofer Institut Integrierte Schaltungen IIS><1, 2, 0, 63>
[D:\WINNT\system32\l3codeca.acm] <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
[PID: 1624][D:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>
[D:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll] <Nokia><6, 80, 37, 4>
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] <Nokia><6, 80, 66, 0>
[D:\WINNT\system32\ConnAPI.DLL] <Nokia.><6, 80, 55, 5>
[D:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] <Nokia><6, 80, 26, 0>
[D:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] <Nokia><6, 80, 8, 0>
[PID: 1680][D:\DOCUME~1\mjwxh\LOCALS~1\Temp\Rar$EX00.348\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[D:\Program Files\TENCENT\Adplus\Adplus1.dll] <Tencent><4, 2, 4, 43>

==================================
文件关联
.TXT Error. [D:\WINNT\System32\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["D:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

瑞星卡卡安全论坛