瑞星卡卡安全论坛

用了一次这个265首页修复http://www.265.com/home265.exe
我的ie首页就被强制锁定为http://www.265.com使用hijackthis、sreng2.2都查不出来，sreng2详细信息如下：

2006-10-01,08:44:32

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <WangWang><"C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE">  [淘宝（中国）软件有限公司]
    <KAVPersonal50><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize>  [Kaspersky Lab]
    <ATIModeChange><; Ati2mdxx.exe>  [ATI Technologies, Inc.]
    <MenuOrder><; C:\Program Files\ICBCPe~1\ICBC\Gemplus(Personal)\MenuOrder\MenuOrder.exe>  [N/A]
    <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  [N/A]
    <Alitalk><; C:\PROGRA~1\阿里巴巴\贸易通\AliTalk.EXE -hideframe>  [Alibaba]
    <ThunderMini><C:\Program Files\Thunder Network\ThunderMini\ThunderMiniShell.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]

==================================
启动文件夹
N/A

==================================
服务
[ASP.NET State Service / aspnet_state]
  <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[Ati HotKey Poller / Ati HotKey Poller]
  <C:\WINDOWS\system32\Ati2evxx.exe><N/A>
[Sony SPTI Service for DVE / ICDSPTSV]
  <C:\WINDOWS\system32\ICDSPTSV.EXE><Sony Corporation>
[kavsvc / kavsvc]
  <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"><Kaspersky Lab>
[PDEngine / PDEngine]
  <"C:\Program Files\Raxco\PerfectDisk\PDEngine.exe"><Raxco Software, Inc.>
[PDScheduler / PDSched]
  <"C:\Program Files\Raxco\PerfectDisk\PDSched.exe"><Raxco Software, Inc.>

==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AMD Processor Driver / AmdK8]
  <system32\DRIVERS\AmdK8.sys><Advanced Micro Devices>
[Anfad / Anfad]
  <system32\drivers\Anfad.sys><N/A>
[ati2mtaa / ati2mtaa]
  <system32\DRIVERS\ati2mtaa.sys><ATI Technologies Inc.>
[ati2mtag / ati2mtag]
  <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[ASUS TV7134 WDM Video Capture / Cap7134]
  <system32\DRIVERS\Cap7134.sys><Philips Semiconductors>
[cpuz / cpuz]
  <\??\D:\software\overclock\cpuz.sys><N/A>
[Defrag32 / Defrag32]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Defrag32.SYS><Raxco Software, Inc.>
[Defrag32Boot / Defrag32b]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Defrag32b.SYS><Raxco Software, Inc.>
[DSDrv4 / DSDrv4]
  <\??\C:\PROGRA~1\DScaler\DSDrv4.sys><>
[Mia Service / echo24]
  <system32\drivers\echo24.sys><Echo Digital Audio Corp.>
[3Com EtherLink XL 90XB/C Adapter Driver / EL90XBC]
  <system32\DRIVERS\el90xbc5.sys><3Com Corporation>
[ept2xm / ept2xm]
  <\SystemRoot\system32\drivers\ept2xm.sys><N/A>
[FAD / FAD]
  <system32\DRIVERS\FAD.sys><N/A>
[GKeyUSB / GKeyUSB]
  <System32\Drivers\GKeyUSB.sys><Gemplus>
[hostloc / hostlock]
  <\SystemRoot\System32\DRIVERS\hostlock.sys><Microsoft Corporation>
[Sony IC Recorder (P) / ICDUSB2]
  <System32\Drivers\ICDUSB2.sys><Sony Corporation>
[ids00026 / ids00026]
  <\??\C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids00026.sys><N/A>
[ids0005c / ids0005c]
  <\??\C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids0005c.sys><N/A>
[ids00102 / ids00102]
  <\??\C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids00102.sys><N/A>
[ids00118 / ids00118]
  <\??\C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids00118.sys><Kaspersky Lab>
[Klick / Klick]
  <\SystemRoot\System32\drivers\klick.sys><Kaspersky Lab>
[Klif / Klif]
  <System32\drivers\klif.sys><Kaspersky Labs>
[Klin / Klin]
  <\SystemRoot\System32\drivers\klin.sys><Kaspersky Lab>
[Klmc / Klmc]
  <System32\drivers\klmc.sys><Kaspersky Lab>
[klstm / klstm]
  <\??\C:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\klstm.sys><Kaspersky Lab>
[npkcrypt / npkcrypt]
  <\??\C:\Program Files\Tencent\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkcusb / npkcusb]
  <\??\C:\Program Files\Tencent\qq\npkcusb.sys><INCA Internet Co., Ltd.>
[NVIDIA nForce Networking Controller Driver / NVENETFD]
  <system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus]
  <system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[NVIDIA nForce AGP Bus Filter / nv_agp]
  <\SystemRoot\system32\DRIVERS\nv_agp.sys><NVIDIA Corporation>
[ASUS TV7134 WDM TVTuner / PhTVTune]
  <system32\DRIVERS\PhTVTune.sys><Philips Semiconductors>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1]
  <system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[sptd / sptd]
  <\SystemRoot\System32\Drivers\sptd.sys><N/A>
[up7plk4j / up7plk4j]
  <\??\C:\WINDOWS\system32\drivers\up7plk4j.sys><Microsoft Corporation>
[vaxscsi / vaxscsi]
  <\SystemRoot\System32\Drivers\vaxscsi.sys><Alcohol Soft Co., Ltd.>

==================================
浏览器加载项
[&RoboForm]
  {724d43a0-0d85-11d4-9908-00400523e39a} <C:\Program Files\Siber Systems\AI RoboForm\roboform.dll, Siber Systems>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINDOWS\system32\CMBEdit.dll, >
[InfosecCertInstall Class]
  {0EB487C8-E9AC-43A6-8C4C-083999B0622F} <C:\WINDOWS\system32\certInStall.dll, >
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[InfoSecNetSign Class]
  {62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\WINDOWS\system32\NetSign.dll, Infosec Technologies Co., Ltd.>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~2\CONFLICT.1\SUBMIT~1.DLL, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[AxUSBKey Class]
  {DA215190-98B2-47DE-AE24-DA95481DFFBA} <C:\WINDOWS\system32\USBKey.dll, >
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINDOWS\system32\CMBEdit.dll, >
[InfosecCertInstall Class]
  {0EB487C8-E9AC-43A6-8C4C-083999B0622F} <C:\WINDOWS\system32\certInStall.dll, >
[iTrusPTA Class]
  {1E0DFFCF-27FF-4574-849B-55007349FEDA} <C:\WINDOWS\system32\aliedit\pta.dll, >
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[BlueskyVideo Control]
  {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} <C:\PROGRA~1\Bluesky\BLUESK~1\v2.ocx, 蓝天工作室(http://www.bluesky.cn)>
[Tabular Data Control]
  {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation>
[IE Browser Helper]
  {3CE496D1-1746-41CD-9489-3C0B93DF10E2} <, N/A>
[BitComet工具栏]
  {3F1ABCDB-A875-46C1-8345-B72A4567E486} <C:\Program Files\BitComet\BitCometBar\BitCometBar0.6.dll, N/A>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[HHCtrl Object]
  {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[InfoSecNetSign Class]
  {62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\WINDOWS\system32\NetSign.dll, Infosec Technologies Co., Ltd.>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[CPub Object]
  {6F6D1BD2-9270-4E9E-B491-0287F418B5AB} <C:\Program Files\AspStudio\AspDebugerBHO.dll, N/A>
[&RoboForm]
  {724D43A0-0D85-11D4-9908-00400523E39A} <C:\Program Files\Siber Systems\AI RoboForm\roboform.dll, Siber Systems>
[]
  {724D43A9-0D85-11D4-9908-00400523E39A} <C:\Program Files\Siber Systems\AI RoboForm\roboform.dll, Siber Systems>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\system32\INPUTC~1.DLL, >
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~2\CONFLICT.1\SUBMIT~1.DLL, N/A>
[RMGetLicense Class]
  {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[卡卡上网安全助手]
  {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[Messenger Object]
  {B69003B3-C55E-4B48-836C-BC5946FC3B28} <C:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[CSetLET Class]
  {C35D7AE1-0865-4A30-BF07-29FA29324155} <C:\WINDOWS\system32\GDSetLET.dll, >
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[AxUSBKey Class]
  {DA215190-98B2-47DE-AE24-DA95481DFFBA} <C:\WINDOWS\system32\USBKey.dll, >
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[PBActiveX40 Control]
  {F2EB8999-766E-4BF6-AAAD-188D398C0D0B} <C:\WINDOWS\system32\CMBPB40.ocx, China Merchants Bank>
[上传到QQ网络硬盘]
  <C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>

==================================
正在运行的进程
[PID: 708][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 772][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 796][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 840][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 852][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1032][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1092][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1196][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1252][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1344][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1432][C:\WINDOWS\System32\SCardSvr.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1652][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
[PID: 1760][C:\WINDOWS\system32\inetsrv\inetinfo.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1932][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 520][C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE]  [淘宝（中国）软件有限公司, 1, 7, 6, 829]
    [C:\Program Files\淘宝网\淘宝旺旺\AliViewCtrl.dll]  [vline, 1, 0, 0, 1]
    [C:\Program Files\淘宝网\淘宝旺旺\VLNetwork.dll]  [, 1, 0, 0, 6]
    [C:\Program Files\淘宝网\淘宝旺旺\AliViewMedia.dll]  [vline, 1, 0, 0, 1]
    [C:\Program Files\淘宝网\淘宝旺旺\VideoCAP.dll]  [, 1, 0, 0, 4]
    [C:\Program Files\淘宝网\淘宝旺旺\VLAudio.dll]  [, 1, 0, 0, 4]
    [C:\Program Files\淘宝网\淘宝旺旺\JsmShow.dll]  [, 1, 0, 0, 3]
    [C:\Program Files\淘宝网\淘宝旺旺\Ali_Res.DLL]  [N/A, N/A]
    [C:\Program Files\淘宝网\淘宝旺旺\RichOne.dll]  [淘宝(中国)软件有限公司, 1.0.0.1]
    [C:\Program Files\淘宝网\淘宝旺旺\WangWangX0.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
[PID: 588][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 596][C:\Program Files\Messenger\msmsgs.exe]  [Microsoft Corporation, 4.7.3001]
[PID: 1008][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 4004][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 372][C:\Program Files\NetCaptor\NetCaptor.exe]  [Stilesoft Inc., 7.5.4.1429]
    [C:\Program Files\Siber Systems\AI RoboForm\roboform.dll]  [Siber Systems, 6-7-9]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  [Kaspersky Lab, 1.0.227.342]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  [Kaspersky Lab, 1.0.227.3]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  [Kaspersky Lab, 5.0.227.0]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  [Kaspersky Lab, 5.0.227.0]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [C:\Program Files\Thunder Network\ThunderMini\ComDlls\XunLeiMiniBHO_001.dll]  [Thunder Networking Technologies,LTD, 2, 0, 0, 1]
[PID: 3920][C:\Program Files\Tencent\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [C:\Program Files\Tencent\qq\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [C:\Program Files\Tencent\qq\CoralQQ.DLL]  [Coral Team, 4.5 Build 20060515]
    [C:\Program Files\Tencent\qq\ipsearcher.dll]  [N/A, 1.0.0.4]
    [C:\Program Files\Tencent\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 160]
    [C:\Program Files\Tencent\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Tencent\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 3, 2, 1]
    [C:\Program Files\Tencent\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\Program Files\Tencent\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\WizardCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQMainFrame.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [C:\Program Files\Tencent\qq\CQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\GroupLive.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQAllInOne.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\SCCore.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQCustomFace.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQPlugin.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [C:\Program Files\Tencent\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\Program Files\Tencent\qq\QRingMng.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [C:\Program Files\Tencent\qq\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQAvatar.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQSceneMng.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [C:\Program Files\Tencent\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [C:\Program Files\Tencent\qq\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\BQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQUdpGetFileLib.dll]  [tencent, 0, 2, 2, 3]
    [C:\Program Files\Tencent\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200]
[PID: 3964][C:\Program Files\Tencent\qq\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
    [C:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 4076][C:\Program Files\foobar2000\foobar2000.exe]  [N/A, N/A]
    [C:\Program Files\foobar2000\utf8api.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_albumlist.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_ape.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_cdda.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_clienc.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_codepage_action.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_console.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_diskwriter.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_dsp_extra.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_flac.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_infobox.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_input_std.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_liveupdate.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_masstag.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_mod.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\BASS.dll]  [Un4seen Developments, 2.0]
    [C:\Program Files\foobar2000\components\foo_output_std.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_out_dsound_ex.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_read_http.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_rgscan.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_speex.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_ui_std.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_vis_manager.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_wavpack.dll]  [N/A, N/A]
    [C:\Program Files\foobar2000\components\foo_wma.dll]  [, 1.0.9]
[PID: 1424][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\kakatool.dll]  [Beijing Rising Technology Co., Ltd., 2, 0, 0, 9]
    [C:\WINDOWS\system32\NpOpenStore.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\NPCard.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RsaFun.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\GPKPCSC.dll]  [N/A, N/A]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  [Kaspersky Lab, 1.0.227.342]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  [Kaspersky Lab, 1.0.227.3]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  [Kaspersky Lab, 5.0.227.0]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  [Kaspersky Lab, 5.0.227.0]
[PID: 2516][C:\Documents and Settings\root.ZZH\桌面\反流氓软件\SREng2\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\system32\NpOpenStore.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\NPCard.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RsaFun.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\GPKPCSC.dll]  [N/A, N/A]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================

hjackthis 日志如下：
HijackThis_815汉化版扫描日志 V1.99.1
保存于      8:47:44, 日期 2006-10-1
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NetCaptor\NetCaptor.exe
C:\Program Files\Tencent\qq\QQ.exe
C:\Program Files\Tencent\qq\TIMPlatform.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\root.ZZH\桌面\反流氓软件\Hijackthis1991zww\HijackThis1991zww.exe

R3 - 默认的URLSearchHook丢失。用HijackThis修复
O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - (no file)
O2 - BHO: (no name) - {6671A431-5C3D-463d-A7CF-5587F9B7E191}? - (no file)
O3 - IE工具栏增项: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [WangWang] "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
O4 - 启动项HKLM\\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - 启动项HKLM\\Run: [ATIModeChange] ; Ati2mdxx.exe
O4 - 启动项HKLM\\Run: [MenuOrder] ; C:\Program Files\ICBCPe~1\ICBC\Gemplus(Personal)\MenuOrder\MenuOrder.exe
O4 - 启动项HKLM\\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [Alitalk] ; C:\PROGRA~1\阿里巴巴\贸易通\AliTalk.EXE -hideframe
O4 - 启动项HKLM\\Run: [ThunderMini] C:\Program Files\Thunder Network\ThunderMini\ThunderMiniShell.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\qq\AddEmotion.htm
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab
O16 - DPF: {0EB487C8-E9AC-43A6-8C4C-083999B0622F} (InfosecCertInstall Class) - https://mybank.icbc.com.cn/icbc/perbank/certInStall.dll
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {62B938C4-4190-4F37-8CF0-A92B0A91CC77} (InfoSecNetSign Class) - https://mybank.icbc.com.cn/icbc/NetSign.dll
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (AxSubmitControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {DA215190-98B2-47DE-AE24-DA95481DFFBA} (AxUSBKey Class) - https://mybank.icbc.com.cn/icbc/perbank/AxUSBKey.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{032AEB02-C735-49E4-A4C9-69BF604CE954}: NameServer = 61.129.64.3,10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\..\{62442248-EDEE-49EB-8E75-E90272A0375F}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{032AEB02-C735-49E4-A4C9-69BF604CE954}: NameServer = 61.129.64.3,10.0.0.138
O17 - HKLM\System\CS2\Services\Tcpip\..\{032AEB02-C735-49E4-A4C9-69BF604CE954}: NameServer = 61.129.64.3,10.0.0.138
O23 - NT 服务: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - NT 服务: Sony SPTI Service for DVE (ICDSPTSV) - Sony Corporation - C:\WINDOWS\system32\ICDSPTSV.EXE
O23 - NT 服务: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - NT 服务: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - NT 服务: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe

讨厌这些行为，用流氓软件推广的网站我坚决不上，淘宝我也不上！！！

日志看不出问题明显问题
你说下载了http://www.265.com/home265.exe，你的主页就变了，对吧？

下载运行后主页就被锁定了

很怪啊，我运行后，没有任何给修改的
以下选项，如果你知道，就不必修复

关闭所有浏览窗口以及一些不必要的程序
打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），使用“系统修复，浏览器加载项”来删除以下选项。
C:\WINDOWS\system32\CMBEdit.dll
C:\WINDOWS\system32\certInStall.dll
C:\WINDOWS\system32\NetSign.dll
C:\WINDOWS\system32\USBKey.dll
C:\WINDOWS\system32\GDSetLET.dll
重启后删除
C:\WINDOWS\system32\CMBEdit.dll
C:\WINDOWS\system32\certInStall.dll
C:\WINDOWS\system32\NetSign.dll
C:\WINDOWS\system32\USBKey.dll
C:\WINDOWS\system32\GDSetLET.dll

开System Repair Engineer（也就是你的扫描日志软件SREng.exe），使用“系统修复，Internet Explorer”“全选”“修复"看看能不能解决问题。

这些都没问题。你的是不是已经锁定了主页无法被任何东西修改？我的没有锁定：（　

以下home265.exe的部分ascII代码

MZ?      ?      @                                  ?  ? ???L?This program cannot be run in DOS mode.

$      Q迬?苦?苦?苦蟦ｌ?苦蠔ｎ?苦蟴犼?苦蟴犱?苦?酷蟭苦蠔方?苦?欔?苦?欕?苦弦规?苦蟁ich苦?                      PE  L
 +PE        ?

      P      `    0    @                    €                                    ?  ?  p  ?                                                                          0  ?                          .text  ?                        `.rdata  p  0    0              @  @.data  x  @      @              @  ?CRT        `    `              @  ?rsrc  ?  p    p              @  @                                                                                                                      冹?  峀$塂$塂$ 岲$ 峊$PQRh$@@ h @@ h  €荄$    ?@ 髫厉貎?脨悙悙悙悙悂鞌  W?  3缻|$螳岲$荄$?  PL0@ 婽$?  ;蔩厉貋臄  脨悂?  UVW笯  3缻|$艱$ h
  螳f岲$PT0@ 兩楷@@ 3缻T$虍餮+鶍閶鲀?孃虍嬐O灵螗嬐嫭$$  冡峊$螭孆兩虍餮+鶍鲖鷭褍?虍嬍O灵螗嬍峊$冡螭郡@@ 兩虍餮+鶍鲖鷭褍?虍嬍O灵螗嬍岲$冡P螭柁  兡吚te峀$QH0@ 吚uV笯  嵓$  垊$  U螳f珝?   h|@@ R??@ 兡崉$  ht@@ Ph  €?@ _^?  ]伳  霉@  3缻?
  苿$
  螳f珝L$崝$
  猀岲$RPhh@@ h<@@ h
  €荄$$
  荄$(
  ?@ 吚u6崒$
  Q栾  崝$
  h0@@ R?@ 兡吚t_^?  ]伳  胈^3繻伳  脨悙悙悙悙悂?  SUVW笯  3缻?5  苿$4  螳f笯  3缻?!
  苿$
  螳f笯  3缻?9  苿$8  螳f笯  3缻?-  苿$,  螳f笯  3缻?%  苿$$  螳嫭$@  f珔愍u
_^]3繹伳,  脥?4  Ph
  @0@ 崒$
  崝$4  Qj hTA@ RD0@ 崉$
  j.P?@ 嬓縇A@ 兩3纼?虍餮+鵫
  嬃嬿孃灵螗嬋冡螭崒$<  QT0@ ??@ 崝$8  R崉$0  h@A@ P觾?崒$,  崝$$  UQh4A@ R訊?0
  P韪
  兡吚u_^][伳,  每$A@ 兩3莉?鶍褘骺竁@ 灵螗嬍冡螭嵓$$  兩虍餮+鶍翄骺糥@ 灵螗嬋冡螭?H0@ 崒$$  Q謲?,  崉$
  RP瑙  兡吚u_^][伳,  脥?
  Q謲?$  RU柰  兡吚tU钀  兡吚卌
  笯  3缻|$艱$ 螳f笯  3缻?1  苿$0  螳f笯  3缻?)  苿$(  螳fU崉$4  ?  hA@ P塼$ 荄$$    塼$觾?峀$Uh|@@ Q觾?崝$(  h鳣@ R訊?8  兩3纼?虍餮I崉$0  QPV??@ 峀$(h霡@ Qh  €謰齼?3缻T$虍餮IQUj
h郂@ Rh  €謲?(  兩3莉袸崉$(  QPj
峀$(h谸@ Qh  €謲T$jRj岲$(h菮@ Ph  €謲L$jQj峊$(h繞@ Rh  €謲D$jPj峀$(h窣@ Qh  €謃^]?  [伳,  脨怴W縓A@ 兩3莉?鶍翄鲖|$灵螗嬋?  冡螭_^脨悆?岲$ jP荄$lA@ 荄$dA@ 柩  峀$jQ桴  兡脨侅
  W笯  3缻|$艱$ 螳f笰  3缻|$螳岲$P鑝兡吚_u伳
  ? 瑙?吚u伳
  ? 鑥鐯?吚u伳
  ? 峀$ Q韫?兡吚t3纴?
  ? 峊$ R鑝?兡吚u伳
  ? j0h擜@ htA@ ?@ P?@ ?  伳
  ? 悙悙悙侅@
  筆  3繵峾$螳媽$H
  岲$PQ00@ 凐_u3纴腀
  脢L$,V€?t鯠$tP3?<0@ 嬈^伳@
  肞?  <0@ 嬈^伳@
  脕鞌  岲$ 荄$ ?  PL0@ 婰$3纼?斃伳?  脨悙悑T$W孃兩3莉袸_t#h癆@ R?@ 兡吚tP?@ 兡?  ?烂悙悙悙V媡$?劺tW??@ 纠P變??奆
F劺u韄^脨悙悙悙悂?
  牥V@ SVW圖$笯  3缻|$
螳f珝L$h
  Q?(0@ 峾$兩3莉袸€|\t
艱\艱
?吚峊$考A@ u看A@ 兩3莉?鶍鲖賸鷥?虍嬎O灵螗嫈$
  嬎冡螭嫶$
  嬍嬞孇灵螳嬎冡J螵岲$Ph珹@ RV?@ 兡?  _^[伳
  脨悙悙悙悙悙悙悂?
  岲$Sh
  P?峀$Q钀?兡吚匊  峊$h谹@ R?@ 嬝兡呟勣  UV?`0@ jj S諷|0@ j j S嬭謲E
P?@ 嬸兡 咑劀  WSj
UVt0@ V?. 鑌?媱$4
  兡3吚~k媽$
  塋$婽$?PV?@ 嬓兡呉u婰$媱$
  G兞;鴫L$}2胄媽$
  3繮P?箖?虍餮IS艱?`0@ Sj
UV€0@ 兡V?@ 兡_S?@ 兡^][伳
  脨悂?  W笯  3缻|$艱$ 苿$
  螳f笯  3缻?
  荄$
  螳f岲$Pjj h,B@ h
  €0@ 吚吷  S嫓$,  UV塂$峀$峊$Q婰$j j j 岲$4R婽$(PQR荄$8
  0@ 嬭呿ui3鰠踾c嫾$0  岲$$P???峊$(QR?@ 兡吚u
F兦;髚匐3岲$$崒$(
  Ph蹵@ h
  Q?@ 兡崝$(
  Rh
  €?@ 婰$A呿塋$凷婦$P 0@ ^][_伳  脨悙悙悙悙悙悙悙婦$侅
  冭t2Ht!Ht3纴?
  ? 媱$
  婡伳
  ? 竁  伳
  ? SUVW笯  3缻|$艱$ 螳嫭$
  兩f媫 3莉?鶏T$嬃嬿孃灵螗嬋冡螭峀$Ql0@ ?p0@ 兡3靖W@ 峊$VR觾?吚t!伷  G侢萚@ |鈅^]?  [伳
  ? 嬊拎橇?妶糥@ 崢糥@ 勆t孄兩3缻U虍餮+鶍鲖翄7嫈$
  崍竁@ QR峿h@ h
  W?@ 兩3纼?虍餮+鶍鲖翄?螗嬋?  冡螭_^][伳
  ? 悙悙悙悙悑L$吷t婦$吚tPh?@ j Q?@ ?烂悙悙悙悙悙悙悑D$j j j 婰$j j P婦$ j
jj
h
 PPQ0@ 吚u
肞0@ ?  脨悙婦$婰$Vh
 PQ0@ 嬸咑u^肳j j V 0@ 吚u&?,0@ ?   t?"  tV30@ 嬊_^肰?  0@ 嬊_^脨悙悙悙悙悙婦$婰$Vh
 PQ0@ 嬸咑u^肳V0@ V孁0@ 嬊_^脨悙悙悙悙悙怴Wh?  j j 0@ 嬸婦$PV?兡孁V0@ 嬊_^脨VWh?  j j 0@ 媩$嬸WV鑢婦$PWV瓒?兡孁V0@ 嬊_^脨悙悙婦$Vh\V@ P?@ 嬸兡咑u^?缞垚B@ 垐怋@ @凐|霽j
h?  h怋@ €0@ V?@ 兡?  ^脨悙悙悙悙愯  ?  悙悙悙谷[@ ?  悙悙悙h@ 铇  Y脨悙惞萚@ ?
  悙悙悙冹(V嬹W?  3缻|$荄$    ??@ 螳笰  嵕?  螳岶P??  L0@ 嬑柃  嬑菃?    菃?      ?
  孁?t}S岲$?80@ j P峀$j Qj j h  xyW訁纓婽$婦$菃? 
  墫?  墕?  儈t$40@ 峀$j Qj j 峊$ jRhD xyW塂$0覹P0@ [嬈_^兡(脣芲^兡(脨悙怴嬹?  鯠$
tV鐺
  兡嬈^? 悙??@ 脨悙悙悙悙冹嬔笰  3繱崥?  W孄螳儂u6岲$峀$PSQh淰@ hpV@ h  €荄$$
  荄$ 
  ?@ _[兡每`V@ 兩3繴虍餮+鶍褘鲖?螗嬍冡螭^_[兡脨悂?
  V嬹儈u儈
r崋?  峀$Ph€B@ Q?崠?  岲$RhxB@ P?@ 婩兡凐^j h€  jj jh  纔峀$Q?峊$RX0@ 凐u3纴?
  脨悙Q=   峀$r侀   -   ?=   s?葖膮
嬦?婡P锰%x0@ ?t]@ ut$d0@ Y胔p]@ ht]@ t$?  兡?t$杷髫繷髫H?%h0@ 烫烫烫

?  €4  ?  ?  ?  ?  ?  ?  r4      ?  ?  ?  ?  4  ?  ?  ?  ?  v3  D3  `3  R3      ?  (6  6  6  ?  ?  ?  ?  ?  ?  ?  n5  x5  ?  ?  ?  ?  ?      J6      25  $5  D5  R5      44  B4          3s;&c#kv>~6+n.f{訐?CK栟炛NF沇_偳囅ZR徥娐贆?IA愗樞
H@?}5$m-et<|4%l,du轁?M
E斳溤LD昚Q€蓧?XP伻埨讞?GO捼氁J
B烻[喢兯^V嬑幤丑沪悖膂峻东町纣7w?"g'or:z2/j*b郭睜椹狃给啊瑷囫]U勍嵟\T吿屇烬丹憝弭键触飕漉9y1 i)ap8x0!h(`q拂竣绉矧胡帛戟?"3DU   @ ?          &4  (0  83          X4  ?  p2         
5  0  $3          b5  ?  ?          6  `0  3          b6  ?                      ?  €4  ?  ?  ?  ?  ?  ?  r4      ?  ?  ?  ?  4  ?  ?  ?  ?  v3  D3  `3  R3      ?  (6  6  6  ?  ?  ?  ?  ?  ?  ?  n5  x5  ?  ?  ?  ?  ?      J6      25  $5  D5  R5      44  B4      . CloseHandle M CreateFileA ?GetSystemDirectoryA ?GetVersionExA | DeleteFileA ?GetTempFileNameA  ?GetTempPathA  ?FindClose ?FindFirstFileA  ?GetWindowsDirectoryA  i
GetLastError  ;
GetCurrentProcessId ?DeviceIoControl KERNEL32.dll  ?MessageBoxA 
GetForegroundWindow USER32.dll  comdlg32.dll  ?RegCloseKey ?RegEnumKeyExA ?RegOpenKeyExA > CloseServiceHandle  d CreateServiceA  >StartServiceA ?OpenServiceA  ?DeleteService ?OpenSCManagerA  ADVAPI32.dll  SHELL32.dll ?SHGetValueA ?SHDeleteValueA  ?SHSetValueA ?SHDeleteKeyA  SHLWAPI.dll ?sprintf ?strstr  ?strrchr ?_snprintf ^free  ?malloc  Lfclose  bfseek Wfopen ?tolower ffwrite  dftell  ??3@YAXPAX@Z  ]fread ?_stricmp  ?_strlwr MSVCRT.dll  U __dllonexit ?_onexit VERSION.dll WININET.dll ?SetupIterateCabinetA  SETUPAPI.dll

关键的来了：

SOFTWARE\VMware, Inc.\VMware Tools  ShowTray    sw.265.com  Software\Microsoft\Internet Explorer\Main  Start Page  Disable SYSTEM\CurrentControlSet\Services\%s    .sys    \drivers\  Type    Start  ErrorControl    Group  DisplayName ImagePath  System Bus Extender system32\drivers\%s.sys autolive.sys    %s\%s.sys  %s\drivers  .CAB    tmp hostlock    265.com yok.com 恢复265为首页成功，感谢使用！  恢复265为首页  %s%s    %s  r  hosts  system32\drivers\etc\hosts  rb+ Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\%s  Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains \\.\%s  \\.\Global\%s  NTDG    ?      ,      


      I 

  ,        /5靁  autolive.sys 戗?z ,CK?
tSe朹?V?郾0妭?[!M燘岬┅袞挆&2/镅2嚍-φ艷\骅*倡#

这段最后一句可疑：

▽癵橸慔
ZWp9€翵G贆`换ua!j屙竭K诖?缣欛?|9鱹骰飤骰鱺鱷_蔠o!閯%€$矡醛剕{z(崘S邩@^鬓待婂颩玶{債
芜蕾涷v熛乡痚?翖锺鍡?鶟l另窂燓'锌會蜷蓳O_;??賴<M薩旒?O鲰<?仰霤/?I?鮛壹毅p泺$]艬萺?蝾ゑ杁[/櫊窶1v|[.T詒[芣劥侐??m餌菻
歠蓌眻Y榞%颉?#薪i軨H ?1!滰H3憪?"焽'幋鋝??噘驖w赛掛D瀿?qpN;o'憳{ZR?藁碄F#弲蘒 墊薇?eUX瀫颙?驫稞r"?e訓菺裑X辣崀@霶炔B>
锵湛Zb%H愷?M囼搿I?鸆碤[钓jX8i=???W"璚w粻??惠mJ塜?aaP书蘒浲;瞳?塄R?稖稥,齃膔妬?hd?餫醠伐?
K肂L蔵
褝?$?暸踱?腔j??跿轺蟮AZ晕﹗r烏,瑵,€禩?醌@堐稬~V?冓h鋊$狗B沐輵Z櫅?寯??牮}?橺)元Rwo?;MA梯?F:.茒?<鋺L,jajU
迚T<夕噘
O,琠?9~XIzJ?鋙'kI#h蒣m疹R绾P
磼??梤濫蠚/ㄛ焼偉2?h?m抜肱p+萾??w?\珇&塥捵
蝔酽a#書S2陱膃舒┾踥_J?3#?埱囱酗襅.?YTBz?Z%珨?碾自??鲵讙?厩?$
^?慃苲? ⒑脵^2?I.!熿;Hli嫿s)骳笛K5稗謏m麔G@囦e?発矀邛C?~uy穤?q綊N
?-様躜N)鏜x浄娌
趕??u?PE??6蹙??O頖睭&d?2L捥*?瘵`s^?s锠z??轜?
0y糰鴁+嗼埡=([?jxZ?鯪?b?=搫L?%/濋?趩>#<?<?}??﹦?參蛰業i
搼昔?矌礭穷叫勅滐:X_虫鴄暭
1蹴tDPtYm?uS?兵Vv戳€$N??:贬4H月vl弃鸓哐帴q0V5e??D顼0e ?戻魭?坶h瑔u?.F责dD訤A窈d'!箝蛅3伡菿9=8?Ap5洰
!?鰩??钫鉆?莇雵┅B鍍抶?kq?趆I椚瓢E峌
?+xK;徉橭(5躧肍
jJ5H6b`磼t虬錎膔孉僑伣擁?,W蹲翅煮`P摠趾ｃ蠨{鍀奨b?鏠EX嶺釶??X??儉頤T3詘:e:?2戛軇Q?蓬z氦?f唷?鸅-犔BY?竟繓?蚉讫腛\羞L迓BK9宲@?齬_-)#>虹p惓Tz褺?齮G琴a?缵軟牵0.2I蟯1l9濒0讷铢贍敾-=虍r③rV轚螄呣諞??腷籁皝@/k匨峼Z沇!濋垻櫠?儓0薇&[泓F?v懽q_凖烀?/閇.镀??湆e0蚥躿疲_纔鱎褪B?褙囙%藭?搫+? 甯?:~]沽da@^满型5再簓>Px屯s艉嚳辋T鵘T狕v[鈓E13?w%邬骮颞8)?喵A栿?|
勐庰粂t;?AB鑙罙~戄Ya?Bt嘹畫教9島Y|=阦E煦耔(6VlG縠頩縏,彞宽U'糱?]苸?€Τ?)'F鍞
89誕釟铩3??笡帜?徎i&?讷&AV畁廤h~?v訜p鉮7妫晖Oa怰~?.?33鼶趤1?ㄒ
\/a2?%鉞m?j?鉚磈??mP*?鐚X妫?瞻崳@輺A?.%旇沓l腁茉N兄?裓-?€嚕汹`[>:?vW洶啧訤Yj翗?e鬴枵x俿鰑凾羬宰癨幰淙?o?G7h譾?濵t??@蠱苝e6K?氓F辎瘧?Og銵x??訲9!r驏€z瓸盱|惘攘/鄖趔e铯Uo蜌 pp L囹???,\孉H鯲3?1萹UA⑦Y礘頶"m榿[p?4H綾鰐wD!糗(uw衾摢襰'p膕о)漹铩c鍪攒鹖m勚v%j酱謾ㄅim玕E."5?B[%D
繣/矗菟A.lp壐4冶?M殕\峵湑[鍗E結M?苜?襂?盅/闩xF:氦剳^=Y?+喳?咲z讷屝鉛Z擉；vUK9WpN?誤XIa$z輞j苋?碕倍~3胅徵b!丠]M勈彵Zex?垘??塰~H翚]泴瀚匓qiQ佨?f?f営爌稾??胕vX
ǚ)礨灊褘Z?w迼??嵊??T崭痢隌嚟=g譣?\姯*癖N彙jO錻???碊25?悝焊?M?b???馒蒟??[鳨婪z.\?%甅_?v?挌恡厴Y焔乒6m診镂鄐$?nsU氋2?覟Kэ盩?鏎O
猅+薝?冢敷SA?|f醓a蕚?嬠Ｂa?秏砌崈學A玆鞬荕畁$瓓
0t榵嚹3≈L? .)K?!VE一钮筨 _|h篨挆逎~-鼴邱p9L5緙:\澹N31?W鹳碯Tf?wa坵*?Ж茉鱕?质r?稊
:8O€鱯U龅崺{?h?矷x猀庘X维譃嫕恏L>掀T莚Q?:縻價\哧?pI?6噲騋?櫣 霞?r屼┠??荊灈@S瑭餔凲<?i?.|?眖2蟀V?訮?阓z壃Pq瀳#o兂I%Wh???圮坰鲗Qg盱鋂;宩kG?蜬 躘.笫ut戻訤廟CR3冈朐eD苳泃?b0?劌W?c??2DJ3B盝鳯閁,攘?*熂?蠽aQ?蹙腀f?aZ霭?,pi蕢塸-??袃?LN跥炣徉?(

Ou靋滎U笱oBU繡?$焦5迴z鑙^﨡鉂??负Sa
N缴o#?eW?:P?6n?o枍qO?剌3r帙湄,:V>2n\郩厚?D儗蛵_駆铨昆W抰?闐&?齊n嘪??m??])R貛犦??Vc0??鹼蛰&???偦X3d,夅p捍1繪N.嗌瘱?蟺w朹}:4Q??蓕嶎伫0N媸|;j&紅Nn揻 璬ykJyWJ9歊>扲>慠*黥高篠A溮椐X眛zV竡zV`f/?K<唐饸?#?癅?D??溼郾?軴E譥螓酬nB?p@!@)@%€  ??
?罈 书凩( 0< ??餝€' ^8
?@ m! r
?% + hh
x
鄀€7
??``茘<'縤??€]e ?E揀幨?'鷊?u匧?ZK?瀠彡?釦袤譤[6ャ仡,?p~/豚k蔺 哞w珻遆隷雞ql}鬁e?F}璆焕?=胭個sm?o甍蒉?<
j?纎 ^X覃?穘en閂簳n榀愯y??n炯尹?q{默"補?硯迂鮎?欣踽曰鍆n蓟?咄S畁^澡瞕?治硧=p?彞W驆e>犗沭;Y+蟳|
饁e0 %轊?K薭巈靠??栛`?
?v﹪枙
謬錌繻?a蠫黬锂?愼?%坂丼-WJ瘨+Y肀7z~j?~!~?_蠢??撐?/3蘰~?讍J坷{|,Hc俽伏澇?'!縍?y?緾?fW錙y鵇凫r7G~?嶻s缠???1?Z€摗Y?塞M
Rs[<
曲?揹洸瀖q?巨m?YNKH09肣矠岉?U鵊醴'?呿梎~炬?慍奺l)踙違ia?)嘳Td敿/?谸??鼷???7$
e0鎐擧#kR:?8??枛慂打Σ?? 寊9J0詼?yQ蕓.?讛X缯蠾n?l驤?B{趈zS瞚MB痙=????nZ?妒鉞啡/鴛?萢⌒叭?諽Z耨:巫HoX倔嵘?4??殯?U??|P諱摃>?b%躔磹J(晳昫运喙蕵*?2/鏘U2煆>岨跦I'76叾/
GX閩?4 5??簣p?2繢蟮8矞?隈劲??餝o'萂??6伉?巾?醖籏?妰?H罦迏?Jゴw}恂bQ费謄?) ?饻Cf?爱儥h?馱?焭J贸q&迡??`鰔弰X8??鵬 nz穝/崔\2(€?@?騛JAZc噉榅啶 鑣@]AJ買x-部?9腱刅糼N懂?QI~P騁?aZHe<驖?齧r.?o`7j鞕鬫淯?衜?剬S頤尢牮?{s?殯ЩO缯n愁I菹u恳溅;?X鳗N????￣}齣龡鷗胅啓椓o??7p叙尊筧紂猶堆d,3Vk寁c儽狰琿繁区●傫3銆?#1?輎歫鷳閪撋4蟃jz滥?&摁3??橋?,*\^?l.l+詻K虦??虩洤?*,ZT証鬖央E??VO,晶xnqq1_躛辑8瀖?07篦?7_ 瞢??35&?MA英???鸭7{蹯噂{f餁給鯣讧鏋烕賊钞A鲃n涱堫葭?鮂齜}瓰護??^縆縊P[z瞐朼幜h(1,58

C籥嬦Y??啫∏稹∈魫閅?S[a{ag徭B鶑x賽崣?g隃閟f往頑? w+b TYKeeper.vxd    System\CurrentControlSet\Services\TYKEEPER  DeviceName

没有，我的IE，没有做任何设置，也没有安装任何软件。

剩余的

   (  €  @  €  X  €             

  p  €             
g  ? €             

  ? €             
  ?               
  ?               
  ?  萻  ?          皏            餻  ?                  ?4  V S _ V E R S I O N _ I N F O    ?稔 
 
?   
?  ?       
              4 
S t r i n g F i l e I n f o   
0 8 0 4 0 4 b 0  0 
C o m m e n t s  2 6 5
NQ黐*倴檜橆O
Y  0 
C o m p a n y N a m e    2 6 5
NQ黐*? ( 
F i l e D e s c r i p t i o n    < 
F i l e V e r s i o n    1 ,  0 ,  0 ,  1 0 0 1     
I n t e r n a l N a m e  $ 
L e g a l C o p y r i g h t  ( 
L e g a l T r a d e m a r k s    ( 
O r i g i n a l F i l e n a m e     
P r i v a t e B u i l d     
P r o d u c t N a m e    @ 
P r o d u c t V e r s i o n  1 ,  0 ,  0 ,  1 0 0 1     
S p e c i a l B u i l d  D 
V a r F i l e I n f o    $   T r a n s l a t i o n    ?    (      @ 
                          €  €  €€ €  € € €€  览?€€€                               噖w€            ??          ?噣          ?噚          ?噖€€鴪垁  ?噖p?  ww? ?噖p坧 ?w垁 L烫Awp?    w垁 L烫Dp坸垐垐w垁 L烫DAp坵wwwww垁 L烫DDw垁 L烫D@垐垐垐坸€? D@      噣垙@垐垐"(€坧坸垐w餈坵ww?€噰w? w鲌  弜wp垐€DDDD鲌  鲊pL烫棠鲌  弍pL烫棠鲌  ?垐€烫烫镊?  €  烫烫镊?    ?烫烫棠鲌    ?焯烫棠鲌    ?焯烫棠鲌    ?烫烫棠鲌    ?    鲌    鲌垐垐垐鲌    鱳wwwwwww?    ??    wwwwwwww?      垐垐垐垐? ???駠???? ? ?
?  ?  ?  ?  ?  ?  €         
      €  ? ? ? ? ? ? ? ? ?   € ? 

  
 ? 

引用:

【我无邪的贴子】没有，我的IE，没有做任何设置，也没有安装任何软件。 ………………

怪了，我这里就是怎么都弄不掉

确定一下，我下载的东东。

附件: 3176972006101140555.jpg

对的就是它

我运行它了，可我的系统没有任何改变。
你的日志也看不出问题
如果实在解决不了，我建议你重装系统了事

......
我平时不用ｉｅ上网，所以也没什么影响，就是觉得被劫持还解决不了憋气～奇怪了～
谢谢~

其实不是所有的病毒都可以解决的，有些时候我也很无奈。
解决不了的，只有重装系统，反正我是不能容忍与病毒共网。
你重装也好
我想你应该会GHOST的，这是我一直没有让你看以下帖子的原因
http://forum.ikaka.com/topic.asp?board=3&artid=8124643