瑞星卡卡安全论坛

求助!俺是windows xp sp2 一开机IEXPL0RE进程出现6个都是13m大小!!杀不掉!macfee和ewido都查不出毛病,帮忙啊!拜托了 谢谢啊
qq:83632863    e-mail:daxia686@163.com

附件: 7634082006107202736.jpg

下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

2006-10-07,20:40:28

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <ShStatEXE><"F:\应 用 软 件\Mcafee\SHSTAT.EXE" /STANDALONE>  [Network Associates, Inc.]
    <Network Associates Error Reporting Service><; "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe">  [Network Associates, Inc.]
    <!AVG Anti-Spyware><"F:\应 用 软 件\AVG Anti-Spyware 7.5\avgas.exe" /minimized>  [Anti-Malware Development a.s.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <9><C:\WINDOWS\system32\vpcrm.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Corporation]
    <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><F:\应 用 软 件\AVG Anti-Spyware 7.5\shellexecutehook.dll>  [Anti-Malware Development a.s.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation]
    <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation]
    <WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Corporation]
    <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
    <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
    <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
    <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
    <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation]

==================================
启动文件夹
N/A

==================================
服务
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard]
  <F:\应 用 软 件\AVG Anti-Spyware 7.5\guard.exe><Anti-Malware Development a.s.>
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[McAfee Framework 服务 / McAfeeFramework]
  <F:\应 用 软 件\Common Framework\FrameworkService.exe /ServiceStart><Network Associates, Inc.>
[Network Associates McShield / McShield]
  <"F:\应 用 软 件\Mcafee\mcshield.exe"><Network Associates, Inc.>
[Network Associates Task Manager / McTaskManager]
  <"F:\应 用 软 件\Mcafee\vstskmgr.exe"><Network Associates, Inc.>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>

==================================
驱动程序
[AVG Anti-Spyware Driver / AVG Anti-Spyware Driver]
  <\??\F:\应 用 软 件\AVG Anti-Spyware 7.5\guard.sys><N/A>
[AVG Anti-Spyware Clean Driver / AvgAsCln]
  <System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS]
  <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[NaiAvFilter1 / NaiAvFilter1]
  <system32\drivers\naiavf5x.sys><McAfee Inc.>
[NaiAvTdi1 / NaiAvTdi1]
  <system32\drivers\mvstdi5x.sys><Network Associates, Inc.>
[nv / nv]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[TCP/IP Protocol Driver / Tcpip]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[VIA AGP Filter / viaagp1]
  <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
[ViaIde / ViaIde]
  <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[VIA AC'97 Enhanced Audio Controller (WDM) / VIAudio]
  <system32\drivers\viaudio.sys><VIA Technologies, Inc.>

==================================
浏览器加载项
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\Flash.ocx, Macromedia, Inc.>

==================================
正在运行的进程
[PID: 616][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 664][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 688][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 732][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 744][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 904][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 968][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1056][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1120][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1196][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1532][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1556][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.7184]
    [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.7184]
    [C:\WINDOWS\system32\nvshell.dll]  [NVIDIA Corporation, 6.14.10.10035]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [F:\应 用 软 件\Mcafee\shext.dll]  [Network Associates, Inc., 8.0.0.912]
    [F:\应 用 软 件\Mcafee\RES04\ShExtRes.dll]  [Network Associates, Inc., 8.0.0.912]
    [F:\应 用 软 件\AVG Anti-Spyware 7.5\shellexecutehook.dll]  [Anti-Malware Development a.s., 7, 5, 0, 47]
    [F:\应 用 软 件\AVG Anti-Spyware 7.5\context.dll]  [Anti-Malware Development a.s., 7, 5, 0, 47]
[PID: 1788][F:\应 用 软 件\Mcafee\SHSTAT.EXE]  [Network Associates, Inc., 8.0.0.912]
    [F:\应 用 软 件\Mcafee\SHUTIL.dll]  [Network Associates, Inc., 8.0.0.1011]
    [F:\应 用 软 件\Mcafee\naiwmain.dll]  [Network Associates, Inc., 8.0.0.912]
    [F:\应 用 软 件\Mcafee\RES04\shstat.dll]  [Network Associates, Inc., 8.0.0.912]
    [F:\应 用 软 件\Mcafee\RES04\Product.dll]  [Network Associates, Inc., 8.0.0.912]
    [F:\应 用 软 件\Mcafee\RES04\McShield.dll]  [Network Associates, Inc., 8.0.0.251]
    [F:\应 用 软 件\Mcafee\RES04\Shutilrc.dll]  [Network Associates, Inc., 8.0.0.912]
    [F:\应 用 软 件\Mcafee\Graphics.dll]  [Network Associates, Inc., 8.0.0.912]
[PID: 1820][F:\应 用 软 件\AVG Anti-Spyware 7.5\avgas.exe]  [Anti-Malware Development a.s., 7, 5, 0, 47]
    [F:\应 用 软 件\AVG Anti-Spyware 7.5\engine.dll]  [Anti-Malware Development a.s., 4, 2, 0, 15]
[PID: 1828][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1952][F:\应 用 软 件\Common Framework\FrameworkService.exe]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\nailog.dll]  [Network Associates, Inc., 3.5.0.474]
    [F:\应 用 软 件\Common Framework\naXML.dll]  [Network Associates, Inc., 3.5.0.474]
    [F:\应 用 软 件\Common Framework\naCmnLib.dll]  [Network Associates, Inc., 3.5.0.474]
    [F:\应 用 软 件\Common Framework\applib.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\0804\AgentRes.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\Logging.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\InternetManager.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\naInet.dll]  [Network Associates, Inc., 3.5.0.474]
    [F:\应 用 软 件\Common Framework\UserSpace.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\SecureFrameworkFactory.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\Management.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\cmalib.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\naPolicyManager.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\ScriptSubSys.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\UpdateSubSys.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\Scheduler.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Common Framework\TCSubSys.dll]  [Network Associates, Inc., 3.5.0.412]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 172][F:\应 用 软 件\Mcafee\mcshield.exe]  [Network Associates, Inc., 8.0.0.318]
    [F:\应 用 软 件\Mcafee\Res04\McShield.DLL]  [Network Associates, Inc., 8.0.0.251]
    [F:\应 用 软 件\Mcafee\FTL.Dll]  [Network Associates, Inc., 8.0.0.135]
    [F:\应 用 软 件\Mcafee\naiann.dll]  [Network Associates, Inc., 8.0.0.308]
    [F:\应 用 软 件\Mcafee\mytilus.dll]  [Network Associates, Inc., 8.0.0.325]
    [F:\应 用 软 件\Common Framework\GenEvtInf.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Mcafee\NaEventU.DLL]  [Network Associates, Inc., 8.0.0.342]
    [F:\应 用 软 件\Mcafee\Res04\naEvtRes.dll]  [Network Associates, Inc., 8.0.0.342]
    [F:\应 用 软 件\Mcafee\VSIDSvr.dll]  [Network Associates, Inc., 8.0.0.291]
    [C:\Program Files\Common Files\Network Associates\Engine\MCSCAN32.DLL]  [McAfee, Inc., 4.4.00]
    [F:\应 用 软 件\Common Framework\SecureFrameworkFactory.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Mcafee\EntSrv.Dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 176][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.7184]

[C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.7184]
[PID: 420][F:\应用软~1\COMMON~1\naPrdMgr.exe]  [Network Associates, Inc., 3.5.0.412]
    [F:\应用软~1\COMMON~1\nailog.dll]  [Network Associates, Inc., 3.5.0.474]
    [F:\应用软~1\COMMON~1\naCmnLib.dll]  [Network Associates, Inc., 3.5.0.474]
    [F:\应用软~1\COMMON~1\naXML.dll]  [Network Associates, Inc., 3.5.0.474]
    [F:\应用软~1\COMMON~1\0804\AgentRes.dll]  [Network Associates, Inc., 3.5.0.412]
    [F:\应 用 软 件\Mcafee\VsPlugin.dll]  [Network Associates, Inc., 8.0.0.1009]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 224][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1160][C:\WINDOWS\system32\wscntfy.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2204][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 2560][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 3744][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 2552][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 3556][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 2392][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 3548][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1740][F:\应 用 软 件\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [F:\应 用 软 件\QQ\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [F:\应 用 软 件\QQ\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [F:\应 用 软 件\QQ\ipsearcher.dll]  [N/A, 1.0.0.4]
    [F:\应 用 软 件\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [F:\应 用 软 件\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [F:\应 用 软 件\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [F:\应 用 软 件\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [F:\应 用 软 件\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\QQMainFrame.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\CQQApplication.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\GroupLive.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\QQPlugin.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [F:\应 用 软 件\QQ\QQAvatar.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [F:\应 用 软 件\QQ\QRingMng.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [F:\应 用 软 件\QQ\QQAllInOne.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [F:\应 用 软 件\QQ\QQCustomFace.dll]  [N/A, N/A]
    [F:\应 用 软 件\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\QQSceneMng.dll]  [N/A, N/A]
    [F:\应 用 软 件\Mcafee\scriptproxy.dll]  [Network Associates, Inc., 8.0.0.992]
    [F:\应 用 软 件\Mcafee\mytilus.dll]  [Network Associates, Inc., 8.0.0.325]
    [F:\应 用 软 件\Mcafee\Res04\McShield.dll]  [Network Associates, Inc., 8.0.0.251]
    [C:\Program Files\Common Files\Network Associates\Engine\mcscan32.dll]  [McAfee, Inc., 4.4.00]
    [F:\应 用 软 件\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [F:\应 用 软 件\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [F:\应 用 软 件\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 0, 6, 60]
    [F:\应 用 软 件\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [F:\应 用 软 件\QQ\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [F:\应 用 软 件\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [F:\应 用 软 件\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [C:\WINDOWS\system32\macromed\flash\Flash.ocx]  [Macromedia, Inc., 7,0,19,0]
[PID: 4084][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 248][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1264][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
    [F:\应 用 软 件\Mcafee\scriptproxy.dll]  [Network Associates, Inc., 8.0.0.992]
    [F:\应 用 软 件\Mcafee\mytilus.dll]  [Network Associates, Inc., 8.0.0.325]
    [F:\应 用 软 件\Mcafee\Res04\McShield.dll]  [Network Associates, Inc., 8.0.0.251]
    [C:\Program Files\Common Files\Network Associates\Engine\mcscan32.dll]  [McAfee, Inc., 4.4.00]
    [C:\WINDOWS\system32\macromed\flash\Flash.ocx]  [Macromedia, Inc., 7,0,19,0]
[PID: 3776][D:\HijackThis.exe]  [Soeperman Enterprises Ltd., 1.99.0001]
[PID: 3360][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 3156][D:\sreng2\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================

二楼的高手大大  快帮俺看看吧  俄都快疯了!

就拜托各位高手大大了

C:\WINDOWS\system32\vpcrm.exe这个东西你知道是什么吗

C:\WINDOWS\system32\vpcrm.exe
ROOKIT.CALLGATE.F

to 7 楼  哪个东西我也不知道是什么 需要在安全模式下删除么?

to 8 楼  C:\WINDOWS\system32\vpcrm.exe
ROOKIT.CALLGATE.F    这是什么意思?需要我作什么?

请问 众高手  我也认为是vpcrm.exe搞鬼  可应该怎么搞 ?

我把C:\WINDOWS\system32\vpcrm.exe 给删除了  然后重启 发现以前出现六七个IEXPL0RE的情况没有了 但是打开的第一个网页在进程里变成了IEXPL0RE,而且占用内存达到了47m!
大大们再给出招吧!江湖救急!我感觉好象是中了个远程控制的东西

再请大大们帮忙下 我把你们说的哪个C:\WINDOWS\system32\vpcrm.exe 删了  也按照ROOKIT.CALLGATE.F的处理方法在注册表里把vpcrm删了,也删了qq.可是现在是打开一个网页就出现一个IEXPL0RE,而且站用内存都很大! 请问怎么回师啊?

大大们 再帮忙看下吧 喀吧司机查了一遍没用啊 还是每开一个网页就出现一个IEXPLORE...