我也被www.daqimm.com劫持，急求高手帮忙，非常感谢！ bbs.ikaka.com

阿雨过天晴 - 2006-10-9 18:38:00

我上网中不断跳出www.daqimm.com、www.52bo.com这几个网站，桌面上不断出现这几个网站的快捷图标，删了又再出现，上QQ时不断发送这几个网站的网址，并且这几个网址自己又钻到了收藏夹里，用杀毒软件查出三个可疑文件：
IEXPLORER.exe 路径C:\WINDOWS\system32
alexa.exe 路径C:\WINDOWS\system32
pthreadVC.dll 路径C:\WINDOWS\system32
是不是这三个文件作怪，请高手帮我看看，非常感谢。
下面是日志：

阿雨过天晴 - 2006-10-9 18:46:00

2006-10-09,18:31:22

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [(Verified)Microsoft Corporation]
<KpopMon><C:\KAV6\KPopMon.EXE> []
<iDuba Personal Firewall><C:\KAVPFW\KAVPFW.EXE> [Kingsoft Corporation]
<MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation]
<IgfxTray><C:\WINDOWS\System32\igfxtray.exe> [(Verified)Intel Corporation]
<HotKeysCmds><C:\WINDOWS\System32\hkcmd.exe> [(Verified)Intel Corporation]
<SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.]
<kpcdst><C:\Program Files\shenzhou\MediaCenter\cdsprite.exe> [金山软件股份有限公司]
<KAVRun><C:\KAV6\KAVRun.EXE> [kingsoft]
<Kulansyn><C:\KAV6\Kulansyn.EXE> [Kingsoft Corp.]
<iDuba Personal FireWall><C:\KAVPFW\KAVPFW.EXE> [Kingsoft Corporation]
<NMGameX_AutoRun><C:\WINDOWS\System32\Rundll32.exe nmgamex.dll,LiveProcess /aa> [NMGameX]
<YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe> [Yahoo! China]
<yassistse><"C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"> [Yahoo! China]
<CnsMin><Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32> [北京三七二一科技有限公司]
<helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> []
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINDOWS\System32\userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><C:\WINDOWS\downlo~1\CnsHook.dll> [北京三七二一科技有限公司]
<{E568441B-9EF3-49F8-9A67-4141AC41ADD4}><C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll> [Yahoo! China]
<{4BAB150F-DD97-476D-9C1E-41B6CDC0CA7A}><C:\PROGRA~1\Yahoo!\ASSIST~1\yclickon.dll> [YAHOO Corporation Limited]

==================================
启动文件夹
[腾讯QQ]
<C:\Documents and Settings\a\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\Cars\QQ.exe [TENCENT]><N>

==================================
服务
[Human Interface Device Access / HidServ]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Kingsoft AntiVirus Service / KAVSvc]
<C:\KAV6\KAVSvc.EXE><kingsoft Antivirus>
[PopWinIe / PopWinIe]
<C:\WINDOWS\System32\PopWin.exe -service><Microsoft Corporation>

==================================
驱动程序
[00 / 00]
<\SystemRoot\\SystemRoot\System32\drivers\1558046.sys><N/A>
[187625 / 187625]
<\SystemRoot\System32\drivers\187625.sys><N/A>
[a0 / a0]
<\SystemRoot\\SystemRoot\System32\drivers\187625.sys><N/A>
[Service for WDM 3D Audio Driver / ALCXSENS]
<system32\drivers\ALCXSENS.SYS><Sensaura Ltd>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[713x TV Card Capture / Cap7134]
<System32\DRIVERS\Cap7134.sys><Philips Semiconductors>
[CnsMinKP / CnsMinKP]
<\SystemRoot\System32\drivers\CnsMinKP.sys><Copyright (C) 3721 Corporation.>
[ialm / ialm]
<System32\DRIVERS\ialmnt5.sys><Intel Corporation>
[IdeBusDr / IdeBusDr]
<\SystemRoot\System32\DRIVERS\IdeBusDr.sys><Intel Corporation>
[Intel(R) Ultra ATA Controller / IdeChnDr]
<\SystemRoot\System32\DRIVERS\IdeChnDr.sys><Intel Corporation>
[KNetWch / KNetWch]
<\??\C:\KAVPFW\KNetWch.SYS><金山电脑公司>
[KWatch / KWatch]
<\??\C:\WINDOWS\System32\drivers\KWatch.Sys><Kingsoft Corporation>
[KWatch2 / KWatch2]
<\??\C:\WINDOWS\System32\drivers\KWatch2.sys><Kingsoft Antivirus>
[Netgroup Packet Filter / NPF]
<system32\drivers\npf.sys><Politecnico di Torino>
[npkcrypt / npkcrypt]
<\??\D:\Cars\npkcrypt.sys><INCA Internet Co., Ltd.>
[hasee TV Master2, WDM TVTuner / PhTVTune]
<System32\DRIVERS\PhTVTune.sys><Philips Semiconductors>
[Direct Parallel Link Driver / Ptilink]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[rfsafe / rfsafe]
<\SystemRoot\system32\drivers\rfsafe.sys><sina>
[Hasee RTL8139C/D PCI Fast Ethernet NIC / rtl8139]
<System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv]
<System32\DRIVERS\secdrv.sys><N/A>

==================================

阿雨过天晴 - 2006-10-9 18:48:00

浏览器加载项
[IDDTInitObj Class]
{15DDE989-CD45-4561-BF99-D22C0D5C2B74} <C:\PROGRA~1\Sina\ddt\DDTInit.dll, 北京新浪信息技术有限公司>
[Yahoo!Photo]
{33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
{38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll, yahoo! china>
[VnetCookie Class]
{4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, >
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Cars\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[DragSearch BHO]
{62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL, yahoo! china>
[KillObj Class]
{66C28884-4E5D-494B-80C9-CAA27528FD6D} <C:\PROGRA~1\Sina\ddt\ddtkillw.ocx, 北京新浪信息技术有限公司>
[CnsHook Class]
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[assist]
{FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll, Yahoo! China>
[Yahoo 3.5G电邮]
{507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[名品折扣]
{59BC54A2-56B3-44a0-93E5-432D58746E26} <http://adtaobao.allyes.com/main/adfclick?db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816, N/A>
[雅虎助手]
{5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[雅虎WIDGET]
{6354ABE6-05F1-49ed-B850-E423120EC338} <http://cn.widget.yahoo.com/index.htm?source=Cns, N/A>
[金山卓越]
{8DE0FCD4-5EB5-11D3-AD25-00002100131B} <url:http://www.joyo.com, N/A>
[信息检索(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Cars\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Cars\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[金山毒霸网站]
{e1fc9760-7b95-49cd-80b9-8c9e41017b93} <url:http://www.duba.net, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A>
[]
{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[在线查毒]
{f58d36c3-40be-4418-a786-d8fbe3eb3554} <C:\KAV6\kavie.htm, N/A>
[新浪点点通]
{F60C7D81-8471-4D40-AAFE-56D318F34C2D} <C:\PROGRA~1\Sina\ddt\DDTONG~1.DLL, 北京新浪信息技术有限公司>
[]
{FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[]
{974AD624-EA50-4831-A6C0-3040F6665396} <C:\PROGRA~1\Sina\ddt\rssband.dll, 北京新浪信息技术有限公司>
[新浪点点通阅读器]
{F0646DC8-58CD-4C64-8F6B-525043914685} <C:\PROGRA~1\Sina\ddt\rssband.dll, 北京新浪信息技术有限公司>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[金山毒霸]
{A9BE2902-C447-420A-BB7F-A5DE921E6138} <C:\KAV6\KAIEPlus.DLL, >
[新浪点点通]
{F60C7D81-8471-4D40-AAFE-56D318F34C2D} <C:\PROGRA~1\Sina\ddt\DDTONG~1.DLL, 北京新浪信息技术有限公司>
[雅虎助手]
{406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll, yahoo! china>
[金山毒霸在线产品升级]
{52DF16E3-6C4F-4B22-8BAF-09263E463B48} <C:\PROGRA~1\KOS\KOSInit.ocx, 金山软件股份有限公司>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\DOWNLO~1\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[VqqSpeedDlProxy Class]
{F138084D-84D7-48CD-BEA8-04772457516E} <C:\WINDOWS\vqqsdl.dll, Tencent>
[上传到QQ网络硬盘]
<D:\Cars\AddToNetDisk.htm, N/A>
[使用彩信超级自写发送到手机]
<http://mms.sina.com.cn/mmsnews.html, N/A>
[使用新浪下载助手下载]
<C:\PROGRA~1\Sina\ddt\sinadl.htm, N/A>
[发送图片到手机(&M)]
<http://sms.sina.com.cn/diy/send.html?from=467, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[收藏此页到新浪ViVi]
<http://vivi.sina.com.cn/collect/click.php?agent=ddt, N/A>
[新浪搜索]
<http://cha.sina.com.cn/ddt.html, N/A>
[添加到QQ自定义面板]
<D:\Cars\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Cars\AddEmotion.htm, N/A>
[添加到雅虎订阅(&Y)]
<res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT, N/A>
[用QQ彩信发送该图片]
<D:\Cars\SendMMS.htm, N/A>
[雅虎搜索]
<res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/203, N/A>

==================================
正在运行的进程
[PID: 424][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 480][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 504][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 548][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 560][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 724][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 776][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 904][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 932][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1180][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[PID: 1388][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\3721\alrex.dll] [, 1, 0, 1, 1001]
[PID: 1512][C:\WINDOWS\System32\Rundll32.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\WINDOWS\downlo~1\CnsMinIO.dll] [北京三七二一科技有限公司, 1, 0, 3, 7]
[C:\WINDOWS\downlo~1\cnsio.dll] [北京三七二一科技有限公司, 1, 0, 2, 8]
[C:\WINDOWS\downlo~1\CnsMinEx.dll] [国风因特软件(北京)有限公司, 1, 0, 3, 4]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]

阿雨过天晴 - 2006-10-9 18:51:00

[PID: 1580][C:\WINDOWS\System32\igfxtray.exe] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\System32\hccutils.DLL] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\WINDOWS\System32\igfxdev.dll] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\System32\igfxsrvc.dll] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\System32\igfxres.dll] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\System32\igfxress.dll] [Intel Corporation, 3,0,0,2039]
[PID: 1588][C:\WINDOWS\System32\hkcmd.exe] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\System32\hccutils.DLL] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\WINDOWS\System32\igfxdev.dll] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\System32\igfxsrvc.dll] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\System32\igfxhk.dll] [Intel Corporation, 3,0,0,2039]
[C:\WINDOWS\System32\igfxres.dll] [Intel Corporation, 3,0,0,2039]
[PID: 1600][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.14]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 1608][C:\Program Files\shenzhou\MediaCenter\cdsprite.exe] [金山软件股份有限公司, 5, 1, 0, 3003]
[C:\Program Files\shenzhou\MediaCenter\KPXKEY.dll] [N/A, N/A]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 1628][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 1676][C:\KAVPFW\KAVPFW.EXE] [Kingsoft Corporation, 2004, 8, 16, 295]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAVPFW\KAVMLM.DLL] [Kingsoft Corporation, 2003.11.12.10]
[C:\KAVPFW\PFWScanC.dll] [KingSoft, 2002, 4, 12, 3]
[C:\KAVPFW\KAMsgBox.dll] [, 2002.9.27.30]
[C:\KAVPFW\NetShare.dll] [Kingsoft Antivirus, 2004, 2, 20, 67]
[C:\KAVPFW\KAEPlat.DLL] [Kingsoft Corp., 2005, 12, 29, 56]
[C:\KAVPFW\KAEMem.DAT] [Kingsoft, 2006, 4, 12, 13]
[C:\KAVPFW\KAEUnpack.DAT] [Kingsoft Corp., 2006, 6, 15, 44]
[C:\KAVPFW\KAEQSCAN.DLL] [Kingsoft Corp, 2004, 3, 26, 69]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[PID: 1720][C:\KAV6\KAVSvc.EXE] [kingsoft Antivirus, 2003, 11, 12, 70]
[C:\KAV6\SvcComm.dll] [kingsoft Antivirus, 2004, 7, 28, 1]
[C:\KAV6\SvcTimer.DLL] [Kingsoft, 2004.4.29.79]
[C:\KAV6\KavComm.dll] [Kingsoft Corporation, 2003, 11, 12, 66]
[C:\KAV6\RpcBrge.DLL] [kingsoft, 2003, 11, 12, 64]
[C:\KAV6\KWatchFn2.dll] [kingsoft Corporation, 2004, 8, 24, 25]
[C:\KAV6\KAEPlat.DLL] [Kingsoft Corp., 2005, 12, 29, 56]
[C:\KAV6\KAEMem.DAT] [Kingsoft, 2006, 4, 12, 13]
[C:\KAV6\KAEUnpack.DAT] [Kingsoft Corp., 2006, 6, 15, 44]
[C:\KAV6\KAVUtils.dll] [Kingsoft Corp, 2004, 2, 12, 69]
[C:\KAV6\KAVDlg.DLL] [, 2004.7.20.81]
[C:\KAV6\KAVLogFn.dll] [N/A, 2003, 11, 26, 16]
[PID: 1760][C:\KAV6\KWatchUI.EXE] [, 2004.1.6.119]
[C:\KAV6\kavcomm.dll] [Kingsoft Corporation, 2003, 11, 12, 66]
[C:\KAV6\kavdlg.dll] [, 2004.7.20.81]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KAVMLM.DLL] [Kingsoft Corporation, 2003.11.12.10]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\KAV6\RpcBrge.DLL] [kingsoft, 2003, 11, 12, 64]
[PID: 212][C:\KAV6\MailMon.EXE] [Kingsoft Co., Ltd, 2004, 2, 6, 245]
[C:\KAV6\KMFilter.DLL] [, 2004, 3, 1, 37]
[C:\KAV6\parse822.dll] [Quiksoft Corporation, 2, 0, 0, 9]
[C:\KAV6\KAVLogFn.dll] [N/A, 2003, 11, 26, 16]
[C:\KAV6\KAVMLM.DLL] [Kingsoft Corporation, 2003.11.12.10]
[C:\KAV6\KAMsgBox.DLL] [, 2002.9.27.30]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KAVComm.dll] [Kingsoft Corporation, 2003, 11, 12, 66]
[C:\KAV6\RpcBrge.DLL] [kingsoft, 2003, 11, 12, 64]
[C:\KAV6\KAVIPC.DLL] [Kingsoft Corp., 2002, 3, 29, 8]
[C:\KAV6\KAVDlg.DLL] [, 2004.7.20.81]
[C:\KAV6\KAECall.DLL] [Kingsoft Corporation, 2003, 11, 14, 66]
[C:\KAV6\KAEScan.DLL] [Kingsoft Corp., 2003, 5, 24, 36]
[C:\KAV6\KAEPlat.DLL] [Kingsoft Corp., 2005, 12, 29, 56]
[C:\KAV6\KAEMem.DAT] [Kingsoft, 2006, 4, 12, 13]
[C:\KAV6\KAEUnpack.DAT] [Kingsoft Corp., 2006, 6, 15, 44]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 452][C:\KAV6\KAVPlus.EXE] [, 2004, 3, 3, 71]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[PID: 1052][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe] [Yahoo! China, 3, 1, 2, 1018]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] [yahoo! china, 3, 3, 7, 1088]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] [Yahoo! China, 3, 0, 1, 1010]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\ynotifier.dll] [yahoo! china, 3, 0, 0, 1000]
[PID: 1136][C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe] [Yahoo! China, 3, 0, 2, 1003]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\Yahoo!\Assistant\shell\yAssecblk.dll] [Yahoo! China, 3, 0, 3, 1005]
[C:\PROGRA~1\Yahoo!\Assistant\shell\yAsMenu.dll] [Yahoo! China, 3, 0, 0, 1001]
[C:\PROGRA~1\Yahoo!\Assistant\shell\yMenuInfo.dll] [Yahoo! China, 3, 0, 0, 1000]
[C:\PROGRA~1\Yahoo!\Assistant\shell\yIEAngel.dll] [Yahoo! China, 3, 0, 1, 1001]
[PID: 1264][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\3721\autolive.dll] [, 1, 1, 7, 1326]
[C:\PROGRA~1\3721\notifier.dll] [, 1, 0, 0, 5]
[C:\PROGRA~1\3721\alLiveEx.dll] [ , 1, 0, 3, 1006]
[PID: 1276][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3536]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]

阿雨过天晴 - 2006-10-9 18:52:00

[PID: 1284][C:\WINDOWS\System32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 1116][C:\KAV6\KPopMon.EXE] [, 2004, 2, 2, 31]
[C:\KAV6\KAVMLM.DLL] [Kingsoft Corporation, 2003.11.12.10]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[PID: 1712][C:\Program Files\ChinaNet\VnetClient.exe] [, 2005, 11, 14, 1]
[C:\Program Files\ChinaNet\Communicate.dll] [0, 2005, 3, 3, 1]
[C:\Program Files\ChinaNet\DialModule.dll] [GDCN, 2005, 11, 15, 1]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1]
[C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX] [, 2005, 7, 27, 1]
[C:\PROGRA~1\ChinaNet\sign.dll] [0, 2004, 12, 1, 1]
[C:\PROGRA~1\ChinaNet\PostPlug.dll] [, 2004, 12, 16, 2]
[C:\PROGRA~1\ChinaNet\ADVERT~1.OCX] [, 2005, 10, 13, 1]
[C:\PROGRA~1\ChinaNet\Gif89a.dll] [, 2005, 6, 21, 1]
[C:\PROGRA~1\ChinaNet\VnetBs.ocx] [, 2004, 11, 18, 1]
[C:\PROGRA~1\ChinaNet\ACCOUN~2.DLL] [, 2005, 11, 14, 1]
[C:\PROGRA~1\ChinaNet\AccountMgr.dll] [, 2005, 11, 14, 17]
[C:\PROGRA~1\ChinaNet\VnetSkin.ocx] [GDDC, 2005, 11, 14, 1]
[C:\PROGRA~1\ChinaNet\DialogStyle.dll] [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\Timer.ocx] [, 2005, 10, 9, 14]
[C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX] [, 2005, 2, 24, 1]
[C:\PROGRA~1\ChinaNet\NEWMES~1.DLL] [, 2005, 8, 26, 1]
[C:\PROGRA~1\ChinaNet\PassCtrl.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\System32\wpcap.dll] [Politecnico di Torino, 3, 0, 0, 18]
[C:\WINDOWS\System32\pthreadVC.dll] [N/A, N/A]
[C:\WINDOWS\System32\packet.dll] [Politecnico di Torino, 3, 0, 0, 18]
[C:\PROGRA~1\ChinaNet\PlugPush.dll] [, 2004, 12, 21, 1]
[C:\PROGRA~1\ChinaNet\ALLINT~1.DLL] [, 2004, 11, 23, 1]
[C:\PROGRA~1\ChinaNet\VNetLog.ocx] [, 2005, 10, 9, 1]
[C:\PROGRA~1\ChinaNet\StatNum.dll] [, 2004, 11, 18, 1]
[C:\PROGRA~1\ChinaNet\VNETON~1.OCX] [, 2005, 3, 2, 1]
[C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL] [GDCN, 2005, 10, 9, 1]
[C:\PROGRA~1\ChinaNet\VnetOptLog.dll] [, 2005, 9, 13, 9]
[C:\KAV6\KAVEXT.DLL] [Kingsoft Corp., 2002, 5, 24, 6]
[C:\PROGRA~1\ChinaNet\DlgSkin.ocx] [, 2005, 11, 14, 1]
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 1552][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\3721\scrblock.dll] [3721, 1, 0, 1, 1000]
[C:\PROGRA~1\3721\alrex.dll] [, 1, 0, 1, 1001]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll] [Yahoo! China, 3, 0, 0, 1000]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\WINDOWS\downlo~1\CnsHint.dll] [3721, 1, 0, 1, 1]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[C:\PROGRA~1\3721\autolive.dll] [, 1, 1, 7, 1326]
[C:\PROGRA~1\3721\alLiveEx.dll] [ , 1, 0, 3, 1006]
[C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] [yahoo! china, 3, 3, 7, 1088]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] [Yahoo! China, 3, 0, 1, 1010]
[C:\WINDOWS\downlo~1\cnsplus.dll] [3721, 1, 0, 0, 2]
[C:\PROGRA~1\Sina\ddt\DDTONG~1.DLL] [北京新浪信息技术有限公司, 1, 2, 1, 5]
[C:\PROGRA~1\Sina\ddt\DDTInit.dll] [北京新浪信息技术有限公司, 1, 2, 1, 7]
[C:\PROGRA~1\Sina\ddt\DDTUpdate.dll] [北京新浪信息技术有限公司, 1, 2, 1, 1]
[C:\PROGRA~1\Sina\ddt\ddtsh.ocx] [北京新浪信息技术有限公司, 1, 1, 1, 1]
[C:\PROGRA~1\Sina\ddt\DDTcomm.dll] [北京新浪信息技术有限公司, 1, 1, 0, 3]
[C:\PROGRA~1\Sina\ddt\ddtrss.ocx] [, 1, 1, 0, 1]
[C:\PROGRA~1\Sina\ddt\ddtnews.ocx] [北京新浪信息技术有限公司, 1, 1, 1, 5]
[C:\PROGRA~1\Sina\ddt\ddtwea.ocx] [北京新浪信息技术有限公司, 1, 1, 0, 7]
[C:\PROGRA~1\Sina\ddt\DDTDLF~1.OCX] [, 1, 1, 0, 1]
[C:\PROGRA~1\Sina\ddt\ddtstock.ocx] [北京新浪信息技术有限公司, 1, 1, 0, 5]
[C:\PROGRA~1\Sina\ddt\DDTFAV~1.OCX] [sina, 1, 1, 0, 2]
[C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll] [yahoo! china, 3, 1, 3, 1059]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ysearch.dll] [Yahoo! China, 3, 0, 5, 1005]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasnoad.dll] [yahoo! china, 3, 0, 2, 1004]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yzsNetProto.dll] [Yahoo! China, 3, 0, 0, 1000]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll] [Yahoo! China, 3, 0, 4, 1006]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll] [Yahoo! China, 3, 0, 1, 1001]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yaswiper.dll] [Yahoo! China, 3, 0, 2, 1002]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasiesec.dll] [Yahoo! China, 3, 0, 3, 1003]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YSETTI~1.DLL] [yahoo! china, 3, 0, 5, 1010]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ymailp.dll] [Yahoo! China, 3.0.0.1006]
[C:\WINDOWS\downlo~1\CnsHook.dll] [北京三七二一科技有限公司, 1, 0, 3, 7]
[C:\PROGRA~1\Yahoo!\ASSIST~1\yclickon.dll] [YAHOO Corporation Limited, 3, 0, 0, 1001]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll] [yahoo! china, 3, 0, 2, 1003]
[c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1]
[c:\PROGRA~1\chinanet\Communicate.dll] [0, 2005, 3, 3, 1]
[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1]
[D:\Cars\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL] [yahoo! china, 3, 0, 1, 1001]
[C:\PROGRA~1\Sina\ddt\ddtkillw.ocx] [北京新浪信息技术有限公司, 1, 1, 0, 5]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll] [Yahoo! China, 3, 0, 9, 1014]
[C:\KAV6\KAVEXT.DLL] [Kingsoft Corp., 2002, 5, 24, 6]
[C:\WINDOWS\downlo~1\CnsMinIO.dll] [北京三七二一科技有限公司, 1, 0, 3, 7]
[C:\WINDOWS\downlo~1\cnsio.dll] [北京三七二一科技有限公司, 1, 0, 2, 8]
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll] [Yahoo! China, 3, 0, 3, 1005]
[c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll] [Yahoo! China, 3, 0, 1, 1002]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yoptimum.dll] [Yahoo! China, 3, 0, 0, 1000]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yxpstyle.dll] [Yahoo! China, 3, 0, 0, 1000]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll] [Yahoo! China, 3, 0, 7, 1010]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll] [3721.com, 2, 1, 1, 87]
[C:\Program Files\shenzhou\MediaCenter\KPXKEY.dll] [N/A, N/A]
[PID: 2540][D:\AI\同花顺核新\LiveUpdate.exe] [上海核新软件技术有限公司, 2006, 8, 23, 0]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 3196][D:\我的文件\自考试题\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\PROGRA~1\3721\helper.dll] [, 1, 1, 0, 1325]
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 2, 1020]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 3, 1, 2, 1018]
[C:\WINDOWS\downlo~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 9]
[C:\KAV6\KMailFun.dll] [Kingsoft Co., Ltd, 2005, 4, 28, 227]

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
61.129.115.90 qqq.61139.com

==================================

100ganjue - 2006-10-9 18:54:00

同命相连啊！郁闷

秋日里的蓝天 - 2006-10-9 19:08:00

运行(双击)SRENG2，点“启动项目，服务，点“Win32服务应用程序”
勾选“隐藏微软服务”选中病毒服务PopWinIe ，选择“删除服务”
点“设置”选择“否”

运行(双击)SRENG2，点“启动项目，服务，点“驱动程序”勾选“隐藏已认证的微软项目”
选中病毒服务00,,,187625,,,a0 ，选择“删除服务”点“设置”选择“否”

运行SREng2,使用：系统修复－－浏览器加载项－－查找以下的项－－删除所选内容
c:\PROGRA~1\chinanet\VNETTR~1.DLL

运行SREng2,使用：系统修复－－HOSTS--删除
61.129.115.90 qqq.61139.com

显示隐藏文件
删除：
<C:\WINDOWS\System32\PopWin.exe
c:\PROGRA~1\chinanet\VNETTR~1.DLL
c\System32\drivers\1558046.sys
c\System32\drivers\187625.sys

下载超级兔子最新版。
下载地址：http://free5.ys168.com/?ufwihgu168
安装好后，打开“超级兔子清理王”“专业卸载,卸载所有提示的垃圾软件，
卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载。

阿雨过天晴 - 2006-10-10 18:53:00

非常感谢蓝天大侠的帮助，终于把daqimm搞掉了，我被它劫持近10天了，苦闷得很，再次谢谢蓝天大侠的无私帮助。

瑞星卡卡安全论坛