高手指点下..... bbs.ikaka.com

爱上祢我很快乐 - 2006-10-27 16:59:00

我用 SREng2 差出两个东西第一个是红色的，第二是蓝色的

附件: 77037120061027165123.BMP

爱上祢我很快乐 - 2006-10-27 17:00:00

tu

附件: 77037120061027165222.BMP

710207 - 2006-10-27 17:08:00

那个蓝红都建议删除,都不是什么好东西
删除启动项后删除对应文件

爱上祢我很快乐 - 2006-10-27 17:11:00

我知道不是好东西，要是能删得掉，我就不发贴了..

问题是它删不掉!!!

水树雨下 - 2006-10-27 17:15:00

把完整日志帖上来

爱上祢我很快乐 - 2006-10-27 17:22:00

2006-10-27,17:08:19

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
启动文件夹
服务
[Kingsoft Personal Firewall Service / KPfwSvc]
<"D:\KAV2005\KPfwSvc.EXE"><Kingsoft Corporation>
[Kingsoft Antivirus KWatch Service / KWatchSvc]
<d:\KAV2005\KWatch.EXE><Kingsoft Corporation>

==================================
浏览器加载项
[Yahoo!Photo]
{33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
{38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, Yahoo.>
[雅虎助手]
{406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[CnsHook Class]
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[新浪UC]
{2253922F-1B26-4C74-8B57-E3AEE748DBB8} <C:\Program Files\sina\UC\uc.exe, 北京新浪信息技术有限公司>
[Yahoo 3.5G电邮]
{507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[名品折扣]
{59BC54A2-56B3-44a0-93E5-432D58746E26} <http://adtaobao.allyes.com/main/adfclick?db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816, N/A>
[雅虎助手]
{5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[雅虎WIDGET]
{6354ABE6-05F1-49ed-B850-E423120EC338} <http://cn.widget.yahoo.com/index.htm?source=Cns, N/A>
[信息检索(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A>
[]
{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[]
{FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[雅虎助手]
{406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[Yahoo!Photo]
{33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
{38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, Yahoo.>
[雅虎助手]
{406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[CnsHook Class]
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[上传到QQ网络硬盘]
<C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\Program Files\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[添加到雅虎订阅(&Y)]
<res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\qq\SendMMS.htm, N/A>
[雅虎搜索]
<res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/246, N/A>

==================================
正在运行的进程
[PID: 412][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 460][\??\C:\windows\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 484][\??\C:\windows\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 528][C:\windows\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 540][C:\windows\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 688][C:\windows\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 740][C:\windows\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 848][C:\windows\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 928][C:\windows\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][C:\windows\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1124][d:\KAV2005\KWatch.EXE] <Kingsoft Corporation><2005, 9, 27, 51>
[d:\KAV2005\KAVIPC2.DLL] <Kingsoft Corporation><2004, 12, 28, 20>
[d:\KAV2005\KAEPlat.DLL] <Kingsoft Corp.><2006, 5, 30, 59>
[d:\KAV2005\KAEMem.DAT] <Kingsoft><2006, 9, 25, 16>
[d:\KAV2005\KAEUnpack.DAT] <Kingsoft Corp.><2006, 7, 27, 59>
[PID: 1232][C:\windows\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 3, 7>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[C:\windows\webwork\webwork.nls] <MSWebwork Cop.><1, 0, 0, 1>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[D:\KAV2005\KMailOEBand.dll] <N/A><2006, 5, 19, 118>
[C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 7>
[C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 8>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 9, 1027>
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><2, 0, 4, 1007>
[C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] <><2, 0, 4, 1030>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] < ><2, 0, 1, 1007>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll] <Yahoo! China><1, 1, 3, 1035>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll] <Yahoo!><2, 1, 9, 1049>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[d:\PROGRA~1\3721\ske\contmenu.dll] <N/A><N/A>
[PID: 1320][C:\windows\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1460][C:\windows\system32\Rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 7>
[C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 8>
[D:\KAV2005\KMailOEBand.dll] <N/A><2006, 5, 19, 118>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[C:\WINDOWS\downlo~1\CnsMinEx.dll] <国风因特软件(北京)有限公司><1, 0, 3, 4>
[PID: 1852][D:\KAV2005\KPfwSvc.EXE] <Kingsoft Corporation><2005, 9, 5, 28>
[PID: 1868][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] <Microsoft Corporation><7.00.9466>
[PID: 1912][C:\windows\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 332][D:\KAV2005\KAVStart.exe] <Kingsoft Corporation><2006, 9, 27, 210>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[D:\KAV2005\KAVIPC2.DLL] <Kingsoft Corporation><2004, 12, 28, 20>
[D:\KAV2005\PopSprt3.dll] <Kingsoft Corporation><2006, 9, 26, 38>
[D:\KAV2005\KAVPassp.dll] <Kingsoft Corporation><2006, 6, 7, 252>

爱上祢我很快乐 - 2006-10-27 17:23:00

[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 340][C:\windows\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 432][C:\windows\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 436][D:\KAV2005\KPFW32.EXE] <Kingsoft Corporation><2006, 8, 9, 615>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[D:\KAV2005\KAVIPC2.DLL] <Kingsoft Corporation><2004, 12, 28, 20>
[D:\KAV2005\KAConfig.DLL] <Kingsoft Corporation><2005, 3, 23, 30>
[D:\KAV2005\KAVPassp.DLL] <Kingsoft Corporation><2006, 6, 7, 252>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[D:\KAV2005\KAEPlat.DLL] <Kingsoft Corp.><2006, 5, 30, 59>
[D:\KAV2005\KAEMem.DAT] <Kingsoft><2006, 9, 25, 16>
[D:\KAV2005\KAEUnpack.DAT] <Kingsoft Corp.><2006, 7, 27, 59>
[D:\KAV2005\KMailOEBand.dll] <N/A><2006, 5, 19, 118>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 9, 1027>
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><2, 0, 4, 1007>
[PID: 912][D:\KAV2005\KMailMon.EXE] <Kingsoft Corporation><2006, 4, 12, 106>
[D:\KAV2005\KAntiSpm.dll] <N/A><1, 0, 0, 2>
[D:\KAV2005\KAVIPC2.DLL] <Kingsoft Corporation><2004, 12, 28, 20>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[D:\KAV2005\KAECall2.DLL] <Kingsoft Corporation><2004, 12, 28, 7>
[D:\KAV2005\KAEPlat.DLL] <Kingsoft Corp.><2006, 5, 30, 59>
[D:\KAV2005\KAEMem.DAT] <Kingsoft><2006, 9, 25, 16>
[D:\KAV2005\KAEUnpack.DAT] <Kingsoft Corp.><2006, 7, 27, 59>
[D:\KAV2005\KAConfig.DLL] <Kingsoft Corporation><2005, 3, 23, 30>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[D:\KAV2005\KMailOEBand.dll] <N/A><2006, 5, 19, 118>
[PID: 1580][D:\KAV2005\KSA\KSAMain.EXE] <Kingsoft Corporation><2006, 3, 15, 58>
[D:\KAV2005\KAConfig.DLL] <Kingsoft Corporation><2005, 3, 23, 30>
[D:\KAV2005\KMailOEBand.dll] <N/A><2006, 5, 19, 118>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 9, 1027>
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><2, 0, 4, 1007>
[PID: 2388][C:\PROGRA~1\Yahoo!\ASSIST~1\ylive.exe] <Yahoo! China><2, 0, 4, 1007>
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><2, 0, 4, 1007>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 9, 1027>
[D:\KAV2005\KMailOEBand.dll] <N/A><2006, 5, 19, 118>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] <><2, 0, 4, 1030>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] < ><2, 0, 1, 1007>
[C:\PROGRA~1\Yahoo!\ASSIST~1\ynotifier.dll] <><1, 0, 0, 5>
[PID: 2340][D:\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 9, 1027>
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><2, 0, 4, 1007>
[D:\KAV2005\KMailOEBand.dll] <N/A><2006, 5, 19, 118>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 676][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] <><2, 0, 9, 1027>
[C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll] <Yahoo><1, 0, 2, 1002>
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] <Yahoo! China><2, 0, 4, 1007>
[D:\KAV2005\KMailOEBand.dll] <N/A><2006, 5, 19, 118>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 9>
[C:\WINDOWS\downlo~1\CnsHint.dll] <3721><1, 0, 1, 1>
[D:\KAV2005\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233>
[C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] <><2, 0, 4, 1030>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] < ><2, 0, 1, 1007>
[C:\WINDOWS\downlo~1\cnsplus.dll] <3721><1, 0, 0, 2>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll] <Yahoo!><2, 1, 9, 1049>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yaswiper.dll] <Yahoo><1, 0, 1, 1004>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasiesec.dll] <Yahoo><1, 0, 2, 1003>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasnoad.dll] <><1, 1, 4, 1006>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yzsNetProto.dll] <Yahoo><1, 0, 0, 1>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll] <Yahoo! China><1, 1, 3, 1035>
[C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 3, 7>
[C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll] <Yahoo.><1, 0, 5, 1006>
[C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0>
[d:\KAV2005\KAScript.DLL] <Kingsoft Corporation><2006, 2, 10, 60>
[d:\KAV2005\KAEPlat.DLL] <Kingsoft Corp.><2006, 5, 30, 59>
[d:\KAV2005\KAEMem.DAT] <Kingsoft><2006, 9, 25, 16>
[d:\KAV2005\KAEUnpack.DAT] <Kingsoft Corp.><2006, 7, 27, 59>
[C:\WINDOWS\system32\macromed\flash\Flash.ocx] <Macromedia, Inc.><7,0,19,0>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 7>
[C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 8>
[c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll] < ><1, 0, 3, 1002>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\windows\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

水树雨下 - 2006-10-27 17:27:00

用超级兔子清理流氓软件，下载地址http://www.pctutu.com/

爱上祢我很快乐 - 2006-10-27 17:30:00

只有用兔子才能解决吗??? 用不用注册??? 谢谢!

瑞星卡卡安全论坛