norika - 2006-10-29 18:42:00
怎么都删不掉,也进不去,启动进程什么的没这个了,但是就是进了安全模式也删除不了,各位大大帮帮忙解决下~~
水树雨下 - 2006-10-29 18:48:00
安全模式下中止进程后删除
把日志帖上来
norika - 2006-10-29 19:07:00
一样删不掉,扫描日志~~貌似不让传
水树雨下 - 2006-10-29 19:14:00
怎么不让贴?
norika - 2006-10-29 19:18:00
2006-10-29,18:50:47
System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中:
所有的启动项目(包括注册表、启动文件夹、服务等)
浏览器加载项
正在运行的进程(包括进程模块信息)
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
N/A
==================================
启动文件夹
N/A
==================================
服务
[Adobe LM Service / Adobe LM Service]
<"D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[卡巴斯基反病毒6.0 / AVP]
<"D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab>
[cFosSpeed System Service / cFosSpeedS]
<"D:\Program Files\cFosSpeed\spd.exe" -service><cFos Software GmbH>
[Human Interface Device Access / HidServ]
<D:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Netropa NHK Server / nhksrv]
<D:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe><N/A>
[NVIDIA Display Driver Service / NVSvc]
<D:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[TrueVector Internet Monitor / vsmon]
<D:\WINDOWS\system32\ZoneLabs\vsmon.exe -service><Zone Labs, LLC>
==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[cFosSpeed Miniport / cFosSpeed]
<system32\DRIVERS\cfosspeed.sys><cFos Software GmbH>
[ExpScaner / ExpScaner]
<\??\C:\Program Files\Rising\Rav\ExpScan.sys><N/A>
[HookCont / HookCont]
<\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><N/A>
[HookReg / HookReg]
<\??\C:\Program Files\Rising\Rav\HookReg.sys><N/A>
[HookSys / HookSys]
<\??\C:\Program Files\Rising\Rav\HookSys.sys><N/A>
[kl1 / kl1]
<\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif]
<\??\D:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[MEMSCAN / MEMSCAN]
<\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><N/A>
[Multimedia Keyboard Filter Driver / msikbd2k]
<System32\DRIVERS\msikbd2k.sys><Netropa Corporation>
[ATK0110 ACPI UTILITY / MTsensor]
<system32\DRIVERS\ASACPI.sys><>
[npkcrypt / npkcrypt]
<\??\E:\Program Files\tencent\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[nvata / nvata]
<\SystemRoot\system32\DRIVERS\nvata.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD]
<system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus]
<system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv]
<system32\DRIVERS\secdrv.sys><N/A>
[SmartAVS / SmartAVS]
<\??\D:\WINDOWS\system32\drivers\SmartAVS.sys><All-In-Smart [CWJ]>
[sptd / sptd]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[vsdatant / vsdatant]
<\??\D:\WINDOWS\system32\vsdatant.sys><Zone Labs, LLC>
==================================
浏览器加载项
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <, N/A>
[Web反病毒保护]
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
[HgPluginJP21 Class]
{B905F63D-7489-4B3D-9B62-49A1B8647E2A} <D:\WINDOWS\Downloaded Program Files\HGPluginJP21.dll, NHN Japan Corp.>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <D:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <, N/A>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[HgPluginJP21 Class]
{B905F63D-7489-4B3D-9B62-49A1B8647E2A} <D:\WINDOWS\Downloaded Program Files\HGPluginJP21.dll, NHN Japan Corp.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[&使用迅雷下载]
<D:\Program Files\Thunder Network\Program\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<D:\Program Files\Thunder Network\Program\getallurl.htm, N/A>
[上传到QQ网络硬盘]
<E:\Program Files\tencent\qq1\AddToNetDisk.htm, N/A>
[使用迅雷下载]
<D:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
<D:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[添加到QQ自定义面板]
<E:\Program Files\tencent\qq1\AddPanel.htm, N/A>
[添加到QQ表情]
<E:\Program Files\tencent\qq1\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<E:\Program Files\tencent\qq1\SendMMS.htm, N/A>
norika - 2006-10-29 19:18:00
==================================
正在运行的进程
[PID: 1132][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1196][\??\D:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1224][\??\D:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 6.0.0.299]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[D:\WINDOW~1\wbsrv.dll] [Stardock, 5, 0, 0, 1]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 1272][D:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1284][D:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1456][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1516][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1712][D:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 1840][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1920][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 476][D:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 748][D:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[D:\WindowBlinds5GE\tray.dll] [N/A, N/A]
[D:\Program Files\Netropa\Multimedia Keyboard\nhkdll.dll] [Netropa Corp., 1.03]
[PID: 888][D:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe] [N/A, N/A]
[PID: 928][D:\Program Files\cFosSpeed\spd.exe] [cFos Software GmbH, 3.01.1130]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 996][D:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8456]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 1736][D:\Program Files\cFosSpeed\cFosSpeed.exe] [cFos Software GmbH, 3.01.1130]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 1944][D:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe] [Netropa Corp., 1.00]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[D:\WINDOWS\system32\msiosd32.dll] [N/A, N/A]
[D:\Program Files\Netropa\Multimedia Keyboard\nhkdll.dll] [Netropa Corp., 1.03]
[PID: 272][D:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 708][D:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe] [N/A, N/A]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[D:\WINDOWS\system32\msiosd32.dll] [N/A, N/A]
[PID: 732][D:\Program Files\Netropa\Onscreen Display\OSD.exe] [Netropa Corp., 2.02]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 2356][D:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2856][D:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[PID: 3124][D:\Program Files\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 3296][F:\My Documents\200610161763629000\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 5, 8, 116]
[F:\My Documents\200610161763629000\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2]
[D:\WindowBlinds5GE\wblind.dll] [Stardock.Net, Inc, 5.0]
[D:\WindowBlinds5GE\wbhelp.dll] [Stardock.Net, Inc, 4.01]
[D:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[F:\My Documents\200610161763629000\Maxthon\Plugin\MoreOptions\MoreOptions.dll] [abc, 1.00]
[F:\My Documents\200610161763629000\Maxthon\Plugin\FloatBar\FloatBar.dll] [, 1, 8, 0, 0]
[F:\My Documents\200610161763629000\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1]
[D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
[D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
[D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
[D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
[D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.304]
[d:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["D:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
norika - 2006-10-29 19:32:00
大家帮忙研究下亚`~~~
norika - 2006-10-29 19:53:00
自己顶一下~~~
norika - 2006-10-29 20:23:00
大家帮帮忙亚,真的很急~~
norika - 2006-10-29 20:24:00
大家帮帮忙亚,真的很急~~
norika - 2006-11-1 21:12:00
顶一下~~~
© 2000 - 2026 Rising Corp. Ltd.