IE老是要修改注册表！ bbs.ikaka.com

鬼冢英吉13 - 2006-11-22 16:30:00

上网的时候突然就出现了注册表修改是否同意的请求界面！
一个2个请求，点了拒绝以后就会一直出现！

非别如下：

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN

修改<pk>值为<C:\WINDOWS\System32\rundll32.exe pkf61.dll Rundll32>

C:\WINDOWS\Explorer.EXE

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN

修改<50rm.exe>值为<C:\WINDOWS\System32\50rm.exe C:\WINDOWS\System32\drivers\d83u.sys Rundll32>

C:\WINDOWS\Explorer.EXE

这都是要修改什么呀？请高手帮忙看看！

红夜鬼1 - 2006-11-22 16:45:00

请下载SREng2（最新版），使用“智能扫描”，按下“扫描”按钮进行扫描，
扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告
日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。

下载地址
http://www.kztechs.com/sreng/sreng2.zip

鬼冢英吉13 - 2006-11-22 17:12:00

2006-11-22,17:11:03

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
<RfwMain><"D:\防火墙\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<RavTask><"D:\瑞星杀毒\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<nwiz><nwiz.exe /install> [N/A]
<NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation]
<StormCodec_Helper><"D:\BaoFeng\Storm Codec\StormSet.exe" /S /opti> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
<RavStub><"D:\瑞星杀毒\Rising\Rav\ravstub.exe" /RUNONCE> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><NVDESK32.DLL> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]

==================================
启动文件夹
N/A

==================================
服务
[Human Interface Device Access / HidServ]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Macromedia Licensing Service / Macromedia Licensing Service]
<"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[NVIDIA Display Driver Service / NVSvc]
<C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Proxy Service / RfwProxySrv]
<d:\防火墙\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<d:\防火墙\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<"D:\瑞星杀毒\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon]
<"D:\瑞星杀毒\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Portable Media Serial Number Service / WmdmPmSN]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\System32\mspmsnsv.dll><Microsoft Corporation>

==================================
驱动程序
[Rising TDI Base Driver / BaseTDI]
<System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[ExpScaner / ExpScaner]
<\??\D:\瑞星杀毒\Rising\Rav\ExpScan.sys><>
[HOOKAPI / HOOKAPI]
<\??\D:\瑞星杀毒\RISING\RAV\HOOKAPI.SYS><瑞星软件有限公司>
[HookCont / HookCont]
<\??\D:\瑞星杀毒\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
<\??\D:\瑞星杀毒\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
<\??\D:\瑞星杀毒\Rising\Rav\HookSys.sys><Rising>
[HookUrl / HookUrl]
<\??\D:\防火墙\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[ESS Maestro2E Audio Driver (WDM) / Maestro]
<system32\drivers\essm2e.sys><ESS Technology, Inc.>
[MEMSCAN / MEMSCAN]
<\??\D:\瑞星杀毒\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mProcRs / mProcRs]
<\??\d:\防火墙\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[npkcrypt / npkcrypt]
<\??\D:\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv]
<System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20]
<\SystemRoot\System32\DRIVERS\PxHelp20.sys><Sonic Solutions>
[RsFwDrv / RsFwDrv]
<\??\D:\防火墙\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS]
<\??\D:\瑞星杀毒\RISING\RAV\RSPPSYS.sys><Rising>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139]
<System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv]
<System32\DRIVERS\secdrv.sys><N/A>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <D:\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\FLASHGET\FLASHGET\jccatch.dll, Amaze Soft>
[EyeOnIE]
{C14393E1-95FF-4DFF-9BE0-EA008D4EF930} <C:\PROGRA~1\test\BHOPLU~1.DLL, >
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A} <D:\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[豪杰超级解霸V8]
{367E0A21-8601-4986-9C9A-153BF5ACA118} <D:\V8\STHSDVD.EXE, N/A>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\QQ\QQ.EXE, TENCENT>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <D:\FLASHGET\FLASHGET\flashget.exe, Amaze Soft>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\FLASHGET\FLASHGET\fgiebar.dll, Amaze Soft>
[BitCometBar]
{3F1ABCDB-A875-46c1-8345-B72A4567E486} <D:\BT\BitComet\BitCometBar\BitCometBar0.2.dll, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[上传到QQ网络硬盘]
<D:\QQ\AddToNetDisk.htm, N/A>
[使用网际快车下载]
<D:\FLASHGET\FLASHGET\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<D:\FLASHGET\FLASHGET\jc_all.htm, N/A>
[添加到QQ自定义面板]
<D:\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\QQ\SendMMS.htm, N/A>
[百度Flash搜索]
<res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/FLASHSEARCH.HTM, N/A>
[百度mp3搜索]
<res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUMP3.HTM, N/A>
[百度信息快递搜索]
<res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUIE.HTM, N/A>
[百度图片搜索]
<res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUIMG.HTM, N/A>
[百度搜索]
<res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUSEARCH.HTM, N/A>
[百度新闻搜索]
<res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUNEWS.HTM, N/A>
[豪杰超级解霸V8实时播放]
<D:\V8\MPURLGET.HTM, N/A>

鬼冢英吉13 - 2006-11-22 17:15:00

==================================
正在运行的进程
[PID: 448][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 504][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 528][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 572][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 584][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 748][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 800][D:\瑞星杀毒\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 816][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 972][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1052][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1172][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[C:\WINDOWS\System32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.8126]
[C:\WINDOWS\System32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.8126]
[C:\WINDOWS\System32\nvshell.dll] [N/A, N/A]
[D:\FLASHGET\FLASHGET\jccatch.dll] [Amaze Soft, 1, 1, 4, 0]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[D:\RAR\rarext.dll] [N/A, N/A]
[D:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1184][D:\瑞星杀毒\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 47]
[D:\瑞星杀毒\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[D:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[D:\瑞星杀毒\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[D:\瑞星杀毒\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[D:\瑞星杀毒\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[D:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[D:\瑞星杀毒\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[D:\瑞星杀毒\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 18, 1, 0, 12]
[D:\瑞星杀毒\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 33]
[D:\瑞星杀毒\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
[D:\瑞星杀毒\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[D:\瑞星杀毒\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
[D:\瑞星杀毒\Rising\Rav\HookWeb.dll] [rising, 18, 0, 0, 2]
[D:\瑞星杀毒\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
[D:\瑞星杀毒\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[D:\瑞星杀毒\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[D:\瑞星杀毒\Rising\Rav\MailMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[D:\瑞星杀毒\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6]
[D:\瑞星杀毒\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 35]
[D:\瑞星杀毒\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 18]
[D:\瑞星杀毒\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[D:\瑞星杀毒\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
[D:\瑞星杀毒\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32]
[D:\瑞星杀毒\Rising\Rav\RSUnpack.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 20]
[D:\瑞星杀毒\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 24]
[D:\瑞星杀毒\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7]
[D:\瑞星杀毒\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
[D:\瑞星杀毒\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[D:\瑞星杀毒\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[D:\瑞星杀毒\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
[PID: 1260][d:\防火墙\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 33]
[d:\防火墙\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13]
[d:\防火墙\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6]
[d:\防火墙\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21]
[d:\防火墙\rising\rfw\MonDrv.dll] [rs, 1, 0, 0, 4]
[d:\防火墙\rising\rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9]
[PID: 1412][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[PID: 1508][D:\瑞星杀毒\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
[D:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[D:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1716][D:\防火墙\Rising\Rfw\rfwmain.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 52]
[D:\防火墙\Rising\Rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23]
[D:\防火墙\Rising\Rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[D:\防火墙\Rising\Rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 1728][D:\瑞星杀毒\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22]
[D:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[D:\瑞星杀毒\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[D:\瑞星杀毒\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[D:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 1736][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3018]
[PID: 1752][D:\瑞星杀毒\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 39]
[D:\瑞星杀毒\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
[D:\瑞星杀毒\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[D:\瑞星杀毒\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[D:\瑞星杀毒\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[D:\瑞星杀毒\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[D:\瑞星杀毒\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[D:\瑞星杀毒\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 1768][C:\WINDOWS\System32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\NvMcTray.dll] [NVIDIA Corporation, 6.14.10.8126]
[C:\WINDOWS\System32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.8126]
[PID: 1840][C:\WINDOWS\System32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 1876][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 1928][C:\WINDOWS\System32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8126]
[PID: 1632][D:\Real10\realplay.exe] [RealNetworks, Inc., 6.0.12.857]
[C:\WINDOWS\System32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0]
[C:\Program Files\Common Files\Real\Update_OB\rnms3270.dll] [RealNetworks, Inc., 7.0.1.2851]
[C:\Program Files\Common Files\Real\Common\objb3201.dll] [RealNetworks, Inc., 0.1.0.5835]
[C:\Program Files\Common Files\Real\RCAPlugins\uisy3201.dll] [RealNetworks, Inc., 0.1.0.3347]
[D:\Real10\lang\gemctl_cn.dll] [RealNetworks, Inc., 6.0.12.261]
[C:\Program Files\Common Files\Real\Common\pnrs3260.dll] [RealNetworks, Inc., 6.0.9.3584]
[C:\Program Files\Common Files\Real\Update_OB\rnad3201.dll] [RealNetworks, Inc., 0.1.0.3018]
[C:\Program Files\Common Files\Real\Update_OB\rnqu3270.dll] [RealNetworks, Inc., 7.0.0.3270]
[C:\Program Files\Common Files\Real\Update_OB\setu3270.dll] [RealNetworks, Inc., 7.0.0.3884]
[C:\Program Files\Common Files\Real\Plugins\httpfsys.dll] [RealNetworks, Inc., 10.0.0.1779]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]

鬼冢英吉13 - 2006-11-22 17:16:00

[PID: 2092][D:\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0]
[D:\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[D:\QQ\QQHelperDll.dll] [, 1, 0, 0, 1]
[D:\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370]
[D:\QQ\QQAPI.dll] [, 1, 0, 0, 1]
[D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\QQ\LoginCtrl.dll] [, 1, 0, 0, 1]
[D:\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1]
[D:\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[D:\QQ\QQRes.dll] [tencent, 1, 0, 0, 1]
[D:\QQ\QQMainFrame.dll] [N/A, N/A]
[D:\QQ\CQQApplication.dll] [N/A, N/A]
[D:\QQ\NewSkin.dll] [, 1, 0, 0, 1]
[D:\QQ\HostingMgr.dll] [, 1, 0, 0, 1]
[D:\QQ\CameraDll.dll] [, 1, 0, 0, 1]
[D:\QQ\MailSummary.dll] [, 1, 0, 0, 1]
[D:\QQ\QQSpace.dll] [, 1, 0, 0, 1]
[D:\QQ\QQAllInOne.dll] [N/A, N/A]
[D:\QQ\GroupLive.dll] [N/A, N/A]
[D:\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1]
[C:\WINDOWS\System32\msdmo.dll] [N/A, N/A]
[D:\QQ\QQGroupMng.dll] [, 1, 0, 0, 1]
[D:\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1]
[D:\QQ\QQPlugin.dll] [N/A, N/A]
[D:\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1]
[D:\QQ\QRingMng.dll] [N/A, N/A]
[D:\QQ\PhoneAPI.dll] [, 1, 0, 0, 1]
[D:\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[D:\QQ\VPortal.dll] [, 1, 0, 0, 4]
[D:\QQ\QQAvatar.dll] [N/A, N/A]
[D:\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160]
[D:\QQ\QQPet.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[D:\QQ\QQSysMsgMng.dll] [N/A, N/A]
[D:\QQ\BQQApplication.dll] [N/A, N/A]
[D:\QQ\CommercesMng.dll] [, 1, 0, 0, 1]
[D:\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
[D:\QQ\QQCustomFace.dll] [N/A, N/A]
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[D:\QQ\QQSceneMng.dll] [N/A, N/A]
[D:\瑞星杀毒\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[D:\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 0, 6, 60]
[D:\QQ\GroupConnection.dll] [Tencent, 0, 3, 3, 5]
[D:\QQ\QQFileTransfer.dll] [Tencent, 0, 3, 3, 5]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 2136][D:\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0]
[D:\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[D:\QQ\QQHelperDll.dll] [, 1, 0, 0, 1]
[D:\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370]
[D:\QQ\QQAPI.dll] [, 1, 0, 0, 1]
[D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\QQ\LoginCtrl.dll] [, 1, 0, 0, 1]
[D:\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1]
[D:\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[D:\QQ\QQRes.dll] [tencent, 1, 0, 0, 1]
[D:\QQ\QQMainFrame.dll] [N/A, N/A]
[D:\QQ\CQQApplication.dll] [N/A, N/A]
[D:\QQ\NewSkin.dll] [, 1, 0, 0, 1]
[D:\QQ\HostingMgr.dll] [, 1, 0, 0, 1]
[D:\QQ\CameraDll.dll] [, 1, 0, 0, 1]
[D:\QQ\MailSummary.dll] [, 1, 0, 0, 1]
[D:\QQ\QQSpace.dll] [, 1, 0, 0, 1]
[D:\QQ\QQAllInOne.dll] [N/A, N/A]
[D:\QQ\GroupLive.dll] [N/A, N/A]
[D:\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1]
[C:\WINDOWS\System32\msdmo.dll] [N/A, N/A]
[D:\QQ\QQGroupMng.dll] [, 1, 0, 0, 1]
[D:\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1]
[D:\QQ\QQPlugin.dll] [N/A, N/A]
[D:\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1]
[D:\QQ\QRingMng.dll] [N/A, N/A]
[D:\QQ\PhoneAPI.dll] [, 1, 0, 0, 1]
[D:\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[D:\QQ\VPortal.dll] [, 1, 0, 0, 4]
[D:\QQ\QQAvatar.dll] [N/A, N/A]
[D:\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160]
[D:\QQ\QQPet.dll] [, 1, 0, 0, 1]
[D:\QQ\QQSysMsgMng.dll] [N/A, N/A]
[D:\QQ\BQQApplication.dll] [N/A, N/A]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[D:\QQ\CommercesMng.dll] [, 1, 0, 0, 1]
[D:\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
[D:\QQ\QQSceneMng.dll] [N/A, N/A]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 2172][D:\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0]
[D:\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[D:\QQ\QQHelperDll.dll] [, 1, 0, 0, 1]
[D:\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370]
[D:\QQ\QQAPI.dll] [, 1, 0, 0, 1]
[D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\QQ\LoginCtrl.dll] [, 1, 0, 0, 1]
[D:\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1]
[D:\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[D:\QQ\QQRes.dll] [tencent, 1, 0, 0, 1]
[D:\QQ\QQMainFrame.dll] [N/A, N/A]
[D:\QQ\CQQApplication.dll] [N/A, N/A]
[D:\QQ\NewSkin.dll] [, 1, 0, 0, 1]
[D:\QQ\HostingMgr.dll] [, 1, 0, 0, 1]
[D:\QQ\CameraDll.dll] [, 1, 0, 0, 1]
[D:\QQ\MailSummary.dll] [, 1, 0, 0, 1]
[D:\QQ\QQSpace.dll] [, 1, 0, 0, 1]
[D:\QQ\QQAllInOne.dll] [N/A, N/A]
[D:\QQ\GroupLive.dll] [N/A, N/A]
[D:\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1]
[C:\WINDOWS\System32\msdmo.dll] [N/A, N/A]
[D:\QQ\QQGroupMng.dll] [, 1, 0, 0, 1]
[D:\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1]
[D:\QQ\QQPlugin.dll] [N/A, N/A]
[D:\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1]
[D:\QQ\QQSysMsgMng.dll] [N/A, N/A]
[D:\QQ\QRingMng.dll] [N/A, N/A]
[D:\QQ\PhoneAPI.dll] [, 1, 0, 0, 1]
[D:\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[D:\QQ\VPortal.dll] [, 1, 0, 0, 4]
[D:\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160]
[D:\QQ\QQAvatar.dll] [N/A, N/A]
[D:\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\QQ\QQPet.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[D:\QQ\BQQApplication.dll] [N/A, N/A]
[D:\QQ\CommercesMng.dll] [, 1, 0, 0, 1]
[D:\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
[D:\QQ\QQSceneMng.dll] [N/A, N/A]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 2220][D:\QQ\TIMPlatform.exe] [tencent, 0, 3, 1, 8]
[D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 2340][D:\浩方对战平台\GameClient.exe] [上海浩方在线信息技术有限公司, 4.6.0.6]
[D:\浩方对战平台\GameShell.dll] [上海浩方在线信息技术有限公司, 4.6.0.2]
[D:\浩方对战平台\Proxy.dll] [, 1, 0, 0, 1]
[D:\浩方对战平台\MeteorCheck.dll] [N/A, N/A]
[D:\浩方对战平台\ComCtrlLib.dll] [, 1, 0, 0, 1]
[D:\浩方对战平台\SkinPlusPlusDLL.dll] [, 1, 0, 0, 1]
[D:\浩方对战平台\GameData.dll] [, 4.6.0.0]
[D:\浩方对战平台\UserAvatar.dll] [, 1, 0, 0, 1]
[D:\浩方对战平台\IShowSocket.dll] [, 1, 0, 0, 1]
[D:\浩方对战平台\IMUIDll.dll] [, 4.5.5.0]
[D:\浩方对战平台\IMbase.dll] [, 1, 0, 0, 1]
[D:\浩方对战平台\IMRes.dll] [, 4.5.5.0]
[D:\浩方对战平台\GameRes.dll] [上海浩方在线信息技术有限公司, 4.6.0.2]
[D:\浩方对战平台\AdsManager.dll] [N/A, N/A]
[D:\瑞星杀毒\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[D:\浩方对战平台\cs15.dll] [, 4, 0, 1, 0]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 3588][C:\WINDOWS\System32\wuauclt.exe] [Microsoft Corporation, 5.4.3630.1106 (xpsp1.020828-1920)]
[PID: 3720][D:\Winamp\winamp.exe] [Nullsoft, 5.01]
[D:\Winamp\Plugins\in_mp3.dll] [N/A, N/A]
[D:\Winamp\Plugins\in_wm.dll] [N/A, N/A]
[D:\Winamp\Plugins\in_midi.dll] [N/A, N/A]
[D:\Winamp\Plugins\read_file.dll] [N/A, N/A]
[D:\Winamp\Plugins\in_mod.dll] [N/A, N/A]
[D:\Winamp\Plugins\in_vorbis.dll] [N/A, N/A]
[D:\Winamp\Plugins\in_cdda.dll] [N/A, N/A]
[D:\Winamp\Plugins\in_wave.dll] [N/A, N/A]
[D:\Winamp\Plugins\in_nsv.dll] [N/A, N/A]
[D:\Winamp\Plugins\in_dshow.dll] [N/A, N/A]
[D:\Winamp\Plugins\out_wave.dll] [N/A, N/A]
[D:\Winamp\Plugins\out_disk.dll] [N/A, N/A]
[D:\Winamp\Plugins\out_ds.dll] [N/A, N/A]
[D:\Winamp\Plugins\gen_tray.dll] [N/A, N/A]
[D:\Winamp\Plugins\gen_ml.dll] [N/A, N/A]
[C:\WINDOWS\System32\PXDRV.DLL] [Sonic Solutions, 1.00.47a]
[C:\WINDOWS\System32\PXMAS.DLL] [Sonic Solutions, 1.06.14h]
[C:\WINDOWS\System32\PXWAVE.DLL] [Sonic Solutions, 1.06.14h]
[D:\Winamp\Plugins\gen_ff.dll] [N/A, N/A]
[D:\Winamp\Plugins\freeform\wacs\jpgload\jpgload.wac] [N/A, N/A]
[D:\Winamp\Plugins\gen_hotkeys.dll] [N/A, N/A]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 252][D:\TT\TTraveler.exe] [腾讯公司, 3.1.0.256]
[D:\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] [腾讯公司, 1, 1, 0, 5]
[D:\TT\Plugins\TWeather\TWeather.dll] [, 1, 0, 0, 3]
[D:\TT\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
[D:\瑞星杀毒\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 3288][E:\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[D:\V8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]

==================================

鬼冢英吉13 - 2006-11-22 17:16:00

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
61.141.31.11 www.kzdh.com
61.141.31.11 www.7255.com
61.141.31.11 www.7322.com
61.141.31.11 www.7939.com
61.141.31.11 www.piaoxue.com
61.141.31.11 www.feixu.net
61.141.31.11 www.6781.com
61.141.31.11 www.7b.com.cn
61.141.31.11 7b.com.cn
61.141.31.11 www.918188.com
61.141.31.11 hao.allxue.com
61.141.31.11 good.allxue.com
61.141.31.11 baby.allxue.com
61.141.31.11 www.allxue.com
61.141.31.11 about.lank.la
61.141.31.11 www.x114x.com
61.141.31.11 www.37ss.com
61.141.31.11 www.7k.cc
61.141.31.11 www.73ss.com
125.91.14.230 www.hao123.com
61.141.31.11 www.81915.com
61.141.31.11 222.88.90.22
61.141.31.11 www.9991.com
61.141.31.11 www.my123.com
61.141.31.11 www.haokan123.com
61.141.31.11 www.5566.net
61.141.31.11 www.gjj.cc
61.141.31.11 www.2345.com
61.141.31.11 dl.hao318.com
61.141.31.11 www.123wa.com
61.141.31.11 www.ku886.com
61.141.31.11 www.5icrack.com
61.141.31.11 www.jjol.cn

==================================

红夜鬼1 - 2006-11-22 18:48:00

日志正常

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN

修改<pk>值为<C:\WINDOWS\System32\rundll32.exe pkf61.dll Rundll32>

红色的不要

HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN

修改<50rm.exe>值为<C:\WINDOWS\System32\50rm.exe C:\WINDOWS\System32\drivers\d83u.sys Rundll32>
删除<50rm.exe>值为<C:\WINDOWS\System32\50rm.exe C:\WINDOWS\System32\drivers\d83u.sys Rundll32>

删除文件
pkf61.dll
C:\WINDOWS\System32\50rm.exe
C:\WINDOWS\System32\drivers\d83u.sys

鬼冢英吉13 - 2006-11-22 19:26:00

注册表里面并没有找到要删除的那些信息，因为我一直都点的是拒绝修改！

已经把那些文件本身删除了！

谢谢，红夜鬼大哥！

鬼冢英吉13 - 2006-11-23 16:53:00

谢谢，红夜鬼大哥！

瑞星卡卡安全论坛