请高手帮忙看看,瑞星杀毒升不了级防火墙开不启,无法进安全模式(内附日志) bbs.ikaka.com

大头touda - 2006-11-26 22:01:00

正常关机关不了,系统安全模式也进不了,进安全模式就重起!直接进瑞星的网站都进不了.....卡卡社区也进不来!桌面上的IE图标也打不开...系统启动时出现鬼蜮的提示
谢谢了!我快崩溃了
2006-11-26,21:43:43

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
<run><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<RfwMain><"c:\program files\rising\rfw\rfwmain.exe" -startup> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{1A404685-7563-4d02-B0F6-58B308A406A9}><e:\storm codec\eugklkhn.dll> [N/A]

==================================
启动文件夹
N/A

==================================
服务
[Human Interface Device Access / HidServ]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[Macromedia Licensing Service / Macromedia Licensing Service]
<"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[NVIDIA Display Driver Service / NVSvc]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Rising Proxy Service / RfwProxySrv]
<c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

大头touda - 2006-11-26 22:02:00

==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter / AN983]
<system32\DRIVERS\AN983.sys><ADMtek Incorporated.>
[Rising TDI Base Driver / BaseTDI]
<System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[d344prt / d344prt]
<\SystemRoot\System32\Drivers\d344prt.sys><N/A>
[dtscsi / dtscsi]
<\SystemRoot\System32\Drivers\dtscsi.sys><N/A>
[ExpScaner / ExpScaner]
<\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[HookCont / HookCont]
<\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
<\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
<\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[HookUrl / HookUrl]
<\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[HSFHWBS2 / HSFHWBS2]
<system32\DRIVERS\HSFBS2S2.sys><Conexant Systems, Inc.>
[HSF_DP / HSF_DP]
<system32\DRIVERS\HSFDPSP2.sys><Conexant Systems, Inc.>
[kmsinput / kmsinput]
<\??\C:\WINDOWS\system32\drivers\kmsinput.sys><N/A>
[mdmxsdk / mdmxsdk]
<system32\DRIVERS\mdmxsdk.sys><Conexant>
[MEMSCAN / MEMSCAN]
<\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mProcRs / mProcRs]
<\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[npkcrypt / npkcrypt]
<\??\F:\QQ\npkcrypt.sys><N/A>
[npkycryp / npkycryp]
<\??\F:\QQ\npkycryp.sys><N/A>
[NPPTNT2 / NPPTNT2]
<\??\C:\WINDOWS\system32\npptNT2.sys><INCA Internet Co., Ltd.>
[nv / nv]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[paasweq / paasweq]
<\??\C:\WINDOWS\system32\sosdrp.sys><N/A>
[Direct Parallel Link Driver / Ptilink]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsAntiSpyware / RsAntiSpyware]
<\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising>
[RsFwDrv / RsFwDrv]
<\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[Secdrv / Secdrv]
<system32\DRIVERS\secdrv.sys><N/A>
[StarForce Protection Environment Driver (version 1.x) / sfdrv01]
<\SystemRoot\System32\drivers\sfdrv01.sys><Protection Technology>
[StarForce Protection Helper Driver (version 2.x) / sfhlp02]
<\SystemRoot\System32\drivers\sfhlp02.sys><Protection Technology>
[StarForce Protection Synchronization Driver (version 2.x) / sfsync02]
<\SystemRoot\System32\drivers\sfsync02.sys><Protection Technology>
[StarForce Protection Synchronization Driver (version 4.x) / sfsync04]
<\SystemRoot\System32\drivers\sfsync04.sys><Protection Technology>
[StarForce Protection VFS Driver (version 2.x) / sfvfs02]
<\SystemRoot\System32\drivers\sfvfs02.sys><Protection Technology>
[sptd / sptd]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[STEC3 / STEC3]
<\??\C:\WINDOWS\system32\STEC3.sys><AntiCracking>
[TCP/IP Protocol Driver / Tcpip]
<system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[vbppdryu / vbppdryu]
<\??\C:\WINDOWS\system32\sosdrp.sys><N/A>

==================================
浏览器加载项
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[AxSubmitControl Class]
{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, >
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[超级兔子上网精灵]
{43869BB3-22FD-4F15-9B46-238106BA2F4E} <, N/A>
[HHCtrl Object]
{52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <F:\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[超级兔子上网精灵]
{7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <, N/A>
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, >
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[AxSubmitControl Class]
{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, >
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[卡卡上网安全助手]
{AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[上传到QQ网络硬盘]
<F:\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
<F:\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<F:\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<F:\QQ\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
<F:\BT\bsurl.htm, N/A>

==================================

大头touda - 2006-11-26 22:03:00

==================================
正在运行的进程
[PID: 492][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 564][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 588][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 636][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 648][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 804][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 864][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 932][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 972][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1048][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1124][c:\program files\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 33]
[c:\program files\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13]
[c:\program files\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6]
[c:\program files\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21]
[c:\program files\rising\rfw\MonDrv.dll] [rs, 1, 0, 0, 4]
[c:\program files\rising\rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9]
[c:\program files\rising\rfw\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[PID: 1300][C:\WINDOWS\Explorer.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.7190]
[C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.7190]
[C:\WINDOWS\system32\nvshell.dll] [NVIDIA Corporation, 6.14.10.10031]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[F:\QQ\jc5y.dll] [N/A, N/A]
[C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll] [Nokia, 6, 60, 4, 7]
[C:\WINDOWS\system32\ConnAPI.DLL] [Nokia., 6, 60, 21, 1]
[C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] [Nokia, 6, 60, 45, 3]
[C:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] [Nokia, 6, 60, 5, 0]
[C:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] [Nokia, 6, 60, 1, 0]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[PID: 1432][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1580][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[F:\QQ\jc5y.dll] [N/A, N/A]
[PID: 1596][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[F:\QQ\jc5y.dll] [N/A, N/A]
[PID: 1612][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[F:\QQ\jc5y.dll] [N/A, N/A]
[PID: 1620][C:\WINDOWS\system32\ro.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[F:\QQ\jc5y.dll] [N/A, N/A]
[PID: 440][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.7190]
[C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.7190]
[PID: 544][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 860][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 296][F:\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0]
[F:\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[F:\QQ\QQHelperDll.dll] [, 1, 0, 0, 1]
[F:\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[F:\QQ\QQAPI.dll] [, 1, 0, 0, 1]
[F:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[F:\QQ\jc5y.dll] [N/A, N/A]
[F:\QQ\LoginCtrl.dll] [, 1, 0, 0, 1]
[F:\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1]
[F:\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[F:\QQ\QQRes.dll] [tencent, 1, 0, 0, 1]
[F:\QQ\QQMainFrame.dll] [N/A, N/A]
[F:\QQ\CQQApplication.dll] [N/A, N/A]
[F:\QQ\NewSkin.dll] [, 1, 0, 0, 1]
[F:\QQ\HostingMgr.dll] [, 1, 0, 0, 1]
[F:\QQ\CameraDll.dll] [, 1, 0, 0, 1]
[F:\QQ\MailSummary.dll] [, 1, 0, 0, 1]
[F:\QQ\QQSpace.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[F:\QQ\QQGroupMng.dll] [, 1, 0, 0, 1]
[F:\QQ\GroupLive.dll] [N/A, N/A]
[F:\QQ\QQSysMsgMng.dll] [N/A, N/A]
[F:\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1]
[F:\QQ\QQPlugin.dll] [N/A, N/A]
[F:\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1]
[F:\QQ\QRingMng.dll] [N/A, N/A]
[F:\QQ\PhoneAPI.dll] [, 1, 0, 0, 1]
[F:\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[F:\QQ\VPortal.dll] [, 1, 0, 0, 4]
[F:\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160]
[F:\QQ\QQAllInOne.dll] [N/A, N/A]
[F:\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1]
[F:\QQ\QQCustomFace.dll] [N/A, N/A]
[F:\QQ\QQPet.dll] [, 1, 0, 0, 1]
[F:\QQ\QQAvatar.dll] [N/A, N/A]
[F:\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,21,75]
[C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll] [Nokia, 6, 60, 4, 7]
[C:\WINDOWS\system32\ConnAPI.DLL] [Nokia., 6, 60, 21, 1]
[C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] [Nokia, 6, 60, 45, 3]
[C:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] [Nokia, 6, 60, 5, 0]
[C:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] [Nokia, 6, 60, 1, 0]
[F:\QQ\QQSceneMng.dll] [N/A, N/A]
[F:\QQ\ImageOle.dll] [TODO: <Company name>, 1.0.0.1]
[F:\QQ\BQQApplication.dll] [N/A, N/A]
[F:\QQ\GroupConnection.dll] [Tencent, 0, 3, 3, 5]
[F:\QQ\CommercesMng.dll] [, 1, 0, 0, 1]
[F:\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[F:\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
[F:\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 0, 6, 60]
[PID: 548][F:\QQ\TIMPlatform.exe] [tencent, 0, 3, 1, 8]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[F:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[F:\QQ\jc5y.dll] [N/A, N/A]

大头touda - 2006-11-26 22:04:00

[PID: 2612][E:\Storm Codec\mplayerc.exe] [Gabest, 6, 4, 9, 0]
[F:\QQ\jc5y.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\WINDOWS\system32\tssoft32.acm] [DSP GROUP, INC., 1.01]
[C:\WINDOWS\system32\tsd32.dll] [N/A, N/A]
[C:\WINDOWS\system32\sl_anet.acm] [Sipro Lab Telecom Inc., 3.02]
[C:\WINDOWS\system32\l3codeca.acm] [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 2, 0, 63]
[C:\WINDOWS\system32\vorbis.acm] [HMS http://hp.vector.co.jp/authors/VA012897/, 0, 0, 3, 6]
[C:\WINDOWS\system32\vct3216.acm] [Voxware, Inc., 1.6.0.17]
[C:\WINDOWS\system32\vct3216.dll] [Voxware, Inc., 1.6.0.12]
[C:\WINDOWS\system32\msms001.vwp] [Voxware, Inc., 2.0.2.61]
[C:\WINDOWS\system32\mvoice.vwp] [Voxware, Inc., 2.0.0.12.01]
[C:\WINDOWS\system32\iac25_32.ax] [Intel Corporation, 2.05.53]
[C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll] [Nokia, 6, 60, 4, 7]
[C:\WINDOWS\system32\ConnAPI.DLL] [Nokia., 6, 60, 21, 1]
[C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] [Nokia, 6, 60, 45, 3]
[C:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] [Nokia, 6, 60, 5, 0]
[C:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] [Nokia, 6, 60, 1, 0]
[C:\WINDOWS\system32\ac3filter.ax] [, 0.70b]
[C:\WINDOWS\system32\ffdshow.ax] [N/A, 1.0.2.1997]
[C:\WINDOWS\system32\mlcom.ax] [Moonlight Cordless Ltd., 1.00]
[E:\Storm Codec\Codecs\VSFilter.dll] [Gabest, 1, 0, 1, 3]
[C:\WINDOWS\system32\sctongjibh.dll] [www.seecha.com, 1, 0, 1, 3]
[C:\WINDOWS\system32\mpeg2dmx.ax] [Elecard Ltd., 2, 0, 90, 30529]
[C:\WINDOWS\system32\pva_dmx.ax] [Moonlight Cordless, 1.221]
[E:\Storm Codec\Codecs\empgdmx.ax] [Elecard Ltd., 1, 0, 19, 51017]
[PID: 3956][F:\QQ\TTraveler.exe] [腾讯公司, 3.1.0.259]
[F:\QQ\jc5y.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
[F:\QQ\Plugins\QQFloatBar\QQFloatBar4TT2.dll] [腾讯公司, 1, 1, 0, 5]
[F:\QQ\Plugins\TWeather\TWeather.dll] [, 1, 0, 0, 3]
[F:\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,21,75]
[C:\WINDOWS\system32\KIme.ime] [金山软件公司, 1, 0, 0, 1]
[C:\PROGRA~1\COMMON~1\KingSoft\Extract\KSEngine.dll] [金山软件有限公司, 3, 0, 0, 0]
[PID: 1092][D:\智能扫描\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[F:\QQ\jc5y.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
125.91.14.230 www.kzdh.com
125.91.14.230 www.7255.com
125.91.14.230 www.7322.com
125.91.14.230 www.7939.com
125.91.14.230 www.piaoxue.com
125.91.14.230 www.feixu.net
125.91.14.230 www.6781.com
125.91.14.230 www.7b.com.cn
125.91.14.230 7b.com.cn
125.91.14.230 www.918188.com
125.91.14.230 hao.allxue.com
125.91.14.230 good.allxue.com
125.91.14.230 baby.allxue.com
125.91.14.230 www.allxue.com
125.91.14.230 about.lank.la
125.91.14.230 www.x114x.com
125.91.14.230 www.37ss.com
125.91.14.230 www.7k.cc
125.91.14.230 www.73ss.com
125.91.14.230 www.hao123.com
125.91.14.230 www.81915.com
125.91.14.230 222.88.90.22
125.91.14.230 www.9991.com
125.91.14.230 www.my123.com
125.91.14.230 www.haokan123.com
125.91.14.230 www.5566.net
125.91.14.230 www.gjj.cc
125.91.14.230 www.2345.com
125.91.14.230 dl.hao318.com
125.91.14.230 www.123wa.com
125.91.14.230 www.ku886.com
125.91.14.230 www.5icrack.com
125.91.14.230 www.jjol.cn
127.0.0.1 www.rising.com.cn
127.0.0.1 tool.ikaka.com
127.0.0.1 www.ikaka.com
127.0.0.1 update.rising.com.cn
127.0.0.1 online.rising.com.cn
127.0.0.1 up.rising.com.cn
127.0.0.1 go.rising.com.cn
127.0.0.1 it.rising.com.cn
127.0.0.1 rising.com.cn
127.0.0.1 ikaka.com

==================================

大头touda - 2006-11-27 17:25:00

等待救援！！！急啊

红夜鬼1 - 2006-11-27 18:50:00

F:\QQ\jc5y.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
到安全模式下删除,最好,重装一下QQ

查找HOSTS文件，用记事打开，清除里面的
把c:\windows\system32\divers\etc下的host
只留这一项：127.0.0.1 localhost

WinsockXPFix这两个软件，

http://free5.ys168.com/?ufwihgu168
如果无法上网，请运行WinsockXPFix，
让它修复一下。

大头touda - 2006-11-27 22:03:00

引用:

【红夜鬼1的贴子】F:\QQ\jc5y.dll] [N/A, N/A]
[C:\WINDOWS\system32\drivers\zs.sys] [N/A, N/A]
[C:\WINDOWS\system32\ha3wp.dll] [N/A, N/A]
到安全模式下删除,最好,重装一下QQ

查找HOSTS文件，用记事打开，清除里面的
把c:\windows\system32\divers\etc下的host
只留这一项：127.0.0.1 localhost

WinsockXPFix这两个软件，

http://free5.ys168.com/?ufwihgu168
如果无法上网，请运行WinsockXPFix，
让它修复一下。

………………

我现在进不了安全模式,一进就重启!!! 你说的那几个文件在正常模式下删了有用吗?

还有这一步我不会做!!!我是菜鸟麻烦说的详细点怎么做法
(查找HOSTS文件，用记事打开，清除里面的
把c:\windows\system32\divers\etc下的host
只留这一项：127.0.0.1 localhost)

大头touda - 2006-11-28 15:15:00

进不了安全模式无法完成上面的步骤！
继续等待救援！

瑞星卡卡安全论坛