瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 大虾们帮帮忙看看哪里出错呢`````````````

123   3  /  3  页   跳转

大虾们帮帮忙看看哪里出错呢`````````````

是啊```````````一重启打开IE又是那个网站啊`````````怎样进注册表的`````````?
gototop
 

2005-10-04,17:40:59

System Repair Engineer 1.1.0.269
    Windows XP Professional Service Pack 1 - 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <><regedit -s C:\$NtUninstallQ14944$\sp4custom.dll>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <3721><C:\$NtUninstallQ14944$\3721.bat>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SoundMan><SOUNDMAN.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMSCMig><rem C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <CnsMin><Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WinampAgent><rem C:\Program Files\Winamp\winampa.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <internat.exe><internat.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KAVPersonal50><C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <_TBHTray><RUNDLL32.EXE C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <AddrPlus><RUNDLL32.EXE C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <><regedit -s C:\$NtUninstallQ14944$\sp4custom.dll>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <3721><C:\$NtUninstallQ14944$\3721.bat>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WlN32><regedit -s C:\$NtUninstallQ14944$\WINSYS.cer>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
[腾讯QQ]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\腾讯QQ.lnk><H>
[3721]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\3721.bat><N>

==================================
服务
[Apache / Apache]
  <"D:\usr\local\apache\Apache.exe" --ntservice><N/A>
[Ati HotKey Poller / Ati HotKey Poller]
  <C:\WINDOWS\System32\Ati2evxx.exe><N/A>
[kavsvc / kavsvc]
  <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe><Kaspersky Lab>
[MySql / MySql]
  <D:/usr/local/mysql/bin/mysqld-nt.exe><N/A>
[P4P Service / P4P Service]
  <C:\Program Files\P4P\p2psvr.exe><Sohu.com Inc.>
[PDEngine / PDEngine]
  <C:\Program Files\Raxco\PerfectDisk\PDEngine.exe><Raxco Software, Inc.>
[PDScheduler / PDSched]
  <C:\Program Files\Raxco\PerfectDisk\PDSched.exe><Raxco Software, Inc.>
[Peanuthull / Peanuthull]
  <e:\Program Files\PeanutHull3\Phmain.exe -service><广东网域与上海多点>

==================================
浏览器加载项
[AcroIEHlprObj Class]
  <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll>
[Tencent Browser Helper]
  <C:\WINDOWS\Downloaded Program Files\Hvdc.dll>
[CPub Object]
  <C:\Program Files\P4P\sodaie.dll>
[QQBrowserHelperObject Class]
  <D:\Program Files\Tencent\qq\QQIEHelper.dll>
[BandIE Class]
  <C:\Program Files\BaiDu\bar\BaiduBar.dll>
[IeCatch2 Class]
  <C:\PROGRA~1\FLASHGET\jccatch.dll>
[Google Toolbar Helper]
  <c:\program files\google\googletoolbar2.dll>
[CnsHook Class]
  <C:\WINDOWS\DOWNLO~1\CnsHook.dll>
[手机短信]
  <http://sms.3721.com/ie/index.htm>
[浩方对战平台]
  <D:\Program Files\浩方对战平台\GameClient.exe>
[Yahoo 1G电邮]
  <http://cn.mail.yahoo.com/promo/rd1>
[寻宝乐趣多]
  <http://hot.3721.com/rd/shop_btn.htm>
[上网助手]
  <http://assistant.3721.com/index.htm?fb=Cns>
[@shdoclc.dll,-866]
  <>
[QQ]
  <D:\Program Files\Tencent\qq\QQ.EXE>
[QQIEFloatBarCfgCmd Class]
  <D:\Program Files\Tencent\qq\QQIEHelper.dll>
[情景聊天]
  <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/>
[]
  <http://assistant.3721.com/security1.htm?fb=Cns>
[]
  <http://assistant.3721.com/clean1.htm?fb=Cns>
[FlashGet Bar]
  <C:\PROGRA~1\FLASHGET\fgiebar.dll>
[电台(&R)]
  <C:\WINDOWS\System32\msdxm.ocx>
[&Google]
  <c:\program files\google\googletoolbar2.dll>
[捜狗直通车]
  <C:\PROGRA~1\P4P\Toolbar.dll>
[百度超级搜霸]
  <C:\Program Files\BaiDu\bar\BaiduBar.dll>
[WebActivater Control]
  <C:\WINDOWS\System32\WEBACT~1.OCX>
[Office Update Installation Engine]
  <C:\WINDOWS\opuc.dll>
[LoaderCore Class]
  <C:\WINDOWS\Downloaded Program Files\DLLoader.dll>
[!搜一搜]
  <res://C:\WINDOWS\DOWNLO~1\CnsMinEx.dll/1003>
[&使用下载加速专家下载]
  <C:\Program Files\3721\Dlaccel\geturl.htm>
[&使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\geturl.htm>
[&使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\getAllurl.htm>
[Google 搜索(&G)]
  <res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html>
[上传到QQ网络硬盘]
  <D:\Program Files\Tencent\qq\AddToNetDisk.htm>
[使用Kugoo下载]
  <C:\PROGRA~1\KUGOO2\KugooDownX.htm>
[使用搜狗直通车下载]
  <C:\PROGRA~1\P4P\dl.htm>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm>
[反向链接]
  <res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html>
[发送图片到手机]
  <C:\PROGRA~1\P4P\cx.htm>
[添加到QQ自定义面板]
  <D:\Program Files\Tencent\qq\AddPanel.htm>
[添加到QQ表情]
  <D:\Program Files\Tencent\qq\AddEmotion.htm>
[用QQ彩信发送该图片]
  <D:\Program Files\Tencent\qq\SendMMS.htm>
[用比特精灵下载(&B)]
  <C:\Program Files\BitSpirit\bsurl.htm>
[百度-搜索MP3]
  <res://C:\Program Files\BaiDu\bar\BaiduBar.dll/BAIDUMP3.HTM>
[百度-搜索图片]
  <res://C:\Program Files\BaiDu\bar\BaiduBar.dll/BAIDUIMG.HTM>
[百度-搜索新闻]
  <res://C:\Program Files\BaiDu\bar\BaiduBar.dll/BAIDUNEWS.HTM>
[百度-搜索歌词]
  <res://C:\Program Files\BaiDu\bar\BaiduBar.dll/BAIDULYRIC.HTM>
[百度-搜索网页]
  <res://C:\Program Files\BaiDu\bar\BaiduBar.dll/BAIDUSEARCH.HTM>
[百度-搜索贴吧]
  <res://C:\Program Files\BaiDu\bar\BaiduBar.dll/BAIDUPOST.HTM>
[百度-词典搜索]
  <res://C:\Program Files\BaiDu\bar\BaiduBar.dll/BAIDU_DIC.HTM>
[类似网页]
  <res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html>
[缓存的网页快照]
  <res://c:\program files\google\GoogleToolbar2.dll/cmcache.html>
[翻译英文字词(&T)]
  <res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html>
gototop
 

==================================
正在运行的进程
[PID: 444][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 520][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 544][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 588][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 600][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 764][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 816][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 916][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 964][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1160][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 4>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>
    [C:\Program Files\BaiDu\bar\BaiduBar.dll]  <Baidu.com, Inc.><2, 0, 2, 39>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\Program Files\TENCENT\AddrPlus\Jjwo.dll]  <腾讯科技(深圳)有限公司><2, 0, 0, 31>
    [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><6.0.0.2003051500>
[PID: 1244][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll]  <Windows (R) 2000 DDK provider><5.00.2195.1620>
[PID: 1304][C:\WINDOWS\System32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>
    [C:\WINDOWS\DOWNLO~1\CnsMinEx.dll]  <国风因特软件(北京)有限公司><1, 0, 2, 4>
[PID: 1488][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.1.10>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>
[PID: 1496][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3208>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>
[PID: 1592][C:\WINDOWS\System32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>
[PID: 1608][C:\WINDOWS\System32\conime.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>
[PID: 228][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 240][C:\WINDOWS\System32\Ati2evxx.exe]  <N/A><N/A>
[PID: 1352][D:\usr\local\mysql\bin\mysqld-nt.exe]  <N/A><N/A>
[PID: 1484][C:\Program Files\P4P\p2psvr.exe]  <Sohu.com Inc.><1, 3, 0, 8>
[PID: 1312][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1840][C:\WINDOWS\System32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 2544][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\WINDOWS\DOWNLO~1\CnsHint.dll]  <3721><1, 0, 0, 4>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>
    [C:\WINDOWS\DOWNLO~1\cnsplus.dll]  <3721><1, 0, 0, 2>
    [C:\Program Files\TENCENT\AddrPlus\Jjwo.dll]  <腾讯科技(深圳)有限公司><2, 0, 0, 31>
    [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><6.0.0.2003051500>
    [C:\Program Files\P4P\sodaie.dll]  <Sohu.com Inc.><1.0.2.3>
    [C:\PROGRA~1\P4P\Toolbar.dll]  <Sohu.com Inc.><1, 1, 6, 6>
    [D:\Program Files\Tencent\qq\QQIEHelper.dll]  <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
    [C:\Program Files\BaiDu\bar\BaiduBar.dll]  <Baidu.com, Inc.><2, 0, 2, 39>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [c:\program files\google\googletoolbar2.dll]  <Google Inc.><3, 0, 125, 1>
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 4>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  <Kaspersky Lab><1.0.156.342>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  <Kaspersky Lab><1.0.156.3>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  <Kaspersky Lab><5.0.0.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  <Kaspersky Lab><5.0.156.0>
    [C:\WINDOWS\System32\macromed\flash\Flash.ocx]  <Macromedia, Inc.><7,0,19,0>
    [C:\WINDOWS\System32\JPWB.IME]  <常诚研制><4.00.950>
[PID: 3212][C:\WINDOWS\system32\NOTEPAD.EXE]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>
[PID: 2384][D:\Downloads\sreng\SREng.exe]  <Smallfrogs Studio><1.1.0.269>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 1, 0>
    [C:\PROGRA~1\TENCENT\AddrPlus\QAHook.dll]  <N/A><2, 0, 0, 31>

==================================
文件关联
.TXT  OK. [C:\WINDOWS\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [C:\WINDOWS\System32\winhlp32.exe %1]
.INI  OK. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [C:\WINDOWS\System32\NOTEPAD.EXE %1]

==================================
gototop
 

【回复“ヾ鎽尐”的帖子】我服了你了.我说的操作你做了吗?
不会用SREng看置顶贴中的 本版小软件下载中有关于SREng的教材.
gototop
 

做了`````````````````还是不行嘛```````````一重启主页又被改了
gototop
 

【回复“ヾ鎽尐”的帖子】
是否开启了雅虎助手的IE保护功能?有的话请关闭.
gototop
 

没有啊```````````````
gototop
 

【回复“ヾ鎽尐”的帖子】如果修改了注册表还是让网页这样弹的情况我倒真是少见.

用这个网页的地址为关键词搜索一下注册表.

开始--运行--regedit--编辑--查找--"输入非法网页"--找到删除~
gototop
 
123   3  /  3  页   跳转
页面顶部
Powered by Discuz!NT