Logfile of HijackThis v1.99.1
Scan saved at 20:42:03, on 2005-5-5
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Common Files\GoldenSoft\ChannelRg.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\NEC\e-Border Client\s5credmgr.exe
C:\Program Files\GoldenSoft\Recovery Genius\WinNT\HDDGMon.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.474\HijackThis.exe

O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NEC e-Border Credential] C:\Program Files\NEC\e-Border Client\s5credmgr.exe
O4 - HKLM\..\Run: [HDDGMon] "C:\Program Files\GoldenSoft\Recovery Genius\WinNT\HDDGMon.exe"
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - F:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - f:\Program Files\Tencent\QQ\QQ.EXE (file missing)
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - f:\Program Files\Tencent\QQ\QQ.EXE (file missing)
O10 - Unknown file in Winsock LSP: c:\program files\nec\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: c:\program files\nec\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: c:\program files\nec\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: c:\program files\nec\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: c:\program files\nec\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: c:\program files\nec\e-border client\s5spi.dll
O10 - Unknown file in Winsock LSP: c:\program files\nec\e-border client\s5spi.dll
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O23 - Service: ChannelRg - Unknown owner - C:\Program Files\Common Files\GoldenSoft\ChannelRg.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe

似乎没问题

魔法学徒　我启动游戏的时候发现有点不正常　我用ＳＳＭ监控游戏加栽几临时文件假里面的几个文件（是不是正常）

都是些什么文件?

C:\Documents and Settings\Administrator\Local Settings\Temp\18.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\19.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\20.tmp

C:\Documents and Settings\Administrator\Local Settings\Temp\np18.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\np19.tmp
C:\Documents and Settings\Administrator\Local Settings\Temp\np20.tmp

【回复“v梦郎v”的帖子】
玩儿什么游戏？ 街头篮球？

韩服天堂１

请将文件压缩打包发给我的信箱