[C:\WINNT\TEMP\vp2kfo.dll]  <N/A><N/A>
[PID: 824][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 1224][C:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3700.6690>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\engine.dll]  <N/A><N/A>
    [C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.chs]  <Adobe Systems Inc.><7.0.0.2004121400\0>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\EWIDO3.5\shellhook.dll]  <N/A><N/A>
    [C:\WINNT\system32\RavExt.DLL]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 8>
    [C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll]  <Adobe Systems Inc.><7.0.0.2004121400\0>
    [C:\WINNT\system32\xunleibho_v14.dll]  <Thunder Networking Technologies,LTD><4, 6, 0, 62>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><7.0.0.2004121400>
    [C:\WINNT\system32\AdvSC32.dll]  <N/A><N/A>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
[PID: 1292][C:\WINNT\Mixer.exe]  <C-Media Electronic Inc. (www.cmedia.com.tw)><1.58>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\WINNT\System32\cmnprop.dll]  <C-Media Corporation><5.00.2195.12>
[PID: 1436][C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe]  <天网><2.7.3.1100>
    [C:\PROGRA~1\SKYNET\FIREWALL\SKYMISC.DLL]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\engine.dll]  <N/A><N/A>
    [C:\WINNT\TEMP\vp2kfo.dll]  <N/A><N/A>
[PID: 1288][C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\spx.exe]  <MoodySoft><4.0.0.0>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\ICQMAPI.dll]  <N/A><N/A>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\lpng.dll]  <N/A><N/A>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\freeze.dll]  <N/A><N/A>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\engine.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
[PID: 1228][C:\Program Files\TransDesktop\TransDesktop.exe]  <Flyingstar Software Studio><1.53>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
[PID: 1284][C:\Program Files\Rising\Rav\RavTray.exe]  <Rising><17, 0, 0, 32>
    [C:\Program Files\Rising\Rav\RavTray936.dll]  <Rising><17, 0, 0, 28>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\RsCommx.dll]  <rising><17, 0, 0, 3>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\engine.dll]  <N/A><N/A>
[PID: 1280][C:\Program Files\Rising\Rav\RavTimer.exe]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 36>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Rising Corp.><17, 0, 0, 7>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Rising Corp.><17, 0, 1, 71>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><17, 0, 0, 3>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
[PID: 928][C:\Program Files\Maxthon\Thundermini\ThunderMini.exe]  <深圳市三代科技开发有限公司><1, 1, 0, 4>
    [C:\Program Files\Maxthon\Thundermini\boost_thread-vc6-mt-1_31.dll]  <N/A><N/A>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\engine.dll]  <N/A><N/A>
[PID: 1316][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3208>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
[PID: 1252][C:\WINNT\system32\internat.exe]  <Microsoft Corporation><5.00.2920.0000>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
[PID: 2692][C:\Program Files\BitComet\BitComet.exe]  <www.BitComet.com><0.60.>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <><17, 0, 0, 8>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\engine.dll]  <N/A><N/A>
    [C:\WINNT\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 5180][C:\Program Files\Maxthon\Maxthon.exe]  <MY Soft Technology><1, 5, 0, 95>
    [C:\Program Files\Maxthon\maxzlib.dll]  < ><1, 0, 0, 2>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\WINNT\TEMP\vp2kfo.dll]  <N/A><N/A>
    [C:\Program Files\Maxthon\Services\RealTime\real_time.dll]  <><1, 0, 0, 1>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\engine.dll]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <><17, 0, 0, 8>
    [C:\WINNT\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 7516][C:\Documents and Settings\queen\桌面\sreng2\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\Program Files\TransDesktop\TransDLL.dll]  <N/A><N/A>
    [C:\WINNT\system32\DIHPKey.DLL]  <N/A><N/A>
    [C:\Program Files\SPXInstantScreenCapture\SPXInstantScreenCapture\engine.dll]  <N/A><N/A>

==================================

文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

是这个吗？我不知道啊！

但是在安全模式下没有这个病毒！

我也遇见了同样的病毒和问题，每次都是提醒下次开机时删除，但每次都删不掉。很是讨厌。不知道这种病毒是什么性质？有什么危害？怎么处理？

请版主和高手速速指点指点！！！不胜感激！！！！

不同的是，我的文件名是C:\WINDOWS\Temp\9jj.dll

我的是之前从太平洋网站查REALPLAY，网友留言上面说安装一个补丁就可以不用注册了，然后我就中镖了...

用ewido可以把他杀掉  如果你找不这个软件那就加我的QQ463891226

【回复“kesaizhennb”的帖子】用 ewdio能杀杀 如果你找不到这个软件的话加我的QQ463891226