我是2001版的用户，在未安瑞星的情况下，装了一个系统保镖类的软件，从此，怪事频出，如下：
1、IE被DDHELP.EXE捆绑；
2、IE被RPCSS.EXE捆绑（我从没装过VC或者C语言编辑程序）；
3、KERNEL32.DLL启动自动调用MSGSRV32.EXE（关联mmtask.tsk）及MPREXE.EXE（瑞星防火墙被关联，导致可启动，不能使用及升级）；
4、瑞星杀毒结果为无，RPCSS.EXE自动开启端口（当然被俺封了，不知事实如何？郁闷）；
6、DOS下发现隐藏E盘，包括TEMP文件夹等系统启动文件（*.BAT……）与系统备份文件；开始我以为是虚拟光驱，所以通过注册表相关POLICE项删除了它，问题是现在系统依然有以上四项问题！
7、我从做了分驱，但硬盘丢了200多空间；
8、主板设置我没动过，但是双光驱同步启动已经不能用了，只能用一个（KK），从进工厂预设也没用，就是找不到两个，只能一个；
9、从做系统前，我用了个免费软件查了下启动项，有一个DISABLERAV.EXE文件存在，从做系统后，那个软件也不能用了！
怎么办呢？
我不在乎从分驱，再装系统，问题是分了也没用·！急，系统反映在变慢，尽管俺没装屏幕装相软件，依然有照相，可以被粘贴在画图板或者WORD文件里KKKKKKK！
是否需要我将启动项及关联DLL文件等上报？盼复！|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

最好还是报上来一下吧

到这里1楼附件和5楼下载hijackthis和SREng扫描日志，复制粘帖上来。
http://forum.ikaka.com/topic.asp?board=28&artid=6979213
|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

最好能提供一个启动软件，可以直接把硬盘的相关信息删除类的，等待中……|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

那你就拿个98的安装盘，重启后进入ＤＯＳ　后format吧...|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      0:51:13, 日期 2006-4-13
操作系统：  Windows ME (Win9x 4.90.3000)
浏览器：    Internet Explorer v5.50 (5.50.4134.0100)

当前运行的进程：         
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE
C:\PROGRAM FILES\RISING\RAV\RAV.EXE
C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE
C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\RISING\RFW\RFWMAIN.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
D:\电脑上网必备绿色武器\进程管理.EXE
C:\PROGRAM FILES\ACCESSORIES\WORDPAD.EXE
C:\PROGRAM FILES\ADSL拨号王\HNMAINUI.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE
C:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE
C:\WINDOWS\MSAGENT\AGENTSVR.EXE
C:\PROGRAM FILES\RISING\RAV\INBUILD.EXE
C:\PROGRAM FILES\RISING\RAV\RAV.EXE
C:\WINDOWS\NOTEPAD.EXE
C:\WINDOWS\DESKTOP\2535952005811174944\HIJACKTHIS1991ZWW.EXE

R3 - URLSearchHook: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\PROGRAM FILES\3721\ASSIST\ASBAR.DLL
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRAM FILES\FLASHGET\JCCATCH.DLL
O3 - IE工具栏增项: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - IE工具栏增项: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\PROGRAM FILES\3721\ASSIST\ASBAR.DLL
O3 - IE工具栏增项: 一搜工具条 - {115F6E46-FCBC-41ed-B3B5-3BDDD4AAB5E5} - C:\PROGRAM FILES\YISOU\YISOU.DLL
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRAM FILES\FLASHGET\FGIEBAR.DLL
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\RunServices: [RsCcenter] "C:\Program Files\Rising\Rav\CCenter.exe"
O4 - 启动项HKLM\\RunServices: [RfwService] "C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE" -service
O4 - 启动项HKLM\\RunServices: [RavMond] "C:\Program Files\Rising\Rav\RavMond.exe"
O4 - 启动项HKLM\\RunServices: [RavMon] "C:\Program Files\Rising\Rav\RavMon.exe" -system
O8 - IE右键菜单中的新增项目: 使用超级解霸播放 - C:\Program Files\Herosoft\Hero 9\MPURLGET.HTM
O8 - IE右键菜单中的新增项目: !搜一搜(&S) - res://C:\PROGRAM FILES\YISOU\YISOU.DLL/232
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\PROGRAM FILES\FLASHGET\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\PROGRAM FILES\FLASHGET\jc_all.htm
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Program Files\Herosoft\Hero 9\STHSDVD.EXE
O9 - 浏览器额外的“工具”菜单项: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Program Files\Herosoft\Hero 9\STHSDVD.EXE
O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE
O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE
O11 - Options group: [!CNS]  网络实名

|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

引用:

【weiyaun的贴子】那你就拿个98的安装盘，重启后进入ＤＯＳ　后format吧... ...........................

没用的！！！！还是一样！|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

SREng.exe怎么抓啊？？？他要上网，我该不该封啊？


2006-04-13,00:55:41

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows ME

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
  <RsCcenter><"C:\Program Files\Rising\Rav\CCenter.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
  <RfwService><"C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE" -service>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
  <RavMond><"C:\Program Files\Rising\Rav\RavMond.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
  <RavMon><"C:\Program Files\Rising\Rav\RavMon.exe" -system>

==================================
启动文件夹
服务

==================================
浏览器加载项
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRAM FILES\FLASHGET\JCCATCH.DLL, Amaze Soft>
[@shdoclc.dll,-866@2052,相关站点]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[豪杰超级解霸9]
  {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Program Files\Herosoft\Hero 9\STHSDVD.EXE, herosoft>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE, Amaze Soft>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH8B.OCX, Macromedia, Inc.>
[使用超级解霸播放]
  <C:\Program Files\Herosoft\Hero 9\MPURLGET.HTM, N/A>
[!搜一搜(&S)]
  <res://C:\PROGRAM FILES\YISOU\YISOU.DLL/232, N/A>
[使用网际快车下载]
  <C:\PROGRAM FILES\FLASHGET\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\PROGRAM FILES\FLASHGET\jc_all.htm, N/A>

==================================
正在运行的进程
[PID: 4294837059][C:\WINDOWS\SYSTEM\MPREXE.EXE]  <Microsoft Corporation><4.90.3000>
    [C:\PROGRAM FILES\RISING\RFW\PROCLIB.DLL]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
    [C:\PROGRAM FILES\RISING\RFW\RFWAPI.DLL]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 5>
    [C:\PROGRAM FILES\RISING\RFW\RFWDRV.DLL]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [C:\PROGRAM FILES\RISING\RFW\RFWLOG.DLL]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [C:\PROGRAM FILES\RISING\RFW\RFWRULE.DLL]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 12>
[PID: 4294868415][C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 30>
[PID: 4294857315][C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL]  <rising><18, 0, 0, 1>
    [C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 4294775515][C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\WINDOWS\SYSTEM\RAVEXT.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\PROGRAM FILES\RISING\RAV\RAVQU.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  <N/A><N/A>
    [C:\PROGRAM FILES\RISING\RAV\RAVUIMSG.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [C:\PROGRAM FILES\RISING\RAV\SCANNER.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
    [C:\PROGRAM FILES\RISING\RAV\BWLIST.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\PROGRAM FILES\RISING\RAV\PNGDLL.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRAM FILES\RISING\RAV\RAVUI.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 57>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
    [C:\PROGRAM FILES\RISING\RAV\RSGUILIB.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL]  <rising><18, 0, 0, 1>
    [C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\PROGRAM FILES\RISING\RAV\PLUGIN\RSPGSCAN.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[PID: 4294832843][C:\PROGRAM FILES\RISING\RAV\RAV.EXE]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 61>
    [C:\PROGRAM FILES\RISING\RAV\EXTOLE.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

    [C:\PROGRAM FILES\RISING\RAV\EXTFILE.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
    [C:\PROGRAM FILES\RISING\RAV\UNPACKER.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\PROGRAM FILES\RISING\RAV\SCANEXEC.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\PROGRAM FILES\RISING\RAV\SCANSCT.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\PROGRAM FILES\RISING\RAV\SCANMAC.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\PROGRAM FILES\RISING\RAV\NVFILE.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\PROGRAM FILES\RISING\RAV\SCANEX.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\PROGRAM FILES\RISING\RAV\UNEXE.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\PROGRAM FILES\RISING\RAV\POSTTRT.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\PROGRAM FILES\RISING\RAV\ENGINE.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
    [C:\PROGRAM FILES\RISING\RAV\SPAMENG.DLL]  <N/A><18, 0, 0, 6>
    [C:\PROGRAM FILES\RISING\RAV\MAILMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRAM FILES\RISING\RAV\MEMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [C:\PROGRAM FILES\RISING\RAV\HOOKWEB.DLL]  <rising><18, 0, 0, 1>
    [C:\PROGRAM FILES\RISING\RAV\REGMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\PROGRAM FILES\RISING\RAV\VIRUSLIB.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\PROGRAM FILES\RISING\RAV\LIBLOAD.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\PROGRAM FILES\RISING\RAV\SCANNER.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
    [C:\PROGRAM FILES\RISING\RAV\HOOKSYS.DLL]  <Rising><18, 1, 0, 9>
    [C:\PROGRAM FILES\RISING\RAV\RSLOG.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL]  <rising><18, 0, 0, 1>
[PID: 4294791575][C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
    [C:\PROGRAM FILES\RISING\RAV\BWLIST.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
    [C:\PROGRAM FILES\RISING\RAV\PNGDLL.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL]  <rising><18, 0, 0, 1>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[PID: 4294812003][C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 17>
    [C:\PROGRAM FILES\RISING\RAV\BWLIST.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
    [C:\PROGRAM FILES\RISING\RAV\RSGUILIB.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\PROGRAM FILES\FLASHGET\JCCATCH.DLL]  <Amaze Soft><1, 1, 4, 0>
    [C:\PROGRAM FILES\3721\ASSIST\ASBAR.DLL]  <3721><1, 0, 0, 7>
    [C:\WINDOWS\SYSTEM\RAVEXT.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\WINDOWS\SYSTEM\DCIMAN32.DLL]  <Intel(R) Corp., Microsoft Corp.><4.90.3000>
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  <N/A><N/A>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
[PID: 4294778239][C:\WINDOWS\EXPLORER.EXE]  <Microsoft Corporation><5.50.4134.100>
    [C:\PROGRAM FILES\RISING\RFW\PNGDLL.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRAM FILES\RISING\RFW\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 4294743331][C:\PROGRAM FILES\RISING\RFW\RFWMAIN.EXE]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 48>
    [C:\PROGRAM FILES\RISING\RFW\RSGUILIB.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  <N/A><N/A>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
[PID: 4294606607][C:\WINDOWS\SYSTEM\RPCSS.EXE]  <Microsoft Corporation><4.71.3328>
[PID: 4294550371][C:\WINDOWS\SYSTEM\PSTORES.EXE]  <Microsoft Corporation><5.00.2133.2>
    [C:\WINDOWS\SYSTEM\MACROMED\COMMON\SWSUPPORT.DLL]  <Macromedia, Inc.><8.0r196>
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  <N/A><N/A>
    [C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH8B.OCX]  <Macromedia, Inc.><8,0,24,0>
    [C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
    [C:\PROGRAM FILES\FLASHGET\JCCATCH.DLL]  <Amaze Soft><1, 1, 4, 0>
[PID: 4294692491][C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE]  <Microsoft Corporation><5.50.4134.100>
    [C:\WINDOWS\SYSTEM\NVDD32.DLL]  <NVidia Corporation><4.12.01.0390>
    [C:\WINDOWS\SYSTEM\NVARCH32.DLL]  <NVidia Corporation><4.12.01.0390>
[PID: 4294601439][C:\WINDOWS\SYSTEM\DDHELP.EXE]  <Microsoft Corporation><4.09.00.0900>
[PID: 4294424579][D:\电脑上网必备绿色武器\进程管理.EXE]  <Sysinternals><8.60>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
[PID: 4294400563][C:\PROGRAM FILES\ACCESSORIES\WORDPAD.EXE]  <Microsoft Corporation><5.00.1691.1>
    [C:\PROGRAM FILES\ADSL拨号王\PLUGINS\DIAGNOSE.DLL]  <HelloNet><2.2.0.1>
    [C:\PROGRAM FILES\ADSL拨号王\HNRES_0804.DLL]  <N/A><2, 2, 0, 1>
[PID: 4294549971][C:\PROGRAM FILES\ADSL拨号王\HNMAINUI.EXE]  <N/A><2, 3, 0, 1>
    [C:\WINDOWS\SYSTEM\DCIMAN32.DLL]  <Intel(R) Corp., Microsoft Corp.><4.90.3000>
    [C:\PROGRAM FILES\ADSL拨号王\HNKERNEL.DLL]  <HelloNet><2.2.0.1>
    [C:\WINDOWS\SYSTEM\DHCPCSVC.DLL]  <N/A><N/A>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
    [C:\PROGRAM FILES\ADSL拨号王\HNUTILS.DLL]  <N/A><2, 2, 0, 1>
[PID: 4294426983][C:\WINDOWS\SYSTEM\RNAAPP.EXE]  <Microsoft Corporation><4.90.3000>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
[PID: 4294320963][C:\WINDOWS\SYSTEM\TAPISRV.EXE]  <Microsoft Corporation><4.90.3000>
[PID: 4294346875][C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE]  <Amaze Soft><1, 7, 1, 0>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL]  <rising><18, 0, 0, 1>
[PID: 4294287723][C:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[PID: 4294284979][C:\WINDOWS\MSAGENT\AGENTSVR.EXE]  <Microsoft Corporation><2.00.0.2202>
[PID: 4294244139][C:\WINDOWS\NOTEPAD.EXE]  <Microsoft Corporation><4.90.3000>
    [C:\WINDOWS\SYSTEM\RAVEXT.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[PID: 4294189579][C:\WINDOWS\DESKTOP\2535952005811174944\HIJACKTHIS1991ZWW.EXE]  <Soeperman Enterprises Ltd.><1.99.0001>
[PID: 4294128527][C:\WINDOWS\NOTEPAD.EXE]  <Microsoft Corporation><4.90.3000>
[PID: 4294401483][C:\WINDOWS\DESKTOP\SRENG.EXE]  <Smallfrogs Studio><2.0.12.350>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>

==================================
文件关联
.TXT  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [C:\WINDOWS\winhlp32.exe %1]
.INI  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.VBS  OK. [C:\WINDOWS\WScript.exe "%1" %*]
.JS  OK. [C:\WINDOWS\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

好像都没贴完，应该还有几项的吧|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM

引用:

【weiyaun的贴子】好像都没贴完，应该还有几项的吧 ...........................

？？？？？？？？？？？？？？？？？？？

这是扫描后自动生成的LOG文件啊？我看不懂所以根本没动过~|zèÃ<£ÑùÐbbs.ikaka.com÷[!õ¤ÉЈM