麻烦各位高手进来帮忙看下，（附Hijackthis扫描日志） - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛麻烦各位高手进来帮忙看下，（附Hijackthis扫描日志）

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

麻烦各位高手进来帮忙看下，（附Hijackthis扫描日志）

DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:	发表于： 2006-06-11 09:00 \| 只看楼主短消息资料字号：小中大 1楼麻烦各位高手进来帮忙看下，（附Hijackthis扫描日志）我的IE症状为刚开始正常，但是到访问第二个或者第三个新的任务的时候就会停止响应！我扫描病毒没有发现异常！不知道是不是杀毒软件不太好还是什么？（诺顿企业版）但是其他的网络访问是正常的（网游、QQ什么的都可以访问，但是QQ有时会不定时的掉线）扫描日志如下： Logfile of HijackThis v1.99.1 Scan saved at 8:37:34, on 2006-6-11 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavProt.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\Firewall\PavFires.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavFnSvr.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\Pavkre.exe C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavsrv51.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\prevsrv.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\AVENGINE.EXE C:\Program Files\Panda Software\熊猫卫士钛金版2005\PsImSvc.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\WebProxy.exe H:\新建文件夹\腾讯QQ\TIMPlatform.exe H:\新建文件夹\QQ\QQ.exe C:\Program Files\KVFW\KVwsc.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe H:\新建文件夹\QQ\QQ.exe C:\Program Files\KVFW\kvfw.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\Apvxdwin.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\WebProxy.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Panda Software\熊猫卫士钛金版2005\avciman.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\dmadmin.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\msiexec.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.672\HijackThis.exe R3 - Default URLSearchHook is missing O2 - BHO: (no name) - {3D503C16-EFC5-425A-965C-9D34414BF387}? - (no file) O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5}? - (no file) O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\熊猫卫士钛金版2005\APVXDWIN.EXE" /s O4 - HKLM\..\Run: [LUPGCONF] "C:\Program Files\Panda Software\熊猫卫士钛金版2005\LUpgConf.exe" /RunOnce:4_02_01 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [KVFW] C:\Program Files\KVFW\kvfw.exe -silent O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm O8 - Extra context menu item: 使用KuGoo3下载(&K) - H:\新建文件夹\KuGoo3\KuGoo3DownX.htm O8 - Extra context menu item: 使用Web迅雷下载 - C:\Program Files\Thunder Network\WebThunder\GetUrl.htm O8 - Extra context menu item: 添加到天极收藏夹 - C:\WINDOWS\system32\YeskyComponents\AddFavorite.htm O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A}? - I:\8003\123\浩方对战平台\GameClient.exe O9 - Extra button: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing) O9 - Extra 'Tools' menuitem: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing) O9 - Extra button: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - http://www.rising.com.cn/?u=RSTB (file missing) O9 - Extra button: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - http://www.ikaka.com/?u=RSTB (file missing) O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll O10 - Broken Internet access because of LSP provider 'c:\program files\panda software\ O14 - IERESET.INF: START_PAGE_URL=http://www.tomatolei.com O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1149985082843 O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: KVWSC - Jiangmin Co - C:\Program Files\KVFW\KVwsc.exe O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\Firewall\PavFires.exe O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavFnSvr.exe O23 - Service: Panda Pavkre (Pavkre) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\Pavkre.exe O23 - Service: Panda PavProt (PavProt) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavProt.exe O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavsrv51.exe O23 - Service: Panda Preventium+ Service (PREVSRV) - Panda Software - C:\Program Files\Panda Software\熊猫卫士钛金版2005\prevsrv.exe O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - C:\Program Files\Panda Software\熊猫卫士钛金版2005\PsImSvc.exe 另外，麻烦帮我看下我自己开启的服务，有那些是没必要开的。（自己搞的不是太清楚！偶是菜鸟哈~~）附件: 文件名:693637200661185226.jpg 下载次数:300 文件类型:image/pjpeg 文件大小: 上传时间:2006-6-11 9:00:13 描述: 2006-06-11 11:22:36
DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:	分享到：

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-06-11 09:13 \| 短消息资料字号：小中大 2楼修复O2 - BHO: (no name) - {3D503C16-EFC5-425A-965C-9D34414BF387}? - (no file) O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5}? - (no file) O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present 如果还未解决问题请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来下载网址 http://www.kztechs.com/sreng/sreng2.zip http://forum.ikaka.com/topic.asp?board=67&artid=5188931 日志一次粘不完，分次粘完，请不要修改。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:	发表于： 2006-06-11 09:36 \| 只看楼主短消息资料字号：小中大 3楼谢谢”我无邪“大哥！刚才想回帖都忙活了半天哈，现在好象可以了，不过，我还是把用”System Repair Engineer“扫描的日志发上来请你帮忙看下！日志如下：这次扫描是把熊猫卸载后扫的！
DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:

DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:	发表于： 2006-06-11 09:37 \| 只看楼主短消息资料字号：小中大 4楼 2006-06-11,09:18:58 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] <KVFW><C:\Program Files\KVFW\kvfw.exe -silent> [Beijing Jiangmin.] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <AvLiteBr><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] <UIHost><logonui.exe> [Microsoft Corporation] ================================== 启动文件夹服务 [Adobe LM Service / Adobe LM Service] <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A> [InstallDriver Table Manager / IDriverT] <"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation> [KVWSC / KVWSC] <"C:\Program Files\KVFW\KVwsc.exe"><Jiangmin Co> [Panda Firewall Service / PAVFIRES] <2 - 系统找不到指定的文件。 ><N/A> [Panda Function Service / PAVFNSVR] <2 - 系统找不到指定的文件。 ><N/A> [Panda Process Protection Service / PavPrSrv] <"C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe"><Panda Software> [Panda anti-virus service / PAVSRV] <2 - 系统找不到指定的文件。 ><N/A> [Panda Preventium+ Service / PREVSRV] <2 - 系统找不到指定的文件。 ><N/A> [Panda IManager Service / PSIMSVC] <2 - 系统找不到指定的文件。 ><N/A> ================================== 浏览器加载项 [浩方对战平台] {0A155D3C-68E2-4215-A47A-E800A446447A}? <I:\8003\123\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司> [启动Web迅雷] {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A> [访问瑞星网站] {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} <http://www.rising.com.cn/?u=RSTB, N/A> [访问卡卡社区] {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} <http://www.ikaka.com/?u=RSTB, N/A> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.> [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [IEHOOK Class] {3D503C16-EFC5-425A-965C-9D34414BF387} <C:\WINDOWS\system32\crc33.dll, > [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <H:\新建文件夹\KuGoo3\KuGoo3DownXControl.ocx, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [使用KuGoo3下载(&K)] <H:\新建文件夹\KuGoo3\KuGoo3DownX.htm, N/A> [使用Web迅雷下载] <C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A> [添加到天极收藏夹] <C:\WINDOWS\system32\YeskyComponents\AddFavorite.htm, N/A>
DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-06-11 09:38 \| 短消息资料字号：小中大 5楼嗯，我也有这个意思，HJ扫描太不让人放心了。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:	发表于： 2006-06-11 09:38 \| 只看楼主短消息资料字号：小中大 6楼 ================================== 正在运行的进程 [PID: 464][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 524][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [PID: 548][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [PID: 592][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [PID: 604][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [PID: 772][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [PID: 960][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavlsp.dll] <Panda Software ><5, 4, 12, 36> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavTrc.dll] <Panda Software ><5, 4, 13, 13> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\icl_cfg.dll] <Panda Software ><5, 2, 12, 3> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1048][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\System32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\System32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\System32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavlsp.dll] <Panda Software ><5, 4, 12, 36> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavTrc.dll] <Panda Software ><5, 4, 13, 13> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\icl_cfg.dll] <Panda Software ><5, 2, 12, 3> [PID: 1128][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\pavlsp.dll] <Panda Software ><5, 4, 12, 36> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\PavTrc.dll] <Panda Software ><5, 4, 13, 13> [C:\Program Files\Panda Software\熊猫卫士钛金版2005\icl_cfg.dll] <Panda Software ><5, 2, 12, 3> [PID: 1276][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1548][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [C:\WINDOWS\system32\mp3infp.dll] <win32lab.com><2.52.6.0> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [PID: 1804][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [PID: 1836][C:\Program Files\KVFW\kvfw.exe] <Beijing Jiangmin.><9.0.5.1205> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [C:\Program Files\KVFW\KVFWUtil.DLL] <><1, 0, 0, 1> [PID: 1832][C:\Program Files\KVFW\KVwsc.exe] <Jiangmin Co><1, 0, 0, 10> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [PID: 952][C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe] <Panda Software><1.3.0.0> [PID: 1428][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\SYSTEM32\PAVSHOOK.DLL] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\pavipc.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\TpUtil.dll] <Panda Software><5, 0, 0, 0> [C:\WINDOWS\system32\SYSTOOLS.dll] <www.pandasoftware.com><2.0.0.0> [PID: 400][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0> [H:\新建文件夹\KuGoo3\KuGoo3DownXControl.ocx] <N/A><N/A> [C:\WINDOWS\system32\mp3infp.dll] <win32lab.com><2.52.6.0> [PID: 892][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [PID: 1584][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.203\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-06-11 09:40 \| 短消息资料字号：小中大 7楼请问你卸载熊猫后，有没有重启过？？？如果没有，请重启后，再扫个报告粘上来。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:	发表于： 2006-06-11 10:21 \| 只看楼主短消息资料字号：小中大 8楼好，，这是我重启过后扫描的，其他只运行了一个江民防火墙。日志如下： 2006-06-11,10:06:58 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] <KVFW><C:\Program Files\KVFW\kvfw.exe -silent> [Beijing Jiangmin.] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] <UIHost><logonui.exe> [Microsoft Corporation] ================================== 启动文件夹服务 [Adobe LM Service / Adobe LM Service] <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><N/A> [InstallDriver Table Manager / IDriverT] <"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation> [KVWSC / KVWSC] <"C:\Program Files\KVFW\KVwsc.exe"><Jiangmin Co> ================================== 浏览器加载项 [浩方对战平台] {0A155D3C-68E2-4215-A47A-E800A446447A}? <I:\8003\123\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司> [启动Web迅雷] {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A> [访问瑞星网站] {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} <http://www.rising.com.cn/?u=RSTB, N/A> [访问卡卡社区] {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} <http://www.ikaka.com/?u=RSTB, N/A> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.> [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [IEHOOK Class] {3D503C16-EFC5-425A-965C-9D34414BF387} <C:\WINDOWS\system32\crc33.dll, > [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <H:\新建文件夹\KuGoo3\KuGoo3DownXControl.ocx, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [使用KuGoo3下载(&K)] <H:\新建文件夹\KuGoo3\KuGoo3DownX.htm, N/A> [使用Web迅雷下载] <C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A> [添加到天极收藏夹] <C:\WINDOWS\system32\YeskyComponents\AddFavorite.htm, N/A>
DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:

DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:	发表于： 2006-06-11 10:22 \| 只看楼主短消息资料字号：小中大 9楼 ================================== 正在运行的进程 [PID: 436][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 496][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 520][\??\C:\WINDOWS\SYSTEM32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 564][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 576][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 728][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 776][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 852][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 892][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1072][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1168][C:\WINDOWS\system32\imapi.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1200][C:\Program Files\KVFW\KVwsc.exe] <Jiangmin Co><1, 0, 0, 10> [PID: 1256][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1948][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\mp3infp.dll] <win32lab.com><2.52.6.0> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [PID: 2012][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2020][C:\Program Files\KVFW\kvfw.exe] <Beijing Jiangmin.><9.0.5.1205> [C:\Program Files\KVFW\KVFWUtil.DLL] <><1, 0, 0, 1> [PID: 640][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [PID: 736][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.907\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
DJ之大非初生襁褓狮帖子:12 注册: 2006-05-28 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-06-11 10:28 \| 短消息资料字号：小中大 10楼嗯，除了流氓软件CNNIC外，以经没有问题了。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT