瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】系统盘下生成一个Program Files\Microsoft\svhost32.exe文件夹

12   1  /  2  页   跳转

【求助】系统盘下生成一个Program Files\Microsoft\svhost32.exe文件夹

【求助】系统盘下生成一个Program Files\Microsoft\svhost32.exe文件夹

怎么都删不掉,也进不去,启动进程什么的没这个了,但是就是进了安全模式也删除不了,各位大大帮帮忙解决下~~
最后编辑2006-11-01 21:04:12
分享到:
gototop
 

安全模式下中止进程后删除
把日志帖上来
gototop
 

一样删不掉,扫描日志~~貌似不让传
gototop
 

怎么不让贴?
gototop
 

2006-10-29,18:50:47

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
N/A

==================================
启动文件夹
N/A

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[卡巴斯基反病毒6.0 / AVP]
  <"D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab>
[cFosSpeed System Service / cFosSpeedS]
  <"D:\Program Files\cFosSpeed\spd.exe" -service><cFos Software GmbH>
[Human Interface Device Access / HidServ]
  <D:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Netropa NHK Server / nhksrv]
  <D:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe><N/A>
[NVIDIA Display Driver Service / NVSvc]
  <D:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[TrueVector Internet Monitor / vsmon]
  <D:\WINDOWS\system32\ZoneLabs\vsmon.exe -service><Zone Labs, LLC>

==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[cFosSpeed Miniport / cFosSpeed]
  <system32\DRIVERS\cfosspeed.sys><cFos Software GmbH>
[ExpScaner / ExpScaner]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><N/A>
[HookCont / HookCont]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><N/A>
[HookReg / HookReg]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><N/A>
[HookSys / HookSys]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><N/A>
[kl1 / kl1]
  <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif]
  <\??\D:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[MEMSCAN / MEMSCAN]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><N/A>
[Multimedia Keyboard Filter Driver / msikbd2k]
  <System32\DRIVERS\msikbd2k.sys><Netropa Corporation>
[ATK0110 ACPI UTILITY / MTsensor]
  <system32\DRIVERS\ASACPI.sys><>
[npkcrypt / npkcrypt]
  <\??\E:\Program Files\tencent\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[nvata / nvata]
  <\SystemRoot\system32\DRIVERS\nvata.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD]
  <system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus]
  <system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[SmartAVS / SmartAVS]
  <\??\D:\WINDOWS\system32\drivers\SmartAVS.sys><All-In-Smart [CWJ]>
[sptd / sptd]
  <\SystemRoot\System32\Drivers\sptd.sys><N/A>
[vsdatant / vsdatant]
  <\??\D:\WINDOWS\system32\vsdatant.sys><Zone Labs, LLC>

==================================
浏览器加载项
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <, N/A>
[Web反病毒保护]
  {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
[HgPluginJP21 Class]
  {B905F63D-7489-4B3D-9B62-49A1B8647E2A} <D:\WINDOWS\Downloaded Program Files\HGPluginJP21.dll, NHN Japan Corp.>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <D:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[HgPluginJP21 Class]
  {B905F63D-7489-4B3D-9B62-49A1B8647E2A} <D:\WINDOWS\Downloaded Program Files\HGPluginJP21.dll, NHN Japan Corp.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[&使用迅雷下载]
  <D:\Program Files\Thunder Network\Program\geturl.htm, N/A>
[&使用迅雷下载全部链接]
  <D:\Program Files\Thunder Network\Program\getallurl.htm, N/A>
[上传到QQ网络硬盘]
  <E:\Program Files\tencent\qq1\AddToNetDisk.htm, N/A>
[使用迅雷下载]
  <D:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <D:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[添加到QQ自定义面板]
  <E:\Program Files\tencent\qq1\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\Program Files\tencent\qq1\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <E:\Program Files\tencent\qq1\SendMMS.htm, N/A>
gototop
 

==================================
正在运行的进程
[PID: 1132][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1196][\??\D:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1224][\??\D:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [D:\WINDOW~1\wbsrv.dll]  [Stardock, 5, 0, 0, 1]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
[PID: 1272][D:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1284][D:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1456][D:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1516][D:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1712][D:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
[PID: 1840][D:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1920][D:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 476][D:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 748][D:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [D:\WindowBlinds5GE\tray.dll]  [N/A, N/A]
    [D:\Program Files\Netropa\Multimedia Keyboard\nhkdll.dll]  [Netropa Corp., 1.03]
[PID: 888][D:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe]  [N/A, N/A]
[PID: 928][D:\Program Files\cFosSpeed\spd.exe]  [cFos Software GmbH, 3.01.1130]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
[PID: 996][D:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.8456]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 1736][D:\Program Files\cFosSpeed\cFosSpeed.exe]  [cFos Software GmbH, 3.01.1130]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 1944][D:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe]  [Netropa Corp., 1.00]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [D:\WINDOWS\system32\msiosd32.dll]  [N/A, N/A]
    [D:\Program Files\Netropa\Multimedia Keyboard\nhkdll.dll]  [Netropa Corp., 1.03]
[PID: 272][D:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 708][D:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe]  [N/A, N/A]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [D:\WINDOWS\system32\msiosd32.dll]  [N/A, N/A]
[PID: 732][D:\Program Files\Netropa\Onscreen Display\OSD.exe]  [Netropa Corp., 2.02]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 2356][D:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2856][D:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
[PID: 3124][D:\Program Files\sreng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 3296][F:\My Documents\200610161763629000\Maxthon\Maxthon.exe]  [Maxthon International Ltd., 1, 5, 8, 116]
    [F:\My Documents\200610161763629000\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
    [D:\WindowBlinds5GE\wblind.dll]  [Stardock.Net, Inc, 5.0]
    [D:\WindowBlinds5GE\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [F:\My Documents\200610161763629000\Maxthon\Plugin\MoreOptions\MoreOptions.dll]  [abc, 1.00]
    [F:\My Documents\200610161763629000\Maxthon\Plugin\FloatBar\FloatBar.dll]  [, 1, 8, 0, 0]
    [F:\My Documents\200610161763629000\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.299]
    [D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.304]
    [d:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.299]
    [d:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.299]
    [d:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.0.299]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["D:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
gototop
 

大家帮忙研究下亚`~~~
gototop
 

自己顶一下~~~
gototop
 

大家帮帮忙亚,真的很急~~
gototop
 

大家帮帮忙亚,真的很急~~
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT