==================================
正在运行的进程
[PID: 552][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 624][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 648][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\Ati2evxx.dll]  [, ]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 692][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 704][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 860][C:\WINDOWS\system32\Ati2evxx.exe]  [, ]
[PID: 872][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1492][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [E:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\JiangMin\AntiVirus\KVshell_1.dll]  [Jiangmin Co.Ltd, 1, 0, 7, 319]
    [C:\WINDOWS\system32\HiveBase.dll]  [Jiangmin Co., Ltd., 1, 0, 7, 226]
    [C:\Program Files\JiangMin\AntiVirus\lang\kvxp0804_1.lng]  [N/A, ]
    [D:\Program Files\Tencent\QQ\qdshm.dll]  [, 1, 0, 101, 20]
    [D:\Program Files\Tencent\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [d:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
[PID: 1724][E:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6]
    [E:\Program Files\Rising\AntiSpyware\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [E:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 1756][D:\Program Files\360safe\safemon\360Tray.exe]  [奇虎网, 3, 3, 0, 1004]
    [D:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
    [D:\Program Files\360safe\safemon\SafeKrnl.dll]  [奇虎网, 3, 2, 0, 1001]
    [D:\Program Files\360safe\AntiAdwa.dll]  [360Safe.com, 3, 3, 0, 1004]
    [E:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\Program Files\360safe\live.dll]  [360safe.COM, 1, 0, 0, 1012]
[PID: 1776][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [E:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
[PID: 2464][C:\WINDOWS\system32\DllHost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
    [E:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\Program Files\JiangMin\common\ComUI_1.dll]  [Jiangmin Co,.Ltd, 1, 0, 7, 112]
    [C:\Program Files\JiangMin\common\ComUIPS.dll]  [Jiangmin Co.Ltd, 1.0.0.808]
    [C:\WINDOWS\system32\HiveBase.dll]  [Jiangmin Co., Ltd., 1, 0, 7, 226]
    [C:\Program Files\JiangMin\common\GUIEXT_1.DLL]  [Jiangmin Co.Ltd, 1, 0, 6, 1201]
    [C:\Program Files\JiangMin\common\lang\guiext0804.lng]  [JiangMin Ltd., 7, 1, 0, 200]
[PID: 3352][D:\ChinaNet\VnetClient.exe]  [, 2005, 11, 14, 1]
    [D:\ChinaNet\Communicate.dll]  [0, 2005, 3, 3, 1]
    [D:\ChinaNet\DialModule.dll]  [GDCN, 2006, 6, 7, 12]
    [D:\ChinaNet\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [D:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
    [D:\ChinaNet\CLIENT~1.DLL]  [, 2004, 2, 28, 1]
    [D:\ChinaNet\PLUGIN~1.OCX]  [, 2005, 7, 27, 1]
    [D:\ChinaNet\sign.dll]  [0, 2004, 12, 1, 1]
    [D:\ChinaNet\WEBPLU~1.DLL]  [, 2005, 8, 18, 1]
    [D:\ChinaNet\PostPlug.dll]  [, 2004, 12, 16, 2]
    [D:\ChinaNet\ADVERT~1.OCX]  [, 2005, 10, 13, 1]
    [D:\ChinaNet\VnetBs.ocx]  [, 2004, 11, 18, 1]
    [D:\ChinaNet\ACCOUN~2.DLL]  [, 2005, 11, 14, 1]
    [D:\ChinaNet\AccountMgr.dll]  [, 2005, 11, 14, 17]
    [D:\ChinaNet\VnetSkin.ocx]  [GDDC, 2005, 11, 14, 1]
    [D:\ChinaNet\DialogStyle.dll]  [, 1, 0, 0, 1]
    [D:\ChinaNet\Timer.ocx]  [, 2005, 10, 9, 14]
    [D:\ChinaNet\PLUGIN~2.OCX]  [, 2005, 2, 24, 1]
    [D:\ChinaNet\NEWMES~1.DLL]  [, 2005, 8, 26, 1]
    [D:\ChinaNet\PassCtrl.dll]  [, 1, 0, 0, 1]
    [D:\ChinaNet\PlugPush.dll]  [, 2004, 12, 21, 1]
    [D:\ChinaNet\ALLINT~1.DLL]  [, 2004, 11, 23, 1]
    [D:\ChinaNet\VNetLog.ocx]  [, 2005, 10, 9, 1]
    [D:\ChinaNet\StatNum.dll]  [, 2004, 11, 18, 1]
    [D:\ChinaNet\VNETON~1.OCX]  [, 2005, 3, 2, 1]
    [D:\ChinaNet\ALLFUN~1.DLL]  [GDCN, 2005, 10, 9, 1]
    [D:\ChinaNet\VnetOptLog.dll]  [, 2005, 9, 13, 9]
    [E:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\ChinaNet\DlgSkin.ocx]  [, 2005, 11, 14, 1]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 3188][F:\装机\sreng2\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
    [D:\Program Files\360safe\safemon\safemon.dll]  [, 3, 2, 0, 1001]
    [E:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [F:\装机\sreng2\Plugins\NWMON.SRE]  [Smallfrogs Studio, 1, 0, 0, 8]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
入口点错误：CreateProcessA (危险等级: 一般,  被下面模块所HOOK: D:\Program Files\360safe\safemon\safemon.dll)
入口点错误：CreateProcessW (危险等级: 一般,  被下面模块所HOOK: D:\Program Files\360safe\safemon\safemon.dll)

==================================
隐藏进程
    [1417] C:\Program Files\JiangMin\AntiVirus\kvsrvxp_1.exe
    [1697] C:\Program Files\JiangMin\AntiVirus\KVMonXP_1.kxp

==================================


[/CODE]

沉了。

引用:

【小小菜鸟建的贴子】沉了。 ………………

晕，看了日志，个人认为无中毒迹象。看来是系统文件受损，找出系统安装光盘，准备修复吧.....

又沉了，再自己顶一下．

版主看见了不要说我在灌水啊

任务管理器文件可能坏了，重考个文件进去，即taskmgr.exe，安装到
c:\windows\system32下。在这里下http://www.zhaodll.com/soft/search.asp?act=topic&keyword=taskmgr.exe

咋样啊？搞定没？说声，我经常这样搞的，呵呵。至于那个江名，我没有用过，感觉你修复一下不行的话，再重安装一次也就好了，应该不是问题的

高定没，回个话

没搞定

你杀完毒，然后，将我说的哪个文件考进去。难道不行吗？我的丢了好几次，都是这样搞定的