一直上网都直接输入密码后点回车登陆qq,但今天突然不行,试了几次都说密码错误,之后换了几个新的q号也一

样,后来用了qq登陆窗口的小键盘,然后用鼠标点登陆却可以

但开qq直播和qq游戏却能正常的用回车键登陆.

傲游游览器也一样,输入地址后,不能按回车键访问,只能用鼠标点击

玩其他游戏能正常登陆



用户系统信息：mozilla/4.0 (compatible; msie 6.0; windows nt 5.1; sv1; maxthon 2.0)

在线等

删除c:\windows\system32\drivers下的rspp.sys重启计算机完后看看可以不用！

删除c:\windows\system32\drivers\spp.sys

这个是什么?是病毒?

[code]

2008-06-26,23:34:39

system repair engineer 2.5.16.900
smallfrogs (http://www.kztechs.com)

windows xp professional service pack 2 (build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    winsock 提供者
    autorun.inf
    hosts 文件
    进程特权扫描


启动项目
注册表
[hkey_current_user\software\microsoft\windows\currentversion\run]
    <ctfmon.exe><c:\windows\system32\ctfmon.exe>  [(verified)microsoft windows publisher]
[hkey_current_user\software\microsoft\windows nt\currentversion\windows]
    <load><>  [n/a]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
    <nvcpldaemon><; rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup>  [(verified)microsoft windows publisher]
    <rfwmain><"f:\rising\rfw\rfwmain.exe" -startup>  [(verified)beijing rising science and technology corporation limited]
    <ravtask><"f:\rising\rav\ravtask.exe" -system>  [(verified)beijing rising science and technology corporation limited]
    <360safetray><f:\360安全卫士\360safe\safemon\360tray.exe /start>  [(verified)qizhi software (beijing) co. ltd]
    <tkbellexe><"c:\program files\common files\real\update_ob\realsched.exe"  -osboot>  [(verified)"realnetworks, inc."]
    <imjpmig8.1><; "c:\windows\ime\imjp8_1\imjpmig.exe" /spoil /remadvdef /migration32>  [(verified)microsoft windows publisher]
    <nvmediacenter><; rundll32.exe c:\windows\system32\nvmctray.dll,nvtaskbarinit>  [(verified)qizhi software (beijing) co. ltd]
    <nwiz><; nwiz.exe /install>  [n/a]
    <phime2002a><; >  [n/a]
    <phime2002async><; >  [n/a]
    <soundman><; soundman.exe>  [(verified)microsoft windows publisher]
[hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon]
    <shell><explorer.exe>  [(verified)microsoft windows component publisher]
    <userinit><c:\windows\system32\userinit.exe,>  [(verified)microsoft windows publisher]
[hkey_local_machine\software\microsoft\windows nt\currentversion\windows]
    <appinit_dlls><>  [n/a]
[hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon]
    <uihost><logonui.exe>  [(verified)microsoft windows publisher]
[hkey_local_machine\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <internet explorer><%systemroot%\system32\shmgrate.exe ocinstalluserconfigie>  [n/a]
[hkey_local_machine\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <outlook express><%systemroot%\system32\shmgrate.exe ocinstalluserconfigoe>  [n/a]
[hkey_local_machine\software\microsoft\active setup\installed components\{2c7339cf-2b09-4501-b3f3-f3508c9228ed}]
    <themes setup><%systemroot%\system32\regsvr32.exe /s /n /i:/userinstall %systemroot%\system32\themeui.dll>  [n/a]
[hkey_local_machine\software\microsoft\active setup\installed components\{44bba840-cc51-11cf-aafa-00aa00b6015c}]
    <microsoft outlook express 6><"%programfiles%\outlook express\setup50.exe" /app:oe /caller:winnt /user /install>  [n/a]
[hkey_local_machine\software\microsoft\active setup\installed components\{44bba842-cc51-11cf-aafa-00aa00b6015b}]
    <netmeeting 3.01><rundll32.exe advpack.dll,launchinfsection c:\windows\inf\msnetmtg.inf,netmtg.remove.peruser.nt>  [(verified)microsoft windows publisher]
[hkey_local_machine\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <windows messenger 4.7><rundll32.exe advpack.dll,launchinfsection c:\windows\inf\msmsgs.inf,blc.quietinstall.peruser>  [(verified)microsoft windows component publisher]
[hkey_local_machine\software\microsoft\active setup\installed components\{6bf52a52-394a-11d3-b153-00c04f79faa6}]
    <microsoft windows media player><rundll32.exe advpack.dll,launchinfsection c:\windows\inf\wmp10.inf,peruserstub>  [(verified)microsoft windows component publisher]
[hkey_local_machine\software\microsoft\active setup\installed components\{7790769c-0471-11d2-af11-00c04fa35d02}]
    <通讯簿 6><"%programfiles%\outlook express\setup50.exe" /app:wab /caller:winnt /user /install>  [n/a]

==================================
启动文件夹
n/a

==================================
服务
[contrl center of storm media / ccosm][running/auto start]
  <f:\stormii\stormliv.exe /asservice><北京暴风网际科技有限公司>
[human interface device access / hidserv][stopped/disabled]
  <c:\windows\system32\svchost.exe -k netsvcs-->%systemroot%\system32\hidserv.dll><n/a>
[netmeeting remote desktop sharing / mnmsrvc][stopped/disabled]
  <><n/a>
[nvidia display driver service / nvsvc][running/auto start]
  <c:\windows\system32\nvsvc32.exe><nvidia corporation>
[rising proxy  service / rfwproxysrv][running/auto start]
  <f:\rising\rfw\rfwproxy.exe><beijing rising technology co., ltd.>
[rising personal firewall service / rfwservice][running/auto start]
  <f:\rising\rfw\rfwsrv.exe><beijing rising technology co., ltd.>
[rising process communication center / rsccenter][running/auto start]
  <"f:\rising\rav\ccenter.exe"><beijing rising technology co., ltd.>
[rising realtime monitor / rsravmon][stopped/auto start]
  <"f:\rising\rav\ravmond.exe"><beijing rising technology co., ltd.>

==================================
驱动程序
[service for realtek ac97 audio (wdm) / alcxwdm][running/manual start]
  <system32\drivers\alcxwdm.sys><realtek semiconductor corp.>
[hookcont / hookcont][running/system start]
  <\systemroot\system32\drivers\hookcont.sys><beijing rising technology co., ltd>
[hookntos / hookntos][running/system start]
  <\systemroot\system32\drivers\hookntos.sys><beijing rising technology co., ltd>
[hookreg / hookreg][running/system start]
  <\systemroot\system32\drivers\hookreg.sys><beijing rising technology co., ltd>
[hooksys / hooksys][running/system start]
  <\systemroot\system32\drivers\hooksys.sys><beijing rising technology co., ltd>
[hookurl / hookurl][running/auto start]
  <\??\f:\rising\rfw\hookurl.sys><beijing rising technology co., ltd.>
[nv / nv][running/manual start]
  <system32\drivers\nv4_mini.sys><nvidia corporation>
[presafe / presafe][stopped/auto start]
  <\??\c:\windows\system32\drivers\presafe.sys><n/a>
[direct parallel link driver / ptilink][running/manual start]
  <system32\drivers\ptilink.sys><parallel technologies, inc.>
[rising  rfwbase driver / rfwbase][running/auto start]
  <system32\drivers\rfwbase.sys><beijing rising technology co., ltd.>
[rsfwdrv / rsfwdrv][running/system start]
  <\??\f:\rising\rfw\rsfwdrv.sys><beijing rising technology co., ltd.>
[rsntgdi / rsntgdi][running/boot start]
  <\systemroot\system32\drivers\rsntgdi.sys><beijing rising technology co., ltd.>
[rspp / rspp][running/system start]
  <\??\c:\windows\system32\drivers\rspp.sys><beijing rising technology co., ltd>
[realtek 10/100/1000 pci nic family ndis xp driver / rtl8023xp][running/manual start]
  <system32\drivers\rtnicxp.sys><realtek semiconductor corporation>
[realtek rtl8139(a/b/c)-based pci fast ethernet adapter nt driver / rtl8139][stopped/manual start]
  <system32\drivers\rtl8139.sys><realtek semiconductor corporation>
[secdrv / secdrv][stopped/manual start]
  <system32\drivers\secdrv.sys><macrovision corporation, macrovision europe limited, and macrovision japan and asia k.k.>
[system restore filter driver / sr][stopped/disabled]
  <\systemroot\system32\drivers\sr.sys><n/a>
[via agp filter / viaagp1][running/boot start]
  <\systemroot\system32\drivers\viaagp1.sys><via technologies, inc.>
[viaide / viaide][running/boot start]
  <\systemroot\system32\drivers\viaide.sys><microsoft corporation>
[via sata/pata ide controllers / videx32][running/boot start]
  <\systemroot\system32\drivers\videx32.sys><via technologies, inc.>
[npkcrypt / npkcrypt][stopped/manual start]
  <\??\c:\windows\system32\npkcrypt.sys><n/a>
[npkycryp / npkycryp][stopped/manual start]
  <\??\c:\windows\system32\npkycryp.sys><n/a>

==================================
浏览器加载项
[启动迅雷5]
  {09ba8f6d-cb54-424b-839c-c2a6c8e6b436} <f:\thunder\thunder.exe, thunder networking technologies,ltd>
[雨林木风]
  {c3f1448c-58e9-4f6d-a622-9de26b846da9} <http://www.ylmf.com/index.htm, n/a>
[thunderatonce class]
  {01443aec-0fd1-40fd-9c87-e93d1494c233} <f:\thunder\comdlls\tdatonce_now.dll, thunder networking technologies,ltd>
[fgcatchurl]
  {2f364306-aa45-47b5-9f9d-39a8b94e7ef7} <c:\program files\flashget\jccatch.dll, www.flashget.com>
[realplayer download and record plugin for internet explorer]
  {3049c3e9-b461-4bc5-8870-4c09146192ca} <c:\program files\real\realplayer\rpbrowserrecordplugin.dll, realplayer>
[htmldlgsafehelper class]
  {3050f819-98b5-11cf-bb82-00aa00bdce0b} <c:\windows\system32\mshtmled.dll, microsoft corporation>
[thunder agent class]
  {485463b7-8fb2-4b3b-b29b-8b919b0eacce} <f:\thunder\comdlls\thunderagent_now.dll, thunder networking technologies,ltd>
[thunder browser helper]
  {889d2feb-5411-4565-8998-1dd2c5261283} <f:\thunder\comdlls\xunleibho_now.dll, thunder networking technologies,ltd>
[safemon class]
  {b69f34dd-f0f9-42dc-9edd-957187da688d} <f:\360安全卫士\360safe\safemon\safemon.dll, 360.cn>
[shockwave flash object]
  {d27cdb6e-ae6d-11cf-96b8-444553540000} <c:\windows\system32\macromed\flash\flash9f.ocx, adobe systems, inc.>
[flashget getflash class]
  {f156768e-81ef-470c-9057-481ba8380dba} <c:\program files\flashget\getflash.dll, www.flashget.com>
[&使用快车(flashget)下载]
  <c:\program files\flashget\jc_link.htm, n/a>
[&使用快车(flashget)下载全部链接]
  <c:\program files\flashget\jc_all.htm, n/a>
[使用迅雷下载]
  <f:\thunder\program\geturl.htm, n/a>
[使用迅雷下载全部链接]
  <f:\thunder\program\getallurl.htm, n/a>
[导出到 microsoft office excel(&x)]
  <res://c:\progra~1\micros~2\office11\excel.exe/3000, n/a>

==================================
正在运行的进程
[pid: 552 / system][\systemroot\system32\smss.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[pid: 632 / system][\??\c:\windows\system32\csrss.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 656 / system][\??\c:\windows\system32\winlogon.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [c:\windows\system32\msacm32.drv]  [microsoft corporation, 5.1.2600.0 (xpclient.010817-1148)]
[pid: 700 / system][c:\windows\system32\services.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 712 / system][c:\windows\system32\lsass.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 868 / system][c:\windows\system32\svchost.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 948 / network service][c:\windows\system32\svchost.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 1044 / system][f:\rising\rav\ccenter.exe]  [beijing rising technology co., ltd., 20.0.0.28]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 1076 / system][c:\windows\system32\svchost.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 1172 / network service][c:\windows\system32\svchost.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 1328 / system][f:\rising\rav\ravmond.exe]  [beijing rising technology co., ltd., 20.0.0.76]
    [f:\rising\rav\bwlist.dll]  [beijing rising technology co., ltd., 20.0.0.4]
    [c:\windows\system32\mfc71.dll]  [microsoft corporation, 7.10.3077.0]
    [c:\windows\system32\msvcr71.dll]  [microsoft corporation, 7.10.3052.4]
    [c:\windows\system32\msvcp71.dll]  [microsoft corporation, 7.10.3077.0]
    [f:\rising\rav\rsappmgr.dll]  [beijing rising technology co., ltd., 20.0.0.0]
    [f:\rising\rav\cfgdll.dll]  [beijing rising technology co., ltd., 20.0.0.18]
    [f:\rising\rav\rslog.dll]  [beijing rising technology co., ltd., 20.0.0.35]
    [f:\rising\rav\proccom.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\rscommx2.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\monrule.dll]  [beijing rising technology co., ltd., 20.0.0.29]
    [f:\rising\rav\hooksys.dll]  [beijing rising technology co., ltd, 22, 0, 0, 9]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [f:\rising\rav\hookreg.dll]  [beijing rising technology co., ltd, 22, 0, 0, 4]
    [f:\rising\rav\hookntos.dll]  [beijing rising technology co., ltd, 22, 0, 0, 2]
    [f:\rising\rav\rswalmon.dll]  [beijing rising technology co., ltd., 20, 0, 0, 22]
    [f:\rising\rav\recomp.dll]  [beijing rising technology co., ltd., 20, 0, 0, 39]
    [f:\rising\rav\refs.dll]  [beijing rising technology co., ltd., 20, 0, 0, 17]
    [f:\rising\rav\ffr.dll]  [beijing rising technology co., ltd., 20, 0, 0, 15]
    [f:\rising\rav\rsstore.dll]  [beijing rising technology co., ltd., 20.0.0.8]
    [f:\rising\rav\hookcont.dll]  [beijing rising technology co., ltd, 22, 0, 0, 1]
    [f:\rising\rav\fakescan.dll]  [beijing rising technology co., ltd., 20.0.0.13]
    [f:\rising\rav\scanner.dll]  [beijing rising technology co., ltd., 20.0.0.36]
    [f:\rising\rav\viruslib.dll]  [beijing rising technology co., ltd., 20, 0, 0, 26]
    [f:\rising\rav\relibldr.dll]  [beijing rising technology co., ltd., 20, 0, 0, 16]
    [f:\rising\rav\hookweb.dll]  [beijing rising technology co., ltd., 20.0.0.2]
    [f:\rising\rav\nvfile.dll]  [beijing rising technology co., ltd., 20, 0, 0, 6]
    [f:\rising\rav\scanexec.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\unexe.dll]  [beijing rising technology co., ltd., 20, 0, 0, 5]
    [f:\rising\rav\scanex.dll]  [beijing rising technology co., ltd., 20, 0, 0, 77]
    [f:\rising\rav\pearc.dll]  [beijing rising technology co., ltd., 20, 0, 0, 5]
    [f:\rising\rav\extfile.dll]  [beijing rising technology co., ltd., 20, 0, 0, 29]
    [f:\rising\rav\scanpack.dll]  [beijing rising technology co., ltd., 20, 0, 0, 9]
    [f:\rising\rav\revm.dll]  [beijing rising technology co., ltd., 20, 0, 0, 8]
    [f:\rising\rav\urutils.dll]  [, 20, 0, 0, 6]
    [f:\rising\rav\ur000.dat]  [beijing rising technology co., ltd., 20, 0, 0, 18]
    [f:\rising\rav\scriptci.dll]  [beijing rising technology co., ltd., 20, 0, 0, 3]
    [f:\rising\rav\ur023.dat]  [beijing rising technology co., ltd., 20, 0, 0, 1]
    [f:\rising\rav\uroutine.dll]  [beijing rising technology co., ltd., 20, 0, 0, 26]
    [f:\rising\rav\ur001.dat]  [beijing rising technology co., ltd., 20, 0, 0, 3]
    [f:\rising\rav\scansct.dll]  [beijing rising technology co., ltd., 20, 0, 0, 9]
    [f:\rising\rav\extole.dll]  [beijing rising technology co., ltd., 20, 0, 0, 12]
[pid: 1344 / system][f:\rising\rfw\rfwsrv.exe]  [beijing rising technology co., ltd., 7.0.0.73]
    [c:\windows\system32\mfc71.dll]  [microsoft corporation, 7.10.3077.0]
    [c:\windows\system32\msvcr71.dll]  [microsoft corporation, 7.10.3052.4]
    [c:\windows\system32\msvcp71.dll]  [microsoft corporation, 7.10.3077.0]
    [f:\rising\rfw\proccom.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rfw\rscommx2.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rfw\rsappmgr.dll]  [beijing rising technology co., ltd., 20.0.0.0]
    [f:\rising\rfw\cfgdll.dll]  [beijing rising technology co., ltd., 20.0.0.18]
    [f:\rising\rfw\rfwrule.dll]  [beijing rising technology co., ltd., 7.0.0.13]
    [f:\rising\rfw\rfwlog.dll]  [beijing rising technology co., ltd., 7.0.0.12]
    [f:\rising\rfw\rfwdrv.dll]  [beijing rising technology co., ltd., 7.0.0.45]
    [f:\rising\rfw\ijt_ctrl.dll]  [beijing rising technology co., ltd., 7.0.0.0]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [f:\rising\rfw\unvdet.dll]  [beijing rising technology co., ltd., 7.0.0.5]
    [f:\rising\rfw\mports.dll]  [beijing rising technology co., ltd., 7.0.0.3]
[pid: 1396 / system][f:\rising\rfw\rfwproxy.exe]  [beijing rising technology co., ltd., 7.0.0.34]
    [c:\windows\system32\mfc71.dll]  [microsoft corporation, 7.10.3077.0]
    [c:\windows\system32\msvcr71.dll]  [microsoft corporation, 7.10.3052.4]
    [f:\rising\rfw\proccom.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rfw\rscommx2.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rfw\rfwrule.dll]  [beijing rising technology co., ltd., 7.0.0.13]
    [f:\rising\rfw\urlrule.dll]  [beijing rising technology co., ltd., 1, 0, 0, 9]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [f:\rising\rfw\monmid.dll]  [beijing rising technology co., ltd., 7.0.0.4]
[pid: 1620 / system][f:\rising\rfw\rfwstub.exe]  [beijing rising technology co., ltd., 7.0.0.10]
    [c:\windows\system32\msvcp71.dll]  [microsoft corporation, 7.10.3077.0]
    [c:\windows\system32\msvcr71.dll]  [microsoft corporation, 7.10.3052.4]
    [f:\rising\rfw\rscommon.dll]  [beijing rising technology co., ltd., 20, 0, 0, 16]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 1788 / administrator][c:\windows\explorer.exe]  [microsoft corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [c:\windows\system32\msacm32.drv]  [microsoft corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [f:\rising\rav\rscommon.dll]  [beijing rising technology co., ltd., 20, 0, 0, 16]
    [c:\program files\microsoft office\office11\msohev.dll]  [microsoft corporation, 11.0.5510]
[pid: 2012 / administrator][f:\rising\rfw\rfwmain.exe]  [beijing rising technology co., ltd., 7.0.1.67]
    [c:\windows\system32\mfc71.dll]  [microsoft corporation, 7.10.3077.0]
    [c:\windows\system32\msvcr71.dll]  [microsoft corporation, 7.10.3052.4]
    [c:\windows\system32\msvcp71.dll]  [microsoft corporation, 7.10.3077.0]

[f:\rising\rfw\rsguilib.dll]  [beijing rising technology co., ltd., 20, 0, 0, 88]
    [f:\rising\rfw\proccom.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rfw\rscommx2.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rfw\rsappmgr.dll]  [beijing rising technology co., ltd., 20.0.0.0]
    [f:\rising\rfw\cfgdll.dll]  [beijing rising technology co., ltd., 20.0.0.18]
    [f:\rising\rfw\rscommon.dll]  [beijing rising technology co., ltd., 20, 0, 0, 16]
    [f:\rising\rfw\rfwctrl.dll]  [beijing rising technology co., ltd., 7.0.0.7]
    [f:\rising\rfw\rsxml.dll]  [beijing rising technology co., ltd., 20, 0, 0, 0]
    [f:\rising\rfw\pngdll.dll]  [beijing rising technology co., ltd., 20, 0, 0, 4]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [f:\rising\rfw\rfwrule.dll]  [beijing rising technology co., ltd., 7.0.0.13]
[pid: 196 / system][f:\rising\rav\ravstub.exe]  [beijing rising technology co., ltd., 20.0.0.9]
    [f:\rising\rav\proccom.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\rscommx2.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\rscommon.dll]  [beijing rising technology co., ltd., 20, 0, 0, 16]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 368 / administrator][f:\rising\rav\ravtask.exe]  [beijing rising technology co., ltd., 20.0.0.23]
    [f:\rising\rav\proccom.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\rscommx2.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\rscommon.dll]  [beijing rising technology co., ltd., 20, 0, 0, 16]
    [f:\rising\rav\rsappmgr.dll]  [beijing rising technology co., ltd., 20.0.0.0]
    [f:\rising\rav\cfgdll.dll]  [beijing rising technology co., ltd., 20.0.0.18]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 464 / administrator][f:\rising\rav\ravmon.exe]  [beijing rising technology co., ltd., 20.0.01.19]
    [c:\windows\system32\mfc71.dll]  [microsoft corporation, 7.10.3077.0]
    [c:\windows\system32\msvcr71.dll]  [microsoft corporation, 7.10.3052.4]
    [c:\windows\system32\msvcp71.dll]  [microsoft corporation, 7.10.3077.0]
    [f:\rising\rav\proccom.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\rscommx2.dll]  [beijing rising technology co., ltd., 20, 0, 0, 19]
    [f:\rising\rav\rscommon.dll]  [beijing rising technology co., ltd., 20, 0, 0, 16]
    [f:\rising\rav\recomp.dll]  [beijing rising technology co., ltd., 20, 0, 0, 39]
    [f:\rising\rav\refs.dll]  [beijing rising technology co., ltd., 20, 0, 0, 17]
    [f:\rising\rav\viruslib.dll]  [beijing rising technology co., ltd., 20, 0, 0, 26]
    [f:\rising\rav\relibldr.dll]  [beijing rising technology co., ltd., 20, 0, 0, 16]
    [f:\rising\rav\rsappmgr.dll]  [beijing rising technology co., ltd., 20.0.0.0]
    [f:\rising\rav\cfgdll.dll]  [beijing rising technology co., ltd., 20.0.0.18]
    [f:\rising\rav\monrule.dll]  [beijing rising technology co., ltd., 20.0.0.29]
    [f:\rising\rav\pngdll.dll]  [beijing rising technology co., ltd., 20, 0, 0, 4]
    [f:\rising\rav\rsguilib.dll]  [beijing rising technology co., ltd., 20, 0, 0, 89]
    [f:\rising\rav\rsxml.dll]  [beijing rising technology co., ltd., 20, 0, 0, 0]
[pid: 584 / administrator][f:\360安全卫士\360safe\safemon\360tray.exe]  [奇虎网, 4, 1, 8, 1002]
    [f:\360安全卫士\360safe\safemon\safemon.dll]  [360.cn, 4, 1, 5, 1001]
    [f:\360安全卫士\360safe\safemon\safekrnl.dll]  [奇虎网, 4, 1, 8, 1001]
    [f:\360安全卫士\360safe\antiadwa.dll]  [360safe.com, 4, 1, 5, 1001]
    [f:\360安全卫士\360safe\live.dll]  [360.cn, 1, 0, 1, 1027]
[pid: 588 / administrator][c:\program files\common files\real\update_ob\realsched.exe]  [realnetworks, inc., 0.1.0.4279]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 572 / administrator][c:\windows\system32\ctfmon.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
[pid: 1748 / system][f:\stormii\stormliv.exe]  [北京暴风网际科技有限公司, 3, 8, 6, 20]
    [f:\stormii\msvcp60.dll]  [microsoft corporation, 6.02.3104.0]
    [c:\program files\common files\microsoft shared\office11\msoxmlmf.dll]  [microsoft corporation, 11.0.8164]
[pid: 1928 / system][c:\windows\system32\nvsvc32.exe]  [nvidia corporation, 6.14.10.6176]
[pid: 2204 / local service][c:\windows\system32\svchost.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[pid: 2384 / local service][c:\windows\system32\alg.exe]  [microsoft corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[pid: 2984 / administrator][f:\qqlive\qqlive.exe]  [tencent, 6.10.3612.6]
    [f:\qqlive\proxy.dll]  [n/a, ]
    [f:\qqlive\encrypt.dll]  [n/a, ]
    [f:\qqlive\msvcr80.dll]  [microsoft corporation, 8.00.50727.762]
    [f:\qqlive\log.dll]  [n/a, ]
    [f:\qqlive\msvcp80.dll]  [microsoft corporation, 8.00.50727.762]
    [f:\qqlive\exceptcatch.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\mfc80u.dll]  [microsoft corporation, 8.00.50727.762]
    [f:\qqlive\liveutlt.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\skin.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\xmlparser.dll]  [tencent, 6.10.3612.6]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [f:\qqlive\riched20.dll]  [microsoft corporation, 5.31.23.1218]
    [f:\qqlive\core.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\atl80.dll]  [microsoft corporation, 8.00.50727.762]
    [f:\qqlive\setupshell.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\upgrade.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\liveapi.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\npkcntc.dll]  [inca internet co., ltd., 2006, 6, 27, 1]
    [f:\qqlive\npkpdb.dll]  [inca internet co., ltd., 2003, 10, 1, 1]
    [f:\qqlive\login.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\qqlivecommu.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\userdata.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\hallmain.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\statistic.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\channelui.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\channelmgr.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\right.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\admanage.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\chat.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\mulitipanels.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\qqliveax.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\qqlive.ocx]  [tencent, 6.10.3612.6]

[f:\rising\rav\ravscrch.dll]  [beijing rising technology co., ltd., 20, 0, 0, 3]
    [f:\qqlive\mfc42.dll]  [microsoft corporation, 6.00.8665.0]
    [f:\qqlive\progswitchui.dll]  [tencent, 6.10.3612.6]
    [c:\windows\system32\macromed\flash\flash9f.ocx]  [adobe systems, inc., 9,0,124,0]
    [c:\windows\system32\msacm32.drv]  [microsoft corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [f:\qqlive\livestream.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\qqlive.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\tnproxy.dll]  [tencent technology(shenzhen) company limited, 2, 1, 101, 90]
    [f:\qqlive\msvcp60.dll]  [microsoft corporation, 6.00.8972.0]
    [f:\qqlive\p2pdownload.dll]  [tencent, 6.10.3612.6]
    [f:\qqlive\vqqsdl.dll]  [tencent technology (shenzhen) company limited, 2, 0, 107, 10]
    [c:\program files\common files\microsoft shared\office11\msoxmlmf.dll]  [microsoft corporation, 11.0.8164]
[pid: 3724 / administrator][f:\maxthon2\maxthon.exe]  [maxthon international ltd., 2, 1, 1, 1717]
    [f:\maxthon2\mxpp.dll]  [maxthon international ltd., 1, 0, 0, 113]
    [f:\maxthon2\mxsk.dll]  [maxthon, 1, 0, 0, 358]
    [f:\maxthon2\mxproxy2.dll]  [maxthon international ltd., 1, 0, 0, 4033]
    [f:\maxthon2\mxext.dll]  [n/a, ]
    [f:\maxthon2\mxui.dll]  [maxthon international, 3, 3, 0, 3]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [f:\maxthon2\mxtool.dll]  [, 1, 0, 0, 1]
    [f:\maxthon2\maxzlib.dll]  [, 1.2.3]
    [f:\maxthon2\modules\mxpagesearch\mxpagesearch.dll]  [maxthon international ltd., 1,0,0,1330]
    [f:\maxthon2\modules\mxwebboost\mxwebboost.dll]  [maxthon, 1,0,2,1187]
    [f:\maxthon2\mxdb.dll]  [max, 3, 5, 3, 125]
    [f:\maxthon2\modules\mxhistory\mxhistory.dll]  [maxthon international ltd., 1, 0, 0, 4]
    [f:\rising\rav\ravscrch.dll]  [beijing rising technology co., ltd., 20, 0, 0, 3]
    [c:\windows\system32\odbcbcp.dll]  [microsoft corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)]
    [c:\windows\system32\msacm32.drv]  [microsoft corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [c:\windows\system32\jpwb.ime]  [常诚研制, 4.00.950]
    [c:\windows\system32\macromed\flash\flash9f.ocx]  [adobe systems, inc., 9,0,124,0]
[pid: 2220 / administrator][f:\sreng2\srengps.exe]  [smallfrogs studio, 2.5.16.900]
    [f:\rising\rfw\ijt_base.dll]  [beijing rising technology co., ltd., 7.0.0.19]
    [f:\rising\rfw\olemon.dll]  [beijing rising technology co., ltd., 7.0.0.6]
    [f:\sreng2\upload\3rdupd.dll]  [smallfrogs studio, 2, 1, 0, 15]

==================================
文件关联
.txt  error. [c:\windows\notepad.exe %1]
.exe  ok. ["%1" %*]
.com  ok. ["%1" %*]
.pif  ok. ["%1" %*]
.reg  ok. [regedit.exe "%1"]
.bat  ok. ["%1" %*]
.scr  ok. ["%1" /s]
.chm  error. ["hh.exe" %1]
.hlp  ok. [%systemroot%\system32\winhlp32.exe %1]
.ini  error. [c:\windows\system32\notepad.exe %1]
.inf  ok. [%systemroot%\system32\notepad.exe %1]
.vbs  ok. [%systemroot%\system32\wscript.exe "%1" %*]
.js  ok. [%systemroot%\system32\wscript.exe "%1" %*]
.lnk  ok. [{00021401-0000-0000-c000-000000000046}]

==================================
winsock 提供者
n/a

==================================
autorun.inf
n/a

==================================
hosts 文件
127.0.0.1      localhost
127.0.0.1 c0mo.com
127.0.0.1 gxgxy.net
127.0.0.1 pvs360.com
127.0.0.1 sl8cjs.cn
127.0.0.1 windowsupdeta.cn
127.0.0.1 up.22x44.com
127.0.0.1 my.531jx.cn
127.0.0.1 nx.51ylb.cn
127.0.0.1 llboss.com
127.0.0.1 down.malasc.cn
127.0.0.1 d2.llsging.com
127.0.0.1 171817.171817.com
127.0.0.1 wg.47255.com
127.0.0.1 www.tomwg.com
127.0.0.1 tp.shpzhan.cn
127.0.0.1 1.joppnqq.com
127.0.0.1 xx.exiao01.com
127.0.0.1 www.22aaa.com
127.0.0.1 ilove.com
127.0.0.1 xxx.mmma.biz
127.0.0.1 www.868wg.com
127.0.0.1 2.joppnqq.com
127.0.0.1 1.jopanqc.com
127.0.0.1 yu.8s7.net
127.0.0.1 1.jopmmqq.com
127.0.0.1 cao.kv8.info
127.0.0.1 xtx.kv8.info
127.0.0.1 new.749571.com
127.0.0.1 xxx.vh7.biz
127.0.0.1 1.jopenkk.com
127.0.0.1 d.93se.com
127.0.0.1 3.joppnqq.com
127.0.0.1 xxx.j41m.com
127.0.0.1 1.jopenqc.com
127.0.0.1 xxx.m111.biz
127.0.0.1 down.18dd.net
127.0.0.1 www.333292.com
127.0.0.1 qqq.hao1658.com
127.0.0.1 qqq.dzydhx.com
127.0.0.1 www.exiao01.com
127.0.0.1 www.cike007.cn

==================================
进程特权扫描
特殊特权被允许： sedebugprivilege [pid = 2984, f:\qqlive\qqlive.exe]
特殊特权被允许： seloaddriverprivilege [pid = 2984, f:\qqlive\qqlive.exe]

==================================
api hook
入口点错误：createprocessa (危险等级: 高,  被下面模块所hook: 0x00e81ffd)
入口点错误：createprocessw (危险等级: 高,  被下面模块所hook: 0x00e820e5)

==================================
隐藏进程
n/a

==================================


[/code]

在线等

用SRENG修复文件关联~~


安全卫士360下载：http://www.skycn.com/soft/21730.html
用这个工具清理恶意插件，修复IE看看