瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 菜鸟求救,请各位大哥哥大姐姐帮忙拉..

12   1  /  2  页   跳转

菜鸟求救,请各位大哥哥大姐姐帮忙拉..

菜鸟求救,请各位大哥哥大姐姐帮忙拉..

我的ie(6.0)现在出问题了。。不管打开什么网页,它都会弹出一个网页,地址是‘http://2/’,窗口大小 左、右、高、宽 全都为0。也没什么病毒警告。每开一个新网页它就弹出一个,晕,一会下面任务栏就满了..求救...
最后编辑2006-05-12 15:03:19
分享到:
gototop
 

请下载 System Repair Engineer,使用“智能扫描”,按下“扫描”按钮进行扫描,扫描完成后按下“保存报告”按钮保存报告日志文件(SREng.LOG),把保存的报告日志文件内容复制-粘贴上来
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
www.27814939.ys168.com
gototop
 

谢谢楼上,日志如下:
2006-05-12,14:07:13

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows 2000 Server Service Pack 4 - 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <Internat.exe><internat.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><RUNDLL32.EXE NvQTwk,NvCplDaemon initialize>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <nwiz><nwiz.exe /install>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RavTask><"D:\Rising\Rav\RavTask.exe" -system>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
[Microsoft Office]
  <D:\Documents and Settings\All Users.WINNT\「开始」菜单\程序\启动\Microsoft Office.lnk><N>
[服务管理器]
  <D:\Documents and Settings\All Users.WINNT\「开始」菜单\程序\启动\服务管理器.lnk><N>
[U8预警服务]
  <D:\Documents and Settings\All Users.WINNT\「开始」菜单\程序\启动\U8预警服务.lnk><N>
[U8加密服务]
  <D:\Documents and Settings\All Users.WINNT\「开始」菜单\程序\启动\U8加密服务.lnk><N>
[desktop.exe]
  <D:\Documents and Settings\jed\「开始」菜单\程序\启动\desktop.exe.lnk><N>

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
  <D:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[MDInServer / MDInServer]
  <D:\U8SOFT\UFSOFTOA\Bin\MDInServer.exe><>
[Security Machine Manager / Mercha2]
  <D:\WINNT\SYSTEM32\RUNDLL32.EXE D:\WINNT\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[NVIDIA Driver Helper Service / NVSvc]
  <D:\WINNT\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
  <"D:\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"D:\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Sample NT Service / SampleService]
  <D:\WINNT\NTService.exe><N/A>
[合并报表队列服务 / TaskService]
  <d:\u8soft\gdp\web\bin\taskservice.exe>< >
[U8BackupService / U8BackupService]
  <D:\WINNT\system32\U8BackupService.exe><N/A>
[UFSoft SMS Platform / U8SmsSrv]
  <D:\WINNT\system32\U8SMSSrv.exe><N/A>
[U8TaskService / U8TaskService]
  <D:\WINNT\system32\U8TaskService.exe><N/A>
[用友U8预警调度服务 / UFALERTSERVICE]
  <D:\WINNT\system32\AlertService.exe><N/A>
[UfMsgGhost / UfMsgGhost]
  <D:\U8SOFT\UFSOFTOA\Bin\MsgGhost.exe><>
[U8管理软件 / UFNet]
  <D:\WINNT\system32\ServerNT.EXE><N/A>
[UfUploadService / UfUploadService]
  <D:\U8SOFT\UFSOFTOA\Bin\EipUploadService.exe><>
[WMDM PMSP Service / WMDM PMSP Service]
  <D:\WINNT\system32\mspmspsv.exe><N/A>
gototop
 


==================================
浏览器加载项
[NewWebController Class]
  {9ACEEE30-143F-471A-AA45-72B061FE7D60} <D:\WINNT\system32\WinSC32.dll, N/A>
[WinSC Class]
  {9ACEEE31-1440-471B-AA46-72B061FE7D61} <D:\WINNT\system32\WinSC64.dll, N/A>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <c:\Program Files\Tencent\qq\QQ.EXE, N/A>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <D:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <D:\WINNT\System32\msdxm.ocx, Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINNT\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.>
[上传到QQ网络硬盘]
  <E:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
  <D:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <D:\Program Files\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
  <E:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <E:\Program Files\Tencent\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 156][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\D:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 204][\??\D:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6714>
[PID: 232][D:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.6700>
    [D:\WINNT\system32\dmserver.dll]  <VERITAS Software Corp.><2195.6605.297.3>
[PID: 244][D:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6695>
[PID: 420][D:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 452][D:\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 468][D:\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
    [D:\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [D:\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [D:\Rising\Rav\HOOKSYS.dll]  <Rising><18, 1, 0, 9>
    [D:\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
    [D:\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [D:\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 1>
    [D:\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [D:\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [D:\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [D:\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
    [D:\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [D:\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [D:\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [D:\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [D:\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [D:\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [D:\Rising\Rav\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [D:\Rising\Rav\ScanNet.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\Rising\Rav\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 512][D:\WINNT\system32\spoolsv.exe]  <Microsoft Corporation><5.00.2195.6659>
    [D:\WINNT\system32\spool\PRTPROCS\W32X86\vprproc.dll]  <N/A><N/A>
[PID: 540][D:\WINNT\System32\msdtc.exe]  <Microsoft Corporation><1999.9.3421.3>
[PID: 668][D:\WINNT\System32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 708][D:\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [D:\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 776][D:\WINNT\System32\llssrv.exe]  <Microsoft Corporation><5.00.2195.6697>
[PID: 844][D:\U8SOFT\UFSOFTOA\Bin\MDInServer.exe]  <><1, 0, 0, 1>
[PID: 888][D:\MICROS~2\MSSQL\binn\sqlservr.exe]  <Microsoft Corporation><2000.080.0760.00>
[PID: 920][D:\Program Files\Microsoft Analysis Services\Bin\msmdsrv.exe]  <Microsoft Corporation><8.00.194>
[PID: 940][D:\WINNT\System32\nvsvc32.exe]  <NVIDIA Corporation><6.13.10.2942>
[PID: 1004][D:\WINNT\system32\MSTask.exe]  <Microsoft Corporation><4.71.2195.6704>
gototop
 

[PID: 1024][d:\u8soft\gdp\web\bin\taskservice.exe]  < ><1.0.1754.33838>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_10604435\mscorlib.dll]  <N/A><N/A>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0ab4b4f1\system.dll]  <N/A><N/A>
    [d:\u8soft\gdp\web\bin\taskmanage.dll]  < ><1.0.1754.33838>
    [d:\u8soft\gdp\web\bin\ufsoft.hbbb.dataaccess.dll]  < ><1.0.1754.33840>
    [d:\u8soft\gdp\web\bin\interop.scmcom2.dll]  < ><16.1.0.0>
    [d:\u8soft\gdp\web\bin\ufsoft.hbbb.common.dll]  < ><1.0.1754.33838>
    [D:\WINNT\system32\UFCOMSQL\ScmCom2.dll]  <用友软件><1.00>
    [D:\WINNT\system32\UFCOMSQL\SendEmail.dll]  <><1, 0, 0, 1>
    [d:\u8soft\gdp\web\bin\resources.dll]  < ><1.0.1754.33833>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_feec1f60\system.xml.dll]  <N/A><N/A>
[PID: 1192][D:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3700.6690>
    [D:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [D:\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [D:\WINNT\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [D:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [D:\WINNT\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [D:\WINNT\system32\WinSC32.dll]  <N/A><N/A>
    [D:\WINNT\system32\WinSC64.dll]  <N/A><N/A>
[PID: 1248][D:\WINNT\system32\U8BackupService.exe]  <N/A><N/A>
    [D:\WINNT\system32\SecuComm.dll]  <N/A><N/A>
    [D:\WINNT\system32\UFCOMSQL\UFBackPlan.dll]  <北京用友软件股份有限公司><8.60.0001>
[PID: 1252][D:\WINNT\system32\U8SMSSrv.exe]  <N/A><N/A>
[PID: 1264][D:\WINNT\system32\U8TaskService.exe]  <N/A><N/A>
    [D:\WINNT\system32\UFCOMSQL\U8TaskPro.dll]  <ufsoft><8.05>
    [D:\WINNT\system32\Client.DLL]  <><1, 0, 0, 1>
    [D:\WINNT\system32\UMIscell.dll]  <><1, 0, 0, 1>
    [D:\WINNT\system32\M80SGV.dll]  <><8, 2, 0, 0>
    [D:\WINNT\system32\Sense3.dll]  <N/A><N/A>
[PID: 1288][D:\WINNT\system32\AlertService.exe]  <N/A><N/A>
    [D:\WINNT\system32\AlertDispatcher.dll]  <><1, 0, 0, 1>
[PID: 1312][D:\WINNT\system32\ServerNT.EXE]  <N/A><N/A>
    [D:\WINNT\system32\UMiscell.dll]  <><1, 0, 0, 1>
    [D:\WINNT\system32\M80SGV.dll]  <><8, 2, 0, 0>
    [D:\WINNT\system32\Sense3.dll]  <N/A><N/A>
    [D:\WINNT\system32\SecuComm.dll]  <N/A><N/A>
[PID: 1412][D:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
[PID: 1468][D:\WINNT\system32\Dfssvc.exe]  <Microsoft Corporation><5.00.2195.6664>
[PID: 1516][D:\WINNT\System32\inetsrv\inetinfo.exe]  <Microsoft Corporation><5.00.0984>
[PID: 1544][D:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe]  <Microsoft Corporation><9.107.8320.0>
[PID: 1600][D:\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [D:\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1604][D:\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 17>
    [D:\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [D:\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [D:\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1616][D:\WINNT\system32\internat.exe]  <Microsoft Corporation><5.00.2920.0000>
[PID: 1760][D:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe]  <Microsoft Corporation><2000.080.0760.00>
[PID: 1772][D:\WINNT\system32\UfAlertSvrMgr.exe]  <用友软件公司><1, 0, 0, 1>
[PID: 1676][D:\WINNT\system32\UfAuthSvrMgr.exe]  <用友软件公司><1, 0, 0, 1>
[PID: 1820][D:\Documents and Settings\jed\My Documents\desktop.exe]  <drd><1.00>
[PID: 1972][D:\WINNT\system32\dllhost.exe]  <Microsoft Corporation><5.00.2195.6692>
[PID: 2052][D:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe]  <Microsoft Corporation><1.1.4322.573>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_10604435\mscorlib.dll]  <N/A><N/A>
    [d:\winnt\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll]  < ><7.10.3052.4>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\43c695ac\0071d66b_6341c401\ufsoft.u8.framework.invokeservice.serversink.dll]  < ><1.0.0.0>
gototop
 

[d:\winnt\assembly\gac\ufsoft.u8.framework.invokeservice\1.0.860.0__27100cfe39774293\ufsoft.u8.framework.invokeservice.dll]  <UFSoft Corporation><1.0.860.0>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.bizbase\1.0.0.0__79a4e7ad54eeabca\ufsoft.u8.framework.bizbase.dll]  < ><1.0.0.0>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.log\1.0.0.0__9445a96dcd94733f\ufsoft.u8.framework.log.dll]  <UFSoft Stock Corp, Ltd.><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\d5affca8\0081c968_9b9fc401\icsharpcode.sharpziplib.dll]  < ><0.5.0.0>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.logincontext\1.0.0.0__90e57cffdf9d854d\ufsoft.u8.framework.logincontext.dll]  < ><1.0.0.0>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.error\1.0.0.0__abe02929a274df6b\ufsoft.u8.framework.error.dll]  < ><1.0.0.0>
    [d:\winnt\assembly\gac\log4net\1.2.0.30714__b32731d11ce58905\log4net.dll]  <Neoworks Limited><1.2.0.30714>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\db48819a\00e6000c_a597c401\si_ufsoft.u8.framework.login.bo.dll]  < ><0.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\e450bc29\00e6000c_a597c401\i_ufsoft.u8.framework.login.bo.dll]  < ><0.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\ae256085\00e2d193_cc29c501\ufsoft.u8.framework.login.bo.dll]  < ><1.0.0.0>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.servicemarkable\1.0.860.0__b30940874b271bd0\ufsoft.u8.framework.servicemarkable.dll]  <UFSoft Corporation><1.0.860.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\a616d8d8\00947afc_a4b6c401\securityandcreditidentity.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\f49fccec\0054c427_a87ec401\ufsoft.u8.framework.keymanage.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\d6bc6027\002f53ea_a397c401\tokenmanage.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\c5676223\003c1330_cb26c401\ufsoft.u8.framework.cryptographyservice.bf.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\a4755c21\0085c1cc_d329c501\ufsoft.u8.framework.datasourceconfig.bo.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\1dc32fe1\00eedcfe_a4b6c401\securitylib.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\3e42b18a\00696484_7b8ac401\i_ufsoft.u8.framework.keymanage.dll]  < ><0.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\55232193\000f0395_cc29c501\ufsoft.u8.framework.login.ui.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\caff8cdc\002cb6e5_521ec501\ufsoft.u8.framework.resource.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8keymanage\06cb7cc7\6e4d7512\assembly\dl2\12dfa14e\0071d66b_6341c401\ufsoft.u8.framework.invokeservice.serversink.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8keymanage\06cb7cc7\6e4d7512\assembly\dl2\46c8b225\0081c968_9b9fc401\icsharpcode.sharpziplib.dll]  < ><0.5.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8keymanage\06cb7cc7\6e4d7512\assembly\dl2\d6ed6c49\0054c427_a87ec401\si_ufsoft.u8.framework.keymanage.dll]  < ><0.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8keymanage\06cb7cc7\6e4d7512\assembly\dl2\af3894b3\00279326_a87ec401\i_ufsoft.u8.framework.keymanage.dll]  < ><0.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8keymanage\06cb7cc7\6e4d7512\assembly\dl2\e5fed187\00b5a092_cc29c501\ufsoft.u8.framework.keymanage.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8keymanage\06cb7cc7\6e4d7512\assembly\dl2\9706a763\00947afc_a4b6c401\securityandcreditidentity.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8keymanage\06cb7cc7\6e4d7512\assembly\dl2\14b82fd0\003c1330_cb26c401\ufsoft.u8.framework.cryptographyservice.bf.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8keymanage\06cb7cc7\6e4d7512\assembly\dl2\470883a1\002f53ea_a397c401\tokenmanage.dll]  < ><1.0.0.0>
    [d:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\c787a949\f1a181ac\assembly\dl2\4bdf6eb8\00490d41_e5b7c401\ufsoft.u8.framework.invokeservice.clientsink.dll]  < ><1.0.0.0>
    [D:\WINNT\system32\SecuComm.dll]  <N/A><N/A>
    [D:\WINNT\system32\Client.DLL]  <><1, 0, 0, 1>
    [D:\WINNT\system32\UMIscell.dll]  <><1, 0, 0, 1>
    [D:\WINNT\system32\M80SGV.dll]  <><8, 2, 0, 0>
    [D:\WINNT\system32\Sense3.dll]  <N/A><N/A>
[PID: 2288][D:\WINNT\System32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
gototop
 

[PID: 1900][E:\Program Files\Tencent\qq\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [E:\Program Files\Tencent\qq\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\QQHelperDll.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 14>
    [E:\Program Files\Tencent\qq\QQAPI.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [E:\Program Files\Tencent\qq\LoginCtrl.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\npkcntc.dll]  <INCA Internet Co., Ltd.><2005, 9, 1, 1>
    [E:\Program Files\Tencent\qq\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [E:\Program Files\Tencent\qq\QQRes.dll]  <tencent><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\QQMainFrame.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\CQQApplication.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\NewSkin.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\HostingMgr.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\CameraDll.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\MailSummary.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\QQSpace.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\QQPlugin.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\PhoneAPI.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [E:\Program Files\Tencent\qq\QQAvatar.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [E:\Program Files\Tencent\qq\BQQApplication.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\QQGroupMng.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\CommercesMng.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [E:\Program Files\Tencent\qq\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 140>
    [E:\Program Files\Tencent\qq\QQSceneMng.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\QQPhoneHelper.dll]  <腾讯科技(深圳)有限公司><2, 0, 2, 21>
    [D:\WINNT\System32\devenum.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\QQSettingCtrl.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\QQAllInOne.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\SCCore.dll]  <N/A><N/A>
    [D:\WINNT\system32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
    [E:\Program Files\Tencent\qq\QRingMng.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\QQCustomFace.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\QQPet.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\QQSysMsgMng.dll]  <N/A><N/A>
    [E:\Program Files\Tencent\qq\QQMagicFace.dll]  <><1, 0, 0, 1>
    [E:\Program Files\Tencent\qq\GroupConnection.dll]  <Tencent><0, 3, 3, 5>
    [E:\Program Files\Tencent\qq\LongConnection.dll]  <tencent><5, 0, 201, 14>
    [E:\Program Files\Tencent\qq\ImageOle.dll]  <TODO: <Company name>><1.0.0.1>
    [E:\Program Files\Tencent\qq\QQZip.dll]  <tencent><0, 3, 2, 4>
[PID: 1440][E:\Program Files\Tencent\qq\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [E:\Program Files\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 728][D:\U8SOFT\Portal.exe]  <北京用友软件股份有限公司><8.60.0001>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_10604435\mscorlib.dll]  <N/A><N/A>
    [d:\u8soft\framework\ufsoft.u8.framework.login.ui.dll]  < ><1.0.0.0>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.invokeservice\1.0.860.0__27100cfe39774293\ufsoft.u8.framework.invokeservice.dll]  <UFSoft Corporation><1.0.860.0>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.logincontext\1.0.0.0__90e57cffdf9d854d\ufsoft.u8.framework.logincontext.dll]  < ><1.0.0.0>
    [d:\u8soft\framework\securityandcreditidentity.dll]  < ><1.0.0.0>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.log\1.0.0.0__9445a96dcd94733f\ufsoft.u8.framework.log.dll]  <UFSoft Stock Corp, Ltd.><1.0.0.0>
    [d:\winnt\assembly\gac\log4net\1.2.0.30714__b32731d11ce58905\log4net.dll]  <Neoworks Limited><1.2.0.30714>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0ab4b4f1\system.dll]  <N/A><N/A>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_feec1f60\system.xml.dll]  <N/A><N/A>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_a9f8c678\system.windows.forms.dll]  <N/A><N/A>
    [d:\u8soft\framework\ufsoft.u8.framework.login.bo.dll]  < ><1.0.0.0>
    [d:\winnt\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_3d60c711\system.drawing.dll]  <N/A><N/A>
    [d:\winnt\assembly\gac\ufsoft.u8.framework.servicemarkable\1.0.860.0__b30940874b271bd0\ufsoft.u8.framework.servicemarkable.dll]  <UFSoft Corporation><1.0.860.0>
    [d:\u8soft\framework\i_ufsoft.u8.framework.login.bo.dll]  < ><0.0.0.0>
    [d:\u8soft\framework\ufsoft.u8.framework.invokeservice.clientsink.dll]  < ><1.0.0.0>
    [d:\u8soft\framework\ufsoft.u8.framework.keymanage.dll]  < ><1.0.0.0>
    [d:\u8soft\framework\i_ufsoft.u8.framework.keymanage.dll]  < ><0.0.0.0>
    [d:\u8soft\framework\ufsoft.u8.framework.resource.dll]  < ><1.0.0.0>
    [D:\WINNT\system32\UFCOMSQL\U8Login.dll]  <北京用友软件股份有限公司><8.60.0002>
    [D:\WINNT\system32\umiscell.dll]  <><1, 0, 0, 1>
    [D:\WINNT\system32\M80SGV.dll]  <><8, 2, 0, 0>
    [D:\WINNT\system32\Sense3.dll]  <N/A><N/A>
    [D:\WINNT\system32\Client.DLL]  <><1, 0, 0, 1>
    [D:\WINNT\system32\UFCOMSQL\USDbKit.DLL]  <用友集团><1.00.0017>
    [D:\WINNT\system32\UFCOMSQL\UFNET.dll]  <><8, 1, 0, 0>
    [D:\WINNT\system32\UFCOMSQL\PortalEventAgent.ocx]  <UFSoft><8.60.0001>
    [D:\Program Files\MDIExtender\MDIExtender.ocx]  <DevComponents.com><1. 0. 0.28>
    [D:\WINNT\system32\UFCOMSQL\UFHeronReport.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\PortalMainFormProxy.dll]  <北京用友软件股份有限公司><8.60.0001>
    [E:\tao\恩诚工贸\恩诚-U8Source\库存管理\主工程(修改)\KCGLSQL.dll]  <北京用友软件股份有限公司><8.60.0001>
    [E:\tao\恩诚工贸\恩诚-U8Source\库存管理\公用部件\USERPCO\USERPCO.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\USCOMMON.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\UFVoucherServer85.dll]  <北京用友软件股份有限公司><8.60.0001>
    [E:\tao\恩诚工贸\恩诚补丁\USERPBO.dll]  <北京用友软件股份有限公司><8.60.0001>
    [E:\tao\恩诚工贸\恩诚补丁\USERPDMO.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\UfSYSINF.DLL]  <Ksir_li><1.04.0004>
    [E:\tao\恩诚工贸\恩诚补丁\USERPVO.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\UFU8MINVISrv.dll]  <yy><8.60>
    [D:\WINNT\system32\UFCOMSQL\VoucherCO_PP.dll]  <ufsoft><8.60>
    [D:\WINNT\system32\UFCOMSQL\MakeVouchByReferingPrj.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\PmPub.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\U8Menu.ocx]  <UFSoft><8.51.0815>
    [D:\WINNT\system32\UFCOMSQL\ufmail.dll]  <北京用友软件股份有限公司><8.60.0002>
    [D:\WINNT\system32\UFCOMSQL\UFstRes.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\UFSpGrid.ocx]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\UFEDIT.OCX]  <北京用友软件(集团)有限公司><8, 0, 0, 0>
    [D:\WINNT\system32\UFCOMSQL\UFCOFILE.OCX]  <北京用友软件股份有限公司><8, 0, 0, 1>
    [D:\WINNT\system32\UFCOMSQL\U8VoucherSorterCtl.ocx]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\VoucherControl85.ocx]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\PRINTC~1.OCX]  <用友软件股份有限公司><3, 0, 2, 0>
    [D:\WINNT\system32\UFCOMSQL\UfToolKit85.ocx]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\U8TBCtl.ocx]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\PopMnu.ocx]  <UFSoft><1, 0, 0, 1>
    [D:\WINNT\system32\UFCOMSQL\ScmPublicSrv.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\UFBillComponent.dll]  <北京用友软件股份有限公司><8.60.0001>
    [D:\WINNT\system32\UFCOMSQL\USSTPrintPrj.dll]  <北京用友软件股份有限公司><8.60.0001>
gototop
 

[PID: 1748][D:\WINNT\system32\UFCOMSQL\PortalEventManager.exe]  <UFSoft><8.60.0001>
[PID: 2076][D:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2600.0000>
    [D:\WINNT\system32\WinSC32.dll]  <N/A><N/A>
    [D:\WINNT\system32\WinSC64.dll]  <N/A><N/A>
    [D:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [D:\WINNT\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [D:\WINNT\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [D:\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [D:\WINNT\system32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
[PID: 2548][D:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
[PID: 2176][D:\DOCUME~1\jed\LOCALS~1\Temp\Rar$EX00.172\SREng.exe]  <Smallfrogs Studio><2.0.12.350>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. [Compiled Help Module]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  Error. [D:\WINNT\system32\WScript.exe "%1" %*]
.JS  Error. [D:\WINNT\system32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 

楼主仔细判断我以下的建议,如果有错,请不要相信我。
运行System Repair Engineer,使用“系统修复,文件关联,勾选“全选”点“修复”使所有扩展名都恢复正常。
运行System Repair Engineer,点“启动项目,服务,勾选“隐藏微软服务”选中病毒服务Security Machine Manager,Sample NT Service选择“删除所选服务”“否”最后重启。(每一个逗号隔开的就是一个病毒的服务,请逐一删除)这两项我是修复以下这两项的。其中第一项铁定是个木马,第二项,应该也是,如果你也不知道,建议删除。
Security Machine Manager / Mercha2]
<D:\WINNT\SYSTEM32\RUNDLL32.EXE D:\WINNT\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
Sample NT Service / SampleService]
<D:\WINNT\NTService.exe><N/A>


关闭所有浏览窗口以及一些不必要的程序
运行System Repair Engineer,使用“系统修复,浏览器加载项”来删除以下选项。
NewWebController Class]
{9ACEEE30-143F-471A-AA45-72B061FE7D60} <D:\WINNT\system32\WinSC32.dll, N/A>
[WinSC Class]
{9ACEEE31-1440-471B-AA46-72B061FE7D61} <D:\WINNT\system32\WinSC64.dll, N/A
双击我的电脑--工具---文件夹选项--查看--单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件(推荐)"复选框。在提示您确定更改时,单击“是”
(请按上述步骤操作,不要略过)
然后找到如下文件并删除(如果有的话
D:\WINNT\SYSTEM32\WBEM\IRJIT.DLL
D:\WINNT\NTService.exe
D:\WINNT\system32\WinSC32.dll
D:\WINNT\system32\WinSC64.dll
最后建议楼主为你的系统用户重新设置密码
删除多余的超级用户名。
如果可以,建议安装防火墙。
gototop
 

另外,如果以上要删除的文件无法删除,可以重启再删除,如果还不能删除,可以转到另一系统上删除。当然,如果你是双系统的话。
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT