瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 求助..生成好多好多DESKTOP文件.删了又来.怎么办

1   1  /  1  页   跳转

求助..生成好多好多DESKTOP文件.删了又来.怎么办

求助..生成好多好多DESKTOP文件.删了又来.怎么办

求助..生成好多好多DESKTOP文件.删了又来.怎么办

附带个日志
2006-06-14,17:23:41

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 98 SE  -

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><ctfmon.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <SystemTray><SysTray.Exe>  [Microsoft Corporation]
    <KavStart><"C:\KAV2006\KAVStart.exe" -startup>  [Kingsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
    <KWatch9x><C:\KAV2006\KWatch9x.EXE>  [Kingsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []

==================================
启动文件夹
服务

==================================
浏览器加载项
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\PROGRAM FILES\TENCENT\QQ\QQ.EXE, TENCENT>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\DOWNLOADED PROGRAM FILES\OL2005.DLL, Beijing Rising Technology Co., Ltd.>
[添加到QQ自定义面板]
  <C:\PROGRAM FILES\TENCENT\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\PROGRAM FILES\TENCENT\QQ\AddEmotion.htm, N/A>
[上传到QQ网络硬盘]
  <C:\PROGRAM FILES\TENCENT\QQ\AddToNetDisk.htm, N/A>
[用QQ彩信发送该图片]
  <C:\PROGRAM FILES\TENCENT\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 4294944377][C:\WINDOWS\SYSTEM\MPREXE.EXE]  <Microsoft Corporation><4.10.1998>
    [C:\KAV2006\KAEUNPACK.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
    [C:\KAV2006\KAEMEM.DAT]  <Kingsoft><2006, 4, 12, 13>
    [C:\KAV2006\KAEPLAT.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
    [C:\KAV2006\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
[PID: 4294935541][C:\KAV2006\KWATCH9X.EXE]  <Kingsoft Corporation><2005, 4, 24, 31>
[PID: 4294875725][C:\WINDOWS\SYSTEM\PSTORES.EXE]  <Microsoft Corporation><5.00.1877.3>
    [C:\WINDOWS\SYSTEM\IGFXDEV.DLL]  <Intel Corporation><3,0,0,2104>
    [C:\WINDOWS\SYSTEM\IGFXSRVC.DLL]  <Intel Corporation><3,0,0,2104>
    [C:\WINDOWS\SYSTEM\IGFXRES.DLL]  <Intel Corporation><3,0,0,2104>
    [C:\WINDOWS\SYSTEM\HCCUTILS.DLL]  <Intel Corporation><3,0,0,2104>
    [C:\PROGRAM FILES\WINRAR\RAREXT.DLL]  <N/A><N/A>
    [C:\KAV2006\KMAILOEBAND.DLL]  <N/A><2006, 5, 19, 118>
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 4294853729][C:\WINDOWS\EXPLORER.EXE]  <Microsoft Corporation><4.72.3110.1>
    [C:\WINDOWS\SYSTEM\ESPI11.DLL]  <DYWT><1, 1, 0, 0>
[PID: 4294892377][C:\WINDOWS\SYSTEM\RPCSS.EXE]  <Microsoft Corporation><4.71.2900>
[PID: 4294777477][C:\WINDOWS\SYSTEM\SYSTRAY.EXE]  <Microsoft Corporation><4.10.2222>
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\KAV2006\KMAILOEBAND.DLL]  <N/A><2006, 5, 19, 118>
    [C:\WINDOWS\SYSTEM\ESPI11.DLL]  <DYWT><1, 1, 0, 0>
    [C:\KAV2006\KAVPASSP.DLL]  <Kingsoft Corporation><2006, 6, 7, 252>
    [C:\KAV2006\POPSPRT3.DLL]  <Kingsoft Corporation><2005, 12, 6, 30>
    [C:\KAV2006\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
[PID: 4294789989][C:\KAV2006\KAVSTART.EXE]  <Kingsoft Corporation><2006, 4, 10, 196>
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 4294813717][C:\WINDOWS\SYSTEM\CTFMON.EXE]  <Microsoft Corporation><1.00.2409.7 built by: Lab06_N>
    [C:\KAV2006\KMAILOEBAND.DLL]  <N/A><2006, 5, 19, 118>
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\KAV2006\KACONFIG.DLL]  <Kingsoft Corporation><2005, 3, 23, 30>
    [C:\KAV2006\KAEUNPACK.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
    [C:\KAV2006\KAEMEM.DAT]  <Kingsoft><2006, 4, 12, 13>
    [C:\KAV2006\KAEPLAT.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
    [C:\KAV2006\KAECALL2.DLL]  <Kingsoft Corporation><2004, 12, 28, 7>
    [C:\KAV2006\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
    [C:\KAV2006\KANTISPM.DLL]  <N/A><1, 0, 0, 2>
[PID: 4294727233][C:\KAV2006\KMAILMON.EXE]  <Kingsoft Corporation><2006, 4, 12, 106>
    [C:\WINDOWS\SYSTEM\IALMDD.DLL]  <Intel Corporation><4.13.10.3510>
    [C:\WINDOWS\SYSTEM\IALMRDD.DLL]  <Intel Corporation><4.13.10.3510>
    [C:\WINDOWS\SYSTEM\IALMD32.DLL]  <Intel Corporation><4.13.10.3510>
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\KAV2006\KMAILOEBAND.DLL]  <N/A><2006, 5, 19, 118>
[PID: 4294675061][C:\WINDOWS\SYSTEM\DDHELP.EXE]  <Microsoft Corporation><4.09.00.0900>
    [C:\WINDOWS\SYSTEM\ESPI11.DLL]  <DYWT><1, 1, 0, 0>
    [C:\WINDOWS\SYSTEM\NETBIOS.DLL]  <N/A><N/A>
    [C:\ORACLE\ORA81\BIN\ORANTCP8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORACLIENT8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORASQL8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORACOMMON8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORAGENERIC8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORAPLS8.DLL]  <Oracle Corporation><8>
    [C:\ORACLE\ORA81\BIN\ORASLAX8.DLL]  <Oracle Corporation><8>
    [C:\ORACLE\ORA81\BIN\ORANL8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORAN8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORATRACE8.DLL]  <N/A><N/A>
    [C:\ORACLE\ORA81\BIN\ORANNMS8.DLL]  <N/A><N/A>
    [C:\ORACLE\ORA81\BIN\ORANNDS8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORANTNS8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORANCDS8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORANONAME8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORANHOST8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORANLDAP8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORALDAPCLNT8.DLL]  <Oracle Corporation><8.1.5.0.0>
    [C:\ORACLE\ORA81\BIN\ORANNZSBB8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORANRO8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORANCRYPT8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORAWTC8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORAVSN8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [C:\ORACLE\ORA81\BIN\ORACORE8.DLL]  <Oracle Corporation><8.1.3.0.0>
    [C:\ORACLE\ORA81\BIN\ORANLS8.DLL]  <Oracle Corporation><8.1.6.0.0>
    [D:\裕利业务系统[GBS]\PBO8490.DLL]  <Sybase Inc.><9.0.1.7096>
    [C:\ORACLE\ORA81\BIN\OCI.DLL]  <Oracle Corporation><8.1.6.0.0>
    [D:\裕利业务系统[GBS]\PBDWE90.DLL]  <Sybase Inc.><9.0.1.7096>
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\KAV2006\KMAILOEBAND.DLL]  <N/A><2006, 5, 19, 118>
[PID: 4294697385][D:\裕利业务系统[GBS]\GBS.EXE]  <N/A><N/A>
    [D:\裕利业务系统[GBS]\PBVM90.DLL]  <Sybase Inc.><9.0.1.7096>
    [D:\裕利业务系统[GBS]\LIBJCC.DLL]  <N/A><N/A>
    [C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH8.OCX]  <Macromedia, Inc.><8,0,22,0>
    [C:\KAV2006\KASCRIPT.DLL]  <Kingsoft Corporation><2006, 2, 10, 60>
    [C:\KAV2006\KAEUNPACK.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
    [C:\KAV2006\KAEMEM.DAT]  <Kingsoft><2006, 4, 12, 13>
    [C:\KAV2006\KAEPLAT.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
    [C:\WINDOWS\SYSTEM\ESPI11.DLL]  <DYWT><1, 1, 0, 0>
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\KAV2006\KMAILOEBAND.DLL]  <N/A><2006, 5, 19, 118>
[PID: 4294606817][C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2800.1106>
    [C:\WINDOWS\SYSTEM\ESPI11.DLL]  <DYWT><1, 1, 0, 0>
    [C:\KAV2006\KASOCKET.DLL]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\KAV2006\KMAILOEBAND.DLL]  <N/A><2006, 5, 19, 118>
[PID: 4294711081][D:\SRENG2\SRENG2\SRENG.EXE]  <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [C:\WINDOWS\winhlp32.exe %1]
.INI  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF  OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.VBS  OK. [C:\WINDOWS\WScript.exe "%1" %*]
.JS  OK. [C:\WINDOWS\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
最后编辑2006-06-14 18:53:46
分享到:
gototop
 

希望大家帮帮忙..
gototop
 

大家帮忙好么
gototop
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SystemTray><SysTray.Exe> [Microsoft Corporation]
虾米玩意~~~
gototop
 

- .-  我也不晓的呀...
gototop
 

有微软签名
gototop
 

啊..没有人知道么..汗
gototop
 

......确实没见过这样的情况...系统干净的可以..
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT