1   1  /  1  页   跳转

回 我无邪 大大的贴子帮助

回 我无邪 大大的贴子帮助

首先谢谢您的帮助..
我已经在安全模式下用LSPfix,修复了一下010中的那个quartz32文件,但结果是前面两项说是0 remove 后面两项说有几项修复完成..后来我尝试在安全模式下删除
quartz32.dll 不过删不掉,该文件正在使用...没办法我只好在dos下试着删除
c:\winnt\system32\quartz32.dll 这个文件,成功了.

不过我有个问题想问下,删除后我再进到正常模式,发现winnt目录下 还有个叫 quartz.dll文件的,不知道什么用,我没有动.. 现在整个电脑中 只剩下 一个叫quartz.dll的文件.
这个文件是有害还是无害的呢?  另外.附上按您的指点处理后,我系统的扫描日志: 再次感谢您的帮助!!!

2006-08-21,13:49:06

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Internat.exe><internat.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Synchronization Manager><mobsync.exe /logon>  [Microsoft Corporation]
    <NvCplDaemon><RUNDLL32.EXE NvQTwk,NvCplDaemon initialize>  []
    <SKYNET Personal FireWall><D:\Program Files\SkyNet\FireWall\PFWmain.exe>  [sky.net.cn]
    <KvMonXP><; D:\Program Files\KV2004\KVMonXP.kxp /auto>  [JiangMin Ltd.]
    <KvXP><D:\PROGRA~1\KV2004\KvXP.kxp /ScanBoot /ScanSys>  [Jiangmin Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINNT\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><NVDESK32.DLL>  [NVIDIA Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><(无)>  []

==================================
启动文件夹
服务
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[KVSrvXP / KVSrvXP]
  <D:\PROGRA~1\KV2004\KVSrvXP.exe -Service><JiangMin Ltd.>

==================================
浏览器加载项
[BandIE Class]
  {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.>
[BrowseHelper Class]
  {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <D:\Program Files\KV2004\KvShell.dll, JiangMin Lmt>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[浩方对战平台]
  {0A155D3C-68E2-4215-A47A-E800A446447A} <D:\Program Files\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <D:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[江民杀毒工具栏]
  {B5A34A93-D538-43A7-8371-864CB6148D12} <D:\Program Files\KV2004\KvShell.dll, JiangMin Lmt>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[百度超级搜霸]
  {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.>
[XLink Class]
  {18F57D30-EF36-4C0E-9343-7BFA6DF79B4A} <C:\WINNT\system32\quartz32.dll, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[上传到QQ网络硬盘]
  <E:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
  <D:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <D:\Program Files\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
  <E:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <E:\Program Files\Tencent\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 140][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 164][\??\C:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\C:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6714>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 212][C:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.6700>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
    [C:\WINNT\system32\dmserver.dll]  <VERITAS Software Corp.><2195.6605.297.3>
[PID: 224][C:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6695>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 404][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 432][C:\WINNT\system32\spoolsv.exe]  <Microsoft Corporation><5.00.2195.6659>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 472][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 496][D:\PROGRA~1\KV2004\KVSrvXP.exe]  <JiangMin Ltd.><8.0.0.300>
    [D:\PROGRA~1\KV2004\UpdateX.dll]  <JiangMin Ltd.><8.0.0.300>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
    [D:\Program Files\KV2004\KVEnhD.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KvSPI.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVEnhP.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVEnhC.DLL]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVEnhO.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVEnhS.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVEnhJ.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVExtCab.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVExtEml.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVExtLZH.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KvExtRar.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KvExtZip.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\KVEnhK.dll]  <JiangMin Ltd.><8.0.0.300>
[PID: 536][C:\WINNT\system32\regsvc.exe]  <Microsoft Corporation><5.00.2195.6701>
[PID: 576][C:\WINNT\system32\MSTask.exe]  <Microsoft Corporation><4.71.2195.6704>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 620][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 652][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 756][C:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3700.6690>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
    [D:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [D:\Program Files\KV2004\KvShell.dll]  <JiangMin Lmt><8.0.0.300>
    [D:\Program Files\KV2004\UpdateX.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\lang\Kvxp0804.lng]  <N/A><N/A>
    [D:\Program Files\KV2004\KVComm.dll]  <N/A><N/A>
    [C:\PROGRA~1\baidu\bar\baidubar.dll]  <Baidu.com, Inc.><2, 0, 2, 99>
    [D:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\WINNT\system32\msdmo.dll]  <N/A><N/A>
    [d:\Program Files\TIM GV Decoder V1.2\TTL2DecodeFilter.dll]  <N/A><N/A>
    [d:\Program Files\TIM GV Decoder V1.2\TIM1DecodeFilter.dll]  <N/A><N/A>
    [d:\Program Files\TIM GV Decoder V1.2\Vid1DecodeFilter.dll]  <N/A><N/A>
    [C:\WINNT\system32\tssoft32.acm]  <DSP GROUP, INC.><1.01>
    [C:\WINNT\system32\tsd32.dll]  <N/A><N/A>
    [D:\Program Files\KV2004\GUIExt.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
    [D:\Program Files\KV2004\KVEnhP.dll]  <JiangMin Ltd.><8.0.0.300>
[PID: 836][D:\Program Files\SkyNet\FireWall\PFWmain.exe]  <sky.net.cn><2.5.0.120>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 852][C:\WINNT\system32\internat.exe]  <Microsoft Corporation><5.00.2920.0000>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
[PID: 744][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2800.1106>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>
    [C:\PROGRA~1\baidu\bar\baidubar.dll]  <Baidu.com, Inc.><2, 0, 2, 99>
    [D:\Program Files\KV2004\KvShell.dll]  <JiangMin Lmt><8.0.0.300>
    [D:\Program Files\KV2004\UpdateX.dll]  <JiangMin Ltd.><8.0.0.300>
    [D:\Program Files\KV2004\lang\Kvxp0804.lng]  <N/A><N/A>
    [D:\Program Files\KV2004\KVComm.dll]  <N/A><N/A>
    [D:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\WINNT\system32\macromed\flash\Flash.ocx]  <Macromedia, Inc.><7,0,19,0>
    [C:\WINNT\system32\WBJJU.IME]  <北京六合源软件技术有限公司><1, 0, 0, 0>
    [C:\WINNT\system32\WbCodeU.dll]  <><1, 0, 0, 0>
[PID: 456][E:\Downloads\sreng\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINNT\system32\NVDESK32.DLL]  <NVIDIA Corporation><5.13.01.1241>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

最后编辑2006-08-21 14:03:38.750000000
分享到:
gototop
 

请问大大,还有什么劫挂软件驻留吗?

您费心再帮我看看
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT