CPU使用为100%，IE也被劫持，还老出现内存为0的程序错误提示，请高手帮助看下~~

2006-10-22,18:35:53

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <poco><; E:\软件\软件\poco2006\安装\Poco2006.exe>  [N/A]
    <KavStart><"E:\软件\新建文件夹 (2)\金山2007\安装\KAVStart.exe" -startup>  [Kingsoft Corporation]
    <wdfmgr32><C:\WINDOWS\system32\wdfmgr32.exe>  [N/A]
    <RichMedia><C:\WINDOWS\system32\Rundll32.exe  "C:\PROGRA~1\pcast\hbcast.dll",WaitWindows>  [Shanghai Henbang Technology Co., Ltd]
    <run><C:\WINDOWS\system32\rundll32.exe rsrc.dll s>  [N/A]
    <Desktop><C:\WINDOWS\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\Userinit.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{9A0CFC58-5A6F-41ba-9FFE-4320F4F621BA}><C:\WINDOWS\system32\Cnscheck001.dll>  [N/A]
    <{6E44887F-5214-41F2-AB46-4728735C4CC6}><C:\Program Files\Internet Explorer\PLUGINS\system16.sys>  [N/A]
    <{1A404685-7563-4d02-B0F6-58B308A406A9}><c:\program files\real\realplayer\gcxfnczb.dll>  [N/A]
    <{msb66ac4-A6FF-11E0-9A84-00C04FD8DBD8}><C:\WINDOWS\system32\h66ac404.log>  [N/A]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINDOWS\X308.scr>  [Goldshell Digital Media]

==================================
启动文件夹
N/A

==================================
服务
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Kingsoft Personal Firewall Service / KPfwSvc]
  <"E:\软件\新建文件夹 (2)\金山2007\安装\KPfwSvc.EXE"><Kingsoft Corporation>
[Kingsoft Antivirus KWatch Service / KWatchSvc]
  <"E:\软件\新建文件夹 (2)\金山2007\安装\KWatch.EXE"><Kingsoft Corporation>
[Network Logon / NetWorkLogon]
  <rundll32.exe KB8964225.log,start><Microsoft Corporation>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
  <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><CACE Technologies>

==================================
驱动程序
[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc]
  <system32\drivers\ac97intc.sys><Intel Corporation>
[AliIde / AliIde]
  <\SystemRoot\System32\DRIVERS\aliide.sys><N/A>
[Amt Packet / Amt]
  <\SystemRoot\System32\Amt.sys><>
[CmdIde / CmdIde]
  <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[dtscsi / dtscsi]
  <\SystemRoot\System32\Drivers\dtscsi.sys><N/A>
[KNetWch / KNetWch]
  <\??\E:\软件\新建文件夹 (2)\金山2007\安装\KNetWch.SYS><Kingsoft Corporation>
[KWatch3 / KWatch3]
  <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
[MegaIDE / MegaIDE]
  <\SystemRoot\System32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.>
[NetGroup Packet Filter Driver / NPF]
  <system32\drivers\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt]
  <\??\E:\软件\软件\QQ\npkcrypt.sys><N/A>
[nv / nv]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[sptd / sptd]
  <\SystemRoot\System32\Drivers\sptd.sys><N/A>
[TCP/IP Protocol Driver / Tcpip]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>

==================================
浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v8.dll, >
[raObject Class]
  {46F194EB-B7DB-4B7A-BD42-5FF39FD17664} <C:\PROGRA~1\pcast\hbcast.dll, Shanghai Henbang Technology Co., Ltd>
[浩方对战平台]
  {0A155D3C-68E2-4215-A47A-E800A446447A} <E:\本地游戏\CS1.5中文硬盘版\浩方对战平台\GameClient.exe, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\软件\软件\QQ\QQ.EXE, TENCENT>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <E:\软件\软件\QQ\QQIEHelper.dll, N/A>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[ADispX Control]
  {D8600320-952A-46B4-86C8-793EC9F2B2DC} <C:\WINDOWS\system32\uusee\internet\ADispP.ocx, www.uusee.com>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v8.dll, >
[AgentZ Control]
  {04B1A1FE-1554-42F4-9B68-2755D8B3AAE3} <C:\WINDOWS\system32\uusee\internet\AgentZP.ocx, 北京时越网络技术有限公司>
[PSP Control]
  {05B8E10E-CF6B-4897-AD77-DC607C9B3752} <C:\WINDOWS\system32\uusee\internet\PSP.ocx, uusee.com>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[HHCtrl Object]
  {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[raObject Class]
  {46F194EB-B7DB-4B7A-BD42-5FF39FD17664} <C:\PROGRA~1\pcast\hbcast.dll, Shanghai Henbang Technology Co., Ltd>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <E:\软件\软件\QQ\QQIEHelper.dll, N/A>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[RealMedia Control]
  {8B10006D-B561-4FD1-A9CB-1748A66C7492} <C:\WINDOWS\system32\uusee\internet\REALME~1.OCX, uusee>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[卡卡上网安全助手]
  {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[ADispX Control]
  {D8600320-952A-46B4-86C8-793EC9F2B2DC} <C:\WINDOWS\system32\uusee\internet\ADispP.ocx, www.uusee.com>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[OrderStream Class]
  {E65BE01D-8E13-46F8-BBBF-905FFFF4C00D} <E:\软件\软件\poco2006\安装\live\ComOrder.dll, TODO: <公司名>>
[&使用迅雷下载]

<E:\软件\软件小\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5[1].0.0.72 Beta\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5.0.0.72 Beta\Thunder\Thunder\geturl.htm, N/A>
[&使用迅雷下载全部链接]
  <E:\软件\软件小\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5[1].0.0.72 Beta\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5.0.0.72 Beta\Thunder\Thunder\getAllurl.htm, N/A>
[上传到QQ网络硬盘]
  <E:\软件\软件\QQ\AddToNetDisk.htm, N/A>
[使用网际快车下载]
  <C:\PROGRA~1\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\PROGRA~1\FlashGet\jc_all.htm, N/A>
[加入POCO网摘(&K)]
  <http://my.poco.cn/fav/rightClick.php, N/A>
[我的POCO网摘(&O)]
  <http://my.poco.cn/fav/open_myfav.php, N/A>
[添加到QQ自定义面板]
  <E:\软件\软件\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\软件\软件\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <E:\软件\软件\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 480][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 528][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 552][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
[PID: 600][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 612][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 764][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
[PID: 864][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 904][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 944][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 976][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1120][E:\软件\新建文件夹 (2)\金山2007\安装\KWatch.EXE]  [Kingsoft Corporation, 2005, 9, 27, 51]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAVIPC2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 20]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEPlat.DLL]  [Kingsoft Corp., 2006, 5, 30, 59]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEMem.DAT]  [Kingsoft, 2006, 5, 17, 14]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEUnpack.DAT]  [Kingsoft Corp., 2006, 7, 27, 59]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
[PID: 1180][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1648][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.7803]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
[PID: 204][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1512][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [c:\program files\real\realplayer\gcxfnczb.dll]  [, 1, 0, 0, 11]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAVEXT.DLL]  [Kingsoft Corporation, 2005, 8, 5, 16]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.7803]
    [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.7803]
    [C:\WINDOWS\system32\nvshell.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\myztr.dll]  [N/A, N/A]
    [C:\WINDOWS\system\vm_WDM.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\afeqvu55.dll]  [N/A, N/A]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 1556][E:\软件\新建文件夹 (2)\金山2007\安装\KAVStart.exe]  [Kingsoft Corporation, 2006, 9, 7, 210]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAVIPC2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 20]
    [E:\软件\新建文件夹 (2)\金山2007\安装\SvcTimer.DLL]  [Kingsoft Corporation, 2006.7.24.80]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAVPassp.dll]  [Kingsoft Corporation, 2006, 9, 7, 270]
    [E:\软件\新建文件夹 (2)\金山2007\安装\PopSprt3.dll]  [Kingsoft Corporation, 2006, 8, 7, 38]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 1588][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 1664][E:\软件\新建文件夹 (2)\金山2007\安装\KPFW32.EXE]  [Kingsoft Corporation, 2006, 9, 7, 656]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAVIPC2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 20]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAConfig.DLL]  [Kingsoft Corporation, 2006, 8, 23, 38]
    [E:\软件\新建文件夹 (2)\金山2007\安装\FiltList.dll]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAVPassp.DLL]  [Kingsoft Corporation, 2006, 9, 7, 270]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEPlat.DLL]  [Kingsoft Corp., 2006, 5, 30, 59]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEMem.DAT]  [Kingsoft, 2006, 5, 17, 14]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEUnpack.DAT]  [Kingsoft Corp., 2006, 7, 27, 59]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 1776][E:\软件\新建文件夹 (2)\金山2007\安装\KMailMon.EXE]  [Kingsoft Corporation, 2006, 9, 7, 918]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAntiSpm.dll]  [Kingsoft Corporation, 2006, 8, 19, 104]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAVIPC2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 20]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAECall2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 7]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEPlat.DLL]  [Kingsoft Corp., 2006, 5, 30, 59]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEMem.DAT]  [Kingsoft, 2006, 5, 17, 14]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEUnpack.DAT]  [Kingsoft Corp., 2006, 7, 27, 59]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAConfig.DLL]  [Kingsoft Corporation, 2006, 8, 23, 38]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 1896][E:\软件\新建文件夹 (2)\金山2007\安装\KPfwSvc.EXE]  [Kingsoft Corporation, 2005, 9, 5, 28]
[PID: 420][C:\Program Files\Amtium Edu Supplicant\supplicant.exe]  [安腾网络, 3.1.5]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [C:\WINDOWS\system32\packet.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\WINDOWS\system32\WanPacket.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\WINDOWS\system32\wpcap.dll]  [CACE Technologies, 3, 1, 0, 27]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]

[E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 1092][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 1940][C:\WINDOWS\system32\taskmgr.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 300][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 696][E:\软件\软件\QQ\QQ.exe]  [TENCENT, 14, 45, 0, 110]
    [E:\软件\软件\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\BasicCtrlDll.dll]  [Tencent, 0, 3, 3, 6]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [E:\软件\软件\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [E:\软件\软件\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2005, 9, 1, 1]
    [E:\软件\软件\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [E:\软件\软件\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQMainFrame.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\CQQApplication.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\LongConnection.dll]  [tencent, 0, 3, 3, 8]
    [E:\软件\软件\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQAllInOne.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\SCCore.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\QQCustomFace.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [E:\软件\软件\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QRingMng.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [E:\软件\软件\QQ\QQAvatar.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [E:\软件\软件\QQ\BQQApplication.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\QQPlugin.dll]  [N/A, N/A]
    [c:\program files\real\realplayer\gcxfnczb.dll]  [, 1, 0, 0, 11]
    [E:\软件\软件\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [E:\软件\软件\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 4, 0, 200, 32]
    [E:\软件\软件\QQ\ShareFiles.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [E:\软件\软件\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 0, 6, 60]
    [E:\软件\软件\QQ\QQSceneMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  [Macromedia, Inc., 8,0,22,0]
    [E:\软件\软件\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 1476][E:\软件\软件\QQ\TIMPlatfrom.exe]  [tencent, 0, 3, 1, 8]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 2056][E:\软件\软件\QQ\QQ.exe]  [TENCENT, 14, 45, 0, 110]
    [E:\软件\软件\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\BasicCtrlDll.dll]  [Tencent, 0, 3, 3, 6]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [E:\软件\软件\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2005, 9, 1, 1]
    [E:\软件\软件\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [E:\软件\软件\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQMainFrame.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\CQQApplication.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\LongConnection.dll]  [tencent, 0, 3, 3, 8]
    [E:\软件\软件\QQ\QQPlugin.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\ShareFiles.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQAllInOne.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\SCCore.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\QQCustomFace.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [E:\软件\软件\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QRingMng.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [E:\软件\软件\QQ\QQAvatar.dll]  [N/A, N/A]
    [E:\软件\软件\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [E:\软件\软件\QQ\BQQApplication.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  [Macromedia, Inc., 8,0,22,0]
    [E:\软件\软件\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\QQSceneMng.dll]  [N/A, N/A]
    [c:\program files\real\realplayer\gcxfnczb.dll]  [, 1, 0, 0, 11]
    [E:\软件\软件\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [E:\软件\软件\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [E:\软件\软件\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 4, 0, 200, 32]

[E:\软件\软件\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [E:\软件\软件\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 2576][C:\WINDOWS\system32\cmd.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
[PID: 3588][E:\软件\软件小\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5[1].0.0.72 Beta\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5.0.0.72 Beta\Thunder\Thunder\ThunderOrg.exe]  [, 5.0.0.72]
    [E:\软件\软件小\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5[1].0.0.72 Beta\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5.0.0.72 Beta\Thunder\Thunder\UpdateDownload.dll]  [N/A, N/A]
    [E:\软件\软件小\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5[1].0.0.72 Beta\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5.0.0.72 Beta\Thunder\Thunder\download_interface.dll]  [N/A, N/A]
    [E:\软件\软件小\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5[1].0.0.72 Beta\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5.0.0.72 Beta\Thunder\Thunder\log4cplus.dll]  [N/A, N/A]
    [E:\软件\软件小\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5[1].0.0.72 Beta\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5.0.0.72 Beta\Thunder\Thunder\stlport_vc646.dll]  [STLport Consulting, Inc., 4.6.2003.1031]
    [E:\软件\软件小\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5[1].0.0.72 Beta\迅雷快乐无极破线程清爽版『目前最完美的去广告版』 V5.0.0.72 Beta\Thunder\Thunder\historyinfo_manage.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 2504][C:\WINDOWS\system32\Rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [C:\PROGRA~1\pcast\hbcast.dll]  [Shanghai Henbang Technology Co., Ltd, 1, 1, 3, 8]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
[PID: 2552][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
[PID: 3352][C:\WINDOWS\system32\regsvr32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\PROGRA~1\pcast\hbcast.dll]  [Shanghai Henbang Technology Co., Ltd, 1, 1, 3, 8]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
[PID: 3576][C:\WINDOWS\system32\NOTEPAD.EXE]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
[PID: 2128][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\kakatool.dll]  [Beijing Rising Technology Co., Ltd., 2, 0, 0, 9]
    [C:\PROGRA~1\pcast\hbcast.dll]  [Shanghai Henbang Technology Co., Ltd, 1, 1, 3, 8]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAScript.DLL]  [Kingsoft Corporation, 2006, 2, 10, 60]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEPlat.DLL]  [Kingsoft Corp., 2006, 5, 30, 59]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEMem.DAT]  [Kingsoft, 2006, 5, 17, 14]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KAEUnpack.DAT]  [Kingsoft Corp., 2006, 7, 27, 59]
[PID: 2588][C:\Program Files\WinRAR\WinRAR.exe]  [N/A, N/A]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]
[PID: 2660][E:\软件\软件\HijackThis\sreng最新版\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\system32\KB8964225.log]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 9, 7, 132]
    [C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg]  [N/A, N/A]
    [E:\软件\新建文件夹 (2)\金山2007\安装\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [C:\Program Files\Internet Explorer\PLUGINS\system16.sys]  [N/A, N/A]
    [C:\WINDOWS\system32\Cnscheck001.dll]  [N/A, N/A]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
125.91.1.20 localhost
125.91.1.20 www.7322.com
125.91.1.20 www.5566.net
125.91.1.20 www.v111.com
125.91.1.20 www.gjj.cc
125.91.1.20 www.hao123.com
125.91.1.20 hao123.com
125.91.1.20 www.9991.com
125.91.1.20 9991.com
125.91.1.20 www.gjj.cc
61.162.230.31 www.7939.com
61.162.230.31 7939.com
61.162.230.31 59.34.148.98
61.162.230.31 about:blank
61.141.31.11 down.Virussky.com
61.141.31.11 60.191.60.108
61.141.31.11 219.153.20.209
61.141.31.11 forum.ikaka.com
61.141.31.11 bbs.360safe.com
61.141.31.11 www.360safe.com
61.141.31.11 www.piaoxue.com
61.141.31.11 61.129.58.12
61.141.31.11 forum.jiangmin.com
61.141.31.11 luosoft.com
125.91.1.20 post.baidu.com
61.141.31.11 60.191.60.107
61.141.31.11 219.139.58.97
61.141.31.11 59.34.148.81
125.91.1.20 60.191.60.114
125.91.1.20 www.ycdy.com
61.141.31.11 cn.zs.yahoo.com
61.141.31.11 www.znmq.com
61.141.31.11 www.btbbt.com
61.141.31.11 bbs.btbbt.com
125.91.1.20 auto.search.msn.com
125.91.1.20 www.pcav.cn
125.91.1.20 www.cnhx.com.cn
125.91.1.20 btbaicai.com
125.91.1.20 www.btbaicai.com
125.91.1.20 219.239.102.77
61.141.31.11 hz.mop-hz.com
61.141.31.11 www.jacai.com
61.141.31.11 www.gao58.com
61.141.31.11 www.ok538.com
61.141.31.11 www.3000sss.com
61.141.31.11 www.qq658.com
61.141.31.11 www.53679.com
61.141.31.11 www.17587.net
61.141.31.11 bbs.168safe.com

==================================

完毕~~~~~~~~~~~~~~

请高手帮忙看看~~~,谢谢~~

运行(双击)SRENG2，点“启动项目，服务，点“驱动程序”
勾选“隐藏已认证的微软项目”选中病毒服务Amt Packet ，选择“删除服务”
点“设置”选择“否”


运行(双击)SRENG2，点“启动项目，服务，点“Win32服务应用程序”
勾选“隐藏微软服务”选中病毒服务
Network Logon
Remote Packet Capture Protocol v.0
，选择“删除服务”
点“设置”选择“否”

运行SREng2,使用“启动项目”－－注册表－－选中以下的项删除
C:\WINDOWS\system32\wdfmgr32.exe
C:\WINDOWS\system32\Rundll32.exe "C:\PROGRA~1\pcast\hbcast.dll",WaitWindows
C:\WINDOWS\system32\rundll32.exe rsrc.dll s
C:\WINDOWS\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll
C:\WINDOWS\system32\Cnscheck001.dll
C:\Program Files\Internet Explorer\PLUGINS\system16.sys
c:\program files\real\realplayer\gcxfnczb.dll
C:\WINDOWS\system32\h66ac404.log

显示隐藏文件
删除：
C:\WINDOWS\system32\KB8964225.log
C:\Program Files\WinPcap\rpcapd.exe
C\System32\Amt.sys
C:\WINDOWS\system32\myztr.dll
C:\WINDOWS\system\vm_WDM.dll
C:\WINDOWS\system32\afeqvu55.dll
C:\DOCUME~1\xf\LOCALS~1\Temp\ad11.jpg
C:\WINDOWS\system32\wdfmgr32.exe
C:\PROGRA~1\pcast\hbcast.dll
C:\WINDOWS\system32\rsrc.dll s
C:\Program Files\DeskAdTop\
C:\WINDOWS\system32\Cnscheck001.dll
C:\Program Files\Internet Explorer\PLUGINS\system16.sys
c:\program files\real\realplayer\gcxfnczb.dll
C:\WINDOWS\system32\h66ac404.log

运行SREng2,使用：系统修复－－HOSTS－－全部删除

运行SREng2,使用：系统修复－－文件关联－－全选－－修复