瑞星卡卡电脑诊断日志 v1.30 (2007-8-2 14:49:25)  北京瑞星科技股份有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      ACS
        [AM] 1. c:\windows\system32\acs.exe


      aspnet_state
        [A ] 2. c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe


      Ati HotKey Poller
        [AM] 3. c:\windows\system32\ati2evxx.exe


      ccEvtMgr
        [AM] 4. c:\program files\common files\symantec shared\ccevtmgr.exe


      ccPwdSvc
        [A ] 5. c:\program files\common files\symantec shared\ccpwdsvc.exe


      ccSetMgr
        [AM] 6. c:\program files\common files\symantec shared\ccsetmgr.exe


      CeEPwrSvc
        [AM] 7. c:\program files\toshiba\power management\ceepwrsvc.exe


      CFSvcs
        [AM] 8. c:\program files\toshiba\configfree\cfsvcs.exe


      DVD-RAM_Service
        [AM] 9. c:\windows\system32\dvdramsv.exe


      kdtd
        [AM] 10. c:\program files\fyoy\piyi.dll


      navapsvc
        [AM] 11. c:\program files\norton antivirus\navapsvc.exe


      ose
        [A ] 12. c:\program files\common files\microsoft shared\source engine\ose.exe


      SAVScan
        [AM] 13. c:\program files\norton antivirus\savscan.exe


      SBService
        [A ] 14. c:\program files\common files\symantec shared\script blocking\sbserv.exe


      SNDSrvc
        [A ] 15. c:\program files\common files\symantec shared\sndsrvc.exe


      SymWSC
        [AM] 16. c:\program files\common files\symantec shared\security center\symwsc.exe


      ttvf
        [AM] 17. c:\program files\ooqa\yyak.dll




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      AgereSoftModem
        [A ] 18. c:\windows\system32\drivers\agrsm.sys


      ALCXSENS
        [A ] 19. c:\windows\system32\drivers\alcxsens.sys


      ALCXWDM
        [A ] 20. c:\windows\system32\drivers\alcxwdm.sys


      ApfiltrService
        [A ] 21. c:\windows\system32\drivers\apfiltr.sys


      AR5211
        [A ] 22. c:\windows\system32\drivers\ar5211.sys


      atiide
        [A ] 23. c:\windows\system32\drivers\atiide.sys


      caboagp
        [A ] 24. c:\windows\system32\drivers\atisgkaf.sys


      DKbFltr
        [A ] 25. c:\windows\system32\drivers\dkbfltr.sys


      drvmcdb
        [A ] 26. c:\windows\system32\drivers\drvmcdb.sys


      EMSCR
        [A ] 27. c:\windows\system32\drivers\ems7sk.sys


      EPOWER
        [A ] 28. c:\windows\system32\drivers\hkdrv.sys


      ESDCR
        [A ] 29. c:\windows\system32\drivers\esd7sk.sys


      ESMCR
        [A ] 30. c:\windows\system32\drivers\esm7sk.sys


      InCDPass
        [A ] 31. c:\windows\system32\drivers\incdpass.sys


      InCDRm
        [A ] 32. c:\windows\system32\drivers\incdrm.sys


      MDC8021X
        [A ] 33. c:\windows\system32\drivers\mdc8021x.sys


      NAVENG
        [A ] 34. c:\progra~1\common~1\symant~1\virusd~1\20070725.023\naveng.sys


      NAVEX15
        [A ] 35. c:\progra~1\common~1\symant~1\virusd~1\20070725.023\navex15.sys


      Netdevio
        [A ] 36. c:\windows\system32\drivers\netdevio.sys


      npkcrypt
        [A ] 37. d:\program files\tencent\npkcrypt.sys


      ojpfjep
        [A ] 38. c:\windows\system32\drivers\ojpfjep.sys


      Pfc
        [A ] 39. c:\windows\system32\drivers\pfc.sys


      PxHelp20
        [A ] 40. c:\windows\system32\drivers\pxhelp20.sys


      QKeyService
        [A ] 41. c:\windows\system32\keycrypt.sys


      RsAntiSpyware
        [A ] 42. c:\windows\system32\drivers\rsboot.sys


      RTL8023
        [A ] 43. c:\windows\system32\drivers\rtlnic51.sys


      SAVRT
        [A ] 44. c:\program files\norton antivirus\savrt.sys


      SAVRTPEL
        [A ] 45. c:\program files\norton antivirus\savrtpel.sys


      Secdrv
        [A ] 46. c:\windows\system32\drivers\secdrv.sys


      SrvcEKIOMngr
        [A ] 47. c:\windows\system32\drivers\ekiomngr.sys


      SrvcEPECioctl
        [A ] 48. c:\windows\system32\drivers\ecioctl.sys


      SrvcEPIOMngr
        [A ] 49. c:\windows\system32\drivers\epiomngr.sys


      SrvcSSIOMngr
        [A ] 50. c:\windows\system32\drivers\ssiomngr.sys


      SrvcTPIOMngr
        [A ] 51. c:\windows\system32\drivers\tpiomngr.sys


      SymEvent
        [A ] 52. c:\program files\symantec\symevent.sys


      SYMREDRV
        [A ] 53. c:\windows\system32\drivers\symredrv.sys


      SYMTDI
        [A ] 54. c:\windows\system32\drivers\symtdi.sys


      TBiosDrv
        [A ] 55. c:\windows\system32\drivers\tbiosdrv.sys


      TesSafe
        [A ] 56. c:\windows\system32\tessafe.sys


      ZSMC301b
        [A ] 57. c:\windows\system32\drivers\usbvm31b.sys




  + 文件系统驱动
    + HKLM\System\CurrentControlSet\Services
      drvnddm
        [A ] 58. c:\windows\system32\drivers\drvnddm.sys


      InCDFs
        [A ] 59. c:\windows\system32\drivers\incdfs.sys


      meiudf
        [A ] 60. c:\windows\system32\drivers\meiudf.sys


      sscdbhk5
        [A ] 61. c:\windows\system32\drivers\sscdbhk5.sys


      ssrtln
        [A ] 62. c:\windows\system32\drivers\ssrtln.sys


      tfsnboio
        [A ] 63. c:\windows\system32\dla\tfsnboio.sys


      tfsncofs
        [A ] 64. c:\windows\system32\dla\tfsncofs.sys


      tfsndrct
        [A ] 65. c:\windows\system32\dla\tfsndrct.sys


      tfsndres
        [A ] 66. c:\windows\system32\dla\tfsndres.sys


      tfsnifs
        [A ] 67. c:\windows\system32\dla\tfsnifs.sys


      tfsnopio
        [A ] 68. c:\windows\system32\dla\tfsnopio.sys


      tfsnpool
        [A ] 69. c:\windows\system32\dla\tfsnpool.sys


      tfsnudf
        [A ] 70. c:\windows\system32\dla\tfsnudf.sys


      tfsnudfa
        [A ] 71. c:\windows\system32\dla\tfsnudfa.sys




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}
        [A ] 72. c:\program files\norton antivirus\navshext.dll


      {EF99BD32-C1FB-11D2-892F-0090271D4F88}
        [A ] 73. c:\program files\yahoo!\companion\installs\cpn\yt.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {01443AEC-0FD1-40fd-9C87-E93D1494C233}
        [AM] 74. d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll


      {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3}
        [AM] 75. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll


      {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
        [AM] 76. c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx


      {54EBD53A-9BC1-480B-966A-843A333CA162}
        [A ] 77. d:\program files\tencent\qqiehelper.dll


      {5CA3D70E-1895-11CF-8E15-001234567890}
        [AM] 78. c:\windows\system32\dla\tfswshx.dll




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      application/octet-stream
        [AM] 79. c:\windows\system32\mscoree.dll


      application/x-complus
        [AM] 79. c:\windows\system32\mscoree.dll


      application/x-msdownload
        [AM] 79. c:\windows\system32\mscoree.dll


      text/xml
        [A ] 80. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      KuGoo3
        [A ] 81. c:\program files\kugoo3\inextend\kugoo3downxcontrol.ocx



    + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
      {4b218e3e-bc98-4770-93d3-2731b9329278}
        [A ] 82. c:\windows\inf\ie.inf



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {7D4D6379-F301-4311-BEBA-E26EB0561882}
        [AM] 83. c:\program files\common files\ahead\lib\nerodigitalext.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 84. c:\windows\system32\hticons.dll


      CePMTab Property Sheet
        [A ] 85. c:\windows\system32\cepmtab.dll


      TouchPad Property Sheet
        [A ] 86. c:\windows\system32\tpprop.dll


      RecordNow! SendToExt
        [A ] 87. c:\program files\sonic\recordnow!\shlext.dll


      DriveLetterAccess
        [AM] 78. c:\windows\system32\dla\tfswshx.dll


      Web Folders
        [A ] 88. c:\program files\common files\microsoft shared\web folders\msonsext.dll


      Microsoft Office HTML Icon Handler
        [A ] 89. c:\program files\microsoft office\office11\msohev.dll


      Fusion Cache
        [AM] 79. c:\windows\system32\mscoree.dll


      WinRAR shell extension
        [A ] 90. c:\program files\winrar\rarext.dll


      Yahoo Trojan Cleanner
        [A ] 91. d:\program files\3721\ske\contmenu.dll


      NeroDigitalIconHandler
        [AM] 83. c:\program files\common files\ahead\lib\nerodigitalext.dll


      NeroDigitalPropSheetHandler
        [AM] 83. c:\program files\common files\ahead\lib\nerodigitalext.dll




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      runeip
        [AM] 92. d:\program files\rising\antispyware\runiep.exe


      TkBellExe
        [AM] 93. c:\program files\common files\real\update_ob\realsched.exe



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
      KKDelay
        [A ] 94. d:\program files\rising\antispyware\runonce.exe




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 95. c:\windows\system32\kknative.exe




  + 映像劫持
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 96. c:\program files\microsoft office\office11\msohtmed.exe


      htmlfile\open\Command
        [AM] 97. d:\program files\tencent\tt\ttraveler.exe


      htmlfile\Print\Command
        [A ] 96. c:\program files\microsoft office\office11\msohtmed.exe


      htmlfile\TencentTraveler\Command
        [AM] 97. d:\program files\tencent\tt\ttraveler.exe



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 96. c:\program files\microsoft office\office11\msohtmed.exe


      htmlfile\open\Command
        [AM] 97. d:\program files\tencent\tt\ttraveler.exe


      htmlfile\Print\Command
        [A ] 96. c:\program files\microsoft office\office11\msohtmed.exe


      htmlfile\TencentTraveler\Command
        [AM] 97. d:\program files\tencent\tt\ttraveler.exe



    + HKCR\.mp3
      NeroShowTime.Files7.mp3\play\Command
        [A ] 98. c:\program files\nero\nero 7\nero showtime\showtime.exe





+ 其他自启动项目
  + C:\WINDOWS\Tasks
    Norton AntiVirus - Scan my computer - jaleo.job
      [A ] 99. c:\program files\norton antivirus\navw32.exe


    Symantec NetDetect.job
      [A ] 100. c:\program files\symantec\liveupdate\ndetect.exe




+ 正在运行的进程
  + 00000108(264) spoolsv.exe

  + 00000190(400) Ras.exe
    00400000[0013F000]
      [ M] 101. d:\program files\rising\antispyware\ras.exe


    10000000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00EE0000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll


    00F30000[000A3000]
      [ M] 104. d:\program files\rising\antispyware\rasgui.dll




[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; TencentTraveler ; .NET CLR 1.1.4322)

01630000[0001B000]
      [ M] 105. d:\program files\rising\antispyware\ieprot.dll


    02700000[0002F000]
      [ M] 106. d:\program files\rising\antispyware\engine.dll


    018E0000[00012000]
      [ M] 107. d:\program files\rising\antispyware\zip.dll



  + 00000230(560) smss.exe

  + 00000260(608) csrss.exe

  + 0000027c(636) winlogon.exe
    72D10000[00008000]
      [ M] 108. c:\windows\system32\msacm32.drv



  + 000002a8(680) services.exe

  + 000002b4(692) lsass.exe

  + 00000370(880) Ati2evxx.exe
    00400000[00064000]
      [AM] 3. c:\windows\system32\ati2evxx.exe


    10000000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00C10000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll



  + 00000380(896) svchost.exe

  + 000003a4(932) SAVScan.exe
    00400000[00030000]
      [AM] 13. c:\program files\norton antivirus\savscan.exe


    6FA60000[00037000]
      [ M] 109. c:\program files\norton antivirus\savrt32.dll


    6ACC0000[000A6000]
      [ M] 110. c:\program files\common files\symantec shared\ccscan.dll


    69000000[0001A000]
      [ M] 111. c:\program files\common files\symantec shared\ecmldr32.dll


    7C080000[00077000]
      [ M] 112. c:\windows\system32\msvcp70.dll


    7C000000[00054000]
      [ M] 113. c:\windows\system32\msvcr70.dll


    69040000[00045000]
      [ M] 114. c:\program files\common files\symantec shared\virusdefs\20070725.023\ecmsvr32.dll


    69100000[000DE000]
      [ M] 115. c:\program files\common files\symantec shared\virusdefs\20070725.023\navex32a.dll


    692C0000[0001E000]
      [ M] 116. c:\program files\common files\symantec shared\virusdefs\20070725.023\naveng32.dll


    6FAA0000[0001D000]
      [ M] 117. c:\program files\norton antivirus\navap32.dll


    69820000[0000E000]
      [ M] 118. c:\program files\common files\symantec shared\decomposers\decsdk.dll


    69AF0000[0000C000]
      [ M] 119. c:\program files\common files\symantec shared\decomposers\dec2.dll


    699D0000[0000C000]
      [ M] 120. c:\program files\common files\symantec shared\decomposers\dec2id.dll


    69830000[00039000]
      [ M] 121. c:\program files\common files\symantec shared\decomposers\dec2zip.dll


    698F0000[00016000]
      [ M] 122. c:\program files\common files\symantec shared\decomposers\dec2ss.dll


    69A10000[00016000]
      [ M] 123. c:\program files\common files\symantec shared\decomposers\dec2gzip.dll


    69A90000[00012000]
      [ M] 124. c:\program files\common files\symantec shared\decomposers\dec2cab.dll


    699B0000[00016000]
      [ M] 125. c:\program files\common files\symantec shared\decomposers\dec2lha.dll


    69930000[00024000]
      [ M] 126. c:\program files\common files\symantec shared\decomposers\dec2rar.dll


    69AC0000[0000F000]
      [ M] 127. c:\program files\common files\symantec shared\decomposers\dec2arj.dll


    69A70000[00018000]
      [ M] 128. c:\program files\common files\symantec shared\decomposers\dec2exe.dll


    69880000[00015000]
      [ M] 129. c:\program files\common files\symantec shared\decomposers\dec2tnef.dll


    699A0000[0000D000]
      [ M] 130. c:\program files\common files\symantec shared\decomposers\dec2lz.dll


    69AD0000[0001B000]
      [ M] 131. c:\program files\common files\symantec shared\decomposers\dec2amg.dll


    698E0000[0000F000]
      [ M] 132. c:\program files\common files\symantec shared\decomposers\dec2tar.dll


    69910000[00014000]
      [ M] 133. c:\program files\common files\symantec shared\decomposers\dec2rtf.dll


    698A0000[00036000]
      [ M] 134. c:\program files\common files\symantec shared\decomposers\dec2text.dll



  + 000003b4(948) svchost.exe

  + 00000420(1056) svchost.exe
    50E60000[0000C000]
      [ M] 135. c:\windows\system32\wups2.dll



  + 00000464(1124) ACS.exe
    00400000[00009000]
      [AM] 1. c:\windows\system32\acs.exe


    10000000[00065000]
      [ M] 136. c:\windows\system32\athcfg11.dll


    00E60000[000D2000]
      [ M] 137. c:\windows\system32\aegise5.dll



  + 000004b0(1200) svchost.exe

  + 000004d0(1232) svchost.exe

  + 000004e4(1252) svchost.exe
    10000000[00042000]
      [AM] 17. c:\program files\ooqa\yyak.dll


    00A80000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00DF0000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll


    00E30000[0002E000]
      [ M] 138. c:\program files\ooqa\ddfp.dll



  + 00000544(1348) svchost.exe

  + 000005dc(1500) SymWSC.exe
    00400000[0004E000]
      [AM] 16. c:\program files\common files\symantec shared\security center\symwsc.exe


    6AE90000[0001B000]
      [ M] 139. c:\program files\common files\symantec shared\ccvrtrst.dll


    7C080000[00077000]
      [ M] 112. c:\windows\system32\msvcp70.dll


    7C000000[00054000]
      [ M] 113. c:\windows\system32\msvcr70.dll


    10000000[00022000]
      [ M] 140. c:\program files\common files\symantec shared\security center\wschlpr.dll


    00E20000[00034000]
      [ M] 141. c:\program files\common files\symantec shared\security center\sscnis7.dll


    00E70000[0002E000]
      [ M] 142. c:\program files\common files\symantec shared\security center\sscnis56.dll


    00EB0000[0002D000]
      [ M] 143. c:\program files\common files\symantec shared\security center\sscnav.dll


    00F10000[00012000]
      [ M] 144. c:\program files\norton antivirus\navapscr.dll


    7C120000[00018000]
      [ M] 145. c:\windows\system32\atl70.dll


    6FA60000[00037000]
      [ M] 109. c:\program files\norton antivirus\savrt32.dll


    00F50000[00013000]
      [ M] 146. c:\program files\norton antivirus\naverror.dll


    01780000[000D8000]
      [ M] 147. c:\program files\norton antivirus\navopts.dll


    01860000[0000B000]
      [ M] 148. c:\program files\norton antivirus\n32exclu.dll


    01870000[0007B000]
      [ M] 149. c:\program files\norton antivirus\s32navo.dll


    01A80000[00028000]
      [ M] 150. c:\program files\symantec\liveupdate\netdetectcontroller.dll



  + 00000624(1572) TTraveler.exe
    00400000[00340000]
      [AM] 97. d:\program files\tencent\tt\ttraveler.exe


    10000000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00F20000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll

022A0000[0002E000]
      [ M] 151. d:\program files\tencent\tt\plugins\qqfloatbar\qqfloatbar4tt2.dll


    022E0000[0002F000]
      [ M] 152. d:\program files\tencent\tt\plugins\tweather\tweather.dll


    027C0000[0001B000]
      [ M] 105. d:\program files\rising\antispyware\ieprot.dll


    02340000[0004D000]
      [ M] 153. d:\program files\tencent\tt\ttnetfavor.dll


    01370000[0001E000]
      [ M] 154. c:\program files\common files\symantec shared\script blocking\scrauth.dll


    013A0000[00020000]
      [ M] 155. c:\program files\common files\symantec shared\script blocking\scrblock.dll


    30000000[002EF000]
      [ M] 156. c:\windows\system32\macromed\flash\flash9d.ocx


    72D10000[00008000]
      [ M] 108. c:\windows\system32\msacm32.drv



  + 0000063c(1596) ccSetMgr.exe
    00400000[0003A000]
      [AM] 6. c:\program files\common files\symantec shared\ccsetmgr.exe


    7C080000[00077000]
      [ M] 112. c:\windows\system32\msvcp70.dll


    7C000000[00054000]
      [ M] 113. c:\windows\system32\msvcr70.dll


    6AE90000[0001B000]
      [ M] 139. c:\program files\common files\symantec shared\ccvrtrst.dll



  + 00000660(1632) runiep.exe
    00400000[00012000]
      [AM] 92. d:\program files\rising\antispyware\runiep.exe


    00C00000[0001B000]
      [ M] 105. d:\program files\rising\antispyware\ieprot.dll


    10000000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00DB0000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll



  + 00000670(1648) realsched.exe
    00400000[0002F000]
      [AM] 93. c:\program files\common files\real\update_ob\realsched.exe


    10000000[0001B000]
      [ M] 105. d:\program files\rising\antispyware\ieprot.dll


    00F10000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00F90000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll



  + 0000067c(1660) ccEvtMgr.exe
    00400000[0003E000]
      [AM] 4. c:\program files\common files\symantec shared\ccevtmgr.exe


    7C080000[00077000]
      [ M] 112. c:\windows\system32\msvcp70.dll


    7C000000[00054000]
      [ M] 113. c:\windows\system32\msvcr70.dll


    6AE90000[0001B000]
      [ M] 139. c:\program files\common files\symantec shared\ccvrtrst.dll


    6AE70000[00015000]
      [ M] 157. c:\program files\common files\symantec shared\ccsetevt.dll


    10000000[0003E000]
      [ M] 158. c:\program files\norton antivirus\navevent.dll



  + 000006b8(1720) ctfmon.exe
    10000000[0001B000]
      [ M] 105. d:\program files\rising\antispyware\ieprot.dll


    00AD0000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00B50000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll



  + 00000700(1792) CeEPwrSvc.exe
    00400000[00009000]
      [AM] 7. c:\program files\toshiba\power management\ceepwrsvc.exe



  + 00000704(1796) CFSvcs.exe
    00400000[0000A000]
      [AM] 8. c:\program files\toshiba\configfree\cfsvcs.exe


    10000000[00034000]
      [ M] 159. c:\program files\toshiba\configfree\ndsapi.dll


    00370000[00013000]
      [ M] 160. c:\program files\toshiba\configfree\ipadrset.dll



  + 00000730(1840) DVDRAMSV.exe
    00400000[0001D000]
      [AM] 9. c:\windows\system32\dvdramsv.exe



  + 0000074c(1868) svchost.exe
    10000000[0007C000]
      [AM] 10. c:\program files\fyoy\piyi.dll


    00A90000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00DF0000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll


    00E30000[00024000]
      [ M] 161. c:\program files\fyoy\undn.dll


    00E70000[0003C000]
      [ M] 162. c:\program files\fyoy\leue.dll



  + 00000770(1904) navapsvc.exe
    00400000[0002E000]
      [AM] 11. c:\program files\norton antivirus\navapsvc.exe


    7C080000[00077000]
      [ M] 112. c:\windows\system32\msvcp70.dll


    7C000000[00054000]
      [ M] 113. c:\windows\system32\msvcr70.dll


    6FA60000[00037000]
      [ M] 109. c:\program files\norton antivirus\savrt32.dll


    6AE90000[0001B000]
      [ M] 139. c:\program files\common files\symantec shared\ccvrtrst.dll



  + 0000079c(1948) Explorer.EXE
    01950000[001B9000]
      [AM] 83. c:\program files\common files\ahead\lib\nerodigitalext.dll


    7C140000[00103000]
      [ M] 163. c:\program files\common files\ahead\lib\mfc71.dll


    7C340000[00056000]
      [ M] 164. c:\program files\common files\ahead\lib\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 165. c:\program files\common files\ahead\lib\msvcp71.dll


    72D10000[00008000]
      [ M] 108. c:\windows\system32\msacm32.drv


    10000000[0001B000]
      [ M] 105. d:\program files\rising\antispyware\ieprot.dll


    02360000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    023D0000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll


    02990000[00022000]
      [AM] 74. d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll


    02490000[00019000]
      [AM] 75. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll


    223F0000[00009000]
      [ M] 166. d:\program files\thunder network\thunder\components\resworker\dsbho_00.dll


    223C0000[0000C000]
      [ M] 167. d:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll


    01800000[00008000]
      [AM] 76. c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx


    02A30000[0001F000]
      [AM] 78. c:\windows\system32\dla\tfswshx.dll


    025B0000[0000F000]
      [ M] 168. c:\windows\system32\tfswapi.dll


    02A50000[0003B000]
      [ M] 169. c:\windows\system32\dla\tfswcres.dll


    03D00000[0001E000]
      [ M] 154. c:\program files\common files\symantec shared\script blocking\scrauth.dll


    03D20000[00020000]
      [ M] 155. c:\program files\common files\symantec shared\script blocking\scrblock.dll


    79170000[00026000]
      [AM] 79. c:\windows\system32\mscoree.dll


    796E0000[0003E000]
      [ M] 170. c:\windows\microsoft.net\framework\v1.1.4322\shfusion.dll


    72CF0000[00007000]
      [ M] 171. c:\windows\system32\msadp32.acm



  + 00000b88(2952) alg.exe

  + 00000b9c(2972) wscntfy.exe
    10000000[0002F000]
      [ M] 102. c:\program files\fyoy\slbl.dll


    00920000[0003B000]
      [ M] 103. c:\program files\fyoy\xqgq.dll
      00980000[0001B000]
      [ M] 105. d:\program files\rising\antispyware\ieprot.dll

为什么都没人给我来看看

贴SRENG日志吧，卡卡的日志有专门的一个版块帮你处理