1   1  /  1  页   跳转

到底有多少毒??【求助】

到底有多少毒??【求助】

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
    <XDeskShow><C:\PROGRAM FILES\鱼鱼软件\鱼鱼桌面秀\XDeskShow.exe>  [鱼鱼软件]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <Apoint><C:\Program Files\Apoint2K\Apoint.exe>  [Alps Electric Co., Ltd.]
    <SigmaTel StacMon><C:\Program Files\SigmaTel\SigmaTel AC97 音频驱动器\stacmon.exe>  [SigmaTel Inc.]
    <00THotkey><C:\WINDOWS\system32\00THotkey.exe>  [东芝公司]
    <TFncKy><TFncKy.exe>  []
    <TPSMain><TPSMain.exe>  [TOSHIBA Corporation]
    <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  []
    <KvMonXP><"C:\PROGRA~1\KV2005\KVMonXP.kxp" /auto>  [JiangMin Co.Ltd]
    <KVautoupdate ><"C:\PROGRA~1\KV2005\kvolself.exe" /silent>  [Jiangmin ]
    <IdnMail><; >  []
    <PadTouch><; C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe>  [TOSHIBA]
    <TouchED><; C:\Program Files\TOSHIBA\TouchED\TouchED.Exe>  [东芝公司]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
    <UIHost><logonui.exe>  [Microsoft Corporation]

==================================
启动文件夹
[RAMASST]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\RAMASST.lnk><N>

==================================
服务
[ConfigFree Service / CFSvcs]
  <C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe><TOSHIBA CORPORATION>
[DVD-RAM_Service / DVD-RAM_Service]
  <C:\WINDOWS\system32\DVDRAMSV.exe><Matsushita Electric Industrial Co., Ltd.>
[KVSrvXP / KVSrvXP]
  <C:\PROGRA~1\KV2005\KVSrvXP.exe -Service><JiangMin New Tech Ltd.>
[KVWSC / KVWSC]
  <"C:\Program Files\KV2005\kvwsc.exe"><Jiangmin Co.Ltd>
[NT Data Provider / lDOMANE]
  <C:\WINDOWS\SYSTEM32\RUNDLL.EXE C:\WINDOWS\SYSTEM32\WBEM\SMTPCONFS.DLL,Export 1087><N/A>

==================================
浏览器加载项
[]
  {105E4D0C-5E21-41ED-90F9-013EEF271BD6} <C:\WINDOWS\system32\widgetdownload.dll, 鱼鱼桌面秀widget插件下载工具>
[]
  {105E4D0C-5E21-41ED-90F9-013EEF271BD6} <C:\WINDOWS\system32\widgetdownload.dll, 鱼鱼桌面秀widget插件下载工具>
[江民杀毒工具栏]
  {B5A34A93-D538-43A7-8371-864CB6148D12} <, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\Flash85.ocx, Macromedia, Inc.>
[使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\geturl.htm, N/A>
[使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\getAllurl.htm, N/A>
最后编辑2006-10-05 13:12:50
分享到:
gototop
 

还有呢 …………高人来看看啊
==================================
正在运行的进程
[PID: 984][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1040][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1064][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1112][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1124][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1288][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1364][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1516][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1688][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1812][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 252][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 692][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 708][C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe]  <TOSHIBA CORPORATION><4, 60, 0, 2>
    [C:\Program Files\TOSHIBA\ConfigFree\NDSAPI.dll]  <TOSHIBA CORPORATION><4, 60, 0, 1>
    [C:\Program Files\TOSHIBA\ConfigFree\IpAdrSet.dll]  <TOSHIBA CORPORATION><3, 0, 0, 5>
[PID: 720][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\TPwrCfg.DLL]  <TOSHIBA Corporation><1, 0, 6, 2>
    [C:\WINDOWS\system32\TPwrReg.dll]  <TOSHIBA Corporation><1, 0, 4, 0>
    [C:\WINDOWS\system32\TPSTrace.DLL]  <TOSHIBA Corporation><1, 0, 3, 0>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\KV2005\KvShell_1.dll]  <JiangMin Lmt><9, 0, 5, 1205>
    [C:\Program Files\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [C:\Program Files\KV2005\lang\Kvxp0804_1.lng]  <N/A><N/A>
    [C:\Program Files\KV2005\APIImpl.dll]  <JiangMin Ltd.><9.0.0.500>
    [C:\WINDOWS\system32\widgetdownload.dll]  <鱼鱼桌面秀widget插件下载工具><1.3.0.0>
[PID: 828][C:\WINDOWS\system32\DVDRAMSV.exe]  <Matsushita Electric Industrial Co., Ltd.><2, 0, 7, 0>
[PID: 856][C:\PROGRA~1\KV2005\KVSrvXP.exe]  <JiangMin New Tech Ltd.><9, 0, 5, 720>
    [C:\PROGRA~1\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [C:\Program Files\KV2005\KVEnhD.dll]  <JiangMin Ltd.><9, 1, 5, 423>
    [C:\Program Files\KV2005\KvSPI.dll]  <JiangMin New Tech. Ltd.><9, 0, 5, 720>
    [C:\PROGRA~1\KV2005\PProtect.dll]  <北京江民新科技术公司><1.0.121>
    [C:\Program Files\KV2005\KVEnhP_1.dll]  <JiangMin Ltd.><9, 0, 5, 405>
    [C:\Program Files\KV2005\KVEnhM.dll]  <JiangMin Ltd.><9.0.0.500>
    [C:\Program Files\KV2005\KvSpiPS.dll]  <JiangMin Ltd.><9.0.0.501>
[PID: 892][C:\Program Files\KV2005\kvwsc.exe]  <Jiangmin Co.Ltd><9, 0, 0, 502>
    [C:\Program Files\KV2005\KVEnhP_1.dll]  <JiangMin Ltd.><9, 0, 5, 405>
[PID: 956][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1756][c:\windows\system32\wbem\winlogon.exe]  <Microsoft><1.0.0.0>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 436][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 600][C:\Program Files\Apoint2K\Apoint.exe]  <Alps Electric Co., Ltd.><6.0.2.180>
    [C:\WINDOWS\system32\VXDIF.DLL]  <Alps Electric Co., Ltd.><6.0.2.67>
    [C:\Program Files\Apoint2K\ApMain.DLL]  <Alps Electric Co., Ltd.><6.0.2.14>
    [C:\Program Files\Apoint2K\ApCommon.dll]  <Alps Electric Co., Ltd.><6.0.2.30>
    [C:\Program Files\Apoint2K\ApDual.dll]  <Alps Electric Co., Ltd.><6.0.2.20>
    [C:\Program Files\Apoint2K\ApPad.dll]  <Alps Electric Co., Ltd.><6.0.2.50>
    [C:\Program Files\Apoint2K\EzCapt.dll]  <Alps Electric Co., Ltd.><6.0.2.18>
    [C:\Program Files\Apoint2K\EzLaunch.dll]  <Alps Electric Co., Ltd.><6.0.2.32>
    [C:\Program Files\Apoint2K\ApStick.dll]  <ALPS Electric Co., Ltd.><6.0.2.37>
    [C:\Program Files\Apoint2K\ApOthers.dll]  <Alps Electric Co., Ltd.><6.0.2.23>
    [C:\Program Files\Apoint2K\ApMouse.dll]  <ALPS Electric Co., Ltd.><6.0.2.32>
    [C:\Program Files\Apoint2K\EzAuto.dll]  <Alps Electric Co., Ltd.><4.5.1.83>
    [C:\Program Files\Apoint2K\ApString.dll]  <Alps Electric Co., Ltd.><6.0.301.35>
[PID: 612][C:\Program Files\SigmaTel\SigmaTel AC97 音频驱动器\stacmon.exe]  <SigmaTel Inc.><1, 0, 0, 3>
[PID: 624][C:\WINDOWS\system32\00THotkey.exe]  <东芝公司><1, 0, 0, 23>
    [C:\WINDOWS\system32\TSCI.DLL]  <Toshiba><1.0.0.0>
    [C:\WINDOWS\system32\THCI.DLL]  <Toshiba><1.0.0.0>
[PID: 644][C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe]  <TOSHIBA Corporation><3.03.01>
    [C:\WINDOWS\system32\TCtrlCommon.dll]  <TOSHIBA Corporation><3.03.00>
    [C:\Program Files\TOSHIBA\TOSHIBA Controls\TCtrlIO.DLL]  <TOSHIBA Corporation><3.03.00>
    [C:\WINDOWS\system32\THCI.dll]  <Toshiba><1.0.0.0>
[PID: 648][C:\WINDOWS\system32\TPSMain.exe]  <TOSHIBA Corporation><1, 0, 13, 0>
    [C:\WINDOWS\system32\TPSMainCtl.dll]  <TOSHIBA Corporation><1, 0, 3, 0>
    [C:\WINDOWS\system32\CpuPerf.dll]  <TOSHIBA Corporation><1, 0, 1, 0>
    [C:\WINDOWS\system32\TPSTrace.DLL]  <TOSHIBA Corporation><1, 0, 3, 0>
    [C:\WINDOWS\system32\TPwrReg.dll]  <TOSHIBA Corporation><1, 0, 4, 0>
    [C:\WINDOWS\system32\TPeculiarity.dll]  <TOSHIBA Corporation><1, 0, 1, 0>
    [C:\PROGRA~1\KV2005\KVMonXP.kxp]  <JiangMin Co.Ltd><9, 2, 0, 60118>
    [C:\PROGRA~1\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [C:\PROGRA~1\KV2005\lang\Kvxp0804_1.lng]  <N/A><N/A>
    [C:\PROGRA~1\KV2005\GUIExt.dll]  <JiangMin Ltd.><9.0.0.501>
    [C:\PROGRA~1\KV2005\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
    [C:\Program Files\KV2005\KVEnhP_1.dll]  <JiangMin Ltd.><9, 0, 5, 405>
    [C:\Program Files\KV2005\KvSpiPS.dll]  <JiangMin Ltd.><9.0.0.501>
    [C:\Program Files\KV2005\KvOffice.dll]  <JiangMin New Tech.><9.0.0.1213>
    [C:\Program Files\KV2005\lang\KVOffice0804.lng]  <N/A><N/A>
    [C:\PROGRA~1\KV2005\VirusUpload.dll]  <N/A><2, 0, 0, 0>
    [C:\PROGRA~1\KV2005\PProtect.dll]  <北京江民新科技术公司><1.0.121>
[PID: 1320][C:\Program Files\Apoint2K\Apntex.exe]  <Alps Electric Co., Ltd.><5.0.1.15>
    [C:\WINDOWS\system32\VXDIF.DLL]  <Alps Electric Co., Ltd.><6.0.2.67>
[PID: 1176][C:\WINDOWS\system32\TPSBattM.exe]  <TOSHIBA Corporation><1, 0, 2, 0>
    [C:\WINDOWS\system32\TPwrCfg.DLL]  <TOSHIBA Corporation><1, 0, 6, 2>
    [C:\WINDOWS\system32\TPwrReg.dll]  <TOSHIBA Corporation><1, 0, 4, 0>
    [C:\WINDOWS\system32\TPSTrace.DLL]  <TOSHIBA Corporation><1, 0, 3, 0>
[PID: 1496][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1508][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1632][C:\PROGRAM FILES\鱼鱼软件\鱼鱼桌面秀\XDeskShow.exe]  <鱼鱼软件><1.8.0.730>
    [C:\PROGRAM FILES\鱼鱼软件\鱼鱼桌面秀\Res\Dll\weather100.dll]  <><1.3.0.428>
    [C:\PROGRAM FILES\鱼鱼软件\鱼鱼桌面秀\Res\Dll\XDeskScripter.dll]  <鱼鱼软件 cfishsoft><1.2.0.707>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1944][C:\WINDOWS\system32\RAMASST.exe]  <Matsushita Electric Industrial Co., Ltd.><1, 0, 9, 0>
[PID: 2324][C:\Program Files\Maxthon\Max.exe]  <Maxthon International Ltd.><1, 5, 3, 18>
    [C:\Program Files\Maxthon\maxzlib.dll]  < ><1, 0, 0, 2>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>
    [C:\Program Files\Maxthon\Services\RealTime\real_time.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\UNISPIM5.IME]  <北京紫光华宇软件股份有限公司><5.0.0.5076>
    [C:\WINDOWS\system32\macromed\flash\Flash85.ocx]  <Macromedia, Inc.><8,5,0,133>
[PID: 3684][E:\软件\系统安全\20060822102721955\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINDOWS\system32\KvWspXp_1.dll]  <JiangMin Ltd.><9, 0, 5, 324>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 

不知道怎么了??那个IEHELPER删不掉,还有好多问题…………
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT