2006-12-20,15:59:59

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Internat.exe><internat.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Synchronization Manager><mobsync.exe /logon>  [(Verified)Microsoft Corporation]
    <IgfxTray><C:\WINNT\System32\igfxtray.exe>  [(Verified)Intel Corporation]
    <HotKeysCmds><C:\WINNT\System32\hkcmd.exe>  [(Verified)Intel Corporation]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Avance Logic, Inc.]
    <Realtime Monitor><C:\PROGRA~1\CA-JIN~1\KILL\realmon.exe>  [Computer Associates International, Inc.]
    <!AVG Anti-Spyware><"C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized>  [Anti-Malware Development a.s.]
    <SKYNET Personal FireWall><C:\PROGRA~1\FIREWALL\pfw.exe>  [广州众达天网技术有限公司]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINNT\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><C:\Program Files\AVG Anti-Spyware 7.5\shellexecutehook.dll>  [Anti-Malware Development a.s.]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINNT\LUNARM~1.SCR>  [N/A]

==================================
启动文件夹
[Microsoft Office]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> C:\PROGRA~1\MICROS~2\Office\OSA9.EXE [Microsoft Corporation]><N>

==================================
服务
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard]
  <C:\Program Files\AVG Anti-Spyware 7.5\guard.exe><Anti-Malware Development a.s.>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
  <C:\WINNT\system32\drivers\CDAC11BA.EXE><Macrovision>
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[KILL RPC Server / InoRPC]
  <"C:\Program Files\CA-Jinchen\KILL\InoRpc.exe"><Computer Associates International, Inc.>
[KILL Realtime Server / InoRT]
  <"C:\Program Files\CA-Jinchen\KILL\InoRT.exe"><Computer Associates International, Inc.>
[KILL Job Server / InoTask]
  <"C:\Program Files\CA-Jinchen\KILL\InoTask.exe"><Computer Associates International, Inc.>

==================================
驱动程序
[Service for Avance AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Avance Logic, Inc.>
[AVG Anti-Spyware Driver / AVG Anti-Spyware Driver]
  <\??\C:\Program Files\AVG Anti-Spyware 7.5\guard.sys><N/A>
[AVG Anti-Spyware Clean Driver / AvgAsCln]
  <System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
[CdaC15BA / CdaC15BA]
  <\??\C:\WINNT\system32\drivers\CDAC15BA.SYS><Macrovision Europe Ltd>
[dmboot / dmboot]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload]
  <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[ialm / ialm]
  <System32\DRIVERS\ialmnt5.sys><Intel Corporation>
[INO_FLPY / INO_FLPY]
  <\SystemRoot\System32\Drivers\ino_flpy.sys><Computer Associates International, Inc.>
[INO_FLTR / INO_FLTR]
  <\??\C:\WINNT\System32\Drivers\ino_fltr.sys><Computer Associates International, Inc.>
[npkcrypt / npkcrypt]
  <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[Direct Parallel Link Driver / Ptilink]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139-based PCI Fast Ethernet Adapter NT Driver / rtl8139]
  <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[SKNFW / SKNFW]
  <\??\C:\WINNT\system32\Drivers\SKNFW.sys><N/A>
[World Standard Teletext Codec / WSTCODEC]
  <System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[Intel(R) Graphics Platform (SoftBIOS) Driver / {6080A529-897E-4629-A488-ABA0C29B635E}]
  <system32\drivers\ialmsbw.sys><Intel Corporation>
[Intel(R) Graphics Chipset (KCH) Driver / {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}]
  <system32\drivers\ialmkchw.sys><Intel Corporation>

==================================
浏览器加载项
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>

==================================
正在运行的进程
[PID: 136][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 160][\??\C:\WINNT\system32\csrss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 156][\??\C:\WINNT\system32\winlogon.exe]  [Microsoft Corporation, 5.00.2195.6714]
[PID: 208][C:\WINNT\system32\services.exe]  [Microsoft Corporation, 5.00.2195.6700]
    [C:\WINNT\system32\dmserver.dll]  [VERITAS Software Corp., 2195.6605.297.3]
[PID: 220][C:\WINNT\system32\lsass.exe]  [Microsoft Corporation, 5.00.2195.6695]
[PID: 404][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 432][C:\WINNT\system32\spoolsv.exe]  [Microsoft Corporation, 5.00.2195.6659]
[PID: 472][C:\WINNT\system32\drivers\CDAC11BA.EXE]  [Macrovision, 4.20.020]
[PID: 496][C:\WINNT\System32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 516][C:\Program Files\CA-Jinchen\KILL\InoRpc.exe]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InConfig.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\INOCORE.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InoOEM.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA\Common\ScanEngine\DistCfg.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\ScanLog.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InocDB.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\LANG\KILL\wBkRsrcres.dll]  [冠群金辰, 6.0.200.0]
    [C:\Program Files\CA-Jinchen\KILL\InocAdn.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InDrvCfg.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\secAPI.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA\Common\ScanEngine\InoScan.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\PROGRAM FILES\CA\COMMON\SCANENGINE\ScanRes.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\RPCMtAdn.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\NameAPIX.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\RPCMtAPI.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InoAlert.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\albuild.dll]  [Computer Associates International, Inc., 6, 0, 599, 0]
    [C:\Program Files\CA-Jinchen\KILL\secAddIn.dll]  [Computer Associates International, Inc., 6.0.312.0]
[PID: 536][C:\Program Files\CA-Jinchen\KILL\InoRT.exe]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\ScanLog.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InConfig.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\INOCORE.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InoOEM.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InocDB.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA\Common\ScanEngine\DistCfg.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\LANG\KILL\wBkRsrcres.dll]  [冠群金辰, 6.0.200.0]
    [C:\Program Files\CA\Common\ScanEngine\InoScan.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\PROGRAM FILES\CA\COMMON\SCANENGINE\ScanRes.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA\Common\ScanEngine\arclib.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA\Common\ScanEngine\Avh32dll.dll]  [N/A, N/A]
[PID: 548][C:\Program Files\CA-Jinchen\KILL\InoTask.exe]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InoAlert.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\RPCMtAPI.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InoOEM.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InConfig.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\INOCORE.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InocDB.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\InDrvCfg.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\ScanLog.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA\Common\ScanEngine\DistCfg.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\secAPI.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\LANG\KILL\wBkRsrcres.dll]  [冠群金辰, 6.0.200.0]
    [C:\Program Files\CA-Jinchen\KILL\albuild.dll]  [Computer Associates International, Inc., 6, 0, 599, 0]
    [C:\Program Files\CA\Common\ScanEngine\InoScan.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\PROGRAM FILES\CA\COMMON\SCANENGINE\ScanRes.dll]  [Computer Associates International, Inc., 6.0.312.0]
[PID: 676][C:\WINNT\system32\regsvc.exe]  [Microsoft Corporation, 5.00.2195.6701]
[PID: 724][C:\WINNT\system32\MSTask.exe]  [Microsoft Corporation, 4.71.2195.6704]
[PID: 796][C:\WINNT\System32\WBEM\WinMgmt.exe]  [Microsoft Corporation, 1.50.1085.0100]
[PID: 856][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 1132][C:\WINNT\System32\hkcmd.exe]  [Intel Corporation, 3,0,0,1517]
    [C:\WINNT\System32\hccutils.DLL]  [Intel Corporation, 3,0,0,1517]
    [C:\WINNT\System32\igfxdev.dll]  [Intel Corporation, 3,0,0,1517]
    [C:\WINNT\System32\igfxsrvc.dll]  [Intel Corporation, 3,0,0,1517]
    [C:\WINNT\System32\igfxhk.dll]  [Intel Corporation, 3,0,0,1517]
    [C:\WINNT\System32\igfxres.dll]  [Intel Corporation, 3,0,0,1517]

[PID: 1208][C:\WINNT\SOUNDMAN.EXE]  [Avance Logic, Inc., 5.0]
[PID: 1212][C:\PROGRA~1\CA-JIN~1\KILL\realmon.exe]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\PROGRA~1\CA-JIN~1\KILL\InConfig.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\PROGRA~1\CA-JIN~1\KILL\INOCORE.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\PROGRA~1\CA-JIN~1\KILL\InoOEM.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\PROGRA~1\CA-JIN~1\KILL\InDrvCfg.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA\Common\ScanEngine\DistCfg.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\PROGRA~1\CA-JIN~1\KILL\LANG\KILL\Realmonres.dll]  [冠群金辰, 6.0.200.0]
    [C:\PROGRA~1\CA-JIN~1\KILL\secAPI.dll]  [Computer Associates International, Inc., 6.0.312.0]
[PID: 708][C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe]  [Anti-Malware Development a.s., 7, 5, 0, 50]
    [C:\Program Files\AVG Anti-Spyware 7.5\engine.dll]  [Anti-Malware Development a.s., 4, 2, 0, 15]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
[PID: 1236][C:\WINNT\system32\internat.exe]  [Microsoft Corporation, 5.00.2920.0000]
[PID: 980][C:\WINNT\explorer.exe]  [Microsoft Corporation, 5.00.3700.6690]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\AVG Anti-Spyware 7.5\shellexecutehook.dll]  [Anti-Malware Development a.s., 7, 5, 0, 47]
    [C:\WINNT\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [C:\WINNT\System32\hccutils.DLL]  [Intel Corporation, 3,0,0,1517]
    [C:\WINNT\system32\igfxres.dll]  [Intel Corporation, 3,0,0,1517]
    [C:\WINNT\System32\igfxsrvc.dll]  [Intel Corporation, 3,0,0,1517]
    [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.1.2003110300]
    [C:\WINNT\System32\igfxpph.dll]  [Intel Corporation, 3,0,0,1517]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\CA-Jinchen\KILL\InoShell.dll]  [Computer Associates International, Inc., 6.0.312.0]
    [C:\Program Files\CA-Jinchen\KILL\LANG\KILL\iShellres.dll]  [冠群金辰, 6.0.200.0]
    [C:\Program Files\AVG Anti-Spyware 7.5\context.dll]  [Anti-Malware Development a.s., 7, 5, 0, 49]
    [C:\WINNT\System32\igfxdev.dll]  [Intel Corporation, 3,0,0,1517]
[PID: 1264][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.3208]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
[PID: 260][C:\Program Files\FireWall\PFW.exe]  [广州众达天网技术有限公司, 2.7.6.1005]
    [C:\Program Files\FireWall\skymisc.dll]  [N/A, N/A]
[PID: 1444][C:\WINNT\System32\ups.exe]  [Microsoft Corporation, 5.00.2158.1]
[PID: 1032][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2600.0000]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.1.2003110300]
[PID: 1164][C:\Program Files\Microsoft Office\Office\WINWORD.EXE]  [Microsoft Corporation, 9.0.2823]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\SDNT5UI.DLL]  [Zenographics, Inc., 5.50.1811.0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\SDDM32.DLL]  [Zenographics, Inc., 5, 52, 1023, 0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\ZSPOOL.dll]  [Zenographics, Inc., 5, 51, 709, 0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\ZGDI32.dll]  [Zenographics, Inc., 5, 51, 628, 0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\ZTAG32.dll]  [Zenographics, Inc., 5, 50, 1725, 0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\SDDMUI.DLL]  [Zenographics, Inc., 5, 51, 701, 0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\ZLANG.dll]  [Zenographics, Inc., 1, 2, 104, 0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\SR32.dll]  [Zenographics, Inc., 5, 52, 1031, 0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\IMFNT5.DLL]  [Zenographics, Inc., 5.51.1031.0]
    [C:\WINNT\system32\spool\DRIVERS\W32X86\3\Imf32.dll]  [Zenographics, Inc., 5, 51, 405, 0]
[PID: 1476][C:\Documents and Settings\xjq\桌面\新建文件夹\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINNT\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  Error. [AutoCADScriptFile]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  Error. [C:\WINNT\system32\WScript.exe "%1" %*]
.JS  Error. [C:\WINNT\system32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================

我用杀毒软件扫描，找到病毒没名字，感染文件无法修复，被重命名。我把C盘重新安装系统了，但是其他盘还是继续找到病毒。
而且实时监控不时也弹出病毒。
无奈上来请高手检查，并看在解决~谢谢了。

不能沉，等解决了再沉，我顶起｀～

再顶，不解决坚决不能沉

起来，不沉下帖子
把我的问题解决

下去咯~下去咯
再顶

摆了1天了，都没人帮帮我吗？？

我提的问题有这么难吗？？
没人懂？？