最近借来朋友的一个IBM小黑来玩，但是我经常遇到这样的情况：输入一个正常网址，然后马上出来一个奇怪的界面（如图），多刷新几次可以正常访问，我怀疑是种了威金一类，但是他计算机上自带的“安博士”居然报“未知病毒”，后来我用了江民威金专杀，果不其然，杀出来一大堆（大部分是htm的网页文件），但是江民的专杀只能报文件名，并不能报是什么病毒，那个专杀貌似既能杀熊猫又能杀威金，所以，我不知道这是什么病毒所导致的状况，mopery在吧，帮忙看看吧

图

我不止是在卡卡社区有，其他网站都有！
真的很奇怪啊！是威金导致的吗

进程很正常，也没有熊猫烧香的症状
但这界面，明显是广告界面
我甚至用第三方的Opera也有这个玩意出现

稍等，马上传上来

[CODE]

2007-02-03,22:07:18

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Internat.exe><internat.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Synchronization Manager><mobsync.exe /logon>  [(Verified)Microsoft Corporation]
    <NvCplDaemon><RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <paTray><"C:\Program Files\AhnLab\APC2\Policy Agent\patray.exe">  [N/A]
    <AHNSD><"C:\Program Files\AhnLab\Smart Update Utility\AhnSD.exe">  [(Verified)AhnLab, Inc.]
    <UnlockerAssistant><"C:\Program Files\Unlocker\UnlockerAssistant.exe">  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINNT\system32\userinit.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{06A48AD9-FF57-4E73-937B-B493E72F4226}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\WinInfo.rxk>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <NvCplDaemon><; RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <NvMediaCenter><; RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)NVIDIA Corporation]
    <nwiz><; nwiz.exe /install>  [NVIDIA Corporation]
    <Smapp><; C:\Program Files\Analog Devices\SoundMAX\SMTray.exe>  [Analog Devices, Inc.]

==================================
启动文件夹
[核新SSL通讯安全代理]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\核新SSL通讯安全代理.lnk --> C:\PROGRA~1\hexin\sslproxy\SSLCnt.exe [杭州核新软件技术有限公司]><N>

==================================
服务
[AhnLab Task Scheduler / AhnLab Task Scheduler][Running/Auto Start]
  <"C:\Program Files\AhnLab\Smart Update Utility\AhnSDsv.exe"><AhnLab, Inc.>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[MonSvcNT / MonSvcNT][Running/Auto Start]
  <C:\PROGRA~1\AhnLab\V3\MonSvcNT.exe><AhnLab, Inc.>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINNT\system32\nvsvc32.exe><NVIDIA Corporation>
[Policy Agent Service V2.5 / paSvc][Running/Auto Start]
  <"C:\Program Files\AhnLab\APC2\Policy Agent\pasvc.exe"><AhnLab, Inc.>
[SoundMAX Agent Service / SoundMAX Agent Service (default)][Running/Auto Start]
  <C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>
[SpyZero_Monitor / SpyZero_Monitor][Running/Auto Start]
  <"C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszMon.exe"><AhnLab, Inc.>
[WMDM PMSP Service / WMDM PMSP Service][Running/Auto Start]
  <C:\WINNT\system32\mspmspsv.exe><Microsoft Corporation>

==================================
驱动程序
[aeaudio / aeaudio][Running/Manual Start]
  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[AhnFlt2K / AhnFlt2K][Running/Manual Start]
  <\??\C:\WINNT\system32\Drivers\AhnFlt2K.sys><AhnLab, Inc.>
[AhnRec2K / AhnRec2K][Running/Manual Start]
  <\??\C:\WINNT\system32\Drivers\AhnRec2K.sys><AhnLab, Inc.>
[AhnRghNt / AhnRghNt][Running/Manual Start]
  <\??\C:\WINNT\system32\drivers\AhnRghNt.sys><AhnLab, Inc.>
[AhnSZE / AhnSZE][Running/Manual Start]
  <system32\drivers\AhnSZE.sys><AhnLab, Inc.>
[AnfdIont / AnfdIont][Running/Auto Start]
  <\??\C:\WINNT\system32\drivers\AnfdIont.sys><AhnLab, Inc.>
[AnfdTDnt / AnfdTDnt][Running/System Start]
  <\??\C:\WINNT\system32\drivers\AnfdTDnt.sys><AhnLab, Inc.>
[ASZFltNt / ASZFltNt][Running/Manual Start]
  <\??\C:\Program Files\AhnLab\AhnLab SpyZero 2.0\ASZFltNt.sys><AhnLab, Inc.>
[dmboot / dmboot][Stopped/Disabled]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[IdeBusDr / IdeBusDr][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\IdeBusDr.sys><Intel Corporation>
[Intel(R) Ultra ATA Controller / IdeChnDr][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\IdeChnDr.sys><Intel Corporation>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]

<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[smwdm / smwdm][Running/Manual Start]
  <system32\drivers\smwdm.sys><Analog Devices, Inc.>
[v3engine / v3engine][Running/Manual Start]
  <\??\C:\WINNT\system32\drivers\v3engine.sys><AhnLab, Inc.>
[V3Flt2K / V3Flt2K][Running/Manual Start]
  <\??\C:\PROGRA~1\AhnLab\V3\V3Flt2K.sys><AhnLab, Inc.>
[V3IFt2K / V3IFt2K][Stopped/Manual Start]
  <\??\C:\PROGRA~1\AhnLab\V3\V3IFt2K.sys><AhnLab, Inc.>
[V3NfeNt / V3NfeNt][Running/Auto Start]
  <\??\C:\PROGRA~1\AhnLab\V3\V3NfeNt.sys><AhnLab, Inc.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>

==================================
浏览器加载项
[FGCatchUrl]
  {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <C:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
[V3BOH Class]
  {76EAE03C-F2B1-4397-97E8-390920B7C2DC} <C:\Program Files\AhnLab\V3\V3Bar.dll, AhnLab, Inc.>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
[FlashGet GetFlash Class]
  {F156768E-81EF-470C-9057-481BA8380DBA} <C:\Program Files\FlashGet\getflash.dll, www.flashget.com>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[快车]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\Program Files\FlashGet\FlashGet.exe, FlashGet.com>
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[金山快译(&K)]
  {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <C:\PROGRA~1\Kingsoft\FASTAI~1\IEBand.dll, >
[V3]
  {9E3849D6-41EF-4B2F-86B7-632EF90758E4} <"C:\Program Files\AhnLab\V3\V3Bar.dll", N/A>
[快车(FlashGet)]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\Program Files\FlashGet\fgiebar.dll, Amaze Soft>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINNT\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[相关搜索]
  {A29F7F71-DCDB-412D-B19A-2002DC966E33} <C:\PROGRA~1\yok\relband.dll, N/A>
[FGCatchUrl]
  {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <C:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
[&使用快车(FlashGet)下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[&使用快车(FlashGet)下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[使用迅雷下载]
  <C:\Program Files\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
  <C:\Program Files\Thunder\Program\getallurl.htm, N/A>

==================================
正在运行的进程
[PID: 140][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 168][\??\C:\WINNT\system32\csrss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 188][\??\C:\WINNT\system32\winlogon.exe]  [Microsoft Corporation, 5.00.2195.6714]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[PID: 216][C:\WINNT\system32\services.exe]  [Microsoft Corporation, 5.00.2195.6700]
    [C:\WINNT\system32\dmserver.dll]  [VERITAS Software Corp., 2195.6605.297.3]
[PID: 228][C:\WINNT\system32\lsass.exe]  [Microsoft Corporation, 5.00.2195.6695]
[PID: 404][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 428][C:\WINNT\system32\spoolsv.exe]  [Microsoft Corporation, 5.00.2195.6659]
[PID: 456][C:\Program Files\AhnLab\Smart Update Utility\AhnSDsv.exe]  [AhnLab, Inc., 5, 5, 0, 1]
    [C:\Program Files\AhnLab\Smart Update Utility\NLS\ASD0804.nls]  [AhnLab, Inc., 5, 0, 0, 5]
[PID: 472][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 508][C:\WINNT\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.5664]
[PID: 592][C:\Program Files\AhnLab\APC2\Policy Agent\pasvc.exe]  [AhnLab, Inc., 2.5.5.76]
    [C:\Program Files\AhnLab\APC2\Policy Agent\SLogW.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\SSync.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\IniRW.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\TPool.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\MaCfgRw.dll]  [AhnLab, 2, 5, 5, 11]
    [C:\Program Files\AhnLab\APC2\Policy Agent\SBase64.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\PaNetApi.dll]  [AhnLab, Inc., 2, 5, 5, 90]
[PID: 668][C:\WINNT\system32\regsvc.exe]  [Microsoft Corporation, 5.00.2195.6701]
[PID: 684][C:\WINNT\system32\MSTask.exe]  [Microsoft Corporation, 4.71.2195.6704]
[PID: 720][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe]  [Analog Devices, Inc., 3, 2, 6, 0]
[PID: 744][C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszMon.exe]  [AhnLab, Inc., 2, 0, 0, 71]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszLog.dll]  [AhnLab, Inc., 2, 0, 0, 41]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\ACALogE.dll]  [AhnLab, Inc., 1, 0, 0, 18]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\ahni18n2.dll]  [AhnLab, Inc., 6, 1, 0, 4]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\aszctrl.dll]  [AhnLab, Inc., 2, 0, 0, 93]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AhnInst.dll]  [AhnLab, Inc., 6, 0, 0, 54]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\ASZFlt.dll]  [AhnLab, Inc, 2, 2, 0, 1]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AhnCtlKD.dll]  [AhnLab, Inc., 1, 0, 1, 7]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszWL.dll]  [AhnLab, Inc., 2, 0, 0, 21]

[C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszEnc.dll]  [AhnLab, Inc., 2, 0, 0, 11]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszDMZ.dll]  [AhnLab, Inc., 2, 0, 0, 17]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\Nls\ASZL0804.nls]  [AhnLab, Inc., 2, 0, 0, 19]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\Driver\ACALogDF.drv]  [AhnLab, Inc., 1, 0, 0, 13]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\system\17\AhnSZE.dll]  [AhnLab, Inc., 3, 0, 2, 16]
[PID: 832][C:\WINNT\Explorer.EXE]  [Microsoft Corporation, 5.00.3700.6690]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\WINNT\system32\nvshell.dll]  [NVIDIA Corporation, 6.14.10.5664]
    [C:\WINNT\system32\NVWRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.5664]
    [C:\Program Files\AhnLab\V3\V3Bar.dll]  [AhnLab, Inc., 6, 0, 0, 25]
    [C:\Program Files\AhnLab\V3\NLS\bar0804.nls]  [AhnLab, Inc., 6, 0, 0, 7]
    [C:\Program Files\Thunder\ComDlls\XunLeiBHO_007.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\WINNT\system32\nvtuicpl.cpl]  [NVIDIA Corporation, 6.14.10.5664]
    [C:\PROGRA~1\WINZIP\WZSHLSTB.DLL]  [WinZip Computing, Inc., 4.1 (32-bit)]
    [C:\Program Files\Unlocker\UnlockerCOM.dll]  [N/A, N/A]
    [C:\Program Files\AhnLab\V3\V3ShllEx.dll]  [AhnLab, Inc., 6, 0, 0, 14]
    [C:\Program Files\AhnLab\V3\NLS\V3SH0804.nls]  [AhnLab, Inc., 6, 0, 0, 7]
    [C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 840][C:\WINNT\System32\WBEM\WinMgmt.exe]  [Microsoft Corporation, 1.50.1085.0100]
[PID: 860][C:\WINNT\system32\mspmspsv.exe]  [Microsoft Corporation, 7.01.00.3055]
[PID: 872][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 1032][C:\Program Files\AhnLab\APC2\Policy Agent\patray.exe]  [, 2, 5, 0, 10]
    [C:\Program Files\AhnLab\APC2\Policy Agent\AhnInst.dll]  [AhnLab, Inc., 6, 0, 0, 53]
    [C:\Program Files\AhnLab\APC2\Policy Agent\MaCfgRw.dll]  [AhnLab, 2, 5, 5, 11]
    [C:\Program Files\AhnLab\APC2\Policy Agent\IniRW.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\SBase64.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\SLogW.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\SSync.dll]  [AhnLab, 2, 1, 0, 0]
    [C:\Program Files\AhnLab\APC2\Policy Agent\AhnI18N.dll]  [AhnLab, Inc., 6, 0, 0, 18]
    [C:\Program Files\AhnLab\APC2\Policy Agent\NLS\MTRY0804.nls]  [, 2, 0, 0, 2]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
[PID: 1052][C:\Program Files\AhnLab\Smart Update Utility\AhnSD.exe]  [AhnLab, Inc., 5, 5, 0, 1]
    [C:\Program Files\AhnLab\Smart Update Utility\NLS\ASD0804.nls]  [AhnLab, Inc., 5, 0, 0, 5]
[PID: 1076][C:\Program Files\Unlocker\UnlockerAssistant.exe]  [N/A, N/A]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 1100][C:\WINNT\system32\internat.exe]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 968][C:\Program Files\AhnLab\V3\MonSysNT.exe]  [AhnLab, Inc., 6, 1, 0, 91]
    [C:\Program Files\AhnLab\V3\V3CfgE.dll]  [AhnLab, Inc., 6, 0, 0, 96]
    [C:\Program Files\AhnLab\V3\V3SSCtrl.dll]  [AhnLab, Inc., 6, 0, 0, 100]
    [C:\Program Files\AhnLab\V3\AhnI18N.dll]  [AhnLab, Inc., 6, 0, 0, 18]
    [C:\Program Files\AhnLab\V3\NLS\Mon0804.nls]  [AhnLab, Inc., 6, 0, 0, 26]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\AhnLab\V3\AhnAlert.dll]  [AhnLab, Inc., 6, 0, 0, 17]
[PID: 1116][C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszTray.exe]  [AhnLab, Inc., 2, 0, 0, 97]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszSec.dll]  [AhnLab, Inc., 2, 0, 0, 25]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszCfg.dll]  [AhnLab, Inc., 2, 0, 0, 22]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszEnc.dll]  [AhnLab, Inc., 2, 0, 0, 11]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszLog.dll]  [AhnLab, Inc., 2, 0, 0, 41]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\ACALogE.dll]  [AhnLab, Inc., 1, 0, 0, 18]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\ahni18n2.dll]  [AhnLab, Inc., 6, 1, 0, 4]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\aszctrl.dll]  [AhnLab, Inc., 2, 0, 0, 93]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AhnInst.dll]  [AhnLab, Inc., 6, 0, 0, 54]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\AszAlert.dll]  [AhnLab, Inc., 2, 0, 0, 17]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\Nls\ASZT0804.nls]  [AhnLab, Inc., 2, 0, 0, 13]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\AhnLab\AhnLab SpyZero 2.0\system\17\AhnSZE.dll]  [AhnLab, Inc., 3, 0, 2, 16]
[PID: 1124][C:\Program Files\hexin\sslproxy\SSLCnt.exe]  [杭州核新软件技术有限公司, 1.103.2004.0218]
    [C:\Program Files\hexin\sslproxy\crypteng.dll]  [杭州核新软件技术有限公司, 1.44.2003.0426]
    [C:\Program Files\hexin\sslproxy\sslproxy.dll]  [杭州核新软件技术有限公司, 1.52.2002.326]
    [C:\Program Files\hexin\sslproxy\CAsAPI.dll]  [杭州核新软件技术有限公司, 1.49.2002.422]
    [C:\Program Files\hexin\sslproxy\Scard.dll]  [杭州核新软件技术有限公司, 1.02.2001.0529]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\hexin\sslproxy\MapProxy.dll]  [核新软件技术有限公司, 1.00.2003.0613]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 1312][C:\PROGRA~1\AhnLab\V3\MonSvcNT.exe]  [AhnLab, Inc., 6, 1, 0, 12]
    [C:\PROGRA~1\AhnLab\V3\AhnGICF.dll]  [AhnLab, Inc., 6, 0, 0, 2]
    [C:\PROGRA~1\AhnLab\V3\V3DrEx.dll]  [AhnLab, Inc., 7, 0, 0, 112]
    [C:\PROGRA~1\AhnLab\V3\v3svcctr.dll]  [AhnLab, Inc., 6, 1, 0, 1]
    [C:\PROGRA~1\AhnLab\V3\V3CfgE.dll]  [AhnLab, Inc., 6, 0, 0, 96]
    [C:\PROGRA~1\AhnLab\V3\V3Flt.dll]  [AhnLab, Inc., 6, 1, 0, 8]
    [C:\PROGRA~1\AhnLab\V3\AhnCtlKD.dll]  [AhnLab, Inc., 1, 0, 1, 7]
    [C:\PROGRA~1\AhnLab\V3\v3if.dll]  [AhnLab, Inc., 6, 1, 0, 3]
    [C:\PROGRA~1\AhnLab\V3\V3STScan.dll]  [AhnLab, Inc., 6, 1, 0, 2]
    [C:\PROGRA~1\AhnLab\V3\AhnDMZ.dll]  [AhnLab, Inc., 6, 0, 0, 73]
    [C:\PROGRA~1\AhnLab\V3\V3Track.dll]  [AhnLab, Inc., 6, 0, 0, 26]
    [C:\PROGRA~1\AhnLab\V3\V3IMSvc.dll]  [AhnLab, Inc., 6, 0, 0, 33]
    [C:\PROGRA~1\AhnLab\V3\V3Ift.dll]  [AhnLab, Inc., 6, 0, 0, 5]
    [C:\PROGRA~1\AhnLab\V3\NLS\V3Dr0804.nls]  [AhnLab, Inc., 7, 0, 0, 8]
    [C:\PROGRA~1\AhnLab\V3\v3logex.dll]  [AhnLab, Inc., 6, 1, 0, 2]
    [C:\PROGRA~1\AhnLab\V3\V3NETINT.dll]  [AhnLab, Inc., 6, 0, 0, 20]
    [C:\PROGRA~1\AhnLab\V3\System\16\V3pro32e.dll]  [AhnLab, Inc., 2007,01,31,03]
    [C:\WINNT\system32\v3w32se2.dll]  [Ahnlab, Inc., 2002, 12, 16, 1]
    [C:\PROGRA~1\AhnLab\V3\V3SR32.dll]  [AhnLab, Inc., 5, 0, 0, 2]
[PID: 812][C:\Program Files\AhnLab\V3\V3P3AT.exe]  [AhnLab, Inc., 6, 1, 0, 201]
    [C:\Program Files\AhnLab\V3\v3if.dll]  [AhnLab, Inc., 6, 1, 0, 3]
    [C:\Program Files\AhnLab\V3\V3CfgE.dll]  [AhnLab, Inc., 6, 0, 0, 96]
    [C:\Program Files\AhnLab\V3\V3DrEx.dll]  [AhnLab, Inc., 7, 0, 0, 112]
    [C:\Program Files\AhnLab\V3\V3P3ATHL.dll]  [AhnLab, Inc., 6, 0, 0, 23]
    [C:\Program Files\AhnLab\V3\AhnI18N.dll]  [AhnLab, Inc., 6, 0, 0, 18]
    [C:\Program Files\AhnLab\V3\V3MsgFlt.dll]  [AhnLab, Inc., 6, 0, 0, 63]
    [C:\Program Files\AhnLab\V3\V3NfCtl.dll]  [AhnLab, Inc., 6, 0, 0, 3]
    [C:\Program Files\AhnLab\V3\AnfdCtrl.dll]  [AhnLab, Inc., 2, 0, 0, 12]
    [C:\Program Files\AhnLab\V3\AhnCtlKD.dll]  [AhnLab, Inc., 1, 0, 1, 7]
    [C:\Program Files\AhnLab\V3\AhnIConv.dll]  [AhnLab, Inc., 1, 0, 0, 1]
    [C:\Program Files\AhnLab\V3\NLS\V3Dr0804.nls]  [AhnLab, Inc., 7, 0, 0, 8]
    [C:\Program Files\AhnLab\V3\NLS\V3MF0804.nls]  [AhnLab, Inc., 6, 0, 0, 8]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\AhnLab\V3\v3logex.dll]  [AhnLab, Inc., 6, 1, 0, 2]
    [C:\Program Files\AhnLab\V3\NLS\p3at0804.nls]  [AhnLab, Inc., 6, 0, 0, 14]
    [C:\Program Files\AhnLab\V3\System\16\V3pro32e.dll]  [AhnLab, Inc., 2007,01,31,03]
    [C:\WINNT\system32\v3w32se2.dll]  [Ahnlab, Inc., 2002, 12, 16, 1]
    [C:\Program Files\AhnLab\V3\V3SR32.dll]  [AhnLab, Inc., 5, 0, 0, 2]
    [C:\Program Files\AhnLab\V3\V3azex.dll]  [AhnLab, Inc., 5, 0, 0, 14]

[C:\Program Files\AhnLab\V3\AZMain.DLL]  [ESTSoft Corp, 3.6.9.543]
    [C:\Program Files\AhnLab\V3\V3MailDt.dll]  [AhnLab, Inc., 6, 0, 0, 91]
[PID: 1604][C:\Program Files\Tencent\TT\TCPlus.exe]  [腾讯公司, 1, 0, 0, 5]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\TT\QQDownload.dll]  [Tencent Technology (Shenzhen) Company Limited, 1, 0, 101, 28]
    [C:\Program Files\Tencent\TT\TNProxy.dll]  [Tencent Technology(Shenzhen) Company Limited, 2, 1, 101, 60]
[PID: 644][C:\Program Files\Tencent\TT\TTraveler.exe]  [腾讯公司, 3.1.0.261]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  [腾讯公司, 1, 1, 0, 5]
    [C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll]  [, 1, 0, 0, 3]
    [C:\Program Files\Tencent\TT\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
    [C:\WINNT\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
    [C:\Documents and Settings\Administrator\My Documents\DubaTool_Viking.COM]  [, 2006, 12, 4, 21]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 1560][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 1, 1006]
    [C:\Program Files\AhnLab\V3\V3Bar.dll]  [AhnLab, Inc., 6, 0, 0, 25]
    [C:\Program Files\AhnLab\V3\NLS\bar0804.nls]  [AhnLab, Inc., 6, 0, 0, 7]
    [C:\Program Files\Thunder\ComDlls\XunLeiBHO_007.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\Program Files\FlashGet\getflash.dll]  [www.flashget.com, 1, 8, 1, 1002]
    [C:\WINNT\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\WINNT\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [C:\WINNT\system32\nvshell.dll]  [NVIDIA Corporation, 6.14.10.5664]
    [C:\WINNT\system32\NVWRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.5664]
    [C:\Program Files\AhnLab\V3\V3ShllEx.dll]  [AhnLab, Inc., 6, 0, 0, 14]
    [C:\Program Files\AhnLab\V3\NLS\V3SH0804.nls]  [AhnLab, Inc., 6, 0, 0, 7]
    [C:\Program Files\Unlocker\UnlockerCOM.dll]  [N/A, N/A]
    [C:\PROGRA~1\WINZIP\WZSHLSTB.DLL]  [WinZip Computing, Inc., 4.1 (32-bit)]
    [C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL]  [N/A, N/A]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 1596][C:\Program Files\ACD Systems\ACDSee\5.0\ACDSee5.exe]  [ACD Systems, Ltd., 5, 0, 1, 6]
    [C:\Program Files\Common Files\ACD Systems\EN\ACDAppInfo.dll]  [ACD Systems Inc., 3, 0, 0, 9]
    [C:\Program Files\Common Files\ACD Systems\EN\ACDInTouch.dll]  [ACD Systems Inc., 3, 0, 0, 9]
    [C:\Program Files\Common Files\ACD Systems\EN\ipwssl5.dll]  [/n software inc. - www.nsoftware.com, 5.0.0.852]
    [C:\Program Files\Common Files\ACD Systems\ShellIntMgr.dll]  [ACD Systems Ltd., 1, 0, 2, 24]
    [C:\Program Files\Common Files\ACD Systems\EN\ACDCLClient.dll]  [ACD SYSTEMS, 1, 0, 0, 6]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\Common Files\ACD Systems\PlugIns\IDE_ACDStd.apl]  [ACD Systems, Ltd., 1, 3, 6, 6]
    [C:\Program Files\Common Files\ACD Systems\IDBSvrps.dll]  [ACD Systems Ltd., 1, 0, 0, 23]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 1444][C:\Program Files\Common Files\ACD Systems\IDBSvr.exe]  [ACD Systems Ltd., 1, 0, 3, 3]
    [C:\Program Files\Common Files\ACD Systems\ExtDB.dll]  [ACD Systems Ltd., 1, 0, 3, 1]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\Common Files\ACD Systems\IDBSvrps.dll]  [ACD Systems Ltd., 1, 0, 0, 23]
[PID: 1400][C:\PROGRA~1\AhnLab\V3\V3Pro32.exe]  [AhnLab, Inc., 6, 0, 0, 19]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\PROGRA~1\AhnLab\V3\V3MainUI.dll]  [AhnLab, Inc., 6, 1, 0, 179]
    [C:\PROGRA~1\AhnLab\V3\Vfc62.dll]  [AhnLab, Inc., 6, 2, 1, 3]
    [C:\PROGRA~1\AhnLab\V3\V3Fvs.dll]  [AhnLab, Inc., 6, 1, 0, 71]
    [C:\PROGRA~1\AhnLab\V3\V3DrEx.dll]  [AhnLab, Inc., 7, 0, 0, 112]
    [C:\PROGRA~1\AhnLab\V3\V3ExLog.dll]  [AhnLab, Inc., 6, 0, 0, 31]
    [C:\PROGRA~1\AhnLab\V3\AhnI18N.dll]  [AhnLab, Inc., 6, 0, 0, 18]
    [C:\PROGRA~1\AhnLab\V3\V3DBPL32.dll]  [AhnLab, Inc., 6, 0, 0, 4]
    [C:\PROGRA~1\AhnLab\V3\V3LogEx.dll]  [AhnLab, Inc., 6, 1, 0, 2]
    [C:\PROGRA~1\AhnLab\V3\v3back32.dll]  [AhnLab, Inc., 6, 1, 0, 7]
    [C:\PROGRA~1\AhnLab\V3\Sape.dll]  [AhnLab, Inc., 6, 0, 0, 12]
    [C:\PROGRA~1\AhnLab\V3\V3CfgE.dll]  [AhnLab, Inc., 6, 0, 0, 96]
    [C:\PROGRA~1\AhnLab\V3\V3CfgUL.dll]  [AhnLab, Inc., 6, 0, 0, 174]
    [C:\PROGRA~1\AhnLab\V3\V3SSCtrl.dll]  [AhnLab, Inc., 6, 0, 0, 100]
    [C:\PROGRA~1\AhnLab\V3\AhnInst.dll]  [AhnLab, Inc., 6, 0, 0, 54]
    [C:\PROGRA~1\AhnLab\V3\NLS\V3Dr0804.nls]  [AhnLab, Inc., 7, 0, 0, 8]
    [C:\PROGRA~1\AhnLab\V3\NLS\fvs0804.nls]  [AhnLab, Inc., 6, 0, 0, 31]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\PROGRA~1\AhnLab\V3\NLS\Main0804.nls]  [AhnLab, Inc., 6, 0, 0, 32]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 1488][C:\Program Files\HyperSnap\HprSnap6.exe]  [Hyperionics Technology LLC, 6, 10, 1, 0]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\Program Files\HyperSnap\LTFIL10N.DLL]  [LEAD Technologies, Inc., 10.0.0.024]
    [C:\Program Files\HyperSnap\LTKRN10N.dll]  [LEAD Technologies, Inc., 10.0.0.024]
    [C:\Program Files\HyperSnap\LTIMG10N.dll]  [LEAD Technologies, Inc., 10.0.0.018]
    [C:\Program Files\HyperSnap\LTDIS10N.dll]  [LEAD Technologies, Inc., 10.0.0.024]
    [C:\Program Files\HyperSnap\LTTWN10N.dll]  [LEAD Technologies, Inc., 10.0.0.024]
    [C:\Program Files\HyperSnap\LTDLG10N.dll]  [LEAD Technologies, Inc., 10.0.0.024]
    [C:\Program Files\HyperSnap\LTEFX10N.dll]  [LEAD Technologies, Inc., 10.0.0.018]
    [C:\Program Files\HyperSnap\HprRes6.dll]  [Hyperionics Technology LLC, 6, 10, 1, 0]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
    [C:\WINNT\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [C:\Program Files\HyperSnap\LFFAX10N.DLL]  [LEAD Technologies, Inc., 10.0.0.018]
    [C:\Program Files\HyperSnap\LFCMP10N.DLL]  [LEAD Technologies, Inc., 10.0.0.024]
    [C:\Program Files\HyperSnap\LFTIF10N.DLL]  [LEAD Technologies, Inc., 10.0.0.022]
    [C:\Program Files\HyperSnap\LFLMB10N.DLL]  [LEAD Technologies, Inc., 10.0.0.011]
    [C:\Program Files\HyperSnap\LFBMP10N.DLL]  [LEAD Technologies, Inc., 10.0.0.013]
    [C:\Program Files\HyperSnap\LFPCX10N.DLL]  [LEAD Technologies, Inc., 10.0.0.009]
[PID: 1108][C:\Program Files\FlashGet\FlashGet.exe]  [FlashGet.com, 1, 8, 1, 1002]
    [C:\Program Files\FlashGet\FGBTCORE.dll]  [N/A, 1, 0, 0, 36]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
    [C:\Program Files\FlashGet\fgupdate.dll]  [www.flashget.com, 1, 8, 1, 1002]
[PID: 1748][C:\Program Files\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5, 5, 5, 269]
    [C:\Program Files\Thunder\Program\msgmanage.dll]  [, 1, 0, 0, 1]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
    [C:\Program Files\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
    [C:\Program Files\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 46]
    [C:\Program Files\Thunder\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 46]
    [C:\Program Files\Thunder\Program\iTargetAD.dll]  [N/A, N/A]
    [C:\Program Files\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
    [C:\Program Files\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
    [C:\Program Files\Thunder\Components\PortVerify\PortVerify.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\Program Files\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\Program Files\Thunder\Components\DTAG\DTAG.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [C:\Program Files\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 0, 3, 14]
    [C:\Program Files\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
    [C:\Program Files\Thunder\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 7]
    [C:\Program Files\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
    [C:\Program Files\Thunder\Components\VPSHELL\VPSHELL.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Thunder\Components\VPSHELL\VideoPicture.dll]  [XunLei, 1, 0, 0, 1]
    [C:\Program Files\Thunder\Plugins\TingTing\TingTing.dll]  [Thunder Networking Technologies,LTD, 1, 1, 1, 12]
    [C:\Program Files\Thunder\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
[PID: 264][C:\Program Files\WinRAR\WinRAR.exe]  [N/A, N/A]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]
[PID: 1796][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.482\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [C:\WINNT\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [C:\Program Files\Unlocker\UnlockerHook.dll]  [N/A, N/A]
    [C:\Program Files\HyperSnap\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 2, 0]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  Error. [超级解霸3000]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================


[/CODE]