金山毒霸2009官方下载金山清理专家官方下载金山网盾官方下载金山急救箱官方下载
返回列表 回复 发帖
KSDBEX03549387

新兵

积分
15 
威望
30  
元宝
0  
铜钱
24  
1楼
打印
tT
发表于 2008-11-9 11:14 | 只看该作者

[求助] 能不能被关注一下？打客服电话都没人接！这个恶心的www.f127.com就这么难解决吗？

客服, 恶心, 电话, 解决
www.f127.com这个网站  我用金山清理专家----恶意软件查杀 清除了  重启了电脑  主页好了  但是没过10分钟 打开IE又变成  哪个恶心的网站了 ！  我隐藏了安全项 什么都没有了啊  但是现在IE还是被修改  能关注一下吗？

==============================================================
        金山清理专家系统诊断报告
该诊断报告由金山清理专家提供 http://www.duba.net
==============================================================
诊断时间:            2008-11-09, 11:13
诊断平台:            Windows XP [5.1.2600] Service Pack 3
IE版本:              Internet Explorer V7.0.13.5730
计算机物理内存:      2047(MB)
当前可用内存:        1535(MB)
硬盘总大小:          144(GB)
硬盘可用空间:        92(GB)
清理专家版本:        2008.07.16.472
恶意软件库版本:      2008.10.30.1
漏洞库版本:          2008.10.29.1


==============================================================
        启动文件夹位置
==============================================================
Common Startup:      C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Startup:             C:\Documents and Settings\double\「开始」菜单\程序\启动
Common Startup:      %ALLUSERSPROFILE%\「开始」菜单\程序\启动
==============================================================
        Host File
==============================================================
127.0.0.1       localhost
==============================================================
        其他安全区域
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
        [显示摇曳 CPL 扩展]         <deskpan.dll>
收藏 分享 评分
回复 引用

订阅 TOP

一把锈剑

上将(超级版主)

积分
12174 
威望
21999  
元宝
89  
铜钱
7595  

勤奋版主天才奖最拉风人物吃喝玩乐总指挥毒霸MVP勋章杀软原创技术写手勋章技术大师
2楼
发表于 2008-11-9 11:20 | 只看该作者
使用sreng智能扫描个日志贴上来 有助分析问题(请不要修改日志内容,扫描时请关闭所有手动打开的程
序,复制上来如果不能显示的 请去掉日志前面的[CODE])，不能运行请尝试改名为
ko.scr运行

扫描前关闭所有手工打开的软件和窗口,扫描后将日志发上来.但请不要用附件形式
贴.

SRENG 官方下载页面
金山急救箱清除顽固病毒
金山网盾上x网不中毒
一把锈剑的一亩三分地
xp系统遇毒先上金山急救箱

遇到主页不能修改联系QQ 1055793688 解决
回复 引用

TOP

天月来了

特邀嘉宾

积分
1226 
威望
2662  
元宝
1  
铜钱
1666  
3楼
发表于 2008-11-9 11:20 | 只看该作者
如果不是在局域网里


就扫SRENG日志发这论坛来

下载最新版本的SRENG工具：http://www.kztechs.com/sreng/download.html

1 下载的是压缩包，必须解压缩后再运行。
2 运行SREng***.EXE
3 选择主界面左边的：智能扫描=》扫描=》保存报告
4 把报告保存后，将日志完整发这论坛来。不要有遗漏。

建议以附件形式发来
点击我这贴右下角的“引用”或最右下角的那个较大的“回复”然后就应该知道怎么发了。
回复 引用

TOP

KSDBEX03549387

新兵

积分
15 
威望
30  
元宝
0  
铜钱
24  
4楼
发表于 2008-11-9 11:30 | 只看该作者
  1. 2008-11-09,11:28:40
  2. System Repair Engineer 2.7.0.1210
  3. Smallfrogs (http://www.KZTechs.com)
  4. Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
  5. 以下内容被选中：
  6.     所有的启动项目（包括注册表、启动文件夹、服务等）
  7.     浏览器加载项
  8.     正在运行的进程（包括进程模块信息）
  9.     文件关联
  10.     Winsock 提供者
  11.     Autorun.inf
  12.     HOSTS 文件
  13.     进程特权扫描
  14.     计划任务
  15.     API HOOK
  16.     隐藏进程

  18. 启动项目
  19. 注册表
  20. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  21.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
  22.     <KavPFW><"D:\金山毒霸2008\kpfw32.exe" -startup>  [(Verified)"Zhuhai  Kingsoft Software Co.,Ltd"]
  23. [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  24.     <load><>  [N/A]
  25. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  26.     <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
  27.     <KavStart><"D:\金山毒霸2008\KAVStart.exe" -startup>  [(Verified)"Zhuhai  Kingsoft Software Co.,Ltd"]
  28.     <RTHDCPL><RTHDCPL.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  29.     <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  30. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  31.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
  32.     <Userinit><C:\WINDOWS\system32\userinit.exe>  [(Verified)Microsoft Windows Component Publisher]
  33. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  34.     <AppInit_DLLs><>  [N/A]
  35. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  36.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
  37. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  38.     <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
  39. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  40.     <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
  41.     <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
  42.     <WebCheck><C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Windows Component Publisher]
  43.     <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Component Publisher]
  44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
  45.     <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]
  46. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
  47.     <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Component Publisher]
  48. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
  49.     <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Component Publisher]
  50. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
  51.     <WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
  52. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
  53.     <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
  54. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
  55.     <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
  56. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
  57.     <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
  58. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
  59.     <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Component Publisher]
  60. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
  61.     <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
  62. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
  63.     <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
  64. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
  65.     <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
  66.     <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
  67. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
  68.     <IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Windows Component Publisher]
  69. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
  70.     <Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
  71. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
  72.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
  73. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
  74.     <Browser Customizations><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
  75. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  76.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
  77. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  78.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
  79. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  80.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
  81. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  82.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
  83. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  84.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
  85. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  86.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
  87. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  88.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
  89. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
  90.     <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
  91. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
  92.     <Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -BaseSettings>  [(Verified)Microsoft Windows Component Publisher]
  93. [HKEY_CURRENT_USER\Control Panel\Desktop]
  94.     <SCRNSAVE.EXE><C:\WINDOWS\system32\ssmypics.scr>  [(Verified)Microsoft Windows Component Publisher]
  95. ==================================
  96. 启动文件夹
  97. N/A
  98. ==================================
  99. 服务
  100. [##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## / Bonjour Service][Running/Auto Start]
  101.   <"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Computer, Inc.>
  102. [Contrl Center of Storm Media / ccosm][Running/Auto Start]
  103.   <D:\暴风影音\stormliv.exe /asservice><北京暴风网际科技有限公司>
  104. [FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start]
  105.   <"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"><Macrovision Europe Ltd.>
  106. [InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
  107.   <"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
  108. [Kingsoft Internet Security Common Service / KISSvc][Running/Auto Start]
  109.   <D:\金山毒霸2008\KISSvc.EXE><Kingsoft Corporation>
  110. [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
  111.   <"D:\金山毒霸2008\KPfwSvc.EXE"><Kingsoft Corporation>
  112. [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
  113.   <D:\金山毒霸2008\KWatch.EXE><Kingsoft Corporation>
  114. [NBService / NBService][Stopped/Manual Start]
  115.   <C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe><Nero AG>
  116. [NMIndexingService / NMIndexingService][Stopped/Manual Start]
  117.   <"C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"><Nero AG>
  118. ==================================
  119. 驱动程序
  120. [ASUS Virtual Video Capture Device Driver / asusgsb][Running/Manual Start]
  121.   <system32\drivers\asusgsb.sys><ASUSTeK Computer Inc.>
  122. [Enhanced Display Driver Helper Service / asuskbnt][Running/System Start]
  123.   <system32\drivers\atkkbnt.sys><ASUSTeK COMPUTER INC.>
  124. [NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller / AtcL002][Running/Manual Start]
  125.   <system32\DRIVERS\l251x86.sys><Atheros Communications Inc.>
  126. [EIO / EIO][Running/System Start]
  127.   <\??\C:\WINDOWS\system32\drivers\EIO.sys><ASUSTeK Computer Inc.>
  128. [Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
  129.   <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
  130. [HPMobileDisk / HPMobileDisk][Running/Auto Start]
  131.   <\??\C:\WINDOWS\system32\Drivers\hpmobiledisk.sys><HP>
  132. [imagedrv / imagedrv][Running/Boot Start]
  133.   <\SystemRoot\System32\Drivers\imagedrv.sys><Ahead Software AG>
  134. [imagesrv / imagesrv][Running/Boot Start]
  135.   <\SystemRoot\system32\DRIVERS\imagesrv.sys><Ahead Software AG>
  136. [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  137.   <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
  138. [IVI ASPI Shell / Iviaspi][Running/Manual Start]
  139.   <system32\drivers\iviaspi.sys><InterVideo, Inc.>
  140. [Kingsoft AntiARP NIDS Driver / KAntiarp][Running/Manual Start]
  141.   <system32\DRIVERS\kantiarp.sys><Kingsoft Corporation>
  142. [KAVBase / KAVBase][Running/Auto Start]
  143.   <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
  144. [KAVBootC / KAVBootC][Running/Boot Start]
  145.   <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
  146. [KAVSafe / KAVSafe][Running/Auto Start]
  147.   <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
  148. [KNetWch / KNetWch][Running/System Start]
  149.   <\??\D:\金山毒霸2008\KNetWch.SYS><Kingsoft Corporation>
  150. [KWatch3 / KWatch3][Running/Auto Start]
  151.   <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
  152. [ATK0110 ACPI UTILITY / MTsensor][Running/Manual Start]
  153.   <system32\DRIVERS\ASACPI.sys><>
  154. [nv / nv][Running/Manual Start]
  155.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
  156. [Padus ASPI Shell / pfc][Running/Manual Start]
  157.   <system32\drivers\pfc.sys><Padus, Inc.>
  158. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  159.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  160. [Secdrv / Secdrv][Stopped/Manual Start]
  161.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
  162. [sysHostSvc / sysHostSvc][Running/Auto Start]
  163.   <\??\C:\WINDOWS\system32\drivers\GuiHelp.sys><Microsoft Corporation>
  164. [TCP/IP Protocol Driver / Tcpip][Running/System Start]
  165.   <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
  166. [ASUS Video3D Service / Video3D][Running/Manual Start]
  167.   <System32\Drivers\Video3D32.sys><ASUSTeK COMPUTER INC.>
  168. ==================================
  169. 浏览器加载项
  170. [WebThunder Browser Helper]
  171.   {00000AAA-A363-466E-BEF5-9BB68697AA7F} <D:\web迅雷\WebThunderBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
  172. [ThunderAtOnce Class]
  173.   {01443AEC-0FD1-40fd-9C87-E93D1494C233} <D:\迅雷5\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
  174. [Thunder Browser Helper]
  175.   {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\迅雷5\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
  176. [kingsoft browser shield]
  177.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <D:\金山毒霸2008\KASBrowserShield.DLL, (Signed) Kingsoft Corporation>
  178. [启动迅雷5]
  179.   {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <D:\迅雷5\Thunder.exe, Thunder Networking Technologies,LTD>
  180. [浩方对战平台]
  181.   {0A155D3C-68E2-4215-A47A-E800A446447A} <D:\浩方对战平台\GameClient.exe, (Signed) 上海浩方在线信息技术有限公司>
  182. [IEBuddyExtControl Class]
  183.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <D:\金山毒霸2008\IEBuddyExt.DLL, (Signed) Kingsoft Corporation>
  184. []
  185.   {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
  186. [Messenger]
  187.   {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
  188. []
  189.   {00000055-9980-0010-8000-00AA00389B71} <, >
  190. [PhotoDrawEx Class]
  191.   {05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} <C:\WINDOWS\system32\QQPhotoDrawEx.dll, (Signed) TENCENT>
  192. [PhotoDraw Class]
  193.   {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} <D:\QQ\Qzone\QQPhotoDraw.dll, (Signed) TENCENT>
  194. [RavOnline Class]
  195.   {9FAFB576-6933-4CCC-AB3D-B988EC43D04E} <C:\WINDOWS\Downloaded Program Files\RavOLCtl.dll, Beijing Rising Information Technology Co., Ltd.>
  196. [Shockwave Flash Object]
  197.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx, (Signed) Adobe Systems, Inc.>
  198. [KUpdateObj2 Class]
  199.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, (Signed) Kingsoft Corporation>
  200. []
  201.   {00000055-9980-0010-8000-00AA00389B71} <, >
  202. [WebThunder Browser Helper]
  203.   {00000AAA-A363-466E-BEF5-9BB68697AA7F} <D:\web迅雷\WebThunderBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
  204. [ThunderAtOnce Class]
  205.   {01443AEC-0FD1-40FD-9C87-E93D1494C233} <D:\迅雷5\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
  206. [WebThunder Class]
  207.   {03507A1A-E0C5-4404-AA26-205385C0892D} <, >
  208. [PhotoDrawEx Class]
  209.   {05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} <C:\WINDOWS\system32\QQPhotoDrawEx.dll, (Signed) TENCENT>
  210. []
  211.   {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
  212. []
  213.   {0A155D3C-68E2-4215-A47A-E800A446447A} <, >
  214. [GerneralPeerID Class]
  215.   {0A47E819-F82E-4D5D-B806-6A9EA94D68CD} <D:\迅雷5\Components\InMedia\peerid.dll, >
  216. [Windows Media Player]
  217.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
  218. [PhotoDraw Class]
  219.   {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} <D:\QQ\Qzone\QQPhotoDraw.dll, (Signed) TENCENT>
  220. []
  221.   {24F06550-65E3-4D1C-8CFE-839C296B5530} <, >
  222. [XML DOM Document]
  223.   {2933BF90-7B36-11D2-B20E-00C04F983E60} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  224. [DHTML Edit Control Safe for Scripting for IE5]
  225.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
  226. [WebThunder DapPlayer]
  227.   {2EEDA47E-8D5C-4d7e-B4B6-E16E19218555} <D:\web迅雷\DownAndPlay\DapPlayer3.0.41.65.699.dll, ShenZhen Thunder Networking Technologies Ltd.>
  228. [RealPlayer RAM Download Handler]
  229.   {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <D:\暴风影音\Codec\rmoc3260.dll, (Signed) RealNetworks, Inc.>
  230. [Tabular Data Control]
  231.   {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, (Signed) Microsoft Corporation>
  232. [IETag Factory]
  233.   {38481807-CA0E-42D2-BF39-B33AF135CC4D} <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, (Signed) Microsoft Corporation>
  234. [IEBuddyExtControl Class]
  235.   {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <D:\金山毒霸2008\IEBuddyExt.DLL, (Signed) Kingsoft Corporation>
  236. [XML Document]
  237.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  238. [Thunder Agent Class]
  239.   {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <D:\迅雷5\ComDlls\ThunderAgent_Now.dll, (Signed) Thunder Networking Technologies,LTD>
  240. [KLeakScan Class]
  241.   {4BB7444F-E4DA-4E02-AAAD-505A0E9855D4} <C:\Program Files\KOS\KosClean.dll, (Signed) Kingsoft Corporation>
  242. [Microsoft Terminal Services Client Control (redist)]
  243.   {4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  244. [Microsoft Terminal Services Client Control (redist)]
  245.   {4EDCB26C-D24C-4e72-AF07-B576699AC0DE} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  246. [HHCtrl Object]
  247.   {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, (Signed) Microsoft Corporation>
  248. [Shell Name Space]
  249.   {55136805-B2DE-11D1-B9F2-00A0C98BC547} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
  250. []
  251.   {5C56F4A7-71FC-4FFD-A9D7-18FB87A9DFC6} <, >
  252. []
  253.   {642D2749-A4FC-49C5-8384-E39E009EBCDD} <, >
  254. [XMP Class]
  255.   {6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, >
  256. [XDRM]
  257.   {693571CB-54A3-4E90-9D52-EEAE1334E2D3} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work, >
  258. []
  259.   {6A19C29D-ED45-4483-8999-9F939C8161F2} <, >
  260. [StormPlayer Object]
  261.   {6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB} <D:\暴风影音\mps.dll, 北京暴风网际科技有限公司>
  262. [Windows Media Player]
  263.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
  264. [Active Desktop Mover]
  265.   {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, (Signed) N/A>
  266. [Microsoft Terminal Services Client Control (redist)]
  267.   {7390f3d8-0439-4c05-91e3-cf5cb290c3d0} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  268. [Microsoft Terminal Services Client Control (redist)]
  269.   {7584c670-2274-4efb-b00b-d6aaba6d3850} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  270. [MediaComm Class]
  271.   {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <D:\迅雷5\Components\InMedia\MediaAddin17.dll, Thunder Networking Technologies,LTD>
  272. [Microsoft Web Browser]
  273.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
  274. [Thunder Browser Helper]
  275.   {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\迅雷5\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
  276. [XML DOM Document 4.0]
  277.   {88D969C0-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
  278. [XML DOM Document 5.0]
  279.   {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\msxml5.dll, (Signed) Microsoft Corporation>
  280. [XML DOM Document 6.0]
  281.   {88D96A05-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
  282. [XML HTTP 6.0]
  283.   {88D96A0A-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
  284. [Microsoft Terminal Services Client Control (redist)]
  285.   {9059f30f-4eb1-4bd2-9fdc-36f43a218f4a} <%systemroot%\system32\mstscax.dll, (Signed) N/A>
  286. []
  287.   {962EFB8E-2683-42D4-AC74-AAA4C759B9C6} <, >
  288. [RavOnline Class]
  289.   {9FAFB576-6933-4CCC-AB3D-B988EC43D04E} <C:\WINDOWS\Downloaded Program Files\RavOLCtl.dll, Beijing Rising Information Technology Co., Ltd.>
  290. [RMGetLicense Class]
  291.   {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, (Signed) Microsoft Corporation>
  292. [DapCtrl Class]
  293.   {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5803.60.(844).dll, ShenZhen Thunder Networking Technologies Ltd.>
  294. [RDS.DataSpace]
  295.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\system\msadc\msadco.dll, (Signed) Microsoft Corporation>
  296. [KScanSpyWare Class]
  297.   {C847FDE7-B612-47ED-B32C-4000C9DD26B6} <C:\Program Files\KOS\KosClean.dll, (Signed) Kingsoft Corporation>
  298. [QQPlayerSvr Proxy Control]
  299.   {CD108273-D434-43E6-AA90-1469F97EB398} <D:\QQ\QzoneMusic.dll, (Signed) 腾讯科技>
  300. [AUDIO__MP3 Moniker Class]
  301.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
  302. [VIDEO__AVI Moniker Class]
  303.   {CD3AFA88-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
  304. [VIDEO__X_MS_ASF Moniker Class]
  305.   {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
  306. [VIDEO__X_MS_WMV Moniker Class]
  307.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
  308. [RealPlayer G2 Control]
  309.   {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <D:\暴风影音\Codec\rmoc3260.dll, (Signed) RealNetworks, Inc.>
  310. [Shockwave Flash Object]
  311.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx, (Signed) Adobe Systems, Inc.>
  312. [KUpdateObj2 Class]
  313.   {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINDOWS\system32\KingSoft\KOS\UpdateOcx2.dll, (Signed) Kingsoft Corporation>
  314. [kingsoft browser shield]
  315.   {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <D:\金山毒霸2008\KASBrowserShield.DLL, (Signed) Kingsoft Corporation>
  316. [MessengerChecker Class]
  317.   {DA4F543C-C8A9-4E88-9A79-548CBB46F18F} <D:\YahooMessenger\YPagerChecker.dll, (Signed) Yahoo! Inc.>
  318. [Microsoft Silverlight]
  319.   {DFEAF541-F3E1-4C24-ACAC-99C30715084A} <C:\Program Files\Microsoft Silverlight\2.0.31005.0\npctrl.dll, (Signed)  Microsoft Corporation>
  320. [KVirusScan Class]
  321.   {E176B817-4905-4CDF-8C9C-0AF3EA3B4AC7} <C:\Program Files\KOS\KosClean.dll, (Signed) Kingsoft Corporation>
  322. [KAccountManager Class]
  323.   {E176B817-4905-4CDF-8C9C-0AF3EA3B4AC9} <C:\Program Files\KOS\KosClean.dll, (Signed) Kingsoft Corporation>
  324. []
  325.   {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
  326. [RevealTrans]
  327.   {E31E87C4-86EA-4940-9B8A-5BD5D179A737} <C:\WINDOWS\system32\Dxtmsft.dll, (Signed) Microsoft Corporation>
  328. [TimwpDll.TimwpCheck]
  329.   {ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} <D:\QQ\Timwp.dll, (Signed) TENCENT>
  330. [XML HTTP Request]
  331.   {ED8C108E-4349-11D2-91A4-00C04F7969E8} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  332. [Thunder DapPlayer]
  333.   {EEDD6FF9-13DE-496B-9A1C-D78B3215E266} <D:\迅雷5\Components\DownAndPlay\DapPlayer3.0.5712.71.844.dll, ShenZhen Thunder Networking Technologies Ltd.>
  334. [XPPlayer Class]
  335.   {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.0.0.181.(844).dll, Xunlei Networking Technologies,LTD>
  336. [XML DOM Document 3.0]
  337.   {F5078F32-C551-11D3-89B9-0000F81FE221} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  338. [Free Threaded XML DOM Document 3.0]
  339.   {F5078F33-C551-11D3-89B9-0000F81FE221} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  340. [XML HTTP 3.0]
  341.   {F5078F35-C551-11D3-89B9-0000F81FE221} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  342. [XSL Template 3.0]
  343.   {F5078F36-C551-11D3-89B9-0000F81FE221} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  344. [XML DOM Document]
  345.   {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  346. [XML HTTP]
  347.   {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
  348. []
  349.   {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
  350. [使用WEB迅雷下载]
  351.   <D:\web迅雷\GetUrl.htm, N/A>
  352. [使用WEB迅雷下载全部链接]
  353.   <D:\web迅雷\GetAllUrl.htm, N/A>
  354. [使用迅雷下载]
  355.   <D:\迅雷5\Program\GetUrl.htm, N/A>
  356. [使用迅雷下载全部链接]
  357.   <D:\迅雷5\Program\GetAllUrl.htm, N/A>
  358. [添加到QQ表情]
  359.   <D:\QQ\AddEmotion.htm, N/A>
  360. ==================================
  361. 正在运行的进程
  362. [PID: 884][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  363. [PID: 932][\??\C:\WINDOWS\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  364. [PID: 956][\??\C:\WINDOWS\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
  365. [PID: 1000][C:\WINDOWS\system32\services.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  366. [PID: 1012][C:\WINDOWS\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
  367. [PID: 1188][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  368. [PID: 1276][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  369.     [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
  370. [PID: 1388][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  371.     [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
  372. [PID: 1460][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  373. [PID: 1532][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
  374. [PID: 1968][C:\WINDOWS\Explorer.EXE]  [(Verified) Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
  375.     [D:\金山毒霸2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
  376.     [D:\金山毒霸2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
  377.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
  378.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
  379.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
  380.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
  381.     [D:\金山毒霸2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,07,09,459]
  382.     [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll]  [Nero AG, 2, 9, 1, 0]
  383.     [C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
  384.     [C:\Program Files\Nero\Nero 7\Nero BackItUp\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  385.     [C:\Program Files\Nero\Nero 7\Nero BackItUp\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
  386.     [D:\QQ\qdshm.dll]  [, 1, 0, 101, 20]
  387.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
  388.     [D:\转换器\AMV转换器\AMV转换\AmvTransform.dll]  [, 1, 0, 0, 1]
  389.     [D:\金山游侠5\Tools\KVD\kscdrush.dll]  [金山软件股份有限公司, 5, 0, 0, 0]
  390.     [D:\Windows优化大师\WoptiEncryptModule.dll]  [共软网络, 1.0.8.103]
  391.     [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll]  [Nero AG, 2, 9, 1, 0]
  392.     [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
  393.     [D:\迅雷5\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.29]
  394.     [D:\迅雷5\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
  395.     [D:\迅雷5\Components\ResWorker\DsBho_01.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 20]
  396.     [D:\迅雷5\Components\ResWorker\DataProcessor_01.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
  397.     [C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll]  [Nero AG, 2, 0, 0, 8]
  398.     [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.11.6218]
  399.     [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.11.6218]
  400.     [C:\WINDOWS\system32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.6218]
  401.     [C:\WINDOWS\system32\nvshell.dll]  [, ]
  402.     [C:\WINDOWS\system32\IMSC40W.IME]  [Microsoft Corporation, 6.0.0.2524]
  403.     [D:\web迅雷\WebThunderBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 75]
  404. [PID: 228][C:\WINDOWS\RTHDCPL.EXE]  [Realtek Semiconductor Corp., 2.1.3.0]
  405.     [D:\金山毒霸2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
  406.     [D:\金山毒霸2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
  407.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
  408.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
  409.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
  410.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
  411. [PID: 248][C:\WINDOWS\system32\ctfmon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
  412. [PID: 900][C:\Program Files\Bonjour\mDNSResponder.exe]  [Apple Computer, Inc., 1,0,3,1]
  413. [PID: 1408][D:\暴风影音\stormliv.exe]  [北京暴风网际科技有限公司, 3, 8, 6, 20]
  414.     [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
  415. [PID: 1916][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)]
  416. [PID: 1208][C:\WINDOWS\System32\alg.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
  417. [PID: 2944][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 7.00.6000.16735 (vista_gdr.080820-1506)]
  418.     [D:\金山毒霸2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
  419.     [D:\金山毒霸2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
  420.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
  421.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
  422.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
  423.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
  424.     [D:\web迅雷\WebThunderBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 75]
  425.     [D:\迅雷5\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.29]
  426.     [D:\迅雷5\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
  427.     [D:\迅雷5\Components\ResWorker\DsBho_01.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 20]
  428.     [D:\迅雷5\Components\ResWorker\DataProcessor_01.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
  429.     [D:\金山毒霸2008\KASBrowserShield.DLL]  [Kingsoft Corporation, 2008,04,15,2]
  430.     [D:\金山毒霸2008\IEBuddy.dll]  [Kingsoft Corporation, 2008,09,04,599]
  431.     [D:\金山毒霸2008\IEBuddyExt.DLL]  [Kingsoft Corporation, 2008,06,24,415]
  432.     [D:\金山毒霸2008\KANTray.dll]  [Kingsoft Corporation, 2008,06,24,415]
  433.     [D:\金山毒霸2008\KAVAFish.DLL]  [Kingsoft Corporation, 2008,06,24,415]
  434.     [D:\金山毒霸2008\kisfree.dll]  [Kingsoft Corporation, 2008,10,15,644]
  435.     [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
  436.     [C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx]  [Adobe Systems, Inc., 10,0,12,36]
  437.     [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 3.6.0.1653]
  438. [PID: 3308][D:\报告电脑信息\SREngLdr.EXE]  [Smallfrogs Studio, 2.7.0.1210]
  439. [PID: 3332][D:\报告电脑信息\SRE9ec8e1a1.EXE]  [Smallfrogs Studio, 2.7.0.1210]
  440.     [D:\金山毒霸2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2008,04,02,5]
  441.     [D:\金山毒霸2008\kis.dll]  [Kingsoft Corporation, 2008,04,22,364]
  442.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
  443.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
  444.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
  445.     [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
  446.     [D:\报告电脑信息\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
  447.     [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
  448. ==================================
  449. 文件关联
  450. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  451. .EXE  OK. ["%1" %*]
  452. .COM  OK. ["%1" %*]
  453. .PIF  OK. ["%1" %*]
  454. .REG  OK. [regedit.exe "%1"]
  455. .BAT  OK. ["%1" %*]
  456. .SCR  OK. ["%1" /S]
  457. .CHM  Error. ["hh.exe" %1]
  458. .HLP  Error. [winhlp32.exe %1]
  459. .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  460. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  461. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  462. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  463. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
  464. ==================================
  465. Winsock 提供者
  466. N/A
  467. ==================================
  468. Autorun.inf
  469. N/A
  470. ==================================
  471. HOSTS 文件
  472. 127.0.0.1       localhost
  473. ==================================
  474. 进程特权扫描
  475. 特殊特权被允许： SeLoadDriverPrivilege [PID = 3308, D:\报告电脑信息\SRENGLDR.EXE]
  476. ==================================
  477. 计划任务
  478. [已启用] SogouImeMgr.job
  479.         D:\SOGOU~1\360~1.165\PinyinRepair.exe
  480. ==================================
  481. API HOOK
  482. N/A
  483. ==================================
  484. 隐藏进程
  485. N/A
  486. ==================================
复制代码
回复 引用

TOP

KSDBEX03549387

新兵

积分
15 
威望
30  
元宝
0  
铜钱
24  
5楼
发表于 2008-11-9 11:33 | 只看该作者
还有就是  有时候会改  有时候又好了  IE主页。。。。大虾们可以试试 先 修改主页为  www.f127.com 然后再改成别的  但是打开时还是  www.f127.com！！！
回复 引用

TOP

lichun005

荣誉版主

积分
5627 
威望
11588  
元宝
49  
铜钱
267  

宣传大使星光奖新人进步奖最拉风人物黄金勋章毒霸MVP勋章紫冠勋章安全新秀电脑小行家感恩勋章最佳伯乐勋章知恩图报我很可爱进程新星启动小师傅安全之星勋章玩Q小达人电脑魔鬼司令技术拉风人物奥运小密探电脑技术顾问周刊评论员单身电脑牛人电脑技术团 COS新星幕后英雄勋章二等功勋章达人奖希望勋章精华大师奖
6楼
发表于 2008-11-9 12:18 | 只看该作者
日志没瞧见什么
先看下面的图
不行再考虑注册表是否被修改
还有就是
启动项目 －－ 注册表之如下项修改：
注意该项[Userinit]修改：把<C:\WINDOWS\system32\userinit.exe>修改为<C:\WINDOWS\system32\userinit.exe,>逗号不可省略
未命名.JPG
1

评分次数

  • cchao21

我的电脑小窝
sreng2.7扫描工具下载
电脑技巧版块为你解答常见疑难
回复 引用

TOP

天月来了

特邀嘉宾

积分
1226 
威望
2662  
元宝
1  
铜钱
1666  
7楼
发表于 2008-11-9 14:04 | 只看该作者

回复 5楼 的帖子

日志未看出什么

你可能需要打开注册表搜索所有包含www.f127.com的项目，将其修改为about:blank

然后用杀毒软件自己设置一下监控规则，监控一下你修改过的那些位置，到底又被什么东西改回头
1

评分次数

  • cchao21
回复 引用

TOP

KSDBEX03549387

新兵

积分
15 
威望
30  
元宝
0  
铜钱
24  
8楼
发表于 2008-11-9 14:22 | 只看该作者
我在注册表里搜索了 www.f127.com  结果有一项的  数据数值 现实的是  "C:\Program Files\Internet Explorer\iexplore.exe" http://www.f127.com         类型 REG_SZ  (默认） 是不是这个的问题？
回复 引用

TOP

cchao21

爱毒霸社区缉毒队

积分
1841 
威望
3959  
元宝
14  
铜钱
2526  

天才奖安全精英安全之星勋章电脑技术顾问
9楼
发表于 2008-11-9 16:13 | 只看该作者

回复 8楼 的帖子

其实方法6楼已给出了，打开IE属性删除C:\Program Files\Internet Explorer\iexplore.exe后的http://www.f127.com内容。或在注册表中删除C:\Program Files\Internet Explorer\iexplore.exe后的http://www.f127.com内容。
回复 引用

TOP

KSDBEX03549387

新兵

积分
15 
威望
30  
元宝
0  
铜钱
24  
10楼
发表于 2008-11-9 18:28 | 只看该作者
不管用  我修改了注册表 然后都没上网  过了一会注册表 又成  www.f127.com了
  在注册表 hkey_local_machine--software--classes--clsid--{871c5380-42a0-1069-a2ea-08002b30309d}--shell--openhomepage--command里  数值又变成"C:\Program Files\Internet Explorer\iexplore.exe" http://www.f127.com 了  无耐
回复 引用

TOP

KSDBEX03549387

新兵

积分
15 
威望
30  
元宝
0  
铜钱
24  
11楼
发表于 2008-11-9 18:32 | 只看该作者
顺便说一句  6楼的方法也不行  iexplore后面 什么都没有！！！
回复 引用

TOP

月下桂花

爱毒霸社区缉毒队

积分
2812 
威望
6120  
元宝
14  
铜钱
2665  

安全之星勋章周刊评论员电脑技术顾问希望勋章三等功勋章二等功勋章
12楼
发表于 2008-11-9 19:04 | 只看该作者
看下7楼的
我家有月亮.............
月下桂花
            
月下桂花的网盘
            
回复 引用

TOP

KSDBEX03549387

新兵

积分
15 
威望
30  
元宝
0  
铜钱
24  
13楼
发表于 2008-11-9 21:49 | 只看该作者
我说了  我修改过了 但是再开机后就不行了  IE主页又被修改了
回复 引用

TOP

腾空

少将

积分
11392 
威望
23994  
元宝
110  
铜钱
15047  

毒霸MVP勋章进程新星启动小师傅
14楼
发表于 2008-11-10 11:50 | 只看该作者
怀疑和楼主使用的系统有关系
你的系统不是原版系统吧，是什么ghost或者美化版什么的
腾空——Francis
回复 引用

TOP

天月来了

特邀嘉宾

积分
1226 
威望
2662  
元宝
1  
铜钱
1666  
15楼
发表于 2008-11-10 14:46 | 只看该作者

回复 13楼 的帖子

我需要你用杀毒软件自己设置一下监控规则，监控一下你修改过的那些位置，到底又被什么东西改回头

如果你实在不能弄

那就另法试试

这里依照这贴，用冰刃将需要的日志保存发来看：
http://bbs.ikaka.com/showtopic-8562949.aspx

还有一法，看这贴，将三文件压缩上传后的链接地址发来。
http://bbs.ikaka.com/showtopic-8562958.aspx
回复 引用

TOP

旌旗

上等兵

积分
128 
威望
271  
元宝
0  
铜钱
178  
16楼
发表于 2008-11-10 17:43 | 只看该作者
金山报的什么恶意软件？卸载不行么？
C:\WINDOWS\system32\drivers\GuiHelp.sys这个驱动可疑。。

[ 本帖最后由 旌旗 于 2008-11-10 18:02 编辑 ]
回复 引用

TOP

返回列表