瑞星卡卡安全论坛

我现在用的是拨号上网(不好意思),从昨晚开始我突然间拨号上网的速度极不稳定,最难过的就是打开网页的时候网速就会降到接近零,并且浏览器的CPU占用率达到了99%,本来我以为只是IE的问题,但我用了n种浏览器之后都是这样,并且像QQ,skype,雅虎通这样的即时通讯工具也无法登陆,它们也是CPU的占用率在99%左右,还有软件的在线升级也是这个情况;总之,只要是任何形式的访问网络,网速就会降到接近零,访问网络的程序CPU的占用率就会在99%左右!哎,苦恼啊!
补充：如果是中毒的话,到底是中了什么毒呢?

你的CPU是多少的呀

用HJ扫日志吧。。。

我的机子是Windows XP Professional sp2 ,CPU是Intel(R) Celeron(R) 2.66GHz

我在线等!

帮帮我吧!

打开任务管理器看看有没有奇怪的进程,或发个日志上来

完美卸载 - 系统检查检测报告!
.

--------------------------系统环境-------------------------
检测日期: 2006-2-16 9:55
Windows: Microsoft Windows XP
ServicePack: Service Pack 2
Update: 2600.xpsp_sp2_gdr.050301-1519
Internet Explorer: 6.0.2900.2180


-----------------------网络基础安全测试--------------------
密码安全检测:已经设置了管理员密码,建议:将密码复杂度和长度提高!
网络漏洞检测:空连接检查安全!

服务名称        是否运行              描述
RemoteRegistry [运行中] [说明:这个服务可能被利用远程操作注册表]
Windows Time  [运行中] [说明:这个服务可能被黑客利用来启动木马]
Telnet        [已停止] [说明:这个服务可能被黑客登录到您计算机]
Messenger      [已停止] [说明:这个服务常被广告商用来发垃圾广告]
Server        [运行中] [说明:如果你的电脑不用局域网中,可以关闭]


-----------------------计算机网络端口----------------------
协议      端口号              端口类型
TCP        445        Microsoft-DS
TCP        445        公共Internet文件系统(CIFS)
TCP        500        Internet密钥交换
TCP      4500        sae-urn
TCP        123        未知类型
TCP        123        未知类型
TCP      1052        未知类型


--------------------计算机系统组件体检----------------------
[编号:0]
[名称:\SystemRoot\System32\smss.exe]
[类型:运行进程]
[内容:未知]

[编号:1]
[名称:\??\C:\WINDOWS\system32\winlogon.exe]
[类型:运行进程]
[内容:未知]

[编号:2]
[名称:C:\WINDOWS\system32\services.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:3]
[名称:C:\WINDOWS\system32\lsass.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:4]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:5]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:6]
[名称:C:\WINDOWS\Explorer.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:7]
[名称:C:\WINDOWS\system32\spoolsv.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:8]
[名称:C:\WINDOWS\system32\RunDLL32.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:9]
[名称:C:\WINDOWS\VM_STI.EXE]
[类型:运行进程]
[内容:BIGDOG Copyright  2002]

[编号:10]
[名称:C:\WINDOWS\system32\nvsvc32.exe]
[类型:运行进程]
[内容:NVIDIA Driver Helper Service, Version 66.72 (C) NVIDIA Corporation. All rights reserved.]

[编号:11]
[名称:C:\WINDOWS\SOUNDMAN.EXE]
[类型:运行进程]
[内容:Realtek Sound Manager Copyright (c) 2001-2004 Realtek Semiconductor Corp.]

[编号:12]
[名称:C:\Program Files\Common Files\Real\Update_OB\realsched.exe]
[类型:运行进程]
[内容:RealPlayer (32-bit)  Copyright ? RealNetworks, Inc. 1995-2004]

[编号:13]
[名称:C:\HEROSOFT\Hero3000\SYSEXPLR.EXE]
[类型:运行进程]
[内容:未知]

[编号:14]
[名称:D:\完美卸载V2006\WmSysPro.exe]
[类型:运行进程]
[内容:系统保护+网络防火墙 版权所有 (C)剑锋工作室]

[编号:15]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:16]
[名称:D:\完美卸载V2006\WmNetPro.exe]
[类型:运行进程]
[内容:NetSecurity 应用程序 版权所有 (C) 2005 王剑锋]

[编号:17]
[名称:C:\WINDOWS\system32\ctfmon.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]

[编号:18]
[名称:C:\WINDOWS\system32\RunDLL32.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:19]
[名称:C:\WINDOWS\system32\wuauclt.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:20]
[名称:C:\Program Files\Internet Explorer\iexplore.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:21]
[名称:C:\WINDOWS\system32\wuauclt.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]

[编号:22]
[名称:D:\完美卸载V2006\MainCon.exe]
[类型:运行进程]
[内容:MainCon 应用程序 版权所有 (C) 2004]

[编号:23]
[名称:D:\完美卸载V2006\SysSec.exe]
[类型:运行进程]
[内容:完美卸载V2006-ChinaHijackThis 版权所有 (C) 2006]

[编号:24]
[分隔符:---------------------------------------------------------------------]

[编号:25]
[名称:D:\完美卸载V2006\WmSpiDrv.dll]
[类型:已加载DLL]
[内容:未知]

[编号:26]
[名称:C:\PROGRA~1\wint\wint.dll]
[类型:已加载DLL]
[内容:未知]

[编号:27]
[名称:C:\Program Files\WinRAR\rarext.dll]
[类型:已加载DLL]
[内容:未知]

[编号:28]
[名称:C:\WINDOWS\system32\CBShell.dll]
[类型:已加载DLL]
[内容:CBShell Module Copyright 2005]

[编号:29]
[名称:C:\PROGRA~1\baidu\bar\baidubar.dll]
[类型:已加载DLL]
[内容:BaiduBar Module Copyright 2005]

[编号:30]
[名称:D:\PROGRA~1\FLASHGET\jccatch.dll]
[类型:已加载DLL]
[内容:jccatch Module Copyright 1999 by Amaze Soft]

[编号:31]
[名称:C:\PROGRA~1\MMSASS~1\Mmsass~1.dll]
[类型:已加载DLL]
[内容:MMSAssist Copyright 2005]

[编号:32]
[名称:C:\WINDOWS\system32\NvMCTray.dll]
[类型:已加载DLL]
[内容:NVIDIA Media Center Library (C) NVIDIA Corporation. All rights reserved.]

[编号:33]
[名称:C:\WINDOWS\system32\NVRSZHC.DLL]
[类型:已加载DLL]
[内容:NVIDIA Compatible Windows 2000 Display driver, Version 66.72  (C) NVIDIA Corporation. All rights reserved.]

[编号:34]
[名称:C:\WINDOWS\system32\msdmo.dll]
[类型:已加载DLL]
[内容:(null) (null)]

[编号:35]
[名称:C:\HEROSOFT\Hero3000\AVCDROM.dll]
[类型:已加载DLL]
[内容:未知]

[编号:36]
[名称:C:\HEROSOFT\Hero3000\CoolMenu.dll]
[类型:已加载DLL]
[内容:未知]

[编号:37]
[名称:C:\HEROSOFT\Hero3000\Sys936.DLL]
[类型:已加载DLL]
[内容:未知]

[编号:38]
[名称:D:\完美卸载V2006\ScanEngine.dll]
[类型:已加载DLL]
[内容:ScanEngine Dynamic Link Library 版权所有 (C) 2005]

[编号:39]
[名称:C:\WINDOWS\system32\Protect.sys]
[类型:已加载DLL]
[内容:未知]

[编号:40]
[名称:C:\WINDOWS\system32\xunleibho_v13.dll]
[类型:已加载DLL]
[内容:xunleibho Module Copyright 2004-2006]

[编号:41]
[名称:D:\Program Files\Tencent\QQ\QQIEHelper.dll]
[类型:已加载DLL]
[内容:QQIEHelper Module 深圳市腾讯计算机系统有限公司 版权所有 (C) 2004]

[编号:42]
[名称:C:\WINDOWS\system32\macromed\flash\Flash.ocx]
[类型:已加载DLL]
[内容:Shockwave Flash Copyright ? 1996-2003 Macromedia, Inc.]

[编号:43]
[名称:C:\WINDOWS\system32\kakatool.dll]
[类型:已加载DLL]
[内容:卡卡上网安全助手 Copyright(c) 1998-2006 Beijing  Rising  Technology  Corporation  Limited]

[编号:44]
[分隔符:---------------------------------------------------------------------]

[编号:45]
[名称:IMJPMIG8.1]
[类型:开机启动]
[内容:"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32]

[编号:46]
[名称:PHIME2002ASync]
[类型:开机启动]
[内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC]

[编号:47]
[名称:PHIME2002A]
[类型:开机启动]
[内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName]

[编号:48]
[名称:NvCplDaemon]
[类型:开机启动]
[内容:RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup]

[编号:49]
[名称:NvMediaCenter]
[类型:开机启动]
[内容:RunDLL32.exe NvMCTray.dll,NvTaskbarInit]

[编号:50]
[名称:IMSCMig]
[类型:开机启动]
[内容:C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload]

[编号:51]
[名称:BigDogPath]
[类型:开机启动]
[内容:C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera]

[编号:52]
[名称:nwiz]
[类型:开机启动]
[内容:nwiz.exe /install]

[编号:53]
[名称:SoundMan]
[类型:开机启动]
[内容:SOUNDMAN.EXE]

[编号:54]
[名称:TkBellExe]
[类型:开机启动]
[内容:"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot]

[编号:55]
[名称:SysExplr]
[类型:开机启动]
[内容:C:\HEROSOFT\Hero3000\SYSEXPLR.EXE]

[编号:56]
[名称:RegFireWall]
[类型:开机启动]
[内容:D:\完美卸载V2006\WmSysPro.exe -PowerOn]

[编号:57]
[名称:SkyDune]
[类型:开机启动]
[内容:D:\完美卸载V2006\WmNetPro.exe -Poweron]

[编号:58]
[分隔符:---------------------------------------------------------------------]

[编号:59]
[名称:AFD]
[类型:服务:未知]
[内容:\SystemRoot\System32\drivers\afd.sys]

[编号:60]
[名称:Service for Realtek AC97 Audio (WDM)]
[类型:服务:Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab) Copyright (c) Realtek Semiconductor Corp.1998-2004]
[内容:C:\WINDOWS\system32\drivers\alcxwdm.sys]

[编号:61]
[名称:BdGuard]
[类型:服务:BDGUARD Dynamic Link Library Copyright (C) 2005]
[内容:C:\WINDOWS\system32\drivers\bdguard.sys]

[编号:62]
[名称:cdnprot]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\drivers\cdnprot.sys]

[编号:63]
[名称:DCOM Server Process Launcher]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\svchost ]

[编号:64]
[名称:iPod Service]
[类型:服务:未知]
[内容:D:\bin\iPodService.exe]

[编号:65]
[名称:MSCSPTISRV]
[类型:服务:未知]
[内容:"C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe"]

[编号:66]
[名称:Windows Installer]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\msiexec.exe /V]

[编号:67]
[名称:npkcrypt]
[类型:服务:nProtect KeyCrypt Driver Copyright (C) INCA Internet. 2000-2005]
[内容:d:\program files\tencent\qq\npkcrypt.sys]

[编号:68]
[名称:NVIDIA Display Driver Service]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\nvsvc32.exe]

[编号:69]
[名称:Office Source Engine]
[类型:服务:未知]
[内容:"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"]

[编号:70]
[名称:PACSPTISVR]
[类型:服务:未知]
[内容:"C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe"]

[编号:71]
[名称:PxHelp20]
[类型:服务:PxHelp20 Copyright ? Sonic Solutions]
[内容:C:\WINDOWS\system32\drivers\pxhelp20.sys]

[编号:72]
[名称:Remote Procedure Call (RPC)]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\svchost ]

[编号:73]
[名称:Secdrv]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\drivers\secdrv.sys]

[编号:74]
[名称:Sony SPTI Service]
[类型:服务:未知]
[内容:"C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe"]

[编号:75]
[名称:SonicStage SCSI Service]
[类型:服务:SonicStage Copyright 2005 Sony Corporation]
[内容:C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe]

[编号:76]
[名称:Terminal Services]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\svchost ]

[编号:77]
[名称:Wint]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\RunDLL32.exe "C:\PROGRA~1\wint\wint.dll",Run -r]

[编号:78]
[名称:WmNdisDrv]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\drivers\wmndisdrv.sys]

[编号:79]
[名称:WmRegProDrv]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\drivers\wmregprodrv.sys]

[编号:80]
[名称:NDIS5.1 Miniport Driver for Marvell Yukon Gigabit Ethernet Adapter]
[类型:服务:Marvell Yukon Gigabit Ethernet Adapter ? Copyright 2002-2003 Marvell ?. All rights reserved]
[内容:C:\WINDOWS\system32\drivers\yukonwxp.sys]

[编号:81]
[名称:VIMICRO USB PC Camera]
[类型:服务:VM., 2003. VM., 2003.]
[内容:C:\WINDOWS\system32\drivers\usbvm31b.sys]

[编号:82]
[分隔符:---------------------------------------------------------------------]

[编号:83]
[名称:Start Page]
[类型:IE主页-当前用户]
[内容:http://jdyisme.shop.18dx.com]

[编号:84]
[名称:Search Page]
[类型:IE搜索-当前用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]

[编号:85]
[名称:Start Page]
[类型:IE主页-所有用户]
[内容:http://jdyisme.shop.18dx.com]

[编号:86]
[名称:Search Page]
[类型:IE搜索-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]

[编号:87]
[名称:Default_Page_URL]
[类型:默认IE主页-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome]

[编号:88]
[名称:Default_Search_URL]
[类型:默认IE搜索-所有用户]
[内容:http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch]

[编号:89]
[分隔符:---------------------------------------------------------------------]

[编号:90]
[名称:ThunderIEHelper Class]
[类型:IE 嵌入对象]
[内容:C:\WINDOWS\system32\xunleibho_v13.dll]

[编号:91]
[名称:Wbho Class]
[类型:IE 嵌入对象]
[内容:C:\WINDOWS\system32\Usign.dll]

[编号:92]
[名称:QQBrowserHelperObject Class]
[类型:IE 嵌入对象]
[内容:D:\Program Files\Tencent\QQ\QQIEHelper.dll]

[编号:93]
[名称:MMSAssist BHO]
[类型:IE 嵌入对象]
[内容:C:\PROGRA~1\MMSASS~1\Mmsass~1.dll]

[编号:94]
[名称:BandIE Class]
[类型:IE 嵌入对象]
[内容:C:\PROGRA~1\baidu\bar\baidubar.dll]

[编号:95]
[名称:IeCatch2 Class]
[类型:IE 嵌入对象]
[内容:D:\PROGRA~1\FLASHGET\jccatch.dll]

[编号:96]
[名称:Google Toolbar Helper]
[类型:IE 嵌入对象]
[内容:c:\program files\google\googletoolbar1.dll]

[编号:97]
[分隔符:---------------------------------------------------------------------]

[编号:98]
[名称:{35980F6E-A137-4E50-953D-813BB8556899}]
[类型:IE 扩展按钮]
[内容:中文上网 路径:中文上网]

[编号:99]
[名称:{367E0A21-8601-4986-9C9A-153BF5ACA118}]
[类型:IE 扩展按钮]
[内容:解霸 路径:C:\HEROSOFT\Hero3000\MPLAYER.EXE]

[编号:100]
[名称:{6671A433-5C3D-463d-A7CF-5587F9B7E191}]
[类型:IE 扩展按钮]
[内容:C:\H 路径:C:\H]

[编号:101]
[名称:{92780B25-18CC-41C8-B9BE-3C9C571A8263}]
[类型:IE 扩展按钮]
[内容:信息检索 路径:信息检索]

[编号:102]
[名称:{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}]
[类型:IE 扩展按钮]
[内容:FlashGet 路径:D:\PROGRA~1\FLASHGET\flashget.exe]

[编号:103]
[名称:{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6}]
[类型:IE 扩展按钮]
[内容:D:\P 路径:D:\P]

[编号:104]
[名称:{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}]
[类型:IE 扩展按钮]
[内容:Yahoo! Messenger 路径:D:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE]

[编号:105]
[名称:{FB5F1910-F110-11d2-BB9E-00C04F795683}]
[类型:IE 扩展按钮]
[内容:Messenger 路径:C:\Program Files\Messenger\msmsgs.exe]

[编号:106]
[分隔符:---------------------------------------------------------------------]

[编号:107]
[名称:  >> 彩信发送 <<]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:108]
[名称:&Translate English Word]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:109]
[名称:&使用迅雷下载]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:110]
[名称:&使用迅雷下载全部链接]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:111]
[名称:Backward Links]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:112]
[名称:Cached Snapshot of Page]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:113]
[名称:Similar Pages]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:114]
[名称:Translate Page into English]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:115]
[名称:使用网际快车下载]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:116]
[名称:使用网际快车下载全部链接]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:117]
[名称:导出到 Microsoft Office Excel(&X)]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:118]
[名称:百度-搜索MP3]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:119]
[名称:百度-搜索图片]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:120]
[名称:百度-搜索新闻]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:121]
[名称:百度-搜索歌词]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:122]
[名称:百度-搜索网页]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:123]
[名称:百度-搜索贴吧]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:124]
[名称:百度-词典搜索]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:125]
[名称:解霸实时播放]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:126]
[名称:闪电Flash播放器]
[类型:IE 右键按钮]
[内容: 路径:er\m]

[编号:127]
[分隔符:---------------------------------------------------------------------]

[编号:128]
[名称:PostBootReminder]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\SHELL32.dll]

[编号:129]
[名称:CDBurn]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\SHELL32.dll]

[编号:130]
[名称:WebCheck]
[类型:正常嵌入对象]
[内容:%SystemRoot%\system32\webcheck.dll]

[编号:131]
[名称:SysTray]
[类型:正常嵌入对象]
[内容:C:\WINDOWS\system32\stobject.dll]

[编号:132]
[分隔符:---------------------------------------------------------------------]

[编号:133]
[名称:]
[类型:EXE关联]
[内容:"%1" %*]

[编号:134]
[名称:]
[类型:TXT关联]
[内容:%SystemRoot%\system32\NOTEPAD.EXE %1]

[编号:135]
[名称:]
[类型:vbs关联]
[内容:%SystemRoot%\System32\WScript.exe "%1" %*]

[编号:136]
[名称:]
[类型:Js关联]
[内容:%SystemRoot%\System32\WScript.exe "%1" %*]

[编号:137]
[名称:]
[类型:htmlfile关联]
[内容:"C:\Program Files\Internet Explorer\iexplore.exe" -nohome]

[编号:138]
[名称:]
[类型:HTTP协议]
[内容:"C:\Program Files\Internet Explorer\iexplore.exe" -nohome]

[编号:139]
[名称:]
[类型:FTP协议]
[内容:"C:\Program Files\Internet Explorer\iexplore.exe" %1]

[编号:140]
[分隔符:---------------------------------------------------------------------]

[编号:141]
[名称:c:\windows\system32\deskpan.dll]
[类型:第三方 COM/ActiveX组件]
[内容:显示摇曳 CPL 扩展---发布公司:未知]

[编号:142]
[名称:c:\windows\system32\rtlcpapi.dll]
[类型:第三方 COM/ActiveX组件]
[内容:RtlCP Class---发布公司:RtlCPAPI Module Copyright 2004]

楼主的日志有问题
或许加载了恶意IE模块

http://forum.ikaka.com/topic.asp?board=28&artid=6979213
下载HIJACKTHIS
重新导出日志

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      11:08:27, 日期 2006-2-16
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\HEROSOFT\Hero3000\SYSEXPLR.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
D:\完美卸载V2006\WmNetPro.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\完美卸载V2006\WmSysPro.exe
D:\其他\2535952005811174944\HijackThis1991zww.exe

R3 - URLSearchHook: SrchHook Class - {EED92A43-CFCE-4548-BD73-B0A405470ED5} - C:\PROGRA~1\CNNIC\Cdn\iesrch.dll
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v13.dll
O2 - BHO: (no name) - {35980F6E-A137-4E50-953D-813BB8556899} - (no file)
O2 - BHO: Wbho Class - {40E3A34A-3282-41F8-AD2C-051BAB96AD4A} - C:\WINDOWS\system32\Usign.dll (file missing)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FLASHGET\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O3 - IE工具栏增项: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\PROGRA~1\Kingsoft\FastAIT\IEBand.dll
O3 - IE工具栏增项: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - IE工具栏增项: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\fgiebar.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [SysExplr] C:\HEROSOFT\Hero3000\SYSEXPLR.EXE
O4 - 启动项HKLM\\Run: [SkyDune] D:\完美卸载V2006\WmNetPro.exe -Poweron
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - IE右键菜单中的新增项目:  >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm
O8 - IE右键菜单中的新增项目: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - IE右键菜单中的新增项目: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - IE右键菜单中的新增项目: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - IE右键菜单中的新增项目: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - D:\Program Files\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - D:\Program Files\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 百度-搜索MP3 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索图片 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索新闻 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索歌词 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索网页 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM
O8 - IE右键菜单中的新增项目: 百度-搜索贴吧 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM
O8 - IE右键菜单中的新增项目: 百度-词典搜索 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM
O8 - IE右键菜单中的新增项目: 解霸实时播放 - C:\HEROSOFT\Hero3000\MPURLGET.HTM
O9 - 浏览器额外的按钮: 中文上网 - {35980F6E-A137-4E50-953D-813BB8556899} - C:\WINDOWS\system32\shdocvw.dll
O9 - 浏览器额外的“工具”菜单项: 中文上网 - {35980F6E-A137-4E50-953D-813BB8556899} - C:\WINDOWS\system32\shdocvw.dll
O9 - 浏览器额外的按钮: 解霸 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\HEROSOFT\Hero3000\MPLAYER.EXE
O9 - 浏览器额外的“工具”菜单项: 超级解霸 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\HEROSOFT\Hero3000\MPLAYER.EXE
O9 - 浏览器额外的按钮: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - 浏览器额外的“工具”菜单项: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\flashget.exe
O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\flashget.exe
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - 浏览器额外的“工具”菜单项: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - 未知的文件在 Winsock LSP: d:\
O10 - 未知的文件在 Winsock LSP: d:\
O10 - 未知的文件在 Winsock LSP: d:\
O10 - 未知的文件在 Winsock LSP: d:\
O10 - 未知的文件在 Winsock LSP: d:\
O17 - HKLM\System\CCS\Services\Tcpip\..\{F4C1E4FF-5991-4946-AAE7-242792E35172}: NameServer = 202.102.152.3
O23 - NT 服务: iPod Service (iPodService) - Unknown owner - D:\bin\iPodService.exe (file missing)
O23 - NT 服务: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - NT 服务: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - NT 服务: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - NT 服务: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

请帮忙分析一下!

[编号:26]
[名称:C:\PROGRA~1\wint\wint.dll]
[类型:已加载DLL]
[内容:未知]


[编号:31]
[名称:C:\PROGRA~1\MMSASS~1\Mmsass~1.dll]
[类型:已加载DLL]
[内容:MMSAssist Copyright 2005]

[编号:77]
[名称:Wint]
[类型:服务:未知]
[内容:C:\WINDOWS\system32\RunDLL32.exe "C:\PROGRA~1\wint\wint.dll",Run -r]

建议楼主修复这几项.