急急急：请斑竹回复backdoor.Pcshare.f怎么清除干净? bbs.ikaka.com

coolhahaye - 2006-5-17 8:46:00

backdoor.Pcshare.f病毒怎么才能杀干净?每次开机检查都有,并且每次显示清除成功,但还反反复复的,好烦人啊!
请斑竹回复!

不言放弃 - 2006-5-17 8:47:00

【回复“coolhahaye”的帖子】
病毒文件名称与路径？

coolhahaye - 2006-5-17 8:51:00

引用:

【不言放弃的贴子】【回复“coolhahaye”的帖子】
病毒文件名称与路径？
...........................

svchost.exe svchost.exe>>c:\winnt\system32\yrkglqat.dll
iexplore.exe iexplore.exe>>c:\winnt\system32\Yrkglqat.dll

不言放弃 - 2006-5-17 8:54:00

【回复“coolhahaye”的帖子】
http://forum.ikaka.com/topic.asp?board=28&artid=6979213
下载System Repair Engineer 2.0.12.350
导出全部日志

coolhahaye - 2006-5-17 9:01:00

引用:

【不言放弃的贴子】【回复“coolhahaye”的帖子】
http://forum.ikaka.com/topic.asp?board=28&artid=6979213
下载System Repair Engineer 2.0.12.350
导出全部日志
...........................

然后把日志粘帖上来吗？

coolhahaye - 2006-5-17 9:08:00

2006-05-17,09:02:12

System Repair Engineer 2.0.12.350 (2.0 RC 1)
Windows 2000 Server Service Pack 4 - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<Internat.exe><internat.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<TPI40><"E:\Program Files\TTOD\KNS5.0\TPISvr.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><C:\WINNT\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>

==================================
启动文件夹
[服务管理器]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\服务管理器.lnk><N>

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Gray_Pigeon_Server2.0 / GrayPigeonServer2.0]
<C:\WINNT\G_Server2.0.exe><N/A>
[Location Awareness Management Instrumentation / lawsvc]
<C:\WINNT\twain_32\svchost.exe -r><>
[Rising Proxy Service / RfwProxySrv]
<c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[ScholarServer Service / ScholarServer Service]
<F:\shusheng\Jxwz\server\SService.exe><N/A>
[Stomcat / Stomcat]
<F:\shusheng\Jxwz\tomcat\conf\jk\jk_nt_service.exe Stomcat><N/A>
[TPIProcessLogService / TPIProcessLogService]
<e:\program files\ttod\kns5.0_mngr\programs\tpiprocesslogservice.exe>< >
[TRS4.0 / TRS40SERVICE]
<F:\SHUSHENG\TRS4\TRSHOME\bin\T40SERVICE.EXE -resident><N/A>

==================================
浏览器加载项
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[CIEStub Class]
{EBBFE27C-BDF0-11D2-BBE5-00609419F467} <C:\WINNT\system32\amcis.dll, >
[网址大全]
{C18CB140-0BBB-11D4-8FE8-0088CC102438} <http://www.k369.com, N/A>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[Test2 Control]
{124C5F0D-DD02-4150-8F59-0F3E712F2BC8} <C:\WINNT\DOWNLO~1\test2.ocx, wenjin>
[Microsoft RDP Client Control (redist)]
{7584C670-2274-4EFB-B00B-D6AABA6D3850} <C:\WINNT\Downloaded Program Files\msrdp.ocx, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[CDTowerFileOpenOCX Control]
{D43D8CE3-AE10-4872-B626-61BFC3939956} <C:\WINNT\DOWNLO~1\CDTOWE~1.OCX, MEMBER>
[CheckPlayer Control]
{EC2AEAB7-BCA5-49A0-8A2F-0736E52A599A} <C:\WINNT\DOWNLO~1\CHECKP~1.OCX, Space International, Inc>
[WebClientOCX Control]
{F66CE3AF-9E51-4325-9878-F7F88034821E} <C:\WINNT\DOWNLO~1\WEBCLI~1.OCX, Space International, Inc>
[添加到QQ自定义面板]
<E:\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<E:\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<E:\qq\SendMMS.htm, N/A>

==================================

coolhahaye - 2006-5-17 9:10:00

正在运行的进程
[PID: 204][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 228][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 252][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6997>
[PID: 280][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.7035>
[C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 300][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.7011>
[PID: 392][C:\WINNT\System32\termsrv.exe] <Microsoft Corporation><5.00.2195.6696>
[PID: 512][C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 528][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
[C:\Program Files\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9>
[C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
[C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
[C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
[C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\Rising\Rav\ScanNet.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 544][c:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
[c:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 12>
[c:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
[c:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
[c:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4>
[c:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 632][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 684][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7013>
[C:\WINNT\system32\OLFMNT40.DLL] <Microsoft Corporation><9.0.98.0105>
[C:\WINNT\system32\spool\PRTPROCS\W32X86\olfpnt40.dll] <Microsoft Corporation><9.0.98.0105>
[PID: 720][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 748][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 784][C:\WINNT\twain_32\svchost.exe] <><2, 6, 1, 0>
[C:\WINNT\twain_32\LIBENC32.dll] <N/A><N/A>
[PID: 908][C:\WINNT\System32\llssrv.exe] <Microsoft Corporation><5.00.2195.7021>
[PID: 916][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1004][C:\WINNT\System32\tcpsvcs.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 1016][C:\WINNT\System32\sfmsvc.exe] <Microsoft Corporation><5.00.2195.6684>
[PID: 1052][C:\WINNT\System32\sfmprint.exe] <Microsoft Corporation><5.00.2157.1>
[PID: 1144][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe] <Microsoft Corporation><7.10.3077>
[PID: 1212][C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe] <Microsoft Corporation><2000.080.0760.00>
[PID: 1272][C:\WINNT\System32\WINDOW~1\Server\nspmon.exe] <Microsoft Corporation><4.1.00.3934>
[PID: 844][C:\WINNT\system32\regsvc.exe] <Microsoft Corporation><5.00.2195.6701>
[PID: 1112][C:\WINNT\system32\RsFsa.exe] <Microsoft Corporation><5.00.2195.6655>
[PID: 1436][C:\WINNT\system32\RsSub.exe] <Microsoft Corporation><5.00.2195.6655>
[PID: 1536][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6972>
[PID: 1584][C:\WINNT\System32\snmp.exe] <Microsoft Corporation><5.00.2195.6605>
[PID: 1620][C:\WINNT\System32\lserver.exe] <Microsoft Corporation><5.00.2195.6701>
[PID: 1592][E:\mpvodhaha\mpvod.exe] <N/A><N/A>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[PID: 1704][E:\mpvodhaha\VODServer.exe] <N/A><N/A>
[PID: 1732][E:\mpvodhaha\server\vodclientserver.exe] <N/A><N/A>
[PID: 1648][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 1780][C:\WINNT\System32\wins.exe] <Microsoft Corporation><5.00.2195.7005>
[PID: 1812][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 1832][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 996][C:\WINNT\system32\Dfssvc.exe] <Microsoft Corporation><5.00.2195.6664>
[PID: 1852][C:\WINNT\System32\dns.exe] <Microsoft Corporation><5.00.2195.6715>
[PID: 792][C:\WINNT\System32\inetsrv\inetinfo.exe] <Microsoft Corporation><5.00.0984>
[C:\PHP\sapi\php4isapi.dll] <N/A><N/A>
[C:\WINNT\system32\php4ts.dll] <The PHP Group><4.3.3.3>
[PID: 1920][C:\WINNT\System32\msdtc.exe] <Microsoft Corporation><1999.9.3421.3>
[PID: 2148][C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe] <Microsoft Corporation><9.107.8320.0>
[PID: 2572][C:\WINNT\system32\dllhost.exe] <Microsoft Corporation><5.00.2195.6692>
[C:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[f:\Program Files\Founder\DLibrary\exec\ApComBase.dll] <><3, 6, 0, 3619>
[f:\Program Files\Founder\DLibrary\exec\ApaPubUtil.dll] <Founder><3, 6, 0, 1>
[f:\Program Files\Founder\DLibrary\exec\DLib.dll] <Founder><3, 6, 0, 3621>
[f:\Program Files\Founder\DLibrary\exec\ISBN.dll] <N/A><N/A>
[C:\PROGRA~1\TTOD\KNS50Web\Com\CJNSTR~1.DLL] <><1.0.0.0>
[C:\Program Files\TTOD\KNS50Web\Com\CNKIFileFormat.dll] <><1, 0, 0, 1>
[C:\Program Files\TTOD\KNS50Web\Com\CAJ2PDF.dll] <TTOD Co., Ltd.><1, 0, 0, 1>
[C:\PROGRA~1\TTOD\KNS50Web\Com\ASPFile.dll] <><1, 0, 0, 1>
[C:\PROGRA~1\TTOD\KNS50Web\Com\Reader.dll] <Tsinghua Tongfang Optical Disc Co.,LTD.><1, 0, 2047, 0>
[C:\PROGRA~1\TTOD\KNS50Web\Com\TToolkit.dll] <Tsinghua Tongfang Optical Disc Co.,LTD.><4, 0, 133, 0>
[C:\PROGRA~1\TTOD\KNS50Web\Com\ft.dll] <N/A><N/A>
[C:\PROGRA~1\TTOD\KNS50Web\Com\ijl15.dll] <Intel Corporation><1,51,12,44>
[C:\PROGRA~1\TTOD\KNS50Web\Com\CODECO~1.DLL] <><1, 0, 0, 1>
[C:\PROGRA~1\TTOD\KNS50Web\Com\Encry.dll] <N/A><N/A>
[PID: 2620][C:\WINNT\system32\dllhost.exe] <Microsoft Corporation><5.00.2195.6692>
[PID: 2808][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>

coolhahaye - 2006-5-17 9:10:00

[PID: 852][C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe] <Microsoft Corporation><1.1.4322.573>
[c:\winnt\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_365d0efd\mscorlib.dll] <N/A><N/A>
[c:\winnt\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll] < ><7.10.3052.4>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\glp2bo6f.dll] < ><0.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\d20e4091\00a2cdfc_ff76c501\kns50.dll] < ><1.0.1999.28713>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\e87e1684\00413af1_5b3ec501\tpipagecontentnavi.dll] < ><1.0.1927.25252>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\3eeaa38c\0061063b_ed3fc501\navigator.dll] < ><1.0.1929.25028>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\9c0bd5b4\0061063b_ed3fc501\tpiarticleaccessing.dll] < ><1.0.1929.25028>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\4051dcef\0071f96a_ce76c501\tpiclientwrapper.dll] <N/A><N/A>
[C:\WINNT\system32\TpiClient.dll] <清华同方光盘股份有限公司><5, 2005, 5, 21>
[C:\WINNT\system32\FTSClient.dll] <清华同方光盘股份有限公司><5, 2005, 5, 24>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\4ead06a8\00adba0a_7349c501\datalayer.dll] < ><1.0.1941.30144>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\74839daf\0034d539_ed3fc501\cnkinavi.dll] < ><1.0.1929.25027>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\490e425a\0006ee1b_1276c501\cnki_mngr.dll] < ><1.0.1998.20829>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\82493815\00e8a4a8_567bc401\interop.pdftopic_minilib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\ec6f51ac\00a5554a_5b3ec501\tpicustomwatchcolumn.dll] < ><1.0.1927.25113>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\6cf6d63d\00462309_111ac501\interop.uspcomlib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\1ca92af0\00fd2dff_fb76c501\tpidownload.dll] < ><1.0.1999.27856>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\5bbd84a8\009f599e_ff29c501\interop.usp2fts.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\486200bf\00808909_7349c501\entity.dll] < ><1.0.1941.30144>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\5842e509\008d40a1_b817c401\interop.meshencodelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\4c7d818a\00044973_0c5ec401\tpiuscancel.dll] < ><1.0.1642.5651>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\97c59ddb\008a74fd_2346c501\tpilistview.dll] < ><1.0.1937.21041>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\9020f10f\00d2864b_5b3ec501\tpipagecopyright.dll] < ><1.0.1927.25113>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\df61bf6e\008650b5_e19ec401\tpiappraise.dll] < ><1.0.1724.27485>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\eada3320\00cab2b1_699cc401\interop.downpagelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\bb937ab7\00d0fcfd_fb76c501\mainwordsearchctrl.dll] <TTOD><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\6699e8f1\00d0fcfd_fb76c501\tpisingleadvancedsearch.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\20962a33\009b5284_7349c501\database.dll] < ><1.0.1941.30246>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\a1af3f1d\00782449_5b3ec501\tpipagetitle.dll] < ><1.0.1927.25111>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\91859ca3\00a3cbfc_fb76c501\cnkitreeview.dll] < ><1.0.1999.27854>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\1d5c4572\002756d8_175ec401\tpicscible.dll] < ><1.0.1642.8098>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\f87666ff\007692e9_0880c401\tpinewsdetail.dll] < ><1.0.1685.16461>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\2b6b95ca\00d0fcfd_fb76c501\mainwordtreeview.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\cf816615\00d0fcfd_fb76c501\journalnavictrl.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\cd3ec7cc\007692e9_0880c401\webcounter.dll] < ><1.0.1685.16461>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\829b0287\00a3cbfc_fb76c501\tpidetaileb.dll] < ><1.0.1999.27854>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\e36ac92e\00fe27b3_b3f9c201\interop.readnholelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\de2b919e\002756d8_175ec401\tpicscancel.dll] < ><1.0.1642.8098>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\bc00c36d\002756d8_175ec401\tpicsreg.dll] < ><1.0.1642.8098>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\bfe3e4e9\00f20ba7_6a11c401\interop.cjnstrobject.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\ae9da710\00d0fcfd_fb76c501\tpibriefdblist.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\00ef93bf\00fd2dff_fb76c501\tpigridtable.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\feb51dfc\00fd2dff_fb76c501\errormsg.dll] < ><1.0.1999.27856>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\ff16c503\00f551ef_fb84c401\tpicopyright.dll] < ><1.0.1691.28239>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\3e84c1e0\0046674b_d876c501\user_manager.dll] <清华同方光盘股份有限公司><1.2005.6.10>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\c57656e2\00fd2dff_fb76c501\tpidetail.dll] <清华同方光盘><1.0.1999.27856>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\95ded553\00044973_0c5ec401\tpiusregister.dll] < ><1.0.1642.5651>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\a6b50714\007992cc_1975c401\tpipagetoolservice.dll] < ><1.0.1671.20156>

coolhahaye - 2006-5-17 9:11:00

[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\b0c33749\00044973_0c5ec401\tpisubscibe.dll] < ><1.0.1642.5651>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\85fe8206\009b5284_7349c501\logic.dll] < ><1.0.1941.30246>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\1f5a891e\00fd2dff_fb76c501\tpiwebsearchctrl.dll] < ><1.0.1999.27856>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\a52952fc\005ece88_1672c501\tpimanager.dll] < ><1.0.1993.17877>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\1d3747fa\00b1eaf1_0880c401\tpisclistdatabase.dll] < ><1.0.1685.16468>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\10343e6c\00a6201e_2cbac401\interop.cjndesencrypt.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\5abc8227\00b17147_f88bc401\interop.urlconvert.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\c6275ad2\00a9e1ac_f33fc501\displaysave.dll] < ><1.0.1929.26413>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\21e4edc7\0034d539_ed3fc501\indexsearch.dll] < ><1.0.1929.25028>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\0161d614\00da9895_f855c501\interop.aspfilelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\3baf1d07\007854ee_f35fc201\interop.codeconvertoledblib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\c49268de\007692e9_0880c401\tpiarticlesofrelation.dll] < ><1.0.1685.16461>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\4882a85f\00413af1_5b3ec501\tpilisttable.dll] < ><1.0.1927.25252>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\assembly\dl2\e2d372a7\00d0fcfd_fb76c501\relationplot.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\qduorrmf.dll] <N/A><N/A>
[E:\Program Files\TTOD\KNS5.0_Mngr\Programs\CjnDesEncrypt.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\rdtr-hwz.dll] < ><0.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\d20e4091\00a2cdfc_ff76c501\kns50.dll] < ><1.0.1999.28713>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\e87e1684\00413af1_5b3ec501\tpipagecontentnavi.dll] < ><1.0.1927.25252>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\3eeaa38c\0061063b_ed3fc501\navigator.dll] < ><1.0.1929.25028>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\9c0bd5b4\0061063b_ed3fc501\tpiarticleaccessing.dll] < ><1.0.1929.25028>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\4051dcef\0071f96a_ce76c501\tpiclientwrapper.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\4ead06a8\00adba0a_7349c501\datalayer.dll] < ><1.0.1941.30144>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\74839daf\0034d539_ed3fc501\cnkinavi.dll] < ><1.0.1929.25027>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\490e425a\0006ee1b_1276c501\cnki_mngr.dll] < ><1.0.1998.20829>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\82493815\00e8a4a8_567bc401\interop.pdftopic_minilib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\ec6f51ac\00a5554a_5b3ec501\tpicustomwatchcolumn.dll] < ><1.0.1927.25113>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\6cf6d63d\00462309_111ac501\interop.uspcomlib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\1ca92af0\00fd2dff_fb76c501\tpidownload.dll] < ><1.0.1999.27856>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\5bbd84a8\009f599e_ff29c501\interop.usp2fts.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\486200bf\00808909_7349c501\entity.dll] < ><1.0.1941.30144>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\5842e509\008d40a1_b817c401\interop.meshencodelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\4c7d818a\00044973_0c5ec401\tpiuscancel.dll] < ><1.0.1642.5651>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\97c59ddb\008a74fd_2346c501\tpilistview.dll] < ><1.0.1937.21041>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\9020f10f\00d2864b_5b3ec501\tpipagecopyright.dll] < ><1.0.1927.25113>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\df61bf6e\008650b5_e19ec401\tpiappraise.dll] < ><1.0.1724.27485>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\eada3320\00cab2b1_699cc401\interop.downpagelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\bb937ab7\00d0fcfd_fb76c501\mainwordsearchctrl.dll] <TTOD><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\6699e8f1\00d0fcfd_fb76c501\tpisingleadvancedsearch.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\20962a33\009b5284_7349c501\database.dll] < ><1.0.1941.30246>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\a1af3f1d\00782449_5b3ec501\tpipagetitle.dll] < ><1.0.1927.25111>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\91859ca3\00a3cbfc_fb76c501\cnkitreeview.dll] < ><1.0.1999.27854>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\1d5c4572\002756d8_175ec401\tpicscible.dll] < ><1.0.1642.8098>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\f87666ff\007692e9_0880c401\tpinewsdetail.dll] < ><1.0.1685.16461>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\2b6b95ca\00d0fcfd_fb76c501\mainwordtreeview.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\cf816615\00d0fcfd_fb76c501\journalnavictrl.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\cd3ec7cc\007692e9_0880c401\webcounter.dll] < ><1.0.1685.16461>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\829b0287\00a3cbfc_fb76c501\tpidetaileb.dll] < ><1.0.1999.27854>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\e36ac92e\00fe27b3_b3f9c201\interop.readnholelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\de2b919e\002756d8_175ec401\tpicscancel.dll] < ><1.0.1642.8098>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\bc00c36d\002756d8_175ec401\tpicsreg.dll] < ><1.0.1642.8098>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\bfe3e4e9\00f20ba7_6a11c401\interop.cjnstrobject.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\ae9da710\00d0fcfd_fb76c501\tpibriefdblist.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\00ef93bf\00fd2dff_fb76c501\tpigridtable.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\feb51dfc\00fd2dff_fb76c501\errormsg.dll] < ><1.0.1999.27856>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\ff16c503\00f551ef_fb84c401\tpicopyright.dll] < ><1.0.1691.28239>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\3e84c1e0\0046674b_d876c501\user_manager.dll] <清华同方光盘股份有限公司><1.2005.6.10>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\c57656e2\00fd2dff_fb76c501\tpidetail.dll] <清华同方光盘><1.0.1999.27856>

coolhahaye - 2006-5-17 9:13:00

[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\95ded553\00044973_0c5ec401\tpiusregister.dll] < ><1.0.1642.5651>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\a6b50714\007992cc_1975c401\tpipagetoolservice.dll] < ><1.0.1671.20156>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\b0c33749\00044973_0c5ec401\tpisubscibe.dll] < ><1.0.1642.5651>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\85fe8206\009b5284_7349c501\logic.dll] < ><1.0.1941.30246>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\1f5a891e\00fd2dff_fb76c501\tpiwebsearchctrl.dll] < ><1.0.1999.27856>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\a52952fc\005ece88_1672c501\tpimanager.dll] < ><1.0.1993.17877>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\1d3747fa\00b1eaf1_0880c401\tpisclistdatabase.dll] < ><1.0.1685.16468>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\10343e6c\00a6201e_2cbac401\interop.cjndesencrypt.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\5abc8227\00b17147_f88bc401\interop.urlconvert.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\c6275ad2\00a9e1ac_f33fc501\displaysave.dll] < ><1.0.1929.26413>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\21e4edc7\0034d539_ed3fc501\indexsearch.dll] < ><1.0.1929.25028>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\0161d614\00da9895_f855c501\interop.aspfilelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\3baf1d07\007854ee_f35fc201\interop.codeconvertoledblib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\c49268de\007692e9_0880c401\tpiarticlesofrelation.dll] < ><1.0.1685.16461>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\4882a85f\00413af1_5b3ec501\tpilisttable.dll] < ><1.0.1927.25252>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\assembly\dl2\e2d372a7\00d0fcfd_fb76c501\relationplot.dll] < ><1.0.1999.27855>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\0ql1vbr5.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\uphtxcoa.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\0j_jilcw.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\yqdngop8.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\o60uetzj.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\t-eitxd_.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3e8adeaf\f17019e7\cbuhnfmi.dll] < ><0.0.0.0>
[C:\PROGRA~1\TTOD\KNS50Web\Com\CJNSTR~1.DLL] <><1.0.0.0>
[C:\PROGRA~1\TTOD\KNS50Web\Com\CODECO~1.DLL] <><1, 0, 0, 1>
[C:\PROGRA~1\TTOD\KNS50Web\Com\Encry.dll] <N/A><N/A>
[C:\PROGRA~1\TTOD\KNS50Web\Com\READNH~1.DLL] <><1, 0, 0, 1>
[C:\PROGRA~1\TTOD\KNS50Web\Com\Reader.dll] <Tsinghua Tongfang Optical Disc Co.,LTD.><1, 0, 2047, 0>
[C:\PROGRA~1\TTOD\KNS50Web\Com\TToolkit.dll] <Tsinghua Tongfang Optical Disc Co.,LTD.><4, 0, 133, 0>
[C:\PROGRA~1\TTOD\KNS50Web\Com\ft.dll] <N/A><N/A>
[C:\PROGRA~1\TTOD\KNS50Web\Com\ijl15.dll] <Intel Corporation><1,51,12,44>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\9yrtou3m.dll] < ><0.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\6aa234e7\00a3cbfc_fb76c501\cnkifulltextdown.dll] < ><1.0.1999.27854>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\a73113ee\007de00e_cec7c401\tpidetail.dll] < ><1.0.1776.30864>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\de01e47d\0071f96a_ce76c501\tpiclientwrapper.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\4327a69a\005ece88_1672c501\tpimanager.dll] < ><1.0.1993.17877>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\5d361f7e\00f20ba7_6a11c401\interop.cjnstrobject.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\f2883639\00e81356_84a4c401\interop.cjndesencrypt.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\cc00252e\00cab2b1_699cc401\interop.downpagelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\203ec3d1\007aac9b_3fa1c401\interop.pdftopic_minilib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\2bc9fe65\0006ee1b_1276c501\cnki_mngr.dll] < ><1.0.1998.20829>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\9c221a5c\00091eae_fb76c501\errormsg.dll] < ><1.0.1999.27788>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\81bd03c3\00fe27b3_b3f9c201\interop.readnholelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\fe1274e4\00dcecac_fb76c501\tpidownload.dll] < ><1.0.1999.27787>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\1d913e08\007854ee_f35fc201\interop.codeconvertoledblib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\792fe7cf\00b4de21_fad5c401\tpilistview.dll] < ><1.0.1794.30018>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\f8fd7f1a\00b17147_f88bc401\interop.urlconvert.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\assembly\dl2\dc92b468\0046674b_d876c501\user_manager.dll] <清华同方光盘股份有限公司><1.2005.6.10>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\6cec8f96\3cafba07\3ladwuxy.dll] < ><0.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\l1o4lyx5.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\43a-glnt.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\ugjobren.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\wxdxpdkt.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\kns50\3fffe27f\c328ba65\io4gh8dd.dll] < ><0.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\6m3ayea5.dll] < ><0.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\6aa234e7\00a3cbfc_fb76c501\cnkifulltextdown.dll] < ><1.0.1999.27854>

coolhahaye - 2006-5-17 9:13:00

[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\a73113ee\007de00e_cec7c401\tpidetail.dll] < ><1.0.1776.30864>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\de01e47d\0071f96a_ce76c501\tpiclientwrapper.dll] <N/A><N/A>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\4327a69a\005ece88_1672c501\tpimanager.dll] < ><1.0.1993.17877>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\5d361f7e\00f20ba7_6a11c401\interop.cjnstrobject.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\f2883639\00e81356_84a4c401\interop.cjndesencrypt.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\cc00252e\00cab2b1_699cc401\interop.downpagelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\203ec3d1\007aac9b_3fa1c401\interop.pdftopic_minilib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\2bc9fe65\0006ee1b_1276c501\cnki_mngr.dll] < ><1.0.1998.20829>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\9c221a5c\00091eae_fb76c501\errormsg.dll] < ><1.0.1999.27788>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\81bd03c3\00fe27b3_b3f9c201\interop.readnholelib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\fe1274e4\00dcecac_fb76c501\tpidownload.dll] < ><1.0.1999.27787>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\1d913e08\007854ee_f35fc201\interop.codeconvertoledblib.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\792fe7cf\00b4de21_fad5c401\tpilistview.dll] < ><1.0.1794.30018>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\f8fd7f1a\00b17147_f88bc401\interop.urlconvert.dll] < ><1.0.0.0>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\assembly\dl2\dc92b468\0046674b_d876c501\user_manager.dll] <清华同方光盘股份有限公司><1.2005.6.10>
[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\cnkifulltextdown\5d911f2b\e188d385\vqwizso8.dll] < ><0.0.0.0>
[PID: 1988][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690>
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400>
[PID: 2904][c:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 48>
[c:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[c:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[c:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1624][E:\Program Files\TTOD\KNS5.0\TPISvr.exe] <清华同方光盘股份有限公司><5, 2005, 6, 23>
[E:\Program Files\TTOD\KNS5.0\HotStar.dll] <清华同方光盘股份有限公司><5, 2005, 6, 23>
[E:\Program Files\TTOD\KNS5.0\yaz.dll] <Index Data><2, 0, 21, 1>
[E:\Program Files\TTOD\KNS5.0\SmartTextMiner.dll] <><1, 0, 0, 2>
[E:\Program Files\TTOD\KNS5.0\NLPE.dll] <><1, 0, 0, 1>
[E:\Program Files\TTOD\KNS5.0\HotDict.dll] <N/A><N/A>
[PID: 3064][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 3068][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 17>
[C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 3036][C:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000>
[PID: 2920][C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe] <Microsoft Corporation><2000.080.0760.00>
[PID: 2076][C:\Program Files\Rising\Rav\rav.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 61>
[C:\Program Files\Rising\Rav\PlugIn\RsPgScan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RavUI.Dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 57>
[C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[C:\Program Files\Rising\Rav\RavUIMsg.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[C:\Program Files\Rising\Rav\RavQu.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[PID: 2012][F:\ftproot\杀毒软件\update\rav2005\sreng2\SREng.exe] <Smallfrogs Studio><2.0.12.350>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

coolhahaye - 2006-5-17 9:15:00

以上就是扫描“SREng.exe”扫描后的log文件的全部，请帮忙解决！
谢谢

不言放弃 - 2006-5-17 10:46:00

【回复“coolhahaye”的帖子】

结束C:\WINNT\twain_32\svchost.exe进程

＝＝＝＝＝＝＝＝＝＝＝＝＝

开始－－控制面板－－性能和维护－－管理工具－－服务
禁用如下两个服务：
[Gray_Pigeon_Server2.0 / GrayPigeonServer2.0]
[Location Awareness Management Instrumentation / lawsvc]

开始－－运行
输入regedit
确定
进入注册表
展开[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]
找到后删除如下两个文件夹：
GrayPigeonServer2.0文件夹
lawsvc文件夹

＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
开始－－运行
输入regedit
确定
进入注册表
删除如下项：
[CIEStub Class]
{EBBFE27C-BDF0-11D2-BBE5-00609419F467} <C:\WINNT\system32\amcis.dll, >

＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝

http://forum.ikaka.com/topic.asp?board=28&artid=6979213
下载后打开IceSword
在工具栏中点击－－文件－－设置
勾选“禁止进线程创建”
然后结束如下进程：
svchost.exe进程
iexplore.exe进程

删除
c:\winnt\system32\Yrkglqat.dll

在IceSword主界面点击左窗口中的“SSDT”按纽
删除对应的sys文件（切记不要误删）
提示：若不能判定某个sys文件是否是可疑文件
建议用百度或GOOGLE搜索一下该sys文件的详细资料
再决定是否删除

删除完毕
把IceSword的“禁止进线程创建”前的勾去掉

附注：
使用IceSword杀毒的一些基本操作
http://forum.ikaka.com/topic.asp?board=28&artid=7168178

提示：
这一步操作全部使用IceSword来完成

＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝

删除
C:\WINNT\twain_32\svchost.exe
C:\WINNT\twain_32\LIBENC32.dll
C:\WINNT\system32\amcis.dll
C:\WINNT\G_Server2.0.exe

若能找到如下文件
同样删除之
C:\WINNT\G_Server2.0.dll
C:\WINNT\G_Server2.0key.dll
C:\WINNT\G_Server2.0_hook.dll

coolhahaye - 2006-5-17 14:29:00

晕死,按您的步骤作完,启动倒没病毒了,但我近1半的服务也停了,连网络连接都出不来!我能访问别人,别人访问不了我,我可是做服务器用的啊!

启动不了的进程:

Automatic Updates C:\WINNT\system32\svchost.exe -k wugroup
Background Intelligent Transfer Service C:\WINNT\System32\svchost.exe -k BITSgroup
Distributed Link Tracking Client C:\WINNT\system32\services.exe
Distributed Transaction Coordinator C:\WINNT\System32\msdtc.exe
DNS Server C:\WINNT\System32\dns.exe
FTP Publishing Service C:\WINNT\System32\inetsrv\inetinfo.exe
IIS Admin Service C:\WINNT\System32\inetsrv\inetinfo.exe
Internet Authentication Service C:\WINNT\System32\svchost.exe -k netsvcs
IPSEC Policy Agent C:\WINNT\System32\lsass.exe
Logical Disk Manager C:\WINNT\System32\services.exe
Machine Debug Manager "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
Messenger C:\WINNT\System32\services.exe
Network News Transport Protocol (NNTP) C:\WINNT\System32\inetsrv\inetinfo.exe
Print Server for Macintosh C:\WINNT\System32\sfmprint.exe
Print Spooler C:\WINNT\system32\spoolsv.exe
Protected Storage C:\WINNT\system32\services.exe
Remote Storage File C:\WINNT\system32\RsFsa.exe
Remote Storage Media C:\WINNT\system32\RsSub.exe
Routing and Remote Access :\WINNT\System32\svchost.exe -k netsvcs
Simple Mail Transport Protocol (SMTP) C:\WINNT\System32\inetsrv\inetinfo.exe
Task Scheduler C:\WINNT\system32\MSTask.exe
TCP/IP Print Server C:\WINNT\System32\tcpsvcs.exe
Windows Management Instrumentation C:\WINNT\System32\WBEM\WinMgmt.exe
Windows Media Monitor Service C:\WINNT\System32\WINDOW~1\Server\nspmon.exe
World Wide Web Publishing Service C:\WINNT\System32\inetsrv\inetinfo.exe

不言放弃 - 2006-5-17 14:55:00

【回复“coolhahaye”的帖子】
在下面这一步中楼主是否删除了什么文件：
在IceSword主界面点击左窗口中的“SSDT”按纽
删除对应的sys文件（切记不要误删）
提示：若不能判定某个sys文件是否是可疑文件
建议用百度或GOOGLE搜索一下该sys文件的详细资料
再决定是否删除

另外：
在注册表中搜索amcis.dll
找到后全部删除

coolhahaye - 2006-5-17 15:00:00

引用:

【不言放弃的贴子】【回复“coolhahaye”的帖子】
在下面这一步中楼主是否删除了什么文件：
在IceSword主界面点击左窗口中的“SSDT”按纽
删除对应的sys文件（切记不要误删）
提示：若不能判定某个sys文件是否是可疑文件
建议用百度或GOOGLE搜索一下该sys文件的详细资料
再决定是否删除

另外：
在注册表中搜索amcis.dll
找到后全部删除
...........................

在:在IceSword主界面点击左窗口中的“SSDT”按纽
我只删除了:Yrkglqat.sys文件而已
另外注册表中的amcis.dll都删除了啊

不言放弃 - 2006-5-17 15:04:00

【回复“coolhahaye”的帖子】
看来操作是没有问题的

重新开启上述服务呢？

coolhahaye - 2006-5-17 15:15:00

开启每个服务都显示错误1068：相依存的服务或组服务启动！

不言放弃 - 2006-5-17 15:26:00

【回复“coolhahaye”的帖子】
进入注册表
搜索Yrkglqat.sys
找到后全部删除

coolhahaye - 2006-5-17 17:16:00

引用:

【不言放弃的贴子】【回复“coolhahaye”的帖子】
进入注册表
搜索Yrkglqat.sys
找到后全部删除

...........................

没用，我还是用2月前的ghost包回复吧！
谢谢了

瑞星卡卡安全论坛