木子剑 - 2007-4-27 23:42:00
最近杀毒后,留下了两个文件,不论怎么删除都删不掉,请问如何解决
一个是c:\windows\system32\mngmh.dll
另一个c:\windows\system32\drivers\nzdwq.sys
[CODE]
2007-04-25,03:33:24
System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中:
所有的启动项目(包括注册表、启动文件夹、服务等)
浏览器加载项
正在运行的进程(包括进程模块信息)
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><D:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
<msnmsgr><"D:\Program Files\MSN Messenger\msnmsgr.exe" /background> [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<NvCplDaemon><RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><D:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<WPDShServiceObj><D:\WINDOWS\system32\WPDShServiceObj.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Cmaudio><; RunDll32 cmicnfg.cpl,CMICtrlWnd> [N/A]
<KVMON><; "D:\Program Files\JiangMin\AntiVirus\KVMonXP.kxp"> [Jiangmin Co.Ltd]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<MSMSGS><; "D:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Corporation]
<MsnMsgr><; "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><; RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation]
<NvMediaCenter><; RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [(Verified)NVIDIA Corporation]
<nwiz><; nwiz.exe /install> [N/A]
<RavAV><; D:\WINDOWS\RavMon.exe> [N/A]
<StormCodec_Helper><; "D:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [N/A]
<System><; D:\Program Files\Common Files\System\Updaterun.exe> [N/A]
==================================
启动文件夹
[Adobe Reader Speed Launch]
<D:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk --> D:\PROGRA~1\Adobe\READER~1.0\Reader\READER~1.EXE [Adobe Systems Incorporated]><N>
[Adobe Reader Synchronizer]
<D:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Synchronizer.lnk --> D:\PROGRA~1\Adobe\READER~1.0\Reader\ADOBEC~1.EXE [N/A]><N>
[腾讯QQ]
<D:\Documents and Settings\lailai\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\DOCUME~1\lailai\MYDOCU~1\wxy\wan\qq\QQ.exe [TENCENT]><N>
==================================
服务
[Human Interface Device Access / HidServ][Stopped/Disabled]
<D:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[KVSrvXP / KVSrvXP][Running/Auto Start]
<D:\Program Files\JiangMin\AntiVirus\kvsrvxp.exe /Service><Jiangmin Co., Ltd.>
[KVWSC / KVWSC][Running/Auto Start]
<"D:\Program Files\JiangMin\AntiVirus\KVWSC.exe"><Jiangmin Co.,Ltd>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<D:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[O&O Defrag / O&O Defrag][Running/Auto Start]
<D:\WINDOWS\system32\oodag.exe><O&O Software GmbH>
[Remote Registry Protect / Partner][Running/Auto Start]
<D:\WINDOWS\System32\svchost.exe -k netsvcs-->D:\WINDOWS\system32\mpfzh.dll><Microsoft Corporation>
==================================
驱动程序
[acpidisk / acpidisk][Running/Auto Start]
<\??\D:\WINDOWS\system32\drivers\acpidisk.sys><N/A>
[BdGuard / BdGuard][Running/Boot Start]
<\SystemRoot\system32\drivers\BDGuard.SYS><N/A>
[BsDeamon / BsDeamon][Running/System Start]
<\??\D:\PROGRA~1\JiangMin\ANTIVI~1\BsDeamon.sys><Jiangmin Co.,Ltd.>
[C-Media WDM Audio Interface / cmuda][Running/Manual Start]
<system32\drivers\cmuda.sys><C-Media Inc>
[eicbebaj / eicbebaj][Stopped/Boot Start]
<\SystemRoot\system32\drivers\eicbebaj.sys><N/A>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
<system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[VIA Rhine Family Fast Ethernet Adapter Driver Service / FETNDISB][Running/Manual Start]
<system32\DRIVERS\fetnd5b.sys><VIA Technologies, Inc.>
[GMSIPCI / GMSIPCI][Stopped/Manual Start]
<\??\F:\INSTALL\GMSIPCI.SYS><N/A>
[KAnalyser / KAnalyser][Stopped/System Start]
<\??\D:\PROGRA~1\JiangMin\ANTIVI~1\KANALY~1.SYS><Jiangmin Co.,Ltd.>
[KRegEx / KRegEx][Running/System Start]
<\??\D:\PROGRA~1\JiangMin\ANTIVI~1\KRegEx.sys><Jiangmin Co. Ltd.>
[Jiangmin Antivirus Software / KSysCall][Running/System Start]
<\??\D:\PROGRA~1\JiangMin\common\KSysCall.sys><Jiangmin Co., Ltd.>
[KSysMon / KSysMon][Running/System Start]
<\??\D:\PROGRA~1\JiangMin\ANTIVI~1\KSysMon.sys><Jiangmin Co. Ltd.>
[KVDP / KVDP][Stopped/Manual Start]
<\??\D:\Program Files\JiangMin\AntiVirus\KVDP.sys><Jiangmin Co., Ltd.>
[KVREDIR / KVREDIR][Running/System Start]
<\??\D:\Program Files\JiangMin\AntiVirus\KVREDIR.sys><Jiangmin Co., Ltd.>
[MSICPL / MSICPL][Stopped/Manual Start]
<\??\F:\install4\MSICPL.sys><N/A>
[msqmx / msqmx][Running/Boot Start]
<\SystemRoot\system32\drivers\msqmx.sys><N/A>
[NTACCESS / NTACCESS][Stopped/Manual Start]
<\??\F:\NTACCESS.sys><N/A>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[nzdw / nzdwq][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\nzdwq.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
[SetupNTGLM7X / SetupNTGLM7X][Stopped/Manual Start]
<\??\F:\NTGLM7X.sys><N/A>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
<system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[ViaIde / ViaIde][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[viamraid / viamraid][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd>
[videX32 / videX32][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\videX32.sys><VIA Technologies, Inc.>
[npkcrypt / npkcrypt][Running/Auto Start]
<\??\D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
==================================
浏览器加载项
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[CAdLogic Object]
{11F09AFD-75AD-4E51-AB43-E09E9351CE16} <D:\Program Files\Common Files\CPUSH\cpush0.dll, N/A>
[Info cache]
{385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <D:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(广州)科技有限公司>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
木子剑 - 2007-4-27 23:44:00
[实用搜索]
{6CFD436C-7AAD-4e50-992F-C0C87A94CAD2} <D:\Program Files\superutilbar\superutilbar.dll, N/A>
[BandIE Class]
{77FEF28E-EB96-44FF-B511-3185DEA48697} <D:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <D:\Program Files\JiangMin\AntiVirus\KVshell.dll, Jiangmin Co.Ltd>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\DownLoad\Thunder\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[江民在线杀毒]
{06926B30-424E-4f1c-8EE3-543CD96573DC} <http://online.jiangmin.com/online.asp, N/A>
[就要你]
{42CE9921-7259-11D6-B76A-0010A48548DC} <url:http://www.91ni.com, N/A>
[网吧.net计划]
{64187580-726B-11D6-B76A-0010A48548DC} <url:http://www.sicent.net, N/A>
[信息检索(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
{e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <D:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[BitComet工具栏]
{3F1ABCDB-A875-46c1-8345-B72A4567E486} <E:\Tools\BT\BitComet\BitCometBar\BitCometBar0.6.dll, N/A>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <D:\Program Files\JiangMin\AntiVirus\KVshell.dll, Jiangmin Co.Ltd>
[实用搜索工具条2.0]
{03465FF5-00AE-411a-9C34-960ED566EC03} <D:\Program Files\superutilbar\superutilbar.dll, N/A>
[百度超级搜霸]
{B580CF65-E151-49C3-B73F-70B13FCA8E86} <D:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[CUpdateCtrl Object]
{6CF97BBD-55EC-4D30-B470-C8EE5D687217} <D:\WINDOWS\Downloaded Program Files\UpDateATL.dll, KingHoo Corporation>
[iTouchNetConf Class]
{9E2B3DEC-7152-4F33-9EEB-4D22B07D54B2} <D:\WINDOWS\DOWNLO~1\ITOUCH~1.DLL, >
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <D:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[KvScanOnline Control]
{EF6205C1-3F17-4829-BCB5-1336ED89E356} <D:\WINDOWS\KVSCAN~1\KvDown.ocx, dreamersoft>
[实用搜索工具条2.0]
{03465FF5-00AE-411A-9C34-960ED566EC03} <D:\Program Files\superutilbar\superutilbar.dll, N/A>
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[CAdLogic Object]
{11F09AFD-75AD-4E51-AB43-E09E9351CE16} <D:\Program Files\Common Files\CPUSH\cpush0.dll, N/A>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <D:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <D:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <D:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[XML DOM Document]
{2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, N/A>
[CToolbarDetector Object]
{34A12A06-48C0-420D-8F11-73552EE9631A} <D:\Program Files\Common Files\CPUSH\cpush0.dll, N/A>
[Info cache]
{385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <D:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(广州)科技有限公司>
[BitComet工具栏]
{3F1ABCDB-A875-46C1-8345-B72A4567E486} <E:\Tools\BT\BitComet\BitCometBar\BitCometBar0.6.dll, N/A>
[HHCtrl Object]
{52A2AAAE-085D-4187-97EA-8C30DB990436} <D:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[CUpdateCtrl Object]
{6CF97BBD-55EC-4D30-B470-C8EE5D687217} <D:\WINDOWS\Downloaded Program Files\UpDateATL.dll, KingHoo Corporation>
[实用搜索]
{6CFD436C-7AAD-4E50-992F-C0C87A94CAD2} <D:\Program Files\superutilbar\superutilbar.dll, N/A>
[BandIE Class]
{77FEF28E-EB96-44FF-B511-3185DEA48697} <D:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <D:\Program Files\JiangMin\AntiVirus\KVshell.dll, Jiangmin Co.Ltd>
[Microsoft Web Browser]
{8856F961-340A-11D0-A96B-00C04FD705A2} <D:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\DownLoad\Thunder\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[VqqSpeedDlProxy Class]
{9ADACAA6-533E-4383-AFA7-F0A66650B6D8} <D:\WINDOWS\vqqsdl10.dll, Tencent Technology (Shenzhen) Company Limited>
[iTouchNetConf Class]
{9E2B3DEC-7152-4F33-9EEB-4D22B07D54B2} <D:\WINDOWS\DOWNLO~1\ITOUCH~1.DLL, >
[Tool Class]
{A7F05EE4-0426-454F-8013-C41E3596E9E9} <D:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[RMGetLicense Class]
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <D:\WINDOWS\system32\msnetobj.dll,
Microsoft Corporation>
[百度超级搜霸]
{B580CF65-E151-49C3-B73F-70B13FCA8E86} <D:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <D:\Program Files\JiangMin\AntiVirus\KVshell.dll, Jiangmin Co.Ltd>
[]
{B69003B3-C55E-4B48-836C-BC5946FC3B28} <D:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <D:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Adobe PDF Reader]
{CA8A9780-280D-11CF-A24D-444553540000} <D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll, Adobe Systems, Inc.>
[QQPlayerSvr Proxy Control]
{CD108273-D434-43E6-AA90-1469F97EB398} <D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\QQPlayerProxy.dll, Tencent>
[AUDIO__MP3 Moniker Class]
{CD3AFA76-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__WAV Moniker Class]
{CD3AFA7B-B84F-48F0-9393-
木子剑 - 2007-4-27 23:44:00
7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
{CD3AFA84-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__MPEG Moniker Class]
{CD3AFA89-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
{CD3AFA8F-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <D:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[QuickTimeCheck Class]
{DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21} <D:\Program Files\Ringz Studio\Storm Codec\QTSystem\QTCheck.ocx, Apple Computer, Inc.>
[]
{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <D:\PROGRA~1\MSNMES~1\MSGSC8~1.DLL, Microsoft Corporation>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <D:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[CPasswordEditCtrl Object]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} <D:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技(深圳)有限公司>
[XML HTTP Request]
{ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A>
[KvScanOnline Control]
{EF6205C1-3F17-4829-BCB5-1336ED89E356} <D:\WINDOWS\KVSCAN~1\KvDown.ocx, dreamersoft>
[XML DOM Document 3.0]
{F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP 3.0]
{F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML DOM Document]
{F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP]
{F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[]
{FB7199AB-79BF-11D2-8D94-0000F875C541} <D:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[&使用迅雷下载]
<C:\DownLoad\Thunder\Program\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<C:\DownLoad\Thunder\Program\getallurl.htm, N/A>
[Add to Windows &Live Favorites]
<http://favorites.live.com/quickadd.aspx, N/A>
[上传到QQ网络硬盘]
<D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
<C:\DownLoad\flashget\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\DownLoad\flashget\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\Documents and Settings\lailai\My Documents\wxy\wan\qq\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
<E:\Tools\BitSpirit\bsurl.htm, N/A>
==================================
正在运行的进程
[PID: 556][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 644][\??\D:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 668][\??\D:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\winlib .dll] [N/A, N/A]
[PID: 712][D:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 724][D:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 880][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 976][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1072][D:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1124][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1180][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1440][D:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\mngmh.dll] [N/A, N/A]
[D:\Program Files\JiangMin\AntiVirus\KVshell.dll] [Jiangmin Co.Ltd, 1, 0, 7, 201]
[D:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1227]
[D:\Program Files\JiangMin\AntiVirus\lang\kvxp0804.lng] [N/A, N/A]
[D:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[D:\Program Files\JiangMin\common\GUIEXT.DLL] [Jiangmin Co.Ltd, 1, 0, 6, 1201]
[D:\Program Files\JiangMin\common\lang\guiext0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200]
[D:\PROGRA~1\baidu\bar\BaiduBar.dll] [Baidu.com, Inc., 2, 0, 2, 106]
[C:\DownLoad\Thunder\ComDlls\XunLeiBHO_006.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 3]
[D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 8.0.0.0]
[D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS] [Adobe Systems, Inc., 8.0.0.0]
[PID: 1572][D:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[D:\WINDOWS\system32\EBPMON2.DLL] [SEIKO EPSON CORPORATION, 2, 16, 0, 0]
[PID: 1904][D:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 428][D:\Program Files\JiangMin\AntiVirus\KVWSC.exe] [Jiangmin Co.,Ltd, 1, 0, 6, 919]
[D:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 412]
[D:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1227]
[PID: 456][D:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8198]
[PID: 472][D:\WINDOWS\system32\oodag.exe] [O&O Software GmbH, 8.6.2336]
[D:\WINDOWS\system32\OODAGRS.DLL] [O&O Software GmbH, 8.0.1.2560]
[PID: 908][D:\Program Files\JiangMin\AntiVirus\kvsrvxp.exe] [Jiangmin Co., Ltd., 10, 0, 7, 205]
[D:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1227]
[D:\Program Files\JiangMin\AntiVirus\SvcSafe.dll] [Jiangmin Co., Ltd., 10, 0, 7, 129]
[D:\Program Files\JiangMin\AntiVirus\lang\SvcSafe0804.lng] [N/A, N/A]
[D:\Program Files\JiangMin\Kernel\Scan.dll] [Jiangmin Co., Ltd., 2.0.7.119]
[D:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 412]
[D:\Program Files\JiangMin\KVOL\autoUpdate.dll] [Jiangmin Co.Ltd, 1, 0, 7, 3291]
[D:\Program Files\JiangMin\AntiVirus\FileGuard.dll] [Jiangmin Co., Ltd., 1, 0, 6, 803]
[D:\Program Files\JiangMin\AntiVirus\FileGuardNT.dll] [Jiangmin Co., Ltd., 10, 2, 7, 122]
[D:\Program Files\JiangMin\AntiVirus\NetGuard.dll] [Jiangmin Co., Ltd., 1, 0, 7, 130]
[D:\Program Files\JiangMin\common\KvTxd.dll] [Jiangmin Co., Ltd., 10.0.6.1106]
[PID: 2036][D:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2456][D:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\JiangMin\AntiVirus\kvxp.kxp] [Jiangmin Co.,Ltd, 1, 0, 7, 124]
[D:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1227]
[D:\Program Files\JiangMin\AntiVirus\kvxpuw.dll] [Jiangmin Co.,Ltd, 1, 0, 7, 124]
[D:\Program Files\JiangMin\AntiVirus\lang\kvxp0804.lng] [N/A, N/A]
[D:\Program Files\JiangMin\common\GUIEXT.DLL] [Jiangmin Co.Ltd, 1, 0, 6, 1201]
[D:\Program Files\JiangMin\common\lang\guiext0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[D:\Program Files\JiangMin\AntiVirus\KvInterpreter.dll] [Jiangmin Co., Ltd., 10, 0, 6, 1225]
[D:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 412]
[D:\Program Files\JiangMin\Kernel\Scan.dll] [Jiangmin Co., Ltd., 2.0.7.119]
[D:\Program Files\JiangMin\Kernel\Fix.dll] [Jiangmin Co., Ltd., 10, 0, 7, 320]
[D:\Program Files\JiangMin\AntiVirus\ScanSet.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1019]
[D:\Program Files\JiangMin\AntiVirus\lang\scanset0804.lng] [Jiangmin Co., Ltd., 1, 0, 6, 1019]
[PID: 3256][D:\Program Files\Opera\Opera.exe] [Opera Software, 8771]
[D:\Program Files\Opera\Opera.dll] [Opera Software, 8771]
[PID: 1660][D:\DOCUME~1\lailai\LOCALS~1\Temp\ThunderBird.exe] [, 1, 2, 5, 8]
[PID: 2656][D:\Documents and Settings\lailai\My Documents\xiaoli\服务器问题查看软件\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["D:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
N/A
==================================
[/CODE]
© 2000 - 2026 Rising Corp. Ltd.