瑞星卡卡安全论坛

如题

附件: 10042992008115101323.txt

下载 System Repair Engineer，
http://download.kztechs.com/files/sreng2.zip
1 解压缩sreng2.zip
2 运行SREngPS.EXE
3 智能扫描=》扫描=》保存报告
4 把把报告文件的扩展名改成“.txt”后以附件的形式发上来
注意：扫描前先用卡卡助手清理流氓软件，并且把QQ、MSN、迅雷等应用程序关闭后再扫描。

附件: 1126.txt.log (2008-11-26 22:41:48, 28.51 K)
该附件被下载次数 165

查看你的启动项

楼主注意以下文件：
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[Application Management / AppMgmt][Stopped/Manual Start]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\Syste[lgsnd_filter / lgsnd_filter][Running/Manual Start]
  <system32\drivers\lgsnd_filter.sys><N/A>
m32\appmgmts.dll><N/A>
[C:\WINDOWS\System32\msGDI1.dll]  [N/A, ]
    [c:\windows\ [C:\WINDOWS\system32\msdmo.dll]  [, ]
system32\wmdmpmsvc.dll]  [N/A, ]
[d:\Program Files\WinRAR\rarext.dll]  [N/A, ]
[D:\Program Files\Tencent\TT\bin\sqlite3.dll]  [N/A, ]
[D:\Program Files\Tencent\TT\bin\UpdateUtil.dll]  [N/A, ]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2996, C:\DOCUMENTS AND SETTINGS\OWNER\桌面\SRENGLDR.EXE]
并且修复文件关联