mm的电脑上不了网了，各位朋友来帮忙看看 bbs.ikaka.com

万里长征 - 2010-6-27 11:19:00

实验室的一个mm的电脑上不了网了
症状：网络链接那显示：“受限链接”，我们在学校里面的，应该是校园网，ip地址一般都是设置自动获取，现在的情况是自动获取也不行，指定IP也不行。
前因：她上网的时候中木马了，然后杀完木马什么的就不能上网了，
我用sre扫描了一个日志，大家帮忙分析一下。谢谢了

用户系统信息：Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-CN; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3

附件: SREngLOG.log

万里长征 - 2010-6-27 11:23:00

[img]file:///C:/Users/xls/AppData/Local/Temp/moz-screenshot.png[/img]

2010-06-27,11:01:23

System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
计划任务
Windows 安全更新检查
API HOOK
隐藏进程

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<QQ2009><"C:\Program Files\Tencent\QQ\Bin\QQ.exe" /background> [(Verified)Tencent Technology(Shenzhen) Company Limited]
<uTorrent><"C:\Program Files\uTorrent\uTorrent.exe"> [(Verified)BitTorrent Inc]
<360sd><"D:\360sd\360sd.exe" /autorun> [(Verified)Qizhi Software (beijing) Co. Ltd]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SecNotifier><C:\Program Files\Sucop\SecPlugin\SecNotifier.exe> [(Verified)ShenZhen DaChengTianXia Information Technology Co., Ltd.]
<360Safetray><"D:\360safe\safemon\360Tray.exe" /start> [(Verified)Qizhi Software (beijing) Co. Ltd]
<360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r> [(Verified)Qizhi Software (beijing) Co. Ltd]
<Alcmtr><; ALCMTR.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<nwiz><; nwiz.exe /install> [(Verified)NVIDIA Corporation]
<PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher]
<PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher]
<RTHDCPL><; RTHDCPL.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<WebCheck><%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Windows Publisher]
<SysTray><C:\WINDOWS\system32\stobject.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\System32\logon.scr> [(Verified)Microsoft Windows Publisher]

==================================
启动文件夹
N/A

==================================
服务
[360 杀毒实时防护服务 / 360rp][Running/Auto Start]
<"D:\360sd\360rp.exe"><360.cn>
[Agere Modem Call Progress Audio / AgereModemAudio][Running/Auto Start]
<C:\WINDOWS\system32\agrsmsvc.exe><Agere Systems>
[Bluetooth Service / btwdins][Running/Auto Start]
<C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe><Broadcom Corporation.>
[Contrl Center of Storm Media / ccosm][Stopped/Disabled]
<C:\Program Files\StormII\stormliv.exe /asservice><北京暴风网际科技有限公司>
[FLEXlm server for PTC / FLEXlm server for PTC][Stopped/Auto Start]
<"C:\Program Files\flexnet\i486_nt\obj\lmgrd.exe"><Macrovision Corporation>
[FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start]
<"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"><Macrovision Europe Ltd.>
[Groove Installer Service / GrooveInstallerService][Stopped/Manual Start]
<C:\Program Files\Groove Networks\Groove\Bin\GrooveInstallerService.exe><Groove Networks, Inc.>
[Google Software Updater / gusvc][Stopped/Manual Start]
<"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[MSC.Licensing 9.2 / MSC.Licensing 9.2][Stopped/Auto Start]
<C:\MSC.Software\MSC.Licensing\9.2\lmgrd.exe><Macrovision Corporation>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Cluster Manager Service V2 / rcluma][Running/Auto Start]
<C:\WINDOWS\system32\rclumad.exe><N/A>
[360 杀毒全盘扫描辅助服务 / scan][Stopped/Manual Start]
<C:\WINDOWS\System32\svchost.exe -k bdx-->D:\360sd\SCAN.DLL><S.C. BitDefender S.R.L>
[Tencent Software Update Service / TSUSVC][Stopped/Manual Start]
<"C:\Program Files\Tencent\QQSoftMgr\1.0.338.203\TencentUpdateSvc.exe" -run><Tencent>
[主动防御 / ZhuDongFangYu][Running/Auto Start]
<"D:\360safe\deepscan\zhudongfangyu.exe"><360.cn>

==================================
驱动程序
[360AntiARP / 360AntiARP][Running/System Start]
<\??\C:\WINDOWS\system32\Drivers\360AntiARP.sys><360安全中心>
[360netmon / 360netmon][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\360netmon.sys><360.cn>
[360SelfProtection / 360SelfProtection][Running/System Start]
<system32\drivers\360SelfProtection.sys><360安全中心>
[Agere Systems Soft Modem / AgereSoftModem][Running/Manual Start]
<system32\DRIVERS\AGRSM.sys><Agere Systems>
[Atheros Wireless Network Adapter Service / AR5211][Stopped/Manual Start]
<system32\DRIVERS\ar5211.sys><Atheros Communications, Inc.>
[BAPIDRV / BAPIDRV][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\BAPIDRV.SYS><360.cn>
[bdfsfltr / bdfsfltr][Running/System Start]
<system32\DRIVERS\bdfsfltr.sys><BitDefender S.R.L. Bucharest, ROMANIA>
[蓝牙音频设备 / btaudio][Running/Manual Start]
<system32\drivers\btaudio.sys><Broadcom Corporation.>
[蓝牙虚拟通信驱动程序 / BTDriver][Running/Manual Start]
<system32\DRIVERS\btport.sys><Broadcom Corporation.>
[蓝牙总线枚举器 / BTKRNL][Running/Manual Start]
<system32\DRIVERS\btkrnl.sys><Broadcom Corporation.>
[蓝牙局域网接入服务器 / BTWDNDIS][Stopped/Manual Start]
<system32\DRIVERS\btwdndis.sys><Broadcom Corporation.>
[蓝牙调制解调器 / btwmodem][Stopped/Manual Start]
<system32\DRIVERS\btwmodem.sys><Broadcom Corporation.>
[WIDCOMM USB Bluetooth Driver / BTWUSB][Running/Manual Start]
<System32\Drivers\btwusb.sys><Broadcom Corporation.>
[MEMIO / DOSMEMIO][Running/Auto Start]
<\??\C:\WINDOWS\system32\MEMIO.SYS><N/A>
[DS1410D / DS1410D][Stopped/Auto Start]
<SYSTEM32\drivers\DS1410D.SYS><N/A>
[EfiSystemMon / EfiMon][Running/System Start]
<System32\Drivers\Efimon.sys><奇虎网>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
<system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HookPort / HookPort][Running/Boot Start]
<\SystemRoot\System32\Drivers\Hookport.sys><360安全中心>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
<system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]
<system32\drivers\nvhda32.sys><NVIDIA Corporation>
[DDK PACKET Protocol / Packet][Running/System Start]
<system32\DRIVERS\ProtoDrv.sys><360安全中心>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Quantum DeepScanner Servers / quxxxserv][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\quxxxrv.sys><360安全中心>
[qutmipc / qutmipc][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\qutmipc.sys><360安全中心>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\SafeBoxKrnl.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[siglow Miniport / siglow][Running/Manual Start]
<system32\DRIVERS\siglow.sys><Windows (R) 2000 DDK provider>
[sptd / sptd][Running/Boot Start]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller / yukonwxp][Running/Manual Start]
<system32\DRIVERS\yk51x86.sys><Marvell>

==================================
浏览器加载项
[ThunderAtOnce Class]
{01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\SSPlus\SAddr1.dll, (Signed) 腾讯>
[QQToolbar]
{29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[卡卡上网安全助手]
{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[Google Toolbar Helper]
{AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, (Signed) Google Inc.>
[Google Toolbar Notifier BHO]
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll, (Signed) Google Inc.>
[启动迅雷5]
{09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[@btrez.dll,-4015]
{CCA281CA-C863-46ef-9331-5C8D4460577F} <, >
[QQToolbar]
{29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, (Signed) Google Inc.>
[PhotoDrawEx Class]
{05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} <D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Qzone\bin\QQPhotoDrawEx\QQPhotoDrawEx.dll, (Signed) Tencent>
[nEdit Control]
{32D72994-45B9-42B5-8980-FB561D1BE2D0} <C:\WINDOWS\system32\nEdit\nEdit.ocx, NetEase Information Technology (Beijing) Co. Ltd>
[EditCtrl Class]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\aliedit.dll, (Signed) >
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation>
[XiaoNei Album Uploader Class]
{642D2749-A4FC-49C5-8384-E39E009EBCDD} <C:\WINDOWS\Downloaded Program Files\xnalbum.dll, xiaonei.com>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx, (Signed) Adobe Systems, Inc.>
[ThunderAtOnce Class]
{01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
{03507A1A-E0C5-4404-AA26-205385C0892D} <, >
[]
{09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\SSPlus\SAddr1.dll, (Signed) 腾讯>
[QQToolbar]
{29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[卡卡上网安全助手]
{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[Google Toolbar Helper]
{AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, (Signed) Google Inc.>
[Google Toolbar Notifier BHO]
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll, (Signed) Google Inc.>
[]
{CCA281CA-C863-46EF-9331-5C8D4460577F} <, >
[使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
<C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A>

万里长征 - 2010-6-27 11:25:00

=================================
正在运行的进程
[PID: 1316 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1400 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1428 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1472 / SYSTEM][C:\WINDOWS\system32\services.exe] [(Verified) Microsoft Corporation, 5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)]
[PID: 1484 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1660 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1728 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1852 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\windows\system32\msi.dll] [Microsoft Corporation, 4.5.6001.22159]
[PID: 1876 / SYSTEM][C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe] [Broadcom Corporation., 5.1.0.3300]
[PID: 328 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 472 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 504 / SYSTEM][D:\360safe\deepscan\zhudongfangyu.exe] [360.cn, 3, 2, 2, 1002]
[D:\360safe\SoftMgr\360SoftMgrS.dll] [360.cn, 2, 1, 5, 1100]
[D:\360safe\deepscan\CloudCom2.dll] [360.cn, 3, 2, 3, 1010]
[D:\360safe\deepscan\bapi.dll] [360.cn, 1.0.0.1010]
[D:\360safe\deepscan\heavygate.dll] [360.cn, 3, 6, 21, 0]
[D:\360safe\deepscan\qutmload.dll] [360安全中心, 6, 5, 0, 1001]
[PID: 900 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [(Verified) Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[C:\WINDOWS\system32\AdobePDF.dll] [Adobe Systems Inc, 9.0.0000.0000]
[C:\WINDOWS\system32\bthcrp.dll] [Broadcom Corporation., 5.1.0.3300]
[C:\WINDOWS\system32\WidcommSdk.dll] [Broadcom Corporation., 5.1.0.3300]
[C:\WINDOWS\system32\wbtapi.dll] [Broadcom Corporation., 5.1.0.3300]
[C:\WINDOWS\system32\msi.dll] [Microsoft Corporation, 4.5.6001.22159]
[PID: 988 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1016 / SYSTEM][D:\360sd\360rp.exe] [360.cn, 1, 1, 0, 1307]
[D:\360sd\Router.dll] [360安全中心, 1, 0, 0, 1069]
[D:\360sd\BDFLTLIB.DLL] [, ]
[D:\360sd\SCAN.DLL] [S.C. BitDefender S.R.L, 12, 0, 53, 0]
[D:\360sd\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[D:\360sd\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[D:\360sd\Wrapper.dll] [360安全中心, 1, 0, 0, 1]
[D:\360sd\QTQuart.dll] [360.cn, 1, 1, 0, 1203]
[D:\360sd\cloudcom2.dll] [360.cn, 3, 2, 3, 1006]
[D:\360sd\wlist.dll] [360安全中心, 3, 0, 0, 1004]
[D:\360sd\Bapi.dll] [360.cn, 1.0.0.1010]
[D:\360sd\heavygate.dll] [360.cn, 3, 6, 21, 0]
[D:\360sd\smartscn.dll] [BitDefender S.R.L., 12.0.0.11]
[D:\360sd\bdcore.dll] [BitDefender, 11, 0, 0, 33]
[D:\360sd\trufos.dll] [N/A, ]
[D:\360sd\avxdisk.dll] [BitDefender, 1, 0, 0, 1]
[D:\360sd\CrashReport.dll] [360安全中心, 1, 0, 0, 1074]
[PID: 1036 / SYSTEM][C:\WINDOWS\system32\agrsmsvc.exe] [Agere Systems, 1.0.0.4]
[PID: 1180 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\windows\system32\nethome32.dll] [N/A, ]
[PID: 408 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.11.7928]
[C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.7928]
[PID: 452 / SYSTEM][C:\WINDOWS\system32\rclumad.exe] [N/A, ]
[PID: 700 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1304 / SYSTEM][C:\WINDOWS\system32\wuauclt.exe] [(Verified) Microsoft Corporation, 7.4.7600.226 (winmain_wtr_wsus3sp2(wmbla).090806-1834)]
[PID: 1340 / Administrator][C:\WINDOWS\Explorer.EXE] [(Verified) Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
[C:\WINDOWS\system32\msi.dll] [Microsoft Corporation, 4.5.6001.22159]
[D:\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16]
[C:\Program Files\TENCENT\SSPlus\SAddr1.dll] [腾讯, 5, 1, 14, 10]
[C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
[C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll] [, 1, 0, 0, 17]
[C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
[C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS] [, ]
[C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 9.1.0.2009022700]
[PID: 1952 / Administrator][C:\Program Files\Sucop\SecPlugin\SecNotifier.exe] [超级巡警, 1, 0, 0, 10]
[PID: 432 / Administrator][D:\360safe\safemon\360Tray.exe] [360.CN, 7, 0, 0, 1009]
[D:\360safe\ipc\ipcservice.dll] [360.CN, 6, 5, 3, 1002]
[D:\360safe\ipc\fileMgr.dll] [360.cn, 6, 5, 2, 1002]
[D:\360safe\ipc\yhregd.dll] [, 6, 5, 0, 1002]
[D:\360safe\ipc\appd.dll] [360.cn, 6, 5, 3, 1002]
[D:\360safe\safemon\360compro.dll] [360安全中心, 6, 2, 0, 1005]
[D:\360safe\safemon\360webpro.dll] [360.CN, 1, 3, 0, 1031]
[D:\360safe\safemon\360traylive.dll] [360安全中心, 6, 0, 1, 1013]
[D:\360safe\safemon\360procmon.dll] [360.CN, 6, 5, 2, 1011]
[D:\360safe\safemon\SelfProtectAPI2.dll] [360.CN, 1, 1, 0, 1012]
[D:\360safe\safemon\360safemonpro.tpi] [360.cn, 1, 1, 0, 1004]
[D:\360safe\safemon\netm.tpi] [360.cn, 1, 0, 1, 1012]
[D:\360safe\safemon\netmon.tpi] [360.CN, 1, 0, 2, 1011]
[D:\360safe\deepscan\qutmload.dll] [360安全中心, 6, 5, 0, 1001]
[D:\360safe\ipc\qutmipc.dll] [360安全中心, 6, 2, 0, 1007]
[D:\360safe\deepscan\cloudsec.dll] [360安全中心, 2, 1, 0, 1002]
[D:\360safe\deepscan\deepscan.dll] [360.cn, 3, 2, 3, 1032]
[D:\360safe\deepscan\Bapi.dll] [360.cn, 1.0.0.1010]
[D:\360safe\deepscan\cloudcom.dll] [360安全中心, 2, 1, 0, 1001]
[D:\360safe\SafeLive.dll] [360.cn, 1, 0, 0, 1007]
[D:\360safe\pdown.dll] [360.cn, 1, 2, 0, 1014]
[D:\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[D:\360safe\safemon\urlproc.dll] [360.cn, 1, 2, 1, 1005]
[D:\360safe\safemon\urlprocnet.dll] [360.cn, 1, 2, 1, 1008]
[D:\360safe\netmon\360netctrl.dll] [360.CN, 1, 0, 3, 1009]
[D:\360safe\efiproc.dll] [奇虎360安全卫士, 1, 0, 0, 1005]
[PID: 912 / Administrator][C:\Program Files\360Safebox\safeboxTray.exe] [360安全中心, 2, 5, 2, 1009]
[C:\Program Files\360Safebox\360wservice.dll] [360安全中心, 1, 0, 0, 1004]
[C:\Program Files\360Safebox\efiproc.dll] [奇虎360安全卫士, 1, 0, 0, 1003]
[C:\Program Files\360Safebox\safeboxapi.dll] [360安全中心, 2, 3, 0, 1001]
[C:\Program Files\360Safebox\liveupdate.dll] [360安全中心, 1, 2, 0, 1011]
[PID: 1768 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 868 / Administrator][C:\Program Files\Tencent\QQ\Bin\QQ.exe] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\Common.dll] [Tencent, 1, 25, 660, 0]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.DLL] [Microsoft Corporation, 8.00.50727.4053]
[C:\Program Files\Tencent\QQ\Bin\KernelUtil.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\GF.dll] [Tencent, 1, 25, 750, 0]
[C:\Program Files\Tencent\QQ\Bin\TXPFProxy.dll] [N/A, ]
[C:\WINDOWS\system32\msi.dll] [Microsoft Corporation, 4.5.6001.22159]
[C:\Program Files\Tencent\QQ\Bin\AppMisc.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\AppUtil.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\ChatFrame.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\ConfigCenter.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\CustomFace.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\IM.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\KernelMisc.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\LongCnn.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\ContactInfoFrame.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\MsgMgr.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\SkinMgr.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\QInterLive.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\AppCtrl.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\SystemMsg.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.PaiPai\Bin\PaiPai.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.AudioVideo\Bin\AudioVideo.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.MMOG\Bin\MMOG.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Soso\Bin\Soso.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Qzone\Bin\Qzone.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Weather\Bin\Weather.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.SoBar\Bin\SoBar.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.PaiPaiGift\Bin\PaiPaiGift.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQLive\Bin\QQLive.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\Bin\QQMusic.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.taotao\Bin\Taotao.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\MainFrame.dll] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\TSSafeEdit.dat] [TENCENT, 2010, 6, 7, 1]
[C:\Program Files\Tencent\QQ\Bin\TaskTray.dll] [Tencent, 1, 25, 660, 0]
[D:\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[PID: 1988 / Administrator][C:\Program Files\uTorrent\uTorrent.exe] [BitTorrent, Inc., 2.0.0.17920]
[PID: 2020 / Administrator][C:\Program Files\Tencent\QQ\Bin\TXPlatform.exe] [Tencent, 1, 25, 660, 0]
[C:\Program Files\Tencent\QQ\Bin\TXPFProxy.dll] [N/A, ]
[C:\WINDOWS\system32\msi.dll] [Microsoft Corporation, 4.5.6001.22159]
[PID: 2092 / Administrator][D:\360sd\360sd.exe] [360.cn, 1, 1, 0, 1308]
[D:\360sd\OLEPRO32.DLL] [Microsoft Corporation, 5.1.2600.5512]
[D:\360sd\QTQuart.dll] [360.cn, 1, 1, 0, 1203]
[D:\360sd\CrashReport.dll] [360安全中心, 1, 0, 0, 1074]
[D:\360sd\Cloudcom2.dll] [360.cn, 3, 2, 3, 1006]
[PID: 2728 / Administrator][D:\360safe\360leakfixer.exe] [360.cn, 1, 0, 0, 1014]
[D:\360safe\leakrepair.dll] [360.cn, 1.0.0.1013]
[D:\360safe\360net.dll] [奇虎网, 1, 1, 17, 1020]
[D:\360safe\pdown.dll] [360.cn, 1, 2, 0, 1014]
[PID: 856 / Administrator][L:\新建文件夹\SReng2.8.2.1321版\sr-engldr.EXE] [Smallfrogs Studio, 2.8.2.1321]
[D:\360safe\safemon\safemon.dll] [360.cn, 6, 5, 2, 1002]
[L:\新建文件夹\SReng2.8.2.1321版\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost

==================================
进程特权扫描
N/A

==================================
计划任务
N/A

==================================
Windows 安全更新检查
N/A

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================

[/CODE]

浪漫纸箱 - 2010-6-27 11:44:00

QQ能上么？
C:\WINDOWS\system32\rclumad.exe这程序有点可疑。到我签名处的网站扫描看看。

義勇君 - 2010-6-27 12:15:00

我遇到过丢失netcfg.hlp文件无法上网，你可以试试看能否找到 c:\windows\help

万里长征 - 2010-6-27 14:55:00

因为是先需要登录学校网站再输入帐号密码才能上网，所以QQ也没法试了

byxxdrls - 2010-6-27 15:07:00

VirSCAN.org Scanned Report :
Scanned time : 2010/06/25 08:11:10 (CST)
Scanner results: 39%的杀软(14/36)报告发现病毒
File Name : nethome32.dll
File Size : 308514 byte
File Type : PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bi
MD5 : 961ca0ea77f65f2ad45a59109b90de46
SHA1 : 0d7b05ba5355bd01e771229a093648a28f5b87c8
Online report : http://virscan.org/report/e0b978914a621bf71035aaac612eeabf.html

Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 5.0.0.11 20100625060302 2010-06-25 5.28 Rootkit.Win32.Agent!IK
安博士V3 2010.06.18.01 2010.06.18 2010-06-18 1.21 -
AntiVir 8.2.4.2 7.10.8.185 2010-06-24 0.26 TR/Agent2.csvs
安天 2.0.18 20100620.4774407 2010-06-20 0.02 -
Arcavir 2009 201006241905 2010-06-24 0.04 Trojan.Agent2.csqx
Authentium 5.1.1 201006241456 2010-06-24 2.19 -
AVAST! 4.7.4 100624-1 2010-06-24 0.02 -
AVG 8.5.793 271.1.1/2961 2010-06-25 0.24 Agent2.AWIM
BitDefender 7.90123.6276522 7.32391 2010-06-25 3.98 Trojan.Generic.4227707
ClamAV 0.96.1 11256 2010-06-24 0.09 -
Comodo 3.13.579 5207 2010-06-24 0.93 -
CP Secure 1.3.0.5 2010.06.25 2010-06-25 0.08 -
Dr.Web 5.0.2.3300 2010.06.25 2010-06-25 8.51 -
F-Prot 4.4.4.56 20100624 2010-06-24 4.69 -
F-Secure 7.02.73807 2010.06.24.05 2010-06-24 0.20 Trojan.Win32.Agent2.csvs [AVP]
飞塔 4.1.133 12.80 2010-06-23 0.17 -
GData 21.405/21.147 20100624 2010-06-24 7.23 Trojan.Win32.Agent2.csvs [Engine:A]
ViRobot 20100624 2010.06.24 2010-06-24 0.36 -
Ikarus T3.1.01.84 2010.06.24.76134 2010-06-24 6.92 Rootkit.Win32.Agent
江民杀毒 13.0.900 2010.06.24 2010-06-24 1.24 Trojan/Agent.dzso
卡巴斯基 5.5.10 2010.06.24 2010-06-24 0.13 Trojan.Win32.Agent2.csvs
金山毒霸 2009.2.5.15 2010.6.24.18 2010-06-24 0.72 Win32.Troj.NetHijack.b.306888
迈克菲 5400.1158 6023 2010-06-24 16.37 -
Microsoft 1.5902 2010.06.25 2010-06-25 7.36 -
Norman 6.05.10 6.05.00 2010-06-24 6.01 -
熊猫卫士 9.05.01 2010.06.24 2010-06-24 1.82 -
趋势科技 9.120-1004 7.264.16 2010-06-24 0.07 -
Quick Heal 10.00 2010.06.24 2010-06-24 1.61 -
瑞星 20.0 22.53.03.04 2010-06-24 1.35 AdWare.Win32.gogle.k
Sophos 3.07.1 4.54 2010-06-25 3.61 Mal/Emogen-Y
Sunbelt 3.9.2426.2 6501 2010-06-24 7.80 -
赛门铁克 1.3.0.24 20100615.005 2010-06-15 0.07 -
nProtect 20100624.01 8765388 2010-06-24 8.32 Trojan.Generic.4227707
The Hacker 6.5.2.0 v00303 2010-06-24 0.33 -
VBA32 3.12.12.5 20100624.0925 2010-06-24 4.72 -
VirusBuster 4.5.11.10 10.126.101/20293452010-06-24 2.52 -

瑞星卡卡安全论坛