请高手帮个忙啊！谢谢！ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请高手帮个忙啊！谢谢！

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

3 / 4 页

跳转页

请高手帮个忙啊！谢谢！

wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:	发表于： 2006-07-17 22:43 \| 只看楼主短消息资料字号：小中大 21楼我好笨啊！ 2006-07-17,22:23:38 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation] <iDuba Personal FireWall><D:\KAV6\KAVPFW.EXE> [] <Super Rabbit IEPro><C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.] <iDuba Personal FireWall><rem D:\KAV6\KAVPFW.EXE> [] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent] <SOUNDM><winsmd.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <KernelFeultCess><C:\WINDOWS\System32\msime.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><KB399952M.LOG> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] <{08315C1A-9BA9-4B7C-A432-26885F78DF28}><> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <DVDBurn><C:\WINDOWS\Downloaded Program Files\AfxEdit.dll> [] ================================== 启动文件夹 [腾讯QQ] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\腾讯QQ.lnk><N> [IE-BAR] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IE-BAR.lnk><N> [腾讯QQ] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\腾讯QQ.lnk><N> [IE-BAR] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IE-BAR.lnk><N> ================================== 服务 [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Te1net / Te1net] <C:\WINDOWS\System32\VIPTray.exe><N/A> ================================== 浏览器加载项 [讯通视频语音聊天] {97C0CDFA-970D-4222-ADDE-6718E89E887C} <http://www.bdsystem.com/, N/A> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <d:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <d:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [VTPlug3 Class] {0400AC1C-EEF0-4638-A501-31D5A0DC2002} <C:\WINDOWS\System32\gxd\VTrans3.dll, > [AxSubmitControl Class] {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, > [Update Class] {9F1C11AA-197B-4942-BA54-47A8489BB47F} <C:\WINDOWS\System32\iuctl.dll, Microsoft Corporation> [IEDown Class] {D0A29C6C-AA71-4423-8C4A-5998B774C448} <C:\WINDOWS\System32\GLIEDown2.dll, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [上传到QQ网络硬盘] <D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Program Files\Tencent\QQ\SendMMS.htm, N/A> ================================== 正在运行的进程 [PID: 600][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 660][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 684][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 736][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 748][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 932][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1104][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1220][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1260][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1568][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A>
wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:

wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:	发表于： 2006-07-17 22:43 \| 只看楼主短消息资料字号：小中大 22楼 [PID: 1684][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [C:\WINDOWS\System32\KB3999526.LOG] <N/A><N/A> [C:\WINDOWS\Downloaded Program Files\swflash.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [PID: 1836][C:\WINDOWS\System32\msime.exe] <Microsoft Corporation><5.1.2600.2180> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 1844][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.24> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 1860][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3018> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 1932][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 1996][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [C:\Progra~1\IE-BAR\Cast\dmipn.dll] <千橡互联><2, 2, 1, 0> [C:\Progra~1\IE-BAR\Cast\dmshell.dll] <千橡互联><2, 2, 1, 0> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 2012][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [C:\Progra~1\IE-BAR\Cast\dmipn.dll] <千橡互联><2, 2, 1, 0> [C:\Progra~1\IE-BAR\Cast\dmshell.dll] <千橡互联><2, 2, 1, 0> [C:\Progra~1\IE-BAR\Cast\222~1.0\dmplayer.dll] <千橡互联><2, 2, 1, 0> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 240][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 308][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 340][C:\WINDOWS\System32\VIPTray.exe] <N/A><N/A> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 432][C:\WINDOWS\System32\VKTServ.exe] <Microsoft Corporation><1.1.2600.2180> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 2952][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0> [PID: 3900][D:\Program Files\Tencent\QQ\QQ.exe] <TENCENT><0, 0, 0, 0> [D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQHelperDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQAPI.dll] <><1, 0, 0, 1> [d:\Program Files\Tencent\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [D:\Program Files\Tencent\QQ\LoginCtrl.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1> [D:\Program Files\Tencent\QQ\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1> [D:\Program Files\Tencent\QQ\QQRes.dll] <tencent><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQMainFrame.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\CQQApplication.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\NewSkin.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\HostingMgr.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\CameraDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\MailSummary.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQSpace.dll] <><1, 0, 0, 1> [C:\WINDOWS\System32\msdmo.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQGroupMng.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\GroupLive.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQSysMsgMng.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQAllInOne.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\SCCore.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQCustomFace.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\UserDefinedHead.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQPlugin.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQConfigPlugin.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2> [D:\Program Files\Tencent\QQ\QRingMng.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\PhoneAPI.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\DialerAllinOne.dll] <tencent><1, 4, 0, 0> [D:\Program Files\Tencent\QQ\QQSettingCtrl.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\FlashAvatarDll.dll] <><1, 4, 0, 1> [D:\Program Files\Tencent\QQ\QQAvatar.dll] <N/A><N/A> [C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0> [D:\Program Files\Tencent\QQ\LongConnection.dll] <tencent><5, 0, 200, 160> [D:\Program Files\Tencent\QQ\QQPet.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\BQQApplication.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [D:\Program Files\Tencent\QQ\CommercesMng.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200> [D:\Program Files\Tencent\QQ\QQSceneMng.dll] <N/A><N/A> [PID: 3960][d:\Program Files\Tencent\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [d:\Program Files\Tencent\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4> [PID: 2368][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [C:\WINDOWS\System32\xunleibho_v13.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 48> [PID: 3932][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.258\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-07-17 22:45 \| 短消息资料字号：小中大 23楼拜托你把日志粘全来。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-07-17 22:52 \| 短消息资料字号：小中大 24楼你不笨，只是不够细心。不要紧，再来。运行(双击)System Repair Engineer，使用“启动项目，注册表”选中要修复的项 KB399952M.LOG 点“编辑”在“值”里删除KB399952M.LOG，然后确定。进入控制面版的添加删除程序中卸载IE-BAR 运行(双击)System Repair Engineer，点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Te1net ，选择“删除服务”点“设置”选择“否”最后重启请到www.27814939.ys168.com,点“我的软件”下载诺顿进程管理器，终止msime.exe，winsmd.exe 的进程运行(双击)System Repair Engineer，使用“启动项目，注册表”来删除以下选项 winsmd.exe C:\WINDOWS\System32\msime.exe C:\WINDOWS\Downloaded Program Files\AfxEdit.dll 双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示确定更改时，单击“是”，清除“隐藏已知文件类型的扩展名删除 winsmd.exe搜索一下。 C:\WINDOWS\System32\msime.exe C:\WINDOWS\Downloaded Program Files\AfxEdit.dll C:\WINDOWS\System32\VIPTray.exe C:\WINDOWS\KB399952M.LOG c:\Program Files\IE-BAR 修复这几项时，你告诉我，是否能删除，是否能终止等。修复后，重启，请再扫份日志粘上来。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:	发表于： 2006-07-17 22:53 \| 只看楼主短消息资料字号：小中大 25楼 2006-07-17,22:23:38 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation] <iDuba Personal FireWall><D:\KAV6\KAVPFW.EXE> [] <Super Rabbit IEPro><C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.] <iDuba Personal FireWall><rem D:\KAV6\KAVPFW.EXE> [] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent] <SOUNDM><winsmd.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <KernelFeultCess><C:\WINDOWS\System32\msime.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><KB399952M.LOG> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] <{08315C1A-9BA9-4B7C-A432-26885F78DF28}><> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <DVDBurn><C:\WINDOWS\Downloaded Program Files\AfxEdit.dll> [] ================================== 启动文件夹 [腾讯QQ] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\腾讯QQ.lnk><N> [IE-BAR] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IE-BAR.lnk><N> [腾讯QQ] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\腾讯QQ.lnk><N> [IE-BAR] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IE-BAR.lnk><N> ================================== 服务 [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Te1net / Te1net] <C:\WINDOWS\System32\VIPTray.exe><N/A> ================================== 浏览器加载项 [讯通视频语音聊天] {97C0CDFA-970D-4222-ADDE-6718E89E887C} <http://www.bdsystem.com/, N/A> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <d:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <d:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [VTPlug3 Class] {0400AC1C-EEF0-4638-A501-31D5A0DC2002} <C:\WINDOWS\System32\gxd\VTrans3.dll, > [AxSubmitControl Class] {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, > [Update Class] {9F1C11AA-197B-4942-BA54-47A8489BB47F} <C:\WINDOWS\System32\iuctl.dll, Microsoft Corporation> [IEDown Class] {D0A29C6C-AA71-4423-8C4A-5998B774C448} <C:\WINDOWS\System32\GLIEDown2.dll, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [上传到QQ网络硬盘] <D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Program Files\Tencent\QQ\SendMMS.htm, N/A> ================================== 正在运行的进程 [PID: 600][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 660][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 684][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 736][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 748][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 932][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1104][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1220][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1260][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1568][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 1684][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [C:\WINDOWS\System32\KB3999526.LOG] <N/A><N/A> [C:\WINDOWS\Downloaded Program Files\swflash.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [PID: 1836][C:\WINDOWS\System32\msime.exe] <Microsoft Corporation><5.1.2600.2180> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 1844][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.24> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 1860][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3018> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 1932][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 1996][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [C:\Progra~1\IE-BAR\Cast\dmipn.dll] <千橡互联><2, 2, 1, 0> [C:\Progra~1\IE-BAR\Cast\dmshell.dll] <千橡互联><2, 2, 1, 0> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 2012][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [C:\Progra~1\IE-BAR\Cast\dmipn.dll] <千橡互联><2, 2, 1, 0> [C:\Progra~1\IE-BAR\Cast\dmshell.dll] <千橡互联><2, 2, 1, 0> [C:\Progra~1\IE-BAR\Cast\222~1.0\dmplayer.dll] <千橡互联><2, 2, 1, 0>
wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-07-17 22:54 \| 短消息资料字号：小中大 26楼以上的步骤，如果实在没有，或者修复后找不到，可以略过。修复后，要重启。再扫日志。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:	发表于： 2006-07-17 22:54 \| 只看楼主短消息资料字号：小中大 27楼 [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [PID: 240][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 308][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 340][C:\WINDOWS\System32\VIPTray.exe] <N/A><N/A> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 432][C:\WINDOWS\System32\VKTServ.exe] <Microsoft Corporation><1.1.2600.2180> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [PID: 2952][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0> [PID: 3900][D:\Program Files\Tencent\QQ\QQ.exe] <TENCENT><0, 0, 0, 0> [D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQHelperDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQAPI.dll] <><1, 0, 0, 1> [d:\Program Files\Tencent\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [D:\Program Files\Tencent\QQ\LoginCtrl.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1> [D:\Program Files\Tencent\QQ\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1> [D:\Program Files\Tencent\QQ\QQRes.dll] <tencent><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQMainFrame.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\CQQApplication.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\NewSkin.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\HostingMgr.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\CameraDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\MailSummary.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQSpace.dll] <><1, 0, 0, 1> [C:\WINDOWS\System32\msdmo.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQGroupMng.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\GroupLive.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQSysMsgMng.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQAllInOne.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\SCCore.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQCustomFace.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\UserDefinedHead.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQPlugin.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\QQConfigPlugin.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2> [D:\Program Files\Tencent\QQ\QRingMng.dll] <N/A><N/A> [D:\Program Files\Tencent\QQ\PhoneAPI.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\DialerAllinOne.dll] <tencent><1, 4, 0, 0> [D:\Program Files\Tencent\QQ\QQSettingCtrl.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\FlashAvatarDll.dll] <><1, 4, 0, 1> [D:\Program Files\Tencent\QQ\QQAvatar.dll] <N/A><N/A> [C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0> [D:\Program Files\Tencent\QQ\LongConnection.dll] <tencent><5, 0, 200, 160> [D:\Program Files\Tencent\QQ\QQPet.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\BQQApplication.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [D:\Program Files\Tencent\QQ\CommercesMng.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\QQ\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200> [D:\Program Files\Tencent\QQ\QQSceneMng.dll] <N/A><N/A> [PID: 3960][d:\Program Files\Tencent\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [d:\Program Files\Tencent\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4> [PID: 2368][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> [C:\WINDOWS\System32\xunleibho_v13.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 48> [PID: 3932][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.258\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\WINDOWS\KB399952M.LOG] <N/A><N/A> [g:\temp\7nquq.dll] <WinRAR archiver><3, 4, 2, 0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者
wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-07-17 22:55 \| 短消息资料字号：小中大 28楼拜托你做完后，再扫日志。你不用老发啊，做了后，再发，这样才能看出问题来。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:	发表于： 2006-07-17 23:10 \| 只看楼主短消息资料字号：小中大 29楼老大,进入控制面版的添加删除程序中卸载IE-BAR 找到了.没有办法抄作删出.其它的都有更改和删出,这个IE-BAR 就没有.
wwwyoo 初生襁褓狮帖子:100 注册: 2006-01-06 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-07-17 23:16 \| 短消息资料字号：小中大 30楼很好，多谢反馈。这个可以先略过先给出方法下载超级兔子。 http://www.pctutu.com/srmsdown.asp 安装好后，打开“超级兔子清理王”“专业卸载,卸载所有提示的垃圾软件，卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

<<上一主题|下一主题>>

3 / 4 页

跳转页

页面顶部

Powered by Discuz!NT