2006-11-20,23:26:56

2006-11-20,23:26:56

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <BigDogPath><C:\WINDOWS\VM_STI.EXE ZSMC USB PC Camera>  [N/A]
    <DAEMON Tools-2052><; "F:\Program Files\D-Tools\daemon.exe"  -lang 2052>  [DAEMON'S HOME]
    <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <RavStub><"C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\System32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]

==================================
启动文件夹
N/A

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[InstallDriver Table Manager / IDriverT]
  <C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe><Macrovision Corporation>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[PDEngine / PDEngine]
  <C:\Program Files\Raxco\PerfectDisk\PDEngine.exe><Raxco Software, Inc.>
[PDScheduler / PDSched]
  <C:\Program Files\Raxco\PerfectDisk\PDSched.exe><Raxco Software, Inc.>
[Rising Personal Firewall Service / RfwService]
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

==================================
驱动程序
[Service for WDM 3D Audio Driver / ALCXSENS]
  <system32\drivers\ALCXSENS.SYS><Sensaura Ltd>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Aspi32 / Aspi32]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Aspi32.SYS><N/A>
[Rising TDI Base Driver / BaseTDI]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[d347bus / d347bus]
  <\SystemRoot\System32\DRIVERS\d347bus.sys><>
[d347prt / d347prt]
  <\SystemRoot\System32\Drivers\d347prt.sys><>
[Defrag32 / Defrag32]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Defrag32.SYS><Raxco Software, Inc.>
[Defrag32Boot / Defrag32b]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Defrag32b.SYS><Raxco Software, Inc.>
[dump_wmimmc / dump_wmimmc]
  <\??\C:\WINDOWS\System32\drivers\dump_wmimmc.sys><N/A>
[EagleNT / EagleNT]
  <\??\C:\WINDOWS\System32\drivers\EagleNT.sys><N/A>
[ExpScaner / ExpScaner]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[HookCont / HookCont]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[HookUrl / HookUrl]
  <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[MEMSCAN / MEMSCAN]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mProcRs / mProcRs]
  <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[Netgroup Packet Filter / NPF]
  <System32\DRIVERS\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt]
  <\??\F:\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[NPPTNT2 / NPPTNT2]
  <\??\C:\WINDOWS\System32\npptNT2.sys><INCA Internet Co., Ltd.>
[nv / nv]
  <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[nvatabus / nvatabus]
  <\SystemRoot\System32\DRIVERS\nvatabus.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENET]
  <System32\DRIVERS\NVENET.sys><NVIDIA Corporation>
[NVIDIA nForce AGP Bus Filter / nv_agp]
  <\SystemRoot\System32\DRIVERS\nv_agp.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsAntiSpyware / RsAntiSpyware]
  <\SystemRoot\System32\drivers\RsBoot.sys><Beijing Rising>
[RsFwDrv / RsFwDrv]
  <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS]
  <\??\C:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising>
[Secdrv / Secdrv]
  <System32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SetupNT / SetupNT]
  <\SystemRoot\system32\SetupNT.sys><N/A>
[viamraid / viamraid]
  <\SystemRoot\System32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd>
[VIA ATA/ATAPI Host Controller / viapdsk]
  <\SystemRoot\System32\DRIVERS\viapdsk.sys><VIA Technologies, Inc.>

==================================
浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v5.dll, >
[卡卡上网安全助手]
  {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\System32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <, N/A>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\System32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\System32\aliedit\AliEdit.dll, www.alipay.com>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[CPasswordEditCtrl Object]
  {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\System32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[&使用迅雷下载]
  <F:\Program Files\Sandai Technologies Inc\Thunder\geturl.htm, N/A>
[&使用迅雷下载全部链接]
  <F:\Program Files\Sandai Technologies Inc\Thunder\getAllurl.htm, N/A>

==================================
正在运行的进程
[PID: 600][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 672][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 696][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 740][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 752][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 912][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1036][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1140][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1224][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

[PID: 1248][C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 1276][c:\program files\rising\rfw\rfwsrv.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 33]
    [c:\program files\rising\rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13]
    [c:\program files\rising\rfw\rfwlog.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6]
    [c:\program files\rising\rfw\Rfwdrv.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21]
    [c:\program files\rising\rfw\MonDrv.dll]  [rs, 1, 0, 0, 4]
    [c:\program files\rising\rfw\ProcLib.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9]
[PID: 1304][C:\Program Files\Rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 47]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RsPPsys.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 18, 1, 0, 12]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 33]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [rising, 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\Rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [C:\Program Files\Rising\Rav\MailMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 35]
    [C:\Program Files\Rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 18]
    [C:\Program Files\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
    [C:\Program Files\Rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32]
    [C:\Program Files\Rising\Rav\RSUnpack.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 20]
    [C:\Program Files\Rising\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 24]
    [C:\Program Files\Rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7]
    [C:\Program Files\Rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\Unpacker.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\ExtOLE.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\ExtMail.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[PID: 1560][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
    [C:\WINDOWS\System32\xunleibho_v5.dll]  [, 4, 3, 3, 30]
    [F:\HappyPlayer\Codecs\mmfinfo.dll]  [N/A, N/A]
    [F:\HappyPlayer\Codecs\mkunicode.dll]  [N/A, N/A]
    [F:\电子书播放软件\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [C:\WINDOWS\System32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.5664]
    [C:\WINDOWS\System32\nvshell.dll]  [NVIDIA Corporation, 6.14.10.5664]
    [C:\WINDOWS\System32\NVWRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.5664]
[PID: 1568][C:\WINDOWS\System32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 1676][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[PID: 1768][C:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1936][C:\WINDOWS\VM_STI.EXE]  [VM., 4.2.610.4]
    [C:\WINDOWS\System32\msdmo.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\VM31bPrp.Ax]  [VM, 4.2.711.31]
[PID: 1944][C:\Program Files\Rising\Rfw\rfwmain.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 52]
    [C:\Program Files\Rising\Rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23]
    [C:\Program Files\Rising\Rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 1968][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
[PID: 1980][C:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 39]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 272][C:\WINDOWS\System32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.5664]
[PID: 460][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 488][C:\WINDOWS\System32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 556][C:\Program Files\Raxco\PerfectDisk\PDSched.exe]  [Raxco Software, Inc., 7, 0, 0, 34]
    [C:\Program Files\Raxco\PerfectDisk\PDCommon.dll]  [Raxco Software, Inc., 7, 0, 0, 34]
    [C:\Program Files\Raxco\PerfectDisk\PDLangEN.dll]  [Raxco Software, 公司., 7, 0, 0, 34]
    [C:\Program Files\Raxco\PerfectDisk\PDSchedPS.dll]  [Raxco Software, Inc., 7, 0, 0, 34]
    [C:\Program Files\Raxco\PerfectDisk\PDEnginePS.dll]  [Raxco Software, Inc., 7, 0, 0, 34]
[PID: 3596][F:\Program Files\Maxthon\Maxthon.exe]  [MY Soft Technology, 1, 5, 0, 83]
    [F:\Program Files\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
    [F:\Program Files\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [H:\Program Files\淘宝网\淘宝旺旺\WangWangX0.dll]  [, 1, 0, 0, 1]
[PID: 1216][F:\bt一下\BitComet.exe]  [www.BitComet.com, 0.63.]
[PID: 3716][f:\Program Files\Maxthon2\Maxthon.exe]  [Maxthon International ltd., 2, 0, 1, 1276]
    [f:\Program Files\Maxthon2\mxpp.dll]  [Maxthon, 1, 0, 0, 4]
    [f:\Program Files\Maxthon2\MxSk.dll]  [Maxthon, 1, 0, 0, 73]
    [f:\Program Files\Maxthon2\MxProxy.dll]  [, 1, 0, 0, 1763]
    [f:\Program Files\Maxthon2\maxzlib.dll]  [N/A, 1.2.3]
    [f:\Program Files\Maxthon2\MxFav.dll]  [, 1, 0, 0, 1]
    [f:\Program Files\Maxthon2\mxtool.dll]  [, 1, 0, 0, 1]
    [f:\Program Files\Maxthon2\mxfeedU.dll]  [, 1, 0, 45, 45]
[PID: 2984][C:\Program Files\WinRAR\WinRAR.exe]  [Eugene Roshal, 3.30]
[PID: 1060][F:\电脑医生\新新医生\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost
127.0.0.1      www.139cn.com
127.0.0.1      www.7liao.com
127.0.0.1      chat.51liao.net
127.0.0.1      www.51liao.net
127.0.0.1      www.7liao.net
127.0.0.1      www.6see.com
127.0.0.1      bliao.com
127.0.0.1      www.bliao.com
127.0.0.1      www.hao222.net
127.0.0.1      www.hao222.com
127.0.0.1      www.v111.com
127.0.0.1      music.v111.com
127.0.0.1      www.qq165.com
127.0.0.1      www.xicu.com
127.0.0.1      www.haodx.com
127.0.0.1      www.haohz.com
127.0.0.1      www.265.com
127.0.0.1      www.dj99.com
127.0.0.1      www.dj99.net
127.0.0.1      265.com
127.0.0.1      www.yqdj.com
127.0.0.1      www.qq530.com
127.0.0.1      www.tt67.com
127.0.0.1      ad.t2t2.com
127.0.0.1      www.yexr.com
127.0.0.1      chat.9see.com
127.0.0.1      www.ok816.com
127.0.0.1      www.3399.net
127.0.0.1      www.ads8.com
127.0.0.1      www.5566.net
127.0.0.1      www.t2t2.com
127.0.0.1      popad.qq.com
127.0.0.1      v.jsdownload.com
127.0.0.1      www.linktoad.com
127.0.0.1      club.homeway.com.cn
127.0.0.1      sms1.ctn.com.cn
127.0.0.1      sms2.ctn.com.cn
127.0.0.1      sms3.ctn.com.cn
127.0.0.1      www.331122.com
127.0.0.1      mmpic.uni.cc
127.0.0.1      www.love34.com
127.0.0.1      www.free-movie.org
127.0.0.1      www.skyhits.com
127.0.0.1      www.rd18.com
127.0.0.1      tadsweb.tencent.com
127.0.0.1      www.vlike.com
127.0.0.1      www.chinasee.net
127.0.0.1      www.japansky.net
127.0.0.1      www.225.com.cn
127.0.0.1      ads.china.com
127.0.0.1      www.yes521.com
127.0.0.1      www.today6.com
127.0.0.1      www.h2004.com
127.0.0.1      www.movie4.com
127.0.0.1      www.rm88.com
127.0.0.1      www.qq300.com
127.0.0.1      www.qq500.com
127.0.0.1      www.av126.com
127.0.0.1      www.kissmm.com
127.0.0.1      www.cn808.net
127.0.0.1      www.hao168.com
127.0.0.1      www.mm91.com
127.0.0.1      www.huole.com
127.0.0.1      www.kan69.com
127.0.0.1      ulinkdir.tom.com
127.0.0.1      cpc.sohu.com
127.0.0.1      images.sohu.com
127.0.0.1      adv.pconline.com.cn
127.0.0.1      goto.sohu.com
127.0.0.1      images2.sohu.com
127.0.0.1      www.sexy-books.com
127.0.0.1      www.xxbooks.com
127.0.0.1    www.18it.com
127.0.0.1      www.cnxxx.com
127.0.0.1      www.18-girl.net
127.0.0.1      ad.tom.com
127.0.0.1      ad4.sina.com.cn
127.0.0.1      sina.allyes.com
127.0.0.1      smarttrade.allyes.com
127.0.0.1      tom.allyes.com
127.0.0.1      szwindow.allyes.com
127.0.0.1      eachnetmember.allyes.com
127.0.0.1      iplus.allyes.com
127.0.0.1      sinatest.allyes.com
127.0.0.1      casting9.allyes.com
127.0.0.1      yinsha.allyes.com
127.0.0.1      stockstar.allyes.com
127.0.0.1      www.001x.com
127.0.0.1      www.hksexweb.com
127.0.0.1      www.99adultx.com
127.0.0.1      www2.xfreehosting.com
127.0.0.1    www1.xfreehosting.com
127.0.0.1      www.w555.net
127.0.0.1      www.excitecity.com
127.0.0.1      www.0xing.com
127.0.0.1      sba.3322.net
127.0.0.1      www.zgxl.net
127.0.0.1      www.qqpic.com
127.0.0.1      webspacecn.com
127.0.0.1      www.yeapple.com
127.0.0.1      manage.link8.com
127.0.0.1      www.web888.org
127.0.0.1      www.432.cn
127.0.0.1      www.kan123.com
127.0.0.1      www.3tom.com
127.0.0.1      www.sotop.com
127.0.0.1      www3.7789.com
127.0.0.1      www.66036.com
127.0.0.1      www1.66036.com
127.0.0.1      www2.66036.com
127.0.0.1      www3.66036.com
127.0.0.1      www4.66036.com
127.0.0.1      www5.66036.com
127.0.0.1      www6.66036.com
127.0.0.1      www7.66036.com
127.0.0.1      www8.66036.com
127.0.0.1      www9.66036.com
127.0.0.1      www10.66036.com
127.0.0.1      tj4.7789.com
127.0.0.1      tj5.7789.com
127.0.0.1      tj6.7789.com
127.0.0.1      tj7.7789.com
127.0.0.1      www.7789.com
127.0.0.1      count.zhao123.com
127.0.0.1      count1.zhao123.com
127.0.0.1      count2.zhao123.com
127.0.0.1      count3.zhao123.com
127.0.0.1      count4.zhaocount.com
127.0.0.1      count5.zhaocount.com
127.0.0.1      count6.zhaocount.com
127.0.0.1      count7.zhaocount.com
127.0.0.1      count8.zhaocount.com
127.0.0.1      count9.zhaocount.com
127.0.0.1      count10.zhaocount.com
127.0.0.1      count11.zhaocount.com
127.0.0.1      tj1.mytongji.com
127.0.0.1      count1.99count.com
127.0.0.1      www.99count.com
127.0.0.1      bar.baidu.com
127.0.0.1      www2.7789.com
127.0.0.1      www.guang.org
127.0.0.1      www.dlmovie.com
127.0.0.1      www.91look.com
127.0.0.1      www.kan51.com
127.0.0.1      www.mewo.com
127.0.0.1      coolsite21.com
127.0.0.1      www.t3j4.com
127.0.0.1      www.yun8.com
127.0.0.1      film.yun8.com
127.0.0.1      www.wo123.com
127.0.0.1      www.da123.com
127.0.0.1      www.huole.com
127.0.0.1      www.1ya.cn
127.0.0.1      www.sleazydream.com
127.0.0.1      www.easypic2.com
127.0.0.1      serv.sexushost.com
127.0.0.1      www.xfreehosting.com
127.0.0.1      www.888txt.com
127.0.0.1      asiafriendfinder.com
127.0.0.1      www3.cool168.com
127.0.0.1      www2.cool168.com
127.0.0.1      www1.cool168.com
127.0.0.1      www.happy8.cn
127.0.0.1      www.topsex2k.com
127.0.0.1      topxxx.sexushost.com
127.0.0.1      www.cool168.com
127.0.0.1      www.s6.cn
127.0.0.1      popme.163.com
127.0.0.1      adclient.163.com
127.0.0.1      fadama.com
127.0.0.1      www.66vv.com
127.0.0.1      www.qqee.com
127.0.0.1      www.sohu123.com
127.0.0.1      www.xgmm.com
127.0.0.1      www.7t7t.com
127.0.0.1      www.cnimg.com
127.0.0.1      www.love34.com
127.0.0.1      cdn2.cnnic.cn
127.0.0.1      cool.vv66.com
127.0.0.1      www.vv66.com
127.0.0.1      www.freepicturepage.com
127.0.0.1      www.snasty.com
127.0.0.1      www.yourcage.com
127.0.0.1      www.shagadelic.com
127.0.0.1      hualiao.net
127.0.0.1      www.qq163.com
127.0.0.1      www.qq163.net
127.0.0.1      www.superdown.com
127.0.0.1      web.114.com.cn
127.0.0.1      www.114.com.cn
127.0.0.1      9see.com
127.0.0.1      www.91f.cn
127.0.0.1      wwww.tthao.com
127.0.0.1      www.91f.org
127.0.0.1      www.v23.com
127.0.0.1      cn.yimg.com
127.0.0.1      auto.search.msn.com
127.0.0.1      x2.51link.com
127.0.0.1      x1.51link.com
127.0.0.1      www.textlink.cn
127.0.0.1      stat.textclick.com
127.0.0.1      www.easyhere.com
127.0.0.1      www.xxx168.com
127.0.0.1      ally.263.net
127.0.0.1      www.hualiao.net
127.0.0.1      www.xchina.com
127.0.0.1      www.sex.com
127.0.0.1      www.3xcn.com
127.0.0.1      www.20girl.com
127.0.0.1      www.x365x.com
127.0.0.1      chat.263.net
127.0.0.1      chat.yinsha.com
127.0.0.1      chat.tom.com
127.0.0.1      chat.xilu.com
127.0.0.1      www.aliao.com
127.0.0.1      chat.163.com
127.0.0.1      www.haoliao.com
127.0.0.1      www.liaoliao.com
127.0.0.1      www.haoliao.net
127.0.0.1      www.haoliao.cn
127.0.0.1      www.qqliao.com
127.0.0.1      www.qliao.com
127.0.0.1      www.loveliao.com
127.0.0.1      www.mmliao.com
127.0.0.1      mmliao.com
127.0.0.1      aliao.com
127.0.0.1      liaoliao.com
127.0.0.1      chat.qq.com
127.0.0.1      vchat.xaonline.com
127.0.0.1      www.loveliao.net
127.0.0.1      loveliao.net
127.0.0.1      www.chinamp3.com
127.0.0.1      www.9sky.com
127.0.0.1      www.sogua.com
127.0.0.1      sogua.com
127.0.0.1      www.99music.net
127.0.0.1      www.yzskdj.com
127.0.0.1      loveliao.com
127.0.0.1      haoliao.com

127.0.0.1      music.feifa.com
127.0.0.1      www.aisex.com
127.0.0.1      www.movie-down.com
127.0.0.1      www2.movie-down.com
127.0.0.1      movie-down.com
127.0.0.1      www.tt90.com
127.0.0.1      www.tt78.com
127.0.0.1      www.tiankong.net
127.0.0.1      tiankong.net
127.0.0.1      www.qqchat.cn
127.0.0.1      www.yymp3.com
127.0.0.1      www.9see.com
127.0.0.1      www.woliao.net
127.0.0.1      www.woliao.com
127.0.0.1      www.kuro.com.cn
127.0.0.1      www.qq163.com
127.0.0.1      www.wangzhiku.com
127.0.0.1 　　 localhost
127.0.0.1 　  www.qq3344.com      # 包含qq病毒
127.0.0.1 　  www.dj3344.com 　　　# qq病毒
127.0.0.1 　  www.qq3344.com 　　　# qq病毒
127.0.0.1 　  www.yysky.net 　　　 # qq病毒
127.0.0.1 　  www.cnqb.net 　　　　# 禁止你的注册表，改首页，改右键
127.0.0.1 　  hothack.home.chinaren.com
127.0.0.1 　  www.777888.com
127.0.0.1 　  www.5dsoft.com
127.0.0.1 　  www.wokoo.net
127.0.0.1 　　 movie.sx.zj.cn
127.0.0.1 　　 xyxy68.8u8.net
127.0.0.1 　  www.youmiss.com
127.0.0.1 　　 www.cctv8.net
127.0.0.1 　　 www.kuliao.com
127.0.0.1 　　 www.yyqy.com
127.0.0.1 　　 www.sunvod.com
127.0.0.1 　　 www.t168.com
127.0.0.1 　　 www.wokoo.net
127.0.0.1 　　 www.coolcdrom.com  # 要特别小心这个网站，它会在你启动组里做手脚
127.0.0.1 　　 www.zhengdian.com
127.0.0.1 　　 girlchinese.com 　　# 修改ie主页
127.0.0.1 　　 www.girl008.com
127.0.0.1 　　 xajh.15888.net
127.0.0.1 　　 www.51bug.com
127.0.0.1 　　 www.wplune.com
127.0.0.1 　　 www.777888.net
127.0.0.1 　　 pollen.my001.net
127.0.0.1 　　 www.yule21.com
127.0.0.1 　　 www.fish3000.com
127.0.0.1 　　 www.kuliao.com
127.0.0.1 　　 www.666e.com
127.0.0.1 　　 qm.8ok.com
127.0.0.1 　　 www.guosir.ccoo.com
127.0.0.1 　　 www.163mm.com
127.0.0.1 　　 www.cnooo.com
127.0.0.1 　　 www.es158.com
127.0.0.1 　　 www.aisa-girl.net
127.0.0.1 　　 www.boliwu.com
127.0.0.1 　　 www.cctv8.net
127.0.0.1 　　 www.89005.com
127.0.0.1 　　 www.cctv1.net
127.0.0.1 　　 www.play.cn.gs 　# 要特别小心这个网站。
127.0.0.1 　　 newyouth.3322.net
127.0.0.1 　　 chinabdkx.363.net
127.0.0.1 　　 www.zknew.com
127.0.0.1 　　 www.dhchao.com
127.0.0.1 　　 www.top666.net
127.0.0.1 　　 www.amoisonic.com
127.0.0.1 　　 www.markguide.com
127.0.0.1　　  www.xyxc.ccoo.com
127.0.0.1 　　 www.flyingwalk.com
127.0.0.1 　　 www.yezine.net
127.0.0.1 　　 www.mmgirls.com
127.0.0.1 　　 www.wa***.net
127.0.0.1 　　 www.net5w.com
127.0.0.1 　　 www.fbstu.com
127.0.0.1 　　 www.qlwl.com
127.0.0.1 　　 www.yibinren.com  # 更可怕，把ie的默认页都改成他的了
127.0.0.1 　　 www.yinshang.com
127.0.0.1 　　 www.ncunet.com
127.0.0.1 　　 www.555666.net
127.0.0.1 　　 www.fm1058.cc
127.0.0.1 　　 meim.y365.com
127.0.0.1 　　 www.qq520.net
127.0.0.1 　　 jjkafei.longcity.net
127.0.0.1 　　 chow.yesky.net
127.0.0.1 　　 oicq.hk.st
127.0.0.1 　　 www.my288.com
127.0.0.1 　　 www.youmiss.com
127.0.0.1 　　 www.laws-online.net
127.0.0.1 　　 www.hj168.net
127.0.0.1 　　 16888.6to23.com
127.0.0.1 　　 www.love520.net
127.0.0.1 　　 www.qq520.com
127.0.0.1 　　 www.mmgirls.com
127.0.0.1 　　 www.555666.net
127.0.0.1 　　 www.ezhgc.com
127.0.0.1 　　 www.ezhgc.com
127.0.0.1 　　 www.eastedu.com.cn
127.0.0.1 　　 www.435000.com
127.0.0.1 　　 sdik.8ok.net
127.0.0.1 　　 feiying.coolwww.net
127.0.0.1 　　 zhongxuesheng.myrice.com
127.0.0.1　　  www.laws-online.net
127.0.0.1 　　 www.youmiss.com
127.0.0.1　　  www.my288.com
127.0.0.1 　　 www.yes9999.com 　　
127.0.0.1      www.nnptt.com
127.0.0.1 　　 vod.hengshui.com
127.0.0.1 　　 tv.megajoy.com
127.0.0.1 　　 www.h444.net 　　# 包含trojan.qqwebaut.a及其变种trojan.qqwebaut
127.0.0.1 　　 update.myxq.com
127.0.0.1 　　 www.qq168.net 　
127.0.0.1 　　 www.777888.com 　
127.0.0.1　　  www.5dsoft.com 　
127.0.0.1 　　 www.wokoo.net
127.0.0.1　　  movie.sx.zj.cn 　　
127.0.0.1 　　 www.yeapple.com 　 # 黄色网站。都是垃圾，恶意代码不少
127.0.0.1 　　 xyxy68.8u8.net
127.0.0.1 　　 www.youmiss.com
127.0.0.1 　　 www.cctv8.net
127.0.0.1 　　 www.kuliao.com
127.0.0.1 　　 www.yyqy.com
127.0.0.1 　　 winzheng.126.com
127.0.0.1 　　 www.sunvod.com
127.0.0.1 　　 www.t168.com
127.0.0.1 　　 www.boliwo.com
127.0.0.1 　　 www.coolcdrom.com
127.0.0.1 　　 www.zhengdian.comoe  # 标题栏也没放过
127.0.0.1 　　 girlchinese.comie 　 # 的主页也被改了
127.0.0.1 　　 www.yibinren.com 　
127.0.0.1 　　 www.mtv51.com 　
127.0.0.1 　　 www.163[1].com 　　  # 也是一个什么音乐网。恶意代码狂，还有病毒
127.0.0.1 　　 www.37021.com 　　  # 看清楚!不是3721， 这个最讨厌!!
127.0.0.1 　　 www.cnqb.net 　　 　 # 禁止你的注册表，...
127.0.0.1 　　 www.qq3344.com 　　
127.0.0.1 　　 www.qq3344.net
127.0.0.1 　　 youlove.3322.net 　# 有恶意代码的特性外还夹带病毒：trojan.pwdbox.d
127.0.0.1 　　 www.58589.com 　　 # 有恶意代码的特性
127.0.0.1 　　 tty.yyun.net 　　　# 与上述的危害差不多
127.0.0.1 　　 www.ftlink.net 　　# 一般性恶意代码
127.0.0.1 　　 home.kimo.com.tw 　# 一般性恶意代码
127.0.0.1 　　 www.pixpox.com 　  # 恶性网站并且自动驻留计算机内大量垃圾
127.0.0.1 　　 www.k163.com 　    # 狩猎者变种 和dj344 qq3344 与qq168是一伙的
127.0.0.1 　　 www.pk.com
127.0.0.1      www.unionsky.cn
127.0.0.1      www.allyes.com
127.0.0.1 　　 www.xxx.com
127.0.0.1 　　 204.177.92.68
127.0.0.1 　　 www.fassia.net 　　　　　 　
127.0.0.1 　　 www.ehomeday.com 　　　
127.0.0.1 　　 www.jinpin.net 　　　　　 　
127.0.0.1 　　 www.happy666.net
127.0.0.1 　　 update.myxq.com
127.0.0.1 　　 www.myxq.com
127.0.0.1      dvd.qq92.com
127.0.0.1      www.16yi.com
127.0.0.1      www.ye77.com
127.0.0.1      www.7sese.com
127.0.0.1      www.1yin.net
127.0.0.1      www.77ttt.com
127.0.0.1      www.7mao.com
127.0.0.1      www.mydj2005.com
127.0.0.1      www.vv78.com
127.0.0.1      www.v119.com/indexv119.htm
127.0.0.1      100.332233.com/index.htm
127.0.0.1      www.cashbackbuddy.com/login.php
127.0.0.1      www.joyiex.com
127.0.0.1      mm.227.cn
127.0.0.1      qq92.com
127.0.0.1      www.1432.net
127.0.0.1      qichun.6to23.com
127.0.0.1      www.53best.com
127.0.0.1      www.hao213.net
127.0.0.1      52007.com
127.0.0.1      www.QQ.5qt.net
127.0.0.1      4OO.net
127.0.0.1      dvd.sg51.com
127.0.0.1      www.qq46.com
127.0.0.1      www.zhaowo8.com
127.0.0.1      www.91tg.net
127.0.0.1      www.h301.com
127.0.0.1      www.52kuku.com
127.0.0.1      www.ttjj.com
127.0.0.1      www.55885.com
127.0.0.1      www.zb444.com
127.0.0.1      www.12822.com
127.0.0.1      www.00855.com
127.0.0.1      www.363618.com
127.0.0.1      www.te99.com
127.0.0.1      www.bb58.com
127.0.0.1      www.5359.com
127.0.0.1      www.5359.net
127.0.0.1      ww.k8k8.com
127.0.0.1      www.52935.com
127.0.0.1      www.ourbt.com
127.0.0.1      www.djjcp.com
127.0.0.1      www.51115.com
127.0.0.1      www.wa110.com
127.0.0.1      www.mtv123.com
127.0.0.1      www.99love.com
127.0.0.1      www.53900.com
127.0.0.1      www.83900.com
127.0.0.1      www.daoyi.com.cn
127.0.0.1      http://218.25.255.170/sinalink.html
127.0.0.1      http://218.25.255.170/sinalink.html=
127.0.0.1      http://union.kuho.com/reg.html?vendor=eqifa&channel=27276&uuid=188
127.0.0.1      http://www.link789.com/8522movie.html
127.0.0.1      http://www.link789.com/
127.0.0.1      http://www.94lm.com/skype.html
127.0.0.1      http://www.maohehe.com/web/58.html
127.0.0.1      http://www.alipay.pvs.cn/
127.0.0.1      http://www.alipay.pvs.cn

==================================

用超级兔子 清理痕迹后 c盘的垃圾文件还是在,真奇怪

希望能有人看到,帮帮我,先谢谢了

希望能有人看到,帮帮我,先谢谢了希望能有人看到,帮帮我,先谢谢了

来人啊,快来帮助我啊

下载超级兔子,IE里有

引用:

【红夜鬼1的贴子】下载超级兔子,IE里有 ………………

用兔子还是不行啊
ie里的也不行啊