瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 用在线杀毒杀不了! 哪个大哥哥帮帮我啊!!

12   1  /  2  页   跳转

用在线杀毒杀不了! 哪个大哥哥帮帮我啊!!

用在线杀毒杀不了! 哪个大哥哥帮帮我啊!!

在线杀毒更新好了
在杀的时候提示 (脚本错误)
谁帮帮我啊!!!
最后编辑2006-06-11 12:51:56
分享到:
gototop
 

哥哥姐姐帮帮我把!!!!!
gototop
 

这个也许你恢复IE的默认设置,应该可以解决问题
另也不排除流氓软件与病毒的缘故
请下载 System Repair Engineer,使用“智能扫描”,按下“扫描”按钮进行扫描,扫描完成后按下“保存报告”按钮保存报告日志文件(SREng.LOG),把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完,分次粘完,请不要修改。
gototop
 

谢谢!
恩我去试试看!!!
gototop
 

2006-06-10,14:01:05

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows 2000 Advanced Server Service Pack 4 - 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <vptray><C:\Program Files\NavNT\vptray.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <wxbak><E:\Octopus\wxbackup.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINNT\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
服务
[DefWatch / DefWatch]
  <C:\Program Files\NavNT\defwatch.exe><Symantec Corporation>
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[FG3000 Server / FG3000Server]
  <e:\Winfgate\winntfgate.exe><Zhuhai Zetronic Ltd.>
[Norton AntiVirus 客户端 / Norton AntiVirus Server]
  <C:\Program Files\NavNT\rtvscan.exe><Symantec Corporation>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINNT\system32\nvsvc32.exe><NVIDIA Corporation>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
  <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><N/A>
[Rising Process Communication Center / RsCCenter]
  <"D:\瑞星\CCenter.exe"><N/A>
[RsRavMon Service / RsRavMon]
  <"D:\瑞星\Update\Ravmond.exe"><N/A>
[StdService / StdService]
  <C:\WINNT\system32\rundll32.exe C:\WINNT\System32\STDSVER.DLL,Service><N/A>
gototop
 

浏览器加载项
[MMSAssist BHO]
  {6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[stdup]
  {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} <C:\WINNT\SYSTEM32\stdup.dll, MStdup Co Ltd.>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\KuGoo3\KuGoo3DownXControl.ocx, N/A>
[就要你]
  {42CE9921-7259-11D6-B76A-0010A48548DC}? <url:http://www.91ni.com, N/A>
[网吧.net计划]
  {64187580-726B-11D6-B76A-0010A48548DC}? <url:http://www.sicent.net, N/A>
[MMSAssistMenu]
  {6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[MMSAssistMenu]
  {6671A433-5C3D-463d-A7CF-5587F9B7E191}? <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3}? <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[易趣购物]
  {DE607145-AC19-425e-867A-7D70ABDF119A}? <http://click2.ad4all.net/url2/urlmanage/url.asp?id=5, N/A>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}? <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINNT\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[WebActivater Control]
  {3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINNT\system32\WEBACT~1.OCX, QQ>
[WebPing Class]
  {52090A38-E692-4832-993D-E1808ABC139A} <C:\WINNT\DOWNLO~1\PINGPE~1.OCX, 福建省电信公司信息产业分公司>
[WebFtp Class]
  {68B0399F-9B38-4B5C-9206-A23F20A71017} <C:\WINNT\DOWNLO~1\FTPPER~1.OCX, 福建省电信公司信息产业分公司>
[Update Class]
  {9F1C11AA-197B-4942-BA54-47A8489BB47F} <C:\WINNT\System32\iuctl.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINNT\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[>>彩信发送<<]
  <res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm, N/A>
[上传到QQ网络硬盘]
  <D:\复件 QQ\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
  <D:\KuGoo3\KuGoo3DownX.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[添加到QQ自定义面板]
  <D:\复件 QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\复件 QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\复件 QQ\SendMMS.htm, N/A>
gototop
 

正在运行的进程
[PID: 164][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 188][\??\C:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 184][\??\C:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6898>
    [C:\WINNT\system32\NavLogon.dll]  <N/A><N/A>
[PID: 236][C:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.6700>
[PID: 248][C:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6902>
[PID: 432][C:\Program Files\NavNT\defwatch.exe]  <Symantec Corporation><7.60.00.926>
[PID: 444][e:\Winfgate\winntfgate.exe]  <Zhuhai Zetronic Ltd.><2.8.0.11>
    [C:\WINNT\system32\LIBDB41.DLL]  <Sleepycat Software><4.1.25>
    [C:\WINNT\system32\PACKET.DLL]  <Politecnico di Torino><3, 0, 0, 18>
    [C:\WINNT\system32\WPCAP.DLL]  <Politecnico di Torino><3, 0, 0, 18>
    [C:\WINNT\system32\pthreadVC.dll]  <N/A><N/A>
[PID: 480][C:\Program Files\NavNT\rtvscan.exe]  <Symantec Corporation><7.60.00.926>
    [C:\Program Files\NavNT\Dec2.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2ARJ.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2ID.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2LHA.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\SymLHA.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2LZ.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2MIME.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2Zip.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2AMG.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\SYMAMG32.DLL]  <Symantec Corporation with portions by FUJITSU DEVICES INC.><2.50.31.52>
    [C:\Program Files\NavNT\Dec2UUE.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2SS.dll]  <Symantec Corporation><2.50.31.52>
    [C:\Program Files\NavNT\Dec2RTF.dll]  <Symantec Corporation><2.50.31.52>
    [C:\WINNT\system32\CBA.DLL]  <Intel Corporation><6.0.201.0940 E>
    [C:\WINNT\system32\MsgSys.dll]  <Intel Corporation><6.0.201.0940 E>
    [C:\WINNT\system32\NTS.dll]  <Intel Corporation><6.0.201.0940 E>
    [C:\WINNT\system32\PDS.DLL]  <Intel Corporation><6.0.201.0940 E>
    [C:\Program Files\NavNT\NAVLU.dll]  <Symantec Corporation><7.60.00.926>
    [C:\Program Files\NavNT\NAVNTUTL.DLL]  <Symantec/Peter Norton Group><1, 0, 0, 1>
    [C:\Program Files\NavNT\i2ldvp3.dll]  <Symantec Corporation><7.60.00.926>
    [C:\Program Files\NavNT\NAVAPI32.DLL]  <Symantec Corp.><4.1.0.15>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060607.018\NAVEX32a.DLL]  <Symantec Corporation><20061.1.0.14>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060607.018\NAVENG32.DLL]  <Symantec Corporation><20061.1.0.14>
    [C:\Program Files\NavNT\NAVAP32.DLL]  <Symantec Corporation><5.3.1.39>
    [C:\WINNT\system32\amslib.dll]  <Intel Corporation><6.0.201.0940 E>
    [C:\WINNT\system32\loc32vc0.dll]  <Intel><3, 0, 0, 2>
    [C:\Program Files\NavNT\NotesExt.dll]  <Symantec Corporation><7.60.00.926>
    [C:\Program Files\NavNT\vpmsece.dll]  <Symantec Corporation><7.60.00.926>
[PID: 572][C:\WINNT\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.6072>
[PID: 584][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 600][C:\WINNT\system32\rundll32.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\System32\STDSVER.DLL]  <MStdup Co Ltd.><3, 2, 1, 7>
[PID: 616][C:\WINNT\System32\MsPMSPSv.exe]  <Microsoft Corporation><7.00.00.1956>
[PID: 696][C:\WINNT\System32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 716][C:\WINNT\system32\MSTask.exe]  <Microsoft Corporation><4.71.2195.6704>
[PID: 732][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
[PID: 888][C:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3700.6690>
    [C:\WINNT\SYSTEM32\stdup.dll]  <MStdup Co Ltd.><3, 2, 1, 7>
    [C:\PROGRA~1\MMSASS~1\Mmsass~1.dll]  <><1, 2, 0, 3>
    [C:\WINNT\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll]  <Yahoo! China><1, 1, 3, 1035>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 8, 1048>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL]  <><1, 2, 7, 1006>
    [D:\KuGoo3\KuGoo3DownXControl.ocx]  <N/A><N/A>
    [D:\TOOLS\TOOLS\WinRAR\rarext.dll]  <N/A><N/A>
[PID: 964][C:\Program Files\NavNT\vptray.exe]  <Symantec Corporation><7.60.00.926>
    [C:\Program Files\NavNT\Cliproxy.dll]  <Symantec Corporation><7.60.00.926>
    [C:\Program Files\NavNT\NAVNTUTL.DLL]  <Symantec/Peter Norton Group><1, 0, 0, 1>
    [C:\Program Files\NavNT\Cliscan.dll]  <Symantec Corporation><7.60.00.926>
[PID: 1004][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.1622>
[PID: 1068][C:\WINNT\system32\MsgSys.EXE]  <Intel Corporation><6.0.201.0940 E>
    [C:\WINNT\system32\NTS.dll]  <Intel Corporation><6.0.201.0940 E>
    [C:\WINNT\system32\CBA.DLL]  <Intel Corporation><6.0.201.0940 E>
    [C:\WINNT\system32\MsgSys.dll]  <Intel Corporation><6.0.201.0940 E>
    [C:\WINNT\system32\PDS.DLL]  <Intel Corporation><6.0.201.0940 E>
[PID: 1116][e:\Winfgate\ServerGuard.exe]  <N/A><N/A>
[PID: 892][C:\WINNT\system32\taskmgr.exe]  <Microsoft Corporation><5.00.2195.6620>
[PID: 1256][E:\过滤王网吧版2.8 - 控制台\PW_Manager.exe]  <珠海捷朗菱网络科技有限公司><2.8.0.11>
[PID: 1312][C:\WINNT\System32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 1032][E:\Octopus\Server.exe]  <吉胜科技><15.3.10.659>
    [E:\Octopus\PrintCard.dll]  <N/A><N/A>
    [E:\Octopus\RegCode.dll]  <N/A><N/A>
    [E:\Octopus\RemoteClientDll.dll]  <N/A><N/A>
    [E:\Octopus\IcDevice.dll]  <N/A><N/A>
    [E:\Octopus\wxhelper.dll]  <N/A><N/A>
    [E:\Octopus\UserOperate.dll]  <N/A><N/A>
[PID: 688][D:\复件 QQ\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [D:\复件 QQ\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\QQHelperDll.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 14>
    [D:\复件 QQ\QQAPI.dll]  <><1, 0, 0, 1>
    [D:\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [D:\复件 QQ\LoginCtrl.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\npkcntc.dll]  <INCA Internet Co., Ltd.><2005, 9, 1, 1>
    [D:\复件 QQ\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [D:\复件 QQ\QQRes.dll]  <tencent><1, 0, 0, 1>
    [D:\复件 QQ\QQMainFrame.dll]  <N/A><N/A>
    [D:\复件 QQ\CQQApplication.dll]  <N/A><N/A>
    [D:\复件 QQ\NewSkin.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\HostingMgr.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\CameraDll.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\MailSummary.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\QQSpace.dll]  <><1, 0, 0, 1>
    [C:\WINNT\system32\msdmo.dll]  <N/A><N/A>
    [D:\复件 QQ\QQGroupMng.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\QQSysMsgMng.dll]  <N/A><N/A>
    [D:\复件 QQ\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\QQPlugin.dll]  <N/A><N/A>
    [D:\复件 QQ\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\LongConnection.dll]  <tencent><5, 0, 201, 14>
    [D:\复件 QQ\ShareFiles.dll]  <N/A><N/A>
    [D:\复件 QQ\QQZip.dll]  <tencent><0, 3, 2, 4>
    [D:\复件 QQ\QRingMng.dll]  <N/A><N/A>
    [D:\复件 QQ\PhoneAPI.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [D:\复件 QQ\QQAvatar.dll]  <N/A><N/A>
    [D:\复件 QQ\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [D:\复件 QQ\QQAllInOne.dll]  <N/A><N/A>
    [D:\复件 QQ\SCCore.dll]  <N/A><N/A>
    [D:\复件 QQ\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 140>
    [D:\复件 QQ\QQPet.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\BQQApplication.dll]  <N/A><N/A>
    [C:\WINNT\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [D:\复件 QQ\CommercesMng.dll]  <><1, 0, 0, 1>
    [D:\复件 QQ\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[PID: 648][D:\QQ\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [D:\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 1540][D:\软件\sreng2\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
gototop
 

文件关联
.TXT  Error. [NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者



就这些了
大哥哥帮我看下!!!
gototop
 

怎么没人啊!!!
gototop
 

用sreng修复

[StdService / StdService]
<C:\WINNT\system32\rundll32.exe C:\WINNT\System32\STDSVER.DLL,Service><N/A>
浏览器加载项
[MMSAssist BHO]
{6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[stdup]
{6A512BF7-EC78-4e8d-9841-6C02E8FA9838} <C:\WINNT\SYSTEM32\stdup.dll, MStdup Co Ltd.>
[就要你]
{42CE9921-7259-11D6-B76A-0010A48548DC}? <url:http://www.91ni.com, N/A>
[网吧.net计划]
{64187580-726B-11D6-B76A-0010A48548DC}? <url:http://www.sicent.net, N/A>
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191}? <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >

重启后删除

C:\WINNT\System32\STDSVER.DLL
C:\PROGRA~1\MMSASS~1\
C:\WINNT\SYSTEM32\stdup.dll
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT