卡巴提示的病毒名称  TROJAN-DOWNLOADER。WIN32。SMALLL。DIX病毒，一上网就会弹出一个小网页，然后就提示有JIJY。EXE及A[1]。EXE病毒，无法删除

一定是正在用著,在安全模式殺,或終止那個進程再殺

请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。谢谢．．．

启动项目


注册表

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
(ctfmon.exe)(C:\WINDOWS\System32\ctfmon.exe) [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
(load)() []
(run)() []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
(IMJPMIG8.1)("C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32) [Microsoft Corporation]
(PHIME2002ASync)(C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC) [Microsoft Corporation]
(PHIME2002A)(C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName) [Microsoft Corporation]
(Cmaudio)(RunDll32 cmicnfg.cpl,CMICtrlWnd) []
(ATIPTA)(C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe) [ATI Technologies, Inc.]
(TkBellExe)("C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot) [RealNetworks, Inc.]
(KAVPersonal50)("C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize) [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
(shell)(Explorer.exe) [Microsoft Corporation]
(Userinit)(C:\WINDOWS\System32\userinit.exe,) [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
(AppInit_DLLs)() []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
(UIHost)(logonui.exe) [Microsoft Corporation]




--------------------------------------------------------------------------------



启动文件夹

[Microsoft Office]
(C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk)(N)



--------------------------------------------------------------------------------



服务

[Ati HotKey Poller / Ati HotKey Poller]
(C:\WINDOWS\System32\Ati2evxx.exe)(N/A)
[ATI Smart / ATI Smart]
(C:\WINDOWS\system32\ati2sgag.exe)()
[ewido anti-spyware 4.0 guard / ewido anti-spyware 4.0 guard]
(C:\Program Files\ewido anti-spyware 4.0\guard.exe)(Anti-Malware Development a.s.)
[kavsvc / kavsvc]
("C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe")(Kaspersky Lab)
[Macromedia Licensing Service / Macromedia Licensing Service]
("C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe")(N/A)
[Rising Proxy Service / RfwProxySrv]
(c:\program files\rising\rfw\rfwproxy.exe)(Beijing Rising Technology Co., Ltd.)
[Rising Personal Firewall Service / RfwService]
(c:\program files\rising\rfw\rfwsrv.exe)(Beijing Rising Technology Co., Ltd.)
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
("C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini")(N/A)



--------------------------------------------------------------------------------



浏览器加载项

[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} (D:\C盘\QQ2003III丐丐版\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司)
[conimehlp Class]
{B10343BD-1DC6-442F-9BA2-D44C708CEE83} (C:\WINDOWS\System32\mskey32.dll, Microsoft)
[解霸]
{367E0A21-8601-4986-9C9A-153BF5ACA118} (C:\HEROSOFT\Hero3000\MPLAYER.EXE, N/A)
[网页特效制作专家 ]
{8DE0FCD4-5EB5-11D3-AD25-00002100131a} (F:\特效软件\网页特效专家\, N/A)
[屏幕取色*]
{8DE0FCD4-5EB5-11D3-AD25-00002100131c} (F:\特效软件\网页特效专家, N/A)
[海浪视窗主页 ]
{8DE0FCD4-5EB5-11D3-AD25-00002100131e} (F:\特效软件\网页特效专家\syste, N/A)
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} (D:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft)
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} (D:\C盘\QQ2003III丐丐版\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司)
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} (C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation)
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} (D:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft)
[InfosecCertInstall Class]
{0EB487C8-E9AC-43A6-8C4C-083999B0622F} (C:\WINDOWS\Downloaded Program Files\certInStall.dll, )
[]
{39EA2F6F-3F50-4F58-9C63-4B3D53B0926E} (C:\WINDOWS\eg_auth_1049.dll, N/A)
[CEditCtrl Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} (C:\WINDOWS\System32\aliedit\AliEdit.dll, www.alipay.com)
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, )
[]
{8B3B8135-9DAA-40E7-8941-962795F9C1CB} (C:\WINDOWS\System32\syswbsvc32.dll, N/A)
[AxSubmitControl Class]
{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, )
[MeChatU Class]
{BE9D5F13-40C1-44CA-9950-B9211E4B60DD} (C:\WINDOWS\Downloaded Program Files\MeChatUser.dll, )
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} (C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.)
[AxUSBKey Class]
{DA215190-98B2-47DE-AE24-DA95481DFFBA} (C:\WINDOWS\DOWNLO~1\USBKey.dll, )
[CPasswordEditCtrl Object]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} (C:\WINDOWS\System32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司)
[使用网际快车下载]
(D:\PROGRA~1\FlashGet\jc_link.htm, N/A)
[使用网际快车下载全部链接]
(D:\PROGRA~1\FlashGet\jc_all.htm, N/A)



--------------------------------------------------------------------------------

正在运行的进程

[PID: 536][\SystemRoot\System32\smss.exe] (Microsoft Corporation)(5.1.2600.1106 (xpsp1.020828-1920))
[PID: 592][\??\C:\WINDOWS\system32\csrss.exe] (Microsoft Corporation)(5.1.2600.0 (xpclient.010817-1148))
[PID: 616][\??\C:\WINDOWS\system32\winlogon.exe] (Microsoft Corporation)(5.1.2600.1106 (xpsp1.020828-1920))
[PID: 668][C:\WINDOWS\system32\services.exe] (Microsoft Corporation)(5.1.2600.0 (xpclient.010817-1148))
[PID: 680][C:\WINDOWS\system32\lsass.exe] (Microsoft Corporation)(5.1.2600.1106 (xpsp1.020828-1920))
[PID: 836][C:\WINDOWS\System32\Ati2evxx.exe] (N/A)(N/A)
[PID: 860][C:\WINDOWS\system32\svchost.exe] (Microsoft Corporation)(5.1.2600.0 (xpclient.010817-1148))
[PID: 940][C:\WINDOWS\System32\svchost.exe] (Microsoft Corporation)(5.1.2600.0 (xpclient.010817-1148))
[PID: 1060][C:\WINDOWS\System32\svchost.exe] (Microsoft Corporation)(5.1.2600.0 (xpclient.010817-1148))
[PID: 1356][C:\WINDOWS\Explorer.EXE] (Microsoft Corporation)(6.00.2800.1221 (xpsp2.030511-1403))
[C:\WINDOWS\System32\mskey32.dll] (Microsoft)(1, 0, 0, 1)
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)
[PID: 1416][C:\WINDOWS\system32\spoolsv.exe] (Microsoft Corporation)(5.1.2600.0 (XPClient.010817-1148))
[PID: 1520][C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe] (ATI Technologies, Inc.)(6.14.10.5062)
[C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll] (ATI Technologies, Inc.)(6.14.10.5062)
[C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.CHS] (ATI Technologies, Inc.)(6.14.10.5062)
[C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll] (ATI Technologies, Inc.)(6.14.10.5062)
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)
[PID: 1528][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] (RealNetworks, Inc.)(0.1.0.1622)
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)
[PID: 1556][C:\WINDOWS\System32\ctfmon.exe] (Microsoft Corporation)(5.1.2600.1106 (xpsp1.020828-1920))
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)
[PID: 552][C:\WINDOWS\System32\svchost.exe] (Microsoft Corporation)(5.1.2600.0 (xpclient.010817-1148))
[PID: 588][C:\WINDOWS\System32\alg.exe] (Microsoft Corporation)(5.1.2600.1106 (xpsp1.020828-1920))
[PID: 808][C:\Program Files\ewido anti-spyware 4.0\guard.exe] (Anti-Malware Development a.s.)(4, 0, 0, 172)
[C:\Program Files\ewido anti-spyware 4.0\engine.dll] (Anti-Malware Development a.s.)(4, 0, 0, 172)
[PID: 1020][C:\WINDOWS\System32\svchost.exe] (Microsoft Corporation)(5.1.2600.0 (xpclient.010817-1148))
[PID: 1616][D:\Program Files\Winamp\Winamp.exe] (Nullsoft)(2.81)
[D:\Program Files\Winamp\Plugins\IN_AAC.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\in_APE.dll] (Matthew T. Ashland)(3.97)
[D:\Program Files\Winamp\Plugins\IN_CDDA.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\IN_MIDI.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\read_file.dll] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\IN_MOD.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\IN_MP3.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\IN_NICEMC.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\IN_TARA.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\in_vorbis.dll] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\IN_VQF.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\IN_WAVE.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\IN_WM.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\OUT_DISK.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\OUT_DS.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\OUT_MP3.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\out_wave.dll] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\OUT_WM.DLL] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\gen_AKAutoPlay.dll] (N/A)(N/A)
[C:\WINDOWS\System32\tssoft32.acm] (DSP GROUP, INC.)(1.01)
[C:\WINDOWS\System32\tsd32.dll] (N/A)(N/A)
[C:\WINDOWS\System32\sl_anet.acm] (Sipro Lab Telecom Inc.)(3.02)
[C:\WINDOWS\System32\l3codeca.acm] (Fraunhofer Institut Integrierte Schaltungen IIS)(1, 2, 0, 63)
[D:\Program Files\Winamp\Plugins\gen_alpha.dll] (N/A)(N/A)
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)
[D:\Program Files\Winamp\Plugins\gen_lyricsshow.dll] (Lucien Wang, Gnosisoft)(1, 5, 0, 2)
[C:\Program Files\Common Files\Real\Common\pnen3260.dll] (RealNetworks, Inc.)(6.0.9.2006)
[C:\WINDOWS\System32\PNCRT.dll] (Real Networks, Inc)(6.0.0.0)
[C:\Program Files\Common Files\Real\Plugins\zipf3260.dll] (RealNetworks)(6.0.7.2536)
[C:\Program Files\Common Files\Real\Plugins\vsrl3260.dll] (RealNetworks, Inc.)(6.0.7.3265)
[C:\Program Files\Common Files\Real\Plugins\pnxr3260.dll] (RealNetworks, Inc.)(6.0.7.4552)
[C:\Program Files\Common Files\Real\Plugins\smpl3260.dll] (RealNetworks, Inc.)(6.0.7.4259)
[C:\Program Files\Common Files\Real\Plugins\auth3260.dll] (RealNetworks, Inc.)(6.0.7.4031)
[C:\Program Files\Common Files\Real\Plugins\pnvi3260.dll] (RealNetworks, Inc.)(6.0.3.1265)
[C:\Program Files\Common Files\Real\Plugins\ramf3260.dll] (RealNetworks, Inc.)(6.0.7.3451)
[C:\Program Files\Common Files\Real\Plugins\rmff3260.dll] (RealNetworks, Inc.)(6.0.9.1746)
[C:\Program Files\Common Files\Real\Plugins\rare3260.dll] (RealNetworks, Inc.)(6.0.9.1570)
[PID: 1564][C:\Program Files\淘宝网\淘宝旺旺\WangWang.exe] (淘宝（中国）软件有限公司)(1, 5, 5, 1226)
[C:\Program Files\淘宝网\淘宝旺旺\AliViewCtrl.dll] (vline)(1, 0, 0, 1)
[C:\Program Files\淘宝网\淘宝旺旺\VLNetwork.dll] ()(1, 0, 0, 6)
[C:\Program Files\淘宝网\淘宝旺旺\AliViewMedia.dll] (vline)(1, 0, 0, 1)
[C:\Program Files\淘宝网\淘宝旺旺\VideoCAP.dll] ()(1, 0, 0, 4)
[C:\Program Files\淘宝网\淘宝旺旺\VLAudio.dll] ()(1, 0, 0, 4)
[C:\Program Files\淘宝网\淘宝旺旺\JsmShow.dll] ()(1, 0, 0, 3)
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)
[C:\Program Files\淘宝网\淘宝旺旺\Ali_Res.DLL] (N/A)(N/A)
[C:\Program Files\淘宝网\淘宝旺旺\RichOne.dll] (淘宝(中国)软件有限公司)(1.0.0.1)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll] (Kaspersky Lab)(1.0.227.342)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll] (Kaspersky Lab)(1.0.227.3)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll] (Kaspersky Lab)(5.0.227.0)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll] (Kaspersky Lab)(5.0.227.0)
[C:\WINDOWS\System32\msdmo.dll] (N/A)(N/A)
[C:\Program Files\淘宝网\淘宝旺旺\WangWangX.dll] ()(1, 0, 0, 1)
[PID: 2268][C:\Program Files\Internet Explorer\IEXPLORE.EXE] (Microsoft Corporation)(6.00.2800.1106 (xpsp1.020828-1920))
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)
[D:\C盘\QQ2003III丐丐版\QQ\QQIEHelper.dll] (深圳市腾讯计算机系统有限公司)(1, 1, 0, 5)
[C:\WINDOWS\System32\mskey32.dll] (Microsoft)(1, 0, 0, 1)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll] (Kaspersky Lab)(1.0.227.342)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll] (Kaspersky Lab)(1.0.227.3)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll] (Kaspersky Lab)(5.0.227.0)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll] (Kaspersky Lab)(5.0.227.0)
[C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx] (Macromedia, Inc.)(8,0,22,0)
[PID: 2988][C:\Program Files\Internet Explorer\IEXPLORE.EXE] (Microsoft Corporation)(6.00.2800.1106 (xpsp1.020828-1920))
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)
[D:\C盘\QQ2003III丐丐版\QQ\QQIEHelper.dll] (深圳市腾讯计算机系统有限公司)(1, 1, 0, 5)
[C:\WINDOWS\System32\mskey32.dll] (Microsoft)(1, 0, 0, 1)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll] (Kaspersky Lab)(1.0.227.342)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll] (Kaspersky Lab)(1.0.227.3)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll] (Kaspersky Lab)(5.0.227.0)
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll] (Kaspersky Lab)(5.0.227.0)
[C:\WINDOWS\System32\msdmo.dll] (N/A)(N/A)
[C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx] (Macromedia, Inc.)(8,0,22,0)
[PID: 3336][C:\sreng2\SREng2\SREng.exe] (Smallfrogs Studio)(2.0.21.505)
[D:\Program Files\Winamp\Plugins\gen_bktb.dll] (Bees Knees)(5.1.4)



--------------------------------------------------------------------------------



文件关联

.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS Error. [超级解霸3000]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]



--------------------------------------------------------------------------------


Winsock 提供者

帮忙看看啊，为什么一上网就提示，还有我瑞星安上就提示错误 监控启动不了，还有我显示隐藏文件 无法修改

帮忙看看啊

打开sreng 启动项注册表删除(Cmaudio)(RunDll32 cmicnfg.cpl,CMICtrlWnd) []

谢谢 高手，我试试 看看效果

高手，我试 了，还是不成啊