瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】昨天才重装了电脑, 今天又卡死了..!高手求救..!

1   1  /  1  页   跳转页

【求助】昨天才重装了电脑, 今天又卡死了..!高手求救..!

收藏
greyhue
头像
初生襁褓狮
  • 帖子:67
  • 注册: 2006-07-30
  • 来自:
发表于： 2007-03-17 02:04 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

【求助】昨天才重装了电脑, 今天又卡死了..!高手求救..!

昨天我才重装了电脑 ,今天不知道怎么又卡的很厉害.看网页CPU是100%、玩征途也是(以前都没有达到那么多),然后虚拟内存也不够用,假如玩征途,征途的进程就占了几百M的内存,看网页iexplore.exe就战了几百M的内存.. 高手帮我解决下  谢谢..
  这是我的hijackthis的扫描日志:
  Logfile of HijackThis v1.99.1
Scan saved at 1:38:52, on 2007-3-17
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
e:\KAV2006\KWatch.EXE
C:\WINDOWS\system32\spoolsv.exe
e:\KAV2006\KPfwSvc.EXE
E:\KAV2006\KAVStart.exe
C:\WINDOWS\system32\ctfmon.exe
E:\KAV2006\KMailMon.EXE
E:\KAV2006\KPFW32.EXE
E:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
E:\Program Files\Tencent\QQ\QQ.exe
E:\Program Files\Tencent\QQ\TIMPlatform.exe
C:\WINDOWS\system32\wuauclt.exe
C:\DOCUME~1\GreyHue\LOCALS~1\Temp\Rar$EX00.987\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: ThunderBHO - {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3} - e:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO.dll
O2 - BHO: KAVAntiFishing - {55302805-482E-470E-8A57-6795A1487F90} - e:\KAV2006\KAVAFish.DLL
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - HKLM\..\Run: [KavStart] "e:\KAV2006\KAVStart.exe" -startup
O4 - HKLM\..\Run: [StormCodec_Helper] "e:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\RunOnce: [KKDelay] E:\Program Files\Rising\AntiSpyware\RunOnce.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [KavPFW] "E:\KAV2006\KPFW32.EXE"
O4 - Global Startup: Logitech SetPoint.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &使用BitComet下载 - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &使用BitComet下载全部链接 - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &使用BitComet下载本页视频 - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &使用迅雷下载 - e:\Program Files\Thunder Network\Thunder\Program\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - e:\Program Files\Thunder Network\Thunder\Program\getallurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - E:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 金山毒霸反钓鱼... - e:\KAV2006\KAF\ShowSet.htm
O9 - Extra button: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - e:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - e:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: http://100995205.qzone.qq.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{510A97DB-7401-4D6C-98CC-02652C2AC2EB}: NameServer = 218.6.200.139 61.139.2.69
O18 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - E:\PROGRA~1\KuGoo3\InExtend\KUGOO3~1.OCX
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Kingsoft Personal Firewall Service (KPfwSvc) - Kingsoft Corporation - e:\KAV2006\KPfwSvc.EXE
O23 - Service: Kingsoft Antivirus KWatch Service (KWatchSvc) - Kingsoft Corporation - e:\KAV2006\KWatch.EXE

最后编辑2007-03-17 02:07:25
分享到：
gototop
 
greyhue
头像
初生襁褓狮
  • 帖子:67
  • 注册: 2006-07-30
  • 来自:
发表于： 2007-03-17 02:06 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

这是我的SREng的扫描日志:
  2007-03-17,01:40:58

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <KavPFW><"E:\KAV2006\KPFW32.EXE">  [Kingsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <KavStart><"e:\KAV2006\KAVStart.exe" -startup>  [Kingsoft Corporation]
    <StormCodec_Helper><"e:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  [N/A]
    <Logitech Hardware Abstraction Layer><KHALMNPR.EXE>  [(Verified)Logitech Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <KKDelay><E:\Program Files\Rising\AntiSpyware\RunOnce.exe>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Corporation]

==================================
启动文件夹
[Logitech SetPoint]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Logitech SetPoint.lnk --> E:\PROGRA~1\Logitech\SetPoint\SetPoint.exe [Logitech Inc.]><N>

==================================
服务
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Kingsoft Personal Firewall Service / KPfwSvc]
  <"e:\KAV2006\KPfwSvc.EXE"><Kingsoft Corporation>
[Kingsoft Antivirus KWatch Service / KWatchSvc]
  <e:\KAV2006\KWatch.EXE><Kingsoft Corporation>

==================================
驱动程序
[Intel(R) PRO Adapter Driver / E100B]
  <system32\DRIVERS\e100b325.sys><Intel Corporation>
[haeu_v / haeu_v]
  <\SystemRoot\system32\drivers\haeu_v.sys><N/A>
[ialm / ialm]
  <system32\DRIVERS\ialmnt5.sys><Intel Corporation>
[KNetWch / KNetWch]
  <\??\e:\KAV2006\KNetWch.SYS><Kingsoft Corporation>
[KWatch3 / KWatch3]
  <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
[Logitech SetPoint Keyboard Driver / L8042Kbd]
  <system32\DRIVERS\L8042Kbd.sys><Logitech Inc.>
[SetPoint PS/2 Mouse Filter Driver / L8042mou]
  <system32\DRIVERS\L8042mou.Sys><Logitech Inc.>
[Logitech SetPoint KMDF HID Filter Driver / LHidFilt]
  <system32\DRIVERS\LHidFilt.Sys><Logitech, Inc.>
[Logitech SetPoint HID Mouse Filter Driver / LHidKe]
  <system32\DRIVERS\LHidKE.Sys><Logitech, Inc.>
[Logitech SetPoint USB Receiver device driver / LHidUsbK]
  <System32\Drivers\LHidUsbK.Sys><Logitech, Inc.>
[Logitech SetPoint KMDF Mouse Filter Driver / LMouFilt]
  <system32\DRIVERS\LMouFilt.Sys><Logitech, Inc.>
[SetPoint Mouse Filter Driver / LMouKE]
  <system32\DRIVERS\LMouKE.Sys><Logitech Inc.>
[Logitech SetPoint KMDF USB Filter / LUsbFilt]
  <System32\Drivers\LUsbFilt.Sys><Logitech, Inc.>
[npkcrypt / npkcrypt]
  <\??\E:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsAntiSpyware / RsAntiSpyware]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[Audio Driver (WDM) - SigmaTel CODEC / STAC97]
  <system32\drivers\stac97.sys><SigmaTel, Inc.>
[TOSHIBA Software Modem / TOSHIBASoftModem]
  <system32\DRIVERS\LTSM.sys><LT>
[TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver / TVALZ]
  <\SystemRoot\system32\DRIVERS\TVALZ.SYS><TOSHIBA Corporation>
[Intel(R) PRO/Wireless 2100 Adapter 驱动程序 / w70n51]
  <system32\DRIVERS\w70n51.sys><Intel? Corporation>
[Windows Driver Foundation - User-mode Driver Framework Platform Driver / WudfPf]
  <system32\DRIVERS\WudfPf.sys><Microsoft Corporation>

==================================
浏览器加载项
[Thunder Browser Helper]
  {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3} <e:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[BitComet Helper]
  {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <E:\Program Files\BitComet\tools\BitCometBHO.dll, BitComet>
[CBrowseStakeout Class]
  {55302805-482E-470E-8A57-6795A1487F90} <e:\KAV2006\KAVAFish.DLL, Kingsoft Corporation>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <e:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
gototop
 
greyhue
头像
初生襁褓狮
  • 帖子:67
  • 注册: 2006-07-30
  • 来自:
发表于： 2007-03-17 02:06 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

[Thunder Browser Helper]
  {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3} <e:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[Recorder Control]
  {2423AB16-9F42-457B-A337-FE3B11964DB0} <e:\PROGRA~1\bluesky\BLUESK~1\recorder.ocx, Bluesky Studio (http://www.bluesky.cn)>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, N/A>
[BlueskyVideo Control]
  {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} <e:\PROGRA~1\bluesky\BLUESK~1\v2.ocx, 蓝天工作室(http://www.bluesky.cn)>
[Ppd Control]
  {2F2BA87D-385E-4922-B41C-06E190B06AA9} <e:\PROGRA~1\bluesky\BLUESK~1\ppd.ocx, Bluesky Studio(http://www.bluesky.cn)>
[Share Control]
  {3072B1F1-0C4D-4E76-A7C6-FBAF129DBCC9} <e:\PROGRA~1\bluesky\BLUESK~1\share.ocx, http://www.bluesky.cn>
[BitComet Helper]
  {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <E:\Program Files\BitComet\tools\BitCometBHO.dll, BitComet>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <C:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
[CBrowseStakeout Class]
  {55302805-482E-470E-8A57-6795A1487F90} <e:\KAV2006\KAVAFish.DLL, Kingsoft Corporation>
[Traceppd Control]
  {5910C66C-F9BA-4306-8175-C098B7F0ED62} <e:\PROGRA~1\bluesky\BLUESK~1\traceppd.ocx, BlueskyStudio(http://www.bluesky.cn)>
[PP Control]
  {616DACC1-C5E6-4646-B36A-3FA4FC726BAD} <e:\PROGRA~1\bluesky\BLUESK~1\ppc.ocx, Bluesky Studio (http://www.bluesky.cn)>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Videohelp Control]
  {75B75D86-D88B-4BEA-BC59-BFD9D7300518} <e:\PROGRA~1\bluesky\BLUESK~1\VIDEOH~1.OCX, Bluesky Studio(http://www.bluesky.cn)>
[Filetran Control]
  {88734439-46D0-42C0-A13F-7E881EE550CF} <e:\PROGRA~1\bluesky\BLUESK~1\filetran.ocx, Bluesky Studio(http://www.bluesky.cn)>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <e:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Chat Control]
  {94EFE58C-E678-4808-AD65-24CE4B94C1FE} <e:\PROGRA~1\bluesky\BLUESK~1\chat.ocx, Bluesky Studio(http://www.bluesky.cn)>
[Blueskyvoice Control]
  {991481A7-4669-4e15-8C24-100404E1F5CB} <e:\PROGRA~1\bluesky\BLUESK~1\BLUESK~1.OCX, 蓝天工作室(http://www.bluesky.cn)>
[Display Control]
  {A1D97DB3-E564-4743-B2E7-6F5182CBF406} <e:\PROGRA~1\bluesky\BLUESK~1\display.ocx, Bluesky Studio (http://www.bluesky.cn)>
[Tracechat Control]
  {A40335C4-D3D1-4E7B-9130-039CDA5B603C} <e:\PROGRA~1\bluesky\BLUESK~1\TRACEC~1.OCX, bluesky studio>
[PPChat Control]
  {AFB97F16-B7E8-4EB1-8133-FBD5AA2EBB3B} <e:\PROGRA~1\bluesky\BLUESK~1\ppchat.ocx, Bluesky Studio(http://www.bluesky.cn)>
[Blueskyvoice Control]
  {BA0F088C-72C1-475a-92F8-42391DEF6961} <e:\PROGRA~1\bluesky\BLUESK~1\BLUESK~2.OCX, 蓝天工作室(http://www.bluesky.cn)>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Client Control]
  {C7B0C764-5D4E-433E-A854-591F28520577} <e:\PROGRA~1\bluesky\BLUESK~1\client.ocx, >
[Play Control]
  {CC20DDA1-9A21-4DEC-B5BE-E61E0351FCA9} <e:\PROGRA~1\bluesky\BLUESK~1\play.ocx, Bluesky Studio (http://www.bluesky.cn)>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[XML HTTP Request]
  {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A>
[Scripting.Dictionary]
  {EE09B103-97E0-11CF-978F-00A02463E06F} <C:\WINDOWS\system32\scrrun.dll, Microsoft Corporation>
[XML DOM Document 3.0]
  {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP 3.0]
  {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[&使用BitComet下载]
  <res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm, N/A>
[&使用BitComet下载全部链接]
  <res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm, N/A>
[&使用BitComet下载本页视频]
  <res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm, N/A>
[&使用迅雷下载]
  <e:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A>
[&使用迅雷下载全部链接]
  <e:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A>
[上传到QQ网络硬盘]
  <E:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[金山毒霸反钓鱼...]
  <e:\KAV2006\KAF\ShowSet.htm, N/A>

==================================
gototop
 
greyhue
头像
初生襁褓狮
  • 帖子:67
  • 注册: 2006-07-30
  • 来自:
发表于： 2007-03-17 02:07 | 只看楼主 短消息 资料
字号： 小 中 大 4楼


正在运行的进程
[PID: 572][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 636][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 664][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 708][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 720][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 892][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 972][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1068][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1196][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1220][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1456][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.3924]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.3924]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.3924]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.3924]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.3924]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [e:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
    [E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.0.2003051500]
    [e:\KAV2006\KAVEXT.DLL]  [Kingsoft Corporation, 2005, 8, 5, 16]
    [e:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
[PID: 1576][e:\KAV2006\KWatch.EXE]  [Kingsoft Corporation, 2005, 9, 27, 51]
    [e:\KAV2006\KAVIPC2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 20]
    [e:\KAV2006\KAEPlat.DLL]  [Kingsoft Corp., 2006, 8, 29, 60]
    [e:\KAV2006\KAEMem.DAT]  [Kingsoft, 2006, 9, 25, 16]
    [e:\KAV2006\KAEUnpack.DAT]  [Kingsoft Corp., 2006, 10, 26, 69]
[PID: 1644][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 520][e:\KAV2006\KPfwSvc.EXE]  [Kingsoft Corporation, 2007, 2, 2, 31]
[PID: 2000][E:\KAV2006\KAVStart.exe]  [Kingsoft Corporation, 2007, 2, 1, 257]
    [E:\KAV2006\KAVIPC2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 20]
    [E:\KAV2006\SvcTimer.DLL]  [Kingsoft Corporation, 2006.12.22.84]
    [E:\KAV2006\KAVPassp.dll]  [Kingsoft Corporation, 2006, 12, 30, 271]
    [E:\KAV2006\PopSprt3.dll]  [Kingsoft Corporation, 2007, 1, 16, 45]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
[PID: 352][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 624][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
[PID: 1732][E:\KAV2006\KMailMon.EXE]  [Kingsoft Corporation, 2007, 2, 25, 948]
    [E:\KAV2006\KAntiSpm.dll]  [Kingsoft Corporation, 2007, 2, 25, 129]
    [E:\KAV2006\KAVIPC2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 20]
    [E:\KAV2006\KAECall2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 7]
    [E:\KAV2006\KAEPlat.DLL]  [Kingsoft Corp., 2006, 8, 29, 60]
    [E:\KAV2006\KAEMem.DAT]  [Kingsoft, 2006, 9, 25, 16]
    [E:\KAV2006\KAEUnpack.DAT]  [Kingsoft Corp., 2006, 10, 26, 69]
    [E:\KAV2006\KAConfig.DLL]  [Kingsoft Corporation, 2007, 1, 11, 41]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
[PID: 1796][E:\KAV2006\KPFW32.EXE]  [Kingsoft Corporation, 2007, 2, 2, 687]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\KAV2006\KAVIPC2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 20]
    [E:\KAV2006\KAConfig.DLL]  [Kingsoft Corporation, 2007, 1, 11, 41]
    [E:\KAV2006\FiltList.dll]  [N/A, N/A]
    [E:\KAV2006\KAVPassp.DLL]  [Kingsoft Corporation, 2006, 12, 30, 271]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [e:\KAV2006\KAScript.DLL]  [Kingsoft Corporation, 2006, 12, 11, 72]
[PID: 528][E:\Program Files\Logitech\SetPoint\SetPoint.exe]  [Logitech Inc., 3.30.165]
    [C:\WINDOWS\system32\KemUtil.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Logitech\SetPoint\SetPointCOM.dll]  [Logitech Inc., 3.30.165]
    [C:\WINDOWS\system32\kemutb.dll]  [Logitech Inc., 3.30.165]
    [C:\WINDOWS\system32\KemWnd.dll]  [Logitech Inc., 3.30.165]
    [C:\WINDOWS\system32\KemXML.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Logitech\SetPoint\WebBrowserSupport.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Logitech\SetPoint\IMHook.dll]  [Logitech Inc., 3.30.165]
    [C:\Program Files\Common Files\Logitech\khalshared\KhalApi.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Logitech\SetPoint\kgame.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Logitech\SetPoint\GameHook.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Logitech\SetPoint\LCabHandler.dll]  [Logitech Inc., 3.30.165]
[PID: 2040][C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE]  [Logitech Inc., 3.30.152]
gototop
 
greyhue
头像
初生襁褓狮
  • 帖子:67
  • 注册: 2006-07-30
  • 来自:
发表于： 2007-03-17 02:07 | 只看楼主 短消息 资料
字号： 小 中 大 5楼


    [C:\Program Files\Common Files\Logitech\khalshared\KHALAPI.DLL]  [Logitech Inc., 3.30.165]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [C:\Program Files\Common Files\Logitech\khalshared\KHALITCH.DLL]  [Logitech Inc., 3.30.165]
    [C:\Program Files\Common Files\Logitech\khalshared\KHALMW.DLL]  [Logitech Inc., 3.30.165]
    [C:\Program Files\Common Files\Logitech\khalshared\KHALHPP.DLL]  [Logitech Inc., 3.30.165]
    [C:\Program Files\Common Files\Logitech\khalshared\KHALMOU.DLL]  [Logitech Inc., 3.30.165]
    [C:\Program Files\Common Files\Logitech\khalshared\KHALHID.DLL]  [Logitech Inc., 3.30.165]
    [C:\Program Files\Common Files\Logitech\khalshared\KHALUSB.DLL]  [Logitech Inc., 3.30.165]
[PID: 2504][E:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [E:\Program Files\Tencent\QQ\CoralAssist.DLL]  [Coral Team, 5.0.0 build 20060829]
    [E:\Program Files\Tencent\QQ\CoralQQ.DLL]  [Coral Team, 5.0 Build 20070111]
    [E:\Program Files\Tencent\QQ\kql.dll]  [Coral Team, 5.0.0 build 20070111]
    [E:\Program Files\Tencent\QQ\ipsearcher.dll]  [, 1.0.0.3]
    [E:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 7, 0, 101, 80]
    [E:\Program Files\Tencent\QQ\NoDisturbFilter.cqx]  [Coral Team, 1.0]
    [E:\Program Files\Tencent\QQ\ConfigHotkey.cqx]  [Coral Team, 1.0]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [E:\Program Files\Tencent\QQ\AutoReconnect.cqx]  [Coral Team, 1.0.0]
    [E:\Program Files\Tencent\QQ\LoginCtrl.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [E:\Program Files\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [E:\Program Files\Tencent\QQ\LoginCtrlRes.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\CoralHotkey.cqx]  [Coral Team, 1.0]
    [E:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQAllInOne.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\GroupLive.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [E:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [E:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [E:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [E:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [E:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, N/A]
    [E:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [E:\Program Files\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 280]
    [E:\Program Files\Tencent\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [E:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 5, 50]
    [E:\Program Files\Tencent\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\Tencent\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [E:\Program Files\Tencent\QQ\OEMApplication.dll]  [, 1, 0, 0, 1]
    [e:\KAV2006\KAScript.DLL]  [Kingsoft Corporation, 2006, 12, 11, 72]
[PID: 3808][E:\Program Files\Tencent\QQ\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [E:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
gototop
 
greyhue
头像
初生襁褓狮
  • 帖子:67
  • 注册: 2006-07-30
  • 来自:
发表于： 2007-03-17 02:07 | 只看楼主 短消息 资料
字号： 小 中 大 6楼


[PID: 2832][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
[PID: 2452][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]
    [e:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
    [E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 6.0.0.2003051500]
    [E:\Program Files\BitComet\tools\BitCometBHO.dll]  [BitComet, 20061226]
    [e:\KAV2006\KAVAFish.DLL]  [Kingsoft Corporation, 2006, 10, 25, 27]
    [e:\KAV2006\KAScript.DLL]  [Kingsoft Corporation, 2006, 12, 11, 72]
    [e:\KAV2006\KAEPlat.DLL]  [Kingsoft Corp., 2006, 8, 29, 60]
    [e:\KAV2006\KAEMem.DAT]  [Kingsoft, 2006, 9, 25, 16]
    [e:\KAV2006\KAEUnpack.DAT]  [Kingsoft Corp., 2006, 10, 26, 69]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 2764][C:\DOCUME~1\GreyHue\LOCALS~1\Temp\Rar$EX00.283\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [E:\KAV2006\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [E:\KAV2006\KASocket.dll]  [Kingsoft Corporation, 2005, 2, 22, 233]
    [E:\Program Files\Logitech\SetPoint\lgscroll.dll]  [Logitech Inc., 3.30.165]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
gototop
 
mopery
头像
卡卡技术团队
  • 帖子:17737
  • 注册: 2005-12-06
  • 来自:New York
卡卡名人堂论坛9周年纪念
发表于： 2007-03-17 02:16 | 短消息 资料
字号： 小 中 大 7楼

问题描述..

日志无异常..
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT