启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Internat.exe><internat.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
    <run><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <KAV50><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe" -run -n PersonalPro -v 5.0.0.0 -chkss>  [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINNT\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><>  []

==================================
启动文件夹
服务
[DuDu Accelerator o / DDDProxy]
  <C:\Program Files\DuDu\DddClient\dddproxy.exe><N/A>
[DefWatch / DefWatch]
  <C:\Program Files\NavNT\defwatch.exe><N/A>
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[HP SmartUpdate Agent / hpsud]
  <C:\WINNT\System32\hpsud.exe><N/A>
[Routing Protect Access / iSPONER]
  <C:\WINNT\SYSTEM32\RUNDLL32.EXE C:\WINNT\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[卡巴斯基反病毒服务 / KLBLMain]
  <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe -run bl -n PersonalPro -v 5.0.0.0 -ttsr 10000000><Kaspersky Lab>
[Norton AntiVirus Client / Norton AntiVirus Server]
  <C:\Program Files\NavNT\rtvscan.exe><N/A>
[Smart Card Helper / SCardDrv]
  <C:\WINNT\system32\SCardSer.exe ><N/A>
[Network System / Universal Disk Manager]
  <C:\Program Files\Common Files\COMM\Network.exe><COMENET TECHNOLOGY>

==================================
浏览器加载项
[Tencent Browser Helper]
  {0C7C23EF-A848-485B-873C-0ED954731014} <, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[&使用迅雷下载]
  <e:\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <e:\Thunder\Program\GetAllUrl.htm, N/A>
[上传到QQ网络硬盘]
  <C:\Program Files\TENCENT\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\TENCENT\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\TENCENT\QQ\AddEmotion.htm, N/A>

==================================
正在运行的进程
[PID: 168][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.5382>
[PID: 192][\??\C:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.5265>
[PID: 212][\??\C:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6970>
[PID: 240][C:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.3940>
    [C:\WINNT\system32\dmserver.dll]  <VERITAS Software Corp.><2195.3649.297.3>
[PID: 252][C:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6902>
[PID: 444][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 280][C:\WINNT\system32\spoolsv.exe]  <Microsoft Corporation><5.00.2195.4299>
    [C:\WINNT\system32\EBPMON2.DLL]  <SEIKO EPSON CORPORATION><2, 20, 0, 0>
    [C:\WINNT\system32\IP-P2P.dll]  <N/A><N/A>
[PID: 524][C:\WINNT\System32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 548][C:\WINNT\System32\hpsud.exe]  <N/A><N/A>
    [C:\WINNT\System32\hpsucmn2.dll]  <N/A><N/A>
[PID: 568][C:\WINNT\SYSTEM32\RUNDLL32.EXE]  <Microsoft Corporation><5.00.2134.1>
[PID: 592][C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe]  <Kaspersky Lab><5.0.20.0>
    [C:\WINNT\system32\MSVCP61.dll]  <Kaspersky Lab><6.00.0000>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kltrace.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\FSSync.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\klcsc.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\klcsa.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\klsecur.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavbl.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\pr_remote.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\prloader.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\prkernel.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\xorio_ex.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\startups.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\pr_server.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\pr_client.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\prstring.ppl]  <Kaspersky Lab><5.0.20.0>

[c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\l_llio.ppl]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\avp_iont.dll]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\avpmgr.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\wdiskio.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\avlib.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\arj.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\arjpack.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\avp1.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\avpgs.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\btdisk.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\buffer.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\cab.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\deflate.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\dmap.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\dtreg.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\explode.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\hashcont.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\hashmd5.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\hccmp.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\ichk2.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\ichstrms.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\inflate.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\klonacci.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\klondemi.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\mailmsg.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\mchk.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\mdb.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\mdmap.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\memmodsc.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\memscan.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\minizip.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\msoe.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\nfio.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\ntfsstrm.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\passdmap.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\prseqio.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\prutil.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\rar.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\report.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\sfdb.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\stdcomp.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\stored.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\superio.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\tempfile.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\unarj.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\uniarc.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\unlzx.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\unreduce.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\unshrink.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\unstored.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\winreg.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\xorio.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\zcompare.ppl]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\AVS.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\CheckTool.DLL]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\xmlparse.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\xmltok.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavbloc.dll]  <Kaspersky Lab><5.0.0.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\QBackup.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\qbstorage.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavblp.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\OnDemand.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\OnAccess.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\mcproxy.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\mailapplayer.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\scrch_ag.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\MchkBL.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\SubjPlugin.dll]  <Kaspersky Lab><

[PID: 668][C:\WINNT\system32\MSTask.exe]  <Microsoft Corporation><4.71.2195.1>
[PID: 868][C:\WINNT\system32\stisvc.exe]  <Microsoft Corporation><5.00.2195.3649>
[PID: 916][C:\Program Files\Common Files\COMM\Network.exe]  <COMENET TECHNOLOGY><1, 563, 15, 5>
[PID: 932][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0070>
[PID: 964][C:\WINNT\system32\mspmspsv.exe]  <Microsoft Corporation><7.10.00.3068>
[PID: 976][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 840][C:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3502.5321>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [E:\3721\ske\contmenu.dll]  <N/A><N/A>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\ShellEx.dll]  <Kaspersky Lab><5.0.20.0>
[PID: 144][C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\KCAStub.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kltrace.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\WINNT\system32\MSVCP61.dll]  <Kaspersky Lab><6.00.0000>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\klcsc.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\FSSync.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\qbstorage.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\pr_remote.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\prloader.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\prkernel.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\prstring.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\report.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\nfio.ppl]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavploc.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\klsecur.dll]  <Kaspersky Lab><5.0.20.0>
[PID: 1324][C:\WINNT\system32\internat.exe]  <Microsoft Corporation><5.00.2920.0000>
[PID: 1292][E:\dialo\sreng2\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
[PID: 896][C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\Up2Date.exe]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\upd_kca.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\klcsc.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\WINNT\system32\MSVCP61.dll]  <Kaspersky Lab><6.00.0000>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kltrace.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\FSSync.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\upd_core.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\pr_remote.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\prloader.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\prkernel.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\prstring.ppl]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\klsecur.dll]  <Kaspersky Lab><5.0.20.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavblp.dll]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\report.ppl]  <Kaspersky Lab><5.0.20.0>
    [c:\program files\kaspersky lab\kaspersky anti-virus personal pro 5\nfio.ppl]  <Kaspersky Lab><5.0.20.0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

HijackThis_815汉化版扫描日志 V1.99.1
保存于      10:28:46, 日期 2006/07/19
操作系统：  Windows 2000 SP3 (WinNT 5.00.2195)
浏览器：    Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程：         
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\SYSTEM32\RUNDLL32.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\Program Files\Common Files\COMM\Network.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe
C:\WINNT\system32\internat.exe
C:\Program Files\ZFCHINA.VIS\zfmm.exe
\server\MBXX-mbxx\bin\winmbww.exe
\server\MBXX-mbxx\bin\winmbwwi.exe
C:\Program Files\TENCENT\TT\TTraveler.exe
C:\WINNT\WINLOGON.EXE
E:\dialo\Hijackthis1991zww\HijackThis1991zww.exe

O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - (no file)
O4 - 启动项HKLM\\Run: [KAV50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kav.exe" -run -n PersonalPro -v 5.0.0.0 -chkss
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - e:\Thunder\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - e:\Thunder\Program\GetAllUrl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\TENCENT\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\TENCENT\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\TENCENT\QQ\AddEmotion.htm
O11 - Options group: [!CNS]  网络实名
O17 - HKLM\System\CCS\Services\Tcpip\..\{9B5F98C7-C13E-4D8E-A7E0-0E792CF36F88}: NameServer = 202.101.107.55
O23 - NT 服务: DefWatch - Unknown owner - C:\Program Files\NavNT\defwatch.exe (file missing)
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: HP SmartUpdate Agent (hpsud) - Unknown owner - C:\WINNT\System32\hpsud.exe
O23 - NT 服务: 卡巴斯基反病毒服务 (KLBLMain) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro 5\kavmm.exe
O23 - NT 服务: Norton AntiVirus Client (Norton AntiVirus Server) - Unknown owner - C:\Program Files\NavNT\rtvscan.exe (file missing)
O23 - NT 服务: Network System (Universal Disk Manager) - COMENET TECHNOLOGY - C:\Program Files\Common Files\COMM\Network.exe

老大，还有个没搞定，WINLOGON.EXE
这个我按论坛的方法清除不了，有没什么方法可以比较容易搞定！！！

555555555