我的电脑前段时间大概是中毒了
以后 桌面上就只剩下了背景了
看了很多网站 明白要 运行  explorer  就可以解决
但是再次开机还是只有桌面  又得再来一遍  而且 瑞星无法更新了 一些软件的设置都出现了问题
大家给我个办法吧~
简单 行之有效的办法
在此非常感谢了

附  瑞星卡卡的诊断: 劳烦大家帮我看看了
Logfile of Kaka v2. 0. 2. 5 Scan Module v1. 0. 3. 6
Scan saved at 19:07:31, on 2006-12-16
Platform: Microsoft Windows XP Personal Service Pack 2 (Build 2600)
MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158))


O1 - Hosts: 127.0.0.1      localhost
O1 - Hosts: 210.74.232.156      www.sougua.com
O1 - Hosts: 210.74.232.156      mp3.baidu.com
O1 - Hosts: 210.74.232.156      www.sogua.com
O1 - Hosts: 210.74.232.156      music.yahoo.com.cn
O1 - Hosts: 210.74.232.156      d.sogou.com
O1 - Hosts: 210.74.232.156      www.qq163.com
O1 - Hosts: 210.74.232.156      www.haoting.com
O1 - Hosts: 210.74.232.156      www.nowok.net
O1 - Hosts: 210.74.232.156      www.yymp3.com
O1 - Hosts: 210.74.232.156      music.feifa.com
O1 - Hosts: 210.74.232.156      www.tt67.com
O1 - Hosts: 210.74.232.156      www.kugoo.com
O1 - Hosts: 210.74.232.156      www.9sky.com
O1 - Hosts: 210.74.232.156      www.13139.com
O1 - Hosts: 210.74.232.156      www.mtvtop.com
O1 - Hosts: 210.74.232.156      www.6621.com
O1 - Hosts: 210.74.232.156      www.1ting.com
O1 - Hosts: 210.74.232.156      www.cococ.com
O1 - Hosts: 210.74.232.156      www.520music.com
O1 - Hosts: 210.74.232.156      www.7xi.net
O1 - Hosts: 210.74.232.156      www.st020.cn
O1 - Hosts: 210.74.232.156      www.9flash.com
O1 - Hosts: 210.74.232.156      www.7t7t.com
O1 - Hosts: 210.74.232.156      www.chinamp3.com
O1 - Hosts: 210.74.232.156      verycd.com
O1 - Hosts: 210.74.232.156      www.verycd.com
O1 - Hosts: 210.74.232.156      movie.poco.cn
O1 - Hosts: 210.74.232.156      pp365.net
O1 - Hosts: 210.74.232.156      www.pp365.net
O1 - Hosts: 210.74.232.156      btchina.net
O1 - Hosts: 210.74.232.156      bbs.btbbt.com
O1 - Hosts: 210.74.232.156      btz.cn
O1 - Hosts: 210.74.232.156      www.btz.cn
O1 - Hosts: 210.74.232.156      fkee.com
O1 - Hosts: 210.74.232.156      www.fkee.com
O1 - Hosts: 210.74.232.156      bt.kaicn.com
O1 - Hosts: 210.74.232.156      bt.acnow.net
O1 - Hosts: 210.74.232.156      movie.pcpop.com
O1 - Hosts: 210.74.232.156      bbs.cnxp.com
O1 - Hosts: 210.74.232.156      bt.sogua.com
O1 - Hosts: 210.74.232.156      gamedown.yesky.com
O1 - Hosts: 210.74.232.156      games.enet.com.cn
O1 - Hosts: 210.74.232.156      download.pchome.net
O1 - Hosts: 210.74.232.156      www.yxdown.com
O1 - Hosts: 210.74.232.156      movie.baidu.com
O1 - Hosts: 210.74.232.156      vagaa.com
O1 - Hosts: 210.74.232.156      www.vagaa.com
O1 - Hosts: 210.74.232.156      hnnn.net
O1 - Hosts: 210.74.232.156      www.hnnn.net
O1 - Hosts: 210.74.232.156      cn-see.com
O1 - Hosts: 210.74.232.156      www.cn-see.com
O1 - Hosts: 210.74.232.156      100bao.com
O1 - Hosts: 210.74.232.156      www.100bao.com
O1 - Hosts: 210.74.232.156      ent.163.com
O2 - BHO:  (file missing)
O2 - BHO:  (file missing)
O2 - BHO:  (file missing)
O2 - BHO:  (file missing)
O2 - BHO:  (file missing)
O2 - BHO:  (file missing)
O2 - BHO:  (file missing)
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO:  (file missing)
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - D:\WINDOWS\system32\kakatool.dll
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Run: [IgfxTray] D:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [runeip] D:\Program Files\Rising\AntiSpyware\runiep.exe
O4 - HKLM\..\RunOnce: [Rav] "D:\Program Files\rising\Rav\Update\setup.exe" /REPAIR /ONCE
O4 - HKLM\..\RunOnce: [KKDelay] D:\Program Files\rising\AntiSpyware\RunOnce.exe
O4 - Startup: desktop.ini =
O4 - Global Startup: desktop.ini =
O4 - Global Startup: 瑞星监控中心.lnk = D:\Program Files\rising\rav\RavMon.exe
O4 - Global Startup: 河南网通宽带用户客户端.lnk = D:\Program Files\racer-henan-cnc\racer.exe
O4 - Global Startup: rehekl.lnk = D:\WINDOWS\system32\reheklf.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra Button: (no name) - RsAutorunsDisabled -
O9 - Extra Button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\WINDOWS\system32\msjava.dll
O9 - Extra Button: 比较购物搜索 - {A36ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - D:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: The AskYaya VerticalBar - {A36ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - D:\WINDOWS\System32\shdocvw.dll
O9 - Extra Button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
O16 - DPF: _{52DF16E3-6C4F-4B22-8BAF-09263E463B48} - http://zs.kingsoft.com/KOSInit.cab
O16 - DPF: _{A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} - http://imgcache.qq.com/qzone/photo/QzoneMediaTools.cab
O16 - DPF: _{AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} - http://219.133.62.236/QQPlayer.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {30CADB40-6FD7-433F-BF0D-4827CA7B5BDF} (FavImport Class) - https://favorites.live.com/cab/ImportAx.cab
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5932517A-3326-4439-A708-1C98EDB5C549} (Downloader Class) - file://D:\Documents and Settings\All Users\Application Data\Share Helper\Cast\GGS\ddc2a3714a\js\iMopDl.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {C661F36D-DF85-4EF4-83C7-E107B83D04B1} (WebActivater Control) - http://dl_dir.qq.com/3dshow/3DShowVM.cab
O17 - HKLM\Software\..\Telephony:  DomainName = cookie
O17 - HKLM\System\CCS\Services\Tcpip\Parameters:  Domain = cookie
O17 - HKLM\System\CCS\Services\Tcpip\..\{A1704930-35F1-4E2A-998E-24CD433F2E74}: NameServer = 202.102.224.68 202.102.227.68
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\System32\mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - D:\WINDOWS\system32\urlmon.dll
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - D:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll
O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll
O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ic32pp - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - D:\WINDOWS\wc98pp.dll
O18 - Protocol: ipp - (no CLSID) - (no file)
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - D:\WINDOWS\System32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\System32\mshtml.dll
O18 - Protocol: koboo - {7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6} - D:\WINDOWS\system32\mbprot.dll
O18 - Protocol: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - D:\WINDOWS\System32\msvidctl.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\System32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - D:\WINDOWS\System32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - D:\WINDOWS\System32\itss.dll
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "D:\PROGRA~1\MSNMES~1\msgrapp.dll"
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\System32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - D:\WINDOWS\System32\mshtml.dll
O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - D:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - D:\WINDOWS\System32\mshtml.dll
O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - D:\WINDOWS\System32\wiascr.dll
O20 - Winlogon Notify: igfxcui
O21 - SSODL: WebSecurity - {3DD78ACF-0745-4532-94F8-A574457E1A81} - D:\WINDOWS\system32\PvSec.dll
O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - (no file)
O21 - SSODL: webwork - {4C611512-2C1D-44b2-A044-872AD2AD5A61} - D:\WINDOWS\webwork\webwork.dll
O21 - SSODL: NetWork - {FC055E7D-8144-4706-8586-2F1C49FCDD2A} - D:\WINDOWS\system32\reporter.dll
O22 - SharedTaskScheduler: Windows Media Player 核心预加载程序 - {78BF3960-61F0-4F4E-825D-3554FA61E847} - D:\WINDOWS\system32\wmpknl.dll
O23 - Service: Adobe LM Service (Adobe LM Service) - Adobe Systems - "D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"
O23 - Service: Application Management (AppMgmt) -  - D:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Human Interface Device Access (HidServ) -  - D:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Imsvc (Imsvc) -  - D:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - D:\WINDOWS\system32\lexbces.exe
O23 - Service: Remote Access Connection Management (Remote Access Connection Management) -  - D:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - "D:\Program Files\rising\Rav\Ravmond.exe"

2006-12-16,19:43:10

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><D:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IgfxTray><D:\WINDOWS\System32\igfxtray.exe>  [(Verified)Intel Corporation]
    <HotKeysCmds><D:\WINDOWS\System32\hkcmd.exe>  [(Verified)Intel Corporation]
    <UserFaultCheck><%systemroot%\system32\dumprep 0 -u>  [N/A]
    <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k>  [N/A]
    <runeip><D:\Program Files\Rising\AntiSpyware\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <Rav><"D:\Program Files\rising\Rav\Update\setup.exe" /REPAIR /ONCE>  [Beijing Rising Technology Co., Ltd.]
    <KKDelay><D:\Program Files\rising\AntiSpyware\RunOnce.exe>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><D:\WINDOWS\SERVICES.EXE,C:\WINDOWS\system32\userinit.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><D:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
    <{B876D045-E0B1-4E79-9359-0B1BF00813EA}><D:\WINDOWS\system32\filter.dll>  [Microsoft Corporation]
    <{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><>  [N/A]
    <{B48F6409-4740-475B-A474-651F54CCE460}><>  [N/A]
    <{5EED7056-B89D-4DE8-A060-D285EA746799}><>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WebSecurity><D:\WINDOWS\system32\PvSec.dll>  []
    <stdup><>  [N/A]
    <webwork><>  [N/A]
    <NetWork><D:\WINDOWS\system32\reporter.dll>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{78BF3960-61F0-4F4E-825D-3554FA61E847}><D:\WINDOWS\system32\wmpknl.dll>  [N/A]

==================================
启动文件夹
[瑞星监控中心]
  <D:\Documents and Settings\All Users\「开始」菜单\程序\启动\瑞星监控中心.lnk --> D:\PROGRA~1\rising\rav\RavMon.exe [Beijing Rising Technology Co., Ltd.]><N>
[河南网通宽带用户客户端]
  <D:\Documents and Settings\All Users\「开始」菜单\程序\启动\河南网通宽带用户客户端.lnk --> D:\PROGRA~1\RACER-~1\racer.exe [Putian Runway]><N>

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"D:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Application Management / AppMgmt]
  <D:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[File Replication / File Replication]
  <D:\WINDOWS\system32\ntfis.exe><Microsoft Corporation>
[Human Interface Device Access / HidServ]
  <D:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Imsvc / Imsvc]
  <D:\WINDOWS\System32\svchost.exe -k netsvcs-->D:\WINDOWS\system32\Webmail.dll><>
[iPod 服務 / iPodService]
  <><N/A>
[LexBce Server / LexBceS]
  <D:\WINDOWS\system32\LEXBCES.EXE><Lexmark International, Inc.>
[Clipboard / Popular]
  <D:\WINDOWS\System32\svchost.exe -k netsvcs-->D:\WINDOWS\system32\cqmnc.dll><Microsoft Corporation>
[Remote Access Connection Management / Remote Access Connection Management]
  <D:\WINDOWS\System32\svchost.exe -k netsvcs-->D:\Program Files\Messenger\msnhost.dll><N/A>
[Rising RealTime Monitor / RsRavMon]
  <"D:\Program Files\rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

==================================
驱动程序
[00007647 / 00007647]
  <\SystemRoot\system32\drivers\00007647.SYS><N/A>
[a347bus / a347bus]
  <\SystemRoot\system32\DRIVERS\a347bus.sys><>
[a347scsi / a347scsi]
  <\SystemRoot\System32\Drivers\a347scsi.sys><>
[ADProt / ADProt]
  <\SystemRoot\system32\drivers\ADProt.sys><N/A>
[Service for Avance AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Avance Logic, Inc.>
[BaseTDI / BaseTDI]
  <\??\D:\WINDOWS\System32\drivers\basetdi.sys><Beijing Rising Technology Co., Ltd.>
[basic2 / basic2]
  <System32\DRIVERS\basic2.sys><Conexant Systems>
[bidlgm99 / bidlgm99]
  <\SystemRoot\System32\DRIVERS\bidlgm99.sys><N/A>
[EagleNT / EagleNT]
  <\??\D:\WINDOWS\system32\drivers\EagleNT.sys><N/A>
[ENUS_NDIS_DRIVER / ENUS_NDIS_DRIVER]
  <\SystemRoot\system32\enusndis.sys><N/A>
[Fallback / Fallback]
  <System32\DRIVERS\fallback.sys><Conexant Systems>
[fcaowj64 / fcaowj64]
  <\??\D:\WINDOWS\system32\drivers\fcaowj64.sys><Microsoft Corporation>
[Fsks / Fsks]
  <System32\DRIVERS\fsksnt.sys><Conexant Systems>
[GEAR CDRom Filter / GEARAspiWDM]
  <SYSTEM32\DRIVERS\GEARAspiWDM.sys><GEAR Software Inc.>
[GrandTechICNameNT / GT680x]
  <System32\Drivers\gt680x.sys><>
[hdfs / hdfs]
  <\??\D:\WINDOWS\system32\drivers\hdfs.sys><N/A>
[ialm / ialm]
  <System32\DRIVERS\ialmnt5.sys><Intel Corporation>
[K56 / K56]
  <System32\DRIVERS\k56nt.sys><Conexant Systems>
[kmsinput / kmsinput]
  <\??\D:\WINDOWS\system32\drivers\kmsinput.sys><N/A>
[LanPort / LanPort]
  <\??\D:\WINDOWS\system32\drivers\LanPort.sys><N/A>
[mdmxsdk / mdmxsdk]
  <System32\DRIVERS\mdmxsdk.sys><Conexant>
[ncio / ncio]
  <system32\DRIVERS\ncio.sys><N/A>
[New0 / New0]
  <\??\D:\WINDOWS\System32\new.sys><N/A>
[Netgroup Packet Filter / NPF]
  <system32\drivers\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt]
  <\??\D:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkycryp / npkycryp]
  <\??\D:\Program Files\Tencent\QQ\npkycryp.sys><N/A>
[USB Mass Storage / OEMSTOR]
  <system32\DRIVERS\USBMSDk.SYS><USB Mass Storage.>
[oshack20.sys / oshack20.sys]
  <\??\D:\WINDOWS\system32\drivers\oshack20.sys><N/A>
[parcls / parcls]
  <\??\D:\WINDOWS\system32\drivers\parcls.sys><N/A>
[Direct Parallel Link Driver / Ptilink]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[QuakeDRV / QuakeDRV]
  <\SystemRoot\system32\DRIVERS\quakedrv.sys><N/A>
[Rksample / Rksample]
  <System32\DRIVERS\rksample.sys><Conexant Systems>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139]
  <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv]
  <System32\DRIVERS\secdrv.sys><Macrovision Europe Ltd>
[SoftFax / SoftFax]
  <System32\DRIVERS\faxnt.sys><Conexant Systems>
[TCP/IP Protocol Driver / Tcpip]
  <System32\DRIVERS\tcpip.sys><Microsoft Corporation>
[Tones / Tones]
  <System32\DRIVERS\tonesnt.sys><Conexant Systems>
[V124 / V124]
  <System32\DRIVERS\v124nt.sys><Conexant Systems>
[vytzod3 / vytzod35]
  <\SystemRoot\System32\DRIVERS\vytzod35.sys><Microsoft Corporation>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <D:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[比较购物搜索(&C)]
  {A36ABCF0-1C8F-46e7-A67C-0489DC21B9CC} <D:\WINDOWS\YayaBands.dll, Eastday Corporation>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CaiFuCOM Class]
  {C1F0024B-8278-4999-B7E6-2718426D9FE6} <D:\Program Files\财富通\caifu.dll, N/A>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <D:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[Shockwave ActiveX Control]
  {166B1BCA-3F9C-11CF-8075-444553540000} <D:\WINDOWS\system32\Macromed\Director\SwDir.dll, Macromedia, Inc.>
[Minesweeper Flags Class]
  {2917297F-F02B-4B9D-81DF-494B6333150B} <D:\WINDOWS\Downloaded Program Files\minesweeper.dll, Microsoft Corporation>
[FavImport Class]
  {30CADB40-6FD7-433F-BF0D-4827CA7B5BDF} <D:\WINDOWS\Downloaded Program Files\ImportAx.dll, Microsoft Corp.>
[WebActivater Control]
  {3D8F74EE-8692-4F8F-B8D2-7522E732519E} <D:\WINDOWS\system32\WEBACT~1.OCX, QQ>
[MSN Photo Upload Tool]
  {4F1E5B1A-2A80-42CA-8532-2D05CB959537} <D:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation>
[Downloader Class]
  {5932517A-3326-4439-A708-1C98EDB5C549} <D:\WINDOWS\system32\iMopDl.dll, >
[Java Plug-in 1.4.1_06]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <D:\Program Files\Java\j2re1.4.1_06\bin\npjpi141_06.dll, JavaSoft / Sun Microsystems, Inc.>
[MessengerStatsClient Class]
  {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} <D:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll, Microsoft Corporation>
[WebActivater Control]
  {C661F36D-DF85-4EF4-83C7-E107B83D04B1} <D:\WINDOWS\system32\3DShowVM.ocx, QQ>
[Java Plug-in 1.4.1_06]
  {CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA} <D:\Program Files\Java\j2re1.4.1_06\bin\npjpi141_06.dll, JavaSoft / Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <D:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <D:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\System32\mshtml.dll, N/A>
[Tabular Data Control]
  {333C7BC4-460F-11D0-BC04-0080C7055A83} <D:\WINDOWS\System32\tdc.ocx, Microsoft Corporation>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[卡卡上网安全助手]
  {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <D:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <D:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <D:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <D:\WINDOWS\System32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <D:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
  <D:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[上传到QQ网络硬盘]
  <D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>

正在运行的进程
[PID: 472][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 528][\??\D:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 552][\??\D:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 596][D:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 608][D:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 760][D:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 808][D:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 892][D:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [d:\program files\messenger\msnhost.dll]  [N/A, N/A]
[PID: 932][D:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1056][D:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1236][D:\WINDOWS\system32\LEXBCES.EXE]  [Lexmark International, Inc., 7.4]
    [D:\WINDOWS\system32\lexp2p32.dll]  [Lexmark International, Inc., 7.4]
    [D:\WINDOWS\system32\lex2kusb.dll]  [Lexmark International, Inc., 7.4]
[PID: 1256][D:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [D:\WINDOWS\system32\LEXLMPM.DLL]  [Lexmark International, Inc., 7.4]
    [D:\WINDOWS\system32\LexBce.dll]  [Lexmark International, Inc., 7.4]
    [D:\WINDOWS\System32\spool\PRTPROCS\W32X86\LGAXPP5C.dll]  [Lexmark International, 1.0.2.1]
    [D:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll]  [Windows (R) 2000 DDK provider, 5.00.2195.1620]
    [D:\WINDOWS\system32\LGAXpwr.dll]  [Lexmark International, Inc., 1, 0, 1, 0]
    [D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LGAXUI5C.DLL]  [Lexmark International, 0,3,0,0]
    [D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LGAXSTRN.DLL]  [Lexmark International, 1.0.2.1]
[PID: 1272][D:\WINDOWS\system32\LEXPPS.EXE]  [Lexmark International, Inc., 7.4]
    [D:\WINDOWS\system32\LEXBCE.DLL]  [Lexmark International, Inc., 7.4]
[PID: 1668][D:\WINDOWS\system32\RUNDLL32.EXE]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\WINDOWS\system32\tpnet.dll]  [, 5.1.1800.2813]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
[PID: 1800][D:\WINDOWS\System32\igfxtray.exe]  [Intel Corporation, 3,0,0,1502]
    [D:\WINDOWS\System32\hccutils.DLL]  [Intel Corporation, 3,0,0,1502]
    [D:\WINDOWS\System32\igfxdev.dll]  [Intel Corporation, 3,0,0,1502]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
    [D:\WINDOWS\System32\igfxsrvc.dll]  [Intel Corporation, 3,0,0,1502]
    [D:\WINDOWS\System32\igfxres.dll]  [Intel Corporation, 3,0,0,1502]
    [D:\WINDOWS\System32\igfxress.dll]  [Intel Corporation, 3,0,0,1502]
[PID: 1820][D:\WINDOWS\System32\hkcmd.exe]  [Intel Corporation, 3,0,0,1502]
    [D:\WINDOWS\System32\hccutils.DLL]  [Intel Corporation, 3,0,0,1502]
    [D:\WINDOWS\System32\igfxdev.dll]  [Intel Corporation, 3,0,0,1502]
    [D:\WINDOWS\System32\igfxsrvc.dll]  [Intel Corporation, 3,0,0,1502]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
    [D:\WINDOWS\System32\igfxhk.dll]  [Intel Corporation, 3,0,0,1502]
    [D:\WINDOWS\System32\igfxres.dll]  [Intel Corporation, 3,0,0,1502]
[PID: 1872][D:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 3]
    [D:\Program Files\Rising\AntiSpyware\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
[PID: 1904][D:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
[PID: 1932][D:\Program Files\rising\rav\RavMon.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 39]
    [D:\Program Files\rising\rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [D:\Program Files\rising\rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [D:\Program Files\rising\rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\Program Files\rising\rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [D:\Program Files\rising\rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\Program Files\rising\rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\Program Files\rising\rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
[PID: 1956][D:\Program Files\racer-henan-cnc\racer.exe]  [Putian Runway, 3,3,116,192]
    [D:\Program Files\racer-henan-cnc\rwxre.dll]  [Mozilla Foundation, 1.7.3: 2006072418]
    [D:\Program Files\racer-henan-cnc\nspr4.dll]  [Netscape Communications Corporation, 4.5 Beta]
    [D:\Program Files\racer-henan-cnc\xpcom.dll]  [Mozilla Foundation, 1.7.3: 2006072418]
    [D:\Program Files\racer-henan-cnc\nss3.dll]  [Netscape Communications Corporation, 3.9.1]
    [D:\Program Files\racer-henan-cnc\softokn3.dll]  [Netscape Communications Corporation, 3.9.1]
    [D:\Program Files\racer-henan-cnc\gkgfx.dll]  [Mozilla Foundation, 1.7.3: 2006072418]
    [D:\Program Files\racer-henan-cnc\xpcom_compat.dll]  [Mozilla Foundation, 1.7.3: 2006072418]
    [D:\Program Files\racer-henan-cnc\js3250.dll]  [Netscape Communications Corporation, 4.0]
    [D:\Program Files\racer-henan-cnc\components\racer_base_comp.dll]  [Putian Runway, 3,3,116,192]
    [D:\Program Files\racer-henan-cnc\racer_base.dll]  [Putian Runway, 3,3,116,192]
    [D:\Program Files\racer-henan-cnc\kbdhook.dll]  [Putian Runway, 3,3,116,192]
    [D:\Program Files\racer-henan-cnc\components\pipnss.dll]  [Mozilla Foundation, 1.7.3: 2006072418]
    [D:\Program Files\racer-henan-cnc\components\gklayout.dll]  [Mozilla Foundation, 1.7.3: 2006072418]
    [D:\Program Files\racer-henan-cnc\components\jar50.dll]  [Mozilla Foundation, 1.7.3: 2006072418]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
    [D:\Program Files\racer-henan-cnc\components\xpcom_compat_c.dll]  [Mozilla Foundation, 1.7.3: 2006072418]
    [D:\Program Files\racer-henan-cnc\components\racer_ad_comp.dll]  [Putian Runway, 3,3,116,192]
    [D:\Program Files\racer-henan-cnc\components\racer_access_pppoe.dll]  [Putian Runway, 3,3,116,192]
    [D:\Program Files\racer-henan-cnc\pppoe.dll]  [北京润汇科技有限公司, 9, 0, 22, 48]
    [D:\Program Files\racer-henan-cnc\components\racer_nss4_comp.dll]  [Putian Runway, 3,3,116,192]
    [D:\Program Files\racer-henan-cnc\nss4.dll]  [北京润汇科技有限公司, 1, 0, 0, 4]
    [D:\Program Files\racer-henan-cnc\wpcap.dll]  [CACE Technologies, 3, 2, 0, 29]
    [D:\Program Files\racer-henan-cnc\packet.dll]  [CACE Technologies, 3, 2, 0, 29]
    [D:\Program Files\racer-henan-cnc\WanPacket.dll]  [CACE Technologies, 3, 2, 0, 29]

[PID: 1504][D:\WINDOWS\system32\ntfis.exe]  [Microsoft Corporation, 5, 2, 3790, 1830]
[PID: 996][d:\windows\imapi.exe]  [Microsoft Corporation, 1.0.0.1]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
[PID: 1848][D:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1916][D:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 2564][D:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 448][D:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Tencent\QQ\QQIEHelper.dll]  [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
    [D:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [D:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  [Macromedia, Inc., 10.1r11]
[PID: 2300][D:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5.3.0.220]
    [D:\Program Files\Thunder Network\Thunder\Program\UpdateDownload.dll]  [Thunder Networking Technologies,LTD, 1, 0, 1, 8]
    [D:\Program Files\Thunder Network\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 71]
    [D:\Program Files\Thunder Network\Thunder\Program\log4cplus.dll]  [, 1, 0, 2, 1]
    [D:\Program Files\Thunder Network\Thunder\Program\stlport_vc646.dll]  [STLport Consulting, Inc., 4.6.2003.1031]
    [D:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll]  [N/A, N/A]
    [D:\Program Files\Thunder Network\Thunder\Program\msgmanage.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 15]
    [D:\Program Files\Thunder Network\Thunder\Program\historyinfo_manage.dll]  [Thunder Networking Technologies,LTD, 5, 2, 0, 148]
    [D:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 1, 0, 18]
    [D:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    [D:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll]  [　, 1, 0, 0, 11]
    [D:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed04.dll]  [　, 2, 3, 0, 37]
    [D:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 1, 0, 3, 8]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
    [D:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [D:\WINDOWS\system32\filter.dll]  [Microsoft Corporation, 5.1.1800.2813]
    [D:\Program Files\Thunder Network\Thunder\Program\iTargetAd.dll]  [Thunder Networking Technologies,LTD, 1, 0, 1, 55]
    [D:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [D:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  [Macromedia, Inc., 10.1r11]
[PID: 3272][D:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
[PID: 912][D:\WINDOWS\explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
    [D:\WINDOWS\system32\wmpknl.dll]  [N/A, N/A]
    [D:\WINDOWS\system32\PvSec.dll]  [, 5, 1, 100, 2500]
    [D:\WINDOWS\system32\reporter.dll]  [N/A, N/A]
    [D:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [D:\WINDOWS\system32\filter.dll]  [Microsoft Corporation, 5.1.1800.2813]
[PID: 1780][D:\Program Files\WinRAR\WinRAR.exe]  [N/A, N/A]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]
[PID: 1188][D:\DOCUME~1\许亮\LOCALS~1\Temp\Rar$EX00.372\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [D:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 5]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["D:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost
210.74.232.156      www.sougua.com
210.74.232.156      mp3.baidu.com
210.74.232.156      www.sogua.com
210.74.232.156      music.yahoo.com.cn
210.74.232.156      d.sogou.com
210.74.232.156      www.qq163.com
210.74.232.156      www.haoting.com
210.74.232.156      www.nowok.net
210.74.232.156      www.yymp3.com
210.74.232.156      music.feifa.com
210.74.232.156      www.tt67.com
210.74.232.156      www.kugoo.com
210.74.232.156      www.9sky.com
210.74.232.156      www.13139.com
210.74.232.156      www.mtvtop.com
210.74.232.156      www.6621.com
210.74.232.156      www.1ting.com
210.74.232.156      www.cococ.com
210.74.232.156      www.520music.com
210.74.232.156      www.7xi.net
210.74.232.156      www.st020.cn
210.74.232.156      www.9flash.com
210.74.232.156      www.7t7t.com
210.74.232.156      www.chinamp3.com
210.74.232.156      verycd.com
210.74.232.156      www.verycd.com
210.74.232.156      movie.poco.cn
210.74.232.156      pp365.net
210.74.232.156      www.pp365.net
210.74.232.156      btchina.net
210.74.232.156      bbs.btbbt.com
210.74.232.156      btz.cn
210.74.232.156      www.btz.cn
210.74.232.156      fkee.com
210.74.232.156      www.fkee.com
210.74.232.156      bt.kaicn.com
210.74.232.156      bt.acnow.net
210.74.232.156      movie.pcpop.com
210.74.232.156      bbs.cnxp.com
210.74.232.156      bt.sogua.com
210.74.232.156      gamedown.yesky.com
210.74.232.156      games.enet.com.cn
210.74.232.156      download.pchome.net
210.74.232.156      www.yxdown.com
210.74.232.156      movie.baidu.com
210.74.232.156      vagaa.com
210.74.232.156      www.vagaa.com
210.74.232.156      hnnn.net
210.74.232.156      www.hnnn.net
210.74.232.156      cn-see.com
210.74.232.156      www.cn-see.com
210.74.232.156      100bao.com
210.74.232.156      www.100bao.com
210.74.232.156      ent.163.com

==================================
终于粘完了  ,  帮我看看吧~ 谢谢