建议扫描一个sreng的报告看看，
[CODE] 2007-01-01,04:13:40 System Repair Engineer 2.3.13.690 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能 以下内容被选中： 所有的启动项目（包括注册表、启动文件夹、服务等） 浏览器加载项 正在运行的进程（包括进程模块信息） 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] ＜ctfmon.exe＞＜C:\WINDOWS\system32\ctfmon.exe＞ [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] ＜load＞＜＞ [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] ＜IMJPMIG8.1＞＜＂C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE＂ /Spoil /RemAdvDef /Migration32＞ [(Verified)Microsoft Corporation] ＜PHIME2002ASync＞＜C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC＞ [(Verified)Microsoft Corporation] ＜PHIME2002A＞＜C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName＞ [(Verified)Microsoft Corporation] ＜MSConfig＞＜C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto＞ [(Verified)Microsoft Corporation] ＜kav＞＜＂C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe＂＞ [Kaspersky Lab] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] ＜avp6_post_uninstall＞＜＞ [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] ＜shell＞＜Explorer.exe＞ [(Verified)Microsoft Corporation] (www.dngz.net)为您排除一切电脑故障 ＜Userinit＞＜C:\WINDOWS\system32\userinit.exe,＞ [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] ＜AppInit_DLLs＞＜＞ [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] ＜UIHost＞＜logonui.exe＞ [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] ＜WinlogonNotify: klogon＞＜C:\WINDOWS\system32\klogon.dll＞ [Kaspersky Lab] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] ＜SoundMan＞＜; SOUNDMAN.EXE＞ [(Verified)Realtek Semiconductor Corp.] ================================== 启动文件夹 N/A ================================== 服务 [Human Interface Device Access / HidServ][Stopped/Disabled] ＜C:\WINDOWS\System32\svchost.exe -k netsvcs--＞%SystemRoot%\System32\hidserv.dll＞＜N/A＞ [卡巴斯基反病毒6.0 / AVP][Running/Auto Start] ＜＂C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe＂ -r＞＜Kaspersky Lab＞ ================================== 驱动程序 [Service for WDM 3D Audio Driver / ALCXSENS][Running/Manual Start] ＜system32\drivers\ALCXSENS.SYS＞＜Sensaura＞ [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] ＜system32\drivers\ALCXWDM.SYS＞＜Realtek Semiconductor Corp.＞ [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Running/Manual Start] ＜system32\DRIVERS\fetnd5.sys＞＜VIA Technologies, Inc.＞ [nv / nv][Running/Manual Start] ＜system32\DRIVERS\nv4_mini.sys＞＜NVIDIA Corporation＞ [Direct Parallel Link Driver / Ptilink][Running/Manual Start] ＜system32\DRIVERS\ptilink.sys＞＜Parallel Technologies, Inc.＞ [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]本文来自 www.dngz.net
＜system32\DRIVERS\RTL8139.SYS＞＜Realtek Semiconductor Corporation＞ [Secdrv / Secdrv][Stopped/Manual Start] ＜system32\DRIVERS\secdrv.sys＞＜N/A＞ [ViaIde / ViaIde][Running/Boot Start] ＜\SystemRoot\system32\DRIVERS\viaide.sys＞＜Microsoft Corporation＞ [viamraid / viamraid][Running/Boot Start] ＜\SystemRoot\system32\DRIVERS\viamraid.sys＞＜VIA Technologies inc,.ltd＞ [npkcrypt / npkcrypt][Running/Auto Start] ＜\？\E:\Program Files\Tencent\QQ\npkcrypt.sys＞＜INCA Internet Co., Ltd.＞ [klif / klif][Running/System Start] ＜\？\C:\WINDOWS\system32\drivers\klif.sys＞＜Kaspersky Lab＞ [kl1 / kl1][Stopped/Boot Start] ＜\SystemRoot\system32\drivers\kl1.sys＞＜Kaspersky Lab＞ ================================== 浏览器加载项 [Web反病毒保护] {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} ＜C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab＞ [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} ＜C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation＞ [Rising Web Scan Object] {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} ＜C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.＞ [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} ＜%SystemRoot%\system32\shdocvw.dll, N/A＞ [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} ＜C:\WINDOWS\system32\macromed\flash\flash.ocx, Macromedia, Inc.＞ [上传到QQ网络硬盘] ＜E:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A＞ [添加到QQ自定义面板] ＜E:\Program Files\Tencent\QQ\AddPanel.htm, N/A＞ [添加到QQ表情] ＜E:\Program Files\Tencent\QQ\AddEmotion.htm, N/A＞ [用QQ彩信发送该图片] ＜E:\Program Files\Tencent\QQ\SendMMS.htm, N/A＞ ==================================(www.dngz.net)版权所有
正在运行的进程 [PID: 608][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 672][\？\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 696][\？\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 740][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 752][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 900][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 964][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1044][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1088][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1184][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1592][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll] [Kaspersky Lab, 6.0.0.299] [PID: 1692][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 648][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 928][E:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0] [E:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQHelperDll.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370]欢迎来到(www.dngz.net)
[E:\Program Files\Tencent\QQ\QQAPI.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [E:\Program Files\Tencent\QQ\LoginCtrl.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1] [E:\Program Files\Tencent\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [E:\Program Files\Tencent\QQ\QQRes.dll] [tencent, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQMainFrame.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\CQQApplication.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\NewSkin.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\HostingMgr.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\CameraDll.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\MailSummary.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQSpace.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\QQGroupMng.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\GroupLive.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQPlugin.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\CommercesMng.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [E:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240] [E:\Program Files\Tencent\QQ\QQSceneMng.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 2, 23] [E:\Program Files\Tencent\QQ\QQAllInOne.dll] [N/A, N/A] dngz.net版权所有 [E:\Program Files\Tencent\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQCustomFace.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\GroupConnection.dll] [Tencent, 0, 3, 3, 5] [C:\WINDOWS\system32\macromed\flash\flash.ocx] [Macromedia, Inc., 6,0,79,0] [E:\Program Files\Tencent\QQ\ImageOle.dll] [TODO: ＜Company name＞, 1.0.0.1] [PID: 112][E:\Program Files\Tencent\QQ\TIMPlatform.exe] [tencent, 0, 3, 1, 8] [E:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 1996][C:\Documents and Settings\wu\桌面\QQPetNurse.exe] [永恒E网, 2.1.8.5] [PID: 1064][E:\Program Files\Tencent\QQ\qqpet\qqpet.exe] [腾讯公司, 2, 44, 102, 1] [E:\Program Files\Tencent\QQ\qqpet\Pnet.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\qqpet\QQPetResDownload.dll] [, 6, 1, 101, 1] [E:\Program Files\Tencent\QQ\qqpet\QQPetCommunity.dll] [, 6, 3, 101, 1] [C:\WINDOWS\system32\macromed\flash\flash.ocx] [Macromedia, Inc., 6,0,79,0] [PID: 3044][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 4024][E:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0] [E:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQHelperDll.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370] [E:\Program Files\Tencent\QQ\QQAPI.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [E:\Program Files\Tencent\QQ\LoginCtrl.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1] [E:\Program Files\Tencent\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [E:\Program Files\Tencent\QQ\QQRes.dll] [tencent, 1, 0, 0, 1] 欢迎来到(www.dngz.net) [E:\Program Files\Tencent\QQ\WizardCtrl.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQMainFrame.dll] [N/A, N/A] [C:\WINDOWS\system32\macromed\flash\flash.ocx] [Macromedia, Inc., 6,0,79,0] [E:\Program Files\Tencent\QQ\CQQApplication.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\NewSkin.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\HostingMgr.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\CameraDll.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\MailSummary.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQSpace.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\QQGroupMng.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\GroupLive.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQPlugin.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QRingMng.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\PhoneAPI.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [E:\Program Files\Tencent\QQ\VPortal.dll] [, 1, 0, 0, 4] [E:\Program Files\Tencent\QQ\QQAvatar.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1] [E:\Program Files\Tencent\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160] [E:\Program Files\Tencent\QQ\QQPet.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQAllInOne.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1] [E:\Program Files\Tencent\QQ\QQCustomFace.dll] [N/A, N/A] . [E:\Program Files\Tencent\QQ\BQQApplication.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\CommercesMng.dll] [, 1, 0, 0, 1] [E:\Program Files\Tencent\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [E:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240] [E:\Program Files\Tencent\QQ\QQSceneMng.dll] [N/A, N/A] [E:\Program Files\Tencent\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 2, 23] [E:\Program Files\Tencent\QQ\GroupConnection.dll] [Tencent, 0, 3, 3, 5] [E:\Program Files\Tencent\QQ\ImageOle.dll] [TODO: ＜Company name＞, 1.0.0.1] [PID: 2688][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3604][C:\Program Files\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 5, 9, 30] [C:\Program Files\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2] [C:\Program Files\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1] [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299] [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299](www.dngz.net)为您排除一切电脑故障
[c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299] [PID: 3600][C:\WINDOWS\system32\NOTEPAD.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 160][D:\sreng2\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690] [PID: 3680][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. [＂%1＂ %*] .COM OK. [＂%1＂ %*] .PIF OK. [＂%1＂ %*] .REG OK. [regedit.exe ＂%1＂] .BAT OK. [＂%1＂ %*] .SCR OK. [＂%1＂ /S] .CHM OK. [＂C:\WINDOWS\hh.exe＂ %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*] .JS OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK 警告！System Repair Engineer 提醒 你下面的函数内容与预期值不符，他 们可能被一些恶意的软件所修改： RVA 错误： LoadLibraryA RVA 错误： LoadLibraryExA RVA 错误： LoadLibraryExW RVA 错误： LoadLibraryW ================================== [/CODE]HijackThis_815汉化版扫描日志 V1.99.1 保存于 4:23:34, 日期 2007-1-1 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) (www.dngz.net)为您排除一切电脑故障 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe E:\Program Files\Tencent\QQ\QQ.exe E:\Program Files\Tencent\QQ\TIMPlatform.exe C:\Documents and Settings\wu\桌面\QQPetNurse.exe E:\Program Files\Tencent\QQ\qqpet\qqpet.exe C:\WINDOWS\system32\spoolsv.exe E:\Program Files\Tencent\QQ\QQ.exe C:\WINDOWS\system32\conime.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Maxthon\Maxthon.exe C:\WINDOWS\system32\wscntfy.exe E:\下载区\杀毒专用文件夹\111111\HijackThis汉华版\HijackThis1991zww.exe O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ＂C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE＂ /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - 启动项HKLM\\Run: [kav] ＂C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe＂ O4 - 启动项HKLM\\Run: [SoundMan] ; SOUNDMAN.EXE O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - E:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - E:\Program Files\Tencent\QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - E:\Program Files\Tencent\QQ\SendMMS.htm dngz.net O9 - 浏览器额外的按钮: Web反病毒保护 - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{E4768834-7341-4ED9-B104-56BB39E11418}: NameServer = 202.101.98.55,202.101.98.54 O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O23 - NT 服务: 卡巴斯基反病毒6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe＂ -r (file missing)HijackThis_815汉化版扫描日志 V1.99.1 保存于 4:25:53, 日期 2007-1-1 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ctfmon.exe E:\Program Files\Tencent\QQ\QQ.exe E:\Program Files\Tencent\QQ\TIMPlatform.exe C:\Documents and Settings\wu\桌面\QQPetNurse.exe E:\Program Files\Tencent\QQ\qqpet\qqpet.exe C:\WINDOWS\system32\spoolsv.exe E:\Program Files\Tencent\QQ\QQ.exe C:\WINDOWS\system32\conime.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\Maxthon\Maxthon.exe ~ C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\NOTEPAD.EXE E:\下载区\杀毒专用文件夹\111111\HijackThis汉华版\HijackThis1991zww.exe C:\WINDOWS\system32\NOTEPAD.EXE O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ＂C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE＂ /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - 启动项HKLM\\Run: [kav] ＂C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe＂
O4 - 启动项HKLM\\Run: [SoundMan] ; SOUNDMAN.EXE O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - E:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - E:\Program Files\Tencent\QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - E:\Program Files\Tencent\QQ\SendMMS.htm O9 - 浏览器额外的按钮: Web反病毒保护 - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{E4768834-7341-4ED9-B104-56BB39E11418}: NameServer = 202.101.98.55,202.101.98.54 O18 - 列举现有的协议: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll本文来自 www.dngz.net
O18 - 列举现有的协议: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll O18 - 列举现有的协议: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ipp - (no CLSID) - (no file) O18 - 列举现有的协议: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - 列举现有的协议: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll O18 - 列举现有的协议: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - 列举现有的协议: msdaipp - (no CLSID) - (no file) O18 - 列举现有的协议: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll O18 - 列举现有的协议: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll , O18 - 列举现有的协议: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O23 - NT 服务: 卡巴斯基反病毒6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe＂ -r (file missing)杀毒吧..中招了 .............................
有没有可升级的好一点的杀毒软件？发一个上来共享一下，谢谢！
顶起来， 版主，帮忙哦。。。。。。。。。。。。。。。。。