.Awe794
开机时遭遇停电，重开机后就是这样了，请高手帮忙，谢谢
2006-09-25,15:22:55
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程?樾畔ⅲ?br>
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
＜RocketDock＞＜＂D:\电脑\释放\RocketDock\RocketDock\RocketDock.exe＂＞ []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
＜load＞＜＞ []
＜run＞＜＞ []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
＜PHIME2002ASync＞＜C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC＞ [Microsoft Corporation]
＜PHIME2002A＞＜C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName＞ [Microsoft Corporation]
＜KvMonXP＞＜C:\KV2004\KVMonXP.kxp /auto＞ [JiangMin Ltd.]
dngz.net
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
＜shell＞＜Explorer.exe＞ [Microsoft Corporation]
＜Userinit＞＜C:\WINDOWS\system32\userinit.exe,＞ [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
＜AppInit_DLLs＞＜＞ []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
＜UIHost＞＜＂\Program Files\PixOS\PixOS.exe＂＞ []
==================================
启动文件夹
服务
[KVSrvXP / KVSrvXP]
＜C:\KV2004\KVSrvXP.exe -Service＞＜JiangMin Ltd.＞
[KVWSC / KVWSC]
＜＂C:\KV2004\KVwsc.exe＂＞＜Jiangmin Co＞
==================================
浏览器加载项
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} ＜C:\KV2004\KvShell.dll, JiangMin Lmt＞
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} ＜D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD＞
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} ＜C:\KV2004\KvShell.dll, JiangMin Lmt＞ ,
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} ＜C:\WINDOWS\system32\xunleibho_v14.dll, Thunder Networking Technologies,LTD＞
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} ＜C:\KV2004\KvShell.dll, JiangMin Lmt＞
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} ＜D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD＞
[CibaCtrl Class]
{8DE0FCD4-5EB5-11D3-AD25-00002100131B} ＜C:\POWERW~1\IEPlugin.dll, ＞
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} ＜%SystemRoot%\system32\shdocvw.dll, N/A＞
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} ＜C:\KV2004\KvShell.dll, JiangMin Lmt＞
[JoyoCtrl Class]
{C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} ＜C:\POWERW~1\IEPlugin.dll, ＞
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} ＜C:\WINDOWS\system32\macromed\flash\Flash.ocx, Macromedia, Inc.＞
[使用迅雷下载]
＜D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\GetUrl.htm, N/A＞ ,
[使用迅雷下载全部链接]
＜D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\GetAllUrl.htm, N/A＞
[导出到 Microsoft Excel(&x)]
＜res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A＞
==================================
正在运行的进程
[PID: 588][\SystemRoot\System32\smss.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 644][\?\C:\WINDOWS\system32\csrss.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 668][\?\C:\WINDOWS\system32\winlogon.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[PID: 712][C:\WINDOWS\system32\services.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 724][C:\WINDOWS\system32\lsass.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 876][C:\WINDOWS\system32\svchost.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
www.dngz.net
[PID: 940][C:\WINDOWS\system32\svchost.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1060][C:\WINDOWS\System32\svchost.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1104][C:\WINDOWS\system32\svchost.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1196][C:\WINDOWS\system32\svchost.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1456][C:\WINDOWS\system32\spoolsv.exe] ＜Microsoft Corporation＞＜5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)＞
[PID: 1548][C:\WINDOWS\Explorer.EXE] ＜Microsoft Corporation＞＜6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\KV2004\UpdateX.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\GUIExt.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\lang\GUIExt0804.lng] ＜JiangMin Ltd.＞＜7, 1, 0, 200＞ dngz.net您的电脑医生
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\ComDlls\XunLeiBHO_002.dll] ＜Thunder Networking Technologies,LTD＞＜5, 0, 0, 2＞
[D:\电脑\释放\RocketDock\RocketDock\MouseHook2.dll] ＜N/A＞＜N/A＞
[C:\KV2004\KVComm_1.dll] ＜JiangMin Ltd.＞＜8.0.0.312＞
[C:\KV2004\KvShell.dll] ＜JiangMin Lmt＞＜8.0.0.309＞
[C:\KV2004\lang\Kvxp0804.lng] ＜N/A＞＜N/A＞
[C:\KV2004\APIImpl.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\Program Files\WinRAR\rarext.dll] ＜N/A＞＜N/A＞
[D:\电脑\释放\Unlocker\UnlockerCOM.dll] ＜N/A＞＜N/A＞
[C:\KV2004\KVMonXP.kxp] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\UpdateX.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\lang\Kvxp0804.lng] ＜N/A＞＜N/A＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\KV2004\GUIExt.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\lang\GUIExt0804.lng] ＜JiangMin Ltd.＞＜7, 1, 0, 200＞
[C:\KV2004\KVEnhP.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
dngz.net您的电脑医生
[C:\KV2004\KvSpiPS.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\ComUIPS.dll] ＜N/A＞＜8.0.0.309＞
[PID: 1808][C:\KV2004\KVSrvXP.exe] ＜JiangMin Ltd.＞＜8.0.0.311＞
[C:\KV2004\UpdateX.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\KVEnhD.dll] ＜JiangMin Ltd.＞＜8.0.0.311＞
[C:\KV2004\KvSPI.dll] ＜JiangMin Ltd.＞＜8.0.0.312＞
[C:\KV2004\KVEnhP.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\KVEnhM.dll] ＜JiangMin Ltd.＞＜8.0.0.311＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\KV2004\KVEnhC.DLL] ＜JiangMin Ltd.＞＜8.0.0.311＞
[C:\KV2004\KVEnhO_1.dll] ＜JiangMin Ltd.＞＜8.0.0.314＞
[C:\KV2004\KVEnhS.dll] ＜JiangMin Ltd.＞＜8.0.0.313＞
[C:\KV2004\KvSpiPS.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\KVEnhJ.dll] ＜JiangMin Ltd.＞＜8.0.0.311＞
[C:\KV2004\KVExtCab.dll] ＜Jiangmin New Tech. Co. Ltd.＞＜8.0.0.309＞
[C:\KV2004\KVExtEml.dll] ＜JiangMin Ltd.＞＜8.0.0.312＞ 本文来自 www.dngz.net
[C:\KV2004\KVExtLZH.dll] ＜N/A＞＜N/A＞
[C:\KV2004\KvExtRar.dll] ＜Jiangmin New Tech. Co. Ltd.＞＜8.0.0.309＞
[C:\KV2004\KvExtZip.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[C:\KV2004\KVEnhK.dll] ＜JiangMin Ltd.＞＜7, 1, 0, 307＞
[PID: 1820][C:\KV2004\KVwsc.exe] ＜Jiangmin Co＞＜1, 0, 0, 8＞
[C:\KV2004\KVEnhP.dll] ＜JiangMin Ltd.＞＜8.0.0.309＞
[PID: 1856][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe] ＜Microsoft Corporation＞＜7.00.9064.9150＞
[PID: 1928][C:\WINDOWS\system32\svchost.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1020][C:\WINDOWS\System32\alg.exe] ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 908][D:\电脑\释放\RocketDock\RocketDock\RocketDock.exe] ＜N/A＞＜N/A＞
[D:\电脑\释放\RocketDock\RocketDock\MouseHook2.dll] ＜N/A＞＜N/A＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
dngz.net
[PID: 1492][C:\Program Files\MetaTrader 4 - Forex Ltd\terminal.exe] ＜MetaQuotes Software Corp.＞＜4.00.1.97＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[D:\电脑\释放\RocketDock\RocketDock\MouseHook2.dll] ＜N/A＞＜N/A＞
[PID: 980][C:\Program Files\fxsgts\fxtrader.exe] ＜FX Solutions LLC.＞＜5.08.0002＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\WINDOWS\system32\Cfx4032.ocx] ＜Software FX, Inc.＞＜5.0.14.0＞
[C:\WINDOWS\system32\SfxBar.DLL] ＜Software FX, Inc.＞＜1.0.23.0＞
[C:\WINDOWS\system32\CTDROP~1.OCX] ＜DBI Technologies Inc.＞＜2, 0, 1, 0＞
[C:\WINDOWS\system32\AbsoluteHttp.dll] ＜SPeeQ (http://www.speeq.com)＞＜1, 3, 0, 0＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[D:\电脑\释放\RocketDock\RocketDock\MouseHook2.dll] ＜N/A＞＜N/A＞
[C:\WINDOWS\system32\FXMathLib.dll] ＜N/A＞＜N/A＞ ;
[C:\Program Files\fxsgts\TrdChineseSimple.dll] ＜Fx Sollutions Corporation＞＜1.00＞
[PID: 2948][C:\Program Files\Maxthon\Maxthon.exe] ＜Maxthon International Ltd.＞＜1, 5, 6, 39＞
[C:\Program Files\Maxthon\maxzlib.dll] ＜ ＞＜1, 0, 0, 2＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[D:\电脑\释放\RocketDock\RocketDock\MouseHook2.dll] ＜N/A＞＜N/A＞
[C:\Program Files\Maxthon\Services\RealTime\real_time.dll] ＜＞＜1, 0, 0, 1＞
[C:\WINDOWS\system32\msdmo.dll] ＜N/A＞＜N/A＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[PID: 1468][D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\Thunder5.exe] ＜Thunder Networking Technologies,LTD＞＜5.4.0.226＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\UpdateDownload.dll] ＜N/A＞＜N/A＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\msgmanage.dll] ＜N/A＞＜N/A＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\historyinfo_manage.dll] ＜Thunder Networking Technologies,LTD＞＜5, 2, 0, 148＞
(www.dngz.net)
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\download_interface.dll] ＜Thunder Networking Technologies,LTD＞＜2, 0, 0, 1＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\stlport_vc646.dll] ＜STLport Consulting, Inc.＞＜4.6.2003.1031＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\log4cplus.dll] ＜＞＜1, 0, 2, 1＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\asyn_dns.dll] ＜N/A＞＜N/A＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\RegisterDll.dll] ＜Thunder Networking Technologies,LTD＞＜2, 1, 0, 18＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\FloatBar.dll] ＜Thunder Networking Technologies,LTD＞＜1, 0, 0, 2＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[D:\电脑\RAR文件\迅雷thunder\Thunder5.4.0.226_AYU\Thunder\Program\iTargetAd.dll] ＜N/A＞＜N/A＞ (www.dngz.net)
[D:\电脑\释放\RocketDock\RocketDock\MouseHook2.dll] ＜N/A＞＜N/A＞
[PID: 2408][D:\电脑\释放\内存整理BySoft FreeRAM\BySoft FreeRAM\FreeRAM.exe] ＜BySoft＞＜4.0.0.0＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[D:\电脑\释放\RocketDock\RocketDock\MouseHook2.dll] ＜N/A＞＜N/A＞
[PID: 540][D:\电脑\释放\sreng\SREng2\SREng.exe] ＜Smallfrogs Studio＞＜2.0.21.505＞
[C:\WINDOWS\system32\UNISPIM.IME] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[C:\WINDOWS\system32\upengine.dll] ＜北京清华紫光软件股份有限公司＞＜3.0.0.3045＞
[D:\电脑\释放\RocketDock\RocketDock\MouseHook2.dll] ＜N/A＞＜N/A＞
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. [＂%1＂ %*]
.COM OK. [＂%1＂ %*]
.PIF OK. [＂%1＂ %*]
.REG OK. [regedit.exe ＂%1＂]
.BAT OK. [＂%1＂ %*]
.SCR OK. [＂%1＂ /S]
.CHM OK. [＂C:\WINDOWS\hh.exe＂ %1] 本文来自 www.dngz.net
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*]
.JS OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
==================================
把内存条拔下檫檫试试。
图上好像内存是检测到512M，呵呵