最近更新的BLOG列表
最新更新的文章列表
卡巴说重启后删除的病毒，删除不了，怎么办？
2007-12-19 23:54:57.0
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso0.dll
这个是病毒文件的地址，手动也删过，卡巴也提示过重启后删除，可是都不行。请问哪位兄弟知道怎么办吗？
下载执行System Repair Engineer (SREng)
按「智能扫描」，再按「扫描」
最后，按「保存报告」，保存到桌面
将 SREngLOG.log 中内容完整的复制粘贴上来(快捷提示：ctrl+a全选，ctrl+c复制,ctrl+v粘贴)，不要做任何修改。
如出现无法运行，请重命名或修改扩展名，如abc.exe/abc.com/abc.bat/abc.scr等
这个是病毒文件的地址，手动也删过，卡巴也提示过重启后删除，可是都不行。请问哪位兄弟知道怎么办吗？
下载执行System Repair Engineer (SREng)
按「智能扫描」，再按「扫描」
最后，按「保存报告」，保存到桌面
将 SREngLOG.log 中内容完整的复制粘贴上来(快捷提示：ctrl+a全选，ctrl+c复制,ctrl+v粘贴)，不要做任何修改。
如出现无法运行，请重命名或修改扩展名，如abc.exe/abc.com/abc.bat/abc.scr等
复制内容到剪贴板
不好意思，本来好了两天，不过不知道是上了哪个网站的原因，又这样了
在「我的电脑」上按右键，选择「属性」
进入「系统还原」，勾选「在所有驱动器上关闭系统还原」，按下「应用」，出现提示对话框时按「是」（病毒清理后请自己决定是否打开系统还原）
点此下载ATF Cleaner
执行后，勾选「全选」，按下「立刻清理」
根据SREng扫描日志请按照如下步骤，尝试删除和修复
1.建议使用XDelBox删除以下文件：(XDelBox下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择从剪贴板导入，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。
(如XDelBox提示文件不存在的，忽略即可)
c:\docume~1\admini~1\locals~1\temp\daso0.dll
c:\docume~1\admini~1\locals~1\temp\fyso0.dll
c:\docume~1\admini~1\locals~1\temp\jtso0.dll
c:\docume~1\admini~1\locals~1\temp\mhso0.dll
c:\docume~1\admini~1\locals~1\temp\qjso0.dll
c:\docume~1\admini~1\locals~1\temp\rxso0.dll
c:\docume~1\admini~1\locals~1\temp\tlso0.dll
c:\docume~1\admini~1\locals~1\temp\wdso0.dll
c:\docume~1\admini~1\locals~1\temp\wgso0.dll
c:\docume~1\admini~1\locals~1\temp\wlso0.dll
c:\docume~1\admini~1\locals~1\temp\wmso0.dll
c:\docume~1\admini~1\locals~1\temp\ztso0.dll
c:\program files\internet explorer\romdrivers.dll
c:\docume~1\admini~1\locals~1\temp\daso.exe
c:\docume~1\admini~1\locals~1\temp\tlso.exe
c:\docume~1\admini~1\locals~1\temp\wdso.exe
c:\docume~1\admini~1\locals~1\temp\rxso.exe
c:\docume~1\admini~1\locals~1\temp\qjso.exe
c:\docume~1\admini~1\locals~1\temp\wmso.exe
c:\docume~1\admini~1\locals~1\temp\wgso.exe
c:\docume~1\admini~1\locals~1\temp\wlso.exe
c:\docume~1\admini~1\locals~1\temp\jtso.exe
c:\docume~1\admini~1\locals~1\temp\fyso.exe
c:\docume~1\admini~1\locals~1\temp\mhso.exe
c:\docume~1\admini~1\locals~1\temp\ztso.exe
c:\docume~1\admini~1\locals~1\temp\woso.exe
2.删除重启后使用SREng修复下面各项：
启动项目 －－ 注册表之如下项删除：
[{0CD68AC9-FF63-3E61-626B-B663E62F6236}] <C:\Program Files\Internet Explorer\romdrivers.dll>
[dasa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso.exe>
[tlsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso.exe>
[wdsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso.exe>
[rxsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso.exe>
[qjsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso.exe>
[wmsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso.exe>
[wgsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso.exe>
[wlsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso.exe>
[jtsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso.exe>
[fysa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso.exe>
[mhsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso.exe>
[ztsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso.exe>
[wosa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\woso.exe>
系统恢复－－文件关联－－修复
.TXT Error. [C:\WINDOWS\notepad.exe %1]
.CHM Error. ["hh.exe" %1]
.INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
最后下载windows清理助手清理恶意软件以及自身杀软升级至最新，进行全盘杀毒
http://www.arswp.com/download/arswp/arswp.rar
打好系统补丁
在楼上的基础上建议修复
Winsock 提供者
MSAFD Tcpip [TCP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [UDP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [RAW/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
RSVP UDP Service Provider
C:\WINDOWS\system32\TcpIpDogR0.dll(, N/A)
RSVP TCP Service Provider
C:\WINDOWS\system32\TcpIpDogR0.dll(, N/A)
另建议卸载NOD32
杀毒软件装一个就好，别一个可以做备用，不要两个都开，会有反作用的
谢谢你们的建议了，弄弄看
标签：
证券/理财 股票 收盘 点评 空方 多方 下跌 11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
相关文章:
代码:
2007-06-05,21:13:38
System Repair Engineer 2.4.12.806
Smallfrogs ([url]http://www.KZTechs.com[/url])
Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<bgswitch><C:\WINDOWS\system32\bgswitch.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher]
<kis><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"> [Kaspersky Lab]
<SoundMan><SOUNDMAN.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<VStart5.0><D:\Program Files\音速启动(VStart) V5.0 Build 11.20┊OutLook工具条形式界面┊绿色特别版\VStart50\VStart.exe> [3L软件工作室(3LSoft)]
<wosa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\woso.exe> [N/A]
<ztsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso.exe> []
<mhsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso.exe> []
<fysa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso.exe> []
<jtsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso.exe> []
<wlsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso.exe> []
<wgsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso.exe> []
<wmsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso.exe> []
<qjsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso.exe> []
<rxsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso.exe> []
<wdsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso.exe> []
<tlsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso.exe> []
<dasa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso.exe> []
<nod32kui><"C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE> [Eset ]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{0CD68AC9-FF63-3E61-626B-B663E62F6236}><C:\Program Files\Internet Explorer\romdrivers.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
<WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll> [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ATIPTA><; C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe> [ATI Technologies, Inc.]
<EM_EXEC><; C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE> [Logitech Inc. ]
<StormCodec_Helper><; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> []
==================================
启动文件夹
N/A
==================================
服务
[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
<C:\WINDOWS\system32\Ati2evxx.exe><>
[ATI Smart / ATI Smart][Stopped/Auto Start]
<C:\WINDOWS\system32\ati2sgag.exe><>
[卡巴斯基互联网安全套装 6.0 / AVP][Running/Auto Start]
<"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r><Kaspersky Lab>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NOD32 Kernel Service / NOD32krn][Running/Auto Start]
<"C:\Program Files\Eset\nod32krn.exe"><Eset>
==================================
驱动程序
[360TimeProt / 360TimeProt][Running/Boot Start]
<\SystemRoot\system32\drivers\360TimeProt.sys><N/A>
[Service for WDM 3D Audio Driver / ALCXSENS][Running/Manual Start]
<system32\drivers\ALCXSENS.SYS><Sensaura>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AMON / AMON][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\amon.sys><Eset>
[ati2mtag / ati2mtag][Running/Manual Start]
<system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
<system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[VIA Rhine Family Fast Ethernet Adapter Driver Service / FETNDISB][Running/Manual Start]
<system32\DRIVERS\fetnd5b.sys><VIA Technologies, Inc.>
[GMSIPCI / GMSIPCI][Stopped/Manual Start]
<\??\H:\INSTALL\GMSIPCI.SYS><N/A>
[kl1 / kl1][Running/Boot Start]
<\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Logitech HID/USB Mouse Filter Driver / LHidFlt2][Running/Manual Start]
<system32\DRIVERS\LHidFlt2.sys><Logitech, Inc.>
[Logitech USB Receiver device driver / LHidUsb][Running/Manual Start]
<system32\drivers\LHidUsb.Sys><Logitech, Inc.>
[Logitech Keyboard Class Filter Driver / LKbdFlt2][Running/Manual Start]
<system32\DRIVERS\LKbdFlt2.sys><Logitech, Inc.>
[Logitech Mouse Class Filter Driver / LMouFlt2][Running/Manual Start]
<system32\DRIVERS\LMouFlt2.sys><Logitech, Inc.>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
<system32\drivers\npf.sys><CACE Technologies>
[NTACCESS / NTACCESS][Stopped/Manual Start]
<\??\H:\NTACCESS.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
[SetupNTGLM7X / SetupNTGLM7X][Stopped/Manual Start]
<\??\H:\NTGLM7X.sys><N/A>
[VIA AGP Filter / viaagp1][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
[ViaIde / ViaIde][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[viamraid / viamraid][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd>
==================================
浏览器加载项
[Web反病毒保护]
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll, Kaspersky Lab>
[番茄花园]
{6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <[url]http://www.tomatolei.com[/url], N/A>
[Tencent Safety Online Base Module]
{C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\system32\TSOBase\TSOBase.ocx, Tencent Corporation>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
==================================
正在运行的进程
[PID: 604][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 676][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 700][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Ati2evxx.dll] [, ]
[C:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 744][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 756][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[PID: 924][C:\WINDOWS\system32\Ati2evxx.exe] [, ]
[PID: 936][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1040][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[PID: 1156][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299]
[PID: 1632][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Internet Explorer\romdrivers.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso0.dll] [N/A, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso0.dll] [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[D:\Program Files\常用绿色软件\Unlocker1.8.5\Unlocker1.8.5\UnlockerCOM.dll] [N/A, ]
[C:\Program Files\Eset\nodshex.dll] [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\shellex.dll] [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\Audiodev.dll] [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
[PID: 1992][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.0.28]
[PID: 2000][D:\Program Files\音速启动(VStart) V5.0 Build 11.20┊OutLook工具条形式界面┊绿色特别版\VStart50\VStart.exe] [3L软件工作室(3LSoft), 5.23.0020]
[C:\WINDOWS\system32\MSVBVM60.DLL] [Microsoft Corporation, 6.00.9690]
[C:\WINDOWS\system32\vb6chs.dll] [Microsoft Corporation, 6.00.8988]
[C:\WINDOWS\system32\comctl32.ocx] [Microsoft Corporation, 6.00.8105]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso0.dll] [N/A, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\msadp32.acm] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 488][C:\Program Files\Eset\nod32kui.exe] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\nod32rui.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso0.dll] [N/A, ]
[C:\Program Files\Eset\pu_amon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_amon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pu_dmon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_dmon.dll] [N/A, ]
[C:\Program Files\Eset\pu_emon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_emon.dll] [N/A, ]
[C:\Program Files\Eset\pu_imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\Program Files\Eset\pu_mirr.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_mirr.dll] [N/A, ]
[C:\Program Files\Eset\pu_nod32.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_nod32.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pu_upd.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_upd.dll] [N/A, ]
[PID: 512][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2876][C:\Program Files\北京城市热点资讯有限公司\Dr.COM 宽带客户端\ishare_user.exe] [N/A, ]
[C:\Program Files\北京城市热点资讯有限公司\Dr.COM 宽带客户端\cw3220.DLL] [Borland International, 2.0]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso0.dll] [N/A, ]
[PID: 3364][D:\Program Files\常用绿色软件\TheWorldFull\TheWorldFull\TheWorld.exe] [Phoenix Studio, 1, 4, 0, 2]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299]
[D:\PROGRA~1\常用绿~1\THEWOR~1\THEWOR~1\Plugin\SysState\SysState.dll] [Phoenix Stdio, 1, 0, 0, 4]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso0.dll] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso0.dll] [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.304]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\Program Files\Ringz Studio\Storm Codec\Codecs\VSFilter.dll] [Gabest, 1, 0, 1, 3]
[C:\Program Files\Ringz Studio\Storm Codec\Codecs\PmpSplt.ax] [cooleyes, 1, 0, 0, 8]
[C:\WINDOWS\system32\RealMediaSplitter.ax] [Gabest, 1, 0, 1, 1]
[C:\WINDOWS\system32\ffdshow.ax] [, 1.0.2.2028]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sohu.com Inc., 3, 0, 0, 0]
[C:\WINDOWS\system32\dllMergeDict.dll] [Sogou.com Inc., 3, 0, 0, 0]
[C:\Program Files\SogouInput\Plugin\SgImeWord.dll] [, 1, 0, 0, 31]
[PID: 3376][D:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CoralAssist.dll] [Coral Team, 5.0.0 build 20060829]
[D:\Program Files\Tencent\QQ\CoralQQ.dll] [Coral Team, 5.0 Build 20070309]
[D:\Program Files\Tencent\QQ\KQL.dll] [Coral Team, 5.0.1 build 20070429]
[D:\Program Files\Tencent\QQ\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\Program Files\Tencent\QQ\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\Program Files\Tencent\QQ\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0]
[D:\Program Files\Tencent\QQ\IPSearcher.dll] [, 1.0.0.4]
[D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQHelperDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [TENCENT, 7, 0, 225, 1651]
[D:\Program Files\Tencent\QQ\NoDisturbFilter.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\ConfigHotkey.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1]
[D:\Program Files\Tencent\QQ\RICHED20.dll] [Microsoft Corporation, 5.31.23.1218]
[D:\Program Files\Tencent\QQ\QQAPI.dll] [TENCENT, 7,0,225,1651]
[d:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\Program Files\Tencent\QQ\AutoReconnect.cqx] [Coral Team, 1.0.0]
[D:\Program Files\Tencent\QQ\LoginCtrl.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\LoginCtrlRes.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQRes.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\MailSummary.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQMainFrame.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\Tencent\QQ\CQQApplication.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\Program Files\Tencent\QQ\NewSkin.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\HostingMgr.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CameraDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CoralHotkey.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll] [TENCENT, 7,0,225,1651]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQAllInOne.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\SCCore.dll] [TENCENT, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\QQSpace.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\vbscript.dll] [Microsoft Corporation, 5.6.0.8825]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299]
[D:\Program Files\Tencent\QQ\QQGroupMng.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\UserDefinedHead.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQPlugin.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQCustomFace.dll] [N/A, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\Program Files\Tencent\QQ\QQPet.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\LongConnection.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\GroupConnection.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQAvatar.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QRingMng.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\ImageOle.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQLiveQMng.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\VqqModule.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\VqqAllInOne.dll] [Tencent, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\InPlus.dll] [Tencent, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\tencent-proto1.dll] [tencent, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\tencent-comlib.dll] [tencent, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\tencent-proto2.dll] [tencent, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\QQSceneMng.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQMagicFace.dll] [TENCENT, 7,0,225,1651]
[C:\WINDOWS\system32\SOGOUPY.IME] [Sohu.com Inc., 3, 0, 0, 0]
[C:\WINDOWS\system32\dllMergeDict.dll] [Sogou.com Inc., 3, 0, 0, 0]
[C:\Program Files\SogouInput\Plugin\SgImeWord.dll] [, 1, 0, 0, 31]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.304]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[D:\Program Files\Tencent\QQ\CommercesMng.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 300]
[D:\Program Files\Tencent\QQ\QQZip.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 92]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
[PID: 3936][D:\Program Files\Tencent\QQ\TIMPlatform.exe] [TENCENT, 7,0,225,1651]
[d:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 2808][D:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CoralAssist.dll] [Coral Team, 5.0.0 build 20060829]
[D:\Program Files\Tencent\QQ\CoralQQ.dll] [Coral Team, 5.0 Build 20070309]
[D:\Program Files\Tencent\QQ\KQL.dll] [Coral Team, 5.0.1 build 20070429]
[D:\Program Files\Tencent\QQ\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\Program Files\Tencent\QQ\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\Program Files\Tencent\QQ\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0]
[D:\Program Files\Tencent\QQ\IPSearcher.dll] [, 1.0.0.4]
[D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQHelperDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [TENCENT, 7, 0, 225, 1651]
[D:\Program Files\Tencent\QQ\NoDisturbFilter.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\ConfigHotkey.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1]
[D:\Program Files\Tencent\QQ\RICHED20.dll] [Microsoft Corporation, 5.31.23.1218]
[D:\Program Files\Tencent\QQ\QQAPI.dll] [TENCENT, 7,0,225,1651]
[d:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\Program Files\Tencent\QQ\AutoReconnect.cqx] [Coral Team, 1.0.0]
[D:\Program Files\Tencent\QQ\LoginCtrl.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\LoginCtrlRes.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQRes.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\MailSummary.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQMainFrame.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\Tencent\QQ\CQQApplication.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\Program Files\Tencent\QQ\NewSkin.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\HostingMgr.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CameraDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CoralHotkey.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll] [TENCENT, 7,0,225,1651]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQAllInOne.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\SCCore.dll] [TENCENT, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\QQSpace.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\vbscript.dll] [Microsoft Corporation, 5.6.0.8825]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299]
[D:\Program Files\Tencent\QQ\QQGroupMng.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\UserDefinedHead.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQPlugin.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\LongConnection.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQCustomFace.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQAvatar.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QRingMng.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQPet.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\CommercesMng.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 300]
[D:\Program Files\Tencent\QQ\QQSceneMng.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 92]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.304]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3664][D:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CoralAssist.dll] [Coral Team, 5.0.0 build 20060829]
[D:\Program Files\Tencent\QQ\CoralQQ.dll] [Coral Team, 5.0 Build 20070309]
[D:\Program Files\Tencent\QQ\KQL.dll] [Coral Team, 5.0.1 build 20070429]
[D:\Program Files\Tencent\QQ\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\Program Files\Tencent\QQ\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\Program Files\Tencent\QQ\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0]
[D:\Program Files\Tencent\QQ\IPSearcher.dll] [, 1.0.0.4]
[D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQHelperDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [TENCENT, 7, 0, 225, 1651]
[D:\Program Files\Tencent\QQ\NoDisturbFilter.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\ConfigHotkey.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1]
[D:\Program Files\Tencent\QQ\RICHED20.dll] [Microsoft Corporation, 5.31.23.1218]
[D:\Program Files\Tencent\QQ\QQAPI.dll] [TENCENT, 7,0,225,1651]
[d:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\Program Files\Tencent\QQ\AutoReconnect.cqx] [Coral Team, 1.0.0]
[D:\Program Files\Tencent\QQ\LoginCtrl.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\LoginCtrlRes.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQRes.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\MailSummary.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQMainFrame.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\Tencent\QQ\CQQApplication.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\Program Files\Tencent\QQ\NewSkin.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\HostingMgr.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CameraDll.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\CoralHotkey.cqx] [Coral Team, 1.0]
[D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll] [TENCENT, 7,0,225,1651]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQAllInOne.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\SCCore.dll] [TENCENT, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\QQSpace.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\vbscript.dll] [Microsoft Corporation, 5.6.0.8825]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299]
[D:\Program Files\Tencent\QQ\QQGroupMng.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\UserDefinedHead.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQPlugin.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQAvatar.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QRingMng.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\LongConnection.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQCustomFace.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\QQPet.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [N/A, ]
[D:\Program Files\Tencent\QQ\CommercesMng.dll] [TENCENT, 7,0,225,1651]
[D:\Program Files\Tencent\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 300]
[D:\Program Files\Tencent\QQ\QQSceneMng.dll] [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.304]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
[c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3632][C:\Documents and Settings\Administrator\桌面\sreng2\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ]
[C:\Program Files\Eset\pr_imon.dll] [N/A, ]
[C:\WINDOWS\system32\TcpIpDog0.dll] [N/A, ]
==================================
文件关联
.TXT Error. [C:\WINDOWS\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. ["hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
NOD32 protected [MSAFD Tcpip [TCP/IP]]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [MSAFD Tcpip [UDP/IP]]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [MSAFD Tcpip [RAW/IP]]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [RSVP UDP Service Provider]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [RSVP TCP Service Provider]
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
MSAFD Tcpip [TCP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [UDP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [RAW/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
RSVP UDP Service Provider
C:\WINDOWS\system32\TcpIpDogR0.dll(, N/A)
RSVP TCP Service Provider
C:\WINDOWS\system32\TcpIpDogR0.dll(, N/A)
NOD32
C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
N/A
==================================
API HOOK
RVA 错误： LoadLibraryA (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xEBBAAB25)
RVA 错误： LoadLibraryExA (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xEBBAAD67)
RVA 错误： LoadLibraryExW (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xEBBAAF0B)
RVA 错误： LoadLibraryW (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xEBBAAC49)
RVA 错误： GetProcAddress (危险等级: 高, 被下面模块所HOOK: Dest Addr: 0xEBBAAE8F)
==================================
隐藏进程
N/A
==================================不好意思，本来好了两天，不过不知道是上了哪个网站的原因，又这样了
在「我的电脑」上按右键，选择「属性」
进入「系统还原」，勾选「在所有驱动器上关闭系统还原」，按下「应用」，出现提示对话框时按「是」（病毒清理后请自己决定是否打开系统还原）
点此下载ATF Cleaner
执行后，勾选「全选」，按下「立刻清理」
根据SREng扫描日志请按照如下步骤，尝试删除和修复
1.建议使用XDelBox删除以下文件：(XDelBox下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择从剪贴板导入，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。
(如XDelBox提示文件不存在的，忽略即可)
c:\docume~1\admini~1\locals~1\temp\daso0.dll
c:\docume~1\admini~1\locals~1\temp\fyso0.dll
c:\docume~1\admini~1\locals~1\temp\jtso0.dll
c:\docume~1\admini~1\locals~1\temp\mhso0.dll
c:\docume~1\admini~1\locals~1\temp\qjso0.dll
c:\docume~1\admini~1\locals~1\temp\rxso0.dll
c:\docume~1\admini~1\locals~1\temp\tlso0.dll
c:\docume~1\admini~1\locals~1\temp\wdso0.dll
c:\docume~1\admini~1\locals~1\temp\wgso0.dll
c:\docume~1\admini~1\locals~1\temp\wlso0.dll
c:\docume~1\admini~1\locals~1\temp\wmso0.dll
c:\docume~1\admini~1\locals~1\temp\ztso0.dll
c:\program files\internet explorer\romdrivers.dll
c:\docume~1\admini~1\locals~1\temp\daso.exe
c:\docume~1\admini~1\locals~1\temp\tlso.exe
c:\docume~1\admini~1\locals~1\temp\wdso.exe
c:\docume~1\admini~1\locals~1\temp\rxso.exe
c:\docume~1\admini~1\locals~1\temp\qjso.exe
c:\docume~1\admini~1\locals~1\temp\wmso.exe
c:\docume~1\admini~1\locals~1\temp\wgso.exe
c:\docume~1\admini~1\locals~1\temp\wlso.exe
c:\docume~1\admini~1\locals~1\temp\jtso.exe
c:\docume~1\admini~1\locals~1\temp\fyso.exe
c:\docume~1\admini~1\locals~1\temp\mhso.exe
c:\docume~1\admini~1\locals~1\temp\ztso.exe
c:\docume~1\admini~1\locals~1\temp\woso.exe
2.删除重启后使用SREng修复下面各项：
启动项目 －－ 注册表之如下项删除：
[{0CD68AC9-FF63-3E61-626B-B663E62F6236}] <C:\Program Files\Internet Explorer\romdrivers.dll>
[dasa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso.exe>
[tlsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso.exe>
[wdsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso.exe>
[rxsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso.exe>
[qjsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso.exe>
[wmsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso.exe>
[wgsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso.exe>
[wlsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso.exe>
[jtsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso.exe>
[fysa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso.exe>
[mhsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso.exe>
[ztsa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso.exe>
[wosa] <C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\woso.exe>
系统恢复－－文件关联－－修复
.TXT Error. [C:\WINDOWS\notepad.exe %1]
.CHM Error. ["hh.exe" %1]
.INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
最后下载windows清理助手清理恶意软件以及自身杀软升级至最新，进行全盘杀毒
http://www.arswp.com/download/arswp/arswp.rar
打好系统补丁
在楼上的基础上建议修复
Winsock 提供者
MSAFD Tcpip [TCP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [UDP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [RAW/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
RSVP UDP Service Provider
C:\WINDOWS\system32\TcpIpDogR0.dll(, N/A)
RSVP TCP Service Provider
C:\WINDOWS\system32\TcpIpDogR0.dll(, N/A)
另建议卸载NOD32
杀毒软件装一个就好，别一个可以做备用，不要两个都开，会有反作用的
引用:
原帖由 cqqing1982 于 2007-6-5 21:40 发表
在楼上的基础上建议修复
Winsock 提供者
MSAFD Tcpip [TCP/IP]
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip
C:\WINDOWS\system32\TcpIpDog0.dll(, N/A)
MSAFD Tcpip [RAW/IP]
C ...
谢谢你们的建议了，弄弄看
标签：
证券/理财 股票 收盘 点评 空方 多方 下跌 11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
相关文章:
- [求助] 桌面图标上的字怎么是白色的背景？？
- [求助] 宽屏显示器该用什么播放器看电影？
- Adobe Photoshop CS3 Extended_简体中文绿色精简版 最小巧的精简PS cs3版本
- [求助] 请教有关迅雷的问题~~
- 文件列表制作者 V1.10绿色特别版
- [转帖] 中国黑客老大们的QQ号
- 听网页 V2007.1110 简体中文版
- Magic Swf2Avi (图像转换工具)v3.11 绿色特别版
- [06
- 方正阿帕比阅读软件:Apabi Reader 2.1绿色免费版
- Fox Movie Manager v1.00_一个电影收藏管理软件 绿色版
- 疯狂屏幕锁 V2.0
- [求助] cmwap
- Desktop Calendar Reminder 1.59.7_英文绿色特别版 小巧的桌面日历提醒软件
- Atrise Golden Section V3.0.1_英文绿色免费版 供网图像设计者使用图形工具
- [求助] 快速启动栏问题
- 锁键专家KeyLocker V1.03
- Web2Pic Pro V1.2.1｜保存整个Web页面｜绿色特别版
- 输入法(已解决)
- [转帖]【1月08日】★索馨(CLJFL)整理的免费和绿色软件更新★ !!!
文章评论
[以下网友留言只代表其个人观点，不代表中华网的观点或立场]