广告广告
  加入我的最爱 设为首页 风格修改
首页 首尾
 手机版   订阅   地图  繁体 
您是第 7938 个阅读者
 
发表文章 发表投票 回覆文章
  可列印版   加为IE收藏   收藏主题   上一主题 | 下一主题   
kang0110
数位造型
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x3
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片
推文 x0
[病毒蠕虫] 求救-如何删中毒档(gevsx.dll )
小弟的电脑每次开机后

PC-CILLIN都会扫到1个档案,即时防护如下:
已采取的中毒处理行动: 无法隔离档案。确认不再需要该档案之后,请手动将它删除。
受感染档案: C:\WINDOWS\system32\wbem\gevsx.dll
病毒或恶意程式名称: TROJ_QQHELPER.VD

小弟尝试用手动删除却出现现息gevsx:存取被拒绝
[kang0110] 鼻子一酸,开始叭嗒叭嗒掉眼泪了
动作


请问怎么解决

请问各位前辈帮帮小弟!


献花 x0 回到顶端 [楼 主] From:台湾 | Posted:2007-03-22 01:40 |
彗星风采 手机
个人头像
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x24
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片

应该是被注入到系统档了..请参考置顶文章跑sreng报表贴上来判读表情

ps:建议跑报表时关掉一些不必要的程式..这样判读比较不会那么累表情


献花 x0 回到顶端 [1 楼] From:台湾中华电信 | Posted:2007-03-22 14:02 |
kang0110
数位造型
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x3
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片

感谢"彗星风采 "大大指教,已使用SREng扫描存档,不过内容实在不暸,可否再请判读(毒)专家们帮小弟解析一番,最重要的是(gevsx.dll )应该用什么扫毒程式或是方式才可删除!? 表情


献花 x0 回到顶端 [2 楼] From:台湾 | Posted:2007-03-24 11:17 |
kang0110
数位造型
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x3
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片

感谢"彗星风采 "大大指教,已使用SREng扫描存档,不过内容实在不暸,可否再请判读(毒)专家们帮小弟解析一番,最重要的是(gevsx.dll )应该用什么扫毒程式或是方式才可删除!? 表情


献花 x0 回到顶端 [3 楼] From:台湾 | Posted:2007-03-24 11:19 |
kang0110
数位造型
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x3
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片

<版主抱歉先,小弟因附加档案时格式不符,所以....非特意灌水,如可能请将2.3楼回覆删除> 表情
感谢"彗星风采 "大大指教,已使用SREng扫描存档,不过内容实在不暸,可否再请判读(毒)专家们帮小弟解析一番,最重要的是(gevsx.dll )应该用什么扫毒程式或是方式才可删除!? 表情
2007-03-24,02:19:57

System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZ....com)

Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed

Follow item(s) have been choosed:
  All Boot Items (Including Registry, Startup Folders, Services and so on)
  Browser Add-ons
  Runing Processes (Including process model information)
  File Associations
  Winsock Provider
  Autorun.Inf
  HOSTS File


Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
  <Power2GoExpress><> [N/A]
  <Spyware Doctor><"C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE" /Q> [PC Tools Research Pty Ltd]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
  <QtPmBenQ><C:\PROGRA~1\BENQMA~1\QtPmBenQ.EXE> [Dritek System Inc.]
  <AGRSMMSG><AGRSMMSG.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  <SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [(Verified)Microsoft Windows Publisher]
  <MSNDreyePlugin><C:\Program Files\Inventec\Dreye\DreyeMT\msnplugin.exe /h> []
  <CJIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync> [(Verified)Microsoft Corporation]
  <PHIMETIPSYNC><C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync> [(Verified)Microsoft Corporation]
  <pccguide.exe><"C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe"> [Trend Micro Incorporated.]
  <RemoteControl><"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"> [Cyberlink Corp.]
  <LanguageShortcut><"C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"> []
  <Adobe Photo Downloader><"C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"> [Adobe Systems Incorporated]
  <PinnacleDriverCheck><C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg> []
  <Picasa Media Detector><C:\Program Files\Picasa2\PicasaMediaDetector.exe> [Google Inc.]
  <NvCplDaemon><RUNDLL32.EXE NvQTwk,NvCplDaemon initialize> [N/A]
  <nwiz><nwiz.exe /install> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
  <MMTray><"C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"> [Musicmatch, Inc.]
  <mmtask><"C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"> [Musicmatch Inc.]
  <Acrobat Assistant 8.0><"C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"> [(Verified)"Adobe Systems, Incorporated"]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
  <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  <{93994DE8-8239-4655-B1D1-5F4E91300429}><C:\PROGRA~1\DVDIDL~1\DVDShell.dll> [Fengtao Software Inc.]

==================================
Startup Folders
[22M WLAN Adapter]
<C:\Documents and Settings\All Users\「开始」功能表\程式集\启动\22M WLAN Adapter.lnk --> C:\PROGRA~1\22MWLA~1\WLANMON.exe []><N>
[Adobe Acrobat Speed Launcher]
<C:\Documents and Settings\All Users\「开始」功能表\程式集\启动\Adobe Acrobat Speed Launcher.lnk --> C:\WINDOWS\Installer\{AC76BA86-1028-0000-7760-000000000003}\_SC_Acrobat.exe [N/A]><N>
[Adobe Reader Synchronizer]
<C:\Documents and Settings\All Users\「开始」功能表\程式集\启动\Adobe Reader Synchronizer.lnk --> C:\PROGRA~1\Adobe\ACROBA~2.0\Acrobat\ADOBEC~1.EXE []><N>

==================================
Services
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
<C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[FLEXnet Licensing Service / FLEXnet Licensing Service][Running/Manual Start]
<"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"><Macrovision Europe Ltd.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[MSSQL$SONY_MEDIAMGR / MSSQL$SONY_MEDIAMGR][Stopped/Manual Start]
<><N/A>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
<C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[NVIDIA Driver Helper Service / NVSvc][Running/Auto Start]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Trend Micro Central Control Component / PcCtlCom][Running/Auto Start]
<C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe><Trend Micro Incorporated.>
[PDEngine / PDEngine][Stopped/Manual Start]
<"C:\Program Files\Raxco\PerfectDisk\PDEngine.exe"><Raxco Software, Inc.>
[PDScheduler / PDSched][Running/Auto Start]
<"C:\Program Files\Raxco\PerfectDisk\PDSched.exe"><Raxco Software, Inc.>
[Private Folder Service / prfldsvc][Running/Auto Start]
<C:\Program Files\Microsoft Private Folder\PrfldSvc.exe><N/A>
[Cyberlink RichVideo Service(CRVS) / RichVideo][Running/Auto Start]
<"C:\Program Files\CyberLink\Shared files\RichVideo.exe"><>
[PC Tools Spyware Doctor / SDhelper][Running/Auto Start]
<C:\Program Files\Spyware Doctor\sdhelp.exe><PC Tools Research Pty Ltd>
[SQLAgent$SONY_MEDIAMGR / SQLAgent$SONY_MEDIAMGR][Stopped/Manual Start]
<><N/A>
[StarWind iSCSI Service / StarWindService][Running/Auto Start]
<C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe><Rocket Division Software>
[Trend Micro Real-time Service / Tmntsrv][Running/Auto Start]
<C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe><Trend Micro Incorporated.>
[Trend Micro Personal Firewall / TmPfw][Running/Auto Start]
<C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe><Trend Micro Inc.>
[Trend Micro Proxy Service / tmproxy][Running/Auto Start]
<C:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe><Trend Micro Inc.>
[Viewpoint Manager Service / Viewpoint Manager Service][Running/Auto Start]
<"C:\Program Files\Viewpoint\Common\ViewpointService.exe"><Viewpoint Corporation>
[Registry Protector / WIDETS][Running/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL2000.EXE C:\WINDOWS\SYSTEM32\WBEM\GEVSX.DLL,Export 1087><Microsoft Corporation>

==================================
Drivers
[D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB) / A3AB][Stopped/Manual Start]
<system32\DRIVERS\A3AB.sys><D-Link Corporation>
[acpidisk / acpidisk][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\acpidisk.sys><N/A>
[aeaudio / aeaudio][Running/Manual Start]
<system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[Agere Systems Soft Modem / AgereSoftModem][Running/Manual Start]
<system32\DRIVERS\AGRSM.sys><Agere Systems>
[ALi Audio Accelerator WDM driver / aliadwdm][Stopped/Manual Start]
<system32\drivers\ac97ali.sys><Acer Laboratories Inc.>
[ALi AGP Bus Filter Driver / ALiAGP][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\ALiAGP.sys><Acer Laboratories Inc.>
[AliIde / AliIde][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\aliide.sys><Acer Laboratories Inc.>
[ALi Infrared Device Driver / ALiIRDA][Running/Manual Start]
<system32\DRIVERS\alifir.sys><Acer Laboratories Inc.>
[ASAPIW2K / ASAPIW2K][Running/Manual Start]
<system32\drivers\ASAPIW2k.sys><VOB Computersysteme GmbH>
[Dritek HotKey Keyboard Filter Driver / DKbFltr][Running/Manual Start]
<System32\Drivers\DKbFltr.sys><Dritek System Inc.>
[Egate / Egate][Running/Manual Start]
<system32\drivers\egate.sys><SchlumbergerSema>
[Egatebus / Egatebus][Running/Manual Start]
<system32\drivers\egatebus.sys><SchlumbergerSema>
[Egatecard / Egatecard][Stopped/Manual Start]
<System32\Drivers\EGateRaw.sys><SchlumbergerSema>
[NETGEAR FA330/FA312/FA311 Fast Ethernet Adapter Driver / FA312][Running/Manual Start]
<system32\DRIVERS\FA312nd5.sys><NETGEAR Corp.>
[File Security Kernel Anti-Spyware Driver / ikhfile][Running/System Start]
<system32\drivers\ikhfile.sys><PCTools Research Pty Ltd.>
[Kernel Anti-Spyware Driver / ikhlayer][Running/System Start]
<system32\drivers\ikhlayer.sys><PCTools Research Pty Ltd.>
[Pinnacle Marvin Bus / MarvinBus][Running/Manual Start]
<system32\DRIVERS\MarvinBus.sys><Pinnacle Systems GmbH>
[msqmx / msqmx][Stopped/Boot Start]
<\SystemRoot\""><N/A>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[PCLEPCI / PCLEPCI][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\pclepci.sys><Pinnacle Systems GmbH>
[VSO Software pcouffin / pcouffin][Running/Manual Start]
<System32\Drivers\pcouffin.sys><VSO Software>
[Padus ASPI Shell / pfc][Running/Manual Start]
<system32\drivers\pfc.sys><Padus, Inc.>
[Prvflder / Prvflder][Running/Auto Start]
<system32\DRIVERS\prvflder.sys><Windows (R) 2000 DDK provider>
[直接平行连接埠连结驱动程式 / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
<\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
[Prolific Serial port driver / Ser2pl][Stopped/Manual Start]
<system32\DRIVERS\ser2pl.sys><Prolific Technology Inc.>
[smwdm / smwdm][Running/Manual Start]
<system32\drivers\smwdm.sys><Analog Devices, Inc.>
[sptd / sptd][Running/Boot Start]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[Synaptics TouchPad Driver / SynTP][Running/Manual Start]
<system32\DRIVERS\SynTP.sys><Synaptics, Inc.>
[22M WLAN Adapter / TIACXLN][Stopped/Manual Start]
<system32\DRIVERS\tiacxln.sys><>
[Tmfilter / Tmfilter][Running/Auto Start]
<system32\drivers\TmXPFlt.sys><Trend Micro Inc.>
[Tmpreflt / Tmpreflt][Running/Auto Start]
<system32\drivers\Tmpreflt.sys><Trend Micro Inc.>
[Trend Micro TDI Driver / tmtdi][Running/System Start]
<\SystemRoot\System32\Drivers\tmtdi.sys><Trend Micro Inc.>
[Common Firewall Driver / tm_cfw][Running/Auto Start]
<\SystemRoot\System32\Drivers\tm_cfw.sys><Trend Micro Inc.>
[Vsapint / Vsapint][Running/Auto Start]
<system32\drivers\VsapiNT.sys><Trend Micro Inc.>
[VIA USB Host Controller Lower Filter / vulfnths][Stopped/Manual Start]
<\SystemRoot\System32\Drivers\vulfnth.sys><VIA Technologies, Inc.>
[VIA USB Roothub Lower Filter / vulfntrs][Running/Manual Start]
<\SystemRoot\System32\Drivers\vulfntr.sys><VIA Technologies, Inc.>
[vxyb / vxybm][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\vxybm.sys><N/A>
[CO_Mon / CO_Mon][Running/Manual Start]
<\??\C:\WINDOWS\system32\Drivers\CO_Mon.sys><N/A>

==================================
Browser Add-ons
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Info cache]
{385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(?州)科技有限公司>
[PCTools Site Guard]
{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} <C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll, PC Tools>
[SnapFlash Class]
{A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E} <C:\Program Files\Common Files\justDo\Jd2002.dll, justDo Software>
[Adobe PDF Conversion Toolbar Helper]
{AE7CD045-E861-484f-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[PCTools Browser Monitor]
{B56A7D7D-6927-48C8-A975-17DF180C71AC} <C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll, PC Tools>
[NTIECatcher Class]
{C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, Xi>
[PCTools Browser Monitor]
{2D663D1A-8670-49D9-A1A5-4C56B4E14E84} <C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll, PC Tools>
[Flash Catcher]
{90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} <, N/A>
[参考资料(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[D.S.Lite]
{F8475519-8412-4D40-A46E-692D9D04DF7F} <D:\DSLite\DSLite.exe, watermonster.org>
[ALiBaBar]
{0A1375E1-56C2-11D6-8E45-8933A0FB5235} <C:\PROGRA~1\ALiBaBar\ALiBaBar.dll, Alfred, C. S. Li>
[Dr.eye WebPage Translation]
{92B255FE-94E2-4BCA-958D-3926CE38913F} <C:\Program Files\Inventec\Dreye\DreyeMT\DreyeIEBar.dll, >
[HostranBar]
{88F2B391-8D09-4c0e-9824-5ECD0F382f66} <C:\WINDOWS\Hostran\HostranBar.dll, >
[Adobe PDF]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[MetaStreamCtl Class]
{03F998B2-0E00-11D3-A498-00104B6EB52E} <C:\Program Files\Viewpoint\Viewpoint Media Player\AxMetaStream.dll, Viewpoint Corporation>
[CKAVWebScan Object]
{0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} <C:\WINDOWS\system32\Kaspersky Lab\Kaspersky On-line Scanner\kavwebscan.dll, Kaspersky Lab>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <, N/A>
[ewidoOnlineScan Control]
{193C772A-87BE-4B19-A7BB-445B226FE9A1} <C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL, Anti-Malware Development a.s.>
[Symantec AntiVirus scanner]
{2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} <C:\WINDOWS\Downloaded Program Files\avsniff.dll, Symantec Corporation>
[Office Update Installation Engine]
{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} <C:\WINDOWS\opuc.dll, Microsoft Corporation>
[Symantec RuFSI Utility Class]
{644E432F-49D3-41A1-8DD5-E099162EEEC5} <C:\WINDOWS\Downloaded Program Files\rufsi.dll, Symantec Corporation>
[SFC Class]
{8F0BA653-612C-4060-858A-6B561E32B217} <C:\WINDOWS\DOWNLO~1\ESECUR~1.DLL, eSECURE Technology, Inc.>
[C2S Class]
{A1B4B2EC-7F3F-4562-99ED-9F0CADE86D67} <C:\WINDOWS\DOWNLO~1\ESECUR~3.DLL, eSecure Corporation>
[PFX Class]
{ADEA1AED-5B42-4E66-8CD0-7E68F4452E81} <C:\WINDOWS\DOWNLO~1\ESECUR~2.DLL, eSECURE Technology, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[QuickTime Object]
{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} <C:\WINDOWS\system32\QTPlugin.ocx, Apple Computer, Inc.>
[MetaStreamCtl Class]
{03F998B2-0E00-11D3-A498-00104B6EB52E} <C:\Program Files\Viewpoint\Viewpoint Media Player\AxMetaStream.dll, Viewpoint Corporation>
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Web Browser Applet Control]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[ALiBaBar]
{0A1375E1-56C2-11D6-8E45-8933A0FB5235} <C:\PROGRA~1\ALiBaBar\ALiBaBar.dll, Alfred, C. S. Li>
[CEnroll Class]
{127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, Microsoft Corporation>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <, N/A>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[Info cache]
{385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(?州)科技有限公司>
[Office Update Installation Engine]
{3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} <C:\WINDOWS\opuc.dll, Microsoft Corporation>
[Adobe PDF]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[PCTools Site Guard]
{5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} <C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll, PC Tools>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web Browser]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[HostranBar]
{88F2B391-8D09-4C0E-9824-5ECD0F382F66} <C:\WINDOWS\Hostran\HostranBar.dll, >
[SFC Class]
{8F0BA653-612C-4060-858A-6B561E32B217} <C:\WINDOWS\DOWNLO~1\ESECUR~1.DLL, eSECURE Technology, Inc.>
[Catcher Class]
{90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} <C:\Program Files\Common Files\justDo\IECatcher.dll, justDo Software>
[Dr.eye WebPage Translation]
{92B255FE-94E2-4BCA-958D-3926CE38913F} <C:\Program Files\Inventec\Dreye\DreyeMT\DreyeIEBar.dll, >
[C2S Class]
{A1B4B2EC-7F3F-4562-99ED-9F0CADE86D67} <C:\WINDOWS\DOWNLO~1\ESECUR~3.DLL, eSecure Corporation>
[SnapFlash Class]
{A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E} <C:\Program Files\Common Files\justDo\Jd2002.dll, justDo Software>
[RMGetLicense Class]
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation>
[PFX Class]
{ADEA1AED-5B42-4E66-8CD0-7E68F4452E81} <C:\WINDOWS\DOWNLO~1\ESECUR~2.DLL, eSECURE Technology, Inc.>
[Adobe PDF Conversion Toolbar Helper]
{AE7CD045-E861-484F-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[PCTools Browser Monitor]
{B56A7D7D-6927-48C8-A975-17DF180C71AC} <C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll, PC Tools>
[NTIECatcher Class]
{C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, Xi>
[Adobe PDF Reader]
{CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll, Adobe Systems, Inc.>
[AUDIO__MID Moniker Class]
{CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__MP3 Moniker Class]
{CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
{CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Foxy 下载]
<res://C:\Program Files\Foxy\Foxy.exe/download.htm, N/A>
[Foxy 搜寻]
<res://C:\Program Files\Foxy\Foxy.exe/search.htm, N/A>
[Save Flash with Flash Catcher]
<res://C:\Program Files\Common Files\justDo\IECatcher.DLL/FlashCatcher.htm, N/A>
[下载编码内容(&D.S.Lite)]
<D:\DSLite\dl_text.html, N/A>
[下载编码档案内容(&D.S.Lite)]
<D:\DSLite\dl_url.html, N/A>
[使用影音传送带下载]
<C:\Program Files\Xi\NetTransport 2\NTAddLink.html, N/A>
[使用影音传送带下载全部连结]
<C:\Program Files\Xi\NetTransport 2\NTAddList.html, N/A>
[剪贴簿文字: 简 > 繁]
<res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/ClipToTrad, N/A>
[剪贴簿文字: 繁 > 简]
<res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/ClipToSim, N/A>
[加到广告黑名单]
<C:\Program Files\Avant Browser\AddToADBlackList.htm, N/A>
[汇出至 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[在新的 Avant Browser 开启]
<C:\Program Files\Avant Browser\OpenInNewBrowser.htm, N/A>
[搜寻]
<C:\Program Files\Avant Browser\Search.htm, N/A>
[网页: [简体] 显示]
<res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/PageToSim, N/A>
[网页: [繁体] 显示]
<res://C:\Program Files\ALiBaBar\ALiBaBar.dll/RT_HTML/PageToTrad, N/A>
[转换为 Adobe PDF]
<res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[转换连结目标到现有 PDF]
<res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[转换连结目标为 Adobe PDF]
<res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[转换选定的连结到现有 PDF]
<res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html, N/A>
[转换选定的连结为 Adobe PDF]
<res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html, N/A>
[转换选择内容到现有 PDF]
<res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[转换选择内容为 Adobe PDF]
<res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[开启此网页中所有的连结...]
<C:\Program Files\Avant Browser\OpenAllLinks.htm, N/A>
[阻挡所有来自这个伺服器的图片]
<C:\Program Files\Avant Browser\AddAllToADBlackList.htm, N/A>
[附加至现有 PDF]
<res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[高亮度标记]
<C:\Program Files\Avant Browser\Highlight.htm, N/A>

==================================
Running Processes
[PID: 600][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 660][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 1728][C:\WINDOWS\EXPLORER.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\PROGRA~1\DVDIDL~1\DVDShell.dll] [Fengtao Software Inc., 5, 5, 0, 6]
  [C:\WINDOWS\system32\jstkq.dll] [N/A, ]
  [C:\Program Files\Microsoft Private Folder\ShellExt.dll] [Microsoft Corporation, 1.0.1495.0]
  [C:\WINDOWS\system32\PFLib.dll] [Microsoft Corporation, 1.0.1495.0]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
  [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 8.0.0.0]
  [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHT] [Adobe Systems, Inc., 8.0.0.0]
  [C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.13.10.3160]
  [C:\Program Files\Adobe\Acrobat 8.0\Acrobat Elements\ContextMenu.cht] [Adobe Systems Inc., 8.0.5.2006102200\0]
  [C:\WINDOWS\system32\msdmo.dll] [, ]
  [C:\WINDOWS\system32\DVobSub.ax] [Gabest, 2, 0, 23, 0]
  [C:\WINDOWS\system32\vobsub.dll] [Gabest, 2, 0, 23, 0]
  [C:\PROGRA~1\DVDIDL~1\dvdsys.dll] [Fengtao Software Inc., 5, 9, 7, 62]
  [C:\Program Files\Trend Micro\Internet Security 2006\Tmdshell.dll] [Trend Micro Incorporated., 14.00.0.1429]
  [C:\Program Files\WinRAR\rarext.dll] [N/A, ]
  [C:\Program Files\Adobe\Acrobat 8.0\Acrobat Elements\ContextMenu.dll] [Adobe Systems Inc., 8.0.5.2006102200\0]
  [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200]
  [C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll] [Xi, 1.91.12]
  [C:\Program Files\Xi\NetTransport 2\MFC42.DLL] [Microsoft Corporation, 6.00.9782.0]
  [C:\Documents and Settings\Administrator\Application Data\Foxy\LinkMaker.dll] [, 1, 1, 0, 0]
[PID: 184][C:\PROGRA~1\BENQMA~1\QtPmBenQ.EXE] [Dritek System Inc., 1,2,0,1]
  [C:\PROGRA~1\BENQMA~1\ComFnUtl.dll] [Dritek System Inc., 1.00]
  [C:\PROGRA~1\BENQMA~1\Wnd2File.dll] [Dritek System Inc., 3.00]
  [C:\PROGRA~1\BENQMA~1\SzUPFUtl.dll] [Dritek System Inc., 1.00]
  [C:\PROGRA~1\BENQMA~1\OSDUtl.dll] [Dritek System Inc., 1.00]
  [C:\PROGRA~1\BENQMA~1\RgnMaker.dll] [Dritek System Inc., 12.07.1999 ( VC60 )]
  [C:\PROGRA~1\BENQMA~1\CDRomUtl.dll] [Dritek System Inc., 1.00]
  [C:\PROGRA~1\BENQMA~1\MixerUtl.dll] [Dritek System Inc., 1.00]
  [C:\PROGRA~1\BENQMA~1\LgKCUtl.dll] [Dritek System Inc., 2, 0, 1, 1]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 232][C:\WINDOWS\AGRSMMSG.exe] [Agere Systems, 2.1.18 2.1.18 09/11/2002 17:23:56]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 240][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 252][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\WINDOWS\system32\SynTPAPI.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 260][C:\Program Files\Inventec\Dreye\DreyeMT\msnplugin.exe] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 296][C:\Program Files\Trend Micro\Internet Security 2006\pccguide.exe] [Trend Micro Incorporated., 14.00.0.1429]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Trend Micro\Internet Security 2006\tmdbg.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlPS.dll] [Trend Micro Incorporated., 14.00.0.1429]
  [C:\Program Files\Trend Micro\Internet Security 2006\TmProxy.dll] [Trend Micro Inc., 2.0.0.1078]
  [C:\PROGRA~1\TRENDM~1\INTERN~1\PccAltUi.dll] [Trend Micro Incorporated., 14.00.0.1429]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 316][C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe] [Cyberlink Corp., 5.00.0910]
  [C:\Program Files\CyberLink\PowerDVD\CLRCEngine3.dll] [CyberLink Corp., 4, 5, 0, 1711]
  [C:\Program Files\CyberLink\PowerDVD\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 464][C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe] [Adobe Systems Incorporated, 3.0.0.52115]
  [C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdboot.dll] [Adobe Systems Incorporated, 3.0.0.52115]
  [C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
  [C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 484][C:\Program Files\Picasa2\PicasaMediaDetector.exe] [Google Inc., 2.1.0]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 532][C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe] [Musicmatch, Inc., 9.00.5100]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\CoreDll.dll] [N/A, ]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMVCP70.dll] [Sample Corporation, 7.00.0000]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMVCR70.dll] [Sample Corporation, 7.00.0000]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\Enforce.dll] [Musicmatch, Inc., 9.00.5100]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMReg.dll] [Musicmatch, Inc., 9.00.5100]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\SkinnedCtrls.dll] [Musicmatch, Inc., 9.00.5100]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMC70U.DLL] [Microsoft Corporation, 7.00.9466.0]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\TrackUtils.dll] [N/A, ]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\FileAssoc.dll] [Musicmatch, Inc., 9.00.5100]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 540][C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe] [Musicmatch Inc., 9.0.0.1]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMVCP70.dll] [Sample Corporation, 7.00.0000]
  [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMVCR70.dll] [Sample Corporation, 7.00.0000]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 628][C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe] [Adobe Systems Inc., 8.0.0.2006102200]
  [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.cht] [Adobe Systems Inc., 8.0.0.0]
  [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\FNP_Act_Installer.dll] [Macrovision Europe Ltd., 11.03.005]
  [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\asneu.dll] [Adobe Systems Inc., 1, 6, 0, 8]
  [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\adobe_personalization.dll] [Adobe Systems Incorporated, 2,0,0,37]
  [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\adobe_epic.dll] [Adobe Systems Incorporated, 2,0,0,37]
  [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\adobe_pcd.dll] [Adobe Systems Incorporated, 1,0,0]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 816][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 1456][C:\PROGRAM FILES\SPYWARE DOCTOR\SWDOCTOR.EXE] [PC Tools Research Pty Ltd, 4.0.0.2603]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\rtl70.bpl] [Borland Software Corporation, 7.0.4.453]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\vcl70.bpl] [Borland Software Corporation, 7.0.4.453]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\ishelp.dll] [PC Tools Research Pty Ltd, 3.6.1.2041]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\ikhtool.dll] [PCTools Research Pty Ltd., 3, 6, 1, 2006]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\chilkatxml.dll] [Chilkat Software, Inc., 4, 1, 0, 2]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\actstartup.dll] [PC Tools Research Pty Ltd, 3.6.1.2118]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\BAScanner.dll] [PC Tools, 3.6.0.2072]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\bhoscanner.dll] [PC Tools, 3.6.0.2047]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\browserscanner.dll] [PC Tools, 3.6.0.2056]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\diskscanner.dll] [PC Tools, 3.6.0.2091]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\exploitguard.dll] [PC Tools, 3.6.0.2004]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\genscanner.dll] [PC Tools Research Pty Ltd, 3.6.0.1005]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\hostsscanner.dll] [PC Tools, 3.6.0.2041]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\iemonitor.dll] [PC Tools, 3.6.0.2286]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\iesdpb.dll] [PC Tools, 3.6.0.2283]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\iesdsg.dll] [PC Tools, 3.6.0.2071]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\Immunizer.dll] [PC Tools Research Pty Ltd, 3.6.0.1060]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\itoollib.dll] [, 3.6.0.1049]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\keyloggerguard.dll] [PC Tools, 3.6.0.2041]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\lspscanner.dll] [, 3.6.0.2053]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\memory.dll] [PC Tools, 3.6.0.2007]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\networkguard.dll] [PCTools Research Pty Ltd, 3.6.0.2031]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\popupblocker.dll] [PC Tools, 3.6.0.2283]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\processguard.dll] [PC Tools, 3.6.0.2075]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\pscanner.dll] [PC Tools, 3.6.0.1047]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\PWindow.dll] [PC Tools Research Pty Ltd, 3.6.0.1020]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\regscanner.dll] [PC Tools Research Pty Ltd, 3.6.0.1030]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\scheduler.dll] [PC Tools, 3.6.0.2045]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\sdn.dll] [PC Tools, 3.6.0.1022]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\siteguard.dll] [PC Tools, 3.6.0.2071]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\StartupScanner.dll] [PC Tools Research Pty Ltd, 3.6.0.2010]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 1720][C:\Program Files\22M WLAN Adapter\WLANMON.exe] [, 3, 0, 0, 0]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
[PID: 3968][C:\PROGRAM FILES\AVANT BROWSER\AVANT.EXE] [, 11.0.0.0]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
  [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL] [Microsoft Corporation, 5.10.2927.0]
  [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 1.1.4322.2032]
  [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll] [Microsoft Corporation, 1.1.4322.573]
  [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
  [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll] [Microsoft Corporation, 1.1.4322.2032]
  [C:\WINDOWS\system32\javacypt.dll] [Microsoft Corporation, 5.00.3810]
  [C:\WINDOWS\system32\msjava.dll] [Microsoft Corporation, 5.00.3810]
  [C:\WINDOWS\system32\VMHELPER.DLL] [Microsoft Corporation, 5.00.3810]
  [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
  [C:\WINDOWS\system32\Kaspersky Lab\Kaspersky On-line Scanner\kavwebscan.dll] [Kaspersky Lab, 5.0.78.0]
  [C:\WINDOWS\system32\Kaspersky Lab\Kaspersky On-line Scanner\kavss.dll] [Kaspersky Lab., 4, 0, 2, 28]
  [C:\Program Files\Microsoft Private Folder\ShellExt.dll] [Microsoft Corporation, 1.0.1495.0]
  [C:\WINDOWS\system32\PFLib.dll] [Microsoft Corporation, 1.0.1495.0]
  [C:\PROGRA~1\DVDIDL~1\dvdsys.dll] [Fengtao Software Inc., 5, 9, 7, 62]
[PID: 3616][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
[PID: 5896][C:\PROGRA~1\DVDIDL~1\DVDIdlePro.exe] [Fengtao Software Inc., 5, 9, 7, 62]
  [C:\PROGRA~1\DVDIDL~1\dvdsys.dll] [Fengtao Software Inc., 5, 9, 7, 62]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]
[PID: 5484][D:\扫毒\SRENG2\SRENG.EXE] [Smallfrogs Studio, 2.4.12.806]
  [C:\Program Files\Spyware Doctor\tools\swpg.dat] [PC Tools, 3.6.0.2080]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\eg.dat] [, 3.6.0.1003]
  [C:\PROGRAM FILES\SPYWARE DOCTOR\Tools\klg.dat] [PC Tools, 3.6.0.2040]
  [C:\PROGRA~1\DVDIDL~1\dvdsys.dll] [Fengtao Software Inc., 5, 9, 7, 62]
  [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.2.0 15Nov02]
  [C:\Program Files\Inventec\Dreye\DreyeMT\msnhook.dll] [, 1, 0, 0, 1]
  [C:\Program Files\Inventec\Dreye\DreyeMT\DreyeMT.dll] [N/A, ]

==================================
File Associations
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider
N/A

==================================
Autorun.Inf
N/A

==================================
HOSTS File
127.0.0.1     localhost

==================================
API HOOK
Entrypoint Error: FreeLibrary (Dangerous Level: Generic, Hooked by Module: Dest Addr: 0x5F00002D)

==================================
Hidden Process
N/A

==================================


[/CODE]


献花 x0 回到顶端 [4 楼] From:台湾 | Posted:2007-03-24 13:09 |
彗星风采 手机
个人头像
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x24
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片

看来楼主您所中的还不只一种.

问题如下...
Services
[Registry Protector / WIDETS][Running/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL2000.EXE
C:\WINDOWS\SYSTEM32\WBEM\GEVSX.DLL,Export 1087><Microsoft Corporation>

Drivers
[acpidisk / acpidisk][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\acpidisk.sys><N/A>
[vxyb / vxybm][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\vxybm.sys><N/A>

Browser Add-ons
[Info cache]
{385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(?州)科技有限公司>

Running Processes
[C:\WINDOWS\system32\jstkq.dll] [N/A, ]

首先楼主要下载的工具如下..
新版的SREng--http://www.kztechs.com/sreng/download
Icesword冰刃--http://www.ttian.net/website/2005/0829/391.html(因为中文的版本会出现乱码.所以请下载Icesword 1.20英文版)
关闭系统还原.清除所有IE暂存档.进入安全模式..
在执行删除之前强烈建议楼主先备份.等删除完确定问题解决再将备份资料删除
启动SREng主程式.切换至Boot Items分页中的Services中的Win32 Services选项.找到
[Registry Protector / WIDETS][Running/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL2000.EXE
C:\WINDOWS\SYSTEM32\WBEM\GEVSX.DLL,Export 1087><Microsoft Corporation>
勾选Delet services.再按Set.按下才是删除.
接着再切换至Boot Items分页中的Services中Drivers选项.找到
[acpidisk / acpidisk][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\acpidisk.sys><N/A>
[vxyb / vxybm][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\vxybm.sys><N/A>
操作方法与Services一样
切换至System Repair分页中的Browser Add-ons选项.找到
[Info cache]
{385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(?州)科技有限公司>
点选Delete Selected.按下删除
启动ICEseord程式.切到File模式.依路径找到C:\WINDOWS\system32\jstkq.dll.
点选右键 选择Force Delete删除.

最后提醒一点.如果楼主问题仍未解决.请再用新版的SREng报表再贴一次.
记得点选Smart Scan时左下角的Verify前面的空格一定要勾选.
..........记得....产生报表之前记得关闭一些不必要的程式.这样在判断报表上比较方便 表情


[ 此文章被彗星风采在2007-03-25 23:56重新编辑 ]


献花 x0 回到顶端 [5 楼] From:台湾中华电信HINET | Posted:2007-03-25 22:47 |
kang0110
数位造型
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x3
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片

Oh! My God!中毒如此深啊!感谢"彗星风采"大大如此用心替小弟我判毒并提供解毒秘方,待小弟我依解毒程序进行后,康复结果后报!在此,仍先感谢"彗星风采"大大的相助,感谢!感谢!再感谢! 表情


献花 x0 回到顶端 [6 楼] From:台湾 | Posted:2007-03-26 00:43 |
kang0110
数位造型
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x3
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片

不错喔!目前PC-cillin不再出现即时防护讯息了,感觉好像康复啰!果真是智"彗星"喔! 表情


献花 x0 回到顶端 [7 楼] From:台湾 | Posted:2007-03-30 00:09 |
彗星风采 手机
个人头像
个人文章 个人相簿 个人日记 个人地图
小人物
级别: 小人物 该用户目前不上站
推文 x0 鲜花 x24
分享: 转寄此文章 Facebook Plurk Twitter 复制连结到剪贴簿 转换为繁体 转换为简体 载入图片

恭喜恭喜喔^^ 表情

顺便提醒一点..如果楼主问题已解决的话..请将标题改为已解决..方便版大upside管理喔 表情


[ 此文章被彗星风采在2007-03-30 11:03重新编辑 ]


献花 x0 回到顶端 [8 楼] From:台湾中华电信 | Posted:2007-03-30 09:59 |

首页  发表文章 发表投票 回覆文章
Powered by PHPWind v1.3.6
Copyright © 2003-04 PHPWind
Processed in 0.023072 second(s),query:16 Gzip disabled
本站由 瀛睿律师事务所 担任常年法律顾问 | 免责声明 | 本网站已依台湾网站内容分级规定处理 | 连络我们 | 访客留言