我的进程为什么会有2个 IEXPLORE.EXE(都是大写)

帮帮忙``我怀疑是中灰鸽子了``

高手99我

我有一个大写的IEXPLORE.EXE
一个小写的explore.exe
用户名都是本机名,算有问题不?

有没有装杀毒软件呢

中病毒的可能性大.
下个灰鸽子专杀看看，，要不装上一个杀毒软件查查毒

我用的是卡巴``还是下个灰鸽子专杀去看看吧``

晕``有的瑞星专用灰鸽子居然没发现``

一个是ie一个是桌面管理

如果您没有开两个浏览器的话
中毒的可能性很大

我建议您先进入安全模式，然后查看是否有ＩＥ进程，如果有，请关闭所有ＩＥ进程，然后用杀毒软件杀毒一次
然后使用恶意软件清理工具清理一次系统，再用黄山ＩＥ修复专家修复一下ＩＥ，您看行么

Quote:

引用第9楼agiha于2006-08-20 20:23发表的“”:

2006-08-21,09:36:19

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
  所有的启动项目（包括注册表、启动文件夹、服务等）
  浏览器加载项
  正在运行的进程（包括进程模块信息）
  文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
  <MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
  <kav><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"> [Kaspersky Lab]
  <BigDog303><C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)> []
  <QQsj2.eXe><C:\Documents and Settings\ding\桌面\QQsj2.eXe> []
  <McAfeeUpdaterUI><; > []
  <NvMediaCenter><; rem RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation]
  <nwiz><; rem nwiz.exe /install> []
  <ShStatEXE><; > []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe> [Microsoft Corporation]
  <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <UIHost><logonui.exe> [Microsoft Corporation]

==================================
启动文件夹
[DesktopSprite]
<C:\Documents and Settings\ding\「开始」菜单\程序\启动\DesktopSprite.lnk><N>
[星空极速]
<C:\Documents and Settings\ding\「开始」菜单\程序\启动\星空极速.lnk><N>

==================================
服务
[Kaspersky Anti-Virus 6.0 / AVP]
<"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab>
[NVIDIA Display Driver Service / NVSvc]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>

==================================
浏览器加载项
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v8.dll, >
[Ad Engine]
{077FD0C3-1291-4104-A356-41E36B252682} <C:\Program Files\Yayad\AdCore.dll, N/A>
[VnetCookie Class]
{4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, >
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A} <E:\浩方\GameClient.exe, 上海浩方在线信息技术有限公司>
[VCR.Scan]
{E4F500BF-C1A3-11D6-9697-0090961B771E} <C:\WINDOWS\Downloaded Program Files\VCRSCAN.OCX, New Technology Wave Inc.>
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v8.dll, >
[Ad Engine]
{077FD0C3-1291-4104-A356-41E36B252682} <C:\Program Files\Yayad\AdCore.dll, N/A>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[VnetCookie Class]
{4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, >
[Shell Name Space]
{55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[上传到QQ网络硬盘]
<D:\QQ2006\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
<D:\QQ2006\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\QQ2006\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\QQ2006\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 616][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 788][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 876][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 976][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 988][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1172][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1264][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1356][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1416][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1548][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1772][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1948][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
  [C:\WINDOWS\system32\xunleibho_v8.dll] <><4, 5, 1, 33>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] <Kaspersky Lab><1.0.6.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] <Kaspersky Lab><6.0.0.299>
  [C:\WINDOWS\system32\nvcpl.dll] <NVIDIA Corporation><6.14.10.8421>
  [C:\WINDOWS\system32\nvshell.dll] <N/A><N/A>
  [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
  [C:\WINDOWS\system32\JPWB.IME] <常诚研制><4.00.950>
  [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll] <Kaspersky Lab><6.0.0.299>
[PID: 408][C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\FSSync.dll] <Kaspersky Lab><6.0.5.0>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\AVPGS.PPL] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\winreg.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avpgui.ppl] <Kaspersky Lab><6.0.0.300>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\basegui.dll] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\thpimpl.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\qb.ppl] <Kaspersky Lab><6.0.0.299>
[PID: 416][C:\WINDOWS\VM303_STI.EXE] <Vimicro><3, 5, 930, 9>
  [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
  [C:\WINDOWS\system32\VM303Prp.Ax] <Vimicro><3.5.1229. 11>
[PID: 448][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 512][F:\Program Files\SnowFox\DesktopSprite2\DesktopSprite.exe] <SnowFox Studio.><2.7.0.55>
[PID: 1000][C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\FSSync.dll] <Kaspersky Lab><6.0.5.0>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\AVPGS.PPL] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\winreg.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tm.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\bl.ppl] <Kaspersky Lab><6.0.0.300>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\wmihlpr.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\ndetect.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\crpthlpr.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\schedule.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\timer.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\thpimpl.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\lic60.ppl] <Kaspersky Lab><6.0.0.300>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\report.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\hashmd5.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avs.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avpmgr.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\wdiskio.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avlib.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avspm.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp3info.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\og.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pdm.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\oas.ppl] <Kaspersky Lab><6.0.0.300>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\mc.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\httpscan.ppl] <Kaspersky Lab><6.0.0.299>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klaveng.dll] <N/A><N/A>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\sc.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\dtreg.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\prutil.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp1.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\l_llio.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\procmon.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\sfdb.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\ichk2.ppl] <Kaspersky Lab><6.0.0.300>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\icheckersa.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\hashcont.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\hccmp.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\smtpprotocoller.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\httpanlz.ppl] <Kaspersky Lab><6.0.0.300>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\uniarc.ppl] <Kaspersky Lab><6.0.0.16>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pop3protocoller.ppl] <Kaspersky Lab><6.0.0.300>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\trafficmonitor2.ppl] <N/A><N/A>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\CKAHUM.dll] <Kaspersky Lab><6.0.0.1>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\CKAHComm.dll] <Kaspersky Lab><6.0.0.1>
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\ckahrule.dll] <Kaspersky Lab><6.0.0.1>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\minizip.ppl] <Kaspersky Lab><6.0.0.16>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\imapprotocoller.ppl] <Kaspersky Lab><6.0.0.300>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\cab.ppl] <Kaspersky Lab><6.0.0.16>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nntpprotocoller.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\arj.ppl] <Kaspersky Lab><6.0.0.16>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\rar.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\lha.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\iwgen.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\mdb.ppl] <Kaspersky Lab><6.0.0.300>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\msoe.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\prseqio.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\inflate.ppl] <Kaspersky Lab><6.0.0.16>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\mdmap.ppl] <Kaspersky Lab><6.0.0.16>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\unlzx.ppl] <Kaspersky Lab><6.0.0.16>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\ods.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\buffer.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\memscan.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\memmodsc.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\btdisk.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\ntfsstrm.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\startupenum2.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\inifile.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\btimages.ppl] <Kaspersky Lab><6.0.0.299>
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\qb.ppl] <Kaspersky Lab><6.0.0.299>
[PID: 1152][C:\WINDOWS\system32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.8421>
[PID: 1240][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 800][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2716][C:\Documents and Settings\ding\桌面\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[PID: 1392][C:\Documents and Settings\ding\桌面\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

恩,不错,学到不少东西,谢谢各位

Quote:

引用第1楼继续找北于2006-08-20 15:11发表的“”:
我有一个大写的IEXPLORE.EXE
一个小写的explore.exe
用户名都是本机名,算有问题不?

第一个应该是IE浏览器，你关了IE看看它还有没？第二个是桌面进程，你要是关了系统的桌面壁纸、图标、任务栏等都会不见了。所以应该没有问题，但是不排除木马采用线程插入技术，那样就不清楚了。

你确认两个都是 IEXPLORE.EXE?
还是有个是explore.exe?

如果两个是IEXPLORE.EXE，中毒无疑

我确认两个都是 IEXPLORE.EXE
还有个是 explore.exe

看来你的机子中毒了
再看看哪个进程的CPU占用率高于10%,要注意了

Quote:

引用第15楼dinghao191于2006-08-21 16:22发表的“”:
我确认两个都是 IEXPLORE.EXE
还有个是 explore.exe

照你的说法,两个大的,一个小的,有三个啦
杀一下毒吧.

有可能是木马伪装的进程名啊 ～～～～～～～～

中毒的可能行比较大。。