瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 小聪小聪小聪小聪小聪小聪小聪小聪!
2120058 - 2006-5-21 16:03:00
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run           

+ NvCplDaemon    NVIDIA Display Properties Extension    NVIDIA Corporation    c:\windows\system32\nvcpl.dll

+ TkBellExe    RealNetworks Scheduler    RealNetworks, Inc.    c:\program files\common files\real\update_ob\realsched.exe

HKCU\Software\Microsoft\Windows\CurrentVersion\Run           

+ pyjj    加加输入法 4.0 作者:孙百川    加加开发组    c:\program files\jj4\jjsvr4.exe

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved           

+ Desktop Explorer    NVIDIA Desktop Explorer, Version 110.14     NVIDIA Corporation    c:\windows\system32\nvshell.dll

+ Desktop Explorer Menu    NVIDIA Desktop Explorer, Version 110.14     NVIDIA Corporation    c:\windows\system32\nvshell.dll

+ HyperTerminal Icon Ext    HyperTerminal Applet Library    Hilgraeve, Inc.    c:\windows\system32\hticons.dll

+ NvCpl DesktopContext Class    NVIDIA Display Properties Extension    NVIDIA Corporation    c:\windows\system32\nvcpl.dll

+ nView Desktop Context Menu    NVIDIA Desktop Explorer, Version 110.14     NVIDIA Corporation    c:\windows\system32\nvshell.dll

+ Play on my TV helper    NVIDIA Display Properties Extension    NVIDIA Corporation    c:\windows\system32\nvcpl.dll

+ RISING    Rising Shell Ext Module    Beijing Rising Technology Co., Ltd.    c:\windows\system32\ravext.dll

+ Shell Extensions for RealOne Player    RealPlayer Shell Extensions    RealNetworks, Inc.    c:\program files\real\realplayer\rpshell.dll

HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved           

+ Web 文件夹            c:\program files\common files\microsoft shared\web folders\msonsext.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects           

+ ThunderIEHelper Class    XunLei BHO    Thunder Networking Technologies,LTD    c:\windows\system32\xunleibho_v14.dll

HKLM\Software\Microsoft\Internet Explorer\Toolbar           

+ FlashGet Bar    FlashGet IE Bar    Amaze Soft    d:\program files\flashget\fgiebar.dll

HKLM\Software\Microsoft\Internet Explorer\Extensions           

+ &FlashGet    FlashGet    Amaze Soft    d:\program files\flashget\flashget.exe

+ 腾讯QQ    QQ    TENCENT    d:\program files\tencent\qq\qq.exe

HKLM\System\CurrentControlSet\Services           

+ NVSvc    Provides system and desktop level support to the NVIDIA display driver    NVIDIA Corporation    c:\windows\system32\nvsvc32.exe

+ RsCCenter    CCenter    Beijing Rising Technology Co., Ltd.    c:\program files\rising\rav\ccenter.exe

+ RsRavMon    RavMond    Beijing Rising Technology Co., Ltd.    c:\program files\rising\rav\ravmond.exe

HKLM\System\CurrentControlSet\Services           

+ admjoy    Vortex AU8820 WDM Joystick Driver    Aureal, Inc.    c:\windows\system32\drivers\admjoy.sys

+ aeaudio    Andrea Audio Stub Driver    Andrea Electronics Corporation    c:\windows\system32\drivers\aeaudio.sys

+ AN983    ADMtek AN983/AN985/ADM951X NDIS5 Driver    ADMtek Incorporated.    c:\windows\system32\drivers\an983.sys

+ BaseTDI    basetdi    Beijing Rising Technology Co., Ltd.    c:\windows\system32\drivers\basetdi.sys

+ EagleNT            File not found: C:\WINDOWS\system32\drivers\EagleNT.sys

+ ExpScaner    ExpScan.sys        c:\program files\rising\rav\expscan.sys

+ GOOD05            File not found: C:\WINDOWS\system32\vqpn6hhl.sys

+ HookCont    TDI HOOK Driver    Rising tech Co. ltd    c:\program files\rising\rav\hookcont.sys

+ HookReg            c:\program files\rising\rav\hookreg.sys

+ HookSys    Hooksys    Rising    c:\program files\rising\rav\hooksys.sys

+ ialm            File not found: system32\DRIVERS\ialmnt5.sys

+ MEMSCAN    MemScan Driver    瑞星软件有限公司    c:\program files\rising\rav\memscan.sys

+ NPF    npf    CACE Technologies    c:\windows\system32\drivers\npf.sys

+ nv    NVIDIA Compatible Windows 2000 Miniport Driver, Version 81.98     NVIDIA Corporation    c:\windows\system32\drivers\nv4_mini.sys

+ prcmondrv    Process Monitor driver    Igor Nys    c:\windows\system32\drivers\prcmondrv1041.sys

+ Ptilink    Direct Parallel Link Driver    Parallel Technologies, Inc.    c:\windows\system32\drivers\ptilink.sys

+ safemon    System Safety Monitor 2.0 extension for Windows security layer    System Safety Limited    c:\windows\system32\drivers\safemon.sys

+ Secdrv    SafeDisc driver        c:\windows\system32\drivers\secdrv.sys

+ smwdm    SoundMAX Integrated Digital Audio     Analog Devices, Inc.    c:\windows\system32\drivers\smwdm.sys

+ squell            File not found: C:\windows\system32\vook.sys

+ XPROTECTOR            c:\windows\system32\drivers\xprotector.sys

+ ZSMC301b    Video streaming and Capture Device Driver    VM    c:\windows\system32\drivers\usbvm31b.sys

+ {6080A529-897E-4629-A488-ABA0C29B635E}            File not found: system32\drivers\ialmsbw.sys

+ {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}            File not found: system32\drivers\ialmkchw.sys

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify           

+ igfxcui            File not found: igfxsrvc.dll

+ System Safety Monitor    System Safety Winlogon Notification    System Safety Limited    c:\windows\system32\ssmwinlogonex.dll

速度回帖子!

为什么我不能贴图
只要贴图就显示帖子内容不能为空
2120058 - 2006-5-21 16:08:00
回帖啊
2120058 - 2006-5-21 16:19:00
回帖吧!求你们了!
2120058 - 2006-5-21 16:46:00
倒是回帖啊
轩辕小聪 - 2006-5-21 16:49:00
还有什么问题吗？
2120058 - 2006-5-21 16:50:00
4.dll总是弄不掉
轩辕小聪 - 2006-5-21 16:53:00
现在Autoruns项目中已经没有那一项了，之前发的SREng日志中也没有4.dll的影子，如何又会弄不掉？！
2120058 - 2006-5-21 16:55:00
速回!
2120058 - 2006-5-21 16:56:00
你咋知道它没了
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

+ pyjj加加输入法 4.0 作者:孙百川加加开发组c:\program files\jj4\jjsvr4.exe

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

+ 4.dllFile not found: C:\WINDOWS\system32\4.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ Desktop ExplorerNVIDIA Desktop Explorer, Version 110.14 NVIDIA Corporationc:\windows\system32\nvshell.dll

+ Desktop Explorer MenuNVIDIA Desktop Explorer, Version 110.14 NVIDIA Corporationc:\windows\system32\nvshell.dll

+ HyperTerminal Icon ExtHyperTerminal Applet LibraryHilgraeve, Inc.c:\windows\system32\hticons.dll

+ NvCpl DesktopContext ClassNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll

+ nView Desktop Context MenuNVIDIA Desktop Explorer, Version 110.14 NVIDIA Corporationc:\windows\system32\nvshell.dll

+ Play on my TV helperNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll

+ RISINGRising Shell Ext ModuleBeijing Rising Technology Co., Ltd.c:\windows\system32\ravext.dll

+ Shell Extensions for RealOne PlayerRealPlayer Shell ExtensionsRealNetworks, Inc.c:\program files\real\realplayer\rpshell.dll

HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

+ Web 文件夹c:\program files\common files\microsoft shared\web folders\msonsext.dll

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

+ ThunderIEHelper ClassXunLei BHOThunder Networking Technologies,LTDc:\windows\system32\xunleibho_v14.dll

HKLM\Software\Microsoft\Internet Explorer\Toolbar

+ FlashGet BarFlashGet IE BarAmaze Softd:\program files\flashget\fgiebar.dll

HKLM\Software\Microsoft\Internet Explorer\Extensions

+ &FlashGetFlashGetAmaze Softd:\program files\flashget\flashget.exe

+ 百度首页File not found: http://baidu.com/index.php?tn=bainiudg

+ 腾讯QQQQTENCENTd:\program files\tencent\qq\qq.exe

HKLM\System\CurrentControlSet\Services

+ NVSvcProvides system and desktop level support to the NVIDIA display driverNVIDIA Corporationc:\windows\system32\nvsvc32.exe

+ RsCCenterCCenterBeijing Rising Technology Co., Ltd.c:\program files\rising\rav\ccenter.exe

+ RsRavMonRavMondBeijing Rising Technology Co., Ltd.c:\program files\rising\rav\ravmond.exe

HKLM\System\CurrentControlSet\Services

+ admjoyVortex AU8820 WDM Joystick DriverAureal, Inc.c:\windows\system32\drivers\admjoy.sys

+ aeaudioAndrea Audio Stub DriverAndrea Electronics Corporationc:\windows\system32\drivers\aeaudio.sys

+ AN983ADMtek AN983/AN985/ADM951X NDIS5 DriverADMtek Incorporated.c:\windows\system32\drivers\an983.sys

+ BaseTDIbasetdiBeijing Rising Technology Co., Ltd.c:\windows\system32\drivers\basetdi.sys

+ EagleNTFile not found: C:\WINDOWS\system32\drivers\EagleNT.sys

+ ExpScanerExpScan.sysc:\program files\rising\rav\expscan.sys

+ GOOD05File not found: C:\WINDOWS\system32\vqpn6hhl.sys

+ HookContTDI HOOK DriverRising tech Co. ltdc:\program files\rising\rav\hookcont.sys

+ HookRegc:\program files\rising\rav\hookreg.sys

+ HookSysHooksysRisingc:\program files\rising\rav\hooksys.sys

+ ialmFile not found: system32\DRIVERS\ialmnt5.sys

+ MEMSCANMemScan Driver瑞星软件有限公司c:\program files\rising\rav\memscan.sys

+ NPFnpfCACE Technologiesc:\windows\system32\drivers\npf.sys

+ nvNVIDIA Compatible Windows 2000 Miniport Driver, Version 81.98 NVIDIA Corporationc:\windows\system32\drivers\nv4_mini.sys

+ prcmondrvProcess Monitor driverIgor Nysc:\windows\system32\drivers\prcmondrv1041.sys

+ PtilinkDirect Parallel Link DriverParallel Technologies, Inc.c:\windows\system32\drivers\ptilink.sys

+ safemonSystem Safety Monitor 2.0 extension for Windows security layerSystem Safety Limitedc:\windows\system32\drivers\safemon.sys

+ SecdrvSafeDisc driverc:\windows\system32\drivers\secdrv.sys

+ smwdmSoundMAX Integrated Digital Audio Analog Devices, Inc.c:\windows\system32\drivers\smwdm.sys

+ squellFile not found: C:\windows\system32\vook.sys

+ XPROTECTORc:\windows\system32\drivers\xprotector.sys

+ ZSMC301bVideo streaming and Capture Device DriverVMc:\windows\system32\drivers\usbvm31b.sys

+ {6080A529-897E-4629-A488-ABA0C29B635E}File not found: system32\drivers\ialmsbw.sys

+ {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}File not found: system32\drivers\ialmkchw.sys

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

+ igfxcuiFile not found: igfxsrvc.dll

+ System Safety MonitorSystem Safety Winlogon NotificationSystem Safety Limitedc:\windows\system32\ssmwinlogonex.dll
轩辕小聪 - 2006-5-21 17:21:00
晕倒，之前的日志里的确没有，现在的日志倒是有了。你完全可以用SSM设置禁止这项注册表的修改呀。
1
查看完整版本: 小聪小聪小聪小聪小聪小聪小聪小聪!
© 2000 - 2026 Rising Corp. Ltd.