瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 接上贴的日志
品茶读你 - 2006-6-21 21:02:00
正在运行的进程
[PID: 428][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 496][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 520][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 564][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 576][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 732][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 788][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 856][F:\杀毒类\瑞星\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 872][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 912][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1076][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1164][F:\杀毒类\瑞星\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26>
    [F:\杀毒类\瑞星\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [F:\杀毒类\瑞星\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [F:\杀毒类\瑞星\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [F:\杀毒类\瑞星\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [F:\杀毒类\瑞星\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [F:\杀毒类\瑞星\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
    [F:\杀毒类\瑞星\Rising\Rav\HOOKSYS.dll]  <Rising><18, 1, 0, 9>
    [F:\杀毒类\瑞星\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [F:\杀毒类\瑞星\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [F:\杀毒类\瑞星\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [F:\杀毒类\瑞星\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [F:\杀毒类\瑞星\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 1>
    [F:\杀毒类\瑞星\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [F:\杀毒类\瑞星\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [F:\杀毒类\瑞星\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [F:\杀毒类\瑞星\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [F:\杀毒类\瑞星\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [F:\杀毒类\瑞星\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [F:\杀毒类\瑞星\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [F:\杀毒类\瑞星\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [F:\杀毒类\瑞星\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [F:\杀毒类\瑞星\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [F:\杀毒类\瑞星\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [F:\杀毒类\瑞星\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [F:\杀毒类\瑞星\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15>
    [F:\杀毒类\瑞星\Rising\Rav\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [F:\杀毒类\瑞星\Rising\Rav\RsStore.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[PID: 1236][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\WINDOWS\system32\igfxpph.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3,0,0,2082>
[PID: 1380][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1476][F:\杀毒类\瑞星\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [F:\杀毒类\瑞星\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [F:\杀毒类\瑞星\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1736][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.1.0.27>
[PID: 1744][C:\WINDOWS\system32\igfxtray.exe]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxress.dll]  <Intel Corporation><3,0,0,2082>
[PID: 1756][C:\WINDOWS\system32\hkcmd.exe]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxhk.dll]  <Intel Corporation><3,0,0,2082>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3,0,0,2082>
[PID: 1764][C:\WINDOWS\VM303_STI.EXE]  <Vimicro><4, 2, 1124, 6>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\VM303Prp.Ax]  <Vimicro><1.00.01.00>
[PID: 1780][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3510>
[PID: 1840][F:\杀毒类\瑞星\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [F:\杀毒类\瑞星\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [F:\杀毒类\瑞星\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [F:\杀毒类\瑞星\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [F:\杀毒类\瑞星\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1872][F:\杀毒类\瑞星\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 20>
    [F:\杀毒类\瑞星\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [F:\杀毒类\瑞星\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [F:\杀毒类\瑞星\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [F:\杀毒类\瑞星\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [F:\杀毒类\瑞星\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [F:\杀毒类\瑞星\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [F:\杀毒类\瑞星\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1924][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2032][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2040][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2008][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2804][C:\WINDOWS\system32\wuauclt.exe]  <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
[PID: 3032][D:\TheWorld\TheWorld.exe]  <Phoenix Studio><1, 2, 3, 5>
    [C:\WINDOWS\System32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
    [F:\杀毒类\瑞星\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\WINDOWS\system32\WBJJU.IME]  <北京六合源软件技术有限公司><2, 5, 0, 0>
    [C:\WINDOWS\system32\WbCodeU.dll]  <><2, 5, 0, 0>
[PID: 704][F:\杀毒类\和HA_IJACKTHIS差不多\sreng\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [F:\杀毒类\和HA_IJACKTHIS差不多\sreng\SREng2\Plugins\SREngPluginDemo.SRE]  <Smallfrogs Studio><1, 1, 1, 0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
1
查看完整版本: 接上贴的日志