急救,帮我看看 bbs.ikaka.com

善神 - 2007-4-18 17:56:00

[CODE]

2007-04-18,17:30:11

System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SoundMan><SOUNDMAN.EXE> [(Verified)Microsoft Windows Publisher]
<TaxKeyManager><C:\Program Files\95599 Certificate Tools\SHANGHAI TAX\TaxKeyManager.exe> []
<CertificateRegistration><SafeSignCertReg.exe> [A.E.T. Europe B.V.]
<在 DESIGN02 上自动在 Rich 上自动 EPSON Stylus Photo R230 Series><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE /P64 "在 DESIGN02 上自动在 Rich 上自动 EPSON Stylus Photo R230 Series" /O23 "\\DESIGN02\在Rich上自动" /M "Stylus Photo R230"> [N/A]
<CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe> []
<在前台上自动 EPSON Stylus Photo R230 Series><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE /P45 "在前台上自动 EPSON Stylus Photo R230 Series" /O15 "\\前台\EPSONSty" /M "Stylus Photo R230"> [N/A]
<在行政上自动 EPSON Stylus Photo R230 Series><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAIP.EXE /P45 "在行政上自动 EPSON Stylus Photo R230 Series" /O15 "\\行政\EPSONSty" /M "Stylus Photo R230"> [N/A]
<ep2k_certd><C:\Program Files\ngsrv\ep2k_certd.exe -r> []
<caprica><"C:\Program Files\Caprica\spoolsx.exe"> [(Verified)Beijing Sigland Communication Equipment Co. Ltd]
<spoolsv32><C:\WINDOWS\system32\spoolsv32\spoolsv32.exe -printer> []
<stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent]
<yok.exe><C:\Program Files\yok\yok.exe> [YOK.Com]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe asp.exe> []
<Userinit><C:\WINDOWS\system32\Userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<WebSecurity><C:\WINDOWS\system32\PvSec.dll> [N/A]
<esww><C:\PROGRA~1\dyvv\esww.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptimg]
<WinlogonNotify: cryptimg><cryptig.dll> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{78BF3960-61F0-4F4E-825D-3554FA61E847}><C:\WINDOWS\system32\wmpknl.dll> [N/A]
<{B63BFF8C-2E25-4CCC-9A01-68807F567AA7}><C:\WINDOWS\system32\WsReource.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<dfsf><; RUNDLL32.EXE C:\WINDOWS\system\Mvvp.dll,DImmcv> []
<ISUSPM Startup><; C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup> [InstallShield Software Corporation]
<KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k> [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<QQDownload><; "C:\Program Files\Tencent\QQDownload\QQDownload.exe" autostart> [N/A]
<QQOnlineUpdate><; C:\Program Files\Tencent\QQ\QQUpdate.exe> [腾讯公司]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<sdafdsafds><; D;]XJOEPXT]ufnq]te263/fyf> [N/A]
<System><; C:\Program Files\Common Files\System\Updaterun.exe> []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<UUpdate><; C:\Program Files\UUSee\UUpdate.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<vptray><; C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe> [N/A]
<yok.exe><; C:\Program Files\yok\yok.exe> [YOK.Com]

==================================
启动文件夹
[腾讯QQ]
<C:\Documents and Settings\user\「开始」菜单\程序\启动\腾讯QQ.lnk --> F:\PROGRA~1\Tencent\qq\QQ.exe [TENCENT]><N>

==================================
服务
[Std dyyy Service / dyyy][Running/Auto Start]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\COMMON~1\yatt\iddd.dll,Service -s><Microsoft Corporation>
[fhesnzd / fhesnzd][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\COMMON~1\lhestzd\lhestzd.dll>< >
[Gentad / Gentad][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\Struts.dll><>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[IEAgent service / IEAgent][Stopped/Auto Start]
<"C:\WINDOWS\system32\ieagent.exe"><>
[Vsn mhhh Service / mhhh][Running/Auto Start]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\snnn\suuu.dll,Service><Microsoft Corporation>
[Routing Protect Access / MouTALS][Stopped/Auto Start]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\SMTPCONFS.DLL,Export 1087><N/A>
[Navoct / Navoct][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\Program Files\iesnap\navoct.dll>< >
[ngSlotDaemon / ngSlotD][Running/Auto Start]
<C:\Program Files\ngsrv\ngslotd.exe><^_^>
[Remote Access Connection Management / Remote Access Connection Management][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\Program Files\Messenger\msnhost.dll><N/A>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
<"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon][Running/Auto Start]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Servicel / Servicel][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\jetspeed.dll><>
[SYS ATTRlB / SYSATTRlB][Running/Auto Start]
<C:\WINDOWS\system32\ATTRlB.EXE><N/A>
[Remote Registry Protect / Trial][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\umsdz.dll><Microsoft Corporation>
[TudingService / Tuding][Running/Auto Start]
<"c:\program files\tuding\tudingService.exe" -service><体现时代科技(北京)有限公司>
[ykzzts / ykzzts][Running/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\PROGRA~1\lkzzts\lkzzts.dll>< >
[error monitor / EmonSrv][Running/Auto Start]
<C:\WINDOWS\system32\a40c.exe><N/A>

善神 - 2007-4-18 17:57:00

==================================
驱动程序
[ADProt / ADProt][Running/System Start]
<\SystemRoot\system32\drivers\ADProt.sys><腾讯科技（深圳）有限公司>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AliIde / AliIde][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\aliide.sys><N/A>
[ast / ast][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\ast.sys><N/A>
[BaseTDI / BaseTDI][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\basetdi.sys><Beijing Rising Technology Co., Ltd.>
[bccjbfdi / bccjbfdi][Running/Boot Start]
<\SystemRoot\system32\drivers\bccjbfdi.sys><中国互联网络信息中心(CNNIC)>
[cdnprot / cdnprot][Running/Boot Start]
<\SystemRoot\system32\drivers\cdnprot.sys><中国互联网络信息中心(CNNIC)>
[CmdIde / CmdIde][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[enokuk9 / enokuk93][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\enokuk93.sys><N/A>
[ExpScaner / ExpScaner][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[fsb / fsb][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\fsb.sys><N/A>
[usb Card Device / ft2kEnum][Running/Manual Start]
<system32\DRIVERS\ic2kenum.sys><OEM Corporation>
[USB Chip Holder Service / GDBaseSmc][Running/Manual Start]
<system32\DRIVERS\Chip_smc.sys><OEM>
[USB Chip Service / GD_USB][Stopped/Manual Start]
<system32\DRIVERS\Chip_usb.sys><>
[HookCont / HookCont][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[LanPort / LanPort][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\LanPort.sys><N/A>
[MegaIDE / MegaIDE][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.>
[MEMSCAN / MEMSCAN][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[msusbbux / msusbbux][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\msusbbux.sys><N/A>
[NAVAP / NAVAP][Stopped/Manual Start]
<\??\C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAP.sys><N/A>
[NAVAPEL / NAVAPEL][Stopped/Auto Start]
<\??\C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAPEL.SYS><N/A>
[NAVENG / NAVENG][Stopped/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070417.032\NAVENG.sys><N/A>
[NAVEX15 / NAVEX15][Stopped/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070417.032\NAVEX15.sys><N/A>
[ndcia / ndcia][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\ndcia.sys><N/A>
[nv / nv][Stopped/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[ptkyvfx / ptkyvfx][Running/Boot Start]
<\SystemRoot\system32\drivers\ptkyvfx.sys><>
[SmartCard Reader Device / Reader_Device][Running/Manual Start]
<system32\DRIVERS\usbic2k.sys><OEM>
[romman / romman][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\romman.sys><Microsoft Corporation>
[RsNTGDI / RsNTGDI][Running/Boot Start]
<\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
<system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
[SiS315 / SiS315][Running/Manual Start]
<system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation>
[SiSkp / SiSkp][Running/System Start]
<system32\DRIVERS\srvkp.sys><Silicon Integrated Systems Corporation>
[stdio / stdio][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\stdio.sys><Microsoft Corporation>
[TAX20002 SMART KEY DRIVER / TAX20002][Stopped/Manual Start]
<system32\drivers\TAX20002.sys><HSIC System Application Co., Ltd>
[usb token Device Driver / token][Stopped/Manual Start]
<system32\DRIVERS\eps2kt1.sys><>
[TYKeeper / TYKeeper][Running/Boot Start]
<\SystemRoot\system32\drivers\TYKeeper.sys><YOK.Com>
[usuhpp0 / usuhpp08][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\usuhpp08.sys><N/A>
[ViaIde / ViaIde][Stopped/Boot Start]
<\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[voodoo / voodoo][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\voodoo.sys><N/A>
[wifwtid / wifwtid][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\drivers\wifwtid.sys><N/A>
[xpsp5tdi / xpsp5tdi][Running/]
<2 - 系统找不到指定的文件。
><N/A>
[VideoCapPCI3 / VideoCapPCI3][Running/]
<2 - 系统找不到指定的文件。
><N/A>
[npkycryp / npkycryp][Stopped/Manual Start]
<\??\F:\Program Files\Tencent\qq\npkycryp.sys><N/A>
[xpsp5reg / xpsp5reg][Running/]
<2 - 系统找不到指定的文件。
><N/A>
[VideoCapUSB3 / VideoCapUSB3][Running/]
<2 - 系统找不到指定的文件。
><N/A>

善神 - 2007-4-18 17:58:00

==================================
浏览器加载项
[QQCycloneHelper Class]
{00000000-12C9-4305-82F9-43058F20E8D2} <C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll, 腾讯公司>
[Dcbso Class]
{031AE276-656A-407D-B6E0-6D08E78DE258} <C:\Program Files\Caprica\athena.dll, Adfun>
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\Adplus\SSAddr.dll, Tencent>
[]
{21e14e93-61db-48c2-8b0d-4e03f37a8dbf} <C:\WINDOWS\system32\48c2cfsb.dll, N/A>
[msxml]
{2278622C-7A5D-451f-96F9-DA814693796D} <C:\WINDOWS\system32\msxml1.dll, >
[]
{480e8136-80c9-4bfc-ae2b-1b294ae19f4f} <C:\WINDOWS\system32\4bfcntos.dll, N/A>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <f:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CdnForIE Class]
{5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[]
{5F551A91-F949-49C6-812F-1783D14F8D01} <C:\WINDOWS\system32\baisrc3.dll, N/A>
[]
{6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\snnn\.dll, N/A>
[]
{669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\system32\ssup.dll, TENCENT>
[ExtentIE Class]
{66C2C482-D4EE-42A5-AEF7-0B124F278D47} <C:\WINDOWS\system32\ba40.dll, TODO: <公司名>>
[实用搜索]
{6CFD436C-7AAD-4e50-992F-C0C87A94CAD2} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com>
[YOK]
{75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} <C:\Program Files\yok\toolbar.dll, YOK.Com>
[IE6Ex Class]
{7919E068-36F0-4BD6-9C2F-1785F81DB9AE} <C:\WINDOWS\system32\MICSOFT.DLL, micsoft>
[WinSC Class]
{9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINDOWS\system32\SCIntruder32.dll, N/A>
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[jeee]
{CFF7B6AA-3209-46BC-89A1-4587D52AB568} <C:\PROGRA~1\snnn\wrrr.dll, >
[AlxTB BHO Class]
{F1FABE79-25FC-46de-8C5A-2C6DB9D64333} <C:\WINDOWS\system32\AlxTB1.dll, Alexa Internet>
[WinMyFavor Class]
{F7F49040-389C-4f1f-A825-06D5328EAE59} <C:\WINDOWS\system32\MyFavor.dll, N/A>
[豪杰超级解霸V8]
{367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, herosoft>
[CdnForIE Class]
{5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[JUJU猫]
{6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.jujumao.net, N/A>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <F:\Program Files\Tencent\qq\QQ.EXE, TENCENT>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <f:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[CaiFuCOM Class]
{C1F0024B-8278-4999-B7E6-2718426D9FE6} <C:\Program Files\财富通\caifu.dll, N/A>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[实用搜索工具条2.0]
{03465FF5-00AE-411a-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com>
[Alexa]
{3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[80c9]
{DFCB34B6-902D-426E-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4bfcntos.dll, N/A>
[CEditCtrl Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[AxUSBKey Class]
{DA215190-98B2-47DE-AE24-DA95481DFFBA} <C:\WINDOWS\system32\USBKey.dll, >
[QQCycloneHelper Class]
{00000000-12C9-4305-82F9-43058F20E8D2} <C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll, 腾讯公司>
[Dcbso Class]
{031AE276-656A-407D-B6E0-6D08E78DE258} <C:\Program Files\Caprica\athena.dll, Adfun>
[实用搜索工具条2.0]
{03465FF5-00AE-411A-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com>
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\Adplus\SSAddr.dll, Tencent>
[]
{0DBC9AAF-A13D-450F-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\450fcfsb.dll, N/A>
[InfosecCertInstall Class]
{0EB487C8-E9AC-43A6-8C4C-083999B0622F} <C:\WINDOWS\system32\certInStall.dll, >
[]
{14D4FD00-9F94-4299-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4299ntos.dll, N/A>
[]
{21E14E93-61DB-48C2-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\48c2cfsb.dll, N/A>
[msxml]
{2278622C-7A5D-451F-96F9-DA814693796D} <C:\WINDOWS\system32\msxml1.dll, >
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[]
{345D5D0C-769F-4535-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4535ntos.dll, N/A>
[Alexa]
{3CEFF6CD-6F08-4E4D-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[]
{480E8136-80C9-4BFC-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4bfcntos.dll, N/A>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <f:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CdnForIE Class]
{5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[]
{5F551A91-F949-49C6-812F-1783D14F8D01} <C:\WINDOWS\system32\baisrc3.dll, N/A>
[InfoSecNetSign Class]
{62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\WINDOWS\system32\NetSign.dll, Infosec Technologies Co., Ltd.>
[]
{63C2BDCE-0006-4F21-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4f21ntos.dll, N/A>
[]
{6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\snnn\.dll, N/A>
[]
{669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\system32\ssup.dll, TENCENT>
[ExtentIE Class]
{66C2C482-D4EE-42A5-AEF7-0B124F278D47} <C:\WINDOWS\system32\ba40.dll, TODO: <公司名>>
[YOKHttpFilter Class]
{686D3343-D00D-49A1-96DF-66F3AF62F348} <C:\Program Files\yok\adblock.dll, YOK.Com>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[实用搜索]
{6CFD436C-7AAD-4E50-992F-C0C87A94CAD2} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com>
[CCtInf Class]
{6DBB2904-082D-4DB0-944A-21C22BA121F4} <C:\WINDOWS\system32\BANKCE~1.DLL, >
[]
{6ED1CC77-964D-4157-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\4157cfsb.dll, N/A>
[YOKAdBlock Class]
{718F4AD3-70D4-425E-9159-5598DFC732ED} <C:\Program Files\yok\adblock.dll, YOK.Com>
[AxInputControl Class]
{73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\system32\INPUTC~1.DLL, >
[YOK]
{75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} <C:\Program Files\yok\toolbar.dll, YOK.Com>
[IE6Ex Class]
{7919E068-36F0-4BD6-9C2F-1785F81DB9AE} <C:\WINDOWS\system32\MICSOFT.DLL, micsoft>
[YOKAutoLive]
{7D0E8987-BA21-483a-B1AC-149DA2F39A5A} <C:\Program Files\yok\autolive.dll, YOK.Com>
[ContextSearch Class]
{88351CEF-BAC0-4A9B-8380-31A173E2926F} <C:\Program Files\yok\toolbar.dll, YOK.Com>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[AxSubmitControl Class]
{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\system32\SUBMIT~1.DLL, >
[WinSC Class]
{9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINDOWS\system32\SCIntruder32.dll, N/A>
[相关搜索]
{A29F7F71-DCDB-412D-B19A-2002DC966E33} <C:\PROGRA~1\yok\relband.dll, YOK.Com>
[]
{A409C641-58C0-4FBC-8B0D-4E03F37A8DBF} <C:\WINDOWS\system32\4fbccfsb.dll, N/A>
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[CSetLET Class]
{C35D7AE1-0865-4A30-BF07-29FA29324155} <C:\WINDOWS\system32\GDSetLET.dll, >
[jeee]
{CFF7B6AA-3209-46BC-89A1-4587D52AB568} <C:\PROGRA~1\snnn\wrrr.dll, >
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[UpdateC2 Control]
{DC7094C6-8F61-42ED-AECE-63F5EEF647C5} <C:\PROGRA~1\UUSee\updateC2.ocx, uusee.com>
[80c9]
{DFCB34B6-902D-426E-AE2B-1B294AE19F4F} <C:\WINDOWS\system32\4bfcntos.dll, N/A>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[AlxTB BHO Class]
{F1FABE79-25FC-46DE-8C5A-2C6DB9D64333} <C:\WINDOWS\system32\AlxTB1.dll, Alexa Internet>
[WinMyFavor Class]
{F7F49040-389C-4F1F-A825-06D5328EAE59} <C:\WINDOWS\system32\MyFavor.dll, N/A>
[]
{F869BB38-FFEF-4589-B986-610B7AD0ADA2} <C:\Program Files\yok\toolbar.dll, YOK.Com>
[&使用超级旋风下载]
<C:\Program Files\Tencent\QQDownload\geturl.htm, N/A>
[&使用超级旋风下载全部链接]
<C:\Program Files\Tencent\QQDownload\getAllurl.htm, N/A>
[Alexa Web Search]
<http://client.alexa.com/holiday/script/actions/search.htm, N/A>
[Get Alexa Data]
<http://client.alexa.com/holiday/script/actions/sitedata.htm, N/A>
[Mail to a Friend...]
<http://client.alexa.com/holiday/script/actions/mailto.htm, N/A>
[See Related Links]
<http://client.alexa.com/holiday/script/actions/related.htm, N/A>
[Write a Review...]
<http://client.alexa.com/holiday/script/actions/review.htm, N/A>
[上传到QQ网络硬盘]
<F:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
<C:\PROGRA~1\FLASHGET\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\PROGRA~1\FLASHGET\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<F:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<F:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<F:\Program Files\Tencent\qq\SendMMS.htm, N/A>
[访问通用网址]
<C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A>
[豪杰超级解霸V8实时播放]
<C:\Herosoft\HeroV8\MPURLGET.HTM, N/A>

善神 - 2007-4-18 17:59:00

==================================
正在运行的进程
[PID: 444][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 500][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 524][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\cryptig.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 568][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 580][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 732][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 824][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 908][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 924][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\windows\system32\struts.dll] [, 1, 0, 0, 2]
[c:\progra~1\common~1\lhestzd\lhestzd.dll] [ , 2, 8, 0, 1]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[c:\program files\iesnap\navoct.dll] [ , 1, 0, 1, 1]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\windows\system32\jetspeed.dll] [, 1, 0, 0, 2]
[c:\windows\system32\umsdz.dll] [Microsoft Corporation, 5.1.2600.0]
[c:\progra~1\lkzzts\lkzzts.dll] [ , 5, 8, 0, 2]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[PID: 996][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1100][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1112][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43]
[C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
[C:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
[C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
[C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
[C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
[C:\Program Files\Rising\Rav\psapi.dll] [Microsoft Corporation, 4.00]
[C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
[C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
[C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[C:\Program Files\Rising\Rav\HookCont.dll] [Rising, 19, 0, 0, 0]
[C:\Program Files\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6]
[C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25]
[C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
[C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
[C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 40]
[C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25]
[C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
[C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
[C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
[PID: 1644][C:\WINDOWS\Explorer.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[C:\Program Files\yok\yok.dll] [YOK.Com, 3, 0, 0, 1003]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\WINDOWS\system32\dhpc\wins.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\wbem\vjhaehwm.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\dhpc\plugins\net1.dll] [, 1, 0, 0, 1]
[C:\Program Files\dyvv\esww.nls] [N/A, ]
[C:\WINDOWS\system32\dhpc\plugins\net2.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\dhpc\plugins\net3.dll] [, 1, 0, 0, 1]
[C:\Program Files\yok\toolbar.dll] [YOK.Com, 3, 1, 0, 1000]
[C:\WINDOWS\system32\dhpc\plugins\net4.dll] [, 1, 0, 0, 1]
[C:\Program Files\yok\adblock.dll] [YOK.Com, 3, 0, 0, 1003]
[C:\Program Files\yok\protect.dll] [YOK.Com, 3, 0, 0, 1002]
[C:\Program Files\yok\relband.dll] [YOK.Com, 3, 1, 0, 1004]
[C:\Program Files\yok\autolive.dll] [YOK.Com, 3, 0, 0, 1002]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[C:\WINDOWS\system32\javascript.dll] [, 1.1.1.171]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24]
[C:\WINDOWS\system32\40c3.dll] [N/A, ]
[C:\WINDOWS\system32\4ba4.dll] [ , 1, 0, 0, 3]
[C:\PROGRA~1\FLASHGET\jccatch.dll] [Amaze Soft, 1, 1, 4, 0]
[C:\WINDOWS\TEMP\jtemp\scanf.dll] [N/A, ]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 2000][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.0.40]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\WINDOWS\system32\40c3.dll] [N/A, ]
[C:\WINDOWS\system32\4ba4.dll] [ , 1, 0, 0, 3]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[PID: 2008][C:\Program Files\95599 Certificate Tools\SHANGHAI TAX\TaxKeyManager.exe] [, 2, 2, 0, 1]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[C:\WINDOWS\system32\40c3.dll] [N/A, ]
[C:\WINDOWS\system32\4ba4.dll] [ , 1, 0, 0, 3]
[PID: 2016][C:\WINDOWS\system32\SafeSignCertReg.exe] [A.E.T. Europe B.V., 2.0.0.2]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[C:\WINDOWS\system32\40c3.dll] [N/A, ]
[C:\WINDOWS\system32\4ba4.dll] [ , 1, 0, 0, 3]

善神 - 2007-4-18 17:59:00

[PID: 160][C:\Program Files\ngsrv\ep2k_certd.exe] [, 1, 0, 5, 1227]
[C:\WINDOWS\system32\ep2pk11.dll] [^_^, 1, 1, 5, 1221]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[C:\WINDOWS\system32\40c3.dll] [N/A, ]
[C:\WINDOWS\system32\4ba4.dll] [ , 1, 0, 0, 3]
[PID: 168][C:\Program Files\Caprica\spoolsx.exe] [Adfun, 1, 0, 0, 1]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[C:\WINDOWS\system32\40c3.dll] [N/A, ]
[C:\WINDOWS\system32\4ba4.dll] [ , 1, 0, 0, 3]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[PID: 236][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[PID: 252][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[C:\WINDOWS\system32\dhpc\wins.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\40c3.dll] [N/A, ]
[C:\WINDOWS\system32\4ba4.dll] [ , 1, 0, 0, 3]
[PID: 384][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45]
[C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
[C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[c:\progra~1\lkzzts\lkzihgs.dat] [ , 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[c:\progra~1\lkzzts\lkztxv.dll] [ , 5, 7, 0, 2]
[PID: 3400][c:\PROGRA~1\iesnap\navplay.exe] [, 1, 0, 1, 1]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[PID: 2760][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[C:\WINDOWS\system32\dhpc\wins.dll] [, 1, 0, 0, 1]
[PID: 3520][c:\program files\rising\rav\inbuild.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[PID: 2720][c:\program files\rising\rav\Rav.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28]
[c:\program files\rising\rav\PlugIn\RsPgScan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17]
[c:\program files\rising\rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[c:\program files\rising\rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[c:\program files\rising\rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[c:\program files\rising\rav\RavUI.Dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30]
[c:\program files\rising\rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
[c:\program files\rising\rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]
[c:\program files\rising\rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
[c:\program files\rising\rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
[C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25]
[C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[PID: 228][C:\Downloads\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\WINDOWS\downlo~1\Vbmac.dll] [Tencent, 4, 4, 2, 29]
[C:\Program Files\Caprica\apollo.dll] [Adfun, 1, 0, 0, 1]
[c:\progra~1\lkzzts\lkzznq.nls] [, 5, 6, 0, 2]
[c:\progra~1\lkzzts\lkzyhd.nls] [ , 5, 8, 0, 2]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
[c:\progra~1\common~1\lhestzd\fjbpbya.nls] [, 2, 6, 0, 2]
[C:\PROGRA~1\COMMON~1\yatt\lggg.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\COMMON~1\yatt\qlll.dll] [ , 1, 0, 0, 6]

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost

==================================
API HOOK
N/A

==================================
隐藏进程
[376] C:\Program Files\Common Files\xp5update.exe
[388] C:\Program Files\Common Files\VideoCap3.exe
[2308] C:\Program Files\Internet Explorer\IEXPLORE.EXE

==================================

[/CODE]

瑞星卡卡安全论坛