被黑 bbs.ikaka.com

墙外行人 - 2007-5-18 10:53:00

[CODE]

2007-05-18,10:03:13

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows Server 2003 Standard Edition Service Pack 1 (Build 3790)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件

启动项目
注册表
N/A

==================================
启动文件夹
[Microsoft Office]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> C:\PROGRA~1\MICROS~2\Office\OSA9.EXE

[Microsoft Corporation]><N>
[服务管理器]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\服务管理器.lnk --> C:\PROGRA~1\MICROS~1\80

\Tools\Binn\sqlmangr.exe [Microsoft Corporation]><N>

==================================
服务
[Application Layer Gateway Service / ALG][Running/Manual Start]
<C:\WINDOWS\System32\alg.exe><Microsoft Corporation>
[Indexing Service / CiSvc][Stopped/Disabled]
<C:\WINDOWS\system32\cisvc.exe><Microsoft Corporation>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
<C:\WINDOWS\System32\dmadmin.exe /com><Microsoft Corporation>
[EasyMail NT Service / EasyMail][Running/Auto Start]
<C:\EasyMail\Emsvr.exe><MaJian>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[IMAPI CD-Burning COM Service / ImapiService][Stopped/Disabled]
<C:\WINDOWS\system32\imapi.exe><Microsoft Corporation>
[Kingsoft Antivirus Net Communication / KANetCommService][Running/Auto Start]
<C:\KavNet\KANSvr.EXE><Kingsoft Corporation>
[License Logging / LicenseService][Stopped/Disabled]
<C:\WINDOWS\System32\llssrv.exe><Microsoft Corporation>
[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Disabled]
<C:\WINDOWS\system32\mnmsrvc.exe><Microsoft Corporation>
[Microsoft Search / MSSEARCH][Running/Auto Start]
<"C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe"><Microsoft Corporation>
[MSSQLSERVER / MSSQLSERVER][Running/Auto Start]
<e:\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
<C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[Network DDE / NetDDE][Stopped/Disabled]
<C:\WINDOWS\system32\netdde.exe><Microsoft Corporation>
[Network DDE DSDM / NetDDEdsdm][Stopped/Disabled]
<C:\WINDOWS\system32\netdde.exe><Microsoft Corporation>
[File Replication / NtFrs][Stopped/Manual Start]
<C:\WINDOWS\system32\ntfrs.exe><Microsoft Corporation>
[Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start]
<C:\WINDOWS\system32\sessmgr.exe><Microsoft Corporation>
[Resultant Set of Policy Provider / RSoPProv][Stopped/Manual Start]
<C:\WINDOWS\system32\RSoPProv.exe><Microsoft Corporation>
[Smart Card / SCardSvr][Stopped/Manual Start]
<C:\WINDOWS\System32\SCardSvr.exe><Microsoft Corporation>
[SQLSERVERAGENT / SQLSERVERAGENT][Stopped/Auto Start]
<e:\MSSQL\binn\sqlagent.exe -i MSSQLSERVER><Microsoft Corporation>
[Performance Logs and Alerts / SysmonLog][Stopped/Manual Start]
<C:\WINDOWS\system32\smlogsvc.exe><Microsoft Corporation>
[Telnet / TlntSvr][Stopped/Disabled]
<C:\WINDOWS\system32\tlntsvr.exe><Microsoft Corporation>
[Terminal Services Session Directory / Tssdis][Stopped/Disabled]
<C:\WINDOWS\System32\tssdis.exe><Microsoft Corporation>
[Windows User Mode Driver Framework / UMWdf][Stopped/Manual Start]
<C:\WINDOWS\system32\wdfmgr.exe><Microsoft Corporation>
[Virtual Disk Service / vds][Stopped/Manual Start]
<C:\WINDOWS\System32\vds.exe><Microsoft Corporation>
[Volume Shadow Copy / VSS][Stopped/Manual Start]
<C:\WINDOWS\System32\vssvc.exe><Microsoft Corporation>
[WMI Performance Adapter / WmiApSrv][Stopped/Manual Start]
<C:\WINDOWS\system32\wbem\wmiapsrv.exe><Microsoft Corporation>

墙外行人 - 2007-5-18 10:53:00

==================================
驱动程序
[a320raid / a320raid][Running/Boot Start]
<\SystemRoot\system32\drivers\a320raid.sys><Adaptec, Inc.>
[adpu320 / adpu320][Running/Boot Start]
<\SystemRoot\system32\drivers\adpu320.sys><Adaptec, Inc.>
[ati2mtag / ati2mtag][Running/Manual Start]
<system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[Broadcom NetXtreme Gigabit Ethernet / b57w2k][Running/Manual Start]
<system32\DRIVERS\b57xp32.sys><Broadcom Corporation>
[IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start]
<system32\DRIVERS\ipinip.sys><N/A>
[Klif / Klif][Running/System Start]
<\??\C:\WINDOWS\system32\Drivers\klif.sys><Kaspersky Labs>
[KWatch / KWatch][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\KWatch.Sys><Kingsoft Corporation>
[ljmgobo / ljmgobo][Running/Boot Start]
<\SystemRoot\\SystemRoot\System32\drivers\ljmgobo.sys><N/A>
[New0 / New0][Running/Auto Start]
<\??\C:\WINDOWS\system32\new.sys><N/A>
[npkcrypt / npkcrypt][Stopped/Auto Start]
<\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[System Safety Monitor 2.0 Core Engine / safemon][Running/Boot Start]
<\SystemRoot\system32\drivers\safemon.sys><System Safety Limited>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll, N/A>
[NavigatMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, >
[CnsHook Class]
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司>
[Yahoo 3.5G电邮]
{507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[名品折扣]
{59BC54A2-56B3-44a0-93E5-432D58746E26} <http://adtaobao.allyes.com/main/adfclick?

db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816,

N/A>
[雅虎助手]
{5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[雅虎WIDGET]
{6354ABE6-05F1-49ed-B850-E423120EC338} <http://cn.widget.yahoo.com/index.htm?source=Cns, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, N/A>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A>
[]
{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[]
{FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[金山毒霸在线产品升级]
{52DF16E3-6C4F-4B22-8BAF-09263E463B48} <C:\WINDOWS\system32\kingsoft\KOS\KOSInit.ocx, 金山软件股份有限公司>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll, N/A>
[NavigatMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, >
[CnsHook Class]
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司>

墙外行人 - 2007-5-18 10:58:00

==================================
正在运行的进程
[PID: 1308][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1404][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.2.3790.0 (srv03_rtm.030324-2048)]
[PID: 1628][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[C:\WINDOWS\system32\SSMWinlogonEx.dll] [System Safety Limited, 2.0.0.562]
[PID: 1688][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1700][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.2.3790.0 (srv03_rtm.030324-2048)]
[PID: 1884][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1964][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 192][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 288][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 360][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 872][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[C:\WINDOWS\system32\ZLhp1020.DLL] [Zenographics, Inc., 5, 53, 2714, 0]
[C:\WINDOWS\system32\ZLM.dll] [Zenographics, Inc., 5, 50, 1416, 0]
[C:\WINDOWS\system32\spool\PRTPROCS\W32X86\IMFPrint.DLL] [Zenographics, Inc., 5, 54, 330, 0]
[C:\WINDOWS\system32\Imf32.dll] [Zenographics, Inc., 5, 60, 1204, 0]
[C:\WINDOWS\system32\ZTAG32.dll] [Zenographics, Inc., 5, 60, 1210, 0]
[C:\WINDOWS\system32\ZSPOOL.dll] [Zenographics, Inc., 5, 51, 709, 0]
[PID: 904][C:\WINDOWS\system32\msdtc.exe] [Microsoft Corporation, 2001.12.4720.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1104][C:\EasyMail\Emsvr.exe] [MaJian, 2.0.0.1]
[PID: 1132][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1180][C:\WINDOWS\system32\inetsrv\inetinfo.exe] [Microsoft Corporation, 6.0.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1204][C:\KavNet\KANSvr.EXE] [Kingsoft Corporation, 2006, 7, 10, 58]
[C:\KavNet\dump.dll] [Kingsoft Corporation, 2006, 2, 16, 8]
[C:\KavNet\KANSvr.DLL] [kingsoft, 2005, 9, 30, 7]
[C:\KavNet\StartKSCE.DLL] [, 2006, 1, 17, 13]
[C:\KavNet\KSCESendMsgManage.DLL] [Kingsoft Corporation, 2006, 2, 16, 11]
[C:\KavNet\KSCEEssentialModules.DLL] [, 2005, 8, 18, 5]
[C:\KavNet\CRecvMsgManage.DLL] [, 2006, 1, 22, 6]
[C:\KavNet\KSCEEventSystem.DLL] [Kingsoft Corporation, 2006, 3, 6, 7]
[C:\KavNet\KANVirusLogLogicModule.DLL] [Kingsoft Corporation, 2006, 12, 29, 11]
[C:\KavNet\CKSCEStream.DLL] [, 2006, 1, 21, 4]
[C:\KavNet\BaseModule.DLL] [, 2007, 4, 25, 29]
[C:\KavNet\WatchModule.DLL] [, 2006, 2, 8, 20]
[C:\KavNet\KWatchFn2.DLL] [Kingsoft Corporation, 2007, 4, 9, 97]
[C:\KavNet\KPluginInteractive.DLL] [Kingsoft Corp., 2005, 5, 11, 3]
[C:\KavNet\NetCommunication.DLL] [, 2006, 3, 16, 130]
[C:\KavNet\KANCMain.DLL] [Kingsoft Corporation, 2006, 11, 29, 50]
[C:\KavNet\KANSAComm.dll] [kingsoft, 2004, 6, 2, 10]
[C:\KavNet\RPCRecvMsg.DLL] [kingsoft, 2006, 5, 19, 9]
[C:\KavNet\CKSCEDECodeMsg.DLL] [, 2005, 3, 23, 5]
[C:\KavNet\KAVTimer.DLL] [N/A, N/A]
[C:\KavNet\KANSelectIP.DLL] [Kingsoft Corporation, 2006, 11, 2, 6]
[C:\KavNet\KAEPlat.DLL] [Kingsoft Corp., 2006, 8, 29, 60]
[C:\KavNet\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16]
[C:\KavNet\KAEUnpack.DAT] [Kingsoft Corp., 2007, 4, 12, 116]
[C:\KavNet\KAVUtils.dll] [Kingsoft Corp, 2004, 2, 12, 69]
[C:\KavNet\KAVFilter.DLL] [kingsoft, 2005, 4, 13, 5]
[C:\KavNet\KANCFUN.DLL] [kingsoft, 2006, 12, 29, 10]
[PID: 1444][C:\KavNet\KMailMon.exe] [Kingsoft Corporation, 2007, 4, 18, 961]
[C:\KavNet\KAntiSpm.dll] [Kingsoft Corporation, 2007, 3, 7, 130]
[C:\KavNet\KANCMail.dll] [kingsoft, 2007, 4, 25, 13]
[C:\KavNet\KSCESendMsgManage.DLL] [Kingsoft Corporation, 2006, 2, 16, 11]
[C:\KavNet\KSCEEssentialModules.DLL] [, 2005, 8, 18, 5]
[C:\KavNet\CRecvMsgManage.DLL] [, 2006, 1, 22, 6]
[C:\KavNet\CKSCEStream.DLL] [, 2006, 1, 21, 4]
[C:\KavNet\CKSCEDECodeMsg.DLL] [, 2005, 3, 23, 5]
[C:\KavNet\RPCRecvMsg.DLL] [kingsoft, 2006, 5, 19, 9]
[C:\KavNet\KAVIPC2.DLL] [Kingsoft Corporation, 2006, 8, 18, 25]
[C:\KavNet\KAECall2.DLL] [Kingsoft Corporation, 2004, 12, 28, 7]
[C:\KavNet\KAEPlat.DLL] [Kingsoft Corp., 2006, 8, 29, 60]
[C:\KavNet\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16]
[C:\KavNet\KAEUnpack.DAT] [Kingsoft Corp., 2007, 4, 12, 116]
[C:\KavNet\KASocket.dll] [Kingsoft Corporation, 2006, 3, 17, 235]
[PID: 620][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1840][C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe] [Microsoft Corporation, 9.107.8320.9]
[PID: 820][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 2440][C:\WINDOWS\system32\Rundll32.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 0]
[C:\KavNet\KASocket.dll] [Kingsoft Corporation, 2006, 3, 17, 235]
[C:\WINDOWS\DOWNLO~1\CnsMinEx.dll] [国风因特软件(北京)有限公司, 2, 5, 0, 3]
[C:\WINDOWS\DOWNLO~1\CnsMinIO.dll] [北京三七二一科技有限公司, 2, 5, 0, 4]
[C:\WINDOWS\DOWNLO~1\cnsio.dll] [北京三七二一科技有限公司, 2, 5, 0, 3]

墙外行人 - 2007-5-18 10:59:00

[PID: 2828][C:\KavNet\KANGUI.EXE] [Kingsoft Corporation, 2007, 4, 19, 171]
[C:\KavNet\dump.dll] [Kingsoft Corporation, 2006, 2, 16, 8]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 0]
[C:\KavNet\KASocket.dll] [Kingsoft Corporation, 2006, 3, 17, 235]
[C:\KavNet\KSCESendMsgManage.DLL] [Kingsoft Corporation, 2006, 2, 16, 11]
[C:\KavNet\KSCEEssentialModules.DLL] [, 2005, 8, 18, 5]
[C:\KavNet\CRecvMsgManage.DLL] [, 2006, 1, 22, 6]
[C:\KavNet\CKSCEStream.DLL] [, 2006, 1, 21, 4]
[C:\KavNet\CKSCEDECodeMsg.DLL] [, 2005, 3, 23, 5]
[C:\KavNet\RPCRecvMsg.DLL] [kingsoft, 2006, 5, 19, 9]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 2, 0, 1001]
[PID: 2860][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 0]
[C:\KavNet\KASocket.dll] [Kingsoft Corporation, 2006, 3, 17, 235]
[PID: 2912][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 2924][C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe] [Microsoft Corporation, 2000.080.2039.00]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 0]
[C:\KavNet\KASocket.dll] [Kingsoft Corporation, 2006, 3, 17, 235]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 2, 0, 1001]
[PID: 3344][c:\windows\system32\inetsrv\w3wp.exe] [Microsoft Corporation, 6.0.3790.1830 (srv03_sp1_rtm.050324-1447)]
[c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_836507a3\mscorlib.dll] [N/A, N/A]
[c:\windows\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll] [ , 7.10.3052.4]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\0e510d40

\00a85999_3f3ec701\cjcx.dll] [ , 0.0.0.0]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\f4321ea0

\007df72e_9a21c701\classglobal.dll] [ , 1.0.2542.23824]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\9474b066

\00429f26_9a21c701\classlibrary.dll] [ , 1.0.2542.23817]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\8c5ca2b8

\00783d89_ca6bc501\cnblogs.dct.thin.dll] [ , 1.0.7.5]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2

\642ae74e\007f19f7_3068c601\jcyd.dll] [ , 0.0.0.0]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2

\e99c9a6c\003324cb_4417c601\qzsoftbarcode.dll] [ , 1.0.2203.26782]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\512ca723

\0095358f_7067c701\usermanage.dll] [ , 1.0.2631.18376]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\ecb02379

\ea0ecfa7_5f6cc701\webcxtj.dll] [ , 1.0.2637.30424]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2

\3d06e4ab\0070eb59_8d67c701\webmanage.dll] [ , 0.0.0.0]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\0c1c56c2

\00511384_d267c701\webmanageexaminate.dll] [ , 1.0.2631.39411]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\2a9ec161

\fed5be33_5e6cc701\webregister.dll] [ , 1.0.2637.30112]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\assembly\dl2\4489b865

\62a91db7_5d6cc701\webshenhe.dll] [ , 1.0.2637.30008]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\de2xrp3l.dll] [ , 0.0.0.0]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\vd5jff3c.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\v3jefefn.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\qhyoiyc8.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\v9kcpybu.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\zitztwb9.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\qdns7ihb.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\jro1c4y4.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\c197bde1\1e49e9a\rfn6h08-.dll] [N/A, N/A]
[PID: 3372][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]

墙外行人 - 2007-5-18 11:00:00

[PID: 3388][c:\windows\system32\inetsrv\w3wp.exe] [Microsoft Corporation, 6.0.3790.1830 (srv03_sp1_rtm.050324-1447)]
[c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_836507a3\mscorlib.dll] [N/A, N/A]
[c:\windows\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll] [ , 7.10.3052.4]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\ll4kzyeu.dll] [ , 0.0.0.0]
[c:\windows\assembly\gac\crystaldecisions.web\9.1.5000.0__692fbea5521e1304\crystaldecisions.web.dll] [Crystal Decisions,

Inc., 9.1.9800.0]
[c:\windows\assembly\gac\crystaldecisions.shared\9.1.5000.0__692fbea5521e1304\crystaldecisions.shared.dll] [Crystal

Decisions, Inc., 9.1.9800.0]
[c:\windows\assembly\gac\crystalenterpriselib\9.1.5000.0__692fbea5521e1304\crystalenterpriselib.dll] [ Crystal

Decisions, Inc., 9.1.9800.0]
[c:\windows\assembly\gac\crystalreportpluginlib\9.1.5000.0__692fbea5521e1304\crystalreportpluginlib.dll] [Crystal

Decisions, Inc., 9.1.9800.0]
[c:\windows\assembly\gac\crystaldecisions.reportsource\9.1.5000.0__692fbea5521e1304\crystaldecisions.reportsource.dll]

[Crystal Decisions, Inc., 9.1.9800.0]
[c:\windows\assembly\gac\crystalinfostorelib\9.1.5000.0__692fbea5521e1304\crystalinfostorelib.dll] [Crystal Decisions,

Inc., 9.1.9800.0]
[c:\windows\assembly\gac\crystalpluginmgrlib\9.1.5000.0__692fbea5521e1304\crystalpluginmgrlib.dll] [Crystal Decisions,

Inc., 9.1.9800.0]
[c:\windows\assembly\gac\crystaldecisions.crystalreports.engine\9.1.5000.0__692fbea5521e1304

\crystaldecisions.crystalreports.engine.dll] [Crystal Decisions, Inc., 9.1.9800.0]
[c:\windows\assembly\gac\crystalkeycodelib\9.1.5000.0__692fbea5521e1304\crystalkeycodelib.dll] [Crystal Decisions, Inc.,

9.1.9800.0]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\assembly\dl2\6ed13d23

\44fb77d0_196dc701\webshenhe.dll] [ , 1.0.2636.31667]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\assembly\dl2

\af1dfbaa\f093db04_856bc701\kzrc.dll] [ , 1.0.2636.25383]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\arwffwep.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\jjnxl23-.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\stks3tp4.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl\a872e548\2905b56b\quw00mqu.dll] [ , 0.0.0.0]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl\a872e548\2905b56b\assembly\dl2\4cd004c9

\6e8351cd_656bc701\rsgl.dll] [ , 1.0.2636.16612]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl\a872e548\2905b56b\7db-9j5t.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl\a872e548\2905b56b\vod0lzi4.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\rh40cwyw.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\ojlvdifa.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\1xo20gzq.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\tpxzhfcd.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\zqe6q2lb.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\xianchangzhaopin\9913323a\e7f5084b\mkudsqhx.dll]

[N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\xianchangzhaopin\9913323a\e7f5084b\assembly\dl2

\a86751c0\f8a857d1_10d0c601\kzrc.dll] [ , 1.0.2438.29730]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\xianchangzhaopin\9913323a\e7f5084b\dav-plnz.dll]

[N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\vniu4rmf.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\zk-kyg4i.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\assembly\dl2\a8249773

\7ebe6ea2_cb78c601\rsgl.dll] [ , 1.0.2176.26111]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\tq8p_uiw.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\jipbpy7f.dll] [ , 0.0.0.0]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\assembly\dl2\30398087

\6e8351cd_656bc701\rsgl.dll] [ , 1.0.2636.16612]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\wvbkautt.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\dh4xla9o.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\zmjq3sim.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\w8y4oet3.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\qa8o3kz5.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\gt--kz3b.dll] [ , 0.0.0.0]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\0bpals1t.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\alqbix_i.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\787bc637\a4b6ab5e\qia_pxn5.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\lx3ilkac.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\lry8yp80.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\2urztmdg.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\o_rbpcfk.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\2zbzktgc.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\wnawxfsm.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\-2vxrcva.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\18v1udjn.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\qjmojjnd.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\rsgl1\a7e00f61\1c3b24cb\tkn0voja.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\n8btekuf.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\dsjksibm.dll] [N/A, N/A]
[c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\00c4f3f7\f08a6d78\v1iroywc.dll] [N/A, N/A]
[PID: 2916][C:\WINDOWS\system32\wbem\wmiprvse.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 2564][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.2.3790.1830 (srv03_sp1_rtm.050324-1447)]
[PID: 1668][C:\WINDOWS\explorer.exe] [Microsoft Corporation, 6.00.3790.1830 (srv03_sp1_rtm.050324-1447)]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 0]
[C:\KavNet\KASocket.dll] [Kingsoft Corporation, 2006, 3, 17, 235]
[C:\WINDOWS\DOWNLO~1\CnsHook.dll] [北京三七二一科技有限公司, 1, 0, 2, 7]
[C:\PROGRA~1\3721\autolive.dll] [, 2, 5, 3, 1007]
[C:\PROGRA~1\3721\alLiveEx.dll] [ , 1, 0, 3, 1006]
[C:\PROGRA~1\3721\alrex.dll] [, 2.5.0.1002]
[C:\WINDOWS\DOWNLO~1\CnsMinIO.dll] [北京三七二一科技有限公司, 2, 5, 0, 4]
[C:\WINDOWS\DOWNLO~1\cnsio.dll] [北京三七二一科技有限公司, 2, 5, 0, 3]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 2, 0, 1001]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[C:\Program Files\Common Files\KAV Shared Files\AvpShlEx.dll] [Kaspersky Labs., 4.0.1.35]
[PID: 368][C:\Program Files\360safe\safemon\360Tray.exe] [奇虎网, 3, 3, 0, 1004]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 3, 0]
[C:\KavNet\KASocket.dll] [Kingsoft Corporation, 2006, 3, 17, 235]
[C:\Program Files\360safe\safemon\safemon.dll] [, 3, 2, 0, 1001]
[C:\Program Files\360safe\safemon\SafeKrnl.dll] [奇虎网, 3, 2, 0, 1001]
[C:\Program Files\360safe\AntiAdwa.dll] [360Safe.com, 3, 3, 0, 1004]
[C:\Program Files\360safe\live.dll] [360safe.COM, 1, 0, 0, 1012]

瑞星卡卡安全论坛