帮忙看看中毒了吗 bbs.ikaka.com

jjdu3 - 2007-7-20 9:35:00

以下是我扫描的日志

jjdu3 - 2007-7-20 9:36:00

瑞星卡卡电脑诊断日志 v1.30 (2007-7-20 9:15:15) 北京瑞星科技股份有限公司

注释:[A]表示该文件存在自启动关联;
[M]表示该文件在内存中;

+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
Ip6FwHlp
[A ] 1. c:\windows\system32\ip6fwhlp.dll
Microsoft Corporation
Microsoft IPv6 Firewall Helper Components
.text,.data,.rsrc,.reloc,

LightScribeService
[AM] 2. c:\program files\common files\lightscribe\lssrvc.exe
Hewlett-Packard Company
.text,.rdata,.data,.rsrc,

NVSvc
[AM] 3. c:\windows\system32\nvsvc32.exe
NVIDIA Corporation
NVIDIA Driver Helper Service, Version 66.93
.text,.rdata,.data,.rsrc,

ose
[A ] 4. c:\program files\common files\microsoft shared\source engine\ose.exe
Microsoft Corporation
Office Source Engine
.text,.data,.rsrc,

PsShutdownSvc
[A ] 5. c:\windows\system32\pssdnsvc.exe
.text,.rdata,.data,.rsrc,

RfwProxySrv
[A ] 6. g:\rising\rfw\rfwproxy.exe
Beijing Rising Technology Co., Ltd.
Rising Personal Proxy Service
.text,.rdata,.data,.rsrc,

RfwService
[A ] 7. g:\rising\rfw\rfwsrv.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Service
.text,.rdata,.data,.rsrc,

RsCCenter
[A ] 8. g:\rising\rav\ccenter.exe
Beijing Rising Technology Co., Ltd.
CCenter
.text,.rdata,.data,.rsrc,

RsRavMon
[A ] 9. g:\rising\rav\ravmond.exe
Beijing Rising Technology Co., Ltd.
RavMond
.text,.rdata,.data,.rsrc,

WmdmPmSN
[A ] 10. c:\windows\system32\mspmsnsv.dll
Microsoft Corporation
Microsoft Media Device Service Provider
.text,.data,.rsrc,.reloc,

jjdu3 - 2007-7-20 9:36:00

+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
ALCXWDM
[A ] 11. c:\windows\system32\drivers\alcxwdm.sys
Realtek Semiconductor Corp.
Realtek AC'97 Audio Driver (WDM)
.text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc,

AmdK8
[A ] 12. c:\windows\system32\drivers\amdk8.sys
Microsoft Corporation
Processor Device Driver
.text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc,

BaseTDI
[A ] 13. c:\windows\system32\drivers\basetdi.sys
Beijing Rising Technology Co., Ltd.
basetdi
.text,.rdata,.data,INIT,.rsrc,.reloc,

ExpScaner
[A ] 14. g:\rising\rav\expscan.sys
ExpScan.sys
.text,.rdata,.data,INIT,.rsrc,.reloc,

HookCont
[A ] 15. g:\rising\rav\hookcont.sys
Rising
HookCont
.text,.rdata,.data,INIT,.rsrc,.reloc,

HookReg
[A ] 16. g:\rising\rav\hookreg.sys
.text,.rdata,.data,INIT,.rsrc,.reloc,

HookSys
[A ] 17. g:\rising\rav\hooksys.sys
Rising
Hooksys
.text,.rdata,.data,INIT,.rsrc,.reloc,

HookUrl
[A ] 18. g:\rising\rfw\hookurl.sys
Beijing Rising Technology Co., Ltd.
HookUrl
.text,.rdata,.data,INIT,.rsrc,.reloc,

Ip6Fw
[A ] 19. c:\windows\system32\drivers\ip6fw.sys
Microsoft Corporation
IPv6 Internet Connection Firewall
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,

MEMSCAN
[A ] 20. g:\rising\rav\memscan.sys
瑞星软件有限公司
MemScan Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,

mProcRs
[A ] 21. g:\rising\rfw\mprocrs.sys
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall mprocrs.sys
.text,.rdata,.data,INIT,.rsrc,.reloc,

npkcrypt
[A ] 22. f:\qq\npkcrypt.sys
INCA Internet Co., Ltd.
nProtect KeyCrypt Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,

npkcusb
[A ] 23. f:\qq\npkcusb.sys
INCA Internet Co., Ltd.
nProtect KeyCrypt Driver
.text,page,init,.rdata,.data,INIT,.rsrc,.reloc,

nvatabus
[A ] 24. c:\windows\system32\drivers\nvatabus.sys
NVIDIA Corporation
NVIDIA? nForce(TM) IDE Performance Driver
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,

RsAntiSpyware
[A ] 25. c:\windows\system32\drivers\rsboot.sys
Beijing Rising Technology Co., Ltd.
Anti-RootKit Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,

RsFwDrv
[A ] 26. g:\rising\rfw\rsfwdrv.sys
Beijing Rising Technology Co., Ltd.
nt_fwdrv
.text,.rdata,.data,INIT,.rsrc,.reloc,

RsNTGDI
[A ] 27. c:\windows\system32\drivers\rsntgdi.sys
Beijing Rising Technology Co., Ltd.
RsNTGDI
.text,.rdata,INIT,.rsrc,.reloc,

RSPPSYS
[A ] 28. g:\rising\rav\rsppsys.sys
Rising
RSPPSYS.SYS
.text,.rdata,.data,INIT,.rsrc,.reloc,

Secdrv
[A ] 29. c:\windows\system32\drivers\secdrv.sys
.text,.data,INIT,.reloc,

st3wolf
[A ] 30. c:\windows\system32\drivers\st3wolf.sys

SCSI miniport
.text,.rdata,.data,INIT,.rsrc,.reloc,

stwlfbus
[A ] 31. c:\windows\system32\drivers\stwlfbus.sys

PnP BIOS Extension
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,

usbehci
[A ] 32. c:\windows\system32\drivers\usbehci.sys
Microsoft Corporation
EHCI eUSB Miniport Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,

yukonwxp
[A ] 33. c:\windows\system32\drivers\yk51x86.sys
Marvell
NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller
.text,.rdata,.data,INIT,.rsrc,.reloc,

jjdu3 - 2007-7-20 9:37:00

+ IE浏览器加载模块
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
[A ] 34. c:\windows\system32\kakatool.dll
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware Toolbar
.text,.rdata,.data,MonitorS,.rsrc,.reloc,

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[A ] 35. d:\迅雷\comdlls\tdatonce_now.dll
Thunder Networking Technologies,LTD
迅雷浏览器高级特性支持模块
.text,.rdata,.data,.rsrc,.reloc,

{889D2FEB-5411-4565-8998-1DD2C5261283}
[A ] 36. d:\迅雷\comdlls\xunleibho_now.dll
Thunder Networking Technologies,LTD
XunLeiBHO
.text,.rdata,.data,.rsrc,.reloc,

+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
Exec
[A ] 37. d:\迅雷\thunder.exe
Thunder Networking Technologies,LTD
.text,.rdata,.data,.rsrc,

Exec
[A ] 38. c:\program files\flashget\flashget.exe
Amaze Soft
FlashGet
.text,.rdata,.data,.rsrc,

Exec
[A ] 39. c:\program files\messenger\msmsgs.exe
Microsoft Corporation
Messenger
.text,.data,.rsrc,

Script
[A ] 40. c:\windows\web\related.htm

+ 资源管理器加载模块
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
text/xml
[A ] 41. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
Microsoft Corporation
Microsoft Office XML MIME Filter
.text,.data,.rsrc,.reloc,

+ HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
mso-offdap
[A ] 42. c:\program files\common files\microsoft shared\web components\10\owc10.dll
Microsoft Corporation
Microsoft Office XP Web Components
.text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc,

mso-offdap11
[A ] 43. c:\program files\common files\microsoft shared\web components\11\owc11.dll
Microsoft Corporation
Microsoft Office Web Components 2003
.text,.data,.rtext,Shared,.rsrc,.reloc,

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 44. c:\windows\system32\hticons.dll
Hilgraeve, Inc.
HyperTerminal Applet Library
.text,.data,.rsrc,.reloc,

Auto Update Property Sheet Extension
[A ] 45. c:\windows\system32\wuaucpl.cpl
Microsoft Corporation
Automatic Updates Control Panel
.text,.data,.rsrc,.reloc,

WinRAR shell extension
[AM] 46. c:\program files\winrar\rarext.dll
.text,.data,.tls,.idata,.edata,.rsrc,.reloc,

NvCpl DesktopContext Class
[AM] 47. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,.rsrc,.reloc,

Play on my TV helper
[AM] 47. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,.rsrc,.reloc,

Web Folders
[A ] 48. c:\program files\common files\microsoft shared\web folders\msonsext.dll
Microsoft Corporation
Microsoft Web Folders
.text,.data,.rsrc,.reloc,

Microsoft Office Outlook Desktop Icon Handler
[A ] 49. c:\program files\microsoft office\office11\mlshext.dll
Microsoft Corporation
Microsoft Shell Extension Library
.text,.data,.rsrc,.reloc,

Microsoft Office Outlook Custom Icon Handler
[A ] 50. c:\program files\microsoft office\office11\olkfstub.dll
Microsoft Corporation
Outlook Shell Hook for Start/Find
.text,.data,.rsrc,.reloc,

Microsoft Office HTML Icon Handler
[A ] 51. c:\program files\microsoft office\office11\msohev.dll
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.rsrc,.reloc,

Shell Extensions for RealOne Player
[A ] 52. e:\program files\rpshell.dll
RealNetworks, Inc.
RealPlayer Shell Extensions
.text,.rdata,.data,.rsrc,.reloc,

RISING
[AM] 53. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,

Desktop Explorer
[AM] 54. c:\windows\system32\nvshell.dll
NVIDIA Corporation
NVIDIA Desktop Explorer, Version 66.93
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,

Desktop Explorer Menu
[AM] 54. c:\windows\system32\nvshell.dll
NVIDIA Corporation
NVIDIA Desktop Explorer, Version 66.93
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,

nView Desktop Context Menu
[AM] 54. c:\windows\system32\nvshell.dll
NVIDIA Corporation
NVIDIA Desktop Explorer, Version 66.93
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{32CD708B-60A7-4C00-9377-D73EAA495F0F}
[AM] 53. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,

jjdu3 - 2007-7-20 9:37:00

+ 用户登陆自运行项目
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
DAEMON Tools-1033
[AM] 55. c:\program files\d-tools\daemon.exe
DAEMON'S HOME
Virtual DAEMON Manager
.text,.rdata,.data,.rsrc,

nwiz
[A ] 56. c:\windows\system32\nwiz.exe
NVIDIA Corporation
NVIDIA nView Wizard, Version 66.93
.text,.rdata,.data,.rsrc,

SoundMan
[AM] 57. c:\windows\soundman.exe
Realtek Semiconductor Corp.
Realtek Sound Manager
.text,.rdata,.data,.sxdata,.rsrc,

IMSCMig
[A ] 58. c:\program files\common files\microsoft shared\ime\imsc40a\imscmig.exe
Microsoft Corporation
微软拼音输入法安装工具
.text,.data,.rsrc,

TkBellExe
[AM] 59. c:\program files\common files\real\update_ob\realsched.exe
RealNetworks, Inc.
RealNetworks Scheduler
.text,.rdata,.data,.rsrc,

runeip
[AM] 60. c:\program files\rising\antispyware\runiep.exe
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware Monitor
.text,.rdata,.data,.rsrc,

RavTask
[A ] 61. g:\rising\rav\ravtask.exe
Beijing Rising Technology Co., Ltd.
RavTimer
.text,.rdata,.data,.rsrc,

RfwMain
[A ] 62. g:\rising\rfw\rfwmain.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Main Program
.text,.rdata,.data,.rsrc,

NeroFilterCheck
[A ] 63. c:\windows\system32\nerocheck.exe
Ahead Software Gmbh
NeroCheck
.text,.rdata,.data,.rsrc,

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
KKDelay
[A ] 64. c:\program files\rising\antispyware\runonce.exe
Beijing Rising Technology Co., Ltd.
RunOnce Application
.text,.rdata,.data,.rsrc,

+ 开机执行
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 65. c:\windows\system32\bsmain.exe
Beijing Rising Technology Co., Ltd.
BootScan
.text,.data,.rsrc,.reloc,

[A ] 66. c:\windows\system32\kknative.exe
Beijing Rising Technology Co., Ltd.
NativeAp
.text,.data,.rsrc,.reloc,

+ 映像劫持
+ HKCR\.bat
batfile\edit\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

batfile\print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ HKCR\.html
htmlfile\Edit\Command
[A ] 68. c:\program files\microsoft office\office11\msohtmed.exe
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.rsrc,

htmlfile\Print\Command
[A ] 68. c:\program files\microsoft office\office11\msohtmed.exe
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.rsrc,

+ HKCR\.htm
htmlfile\Edit\Command
[A ] 68. c:\program files\microsoft office\office11\msohtmed.exe
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.rsrc,

htmlfile\Print\Command
[A ] 68. c:\program files\microsoft office\office11\msohtmed.exe
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.rsrc,

+ HKCR\.log
txtfile\print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

txtfile\printto\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ HKCR\.txt
txtfile\print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

txtfile\printto\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ HKCR\.cmd
cmdfile\edit\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

cmdfile\print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ HKCR\.reg
regfile\edit\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

regfile\print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ HKCR\.vbs
VBSFile\Edit\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

VBSFile\Print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ HKCR\.js
JSFile\Edit\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

JSFile\Print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ HKCR\.mp3
RealPlayer.MP3.6\open\Command
[A ] 69. e:\program files\realplay.exe
RealNetworks, Inc.
RealPlayer
.text,.rdata,.data,.rsrc,

+ HKCR\.ini
inifile\open\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

inifile\print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ HKCR\.inf
inffile\open\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

inffile\print\Command
[A ] 67. c:\windows\system32\notepad.exe
UPX0,UPX1,.rsrc,

+ 打印机监控
+ HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
Microsoft Document Imaging Writer Monitor
[AM] 70. c:\windows\system32\mdimon.dll
Microsoft Corporation
Microsoft? Document Imaging
.text,.data,.rsrc,.reloc,

jjdu3 - 2007-7-20 9:38:00

+ 其他自启动项目
+ C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Adobe Reader Speed Launch.lnk
[A ] 71. c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
Adobe Systems Incorporated
Adobe Acrobat SpeedLauncher
.text,.rdata,.data,.rsrc,

+ 正在运行的进程
+ 000000bc(188) alg.exe

+ 000000d4(212) LSSrvc.exe
00400000[00012000]
[AM] 2. c:\program files\common files\lightscribe\lssrvc.exe
Hewlett-Packard Company
.text,.rdata,.data,.rsrc,

7C340000[00056000]
[ M] 72. c:\program files\common files\lightscribe\msvcr71.dll
Microsoft Corporation
Microsoft? C Runtime Library
.text,.rdata,.data,.rsrc,.reloc,

7C3A0000[0007B000]
[ M] 73. c:\program files\common files\lightscribe\msvcp71.dll
Microsoft Corporation
Microsoft? C++ Runtime Library
.text,.rdata,.data,.rsrc,.reloc,

+ 00000124(292) nvsvc32.exe
00400000[00021000]
[AM] 3. c:\windows\system32\nvsvc32.exe
NVIDIA Corporation
NVIDIA Driver Helper Service, Version 66.93
.text,.rdata,.data,.rsrc,

00D50000[00032000]
[ M] 74. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,

+ 00000254(596) smss.exe

+ 000002a4(676) csrss.exe

+ 000002bc(700) winlogon.exe
72C90000[00009000]
[ M] 75. c:\windows\system32\wdmaud.drv
Microsoft Corporation
WDM Audio driver mapper
.text,.data,.rsrc,.reloc,

72C80000[00008000]
[ M] 76. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,

+ 000002e8(744) services.exe

+ 000002f4(756) lsass.exe

+ 000003a4(932) svchost.exe

+ 00000418(1048) svchost.exe
50E60000[0000C000]
[ M] 77. c:\windows\system32\wups2.dll
Microsoft Corporation
Windows Update client proxy stub 2
.text,.orpc,.data,.rsrc,.reloc,

+ 000004ac(1196) RavStub.exe
00400000[00018000]
[ M] 78. g:\rising\rav\ravstub.exe
Beijing Rising Technology Co., Ltd.
Rising RavStub
.text,.rdata,.data,.rsrc,

10000000[0001B000]
[ M] 79. g:\rising\rav\rscommx.dll
rising
RsCommX
.text,.rdata,.data,.rsrc,.reloc,

23700000[0001A000]
[ M] 80. g:\rising\rav\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,

+ 000004d8(1240) svchost.exe

+ 0000051c(1308) svchost.exe

+ 00000594(1428) Explorer.EXE
10000000[0001B000]
[AM] 53. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,

01350000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

019C0000[00475000]
[AM] 47. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,.rsrc,.reloc,

01E40000[00032000]
[ M] 74. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,

01EC0000[00072000]
[AM] 54. c:\windows\system32\nvshell.dll
NVIDIA Corporation
NVIDIA Desktop Explorer, Version 66.93
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,

72C90000[00009000]
[ M] 75. c:\windows\system32\wdmaud.drv
Microsoft Corporation
WDM Audio driver mapper
.text,.data,.rsrc,.reloc,

72C80000[00008000]
[ M] 76. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,

01580000[00029000]
[AM] 46. c:\program files\winrar\rarext.dll
.text,.data,.tls,.idata,.edata,.rsrc,.reloc,

23700000[0001A000]
[ M] 80. g:\rising\rav\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,

+ 00000640(1600) daemon.exe
00400000[00016000]
[AM] 55. c:\program files\d-tools\daemon.exe
DAEMON'S HOME
Virtual DAEMON Manager
.text,.rdata,.data,.rsrc,

10000000[00020000]
[ M] 82. c:\windows\daemon.dll

Virtual DAEMON control library
UPX0,UPX1,.rsrc,

00D20000[0002D000]
[ M] 83. c:\program files\d-tools\pfctoc.dll
Padus(R), Inc.
CD/DVD pre-mastering toolkit for Win32
.text,.rdata,.data,.rsrc,.reloc,

00FA0000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

+ 00000658(1624) RUNDLL32.EXE
10000000[00017000]
[ M] 84. c:\windows\system32\nvmctray.dll
NVIDIA Corporation
NVIDIA Media Center Library
.text,.rdata,.data,.shared,.rsrc,.reloc,

00A30000[00032000]
[ M] 74. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,

009F0000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

+ 00000660(1632) SOUNDMAN.EXE
00400000[00015000]
[AM] 57. c:\windows\soundman.exe
Realtek Semiconductor Corp.
Realtek Sound Manager
.text,.rdata,.data,.sxdata,.rsrc,

10000000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

+ 00000678(1656) realsched.exe
00400000[0002F000]
[AM] 59. c:\program files\common files\real\update_ob\realsched.exe
RealNetworks, Inc.
RealNetworks Scheduler
.text,.rdata,.data,.rsrc,

10000000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

+ 00000688(1672) runiep.exe
00400000[00012000]
[AM] 60. c:\program files\rising\antispyware\runiep.exe
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware Monitor
.text,.rdata,.data,.rsrc,

00C20000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

+ 000006bc(1724) ctfmon.exe
10000000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

+ 00000790(1936) spoolsv.exe
008C0000[00008000]
[AM] 70. c:\windows\system32\mdimon.dll
Microsoft Corporation
Microsoft? Document Imaging
.text,.data,.rsrc,.reloc,

008D0000[00008000]
[ M] 85. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
Microsoft Corporation
Microsoft? Document Imaging
.text,.data,.rsrc,.reloc,

+ 000009e0(2528) Ras.exe
00400000[0013F000]
[ M] 86. c:\program files\rising\antispyware\ras.exe
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware
.text,.rdata,.data,.rsrc,

10000000[000A3000]
[ M] 87. c:\program files\rising\antispyware\rasgui.dll
Beijing Rising Technology Co., Ltd.
RasGUI
.text,.rdata,.data,.rsrc,.reloc,

01530000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

01810000[0002F000]
[ M] 88. c:\program files\rising\antispyware\engine.dll
Beijing Rising Technology Co., Ltd.
kaka engine
.text,.rdata,.data,.rsrc,.reloc,

02160000[00012000]
[ M] 89. c:\program files\rising\antispyware\zip.dll
rising
zip
UPX0,UPX1,.rsrc,

+ 00000b64(2916) wuauclt.exe
507E0000[00051000]
[ M] 90. c:\windows\system32\wucltui.dll
Microsoft Corporation
Windows Update Client UI Plugin
.text,.data,.rsrc,.reloc,

50E60000[0000C000]
[ M] 77. c:\windows\system32\wups2.dll
Microsoft Corporation
Windows Update client proxy stub 2
.text,.orpc,.data,.rsrc,.reloc,

10000000[00005000]
[ M] 91. c:\windows\system32\wucltui.dll.mui
Microsoft Corporation
Windows Update Client UI Plugin
.rsrc,.reloc,

00CF0000[0001B000]
[ M] 81. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,

newcenturymoon - 2007-7-20 10:00:00

你的杀毒软件报毒了？

jjdu3 - 2007-7-20 10:07:00

Trojan.DL.JS.Agent.lia还有Trojan.DL.VBS.Agent.xgk

newcenturymoon - 2007-7-20 10:09:00

清空IE缓存
单击浏览器菜单，并选择"Internet 选项"。
单击该对话框顶部的"常规"标签。
单击"Internet 临时文件"下面的"删除文件"。
选中"删除所有脱机内容"旁边的框。
单击"确定"。

另外你是局域网麽

jjdu3 - 2007-7-20 10:24:00

好像是网通的局域网

瑞星卡卡安全论坛