cmd.exe进程莫明出现，不占cpu 重装电脑还是存在!! bbs.ikaka.com

钻石心 - 2009-7-28 11:20:00

cmd.exe进程莫明出现，不占cpu 重装电脑还是存在!! 请高手帮忙弄一下,谢谢再谢谢!

有SREng.EXE 描扫日子如下,请高手帮我看一下,救救我!!:kaka4: :kaka4: :kaka4: :kaka4:

2009-07-28,11:11:43
System Repair Engineer 2.7.1.1261
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 3, v.5755 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
计划任务
API HOOK
隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Component Publisher]
<aliim><d:\Program Files\AliWangWang\aliim.exe> [(Verified)"Alisoft(Shanghai) Co., Ltd."]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<TPHOTKEY><C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe> []
<360Safetray><d:\Program Files\360\360Safe\safemon\360tray.exe /start> [(Verified)Qizhi Software (beijing) Co. Ltd]
<BDAgent><"C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"> [BitDefender S.R.L.]
<BitDefender Antiphishing Helper><"C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"> [BitDefender]
<Microsoft Pinyin IME Migration><C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE /INSTALL> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<WebCheck><%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Windows Component Publisher]
<SysTray><C:\WINDOWS\system32\stobject.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
<WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
<WinlogonNotify: tpfnf2><notifyf2.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
<WinlogonNotify: tphotkey><tphklock.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\system32\logon.scr> [(Verified)Microsoft Windows Component Publisher]
==================================
启动文件夹
[服务管理器]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\服务管理器.lnk --> C:\PROGRA~1\MICROS~3\80\Tools\Binn\sqlmangr.exe [Microsoft Corporation]><N>
==================================
服务
[ACU Configuration Service / ACS][Stopped/Manual Start]
<C:\WINDOWS\system32\acs.exe><N/A>
[Adobe LM Service / Adobe LM Service][Stopped/Manual Start]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[BitDefender Arrakis Server / Arrakis3][Stopped/Manual Start]
<"C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe"><BitDefender S.R.L. http://www.bitdefender.com>
[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
<C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[ThinkPad PM Service / IBMPMSVC][Running/Auto Start]
<C:\WINDOWS\system32\ibmpmsvc.exe><Lenovo>
[BitDefender Desktop Update Service / LIVESRV][Running/Auto Start]
<"C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe" /service><BitDefender SRL>
[MSSQLSERVER / MSSQLSERVER][Running/Auto Start]
<d:\PROGRA~1\MICROS~1\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
<C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[BitDefender Threat Scanner / scan][Stopped/Manual Start]
<C:\WINDOWS\System32\svchost.exe -kbdx-->C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll><S.C. BitDefender S.R.L>
[SQLSERVERAGENT / SQLSERVERAGENT][Running/Auto Start]
<d:\Program Files\Microsoft SQL Server\MSSQL\binn\sqlagent.exe -i MSSQLSERVER><Microsoft Corporation>
[BitDefender Virus Shield / VSSERV][Running/Auto Start]
<"C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe" /service><BitDefender S. R. L.>
==================================
驱动程序
[aeaudio / aeaudio][Running/Manual Start]
<system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[AEGIS Protocol (IEEE 802.1x) v3.4.10.0 / AegisP][Running/Auto Start]
<system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications>
[Agere Systems Soft Modem / AgereSoftModem][Running/Manual Start]
<system32\DRIVERS\AGRSM.sys><Agere Systems>
[Atheros Wireless Network Adapter Service / AR5211][Stopped/Manual Start]
<system32\DRIVERS\ar5211.sys><Atheros Communications, Inc.>
[ati2mtag / ati2mtag][Running/Manual Start]
<system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[bdfm / bdfm][Running/Manual Start]
<system32\drivers\bdfm.sys><BitDefender S.R.L. Bucharest, ROMANIA>
[BitDefender Firewall NDIS Filter Service / Bdfndisf][Running/Manual Start]
<system32\DRIVERS\bdfndisf.sys><BitDefender LLC>
[bdfsfltr / bdfsfltr][Running/Manual Start]
<system32\drivers\bdfsfltr.sys><BitDefender S.R.L. Bucharest, ROMANIA>
[bdftdif / bdftdif][Running/System Start]
<\??\C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys><BitDefender LLC>
[BDSelfPr / BDSelfPr][Running/Manual Start]
<\??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys><BitDefender S.R.L.>
[BDVEDISK / BDVEDISK][Running/Auto Start]
<\??\C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys><BitDefender S.R.L.>
[Intel(R) PRO/1000 Network Connection Driver / E1000][Running/Manual Start]
<system32\DRIVERS\e1000325.sys><Intel Corporation>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
<system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[IBMPMDRV / IBMPMDRV][Running/Manual Start]
<system32\DRIVERS\ibmpmdrv.sys><Lenovo.>
[NSC Infrared Device Driver / NSCIRDA][Running/Manual Start]
<system32\DRIVERS\nscirda.sys><National Semiconductor Corporation>
[nv / nv][Stopped/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Profos / Profos][Running/Manual Start]
<\??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
<\??\C:\WINDOWS\system32\Drivers\safeboxkrnl.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SATALink driver accelerator / SiFilter][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\SiWinAcc.sys><Silicon Image, Inc.>
[smwdm / smwdm][Running/Manual Start]
<system32\drivers\smwdm.sys><Analog Devices, Inc.>
[Trufos / Trufos][Running/Manual Start]
<\??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys><BitDefender S.R.L.>
==================================
浏览器加载项
[SafeMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <d:\Program Files\360\360Safe\safemon\safemon.dll, (Signed) 360.CN>
[信息检索(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[]
{e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
[BitDefender Toolbar]
{381FFDE8-2394-4f90-B10D-FC6124A40F8C} <C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll, Bitdefender>
[nEdit Control]
{32D72994-45B9-42B5-8980-FB561D1BE2D0} <C:\WINDOWS\system32\nEdit\nEdit.ocx, NetEase Information Technology (Beijing) Co. Ltd>
[BitDefender Toolbar]
{381FFDE8-2394-4F90-B10D-FC6124A40F8C} <C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll, Bitdefender>
[WangWangX Class]
{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} <D:\Program Files\AliWangWang\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.>
[]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[SafeMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <d:\Program Files\360\360Safe\safemon\safemon.dll, (Signed) 360.CN>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, (Signed) Adobe Systems, Inc.>
[PlayerCtrl Class]
{E05BC2A3-9A46-4A32-80C9-023A473F5B23} <d:\Program Files\Tencent\QQMusic\QzoneMusic.dll, 深圳腾讯科技>
[]
{E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[]
{FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[导出到 Microsoft Excel(&X)]
<res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000, N/A>

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

钻石心 - 2009-7-28 11:20:00

[添加到QQ表情]
<d:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
==================================
正在运行的进程
[PID: 900 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 972 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 1008 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4115]
[C:\WINDOWS\system32\tphklock.dll] [N/A, ]
[PID: 1052 / SYSTEM][C:\WINDOWS\system32\services.exe] [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[PID: 1064 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1224 / SYSTEM][C:\WINDOWS\system32\ibmpmsvc.exe] [Lenovo, 1.41]
[PID: 1252 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4115]
[C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2497]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1284 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1364 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1616 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1736 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 196 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 276 / SYSTEM][d:\PROGRA~1\MICROS~1\MSSQL\binn\sqlservr.exe] [Microsoft Corporation, 2000.080.2039.00]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\opends60.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\sqlsort.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\ums.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\Resources\2052\sqlevn70.RLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\SSNETLIB.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\SSmsLPCn.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\SSnmPN70.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\xpsqlbot.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\odsole70.dll] [Microsoft Corporation, 2000.080.2039.00]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\xpstar.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\SQLRESLD.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\SQLSVC.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\W95SCM.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\PROGRA~1\MICROS~1\MSSQL\binn\Resources\2052\SQLSVC.RLL] [Microsoft Corporation, 2000.080.0194.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\xpstar.RLL] [Microsoft Corporation, 2000.080.2039.00]
[PID: 784 / SYSTEM][d:\Program Files\Microsoft SQL Server\MSSQL\binn\sqlagent.exe] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\SQLRESLD.dll] [Microsoft Corporation, 2000.080.2039.00]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\SQLSVC.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\W95SCM.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\SEMMAP.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\SQLSVC.RLL] [Microsoft Corporation, 2000.080.0194.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\SEMMAP.RLL] [Microsoft Corporation, 2000.080.0194.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\sqlagent.RLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\SQLAGENT.DLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\BINN\SQLCMDSS.DLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\BINN\Resources\2052\SQLCMDSS.RLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\BINN\SQLREPSS.DLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\BINN\Resources\2052\SQLREPSS.RLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\BINN\SQLATXSS.DLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\ATXCORE.dll] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\ATXCORE.RLL] [Microsoft Corporation, 2000.080.2039.00]
[d:\Program Files\Microsoft SQL Server\MSSQL\BINN\Resources\2052\SQLATXSS.RLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\BINN\AXSCPHST.DLL] [Microsoft Corporation, 2000.080.2039.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\BINN\Resources\2052\AXSCPHST.RLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\WINDOWS\system32\DBmsLPCn.dll] [Microsoft Corporation, 2000.080.2039.00]
[PID: 1704 / soft-2009][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4115]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2497]
[PID: 320 / soft-2009][C:\WINDOWS\Explorer.EXE] [(Verified) Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1020]
[C:\Program Files\BitDefender\BitDefender 2009\bdfvsctx.dll] [BitDefender S.R.L., 12.0.11.37]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\system32\txmlutil.dll] [, 12, 0, 12, 5]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bdfvsctx.ui] [BitDefender S.R.L., 12.0.11.37]
[C:\Program Files\BitDefender\BitDefender 2009\bdshelxt.dll] [BitDefender S.R.L, 12, 0, 3, 2]
[C:\Program Files\BitDefender\BitDefender 2009\txmlx.dll] [BitDefender S.R.L., 12, 0, 4, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bdshelxt.ui] [, 12, 0, 0, 1]
[C:\Program Files\WinRAR\rarext.dll] [, ]
[D:\Program Files\AliWangWang\AliIMExt.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1]
[C:\WINDOWS\system32\WMASF.DLL] [Microsoft Corporation, 10.00.00.4060 built by: Microsoft]
[PID: 596 / soft-2009][C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe] [N/A, ]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[C:\Program Files\Lenovo\PkgMgr\HOTKEY_2\tphk_2k.dll] [N/A, ]
[C:\WINDOWS\system32\Oemdspif.dll] [ATI Technologies, Inc., 6.14.0012]
[PID: 616 / soft-2009][C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe] [N/A, ]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 640 / soft-2009][C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe] [Lenovo Group Limited, 1.17]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 472 / soft-2009][C:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1020]
[PID: 1744 / soft-2009][C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe] [Microsoft Corporation, 2000.080.2039.00]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\W95SCM.dll] [Microsoft Corporation, 2000.080.2039.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\SQLSVC.dll] [Microsoft Corporation, 2000.080.2039.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\SQLRESLD.dll] [Microsoft Corporation, 2000.080.2039.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\2052\SQLSVC.RLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\2052\sqlmangr.RLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 2308 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 2436 / soft-2009][C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe] [, 12, 0, 11, 54]
[C:\Program Files\BitDefender\BitDefender 2009\bdutils.dll] [BitDefender S.R.L., 12, 0, 11, 1]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\system32\txmlutil.dll] [, 12, 0, 12, 5]
[C:\Program Files\BitDefender\BitDefender 2009\npcomm.dll] [BitDefender LLC, 2.0.1.18]
[C:\Program Files\BitDefender\BitDefender 2009\issues.dll] [BitDefender, 12, 0, 11, 5]
[C:\Program Files\BitDefender\BitDefender 2009\bdguictl.dll] [BitDefender S.R.L., 12, 0, 11, 19]
[C:\Program Files\BitDefender\BitDefender 2009\txmlx.dll] [BitDefender S.R.L., 12, 0, 4, 1]
[C:\Program Files\BitDefender\BitDefender 2009\ProductInfo.dll] [BitDefender SRL, 12.0.11.1]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bdguictl.ui] [BitDefender S.R.L., 12, 0, 11, 19]
[C:\Program Files\BitDefender\BitDefender 2009\bdch.dll] [BitDefender S.R.L., 12, 0, 11, 3]
[C:\Program Files\BitDefender\BitDefender 2009\dbghelp.dll] [Microsoft Corporation, 6.6.0007.5 (debuggers(dbg).051021-1446)]
[C:\Program Files\BitDefender\BitDefender 2009\bdusers.dll] [BitDefender S.R.L, 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\seccenter.ui] [, 12, 0, 11, 54]
[C:\Program Files\BitDefender\BitDefender 2009\hmplugin.dll] [Bitdefender, 12, 0, 11, 3]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\hmplugin.ui] [Bitdefender, 12, 0, 11, 3]
[C:\Program Files\BitDefender\BitDefender 2009\hmcore.dll] [, 12, 0, 140, 0]
[C:\Program Files\BitDefender\BitDefender 2009\security.dll] [BitDefender S.R.L, 12, 0, 11, 2]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\security.ui] [BitDefender S.R.L, 12, 0, 11, 2]
[C:\Program Files\BitDefender\BitDefender 2009\bdfvsecp.dll] [BitDefender S.R.L, 12.0.11.6]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bdfvsecp.ui] [BitDefender S.R.L, 12.0.11.6]

钻石心 - 2009-7-28 11:21:00

[C:\Program Files\BitDefender\BitDefender 2009\general.dll] [S.C. BitDefender S.R.L, PRODUCT_VERSION_STR]
[C:\Program Files\BitDefender\BitDefender 2009\bdplugin.dll] [BITDEFENDER S.R.L., 12.0.5.1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\general.ui] [S.C. BitDefender S.R.L, PRODUCT_VERSION_STR]
[C:\Program Files\BitDefender\BitDefender 2009\dashboard.dll] [BitDefender S.R.L., 12, 0, 11, 5]
[C:\Program Files\BitDefender\BitDefender 2009\advanced.dll] [S.C. BitDefender S.R.L, 12, 0, 140, 0]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\advanced.ui] [S.C. BitDefender S.R.L, 12, 0, 140, 0]
[C:\Program Files\BitDefender\BitDefender 2009\sysinfo.dll] [BitDefender S.R.L., 12, 0, 11, 3]
[C:\Program Files\BitDefender\BitDefender 2009\bdelev.DLL] [BitDefender S.R.L., 12, 0, 10, 19]
[C:\Program Files\BitDefender\BitDefender 2009\antivirus.dll] [BitDefender S.R.L., 12, 0, 7, 2]
[C:\Program Files\BitDefender\BitDefender 2009\vshield.dll] [BitDefender S.R.L., 12, 0, 11, 23]
[C:\Program Files\BitDefender\BitDefender 2009\BTCommon.dll] [Bitdefender, 12, 0, 11, 30]
[C:\Program Files\BitDefender\BitDefender 2009\vscan.dll] [BitDefender S.R.L., 12, 0, 11, 24]
[C:\Program Files\BitDefender\BitDefender 2009\exclude.dll] [BitDefender S.R.L., 12, 0, 11, 4]
[C:\Program Files\BitDefender\BitDefender 2009\BDWizard.dll] [BitDefender, 12, 0, 11, 3]
[C:\Program Files\BitDefender\BitDefender 2009\excmgr.dll] [BitDefender S.R.L., 12, 0, 7, 2]
[C:\Program Files\BitDefender\BitDefender 2009\quarui.dll] [BitDefender S.R.L., 12, 0, 11, 23]
[C:\Program Files\BitDefender\BitDefender 2009\antispam.dll] [BitDefender S.R.L., 12, 0, 11, 28]
[C:\Program Files\BitDefender\BitDefender 2009\pcontrol.dll] [BitDefender S.R.L., 12, 0, 11,13]
[C:\Program Files\BitDefender\BitDefender 2009\Wizards.dll] [BitDefender S.R.L., 12, 0, 11, 3]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\Wizards.ui] [BitDefender S.R.L., 12, 0, 11, 3]
[C:\Program Files\BitDefender\BitDefender 2009\antispy.dll] [BitDefender S.R.L, 12, 0, 5, 4]
[C:\Program Files\BitDefender\BitDefender 2009\ashield.dll] [BitDefender S.R.L, 12, 0, 11, 2]
[C:\Program Files\BitDefender\BitDefender 2009\privintf.dll] [BitDefender S.R.L., 12, 0, 11, 5]
[C:\Program Files\BitDefender\BitDefender 2009\registry.dll] [BitDefender S.R.L, 12, 0, 10, 1]
[C:\Program Files\BitDefender\BitDefender 2009\cookie.dll] [BitDefender S.R.L, 12, 0, 10, 1]
[C:\Program Files\BitDefender\BitDefender 2009\script.dll] [BitDefender S.R.L, 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\fwgui.dll] [BitDefender LLC, 4.0.0.27]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\fwgui.ui] [BitDefender LLC, 4.0.0.27]
[C:\Program Files\BitDefender\BitDefender 2009\Vulnerability.dll] [BitDefender S.R.L, 12, 0, 11, 4]
[C:\Program Files\BitDefender\BitDefender 2009\encryption.dll] [BitDefender S.R.L., 12.0.7.3]
[C:\Program Files\BitDefender\BitDefender 2009\IMEncUI.dll] [BitDefender S.R.L., 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\IMEncUI.ui] [BitDefender S.R.L., 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\bdfvconp.dll] [BitDefender S.R.L., 12, 0, 11, 14]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bdfvconp.ui] [BitDefender S.R.L., 12, 0, 11, 14]
[C:\Program Files\BitDefender\BitDefender 2009\ProductTweaksPlugin.dll] [BitDefender, 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\dbokfui.dll] [BITDEFENDER S.R.L., 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\ProductTweaksPlugin.ui] [BitDefender, 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\live.dll] [BitDefender SRL, 12, 0, 11, 8]
[C:\Program Files\BitDefender\BitDefender 2009\reg_sup.dll] [S.C. BitDefender S.R.L, 12, 0, 140, 0]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\reg_sup.ui] [S.C. BitDefender S.R.L, 12, 0, 140, 0]
[C:\Program Files\BitDefender\BitDefender 2009\reginfo.dll] [S.C. BitDefender S.R.L, 12, 0, 140, 0]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\reginfo.ui] [S.C. BitDefender S.R.L, 12, 0, 140, 0]
[D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1020]
[C:\Program Files\BitDefender\BitDefender 2009\actxcont.dll] [N/A, ]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\issues.ui] [BitDefender, 12, 0, 11, 5]
[C:\Program Files\BitDefender\BitDefender 2009\bdmcon.dll] [S.C. BitDefender S.R.L, 12, 0, 11, 6]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bdmcon.ui] [S.C. BitDefender S.R.L, 12, 0, 11, 6]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\dashboard.ui] [BitDefender S.R.L., 12, 0, 11, 5]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\sysinfo.ui] [BitDefender S.R.L., 12, 0, 11, 3]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\antivirus.ui] [BitDefender S.R.L., 12, 0, 7, 2]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\vshield.ui] [BitDefender S.R.L., 12, 0, 11, 21]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\vscan.ui] [BitDefender S.R.L., 12, 0, 11, 24]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\exclude.ui] [BitDefender S.R.L., 12, 0, 11, 4]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\quarui.ui] [BitDefender S.R.L., 12, 0, 11, 23]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\antispam.ui] [BitDefender S.R.L., 12, 0, 11, 27]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\pcontrol.ui] [BitDefender S.R.L., 12, 0, 11,13]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\antispy.ui] [BitDefender S.R.L, 12, 0, 5, 4]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\ashield.ui] [BitDefender S.R.L, 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\privintf.ui] [BitDefender S.R.L., 12, 0, 11, 5]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\registry.ui] [BitDefender S.R.L, 12, 0, 10, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\cookie.ui] [BitDefender S.R.L, 12, 0, 10, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\script.ui] [BitDefender S.R.L, 12, 0, 10, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\Vulnerability.ui] [BitDefender S.R.L, 12, 0, 11, 4]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\encryption.ui] [, 12, 0, 0, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\live.ui] [BitDefender SRL, 12, 0, 11, 8]
[C:\Program Files\BitDefender\BitDefender 2009\bwlist.dll] [BitDefender S.R.L., 12, 0, 11, 7]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bwlist.ui] [BitDefender S.R.L., 12, 0, 11, 7]
[C:\Program Files\BitDefender\BitDefender 2009\BDChartActiveX.dll] [BitDefender S.R.L., 12, 0, 11, 1]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\BTCommon.ui] [Bitdefender, 12, 0, 11, 30]
[C:\Program Files\BitDefender\BitDefender 2009\proxymgrui.dll] [BitDefender S.R.L., 12, 0, 11, 10]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\proxymgrui.ui] [BitDefender S.R.L., 12, 0, 11, 10]
[C:\Program Files\BitDefender\BitDefender 2009\proxymgr.dll] [BitDefender S.R.L., 12, 0, 7, 4]
[PID: 1692 / soft-2009][D:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQHelperDll.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [TENCENT, 8,0,978,1833]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1020]
[D:\Program Files\Tencent\QQ\QQAPI.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\LoginCtrl.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\LoginCtrlRes.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQRes.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQMainFrame.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQPlugin.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\UnReadMsgMgr.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQAllInOne.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\SCCore.dll] [TENCENT, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\CameraDll.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\CQQApplication.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\FlashAvatarDll.dll] [, 1, 0, 0, 1]
[D:\Program Files\Tencent\QQ\NewSkin.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\MailSummary.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQSpace.dll] [TENCENT, 8,0,978,1833]
[C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx] [Adobe Systems, Inc., 9,0,115,0]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[D:\Program Files\Tencent\QQ\OEMApplication.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQAvatar.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQGroupMng.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQPet.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QRingMng.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\UserDefinedHead.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQCustomFace.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\GroupConnection.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\ImageOle.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQLiveQMng.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\LongConnection.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\PhoneAPI.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[C:\WINDOWS\system32\WINWB86.IME] [Microsoft Corporation, 4.00.950]
[D:\Program Files\Tencent\QQ\BQQApplication.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQMagicFace.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\CommercesMng.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\PersonalDesktop.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 330]
[D:\Program Files\Tencent\QQ\QQFileTransfer.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\QQSceneMng.dll] [TENCENT, 8,0,978,1833]
[D:\Program Files\Tencent\QQ\AddrSearch.dll] [Tencent, 2, 3, 12, 11]
[PID: 2840 / soft-2009][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1020]
[C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll] [Bitdefender, 12.0.11.14]
[C:\Program Files\BitDefender\BitDefender 2009\BTCommon.dll] [Bitdefender, 12, 0, 11, 30]
[C:\Program Files\BitDefender\BitDefender 2009\bdutils.dll] [BitDefender S.R.L., 12, 0, 11, 1]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\Program Files\BitDefender\BitDefender 2009\bdguictl.dll] [BitDefender S.R.L., 12, 0, 11, 19]
[C:\Program Files\BitDefender\BitDefender 2009\txmlx.dll] [BitDefender S.R.L., 12, 0, 4, 1]
[C:\WINDOWS\system32\txmlutil.dll] [, 12, 0, 12, 5]
[C:\Program Files\BitDefender\BitDefender 2009\ProductInfo.dll] [BitDefender SRL, 12.0.11.1]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\Program Files\BitDefender\BitDefender 2009\npcomm.dll] [BitDefender LLC, 2.0.1.18]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bdguictl.ui] [BitDefender S.R.L., 12, 0, 11, 19]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\BTCommon.ui] [Bitdefender, 12, 0, 11, 30]
[C:\WINDOWS\system32\WMASF.DLL] [Microsoft Corporation, 10.00.00.4060 built by: Microsoft]
[D:\Program Files\360\360Safe\safemon\urlproc.dll] [360.CN, 1, 0, 0, 1006]
[C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx] [Adobe Systems, Inc., 9,0,115,0]
[C:\WINDOWS\system32\WINWB86.IME] [Microsoft Corporation, 4.00.950]
[PID: 2080 / soft-2009][C:\WINDOWS\system32\taskmgr.exe] [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1020]
[PID: 2952 / soft-2009][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1020]
[C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll] [Bitdefender, 12.0.11.14]
[C:\Program Files\BitDefender\BitDefender 2009\BTCommon.dll] [Bitdefender, 12, 0, 11, 30]
[C:\Program Files\BitDefender\BitDefender 2009\bdutils.dll] [BitDefender S.R.L., 12, 0, 11, 1]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\Program Files\BitDefender\BitDefender 2009\bdguictl.dll] [BitDefender S.R.L., 12, 0, 11, 19]
[C:\Program Files\BitDefender\BitDefender 2009\txmlx.dll] [BitDefender S.R.L., 12, 0, 4, 1]
[C:\WINDOWS\system32\txmlutil.dll] [, 12, 0, 12, 5]
[C:\Program Files\BitDefender\BitDefender 2009\ProductInfo.dll] [BitDefender SRL, 12.0.11.1]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\Program Files\BitDefender\BitDefender 2009\npcomm.dll] [BitDefender LLC, 2.0.1.18]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\bdguictl.ui] [BitDefender S.R.L., 12, 0, 11, 19]
[C:\Program Files\BitDefender\BitDefender 2009\CHS\BTCommon.ui] [Bitdefender, 12, 0, 11, 30]
[C:\WINDOWS\system32\WMASF.DLL] [Microsoft Corporation, 10.00.00.4060 built by: Microsoft]
[D:\Program Files\360\360Safe\safemon\urlproc.dll] [360.CN, 1, 0, 0, 1006]
[C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx] [Adobe Systems, Inc., 9,0,115,0]
[PID: 2592 / soft-2009][C:\Documents and Settings\Administrator\桌面\sreng2\SREngLdr.EXE] [Smallfrogs Studio, 2.7.1.1261]
[PID: 2564 / soft-2009][C:\Documents and Settings\Administrator\桌面\sreng2\SRE26d75638.EXE] [Smallfrogs Studio, 2.7.1.1261]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1020]
[C:\Documents and Settings\Administrator\桌面\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 276, D:\PROGRA~1\MICROS~1\MSSQL\BINN\SQLSERVR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 596, C:\PROGRA~1\LENOVO\PKGMGR\HOTKEY\TPHKMGR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 616, C:\PROGRAM FILES\LENOVO\PKGMGR\HOTKEY\TPONSCR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 640, C:\PROGRAM FILES\LENOVO\PKGMGR\HOTKEY_1\TPSCREX.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1744, C:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLMANGR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2436, C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2009\SECCENTER.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2592, C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SRENG2\SRENGLDR.EXE]
==================================
计划任务
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================

[/CODE]

sinoer - 2009-7-28 11:23:00

log文件以附件形式发上来

daemonz - 2009-7-28 11:51:00

日志中没看出什么异常，也没有cmd.exe进程啊
c:\windows\system32\txmlutil.dll 这个我不知道是什么

基牛 - 2009-7-28 18:33:00

建议全盘搜索CMD.exe这个文件，不在C:\Windows\system32和C:\WINDOWS\system32\Dllcache\这个目录下的cmd.exe全部删除
建议装防火墙，可以组织cmd.exe被恶意程序利用:kaka9:

钻石心 - 2009-7-28 23:42:00

谢谢大家!我的电脑是装有SQL2000 的,上次在网上查到好象是有人利用SQL2000的端口的一种木马,重新装过好几次电脑,SQL2000一开,一上游戏进程里就出现在好几个cmd.exe
但关了SQL2000 关cmd.exe进程后就不出行了我好痛苦!!:kaka4: :kaka4: :kaka4: :kaka4: :kaka4:

钻石心 - 2009-7-28 23:53:00

这是我的扫描LOG日志,高手帮我看一下,谢谢再谢谢:kaka1: :kaka1: :kaka1:

附件: SREngLOG.log

零度的穷浪漫 - 2009-7-29 5:10:00

bitdefender你装的杀毒软件？我还是第一次接触:kaka6:
cmd.exe是XP系统的命令提示符程序，可以执行一些在DOS下执行的应用程序，但是并不会随系统启动时运行，这有可能是个木马或者其他病毒程序，建议查杀
打开“任务管理器”，在“进程”中结束cmd.exe的运行可不可以？
可以1）、如果安装文件就在硬盘上，而且系统是从硬盘的安装目录装的，那先将这个安装目录改个名字
　　2）、删除c:\winnt\system32\dllcache（没有这个子文件）\cmd.exe，
　　3）、然后再删除system32\cmd.exe
还可以：禁止运行命令解释器和批处理文件方法：通过修改注册表，可以禁止用户使用命令解释器(CMD.exe)和运行批处理文件(.bat文件)。新建一个双字节(REG＿DWORD)执行HKEY＿CURRENT＿USER＼Software＼Policies＼ Microsoft＼Windows＼System＼DisableCMD，修改其值为2，命令解释器和批处理文件都不能被运行。修改其值为1，则只是禁止命令解释器的运行。就是替换掉系统的cmd.exe文件。但是由于此文件受系统保护，所以必须用一种特殊的办法。

daemonz - 2009-7-29 7:46:00

那试试重装 SQL2000

瑞星卡卡安全论坛