瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 瑞星杀毒不能启动,闪一下自动关闭,防火墙变成小灰盾

123   2  /  3  页   跳转页

瑞星杀毒不能启动,闪一下自动关闭,防火墙变成小灰盾

收藏
rkbo
头像
初生襁褓狮
  • 帖子:35
  • 注册: 2006-07-22
  • 来自:
发表于： 2006-07-22 15:40 | 只看楼主 短消息 资料
字号： 小 中 大 11楼

正在运行的进程
[PID: 848][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 928][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 952][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
[PID: 1016][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1168][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1232][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1372][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1416][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1592][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1648][c:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [c:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [c:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [c:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [c:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [c:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 1992][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Common Files\Logitech\LVMVFM\LVPrcInj.dll]  <Logitech Inc.><9.0.2.1076>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><7.0.0.2004121400>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll]  <Adobe Systems Inc.><7.0.0.2004121400\0>
    [C:\Program Files\Adobe\Acrobat 7.0\Distillr\ADIST32.dll]  <Adobe Systems Incorporated.><7.0.0.0>
[PID: 2040][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\AdobePDF.dll]  <Adobe Systems Incorporated.><7.0.0.00>
    [C:\Program Files\Adobe\Acrobat 7.0\Distillr\adistres.dll]  <Adobe Systems Incorporated.><7.0.0.2004121400>
[PID: 200][c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe]  <Logitech Inc.><9.0.2.1076>
[PID: 300][C:\WINDOWS\system32\msime.exe]  <Microsoft Corporation><5.1.2600.2180>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 372][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.1.0.38>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 404][C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe]  <Adobe Systems Inc.><6.0.1.2004121400>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 416][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.1622>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 428][C:\Program Files\Logitech\Video\CameraAssistant.exe]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\Video\VLib.dll]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\Video\VxLib.dll]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\Video\VxLibRes.dll]  <Logitech Inc.><9.0.2.1077>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\Video\CameraAssistantRes.dll]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
    [C:\WINDOWS\system32\lvmaenum.dll]  <Logitech Inc.><9.0.2.1076>
[PID: 504][C:\WINDOWS\system32\ElkCtrl.exe]  <Logitech Inc.><8.5.0.1137>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\ElkCtlPS.dll]  <Logitech Inc.><8.5.0.1137>
    [C:\WINDOWS\system32\lvmaenum.dll]  <Logitech Inc.><9.0.2.1076>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 524][C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe]  <Musicmatch Inc.><9.0.0.1>
    [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMVCP70.dll]  <Sample Corporation><7.00.0000>
    [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMVCR70.dll]  <Sample Corporation><7.00.0000>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
[PID: 532][C:\WINDOWS\system32\SVOHOST.exe]  <N/A><N/A>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 540][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 604][C:\Program Files\Common Files\Real\Update_OB\realevent.exe]  <RealNetworks, Inc.><0.1.0.1622>
    [C:\WINDOWS\system32\PNCRT.dll]  <Real Networks, Inc><6.0.0.0>
    [C:\Program Files\Common Files\Real\Update_OB\rnms3270.dll]  <RealNetworks, Inc.><7.0.0.1452>
    [C:\Program Files\Common Files\Real\Common\objb3201.dll]  <RealNetworks, Inc.><0.1.0.3389>
    [C:\Program Files\Common Files\Real\RCAPlugins\uisy3201.dll]  <RealNetworks, Inc.><0.1.0.1760>
    [C:\Program Files\Common Files\Real\Update_OB\rnad3201.dll]  <RealNetworks, Inc.><0.1.0.1622>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Common Files\Real\Update_OB\rnqu3270.dll]  <RealNetworks, Inc.><7.0.0.1685>
    [C:\Program Files\Common Files\Real\Update_OB\setu3270.dll]  <RealNetworks, Inc.><7.0.0.2311>
    [C:\Program Files\Common Files\Real\Plugins\http3260.dll]  <RealNetworks, Inc.><6.0.7.4278>
[PID: 708][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 820][C:\Program Files\Logitech\SetPoint\SetPoint.exe]  <Logitech Inc.><2.47.864>
    [C:\WINDOWS\system32\KemUtil.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Logitech\SetPoint\SetPointCOM.dll]  <Logitech Inc.><2.47.864>
    [C:\WINDOWS\system32\kemutb.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Logitech\SetPoint\KGame.dll]  <Logitech Inc.><2.47.864>
    [C:\WINDOWS\system32\KemWnd.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Logitech\SetPoint\GameHook.dll]  <Logitech Inc.><2.47.864>
    [C:\WINDOWS\system32\KemXML.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Logitech\SetPoint\IMHook.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Common Files\Logitech\KHAL\KhalApi.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Logitech\SetPoint\LCabHandler.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Logitech\SetPoint\KEMHook.dll]  <Logitech Inc.><2.47.864>
[PID: 1920][C:\WINDOWS\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.8040>
[PID: 332][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 452][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 788][C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE]  <Logitech Inc.><2.47.842>
    [C:\Program Files\Common Files\Logitech\KHAL\KHALAPI.DLL]  <Logitech Inc.><2.47.864>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Common Files\Logitech\KHAL\KHALITCH.DLL]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Common Files\Logitech\KHAL\KHALMW.DLL]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Common Files\Logitech\KHAL\KHALHPP.DLL]  <Logitech Inc.><2.47.864>
[PID: 2116][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2628][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3864][C:\WINDOWS\system32\wuauclt.exe]  <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
[PID: 2984][C:\Downloads\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\Program Files\Common Files\Logitech\LVMVFM\LVPrcInj.dll]  <Logitech Inc.><9.0.2.1076>
    [C:\WINDOWS\system32\winscok.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
gototop
 
mopery
头像
卡卡技术团队
  • 帖子:17737
  • 注册: 2005-12-06
  • 来自:New York
卡卡名人堂论坛9周年纪念
发表于： 2006-07-22 15:46 | 短消息 资料
字号： 小 中 大 12楼

[C:\WINDOWS\system32\winscok.dll] <N/A><N/A>
安全模式删掉这个..

用HJ 修复
O4 - 启动项HKLM\\Run: [SoundMam] C:\WINDOWS\system32\SVOHOST.exe
删除
C:\WINDOWS\system32\SVOHOST.exe
gototop
 
stam0
头像
初生襁褓狮
  • 帖子:8
  • 注册: 2006-06-15
  • 来自:
发表于： 2006-07-22 15:53 | 短消息 资料
字号： 小 中 大 13楼

楼主的那些个程序也太多了吧？启动项也是太多了，电脑这样也刚得起？建议下个StartupMonitor.exe，他可能帮助你管理你的启动项的，没有经过允许，任何程序都不能在计算机启动的时候自动运行的。
PS：楼主是UESTC的吧？大几？我也是
gototop
 
rkbo
头像
初生襁褓狮
  • 帖子:35
  • 注册: 2006-07-22
  • 来自:
发表于： 2006-07-22 16:41 | 只看楼主 短消息 资料
字号： 小 中 大 14楼

好像现在好多了，以前一启动老出的那个16位dos系统错也消失了，又把瑞星重修复安装了一下，重启了n次。

To stam0

我早工作拉，是你的老前辈了。
gototop
 
mopery
头像
卡卡技术团队
  • 帖子:17737
  • 注册: 2005-12-06
  • 来自:New York
卡卡名人堂论坛9周年纪念
发表于： 2006-07-22 16:45 | 短消息 资料
字号： 小 中 大 15楼

.....解决了?
gototop
 
8897603
头像
锋芒艾服狮
  • 帖子:1177
  • 注册: 2005-01-14
  • 来自:
发表于： 2006-07-22 16:45 | 短消息 资料
字号： 小 中 大 16楼

msime.exe是病毒，建议你立即结束进程，用杀毒软件扫描。

进程文件:msime.exe
进程名称:msime
描述:msime.exe是一个病毒文件，通常出现在system32下，同时还有一个winmer.exe文件。
出品者:未知
属于:trojan
系统进程:否
后台进程:是
使用网络:是
硬件相关:否
常见错误:未知
内存使用:未知
安全等级:3
间谍软件:否
广告软件:否
病毒:是
木马:是
gototop
 
rkbo
头像
初生襁褓狮
  • 帖子:35
  • 注册: 2006-07-22
  • 来自:
发表于： 2006-07-22 16:49 | 只看楼主 短消息 资料
字号： 小 中 大 17楼

是呀，好神奇！

又重启试了一下，瑞星监控和防火墙都自动启动了。

还又个小问题，就是资源管理器的文件夹选项的显示隐藏文件还是不管用，刚建了个空文本，设为隐藏，就再也没了踪影哈，谢谢你，辛苦了！
gototop
 
rkbo
头像
初生襁褓狮
  • 帖子:35
  • 注册: 2006-07-22
  • 来自:
发表于： 2006-07-22 21:53 | 只看楼主 短消息 资料
字号： 小 中 大 18楼

再给看看吧，现在重启监控被禁用，但修复安装还能起来，但问题是我的奇迹玩不成了，一登陆，游戏画面一闪就没了，痛苦啊～～～

还有就是一打开我的电脑，这边就小手电筒扫呀扫呀，要搜差不多15～20秒才能显示出几个驱动器符号来。

用SREng扫描了日志，看看有啥办法没？

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
    <LogitechSoftwareUpdate><"C:\Program Files\Logitech\Video\ManifestEngine.exe" boot>  []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
    <run><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <SoundMan><SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [NVIDIA Corporation]
    <nwiz><nwiz.exe /install>  [NVIDIA Corporation]
    <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>  [NVIDIA Corporation]
    <Acrobat Assistant 7.0><"C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe">  [Adobe Systems Inc.]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>  [RealNetworks, Inc.]
    <LogitechCameraAssistant><C:\Program Files\Logitech\Video\CameraAssistant.exe>  [Logitech Inc.]
    <LogitechVideo[inspector]><C:\Program Files\Logitech\Video\InstallHelper.exe /inspect>  [Logitech Inc.]
    <LogitechCameraService(E)><C:\WINDOWS\system32\ElkCtrl.exe /automation>  [Logitech Inc.]
    <Logitech Hardware Abstraction Layer><KHALMNPR.EXE>  [Logitech Inc.]
    <mmtask><"C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe">  [Musicmatch Inc.]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <CheckFaultKernel><C:\WINDOWS\system32\mswdm.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\SYSTEM32\Userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
gototop
 
rkbo
头像
初生襁褓狮
  • 帖子:35
  • 注册: 2006-07-22
  • 来自:
发表于： 2006-07-22 21:54 | 只看楼主 短消息 资料
字号： 小 中 大 19楼

启动文件夹
[Microsoft Office]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N>
[Logitech SetPoint]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Logitech SetPoint.lnk><N>

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Logitech Process Monitor / LVPrcSrv]
  <c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe><Logitech Inc.>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Rising Proxy  Service / RfwProxySrv]
  <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
  <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><N/A>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>

==================================
浏览器加载项
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[AcroIEToolbarHelper Class]
  {AE7CD045-E861-484f-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Adobe PDF]
  {47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[SSReaderPlug Control]
  {3359C0B1-2363-40B3-AFCA-1ABC799AC486} <C:\WINDOWS\system32\SSREAD~1.OCX, CX>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, >
[Blueskyvoice Control]
  {991481A7-4669-4E15-8C24-100404E1F5CB} <C:\WINDOWS\DOWNLO~1\BLUESK~1.OCX, 蓝天工作室(http://www.bluesky.cn)>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Adobe PDF]
  {47833539-D0C5-4125-9FA8-0819E2EAAC93} <C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[PortalCom R01]
  {817C90B5-1688-42BE-9044-58422DB088B2} <C:\WINDOWS\PortalAxR01.ocx, Huawei Co. Ltd.>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[AcroIEToolbarHelper Class]
  {AE7CD045-E861-484F-8273-0445EE161910} <C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll, Adobe Systems Incorporated>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[Convert link target to Adobe PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[Convert link target to existing PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[Convert selected links to Adobe PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html, N/A>
[Convert selected links to existing PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html, N/A>
[Convert selection to Adobe PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[Convert selection to existing PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[Convert to Adobe PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html, N/A>
[Convert to existing PDF]
  <res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html, N/A>
[使用FlashExplorer搜索动画]
  <C:\Program Files\FlashExplorer\IELinkAll.htm, N/A>
[使用FlashExplorer播放]
  <C:\Program Files\FlashExplorer\IELink.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[加入POCO网摘(&K)]
  <http://my.poco.cn/fav/rightClick.php, N/A>
[导出当前页到超星阅览器(&A)]
  <C:\Program Files\SSREADER36\ss_all.htm, N/A>
[导出选中部分到超星阅览器(&S)]
  <C:\Program Files\SSREADER36\ss_select.htm, N/A>
[我的POCO网摘(&O)]
  <http://my.poco.cn/fav/open_myfav.php, N/A>
gototop
 
rkbo
头像
初生襁褓狮
  • 帖子:35
  • 注册: 2006-07-22
  • 来自:
发表于： 2006-07-22 21:55 | 只看楼主 短消息 资料
字号： 小 中 大 20楼

正在运行的进程
[PID: 848][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 928][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 952][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 1016][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1164][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1232][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1376][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1412][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1536][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1648][c:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [c:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [c:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [c:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [c:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [c:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 1896][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\AdobePDF.dll]  <Adobe Systems Incorporated.><7.0.0.00>
    [C:\Program Files\Adobe\Acrobat 7.0\Distillr\adistres.dll]  <Adobe Systems Incorporated.><7.0.0.2004121400>
[PID: 2008][c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe]  <Logitech Inc.><9.0.2.1076>
[PID: 188][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
    [C:\Program Files\Common Files\Logitech\LVMVFM\LVPrcInj.dll]  <Logitech Inc.><9.0.2.1076>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><7.0.0.2004121400>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll]  <Adobe Systems Inc.><7.0.0.2004121400\0>
    [C:\Program Files\Adobe\Acrobat 7.0\Distillr\ADIST32.dll]  <Adobe Systems Incorporated.><7.0.0.0>
[PID: 260][c:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
    [c:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [c:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [c:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 408][C:\WINDOWS\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.8040>
[PID: 444][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 732][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.1.0.38>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 764][C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe]  <Adobe Systems Inc.><6.0.1.2004121400>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 772][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.1622>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 780][C:\Program Files\Logitech\Video\CameraAssistant.exe]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\Video\VLib.dll]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\Video\VxLib.dll]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\Video\VxLibRes.dll]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\Video\CameraAssistantRes.dll]  <Logitech Inc.><9.0.2.1077>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 796][C:\WINDOWS\system32\ElkCtrl.exe]  <Logitech Inc.><8.5.0.1137>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
[PID: 828][C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe]  <Musicmatch Inc.><9.0.0.1>
    [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMVCP70.dll]  <Sample Corporation><7.00.0000>
    [C:\Program Files\Musicmatch\Musicmatch Jukebox\MMVCR70.dll]  <Sample Corporation><7.00.0000>
    [C:\Program Files\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.47.864>
gototop
 
<<上一主题|下一主题>>
123   2  /  3  页   跳转页
页面顶部
Powered by Discuz!NT