请问专家这是什么病毒？ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请问专家这是什么病毒？

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

请问专家这是什么病毒？

杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	发表于： 2006-11-29 17:04 \| 只看楼主短消息资料字号：小中大 1楼请问专家这是什么病毒？ NsPack 2006-11-29 18:17:58
杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	分享到：

杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	发表于： 2006-11-29 17:05 \| 只看楼主短消息资料字号：小中大 2楼附件: 文件名:55414120061129165626.JPG 下载次数:231 文件类型:image/pjpeg 文件大小: 上传时间:2006-11-29 17:05:12 描述:
杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄

可爱滴小白初生襁褓狮帖子:43 注册: 2006-11-28 来自:	发表于： 2006-11-29 17:10 \| 短消息资料字号：小中大 3楼好象是木马吧``
可爱滴小白初生襁褓狮帖子:43 注册: 2006-11-28 来自:

杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	发表于： 2006-11-29 17:18 \| 只看楼主短消息资料字号：小中大 4楼这个新病毒导致出现这种情况，害的我瑞星升级不能，卡卡社区上不了附件: 文件名:55414120061129170934.JPG 下载次数:228 文件类型:image/pjpeg 文件大小: 上传时间:2006-11-29 17:18:20 描述:
杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄

红夜鬼1 横据古稀狮帖子:8602 注册: 2006-10-18 来自:	发表于： 2006-11-29 17:42 \| 短消息资料字号：小中大 5楼好了吗, 请下载SREng2（最新版），使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。下载地址 http://www.kztechs.com/sreng/sreng2.zip
红夜鬼1 横据古稀狮帖子:8602 注册: 2006-10-18 来自:

杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	发表于： 2006-11-29 17:55 \| 只看楼主短消息资料字号：小中大 6楼好了99％了，还有1％，怎么处理？我贴个图附件: 文件名:55414120061129174619.JPG 下载次数:291 文件类型:image/pjpeg 文件大小: 上传时间:2006-11-29 17:55:05 描述:
杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄

杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	发表于： 2006-11-29 18:01 \| 只看楼主短消息资料字号：小中大 7楼专家，我的日志来了 2006-11-29,17:47:39 System Repair Engineer 2.2.6.605 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] <PcSync><D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog> [Time Information Services Ltd.] <2.exe><C:\WINDOWS\system32\2.exe C:\WINDOWS\system32\drivers\6.sys Rundll32> [N/A] <Super Rabbit IEPro><D:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [Super Rabbit Soft] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] <run><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd> [N/A] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <StormCodec_Helper><"d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [N/A] <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh] <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation] <RavTask><"d:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <RfwMain><"d:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation] <nwiz><nwiz.exe /install> [N/A] <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation] <PCSuiteTrayApplication><D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup> [Nokia] <9l><C:\WINDOWS\system32\rundll32.exe jzbnz.dll Rundll32> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <RavStub><"d:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] ================================== 启动文件夹 N/A ================================== 服务 [Human Interface Device Access / HidServ] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [LightScribeService Direct Disc Labeling Service / LightScribeService] <"C:\Program Files\Common Files\LightScribe\LSSrvc.exe"><Hewlett-Packard Company> [NVIDIA Display Driver Service / NVSvc] <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation> [Rising Proxy Service / RfwProxySrv] <d:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <d:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"d:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon] <"d:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [ServiceLayer / ServiceLayer] <"C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe"><Nokia.> [System Recover Servic / SysreSrv] <sysresrv.exe><N/A> ================================== 驱动程序 [Rising TDI Base Driver / BaseTDI] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [CDRAL Place Holder Driver / Cdrw2kDrv] <system32\DRIVERS\cdrw2k.sys><Sonic Solutions> [C-Media WDM Audio Interface / cmuda] <system32\drivers\cmuda.sys><C-Media Inc> [ExpScaner / ExpScaner] <\??\d:\Program Files\Rising\Rav\ExpScan.sys><> [HookCont / HookCont] <\??\d:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd> [HookReg / HookReg] <\??\d:\Program Files\Rising\Rav\HookReg.sys><> [HookSys / HookSys] <\??\d:\Program Files\Rising\Rav\HookSys.sys><Rising> [HookUrl / HookUrl] <\??\d:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [IdeBusDr / IdeBusDr] <\SystemRoot\system32\DRIVERS\IdeBusDr.sys><Intel Corporation> [Intel(R) Ultra ATA Controller / IdeChnDr] <\SystemRoot\system32\DRIVERS\IdeChnDr.sys><Intel Corporation> [kmsinput / kmsinput] <\??\C:\WINDOWS\system32\drivers\kmsinput.sys><N/A> [MEMSCAN / MEMSCAN] <\??\d:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [mProcRs / mProcRs] <\??\d:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [npkcrypt / npkcrypt] <\??\D:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [nv / nv] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsAntiSpyware / RsAntiSpyware] <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising> [RsFwDrv / RsFwDrv] <\??\d:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS] <\??\D:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139] <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [Secdrv / Secdrv] <system32\DRIVERS\secdrv.sys><N/A> [Prolific2 Serial port driver / Ser2pl] <system32\DRIVERS\ser2pl.sys><Prolific Technology Inc.> [TCP/IP Protocol Driver / Tcpip] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> ================================== 浏览器加载项 [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [启动迅雷] {0062C9BD-B349-40DE-91A0-755F37ACD559} <d:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD> [新浪UC] {2253922F-1B26-4C74-8B57-E3AEE748DBB8} <D:\新浪UC\UC\uc.exe, 北京新浪信息技术有限公司> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <d:\Herosoft\HeroV8\STHSDVD.EXE, N/A> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <, N/A> [访问瑞星网站] {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} <http://www.rising.com.cn/?u=RSTB, N/A> [访问卡卡社区] {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} <http://www.ikaka.com/?u=RSTB, N/A> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [ActiveMovieControl Object] {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HHCtrl Object] {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD> [卡卡上网安全助手] {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [&使用迅雷下载] <d:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <d:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> [上传到QQ网络硬盘] <D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Program Files\Tencent\QQ\SendMMS.htm, N/A> ==================================
杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄

杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	发表于： 2006-11-29 18:03 \| 只看楼主短消息资料字号：小中大 8楼正在运行的进程 [PID: 440][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 504][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 528][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 572][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 584][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 728][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 776][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 840][d:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 868][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 916][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1036][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1060][d:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 47] [d:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [d:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [d:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [d:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [d:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [d:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [d:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [d:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 18, 1, 0, 12] [d:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 33] [d:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [d:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [d:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [d:\Program Files\Rising\Rav\HookWeb.dll] [rising, 18, 0, 0, 2] [d:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [d:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [d:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [d:\Program Files\Rising\Rav\MailMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [d:\Program Files\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6] [d:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 35] [d:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 18] [d:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [d:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16] [d:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 34] [d:\Program Files\Rising\Rav\RSUnpack.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 21] [d:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 24] [d:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7] [d:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [d:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [d:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7] [d:\Program Files\Rising\Rav\RsStore.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [d:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [PID: 1192][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.7801] [C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.7801] [C:\WINDOWS\system32\nvshell.dll] [N/A, N/A] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21] [d:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 1268][d:\program files\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 33] [d:\program files\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13] [d:\program files\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6] [d:\program files\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21] [d:\program files\rising\rfw\MonDrv.dll] [rs, 1, 0, 0, 4] [d:\program files\rising\rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9] [PID: 1380][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1504][d:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16] [d:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [d:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 1692][d:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 52] [d:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23] [d:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [d:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄

杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	发表于： 2006-11-29 18:04 \| 只看楼主短消息资料字号：小中大 9楼 [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 1784][C:\WINDOWS\system32\RunDll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system\cmicnfg.cpl] [C-Media Corporation, 1, 0, 0, 17] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 1804][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3536] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 1868][C:\Program Files\Common Files\LightScribe\LSSrvc.exe] [Hewlett-Packard Company, 1.4.44.1] [PID: 1932][D:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22] [D:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [D:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [D:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [D:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 1948][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.7801] [PID: 1988][D:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 39] [D:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26] [D:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [D:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [D:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [D:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [D:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [D:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 128][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)] [PID: 332][D:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE] [Nokia, 6, 81, 61, 4] [C:\WINDOWS\system32\ConnAPI.DLL] [Nokia., 6, 81, 62, 0] [D:\PROGRA~1\Nokia\NOKIAP~1\PCSCM.dll] [Nokia, 6, 81, 68, 0] [C:\Program Files\Common Files\PCSuite\ConfServer\ConfServer.dll] [Nokia, 6, 81, 26, 0] [D:\PROGRA~1\Nokia\NOKIAP~1\Lang\LaunchApplication_chi-sc.NLR] [Nokia, 6, 81, 60, 0] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 372][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 396][D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe] [Time Information Services Ltd., 2.00 (506)] [D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] [Nokia, 6, 81, 68, 0] [C:\WINDOWS\system32\ConnAPI.DLL] [Nokia., 6, 81, 62, 0] [D:\Program Files\Nokia\Nokia PC Suite 6\PCSL.dll] [Nokia, 6, 81, 7, 0] [D:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 6\Lang\PcSync2_chi-sc.nlr] [Time Information Services Ltd., 9.00 (506)] [D:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 6\Resource\PcSync2_Nokia.ngr] [Time Information Services Ltd., 9.00 (506)] [C:\Program Files\Common Files\Nokia\Adapters\NclSet.dll] [Nokia, 6.81.9.0] [C:\Program Files\Common Files\Nokia\Adapters\Nclaeo.dsc] [Nokia Mobile Phones Ltd., 4.00.008] [C:\Program Files\Common Files\Nokia\MPAPI\MPAPIps.dll] [Nokia Corporation, 6.81.73.0] [C:\Program Files\Common Files\PCSuite\ConfServer\ConfServer.dll] [Nokia, 6, 81, 26, 0] [D:\Program Files\Nokia\Nokia PC Suite 6\CommonSelectDevice.dll] [Nokia, 6, 81, 73, 0] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 464][D:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE] [Super Rabbit Soft, 7.90.0001] [D:\PROGRA~1\SUPERR~1\MagicSet\shlobj71.ocx] [Sky Software (http://www.ssware.com), 7, 1, 0, 0] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 1164][C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe] [Nokia Corporation, 6.81.161.1] [C:\Program Files\Common Files\Nokia\MPAPI\MPAPIps.dll] [Nokia Corporation, 6.81.73.0] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 1740][C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe] [Nokia., 6, 81, 60, 0] [C:\WINDOWS\system32\NclTools.dll] [Nokia., 6, 81, 21, 1] [C:\Program Files\Common Files\PCSuite\Transports\NCLIrDAMM.dll] [Nokia Corp., 6, 81, 27, 0] [C:\Program Files\Common Files\PCSuite\Transports\NCLRSMM.dll] [Nokia, 6, 81, 34, 1] [C:\Program Files\Common Files\PCSuite\Transports\NCLUSBMM.dll] [Nokia, 6, 81, 39, 1] [C:\Program Files\Common Files\PCSuite\Transports\NclMSBTMM.dll] [Nokia., 6, 81, 40, 2] [C:\Program Files\Common Files\PCSuite\Services\NclDS.dll] [Nokia, 6, 81, 14, 0] [PID: 2272][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3496][G:\千千静听\TTPlayer.exe] [N/A, 4, 6, 7, 0] [G:\千千静听\ttpcomm.dll] [N/A, N/A] [G:\千千静听\ttpres.dll] [N/A, 4, 6, 7, 0] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 3876][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 124][D:\Program Files\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 5, 8, 120] [D:\Program Files\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2] [D:\Program Files\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [d:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 2416][G:\TDDownload\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [d:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄

杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄	发表于： 2006-11-29 18:04 \| 只看楼主短消息资料字号：小中大 10楼文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost 127.0.0.1 008.cn 127.0.0.1 ultimate-best-hgh.0my.net 127.0.0.1 www.139500.com 127.0.0.1 www.1yin.net 127.0.0.1 ****cn 127.0.0.1 www.37021.com 127.0.0.1 www.47555.net 127.0.0.1 www.511ring.com 127.0.0.1 me.5e163.com 127.0.0.1 www.777888.com 127.0.0.1 www.77ttt.com 127.0.0.1 www.9p.cn 127.0.0.1 abcdesign.ru 127.0.0.1 gutemine.wu-wien.ac.at 127.0.0.1 math.kobe-u.ac.jp 127.0.0.1 www.aifind.info 127.0.0.1 www.allyes.com 127.0.0.1 www.aogo.net 127.0.0.1 baltnet.ru 127.0.0.1 quotes.barchart.com 127.0.0.1 free.bestialityhost.com 127.0.0.1 cctv1.net 127.0.0.1 cctv8.net 127.0.0.1 www.cctv8.net 127.0.0.1 ciachoo.pl 127.0.0.1 www.play.cn.gs 127.0.0.1 www.cnqb.net 127.0.0.1 www.feixue.net 127.0.0.1 www.xiliao.com.cn 127.0.0.1 alexey.pioneers.com.ru 127.0.0.1 www.coolcdrom.com 127.0.0.1 www.coolseach.com 127.0.0.1 puldk490gj.da.ru 127.0.0.1 dicto.ru 127.0.0.1 www.dj3344.com 127.0.0.1 www.donttrip.org 127.0.0.1 www.ehomeday.com 127.0.0.1 elemental.ru 127.0.0.1 errorguard.com 127.0.0.1 friendlygreeting.com 127.0.0.1 zhp.gdynia.pl 127.0.0.1 www.gg888.net 127.0.0.1 gin.ru 127.0.0.1 www.girlchinese.com 127.0.0.1 glass-master.ru 127.0.0.1 photo.gornet.ru 127.0.0.1 relay.great.ru 127.0.0.1 hack-gegen-rechts.com 127.0.0.1 hgrstrailer.com 127.0.0.1 www.homepage.com 127.0.0.1 hotbar.com 127.0.0.1 intellect.lvc 127.0.0.1 interfoodtd.ru 127.0.0.1 jewishgen.org 127.0.0.1 www.jixian.net 127.0.0.1 k2kapital.com 127.0.0.1 security.kolla.de 127.0.0.1 www.kuliao.com 127.0.0.1 laugh-mail.net 127.0.0.1 7b.com.cn 127.0.0.1 9505.com 127.0.0.1 www.piaoxue.com 127.0.0.1 marketscore.com 127.0.0.1 www.mir0.com 127.0.0.1 momentum.ru 127.0.0.1 www.mtv51.com 127.0.0.1 www.mydj2005.com 127.0.0.1 nefkom.net 127.0.0.1 no-abi2003.de 127.0.0.1 tdi-router.opola.pl 127.0.0.1 packages.debian.or.jp 127.0.0.1 perfectgirls.net 127.0.0.1 peterstar.ru 127.0.0.1 pgipearls.com 127.0.0.1 phg.pl 127.0.0.1 vip.pnet.pl 127.0.0.1 sec.polbox.pl 127.0.0.1 polobeer.de 127.0.0.1 porno-mania.net 127.0.0.1 home.profootball.ru 127.0.0.1 qianbai.com 127.0.0.1 ad.qingyule.com 127.0.0.1 www.qq168.net 127.0.0.1 www.qq3344.com 127.0.0.1 www.qq92.com 127.0.0.1 www.qqwz.com 127.0.0.1 www.qu123.com 127.0.0.1 republika.pl 127.0.0.1 www.richfind.com 127.0.0.1 rollenspielzirkel.de 127.0.0.1 safer-networking.org 127.0.0.1 sdsauto.ru 127.0.0.1 www.searchpage.cc 127.0.0.1 www.seekeasysoft.net 127.0.0.1 shadkhan.ru 127.0.0.1 slavarik.ru 127.0.0.1 sovea.de 127.0.0.1 spybot.info 127.0.0.1 www.start-page.info 127.0.0.1 lars-s.privat.t-online.de 127.0.0.1 u.t2cn.com 127.0.0.1 www.7939.com 127.0.0.1 www.4199.com 127.0.0.1 www.3448.com 127.0.0.1 www.6781.com 127.0.0.1 it.trendmicro-europe.com 127.0.0.1 trendmicro.it 127.0.0.1 truefriends.net 127.0.0.1 www.tthao.com 127.0.0.1 www.ttrx.net 127.0.0.1 tuhart.net 127.0.0.1 www.unionsky.cn 127.0.0.1 www.unionsky.com 127.0.0.1 www.unionsky.net 127.0.0.1 vconsole.net 127.0.0.1 virtumonde.com 127.0.0.1 gamma.vyborg.ru 127.0.0.1 financial.washingtonpost.com 127.0.0.1 webpark.pl 127.0.0.1 wishken.com 127.0.0.1 www.yeapple.com 127.0.0.1 www.yibinren.com 127.0.0.1 www.youmiss.com 127.0.0.1 www.yysky.net 127.0.0.1 zelnet.ru 127.0.0.1 www.zhengdian.com 127.0.0.1 abc.265.com 127.0.0.1 555.265.com 127.0.0.1 www.baidu345.com 127.0.0.1 www.37ss.com 127.0.0.1 my123.com
杰洛无畏鲐背狮帖子:54672 注册: 2005-08-02 来自:石家庄

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT