12   2  /  2  页   跳转

Rootkit.win32.agent.zzn怎么杀不掉?

[PID: 1908 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [d:\program files\rising\rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.9]
    [d:\program files\rising\rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.4]
    [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.2175.0]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.2175.0]
[PID: 2032 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2412 / Administrator][D:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 20.0.0.20]
    [D:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [D:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [D:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]
    [D:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.10]
[PID: 2432 / Administrator][C:\Program Files\OCINS\idnsvr.exe]  [中国互联网信息中心(CNNIC), 2, 6, 0, 1]
    [C:\Program Files\OCINS\idnsvr.dll]  [中国互联网信息中心(CNNIC), 2, 6, 0, 2]
[PID: 2428 / Administrator][D:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 20.0.01.05]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [D:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [D:\Program Files\Rising\Rav\recomp.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [D:\Program Files\Rising\Rav\refs.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 9]
    [D:\Program Files\Rising\Rav\viruslib.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 14]
    [D:\Program Files\Rising\Rav\relibldr.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 12]
    [D:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]
    [D:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.10]
    [D:\Program Files\Rising\Rav\MonRule.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.24]
    [D:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
    [D:\Program Files\Rising\Rav\Rsguilib.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 79]
    [D:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0]
[PID: 2676 / Administrator][D:\Program Files\Coopen\Coopen.exe]  [北京首都在线网络技术有限公司, 3, 6, 1, 60]
    [D:\Program Files\Coopen\CoopenActiveControl60.dll]  [北京首都在线网络技术有限公司, 3, 6, 1, 60]
    [D:\Program Files\Coopen\coopendownloader.cop]  [北京首都在线网络技术有限公司, 3, 6, 1, 60]
    [D:\Program Files\Coopen\coopenupdate.cop]  [, 3, 6, 1, 60]
    [D:\Program Files\Coopen\coopenui.cop]  [北京首都在线网络技术有限公司, 3, 6, 1, 60]
    [D:\Program Files\Coopen\coopenclient.cop]  [北京首都在线网络技术有限公司, 3, 6, 1, 60]
    [D:\Program Files\Coopen\coopenplayer.cop]  [北京首都在线网络技术有限公司, 3, 6, 1, 60]
    [D:\Program Files\Coopen\coopendeskicon.cop]  [北京首都在线网络技术有限公司, 3, 6, 1, 60]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 17.0.54.0]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 17.0.54.110]
    [C:\WINDOWS\system32\icm32.dll]  [Microsoft Corporation, 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518)]
    [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXEV.DLL]  [Microsoft Corporation, 11.0.5510]
    [D:\Program Files\Coopen\coopenmodea.cop]  [北京首都在线网络技术有限公司, 3, 6, 1, 60]
[PID: 3064 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [d:\program files\rising\rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.9]
    [d:\program files\rising\rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.4]
[PID: 2276 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3436 / Administrator][C:\Program Files\Tencent\QQ\TIMPlatform.exe]  [TENCENT, 7,0,431,1723]
    [C:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
gototop
 

[PID: 3892 / Administrator][D:\AutoCAD 2007\acad.exe]  [Autodesk, Inc., R17.0.54.0]
    [D:\AutoCAD 2007\ac1st17.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\acdb17.dll]  [Autodesk, Inc., 17.0.54.110]
    [D:\AutoCAD 2007\AcGe17.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\acui17.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\anav.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\adui17.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\UserData.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\dswhip.dll]  [Autodesk Inc., 17.0.54.0]
    [D:\AutoCAD 2007\heidi9.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\dlint9.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\sfttabac.dll]  [Softel vdm, 17.0.54.0]
    [D:\AutoCAD 2007\AdImaging.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\adlmdll.dll]  [N/A, ]
    [D:\AutoCAD 2007\adctrls.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\adui17res.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AnavRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\acui17res.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\DsWhipRes.dll]  [Autodesk Inc., 17.0.54.0]
    [D:\AutoCAD 2007\sfttabacRes.dll]  [Softel vdm, 17.0.54.0]
    [D:\AutoCAD 2007\AdImagingRes.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\ADCtrlsRes.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\acadbtn.xmx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\acadres.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\acdb17chsres.dll]  [Autodesk, Inc., 17.0.54.0]
    [C:\WINDOWS\system32\mscoree.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [D:\AutoCAD 2007\adlmres.dll]  [Autodesk, Inc., 7.0.0.24]
    [D:\AutoCAD 2007\PrxyInet.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\PrxyInetRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\oleaprot.arx]  [Autodesk, 17.0.54.0]
    [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\522148948b03169dcf7dc956777574ec\mscorlib.ni.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [D:\AutoCAD 2007\acdbmgd.dll]  [Autodesk, Inc., 17.0.54.0]
    [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll]  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
    [D:\AutoCAD 2007\colorRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\drv\gdi9.hdi]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\drv\gdi9Res.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\drv\szb9.hdi]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\drv\rblast9.hdi]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\drv\gdifont9.hdi]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\acgs.dll]  [Autodesk Inc., 17.0.54.0]
    [D:\AutoCAD 2007\acgsRes.dll]  [Autodesk Inc., 17.0.54.0]
    [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [D:\AutoCAD 2007\AcGsConfig.arx]  [Autodesk Inc., 17.0.54.0]
    [D:\AutoCAD 2007\ShareAC.dll]  [Autodesk, Inc, 17.0.54.0]
    [D:\AutoCAD 2007\AcGsConfigRes.dll]  [Autodesk Inc., 17.0.54.0]
    [D:\AutoCAD 2007\achapi17.dbx]  [Autodesk, Inc., 17.0.54.0]
    [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\1d8494594e7b5f662f51dcf07521989a\System.ni.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [D:\AutoCAD 2007\hcreg9.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\hcreg9Res.dll]  [Autodesk, Inc., 9.0.54.0]
    [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\94d3c69432102270d2fdc71ad3b0ab76\System.Xml.ni.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\ca657264e48233ba0015c070ff03612e\System.Drawing.ni.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\0e079d53067580a69d5383ad5db0ee33\System.Windows.Forms.ni.dll]  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)]
    [D:\AutoCAD 2007\acmgd.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\vl.arx]  [Autodesk Inc., 17.0.54.0]
    [D:\AutoCAD 2007\VLMSG.DLL]  [Autodesk Inc., 17.0.54.0]
    [D:\AutoCAD 2007\VLLIB.DLL]  [Autodesk Inc., 17.0.54.0]
    [D:\AutoCAD 2007\AcApp.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcAppRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcDblClkEdit.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcDblClkEditPE.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcDblClkEditRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\acdim.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\ShareMFC.dll]  [Autodesk, Inc, 17.0.54.0]
    [D:\AutoCAD 2007\AcDimRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\aceplotx.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcEplotXRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\achlnkui.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\achlnkuiRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcIDropMgr.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcIDropMgrRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcLayerP.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcLayerPRes.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\AcPltStamp.arx]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\apperr.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\plotcfg9.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\pm9.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\pctres9.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\apperrRes.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\pmres9.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\AcPltStampRes.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\AcSign.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcSignRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcSpaceTrans.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcSpaceTransRes.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\AcStd.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcStStdRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcStMgr.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcStRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcTaskBar.arx]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\AcTaskBarRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcTp.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcTc.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcUt.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcTcUi.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcTcRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcTcUiRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\whohas.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\whohasRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcCamera.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcSceneRes.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\AcDwgRecovery.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcDwgRecoveryRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcDxUi.dll]  [Autodesk, Inc, 17.0.54.0]
    [D:\AutoCAD 2007\AcDx.dll]  [Autodesk, Inc, 17.0.54.0]
    [D:\AutoCAD 2007\zh-CN\AcDxUi.resources.dll]  [Autodesk, Inc, 17.0.54.0]
    [D:\AutoCAD 2007\AcDxNotify.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcDxNotifyRes.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\AcMgdShared.dll]  [Autodesk, Inc, 17.0.54.0]
    [D:\AutoCAD 2007\acetlodr.arx]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\AcLayer.dll]  [Autodesk, Inc, 17.0.54.0]
    [D:\AutoCAD 2007\zh-CN\AcLayer.resources.dll]  [Autodesk, Inc, 17.0.54.0]
    [D:\AutoCAD 2007\AcPrevInput.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\WSCommCntrAcCon.arx]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\WSCommCntrAcConRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\support\vel.arx]  [, 1, 0, 0, 1]
    [D:\AutoCAD 2007\AcPrevInputRes.dll]  [Autodesk, Inc., 17.0.54.0]
    [D:\AutoCAD 2007\plcfmgr.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\plcfmgrRes.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\plcferr.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\pmutil9.dll]  [Autodesk, Inc., 9.0.54.0]
    [D:\AutoCAD 2007\AcProject17.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcProject17res.dll]  [Autodesk, 17.0.54.0]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 17.0.54.0]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
    [D:\AutoCAD 2007\acmgdinternal.dll]  [Autodesk, Inc., 17.0.54.0]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 17.0.54.110]
    [D:\AutoCAD 2007\acmted.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcMtedRes.dll]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcFdUi.arx]  [Autodesk, 17.0.54.0]
    [D:\AutoCAD 2007\AcFieldRes.dll]  [Autodesk, 17.0.54.0]
    [C:\WINDOWS\system32\WINWBCS.IME]  [somh@email.com, 5.00.2000.3]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sohu.com Inc., 3, 0, 0, 0]
    [C:\WINDOWS\system32\dllMergeDict.dll]  [Sogou.com Inc., 3, 0, 0, 0]
    [F:\应用程序\SogouInput\Plugin\SgImeWord.dll]  [, 1, 0, 0, 31]
gototop
 

[PID: 408 / Administrator][C:\Program Files\Common Files\Autodesk Shared\WSCommCntr1.exe]  [Autodesk, Inc., 17.0.54.0]
    [C:\Program Files\Common Files\Autodesk Shared\WebServices1.dll]  [Autodesk, Inc., 17.0.54.0]
[PID: 2948 / Administrator][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 6.0.2.621]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 17.0.54.0]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.2.621]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.2.621]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\WINWBCS.IME]  [somh@email.com, 5.00.2000.3]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sohu.com Inc., 3, 0, 0, 0]
    [C:\WINDOWS\system32\dllMergeDict.dll]  [Sogou.com Inc., 3, 0, 0, 0]
    [F:\应用程序\SogouInput\Plugin\SgImeWord.dll]  [, 1, 0, 0, 31]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx]  [Adobe Systems, Inc., 9,0,47,0]
    [C:\WINDOWS\system32\Audiodev.dll]  [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)]
[PID: 3268 / Administrator][D:\Program Files\Rising\Rav\RsAgent.exe]  [Beijing Rising Technology Co., Ltd., 20.0.0.7]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [D:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
[PID: 4044 / Administrator][C:\WINDOWS\msagent\AgentSvr.exe]  [Microsoft Corporation, 2.00.0.3424]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3224 / Administrator][F:\学习\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [F:\学习\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
进程特权扫描
特殊特权被允许: SeLoadDriverPrivilege [PID = 2676, D:\PROGRAM FILES\COOPEN\COOPEN.EXE]

==================================
API HOOK
RVA  错误: LoadLibraryA (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA  错误: LoadLibraryExA (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA  错误: LoadLibraryExW (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA  错误: LoadLibraryW (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA  错误: GetProcAddress (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)

==================================
隐藏进程
N/A

==================================

附件附件:

下载次数:137
文件类型:application/octet-stream
文件大小:
上传时间:2007-12-10 14:38:58
描述:

gototop
 

还不错,诺顿这今年进步还是很明显的
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT