瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 请大家帮帮忙把link789.com这个怎么也弄不掉了谢谢了

1   1  /  1  页   跳转页

请大家帮帮忙把link789.com这个怎么也弄不掉了谢谢了

收藏
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:50 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

请大家帮帮忙把link789.com这个怎么也弄不掉了谢谢了

2005-12-27,13:47:43

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows XP Professional Service Pack 2 - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <iDuba Personal FireWall><>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <vptray><C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NVMixerTray><"C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMSCMIG40W><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40W\IMSCMIG.EXE /SetPreload /Log>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Kavrun><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <iDuba Personal FireWall><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KavStart><"C:\KAV2005\KAVStart.exe" -startup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SoundMan><SOUNDMAN.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <nwiz><nwiz.exe /install>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <nTrayFw><C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <StormCodec_Helper><"d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <type32><"C:\Program Files\Microsoft IntelliType Pro\type32.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Logitech Utility><Logi_MwX.Exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
[color calibration]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\color calibration.lnk><N>
[highlight agent]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\highlight agent.lnk><N>
[naturalcolorload]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\naturalcolorload.lnk><N>

==================================
服务
[DefWatch / DefWatch]
  <C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe><Symantec Corporation>
[ForceWare Intelligent Application Manager (IAM) / ForceWare Intelligent Application Manager (IAM)]
  <C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe><>
[Forceware Web Interface / ForcewareWebInterface]
  <"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice><Apache Software Foundation>
[Kingsoft Antivirus KWatch Service / KWatchSvc]
  <C:\KAV2005\KWatch.EXE><Kingsoft Corporation>
[Symantec AntiVirus Client / Norton AntiVirus Server]
  <C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe><Symantec Corporation>
[ForceWare IP service / nSvcIp]
  <C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe><NVIDIA>
[ForceWare user log service / nSvcLog]
  <C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe><NVIDIA>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[PDEngine / PDEngine]
  <"C:\Program Files\Raxco\PerfectDisk\PDEngine.exe"><Raxco Software, Inc.>
[PDScheduler / PDSched]
  <"C:\Program Files\Raxco\PerfectDisk\PDSched.exe"><Raxco Software, Inc.>
[StarWind iSCSI Service / StarWindService]
  <C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe><Rocket Division Software>

==================================
浏览器加载项
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\PROGRA~1\CR-FLA~1\fgiebar.dll, Amaze Soft>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[金山快译(&K)]
  {6C3797D2-3FEF-4CD4-B654-D3AE55B4128C} <F:\Program Files\Kingsoft\FastAIT 2006\IEBand.dll, 金山软件股份有限公司>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\PROGRA~1\CR-FLA~1\fgiebar.dll, Amaze Soft>
[使用网际快车下载]
  <D:\Program Files\cr-flashget\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <D:\Program Files\cr-flashget\jc_all.htm, N/A>
[用比特精灵下载(&B)]
  <D:\Program Files\BitSpirit\bsurl.htm, N/A>
最后编辑2005-12-27 13:58:16
分享到：
gototop
 
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:51 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

==================================
正在运行的进程
[PID: 880][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1028][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\NavLogon.dll]  <N/A><N/A>
[PID: 1072][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1084][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
[PID: 1232][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1292][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
[PID: 1400][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
[PID: 1440][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
[PID: 1584][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
[PID: 1848][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  <Logitech Inc.><9.80.019>
    [C:\Program Files\SEC\Highlight III\Highlight.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\nvcpl.dll]  <NVIDIA Corporation><6.14.10.8195>
    [C:\WINDOWS\system32\NVRSZHC.DLL]  <NVIDIA Corporation><6.14.10.8195>
    [C:\WINDOWS\system32\nvshell.dll]  <N/A><N/A>
    [C:\KAV2005\KAScript.DLL]  <Kingsoft Corporation><2005, 4, 1, 53>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2004, 11, 26, 53>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2004, 11, 9, 11>
[PID: 1932][C:\KAV2005\KWatch.EXE]  <Kingsoft Corporation><2005, 4, 24, 48>
    [C:\KAV2005\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2004, 11, 26, 53>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2004, 11, 9, 11>
[PID: 2012][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 320][C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe]  <Symantec Corporation><8.1.0.821>
    [C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Cliscan.dll]  <Symantec Corporation><8.1.0.821>
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NAVNTUTL.DLL]  <Symantec/Peter Norton Group><1, 0, 0, 1>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 340][C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe]  <NVIDIA Corporation><1.0.451>
    [C:\Program Files\NVIDIA Corporation\NvMixer\NvMixerZHC.dll]  <NVIDIA Corporation><1.0.451>
    [C:\Program Files\Common Files\NVIDIA Shared\Audio\NVAudioMod.dll]  <NVIDIA Corporation><1.0.451>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
[PID: 408][C:\KAV2005\KAVStart.exe]  <Kingsoft Corporation><2005, 7, 27, 141>
gototop
 
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:52 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

[C:\KAV2005\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 468][C:\WINDOWS\system32\RUNDLL32.EXE]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\NvMcTray.dll]  <NVIDIA Corporation><6.14.10.8195>
    [C:\WINDOWS\system32\NVRSZHC.DLL]  <NVIDIA Corporation><6.14.10.8195>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 476][C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe]  <NVIDIA Corporation><>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nv_common.dll]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nv_common_firewall.dll]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\NMI.dll]  <NVIDIA Corporation><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\SpecialCase.dll]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\SEC\Highlight III\Highlight.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  <Logitech Inc.><9.80.019>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
[PID: 512][C:\Program Files\Microsoft IntelliType Pro\type32.exe]  <Microsoft Corporation><5.10.363.0>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 532][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
[PID: 564][C:\KAV2005\KMailMon.EXE]  <Kingsoft Corporation><2005, 6, 30, 74>
    [C:\KAV2005\KAntiSpm.dll]  <N/A><1, 0, 0, 2>
    [C:\KAV2005\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
    [C:\KAV2005\KAECall2.DLL]  <Kingsoft Corporation><2004, 12, 28, 7>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2004, 11, 26, 53>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2004, 11, 9, 11>
    [C:\KAV2005\KAConfig.DLL]  <Kingsoft Corporation><2005, 5, 16, 31>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
gototop
 
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:54 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

[C:\Program Files\SEC\Highlight III\Highlight.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  <Logitech Inc.><9.80.019>
[PID: 576][C:\Program Files\Messenger\msmsgs.exe]  <Microsoft Corporation><4.7.3001>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  <Logitech Inc.><9.80.019>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
[PID: 604][C:\Program Files\Logitech\MouseWare\system\em_exec.exe]  <Logitech Inc.><9.80.019>
    [C:\Program Files\Logitech\MouseWare\system\EVENTEX.dll]  <Logitech Inc.><9.80.019>
    [C:\WINDOWS\system32\COMNCTR.dll]  <Logitech Inc.><9.80.019>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Logitech\MouseWare\system\ccresrce.dll]  <Logitech Inc.><9.80.019>
    [C:\Program Files\Logitech\MouseWare\system\GlbResLt.dll]  <Logitech Inc.><9.80.019>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
    [C:\Program Files\Logitech\MouseWare\System\devices.dll]  <Logitech Inc.><9.80.019>
    [C:\Program Files\Logitech\MouseWare\system\ccstmglb.dll]  <Logitech Inc.><9.80.019>
    [C:\Program Files\Logitech\MouseWare\system\ccustom.dll]  <Logitech Inc.><9.80.019>
    [C:\Program Files\Logitech\MouseWare\system\ccmsghk.dll]  <Logitech Inc.><9.80.019>
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  <Logitech Inc.><9.80.019>
[PID: 608][C:\Program Files\SEC\MagicTune 2.5\GammaTray.exe]  <><1, 0, 0, 1>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
[PID: 632][C:\Program Files\SEC\Highlight III\HighlightAgent.exe]  <><1, 0, 0, 1>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
[PID: 640][C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe]  <><2, 0, 1, 1>
    [C:\Program Files\SEC\Natural Color\LowCMS.dll]  <><1, 0, 0, 1>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
gototop
 
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:54 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
[PID: 764][C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe]  <Symantec Corporation><8.1.0.821>
[PID: 800][C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe]  <Apache Software Foundation><2.0.52>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libapr.dll]  <Apache Software Foundation><0.0.0.0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libaprutil.dll]  <Apache Software Foundation><0.0.0.0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libapriconv.dll]  <Apache Software Foundation><0.0.0.0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libhttpd.dll]  <Apache Software Foundation><2.0.52>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_access.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_actions.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_alias.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_asis.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_auth.so]  <N/A><N/A>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\nv_common.dll]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_autoindex.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_cgi.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_dir.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_env.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_expires.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_headers.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_imap.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_include.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_isapi.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_log_config.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_mime.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_negotiation.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_rewrite.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_setenvif.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_ssl.so]  <Apache Software Foundation><2.0.47>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\SSLEAY32.dll]  <N/A><N/A>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\LIBEAY32.dll]  <N/A><N/A>
[PID: 836][C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe]  <Symantec Corporation><8.1.0.821>
gototop
 
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:55 | 只看楼主 短消息 资料
字号： 小 中 大 6楼

[C:\WINDOWS\system32\CBA.DLL]  <Intel? Corporation><6.12.0.105 E>
    [C:\WINDOWS\system32\MsgSys.dll]  <Intel? Corporation><6.12.0.105 E>
    [C:\WINDOWS\system32\NTS.dll]  <Intel? Corporation><6.12.0.105 E>
    [C:\WINDOWS\system32\PDS.DLL]  <Intel? Corporation><6.12.0.105 E>
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NAVLU.dll]  <Symantec Corporation><8.1.0.821>
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NAVNTUTL.DLL]  <Symantec/Peter Norton Group><1, 0, 0, 1>
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\i2ldvp3.dll]  <Symantec Corporation><8.1.0.821>
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NAVAPI32.DLL]  <Symantec Corp.><4.2.0.7>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20051221.006\NAVEX32a.DLL]  <Symantec Corporation><20051.3.1.11>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20051221.006\NAVENG32.DLL]  <Symantec Corporation><20051.3.1.11>
    [C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAP32.DLL]  <Symantec Corporation><9.1.0.26>
[PID: 1048][C:\Program Files\SEC\Highlight III\Highlight.exe]  <SAMSUNG><1, 0, 0, 6>
    [C:\Program Files\SEC\Highlight III\Highlight.dll]  <><1, 0, 0, 1>
    [C:\Program Files\SEC\Highlight III\VESADll.dll]  <N/A><N/A>
    [C:\Program Files\SEC\Highlight III\I2CDll.dll]  <N/A><N/A>
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  <Logitech Inc.><9.80.019>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
[PID: 1264][C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nv_common.dll]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nv_common_firewall.dll]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\NMI.dll]  <NVIDIA Corporation><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\SpecialCase.dll]  <NVIDIA><2, 2, 0, 464>
[PID: 1360][C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nv_common.dll]  <NVIDIA><2, 2, 0, 464>
[PID: 1384][C:\WINDOWS\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.8195>
[PID: 1428][C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe]  <Apache Software Foundation><2.0.52>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libapr.dll]  <Apache Software Foundation><0.0.0.0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libaprutil.dll]  <Apache Software Foundation><0.0.0.0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libapriconv.dll]  <Apache Software Foundation><0.0.0.0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libhttpd.dll]  <Apache Software Foundation><2.0.52>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_access.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_actions.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_alias.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_asis.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_auth.so]  <N/A><N/A>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\nv_common.dll]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_autoindex.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_cgi.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_dir.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_env.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_expires.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_headers.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_imap.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_include.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_isapi.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_log_config.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_mime.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_negotiation.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_rewrite.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_setenvif.so]  <Apache Software Foundation><2.0.49>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_ssl.so]  <Apache Software Foundation><2.0.47>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\SSLEAY32.dll]  <N/A><N/A>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\LIBEAY32.dll]  <N/A><N/A>
[PID: 1516][C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe]  <Rocket Division Software><2.6.1 Build 0x20050401>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
gototop
 
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:55 | 只看楼主 短消息 资料
字号： 小 中 大 7楼

[PID: 1656][C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe]  <><1, 0, 1, 0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\NMI.dll]  <NVIDIA Corporation><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nv_common.dll]  <NVIDIA><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nv_resource_L1033.dll]  <NVIDIA Corporation><1, 0, 1, 0>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\AppFltUi.dll]  <NVIDIA Corporation><>
[PID: 400][C:\Program Files\Raxco\PerfectDisk\PDSched.exe]  <Raxco Software, Inc.><7, 0, 0, 46>
    [C:\Program Files\Raxco\PerfectDisk\PDCommon.dll]  <Raxco Software, Inc.><7, 0, 0, 46>
    [C:\Program Files\Raxco\PerfectDisk\PDLangEN.dll]  <Raxco Software, Inc.><7, 0, 0, 46>
    [C:\Program Files\Raxco\PerfectDisk\PDSchedPS.dll]  <Raxco Software, Inc.><7, 0, 0, 46>
    [C:\Program Files\Raxco\PerfectDisk\PDEnginePS.dll]  <Raxco Software, Inc.><7, 0, 0, 46>
[PID: 3928][C:\DOCUME~1\KG\LOCALS~1\Temp\Rar$EX00.219\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\Program Files\SEC\Highlight III\Highlight.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  <Logitech Inc.><9.80.019>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  <Logitech Inc.><1.1.0>
    [C:\WINDOWS\system32\nvappfilter.dll]  <NVIDIA><1, 0, 2, 0>
[PID: 3340][C:\WINDOWS\system32\wbem\wmiprvse.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nmp.dll]  <NVIDIA Corporation><2, 2, 0, 464>
    [C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nv_common.dll]  <NVIDIA><2, 2, 0, 464>
gototop
 
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:56 | 只看楼主 短消息 资料
字号： 小 中 大 8楼

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
NVIDIA App Filter over [MSAFD Tcpip [TCP/IP]]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD Tcpip [UDP/IP]]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD Tcpip [RAW/IP]]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [RSVP UDP Service Provider]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [RSVP TCP Service Provider]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{ACBF8FAE-2060-497D-86C6-FC64C99D4FD1}] SEQPACKET 7]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{ACBF8FAE-2060-497D-86C6-FC64C99D4FD1}] DATAGRAM 7]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{C7760BEE-CF08-48D8-B664-ED86D4898C20}] SEQPACKET 6]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{C7760BEE-CF08-48D8-B664-ED86D4898C20}] DATAGRAM 6]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{07844F85-7153-448B-9C22-CD2719FD316D}] SEQPACKET 0]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{07844F85-7153-448B-9C22-CD2719FD316D}] DATAGRAM 0]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{8409E6FD-4695-4447-9674-126E068476E6}] SEQPACKET 1]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{8409E6FD-4695-4447-9674-126E068476E6}] DATAGRAM 1]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{E08404BD-63FA-42A0-9966-90FD9AA27CF4}] SEQPACKET 2]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{E08404BD-63FA-42A0-9966-90FD9AA27CF4}] DATAGRAM 2]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{3AED6F06-E4D8-491C-AB43-A03201A39EBE}] SEQPACKET 3]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{3AED6F06-E4D8-491C-AB43-A03201A39EBE}] DATAGRAM 3]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{5BB402AE-0967-4EFA-8BD8-A27DFC68233F}] SEQPACKET 4]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{5BB402AE-0967-4EFA-8BD8-A27DFC68233F}] DATAGRAM 4]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{C083C8D2-C9DC-4DD8-BE91-CCC298FB3686}] SEQPACKET 5]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter over [MSAFD NetBIOS [\Device\NetBT_Tcpip_{C083C8D2-C9DC-4DD8-BE91-CCC298FB3686}] DATAGRAM 5]
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)
NVIDIA App Filter
    C:\WINDOWS\system32\nvappfilter.dll(NVIDIA, NVIDIA IAM LSP)

==================================
gototop
 
KGsq
头像
初生襁褓狮
  • 帖子:10
  • 注册: 2005-12-27
  • 来自:
发表于： 2005-12-27 13:58 | 只看楼主 短消息 资料
字号： 小 中 大 9楼

ijackThis_zww汉化版扫描日志 V1.99.1
保存于      13:56:08, 日期 2005-12-27
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\KAV2005\KWatch.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\KAV2005\KAVStart.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\KAV2005\KMailMon.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\SEC\MagicTune 2.5\GammaTray.exe
C:\Program Files\SEC\Highlight III\HighlightAgent.exe
C:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\Program Files\SEC\Highlight III\Highlight.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\Raxco\PerfectDisk\PDSched.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\NOTEPAD.EXE
D:\Program Files\Maxthon\Maxthon.exe
C:\WINDOWS\system32\NOTEPAD.EXE
D:\hijackthi\HijackThis1991汉化版\HijackThis1991zww.exe

R3 - 默认的URLSearchHook丢失。用HijackThis修复
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\CR-FLA~1\fgiebar.dll
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - 启动项HKLM\\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - 启动项HKLM\\Run: [IMSCMIG40W] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40W\IMSCMIG.EXE /SetPreload /Log
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [KavStart] "C:\KAV2005\KAVStart.exe" -startup
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - 启动项HKLM\\Run: [StormCodec_Helper] "d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - 启动项HKLM\\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: color calibration.lnk = ?ProgramFiles%\SEC\MagicTune 2.5\GammaTray.exe
O4 - Global Startup: highlight agent.lnk = ?
O4 - Global Startup: naturalcolorload.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - D:\Program Files\cr-flashget\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - D:\Program Files\cr-flashget\jc_all.htm
O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - D:\Program Files\BitSpirit\bsurl.htm
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\nvappfilter.dll
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1134957572671
O17 - HKLM\System\CCS\Services\Tcpip\..\{C083C8D2-C9DC-4DD8-BE91-CCC298FB3686}: NameServer = 202.96.64.68 202.96.69.38
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - NT 服务: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - NT 服务: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - NT 服务: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - NT 服务: Kingsoft Antivirus KWatch Service (KWatchSvc) - Kingsoft Corporation - C:\KAV2005\KWatch.EXE
O23 - NT 服务: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - NT 服务: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - NT 服务: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - NT 服务: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - NT 服务: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - NT 服务: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT