修复后用SREng2扫描的日志,仍有窗口跳出.请高手们审审 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛修复后用SREng2扫描的日志,仍有窗口跳出.请高手们审审

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

修复后用SREng2扫描的日志,仍有窗口跳出.请高手们审审

燃烧吧斩贱刀初生襁褓狮帖子:5 注册: 2006-09-01 来自:	发表于： 2006-09-01 22:53 \| 只看楼主短消息资料字号：小中大 1楼修复后用SREng2扫描的日志,仍有窗口跳出.请高手们审审 2006-09-01,22:27:01 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.] <AGRSMMSG><AGRSMMSG.exe> [Agere Systems] <IgfxTray><C:\WINDOWS\system32\igfxtray.exe> [Intel Corporation] <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe> [Intel Corporation] <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"> [Symantec Corporation] <vptray><C:\PROGRA~1\SYMANT~1\VPTray.exe> [Symantec Corporation] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <Thunder><"C:\Program Files\Thunder Network\Thunder\ThunderShell.exe" /s> [] <KavStart><"E:\db\KAVStart.exe" -startup> [Kingsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon] <WinlogonNotify: NavLogon><C:\WINDOWS\system32\NavLogon.dll> [Symantec Corporation] ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\Microsoft Office.lnk><N> [EzButton System] <C:\Documents and Settings\user.MS-C2B7638E0F19\「开始」菜单\程序\启动\EzButton System.lnk><N> [Rainlendar精美日历] <C:\Documents and Settings\user.MS-C2B7638E0F19\「开始」菜单\程序\启动\Rainlendar精美日历.lnk><N> [腾讯QQ] <C:\Documents and Settings\user.MS-C2B7638E0F19\「开始」菜单\程序\启动\腾讯QQ.lnk><N> ================================== 服务 [Symantec Event Manager / ccEvtMgr] <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation> [Symantec Password Validation / ccPwdSvc] <"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation> [Symantec Settings Manager / ccSetMgr] <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation> [Symantec AntiVirus Definition Watcher / DefWatch] <"C:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation> [Kingsoft Personal Firewall Service / KPfwSvc] <"E:\db\KPfwSvc.EXE"><Kingsoft Corporation> [Kingsoft Antivirus KWatch Service / KWatchSvc] <E:\db\KWatch.EXE><Kingsoft Corporation> [Rising Proxy Service / RfwProxySrv] <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [SavRoam / SavRoam] <"C:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec> [Windows User Mode Driver Frameworkre / Serviceikankan4] <c:\windows\system32\SP00LSV.EXE><N/A> [Symantec Network Drivers Service / SNDSrvc] <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation> [Symantec AntiVirus / Symantec AntiVirus] <"C:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation> ================================== 浏览器加载项 [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v8.dll, > [MyIEHelper Class] {16B770A0-0E87-4278-B748-2460D64A8386} <C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IEHelper\IEHelper_4606.dll, Microsoft Corporation> [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [WebBasedClientInstall Class] {D30CA0FD-1CA0-11D4-AC78-006008A9A8BC} <C:\WINDOWS\Downloaded Program Files\WebInst.Dll, Symantec Corporation> [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v8.dll, > [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar1.dll, Google Inc.> [MyIEHelper Class] {16B770A0-0E87-4278-B748-2460D64A8386} <C:\Documents and Settings\All Users.WINDOWS\Application Data\Microsoft\IEHelper\IEHelper_4606.dll, Microsoft Corporation> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation> [RealPlayer RAM Download Handler] {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Tabular Data Control] {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation> [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Qzone Media Tools] {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <C:\PROGRA~1\Tencent\qq\QZone\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited> [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [WebBasedClientInstall Class] {D30CA0FD-1CA0-11D4-AC78-006008A9A8BC} <C:\WINDOWS\Downloaded Program Files\WebInst.Dll, Symantec Corporation> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\geturl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\getAllurl.htm, N/A> [Google 搜索(&G)] <res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html, N/A> [上传到QQ网络硬盘] <C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A> [反向链接] <res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html, N/A> [添加到QQ自定义面板] <C:\Program Files\Tencent\qq\AddPanel.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\qq\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <C:\Program Files\Tencent\qq\SendMMS.htm, N/A> [类似网页] <res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html, N/A> [缓存的网页快照] <res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html, N/A> [翻译英文字词(&T)] <res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html, N/A> 2006-09-01 22:54:06
燃烧吧斩贱刀初生襁褓狮帖子:5 注册: 2006-09-01 来自:	分享到：

燃烧吧斩贱刀初生襁褓狮帖子:5 注册: 2006-09-01 来自:	发表于： 2006-09-01 22:56 \| 只看楼主短消息资料字号：小中大 2楼 ================================== 正在运行的进程 [PID: 408][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 456][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 480][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 524][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 536][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 680][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 728][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 768][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 832][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 864][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 944][c:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32> [c:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13> [c:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6> [c:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21> [c:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4> [c:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9> [PID: 1168][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [E:\db\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233> [E:\db\KMailOEBand.dll] <N/A><2006, 5, 19, 118> [C:\WINDOWS\system32\xunleibho_v8.dll] <><4, 5, 1, 33> [C:\WINDOWS\system32\mp3infp.dll] <win32lab.com><2.44.3.0> [PID: 1272][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe] <Symantec Corporation><2.2.0.577> [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><2.2.0.577> [PID: 1300][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe] <Symantec Corporation><2.2.0.577> [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><2.2.0.577> [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL] <Symantec Corporation><2.2.0.577> [PID: 1396][E:\db\KWatch.EXE] <Kingsoft Corporation><2005, 9, 27, 51> [E:\db\KAVIPC2.DLL] <Kingsoft Corporation><2004, 12, 28, 20> [E:\db\KAEPlat.DLL] <Kingsoft Corp.><2005, 12, 29, 56> [E:\db\KAEMem.DAT] <Kingsoft><2006, 4, 12, 13> [E:\db\KAEUnpack.DAT] <Kingsoft Corp.><2006, 6, 15, 44> [PID: 1468][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)> [PID: 1644][c:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 52> [c:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [c:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [c:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 1772][E:\db\KPfwSvc.EXE] <Kingsoft Corporation><2005, 9, 5, 28> [PID: 1892][C:\Program Files\Symantec AntiVirus\Rtvscan.exe] <Symantec Corporation><9.0.0.338> [C:\WINDOWS\system32\CBA.DLL] <Intel? Corporation><6.12.0.112 E> [C:\WINDOWS\system32\MsgSys.dll] <Intel? Corporation><6.12.0.112 E> [C:\WINDOWS\system32\NTS.dll] <Intel? Corporation><6.12.0.112 E> [C:\WINDOWS\system32\PDS.DLL] <Intel? Corporation><6.12.0.112 E> [C:\Program Files\Symantec AntiVirus\NAVLU.dll] <Symantec Corporation><9.0.0.338> [C:\Program Files\Symantec AntiVirus\I2ldvp3.dll] <Symantec Corporation><9.0.0.338> [C:\Program Files\Symantec AntiVirus\ecmldr32.DLL] <Symantec Corp.><1.1.0.3> [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL] <Symantec Corporation><9.3.0.28> [C:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL] <Symantec Corporation><9.0.0.338> [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060830.022\ecmsvr32.dll] <Symantec Corporation><61.2.1.10> [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060830.022\NAVEX32a.DLL] <Symantec Corporation><20061.2.0.26> [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060830.022\NAVENG32.DLL] <Symantec Corporation><20061.2.0.26> [C:\Program Files\Symantec AntiVirus\IMail.dll] <Symantec Corporation><9.0.0.338> [C:\Program Files\Common Files\Symantec Shared\SSC\scandlgs.dll] <Symantec Corporation><9.0.0.338> [C:\Program Files\Symantec AntiVirus\DecSDK.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2ID.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2ZIP.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2SS.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2GZIP.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2CAB.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2LHA.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2ARJ.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2TNEF.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2LZ.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2AMG.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2TAR.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2RTF.dll] <Symantec Corporation><3.02.11.32> [C:\Program Files\Symantec AntiVirus\Dec2Text.dll] <Symantec Corporation><3.02.11.32>
燃烧吧斩贱刀初生襁褓狮帖子:5 注册: 2006-09-01 来自:

燃烧吧斩贱刀初生襁褓狮帖子:5 注册: 2006-09-01 来自:	发表于： 2006-09-01 22:58 \| 只看楼主短消息资料字号：小中大 3楼 [PID: 1956][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)> [PID: 136][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 448][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.0.14> [PID: 644][C:\WINDOWS\AGRSMMSG.exe] <Agere Systems><2.1.23 2.1.23 01/22/2003 17:47:39> [PID: 712][C:\WINDOWS\system32\igfxtray.exe] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\hccutils.DLL] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\igfxdev.dll] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\igfxres.dll] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\igfxress.dll] <Intel Corporation><3.0.0.3762> [PID: 812][C:\WINDOWS\system32\hkcmd.exe] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\hccutils.DLL] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\igfxdev.dll] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\igfxres.dll] <Intel Corporation><3.0.0.3762> [C:\WINDOWS\system32\igfxhk.dll] <Intel Corporation><3.0.0.3762> [PID: 840][C:\Program Files\Common Files\Symantec Shared\ccApp.exe] <Symantec Corporation><2.2.0.577> [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><2.2.0.577> [C:\Program Files\Symantec\LiveUpdate\ProductRegCom.DLL] <Symantec Corporation><2.0.39.0> [C:\Program Files\Symantec\LiveUpdate\LuComServerPS.DLL] <Symantec Corporation><2.0.39.0> [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL] <Symantec Corporation><2.2.0.577> [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL] <Symantec Corporation><2.2.0.577> [C:\WINDOWS\system32\SYMREDIR.dll] <Symantec Corporation><5.3.0.46> [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] <Symantec Corporation><2.2.0.577> [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] <Symantec Corporation><2.2.0.577> [C:\Program Files\Symantec AntiVirus\SavEmail.dll] <Symantec Corporation><9.0.0.338> [PID: 928][C:\PROGRA~1\SYMANT~1\VPTray.exe] <Symantec Corporation><9.0.0.338> [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL] <Symantec Corporation><9.3.0.28> [E:\db\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233> [E:\db\KMailOEBand.dll] <N/A><2006, 5, 19, 118> [C:\Program Files\Symantec AntiVirus\Cliscan.dll] <Symantec Corporation><9.0.0.338> [C:\PROGRA~1\SYMANT~1\NAVNTUTL.DLL] <Symantec Corporation><9.0.0.338> [C:\Program Files\Symantec AntiVirus\Cliproxy.dll] <Symantec Corporation><9.0.0.338> [PID: 932][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3249> [PID: 1636][E:\db\KAVStart.exe] <Kingsoft Corporation><2006, 4, 10, 196> [E:\db\KAVIPC2.DLL] <Kingsoft Corporation><2004, 12, 28, 20> [E:\db\KAVPassp.dll] <Kingsoft Corporation><2006, 6, 7, 252> [E:\db\PopSprt3.dll] <Kingsoft Corporation><2005, 12, 6, 30> [E:\db\KMailOEBand.dll] <N/A><2006, 5, 19, 118> [E:\db\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233> [PID: 1872][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2108][C:\WINDOWS\system32\msiexec.exe] <Microsoft Corporation><3.1.4000.1823> [PID: 2176][C:\Program Files\EzButton System V2.14\EzButton.exe] <><2.0> [C:\Program Files\EzButton System V2.14\KeyHook.dll] <><1, 0, 0, 1> [PID: 2252][C:\Program Files\Thunder Network\Thunder\Thunder.exe] <><5.0.0.72> [C:\Program Files\Thunder Network\Thunder\UpdateDownload.dll] <N/A><N/A> [C:\Program Files\Thunder Network\Thunder\download_interface.dll] <N/A><N/A> [C:\Program Files\Thunder Network\Thunder\log4cplus.dll] <N/A><N/A> [C:\Program Files\Thunder Network\Thunder\stlport_vc646.dll] <STLport Consulting, Inc.><4.6.2003.1031> [C:\Program Files\Thunder Network\Thunder\historyinfo_manage.dll] <N/A><N/A> [E:\db\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233> [E:\db\KMailOEBand.dll] <N/A><2006, 5, 19, 118> [E:\db\KAScript.DLL] <Kingsoft Corporation><2006, 2, 10, 60> [E:\db\KAEPlat.DLL] <Kingsoft Corp.><2005, 12, 29, 56> [E:\db\KAEMem.DAT] <Kingsoft><2006, 4, 12, 13> [E:\db\KAEUnpack.DAT] <Kingsoft Corp.><2006, 6, 15, 44> [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [PID: 2368][E:\db\KMailMon.EXE] <Kingsoft Corporation><2006, 4, 12, 106> [E:\db\KAntiSpm.dll] <N/A><1, 0, 0, 2> [E:\db\KAVIPC2.DLL] <Kingsoft Corporation><2004, 12, 28, 20> [E:\db\KAECall2.DLL] <Kingsoft Corporation><2004, 12, 28, 7> [E:\db\KAEPlat.DLL] <Kingsoft Corp.><2005, 12, 29, 56> [E:\db\KAEMem.DAT] <Kingsoft><2006, 4, 12, 13> [E:\db\KAEUnpack.DAT] <Kingsoft Corp.><2006, 6, 15, 44> [E:\db\KAConfig.DLL] <Kingsoft Corporation><2005, 3, 23, 30> [E:\db\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233> [E:\db\KMailOEBand.dll] <N/A><2006, 5, 19, 118> [PID: 2688][C:\WINDOWS\system32\wuauclt.exe] <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)> [PID: 3100][C:\Program Files\Symantec AntiVirus\DefWatch.exe] <Symantec Corporation><9.0.0.338> [PID: 3188][C:\WINDOWS\system32\wbem\wmiprvse.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3356][E:\杀毒\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [E:\db\KMailOEBand.dll] <N/A><2006, 5, 19, 118> [E:\db\KASocket.dll] <Kingsoft Corporation><2005, 2, 22, 233> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
燃烧吧斩贱刀初生襁褓狮帖子:5 注册: 2006-09-01 来自:

燃烧吧斩贱刀初生襁褓狮帖子:5 注册: 2006-09-01 来自:	发表于： 2006-09-01 22:59 \| 只看楼主短消息资料字号：小中大 4楼谢谢高手们，谢谢啦
燃烧吧斩贱刀初生襁褓狮帖子:5 注册: 2006-09-01 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-09-01 23:02 \| 短消息资料字号：小中大 5楼运行(双击)System Repair Engineer，点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Windows User Mode Driver Frameworkre，选择“删除服务”点“设置”选择“否”最后重启重启后删除 c:\windows\system32\SP00LSV.EXE注意你要删除的是SP00LSV.EXE它可是数字SP00LSV.EXE不要删除字母的SPOOLSV.EXE，要区分好。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT