【求助】我刚才刚刚杀了毒,我不清楚是什么毒,贴上日志大家帮忙一下!! - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【求助】我刚才刚刚杀了毒,我不清楚是什么毒,贴上日志大家帮忙一下!!

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

【求助】我刚才刚刚杀了毒,我不清楚是什么毒,贴上日志大家帮忙一下!!

風聲無過初生襁褓狮帖子:12 注册: 2006-08-30 来自:	发表于： 2006-09-02 22:49 \| 只看楼主短消息资料字号：小中大 1楼【求助】我刚才刚刚杀了毒,我不清楚是什么毒,贴上日志大家帮忙一下!! 2006-09-02,22:36:32 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <SKYNET Personal FireWall><C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe> [广州众达天网技术有限公司] <EPSON ME 1><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P10 "EPSON ME 1" /O6 "USB001" /M "ME 1"> [SEIKO EPSON CORPORATION] <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_CURRENT_USER\Control Panel\Desktop] <SCRNSAVE.EXE><C:\WINDOWS\system32\热带鱼~1.SCR> [] ================================== 启动文件夹服务 [kavsvc / kavsvc] <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"><Kaspersky Lab> [QQwin045er / QQwin045ing] <C:\WINDOWS\QQwin045><N/A> [Update Service For Windows / SoftUpdate] <C:\WINDOWS\SoftUpdate.exe><N/A> [system / system] <C:\WINDOWS\system\system.exe><N/A> [Windows Createddos / Windows Processdos] <C:\WINDOWS\system32\dsds.exe><N/A> ================================== 浏览器加载项 [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\Program Files\Thunder\xunleibho_v13.dll, Thunder Networking Technologies,LTD> [HelperObject Class] {00C6482D-C502-44C8-8409-FCE54AD9C208} <C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll, TechSmith Corporation> [江民在线杀毒] {06926B30-424E-4f1c-8EE3-543CD96573DC} <http://online.jiangmin.com/online.asp, N/A> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, N/A> [SnagIt] {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll, TechSmith Corporation> [SuperStream Control] {285C55C4-B32C-4EC0-8539-BBCE97FDF380} <C:\WINDOWS\system32\SUPERS~1.OCX, 盛大网络> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [KSHScan Control] {ACFE8232-03C5-4AEC-AF5E-42B806724096} <C:\WINDOWS\system32\kingsoft\ONLINE~1\KSHScan.ocx, kingsoft> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [KvScanOnline Control] {EF6205C1-3F17-4829-BCB5-1336ED89E356} <C:\WINDOWS\system32\KvDown.ocx, dreamersoft> [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\Program Files\Thunder\xunleibho_v13.dll, Thunder Networking Technologies,LTD> [HelperObject Class] {00C6482D-C502-44C8-8409-FCE54AD9C208} <C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll, TechSmith Corporation> [Windows Genuine Advantage] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.dll, Microsoft? Corporation> [KLeakScan Control] {1FFFA3E9-A615-41FA-972D-7DB61F23AE90} <C:\WINDOWS\system32\kingsoft\ONLINE~1\KLKScan.ocx, kingsoft> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [SuperStream Control] {285C55C4-B32C-4EC0-8539-BBCE97FDF380} <C:\WINDOWS\system32\SUPERS~1.OCX, 盛大网络> [KvScan Control] {626AEE7D-DC95-4405-8F9E-9FB1EA80AEDE} <C:\WINDOWS\KVSCAN~1\KvKill.ocx, jiangmin> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [SnagIt] {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll, TechSmith Corporation> [KSHScan Control] {ACFE8232-03C5-4AEC-AF5E-42B806724096} <C:\WINDOWS\system32\kingsoft\ONLINE~1\KSHScan.ocx, kingsoft> [卡卡上网安全助手] {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\kakatool.dll, N/A> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [Kingsoft DUBA OnlineScan] {C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} <C:\WINDOWS\system32\kingsoft\ONLINE~1\kavclean.ocx, kingsoft> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, N/A> [KvScanOnline Control] {EF6205C1-3F17-4829-BCB5-1336ED89E356} <C:\WINDOWS\system32\KvDown.ocx, dreamersoft> [使用迅雷下载] <C:\Program Files\Thunder\geturl.htm, N/A> [使用迅雷下载全部链接] <C:\Program Files\Thunder\getallurl.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> 2006-09-02 23:01:36.733000000
風聲無過初生襁褓狮帖子:12 注册: 2006-08-30 来自:	分享到：

風聲無過初生襁褓狮帖子:12 注册: 2006-08-30 来自:	发表于： 2006-09-02 22:49 \| 只看楼主短消息资料字号：小中大 2楼 ================================== 正在运行的进程 [PID: 376][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 436][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 460][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 504][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 516][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 672][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 716][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 784][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 836][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 876][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1152][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\shellex.dll] <Kaspersky Lab><5.0.388.1> [PID: 1260][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)> [C:\WINDOWS\system32\EBPMON24.DLL] <SEIKO EPSON CORPORATION><5, 3, 0, 0> [PID: 1816][C:\WINDOWS\system32\inetsrv\inetinfo.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1904][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)> [PID: 564][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1124][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3188][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3852][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll] <TechSmith Corporation><1.0.6> [C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddinRes.dll] <TechSmith Corporation><1.0.6> [C:\Program Files\Thunder\xunleibho_v13.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 48> [C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll] <TechSmith Corporation><1.0.1> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.388.1> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.388.0> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.388.0> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.388.1> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.388.0> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.388.1> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.388.2> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.388.1> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.388.0> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.388.0> [c:\program files\kaspersky lab\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.388.0> [c:\program files\kaspersky lab\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.388.0> [c:\program files\kaspersky lab\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.388.0> [c:\program files\kaspersky lab\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.388.0> [C:\WINDOWS\system32\kingsoft\ONLINE~1\KSHScan.ocx] <kingsoft><2004, 12, 14, 5> [C:\WINDOWS\system32\kingsoft\ONLINE~1\KLKScan.ocx] <kingsoft><2004, 12, 20, 4> [C:\WINDOWS\system32\kingsoft\ONLINE~1\kavclean.ocx] <kingsoft><2004, 12, 20, 2> [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [PID: 2640][C:\WINDOWS\system32\dllhost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2756][C:\WINDOWS\system32\inetsrv\DavCData.exe] <Microsoft Corporation><6.0.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2232][D:\Program Files\Tencent\qq\QQ.exe] <TENCENT><0, 0, 0, 0> [D:\Program Files\Tencent\qq\CoralAssist.DLL] <Coral Team><4.5.0 build 20060515> [D:\Program Files\Tencent\qq\CoralQQ.DLL] <Coral Team><4.5.1 Build 20060620> [D:\Program Files\Tencent\qq\ipsearcher.dll] <N/A><1.0.0.4> [D:\Program Files\Tencent\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQHelperDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160> [D:\Program Files\Tencent\qq\QQAPI.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\LoginCtrl.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1> [D:\Program Files\Tencent\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1> [D:\Program Files\Tencent\qq\QQRes.dll] <tencent><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQMainFrame.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\CQQApplication.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\NewSkin.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\HostingMgr.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\CameraDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\MailSummary.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQSpace.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQSettingCtrl.dll] <><1, 0, 0, 1> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQGroupMng.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\GroupLive.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQSysMsgMng.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\UserDefinedHead.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQPlugin.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQAllInOne.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\SCCore.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQCustomFace.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQPet.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\LongConnection.dll] <tencent><5, 0, 200, 160> [D:\Program Files\Tencent\qq\QQConfigPlugin.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\FlashAvatarDll.dll] <><1, 4, 0, 1> [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [D:\Program Files\Tencent\qq\QRingMng.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQMagicFace.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQAvatar.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQSceneMng.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\PhoneAPI.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\DialerAllinOne.dll] <tencent><1, 4, 0, 0> [D:\Program Files\Tencent\qq\BQQApplication.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\CommercesMng.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2> [D:\Program Files\Tencent\qq\QQUdpGetFileLib.dll] <tencent><0, 2, 2, 3> [D:\Program Files\Tencent\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200> [PID: 3824][G:\soft\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [G:\soft\SREng2\Plugins\SREngPluginDemo.SRE] <Smallfrogs Studio><1, 1, 1, 0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ** ==================================
風聲無過初生襁褓狮帖子:12 注册: 2006-08-30 来自:

風聲無過初生襁褓狮帖子:12 注册: 2006-08-30 来自:	发表于： 2006-09-02 23:01 \| 只看楼主短消息资料字号：小中大 3楼有人看懂的顶一下,谢谢了!
風聲無過初生襁褓狮帖子:12 注册: 2006-08-30 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT