瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】IE中了New Malware.j怎么办？

12   1  /  2  页   跳转页

【求助】IE中了New Malware.j怎么办？

收藏
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-18 11:08 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

【求助】IE中了New Malware.j怎么办？

每次用IE打开或刷新网页，macfee就会弹框报警（用maxthon上网没事）。
2006-10-18    9:30:53    已移动     C:\WINDOWS\system32\SPOOLS.EXE    New Malware.j (特洛伊)

每次都提示“已移动”，可是每次都还是会弹框。我在网上搜过，网上提到的注册表项和文件我这里都没有，我这里报的spools.exe在网上也没搜到。用macfee扫描所有硬盘，但是搜索结果一个病毒都没有。windows的临时文件夹和IE的临时文件夹也都删过了。

实在没辙了，请高手支招！

Logfile of HijackThis v1.99.1
Scan saved at 10:31:27, on 2006-10-18
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
d:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe
D:\oracle\ora92\bin\omtsreco.exe
C:\McAfee\Rogue System Sensor\RSSensor.exe
D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
D:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
F:\hijackthis1991\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: netup - {0A44CDEC-87D0-4D4D-BF97-DE9AFB9B104A} - C:\WINDOWS\system32\netiup.dll
O2 - BHO: SYM - {36BF6929-DCBC-4CCD-A620-C5E3BBA77B95} - C:\WINDOWS\system32\usercrd.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - H:\QQ\QQIEHelper.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: 金山词霸 2006.lnk = D:\Program Files\Kingsoft\Powerword 2006\XDICT.EXE
O8 - Extra context menu item: &使用迅雷下载 - d:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - d:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: Explore with &Instant Source - d:\Program Files\Instant Source\context.html
O8 - Extra context menu item: 上传到QQ网络硬盘 - H:\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用网际快车下载 - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - H:\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - H:\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - H:\QQ\SendMMS.htm
O9 - Extra button: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - d:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - d:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Instant Source - {8BD5271D-69C9-4467-882D-5139952D7754} - d:\Program Files\Instant Source\isrc.dll
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - H:\QQ\QQ.EXE (file missing)
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - H:\QQ\QQ.EXE (file missing)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - H:\QQ\QQIEHelper.dll (file missing)
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - H:\QQ\QQIEHelper.dll (file missing)
O14 - IERESET.INF: START_PAGE_URL=about:blank
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab
O16 - DPF: {3BBE5C24-0908-4DA4-905F-3A83D4E1695F} (QMMapObj Class) - http://192.168.1.76/qmap_qq/qmmap.cab
O16 - DPF: {AB91F946-DF45-4694-9815-698EA6439D13} (APITool Control) - file://E:\200609长春\gateway1.4.3.1\gateway1.4.3.1\ApiTool.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{0270A7BE-DCEE-433E-92C1-C8747AF9B9A4}: NameServer = 192.168.254.3,202.96.209.5
O17 - HKLM\System\CS1\Services\Tcpip\..\{0270A7BE-DCEE-433E-92C1-C8747AF9B9A4}: NameServer = 192.168.254.3,202.96.209.5
O17 - HKLM\System\CS2\Services\Tcpip\..\{0270A7BE-DCEE-433E-92C1-C8747AF9B9A4}: NameServer = 192.168.254.3,202.96.209.5
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - (no file)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart (file missing)
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: IBM MQSeries (MQSeriesServices) - IBM 公司 - D:\Program Files\IBM\WebSphere MQ\bin\amqsvc.exe
O23 - Service: OracleMTSRecoveryService - Oracle Corporation - D:\oracle\ora92\bin\omtsreco.exe
O23 - Service: OracleOraHome92ClientCache - Unknown owner - D:\oracle\ora92\BIN\ONRSD.EXE
O23 - Service: McAfee Rogue System Sensor (RSSensor) - McAfee, Inc. - C:\McAfee\Rogue System Sensor\RSSensor.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - d:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)

最后编辑2006-11-13 09:49:17
分享到：
gototop
 
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-19 11:40 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

没人回吗？顶上来先～～
gototop
 
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-27 17:10 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

怀疑这个病毒跟“全能搜”工具条有关。
18日发帖时，这个工具条也在，但是我没把二者联系起来。
后来我手动删了一些system32下面的文件，把这个垃圾工具条删掉了，发现mcafee也不弹框了。
大概是没删干净还是怎么的，今天又中招了，用IE打开网页mcafee弹框，而且“全能搜”工具条又出来了！

360safe查不出来，说我的电脑里没有恶意软件。

请高手指点该怎么才能彻底卸载这个垃圾工具条啊！！
gototop
 
秋日里的蓝天
头像
卡卡技术团队
  • 帖子:7349
  • 注册: 2004-09-30
  • 来自:
发表于： 2006-10-27 19:59 | 短消息 资料
字号： 小 中 大 4楼

修复
- Default URLSearchHook is missing
O2 - BHO: netup - {0A44CDEC-87D0-4D4D-BF97-DE9AFB9B104A} - C:\WINDOWS\system32\netiup.dll
O2 - BHO: SYM - {36BF6929-DCBC-4CCD-A620-C5E3BBA77B95} - C:\WINDOWS\system32\usercrd.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - H:\QQ\QQIEHelper.dll (file missing)


请下载SREng2（最新版） ，使用“智能扫描”，按下“扫描”按钮进行扫描，
扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告
日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。

下载地址
http://free5.ys168.com/?ufwihgu168
http://www.kztechs.com/sreng/sreng2.zip
gototop
 
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-31 09:48 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

谢谢版主回复，我先说一下现状：
第一次发现病毒以后，我发了求助贴，但是没人回复，我就凭自己判断，删除了以下文件：
（都在system32目录下面）
netiup.dll
netidp.dll
usercrd.dll

SeaBar.dll
ToolBar.dll
BarTool.dll
seabar.ini
uninst.exe
logo.bmp
init.ini
删除之后，工具条没了，mcafee也不报毒了，我以为这就好了。

没想到到了26日，这个毒又出来了，27日，工具条也出来了。原先删除的那些文件，除了前三个以外全都再次出现。我就试着运行了一下其中的uninst.exe，工具条被卸载了，但是病毒仍在。

昨天（30日），工具条第三次出现。我用360safe扫描，发现虽然没有检查出恶意软件，但是在“多余插件”那里找到了seabar和bartool。于是用360清除这两项，重启机器后，工具条又没了，但是病毒仍在。查看system32目录，以下几个文件尚在：
SeaBar.dll
seabar.ini
uninst.exe
logo.bmp
init.ini
删之，病毒仍在。

现在的状况就是，“全能搜”工具条不在了，用IE打开网页或刷新网页，mcafee报错：
2006-10-18 9:30:53 已移动 C:\WINDOWS\system32\SPOOLS.EXE New Malware.j (特洛伊)
gototop
 
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-31 09:54 | 只看楼主 短消息 资料
字号： 小 中 大 6楼

2006-10-31,09:40:32

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background>  [(Verified)Microsoft Corporation]
    <googletalk><; "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart>  [Google]
    <updateMgr><; "D:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_0 -reboot 1>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <IgfxTray><C:\WINDOWS\system32\igfxtray.exe>  [(Verified)Intel Corporation]
    <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe>  [(Verified)Intel Corporation]
    <McAfeeUpdaterUI><"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey>  [McAfee, Inc.]
    <ShStatEXE><"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE>  [Network Associates, Inc.]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <SunJavaUpdateSched><"D:\Program Files\Java\jre1.5.0_08\bin\jusched.exe">  [Sun Microsystems, Inc.]
    <QuickTime Task><; "D:\Program Files\QuickTime\qttask.exe" -atboottime>  [Apple Computer, Inc.]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <iMookUpdate><; C:\DOCUME~1\Aerith\LOCALS~1\Temp\iMookSetup_15-1019.exe>  [N/A]
    <iTunesHelper><; "D:\Program Files\iTunes\iTunesHelper.exe">  [N/A]
    <StormCodec_Helper><; "d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <stdup><>  [N/A]
    <NetWork><C:\WINDOWS\system32\cmspl.dll>  []

==================================
启动文件夹
[金山词霸 2006]
  <C:\Documents and Settings\Aerith\「开始」菜单\程序\启动\金山词霸 2006.lnk --> D:\PROGRA~1\Kingsoft\POWERW~1\XDICT.EXE [Kingsoft Co, Ltd.]><N>

==================================
服务
[Adobe LM Service / Adobe LM Service]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[ASP.NET State Service / aspnet_state]
  <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[InstallDriver Table Manager / IDriverT]
  <"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[McAfee Framework Service / McAfeeFramework]
  <"C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart><McAfee, Inc.>
[Network Associates McShield / McShield]
  <"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"><Network Associates, Inc.>
[Network Associates Task Manager / McTaskManager]
  <"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"><Network Associates, Inc.>
[Machine Debug Manager / MDM]
  <"C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe"><Microsoft Corporation>
[IBM MQSeries / MQSeriesServices]
  <"D:\Program Files\IBM\WebSphere MQ\bin\amqsvc.exe"><IBM 公司>
[msgsat / msgsat]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\Program Files\Messenger\msnhost.dll><N/A>
[MSSQLSERVER / MSSQLSERVER]
  <d:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[OracleMTSRecoveryService / OracleMTSRecoveryService]
  <D:\oracle\ora92\bin\omtsreco.exe "OracleMTSRecoveryService"><Oracle Corporation>
[OracleOraHome92ClientCache / OracleOraHome92ClientCache]
  <D:\oracle\ora92\BIN\ONRSD.EXE><N/A>
[McAfee Rogue System Sensor / RSSensor]
  <C:\McAfee\Rogue System Sensor\RSSensor.exe><McAfee, Inc.>
[SQLSERVERAGENT / SQLSERVERAGENT]
  <d:\PROGRA~1\MICROS~3\MSSQL\binn\sqlagent.exe><Microsoft Corporation>
[StarWind iSCSI Service / StarWindService]
  <D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe><Rocket Division Software>
[Visual Studio Analyzer RPC bridge / Visual Studio Analyzer RPC bridge]
  <D:\Program Files\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe><Microsoft Corporation>
[VNC Server Version 4 / WinVNC4]
  <"d:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service><RealVNC Ltd.>

==================================
驱动程序
[aeaudio / aeaudio]
  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[bootbus / bootbus]
  <\??\C:\WINDOWS\system32\drivers\bootbus.sys><N/A>
[Intel(R) PRO/1000 Adapter Driver / E1000]
  <system32\DRIVERS\e1000325.sys><Intel Corporation>
[ialm / ialm]
  <system32\DRIVERS\ialmnt5.sys><Intel Corporation>
[NaiAvFilter1 / NaiAvFilter1]
  <system32\drivers\naiavf5x.sys><Network Associates, Inc.>
[NaiAvTdi1 / NaiAvTdi1]
  <system32\drivers\mvstdi5x.sys><Network Associates, Inc.>
[NetXRay Driver 3.0.1 / NetXRay]
  <\SystemRoot\SYSTEM32\Drivers\NetXRay.SYS><N/A>
[npkcrypt / npkcrypt]
  <\??\H:\QQ\npkcrypt.sys><N/A>
[Padus ASPI Shell / pfc]
  <system32\drivers\pfc.sys><Padus, Inc.>
[PNP09634 / PNP09634]
  <\SystemRoot\system32\Drivers\pnp09533.sys><Anti Driver>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20]
  <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[smwdm / smwdm]
  <system32\drivers\smwdm.sys><Analog Devices, Inc.>
[TCP/IP Protocol Driver / Tcpip]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[vax347b / vax347b]
  <\SystemRoot\system32\DRIVERS\vax347b.sys><>
[vax347s / vax347s]
  <\SystemRoot\System32\Drivers\vax347s.sys><>
gototop
 
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-31 09:55 | 只看楼主 短消息 资料
字号： 小 中 大 7楼


==================================
浏览器加载项
[symndis]
  {166DF856-08F0-4D1C-991D-7CE3DB5C26F5} <C:\WINDOWS\system32\rasacd.dll, >
[SrchHook Class]
  {6E1BC898-505A-44f4-BC88-BCE43016AC96} <C:\WINDOWS\system32\BarSea.dll, N/A>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[UMU Class]
  {86450826-9507-44DC-9009-F92D2F5864EE} <C:\WINDOWS\system32\msvis.dll, >
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[启动迅雷]
  {0062C9BD-B349-40DE-91A0-755F37ACD559} <d:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[Java Plug-in 1.5.0_08]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[Instant Source]
  {8BD5271D-69C9-4467-882D-5139952D7754} <d:\Program Files\Instant Source\isrc.dll, Blazing Tools Software>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <H:\QQ\QQ.EXE, N/A>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <D:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINDOWS\system32\CMBEdit.dll, >
[QMMapObj Class]
  {3BBE5C24-0908-4DA4-905F-3A83D4E1695F} <C:\WINDOWS\Downloaded Program Files\CONFLICT.2\qmmap.dll, Q-map Technology Co.,Ltd>
[Java Plug-in 1.5.0_08]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[APITool Control]
  {AB91F946-DF45-4694-9815-698EA6439D13} <C:\WINDOWS\DOWNLO~1\ApiTool.ocx, FLEETY Communications>
[Java Plug-in 1.5.0_08]
  {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} <D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_08]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <D:\Program Files\Java\jre1.5.0_08\bin\npjpi150_08.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.>
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\Msjava.dll, Microsoft Corporation>
[netup]
  {0A44CDEC-87D0-4D4D-BF97-DE9AFB9B104A} <C:\WINDOWS\system32\netiup.dll, N/A>
[symndis]
  {166DF856-08F0-4D1C-991D-7CE3DB5C26F5} <C:\WINDOWS\system32\rasacd.dll, >
[SYM]
  {36BF6929-DCBC-4CCD-A620-C5E3BBA77B95} <C:\WINDOWS\system32\usercrd.dll, N/A>
[QMMapObj Class]
  {3BBE5C24-0908-4DA4-905F-3A83D4E1695F} <C:\WINDOWS\Downloaded Program Files\CONFLICT.2\qmmap.dll, Q-map Technology Co.,Ltd>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <H:\QQ\QQIEHelper.dll, N/A>
[SrchHook Class]
  {6E1BC898-505A-44F4-BC88-BCE43016AC96} <C:\WINDOWS\system32\BarSea.dll, N/A>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <D:\Program Files\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[UMU Class]
  {86450826-9507-44DC-9009-F92D2F5864EE} <C:\WINDOWS\system32\msvis.dll, >
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[Search Bar]
  {FBFF8F98-AE9D-4599-975E-E9B31E88EF04} <C:\WINDOWS\system32\BarTool.dll, N/A>
[&使用迅雷下载]
  <d:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <d:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[Explore with &Instant Source]
  <d:\Program Files\Instant Source\context.html, N/A>
[上传到QQ网络硬盘]
  <H:\QQ\AddToNetDisk.htm, N/A>
[使用网际快车下载]
  <D:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <D:\Program Files\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
  <H:\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <H:\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <H:\QQ\SendMMS.htm, N/A>
gototop
 
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-31 09:57 | 只看楼主 短消息 资料
字号： 小 中 大 8楼

==================================
正在运行的进程
[PID: 644][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 692][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 716][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 760][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 772][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 924][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1004][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1092][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [c:\program files\messenger\msnhost.dll]  [N/A, N/A]
    [D:\oracle\ora92\bin\oci.dll]  [Oracle Corporation, 9.2.0.1.0]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1140][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1204][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1444][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\AdobePDF.dll]  [Adobe Systems Incorporated., 7.0.0.00]
    [D:\Program Files\Adobe\Acrobat 7.0\Distillr\adistres.dll]  [Adobe Systems Incorporated., 7.0.7.2006011200]
[PID: 1576][C:\WINDOWS\system32\inetsrv\inetinfo.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\php\php5isapi.dll]  [The PHP Group, 5.0.4.4]
    [D:\php\php5ts.dll]  [The PHP Group, 5.0.4.4]
    [D:\php\ext\php_dba.dll]  [The PHP Group, 5.0.4.4]
    [D:\php\ext\php_dbase.dll]  [The PHP Group, 5.0.4.4]
    [D:\php\ext\php_filepro.dll]  [The PHP Group, 5.0.4.4]
    [D:\php\ext\php_gd2.dll]  [The PHP Group, 5.0.4.4]
    [D:\php\ext\php_imap.dll]  [The PHP Group, 5.0.4.4]
    [D:\php\ext\php_mysql.dll]  [The PHP Group, 5.0.4.4]
    [C:\WINDOWS\system32\LIBMYSQL.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1604][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\nailog.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naXML71.dll]  [N/A, N/A]
    [C:\Program Files\Network Associates\Common Framework\naCmnLib71.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\applib.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\Logging.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\InternetManager.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naInet.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\UserSpace.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\Management.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\cmalib.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naPolicyManager.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\Scheduler.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\Agent.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naSPIPE.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\ListenServer.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\TCSubSys.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\GenEvtInf20060719103107.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1652][C:\Program Files\Network Associates\VirusScan\Mcshield.exe]  [Network Associates, Inc., 8.0.0.309]
    [C:\Program Files\Network Associates\VirusScan\Res04\McShield.DLL]  [Network Associates, Inc., 8.0.0.251]
    [C:\Program Files\Network Associates\VirusScan\FTL.Dll]  [Network Associates, Inc., 8.0.0.135]
    [C:\Program Files\Network Associates\VirusScan\naiann.dll]  [Network Associates, Inc., 8.0.0.308]
    [C:\Program Files\Network Associates\VirusScan\mytilus.dll]  [Network Associates, Inc., 8.0.0.316]
    [C:\Program Files\Network Associates\Common Framework\GenEvtInf20060719103107.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\VirusScan\NaEventU.DLL]  [Network Associates, Inc., 8.0.0.342]
    [C:\Program Files\Network Associates\VirusScan\Res04\naEvtRes.dll]  [Network Associates, Inc., 8.0.0.342]
    [C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll]  [Network Associates, Inc., 8.0.0.291]
    [C:\Program Files\Common Files\Network Associates\Engine\MCSCAN32.DLL]  [McAfee, Inc., 5.1.00]
    [C:\Program Files\Network Associates\VirusScan\EntSrv.Dll]  [Network Associates, Inc, 8.0.0.448]
    [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.5.5.438]
gototop
 
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-31 09:59 | 只看楼主 短消息 资料
字号： 小 中 大 9楼

[PID: 1696][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe]  [Network Associates, Inc., 8.0.0.1002]
    [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\naiwmain.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\naicondl.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\RES04\VsTskMgr.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll]  [McAfee, Inc., 8.0.0.152]
[PID: 1720][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe]  [Microsoft Corporation, 7.10.3077]
[PID: 1800][C:\Program Files\Network Associates\Common Framework\naPrdMgr.exe]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naXML71.dll]  [N/A, N/A]
    [C:\Program Files\Network Associates\Common Framework\nailog.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naCmnLib71.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\applib.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\AgentPlugin.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\NAGSHR32.DLL]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\VirusScan\VsPlugin.dll]  [Network Associates, Inc., 8.0.0.981]
    [C:\Program Files\Network Associates\System Compliance Profiler\PtchScan.dll]  [Networks Associates Technology, Inc., 1.1.0.156]
    [C:\Program Files\Network Associates\Common Framework\UpdPlug.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
    [C:\McAfee\Rogue System Sensor\RSSPlugin.dll]  [McAfee, Inc., 1.0.0]
[PID: 1832][C:\Program Files\Network Associates\Common Framework\naPrdMgr.exe]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naXML71.dll]  [N/A, N/A]
    [C:\Program Files\Network Associates\Common Framework\nailog.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naCmnLib71.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\applib.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1856][d:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
[PID: 1896][D:\oracle\ora92\bin\omtsreco.exe]  [Oracle Corporation, 9.2.0.1.0]
    [D:\oracle\ora92\bin\OCI.dll]  [Oracle Corporation, 9.2.0.1.0]
    [D:\oracle\ora92\bin\OraClient9.Dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oravsn9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracommon9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orageneric9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraxml9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\oraxsd9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\orannzsbb9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oran9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranl9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranldap9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraldapclnt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancrypt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\ORATRACE9.dll]  [N/A, N/A]
    [D:\oracle\ora92\bin\oranro9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranhost9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranoname9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancds9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orantns9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranms.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmsp.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\orapls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraslax9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orasnls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orawtc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orasql9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\omtsrecomsgZHS.dll]  [Oracle Corporation, 9.0.0.0.0]
    [D:\oracle\ora92\bin\omtsrecomsgus.dll]  [Oracle Corporation, 9.2.0.0.1]
[PID: 408][C:\McAfee\Rogue System Sensor\RSSensor.exe]  [McAfee, Inc., 1.0.0]
    [C:\McAfee\Rogue System Sensor\RSSPlugin.dll]  [McAfee, Inc., 1.0.0]
    [C:\WINDOWS\system32\wpcap.dll]  [NetGroup - Politecnico di Torino, 3, 1, 0, 22]
    [C:\WINDOWS\system32\packet.dll]  [NetGroup - Politecnico di Torino, 3, 1, 0, 22]
[PID: 580][D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe]  [Rocket Division Software, 2.6.1 Build 0x20050401]
[PID: 372][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 1888][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3044][C:\WINDOWS\system32\igfxtray.exe]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\igfxress.dll]  [Intel Corporation, 3,0,0,2104]
[PID: 3060][C:\WINDOWS\system32\hkcmd.exe]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\igfxhk.dll]  [Intel Corporation, 3,0,0,2104]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3,0,0,2104]
[PID: 3128][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\nailog.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naCmnLib71.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\naXML71.dll]  [N/A, N/A]
    [C:\Program Files\Network Associates\Common Framework\cmalib.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\applib.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.5.5.438]
    [C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.5.5.438]
[PID: 3136][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\SHUTIL.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\naiwmain.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\RES04\shstat.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\RES04\Product.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\RES04\McShield.dll]  [Network Associates, Inc., 8.0.0.251]
    [C:\Program Files\Network Associates\VirusScan\RES04\Shutilrc.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\Graphics.dll]  [Network Associates, Inc., 8.0.0.912]
[PID: 3196][D:\Program Files\Java\jre1.5.0_08\bin\jusched.exe]  [Sun Microsystems, Inc., 5.0.80.3]
gototop
 
qyqian
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-03
  • 来自:
发表于： 2006-10-31 10:00 | 只看楼主 短消息 资料
字号： 小 中 大 10楼

[PID: 3248][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.3208]
[PID: 3272][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 268][D:\Program Files\Maxthon\Maxthon.exe]  [Maxthon International Ltd., 1, 5, 8, 116]
    [D:\Program Files\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
    [D:\Program Files\Maxthon\Plugin\FloatBar\FloatBar.dll]  [, 1, 8, 0, 0]
    [D:\Program Files\IBM\WebSphere MQ\bin\amqmperf.dll]  [IBM Corporation, 5,300,0100,02283]
    [D:\Program Files\IBM\WebSphere MQ\bin\AMQXCS2.dll]  [IBM 公司, 5,300,0100,02283]
    [D:\Program Files\IBM\WebSphere MQ\bin\amqxcsn.DLL]  [IBM 公司, 5,300,0100,02283]
    [D:\Program Files\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx]  [Macromedia, Inc., 8,0,24,0]
    [C:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 3144][C:\WINDOWS\explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EntApi.dll]  [Network Associates, Inc, 8.0.0.448]
    [D:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\Network Associates\VirusScan\shext.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\Program Files\Network Associates\VirusScan\RES04\ShExtRes.dll]  [Network Associates, Inc., 8.0.0.912]
    [C:\WINDOWS\system32\msvis.dll]  [, 1, 0, 0, 1]
    [d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [D:\PROGRA~1\FlashGet\jccatch.dll]  [Amaze Soft, 1, 1, 4, 0]
    [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [d:\Program Files\UltraEdit\ue32ctmn.dll]  [, 1.0]
    [F:\download\EmEditorProfessional\EmEditorProfessional\EmEditor\emedshl.dll]  [N/A, N/A]
[PID: 2552][C:\WINDOWS\system32\notepad.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 3364][F:\TDDownload\sreng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
gototop
 
<<上一主题|下一主题>>
12   1  /  2  页   跳转页
页面顶部
Powered by Discuz!NT