瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】请各位大虾帮小弟看一下这份日志有哪里问题。谢谢先

12   1  /  2  页   跳转页

【求助】请各位大虾帮小弟看一下这份日志有哪里问题。谢谢先

收藏
xiaxxx1984
头像
初生襁褓狮
  • 帖子:23
  • 注册: 2005-08-03
  • 来自:
发表于： 2006-10-31 15:12 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

【求助】请各位大虾帮小弟看一下这份日志有哪里问题。谢谢先

2006-10-31,09:51:27

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <Super Rabbit IEPro><C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD>  [N/A]
    <msnnt><; C:\WINDOWS\winampg.exe>  []
    <SaveMail><; C:\WINDOWS\system32\MSSOFT\winampe.exe>  [N/A]
    <updatereal><; C:\WINDOWS\realupdate.exe other>  [N/A]
    <winamp><; C:\WINDOWS\winampz.exe>  []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><; C:\windows\system32\wincfgs.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <R><C:\WINDOWS\system32\rundll32.exe meet2.dll s>  [N/A]
    <yok.exe><; C:\PROGRA~1\yok\yok.exe>  [YOK.Com]
    <UpdateRun><C:\Program Files\Common Files\updat\Update.exe>  [N/A]
    <stup.exe><; C:\PROGRA~1\TENCENT\Adplus\stup.exe>  [Tencent]
    <kis><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe">  [Kaspersky Lab]
    <CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe>  [N/A]
    <WebThunder><C:\Program Files\Thunder Network\WebThunder\WebThunder.exe>  [深圳市迅雷网络技术有限公司]
    <EPSON Stylus C67 Series><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAP.EXE /P23 "EPSON Stylus C67 Series" /O6 "USB001" /M "Stylus C67">  [(Verified)SEIKO EPSON CORPORATION]
    <Desktop><; C:\WINDOWS\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll>  [N/A]
    <FASTKEY><; C:\Program Files\Lenovo\功能键盘\HotKeyB.exe>  [联想电脑公司]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <LenovoHD><; C:\Program Files\联想应用\联想安全中心\LenovoHD.exe>  [Lenovo]
    <ms><; C:\Program Files\Microsoft\svhost32.exe>  [N/A]
    <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <NMGameX_AutoRun><; C:\WINDOWS\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa>  [N/A]
    <NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)NVIDIA Corporation]
    <nwiz><; nwiz.exe /install>  [N/A]
    <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <RavMon><; C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM>  [N/A]
    <RavTimer><; C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE>  [N/A]
    <RichMedia><; C:\WINDOWS\system32\Rundll32.exe  "C:\PROGRA~1\pcast\hbcast.dll",WaitWindows>  [N/A]
    <SetDefPrt><; C:\Program Files\Brmflp03\BrStDvPt.exe>  [N/A]
    <SoundMan><; SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <Tray><; C:\WINDOWS\command\rundll32.exe>  [N/A]
    <Update><; C:\Program Files\Common Files\updat\Update.exe>  [N/A]
    <wdfmgr32><; C:\WINDOWS\system32\wdfmgr32.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll>  [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
    <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll>  [Kaspersky Lab]

==================================
启动文件夹
[腾讯QQ]
  <C:\Documents and Settings\lenovo\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\PROGRA~1\Tencent\QQ\QQ.exe [TENCENT]><N>

==================================
服务
[1731E256 / 1731E256]
  <C:\WINDOWS\system32\1731E256.EXE -service><Microsoft Corporation>
[Windows Install Helper / 8NASCAR]
  <C:\WINDOWS\SYSTEM32\RUN32.EXE C:\WINDOWS\SYSTEM32\WBEM\CGDNVO54.DLL,Export 1087><Microsoft Corporation>
[Application Management / AppMgmt]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[卡巴斯基互联网安全套装 6.0 / AVP]
  <"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r><Kaspersky Lab>
[Brother Popup Suspend service for Resource manager / brmfrmps]
  <"C:\WINDOWS\system32\Brmfrmps.exe" -service ><Brother Industries, Ltd.>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
  <C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision>
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[igeon / igeon]
  <C:\WINDOWS\Syntena.exe><N/A>
[Storage Center / Live]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\hcxnvi98.dll><Microsoft Corporation>
[MSN Explorer PigeonServer / MSN Explorer PigeonServer]
  <C:\WINDOWS\Server.exe><N/A>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>

==================================
驱动程序
[31778 / 31778]
  <\SystemRoot\system32\drivers\31778.sys><N/A>
[44235 / 44235]
  <\SystemRoot\system32\drivers\44235.sys><N/A>
[abp480n5 / abp480n5]
  <\SystemRoot\system32\DRIVERS\ABP480N5.SYS><Microsoft Corporation>
[ADProt / ADProt]
  <\SystemRoot\system32\drivers\ADProt.sys><腾讯科技（深圳）有限公司>
[adpu160m / adpu160m]
  <\SystemRoot\system32\DRIVERS\adpu160m.sys><Microsoft Corporation>
[Aha154x / Aha154x]
  <\SystemRoot\system32\DRIVERS\aha154x.sys><Microsoft Corporation>
[aic78u2 / aic78u2]
  <\SystemRoot\system32\DRIVERS\aic78u2.sys><Microsoft Corporation>
[aic78xx / aic78xx]
  <\SystemRoot\system32\DRIVERS\aic78xx.sys><Microsoft Corporation>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AliIde / AliIde]
  <\SystemRoot\system32\DRIVERS\aliide.sys><Acer Laboratories Inc.>
[AMD AGP Bus Filter Driver / amdagp]
  <\SystemRoot\system32\DRIVERS\amdagp.sys><Advanced Micro Devices, Inc.>
[asc / asc]
  <\SystemRoot\system32\DRIVERS\asc.sys><Advanced System Products, Inc.>
[asc3350p / asc3350p]
  <\SystemRoot\system32\DRIVERS\asc3350p.sys><Microsoft Corporation>
[asc3550 / asc3550]
  <\SystemRoot\system32\DRIVERS\asc3550.sys><Advanced System Products, Inc.>
[boot000 / boot000]
  <\SystemRoot\system32\drivers\boot000.sys><>
[Brother MFC Filter Driver / brfilt]
  <System32\Drivers\Brfilt.sys><Brother Industries Ltd.>
[Brother Multi Function Parallel Image driver / brparimg]
  <system32\DRIVERS\BrParImg.sys><Brother Industries Ltd.>
[Brother WDM Parallel Driver / BrParWdm]
  <System32\Drivers\BrParwdm.sys><Brother Industries Ltd.>
[Brother Serial driver / BrSerWDM]
  <System32\Drivers\BrSerWdm.sys><Brother Industries Ltd.>
[cd20xrnt / cd20xrnt]
  <\SystemRoot\system32\DRIVERS\cd20xrnt.sys><Microsoft Corporation>
[CdaC15BA / CdaC15BA]
  <\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS><Macrovision Europe Ltd>
[cdnprot / cdnprot]
  <system32\drivers\cdnprot.sys><CNNIC>
[cdntran / cdntran]
  <system32\drivers\cdntran.sys><CNNIC>
[CmdIde / CmdIde]
  <\SystemRoot\system32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[dac2w2k / dac2w2k]
  <\SystemRoot\system32\DRIVERS\dac2w2k.sys><Mylex Corporation>
[dpti2o / dpti2o]
  <\SystemRoot\system32\DRIVERS\dpti2o.sys><Microsoft Corporation>
[VIA Rhine-Family Fast Ethernet Adapter Driver Service / FETND5BV]
  <system32\DRIVERS\fetnd5bv.sys><VIA Technologies, Inc.>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS]
  <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[FixDrv / FixDrv]
  <C:\WINDOWS\SYSTEM32\DRIVERS\FixDrv.SYS><N/A>
[HpaFilt / HpaFilt]
  <C:\WINDOWS\SYSTEM32\DRIVERS\HpaFilt.SYS><Litsoft Co. LTD.>
[HpaLower / HpaLower]
  <C:\WINDOWS\SYSTEM32\DRIVERS\HpaLower.SYS><N/A>
[ini910u / ini910u]
  <\SystemRoot\system32\DRIVERS\ini910u.sys><Microsoft Corporation>
[jqvbvdq / jqvbvdqc]
  <\SystemRoot\System32\DRIVERS\jqvbvdqc.sys><Microsoft Corporation>
[kl1 / kl1]
  <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif]
  <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[LenovoF / LenovoF]
  <\SystemRoot\system32\drivers\LenovoF.SYS><N/A>
[LenovoR / LenovoR]
  <system32\drivers\LenovoR.SYS><N/A>
[mraid35x / mraid35x]
  <\SystemRoot\system32\DRIVERS\mraid35x.sys><American Megatrends Inc.>
[npkcrypt / npkcrypt]
  <\??\D:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkycryp / npkycryp]
  <\??\D:\Program Files\Tencent\QQ\npkycryp.sys><N/A>
[NTSIM / NTSIM]
  <\??\C:\WINDOWS\system32\ntsim.sys><VIA Networking Technologies, Inc.>
[nv / nv]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[pciidey / pciidey]
  <C:\WINDOWS\SYSTEM32\DRIVERS\pciidey.SYS><Windows (R) 2000 DDK provider>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[ql1080 / ql1080]
  <\SystemRoot\system32\DRIVERS\ql1080.sys><QLogic Corporation>
[Ql10wnt / Ql10wnt]
  <\SystemRoot\system32\DRIVERS\ql10wnt.sys><Microsoft Corporation>
[ql12160 / ql12160]
  <\SystemRoot\system32\DRIVERS\ql12160.sys><QLogic Corporation>
[ql1280 / ql1280]
  <\SystemRoot\system32\DRIVERS\ql1280.sys><QLogic Corporation>
[rhrnjza / rhrnjzas]
  <\SystemRoot\System32\DRIVERS\rhrnjzas.sys><Microsoft Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[Sparrow / Sparrow]
  <\SystemRoot\system32\DRIVERS\sparrow.sys><Adaptec, Inc.>
[symc810 / symc810]
  <\SystemRoot\system32\DRIVERS\symc810.sys><Symbios Logic Inc.>
[symc8xx / symc8xx]
  <\SystemRoot\system32\DRIVERS\symc8xx.sys><LSI Logic>
[sym_hi / sym_hi]
  <\SystemRoot\system32\DRIVERS\sym_hi.sys><LSI Logic>
[sym_u3 / sym_u3]
  <\SystemRoot\system32\DRIVERS\sym_u3.sys><LSI Logic>
[TosIde / TosIde]
  <\SystemRoot\system32\DRIVERS\toside.sys><Microsoft Corporation>
[ultra / ultra]
  <\SystemRoot\system32\DRIVERS\ultra.sys><Promise Technology, Inc.>
最后编辑2006-11-01 18:11:27
分享到：
gototop
 
xiaxxx1984
头像
初生襁褓狮
  • 帖子:23
  • 注册: 2005-08-03
  • 来自:
发表于： 2006-10-31 15:14 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

==================================
浏览器加载项
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll, Thunder Networking Technologies,LTD>
[]
  {049BE237-FC5F-4A1A-A667-92BAB5607D1E} <C:\WINDOWS\system32\addhelper.dll, N/A>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[Tencent Browser Helper]
  {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\Adplus\SSAddr1.dll, Tencent>
[CNNIC_IDN]
  {35980F6E-A137-4E50-953D-813BB8556899} <C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll, >
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
  {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\system32\ssup.dll, TENCENT>
[BHOImp Class]
  {70AFF2CB-9DA2-499C-8D15-900729FCE83D} <C:\WINDOWS\system32\YHBO.dll, N/A>
[超级兔子上网精灵]
  {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <C:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology>
[Web反病毒保护]
  {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll, Kaspersky Lab>
[CNNIC_IDN]
  {35980F6E-A137-4E50-953D-813BB8556899} <C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll, >
[启动Web迅雷]
  {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <d:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[SearchCar]
  {BD328E49-38AB-42CB-8EEA-73AA4CD2A6FD} <C:\Program Files\SearchCar\SearchCar.dll, N/A>
[超级兔子上网精灵]
  {43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology>
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll, Thunder Networking Technologies,LTD>
[]
  {049BE237-FC5F-4A1A-A667-92BAB5607D1E} <C:\WINDOWS\system32\addhelper.dll, N/A>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[Tencent Browser Helper]
  {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\Adplus\SSAddr1.dll, Tencent>
[PeerDraw Class]
  {10072CEC-8CC1-11D1-986E-00A0C955B42E} <C:\WINDOWS\system32\dllcache\vgx.dll, Microsoft Corporation>
[CAdLogic Object]
  {11F09AFD-75AD-4E51-AB43-E09E9351CE16} <C:\Program Files\Common Files\CPUSH\cpush1.dll, N/A>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[Recorder Control]
  {2423AB16-9F42-457B-A337-FE3B11964DB0} <C:\PROGRA~1\bluesky\BLUESK~1\recorder.ocx, Bluesky Studio (http://www.bluesky.cn)>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\Mshtml.dll, N/A>
[]
  {29A8B48F-9AB3-43D3-8B87-7D1888197563} <C:\WINDOWS\system32\ATIDEMGRED.dll, N/A>
[BlueskyVideo Control]
  {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} <C:\PROGRA~1\bluesky\BLUESK~1\v2.ocx, 蓝天工作室(http://www.bluesky.cn)>
[Share Control]
  {3072B1F1-0C4D-4E76-A7C6-FBAF129DBCC9} <C:\PROGRA~1\bluesky\BLUESK~1\share.ocx, http://www.bluesky.cn>
[CNNIC_IDN]
  {35980F6E-A137-4E50-953D-813BB8556899} <C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll, >
[ZComActiveX Class]
  {3A7698F3-1BCC-4838-B3BF-EF4E3C5E209A} <C:\Program Files\Zcom\ZComAgent.dll, N/A>
[超级兔子上网精灵]
  {43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology>
[]
  {500911F3-16C7-4120-BBEF-DF82FDCD2149} <C:\WINDOWS\system32\ATIDEMGRED.dll, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
  {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\system32\ssup.dll, TENCENT>
[YOKHttpFilter Class]
  {686D3343-D00D-49A1-96DF-66F3AF62F348} <C:\Program Files\yok\adblock.dll, YOK.Com>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[BHOImp Class]
  {70AFF2CB-9DA2-499C-8D15-900729FCE83D} <C:\WINDOWS\system32\YHBO.dll, N/A>
[YOKAdBlock Class]
  {718F4AD3-70D4-425E-9159-5598DFC732ED} <C:\Program Files\yok\adblock.dll, YOK.Com>
[XBTP03129 Class]
  {71E000D6-C63D-4D95-85A0-76DF890982A3} <C:\PROGRA~1\SEARCH~1\SEARCH~1.DLL, N/A>
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[超级兔子上网精灵]
  {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <C:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology>
[YOKAutoLive]
  {7D0E8987-BA21-483a-B1AC-149DA2F39A5A} <C:\PROGRA~1\yok\autolive.dll, YOK.Com>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Blueskyvoice Control]
  {991481A7-4669-4e15-8C24-100404E1F5CB} <C:\PROGRA~1\bluesky\BLUESK~1\BLUESK~1.OCX, 蓝天工作室(http://www.bluesky.cn)>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\Mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[SearchCar]
  {BD328E49-38AB-42CB-8EEA-73AA4CD2A6FD} <C:\Program Files\SearchCar\SearchCar.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[AUDIO__MID Moniker Class]
  {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[TencentVmpCtl Class]
  {D9819BD5-422B-4281-8523-726466ED692B} <C:\Program Files\Tencent\Viewpoint Media Player\AxMetaStream.dll, Viewpoint Corporation>
[上传到QQ网络硬盘]
  <D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用Web迅雷下载]
  <C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>
[使用Web迅雷下载全部链接]
  <C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm, N/A>
[添加到QQ自定义面板]
  <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
gototop
 
xiaxxx1984
头像
初生襁褓狮
  • 帖子:23
  • 注册: 2005-08-03
  • 来自:
发表于： 2006-10-31 15:20 | 只看楼主 短消息 资料
字号： 小 中 大 3楼


==================================
正在运行的进程
[PID: 668][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 732][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 764][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 6.0.0.299]
[PID: 808][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 820][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 976][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1076][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
[PID: 1176][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
[PID: 1268][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1380][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1640][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\brmfpmon.dll]  [Brother Industries,Ltd., 2.01]
    [C:\WINDOWS\system32\E_FLMAAP.DLL]  [SEIKO EPSON CORPORATION, 5, 7, 0, 0]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
[PID: 1680][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.8185]
    [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.8185]
    [C:\WINDOWS\system32\nvshell.dll]  [N/A, N/A]
    [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll]  [Thunder Networking Technologies,LTD, 6, 0, 0, 5]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\shellex.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
[PID: 1780][C:\WINDOWS\SYSTEM32\RUN32.EXE]  [Microsoft Corporation, 5.00.2134.1]
[PID: 264][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\BrMfWia1.dll]  [Brother Industries, Ltd., 2.1.1.6 built by: WinDDK]
    [C:\WINDOWS\system32\BrRsmSti.dll]  [Brother Industries, Ltd., 1, 1, 0, 3]
    [C:\WINDOWS\system32\BRMFBIDI.dll]  [Brother Industries, Ltd., 1.45.15.340]
    [C:\WINDOWS\system32\BRSCNRSM.dll]  [Brother Industries,Ltd., 1.0.0.14]
[PID: 708][C:\WINDOWS\system32\BRMFRSMG.EXE]  [Brother Industries, Ltd., 1.45.15.340]
    [C:\WINDOWS\system32\BREVIF.dll]  [Brother Industries, Ltd., 1.45.15.340]
    [C:\WINDOWS\system32\BrSerIf.DLL]  [Brother Industries, Ltd., 1.45.15.340]
    [C:\WINDOWS\system32\BrmfLPT.DLL]  [Brother Industries, Ltd., 1.45.15.352]
    [C:\WINDOWS\system32\BrBiDiIf.DLL]  [Brother Industries, Ltd., 1.45.15.340]
[PID: 468][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3228][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
[PID: 3268][C:\Program Files\CNNIC\Cdn\cdnup.exe]  [, 2, 1, 0, 3]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  [, 2, 0, 0, 3]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\cdntdns.dll]  [CNNIC, 2, 0, 0, 1]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
[PID: 3388][C:\Program Files\Thunder Network\WebThunder\WebThunder.exe]  [深圳市迅雷网络技术有限公司, 1, 3, 0, 65]
    [C:\Program Files\Thunder Network\WebThunder\taskmanage.dll]  [Thunder Networking Technologies,LTD, 1, 4, 1, 66]
    [C:\Program Files\Thunder Network\WebThunder\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 0, 0, 3]
    [C:\Program Files\Thunder Network\WebThunder\asyn_dns.dll]  [N/A, N/A]
    [C:\Program Files\Thunder Network\WebThunder\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 2, 1, 34]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
    [C:\Program Files\Thunder Network\WebThunder\historyinfo_manage.dll]  [Thunder Networking Technologies,LTD, 5, 3, 0, 228]
    [C:\Program Files\Thunder Network\WebThunder\UpdateDownload.dll]  [Thunder Networking Technologies,LTD, 1, 0, 1, 8]
    [C:\Program Files\Thunder Network\WebThunder\UpdateExec.dll]  [Thunder Networking Technologies,LTD, 1, 0, 1, 5]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\Program Files\Thunder Network\WebThunder\iEmbedShell.dll]  [　, 1, 0, 0, 12]
    [C:\Program Files\Thunder Network\WebThunder\iEmbed05.dll]  [　, 2, 3, 1, 41]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.299]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.304]
    [c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.299]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
[PID: 1036][C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAP.EXE]  [SEIKO EPSON CORPORATION, 4.00]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
[PID: 3456][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
gototop
 
xiaxxx1984
头像
初生襁褓狮
  • 帖子:23
  • 注册: 2005-08-03
  • 来自:
发表于： 2006-10-31 15:21 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

[PID: 4092][D:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [d:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [D:\Program Files\Tencent\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\Program Files\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Program Files\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\GroupLive.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\Program Files\Tencent\QQ\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\Program Files\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\Program Files\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQAllInOne.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [D:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\HXWB_S.IME]  [作者:星五, 4.00.950]
    [D:\Program Files\Tencent\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Program Files\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [D:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 0, 6, 60]
    [D:\Program Files\Tencent\QQ\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Program Files\Tencent\QQ\QQMMSender.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\Tencent\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
[PID: 2360][d:\Program Files\Tencent\QQ\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [d:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
[PID: 3896][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
[PID: 204][C:\WINDOWS\system32\alexa.exe]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [C:\DOCUME~1\lenovo\LOCALS~1\Temp\nsk186.tmp\InstallOptions.dll]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
[PID: 1576][D:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [d:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [D:\Program Files\Tencent\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\Program Files\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\Program Files\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
    [D:\Program Files\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Program Files\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\GroupLive.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\Program Files\Tencent\QQ\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\Program Files\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\Program Files\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [D:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 0, 6, 60]
    [D:\Program Files\Tencent\QQ\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Program Files\Tencent\QQ\QQAllInOne.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [D:\Program Files\Tencent\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\HXWB_S.IME]  [作者:星五, 4.00.950]
    [D:\Program Files\Tencent\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Program Files\Tencent\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [D:\Program Files\Tencent\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [D:\Program Files\Tencent\QQ\videodevice.dll]  [Tencent, 1, 6, 0, 0]
    [D:\Program Files\Tencent\QQ\inplus.dll]  [Tencent, 1, 6, 0, 0]
    [C:\Program Files\KooWo\Lyric\RMSplt.ax]  [Gabest, 1, 0, 1, 1]
    [C:\Program Files\Common Files\Ahead\DSFilter\NeSplitter.ax]  [Nero AG, 3,2,0,22]
    [C:\WINDOWS\system32\l3codecx.ax]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 5, 0, 50]
    [D:\Program Files\Tencent\QQ\QQMMSender.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
gototop
 
xiaxxx1984
头像
初生襁褓狮
  • 帖子:23
  • 注册: 2005-08-03
  • 来自:
发表于： 2006-10-31 15:21 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

[PID: 3488][C:\Program Files\Corel\Graphics9\Programs\coreldrw.exe]  [Corel Corporation, 9.397]
    [C:\Program Files\Corel\Graphics9\Programs\CrlWeb91.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Corel\Graphics9\Programs\CRLCTL91.dll]  [Corel Corporation, 9.397]
    [C:\Program Files\Corel\Graphics9\Programs\CRLUI91.dll]  [Corel Corporation, 9.397]
    [C:\Program Files\Corel\Graphics9\Programs\CRLIUI91.dll]  [Corel Corporation, 9.397]
    [C:\Program Files\Corel\Graphics9\Programs\FN3API.dll]  [Bitstream, Inc., 3, 0, 0, 2]
    [C:\WINDOWS\system32\SHW32.dll]  [N/A, N/A]
    [C:\Program Files\Corel\Graphics9\Programs\ixlacam.dll]  [IXLA Limited, 1, 5, 0, 0]
    [C:\Program Files\Corel\Graphics9\Programs\iuiintl.dll]  [Corel Corporation, 9.397]
    [C:\WINDOWS\system32\ATMLIB.dll]  [Adobe Systems, 5.1 Build 226]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [C:\Program Files\Corel\Graphics9\Programs\drawintl.dll]  [Corel Corporation, 9.397]
    [C:\Program Files\Corel\Graphics9\Programs\Sprof32.dll]  [Eastman Kodak Company, 1.6.1]
    [C:\Program Files\Corel\Graphics9\Programs\KPSYS32.dll]  [Eastman Kodak Company, 3.2.2]
    [C:\Program Files\Corel\Graphics9\Programs\KPCP32.dll]  [Eastman Kodak Company, 3.1.0]
    [C:\Program Files\Corel\Graphics9\Programs\CDRCPR91.DLL]  [Corel Corporation, 9.337]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Corel\Graphics9\Filters\IECDR91.FLT]  [Corel Corporation, 9.397]
[PID: 2524][D:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [d:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [D:\Program Files\Tencent\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\Program Files\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\Program Files\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]
    [D:\Program Files\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Program Files\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQAllInOne.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\GroupLive.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQMMSender.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\Program Files\Tencent\QQ\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\Program Files\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\Program Files\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Program Files\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [D:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 0, 6, 60]
[PID: 864][D:\陈丽\新建文件夹\新建文件夹\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  [, 2, 0, 0, 0]
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  [cnnic, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\cf12.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\meet2.dll]  [N/A, N/A]
    [C:\WINDOWS\ServerKey.DLL]  [N/A, N/A]
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  [, 2, 0, 0, 3]
    [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\WINDOWS\system32\cdnns.dll]  [CNNIC, 2, 0, 0, 0]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
gototop
 
xiaxxx1984
头像
初生襁褓狮
  • 帖子:23
  • 注册: 2005-08-03
  • 来自:
发表于： 2006-10-31 15:21 | 只看楼主 短消息 资料
字号： 小 中 大 6楼

小弟在此先谢过。
gototop
 
xiaxxx1984
头像
初生襁褓狮
  • 帖子:23
  • 注册: 2005-08-03
  • 来自:
发表于： 2006-10-31 16:12 | 只看楼主 短消息 资料
字号： 小 中 大 7楼

不要沉了。自己顶一下。
gototop
 
newcenturymoon
头像
社区嘉宾
  • 帖子:15158
  • 注册: 2005-08-03
  • 来自:
论坛8周年活动礼物幸运草
发表于： 2006-10-31 16:16 | 短消息 资料
字号： 小 中 大 8楼

[C:\WINDOWS\system32\meet2.dll] [N/A, N/A]
[C:\WINDOWS\ServerKey.DLL] [N/A, N/A]
[igeon / igeon]
<C:\WINDOWS\Syntena.exe><N/A>
[MSN Explorer PigeonServer / MSN Explorer PigeonServer]
<C:\WINDOWS\Server.exe><N/A>
<wdfmgr32><; C:\WINDOWS\system32\wdfmgr32.exe> [N/A]
<Tray><; C:\WINDOWS\command\rundll32.exe> [N/A]
<Update><; C:\Program Files\Common Files\updat\Update.exe> [N/A]
<ms><; C:\Program Files\Microsoft\svhost32.exe> [N/A]
<msnnt><; C:\WINDOWS\winampg.exe> []
<SaveMail><; C:\WINDOWS\system32\MSSOFT\winampe.exe> [N/A]
<updatereal><; C:\WINDOWS\realupdate.exe other> [N/A]
<winamp><; C:\WINDOWS\winampz.exe> []
<load><; C:\windows\system32\wincfgs.exe> [N/A]
有两只鸽子
还有若干木马
gototop
 
xiaxxx1984
头像
初生襁褓狮
  • 帖子:23
  • 注册: 2005-08-03
  • 来自:
发表于： 2006-10-31 16:29 | 只看楼主 短消息 资料
字号： 小 中 大 9楼

请问怎么删除。
gototop
 
影子110
头像
叱咤花甲狮
  • 帖子:4210
  • 注册: 2005-04-10
  • 来自:怀黯
发表于： 2006-10-31 16:52 | 短消息 资料
字号： 小 中 大 10楼

打开 我的电脑》工具》文件夹选项》查看》显示所有文件，不隐藏受保护的操作系统文件》确定
进入安全模式(以下的操作全部是在安全模式下操作!)~清理下面的启动项~~并删除其相关文件~~

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
msnnt><; C:\WINDOWS\winampg.exe> []
<SaveMail><; C:\WINDOWS\system32\MSSOFT\winampe.exe> [N/A]
<updatereal><; C:\WINDOWS\realupdate.exe other> [N/A]
<winamp><; C:\WINDOWS\winampz.exe> []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<R><C:\WINDOWS\system32\rundll32.exe meet2.dll s> [N/A]

<Tray><; C:\WINDOWS\command\rundll32.exe> [N/A]
<Update><; C:\Program Files\Common Files\updat\Update.exe> [N/A]
<ms><; C:\Program Files\Microsoft\svhost32.exe> [N/A]
<NMGameX_AutoRun><; C:\WINDOWS\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa> [N/A]

在SREng中>启动项目>服务>驱动>隐藏微软>查找31778.sys和44235.sys这两个驱动~(点修改启动类型>,将它的启动类型改为disabled或manual start>修改.(稍后重启系统后,删除这两个驱动服务及其驱动文件!)
[31778 / 31778]
<\SystemRoot\system32\drivers\31778.sys><N/A>
[44235 / 44235]
<\SystemRoot\system32\drivers\44235.sys><N/A>

在SREng中>启动项目>服务>win32服务应用程序>隐藏微软>找到下面这两个服务(服务名就是方括号里的,或找它的文件!)>点修改启动类型>,将它的启动类型改为disabled或manual start>修改.(操作同上面的那两个驱动服务~~!)
[MSN Explorer PigeonServer / MSN Explorer PigeonServer]
<C:\WINDOWS\Server.exe><N/A>
[igeon / igeon]
<C:\WINDOWS\Syntena.exe><N/A>
[1731E256 / 1731E256]
<C:\WINDOWS\system32\1731E256.EXE -service><Microsoft Corporation>

重启系统,进安全模式,查找并删除上面提到的服务,启动项及相关文件!

还有,下面这两个可疑的服务!(建议禁用,就是修改它们的启动类型,但暂时不删除服务与文件!!)
[Storage Center / Live]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\hcxnvi98.dll><Microsoft Corporation>
[Windows Install Helper / 8NASCAR]
<C:\WINDOWS\SYSTEM32\RUN32.EXE C:\WINDOWS\SYSTEM32\WBEM\CGDNVO54.DLL,Export 1087><Microsoft Corporation>
gototop
 
<<上一主题|下一主题>>
12   1  /  2  页   跳转页
页面顶部
Powered by Discuz!NT