高手帮手看看，附上日志！boot.exe - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛高手帮手看看，附上日志！boot.exe

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

高手帮手看看，附上日志！boot.exe

清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:	发表于： 2006-12-19 02:15 \| 只看楼主短消息资料字号：小中大 1楼高手帮手看看，附上日志！boot.exe 今天瑞星监控中心老是发现在C盘根目录下生成“boot.exe”和“pageflies2.exe”，删除过后不久又会生成！！！ HijackThis_zww汉化版扫描日志 V1.99.1 保存于 01:58:54 上午, 日期 2006-12-19 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\windows\System32\smss.exe C:\windows\system32\csrss.exe C:\windows\system32\winlogon.exe C:\windows\system32\services.exe C:\windows\system32\lsass.exe C:\windows\system32\svchost.exe C:\windows\system32\svchost.exe D:\软件\瑞星2006\Rising\Rising\Rav\CCenter.exe C:\windows\System32\svchost.exe C:\windows\system32\svchost.exe C:\windows\system32\svchost.exe D:\软件\瑞星2006\Rising\Rising\Rav\Ravmond.exe C:\Program Files\Rising\Rfw\rfwsrv.exe C:\windows\system32\spoolsv.exe C:\windows\Explorer.EXE D:\软件\瑞星2006\Rising\Rising\Rav\RavStub.exe C:\Program Files\Rising\Rfw\RfwMain.exe C:\windows\system32\nvsvc32.exe C:\WINDOWS\VM_STI.EXE C:\Program Files\Common Files\Real\Update_OB\realsched.exe D:\软件\瑞星2006\Rising\Rising\Rav\RavTask.exe D:\软件\瑞星2006\Rising\Rising\Rav\Ravmon.exe H:\ZTE Supplicant(winnt)\上网的\ZTESupplicant.exe C:\WINDOWS\system32\ctfmon.exe C:\windows\System32\alg.exe C:\windows\system32\svchost.exe D:\软件\BitComet\BitComet\BitComet.exe C:\windows\system32\conime.exe D:\Program Files\RealPlayer\RealPlay.exe D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\QQ.exe D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\TIMPlatform.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\iexplore.exe H:\灰鸽子\HijackThis\HijackThis1991zww.exe R3 - 默认的URLSearchHook丢失。用HijackThis修复 O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - D:\软件\超级魔~1\MAGICSET\haokanbar.dll O3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll (file missing) O3 - IE工具栏增项: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - D:\软件\超级魔~1\MAGICSET\haokanbar.dll O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE USB PC Camera 301P O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install O4 - 启动项HKLM\\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [RavTask] "D:\软件\瑞星2006\Rising\Rising\Rav\RavTask.exe" -system O4 - 启动项HKLM\\Run: [ZTESupplicant] H:\ZTE Supplicant(winnt)\上网的\ZTESupplicant.exe O4 - 启动项HKLM\\RunOnce: [RavStub] "D:\软件\瑞星2006\Rising\Rising\Rav\ravstub.exe" /RUNONCE O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe O4 - Startup: 腾讯QQ珊瑚虫版.lnk = ? O8 - IE右键菜单中的新增项目: &使用迅雷下载 - D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\Program\GetUrl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\Program\GetAllUrl.htm O8 - IE右键菜单中的新增项目: Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - D:\Program Files\KuGoo\KuGoo3DownX.htm O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\SendMMS.htm O9 - 浏览器额外的按钮: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\Thunder.exe O9 - 浏览器额外的“工具”菜单项: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\Thunder.exe O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing) O9 - 浏览器额外的“工具”菜单项: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing) O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao (file missing) O9 - 浏览器额外的“工具”菜单项: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao (file missing) O9 - 浏览器额外的按钮: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing) O9 - 浏览器额外的“工具”菜单项: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing) O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\qq2005beta3\QQ.EXE O9 - 浏览器额外的“工具”菜单项: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\qq2005beta3\QQ.EXE O9 - 浏览器额外的按钮: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\QQIEHelper.dll (file missing) O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\QQIEHelper.dll (file missing) O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing) O9 - 浏览器额外的“工具”菜单项: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing) O9 - 浏览器额外的按钮: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing) O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing) O9 - 浏览器额外的按钮: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing) O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing) O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab O16 - DPF: {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} (Qzone Media Tools) - http://imgcache.qq.com/music/QQMusicSetup.exe O16 - DPF: {ACFE8232-03C5-4AEC-AF5E-42B806724096} (KSHScan Control) - http://safe.qq.com/scan/KAllScan.CAB O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl Object) - https://www.tenpay.com/download/qqedit.cab O16 - DPF: {F138084D-84D7-48CD-BEA8-04772457516E} (VqqSpeedDlProxy Class) - http://59.36.97.38/jsxz/vqqsdl1009.cab O18 - 列举现有的协议: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - D:\PROGRA~1\KuGoo\InExtend\KUGOO3~1.OCX O20 - Winlogon Notify: System Safety Monitor - C:\windows\SYSTEM32\SSMWinlogonEx.dll O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rfw\rfwsrv.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\软件\瑞星2006\Rising\Rising\Rav\CCenter.exe O23 - NT 服务: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\软件\瑞星2006\Rising\Rising\Rav\Ravmond.exe O23 - NT 服务: Window Services Pack Installer (Spullerpdsvc) - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\MSInfo\svchost.exe (file missing) 2006-12-20 12:08:25
清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:	分享到：

鸟儿天上飞叱咤花甲狮帖子:2332 注册: 2006-11-30 来自:	发表于： 2006-12-19 02:26 \| 短消息资料字号：小中大 2楼请下载SREng2（最新版），使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。下载地址 http://www.kztechs.com/sreng/sreng2.zip
鸟儿天上飞叱咤花甲狮帖子:2332 注册: 2006-11-30 来自:

清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:	发表于： 2006-12-19 02:50 \| 只看楼主短消息资料字号：小中大 3楼 2006-12-19,02:32:25 System Repair Engineer 2.2.6.605 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\windows\system32\ctfmon.exe> [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] <run><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <BigDogPath><C:\WINDOWS\VM_STI.EXE USB PC Camera 301P> [N/A] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation] <nwiz><nwiz.exe /install> [NVIDIA Corporation] <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [(Verified)NVIDIA Corporation] <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <RavTask><"D:\软件\瑞星2006\Rising\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <ZTESupplicant><H:\ZTE Supplicant(winnt)\上网的\ZTESupplicant.exe> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <RavStub><"D:\软件\瑞星2006\Rising\Rising\Rav\ravstub.exe" /RUNONCE> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <CheckFaultKernel><C:\windows\system32\mswdm.exe> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] <{08315C1A-9BA9-4B7C-A432-26885F78DF28}><> [N/A] <{6E44887F-5214-41F2-AB46-4728735C4CC6}><C:\Program Files\Internet Explorer\PLUGINS\system18.sys> [N/A] <{99F1D023-7CEB-4586-80F7-BB1A98DB7602}><C:\Program Files\Internet Explorer\IEXPLORE.Sys> [N/A] <{FEB94F5A-69F3-4645-8C2B-9E71D270AF2E}><C:\Program Files\Internet Explorer\IEXPLORE.Dat> [N/A] <{923509F1-45CB-4EC0-BDE0-1DED35B8FD60}><C:\Program Files\Internet Explorer\IEXPLORE.win> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\System Safety Monitor] <WinlogonNotify: System Safety Monitor><SSMWinlogonEx.dll> [System Safety Limited] ================================== 启动文件夹 [腾讯QQ珊瑚虫版] <C:\Documents and Settings\Wei\「开始」菜单\程序\启动\腾讯QQ珊瑚虫版.lnk --> D:\软件\腾讯QQ~1.5A\IPQQ20~1.5A\QQ包包\QQ\CoralQQ.exe [珊瑚虫工作室]><N> ================================== 服务 [Human Interface Device Access / HidServ] <C:\windows\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Macromedia Licensing Service / Macromedia Licensing Service] <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A> [NVIDIA Display Driver Service / NVSvc] <C:\windows\system32\nvsvc32.exe><NVIDIA Corporation> [Rising Personal Firewall Service / RfwService] <C:\Program Files\Rising\Rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"D:\软件\瑞星2006\Rising\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon] <"D:\软件\瑞星2006\Rising\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Window Services Pack Installer / Spullerpdsvc] <C:\Program Files\Common Files\Microsoft Shared\MSInfo\svchost.exe><N/A> ================================== 驱动程序 [ATE_PROCMON / ATE_PROCMON] <\??\H:\rtesetup\rtesetup\Anti Trojan Elite\ATEPMon.sys><N/A> [Rising TDI Base Driver / BaseTDI] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [EagleNT / EagleNT] <\??\C:\WINDOWS\system32\drivers\EagleNT.sys><N/A> [ExpScaner / ExpScaner] <\??\D:\软件\瑞星2006\Rising\Rising\Rav\ExpScan.sys><> [HOOKAPI / HOOKAPI] <\??\C:\PROGRAM FILES\RISING\RAV\HookApi.Sys><N/A> [HookCont / HookCont] <\??\D:\软件\瑞星2006\Rising\Rising\Rav\HOOKCONT.sys><Rising> [HookReg / HookReg] <\??\D:\软件\瑞星2006\Rising\Rising\Rav\HookReg.sys><> [HookSys / HookSys] <\??\D:\软件\瑞星2006\Rising\Rising\Rav\HookSys.sys><Rising> [HookUrl / HookUrl] <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [kmsinput / kmsinput] <\??\C:\WINDOWS\system32\drivers\kmsinput.sys><N/A> [MEMSCAN / MEMSCAN] <\??\D:\软件\瑞星2006\Rising\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [mProcRs / mProcRs] <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [Netgroup Packet Filter / NPF] <system32\drivers\npf.sys><Politecnico di Torino> [npkcrypt / npkcrypt] <\??\D:\软件\QQ2005\qq2005beta3珊瑚虫\IPQQ2005_PConline\qq\npkcrypt.sys><INCA Internet Co., Ltd.> [nv / nv] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [oreans32 / oreans32] <\??\C:\WINDOWS\system32\drivers\oreans32.sys><N/A> [Direct Parallel Link Driver / Ptilink] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsFwDrv / RsFwDrv] <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [RsNTGDI / RsNTGDI] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS] <\??\D:\软件\瑞星2006\Rising\Rising\Rav\RSPPSYS.sys><Rising> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139] <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [System Safety Monitor 2.0 Core Engine / safemon] <\SystemRoot\system32\drivers\safemon.sys><System Safety Limited> [Secdrv / Secdrv] <system32\DRIVERS\secdrv.sys><N/A> [SVKP / SVKP] <\??\C:\WINDOWS\system32\SVKP.sys><AntiCracking> [Vinyl AC'97 Audio Controller (WDM) / VIAudio] <system32\drivers\viaudios.sys><VIA Technologies, Inc.> [World Standard Teletext Codec / WSTCODEC] <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation> [USB PC Camera 301P / ZSMC301b] <System32\Drivers\usbVM31b.sys><VM>
清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:

清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:	发表于： 2006-12-19 02:51 \| 只看楼主短消息资料字号：小中大 4楼浏览器加载项 [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\软件\超级魔~1\MAGICSET\haokanbar.dll, Xiang Feng Technology> [启动迅雷] {0062C9BD-B349-40DE-91A0-755F37ACD559} <D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\Thunder.exe, Thunder Networking Technologies,LTD> [Yahoo 1G电邮] {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A> [寻宝乐趣多] {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao, N/A> [雅虎助手] {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\qq2005beta3\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\QQIEHelper.dll, N/A> [情景聊天] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A> [修复浏览器] {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A> [清理上网记录] {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A> [雅虎助手] {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll, N/A> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\软件\超级魔~1\MAGICSET\haokanbar.dll, Xiang Feng Technology> [AxInputControl Class] {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, > [Qzone Media Tools] {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} <D:\软件\腾讯QQ~1.5A\IPQQ20~1.5A\QQ包包\QQ\VQQPLA~1.OCX, Tencent Technology (Shenzhen) Company Limited> [KSHScan Control] {ACFE8232-03C5-4AEC-AF5E-42B806724096} <C:\WINDOWS\system32\Kingsoft\ONLINE~1\KSHScan.OCX, kingsoft> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [Rising Web Scan Object] {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, N/A> [CPasswordEditCtrl Object] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司> [VqqSpeedDlProxy Class] {F138084D-84D7-48CD-BEA8-04772457516E} <C:\WINDOWS\vqqsdl.dll, Tencent> [ActiveMovieControl Object] {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [CEnroll Class] {127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, Microsoft Corporation> [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corp.> [KLeakScan Control] {1FFFA3E9-A615-41FA-972D-7DB61F23AE90} <C:\WINDOWS\system32\Kingsoft\ONLINE~1\KLkScan.OCX, kingsoft> [PowerList Control] {20C2C286-BDE8-441B-B73D-AFA22D914DA5} <C:\DOCUME~1\Wei\APPLIC~1\ppStream\100~1.139\POWERL~1.OCX, PPStream.com> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [Menu Class] {27D784D7-9217-4227-B43B-E06E4781E0CB} <C:\WINDOWS\system32\AlxTB1.dll, N/A> [IExpress] {27E96DE0-8211-42CF-9A1E-FA6246A95B77} <C:\WINDOWS\system32\iexpress.dll, N/A> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\WINDOWS\system32\dllcache\dhtmled.ocx, Microsoft Corporation> [Tabular Data Control] {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation> [Yahoo!Photo] {33BBE430-0E42-4F12-B075-8D21ACB10DCB} <, N/A> [NaviHelperObj Class] {3E422F49-1566-40D3-B43D-077EF739AC32} <C:\WINDOWS\system32\NaviHelper.dll, N/A> [雅虎助手] {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll, N/A> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\软件\超级魔~1\MAGICSET\haokanbar.dll, Xiang Feng Technology> [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\QQIEHelper.dll, N/A> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [Yahoo!Live] {57421194-58FB-49AE-9B4F-FD48869B9AD4} <C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll, N/A> [PowerPlayer Control] {5EC7C511-CD0F-42E6-830C-1BD9882F3458} <C:\DOCUME~1\Wei\APPLIC~1\ppStream\100~1.139\POWERP~1.DLL, PPStream Inc.> [DragSearch BHO] {62EED7C6-9F02-42F9-B634-98E2899E147B} <, N/A> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [BrowserProxy4 Class] {69A72A8A-84ED-4A75-8CE7-263DBEF3E5D3} <C:\WINDOWS\system32\AlxTB1.dll, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\软件\超级魔~1\MAGICSET\haokanbar.dll, Xiang Feng Technology> [AxInputControl Class] {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, > [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\MediaAddin03.dll, N/A> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\ComDlls\XunLeiBHO_002.dll, N/A> [AxSubmitControl Class] {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, > [LiveMediaOcx Control] {9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} <C:\PROGRA~1\Tencent\QQLive\qqlive.ocx, Tencent> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo\KUGOO3~1.OCX, N/A> [Qzone Media Tools] {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} <D:\软件\腾讯QQ~1.5A\IPQQ20~1.5A\QQ包包\QQ\VQQPLA~1.OCX, Tencent Technology (Shenzhen) Company Limited> [KSHScan Control] {ACFE8232-03C5-4AEC-AF5E-42B806724096} <C:\WINDOWS\system32\Kingsoft\ONLINE~1\KSHScan.OCX, kingsoft> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [Messenger Object] {B69003B3-C55E-4B48-836C-BC5946FC3B28} <C:\Program Files\Messenger\msgsc.dll, Microsoft Corporation> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [Kingsoft DUBA OnlineScan] {C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} <C:\WINDOWS\system32\Kingsoft\ONLINE~1\KAVClean.OCX, kingsoft> [AUDIO__MID Moniker Class] {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [Microsoft Agent Control 2.0] {D45FD31B-5C6E-11D1-9EC1-00C04FD7081F} <C:\WINDOWS\msagent\agentctl.dll, Microsoft Corporation> [Rising Web Scan Object] {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, N/A> [FlashFXP Helper for Internet Explorer] {E5A1691B-D188-4419-AD02-90002030B8EE} <, N/A> [CPasswordEditCtrl Object] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司> [VqqSpeedDlProxy Class] {F138084D-84D7-48CD-BEA8-04772457516E} <C:\WINDOWS\vqqsdl.dll, Tencent> [AlxTB BHO Class] {F1FABE79-25FC-46DE-8C5A-2C6DB9D64333} <C:\WINDOWS\system32\AlxTB1.dll, N/A> [assist] {FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll, N/A> [&使用迅雷下载] <D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <D:\软件\迅雷(Thunder) v5.1.5.189 正式版\Thunder5.1.5正式版\Program\GetAllUrl.htm, N/A> [Mail to a Friend...] <http://client.alexa.com/holiday/script/actions/mailto.htm, N/A> [上传到QQ网络硬盘] <D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\AddToNetDisk.htm, N/A> [使用KuGoo3下载(&K)] <D:\Program Files\KuGoo\KuGoo3DownX.htm, N/A> [添加到QQ自定义面板] <D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\AddEmotion.htm, N/A> [珊瑚虫搜索] <, N/A> [用QQ彩信发送该图片] <D:\软件\腾讯QQ 2006 珊瑚虫集成版 v4.5a\IPQQ2006_4.5a\QQ包包\QQ\SendMMS.htm, N/A>
清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:

清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:	发表于： 2006-12-19 02:53 \| 只看楼主短消息资料字号：小中大 5楼正在运行的进程 [PID: 440][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 504][\??\C:\windows\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 528][\??\C:\windows\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\windows\system32\SSMWinlogonEx.dll] [System Safety Limited, 2.0.7.570] [PID: 572][C:\windows\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 584][C:\windows\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 744][C:\windows\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 788][C:\windows\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 900][D:\软件\瑞星2006\Rising\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 920][C:\windows\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1000][C:\windows\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1088][C:\windows\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1100][D:\软件\瑞星2006\Rising\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 39] [D:\软件\瑞星2006\Rising\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6] [D:\软件\瑞星2006\Rising\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [D:\软件\瑞星2006\Rising\Rising\Rav\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [D:\软件\瑞星2006\Rising\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [D:\软件\瑞星2006\Rising\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [D:\软件\瑞星2006\Rising\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [D:\软件\瑞星2006\Rising\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [D:\软件\瑞星2006\Rising\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [D:\软件\瑞星2006\Rising\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [D:\软件\瑞星2006\Rising\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [D:\软件\瑞星2006\Rising\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [D:\软件\瑞星2006\Rising\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [D:\软件\瑞星2006\Rising\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [D:\软件\瑞星2006\Rising\Rising\Rav\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [D:\软件\瑞星2006\Rising\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [D:\软件\瑞星2006\Rising\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [D:\软件\瑞星2006\Rising\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [D:\软件\瑞星2006\Rising\Rising\Rav\HookCont.dll] [Rising, 19, 0, 0, 0] [D:\软件\瑞星2006\Rising\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6] [D:\软件\瑞星2006\Rising\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20] [D:\软件\瑞星2006\Rising\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [D:\软件\瑞星2006\Rising\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [D:\软件\瑞星2006\Rising\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [D:\软件\瑞星2006\Rising\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 27] [D:\软件\瑞星2006\Rising\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 22] [D:\软件\瑞星2006\Rising\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [D:\软件\瑞星2006\Rising\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [D:\软件\瑞星2006\Rising\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [D:\软件\瑞星2006\Rising\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [D:\软件\瑞星2006\Rising\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [D:\软件\瑞星2006\Rising\Rising\Rav\RsVM.dll] [N/A, 19, 0, 0, 11] [D:\软件\瑞星2006\Rising\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18] [D:\软件\瑞星2006\Rising\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [D:\软件\瑞星2006\Rising\Rising\Rav\ScanNet.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [D:\软件\瑞星2006\Rising\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [D:\软件\瑞星2006\Rising\Rising\Rav\RsStore.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [PID: 1188][C:\Program Files\Rising\Rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 30] [C:\Program Files\Rising\Rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 3] [C:\Program Files\Rising\Rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 2] [C:\Program Files\Rising\Rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 9] [C:\Program Files\Rising\Rfw\MonDrv.dll] [rs, 1, 0, 0, 4] [C:\Program Files\Rising\Rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 5] [C:\Program Files\Rising\Rfw\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [PID: 1384][C:\windows\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1496][C:\windows\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.win] [N/A, N/A] [D:\软件\瑞星2006\Rising\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.5664] [C:\WINDOWS\system32\nvshell.dll] [NVIDIA Corporation, 6.14.10.5664] [C:\windows\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.5664] [C:\windows\system32\msdmo.dll] [N/A, N/A] [C:\windows\system32\icm32.dll] [Microsoft Corporation, 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518)] [PID: 1604][D:\软件\瑞星2006\Rising\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [D:\软件\瑞星2006\Rising\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [D:\软件\瑞星2006\Rising\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 1776][C:\Program Files\Rising\Rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 56] [C:\Program Files\Rising\Rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28] [C:\Program Files\Rising\Rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [C:\Program Files\Rising\Rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 1824][C:\windows\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.5664] [PID: 1968][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4] [C:\windows\system32\msdmo.dll] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 1992][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3018] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 328][D:\软件\瑞星2006\Rising\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [D:\软件\瑞星2006\Rising\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [D:\软件\瑞星2006\Rising\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [D:\软件\瑞星2006\Rising\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [D:\软件\瑞星2006\Rising\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 348][D:\软件\瑞星2006\Rising\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36] [D:\软件\瑞星2006\Rising\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28] [D:\软件\瑞星2006\Rising\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6] [D:\软件\瑞星2006\Rising\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [D:\软件\瑞星2006\Rising\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [D:\软件\瑞星2006\Rising\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [D:\软件\瑞星2006\Rising\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [D:\软件\瑞星2006\Rising\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [D:\软件\瑞星2006\Rising\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A]
清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:

清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:	发表于： 2006-12-19 02:53 \| 只看楼主短消息资料字号：小中大 6楼 [PID: 360][H:\ZTE Supplicant(winnt)\上网的\ZTESupplicant.exe] [N/A, N/A] [H:\ZTE Supplicant(winnt)\上网的\packet.dll] [CACE Technologies, 3, 1, 0, 27] [H:\ZTE Supplicant(winnt)\上网的\Hlp8021x.dll] [N/A, 1, 0, 1, ] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 384][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 1880][C:\windows\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3988][C:\windows\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2100][C:\windows\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 3048][D:\Program Files\RealPlayer\RealPlay.exe] [RealNetworks, Inc., 6.0.12.857] [C:\windows\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0] [C:\Program Files\Common Files\Real\Common\objb3201.dll] [RealNetworks, Inc., 0.1.0.5835] [D:\Program Files\RealPlayer\rpplugins\rpap3260.dll] [RealNetworks, Inc., 6.0.9.2519] [C:\Program Files\Common Files\Real\Common\pnrs3260.dll] [RealNetworks, Inc., 6.0.9.3584] [D:\Program Files\RealPlayer\lang\cdplay_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\dbcomp_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\embed_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\gemctl_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\pngui_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\pdgenxfer_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjctl_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjeq_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjres_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjskin_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjviz_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjfade_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjdlg_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjmisc_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rjprog_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpapp_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpclsvc_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpclutil_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpdemand_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpdsplyr_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpgutil_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpmnpane_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpplylst_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\rpwebctl_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\tcdinfo_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\tclsvc_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\tdwnmgr_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\tmp3_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\twave_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\teasdk_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\tmdedit_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\lang\mydevices_cn.dll] [RealNetworks, Inc., 6.0.12.261] [D:\Program Files\RealPlayer\rpplugins\rpcl3260.dll] [RealNetworks, Inc., 6.0.9.2622] [C:\Program Files\Common Files\Real\RCAPlugins\uisy3201.dll] [RealNetworks, Inc., 0.1.0.3347] [C:\Program Files\Common Files\Real\Plugins\zipf3260.dll] [RealNetworks, Inc., 6.0.8.2095] [C:\Program Files\Common Files\Real\RCAPlugins\rpcontrols1.dll] [RealNetworks, Inc., 6.0.1.1779] [C:\Program Files\Common Files\Real\Plugins\pxcb3210.dll] [RealNetworks, Inc., 1.0.0.3539] [D:\Program Files\RealPlayer\rpplugins\rpmn3260.dll] [RealNetworks, Inc., 6.0.9.2451] [D:\Program Files\RealPlayer\rpplugins\rpms3260.dll] [RealNetworks, Inc., 6.0.1.1788] [D:\Program Files\RealPlayer\rpplugins\MPACore.dll] [RealNetworks, Inc., 1.0.3.1814] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [D:\Program Files\RealPlayer\rpplugins\myde3260.dll] [RealNetworks, Inc., 6.0.10.1799] [D:\Program Files\RealPlayer\plugins\rjrmjpln.dll] [RealNetworks, Inc., 1.0.3.1796] [C:\Program Files\Common Files\Real\Common\pnen3260.dll] [RealNetworks, Inc., 10.0.0.441] [C:\Program Files\Common Files\Real\Plugins\vsrlocal.dll] [RealNetworks, Inc., 10.1.0.368] [C:\Program Files\Common Files\Real\Plugins\vidsite.dll] [RealNetworks, Inc., 10.0.0.440] [C:\Program Files\Common Files\Real\Plugins\clntxres.dll] [RealNetworks, Inc., 10.0.0.1990] [D:\Program Files\RealPlayer\rpplugins\rjbe3260.dll] [RealNetworks, Inc., 6.0.4.1791] [C:\Program Files\Common Files\Real\Plugins\smplfsys.dll] [RealNetworks, Inc., 10.0.0.728] [C:\Program Files\Common Files\Real\Plugins\ramfformat.dll] [RealNetworks, Inc., 10.0.0.1218] [C:\Program Files\Common Files\Real\Plugins\rmfformat.dll] [RealNetworks, Inc., 10.0.0.715] [C:\Program Files\Common Files\Real\Plugins\rarender.dll] [RealNetworks, Inc., 10.0.0.445] [C:\Program Files\Common Files\Real\Codecs\cook.dll] [RealNetworks, Inc., 10.0.0.682] [C:\Program Files\Common Files\Real\Plugins\rvrender.dll] [RealNetworks, Inc., 10.0.0.442] [C:\Program Files\Common Files\Real\Codecs\hxltcolor.dll] [RealNetworks, Inc., 10.0.0.300] [C:\Program Files\Common Files\Real\Codecs\RV40.DLL] [RealNetworks, Inc., 10.0.0.922] [C:\Program Files\Common Files\Real\Codecs\drvc.dll] [RealNetworks, Inc., 10.0.0.922] [C:\Program Files\Common Files\Real\Common\rjbviz.dll] [RealNetworks, Inc., 1.0.2.3410] [C:\Program Files\Common Files\Real\Plugins\authmgr.dll] [RealNetworks, Inc., 10.0.0.889] [C:\Program Files\Common Files\Real\RCAPlugins\rpcontrols2.dll] [RealNetworks, 6.0.1.1779] [C:\Program Files\Common Files\Real\RCAPlugins\gemx3201.dll] [RealNetworks, Inc., 0.1.0.5389] [C:\Program Files\Common Files\Real\Visualizations\Annabelle.rpv] [RealNetworks, Inc., 1.0.0.2] [C:\Program Files\Common Files\Real\Update_OB\rnad3201.dll] [RealNetworks, Inc., 0.1.0.3018] [D:\Program Files\RealPlayer\rpplugins\rpme3260.dll] [RealNetworks, Inc., 6.0.10.1786] [D:\Program Files\RealPlayer\rpplugins\rpgu3260.dll] [RealNetworks, Inc., 6.0.10.1789] [D:\Program Files\RealPlayer\rpplugins\rjbxfade.dll] [RealNetworks, Inc., 1.0.3.1784] [D:\Program Files\RealPlayer\rpplugins\rpwe3260.dll] [RealNetworks, Inc., 6.0.1.1794] [PID: 3340][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [D:\软件\超级魔~1\MAGICSET\haokanbar.dll] [Xiang Feng Technology, 2, 2, 0, 1612] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [D:\软件\瑞星2006\Rising\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] [Macromedia, Inc., 8,0,22,0] [PID: 2524][D:\软件\BitComet\BitComet\BitComet.exe] [www.BitComet.com, 0.62.] [C:\windows\system32\msdmo.dll] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 3348][H:\灰鸽子\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, N/A] [C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, N/A] [PID: 3752][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [D:\软件\超级魔~1\MAGICSET\haokanbar.dll] [Xiang Feng Technology, 2, 2, 0, 1612] [D:\软件\瑞星2006\Rising\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost
清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:

鸟儿天上飞叱咤花甲狮帖子:2332 注册: 2006-11-30 来自:	发表于： 2006-12-19 03:32 \| 短消息资料字号：小中大 7楼运行SREng2,使用“启动项目”－－注册表－－删除 <CheckFaultKernel><C:\windows\system32\mswdm.exe> [N/A] <{08315C1A-9BA9-4B7C-A432-26885F78DF28}><> [N/A] <{6E44887F-5214-41F2-AB46-4728735C4CC6}><C:\Program Files\Internet Explorer\PLUGINS\system18.sys> [N/A] <{99F1D023-7CEB-4586-80F7-BB1A98DB7602}><C:\Program Files\Internet Explorer\IEXPLORE.Sys> [N/A] <{FEB94F5A-69F3-4645-8C2B-9E71D270AF2E}><C:\Program Files\Internet Explorer\IEXPLORE.Dat> [N/A] <{923509F1-45CB-4EC0-BDE0-1DED35B8FD60}><C:\Program Files\Internet Explorer\IEXPLORE.win> [N/A] 运行(双击)SRENG2，点“启动项目，服务，点“Win32服务应用程序” 勾选“隐藏微软服务”选中病毒服务 Window Services Pack Installer / Spullerpdsvc] <C:\Program Files\Common Files\Microsoft Shared\MSInfo\svchost.exe><N/A> ，选择“删除服务” 点“设置”选择“否” 运行(双击)SRENG2，点“启动项目，服务，点“驱动程序” 勾选“隐藏微软服务”选中病毒服务 [oreans32 / oreans32] <\??\C:\WINDOWS\system32\drivers\oreans32.sys><N/A> ，选择“删除服务” 点“设置”选择“否” C:\WINDOWS\system32\drivers\oreans32.sys C:\WINDOWS\system32\mswdm.exe C:\Program Files\Common Files\Microsoft Shared\MSInfo\svchost.exe C:\Program Files\Internet Explorer\PLUGINS\system18.sys C:\Program Files\Internet Explorer\IEXPLORE.Sys C:\Program Files\Internet Explorer\IEXPLORE.Dat C:\Program Files\Internet Explorer\IEXPLORE.win
鸟儿天上飞叱咤花甲狮帖子:2332 注册: 2006-11-30 来自:

清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:	发表于： 2006-12-19 13:10 \| 只看楼主短消息资料字号：小中大 8楼 C:\WINDOWS\system32\drivers\oreans32.sys C:\WINDOWS\system32\mswdm.exe C:\Program Files\Common Files\Microsoft Shared\MSInfo\svchost.exe C:\Program Files\Internet Explorer\PLUGINS\system18.sys C:\Program Files\Internet Explorer\IEXPLORE.Sys C:\Program Files\Internet Explorer\IEXPLORE.Dat C:\Program Files\Internet Explorer\IEXPLORE.win 这些是直接找到删除了吗？
清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:

清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:	发表于： 2006-12-19 13:47 \| 只看楼主短消息资料字号：小中大 9楼我打开SREngLOG2点启动项目的时候会弹出一个警示框：警告！注册表值AppInit_DLLs被修改为非正常值（默认是空）。请检查你的系统中可能存在的计算机病毒。当我把值修改回空时，一刷新那个值又变回“49400M.BMP”了！ [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><49400M.BMP> [N/A]
清水无纹初生襁褓狮帖子:74 注册: 2006-05-22 来自:

红夜鬼1 横据古稀狮帖子:8602 注册: 2006-10-18 来自:	发表于： 2006-12-19 13:52 \| 短消息资料字号：小中大 10楼 HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><49400M.BMP> 红色的不要运行SREng2,使用“启动项目”－－注册表－－选中UAppInit_DLLs单击编辑,将值删除 49400M.BMP下载冰刃删除 http://free.ys168.com/?j7700074
红夜鬼1 横据古稀狮帖子:8602 注册: 2006-10-18 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT