请高手指点迷津~!新买的机器无故蓝屏~!【求助】 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请高手指点迷津~!新买的机器无故蓝屏~!【求助】

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

请高手指点迷津~!新买的机器无故蓝屏~!【求助】

俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:	发表于： 2007-07-05 22:05 \| 只看楼主短消息资料字号：小中大 1楼请高手指点迷津~!新买的机器无故蓝屏~!【求助】半个月前买的新机器,因为出厂设置的是VISTA系统,操作复杂,所以小弟我,把硬盘格式化,重新装了盗版XP系统,但是不久就老是无故蓝屏,请高手帮忙看看,是不是系统有问题. 启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher] <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <nwiz><nwiz.exe /installquiet /keeploaded /nodetect> [] <SoundMAXPnP><C:\Program Files\Analog Devices\Core\smax4pnp.exe> [(Verified)Microsoft Windows Publisher] <SoundMAX><"C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray> [Analog Devices, Inc.] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe> [(Verified)"beijing yahoo consulting and service co., ltd."] <CnsMin><Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32> [(Verified)"INTER CHINA NETWORK SOFTWARE (BEIJING) CO., LTD."] <helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [(Verified)"INTER CHINA NETWORK SOFTWARE (BEIJING) CO., LTD."] <yassistse><c:\progra~1\yahoo!\assistant\yassistse.exe> [(Verified)"beijing yahoo consulting and service co., ltd."] <btby><H:\btby\btby.exe -s> [http://www.btby.cn] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <RavStub><"C:\PROGRAM FILES\RISING\RAV\ravstub.exe" /RUNONCE> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows Publisher] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><C:\WINDOWS\DOWNLO~1\CnsHook.dll> [北京三七二一科技有限公司] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] ================================== 2007-07-05 22:47:20
俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:	分享到：

wbxhs 特邀体验者帖子:736 注册: 2007-02-13 来自:加勒比海	发表于： 2007-07-05 22:44 \| 短消息资料字号：小中大 2楼日志不全！ <btby><H:\btby\btby.exe -s> [http://www.btby.cn] 这是什么东东来的？机器蓝屏有时候也有可能是硬件问题！
wbxhs 特邀体验者帖子:736 注册: 2007-02-13 来自:加勒比海

ADL 社区嘉宾帖子:21666 注册: 2001-06-22 来自:江湖	发表于： 2007-07-05 22:48 \| 短消息资料字号：小中大 3楼看到些流氓！用360杀下！ 360下载：http://360safe.com/
ADL 社区嘉宾帖子:21666 注册: 2001-06-22 来自:江湖

haohe的fans 叱咤花甲狮帖子:2818 注册: 2007-06-17 来自:	发表于： 2007-07-05 22:51 \| 短消息资料字号：小中大 4楼 ========Content======== http://www.kztechs.com/sreng/download.html 下载System Repair Engineer 1 解压缩sreng2.zip 2 运行SREng.exe 3 智能扫描=》扫描=》保存报告 4 把日志中的报告完整拷贝贴上来，不要修改（一次发不完请分次发上来） 5 扫日志的时候尽量把不必要的软件关闭如QQ TM等
haohe的fans 叱咤花甲狮帖子:2818 注册: 2007-06-17 来自:

俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:	发表于： 2007-07-05 22:51 \| 只看楼主短消息资料字号：小中大 5楼启动文件夹 N/A ================================== 服务 [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon][Running/Auto Start] <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 驱动程序 [ADI UAA Function Driver for High Definition Audio Service / ADIHdAudAddService][Running/Manual Start] <system32\drivers\ADIHdAud.sys><Analog Devices, Inc.> [AEAudio Service / AEAudioService][Running/Manual Start] <system32\drivers\AEAudio.sys><Andrea Electronics Corporation> [Rising TDI Base Driver / BaseTDI][Running/Auto Start] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [Broadcom 440x 10/100 Integrated Controller XP Driver / bcm4sbxp][Running/Manual Start] <system32\DRIVERS\bcm4sbxp.sys><Broadcom Corporation> [CnsMinKP / CnsMinKP][Running/Boot Start] <\SystemRoot\system32\drivers\CnsMinKP.sys><Copyright (C) 3721 Corporation.> [CnsStd / CnsStd][Running/Auto Start] <\SystemRoot\System32\drivers\CnsStd.sys><北京三七二一科技有限公司> [EagleNT / EagleNT][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\EagleNT.sys><N/A> [ExpScaner / ExpScaner][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\ExpScan.sys><> [Microsoft UAA Function Driver for High Definition Audio Service / HdAudAddService][Stopped/Manual Start] <system32\drivers\HdAudio.sys><Windows (R) Server 2003 DDK provider> [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start] <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider> [HookCont / HookCont][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookSys.sys><Rising> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\MEMSCAN.sys><瑞星软件有限公司> [npkcrypt / npkcrypt][Running/Auto Start] <\??\I:\qq2006standard\npkcrypt.sys><INCA Internet Co., Ltd.> [nv / nv][Running/Manual Start] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [ralcoaj / ralcoaj][Running/Boot Start] <\SystemRoot\\SystemRoot\System32\drivers\ralcoaj.sys><N/A> [RsAntiSpyware / RsAntiSpyware][Running/Boot Start] <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising> [Secdrv / Secdrv][Running/Auto Start] <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.> [SenFilt Service / SenFiltService][Running/Manual Start] <system32\drivers\Senfilt.sys><Sensaura> [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys><N/A> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation> [xsjmoebu / xsjmoebu][Running/Boot Start] <\SystemRoot\System32\DRIVERS\xsjmoebu.sys><Yahoo! China Corporation> [yaskp / yaskp][Running/Boot Start] <\SystemRoot\system32\drivers\yaskp.sys><Copyright (C) yahoo Corporation.> [R2A / R2A][Stopped/Disabled] <\??\C:\WINDOWS\system32a2.sys><N/A> ================================== 浏览器加载项 [Yahoo!Photo] {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China> [] {BCCCE1E1-EE05-4791-9E3F-B2ACC47CF5AD} <H:\btby\btbyiehelper.dll, http://www.btby.cn> [CnsHook Class] {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司> [Yahoo 3.5G电邮] {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A> [名品折扣] {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://adtaobao.allyes.com/main/adfclick?db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816, N/A> [雅虎助手] {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A> [雅虎WIDGET] {6354ABE6-05F1-49ed-B850-E423120EC338} <http://cn.widget.yahoo.com/index.htm?source=Cns, N/A> [情景聊天] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A> [] {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A> [] {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A> [雅虎助手] {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, yahoo! china> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx, Adobe Systems, Inc.> [WebThunder Browser Helper] {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_Now.dll, Thunder Networking Technologies,LTD> [WebThunder Class] {03507A1A-E0C5-4404-AA26-205385C0892D} <, N/A> [CEnroll Class] {127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, Microsoft Corporation> [iTrusPTA Class] {1E0DFFCF-27FF-4574-849B-55007349FEDA} <C:\WINDOWS\system32\aliedit\pta.dll, > [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation> [Vod Class] {2EEDA47E-8D5C-4d7e-B4B6-E16E19218555} <C:\Program Files\Thunder Network\WebThunder\DownAndPlay\DapPlayer1.1.0.46.dll, XunLei> [Yahoo!Photo] {33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China> [雅虎助手] {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, yahoo! china> [EditCtrl Class] {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\aliedit.dll, > [Yahoo!Live] {57421194-58FB-49AE-9B4F-FD48869B9AD4} <C:\Program Files\Yahoo!\Assistant\yalive.dll, yahoo! china> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [WangWangObj Class] {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} <H:\Program Files\Alisoft\WangWang\WangWangX4.dll, 阿里软件（中国）有限公司> [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A> [AutoLive] {7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2} <C:\PROGRA~1\3721\autolive.dll, 北京三七二一科技有限公司> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [] {BCCCE1E1-EE05-4791-9E3F-B2ACC47CF5AD} <H:\btby\btbyiehelper.dll, http://www.btby.cn> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [CnsHook Class] {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx, Adobe Systems, Inc.> [PasswordEditCtrl Class] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司> [assist] {FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yassist.dll, Yahoo! China> [上传到QQ网络硬盘] <I:\qq2006standard\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <I:\qq2006standard\AddPanel.htm, N/A> [添加到QQ表情] <I:\qq2006standard\AddEmotion.htm, N/A> [添加到雅虎订阅(&Y)] <res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT, N/A> [用QQ彩信发送该图片] <I:\qq2006standard\SendMMS.htm, N/A>
俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:

俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:	发表于： 2007-07-05 22:54 \| 只看楼主短消息资料字号：小中大 6楼正在运行的进程 [PID: 644 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 712 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 736 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 784 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 796 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 964 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1032 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1144 / SYSTEM][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 1160 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1220 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1424 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1528 / SYSTEM][C:\PROGRAM FILES\RISING\RAV\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 49] [C:\PROGRAM FILES\RISING\RAV\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [C:\PROGRAM FILES\RISING\RAV\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\PROGRAM FILES\RISING\RAV\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\PROGRAM FILES\RISING\RAV\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\PROGRAM FILES\RISING\RAV\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [C:\PROGRAM FILES\RISING\RAV\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\PROGRAM FILES\RISING\RAV\psapi.dll] [Microsoft Corporation, 4.00] [C:\PROGRAM FILES\RISING\RAV\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 14] [C:\PROGRAM FILES\RISING\RAV\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\PROGRAM FILES\RISING\RAV\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\PROGRAM FILES\RISING\RAV\HookCont.dll] [Rising, 19, 0, 0, 0] [C:\Program Files\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 62] [C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20] [C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 23] [C:\Program Files\Rising\Rav\RsVM.dll] [, 19, 0, 0, 18] [C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 40] [C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [PID: 1552 / aaa][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\PROGRA~1\3721\alrex.dll] [, 2.5.0.1002] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [C:\PROGRA~1\3721\autolive.dll] [北京三七二一科技有限公司, 2.5.4.1009] [C:\PROGRA~1\3721\alLiveEx.dll] [ , 1, 0, 3, 1006] [C:\PROGRA~1\Yahoo!\ASSIST~1\yalive.dll] [yahoo! china, 3, 7, 1, 1127] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] [Yahoo! China, 3, 0, 2, 1011] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\WINDOWS\DOWNLO~1\CnsHook.dll] [北京三七二一科技有限公司, 2.5.1.5] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll] [Yahoo! China, 3, 0, 8, 1010] [H:\btby\btbyiehelper.dll] [http://www.btby.cn, 1.0.0.160] [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ywiper.dll] [Yahoo! China, 3, 0, 5, 1009] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.8415] [C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.8415] [C:\WINDOWS\system32\nvshell.dll] [, ] [PID: 1760 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation,
俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:

俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:	发表于： 2007-07-05 22:55 \| 只看楼主短消息资料字号：小中大 7楼 [PID: 1880 / SYSTEM][C:\PROGRAM FILES\RISING\RAV\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 2008 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8415] [PID: 552 / aaa][C:\WINDOWS\system32\Rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\DOWNLO~1\CnsMinIO.dll] [北京三七二一科技有限公司, 2, 5, 0, 4] [C:\WINDOWS\DOWNLO~1\cnsio.dll] [北京三七二一科技有限公司, 2, 5, 0, 3] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMinEx.dll] [国风因特软件(北京)有限公司, 2, 5, 0, 3] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [PID: 216 / aaa][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [PID: 1692 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 380 / aaa][C:\Program Files\Analog Devices\Core\smax4pnp.exe] [Analog Devices, Inc., 6, 0, 0, 20] [C:\Program Files\Analog Devices\Core\SMWDMIF.dll] [Analog Devices, Inc., 6, 0, 4000, 014] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 284 / aaa][C:\Program Files\Analog Devices\SoundMAX\Smax4.exe] [Analog Devices, Inc., 5, 2, 0, 11] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 480 / aaa][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [PID: 584 / aaa][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\system32\nvshell.dll] [, ] [PID: 684 / aaa][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe] [Yahoo! China, 3, 2, 2, 1028] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\PROGRA~1\Yahoo!\ASSIST~1\yalive.dll] [yahoo! china, 3, 7, 1, 1127] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll] [Yahoo! China, 3, 0, 2, 1011] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\ynotifier.dll] [yahoo! china, 3, 0, 2, 1002] [PID: 500 / aaa][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\autolive.dll] [北京三七二一科技有限公司, 2.5.4.1009] [C:\PROGRA~1\3721\alLiveEx.dll] [ , 1, 0, 3, 1006] [PID: 704 / aaa][C:\progra~1\yahoo!\assistant\yassistse.exe] [Yahoo! China, 3, 0, 7, 1010] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\progra~1\yahoo!\assistant\shell\yAsMenu.dll] [Yahoo! China, 3, 0, 2, 1003] [C:\progra~1\yahoo!\assistant\shell\yAssecblk.dll] [Yahoo! China, 3, 1, 9, 1027] [C:\progra~1\yahoo!\assistant\shell\yIEAngel.dll] [Yahoo! China, 3, 0, 3, 1004] [C:\progra~1\yahoo!\assistant\shell\yMenuInfo.dll] [Yahoo! China, 3, 0, 1, 1001] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026]
俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:

俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:	发表于： 2007-07-05 22:56 \| 只看楼主短消息资料字号：小中大 8楼 [PID: 516 / aaa][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [PID: 1128 / aaa][H:\btby\btby.exe] [http://www.btby.cn, 3.6.0.1521] [H:\btby\bass.dll] [Un4seen Developments, 2.3] [H:\btby\basswma.dll] [Un4seen Developments, 2.3] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [H:\btby\GetCodeLen.dll] [N/A, ] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\msdmo.dll] [, ] [PID: 1640 / aaa][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [PID: 2392 / aaa][H:\Program Files\Alisoft\WangWang\WangWang.exe] [阿里巴巴软件（上海）有限公司, 5, 1, 0, 9] [H:\Program Files\Alisoft\WangWang\MFC80.DLL] [Microsoft Corporation, 8.00.50727.42] [H:\Program Files\Alisoft\WangWang\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.42] [H:\Program Files\Alisoft\WangWang\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.42] [H:\Program Files\Alisoft\WangWang\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.42] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [H:\Program Files\Alisoft\WangWang\AliSkin.dll] [阿里巴巴软件（上海）有限公司, 1.0.0.1] [H:\Program Files\Alisoft\WangWang\zlib.dll] [, 1.2.3] [H:\Program Files\Alisoft\WangWang\Ali_Res.DLL] [N/A, ] [H:\Program Files\Alisoft\WangWang\WangWangX4.dll] [阿里软件（中国）有限公司, 1, 0, 0, 1] [H:\Program Files\Alisoft\WangWang\RICHED32.DLL] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [H:\Program Files\Alisoft\WangWang\RICHED20.dll] [Microsoft Corporation, 5.30.23.1221] [H:\Program Files\Alisoft\WangWang\RichOne.dll] [阿里巴巴软件（上海）有限公司, 1.0.0.1] [H:\Program Files\Alisoft\WangWang\TBProgress.dll] [阿里巴巴软件（上海）有限公司, 1.0.0.1] [H:\Program Files\Alisoft\WangWang\MessageNotify.dll] [, 1, 0, 0, 1] [H:\Program Files\Alisoft\WangWang\ww_network.dll] [, 1, 0, 1, 23] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [H:\Program Files\Alisoft\WangWang\AliViewMedia.dll] [阿里巴巴软件（上海）有限公司, 1, 0, 0, 2] [H:\Program Files\Alisoft\WangWang\VLNetwork.dll] [阿里巴巴软件（上海）有限公司, 1, 0, 0, 6] [H:\Program Files\Alisoft\WangWang\VideoCap.dll] [, 1, 0, 0, 4] [H:\Program Files\Alisoft\WangWang\VLAudio.dll] [阿里巴巴软件（上海）有限公司, 1, 0, 0, 5] [H:\Program Files\Alisoft\WangWang\JsmShow.dll] [阿里巴巴软件（上海）有限公司, 1, 0, 0, 4] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [PID: 3792 / aaa][H:\软件\eMule\emule.exe] [http://www.emule-project.net, 0.47.2 Unicode] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [H:\软件\eMule\lang\zh_CN.dll] [http://www.emule-project.net, 0.47.2] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415]
俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:

俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:	发表于： 2007-07-05 22:56 \| 只看楼主短消息资料字号：小中大 9楼 [PID: 1736 / aaa][I:\qq2006standard\QQ.exe] [TENCENT, 0, 0, 0, 0] [I:\qq2006standard\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [I:\qq2006standard\QQHelperDll.dll] [, 1, 0, 0, 1] [I:\qq2006standard\BasicCtrlDll.dll] [Tencent, 6, 0, 200, 320] [I:\qq2006standard\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [I:\qq2006standard\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1] [I:\qq2006standard\RICHED20.dll] [Microsoft Corporation, 5.31.23.1218] [I:\qq2006standard\QQAPI.dll] [, 1, 0, 0, 1] [I:\qq2006standard\TIMProxy.dll] [tencent, 0, 3, 2, 4] [I:\qq2006standard\LoginCtrl.dll] [, 1, 0, 0, 1] [I:\qq2006standard\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1] [I:\qq2006standard\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [I:\qq2006standard\QQRes.dll] [tencent, 1, 0, 0, 1] [I:\qq2006standard\QQMainFrame.dll] [N/A, ] [I:\qq2006standard\CQQApplication.dll] [N/A, ] [I:\qq2006standard\NewSkin.dll] [, 1, 0, 0, 1] [I:\qq2006standard\HostingMgr.dll] [, 1, 0, 0, 1] [I:\qq2006standard\CameraDll.dll] [, 1, 0, 0, 1] [I:\qq2006standard\MailSummary.dll] [, 1, 0, 0, 1] [I:\qq2006standard\QQKnowledgeSearch.dll] [, 1, 0, 0, 1] [I:\qq2006standard\QQAllInOne.dll] [N/A, ] [I:\qq2006standard\GroupLive.dll] [N/A, ] [I:\qq2006standard\SCCore.dll] [TENCENT, 2, 0, 0, 1] [I:\qq2006standard\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)] [I:\qq2006standard\QQSpace.dll] [, 1, 0, 0, 1] [I:\qq2006standard\vbscript.dll] [Microsoft Corporation, 5.6.0.7426] [C:\WINDOWS\system32\msdmo.dll] [, ] [I:\qq2006standard\QQGroupMng.dll] [, 1, 0, 0, 1] [I:\qq2006standard\QQSysMsgMng.dll] [N/A, ] [I:\qq2006standard\UserDefinedHead.dll] [, 1, 0, 0, 1] [I:\qq2006standard\QQPlugin.dll] [N/A, ] [I:\qq2006standard\QQConfigPlugin.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [I:\qq2006standard\QRingMng.dll] [N/A, ] [I:\qq2006standard\QQAvatar.dll] [N/A, ] [I:\qq2006standard\FlashAvatarDll.dll] [, 1, 4, 0, 1] [I:\qq2006standard\LongConnection.dll] [tencent, 5, 0, 200, 160] [I:\qq2006standard\PhoneAPI.dll] [, 1, 0, 0, 1] [I:\qq2006standard\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [I:\qq2006standard\QQCustomFace.dll] [N/A, ] [C:\WINDOWS\system32\msadp32.acm] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [I:\qq2006standard\QQPet.dll] [, 1, 0, 0, 1] [I:\qq2006standard\QQMagicFace.dll] [, 1, 0, 0, 1] [I:\qq2006standard\QQSceneMng.dll] [N/A, ] [I:\qq2006standard\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 271] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [I:\qq2006standard\BQQApplication.dll] [N/A, ] [I:\qq2006standard\ImageOle.dll] [TODO: <Company name>, 1.0.0.1] [I:\qq2006standard\CommercesMng.dll] [, 1, 0, 0, 1] [I:\qq2006standard\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [I:\qq2006standard\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 93] [I:\qq2006standard\GroupConnection.dll] [Tencent, 0, 3, 3, 5] [PID: 316 / aaa][I:\qq2006standard\TIMPlatform.exe] [tencent, 0, 3, 1, 8] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [I:\qq2006standard\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 860 / aaa][C:\Program Files\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [PID: 2400 / aaa][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3424] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 3160 / aaa][C:\Program Files\Thunder Network\WebThunder\WebThunder.exe] [深圳市迅雷网络技术有限公司, 1, 9, 1, 146] [C:\Program Files\Thunder Network\WebThunder\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 13, 4, 58] [C:\Program Files\Thunder Network\WebThunder\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\Program Files\Thunder Network\WebThunder\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 1, 2, 26] [C:\Program Files\Thunder Network\WebThunder\download_interface.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 46] [C:\Program Files\Thunder Network\WebThunder\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [C:\Program Files\Thunder Network\WebThunder\asyn_dns.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 46] [C:\Program Files\Thunder Network\WebThunder\Inmedia\iEmbedShell.dll] [　, 1, 0, 0, 19] [C:\Program Files\Thunder Network\WebThunder\InMedia\iEmbed10.dll] [　, 3, 3, 1, 83] [C:\Program Files\Thunder Network\WebThunder\DownAndPlay\WebDownAndPlay.dll] [xl, 1, 0, 0, 18] [C:\Program Files\Thunder Network\WebThunder\CacheServer.dll] [, 1, 0, 0, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [PID: 1752 / aaa][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [PID: 2612 / aaa][H:\SREngPS.EXE] [N/A, ] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\PROGRA~1\3721\helper.dll] [北京三七二一科技有限公司, 2.5.1.1004] [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll] [Yahoo! China, 3, 0, 8, 1026] [C:\WINDOWS\DOWNLO~1\CnsMin.dll] [国风因特软件（北京）有限公司, 2.5.0.9] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [H:\Upload\3rdUpd.DLL] [N/A, ]
俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:

俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:	发表于： 2007-07-05 22:57 \| 只看楼主短消息资料字号：小中大 10楼 ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeDebugPrivilege [PID = 284, C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMAX4.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 284, C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMAX4.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 480, C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 480, C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 516, C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 516, C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 1128, H:\BTBY\BTBY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1128, H:\BTBY\BTBY.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 2392, H:\PROGRAM FILES\ALISOFT\WANGWANG\WANGWANG.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2392, H:\PROGRAM FILES\ALISOFT\WANGWANG\WANGWANG.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3792, H:\软件\EMULE\EMULE.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3792, H:\软件\EMULE\EMULE.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 1736, I:\QQ2006STANDARD\QQ.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1736, I:\QQ2006STANDARD\QQ.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 316, I:\QQ2006STANDARD\TIMPLATFORM.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 316, I:\QQ2006STANDARD\TIMPLATFORM.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 860, C:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 860, C:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
俊v1哥初生襁褓狮帖子:21 注册: 2007-07-04 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT