瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 hj日志中的dmadmin.exe是不是灰鸽子病毒啊?

1   1  /  1  页   跳转

hj日志中的dmadmin.exe是不是灰鸽子病毒啊?

hj日志中的dmadmin.exe是不是灰鸽子病毒啊?

以下是我的hj日志,其中
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
应该不是灰鸽子吧?dmadmin.exe是什么程序啊?高手指点一下。


Logfile of HijackThis v1.99.1
Scan saved at 1:58:49, on 2005-11-5
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP2 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\regsvc.exe
D:\PROGRAM\RISING\CCENTER.EXE
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
D:\PROGRAM\RISING\Ravmond.exe
D:\PROGRAM\RISING\RavStub.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\Rundll32.exe
D:\program\FOLDER~1\FGKEY.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\PROGRAM\RISING\RAVTIMER.EXE
D:\PROGRAM\RISING\RAVMON.EXE
D:\program\FireWall\PFW.exe
C:\WINNT\System32\internat.exe
D:\program\netcaptor\NetCaptor.exe
D:\program\HijackThis\HijackThis.exe

R3 - URLSearchHook: BDSrchHook Class - {2C5AA40E-8814-4EB6-876E-7EFB8B3F9662} - C:\WINNT\DOWNLO~1\BDSrHook.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\program\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\program\FLASHGET\jccatch.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - D:\program\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: BDHlprObj Class - {CA92B524-BC8A-4610-BD2C-6BD3E28155D0} - C:\WINNT\DOWNLO~1\BDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\program\FLASHGET\fgiebar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\program\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [FolderGuard] D:\program\FOLDER~1\FGKEY.EXE /CL
O4 - HKLM\..\Run: [BIE] Rundll32 C:\WINNT\DOWNLO~1\BDPlugin.dll,Rundll32
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RavTimer] D:\PROGRAM\RISING\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] D:\PROGRAM\RISING\RAVMON.EXE -SYSTEM
O4 - HKLM\..\Run: [SKYNET Personal FireWall] D:\program\FireWall\PFW.exe
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O8 - Extra context menu item: 使用网际快车下载 - D:\program\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\program\FlashGet\jc_all.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\program\FLASHGET\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\program\FLASHGET\flashget.exe
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - D:\PROGRAM\RISING\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM\RISING\Ravmond.exe

最后编辑2005-11-05 02:25:52
分享到:
gototop
 

顺便再问一句,我看了许多其他人上传的日志,为什么他们的都没有O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
这一项啊?
gototop
 

dmadmin.exe是Windows NT/2000以及更高版本的Windows自带的程序。它用于管理逻辑磁盘。

不用担心。从日志上看来没什么可疑之处。
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT