主页被劫持，已用HijackThis扫描，谁能告诉我怎么办吗？谢谢 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛主页被劫持，已用HijackThis扫描，谁能告诉我怎么办吗？谢谢

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

主页被劫持，已用HijackThis扫描，谁能告诉我怎么办吗？谢谢

密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	发表于： 2005-11-17 21:11 \| 只看楼主短消息资料字号：小中大 1楼主页被劫持，已用HijackThis扫描，谁能告诉我怎么办吗？谢谢 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\NetTransport 2\NTIEHelper.dll O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [VTPreset] VTPreset.exe O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE O4 - HKLM\..\Run: [RavMon] C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM O4 - HKLM\..\RunOnce: [BaiduInstall] C:\WINNT\system32\rundll32.exe C:\PROGRA~1\baidu\bar\BDBAR_~1\BaiduBar.dll,Install O4 - HKCU\..\Run: [Internat.exe] internat.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: 使用影音传送带下载 - C:\Program Files\NetTransport 2\NTAddLink.html O8 - Extra context menu item: 使用影音传送带下载全部链接 - C:\Program Files\NetTransport 2\NTAddList.html O8 - Extra context menu item: 百度-搜索MP3 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM O8 - Extra context menu item: 百度-搜索图片 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM O8 - Extra context menu item: 百度-搜索新闻 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM O8 - Extra context menu item: 百度-搜索歌词 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM O8 - Extra context menu item: 百度-搜索网页 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM O8 - Extra context menu item: 百度-搜索贴吧 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM O8 - Extra context menu item: 百度-词典搜索 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O14 - IERESET.INF: SEARCH_PAGE_URL= O14 - IERESET.INF: START_PAGE_URL= O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - c:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe 2005-11-17 22:21:34
密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	分享到：

密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	发表于： 2005-11-17 21:18 \| 只看楼主短消息资料字号：小中大 2楼补充一下，我遇到的恶意网站是 http://www.yipu.net/index.asp
密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:

飞跃迷离社区嘉宾帖子:7351 注册: 2004-10-15 来自:	发表于： 2005-11-17 21:18 \| 短消息资料字号：小中大 3楼请把您的日志贴完整！
飞跃迷离社区嘉宾帖子:7351 注册: 2004-10-15 来自:

密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	发表于： 2005-11-17 21:23 \| 只看楼主短消息资料字号：小中大 4楼 Logfile of HijackThis v1.99.1 Scan saved at 21:21:59, on 2005-11-17 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe c:\program files\rising\rfw\rfwsrv.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\regsvc.exe C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE c:\program files\rising\rfw\RfwMain.exe C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE C:\WINNT\system32\internat.exe c:\program files\rising\rav\Update\RAVXP.EXE C:\PROGRAM FILES\RISING\RAV\Ravmond.exe C:\PROGRAM FILES\RISING\RAV\RavStub.exe c:\program files\rising\rav\RAVMON.EXE C:\Program Files\金山词霸 2005\XDICT.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINNT\system32\taskmgr.exe E:\小工具\HijackThis V1.99.1汉化版\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\NetTransport 2\NTIEHelper.dll O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [VTPreset] VTPreset.exe O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE O4 - HKLM\..\Run: [RavMon] C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM O4 - HKLM\..\RunOnce: [BaiduInstall] C:\WINNT\system32\rundll32.exe C:\PROGRA~1\baidu\bar\BDBAR_~1\BaiduBar.dll,Install O4 - HKCU\..\Run: [Internat.exe] internat.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: 使用影音传送带下载 - C:\Program Files\NetTransport 2\NTAddLink.html O8 - Extra context menu item: 使用影音传送带下载全部链接 - C:\Program Files\NetTransport 2\NTAddList.html O8 - Extra context menu item: 百度-搜索MP3 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM O8 - Extra context menu item: 百度-搜索图片 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM O8 - Extra context menu item: 百度-搜索新闻 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM O8 - Extra context menu item: 百度-搜索歌词 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM O8 - Extra context menu item: 百度-搜索网页 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM O8 - Extra context menu item: 百度-搜索贴吧 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM O8 - Extra context menu item: 百度-词典搜索 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O14 - IERESET.INF: SEARCH_PAGE_URL= O14 - IERESET.INF: START_PAGE_URL= O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - c:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:

飞跃迷离社区嘉宾帖子:7351 注册: 2004-10-15 来自:	发表于： 2005-11-17 21:38 \| 短消息资料字号：小中大 5楼打开IE浏览器——工具——internet选项——删除cookies、删除文件，把“删除所有脱机内容”选上问题仍在请用System Repair Engineer 扫个日志上来下载地址： [必读]本版说明及常用小软件下载（8楼） http://forum.ikaka.com/topic.asp?board=67&artid=5188931
飞跃迷离社区嘉宾帖子:7351 注册: 2004-10-15 来自:

密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	发表于： 2005-11-17 21:39 \| 只看楼主短消息资料字号：小中大 6楼谢谢斑竹，我试试就来！
密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:

密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	发表于： 2005-11-17 21:57 \| 只看楼主短消息资料字号：小中大 7楼惨啊！还是一样，麻烦斑竹再帮我看看System Repair Engineer 扫的日志。2005-11-17,21:51:48 System Repair Engineer 1.1.0.269 Windows 2000 Professional Service Pack 4 - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <Internat.exe><internat.exe> [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <Synchronization Manager><mobsync.exe /logon> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <VTPreset><VTPreset.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RfwMain><"C:\Program Files\rising\Rfw\rfwmain.exe" -Startup> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RavTimer><C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RavMon><C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <BaiduInstall><C:\WINNT\system32\rundll32.exe C:\PROGRA~1\baidu\bar\BDBAR_~1\BaiduBar.dll,Install> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <Userinit><C:\WINNT\system32\userinit.exe,> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N> ================================== 服务 [Logical Disk Manager Administrative Service / dmadmin] <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.> [Macromedia Licensing Service / Macromedia Licensing Service] <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A> [Rising Personal Firewall Service / RfwService] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Corporation Limited> [Rising Process Communication Center / RsCCenter] <C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><rising> [RsRavMon Service / RsRavMon] <C:\PROGRAM FILES\RISING\RAV\Ravmond.exe><Beijing Rising Technology Co., Ltd.> ================================== 浏览器加载项 [AcroIEHlprObj Class] <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll> [BandIE Class] <C:\PROGRA~1\baidu\bar\baidubar.dll> [NTIECatcher Class] <C:\Program Files\NetTransport 2\NTIEHelper.dll> [@shdoclc.dll,-866] <> [@msdxmLC.dll,-1@2052,电台(&R)] <C:\WINNT\system32\msdxm.ocx> [百度超级搜霸] <C:\PROGRA~1\baidu\bar\baidubar.dll> [使用影音传送带下载] <C:\Program Files\NetTransport 2\NTAddLink.html> [使用影音传送带下载全部链接] <C:\Program Files\NetTransport 2\NTAddList.html> [百度-搜索MP3] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM> [百度-搜索图片] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM> [百度-搜索新闻] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM> [百度-搜索歌词] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM> [百度-搜索网页] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM> [百度-搜索贴吧] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM> [百度-词典搜索] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM> ==================================
密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:

密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	发表于： 2005-11-17 21:57 \| 只看楼主短消息资料字号：小中大 8楼正在运行的进程 [PID: 140][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601> [PID: 164][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601> [PID: 184][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6714> [PID: 212][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.6700> [C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3> [PID: 224][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.6695> [PID: 388][c:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Corporation Limited><3, 1, 0, 36> [c:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Corporation Limited><3, 0, 1, 5> [c:\program files\rising\rfw\rfwrule.dll] <Beijing Rising Technology Corporation Limited><3, 1, 0, 0> [c:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Corporation Limited><3, 1, 0, 2> [PID: 452][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 476][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.6659> [PID: 508][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 552][C:\WINNT\system32\regsvc.exe] <Microsoft Corporation><5.00.2195.6701> [PID: 572][C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE] <rising><17, 0, 0, 1> [PID: 616][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6704> [PID: 664][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100> [PID: 720][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 864][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [C:\WINNT\system32\RAVEXT.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 8> [C:\Program Files\ACDSee\picaview.dll] <ACD Systems, Ltd.><2, 0, 0, 78> [C:\Program Files\ACDSee\PlugIns\IDE_ACDStd.apl] <ACD Systems, Ltd.><1, 3, 4, 22> [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><6.0.1.2003110300> [C:\PROGRA~1\baidu\bar\baidubar.dll] <Baidu.com, Inc.><2, 0, 2, 48> [C:\Program Files\rising\Rav\RavScrCh.dll] <N/A><17, 0, 0, 8> [C:\Program Files\NetTransport 2\NTIEHelper.dll] <Xi><1.60.11> [PID: 948][c:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Corporation Limited><3, 1, 0, 19> [c:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 40> [c:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17> [c:\program files\rising\rfw\PngDll.dll] <Rising><17, 0, 0, 2> [PID: 1036][C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 39> [C:\PROGRA~1\RISING\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17> [C:\PROGRA~1\RISING\RAV\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7> [C:\PROGRA~1\RISING\RAV\CfgDll.dll] <rising><17, 0, 0, 60> [C:\PROGRA~1\RISING\RAV\RsCommX.dll] <rising><17, 0, 0, 3> [PID: 1048][C:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000> [PID: 1316][c:\program files\rising\rav\Update\RAVXP.EXE] <Beijing Rising Technology Corp. Ltd.><17, 0, 0, 2> [c:\program files\rising\rav\Update\RsCommX.dll] <rising><17, 0, 0, 3> [PID: 1468][C:\PROGRAM FILES\RISING\RAV\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><17, 0, 1, 57> [C:\PROGRAM FILES\RISING\RAV\guidll.dll] <rising><17, 0, 0, 13> [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] <rising><17, 0, 0, 3> [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7> [C:\PROGRAM FILES\RISING\RAV\CfgDll.dll] <rising><17, 0, 0, 60> [C:\Program Files\rising\Rav\Scanner.dll] <Rising><17, 0, 0, 43> [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17> [C:\Program Files\rising\Rav\libload.dll] <Rising><17, 0, 0, 14> [C:\Program Files\rising\Rav\VirusLib.dll] <Rising><17, 0, 0, 26> [C:\PROGRAM FILES\RISING\RAV\MailMon.dll] < ><17, 0, 0, 9> [C:\Program Files\rising\Rav\SpamEng.dll] <N/A><17, 0, 0, 7> [C:\PROGRAM FILES\RISING\RAV\MemMon.dll] <北京瑞星><17, 8, 0, 0> [C:\PROGRAM FILES\RISING\RAV\expscan.dll] <N/A><17, 0, 0, 6> [C:\PROGRAM FILES\RISING\RAV\mPorts.dll] <Beijing Rising Technology Corporation Limited><3, 0, 0, 3> [C:\PROGRAM FILES\RISING\RAV\regmon.dll] < ><17, 0, 0, 12> [C:\PROGRAM FILES\RISING\RAV\HookWeb.dll] <rising><17, 0, 0, 4> [C:\Program Files\rising\Rav\engine.dll] <rising><17, 0, 0, 40> [C:\Program Files\rising\Rav\UnExe.dll] <Rising><17, 0, 0, 27> [C:\Program Files\rising\Rav\ScanEx.dll] <Rising><17, 0, 0, 33> [C:\Program Files\rising\Rav\PostTrt.dll] <Rising><17, 0, 0, 21> [C:\Program Files\rising\Rav\NvFile.dll] <瑞星><17, 0, 0, 13> [C:\Program Files\rising\Rav\ScanMac.dll] <rising><17, 0, 0, 17> [C:\Program Files\rising\Rav\ScanSct.dll] <rising><17, 0, 0, 30> [C:\Program Files\rising\Rav\ScanExec.dll] <N/A><17, 0, 0, 21> [C:\Program Files\rising\Rav\Unpacker.dll] <rising><17, 0, 0, 19> [C:\Program Files\rising\Rav\ExtOLE.dll] <rising><17, 0, 0, 20> [PID: 1040][C:\PROGRAM FILES\RISING\RAV\RavStub.exe] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 27> [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] <rising><17, 0, 0, 3> [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17> [PID: 1312][c:\program files\rising\rav\RAVMON.EXE] <Beijing Rising Technology Co., Ltd.><17, 0, 1, 37> [c:\program files\rising\rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 40> [c:\program files\rising\rav\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7> [c:\program files\rising\rav\CfgDll.dll] <rising><17, 0, 0, 60> [c:\program files\rising\rav\RsCommX.dll] <rising><17, 0, 0, 3> [c:\program files\rising\rav\PngDll.dll] <Rising><17, 0, 0, 2> [c:\program files\rising\rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17> [PID: 1240][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><5.00.2920.0000> [C:\PROGRA~1\baidu\bar\baidubar.dll] <Baidu.com, Inc.><2, 0, 2, 48> [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><6.0.1.2003110300> [C:\Program Files\NetTransport 2\NTIEHelper.dll] <Xi><1.60.11> [C:\Program Files\rising\Rav\RavScrCh.dll] <N/A><17, 0, 0, 8> [C:\WINNT\system32\macromed\flash\Flash.ocx] <Macromedia, Inc.><7,0,14,0> [PID: 196][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><5.00.2920.0000> [C:\PROGRA~1\baidu\bar\baidubar.dll] <Baidu.com, Inc.><2, 0, 2, 48> [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><6.0.1.2003110300> [C:\Program Files\NetTransport 2\NTIEHelper.dll] <Xi><1.60.11> [C:\Program Files\rising\Rav\RavScrCh.dll] <N/A><17, 0, 0, 8> [C:\WINNT\system32\macromed\flash\Flash.ocx] <Macromedia, Inc.><7,0,14,0> [PID: 748][C:\downloads\SREng.exe] <Smallfrogs Studio><1.1.0.269>
密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:

密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	发表于： 2005-11-17 21:58 \| 只看楼主短消息资料字号：小中大 9楼文件关联 .TXT OK. [C:\WINNT\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINNT\hh.exe" %1] .HLP OK. [C:\WINNT\System32\winhlp32.exe %1] .INI OK. [C:\WINNT\System32\NOTEPAD.EXE %1] .INF OK. [C:\WINNT\System32\NOTEPAD.EXE %1] ==================================
密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:

密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:	发表于： 2005-11-17 22:00 \| 只看楼主短消息资料字号：小中大 10楼另外，除主页被修改之外，目前电脑的速度已经变得很慢了！
密度初生襁褓狮帖子:9 注册: 2005-11-17 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT