连瑞新软件都无法打开，注册表也找不到 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛连瑞新软件都无法打开，注册表也找不到

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

连瑞新软件都无法打开，注册表也找不到

kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:	发表于： 2006-12-15 15:49 \| 只看楼主短消息资料字号：小中大 1楼连瑞新软件都无法打开，注册表也找不到 HijackThis_815汉化版扫描日志 V1.99.1 保存于 15:29:41, 日期 2006-12-15 操作系统： Windows 2000 SP4 (WinNT 5.00.2195) 浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106) 当前运行的进程： C:\WINNT\System32\smss.exe C:\WINNT\system32\csrss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Yuguo\EAZClnt.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\MSTask.exe C:\Program Files\Yuguo\shdserv.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\System32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.exe C:\WINNT\SERVICES.EXE C:\WINNT\system32\windowstime.exe C:\WINNT\system32\taskmgr.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\DOCUME~1\xue\LOCALS~1\Temp\zts2.exe C:\DOCUME~1\xue\LOCALS~1\Temp\mhs2.exe C:\DOCUME~1\xue\LOCALS~1\Temp\wlzs2.exe C:\Program Files\Tencent\QQ\QQ.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\xue\My Documents\anti-virus\HijackThis1991zww.exe C:\Program Files\Tencent\QQ\QQexternal.exe R3 - URLSearchHook: (no name) - {6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89} - (no file) F2 - REG:system.ini: Shell=Explorer.exe 1 F3 - REG:win.ini: load=C:\PROGRA~1\svhost32.exe F2 - REG:system.ini: UserInit=userinit.exe,,C:\Program Files\winrar\msn.com O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file) O2 - BHO: 百度搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\WINNT\DOWNLO~1\BaiDuBar.dll O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\KakaTool.dll (file missing) O3 - IE工具栏增项: BitComet工具栏 - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\Program Files\BitComet\BitCometBar\BitCometBar0.6.dll O3 - IE工具栏增项: 百度搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\WINNT\DOWNLO~1\BaiDuBar.dll O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup O4 - 启动项HKLM\\Run: [Torjan Program] C:\WINNT\SERVICES.EXE O4 - 启动项HKLM\\Run: [zts2] C:\DOCUME~1\xue\LOCALS~1\Temp\zts2.exe O4 - 启动项HKLM\\Run: [mhs2] C:\DOCUME~1\xue\LOCALS~1\Temp\mhs2.exe O4 - 启动项HKLM\\Run: [wlzs2] C:\DOCUME~1\xue\LOCALS~1\Temp\wlzs2.exe O4 - 启动项HKLM\\Run: [windowstime.exe] C:\WINNT\system32\windowstime.exe O8 - IE右键菜单中的新增项目: Save豪杰超级解霸V8实时播放 - C:\Herosoft\HeroV8\MPURLGET.HTM O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm O8 - IE右键菜单中的新增项目: 百度Flash搜索 - res://C:\WINNT\DOWNLO~1\BaiDuBar.dll/FLASHSEARCH.HTM O8 - IE右键菜单中的新增项目: 百度mp3搜索 - res://C:\WINNT\DOWNLO~1\BaiDuBar.dll/BAIDUMP3.HTM O8 - IE右键菜单中的新增项目: 百度信息快递搜索 - res://C:\WINNT\DOWNLO~1\BaiDuBar.dll/BAIDUIE.HTM O8 - IE右键菜单中的新增项目: 百度图片搜索 - res://C:\WINNT\DOWNLO~1\BaiDuBar.dll/BAIDUIMG.HTM O8 - IE右键菜单中的新增项目: 百度搜索 - res://C:\WINNT\DOWNLO~1\BaiDuBar.dll/BAIDUSEARCH.HTM O8 - IE右键菜单中的新增项目: 百度新闻搜索 - res://C:\WINNT\DOWNLO~1\BaiDuBar.dll/BAIDUNEWS.HTM O8 - IE右键菜单中的新增项目: 豪杰超级解霸V8实时播放 - C:\Herosoft\HeroV8\MPURLGET.HTM O9 - 浏览器额外的按钮: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE O9 - 浏览器额外的“工具”菜单项: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://xfiverson.spaces.live.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} (pCastPanel Class) - http://ps.itv.mop.com/dn/files/pCastCtl_1.0.0.89_20060727.cab O21 - SSODL: DLMon - {590498A3-4131-4D8F-BA4B-36791A0803B1} - C:\WINNT\system32\DLMain.dll (file missing) O23 - NT 服务: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - NT 服务: E9730B7F - Unknown owner - C:\WINNT\system32\E9730B7F.EXE (file missing) O23 - NT 服务: EAZClientService - Unknown owner - C:\Program Files\Yuguo\EAZClnt.exe O23 - NT 服务: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Unknown owner - C:\Program Files\Rising\Rfw\rfwsrv.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe O23 - NT 服务: SHDSERV - 南京安悦科技有限公司 - C:\Program Files\Yuguo\shdserv.exe O23 - NT 服务: Windows DHCP Service (WinDHCPsvc) - Unknown owner - C:\WINNT\system32\rundll32.exe (file missing) 2006-12-15 18:49:00
kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:	分享到：

kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:	发表于： 2006-12-15 16:24 \| 只看楼主短消息资料字号：小中大 2楼 HijackThis_815汉化版扫描日志 V1.99.1 保存于 16:18:17, 日期 2006-12-15 操作系统： Windows 2000 SP4 (WinNT 5.00.2195) 浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106) 当前运行的进程： C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Yuguo\EAZClnt.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\nvsvc32.exe C:\WINNT\system32\MSTask.exe C:\Program Files\Yuguo\shdserv.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\System32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE C:\Program Files\Tencent\QQ\QQ.exe C:\Program Files\ewido anti-spyware 4.0\ewido.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\xue\My Documents\anti-virus\HijackThis1991zww.exe R3 - URLSearchHook: (no name) - {6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89} - (no file) O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file) O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\KakaTool.dll (file missing) O3 - IE工具栏增项: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Super Rabbit IEPro] C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm O9 - 浏览器额外的按钮: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - 浏览器额外的“工具”菜单项: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - 浏览器额外的按钮: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE O9 - 浏览器额外的“工具”菜单项: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe O9 - 浏览器额外的按钮: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - http://www.rising.com.cn (file missing) O9 - 浏览器额外的按钮: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - http://www.ikaka.com (file missing) O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://xfiverson.spaces.live.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} (pCastPanel Class) - http://ps.itv.mop.com/dn/files/pCastCtl_1.0.0.89_20060727.cab O21 - SSODL: DLMon - {590498A3-4131-4D8F-BA4B-36791A0803B1} - C:\WINNT\system32\DLMain.dll (file missing) O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - NT 服务: EAZClientService - Unknown owner - C:\Program Files\Yuguo\EAZClnt.exe O23 - NT 服务: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Unknown owner - c:\program files\rising\rfw\rfwsrv.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe O23 - NT 服务: SHDSERV - 南京安悦科技有限公司 - C:\Program Files\Yuguo\shdserv.exe
kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:

honvy09 初生襁褓狮帖子:13 注册: 2006-12-15 来自:	发表于： 2006-12-15 16:33 \| 短消息资料字号：小中大 3楼我的状况根你差不多啊，也是杀毒工具都打不开，木马杀客也打不开。好象是OURFNS.EXE，可在SYSTEM32里就找不到，在注册表里头删了等下又出现。！不知道是什么鸟病毒啊，局域网里头的另几台电脑上也发现同样的病毒！
honvy09 初生襁褓狮帖子:13 注册: 2006-12-15 来自:

kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:	发表于： 2006-12-15 16:50 \| 只看楼主短消息资料字号：小中大 4楼怎么办，我这阵子正好要用电脑
kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:

红夜鬼1 横据古稀狮帖子:8602 注册: 2006-10-18 来自:	发表于： 2006-12-15 16:54 \| 短消息资料字号：小中大 5楼第二个日志看不出请下载SREng2（最新版），使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。下载地址 http://www.kztechs.com/sreng/sreng2.zip
红夜鬼1 横据古稀狮帖子:8602 注册: 2006-10-18 来自:

kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:	发表于： 2006-12-15 18:54 \| 只看楼主短消息资料字号：小中大 6楼 2006-12-15,18:46:17 System Repair Engineer 2.2.6.605 Smallfrogs (http://www.KZTechs.com) Windows 2000 Professional Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <wow><C:\WINNT\system32\Launcher.exe> [N/A] <rx><C:\WINNT\system32\explore.exe> [N/A] <zz><C:\WINNT\system32\intenet.exe> [N/A] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] <run><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <nwiz><nwiz.exe /install> [N/A] <Synchronization Manager><mobsync.exe /logon> [(Verified)Microsoft Corporation] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <NvCplDaemon><RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <9><C:\WINNT\system32\vpcrm.exe> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINNT\system32\userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <DLMon><C:\WINNT\system32\DLMain.dll> [N/A] [HKEY_CURRENT_USER\Control Panel\Desktop] <SCRNSAVE.EXE><C:\WINNT\豪杰多~1.SCR> [N/A]
kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:

kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:	发表于： 2006-12-15 18:54 \| 只看楼主短消息资料字号：小中大 7楼 ================================== 启动文件夹 N/A ================================== 服务 [Logical Disk Manager Administrative Service / dmadmin] <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.> [EAZClientService / EAZClientService] <"C:\Program Files\Yuguo\EAZClnt.exe"><N/A> [ewido anti-spyware 4.0 guard / ewido anti-spyware 4.0 guard] <C:\Program Files\ewido anti-spyware 4.0\guard.exe><Anti-Malware Development a.s.> [NVIDIA Display Driver Service / NVSvc] <C:\WINNT\System32\nvsvc32.exe><NVIDIA Corporation> [Rising Proxy Service / RfwProxySrv] <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <c:\program files\rising\rfw\rfwsrv.exe><N/A> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Network Connection2355243 / Service2355243] <C:\WINNT\system32\netserly.exe><N/A> [SHDSERV / SHDSERV] <C:\Program Files\Yuguo\shdserv.exe><南京安悦科技有限公司> [Uninterruptible Power Supply / UPS] <C:\WINNT\ups.exe><N/A> [WMDM PMSP Service / WMDM PMSP Service] <C:\WINNT\System32\mspmspsv.exe><Microsoft Corporation> [Portable Media Serial Number Service / WmdmPmSN] <C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\mspmsnsv.dll><Microsoft Corporation> ================================== 驱动程序 [Rising TDI Base Driver / BaseTDI] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [Cdr4_2K / Cdr4_2K] <C:\WINNT\SYSTEM32\DRIVERS\Cdr4_2K.SYS><Roxio> [Cdralw2k / Cdralw2k] <C:\WINNT\SYSTEM32\DRIVERS\Cdralw2k.SYS><Roxio> [dmboot / dmboot] <System32\drivers\dmboot.sys><VERITAS Software Corp.> [Logical Disk Manager Driver / dmio] <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.> [dmload / dmload] <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.> [ewido anti-spyware 4.0 driver / ewido anti-spyware 4.0 driver] <\??\C:\Program Files\ewido anti-spyware 4.0\guard.sys><N/A> [ExpScaner / ExpScaner] <\??\C:\Program Files\Rising\Rav\ExpScan.sys><> [HookCont / HookCont] <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising> [HookReg / HookReg] <\??\C:\Program Files\Rising\Rav\HookReg.sys><> [HookSys / HookSys] <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising> [HookUrl / HookUrl] <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [MEMSCAN / MEMSCAN] <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [mProcRs / mProcRs] <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [Netgroup Packet Filter / NPF] <system32\DRIVERS\npf.sys><CACE Technologies> [npkcrypt / npkcrypt] <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><N/A> [nv / nv] <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [nv4 / nv4] <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink] <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsFwDrv / RsFwDrv] <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [Realtek RTL8139-based PCI Fast Ethernet Adapter NT Driver / rtl8139] <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [S12345 / S12345] <\??\D:\S12345.SYS><N/A> [shdbus / shdbus] <C:\WINNT\SYSTEM32\DRIVERS\shdbus.SYS><> [Shield / Shield] <C:\WINNT\SYSTEM32\DRIVERS\Shield.SYS><> [Shieldf / Shieldf] <C:\WINNT\SYSTEM32\DRIVERS\Shieldf.SYS><> [shieldm / shieldm] <C:\WINNT\SYSTEM32\DRIVERS\shieldm.SYS><> [VIA AGP Bus Filter / viaagp] <\SystemRoot\System32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:

不言放弃社区嘉宾帖子:30678 注册: 2004-09-17 来自:蓝色星球	发表于： 2006-12-15 18:55 \| 短消息资料字号：小中大 8楼【回复“kuku2”的帖子】中了征途盗号木马若楼主动手能力较差的话建议重装系统或许这样能够更快的解决问题
不言放弃社区嘉宾帖子:30678 注册: 2004-09-17 来自:蓝色星球

kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:	发表于： 2006-12-15 18:55 \| 只看楼主短消息资料字号：小中大 9楼 ================================== 浏览器加载项 [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [Web Browser Applet Control] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINNT\System32\msjava.dll, Microsoft Corporation> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [FlashGet] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, FlashGet.com> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINNT\system32\KakaTool.dll, N/A> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [MSN Photo Upload Tool] {4F1E5B1A-2A80-42CA-8532-2D05CB959537} <C:\WINNT\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation> [Java Plug-in 1.4.1_02] {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll, JavaSoft / Sun Microsystems, Inc.> [Java Plug-in 1.4.1_02] {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} <C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll, JavaSoft / Sun Microsystems, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [Rising Web Scan Object] {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINNT\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.> [pCastPanel Class] {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} <C:\WINNT\Downloaded Program Files\pCastCtl.dll, > [上传到QQ网络硬盘] <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A> [使用网际快车下载] <C:\Program Files\FlashGet\jc_link.htm, N/A> [使用网际快车下载全部链接] <C:\Program Files\FlashGet\jc_all.htm, N/A> [添加到QQ自定义面板] <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:

kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:	发表于： 2006-12-15 18:56 \| 只看楼主短消息资料字号：小中大 10楼 ================================== 正在运行的进程 [PID: 204][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601] [PID: 228][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601] [PID: 248][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6970] [PID: 276][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.00.2195.6700] [C:\WINNT\system32\dmserver.dll] [VERITAS Software Corp., 2195.6605.297.3] [PID: 288][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.00.2195.6902] [PID: 476][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1] [PID: 492][C:\WINNT\system32\spoolsv.exe] [Microsoft Corporation, 5.00.2195.7059] [PID: 524][C:\Program Files\Yuguo\EAZClnt.exe] [N/A, N/A] [C:\Program Files\Yuguo\client.dll] [, 1, 3, 0, 1] [C:\Program Files\Yuguo\shdapi.dll] [N/A, N/A] [C:\Program Files\Yuguo\schedule.dll] [N/A, N/A] [C:\Program Files\Yuguo\shdservps.dll] [N/A, N/A] [PID: 536][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1] [PID: 640][C:\WINNT\System32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.9136] [PID: 692][C:\WINNT\system32\MSTask.exe] [Microsoft Corporation, 4.71.2195.6920] [PID: 752][C:\Program Files\Yuguo\shdserv.exe] [南京安悦科技有限公司, 1,3,4,0] [C:\Program Files\Yuguo\shdapi.dll] [N/A, N/A] [C:\Program Files\Yuguo\shdservps.dll] [N/A, N/A] [C:\Program Files\Yuguo\idle.dll] [N/A, N/A] [PID: 812][C:\WINNT\System32\WBEM\WinMgmt.exe] [Microsoft Corporation, 1.50.1085.0100] [PID: 844][C:\WINNT\System32\mspmspsv.exe] [Microsoft Corporation, 7.10.00.3059] [PID: 856][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1] [PID: 1000][C:\WINNT\Explorer.EXE] [Microsoft Corporation, 5.00.3700.6690] [C:\WINNT\System32\nvshell.dll] [N/A, N/A] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\WINNT\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [PID: 1168][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3512] [C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 616][C:\Program Files\BitComet\BitComet.exe] [www.BitComet.com, 0.70] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 984][C:\WINNT\system32\taskmgr.exe] [Microsoft Corporation, 5.00.2195.6620] [C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [PID: 1300][C:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0] [C:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQHelperDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 160] [C:\Program Files\Tencent\QQ\QQAPI.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\LoginCtrl.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 3, 2, 1] [C:\Program Files\Tencent\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [C:\Program Files\Tencent\QQ\QQRes.dll] [tencent, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQMainFrame.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\CQQApplication.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\NewSkin.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\HostingMgr.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\CameraDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\MailSummary.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQSpace.dll] [, 1, 0, 0, 1] [C:\WINNT\System32\devenum.dll] [N/A, N/A] [C:\WINNT\system32\msdmo.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\QQGroupMng.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\GroupLive.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQPlugin.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QRingMng.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\PhoneAPI.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [C:\Program Files\Tencent\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160] [C:\Program Files\Tencent\QQ\QQPet.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQAvatar.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1] [C:\Program Files\Tencent\QQ\OEMApplication.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQAllInOne.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\SCCore.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200] [C:\Program Files\Tencent\QQ\BQQApplication.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [C:\Program Files\Tencent\QQ\QQCustomFace.dll] [N/A, N/A] [C:\WINNT\System32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [C:\Program Files\Tencent\QQ\QQSceneMng.dll] [N/A, N/A] [C:\WINNT\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5076] [C:\Program Files\Tencent\QQ\CommercesMng.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQMagicFace.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 1, 12] [C:\Program Files\Tencent\QQ\ImageOle.dll] [TODO: <Company name>, 1.0.0.1] [C:\Program Files\Tencent\QQ\QQFileTransfer.dll] [Tencent, 5, 0, 202, 180] [C:\Program Files\Tencent\QQ\GroupConnection.dll] [Tencent, 5, 0, 202, 170] [C:\Program Files\Tencent\QQ\QQSettingCtrl.dll] [, 1, 0, 0, 1] [C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQZip.dll] [tencent, 0, 3, 2, 4] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 1044][C:\Program Files\Real\RealPlayer\RealPlay.exe] [RealNetworks, Inc., 6.0.12.1483] [C:\WINNT\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0] [C:\Program Files\Common Files\Real\Common\objb3201.dll] [RealNetworks, Inc., 0.1.0.6419] [C:\Program Files\Common Files\Real\Plugins\h263render.dll] [RealNetworks, Inc., 10.0.0.239] [C:\Program Files\Common Files\Real\Plugins\3gppttrenderer.dll] [RealNetworks, Inc., 10.0.0.1316] [C:\Program Files\Common Files\Real\Plugins\amrff.dll] [RealNetworks, Inc., 10.0.0.1317] [C:\Program Files\Real\RealPlayer\rpplugins\rpap3260.dll] [RealNetworks, Inc., 6.0.9.3041] [C:\Program Files\Common Files\Real\Common\pnrs3260.dll] [RealNetworks, Inc., 6.0.9.4070] [C:\Program Files\Real\RealPlayer\lang\cdplay_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\dbcomp_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\embed_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\gemctl_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\pngui_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\pdgenxfer_cn.dll] [N/A, N/A] [C:\Program Files\Real\RealPlayer\lang\rjctl_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjeq_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjres_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjskin_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjviz_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjfade_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjdlg_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjmisc_cn.dll] [RealNetworks, Inc., 6.0.12.298]
kuku2 初生襁褓狮帖子:10 注册: 2006-12-15 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT