电脑中了Rootkit,请高手指教 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛电脑中了Rootkit,请高手指教

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

电脑中了Rootkit,请高手指教

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 09:50 \| 只看楼主短消息资料字号：小中大 1楼电脑中了Rootkit,请高手指教我的日志当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Symantec\SPA\smc.exe C:\Program Files\Rising\Rav\Ravmond.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Rising\Rav\RavStub.exe C:\WINDOWS\system32\drivers\CDAC11BA.EXE C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Rising\Rav\RavService.exe C:\Program Files\Rising\AntiSpyware\runiep.exe C:\WINDOWS\SOUNDMAN.EXE D:\Program Files\淘宝旺旺\WangWang.EXE C:\Program Files\Rising\Rav\RavTray.exe C:\Program Files\Rising\Rav\RavTask.exe C:\Program Files\Rising\Rav\Ravmon.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Symantec\SPA\SmcGui.exe C:\Program Files\Internet Explorer\iexplore.exe D:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX03.969\系统扫描\HijackThis1991zww.exe R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\SSPlus\SAddr.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\SSPlus\SAddr.dll O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program Files\Windows Desktop Search\dsWebAllow.dll O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll O2 - BHO: (no name) - {D3626E66-B13B-C628-ACDF-BDABCFA265E1} - C:\Program Files\Common Files\Relive.dll (file missing) O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - E:\全国专业技术人员职称英语等级考试辅导光盘(2006年)\msdxm.ocx O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [zxsa] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zxso.exe O4 - 启动项HKLM\\Run: [runeip] "C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup O4 - 启动项HKLM\\Run: [StormCodec_Helper] "D:\Program Files\Storm Codec\StormSet.exe" /S /opti O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE O4 - 启动项HKLM\\Run: [WangWang] "D:\Program Files\淘宝旺旺\WangWang.EXE" O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - 启动项HKLM\\Run: [RavTray] "C:\Program Files\Rising\Rav\RavTray.exe" O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O8 - IE右键菜单中的新增项目: 使用迅雷下载 - d:\Program Files\Thunder\Program\GetUrl.htm O8 - IE右键菜单中的新增项目: 使用迅雷下载全部链接 - d:\Program Files\Thunder\Program\GetAllUrl.htm O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\QQ\AddEmotion.htm O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [TBH] 中文搜搜 O12 - IE插件，支持文件类型.UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{2DA48B82-8023-4937-92BF-3BA212F45441}: NameServer = 202.102.152.3 O23 - NT 服务: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - NT 服务: RavService - Unknown owner - C:\Program Files\Rising\Rav\RavService.exe" /service (file missing) O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe O23 - NT 服务: Symantec Protection Agent 5.1 (SmcService) - Symantec Corporation. - C:\Program Files\Symantec\SPA\smc.exe 谢谢 [用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) 2008-01-04 10:01:59
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	分享到：

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 09:55 \| 只看楼主短消息资料字号：小中大 2楼 RootKit.Win32.Undef.i
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:

天月来了版主帖子:76904 注册: 2007-02-06 来自:	发表于： 2008-01-04 10:04 \| 短消息资料字号：小中大 3楼病毒文件名和路径。
天月来了版主帖子:76904 注册: 2007-02-06 来自:

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 10:05 \| 只看楼主短消息资料字号：小中大 4楼启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher] <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Windows XP Publisher] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher] <zxsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zxso.exe> [N/A] <runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup> [Beijing Rising Technology Co., Ltd.] <StormCodec_Helper><"D:\Program Files\Storm Codec\StormSet.exe" /S /opti> [] <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <nwiz><nwiz.exe /installquiet /keeploaded /nodetect> [] <SoundMan><SOUNDMAN.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <WangWang><"D:\Program Files\淘宝旺旺\WangWang.EXE"> [淘宝（中国）软件有限公司] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A] <RavTray><"C:\Program Files\Rising\Rav\RavTray.exe"> [Rising] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] <N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [Microsoft Corporation]
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 10:06 \| 只看楼主短消息资料字号：小中大 5楼服务 [C-DillaCdaC11BA / C-DillaCdaC11BA][Running/Auto Start] <C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation> [RavService / RavService][Running/Auto Start] <"C:\Program Files\Rising\Rav\RavService.exe" /service><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon][Running/Auto Start] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Symantec Protection Agent 5.1 / SmcService][Running/Auto Start] <C:\Program Files\Symantec\SPA\smc.exe><Symantec Corporation.> ================================== 驱动程序 [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [Rising TDI Base Driver / BaseTDI][Running/Auto Start] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [CdaC15BA / CdaC15BA][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS><Macrovision Europe Ltd> [ExpScaner / ExpScaner][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\ExpScan.sys><> [Hardlock / Hardlock][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\hardlock.sys><Aladdin Knowledge Systems Ltd.> [HOOKAPI / HOOKAPI][Stopped/Manual Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookApi.Sys><瑞星软件有限公司> [HookCont / HookCont][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><Beijing Rising Technology Co., Ltd.> [npkcrypt / npkcrypt][Running/Auto Start] <\??\D:\Program Files\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [nv / nv][Running/Manual Start] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions> [RsAntiSpyware / RsAntiSpyware][Running/Boot Start] <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising> [Realtek 10/100/1000 NIC Family all in one NDIS XP Driver / RTL8023xp][Running/Manual Start] <system32\DRIVERS\Rtlnicxp.sys><Realtek Semiconductor Corporation> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start] <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.> [SysGuard / SysGuard][Running/System Start] <\SystemRoot\System32\Drivers\Sysguard.sys><N/A> [SysPlant for NT / SysPlant][Running/Boot Start] <\SystemRoot\SYSTEM32\Drivers\SysPlant.sys><N/A> [Teefer for NT / Teefer][Running/Boot Start] <\SystemRoot\SYSTEM32\Drivers\Teefer.sys><Sygate Technologies, Inc.> [SyGate for NT, wg3n / wg3n][Running/Auto Start] <\SystemRoot\SYSTEM32\Drivers\wg3n.sys><Sygate Technologies, Inc.> [SyGate for NT, wg4n / wg4n][Running/Auto Start] <\SystemRoot\SYSTEM32\Drivers\wg4n.sys><Sygate Technologies, Inc.> [SyGate for NT, wg5n / wg5n][Running/Auto Start] <\SystemRoot\SYSTEM32\Drivers\wg5n.sys><Sygate Technologies, Inc.> [SyGate for NT, wg6n / wg6n][Running/Auto Start] <\SystemRoot\SYSTEM32\Drivers\wg6n.sys><Sygate Technologies, Inc.> [wpsdrvnt / wpsdrvnt][Running/System Start] <\??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys><Sygate Technologies, Inc.>
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 10:07 \| 只看楼主短消息资料字号：小中大 6楼浏览器加载项 [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [Tencent Browser Helper] {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\SSPlus\SAddr1.dll, Tencent> [dsWebAllowBHO Class] {2F85D76C-0569-466F-A488-493E6BD0E955} <C:\Program Files\Windows Desktop Search\dsWebAllow.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD> [] {D3626E66-B13B-C628-ACDF-BDABCFA265E1} <C:\Program Files\Common Files\Relive.dll, N/A> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <E:\全国专业技术人员职称英语等级考试辅导光盘(2006年)\msdxm.ocx, Microsoft Corporation> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [Tencent Browser Helper] {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\SSPlus\SAddr1.dll, Tencent> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <E:\全国专业技术人员职称英语等级考试辅导光盘(2006年)\msdxm.ocx, Microsoft Corporation> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation> [dsWebAllowBHO Class] {2F85D76C-0569-466F-A488-493E6BD0E955} <C:\Program Files\Windows Desktop Search\dsWebAllow.dll, Microsoft Corporation> [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [WangWangObj Class] {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} <D:\Program Files\淘宝旺旺\WangWangX4.dll, 阿里软件（中国）有限公司> [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [Adobe Acrobat 7.0 Browser Document] {CA8A9780-280D-11CF-A24D-444553540000} <D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroPDF.dll, Adobe Systems, Inc.> [AUDIO__MID Moniker Class] {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [] {D3626E66-B13B-C628-ACDF-BDABCFA265E1} <C:\Program Files\Common Files\Relive.dll, N/A> [使用迅雷下载] <d:\Program Files\Thunder\Program\GetUrl.htm, N/A> [使用迅雷下载全部链接] <d:\Program Files\Thunder\Program\GetAllUrl.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ表情] <D:\Program Files\QQ\AddEmotion.htm, N/A>
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 10:08 \| 只看楼主短消息资料字号：小中大 7楼正在运行的进程 [PID: 500 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 556 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 580 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 624 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [PID: 636 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [PID: 800 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [PID: 848 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [PID: 912 / SYSTEM][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 928 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)] [PID: 968 / SYSTEM][C:\Program Files\Symantec\SPA\smc.exe] [Symantec Corporation., 6.6.00.6469] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\Program Files\Symantec\SPA\Trident.dll] [Sygate Technologies, Inc., 6, 0, 0, 0] [C:\Program Files\Symantec\SPA\SyLog.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\Program Files\Symantec\SPA\SyLink.dll] [Sygate Technologies, Inc., 5, 5, 0, 0] [C:\Program Files\Symantec\SPA\DataMan.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\Program Files\Symantec\SPA\tfman.dll] [Sygate Technologies, Inc., 1.62.1200.0] [C:\Program Files\Symantec\SPA\tse.dll] [Sygate Technologies, Inc.,, 5, 5, 0, 0] [C:\Program Files\Symantec\SPA\PSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\Program Files\Symantec\SPA\SpNet.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\Program Files\Symantec\SPA\IdsTrafficPipe.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\Program Files\Symantec\SPA\wpsman.dll] [Sygate Technologies, Inc., 5, 5, 0, 0] [C:\Program Files\Symantec\SPA\wsman.dll] [Sygate Technologies, Inc., 2, 3, 3115, 0] [C:\Program Files\Symantec\SPA\SgHI.dll] [sygate, 1, 0, 0, 1] [C:\Program Files\Symantec\SPA\wgman.dll] [Sygate Technologies, Inc., 1.01.1222] [C:\Program Files\Symantec\SPA\Netport.dll] [Sygate Technologies, Inc., 5, 5, 0, 0] [C:\Program Files\Symantec\SPA\Res\SmcRc2052.dll] [Sygate Technologies, Inc., 5, 6, 0, 0] [C:\Program Files\Symantec\SPA\devman.plg] [sygate, 1, 0, 0, 1] [C:\Program Files\Symantec\SPA\sfman.plg] [, 1, 0, 0, 1] [C:\Program Files\Symantec\SPA\sgman.plg] [, 1, 0, 0, 1] [PID: 1024 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [PID: 1080 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [PID: 1096 / SYSTEM][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 41] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 12] [C:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 21]
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 10:09 \| 只看楼主短消息资料字号：小中大 8楼 [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\Program Files\Rising\Rav\psapi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 14] [C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\Program Files\Rising\Rav\HookCont.dll] [Rising, 19, 0, 0, 0] [C:\Program Files\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 31] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 94] [C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 38] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 23] [C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25] [C:\Program Files\Rising\Rav\RsVM.dll] [, 19, 0, 0, 23] [C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 64] [C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\ScanNet.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [C:\Program Files\Rising\Rav\RsStore.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\ExtMail.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [PID: 1612 / Administrator][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\WINDOWS\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] [Autodesk, 16.0.0.86] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.5.2005092300] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\TENCENT\SSPlus\SAddr.dll] [Tencent, 5, 0, 1, 18] [C:\Program Files\Windows Desktop Search\dsWebAllow.dll] [Microsoft Corporation, 02.06.5000.5378 (winmain(wmbla).060313-1257)] [C:\Program Files\Windows Desktop Search\zh-cn\dsWebAllowRes.dll.mui] [Microsoft Corporation, 02.06.5000.5378 (winmain(wmbla).060313-1257)] [C:\Program Files\Windows Desktop Search\dsWebAllowRes.dll] [Microsoft Corporation, 02.06.5000.5378 (winmain(wmbla).060313-1257)] [d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 2] [D:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [PID: 1784 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\WINDOWS\system32\mdimon.dll] [Microsoft Corporation, 11.3.2175.0] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll] [Microsoft Corporation, 11.3.2175.0] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [PID: 1892 / SYSTEM][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 224 / SYSTEM][C:\WINDOWS\system32\drivers\CDAC11BA.EXE] [Macrovision, 4.20.020] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [PID: 292 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8415] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [PID: 364 / SYSTEM][C:\Program Files\Rising\Rav\RavService.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 55] [C:\Program Files\Rising\Rav\DLCenter.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 3] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [PID: 600 / Administrator][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 4.0.0.19] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025]
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 10:11 \| 只看楼主短消息资料字号：小中大 9楼 ========Content======== [PID: 1344 / Administrator][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 51] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [PID: 1352 / Administrator][D:\Program Files\淘宝旺旺\WangWang.EXE] [淘宝（中国）软件有限公司, 1, 9, 6, 1221] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [D:\Program Files\淘宝旺旺\AliViewCtrl.dll] [vline, 1, 0, 0, 1] [D:\Program Files\淘宝旺旺\VLNetwork.dll] [, 1, 0, 0, 6] [D:\Program Files\淘宝旺旺\AliViewMedia.dll] [vline, 1, 0, 0, 1] [D:\Program Files\淘宝旺旺\VideoCAP.dll] [, 1, 0, 0, 4] [D:\Program Files\淘宝旺旺\VLAudio.dll] [, 1, 0, 0, 4] [D:\Program Files\淘宝旺旺\JsmShow.dll] [, 1, 0, 0, 3] [D:\Program Files\淘宝旺旺\ww_network.dll] [, 1, 0, 1, 18] [D:\Program Files\淘宝旺旺\riched32.dll] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [D:\Program Files\淘宝旺旺\RICHED20.dll] [Microsoft Corporation, 5.30.23.1221] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [D:\Program Files\淘宝旺旺\Ali_Res.DLL] [N/A, ] [D:\Program Files\淘宝旺旺\WangWangX4.dll] [阿里软件（中国）有限公司, 1, 0, 0, 1] [D:\Program Files\淘宝旺旺\RichOne.dll] [淘宝(中国)软件有限公司, 1.0.0.1] [D:\Program Files\淘宝旺旺\TBProgress.dll] [淘宝(中国)软件有限公司, 1.0.0.1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1448 / Administrator][C:\Program Files\Rising\Rav\RavTray.exe] [Rising, 19, 0, 0, 16] [C:\Program Files\Rising\Rav\RavUILib.dll] [, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RavTray936.dll] [Rising, 19, 0, 0, 16] [C:\Program Files\Rising\Rav\RsCommx.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\BDEngine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\BDEX.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 3] [C:\Program Files\Rising\Rav\BDLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [PID: 1496 / Administrator][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [PID: 1536 / Administrator][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 48] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [PID: 1580 / Administrator][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\WINDOWS\system32\nvshell.dll] [, ] [PID: 1588 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025]]
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:

becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:	发表于： 2008-01-04 10:12 \| 只看楼主短消息资料字号：小中大 10楼 [PID: 2428 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [PID: 2456 / Administrator][C:\Program Files\Symantec\SPA\SmcGui.exe] [Symantec Corporation., 6.6.00.6469] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\Program Files\Symantec\SPA\DataMan.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\Program Files\Symantec\SPA\SyLog.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\Program Files\Symantec\SPA\tse.dll] [Sygate Technologies, Inc.,, 5, 5, 0, 0] [C:\Program Files\Symantec\SPA\PSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\Program Files\Symantec\SPA\SpNet.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\Program Files\Symantec\SPA\IdsTrafficPipe.dll] [Sygate Technologies, Inc., 5. 5. 0. 0] [C:\Program Files\Symantec\SPA\wpsman.dll] [Sygate Technologies, Inc., 5, 5, 0, 0] [C:\Program Files\Symantec\SPA\tfman.dll] [Sygate Technologies, Inc., 1.62.1200.0] [C:\Program Files\Symantec\SPA\wsman.dll] [Sygate Technologies, Inc., 2, 3, 3115, 0] [C:\Program Files\Symantec\SPA\Res\SmcRc2052.dll] [Sygate Technologies, Inc., 5, 6, 0, 0] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\Program Files\Symantec\SPA\devman.plg] [sygate, 1, 0, 0, 1] [PID: 2844 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\WINDOWS\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86] [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.5.2005092300] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\TENCENT\SSPlus\SAddr.dll] [Tencent, 5, 0, 1, 18] [C:\Program Files\Windows Desktop Search\dsWebAllow.dll] [Microsoft Corporation, 02.06.5000.5378 (winmain(wmbla).060313-1257)] [C:\Program Files\Windows Desktop Search\zh-cn\dsWebAllowRes.dll.mui] [Microsoft Corporation, 02.06.5000.5378 (winmain(wmbla).060313-1257)] [C:\Program Files\Windows Desktop Search\dsWebAllowRes.dll] [Microsoft Corporation, 02.06.5000.5378 (winmain(wmbla).060313-1257)] [d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 2] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [D:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)] [PID: 2892 / Administrator][D:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE] [Microsoft Corporation, 11.0.6568] [C:\WINDOWS\SYSTEM32\SYSFER.DLL] [Sygate Technologies, Inc., 1.0.0] [C:\Program Files\Common Files\Microsoft Shared\office11\mso.dll] [Microsoft Corporation, 11.0.6568] [C:\WINDOWS\system32\nview.dll] [, ] [C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11025] [C:\Program Files\Common Files\Microsoft Shared\office11\riched20.dll] [Microsoft Corporation, 5.50.99.2010] [C:\Program Files\Rising\Rav\RsPlugIn.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [D:\PROGRA~1\MICROS~1\OFFICE11\ADDINS\SYMINPUT.DLL] [Microsoft Corporation, 1.02] [C:\WINDOWS\system32\MSVBVM60.DLL] [Microsoft Corporation, 6.00.9690] [C:\WINDOWS\system32\VB6CHS.DLL] [Microsoft Corporation, 6.00.8988] [C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.8415] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\SSSensor.dll] [Sygate Technologies, Inc., 5. 5. 0. 5] [C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\INTLNAME.DLL] [Microsoft Corporation, 11.0.6467] [C:\Program Files\Common Files\Microsoft Shared\Smart Tag\CHDATEST.DLL] [Microsoft Corporation, 2.00] [C:\Program Files\Common Files\Microsoft Shared\Smart Tag\Chinese Measurement Converter\CHMETCNV.DLL] [Microsoft Corp., 1.00] [C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\FNAME.DLL] [Microsoft Corporation, 11.0.5510] [C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\2052\stintl.dll] [Microsoft Corporation, 11.0.5510] [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpltuint.dll] [Hewlett-Packard Corporation, Microsoft Corporation, v4.67] [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpltdrv1.dll] [Hewlett-Packard Corporation, Microsoft Corporation, v4.67] [C:\Program Files\Common Files\Microsoft Shared\PROOF\MSSPELL3.DLL] [Microsoft Corporation, 1.1.6215] [C:\Program Files\Common Files\Microsoft Shared\PROOF\1033\MSGR3EN.DLL] [Microsoft Corporation, 3.1.7004] [D:\Program Files\Microsoft Office\OFFICE11\msostyle.dll] [Microsoft Corporation, 11.0.5510] [C:\WINDOWS\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86] [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] [Autodesk, 16.0.0.86]
becky20007 初生襁褓狮帖子:17 注册: 2008-01-04 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT