中了灰鸽子变种，大师帮忙看一下结果 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛中了灰鸽子变种，大师帮忙看一下结果

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

2 / 2 页

跳转页

中了灰鸽子变种，大师帮忙看一下结果

tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近	发表于： 2007-08-08 19:27 \| 显示全部短消息资料字号：小中大 11楼 ================================== 正在运行的进程 [PID: 640 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 720 / SYSTEM][\??\E:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 744 / SYSTEM][\??\E:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [E:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 788 / SYSTEM][E:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 800 / SYSTEM][E:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 956 / SYSTEM][E:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1032 / NETWORK SERVICE][E:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1124 / SYSTEM][E:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 1144 / SYSTEM][E:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [E:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057)] [PID: 1184 / NETWORK SERVICE][E:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1332 / LOCAL SERVICE][E:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1360 / SYSTEM][E:\PROGRAM FILES\RISING\RAV\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 49] [E:\PROGRAM FILES\RISING\RAV\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [E:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [E:\PROGRAM FILES\RISING\RAV\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [E:\PROGRAM FILES\RISING\RAV\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [E:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [E:\PROGRAM FILES\RISING\RAV\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [E:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [E:\PROGRAM FILES\RISING\RAV\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [E:\PROGRAM FILES\RISING\RAV\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [E:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [E:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [E:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [E:\PROGRAM FILES\RISING\RAV\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [E:\PROGRAM FILES\RISING\RAV\psapi.dll] [Microsoft Corporation, 4.00] [E:\PROGRAM FILES\RISING\RAV\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [E:\PROGRAM FILES\RISING\RAV\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 14] [E:\PROGRAM FILES\RISING\RAV\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [E:\PROGRAM FILES\RISING\RAV\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [E:\PROGRAM FILES\RISING\RAV\HookCont.dll] [Rising, 19, 0, 0, 0] [E:\Program Files\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6] [E:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30] [E:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [E:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [E:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [E:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 73] [E:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36] [E:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [E:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [E:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20] [E:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 24] [E:\Program Files\Rising\Rav\RsVM.dll] [, 19, 0, 0, 20] [E:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 48] [E:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [E:\Program Files\Rising\Rav\ScanNet.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [E:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [E:\Program Files\Rising\Rav\ExtMail.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [PID: 1480 / SYSTEM][E:\Program Files\Rising\Rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 35] [E:\Program Files\Rising\Rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 3] [E:\Program Files\Rising\Rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 2] [E:\Program Files\Rising\Rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 10] [E:\Program Files\Rising\Rfw\psapi.dll] [Microsoft Corporation, 4.00] [E:\Program Files\Rising\Rfw\MonDrv.dll] [rs, 1, 0, 0, 4] [E:\Program Files\Rising\Rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 5] [E:\Program Files\Rising\Rfw\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [PID: 1556 / SYSTEM][E:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe] [Symantec Corporation, 103.0.3.8] [E:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [E:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [E:\Program Files\Common Files\Symantec Shared\ccL30.dll] [Symantec Corporation, 103.0.3.8] [E:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.0.3.8] [E:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 103.0.3.8] [PID: 1600 / SYSTEM][E:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe] [Symantec Corporation, 103.0.3.8] [E:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [E:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [E:\Program Files\Common Files\Symantec Shared\ccL30.dll] [Symantec Corporation, 103.0.3.8] [E:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.0.3.8] [E:\PROGRA~1\COMMON~1\SYMANT~1\CCLOGIN.DLL] [Symantec Corporation, 103.0.3.8] [E:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL] [Symantec Corporation, 103.0.3.8] [PID: 1716 / SYSTEM][E:\PROGRAM FILES\RISING\RAV\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [E:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [E:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 1916 / SYSTEM][E:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [E:\WINDOWS\system32\mdimon.dll] [Microsoft Corporation, 11.3.1897.0]
tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近

tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近	发表于： 2007-08-08 19:27 \| 显示全部短消息资料字号：小中大 12楼 [E:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll] [Microsoft Corporation, 11.3.1897.0] [PID: 2012 / JuanJuan][E:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [E:\WINDOWS\system32\msdmo.dll] [, ] [E:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [E:\WINDOWS\system32\dfshim.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [E:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300)] [E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Shfusion.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Fusion.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\culture.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [E:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [E:\Program Files\WinRAR\rarext.dll] [N/A, ] [E:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [PID: 492 / JuanJuan][E:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.10] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 516 / JuanJuan][E:\Program Files\Common Files\Symantec Shared\ccApp.exe] [Symantec Corporation, 103.0.3.8] [E:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [E:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [E:\Program Files\Common Files\Symantec Shared\ccL30.dll] [Symantec Corporation, 103.0.3.8] [E:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.0.3.8] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL] [Symantec Corporation, 103.0.3.8] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL] [Symantec Corporation, 103.0.3.8] [E:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 103.0.3.8] [E:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 103.0.3.8] [PID: 524 / JuanJuan][E:\Program Files\Norton Ghost\Agent\GhostTray.exe] [Symantec Corporation, 10.0.0.8400] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Common Files\Symantec Shared\ccAlert.dll] [Symantec Corporation, 103.0.3.8] [E:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [E:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [E:\Program Files\Common Files\Symantec Shared\ccL30.dll] [Symantec Corporation, 103.0.3.8] [E:\Program Files\Norton Ghost\Shared\VProAuto.dll] [Symantec Corporation, 10.0.0.8400] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\Program Files\Norton Ghost\Agent\DrmLicense.DLL] [Symantec Corporation, 10.0.0.8400] [E:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [E:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.0.90] [PID: 532 / JuanJuan][E:\Program Files\360safe\safemon\360Tray.exe] [奇虎网, 3, 5, 2, 1001] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\360safe\safemon\SafeKrnl.dll] [奇虎网, 3, 5, 0, 1001] [E:\Program Files\360safe\AntiAdwa.dll] [360Safe.com, 3, 5, 1, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\Program Files\360safe\live.dll] [360safe.com, 1, 0, 1, 1018] [PID: 552 / JuanJuan][E:\Program Files\Rising\Rfw\rfwmain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 72] [E:\Program Files\Rising\Rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [E:\Program Files\Rising\Rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [E:\Program Files\Rising\Rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [E:\Program Files\Rising\Rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [E:\Program Files\Rising\Rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 568 / JuanJuan][E:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4] [E:\WINDOWS\system32\msdmo.dll] [, ] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 660 / JuanJuan][E:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6] [E:\Program Files\Rising\AntiSpyware\iep_ctrl.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [PID: 692 / JuanJuan][E:\Program Files\D-Tools\daemon.exe] [DAEMON'S HOME, 3.44.0.0] [E:\WINDOWS\daemon.dll] [, 3.44.0.0] [E:\Program Files\D-Tools\PFCTOC.DLL] [Padus(R), Inc., 1, 0, 0, 12] [E:\Program Files\D-Tools\Plugins\Images\bw5mount.dll] [, 1.0.1.0] [E:\Program Files\D-Tools\Plugins\Images\ccdmount.dll] [GENERIC, 1.02.0.0] [E:\Program Files\D-Tools\Plugins\Images\mdsmount.dll] [GENERIC, 1.01.0.0] [E:\Program Files\D-Tools\Plugins\Images\nrgmount.dll] [GENERIC, 1.02.0.0] [E:\Program Files\D-Tools\Plugins\Images\pdimount.dll] [GENERIC, 1.01.0.0] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 868 / JuanJuan][E:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [E:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [E:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [E:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [E:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近

tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近	发表于： 2007-08-08 19:27 \| 显示全部短消息资料字号：小中大 13楼 [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 972 / JuanJuan][E:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45] [E:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [E:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [E:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [E:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [E:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [E:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [E:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [E:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 1068 / JuanJuan][E:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 1656 / JuanJuan][E:\Program Files\jj4\jiajiasr.exe] [加加工作组, 4, 1, 0, 47] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 3360 / SYSTEM][E:\Program Files\Norton Ghost\Agent\VProSvc.exe] [Symantec Corporation, 10.0.0.8400] [E:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [E:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [E:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.0.90] [E:\Program Files\Norton Ghost\Shared\VProObj.dll] [Symantec Corporation, 10.0.0.8400] [E:\Program Files\Norton Ghost\Shared\NotifyHandler.dll] [Symantec Corporation, 10.0.0.8400] [E:\Program Files\Norton Ghost\shared\ErrorGui.dll] [Symantec Corporation, 10.0.0.8400] [E:\Program Files\Norton Ghost\Shared\VProScheduler.dll] [Symantec Corporation, 10.0.0.8400] [E:\Program Files\Norton Ghost\Agent\VProImaging.dll] [Symantec Corporation, 10.0.0.8400] [E:\Program Files\Norton Ghost\Agent\gwrks32.dll] [GEAR-Software, 3.52.001.03] [E:\Program Files\Norton Ghost\Agent\GEARAW32.dll] [GEAR-Software, 3.52.001.03] [E:\Program Files\Norton Ghost\Agent\gwlangEN.dll] [GEAR-Software, 3.52.001.03] [PID: 3480 / SYSTEM][E:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 300 / SYSTEM][E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe] [Symantec Corporation, 1, 8, 54, 534] [E:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcnet.dll] [Symantec Corporation, 1, 8, 54, 534] [E:\WINDOWS\system32\MSVCR71.DLL] [Microsoft Corporation, 7.10.3052.4] [PID: 672 / LOCAL SERVICE][E:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3584 / JuanJuan][E:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057)] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057)] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 3468 / JuanJuan][E:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 2752 / JuanJuan][E:\Program Files\Rising\Rav\Rav.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36] [E:\Program Files\Rising\Rav\PlugIn\RsPgScan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17] [E:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [E:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [E:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [E:\Program Files\Rising\Rav\RavUI.Dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30] [E:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [E:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [E:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [PID: 2920 / JuanJuan][E:\Program Files\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 4080 / JuanJuan][E:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3424] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 360 / JuanJuan][E:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [E:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [E:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [E:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL] [Microsoft Corporation, 11.0.5510] [PID: 220 / JuanJuan][G:\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [E:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [E:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [G:\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["E:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI Error. [E:\WINDOWS\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeDebugPrivilege [PID = 532, E:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 532, E:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 552, E:\PROGRAM FILES\RISING\RFW\RFWMAIN.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 568, E:\WINDOWS\VM_STI.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 660, E:\PROGRAM FILES\RISING\ANTISPYWARE\RUNIEP.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 692, E:\PROGRAM FILES\D-TOOLS\DAEMON.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 868, E:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 972, E:\PROGRAM FILES\RISING\RAV\RAVMON.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1656, E:\PROGRAM FILES\JJ4\JIAJIASR.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2752, E:\PROGRAM FILES\RISING\RAV\RAV.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2920, E:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近

tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近	发表于： 2007-08-08 19:28 \| 显示全部短消息资料字号：小中大 14楼现在我的电脑可以被别人控制，老师帮帮我，谢谢！
tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近

tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近	发表于： 2007-08-08 20:11 \| 显示全部短消息资料字号：小中大 15楼能不能指点一下怎么删除？
tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近

tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近	发表于： 2007-08-08 22:00 \| 显示全部短消息资料字号：小中大 16楼受累
tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近

tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近	发表于： 2007-08-08 22:53 \| 显示全部短消息资料字号：小中大 17楼不知道啊，帮帮忙吧
tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近

tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近	发表于： 2007-08-09 21:29 \| 显示全部短消息资料字号：小中大 18楼各位大师受累帮帮忙
tjcum210210 卡卡反病毒小组帖子:1071 注册: 2006-01-16 来自:清新阳光家附近

<<上一主题|下一主题>>

12

2 / 2 页

跳转页

页面顶部

Powered by Discuz!NT