最近电脑老出问题哪位大大帮小弟看看 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛最近电脑老出问题哪位大大帮小弟看看

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

最近电脑老出问题哪位大大帮小弟看看

痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:	发表于： 2006-07-15 22:47 \| 显示全部短消息资料字号：小中大 1楼最近电脑老出问题哪位大大帮小弟看看最近电脑老出问题哪位大大帮小弟看看,我用HIJACKTHIS扫描了一下,哪位老大帮忙解决一下 Logfile of HijackThis v1.99.1 Scan saved at 22:32:01, on 2006-7-15 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Tencent\TT\TTraveler.exe C:\Program Files\Rising\Rav\RavMon.exe C:\WINDOWS\System32\conime.exe C:\Program Files\Rising\Rav\CCenter.exe C:\Program Files\Rising\Rav\RavTask.exe C:\Program Files\Rising\Rav\Ravmond.exe C:\Program Files\Rising\Rav\RavStub.exe C:\Downloads\sreng2\SREng2\SREng.exe C:\Downloads\HijackThis.exe O1 - Hosts: 218.5.76.198 www.hk00852.net O1 - Hosts: 218.5.76.198 hk00852.net O1 - Hosts: 218.5.76.198 www.fc55.net O1 - Hosts: 218.5.76.198 fc55.net O1 - Hosts: 218.5.76.198 www.fu66.net O1 - Hosts: 218.5.76.198 fu66.net O1 - Hosts: 218.5.76.198 www.fu77.com O1 - Hosts: 218.5.76.198 fu77.com O1 - Hosts: 218.5.76.198 www.fu77.net O1 - Hosts: 218.5.76.198 fu77.net O1 - Hosts: 218.5.76.198 www.futan.cc O1 - Hosts: 218.5.76.198 futan.cc O1 - Hosts: 218.5.76.198 www.fystk.com O1 - Hosts: 218.5.76.198 fystk.com O1 - Hosts: 218.5.76.198 www.gg789.com O1 - Hosts: 218.5.76.198 gg789.com O1 - Hosts: 218.5.76.198 www.h10000.com O1 - Hosts: 218.5.76.198 h10000.com O1 - Hosts: 218.5.76.198 www.h538.com O1 - Hosts: 218.5.76.198 h538.com O1 - Hosts: 218.5.76.198 www.hao7k.com O1 - Hosts: 218.5.76.198 hao7k.com O1 - Hosts: 218.5.76.198 www.fc55.com O1 - Hosts: 218.5.76.198 fc55.com O1 - Hosts: 218.5.76.198 www.hj7788.com O1 - Hosts: 218.5.76.198 hj7788.com O1 - Hosts: 218.5.76.198 www.cpzx.cn O1 - Hosts: 218.5.76.198 cpzx.cn O1 - Hosts: 218.5.76.198 www.hk111.com O1 - Hosts: 218.5.76.198 hk111.com O1 - Hosts: 218.5.76.198 www.hk1888.net O1 - Hosts: 218.5.76.198 hk1888.net O1 - Hosts: 218.5.76.198 www.hk5.net O1 - Hosts: 218.5.76.198 hk5.net O1 - Hosts: 218.5.76.198 www.hk6.cn O1 - Hosts: 218.5.76.198 hk6.cn O1 - Hosts: 218.5.76.198 www.hk644.net O1 - Hosts: 218.5.76.198 hk644.net O1 - Hosts: 218.5.76.198 www.haotxbb.com O1 - Hosts: 218.5.76.198 haotxbb.com O1 - Hosts: 218.5.76.198 www.cctv100.com O1 - Hosts: 218.5.76.198 cctv100.com O1 - Hosts: 218.5.76.198 www.aa5588.com O1 - Hosts: 218.5.76.198 aa5588.com O1 - Hosts: 218.5.76.198 www.aa5588.net O1 - Hosts: 218.5.76.198 aa5588.net O1 - Hosts: 218.5.76.198 www.ab10000.com O1 - Hosts: 218.5.76.198 ab10000.com O1 - Hosts: 218.5.76.198 www.ab988.com O1 - Hosts: 218.5.76.198 ab988.com O1 - Hosts: 218.5.76.198 www.abc49.com O1 - Hosts: 218.5.76.198 abc49.com O1 - Hosts: 218.5.76.198 www.abc49.net O1 - Hosts: 218.5.76.198 abc49.net O1 - Hosts: 218.5.76.198 www.abctk.com O1 - Hosts: 218.5.76.198 abctk.com O1 - Hosts: 218.5.76.198 www.ap666.net O1 - Hosts: 218.5.76.198 ap666.net O1 - Hosts: 218.5.76.198 www.dddggg.com O1 - Hosts: 218.5.76.198 dddggg.com O1 - Hosts: 218.5.76.198 www.bj444.com O1 - Hosts: 218.5.76.198 bj444.com O1 - Hosts: 218.5.76.198 www.hk6666.com O1 - Hosts: 218.5.76.198 hk6666.com O1 - Hosts: 218.5.76.198 www.cctv100.net O1 - Hosts: 218.5.76.198 cctv100.net O1 - Hosts: 218.5.76.198 www.cg998.com O1 - Hosts: 218.5.76.198 cg998.com O1 - Hosts: 218.5.76.198 www.chinaty168.com O1 - Hosts: 218.5.76.198 chinaty168.com O1 - Hosts: 218.5.76.198 www.cm68.com O1 - Hosts: 218.5.76.198 cm68.com O1 - Hosts: 218.5.76.198 www.cp868.net O1 - Hosts: 218.5.76.198 cp868.net O1 - Hosts: 218.5.76.198 www.hk667.net O1 - Hosts: 218.5.76.198 hk667.net O1 - Hosts: 218.5.76.198 www.cx008.net O1 - Hosts: 218.5.76.198 cx008.net O1 - Hosts: 218.5.76.198 www.bb66.cn O1 - Hosts: 218.5.76.198 bb66.cn O1 - Hosts: 218.5.76.198 www.k589.net O1 - Hosts: 218.5.76.198 k589.net O1 - Hosts: 218.5.76.198 www.hk6666.com.cn O1 - Hosts: 218.5.76.198 hk6666.com.cn O1 - Hosts: 218.5.76.198 www.k128.com O1 - Hosts: 218.5.76.198 k128.com O1 - Hosts: 218.5.76.198 www.k1699.com O1 - Hosts: 218.5.76.198 k1699.com O1 - Hosts: 218.5.76.198 www.k1699.net O1 - Hosts: 218.5.76.198 k1699.net O1 - Hosts: 218.5.76.198 www.k233.com O1 - Hosts: 218.5.76.198 k233.com O1 - Hosts: 218.5.76.198 www.k4949.com O1 - Hosts: 218.5.76.198 k4949.com O1 - Hosts: 218.5.76.198 www.k55678.com O1 - Hosts: 218.5.76.198 k55678.com O1 - Hosts: 218.5.76.198 www.k55678.net O1 - Hosts: 218.5.76.198 k55678.net O1 - Hosts: 218.5.76.198 www.hongkonglhcbb.com O1 - Hosts: 218.5.76.198 hongkonglhcbb.com O1 - Hosts: 218.5.76.198 www.k589.cn O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{0896682E-BC6A-451C-8D83-CBC36B6E9C13}: NameServer = 222.47.62.22 211.98.4.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{0896682E-BC6A-451C-8D83-CBC36B6E9C13}: NameServer = 222.47.62.22 211.98.4.1 O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe 2006-07-16 03:57:56.903000000
痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:	分享到：

痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:	发表于： 2006-07-15 23:06 \| 显示全部短消息资料字号：小中大 2楼老大好了,帮我看看 2006-07-15,22:55:01 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [Microsoft Corporation] <Userinit><C:\WINDOWS\System32\Userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] ================================== 启动文件夹服务 [InstallDriver Table Manager / IDriverT] <"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation> [kavsvc / kavsvc] <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"><N/A> [NVIDIA Display Driver Service / NVSvc] <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation> [Rising Personal Firewall Service / RfwService] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Registry Protector / SOCEESe] <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A> [wint / wint] <C:\WINDOWS\System32\RunDLL32.exe "C:\WINDOWS\System32\wint\wint.dll",Run -r><N/A> ================================== 浏览器加载项 [apronA Class] {557B9038-FC87-453C-8B08-32D85F46EAC4} <C:\WINDOWS\Searche.dll, > [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> ================================== 正在运行的进程 [PID: 584][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 648][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 672][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1557 (xpsp2_gdr.040517-1325)> [PID: 724][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 736][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 900][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\System32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1000][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1136][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1192][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1468][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.1699 (xpsp2.050610-1533)> [C:\WINDOWS\System32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1476][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:

痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:	发表于： 2006-07-15 23:07 \| 显示全部短消息资料字号：小中大 3楼 [C:\WINDOWS\System32\mshell.dll] <><1, 0, 0, 1> [C:\WINDOWS\Searche.dll] <><1, 0, 0, 1> [C:\WINDOWS\System32\cdnns.dll] <CNNIC><2, 0, 0, 0> [C:\WINDOWS\System32\nvcpl.dll] <NVIDIA Corporation><6.14.10.8185> [C:\WINDOWS\System32\NVRSZHC.DLL] <NVIDIA Corporation><6.14.10.8185> [C:\WINDOWS\System32\nvshell.dll] <N/A><N/A> [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ywiper.dll] <N/A><1, 0, 1, 1014> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [e:\PROGRA~1\3721\ske\contmenu.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1640][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 544][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 644][C:\WINDOWS\System32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.8185> [PID: 1316][C:\Program Files\Tencent\TT\TTraveler.exe] <腾讯公司><3.0.0.250> [C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] <腾讯公司><1, 1, 0, 5> [C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll] <><1, 0, 0, 3> [C:\Program Files\Tencent\TT\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4> [C:\WINDOWS\System32\cdnns.dll] <CNNIC><2, 0, 0, 0> [C:\WINDOWS\System32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 304][C:\Program Files\Rising\Rav\RavMon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 600][C:\WINDOWS\System32\conime.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 2800][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 2300][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 2932][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 29> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17> [C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 3176][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 3528][C:\Downloads\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\WINDOWS\System32\cdnns.dll] <CNNIC><2, 0, 0, 0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:

痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:	发表于： 2006-07-15 23:40 \| 显示全部短消息资料字号：小中大 4楼老大,我做完了,可是我发现个问题,网络连接后本来在右下角瑞星那小雨伞旁边的连接标志不显示了,帮我看看啊!!! 2006-07-15,23:26:11 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup> [NVIDIA Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [Microsoft Corporation] <Userinit><C:\WINDOWS\System32\Userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] ================================== 启动文件夹服务 [InstallDriver Table Manager / IDriverT] <"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation> [kavsvc / kavsvc] <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"><N/A> [NVIDIA Display Driver Service / NVSvc] <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation> [Rising Personal Firewall Service / RfwService] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 浏览器加载项 [apronA Class] {557B9038-FC87-453C-8B08-32D85F46EAC4} <C:\WINDOWS\Searche.dll, N/A> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> ================================== 正在运行的进程 [PID: 584][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 648][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 672][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1557 (xpsp2_gdr.040517-1325)> [PID: 724][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 736][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 900][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\System32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1000][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 1028][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1160][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1220][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1236][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 29> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9> [PID: 1460][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ywiper.dll] <N/A><1, 0, 1, 1014> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [e:\PROGRA~1\3721\ske\contmenu.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1596][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.1699 (xpsp2.050610-1533)> [C:\WINDOWS\System32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1736][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 1764][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 448][C:\Downloads\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:

痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:	发表于： 2006-07-15 23:52 \| 显示全部短消息资料字号：小中大 5楼本来网络连接后会在又下角显示一个连接标志的,就在瑞星的小雨伞旁边,现在看不到了附件: 文件名:7121422006715234503.BMP 下载次数:1648 文件类型:application/octet-stream 文件大小: 上传时间:2006-7-15 23:52:53 描述:
痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:

痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:	发表于： 2006-07-16 00:00 \| 显示全部短消息资料字号：小中大 6楼晕了,音响没声音了,55555 在帮我弄下应该是这一项O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE 管声音的怎么恢复
痛恨病毒木马初生襁褓狮帖子:12 注册: 2006-07-15 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT