日志.怀疑自己中估灰鸽子Trojan.huigezi.e - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛日志.怀疑自己中估灰鸽子Trojan.huigezi.e

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

日志.怀疑自己中估灰鸽子Trojan.huigezi.e

缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:	发表于： 2006-08-12 16:38 \| 显示全部短消息资料字号：小中大 1楼日志.怀疑自己中估灰鸽子Trojan.huigezi.e 2006-08-12,16:26:42 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <ehTray><C:\WINDOWS\ehome\ehtray.exe> [Microsoft Corporation] <WPA><regedit.exe /s WXMCE_WPA_CRACK.reg> [Microsoft Corporation] <NvCplDaemon><; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation] <NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation] <kav><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"> [Kaspersky Lab] <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <WangWang><D:\Program Files\淘宝网\淘宝旺旺\WangWang.exe> [淘宝（中国）软件有限公司] <Windows木马防火墙><C:\Documents and Settings\kwong123\桌面\Trojanwall_8.8\ftcsetup\Trojanwall.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll> [Kaspersky Lab] ================================== 启动文件夹服务 [卡巴斯基反病毒软件6.0 / AVP] <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab> [NVIDIA Display Driver Service / NVSvc] <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation> ================================== 浏览器加载项 [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD> [Web反病毒保护] {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [BitComet工具栏] {3F1ABCDB-A875-46c1-8345-B72A4567E486} <d:\Program Files\BitComet\BitCometBar\BitCometBar0.6.dll, N/A> [CEditCtrl Object] {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [&使用迅雷下载] <d:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <d:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> [上传到QQ网络硬盘] <D:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <D:\Program Files\Tencent\qq\AddPanel.htm, N/A> [添加到QQ表情] <D:\Program Files\Tencent\qq\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Program Files\Tencent\qq\SendMMS.htm, N/A> ================================== 正在运行的进程 [PID: 632][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 744][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 768][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\klogon.dll] <Kaspersky Lab><6.0.0.299> [PID: 820][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 832][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 980][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1040][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1124][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1172][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1244][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1524][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1756][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 2> [d:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll] <Kaspersky Lab><6.0.0.299> [C:\WINDOWS\system32\JPWB.IME] <常诚研制><4.00.950> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] <Kaspersky Lab><1.0.6.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] <Kaspersky Lab><6.0.0.299> [C:\WINDOWS\system32\nvcpl.dll] <NVIDIA Corporation><6.14.10.8421> [C:\WINDOWS\system32\NVRSZHC.DLL] <NVIDIA Corporation><6.14.10.8421> [C:\WINDOWS\system32\nvshell.dll] <N/A><N/A> [PID: 1824][C:\WINDOWS\ehome\ehtray.exe] <Microsoft Corporation><5.1.2700.2180 (private/xpsp_mce.040810-0205)> [PID: 1848][D:\Program Files\淘宝网\淘宝旺旺\WangWang.exe] <淘宝（中国）软件有限公司><1, 6, 6, 616> [D:\Program Files\淘宝网\淘宝旺旺\AliViewCtrl.dll] <vline><1, 0, 0, 1> [D:\Program Files\淘宝网\淘宝旺旺\VLNetwork.dll] <><1, 0, 0, 6> [D:\Program Files\淘宝网\淘宝旺旺\AliViewMedia.dll] <vline><1, 0, 0, 1> [D:\Program Files\淘宝网\淘宝旺旺\VideoCAP.dll] <><1, 0, 0, 4> [D:\Program Files\淘宝网\淘宝旺旺\VLAudio.dll] <><1, 0, 0, 4> [D:\Program Files\淘宝网\淘宝旺旺\JsmShow.dll] <><1, 0, 0, 3> [D:\Program Files\淘宝网\淘宝旺旺\Ali_Res.DLL] <N/A><N/A> 2006-08-12 18:49:25
缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:	分享到：

缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:	发表于： 2006-08-12 16:39 \| 显示全部短消息资料字号：小中大 2楼 [D:\Program Files\淘宝网\淘宝旺旺\RichOne.dll] <淘宝(中国)软件有限公司><1.0.0.1> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] <Kaspersky Lab><1.0.6.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] <Kaspersky Lab><6.0.0.299> [D:\Program Files\淘宝网\淘宝旺旺\WangWangX.dll] <><1, 0, 0, 1> [PID: 1856][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 156][C:\WINDOWS\eHome\ehRecvr.exe] <Microsoft Corporation><5.1.2700.2180 (private/xpsp_mce.040810-0205)> [C:\WINDOWS\system32\sbe.dll] <N/A><N/A> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [PID: 204][C:\WINDOWS\eHome\ehSched.exe] <Microsoft Corporation><5.1.2700.2180 (private/xpsp_mce.040810-0205)> [PID: 252][C:\WINDOWS\system32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.8421> [PID: 2124][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2336][C:\WINDOWS\system32\dllhost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2496][C:\WINDOWS\eHome\ehmsas.exe] <Microsoft Corporation><5.1.2700.2180 (private/xpsp_mce.040810-0205)> [PID: 2788][C:\WINDOWS\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2948][D:\Program Files\Maxthon\Maxthon.exe] <Maxthon International Ltd.><1, 5, 6, 42> [D:\Program Files\Maxthon\maxzlib.dll] < ><1, 0, 0, 2> [d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 2> [D:\Program Files\Maxthon\Services\RealTime\real_time.dll] <><1, 0, 0, 1> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] <Kaspersky Lab><1.0.6.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] <Kaspersky Lab><6.0.0.299> [C:\WINDOWS\system32\macromed\flash\flash.ocx] <Macromedia, Inc.><6,0,79,0> [C:\WINDOWS\system32\JPWB.IME] <常诚研制><4.00.950> [PID: 3996][D:\Program Files\Tencent\qq\QQ.exe] <TENCENT><0, 0, 0, 0> [D:\Program Files\Tencent\qq\CoralAssist.DLL] <Coral Team><4.5.0 build 20060515> [D:\Program Files\Tencent\qq\CoralQQ.DLL] <Coral Team><4.5.1 Build 20060620> [D:\Program Files\Tencent\qq\ipsearcher.dll] <><1.0.0.3> [D:\Program Files\Tencent\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQHelperDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160> [D:\Program Files\Tencent\qq\QQAPI.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4> [D:\Program Files\Tencent\qq\LoginCtrl.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1> [D:\Program Files\Tencent\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1> [D:\Program Files\Tencent\qq\QQRes.dll] <tencent><1, 0, 0, 1> [D:\Program Files\Tencent\qq\WizardCtrl.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQMainFrame.dll] <N/A><N/A> [C:\WINDOWS\system32\macromed\flash\flash.ocx] <Macromedia, Inc.><6,0,79,0> [D:\Program Files\Tencent\qq\CQQApplication.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\NewSkin.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\HostingMgr.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\CameraDll.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\MailSummary.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQSpace.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQAllInOne.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\GroupLive.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\SCCore.dll] <N/A><N/A> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQGroupMng.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\UserDefinedHead.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQPlugin.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQConfigPlugin.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\LongConnection.dll] <tencent><5, 0, 200, 160> [D:\Program Files\Tencent\qq\QQCustomFace.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQPet.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\PhoneAPI.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\DialerAllinOne.dll] <tencent><1, 4, 0, 0> [D:\Program Files\Tencent\qq\GroupConnection.dll] <Tencent><5, 0, 202, 170> [D:\Program Files\Tencent\qq\FlashAvatarDll.dll] <><1, 4, 0, 1> [D:\Program Files\Tencent\qq\QQAvatar.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\ImageOle.dll] <TODO: <Company name>><1.0.0.1> [D:\Program Files\Tencent\qq\QQFileTransfer.dll] <Tencent><5, 0, 202, 180> [D:\Program Files\Tencent\qq\QQSceneMng.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQSettingCtrl.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\QQSysMsgMng.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\BQQApplication.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\ShareFiles.dll] <N/A><N/A> [D:\Program Files\Tencent\qq\QQZip.dll] <tencent><0, 3, 2, 4> [D:\Program Files\Tencent\qq\CommercesMng.dll] <><1, 0, 0, 1> [D:\Program Files\Tencent\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2> [D:\Program Files\Tencent\qq\QQUdpGetFileLib.dll] <tencent><0, 2, 2, 3> [D:\Program Files\Tencent\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200> [D:\Program Files\Tencent\qq\QQPhoneHelper.dll] <腾讯科技（深圳）有限公司><2, 0, 6, 60> [PID: 1488][D:\Program Files\Tencent\qq\TIMPlatform.exe] <tencent><0, 3, 1, 8> [D:\Program Files\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4> [PID: 2944][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3076][D:\Program Files\BitComet\BitComet.exe] <www.BitComet.com><0.70> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] <Kaspersky Lab><1.0.6.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] <Kaspersky Lab><6.0.0.299> [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] <Kaspersky Lab><6.0.0.299> [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] <Kaspersky Lab><6.0.0.299> [PID: 1560][E:\Download\扫描系统程序\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [E:\Download\扫描系统程序\SREng2\Plugins\SREngPluginDemo.SRE] <Smallfrogs Studio><1, 1, 1, 0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:

缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:	发表于： 2006-08-12 16:57 \| 显示全部短消息资料字号：小中大 3楼 HijackThis_zww汉化版扫描日志 V1.99.1 保存于 16:47:46, 日期 2006-8-12 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe D:\Program Files\淘宝网\淘宝旺旺\WangWang.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\eHome\ehmsas.exe C:\WINDOWS\system32\conime.exe D:\Program Files\Maxthon\Maxthon.exe D:\Program Files\Tencent\qq\QQ.exe D:\Program Files\Tencent\qq\TIMPlatform.exe C:\WINDOWS\system32\svchost.exe D:\Program Files\BitComet\BitComet.exe E:\Download\扫描系统程序\HijackThis1991zww.exe O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - d:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll O3 - IE工具栏增项: BitComet工具栏 - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - d:\Program Files\BitComet\BitCometBar\BitCometBar0.6.dll O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - 启动项HKLM\\Run: [WPA] regedit.exe /s WXMCE_WPA_CRACK.reg O4 - 启动项HKLM\\Run: [NvCplDaemon] ; RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - 启动项HKLM\\Run: [NvMediaCenter] ; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - 启动项HKLM\\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" O4 - 启动项HKLM\\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [WangWang] D:\Program Files\淘宝网\淘宝旺旺\WangWang.exe O4 - 启动项HKLM\\Run: [Windows木马防火墙] C:\Documents and Settings\kwong123\桌面\Trojanwall_8.8\ftcsetup\Trojanwall.exe O4 - 启动项HKLM\\Run: [WebInsight] D:\Program Files\IBE\WebInsight\WIDaemon.exe -auto O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - IE右键菜单中的新增项目: &使用迅雷下载 - d:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - d:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Program Files\Tencent\qq\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Program Files\Tencent\qq\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\qq\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Program Files\Tencent\qq\SendMMS.htm O9 - 浏览器额外的按钮: Web反病毒保护 - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - 浏览器额外的“工具”菜单项: Web反病毒保护 - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - 浏览器额外的“工具”菜单项: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{8728C116-347C-4E3D-8511-D88B9B8D8D89}: NameServer = 202.96.128.86,202.96.128.166 O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O23 - NT 服务: 卡巴斯基反病毒软件6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing) O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - NT 服务: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:

缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:	发表于： 2006-08-12 17:16 \| 显示全部短消息资料字号：小中大 4楼 ,,,,,,
缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:

缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:	发表于： 2006-08-12 18:55 \| 显示全部短消息资料字号：小中大 5楼其实06个三个野系咩黎咖???
缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:

缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:	发表于： 2006-08-12 18:57 \| 显示全部短消息资料字号：小中大 6楼点解我用忧化大师个阵查到有"UC聊天工具Trojan.huigezi.e"呢个野.端口1027..系咪报错哩..忧化大师
缘来系我初生襁褓狮帖子:52 注册: 2005-08-14 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT