瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】我中了!已添加日志,帮我看一下!

1   1  /  1  页   跳转页

【求助】我中了!已添加日志,帮我看一下!

收藏
非常迷惑
头像
初生襁褓狮
  • 帖子:7
  • 注册: 2006-08-13
  • 来自:
发表于： 2006-08-13 15:12 | 显示全部 短消息 资料
字号： 小 中 大 1楼

【求助】我中了!已添加日志,帮我看一下!

我中了

我经理的笔记本中了，我用瑞星杀了50多个，可是还有，我又用瑞星光盘启动杀，又杀了60多个
可是系统起来后，还有，在Windows\system32下有1.exe,a.exe等好多,就是杀不掉,还有首页也被
改成www.ld123.com了,怎么来改不过来,瑞星的注册表工具和卡卡的系统修复我都试过了,都不行.
我还试过安铁诺和诺顿,也不行.我曾试着结束任务,我用卡卡的进程管理把进程结束到最少的时候,
我保存了一下日志(在下面),当然首页还是改不了,我用ghost恢复了以前的备份,可是今天一早,
经理又告诉我不好用了,我一看,瑞星的绿伞变成红伞了,我怎么弄也没变回来,请大虾帮我看一下,
我应该怎么办?
最后编辑2006-08-14 18:14:54
分享到：
gototop
 
非常迷惑
头像
初生襁褓狮
  • 帖子:7
  • 注册: 2006-08-13
  • 来自:
发表于： 2006-08-13 15:14 | 显示全部 短消息 资料
字号： 小 中 大 2楼

保存的日志如下:


[csrss.exe]
PID = 0x28c
CommandLine = H:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
    csrss.exe
    0x4a680000
    h:\windows\system32\csrss.exe
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Client Server Runtime Process
    2001-09-06 04:00:00

    ntdll.dll
    0x77f50000
    H:\WINDOWS\system32\ntdll.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    NT Layer DLL
    2001-09-06 04:00:00

    CSRSRV.dll
    0x75aa0000
    H:\WINDOWS\system32\csrsrv.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Client Server Runtime Process
    2001-09-06 04:00:00

    basesrv.dll
    0x75ab0000
    H:\WINDOWS\system32\basesrv.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows NT BASE API Server DLL
    2001-09-06 04:00:00

    winsrv.dll
    0x75ac0000
    H:\WINDOWS\system32\winsrv.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows Server DLL
    2001-09-06 04:00:00

    USER32.dll
    0x77d10000
    H:\WINDOWS\system32\user32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows XP USER API Client DLL
    2001-09-06 04:00:00

    KERNEL32.dll
    0x77e40000
    H:\WINDOWS\system32\kernel32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows NT BASE API Client DLL
    2001-09-06 04:00:00

    GDI32.dll
    0x77c40000
    H:\WINDOWS\system32\gdi32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    GDI Client DLL
    2001-09-06 04:00:00

    ADVAPI32.dll
    0x77da0000
    H:\WINDOWS\system32\advapi32.dll
    5.1.2600.0 (XPClient.010817-1148)
    Microsoft Corporation
    Advanced Windows 32 Base API
    2001-09-06 04:00:00

    RPCRT4.dll
    0x77c90000
    H:\WINDOWS\system32\rpcrt4.dll
    5.1.2600.0 (XPClient.010817-1148)
    Microsoft Corporation
    Remote Procedure Call Runtime
    2001-09-06 04:00:00

    LPK.DLL
    0x62c20000
    H:\WINDOWS\system32\lpk.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Language Pack
    2001-09-06 04:00:00

    USP10.dll
    0x72f10000
    H:\WINDOWS\system32\usp10.dll
    1.0407.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Uniscribe Unicode script processor
    2001-09-06 04:00:00

    sxs.dll
    0x75e00000
    H:\WINDOWS\system32\sxs.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Fusion 2.5
    2001-09-06 04:00:00
gototop
 
非常迷惑
头像
初生襁褓狮
  • 帖子:7
  • 注册: 2006-08-13
  • 来自:
发表于： 2006-08-13 15:15 | 显示全部 短消息 资料
字号： 小 中 大 3楼

[KillProc.exe]
PID = 0x68c
CommandLine = "H:\Program Files\Rising\KakaToolBar\KillProc.exe"
    KillProc.exe
    0x400000
    H:\Program Files\Rising\KakaToolBar\KillProc.exe
    2, 0, 0, 0
    Beijing Rising Technology Co., Ltd.
    KillProcess
    2006-08-12 11:01:07

    ntdll.dll
    0x77f50000
    H:\WINDOWS\system32\ntdll.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    NT Layer DLL
    2001-09-06 04:00:00

    kernel32.dll
    0x77e40000
    H:\WINDOWS\system32\kernel32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows NT BASE API Client DLL
    2001-09-06 04:00:00

    VERSION.dll
    0x77bd0000
    H:\WINDOWS\system32\version.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Version Checking and File Installation Libraries
    2001-09-06 04:00:00

    MFC42.DLL
    0x73d30000
    H:\WINDOWS\system32\mfc42.dll
    6.00.8665.0
    Microsoft Corporation
    MFCDLL Shared Library - Retail Version
    2001-09-06 04:00:00

    MSVCRT.dll
    0x77be0000
    H:\WINDOWS\system32\msvcrt.dll
    7.0.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows NT CRT DLL
    2001-09-06 04:00:00

    GDI32.dll
    0x77c40000
    H:\WINDOWS\system32\gdi32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    GDI Client DLL
    2001-09-06 04:00:00

    USER32.dll
    0x77d10000
    H:\WINDOWS\system32\user32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows XP USER API Client DLL
    2001-09-06 04:00:00

    ADVAPI32.dll
    0x77da0000
    H:\WINDOWS\system32\advapi32.dll
    5.1.2600.0 (XPClient.010817-1148)
    Microsoft Corporation
    Advanced Windows 32 Base API
    2001-09-06 04:00:00

    RPCRT4.dll
    0x77c90000
    H:\WINDOWS\system32\rpcrt4.dll
    5.1.2600.0 (XPClient.010817-1148)
    Microsoft Corporation
    Remote Procedure Call Runtime
    2001-09-06 04:00:00

    SHELL32.dll
    0x773a0000
    H:\WINDOWS\system32\shell32.dll
    6.00.2600.0000 (xpclient.010817-1148)
    Microsoft Corporation
    Windows Shell Common Dll
    2001-11-21 04:00:00

    SHLWAPI.dll
    0x772a0000
    H:\WINDOWS\system32\shlwapi.dll
    6.00.2600.0000 (xpclient.010817-1148)
    Microsoft Corporation
    Shell Light-weight Utility Library
    2001-09-06 04:00:00

    COMCTL32.dll
    0x77310000
    H:\WINDOWS\system32\comctl32.dll
    5.82 (xpclient.010817-1148)
    Microsoft Corporation
    Common Controls Library
    2001-09-06 04:00:00

    MSVCIRT.dll
    0x370000
    H:\WINDOWS\system32\msvcirt.dll
    7.0.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows NT IOStreams DLL
    2001-09-06 04:00:00

    IMM32.DLL
    0x76300000
    H:\WINDOWS\system32\imm32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows XP IMM32 API Client DLL
    2001-09-06 04:00:00

    LPK.DLL
    0x62c20000
    H:\WINDOWS\system32\lpk.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Language Pack
    2001-09-06 04:00:00

    USP10.dll
    0x72f10000
    H:\WINDOWS\system32\usp10.dll
    1.0407.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Uniscribe Unicode script processor
    2001-09-06 04:00:00

    MFC42LOC.DLL
    0x61be0000
    H:\WINDOWS\system32\mfc42loc.dll
    6.00.8665.0
    Microsoft Corporation
    MFC Language Specific Resources
    2001-09-06 04:00:00

    comctl32.dll
    0x71950000
    H:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
    6.0 (xpclient.010817-1148)
    Microsoft Corporation
    User Experience Controls Library
    2001-09-05 20:00:00
gototop
 
非常迷惑
头像
初生襁褓狮
  • 帖子:7
  • 注册: 2006-08-13
  • 来自:
发表于： 2006-08-13 15:15 | 显示全部 短消息 资料
字号： 小 中 大 4楼


[Repair.exe]
PID = 0x6d8
CommandLine = "H:\Program Files\Rising\KakaToolBar\Repair.exe"
    Repair.exe
    0x400000
    H:\Program Files\Rising\KakaToolBar\Repair.exe
    1, 0, 0, 8
    Beijing Rising Technology Co., Ltd.
    系统修复
    2006-08-12 11:01:05

    ntdll.dll
    0x77f50000
    H:\WINDOWS\system32\ntdll.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    NT Layer DLL
    2001-09-06 04:00:00

    kernel32.dll
    0x77e40000
    H:\WINDOWS\system32\kernel32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows NT BASE API Client DLL
    2001-09-06 04:00:00

    VERSION.dll
    0x77bd0000
    H:\WINDOWS\system32\version.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Version Checking and File Installation Libraries
    2001-09-06 04:00:00

    MFC42.DLL
    0x73d30000
    H:\WINDOWS\system32\mfc42.dll
    6.00.8665.0
    Microsoft Corporation
    MFCDLL Shared Library - Retail Version
    2001-09-06 04:00:00

    MSVCRT.dll
    0x77be0000
    H:\WINDOWS\system32\msvcrt.dll
    7.0.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows NT CRT DLL
    2001-09-06 04:00:00

    GDI32.dll
    0x77c40000
    H:\WINDOWS\system32\gdi32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    GDI Client DLL
    2001-09-06 04:00:00

    USER32.dll
    0x77d10000
    H:\WINDOWS\system32\user32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows XP USER API Client DLL
    2001-09-06 04:00:00

    ADVAPI32.dll
    0x77da0000
    H:\WINDOWS\system32\advapi32.dll
    5.1.2600.0 (XPClient.010817-1148)
    Microsoft Corporation
    Advanced Windows 32 Base API
    2001-09-06 04:00:00

    RPCRT4.dll
    0x77c90000
    H:\WINDOWS\system32\rpcrt4.dll
    5.1.2600.0 (XPClient.010817-1148)
    Microsoft Corporation
    Remote Procedure Call Runtime
    2001-09-06 04:00:00

    SHELL32.dll
    0x773a0000
    H:\WINDOWS\system32\shell32.dll
    6.00.2600.0000 (xpclient.010817-1148)
    Microsoft Corporation
    Windows Shell Common Dll
    2001-11-21 04:00:00

    SHLWAPI.dll
    0x772a0000
    H:\WINDOWS\system32\shlwapi.dll
    6.00.2600.0000 (xpclient.010817-1148)
    Microsoft Corporation
    Shell Light-weight Utility Library
    2001-09-06 04:00:00

    ole32.dll
    0x77180000
    H:\WINDOWS\system32\ole32.dll
    5.1.2600.0 (XPClient.010817-1148)
    Microsoft Corporation
    Microsoft OLE for Windows
    2001-09-06 04:00:00

    IMM32.DLL
    0x76300000
    H:\WINDOWS\system32\imm32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Windows XP IMM32 API Client DLL
    2001-09-06 04:00:00

    LPK.DLL
    0x62c20000
    H:\WINDOWS\system32\lpk.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Language Pack
    2001-09-06 04:00:00

    USP10.dll
    0x72f10000
    H:\WINDOWS\system32\usp10.dll
    1.0407.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Uniscribe Unicode script processor
    2001-09-06 04:00:00

    MFC42LOC.DLL
    0x61be0000
    H:\WINDOWS\system32\mfc42loc.dll
    6.00.8665.0
    Microsoft Corporation
    MFC Language Specific Resources
    2001-09-06 04:00:00

    comctl32.dll
    0x71950000
    H:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
    6.0 (xpclient.010817-1148)
    Microsoft Corporation
    User Experience Controls Library
    2001-09-05 20:00:00

    comctl32.dll
    0x77310000
    H:\WINDOWS\system32\comctl32.dll
    5.82 (xpclient.010817-1148)
    Microsoft Corporation
    Common Controls Library
    2001-09-06 04:00:00

    RICHED32.DLL
    0x73250000
    H:\WINDOWS\system32\riched32.dll
    5.1.2600.0 (xpclient.010817-1148)
    Microsoft Corporation
    Wrapper Dll for Richedit 1.0
    2001-09-06 04:00:00

    RICHED20.dll
    0x74d90000
    H:\WINDOWS\system32\riched20.dll
    5.30.23.1210
    Microsoft Corporation
    Rich Text Edit Control, v3.0
    2001-09-06 04:00:00
gototop
 
非常迷惑
头像
初生襁褓狮
  • 帖子:7
  • 注册: 2006-08-13
  • 来自:
发表于： 2006-08-13 15:17 | 显示全部 短消息 资料
字号： 小 中 大 5楼

【回复“newcenturymoon”的帖子】

刚才的日志我还没粘完,还用继续不?
gototop
 
非常迷惑
头像
初生襁褓狮
  • 帖子:7
  • 注册: 2006-08-13
  • 来自:
发表于： 2006-08-13 15:26 | 显示全部 短消息 资料
字号： 小 中 大 6楼

2006-08-13,15:13:13

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional  (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><H:\WINDOWS\System32\ctfmon.exe>  [Microsoft Corporation]
    <MSMSGS><"H:\Program Files\Messenger\msmsgs.exe" /background>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><H:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><H:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><H:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <RavTask><"d:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <TkBellExe><"H:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>  [RealNetworks, Inc.]
    <SoundMan><SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <IgfxTray><H:\WINDOWS\System32\igfxtray.exe>  [Intel Corporation]
    <HotKeysCmds><H:\WINDOWS\System32\hkcmd.exe>  [Intel Corporation]
    <ccApp><"H:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [Symantec Corporation]
    <vptray><H:\PROGRA~1\SYMANT~1\VPTray.exe>  [Symantec Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <CCenterInst><"d:\Program Files\Rising\Rav\CCenter.exe" -install>  [Beijing Rising Technology Co., Ltd.]
    <Rav><"d:\Program Files\Rising\Rav\Update\Setup.exe" /REPAIR /ONCE>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><H:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><H:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
    <WinlogonNotify: NavLogon><H:\WINDOWS\System32\NavLogon.dll>  [Symantec Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><H:\WINDOWS\解霸屏保.scr>  []
gototop
 
非常迷惑
头像
初生襁褓狮
  • 帖子:7
  • 注册: 2006-08-13
  • 来自:
发表于： 2006-08-13 15:27 | 显示全部 短消息 资料
字号： 小 中 大 7楼


==================================
启动文件夹
服务
[Crypkey License / Crypkey License]
  <crypserv.exe><Kenonic Controls Ltd.>
[IMAPI CD-Burning COM Service / ImapiService]
  <H:\WINDOWS\System32\imapi.exe><Microsoft Corporation>
[Rising Process Communication Center / RsCCenter]
  <"c:\Program Files\Rising\Rav\CCenter.exe"><N/A>
[SmartLinkService / SLService]
  <slserv.exe><>
[RsRavMon Service / RsRavMon]
  <"d:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Symantec Event Manager / ccEvtMgr]
  <"H:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc]
  <"H:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr]
  <"H:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Symantec Network Drivers Service / SNDSrvc]
  <"H:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec AntiVirus Definition Watcher / DefWatch]
  <"H:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
[SavRoam / SavRoam]
  <"H:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec>

==================================
浏览器加载项
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <H:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <H:\WINDOWS\System32\kakatool.dll, Beijing Rising Technology Co., Ltd.>

==================================
正在运行的进程
[PID: 540][\??\H:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 608][H:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 620][H:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 864][H:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 992][H:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1080][H:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1544][H:\WINDOWS\System32\igfxtray.exe]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\hccutils.DLL]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\igfxdev.dll]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\igfxsrvc.dll]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\igfxres.dll]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\igfxress.dll]  <Intel Corporation><3.0.0.2285>
[PID: 1836][H:\WINDOWS\explorer.exe]  <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)>
    [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><6.0.1.2003110300>
    [H:\WINDOWS\System32\igfxpph.dll]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\hccutils.DLL]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\igfxres.dll]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\igfxsrvc.dll]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\System32\igfxdev.dll]  <Intel Corporation><3.0.0.2285>
    [H:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [d:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 3620][H:\Program Files\摩贝德通信\MobiData CDMA Modem\MobiData CDMA Modem.exe]  <><1, 0, 0, 1>
[PID: 728][H:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 2288][H:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)>
[PID: 2408][H:\WINDOWS\System32\conime.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 2660][H:\WINDOWS\System32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 2104][c:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
[PID: 964][H:\DOCUME~1\LiuHua\LOCALS~1\Temp\Rar$EX00.844\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["H:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT