请各位老师帮忙 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请各位老师帮忙

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

请各位老师帮忙

无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:	发表于： 2006-10-05 21:13 \| 显示全部短消息资料字号：小中大 1楼请各位老师帮忙 2006-10-05,20:56:16 这几天老是有一网站不时地弹出来(www.5tianxia.com),然后一连串的其他内容。用了瑞星、3721修复后还是不行。现将sreng2扫描结果发上来，请指点一下，不胜感激！ System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows 2000 Professional Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <Internat.exe><internat.exe> [Microsoft Corporation] <Realplayer.exe><C:\WINNT\system32\Realplayer.exe> [] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <ATIPTA><C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe> [ATI Technologies, Inc.] <Synchronization Manager><mobsync.exe /logon> [Microsoft Corporation] <360Main.exe><C:\PROGRA~1\360so\360Main.exe> [] <YDTMain.exe><C:\PROGRA~1\YDT\YDTMain.exe> [] <QuickTime Task><"C:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Computer, Inc.] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <SoundMan><SOUNDMAN.EXE> [Avance Logic, Inc.] <iexplorer.exe><C:\WINNT\system32\iexplorer.exe> [] <realserv.exe><C:\WINNT\system32\realserv.exe> [] <Realplayer.exe><C:\WINNT\system32\Realplayer.exe> [] <RavScanBD><"C:\program files\rising\rfw\ScanBD.exe" /INST> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx] <Flags><8 > [] <Title><Windows Update> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINNT\system32\userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] 2006-10-07 23:49:35
无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:	分享到：

无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:	发表于： 2006-10-05 21:15 \| 显示全部短消息资料字号：小中大 2楼 ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N> ================================== 服务 [Ati HotKey Poller / Ati HotKey Poller] <C:\WINNT\system32\Ati2evxx.exe><N/A> [ATI Smart / ATI Smart] <C:\WINNT\system32\ati2sgag.exe><> [Logical Disk Manager Administrative Service / dmadmin] <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.> [dtnixzb / dtnixzb] <"\\219.82.182.21\E$\wintray32.exe" -service><N/A> [ewbfn / ewbfn] <"\\219.82.185.98\E$\Srv325.exe" -service><N/A> [Management Service Extension / Management Service Extension] <NetManager32.exe -exe_start><N/A> [Microsoft NetWork FireWall Services / Microsoft NetWork FireWall Services] <NetServices.exe><N/A> [NodeManagerService / NodeManagerService] <C:\Program Files\feidian\service\NodeManagerService.exe><N/A> [qvvwxm / qvvwxm] <"\\219.82.165.73\E$\ATAPl.EXE" -service><N/A> [radmm / radmm] <C:\WINNT\System32\r_server.exe /service><N/A> [Rising Proxy Service / RfwProxySrv] <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Remote Administrator Service / r_server] <"C:\WINNT\system32\r_server.exe" /service><N/A> [Windows Management NetWork Service Extensions / Windows Management NetWork Service Extensions] <NetManager.exe -exe_start><N/A> ================================== 浏览器加载项 [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [雅虎助手] {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll, Yahoo!> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft> [conimehlp Class] {B10343BD-1DC6-442F-9BA2-D44C708CEE83} <C:\WINNT\system32\mskey32.dll, Microsoft> [手机短信] {00000000-0000-0001-0001-596BAEDD1289} <http://sms.3721.com/ie/index.htm, N/A> [Yahoo 1G电邮] {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.mail.yahoo.com/promo/rd1, N/A> [寻宝乐趣多] {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://hot.3721.com/rd/shop_btn.htm, N/A> [上网助手] {5D73EE86-05F1-49ed-B850-E423120EC338} <http://assistant.3721.com/index.htm?fb=Cns, N/A> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [情景聊天] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A> [] {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://assistant.3721.com/security1.htm?fb=Cns, N/A> [] {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://assistant.3721.com/clean1.htm?fb=Cns, N/A> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation> [雅虎助手] {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll, Yahoo!> [{5DD731E6-D4F0-11D3-BE3F-00105A6FDA50}] {5DD731E6-D4F0-11D3-BE3F-00105A6FDA50} <C:\WINNT\DOWNLO~1\v3prox.ocx, AhnLab, Inc.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINNT\system32\wuweb.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [使用网际快车下载] <C:\Program Files\FlashGet\jc_link.htm, N/A> [使用网际快车下载全部链接] <C:\Program Files\FlashGet\jc_all.htm, N/A>
无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:

无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:	发表于： 2006-10-05 21:18 \| 显示全部短消息资料字号：小中大 3楼 ================================== 正在运行的进程 [PID: 188][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601> [PID: 128][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601> [PID: 96][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6970> [PID: 216][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.6700> [C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3> [PID: 228][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.6902> [PID: 392][c:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 33> [c:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13> [c:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6> [c:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21> [c:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4> [c:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9> [c:\program files\rising\rfw\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [PID: 404][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 432][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 456][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 27> [C:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 17> [C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 540][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059> [PID: 568][C:\WINNT\system32\Ati2evxx.exe] <N/A><N/A> [PID: 604][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 652][C:\Program Files\feidian\service\NodeManagerService.exe] <N/A><N/A> [C:\Program Files\feidian\service\ACE.dll] <N/A><5.4> [PID: 760][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6920> [PID: 804][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 880][C:\WINNT\system32\tlntsvr.exe] <Microsoft Corporation><5.00.99206.1> [PID: 976][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100> [PID: 992][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 1052][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690> [C:\WINNT\system32\Rsvtub.dll] <N/A><N/A>
无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:

无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:	发表于： 2006-10-05 21:19 \| 显示全部短消息资料字号：小中大 4楼 [C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [C:\WINNT\system32\mskey32.dll] <Microsoft><1, 0, 0, 1> [PID: 1076][c:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 52> [c:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [c:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [c:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 1164][C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe] <ATI Technologies, Inc.><6.14.10.4029> [C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.CHS] <ATI Technologies, Inc.><6.14.10.4029> [C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll] <ATI Technologies, Inc.><6.14.10.4029> [PID: 1208][C:\Program Files\QuickTime\qttask.exe] <Apple Computer, Inc.><6.5.1> [PID: 1224][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3427> [PID: 1256][C:\WINNT\SOUNDMAN.EXE] <Avance Logic, Inc.><5.0.07> [PID: 1216][C:\WINNT\system32\iexplorer.exe] <N/A><N/A> [PID: 1272][C:\WINNT\system32\realserv.exe] <N/A><N/A> [PID: 1292][C:\WINNT\system32\Realplayer.exe] <N/A><N/A> [PID: 1312][C:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000> [PID: 1412][C:\Program Files\OneWaveTech\NetClient\NetClient.exe] <OneWave Technologies Inc.><2.0.0.113> [PID: 1344][C:\Program Files\rising\rav\RavMon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [C:\Program Files\rising\rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\rising\rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\rising\rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\rising\rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\rising\rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\rising\rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\rising\rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 1640][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106> [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><6.0.0.2003051500> [C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll] <Yahoo!><2, 0, 0, 1014> [C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [C:\WINNT\system32\mskey32.dll] <Microsoft><1, 0, 0, 1> [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll] <><2, 0, 0, 1023> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll] <Yahoo!><2, 0, 6, 1004> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll] <3721.com><2, 1, 1, 87> [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll] <Yahoo><1, 0, 8, 1321> [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll] <Yahoo><1, 0, 2, 1002> [C:\WINNT\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [C:\WINNT\system32\msdmo.dll] <N/A><N/A> [PID: 824][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106> [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><6.0.0.2003051500> [C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll] <Yahoo!><2, 0, 0, 1014> [C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [C:\WINNT\system32\mskey32.dll] <Microsoft><1, 0, 0, 1> [PID: 908][C:\Program Files\Microsoft Office\Office\WINWORD.EXE] <Microsoft Corporation><9.0.2823> [C:\Program Files\Rising\Rav\RsPlugIn.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\PROGRA~1\MICROS~2\Office\BLNMGRPS.DLL] <N/A><N/A> [PID: 1592][C:\WINNT\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422> [C:\Program Files\Microsoft Office\Office\BLNMGR.DLL] <N/A><N/A> [PID: 1540][C:\Program Files\Internet Explorer\IExplore.exe] <Microsoft Corporation><6.00.2800.1106> [C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><6.0.0.2003051500> [C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll] <Yahoo!><2, 0, 0, 1014> [C:\PROGRA~1\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [C:\WINNT\system32\mskey32.dll] <Microsoft><1, 0, 0, 1> [C:\WINNT\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [PID: 1696][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [PID: 1780][C:\DOCUME~1\wzb\LOCALS~1\Temp\Rar$EX05.672\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINNT\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:

无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:	发表于： 2006-10-06 10:00 \| 显示全部短消息资料字号：小中大 5楼有请老师看看呀，多谢
无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:

无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:	发表于： 2006-10-07 21:20 \| 显示全部短消息资料字号：小中大 6楼谢谢我无邪老师,我按照你的方法试了,有的已删有的没删,但今天晚上7点多钟开机到现在还没跳出那个该死的网站.我想应该好了吧.现人我把现在的扫描拷上来,供你参考. 2006-10-07,21:13:45 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows 2000 Professional Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <Super Rabbit IEPro><C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [Super Rabbit Soft] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] <run><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <realserv.exe><C:\WINNT\system32\realserv.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINNT\system32\userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N> ================================== 服务 [Ati HotKey Poller / Ati HotKey Poller] <C:\WINNT\system32\Ati2evxx.exe><N/A> [ATI Smart / ATI Smart] <C:\WINNT\system32\ati2sgag.exe><> [Logical Disk Manager Administrative Service / dmadmin] <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.> [Rising Proxy Service / RfwProxySrv] <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Windows Management NetWork Service Extensions / Windows Management NetWork Service Extensions] <NetManager.exe -exe_start><N/A> ================================== 浏览器加载项 [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation> [雅虎助手] {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll, Yahoo!> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [{5DD731E6-D4F0-11D3-BE3F-00105A6FDA50}] {5DD731E6-D4F0-11D3-BE3F-00105A6FDA50} <C:\WINNT\DOWNLO~1\v3prox.ocx, AhnLab, Inc.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINNT\system32\wuweb.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [使用网际快车下载] <C:\Program Files\FlashGet\jc_link.htm, N/A> [使用网际快车下载全部链接] <C:\Program Files\FlashGet\jc_all.htm, N/A>
无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:

无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:	发表于： 2006-10-07 21:21 \| 显示全部短消息资料字号：小中大 7楼正在运行的进程 [PID: 188][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601> [PID: 128][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601> [PID: 96][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6970> [PID: 216][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.6700> [C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3> [PID: 228][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.6902> [PID: 392][c:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 33> [c:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13> [c:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6> [c:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21> [c:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4> [c:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9> [c:\program files\rising\rfw\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [PID: 404][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 432][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 448][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 27> [C:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 17> [C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 540][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059> [PID: 568][C:\WINNT\system32\Ati2evxx.exe] <N/A><N/A> [PID: 604][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 656][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6920> [PID: 772][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 872][C:\WINNT\system32\tlntsvr.exe] <Microsoft Corporation><5.00.99206.1> [PID: 912][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100> [PID: 944][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1> [PID: 1032][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690> [C:\PROGRA~1\WINZIP\WZSHLSTB.DLL] <WinZip Computing, Inc.><4.1 (32-bit)> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [PID: 1056][c:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 52> [c:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [c:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [c:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 976][C:\Program Files\OneWaveTech\NetClient\NetClient.exe] <OneWave Technologies Inc.><2.0.0.113> [PID: 1188][C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE] <Super Rabbit Soft><7.84> [C:\PROGRA~1\SUPERR~1\MagicSet\shlobj71.ocx] <Sky Software (http://www.ssware.com)><7, 1, 0, 0> [PID: 992][C:\Program Files\rising\rav\RavMon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [C:\Program Files\rising\rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\rising\rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\rising\rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\rising\rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\rising\rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\rising\rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\rising\rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 1104][C:\Program Files\rising\rav\Rav.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 75> [C:\Program Files\rising\rav\PlugIn\RsPgScan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17> [C:\Program Files\rising\rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\rising\rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\rising\rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\rising\rav\RavUI.Dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 65> [C:\Program Files\rising\rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\rising\rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\rising\rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [C:\Program Files\rising\rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\rising\rav\RavUIMsg.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 27> [PID: 1012][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106> [C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll] <Xiang Feng Technology><2, 2, 0, 1612> [C:\WINNT\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [C:\WINNT\system32\msdmo.dll] <N/A><N/A> [PID: 816][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [PID: 1508][C:\DOCUME~1\wzb\LOCALS~1\Temp\Rar$EX00.422\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINNT\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
无极居士初生襁褓狮帖子:7 注册: 2006-10-05 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT