前辈们帮我看看我的扫描报告吧!谢谢了! - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛前辈们帮我看看我的扫描报告吧!谢谢了!

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

前辈们帮我看看我的扫描报告吧!谢谢了!

hongbank 初生襁褓狮帖子:170 注册: 2006-10-03 来自:	发表于： 2006-12-13 14:52 \| 显示全部短消息资料字号：小中大 1楼前辈们帮我看看我的扫描报告吧!谢谢了! 2006-12-13,14:33:10 System Repair Engineer 2.2.6.605 Smallfrogs (http://www.KZTechs.com) Windows XP Home Edition Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <UnlockerAssistant><"C:\Program Files\Unlocker\UnlockerAssistant.exe"> [N/A] <Windows木马防火墙><C:\Program Files\ftc\Trojanwall.exe> [风云谷] <KillTrojanMaster><C:\木马专杀大师\木马专杀大师.exe> [木马专杀大师] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] ================================== 启动文件夹 N/A ================================== 服务 [Application Management / AppMgmt] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A> [Human Interface Device Access / HidServ] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> ================================== 驱动程序 [bootdrv / bootdrv] <\SystemRoot\System32\Drivers\bootdrv.sys><N/A> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS] <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.> [Direct Parallel Link Driver / Ptilink] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [Secdrv / Secdrv] <system32\DRIVERS\secdrv.sys><N/A> ================================== 浏览器加载项 [联想] {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.lenovo.com, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\flash.ocx, Macromedia, Inc.> ================================== 正在运行的进程 [PID: 532][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 588][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 620][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 676][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 832][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 908][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1000][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1056][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1200][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1432][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1564][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Unlocker\UnlockerHook.dll] [N/A, N/A] [C:\Program Files\Unlocker\UnlockerCOM.dll] [N/A, N/A] [C:\PROGRA~1\ftc\Commenu.dll] [Fygsoft and Microsoft, 3.0.0.63] [PID: 1704][C:\Program Files\Unlocker\UnlockerAssistant.exe] [N/A, N/A] [C:\Program Files\Unlocker\UnlockerHook.dll] [N/A, N/A] [PID: 1720][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Unlocker\UnlockerHook.dll] [N/A, N/A] [PID: 516][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1052][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Unlocker\UnlockerHook.dll] [N/A, N/A] [PID: 600][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Unlocker\UnlockerHook.dll] [N/A, N/A] [PID: 172][F:\软件文件夹\木马杀客\mmsk.exe] [木马杀客, 2,0,0,7] [F:\软件文件夹\木马杀客\krnln.fnr] [, 1, 0, 0, 1] [C:\Program Files\Unlocker\UnlockerHook.dll] [N/A, N/A] [F:\软件文件夹\木马杀客\HYExtLib.fne] [N/A, N/A] [F:\软件文件夹\木马杀客\TrayIcon.fne] [, 1, 0, 0, 1] [F:\软件文件夹\木马杀客\iext2.fne] [, 1, 0, 0, 1] [F:\软件文件夹\木马杀客\iext.fne] [, 1, 0, 0, 1] [F:\软件文件夹\木马杀客\HtmlView.fne] [, 1, 0, 0, 1] [F:\软件文件夹\木马杀客\iext3.fne] [, 1, 0, 0, 1] [F:\软件文件夹\木马杀客\xplib.fne] [N/A, N/A] [F:\软件文件夹\木马杀客\mmskskin.dll] [, 2, 0, 0, 6] [F:\软件文件夹\木马杀客\SkinPPWTL.dll] [http://www.skinplusplus.com, 2, 1, 0, 0] [F:\软件文件夹\木马杀客\shell.fne] [N/A, N/A] [F:\软件文件夹\木马杀客\EThread.fne] [N/A, N/A] [F:\软件文件夹\木马杀客\dp1.fne] [N/A, N/A] [F:\软件文件夹\木马杀客\eAPI.fne] [, 1, 0, 0, 1] [PID: 1292][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Unlocker\UnlockerHook.dll] [N/A, N/A] [C:\WINDOWS\system32\JPWB.IME] [常诚研制, 4.00.950] [C:\WINDOWS\system32\macromed\flash\flash.ocx] [Macromedia, Inc., 6,0,79,0] [PID: 1640][C:\DOCUME~1\OWNER~1.LEN\LOCALS~1\Temp\sreng2.zip 的临时目录 1\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\Program Files\Unlocker\UnlockerHook.dll] [N/A, N/A] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost 127.0.0.1 mmsk.cn 127.0.0.1 bbs.mmsk.cn 127.0.0.1 www.mmsk.cn 127.0.0.1 soudong.com 127.0.0.1 www.soudong.com ================================== 2006-12-13 18:04:16
hongbank 初生襁褓狮帖子:170 注册: 2006-10-03 来自:	分享到：

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT