瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 电脑总是无缘无故的弹出网页 哪个高手 帮帮忙看看怎么解决 谢谢！！！

1   1  /  1  页   跳转页

电脑总是无缘无故的弹出网页 哪个高手 帮帮忙看看怎么解决 谢谢！！！

收藏
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 21:01 | 显示全部 短消息 资料
字号： 小 中 大 1楼

电脑总是无缘无故的弹出网页 哪个高手 帮帮忙看看怎么解决 谢谢！！！

最近电脑总是以上网就乱弹出网页  用卡卡上网助手扫描了一下恶意和流氓软件 发现有一个恶意插件PCTools 一个恶意软件Galaxy 还有一个木马ppgaxea 怎么都杀不掉 高手来帮帮忙看看怎么可以解决 附上日志
CODE]

2007-01-13,20:24:29

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <bgswitch><C:\WINDOWS\system32\bgswitch.exe>  [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <HControl><C:\WINDOWS\ATK0100\HControl.exe>  [(Verified)]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <nwiz><nwiz.exe /install>  [NVIDIA Corporation]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <EM_EXEC><C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE>  [Logitech Inc.                    ]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <iamapp><C:\PROGRA~1\SYMANT~1\SYMANT~1\IAMAPP.EXE>  [(Verified)Symantec Corporation]
    <Alcmtr><ALCMTR.EXE>  [(Verified)Realtek Semiconductor Corp.]
    <Wireless Console><C:\Program Files\ASUS\Wireless Console\wcourier.exe>  [N/A]
    <IntelWireless><C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless>  [Intel Corporation]
    <EOUApp><C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe>  [Intel Corporation]
    <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  [N/A]
    <runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <SoundMix><C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\soudmax.dll,St>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\IntelWireless]
    <WinlogonNotify: IntelWireless><C:\Program Files\Intel\Wireless\Bin\LgNotify.dll>  [Intel Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINDOWS\GTMclock.scr>  [N/A]

==================================
启动文件夹
[Logitech Desktop Messenger]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Logitech Desktop Messenger.lnk --> C:\PROGRA~1\Logitech\DESKTO~1\8876480\Program\LDMConf.exe [Logitech]><N>

==================================
服务
[Routing Protect Access / BKMARKS][Stopped/Auto Start]
  <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\VQLCP.DLL,Export 1087><N/A>
[EvtEng / EvtEng][Running/Auto Start]
  <C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[Event Service / Hardware][Running/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\otqwk.dll><Microsoft Corporation>
[MSSQLSERVER / MSSQLSERVER][Stopped/Manual Start]
  <C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  <C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[Symantec Client Firewall Service / NISSERV][Running/Auto Start]
  <"C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE"><Symantec Corporation>
[Symantec Client Firewall Accounts Manager / NISUM][Running/Manual Start]
  <"C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE"><Symantec Corporation>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[OwnershipProtocol / OwnershipProtocol][Running/Auto Start]
  <C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe><Intel Corporation>
[P4P Service / P4P Service][Stopped/Auto Start]
  <C:\Program Files\Common Files\Sogou PXP\p2psvr.exe><Sohu.com Inc.>
[RegSrvc / RegSrvc][Running/Auto Start]
  <C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Spectrum24 Event Monitor / S24EventMonitor][Running/Auto Start]
  <C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>
[SQLSERVERAGENT / SQLSERVERAGENT][Stopped/Manual Start]
  <C:\PROGRA~1\MI6841~1\MSSQL\binn\sqlagent.exe><Microsoft Corporation>
[Symantec Client Firewall Proxy Service / SymPxSvc][Running/Auto Start]
  <"C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe"><Symantec Corporation>
[Windows Video2 / Windows Video2][Stopped/Auto Start]
  <C:\WINDOWS\system32\msvd2.exe><>
最后编辑2007-01-13 23:33:03
分享到：
gototop
 
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 21:02 | 显示全部 短消息 资料
字号： 小 中 大 2楼

==================================
驱动程序
[acpidisk / acpidisk][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\acpidisk.sys><N/A>
[AEGIS Protocol (IEEE 802.1x) v3.1.6.0 / AegisP][Running/Auto Start]
  <system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications>
[aslm75 / aslm75][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\aslm75.sys><N/A>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[BisonCam, NB Pro / Cam5603D][Running/Manual Start]
  <System32\Drivers\BisonCam.sys><Bison Electronics. Inc.>
[d347bus / d347bus][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\d347bus.sys><>
[d347prt / d347prt][Running/Boot Start]
  <\SystemRoot\System32\Drivers\d347prt.sys><>
[ExpScaner / ExpScaner][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[gwiopm / gwiopm][Stopped/Manual Start]
  <\??\C:\Program Files\Wom\gwiopm.sys><N/A>
[Microsoft 用于 High Definition Audio 服务的 UAA 功能驱动程序 / HdAudAddService][Stopped/Manual Start]
  <system32\drivers\HdAudio.sys><Windows (R) Server 2003 DDK provider>
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HookCont / HookCont][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[HSFHWAZL / HSFHWAZL][Running/Manual Start]
  <system32\DRIVERS\HSFHWAZL.sys><Conexant Systems, Inc.>
[HSF_DP / HSF_DP][Running/Manual Start]
  <system32\DRIVERS\HSF_DP.sys><Conexant Systems, Inc.>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[Intel Wireless Connection Agent Miniport for Win XP / IWCA][Running/Manual Start]
  <system32\DRIVERS\iwca.sys><Intel Corporation>
[Logitech PS/2 Mouse Filter Driver / l8042pr2][Running/Manual Start]
  <system32\DRIVERS\L8042Pr2.sys><Logitech, Inc.>
[Logitech HID/USB Mouse Filter Driver / LHidFlt2][Running/Manual Start]
  <system32\DRIVERS\LHidFlt2.sys><Logitech, Inc.>
[Logitech USB Receiver device driver / LHidUsb][Running/Manual Start]
  <system32\drivers\LHidUsb.Sys><Logitech, Inc.>
[Logitech Keyboard Class Filter Driver / LKbdFlt2][Running/Manual Start]
  <system32\DRIVERS\LKbdFlt2.sys><Logitech, Inc.>
[Logitech Mouse Class Filter Driver / LMouFlt2][Running/Manual Start]
  <system32\DRIVERS\LMouFlt2.sys><Logitech, Inc.>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[MEMSCAN / MEMSCAN][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[ATK0100 ACPI UTILITY / MTsensor][Running/Manual Start]
  <system32\DRIVERS\ATKACPI.sys><>
[Nokia USB Generic / Nokia USB Generic][Stopped/Manual Start]
  <system32\drivers\nmwcdc.sys><Nokia>
[Nokia USB Modem / Nokia USB Modem][Stopped/Manual Start]
  <system32\drivers\nmwcdcm.sys><Nokia>
[Nokia USB Phone Parent / Nokia USB Phone Parent][Stopped/Manual Start]
  <system32\drivers\nmwcd.sys><Nokia>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\C:\Program Files\Tencent\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkcusb / npkcusb][Running/Auto Start]
  <\??\C:\Program Files\Tencent\qq\npkcusb.sys><INCA Internet Co., Ltd.>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[R592 / R592][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\R592.sys><REDC>
[risdpntk / risdpntk][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\risdpntk.sys><REDC>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising>
[WLAN Transport / s24trans][Running/Auto Start]
  <system32\DRIVERS\s24trans.sys><Intel Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[StarForce Protection Environment Driver (version 1.x) / sfdrv01][Running/Boot Start]
  <\SystemRoot\System32\drivers\sfdrv01.sys><Protection Technology>
[StarForce Protection Helper Driver (version 2.x) / sfhlp02][Running/Boot Start]
  <\SystemRoot\System32\drivers\sfhlp02.sys><Protection Technology>
[StarForce Protection Synchronization Driver (version 2.x) / sfsync02][Running/Boot Start]
  <\SystemRoot\System32\drivers\sfsync02.sys><Protection Technology>
[skwn / skwnx][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\skwnx.sys><N/A>
[SYMDNS / SYMDNS][Running/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\SYMDNS.SYS><Symantec Corporation>
[SYMFW / SYMFW][Running/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\SYMFW.SYS><Symantec Corporation>
[SYMIDS / SYMIDS][Running/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\SYMIDS.SYS><Symantec Corporation>
[SYMIDSCO / SYMIDSCO][Running/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\SYMIDSCO.SYS><Symantec Corporation>
[SYMNDIS / SYMNDIS][Running/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\SYMNDIS.SYS><Symantec Corporation>
[SYMREDRV / SYMREDRV][Running/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\SYMREDRV.SYS><Symantec Corporation>
[SYMTDI / SYMTDI][Running/Auto Start]
  <\??\C:\WINDOWS\system32\Drivers\SYMTDI.SYS><Symantec Corporation>
[VCD VNC Virtual Network Adapter / vcddev][Stopped/Manual Start]
  <system32\DRIVERS\vcdvnic.sys><VNN B.J.>
[用于 Windows XP 的英特尔(R) PRO/无线 2200BG 网络连接驱动程序 / w29n51][Running/Manual Start]
  <system32\DRIVERS\w29n51.sys><Intel? Corporation>
[winachsf / winachsf][Running/Manual Start]
  <system32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[xmvdct5 / xmvdct51][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\xmvdct51.sys><N/A>
[NDIS5.1 Miniport Driver for Marvell Yukon Gigabit Ethernet Adapter / yukonwxp][Running/Manual Start]
  <system32\DRIVERS\yukonwxp.sys><Marvell Semiconductor Inc.>
gototop
 
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 21:03 | 显示全部 短消息 资料
字号： 小 中 大 3楼

==================================
浏览器加载项
[Info cache]
  {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(广州)科技有限公司>
[启动迅雷]
  {0062C9BD-B349-40DE-91A0-755F37ACD559} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\qq\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[Java Plug-in 1.5.0]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0]
  {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[实用搜索工具条2.0]
  {03465FF5-00AE-411A-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, N/A>
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[Info cache]
  {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(广州)科技有限公司>
[IeCatch Class]
  {8FAA7A38-1D1E-48E3-B77F-6A98A9BA49CD} <C:\WINDOWS\system32\msieth.dll, >
[Navigator Class]
  {96FC3938-C6CA-475D-8D3B-45F323A6B62B} <C:\Documents and Settings\All Users\Application Data\Microsoft\Office\NAVDATA\webnav_2032.dll, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[&使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[上传到QQ网络硬盘]
  <C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 1012][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1128][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1156][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Intel\Wireless\Bin\LgNotify.dll]  [Intel Corporation, 9, 0, 1, 0]
    [C:\WINDOWS\system32\winlib .dll]  [N/A, N/A]
[PID: 1200][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1212][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1372][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1472][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1616][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 1632][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1680][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe]  [Intel Corporation, 9, 0, 1, 12]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
[PID: 1796][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe]  [Intel Corporation , 9, 0, 1, 41]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
[PID: 1928][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 220][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 264][C:\Program Files\Rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\rfwctrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RsPPsys.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\Rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
    [C:\Program Files\Rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\Rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [C:\Program Files\Rising\Rav\HookCont.dll]  [Rising, 19, 0, 0, 0]
    [C:\Program Files\Rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20]
    [C:\Program Files\Rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
    [C:\Program Files\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [C:\Program Files\Rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 34]
    [C:\Program Files\Rising\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 23]
    [C:\Program Files\Rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [C:\Program Files\Rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
    [C:\Program Files\Rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18]
    [C:\Program Files\Rising\Rav\Unpacker.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17]
    [C:\Program Files\Rising\Rav\ScanPack.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18]
    [C:\Program Files\Rising\Rav\RsVM.dll]  [N/A, 19, 0, 0, 13]
    [C:\Program Files\Rising\Rav\Uroutine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [C:\Program Files\Rising\Rav\ExtOLE.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [C:\Program Files\Rising\Rav\Uscript.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17]
    [C:\Program Files\Rising\Rav\ScanNet.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\ScanElf.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [C:\Program Files\Rising\Rav\ExtMail.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
[PID: 836][C:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 1864][C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe]  [Intel Corporation, 9, 0, 1, 51]
    [C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 9, 0, 1, 45]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  [Intel Corporation, 9, 0, 1, 56]
    [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 9, 0, 1, 7]
    [C:\Program Files\Intel\Wireless\Bin\C1XStngs.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\C8021CHS.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\LSAWRAPI.dll]  [Intel Corporation, 9, 0, 1, 1]
    [C:\Program Files\Intel\Wireless\Bin\ZcSvcCHS.dll]  [Intel Corporation, 9, 0, 1, 51]
    [C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 292][C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe]  [Intel, 9, 0, 1, 35]
    [C:\PROGRA~1\Intel\Wireless\Bin\IntelAE5.dll]  [Meetinghouse Data Communications, 3, 0, 0, 44]
    [C:\PROGRA~1\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\PROGRA~1\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1568][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\rwrwe.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\xmvdct51.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\soudmax.dll]  [, 1, 0, 0, 0]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll]  [Nokia, 6, 50, 78, 2]
    [C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll]  [Nokia, 6, 50, 36, 2]
    [C:\WINDOWS\system32\genedoe.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\relres.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\lnkenb.dll]  [N/A, N/A]
gototop
 
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 21:04 | 显示全部 短消息 资料
字号： 小 中 大 4楼

[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\Program Files\HighMAT CD Writing Wizard\HMTCD.dll]  [N/A, 1.1.1905.1]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 944][C:\WINDOWS\ATK0100\HControl.exe]  [, 1043, 2, 15, 48]
    [C:\WINDOWS\ATK0100\CMSSC.dll]  [N/A, N/A]
    [C:\WINDOWS\ATK0100\inter_f2.dll]  [ATK, 1043, 2, 15, 46]
    [C:\WINDOWS\ATK0100\ATKWLIOC.DLL]  [ACTIONTEC Electronics,Inc, 2.01.02]
    [C:\WINDOWS\ATK0100\SiSPkt.dll]  [Silicon Integrated Systems Corp., 1, 0, 0, 45]
    [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  [Intel Corporation, 9, 0, 1, 56]
    [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 9, 0, 1, 7]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\C1XStngs.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\C8021CHS.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\LSAWRAPI.dll]  [Intel Corporation, 9, 0, 1, 1]
    [C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\ccmsghk.dll]  [Logitech Inc.                    , 9.70.216]
[PID: 1040][C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE]  [Logitech Inc.                    , 9.70.216]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EVENTEX.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\WINDOWS\system32\COMNCTR.dll]  [Microsoft Corporation, 9.70.216]
    [C:\Program Files\Logitech\MouseWare\system\ccresrce.dll]  [Logitech Inc.                    , 7.30.003.0                    ]
    [C:\Program Files\Logitech\MouseWare\system\GlbResLt.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\Program Files\Logitech\MouseWare\System\devices.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\Program Files\Logitech\MouseWare\system\ccstmglb.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\Program Files\Logitech\MouseWare\system\ccustom.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\ccmsghk.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1056][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\ccmsghk.dll]  [Logitech Inc.                    , 9.70.216]
[PID: 1072][C:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\ccmsghk.dll]  [Logitech Inc.                    , 9.70.216]
[PID: 1100][C:\PROGRA~1\SYMANT~1\SYMANT~1\IAMAPP.EXE]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\iamevent.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NISRES.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\SYMSTORE.dll]  [Symantec Corporation, 4.6.0.53]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\IAMLOG.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\N32USERL.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\UMCBK.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NISALERT.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUMPS.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\IAMCPL.CPL]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\tlevel.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\SYMANT~1\SYMANT~1\NAVAPI32.DLL]  [Symantec Corp., 4.1.0.15]
    [C:\Program Files\Common Files\Symantec Shared\BRUNOALE.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Common Files\Symantec Shared\PProfile.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
[PID: 1332][C:\Program Files\ASUS\Wireless Console\wcourier.exe]  [, 1043, 6059, 1, 106]
    [C:\Program Files\ASUS\Wireless Console\rescue.dll]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 176][C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe]  [Intel Corporation, 9, 0, 1, 19]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\FrWrkCHS.dll]  [Intel Corporation, 9, 0, 1, 19]
    [C:\Program Files\Intel\Wireless\Bin\FrameworkPlugins\ConnMgr.dll]  [Intel Corporation, 9, 0, 1, 59]
    [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  [Intel Corporation, 9, 0, 1, 56]
    [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 9, 0, 1, 7]
    [C:\Program Files\Intel\Wireless\Bin\C1XStngs.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 9, 0, 1, 45]
    [C:\Program Files\Intel\Wireless\Bin\C8021CHS.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\LSAWRAPI.dll]  [Intel Corporation, 9, 0, 1, 1]
    [C:\Program Files\Intel\Wireless\Bin\IntWACHS.dll]  [Intel Corporation, 9, 0, 1, 59]
    [C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1340][C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe]  [Intel Corporation, 9, 0, 1, 26]
    [C:\Program Files\Intel\Wireless\Bin\EOUAPCfg.dll]  [Intel Corporation, 9, 0, 1, 16]
    [C:\Program Files\Intel\Wireless\Bin\ownprot.DLL]  [Intel Corporation, 9, 0, 1, 4]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 9, 0, 1, 45]
    [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  [Intel Corporation, 9, 0, 1, 56]
    [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 9, 0, 1, 7]
    [C:\Program Files\Intel\Wireless\Bin\C1XStngs.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\C8021CHS.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\LSAWRAPI.dll]  [Intel Corporation, 9, 0, 1, 1]
    [C:\Program Files\Intel\Wireless\Bin\EOUWzCHS.dll]  [Intel Corporation, 9, 0, 1, 26]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL]  [N/A, N/A]
[PID: 1952][C:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 3]
    [C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2068][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2388][C:\WINDOWS\ATK0100\ATKOSD.exe]  [, 1043, 2, 15, 48]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 3120][C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE]  [Symantec Corporation, 5.0.0.375]
    [C:\WINDOWS\system32\SYMSTORE.dll]  [Symantec Corporation, 4.6.0.53]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUMPS.DLL]  [Symantec Corporation, 5.0.0.375]
gototop
 
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 21:04 | 显示全部 短消息 资料
字号： 小 中 大 5楼

[PID: 3172][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.7370]
[PID: 3212][C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe]  [Intel Corporation, 9, 0, 1, 3]
    [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  [N/A, N/A]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
[PID: 3308][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe]  [Intel Corporation, 9, 0, 1, 10]
[PID: 3344][C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymProxy.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\WINDOWS\system32\SYMREDIR.dll]  [Symantec Corporation, 4.6.0.53]
    [C:\WINDOWS\system32\SYMSTORE.dll]  [Symantec Corporation, 4.6.0.53]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISALERT.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISRES.DLL]  [N/A, N/A]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\ProxyIM.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\StrmFilt.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymIConv.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxAlt.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymURL.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\iamevent.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\PrxyNNTP.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\PrxyHTTP.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUMPS.DLL]  [Symantec Corporation, 5.0.0.375]
[PID: 3828][C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\IAMLOG.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\iamevent.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISRES.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\SYMSTORE.dll]  [Symantec Corporation, 4.6.0.53]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUMPS.DLL]  [Symantec Corporation, 5.0.0.375]
[PID: 892][C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\ATRACK.EXE]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\iamevent.dll]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISRES.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\SYMSTORE.dll]  [Symantec Corporation, 4.6.0.53]
    [C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUMPS.DLL]  [Symantec Corporation, 5.0.0.375]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 2820][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2512][C:\Program Files\Rising\AntiSpyware\Ras.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 3, 9]
    [C:\Program Files\Rising\AntiSpyware\RasGui.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 19]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\Program Files\Rising\AntiSpyware\engine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18]
    [C:\Program Files\Rising\AntiSpyware\zip.dll]  [rising, 13, 0, 0, 1]
[PID: 3972][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 460][J:\Antiy Labs\AGB4\gb.exe]  [Antiy Labs, 1, 6, 0, 0]
    [J:\Antiy Labs\AGB4\AMisc.dll]  [Antiy Labs, 1, 4, 0, 0]
    [J:\Antiy Labs\AGB4\agbdb.dll]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [J:\Antiy Labs\AGB4\Engine\DEngine.dll]  [Antiy Labs, 1, 0, 4, 0]
    [J:\Antiy Labs\AGB4\Engine\DPack.dll]  [Antiy Labs, 1, 0, 0, 2]
    [J:\Antiy Labs\AGB4\UNRAR.DLL]  [N/A, N/A]
    [J:\Antiy Labs\AGB4\Engine\DScan.dll]  [Antiy Labs, 1, 5, 0, 0]
    [J:\Antiy Labs\AGB4\Engine\tool.dll]  [Antiy Labs, 1, 0, 8, 0]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll]  [Nokia, 6, 50, 78, 2]
    [C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll]  [Nokia, 6, 50, 36, 2]
[PID: 3364][C:\Program Files\Super Rabbit\MagicSet\iehelp.exe]  [Super Rabbit Soft, 7.85]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
[PID: 592][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 3732][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 3408][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll]  [金泰丰(广州)科技有限公司, 2, 1, 2, 0]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [C:\WINDOWS\system32\UNISPIM.IME]  [北京清华紫光软件股份有限公司, 3.0.0.3045]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.7370]
    [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.7370]
    [C:\WINDOWS\system32\nvshell.dll]  [NVIDIA Corporation, 6.14.10.10049]
[PID: 3284][C:\Program Files\Tencent\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [C:\Program Files\Tencent\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\Program Files\Tencent\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\Program Files\Tencent\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [C:\Program Files\Tencent\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\Program Files\Tencent\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQMainFrame.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\CQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\GroupLive.dll]  [N/A, N/A]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
    [C:\Program Files\Tencent\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQPlugin.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QRingMng.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQAvatar.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\Program Files\Tencent\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [C:\Program Files\Tencent\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\BQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Tencent\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [C:\Program Files\Tencent\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [C:\Program Files\Tencent\qq\QQSceneMng.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 3, 30]
    [C:\Program Files\Tencent\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [C:\Program Files\Tencent\qq\ShareFiles.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Tencent\qq\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [C:\Program Files\Tencent\qq\QQAllInOne.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [C:\Program Files\Tencent\qq\QQCustomFace.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\qq\QQMagicFace.dll]  [, 1, 0, 0, 1]
[PID: 1552][C:\Program Files\Tencent\qq\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\Program Files\Tencent\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 2012][D:\software\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll]  [Logitech Inc.                    , 9.70.216]
gototop
 
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 21:05 | 显示全部 短消息 资料
字号： 小 中 大 6楼

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost
127.0.0.1    www.ccnnic.com
127.0.0.1    www.ccnnic.net
127.0.0.1    www.ccnnic.cn
127.0.0.1    www.ccnnic.com.cn
127.0.0.1    www.ccnnic.net.cn
127.0.0.1    www.ccnnlc.com
127.0.0.1    www.ccnnlc.com.cn
127.0.0.1    www.ccnnlc.net
127.0.0.1    www.ccnnlc.cn
127.0.0.1    da.pvka.net.cn
127.0.0.1    www.ccnnlc.net.cn
127.0.0.1    www.bodoto.com
127.0.0.1    bj.bodoto.com
127.0.0.1    nb.bodoto.com
127.0.0.1    hangzhou.bodoto.com
127.0.0.1    jh.bodoto.com
127.0.0.1    shangh.bodoto.com
127.0.0.1    my.bodoto.com
127.0.0.1    mail.bodoto.com
127.0.0.1    www.bodoto.net
127.0.0.1    www.bodoto.cn
127.0.0.1    www.bodoto.com.cn
127.0.0.1    www.bodoto.net.cn
127.0.0.1    www.bodoto.org
127.0.0.1    www.edmchina.com
127.0.0.1    www.edmchina.net
127.0.0.1    www.edmchina.cn
127.0.0.1    www.edmchina.com.cn
127.0.0.1    www.edmchina.net.cn
127.0.0.1    ad.edmchina.com
127.0.0.1    agent.edmchina.com
127.0.0.1    sales.edmchina.com
127.0.0.1    mail.edmchina.com
127.0.0.1    edmchina.com
127.0.0.1    edmchina.net
127.0.0.1    edmchina.cn
127.0.0.1    edmchina.com.cn
127.0.0.1    edmchina.net.cn
127.0.0.1    www.pk265.com
127.0.0.1    www.pk265.net
127.0.0.1    www.pk265.com.cn
127.0.0.1    www.pk265.cn
127.0.0.1    pk265.com
127.0.0.1    pk265.net
127.0.0.1    pk265.com.cn
127.0.0.1    pk265.cn
127.0.0.1    www.qqbao.com
127.0.0.1    www.qqbao.net
127.0.0.1    www.qqbao.cn
127.0.0.1    www.qqbao.com.cn
127.0.0.1    qqbao.com
127.0.0.1    qqbao.net
127.0.0.1    qqbao.cn
127.0.0.1    qqbao.com.cn
127.0.0.1    www.pvka.com
127.0.0.1    www.pvka.net
127.0.0.1    www.pvka.com.cn
127.0.0.1    www.pvka.cn
127.0.0.1    www.pvka.net.cn
127.0.0.1    pvka.com
127.0.0.1    pvka.net
127.0.0.1    pvka.com.cn
127.0.0.1    pvka.net.cn
127.0.0.1    ad.pvka.com
127.0.0.1    ad.pvka.net
127.0.0.1    ad.pvka.com.cn
127.0.0.1    ad.pvka.cn
127.0.0.1    ad.pvka.net.cn
127.0.0.1    da.pvka.com
127.0.0.1    da.pvka.net
127.0.0.1    da.pvka.cn
127.0.0.1    www.20060106.com
127.0.0.1    20060106.com
127.0.0.1    www.huajundown.com
127.0.0.1    www.huajundown.com.cn
127.0.0.1    www.huajundown.cn
127.0.0.1    www.huajundown.net
127.0.0.1    www.huajundown.net.cn
127.0.0.1    huajundown.com
127.0.0.1    huajundown.com.cn
127.0.0.1    huajundown.cn
127.0.0.1    huajundown.net
127.0.0.1    huajundown.net.cn
127.0.0.1    pvka.cn
127.0.0.1    da.pvka.com.cn

==================================
API HOOK
N/A

==================================


[/CODE]
gototop
 
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 21:06 | 显示全部 短消息 资料
字号： 小 中 大 7楼

哪个高手来帮帮忙 救救我吧!!!! 万分感谢
gototop
 
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 23:20 | 显示全部 短消息 资料
字号： 小 中 大 8楼

我正在做 谢谢啊
gototop
 
whitedwarf
头像
初生襁褓狮
  • 帖子:32
  • 注册: 2007-01-12
  • 来自:
发表于： 2007-01-13 23:42 | 显示全部 短消息 资料
字号： 小 中 大 9楼

用filemon 怎么看qq中没中毒啊
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT