麻烦来了，电脑中招Trojan.Agent.abf和Trojan.win32.Agent.abf - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛麻烦来了，电脑中招Trojan.Agent.abf和Trojan.win32.Agent.abf

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

麻烦来了，电脑中招Trojan.Agent.abf和Trojan.win32.Agent.abf

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 14:18 \| 显示全部短消息资料字号：小中大 1楼麻烦来了，电脑中招Trojan.Agent.abf和Trojan.win32.Agent.abf 杀软对它们只能提示，但无法删除，高手给看下 [CODE] 2007-01-24,13:45:27 System Repair Engineer 2.3.13.690 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] <ravshell><C:\Progra~1\Eset\rund1132.exe> [N/A] <MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation] <Super Rabbit Desktop Search><; D:\超级兔子\MagicSet\SRSearch.exe> [] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] <run><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <UserFaultCheck><%systemroot%\system32\dumprep 0 -u> [N/A] <run12132><C:\WINDOWS\run11232.exe> [N/A] <popo2004><; F:\MP3 音乐\dj2\lib\popo2004\start.exe> [N/A] <kis><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"> [Kaspersky Lab] <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation] <StormCodec_Helper><"D:\暴风影音6.12\StormSet.exe" /S /opti> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,,"D:\文件夹加密大师\SVOHOST.EXE" un userinit.exe> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll> [Kaspersky Lab] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cmdmant] <WinlogonNotify: cmdmant><msgcom.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll> [Kaspersky Lab] [HKEY_CURRENT_USER\Control Panel\Desktop] <SCRNSAVE.EXE><C:\WINDOWS\system32\RainySs.scr> [N/A] ================================== 启动文件夹 N/A ================================== 服务 [Alerter / Alerter][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\system32\alrsvc.dll><Microsoft Corporation> [Application Layer Gateway Service / ALG][Running/Manual Start] <C:\WINDOWS\System32\alg.exe><Microsoft Corporation> [Application Management / AppMgmt][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><Microsoft Corporation> [Windows Audio / AudioSrv][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\audiosrv.dll><Microsoft Corporation> [卡巴斯基互联网安全套装 6.0 / AVP][Running/Auto Start] <"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r><Kaspersky Lab> [Background Intelligent Transfer Service / BITS][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\qmgr.dll><Microsoft Corporation> [Computer Browser / Browser][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\browser.dll><Microsoft Corporation> [Indexing Service / CiSvc][Stopped/Manual Start] <C:\WINDOWS\system32\cisvc.exe><Microsoft Corporation> [ClipBook / ClipSrv][Stopped/Disabled] <C:\WINDOWS\system32\clipsrv.exe><Microsoft Corporation> [COM+ System Application / COMSysApp][Stopped/Manual Start] <C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}><Microsoft Corporation> [Cryptographic Services / CryptSvc][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\cryptsvc.dll><Microsoft Corporation> [DCOM Server Process Launcher / DcomLaunch][Running/Auto Start] <C:\WINDOWS\system32\svchost -k DcomLaunch-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [DHCP Client / Dhcp][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\dhcpcsvc.dll><Microsoft Corporation> [Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start] <C:\WINDOWS\System32\dmadmin.exe /com><Microsoft Corp., Veritas Software> [Logical Disk Manager / dmserver][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\dmserver.dll><Microsoft Corp.> [DNS Client / Dnscache][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k NetworkService-->%SystemRoot%\System32\dnsrslvr.dll><Microsoft Corporation> [Error Reporting Service / ERSvc][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\ersvc.dll><Microsoft Corporation> [Event Log / Eventlog][Running/Auto Start] <C:\WINDOWS\system32\services.exe><Microsoft Corporation> [COM+ Event System / EventSystem][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\es.dll><Microsoft Corporation> [ewido anti-spyware 4.0 guard / ewido anti-spyware 4.0 guard][Running/Auto Start] <C:\Program Files\ewido anti-spyware 4.0\guard.exe><Anti-Malware Development a.s.> [Fast User Switching Compatibility / FastUserSwitchingCompatibility][Running/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Help and Support / helpsvc][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><Microsoft Corporation> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [HTTP SSL / HTTPFilter][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k HTTPFilter-->%SystemRoot%\System32\w3ssl.dll><Microsoft Corporation> [IMAPI CD-Burning COM Service / ImapiService][Stopped/Manual Start] <C:\WINDOWS\system32\imapi.exe><Microsoft Corporation> [Server / lanmanserver][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\srvsvc.dll><Microsoft Corporation> [Workstation / lanmanworkstation][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\wkssvc.dll><Microsoft Corporation> [TCP/IP NetBIOS Helper / LmHosts][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\lmhsvc.dll><Microsoft Corporation> [Messenger / Messenger][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\msgsvc.dll><Microsoft Corporation> [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start] <C:\WINDOWS\system32\mnmsrvc.exe><Microsoft Corporation> [Distributed Transaction Coordinator / MSDTC][Stopped/Manual Start] <C:\WINDOWS\system32\msdtc.exe><Microsoft Corporation> [Windows Installer / MSIServer][Stopped/Manual Start] <C:\WINDOWS\system32\msiexec.exe /V><Microsoft Corporation> [Network DDE / NetDDE][Stopped/Disabled] <C:\WINDOWS\system32\netdde.exe><Microsoft Corporation> [Network DDE DSDM / NetDDEdsdm][Stopped/Disabled] <C:\WINDOWS\system32\netdde.exe><Microsoft Corporation> [Net Logon / Netlogon][Stopped/Manual Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Network Connections / Netman][Running/Manual Start] 2007-01-24 21:00:19
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	分享到：

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 14:20 \| 显示全部短消息资料字号：小中大 2楼 <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\netman.dll><Microsoft Corporation> [Network Location Awareness (NLA) / Nla][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\mswsock.dll><Microsoft Corporation> [NT LM Security Support Provider / NtLmSsp][Stopped/Manual Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Removable Storage / NtmsSvc][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\ntmssvc.dll><Microsoft Corporation> [Plug and Play / PlugPlay][Running/Auto Start] <C:\WINDOWS\system32\services.exe><Microsoft Corporation> [IPSEC Services / PolicyAgent][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Protected Storage / ProtectedStorage][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasauto.dll><Microsoft Corporation> [Remote Access Connection Manager / RasMan][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasmans.dll><Microsoft Corporation> [Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start] <C:\WINDOWS\system32\sessmgr.exe><Microsoft Corporation> [Routing and Remote Access / RemoteAccess][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\mprdim.dll><Microsoft Corporation> [Remote Registry / RemoteRegistry][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\system32\regsvc.dll><Microsoft Corporation> [Remote Procedure Call (RPC) Locator / RpcLocator][Stopped/Manual Start] <C:\WINDOWS\system32\locator.exe><Microsoft Corporation> [Remote Procedure Call (RPC) / RpcSs][Running/Auto Start] <C:\WINDOWS\system32\svchost -k rpcss-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [QoS RSVP / RSVP][Stopped/Manual Start] <C:\WINDOWS\system32\rsvp.exe><Microsoft Corporation> [Security Accounts Manager / SamSs][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Smart Card / SCardSvr][Stopped/Manual Start] <C:\WINDOWS\System32\SCardSvr.exe><Microsoft Corporation> [Task Scheduler / Schedule][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\system32\schedsvc.dll><Microsoft Corporation> [Secondary Logon / seclogon][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\seclogon.dll><Microsoft Corporation> [System Event Notification / SENS][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\sens.dll><Microsoft Corporation> [Windows Firewall/Internet Connection Sharing (ICS) / SharedAccess][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\ipnathlp.dll><Microsoft Corporation> [Shell Hardware Detection / ShellHWDetection][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Print Spooler / Spooler][Running/Auto Start] <C:\WINDOWS\system32\spoolsv.exe><Microsoft Corporation> [System Restore Service / srservice][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\srsvc.dll><Microsoft Corporation> [SSDP Discovery Service / SSDPSRV][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\ssdpsrv.dll><Microsoft Corporation> [Windows Image Acquisition (WIA) / stisvc][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k imgsvc-->%SystemRoot%\system32\wiaservc.dll><Microsoft Corporation> [MS Software Shadow Copy Provider / SwPrv][Stopped/Manual Start] <C:\WINDOWS\system32\dllhost.exe /Processid:{F8109D93-FD71-4CD3-B4C0-4D9C009B8495}><Microsoft Corporation> [Performance Logs and Alerts / SysmonLog][Stopped/Manual Start] <C:\WINDOWS\system32\smlogsvc.exe><Microsoft Corporation> [Telephony / TapiSrv][Running/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\tapisrv.dll><Microsoft Corporation> [Terminal Services / TermService][Running/Manual Start] <C:\WINDOWS\System32\svchost -k DComLaunch-->%SystemRoot%\System32\termsrv.dll><Microsoft Corporation> [Themes / Themes][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Telnet / TlntSvr][Stopped/Disabled] <C:\WINDOWS\system32\tlntsvr.exe><Microsoft Corporation> [Distributed Link Tracking Client / TrkWks][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\trkwks.dll><Microsoft Corporation> [Universal Plug and Play Device Host / upnphost][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\upnphost.dll><Microsoft Corporation> [Uninterruptible Power Supply / UPS][Stopped/Manual Start] <C:\WINDOWS\System32\ups.exe><Microsoft Corporation> [Volume Shadow Copy / VSS][Stopped/Manual Start] <C:\WINDOWS\System32\vssvc.exe><Microsoft Corporation> [Windows Time / W32Time][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\w32time.dll><Microsoft Corporation> [WebClient / WebClient][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\webclnt.dll><Microsoft Corporation> [Win32 Display Driver / Win32DDS][Stopped/Auto Start] <C:\WINDOWS\system32\\rundll32.exe windds32.dll,input><Microsoft Corporation> [Windows DHCP Service / WinDHCPsvc][Stopped/Auto Start] <C:\WINDOWS\system32\\rundll32.exe windhcp.ocx,input><Microsoft Corporation> [Windows Management Instrumentation / winmgmt][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\wbem\WMIsvc.dll><Microsoft Corporation> [Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\MsPMSNSv.dll><Microsoft Corporation> [Windows Management Instrumentation Driver Extensions / Wmi][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\advapi32.dll><Microsoft Corporation> [WMI Performance Adapter / WmiApSrv][Stopped/Manual Start] <C:\WINDOWS\system32\wbem\wmiapsrv.exe><Microsoft Corporation> [Windows Media Player Network Sharing Service / WMPNetworkSvc][Stopped/Manual Start] <"C:\Program Files\Windows Media Player\WMPNetwk.exe"><Microsoft Corporation> [Security Center / wscsvc][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SYSTEMROOT%\system32\wscsvc.dll><Microsoft Corporation> [Automatic Updates / wuauserv][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\wuauserv.dll><Microsoft Corporation> [Windows Driver Foundation - User-mode Driver Framework / WudfSvc][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup-->%SystemRoot%\System32\WUDFSvc.dll><Microsoft Corporation> [Wireless Zero Configuration / WZCSVC][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\wzcsvc.dll><Microsoft Corporation> [Network Provisioning Service / xmlprov][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\xmlprov.dll><Microsoft Corporation> ================================== 驱动程序 [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start] <system32\drivers\ac97intc.sys><Intel Corporation> [Microsoft ACPI Driver / ACPI][Running/Boot Start] <\SystemRoot\system32\DRIVERS\ACPI.sys><Microsoft Corporation> [Microsoft Kernel Acoustic Echo Canceller / aec][Stopped/Manual Start] <system32\drivers\aec.sys><Microsoft Corporation> [AFD / AFD][Running/System Start] <\SystemRoot\System32\drivers\afd.sys><Microsoft Corporation> [RAS Asynchronous Media Driver / AsyncMac][Stopped/Manual Start] <system32\DRIVERS\asyncmac.sys><Microsoft Corporation> [标准 IDE/ESDI 硬盘控制器 / atapi][Running/Boot Start] <\SystemRoot\system32\DRIVERS\atapi.sys><Microsoft Corporation> [ATM ARP Client Protocol / Atmarpc][Stopped/Manual Start] <system32\DRIVERS\atmarpc.sys><Microsoft Corporation> [音频存根驱动程序 / audstub][Running/Manual Start] <system32\DRIVERS\audstub.sys><Microsoft Corporation> [CD-ROM Driver / Cdrom][Running/System Start] <system32\DRIVERS\cdrom.sys><Microsoft Corporation> [磁盘驱动器 / Disk][Running/Boot Start] <\SystemRoot\system32\DRIVERS\disk.sys><Microsoft Corporation> [dmboot / dmboot][Stopped/Disabled] <System32\drivers\dmboot.sys><Microsoft Corp., Veritas Software> [Logical Disk Manager Driver / dmio][Running/Boot Start] <\SystemRoot\System32\drivers\dmio.sys><Microsoft Corp., Veritas Software> [dmload / dmload][Running/Boot Start] <\SystemRoot\System32\drivers\dmload.sys><Microsoft Corp., Veritas Software.> [Microsoft Kernel DLS Syntheiszer / DMusic][Stopped/Manual Start] <system32\drivers\DMusic.sys><Microsoft Corporation> [Microsoft Kernel DRM Audio Descrambler / drmkaud][Stopped/Manual Start] <system32\drivers\drmkaud.sys><Microsoft Corporation> [ewido anti-spyware 4.0 driver / ewido anti-spyware 4.0 driver][Running/System Start] <\??\C:\Program Files\ewido anti-spyware 4.0\guard.sys><N/A> [Floppy Disk Controller Driver / Fdc][Running/Manual Start] <system32\DRIVERS\fdc.sys><Microsoft Corporation> [FltMgr / FltMgr][Running/Boot Start] <\SystemRoot\system32\DRIVERS\fltMgr.sys><Microsoft Corporation> [FsVga / FsVga][Running/System Start] <system32\DRIVERS\fsvga.sys><Microsoft Corporation> [Volume Manager Driver / Ftdisk][Running/Boot Start] <\SystemRoot\system32\DRIVERS\ftdisk.sys><Microsoft Corporation> [Game Port Enumerator / gameenum][Running/Manual Start] <system32\DRIVERS\gameenum.sys><Microsoft Corporation> [Generic Packet Classifier / Gpc][Running/Manual Start] <system32\DRIVERS\msgpc.sys><Microsoft Corporation> [HTTP / HTTP][Running/Manual Start] <System32\Drivers\HTTP.sys><Microsoft Corporation> [i8042 键盘和 PS/2 鼠标端口驱动程序 / i8042prt][Running/System Start] <system32\DRIVERS\i8042prt.sys><Microsoft Corporation>
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 14:23 \| 显示全部短消息资料字号：小中大 3楼 [i81x / i81x][Running/Manual Start] <system32\DRIVERS\i81xnt5.sys><Intel(R) Corporation> [iAimFP0 / iAimFP0][Stopped/Manual Start] <system32\DRIVERS\wADV01nt.sys><Intel(R) Corporation> [iAimFP1 / iAimFP1][Stopped/Manual Start] <system32\DRIVERS\wADV02NT.sys><Intel(R) Corporation> [iAimFP2 / iAimFP2][Stopped/Manual Start] <system32\DRIVERS\wADV05NT.sys><Intel(R) Corporation> [iAimFP3 / iAimFP3][Stopped/Manual Start] <system32\DRIVERS\wSiINTxx.sys><Intel(R) Corporation> [iAimFP4 / iAimFP4][Stopped/Manual Start] <system32\DRIVERS\wVchNTxx.sys><Intel(R) Corporation> [iAimFP5 / iAimFP5][Stopped/Manual Start] <system32\DRIVERS\wADV07nt.sys><Intel(R) Corporation> [iAimFP6 / iAimFP6][Stopped/Manual Start] <system32\DRIVERS\wADV08nt.sys><Intel(R) Corporation> [iAimFP7 / iAimFP7][Stopped/Manual Start] <system32\DRIVERS\wADV09nt.sys><Intel(R) Corporation> [iAimTV0 / iAimTV0][Stopped/Manual Start] <system32\DRIVERS\wATV01nt.sys><Intel(R) Corporation> [iAimTV1 / iAimTV1][Stopped/Manual Start] <system32\DRIVERS\wATV02NT.sys><Intel(R) Corporation> [iAimTV3 / iAimTV3][Stopped/Manual Start] <system32\DRIVERS\wATV04nt.sys><Intel(R) Corporation> [iAimTV4 / iAimTV4][Stopped/Manual Start] <system32\DRIVERS\wCh7xxNT.sys><Intel(R) Corporation> [iAimTV5 / iAimTV5][Stopped/Manual Start] <system32\DRIVERS\wATV10nt.sys><Intel(R) Corporation> [iAimTV6 / iAimTV6][Stopped/Manual Start] <system32\DRIVERS\wATV06nt.sys><Intel(R) Corporation> [CD 烧制筛选驱动器 / Imapi][Stopped/System Start] <system32\DRIVERS\imapi.sys><Microsoft Corporation> [IntelIde / IntelIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\intelide.sys><Microsoft Corporation> [IPv6 Windows Firewall Driver / Ip6Fw][Stopped/Manual Start] <system32\DRIVERS\Ip6Fw.sys><Microsoft Corporation> [IP Traffic Filter Driver / IpFilterDriver][Stopped/Manual Start] <system32\DRIVERS\ipfltdrv.sys><Microsoft Corporation> [IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start] <system32\DRIVERS\ipinip.sys><Microsoft Corporation> [IP Network Address Translator / IpNat][Running/Manual Start] <system32\DRIVERS\ipnat.sys><Microsoft Corporation> [IPSEC driver / IPSec][Running/System Start] <system32\DRIVERS\ipsec.sys><Microsoft Corporation> [IR Enumerator Service / IRENUM][Stopped/Manual Start] <system32\DRIVERS\irenum.sys><Microsoft Corporation> [PnP ISA/EISA Bus Driver / isapnp][Running/Boot Start] <\SystemRoot\system32\DRIVERS\isapnp.sys><Microsoft Corporation> [Keyboard Class Driver / Kbdclass][Running/System Start] <system32\DRIVERS\kbdclass.sys><Microsoft Corporation> [kl1 / kl1][Running/Boot Start] <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab> [klif / klif][Running/System Start] <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab> [Microsoft Kernel Wave Audio Mixer / kmixer][Running/Manual Start] <system32\drivers\kmixer.sys><Microsoft Corporation> [Mouse Class Driver / Mouclass][Running/System Start] <system32\DRIVERS\mouclass.sys><Microsoft Corporation> [WebDav Client Redirector / MRxDAV][Running/Manual Start] <system32\DRIVERS\mrxdav.sys><Microsoft Corporation> [MRxSmb / MRxSmb][Running/System Start] <system32\DRIVERS\mrxsmb.sys><Microsoft Corporation> [Microsoft Streaming Service Proxy / MSKSSRV][Stopped/Manual Start] <system32\drivers\MSKSSRV.sys><Microsoft Corporation> [Microsoft Streaming Clock Proxy / MSPCLOCK][Stopped/Manual Start] <system32\drivers\MSPCLOCK.sys><Microsoft Corporation> [Microsoft Streaming Quality Manager Proxy / MSPQM][Stopped/Manual Start] <system32\drivers\MSPQM.sys><Microsoft Corporation> [Microsoft System Management BIOS Driver / mssmbios][Running/Manual Start] <system32\DRIVERS\mssmbios.sys><Microsoft Corporation> [Microsoft MPU-401 MIDI UART Driver / ms_mpu401][Running/Manual Start] <system32\drivers\msmpu401.sys><Microsoft Corporation> [Remote Access NDIS TAPI Driver / NdisTapi][Running/Manual Start] <system32\DRIVERS\ndistapi.sys><Microsoft Corporation> [NDIS 用户模式 I/O 协议 / Ndisuio][Running/Manual Start] <system32\DRIVERS\ndisuio.sys><Microsoft Corporation> [Remote Access NDIS WAN Driver / NdisWan][Running/Manual Start] <system32\DRIVERS\ndiswan.sys><Microsoft Corporation> [NetBIOS Interface / NetBIOS][Running/System Start] <system32\DRIVERS\netbios.sys><Microsoft Corporation> [NetBios over Tcpip / NetBT][Running/System Start] <system32\DRIVERS\netbt.sys><Microsoft Corporation> [npkcrypt / npkcrypt][Running/Auto Start] <\??\D:\QQ软件\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start] <system32\DRIVERS\nwlnkflt.sys><Microsoft Corporation> [IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start] <system32\DRIVERS\nwlnkfwd.sys><Microsoft Corporation> [Intel PentiumIII Processor Driver / P3][Running/System Start] <system32\DRIVERS\p3.sys><Microsoft Corporation> [Parallel port driver / Parport][Running/Manual Start] <system32\DRIVERS\parport.sys><Microsoft Corporation> [PCI Bus Driver / PCI][Running/Boot Start] <\SystemRoot\system32\DRIVERS\pci.sys><Microsoft Corporation> [WAN Miniport (PPTP) / PptpMiniport][Running/Manual Start] <system32\DRIVERS\raspptp.sys><Microsoft Corporation> [QoS Packet Scheduler / PSched][Running/Manual Start] <system32\DRIVERS\psched.sys><Microsoft Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [Remote Access Auto Connection Driver / RasAcd][Running/System Start] <system32\DRIVERS\rasacd.sys><Microsoft Corporation> [WAN Miniport (L2TP) / Rasl2tp][Running/Manual Start] <system32\DRIVERS\rasl2tp.sys><Microsoft Corporation> [远程访问 PPPOE 驱动程序 / RasPppoe][Running/Manual Start] <system32\DRIVERS\raspppoe.sys><Microsoft Corporation> [Direct Parallel / Raspti][Running/Manual Start] <system32\DRIVERS\raspti.sys><Microsoft Corporation> [Rdbss / Rdbss][Running/System Start] <system32\DRIVERS\rdbss.sys><Microsoft Corporation> [RDPCDD / RDPCDD][Running/System Start] <System32\DRIVERS\RDPCDD.sys><Microsoft Corporation> [Terminal Server Device Redirector Driver / rdpdr][Running/Manual Start] <system32\DRIVERS\rdpdr.sys><Microsoft Corporation> [Digital CD Audio Playback Filter Driver / redbook][Running/System Start] <system32\DRIVERS\redbook.sys><Microsoft Corporation> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [Serenum Filter Driver / serenum][Running/Manual Start] <system32\DRIVERS\serenum.sys><Microsoft Corporation> [Serial port driver / Serial][Running/System Start] <system32\DRIVERS\serial.sys><Microsoft Corporation> [Microsoft Kernel Audio Splitter / splitter][Stopped/Manual Start] <system32\drivers\splitter.sys><Microsoft Corporation> [System Restore Filter Driver / sr][Running/Boot Start] <\SystemRoot\system32\DRIVERS\sr.sys><Microsoft Corporation> [Srv / Srv][Running/Manual Start] <system32\DRIVERS\srv.sys><Microsoft Corporation> [Software Bus Driver / swenum][Running/Manual Start] <system32\DRIVERS\swenum.sys><Microsoft Corporation> [Microsoft Kernel GS Wavetable Synthesizer / swmidi][Stopped/Manual Start] <system32\drivers\swmidi.sys><Microsoft Corporation> [Microsoft Kernel System Audio Device / sysaudio][Running/Manual Start] <system32\drivers\sysaudio.sys><Microsoft Corporation> [TCP/IP Protocol Driver / Tcpip][Running/System Start] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [Terminal Device Driver / TermDD][Running/System Start] <system32\DRIVERS\termdd.sys><Microsoft Corporation> [Microcode Update Driver / Update][Running/Manual Start] <system32\DRIVERS\update.sys><Microsoft Corporation> [USB2 Enabled Hub / usbhub][Running/Manual Start] <system32\DRIVERS\usbhub.sys><Microsoft Corporation> [USB 大容量存储设备 / USBSTOR][Stopped/Manual Start] <system32\DRIVERS\USBSTOR.SYS><Microsoft Corporation> [Microsoft USB Universal Host Controller Miniport Driver / usbuhci][Running/Manual Start] <system32\DRIVERS\usbuhci.sys><Microsoft Corporation> [VgaSave / VgaSave][Running/System Start] <\SystemRoot\System32\drivers\vga.sys><Microsoft Corporation> [Remote Access IP ARP Driver / Wanarp][Running/Manual Start] <system32\DRIVERS\wanarp.sys><Microsoft Corporation> [Microsoft WINMM WDM Audio Compatibility Driver / wdmaud][Running/Manual Start] <system32\drivers\wdmaud.sys><Microsoft Corporation> [Windows Driver Foundation - User-mode Driver Framework Platform Driver / WudfPf][Stopped/Manual Start] <system32\DRIVERS\WudfPf.sys><Microsoft Corporation> [Windows Driver Foundation - User-mode Driver Framework Reflector / WudfRd][Stopped/Manual Start] <system32\DRIVERS\wudfrd.sys><Microsoft Corporation> ==================================
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 14:24 \| 显示全部短消息资料字号：小中大 4楼浏览器加载项 [启动迅雷] {0062C9BD-B349-40DE-91A0-755F37ACD559} <D:\迅雷\Thunder.exe, Thunder Networking Technologies,LTD> [Web反病毒保护] {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll, Kaspersky Lab> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\QQ\QQ.EXE, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [百度超级搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, N/A> [Windows Live Toolbar] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [Windows Live Toolbar] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, N/A> [&使用迅雷下载] <D:\迅雷\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <D:\迅雷\Program\GetAllUrl.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> ================================== 正在运行的进程 [PID: 460][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 528][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 552][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 6.0.0.299] [PID: 596][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 608][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 760][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 816][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 880][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [PID: 932][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 972][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1292][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\windds32.dll] [N/A, N/A] [C:\WINDOWS\system32\windhcp.ocx] [N/A, N/A] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.304] [c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\shellex.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\Program Files\ewido anti-spyware 4.0\context.dll] [Anti-Malware Development a.s., 4, 0, 0, 172] [PID: 1328][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1512][C:\Program Files\ewido anti-spyware 4.0\ewido.exe] [Anti-Malware Development a.s., 4, 0, 0, 201] [C:\Program Files\ewido anti-spyware 4.0\engine.dll] [Anti-Malware Development a.s., 4, 0, 0, 172] [PID: 1548][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 288][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 4092][D:\千千静听\TTPlayer.exe] [Alen Soft, 4, 6, 8, 0] [D:\千千静听\ttpcomm.dll] [N/A, N/A] [D:\千千静听\ttpres.dll] [Alen Soft, 4, 6, 8, 0] [D:\千千静听\AddIn\ttp_lrcsh.dll] [N/A, N/A] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [D:\千千静听\AddIn\ttp_asf.dll] [N/A, N/A] [PID: 2732][D:\QQ软件\TT\TTraveler.exe] [腾讯公司, 3.1.0.261] [D:\QQ软件\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] [腾讯公司, 1, 1, 0, 5] [D:\QQ软件\TT\Plugins\TWeather\TWeather.dll] [, 1, 0, 0, 3] [D:\QQ软件\TT\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.304] [c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299] [C:\WINDOWS\system32\JPWB.IME] [常诚研制, 4.00.950] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [PID: 2552][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)] [PID: 2720][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)] [PID: 2924][D:\我的备份\扫描日志\日志文件\sreng2_PConline\SREng.EXE] [Smallfrogs Studio, 2.3.13.690] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost 127.0.0.1 http://xyq.163.com 127.0.0.1 xxx.net ================================== API HOOK 警告！System Repair Engineer 提醒你下面的函数内容与预期值不符，他们可能被一些恶意的软件所修改： RVA 错误： LoadLibraryA RVA 错误： LoadLibraryExA RVA 错误： LoadLibraryExW RVA 错误： LoadLibraryW ================================== [/CODE]
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 19:35 \| 显示全部短消息资料字号：小中大 5楼威金没有查到毒，兔子也没有可卸的 .这是我新的日志 [CODE] 2007-01-24,19:04:11 System Repair Engineer 2.3.13.690 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] <ravshell><C:\Progra~1\Eset\rund1132.exe> [N/A] <MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation] <Super Rabbit Desktop Search><; D:\超级兔子\MagicSet\SRSearch.exe> [] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] <run><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <UserFaultCheck><%systemroot%\system32\dumprep 0 -u> [N/A] <run12132><C:\WINDOWS\run11232.exe> [N/A] <popo2004><; F:\MP3 音乐\dj2\lib\popo2004\start.exe> [N/A] <kis><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"> [Kaspersky Lab] <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation] <StormCodec_Helper><"D:\暴风影音6.12\StormSet.exe" /S /opti> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,,"D:\文件夹加密大师\SVOHOST.EXE" un userinit.exe> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll> [Kaspersky Lab] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cmdmant] <WinlogonNotify: cmdmant><msgcom.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll> [Kaspersky Lab] [HKEY_CURRENT_USER\Control Panel\Desktop] <SCRNSAVE.EXE><C:\WINDOWS\system32\RainySs.scr> [N/A] ================================== 启动文件夹 N/A ================================== 服务 [Alerter / Alerter][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\system32\alrsvc.dll><Microsoft Corporation> [Application Layer Gateway Service / ALG][Running/Manual Start] <C:\WINDOWS\System32\alg.exe><Microsoft Corporation> [Application Management / AppMgmt][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><Microsoft Corporation> [Windows Audio / AudioSrv][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\audiosrv.dll><Microsoft Corporation> [卡巴斯基互联网安全套装 6.0 / AVP][Running/Auto Start] <"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r><Kaspersky Lab> [Background Intelligent Transfer Service / BITS][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\qmgr.dll><Microsoft Corporation> [Computer Browser / Browser][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\browser.dll><Microsoft Corporation> [Indexing Service / CiSvc][Stopped/Manual Start] <C:\WINDOWS\system32\cisvc.exe><Microsoft Corporation> [ClipBook / ClipSrv][Stopped/Disabled] <C:\WINDOWS\system32\clipsrv.exe><Microsoft Corporation> [COM+ System Application / COMSysApp][Stopped/Manual Start] <C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}><Microsoft Corporation> [Cryptographic Services / CryptSvc][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\cryptsvc.dll><Microsoft Corporation> [DCOM Server Process Launcher / DcomLaunch][Running/Auto Start] <C:\WINDOWS\system32\svchost -k DcomLaunch-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [DHCP Client / Dhcp][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\dhcpcsvc.dll><Microsoft Corporation> [Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start] <C:\WINDOWS\System32\dmadmin.exe /com><Microsoft Corp., Veritas Software> [Logical Disk Manager / dmserver][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\dmserver.dll><Microsoft Corp.> [DNS Client / Dnscache][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k NetworkService-->%SystemRoot%\System32\dnsrslvr.dll><Microsoft Corporation> [Error Reporting Service / ERSvc][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\ersvc.dll><Microsoft Corporation> [Event Log / Eventlog][Running/Auto Start] <C:\WINDOWS\system32\services.exe><Microsoft Corporation> [COM+ Event System / EventSystem][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\es.dll><Microsoft Corporation> [ewido anti-spyware 4.0 guard / ewido anti-spyware 4.0 guard][Running/Auto Start] <C:\Program Files\ewido anti-spyware 4.0\guard.exe><Anti-Malware Development a.s.> [Fast User Switching Compatibility / FastUserSwitchingCompatibility][Running/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Help and Support / helpsvc][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><Microsoft Corporation> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [HTTP SSL / HTTPFilter][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k HTTPFilter-->%SystemRoot%\System32\w3ssl.dll><Microsoft Corporation> [IMAPI CD-Burning COM Service / ImapiService][Stopped/Manual Start] <C:\WINDOWS\system32\imapi.exe><Microsoft Corporation> [Server / lanmanserver][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\srvsvc.dll><Microsoft Corporation> [Workstation / lanmanworkstation][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\wkssvc.dll><Microsoft Corporation> [TCP/IP NetBIOS Helper / LmHosts][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\lmhsvc.dll><Microsoft Corporation> [Messenger / Messenger][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\msgsvc.dll><Microsoft Corporation> [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start] <C:\WINDOWS\system32\mnmsrvc.exe><Microsoft Corporation> [Distributed Transaction Coordinator / MSDTC][Stopped/Manual Start] <C:\WINDOWS\system32\msdtc.exe><Microsoft Corporation> [Windows Installer / MSIServer][Running/Manual Start] <C:\WINDOWS\system32\msiexec.exe /V><Microsoft Corporation> [Network DDE / NetDDE][Stopped/Disabled] <C:\WINDOWS\system32\netdde.exe><Microsoft Corporation> [Network DDE DSDM / NetDDEdsdm][Stopped/Disabled] <C:\WINDOWS\system32\netdde.exe><Microsoft Corporation> [Net Logon / Netlogon][Stopped/Manual Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Network Connections / Netman][Running/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\netman.dll><Microsoft Corporation> [Network Location Awareness (NLA) / Nla][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\mswsock.dll><Microsoft Corporation> [NT LM Security Support Provider / NtLmSsp][Stopped/Manual Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Removable Storage / NtmsSvc][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\ntmssvc.dll><Microsoft Corporation> [Plug and Play / PlugPlay][Running/Auto Start] <C:\WINDOWS\system32\services.exe><Microsoft Corporation> [IPSEC Services / PolicyAgent][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Protected Storage / ProtectedStorage][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasauto.dll><Microsoft Corporation> [Remote Access Connection Manager / RasMan][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasmans.dll><Microsoft Corporation> [Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start] <C:\WINDOWS\system32\sessmgr.exe><Microsoft Corporation> [Routing and Remote Access / RemoteAccess][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\mprdim.dll><Microsoft Corporation> [Remote Registry / RemoteRegistry][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\system32\regsvc.dll><Microsoft Corporation> [Remote Procedure Call (RPC) Locator / RpcLocator][Stopped/Manual Start] <C:\WINDOWS\system32\locator.exe><Microsoft Corporation> [Remote Procedure Call (RPC) / RpcSs][Running/Auto Start] <C:\WINDOWS\system32\svchost -k rpcss-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [QoS RSVP / RSVP][Stopped/Manual Start] <C:\WINDOWS\system32\rsvp.exe><Microsoft Corporation> [Security Accounts Manager / SamSs][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Smart Card / SCardSvr][Stopped/Manual Start] <C:\WINDOWS\System32\SCardSvr.exe><Microsoft Corporation> [Task Scheduler / Schedule][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\system32\schedsvc.dll><Microsoft Corporation> [Secondary Logon / seclogon][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\seclogon.dll><Microsoft Corporation> [System Event Notification / SENS][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\sens.dll><Microsoft Corporation> [Windows Firewall/Internet Connection Sharing (ICS) / SharedAccess][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\ipnathlp.dll><Microsoft Corporation> [Shell Hardware Detection / ShellHWDetection][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Print Spooler / Spooler][Running/Auto Start]
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 19:36 \| 显示全部短消息资料字号：小中大 6楼 <C:\WINDOWS\system32\spoolsv.exe><Microsoft Corporation> [System Restore Service / srservice][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\srsvc.dll><Microsoft Corporation> [SSDP Discovery Service / SSDPSRV][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\ssdpsrv.dll><Microsoft Corporation> [Windows Image Acquisition (WIA) / stisvc][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k imgsvc-->%SystemRoot%\system32\wiaservc.dll><Microsoft Corporation> [MS Software Shadow Copy Provider / SwPrv][Stopped/Manual Start] <C:\WINDOWS\system32\dllhost.exe /Processid:{F8109D93-FD71-4CD3-B4C0-4D9C009B8495}><Microsoft Corporation> [Performance Logs and Alerts / SysmonLog][Stopped/Manual Start] <C:\WINDOWS\system32\smlogsvc.exe><Microsoft Corporation> [Telephony / TapiSrv][Running/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\tapisrv.dll><Microsoft Corporation> [Terminal Services / TermService][Running/Manual Start] <C:\WINDOWS\System32\svchost -k DComLaunch-->%SystemRoot%\System32\termsrv.dll><Microsoft Corporation> [Themes / Themes][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Telnet / TlntSvr][Stopped/Disabled] <C:\WINDOWS\system32\tlntsvr.exe><Microsoft Corporation> [Distributed Link Tracking Client / TrkWks][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\trkwks.dll><Microsoft Corporation> [Universal Plug and Play Device Host / upnphost][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\upnphost.dll><Microsoft Corporation> [Uninterruptible Power Supply / UPS][Stopped/Manual Start] <C:\WINDOWS\System32\ups.exe><Microsoft Corporation> [Volume Shadow Copy / VSS][Stopped/Manual Start] <C:\WINDOWS\System32\vssvc.exe><Microsoft Corporation> [Windows Time / W32Time][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\w32time.dll><Microsoft Corporation> [WebClient / WebClient][Running/Auto Start] ing Compatibility / FastUserSwitchingCompatibility][Running/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Help and Support / helpsvc][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><Microsoft Corporation> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [HTTP SSL / HTTPFilter][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k HTTPFilter-->%SystemRoot%\System32\w3ssl.dll><Microsoft Corporation> [IMAPI CD-Burning COM Service / ImapiService][Stopped/Manual Start] <C:\WINDOWS\system32\imapi.exe><Microsoft Corporation> [Server / lanmanserver][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\srvsvc.dll><Microsoft Corporation> [Workstation / lanmanworkstation][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\wkssvc.dll><Microsoft Corporation> [TCP/IP NetBIOS Helper / LmHosts][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\lmhsvc.dll><Microsoft Corporation> [Messenger / Messenger][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\msgsvc.dll><Microsoft Corporation> [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start] <C:\WINDOWS\system32\mnmsrvc.exe><Microsoft Corporation> [Distributed Transaction Coordinator / MSDTC][Stopped/Manual Start] <C:\WINDOWS\system32\msdtc.exe><Microsoft Corporation> [Windows Installer / MSIServer][Running/Manual Start] <C:\WINDOWS\system32\msiexec.exe /V><Microsoft Corporation> [Network DDE / NetDDE][Stopped/Disabled] <C:\WINDOWS\system32\netdde.exe><Microsoft Corporation> [Network DDE DSDM / NetDDEdsdm][Stopped/Disabled] <C:\WINDOWS\system32\netdde.exe><Microsoft Corporation> [Net Logon / Netlogon][Stopped/Manual Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Network Connections / Netman][Running/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\netman.dll><Microsoft Corporation> [Network Location Awareness (NLA) / Nla][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\mswsock.dll><Microsoft Corporation> [NT LM Security Support Provider / NtLmSsp][Stopped/Manual Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Removable Storage / NtmsSvc][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\ntmssvc.dll><Microsoft Corporation> [Plug and Play / PlugPlay][Running/Auto Start] <C:\WINDOWS\system32\services.exe><Microsoft Corporation> [IPSEC Services / PolicyAgent][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Protected Storage / ProtectedStorage][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasauto.dll><Microsoft Corporation> [Remote Access Connection Manager / RasMan][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasmans.dll><Microsoft Corporation> [Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start] <C:\WINDOWS\system32\sessmgr.exe><Microsoft Corporation> [Routing and Remote Access / RemoteAccess][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\mprdim.dll><Microsoft Corporation> [Remote Registry / RemoteRegistry][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\system32\regsvc.dll><Microsoft Corporation> [Remote Procedure Call (RPC) Locator / RpcLocator][Stopped/Manual Start] <C:\WINDOWS\system32\locator.exe><Microsoft Corporation> [Remote Procedure Call (RPC) / RpcSs][Running/Auto Start] <C:\WINDOWS\system32\svchost -k rpcss-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [QoS RSVP / RSVP][Stopped/Manual Start] <C:\WINDOWS\system32\rsvp.exe><Microsoft Corporation> [Security Accounts Manager / SamSs][Running/Auto Start] <C:\WINDOWS\system32\lsass.exe><Microsoft Corporation> [Smart Card / SCardSvr][Stopped/Manual Start] <C:\WINDOWS\System32\SCardSvr.exe><Microsoft Corporation> [Task Scheduler / Schedule][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\system32\schedsvc.dll><Microsoft Corporation> [Secondary Logon / seclogon][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\seclogon.dll><Microsoft Corporation> [System Event Notification / SENS][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\sens.dll><Microsoft Corporation> [Windows Firewall/Internet Connection Sharing (ICS) / SharedAccess][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\ipnathlp.dll><Microsoft Corporation> [Shell Hardware Detection / ShellHWDetection][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Print Spooler / Spooler][Running/Auto Start] <C:\WINDOWS\system32\spoolsv.exe><Microsoft Corporation> [System Restore Service / srservice][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\srsvc.dll><Microsoft Corporation> [SSDP Discovery Service / SSDPSRV][Running/Manual Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\ssdpsrv.dll><Microsoft Corporation> [Windows Image Acquisition (WIA) / stisvc][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k imgsvc-->%SystemRoot%\system32\wiaservc.dll><Microsoft Corporation> [MS Software Shadow Copy Provider / SwPrv][Stopped/Manual Start] <C:\WINDOWS\system32\dllhost.exe /Processid:{F8109D93-FD71-4CD3-B4C0-4D9C009B8495}><Microsoft Corporation> [Performance Logs and Alerts / SysmonLog][Stopped/Manual Start] <C:\WINDOWS\system32\smlogsvc.exe><Microsoft Corporation> [Telephony / TapiSrv][Running/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\tapisrv.dll><Microsoft Corporation> [Terminal Services / TermService][Running/Manual Start] <C:\WINDOWS\System32\svchost -k DComLaunch-->%SystemRoot%\System32\termsrv.dll><Microsoft Corporation> [Themes / Themes][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\shsvcs.dll><Microsoft Corporation> [Telnet / TlntSvr][Stopped/Disabled] <C:\WINDOWS\system32\tlntsvr.exe><Microsoft Corporation> [Distributed Link Tracking Client / TrkWks][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\trkwks.dll><Microsoft Corporation> [Universal Plug and Play Device Host / upnphost][Stopped/Manual Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\upnphost.dll><Microsoft Corporation> [Uninterruptible Power Supply / UPS][Stopped/Manual Start] <C:\WINDOWS\System32\ups.exe><Microsoft Corporation> [Volume Shadow Copy / VSS][Stopped/Manual Start] <C:\WINDOWS\System32\vssvc.exe><Microsoft Corporation> [Windows Time / W32Time][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\w32time.dll><Microsoft Corporation> [WebClient / WebClient][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k LocalService-->%SystemRoot%\System32\webclnt.dll><Microsoft Corporation> [Win32 Display Driver / Win32DDS][Stopped/Auto Start] <C:\WINDOWS\system32\\rundll32.exe windds32.dll,input><Microsoft Corporation> [Windows DHCP Service / WinDHCPsvc][Stopped/Auto Start] <C:\WINDOWS\system32\\rundll32.exe windhcp.ocx,input><Microsoft Corporation> [Windows Management Instrumentation / winmgmt][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\wbem\WMIsvc.dll><Microsoft Corporation> [Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\MsPMSNSv.dll><Microsoft Corporation> [Windows Management Instrumentation Driver Extensions / Wmi][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\advapi32.dll><Microsoft Corporation> [WMI Performance Adapter / WmiApSrv][Stopped/Manual Start] <C:\WINDOWS\system32\wbem\wmiapsrv.exe><Microsoft Corporation> [Windows Media Player Network Sharing Service / WMPNetworkSvc][Stopped/Manual Start] <"C:\Program Files\Windows Media Player\WMPNetwk.exe"><Microsoft Corporation> [Security Center / wscsvc][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SYSTEMROOT%\system32\wscsvc.dll><Microsoft Corporation> [Automatic Updates / wuauserv][Running/Auto Start] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\wuauserv.dll><Microsoft Corporation> [Windows Driver Foundation - User-mode Driver Framework / WudfSvc][Stopped/Manual Start]
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 19:38 \| 显示全部短消息资料字号：小中大 7楼 <C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup-->%SystemRoot%\System32\WUDFSvc.dll><Microsoft Corporation> [Wireless Zero Configuration / WZCSVC][Running/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\wzcsvc.dll><Microsoft Corporation> [Network Provisioning Service / xmlprov][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\xmlprov.dll><Microsoft Corporation> ================================== 驱动程序 [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start] <system32\drivers\ac97intc.sys><Intel Corporation> [Microsoft ACPI Driver / ACPI][Running/Boot Start] <\SystemRoot\system32\DRIVERS\ACPI.sys><Microsoft Corporation> [Microsoft Kernel Acoustic Echo Canceller / aec][Stopped/Manual Start] <system32\drivers\aec.sys><Microsoft Corporation> [AFD / AFD][Running/System Start] <\SystemRoot\System32\drivers\afd.sys><Microsoft Corporation> [RAS Asynchronous Media Driver / AsyncMac][Stopped/Manual Start] <system32\DRIVERS\asyncmac.sys><Microsoft Corporation> [标准 IDE/ESDI 硬盘控制器 / atapi][Running/Boot Start] <\SystemRoot\system32\DRIVERS\atapi.sys><Microsoft Corporation> [ATM ARP Client Protocol / Atmarpc][Stopped/Manual Start] <system32\DRIVERS\atmarpc.sys><Microsoft Corporation> [音频存根驱动程序 / audstub][Running/Manual Start] <system32\DRIVERS\audstub.sys><Microsoft Corporation> [CD-ROM Driver / Cdrom][Running/System Start] <system32\DRIVERS\cdrom.sys><Microsoft Corporation> [磁盘驱动器 / Disk][Running/Boot Start] <\SystemRoot\system32\DRIVERS\disk.sys><Microsoft Corporation> [dmboot / dmboot][Stopped/Disabled] <System32\drivers\dmboot.sys><Microsoft Corp., Veritas Software> [Logical Disk Manager Driver / dmio][Running/Boot Start] <\SystemRoot\System32\drivers\dmio.sys><Microsoft Corp., Veritas Software> [dmload / dmload][Running/Boot Start] <\SystemRoot\System32\drivers\dmload.sys><Microsoft Corp., Veritas Software.> [Microsoft Kernel DLS Syntheiszer / DMusic][Stopped/Manual Start] <system32\drivers\DMusic.sys><Microsoft Corporation> [Microsoft Kernel DRM Audio Descrambler / drmkaud][Stopped/Manual Start] <system32\drivers\drmkaud.sys><Microsoft Corporation> [ewido anti-spyware 4.0 driver / ewido anti-spyware 4.0 driver][Running/System Start] <\??\C:\Program Files\ewido anti-spyware 4.0\guard.sys><N/A> [Floppy Disk Controller Driver / Fdc][Running/Manual Start] <system32\DRIVERS\fdc.sys><Microsoft Corporation> [FltMgr / FltMgr][Running/Boot Start] <\SystemRoot\system32\DRIVERS\fltMgr.sys><Microsoft Corporation> [FsVga / FsVga][Running/System Start] <system32\DRIVERS\fsvga.sys><Microsoft Corporation> [Volume Manager Driver / Ftdisk][Running/Boot Start] <\SystemRoot\system32\DRIVERS\ftdisk.sys><Microsoft Corporation> [Game Port Enumerator / gameenum][Running/Manual Start] <system32\DRIVERS\gameenum.sys><Microsoft Corporation> [Generic Packet Classifier / Gpc][Running/Manual Start] <system32\DRIVERS\msgpc.sys><Microsoft Corporation> [HTTP / HTTP][Running/Manual Start] <System32\Drivers\HTTP.sys><Microsoft Corporation> [i8042 键盘和 PS/2 鼠标端口驱动程序 / i8042prt][Running/System Start] <system32\DRIVERS\i8042prt.sys><Microsoft Corporation> [i81x / i81x][Running/Manual Start] <system32\DRIVERS\i81xnt5.sys><Intel(R) Corporation> [iAimFP0 / iAimFP0][Stopped/Manual Start] <system32\DRIVERS\wADV01nt.sys><Intel(R) Corporation> [iAimFP1 / iAimFP1][Stopped/Manual Start] <system32\DRIVERS\wADV02NT.sys><Intel(R) Corporation> [iAimFP2 / iAimFP2][Stopped/Manual Start] <system32\DRIVERS\wADV05NT.sys><Intel(R) Corporation> [iAimFP3 / iAimFP3][Stopped/Manual Start] <system32\DRIVERS\wSiINTxx.sys><Intel(R) Corporation> [iAimFP4 / iAimFP4][Stopped/Manual Start] <system32\DRIVERS\wVchNTxx.sys><Intel(R) Corporation> [iAimFP5 / iAimFP5][Stopped/Manual Start] <system32\DRIVERS\wADV07nt.sys><Intel(R) Corporation> [iAimFP6 / iAimFP6][Stopped/Manual Start] <system32\DRIVERS\wADV08nt.sys><Intel(R) Corporation> [iAimFP7 / iAimFP7][Stopped/Manual Start] <system32\DRIVERS\wADV09nt.sys><Intel(R) Corporation> [iAimTV0 / iAimTV0][Stopped/Manual Start] <system32\DRIVERS\wATV01nt.sys><Intel(R) Corporation> [iAimTV1 / iAimTV1][Stopped/Manual Start] <system32\DRIVERS\wATV02NT.sys><Intel(R) Corporation> [iAimTV3 / iAimTV3][Stopped/Manual Start] <system32\DRIVERS\wATV04nt.sys><Intel(R) Corporation> [iAimTV4 / iAimTV4][Stopped/Manual Start] <system32\DRIVERS\wCh7xxNT.sys><Intel(R) Corporation> [iAimTV5 / iAimTV5][Stopped/Manual Start] <system32\DRIVERS\wATV10nt.sys><Intel(R) Corporation> [iAimTV6 / iAimTV6][Stopped/Manual Start] <system32\DRIVERS\wATV06nt.sys><Intel(R) Corporation> [CD 烧制筛选驱动器 / Imapi][Stopped/System Start] <system32\DRIVERS\imapi.sys><Microsoft Corporation> [IntelIde / IntelIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\intelide.sys><Microsoft Corporation> [IPv6 Windows Firewall Driver / Ip6Fw][Stopped/Manual Start] <system32\DRIVERS\Ip6Fw.sys><Microsoft Corporation> [IP Traffic Filter Driver / IpFilterDriver][Stopped/Manual Start] <system32\DRIVERS\ipfltdrv.sys><Microsoft Corporation> [IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start] <system32\DRIVERS\ipinip.sys><Microsoft Corporation> [IP Network Address Translator / IpNat][Running/Manual Start] <system32\DRIVERS\ipnat.sys><Microsoft Corporation> [IPSEC driver / IPSec][Running/System Start] <system32\DRIVERS\ipsec.sys><Microsoft Corporation> [IR Enumerator Service / IRENUM][Stopped/Manual Start] <system32\DRIVERS\irenum.sys><Microsoft Corporation> [PnP ISA/EISA Bus Driver / isapnp][Running/Boot Start] <\SystemRoot\system32\DRIVERS\isapnp.sys><Microsoft Corporation> [Keyboard Class Driver / Kbdclass][Running/System Start] <system32\DRIVERS\kbdclass.sys><Microsoft Corporation> [kl1 / kl1][Running/Boot Start] <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab> [klif / klif][Running/System Start] <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab> [Microsoft Kernel Wave Audio Mixer / kmixer][Running/Manual Start] <system32\drivers\kmixer.sys><Microsoft Corporation> [Mouse Class Driver / Mouclass][Running/System Start] <system32\DRIVERS\mouclass.sys><Microsoft Corporation> [WebDav Client Redirector / MRxDAV][Running/Manual Start] <system32\DRIVERS\mrxdav.sys><Microsoft Corporation> [MRxSmb / MRxSmb][Running/System Start] <system32\DRIVERS\mrxsmb.sys><Microsoft Corporation> [Microsoft Streaming Service Proxy / MSKSSRV][Stopped/Manual Start] <system32\drivers\MSKSSRV.sys><Microsoft Corporation> [Microsoft Streaming Clock Proxy / MSPCLOCK][Stopped/Manual Start] <system32\drivers\MSPCLOCK.sys><Microsoft Corporation> [Microsoft Streaming Quality Manager Proxy / MSPQM][Stopped/Manual Start] <system32\drivers\MSPQM.sys><Microsoft Corporation> [Microsoft System Management BIOS Driver / mssmbios][Running/Manual Start] <system32\DRIVERS\mssmbios.sys><Microsoft Corporation> [Microsoft MPU-401 MIDI UART Driver / ms_mpu401][Running/Manual Start] <system32\drivers\msmpu401.sys><Microsoft Corporation> [Remote Access NDIS TAPI Driver / NdisTapi][Running/Manual Start] <system32\DRIVERS\ndistapi.sys><Microsoft Corporation> [NDIS 用户模式 I/O 协议 / Ndisuio][Running/Manual Start] <system32\DRIVERS\ndisuio.sys><Microsoft Corporation> [Remote Access NDIS WAN Driver / NdisWan][Running/Manual Start] <system32\DRIVERS\ndiswan.sys><Microsoft Corporation> [NetBIOS Interface / NetBIOS][Running/System Start] <system32\DRIVERS\netbios.sys><Microsoft Corporation> [NetBios over Tcpip / NetBT][Running/System Start] <system32\DRIVERS\netbt.sys><Microsoft Corporation> [npkcrypt / npkcrypt][Running/Auto Start] <\??\D:\QQ软件\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start] <system32\DRIVERS\nwlnkflt.sys><Microsoft Corporation> [IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start] <system32\DRIVERS\nwlnkfwd.sys><Microsoft Corporation> [Intel PentiumIII Processor Driver / P3][Running/System Start] <system32\DRIVERS\p3.sys><Microsoft Corporation> [Parallel port driver / Parport][Running/Manual Start] <system32\DRIVERS\parport.sys><Microsoft Corporation> [PCI Bus Driver / PCI][Running/Boot Start] <\SystemRoot\system32\DRIVERS\pci.sys><Microsoft Corporation> [WAN Miniport (PPTP) / PptpMiniport][Running/Manual Start] <system32\DRIVERS\raspptp.sys><Microsoft Corporation> [QoS Packet Scheduler / PSched][Running/Manual Start] <system32\DRIVERS\psched.sys><Microsoft Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [Remote Access Auto Connection Driver / RasAcd][Running/System Start] <system32\DRIVERS\rasacd.sys><Microsoft Corporation> [WAN Miniport (L2TP) / Rasl2tp][Running/Manual Start] <system32\DRIVERS\rasl2tp.sys><Microsoft Corporation> [远程访问 PPPOE 驱动程序 / RasPppoe][Running/Manual Start] <system32\DRIVERS\raspppoe.sys><Microsoft Corporation> [Direct Parallel / Raspti][Running/Manual Start] <system32\DRIVERS\raspti.sys><Microsoft Corporation> [Rdbss / Rdbss][Running/System Start] <system32\DRIVERS\rdbss.sys><Microsoft Corporation> [RDPCDD / RDPCDD][Running/System Start] <System32\DRIVERS\RDPCDD.sys><Microsoft Corporation> [Terminal Server Device Redirector Driver / rdpdr][Running/Manual Start] <system32\DRIVERS\rdpdr.sys><Microsoft Corporation> [Digital CD Audio Playback Filter Driver / redbook][Running/System Start] <system32\DRIVERS\redbook.sys><Microsoft Corporation> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [Serenum Filter Driver / serenum][Running/Manual Start] <system32\DRIVERS\serenum.sys><Microsoft Corporation> [Serial port driver / Serial][Running/System Start] <system32\DRIVERS\serial.sys><Microsoft Corporation> [Microsoft Kernel Audio Splitter / splitter][Stopped/Manual Start] <system32\drivers\splitter.sys><Microsoft Corporation> [System Restore Filter Driver / sr][Running/Boot Start] <\SystemRoot\system32\DRIVERS\sr.sys><Microsoft Corporation> [Srv / Srv][Running/Manual Start] <system32\DRIVERS\srv.sys><Microsoft Corporation> [Software Bus Driver / swenum][Running/Manual Start] <system32\DRIVERS\swenum.sys><Microsoft Corporation> [Microsoft Kernel GS Wavetable Synthesizer / swmidi][Stopped/Manual Start] <system32\drivers\swmidi.sys><Microsoft Corporation>
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 19:47 \| 显示全部短消息资料字号：小中大 8楼 [Microsoft Kernel System Audio Device / sysaudio][Running/Manual Start] <system32\drivers\sysaudio.sys><Microsoft Corporation> [TCP/IP Protocol Driver / Tcpip][Running/System Start] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [Terminal Device Driver / TermDD][Running/System Start] <system32\DRIVERS\termdd.sys><Microsoft Corporation> [Microcode Update Driver / Update][Running/Manual Start] <system32\DRIVERS\update.sys><Microsoft Corporation> [USB2 Enabled Hub / usbhub][Running/Manual Start] <system32\DRIVERS\usbhub.sys><Microsoft Corporation> [USB 大容量存储设备 / USBSTOR][Stopped/Manual Start] <system32\DRIVERS\USBSTOR.SYS><Microsoft Corporation> [Microsoft USB Universal Host Controller Miniport Driver / usbuhci][Running/Manual Start] <system32\DRIVERS\usbuhci.sys><Microsoft Corporation> [VgaSave / VgaSave][Running/System Start] <\SystemRoot\System32\drivers\vga.sys><Microsoft Corporation> [Remote Access IP ARP Driver / Wanarp][Running/Manual Start] <system32\DRIVERS\wanarp.sys><Microsoft Corporation> [Microsoft WINMM WDM Audio Compatibility Driver / wdmaud][Running/Manual Start] <system32\drivers\wdmaud.sys><Microsoft Corporation> [Windows Driver Foundation - User-mode Driver Framework Platform Driver / WudfPf][Stopped/Manual Start] <system32\DRIVERS\WudfPf.sys><Microsoft Corporation> [Windows Driver Foundation - User-mode Driver Framework Reflector / WudfRd][Stopped/Manual Start] <system32\DRIVERS\wudfrd.sys><Microsoft Corporation> ================================== 浏览器加载项 [启动迅雷] {0062C9BD-B349-40DE-91A0-755F37ACD559} <D:\迅雷\Thunder.exe, Thunder Networking Technologies,LTD> [Web反病毒保护] {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll, Kaspersky Lab> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\QQ\QQ.EXE, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [百度超级搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, N/A> [Windows Live Toolbar] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [Windows Live Toolbar] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, N/A> [&使用迅雷下载] <D:\迅雷\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <D:\迅雷\Program\GetAllUrl.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> ================================== 正在运行的进程 [PID: 464][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 532][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 556][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 6.0.0.299] [PID: 600][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 612][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 772][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 820][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 888][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [PID: 936][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1044][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1220][D:\文件夹加密大师\SVOHOST.EXE] [, 3000.0.0.0] [PID: 1268][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\windds32.dll] [N/A, N/A] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [PID: 1336][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1524][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1532][C:\Program Files\MSN Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.0.0812.00] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [PID: 352][C:\Program Files\ewido anti-spyware 4.0\guard.exe] [Anti-Malware Development a.s., 4, 0, 0, 172] [C:\Program Files\ewido anti-spyware 4.0\engine.dll] [Anti-Malware Development a.s., 4, 0, 0, 172] [PID: 112][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 3628][D:\千千静听\TTPlayer.exe] [Alen Soft, 4, 6, 8, 0] [D:\千千静听\ttpcomm.dll] [N/A, N/A] [D:\千千静听\ttpres.dll] [Alen Soft, 4, 6, 8, 0] [D:\千千静听\AddIn\ttp_asf.dll] [N/A, N/A] [D:\千千静听\AddIn\ttp_aac.dll] [N/A, N/A] [D:\千千静听\AddIn\ttp_ac3dts.dll] [N/A, N/A] [D:\千千静听\AddIn\ttp_lrcsh.dll] [N/A, N/A] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [D:\千千静听\mp3PRO.dll] [Coding Technologies GmbH, 1, 1, 0, 0] [PID: 2708][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)] [PID: 484][D:\POPO2004\POPOGame2\popogame.exe] [N/A, 2, 0, 17583, 1] [D:\POPO2004\POPOGame2\httpsock.dll] [N/A, 2, 0, 17709, 0] [D:\POPO2004\POPOGame2\pywinapi.dll] [N/A, 2, 0, 16656, 0] [D:\POPO2004\POPOGame2\hallnet.dll] [N/A, 2, 0, 15110, 0] [D:\POPO2004\POPOGame2\PyParser.dll] [N/A, 2, 0, 15265, 1] [D:\POPO2004\POPOGame2\mplugin.dll] [N/A, 2, 0, 14444, 1] [D:\POPO2004\POPOGame2\fetchtca.dll] [N/A, N/A] [D:\POPO2004\POPOGame2\unzip.dll] [N/A, 2, 0, 18082, 1] [PID: 3392][D:\QQ软件\TT\TTraveler.exe] [腾讯公司, 3.1.0.261] [D:\QQ软件\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] [腾讯公司, 1, 1, 0, 5] [D:\QQ软件\TT\Plugins\TWeather\TWeather.dll] [, 1, 0, 0, 3] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [D:\QQ软件\TT\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.304] [c:\program files\kaspersky lab\kaspersky internet security 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299] [c:\program files\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINDOWS\system32\JPWB.IME] [常诚研制, 4.00.950] [PID: 3036][D:\QQ软件\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0] [D:\QQ软件\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\QQHelperDll.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370] [D:\QQ软件\QQ\PYKer.dll] [飘云 http://www.pyqq.cn, 飘云] [D:\QQ软件\QQ\ipsearcher.dll] [, 1.0.0.3] [D:\QQ软件\QQ\QQAPI.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [D:\QQ软件\QQ\LoginCtrl.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1] [D:\QQ软件\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [D:\QQ软件\QQ\QQRes.dll] [tencent, 1, 0, 0, 1] [D:\QQ软件\QQ\QQMainFrame.dll] [N/A, N/A] [D:\QQ软件\QQ\CQQApplication.dll] [N/A, N/A] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [D:\QQ软件\QQ\NewSkin.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\HostingMgr.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\CameraDll.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\MailSummary.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\QQAllInOne.dll] [N/A, N/A] [D:\QQ软件\QQ\GroupLive.dll] [N/A, N/A] [D:\QQ软件\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1] [D:\QQ软件\QQ\QQMMSender.dll] [N/A, N/A] [D:\QQ软件\QQ\QQSettingCtrl.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [D:\QQ软件\QQ\QQGroupMng.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\QQSysMsgMng.dll] [N/A, N/A] [D:\QQ软件\QQ\QQSpace.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\QQAvatar.dll] [N/A, N/A] [D:\QQ软件\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1] [D:\QQ软件\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\QQPlugin.dll] [N/A, N/A] [D:\QQ软件\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160] [D:\QQ软件\QQ\QRingMng.dll] [N/A, N/A] [D:\QQ软件\QQ\PhoneAPI.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [D:\QQ软件\QQ\VPortal.dll] [, 1, 0, 0, 4] [D:\QQ软件\QQ\QQPet.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\BQQApplication.dll] [N/A, N/A] [D:\QQ软件\QQ\CommercesMng.dll] [, 1, 0, 0, 1] [D:\QQ软件\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [D:\QQ软件\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240] [D:\QQ软件\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 3, 30] [D:\QQ软件\QQ\QQSceneMng.dll] [N/A, N/A] [PID: 3088][D:\QQ软件\QQ\TIMPlatform.exe] [tencent, 0, 3, 1, 8] [D:\QQ软件\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 3932][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)] [PID: 3888][C:\WINDOWS\system32\msiexec.exe] [Microsoft Corporation, 3.1.4000.1823] [C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [PID: 708][C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE] [Microsoft Corporation, 11.0.5525] [PID: 3820][D:\QQ软件\TT\TCPlus.exe] [腾讯公司, 1, 0, 0, 5]
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 19:47 \| 显示全部短消息资料字号：小中大 9楼 [D:\QQ软件\TT\QQDownload.dll] [Tencent Technology (Shenzhen) Company Limited, 1, 0, 101, 28] [D:\QQ软件\TT\TNProxy.dll] [Tencent Technology(Shenzhen) Company Limited, 2, 1, 101, 60] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [PID: 2972][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)] [PID: 1128][D:\超级兔子\MagicSet\srgui.exe] [Super Rabbit Soft, 7.93] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] [PID: 3732][D:\超级兔子\MagicSet\SRCK.EXE] [Super Rabbit Soft, 7.93] [D:\超级兔子\MagicSet\shlobj71.ocx] [Sky Software (http://www.ssware.com), 7, 1, 0, 0] [D:\超级兔子\MagicSet\fldrvw71.ocx] [Sky Software (http://www.ssware.com), 7, 1, 0, 0] [PID: 3312][D:\我的备份\扫描日志\日志文件\sreng2_PConline\SREng.EXE] [Smallfrogs Studio, 2.3.13.690] [C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll] [Kaspersky Lab, 6.0.0.299] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost 127.0.0.1 http://xyq.163.com 127.0.0.1 xxx.net ================================== API HOOK 警告！System Repair Engineer 提醒你下面的函数内容与预期值不符，他们可能被一些恶意的软件所修改： RVA 错误： LoadLibraryA RVA 错误： LoadLibraryExA RVA 错误： LoadLibraryExW RVA 错误： LoadLibraryW ================================== [/CODE]
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:	发表于： 2007-01-24 20:27 \| 显示全部短消息资料字号：小中大 10楼我截了图你看下附件: 文件名:6903622007124201831.JPG 下载次数:163 文件类型:image/pjpeg 文件大小: 上传时间:2007-1-24 20:27:47 描述:
洛漫Tic 初生襁褓狮帖子:75 注册: 2006-05-18 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT