我的电脑又这样了！打开一个网页就弹出一次广告 bbs.ikaka.com

huxu2000 - 2006-5-11 14:58:00

2006-05-11,14:53:24

System Repair Engineer 2.0.12.350 (2.0 RC 1)
Windows XP Home Edition - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<pbmini><C:\Program Files\pcast\PodcastbarMini\PodcastBarMiniStater.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<91cast><>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<webacc><C:\WINDOWS\webacc.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<run><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<ToP><C:\WINDOWS\LSASS.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Hide><C:\FWRITE\Hide.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<FAhid><C:\FWRITE\Fahid.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<HuaShanTGEUSBKbd><C:\Program Files\联想\联想键盘驱动\hidSevice.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<HuaShanTGEUSBKbd1><C:\Program Files\联想\联想键盘驱动\usbkbdriver.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Update><C:\Program Files\Common Files\UPDAT\Update.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<91cast><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<webacc><C:\WINDOWS\webacc.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<ExFilter><Rundll32.exe "C:\PROGRA~1\CNNIC\Cdn\cdnspie.dll,ExecFilter solo">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><KB6847452.LOG>

==================================
启动文件夹
服务
[Symantec Event Manager / ccEvtMgr]
<"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc]
<"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr]
<"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Symantec AntiVirus Definition Watcher / DefWatch]
<"C:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
[IMAPI CD-Burning COM Service / ImapiService]
<C:\WINDOWS\System32\imapi.exe><Microsoft Corporation>
[Net Logon / Netlogon]
<><N/A>
[NT LM Security Support Provider / NtLmSsp]
<><N/A>
[IPSEC Services / PolicyAgent]
<><N/A>
[Protected Storage / ProtectedStorage]
<><N/A>
[Security Accounts Manager / SamSs]
<><N/A>
[SavRoam / SavRoam]
<"C:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec>
[Symantec Network Drivers Service / SNDSrvc]
<"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec SPBBCSvc / SPBBCSvc]
<C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe><Symantec Corporation>
[Symantec AntiVirus / Symantec AntiVirus]
<"C:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation>
[TGE CardReader Mgr Host v2 / TGECardReaderMgrHost.2]
<C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe><>
[Registry Protector / WIDETS]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>

==================================
浏览器加载项
[MMSAssist BHO]
{6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[CEditCtrl Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\System32\aliedit\AliEdit.dll, www.alipay.com>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.>
[IcbcSslCacheCleanerCtrl Class]
{E9707834-5BF7-4CFF-A639-398427DE1991} <C:\WINDOWS\Downloaded Program Files\IcbcSslCacheCleaner.dll, 中国工商银行>
[>>彩信发送<<]
<res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm, N/A>
[上传到QQ网络硬盘]
<C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用网际快车下载]
<D:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<D:\Program Files\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>

==================================

huxu2000 - 2006-5-11 15:06:00

正在运行的进程
[PID: 636][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 736][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 760][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\WINDOWS\System32\NavLogon.dll] <Symantec Corporation><10.0.1.1000>
[PID: 812][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 824][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 1012][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 1168][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 1300][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 1376][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 1508][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe] <Symantec Corporation><103.5.4.3>
[C:\Program Files\Common Files\Symantec Shared\ccL35.dll] <Symantec Corporation><103.5.4.3>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><103.5.4.3>
[PID: 1672][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe] <Symantec Corporation><103.5.4.3>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Symantec Shared\ccL35.dll] <Symantec Corporation><103.5.4.3>
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><103.5.4.3>
[C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\BB.DLL] <Symantec Corporation><1,5,1,3>
[C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL] <Symantec Corporation><1,5,1,3>
[C:\Program Files\Common Files\Symantec Shared\ccSet.dll] <Symantec Corporation><103.5.4.3>
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL] <Symantec Corporation><103.5.4.3>
[PID: 1680][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\PROGRA~1\MMSASS~1\Mmsass~1.dll] <><1, 2, 0, 3>
[C:\WINDOWS\System32\mmfinfo.dll] <N/A><N/A>
[C:\WINDOWS\System32\mkunicode.dll] <N/A><N/A>
[PID: 1824][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 224][C:\WINDOWS\LSASS.exe] <KLOK><0.00.0061>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 256][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3510>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 276][C:\FWRITE\Fahid.exe] <N/A><N/A>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 284][C:\Program Files\联想\联想键盘驱动\usbkbdriver.exe] <N/A><N/A>
[C:\Program Files\联想\联想键盘驱动\VolumeOsd.dll] <N/A><N/A>
[C:\Program Files\联想\联想键盘驱动\ScrOSD32.dll] <N/A><N/A>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 292][C:\Program Files\联想\联想键盘驱动\hidSevice.exe] <N/A><N/A>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 412][C:\WINDOWS\webacc.exe] <N/A><N/A>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 520][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 1164][C:\Program Files\联想\联想键盘驱动\fastkey.exe] <><1, 0, 0, 1>
[C:\Program Files\联想\联想键盘驱动\SKOSD.DLL] <Silitek Corp.><1, 0, 6, 0>
[C:\Program Files\联想\联想键盘驱动\SKUtil.DLL] <Silitek Corp.><1, 0, 9, 0>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 1340][C:\Program Files\FlashFXP\flashfxp.exe] <IniCom Networks, Inc.><3.1.5.1054>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\FlashFXP\libeay32.dll] <N/A><N/A>
[C:\Program Files\FlashFXP\ssleay32.dll] <N/A><N/A>
[PID: 1464][C:\Program Files\FlashFXP\flashfxp.exe] <IniCom Networks, Inc.><3.1.5.1054>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\FlashFXP\libeay32.dll] <N/A><N/A>
[C:\Program Files\FlashFXP\ssleay32.dll] <N/A><N/A>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll] <Symantec Corporation><10.0.1.1000>
[PID: 1612][C:\Program Files\FlashFXP\flashfxp.exe] <IniCom Networks, Inc.><3.1.5.1054>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\FlashFXP\libeay32.dll] <N/A><N/A>
[C:\Program Files\FlashFXP\ssleay32.dll] <N/A><N/A>
[PID: 1328][C:\Program Files\FlashFXP\flashfxp.exe] <IniCom Networks, Inc.><3.1.5.1054>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\FlashFXP\libeay32.dll] <N/A><N/A>
[C:\Program Files\FlashFXP\ssleay32.dll] <N/A><N/A>
[PID: 428][C:\Program Files\FlashFXP\flashfxp.exe] <IniCom Networks, Inc.><3.1.5.1054>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\FlashFXP\libeay32.dll] <N/A><N/A>
[C:\Program Files\FlashFXP\ssleay32.dll] <N/A><N/A>
[PID: 1596][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 1972][C:\Program Files\Symantec AntiVirus\DefWatch.exe] <Symantec Corporation><10.0.1.1000>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>

huxu2000 - 2006-5-11 15:07:00

[PID: 196][C:\Program Files\Symantec AntiVirus\Rtvscan.exe] <Symantec Corporation><10.0.1.1000>
[C:\WINDOWS\system32\CBA.DLL] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\MsgSys.dll] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\NTS.dll] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\WINDOWS\system32\PDS.DLL] <LANDesk Software Ltd.><6.12.0.137 E>
[C:\Program Files\Symantec AntiVirus\NAVLU.dll] <Symantec Corporation><10.0.1.1000>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL] <Symantec Corporation><10.0.1.1000>
[c:\program files\common files\symantec shared\ssc\ScsComms.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\I2ldvp3.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] <Symantec Corporation><103.5.4.3>
[C:\Program Files\Common Files\Symantec Shared\ccL35.dll] <Symantec Corporation><103.5.4.3>
[C:\Program Files\Common Files\Symantec Shared\ccDec.dll] <Symantec Corporation><103.5.4.3>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\decsdk.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll] <Symantec Corporation><3.02.12.35>
[C:\Program Files\Common Files\Symantec Shared\ccScan.dll] <Symantec Corporation><103.5.4.3>
[C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL] <Symantec Corporation><1.4.0.11>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060503.018\ccEraser.dll] <Symantec Corporation><106.1.4.4>
[C:\Program Files\Symantec AntiVirus\DefUtDCD.dll] <Symantec Corporation><3.1.13a.0>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060503.018\ecmsvr32.dll] <Symantec Corporation><61.1.0.11>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060503.018\NAVEX32a.DLL] <Symantec Corporation><20061.1.0.14>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060503.018\NAVENG32.DLL] <Symantec Corporation><20061.1.0.14>
[C:\Program Files\Symantec AntiVirus\NAVAP32.DLL] <Symantec Corporation><9.5.0.44>
[C:\Program Files\Symantec AntiVirus\SAVRT32.DLL] <Symantec Corporation><9.5.0.44>
[C:\Program Files\Symantec AntiVirus\IMail.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\NotesExt.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\vpmsece3.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Symantec AntiVirus\SymProtectStorage.dll] <Symantec Corporation><10.0.1.1000>
[C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll] <Symantec Corporation><1,5,1,3>
[PID: 248][C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe] <><1, 0, 0, 1>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 1664][C:\WINDOWS\System32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 676][C:\WINDOWS\SYSTEM32\RUNDLL32.EXE] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 2804][C:\Program Files\FlashFXP\flashfxp.exe] <IniCom Networks, Inc.><3.1.5.1054>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\FlashFXP\libeay32.dll] <N/A><N/A>
[C:\Program Files\FlashFXP\ssleay32.dll] <N/A><N/A>
[PID: 3104][C:\Program Files\Tencent\QQ\QQ.exe] <TENCENT><0, 0, 0, 0>
[C:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\QQHelperDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\BasicCtrlDll.dll] <Tencent><5, 0, 200, 14>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Tencent\QQ\LoginCtrl.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\npkcntc.dll] <INCA Internet Co., Ltd.><2005, 9, 1, 1>
[C:\Program Files\Tencent\QQ\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[C:\Program Files\Tencent\QQ\QQAPI.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\Tencent\QQ\QQRes.dll] <tencent><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\QQMainFrame.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\CQQApplication.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\NewSkin.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\HostingMgr.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\CameraDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\MailSummary.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\QQSpace.dll] <><1, 0, 0, 1>
[C:\WINDOWS\System32\msdmo.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\QQGroupMng.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\QQSysMsgMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\QQAllInOne.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\SCCore.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\QQCustomFace.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\QQConfigPlugin.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\UserDefinedHead.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\QRingMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\PhoneAPI.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[C:\Program Files\Tencent\QQ\FlashAvatarDll.dll] <><1, 4, 0, 1>
[C:\WINDOWS\System32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0>
[C:\Program Files\Tencent\QQ\ImageOle.dll] <TODO: <Company name>><1.0.0.1>
[C:\Program Files\Tencent\QQ\QQAvatar.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\QQSceneMng.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\LongConnection.dll] <tencent><0, 3, 3, 8>
[C:\Program Files\Tencent\QQ\QQPet.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\QQPlugin.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\BQQApplication.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQ\CommercesMng.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQ\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[C:\Program Files\Tencent\QQ\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 141>
[C:\Program Files\Tencent\QQ\QQPhoneHelper.dll] <腾讯科技（深圳）有限公司><2, 0, 2, 21>
[C:\Program Files\Tencent\QQ\GroupConnection.dll] <Tencent><0, 3, 3, 5>
[C:\Program Files\Tencent\QQ\QQZip.dll] <tencent><0, 3, 2, 4>
[C:\Program Files\Tencent\QQ\ShareFiles.dll] <N/A><N/A>

huxu2000 - 2006-5-11 15:08:00

[PID: 3384][C:\Program Files\Tencent\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\Tencent\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 3196][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[PID: 216][C:\Program Files\FlashFXP\flashfxp.exe] <IniCom Networks, Inc.><3.1.5.1054>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\FlashFXP\libeay32.dll] <N/A><N/A>
[C:\Program Files\FlashFXP\ssleay32.dll] <N/A><N/A>
[PID: 3360][C:\FWRITE\PAD32.EXE] <FineArt TECH. Co., LTD><2.00.1001>
[C:\FWRITE\wrting32.dll] <N/A><N/A>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[PID: 3924][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\PROGRA~1\MMSASS~1\Mmsass~1.dll] <><1, 2, 0, 3>
[C:\WINDOWS\System32\intel.dll] <><1, 0, 0, 1>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\WINDOWS\System32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0>
[PID: 3700][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\PROGRA~1\MMSASS~1\Mmsass~1.dll] <><1, 2, 0, 3>
[C:\WINDOWS\System32\intel.dll] <><1, 0, 0, 1>
[C:\WINDOWS\System32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0>
[PID: 2692][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\PROGRA~1\MMSASS~1\Mmsass~1.dll] <><1, 2, 0, 3>
[C:\WINDOWS\System32\intel.dll] <><1, 0, 0, 1>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>
[C:\Program Files\Media Player Classic\Codecs\VSFilter.dll] <Gabest><1, 0, 0, 9>
[C:\WINDOWS\System32\RealMediaSplitter.ax] <Gabest><1, 0, 1, 1>
[C:\WINDOWS\System32\DSMSplitter.ax] <Gabest><1, 0, 0, 5>
[C:\WINDOWS\System32\MatroskaSplitter.ax] <Gabest><1, 0, 2, 9>
[C:\WINDOWS\System32\MP4Splitter.ax] <Gabest><1, 0, 0, 2>
[C:\WINDOWS\System32\OggSplitter.ax] <Gabest><1, 0, 0, 0>
[C:\Program Files\Media Player Classic\Codecs\ffdshow.ax] <N/A><1.0.2.2605>
[PID: 2364][C:\Documents and Settings\Owner\桌面\SREng.exe] <Smallfrogs Studio><2.0.12.350>
[C:\WINDOWS\KB6847452.LOG] <N/A><N/A>
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\MsInfo.xr] <N/A><N/A>
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] <N/A><N/A>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE Error. [WindowFiles]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

瑞星卡卡安全论坛