电脑好象慢了，帮我看下日志，今天还在HijackThis1991zww查到个木马 bbs.ikaka.com

上路来学习 - 2006-6-29 6:16:00

感觉电脑有点问题，就全盘杀了下毒，瑞星没查到，我用木马杀客查了下，发现HijackThis1991zww 这里边藏了一个木马

还有个问题：这段瑞星自动更新很频繁，我设置的是定时1小时，可经常是空更新，其中还有几次开机，监控都不能自动启动，不知啥原因，怕的是病毒给控制住了......
HijackThis_zww汉化版扫描日志 V1.99.1
保存于 5:40:21, 日期 2006-6-29
操作系统： Windows 2000 SP4 (WinNT 5.00.2195)
浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程：
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
D:\瑞星杀毒2006ravolusr\Rising\Rav\CCenter.exe
D:\瑞星杀毒2006ravolusr\Rising\Rav\Ravmond.exe-------？
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\DRIVERS\CDANTSRV.EXE
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
D:\瑞星杀毒2006ravolusr\Rising\Rav\RavStub.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
D:\瑞星杀毒2006ravolusr\Rising\Rav\RavTask.exe
C:\WINNT\system32\internat.exe
D:\瑞星杀毒2006ravolusr\Rising\Rav\Ravmon.exe---------？
D:\系统软件\天网个人\FIREWALL\PFW.exe
C:\Program Files\Tencent\TT\TTraveler.exe
D:\IPQQ2006\QQ\QQ.exe
D:\IPQQ2006\QQ\TIMPlatform.exe
D:\瑞星杀毒2006ravolusr\Rising\Rav\RsAgent.exe
C:\WINNT\msagent\AgentSvr.exe
D:\杀毒小工具\HijackThis1991zww\HijackThis1991zww.exe

O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - D:\超级兔子魔法设置7.58\MagicSet\haokanbar.dll
O3 - IE工具栏增项: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - D:\超级兔子魔法设置7.58\MagicSet\haokanbar.dll
O3 - IE工具栏增项: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\KakaTool.dll
O4 - 启动项HKLM\\Run: [Synchronization Manager] mobsync.exe /logon
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [Super Rabbit Desktop Set] D:\超级兔子魔法设置7.58\MagicSet\DS.EXE /Load
O4 - 启动项HKLM\\Run: [RavTask] "D:\瑞星杀毒2006ravolusr\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [internat.exe] internat.exe
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\WINNT\system32\shdocvw.dll
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\WINNT\system32\shdocvw.dll
O9 - 浏览器额外的按钮: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - http://www.rising.com.cn/?u=RSTB (file missing)
O9 - 浏览器额外的按钮: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - http://www.ikaka.com/?u=RSTB (file missing)
O16 - DPF: {C07405FD-84D1-4A25-94E8-68609EA8335B} (iChatX Object) - http://www.ichat.net.cn/ichatvideo/v2_5_10/ichatx.dll
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8B3B0DDB-5466-4685-A102-62D97440CA4C}: NameServer = 202.96.128.166,202.96.128.86
O23 - NT 服务: C-DillaSrv - C-Dilla Ltd - C:\WINNT\system32\DRIVERS\CDANTSRV.EXE
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\瑞星杀毒2006ravolusr\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\瑞星杀毒2006ravolusr\Rising\Rav\Ravmond.exe

2楼还有个日志~~~

上路来学习 - 2006-6-29 6:19:00

2006-06-29,05:47:51

System Repair Engineer 2.0.12.350 (2.0 RC 1)
Windows 2000 Professional Service Pack 4 - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<internat.exe><internat.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<run><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Synchronization Manager><mobsync.exe /logon>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SoundMan><SOUNDMAN.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Super Rabbit Desktop Set><D:\超级兔子魔法设置7.58\MagicSet\DS.EXE /Load>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RavTask><"D:\瑞星杀毒2006ravolusr\Rising\Rav\RavTask.exe" -system>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><C:\WINNT\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>

==================================
启动文件夹
服务
[C-DillaSrv / C-DillaSrv]
<C:\WINNT\system32\DRIVERS\CDANTSRV.EXE><C-Dilla Ltd>
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[NVIDIA Driver Helper Service / NVSvc]
<C:\WINNT\system32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
<"D:\瑞星杀毒2006ravolusr\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"D:\瑞星杀毒2006ravolusr\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

==================================
浏览器加载项
[超级兔子上网精灵]
{7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\超级兔子魔法设置7.58\MagicSet\haokanbar.dll, Xiang Feng Technology>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <, N/A>
[访问瑞星网站]
{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} <http://www.rising.com.cn/?u=RSTB, N/A>
[访问卡卡社区]
{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} <http://www.ikaka.com/?u=RSTB, N/A>
[超级兔子上网精灵]
{43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\超级兔子魔法设置7.58\MagicSet\haokanbar.dll, Xiang Feng Technology>
[@msdxmLC.dll,-1@2052,电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINNT\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[iChatX Object]
{C07405FD-84D1-4A25-94E8-68609EA8335B} <C:\WINNT\Downloaded Program Files\CONFLICT.1\ichatx.dll, 深圳市东方博雅科技有限公司>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINNT\Downloaded Program Files\CONFLICT.4\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[上传到QQ网络硬盘]
<{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153}, N/A>
[添加到QQ自定义面板]
<, N/A>
[添加到QQ表情]
<, N/A>
[用QQ彩信发送该图片]
<, N/A>

上路来学习 - 2006-6-29 6:21:00

==================================
正在运行的进程
[PID: 140][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 164][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 160][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6714>
[PID: 212][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.6700>
[C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 232][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.6695>
[PID: 412][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 440][D:\瑞星杀毒2006ravolusr\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 456][D:\瑞星杀毒2006ravolusr\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[PID: 496][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.6659>
[PID: 528][C:\WINNT\system32\DRIVERS\CDANTSRV.EXE] <C-Dilla Ltd><3.23.000>
[PID: 548][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 584][C:\WINNT\system32\nvsvc32.exe] <NVIDIA Corporation><5.13.01.2183>
[PID: 620][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6704>
[PID: 700][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 736][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 792][D:\瑞星杀毒2006ravolusr\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 940][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3700.6690>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[D:\系统软件\TWEAKA~1\AssistQRunShell.dll] <全能助手工作室><3, 0, 0, 3>
[PID: 1116][C:\WINNT\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.0.14>
[PID: 344][D:\瑞星杀毒2006ravolusr\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 1132][C:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000>
[PID: 268][D:\瑞星杀毒2006ravolusr\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>

上路来学习 - 2006-6-29 6:22:00

[PID: 1100][D:\系统软件\天网个人\FIREWALL\PFW.exe] <广州众达天网技术有限公司><2.7.7.1004>
[D:\系统软件\天网个人\FIREWALL\SKYMISC.DLL] <N/A><N/A>
[D:\系统软件\天网个人\FIREWALL\COMPRESSWRAP.DLL] <N/A><N/A>
[PID: 944][C:\Program Files\Tencent\TT\TTraveler.exe] <腾讯公司><3.1.0.256>
[C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] <腾讯公司><1, 1, 0, 5>
[C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll] <><1, 0, 0, 3>
[C:\Program Files\Tencent\TT\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
[C:\WINNT\system32\WINABCX.IME] <PKUETI><5.22.216>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 664][D:\IPQQ2006\QQ\QQ.exe] <TENCENT><0, 0, 0, 0>
[D:\IPQQ2006\QQ\CoralAssist.DLL] <Coral Team><4.5.0 build 20060515>
[D:\IPQQ2006\QQ\CoralQQ.DLL] <Coral Team><4.5 Build 20060515>
[D:\IPQQ2006\QQ\ipsearcher.dll] <N/A><1.0.0.4>
[D:\IPQQ2006\QQ\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160>
[D:\IPQQ2006\QQ\QQAPI.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[D:\IPQQ2006\QQ\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1>
[D:\IPQQ2006\QQ\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[D:\IPQQ2006\QQ\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\IPQQ2006\QQ\QQMainFrame.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\CQQApplication.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\NewSkin.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\HostingMgr.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\CameraDll.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\MailSummary.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\QQSpace.dll] <><1, 0, 0, 1>
[C:\WINNT\system32\devenum.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\GroupLive.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\QQPlugin.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\QRingMng.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\PhoneAPI.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[D:\IPQQ2006\QQ\QQAvatar.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\FlashAvatarDll.dll] <><1, 4, 0, 1>
[D:\IPQQ2006\QQ\LongConnection.dll] <tencent><5, 0, 200, 160>
[D:\IPQQ2006\QQ\QQPet.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\QQAllInOne.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\SCCore.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\QQCustomFace.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\QQSysMsgMng.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\BQQApplication.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\CommercesMng.dll] <><1, 0, 0, 1>
[D:\IPQQ2006\QQ\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[D:\IPQQ2006\QQ\QQUdpGetFileLib.dll] <tencent><0, 2, 2, 3>
[D:\IPQQ2006\QQ\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
[D:\IPQQ2006\QQ\ImageOle.dll] <TODO: <Company name>><1.0.0.1>
[C:\WINNT\system32\flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[D:\IPQQ2006\QQ\QQSceneMng.dll] <N/A><N/A>
[D:\IPQQ2006\QQ\qqgroupdisk.dll] <深圳腾讯科技><2, 1, 101, 40>
[D:\IPQQ2006\QQ\QQPhoneHelper.dll] <腾讯科技（深圳）有限公司><2, 0, 4, 40>
[D:\IPQQ2006\QQ\GroupConnection.dll] <Tencent><5, 0, 202, 170>
[C:\Program Files\Tencent\QQGame\GameLogCore.Dll] <><0, 10, 106, 13>
[C:\Program Files\Tencent\QQGame\Core.dll] <é??úêDìú???????ú?μí3óD?T1???><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\NetCenter.dll] <é??úêDìú???????ú?μí3óD?T1???><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\CmdCenter.dll] <深圳市腾讯计算机系统有限公司><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\HelpDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQGame\ResEx.dll] <深圳市腾讯计算机系统有限公司><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\GameLogAidMgr.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQGame\COMToolKit.dll] <><1, 0, 0, 3>
[C:\Program Files\Tencent\QQGame\QQGameAvatar.dll] <深圳市腾讯计算机系统有限公司 Tencent Computer System Ltd.><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\GamePublic.dll] <><1, 0, 0, 1>
[PID: 820][D:\IPQQ2006\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[D:\IPQQ2006\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 704][D:\瑞星杀毒2006ravolusr\Rising\Rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[D:\瑞星杀毒2006ravolusr\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 1296][C:\WINNT\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422>
[PID: 448][D:\杀毒小工具\System Repair Engineer 2.0.12.350\SREng.exe] <Smallfrogs Studio><2.0.12.350>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

瑞星卡卡安全论坛