【求助】我很笨拙哦 bbs.ikaka.com

jiangaimei - 2006-7-4 16:37:00

2006-07-04,15:57:47

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<IME><CCIME.EXE> []
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<TPKMAPHELPER><C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper> [IBM Corp.]
<TPHOTKEY><C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe> []
<EZEJMNAP><C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe> [IBM Corp.]
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [Synaptics, Inc.]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [Synaptics, Inc.]
<ATIPTA><C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe> [ATI Technologies, Inc.]
<RfwMain><"D:\软件\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<RavTask><"D:\软件\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<QCWLICON><C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE> [IBM Corp.]
<HydraVisionDesktopManager><C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe> [ATI Technologies Inc.]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<SoundMAXPnP><C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe> [Analog Devices, Inc.]
<SoundMAX><"C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray> [Analog Devices, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
<WinlogonNotify: AtiExtEvent><Ati2evxx.dll> [ATI Technologies Inc.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\QConGina]
<WinlogonNotify: QConGina><QConGina.dll> [IBM Corp.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
<WinlogonNotify: tphotkey><tphklock.dll> []
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\解霸屏保.scr> []

jiangaimei - 2006-7-4 16:38:00

==================================
启动文件夹
服务
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[Windows Install Helper / BRGNS]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[EvtEng / EvtEng]
<C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[IBM Rapid Restore Ultra Service / IBM Rapid Restore Ultra Service]
<"C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe"><>
[IBM PM Service / IBMPMSVC]
<C:\WINDOWS\system32\ibmpmsvc.exe><N/A>
[NTService / NetService]
<C:\WINDOWS\system32\ntservice.exe><Ceramiche Ariostea>
[IBM PSA Access Driver Control / PsaSrv]
<C:\WINDOWS\system32\PsaSrv.exe><N/A>
[QCONSVC / QCONSVC]
<System32\QCONSVC.EXE><IBM Corp.>
[RegSrvc / RegSrvc]
<C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Rising Proxy Service / RfwProxySrv]
<d:\软件\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<d:\软件\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<"D:\软件\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"D:\软件\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Spectrum24 Event Monitor / S24EventMonitor]
<C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>
[SoundMAX Agent Service / SoundMAX Agent Service (default)]
<C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>
[StdService / StdService]
<C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\STDSVER.DLL,Service><N/A>
[IBM HDD APS Logging Service / TPHDEXLGSVC]
<System32\TPHDEXLG.EXE><IBM Corporation>
[IBM KCU Service / TpKmpSVC]
<C:\WINDOWS\system32\TpKmpSVC.exe><N/A>
[Network System / Universal Disk Manager]
<C:\Program Files\Common Files\COMM\Network.exe><N/A>
[wint / wint]
<C:\WINDOWS\system32\RunDLL32.exe "C:\PROGRA~1\wint\wint.dll",Run -r><N/A>

==================================
浏览器加载项
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[MSN Photo Upload Tool]
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} <C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation>
[Java Plug-in 1.4.2]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\IBM\Java142\jre\bin\NPJPI142.dll, IBM.>
[AxSubmitControl Class]
{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, >
[MessengerStatsClient Class]
{8E0D4DE5-3180-4024-A327-4DFAD1796A8D} <C:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll, Microsoft Corporation>
[Java Plug-in 1.4.2]
{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} <C:\Program Files\IBM\Java142\jre\bin\NPJPI142.dll, IBM.>
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
<D:\软件\迅雷\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<D:\软件\迅雷\Program\GetAllUrl.htm, N/A>

jiangaimei - 2006-7-4 16:39:00

==================================
正在运行的进程
[PID: 876][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 928][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 952][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\Ati2evxx.dll] <ATI Technologies Inc.><6.14.10.4110>
[C:\WINDOWS\system32\tphklock.dll] <N/A><N/A>
[C:\WINDOWS\system32\QConGina.dll] <IBM Corp.><3, 5, 3, 0>
[PID: 1000][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1012][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\pwdmon.dll] <N/A><N/A>
[PID: 1160][C:\WINDOWS\system32\ibmpmsvc.exe] <N/A><N/A>
[PID: 1184][C:\WINDOWS\system32\Ati2evxx.exe] <ATI Technologies Inc.><6.14.10.4110>
[C:\WINDOWS\system32\Ati2edxx.dll] <ATI Technologies, Inc.><6, 14, 10, 2495>
[PID: 1196][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1288][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1344][D:\软件\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1360][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1504][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] <Intel Corporation><9, 0, 1, 79>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 79>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 79>
[PID: 1536][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe] <Intel Corporation ><9, 0, 1, 79>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 79>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 79>
[PID: 1604][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1716][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1736][D:\软件\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26>
[D:\软件\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\软件\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\软件\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\软件\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\软件\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\软件\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[D:\软件\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9>
[D:\软件\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[D:\软件\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\软件\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\软件\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[D:\软件\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1>
[D:\软件\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[D:\软件\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\软件\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[D:\软件\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\软件\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[D:\软件\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[D:\软件\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[D:\软件\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\软件\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\软件\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\软件\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[D:\软件\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
[D:\软件\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[D:\软件\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[D:\软件\Rising\Rav\ScanNet.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\软件\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[D:\软件\Rising\Rav\RsStore.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[PID: 1808][d:\软件\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
[d:\软件\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
[d:\软件\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
[d:\软件\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
[d:\软件\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4>
[d:\软件\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 492][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 652][C:\WINDOWS\System32\SCardSvr.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 768][D:\软件\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[D:\软件\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\软件\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 484][C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe] <><4,1,0,4072>
[PID: 2120][C:\WINDOWS\System32\QCONSVC.EXE] <IBM Corp.><3, 5, 3, 0>
[PID: 2172][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe] <Intel Corporation><9, 0, 1, 79>
[PID: 2796][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2852][C:\WINDOWS\System32\TPHDEXLG.EXE] <IBM Corporation><1.0.0.1>
[PID: 2944][C:\WINDOWS\system32\TpKmpSVC.exe] <N/A><N/A>
[PID: 2972][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 3568][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2464][C:\WINDOWS\system32\Ati2evxx.exe] <ATI Technologies Inc.><6.14.10.4110>
[C:\WINDOWS\system32\Ati2edxx.dll] <ATI Technologies, Inc.><6, 14, 10, 2495>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2500][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[D:\软件\rar\rarext.dll] <N/A><N/A>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[D:\软件\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\软件\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>

jiangaimei - 2006-7-4 16:40:00

[PID: 2528][d:\软件\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
[d:\软件\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[d:\软件\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[d:\软件\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[PID: 2576][C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe] <N/A><N/A>
[C:\Program Files\ThinkPad\PkgMgr\HOTKEY_2\tphk_2k.dll] <N/A><N/A>
[C:\WINDOWS\system32\Oemdspif.dll] <ATI Technologies, Inc.><6.14.0011>
[C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\tpfnf7.dll] <N/A><N/A>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2584][C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe] <IBM Corp.><1, 0, 0, 0>
[C:\PROGRA~1\ThinkPad\UTILIT~1\US\EzMApRes.dll] <N/A><N/A>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2592][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2604][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\WINDOWS\system32\SynCOM.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\WINDOWS\system32\SynTPAPI.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[PID: 2628][D:\软件\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[D:\软件\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\软件\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\软件\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\软件\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2636][C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE] <IBM Corp.><3, 5, 3, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\QCON.dll] <IBM Corp.><3, 5, 3, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\MerlinC201.dll] <Novatel Wireless Inc.><1, 0, 0, 1>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\IconRes.dll] <N/A><N/A>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2644][C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe] <ATI Technologies Inc.><3.25.0006>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraHlp.dll] <ATI Technologies Inc.><3.25.0006>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraZhs.dll] <N/A><N/A>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2660][C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe] <Analog Devices, Inc.><5, 0, 2, 2>
[C:\Program Files\Analog Devices\SoundMAX\SMWDMIF.dll] <Analog Devices, Inc.><5, 0, 2, 008>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2704][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[PID: 2728][C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe] <N/A><N/A>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2744][C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe] <IBM Corporation><1.06>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 2776][D:\软件\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28>
[D:\软件\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[D:\软件\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\软件\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\软件\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\软件\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\软件\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\软件\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[PID: 240][D:\软件\Rising\Rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[D:\软件\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 1772][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 1120][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3510>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[PID: 1524][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>
[D:\软件\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[C:\WINDOWS\system32\macromed\flash\Flash.ocx] <Macromedia, Inc.><7,0,19,0>
[PID: 2560][E:\download\http___www.kztechs.com_sreng_sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.13 08Nov04>
[C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDMH.dll] <ATI Technologies Inc.><3.25.0006>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

独孤豪侠 - 2006-7-4 16:50:00

[Windows Install Helper / BRGNS]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[wint / wint]
<C:\WINDOWS\system32\RunDLL32.exe "C:\PROGRA~1\wint\wint.dll",Run -r><N/A>
个人感觉这两个有问题.

jiangaimei - 2006-7-4 16:52:00

恩,一开机就出现wint.dll文件丢失,那怎么办啊?

轩辕小聪 - 2006-7-4 17:32:00

在SREng的“启动项目”-“服务”-“Win32服务应用程序”中隐藏微软服务并删除以下服务项：
[Windows Install Helper / BRGNS]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[StdService / StdService]
<C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\STDSVER.DLL,Service><N/A>
[Network System / Universal Disk Manager]
<C:\Program Files\Common Files\COMM\Network.exe><N/A>
[wint / wint]
<C:\WINDOWS\system32\RunDLL32.exe "C:\PROGRA~1\wint\wint.dll",Run -r><N/A>

重启后删除
C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL
C:\WINDOWS\System32\STDSVER.DLL
C:\Program Files\Common Files\COMM\
C:\PROGRA~1\wint\

独孤豪侠 - 2006-7-4 17:34:00

还是聪哥好.

jiangaimei - 2006-7-4 17:40:00

谢谢拉

jiangaimei - 2006-7-4 17:42:00

删除wint不影响吧?

瑞星卡卡安全论坛