大家再帮我看一下我的日志! bbs.ikaka.com

心情123 - 2006-7-8 21:36:00

删了又来,我都灰心了!
HijackThis_zww汉化版扫描日志 V1.99.1
保存于 21:24:03, 日期 2006-7-8
操作系统： Windows XP SP1 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\jj4\jjsvr4.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\DuDu\DddClient\dudupros.exe
C:\qq\QQ.exe
C:\qq\TIMPlatform.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$DI00.733\HijackThis1991zww.com

O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\qq\QQIEHelper.dll
O2 - BHO: DuDu.com - {6BDE1669-B490-48E3-B668-456314F2D6C3} - C:\Program Files\DuDu\DddClient\dddiemon.dll
O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - 启动项HKLM\\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [pyjj] C:\Program Files\jj4\jjsvr4.exe
O4 - HKCU\..\Run: [Super Rabbit IEPro] C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD
O4 - Startup: 腾讯QQ.lnk = C:\qq\QQ.exe
O4 - Global Startup: DuDu下载加速器.lnk = C:\Program Files\DuDu\DddClient\DuDuAcc.exe
O8 - IE右键菜单中的新增项目: &使用DuDu 加速器下载 - res://C:\Program Files\DuDu\DddClient\dddmext.dll/202
O8 - IE右键菜单中的新增项目: &使用DuDu 加速器下载全部链接 - res://C:\Program Files\DuDu\DddClient\dddmext.dll/203
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\qq\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\qq\SendMMS.htm
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\qq\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\qq\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\qq\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\qq\QQIEHelper.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{A4F0E00D-345F-415C-B3A6-5731246696B4}: NameServer = 221.6.4.67 221.6.4.66
O18 - 列举现有的协议: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - 列举现有的协议: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINDOWS\System32\urlmon.dll
O18 - 列举现有的协议: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\System32\msvidctl.dll
O18 - 列举现有的协议: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\System32\urlmon.dll
O18 - 列举现有的协议: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\System32\urlmon.dll
O18 - 列举现有的协议: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\System32\urlmon.dll
O18 - 列举现有的协议: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\System32\urlmon.dll
O18 - 列举现有的协议: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\System32\urlmon.dll
O18 - 列举现有的协议: ipp - (no CLSID) - (no file)
O18 - 列举现有的协议: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
O18 - 列举现有的协议: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - 列举现有的协议: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\System32\urlmon.dll
O18 - 列举现有的协议: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - 列举现有的协议: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\WINDOWS\System32\inetcomm.dll
O18 - 列举现有的协议: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\System32\urlmon.dll
O18 - 列举现有的协议: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
O18 - 列举现有的协议: msdaipp - (no CLSID) - (no file)
O18 - 列举现有的协议: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - 列举现有的协议: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\System32\mshtml.dll
O18 - 列举现有的协议: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\System32\msvidctl.dll
O18 - 列举现有的协议: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - 列举现有的协议: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\System32\msdxm.ocx
O18 - 列举现有的协议: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\System32\wiascr.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Unknown owner - C:\Program Files\Rising\Rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

我无邪 - 2006-7-8 21:41:00

日志看不出问题
什么东东删除又有？
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

独孤豪侠 - 2006-7-8 21:41:00

报的什么毒呀.
路径.

心情123 - 2006-7-8 22:29:00

2006-07-08,22:15:41

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation]
<pyjj><C:\Program Files\jj4\jjsvr4.exe> [加加开发组]
<Super Rabbit IEPro><C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [Super Rabbit Soft]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
<run><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<IgfxTray><C:\WINDOWS\System32\igfxtray.exe> [Intel Corporation]
<HotKeysCmds><C:\WINDOWS\System32\hkcmd.exe> [Intel Corporation]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]

==================================
启动文件夹
[DuDu下载加速器]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\DuDu下载加速器.lnk><N>
[腾讯QQ]
<C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\腾讯QQ.lnk><N>

==================================
服务
[Rising Process Communication Center / RsCCenter]
<C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SmartLinkService / SLService]
<slserv.exe><>

==================================
浏览器加载项
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[DDDMon Class]
{6BDE1669-B490-48E3-B668-456314F2D6C3} <C:\Program Files\DuDu\DddClient\dddiemon.dll, DuDu.com>
[超级兔子上网精灵]
{7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology>
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\qq\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[电台(&R)]

心情123 - 2006-7-8 22:31:00

{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[超级兔子上网精灵]
{43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[&使用DuDu 加速器下载]
<res://C:\Program Files\DuDu\DddClient\dddmext.dll/202, N/A>
[&使用DuDu 加速器下载全部链接]
<res://C:\Program Files\DuDu\DddClient\dddmext.dll/203, N/A>
[上传到QQ网络硬盘]
<C:\qq\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
<C:\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 592][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 640][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 664][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 712][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 724][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 888][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1024][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1128][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1184][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1372][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)>
[PID: 1756][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 156][C:\Program Files\jj4\jjsvr4.exe] <加加开发组><4.0.0.20>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 288][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 360][C:\WINDOWS\system32\slserv.exe] < ><2.80.00(24Apr2000)>
[PID: 1072][C:\WINDOWS\System32\igfxtray.exe] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\hccutils.DLL] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\igfxdev.dll] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[C:\WINDOWS\System32\igfxsrvc.dll] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\igfxres.dll] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\igfxress.dll] <Intel Corporation><3.0.0.2172>
[PID: 1104][C:\WINDOWS\System32\hkcmd.exe] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\hccutils.DLL] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\igfxdev.dll] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[C:\WINDOWS\System32\igfxsrvc.dll] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\igfxhk.dll] <Intel Corporation><3.0.0.2172>
[C:\WINDOWS\System32\igfxres.dll] <Intel Corporation><3.0.0.2172>
[PID: 1116][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3208>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 1152][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 1196][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28>
[C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 1248][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 1684][C:\Program Files\DuDu\DddClient\dudupros.exe] <DuDu.com><4, 3, 0, 1>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[C:\Program Files\DuDu\DddClient\dhtiwl.dll] <DuDu.com><4.3.0.1>
[PID: 1864][C:\qq\QQ.exe] <TENCENT><0, 0, 0, 0>
[C:\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[C:\qq\QQHelperDll.dll] <><1, 0, 0, 1>
[C:\qq\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[C:\qq\QQAPI.dll] <><1, 0, 0, 1>
[C:\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[C:\qq\LoginCtrl.dll] <><1, 0, 0, 1>
[C:\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1>
[C:\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[C:\qq\QQRes.dll] <tencent><1, 0, 0, 1>
[C:\qq\QQMainFrame.dll] <N/A><N/A>
[C:\qq\CQQApplication.dll] <N/A><N/A>
[C:\qq\NewSkin.dll] <><1, 0, 0, 1>
[C:\qq\HostingMgr.dll] <><1, 0, 0, 1>
[C:\qq\CameraDll.dll] <><1, 0, 0, 1>
[C:\qq\MailSummary.dll] <><1, 0, 0, 1>
[C:\qq\QQSpace.dll] <><1, 0, 0, 1>
[C:\WINDOWS\System32\msdmo.dll] <N/A><N/A>
[C:\qq\QQGroupMng.dll] <><1, 0, 0, 1>
[C:\qq\GroupLive.dll] <N/A><N/A>
[C:\qq\QQAllInOne.dll] <N/A><N/A>
[C:\qq\SCCore.dll] <N/A><N/A>
[C:\qq\QQCustomFace.dll] <N/A><N/A>
[C:\qq\GroupConnection.dll] <Tencent><5, 0, 202, 170>
[C:\qq\QQSysMsgMng.dll] <N/A><N/A>
[C:\qq\UserDefinedHead.dll] <><1, 0, 0, 1>
[C:\qq\QQPlugin.dll] <N/A><N/A>
[C:\qq\QQConfigPlugin.dll] <><1, 0, 0, 1>
[C:\qq\LongConnection.dll] <tencent><5, 0, 200, 160>
[C:\qq\QQPet.dll] <><1, 0, 0, 1>
[C:\qq\FlashAvatarDll.dll] <><1, 4, 0, 1>
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[C:\qq\QRingMng.dll] <N/A><N/A>
[C:\qq\QQAvatar.dll] <N/A><N/A>
[C:\qq\QQSceneMng.dll] <N/A><N/A>
[C:\qq\PhoneAPI.dll] <><1, 0, 0, 1>

心情123 - 2006-7-8 22:31:00

[C:\qq\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[C:\qq\QQFileTransfer.dll] <Tencent><5, 0, 202, 180>
[C:\qq\BQQApplication.dll] <N/A><N/A>
[C:\qq\CommercesMng.dll] <><1, 0, 0, 1>
[C:\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[C:\qq\QQUdpGetFileLib.dll] <tencent><0, 2, 2, 3>
[C:\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
[C:\qq\ImageOle.dll] <TODO: <Company name>><1.0.0.1>
[C:\qq\videodevice.dll] <Tencent><1.5.0.0>
[C:\qq\inplus.dll] <Tencent><1.5.0.0>
[C:\WINDOWS\System32\l3codeca.acm] <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
[C:\qq\QQMagicFace.dll] <><1, 0, 0, 1>
[C:\qq\QQPhoneHelper.dll] <腾讯科技（深圳）有限公司><2, 0, 1, 10>
[PID: 1896][C:\qq\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[C:\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 1728][C:\WINDOWS\System32\wuauclt.exe] <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 432][C:\Program Files\rising\Rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 448][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 1164][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[C:\qq\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
[C:\Program Files\DuDu\DddClient\dddiemon.dll] <DuDu.com><4, 3, 0, 1>
[C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll] <Xiang Feng Technology><2, 1, 0, 1463>
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[PID: 1948][C:\Program Files\Rising\Rfw\rfwmain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
[C:\Program Files\Rising\Rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[C:\Program Files\Rising\Rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 1168][C:\Program Files\Rising\Rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
[C:\Program Files\Rising\Rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
[C:\Program Files\Rising\Rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
[C:\Program Files\Rising\Rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
[C:\Program Files\Rising\Rfw\MonDrv.dll] <rs><1, 0, 0, 4>
[C:\Program Files\Rising\Rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 172][C:\Program Files\Rising\Rfw\RfwCfg.exe] <Beijing Rising Technology Corporation Limited><4, 0, 0, 89>
[C:\Program Files\Rising\Rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[C:\Program Files\Rising\Rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\Rising\Rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 1992][C:\Program Files\DuDu\DddClient\DuDuAcc.exe] <DuDu.com><4, 3, 0, 1>
[C:\Program Files\DuDu\DddClient\dddskin.dll] <dudu><1, 0, 0, 1>
[C:\Program Files\DuDu\DddClient\ddddl.dll] <DuDu.com><4, 3, 0, 1>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[PID: 3452][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 3784][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.608\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\System32\PYJJ4.IME] <加加工作组><4.0.0.21>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

瑞星卡卡安全论坛