中了几个病毒杀不掉, 有日志高手看看 bbs.ikaka.com

angelcola - 2006-8-2 23:06:00

Backdoor.Gpigeon.zbg
Backdoor.Gpigeon.2006.re
Backdoor.Gpigeon.2006.fm

ystem Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<HControl><C:\WINDOWS\ATK0100\HControl.exe> []
<Power_Gear><C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1> []
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [Synaptics, Inc.]
<RfwMain><"D:\软件\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<Logitech Hardware Abstraction Layer><KHALMNPR.EXE> [Logitech Inc.]
<ATICCC><"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime> []
<RavTask><"D:\软件\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><"C:\WINDOWS\logonui"> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<DelayRun><C:\WINDOWS\system32\91ddc370.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
<WinlogonNotify: AtiExtEvent><Ati2evxx.dll> [ATI Technologies Inc.]

==================================
启动文件夹
[Catalyst System Tray]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Catalyst System Tray.lnk><N>
[Logitech SetPoint]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Logitech SetPoint.lnk><N>

==================================
服务
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[Intranet Messenger / DiRVIn]
<C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[Intel(R) PROSet/Wireless Event Log / EvtEng]
<C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[LightScribeService Direct Disc Labeling Service / LightScribeService]
<"C:\Program Files\Common Files\LightScribe\LSSrvc.exe"><Hewlett-Packard Company>
[Macromedia Licensing Service / Macromedia Licensing Service]
<"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Intel(R) PROSet/Wireless Registry Service / RegSrvc]
<C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Rising Proxy Service / RfwProxySrv]
<d:\软件\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<d:\软件\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<"D:\软件\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"D:\软件\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Intel(R) PROSet/Wireless Service / S24EventMonitor]
<C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>

angelcola - 2006-8-2 23:06:00

==================================
浏览器加载项
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\软件\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <D:\软件\迅雷\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[QuickBtn]
{D1BB7CF4-4463-4e91-88D7-ECC3CE0A13B7} <C:\Program Files\CoolWebsite\QuickLink.dll, Fengcent>
[BHelper Class]
{F2E37336-BFDB-409B-8D0E-6F013C438B20} <C:\WINDOWS\system\91doc370.dll, N/A>
[Java Plug-in 1.5.0_05]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <D:\软件\Java\jre1.5.0_05\bin\npjpi150_05.dll, Sun Microsystems, Inc.>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Java Plug-in 1.5.0_05]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <D:\软件\Java\jre1.5.0_05\bin\npjpi150_05.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_05]
{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} <D:\软件\Java\jre1.5.0_05\bin\npjpi150_05.dll, Sun Microsystems, Inc.>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\软件\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Shell Name Space]
{55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <D:\软件\迅雷\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[QuickBtn]
{D1BB7CF4-4463-4E91-88D7-ECC3CE0A13B7} <C:\Program Files\CoolWebsite\QuickLink.dll, Fengcent>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[BHelper Class]
{F2E37336-BFDB-409B-8D0E-6F013C438B20} <C:\WINDOWS\system\91doc370.dll, N/A>
[&使用迅雷下载]
<D:\软件\迅雷\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<D:\软件\迅雷\Program\GetAllUrl.htm, N/A>

angelcola - 2006-8-2 23:07:00

=================================
正在运行的进程
[PID: 824][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 880][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 912][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\Ati2evxx.dll] <ATI Technologies Inc.><6.14.10.4121>
[PID: 956][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 968][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1128][C:\WINDOWS\system32\Ati2evxx.exe] <ATI Technologies Inc.><6.14.10.4121>
[C:\WINDOWS\system32\Ati2edxx.dll] <ATI Technologies, Inc.><6, 14, 10, 2499>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[PID: 1152][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1244][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1432][D:\软件\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1448][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1524][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] <Intel Corporation><10, 1, 0, 1>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><10, 1, 0, 2>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><10, 1, 0, 5>
[PID: 1568][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe] <Intel Corporation ><10, 1, 0, 33>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><10, 1, 0, 5>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><10, 1, 0, 2>
[C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll] <N/A><N/A>
[C:\Program Files\Intel\Wireless\Bin\IntStngs.dll] <><10, 1, 0, 2>
[C:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL] <N/A><N/A>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[PID: 1728][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1808][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1836][D:\软件\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
[D:\软件\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\软件\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\软件\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\软件\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\软件\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\软件\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[D:\软件\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
[D:\软件\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[D:\软件\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\软件\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\软件\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[D:\软件\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2>
[D:\软件\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[D:\软件\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\软件\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[D:\软件\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\软件\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[D:\软件\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[PID: 1996][d:\软件\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
[d:\软件\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
[d:\软件\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
[d:\软件\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
[d:\软件\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4>
[d:\软件\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 356][C:\WINDOWS\system32\Ati2evxx.exe] <ATI Technologies Inc.><6.14.10.4121>
[C:\WINDOWS\system32\Ati2edxx.dll] <ATI Technologies, Inc.><6, 14, 10, 2499>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[PID: 516][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\91ddc370.dll] <N/A><N/A>
[D:\nokia\Nokia PC Suite 6\PhoneBrowser.dll] <Nokia><6, 60, 4, 7>
[C:\WINDOWS\system32\ConnAPI.DLL] <Nokia.><6, 60, 21, 1>
[D:\nokia\Nokia PC Suite 6\PCSCM.dll] <Nokia><6, 60, 45, 3>
[D:\nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] <Nokia><6, 60, 5, 0>
[D:\nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] <Nokia><6, 60, 1, 0>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[D:\软件\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0>
[C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll] <><1, 0, 0, 1>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.5.2005092300>
[D:\软件\迅雷\ComDlls\XunLeiBHO_002.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 2>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\Program Files\CoolWebsite\QuickLink.dll] <Fengcent><1, 0, 0, 2>
[C:\WINDOWS\system\91doc370.dll] <N/A><N/A>
[PID: 756][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1480][C:\WINDOWS\ATK0100\HControl.exe] <><1043, 2, 15, 53>
[C:\WINDOWS\ATK0100\CMSSC.dll] <N/A><N/A>
[C:\WINDOWS\ATK0100\inter_f2.dll] <ATK><1043, 2, 15, 52>
[C:\WINDOWS\ATK0100\ATKWLIOC.DLL] <ACTIONTEC Electronics,Inc><2.01.02>
[C:\WINDOWS\ATK0100\SiSPkt.dll] <Silicon Integrated Systems Corp.><1, 0, 0, 45>
[C:\Program Files\Intel\Wireless\Bin\MurocApi.dll] <Intel Corporation><10, 1, 0, 37>
[C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll] <Intel Corporation><10, 1, 0, 1>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><10, 1, 0, 2>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><10, 1, 0, 5

angelcola - 2006-8-2 23:08:00

[C:\Program Files\Intel\Wireless\Bin\IntStngs.dll] <><10, 1, 0, 2>
[C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll] <N/A><N/A>
[C:\WINDOWS\system32\SynCOM.dll] <Synaptics, Inc.><8.2.0 21Oct05>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[PID: 1504][C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe] <ASUSTeK Computer Inc.><1043, 6, 15, 113>
[C:\Program Files\ASUS\Power4 Gear\ATKMETHOD.dll] <ASUSTeK Computer Inc.><1043, 6, 15, 113>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[PID: 1520][d:\软件\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
[d:\软件\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[d:\软件\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[d:\软件\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[PID: 1508][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] <Synaptics, Inc.><8.2.0 21Oct05>
[C:\WINDOWS\system32\SynCOM.dll] <Synaptics, Inc.><8.2.0 21Oct05>
[C:\WINDOWS\system32\SynTPAPI.dll] <Synaptics, Inc.><8.2.0 21Oct05>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[PID: 1612][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] <ATI Technologies Inc.><1.11.0.0>
[c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_2ea47ccc\mscorlib.dll] <N/A><N/A>
[c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_2b15d245\system.windows.forms.dll] <N/A><N/A>
[c:\program files\ati technologies\ati.ace\cli.implementation.dll] <ATI Technologies Inc.><1.2.2130.37343>
[c:\program files\ati technologies\ati.ace\log.foundation.dll] <ATI Technologies Inc.><1.2.2026.29944>
[c:\program files\ati technologies\ati.ace\cli.foundation.dll] <ATI Technologies Inc.><1.2.2026.29944>
[c:\program files\ati technologies\ati.ace\log.foundation.service.dll] <ATI Technologies Inc.><1.2.2130.37343>
[c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] <ATI Technologies Inc.><1.2.2026.29970>
[c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0435562c\system.dll] <N/A><N/A>
[c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] <ATI Technologies Inc.><1.2.2130.37343>
[c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_8e876e03\system.xml.dll] <N/A><N/A>
[c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] <ATI Technologies Inc.><1.2.2130.37344>
[c:\program files\ati technologies\ati.ace\aem.foundation.dll] <ATI Technologies Inc.><1.2.2026.29944>
[c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_314a1d34\system.drawing.dll] <N/A><N/A>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37336>
[c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll] <ATI Technologies Inc.><1.2.2026.29946>
[c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] <ATI Technologies Inc.><1.2.2028.21076>
[c:\program files\ati technologies\ati.ace\dem.foundation.dll] <ATI Technologies Inc.><1.2.2026.29944>
[c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] <ATI Technologies Inc.><1.2.2026.29945>
[c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll] <ATI Technologies Inc.><1.2.2026.29947>
[c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll] <ATI Technologies Inc.><1.2.2026.29960>
[c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll] <ATI Technologies Inc.><1.2.2095.19505>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll] <ATI Technologies Inc.><1.2.2026.29947>
[c:\program files\ati technologies\ati.ace\atidemgr.dll] <ATI Technologies Inc.><1.2.2130.37125>
[c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll] <ATI Technologies Inc.><1.2.2026.29950>
[c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll] <ATI Technologies Inc.><1.2.2026.29951>
[c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll] <ATI Technologies Inc.><1.2.2026.30965>
[c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37218>
[c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll] <ATI Technologies Inc.><1.2.2082.25148>
[c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37182>
[c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll] <ATI Technologies Inc.><1.2.2040.18973>
[c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37241>
[c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37237>
[c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll] <ATI Technologies Inc.><1.2.2042.16922>
[c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37195>
[c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29953>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll] <ATI Technologies Inc.><1.2.2026.29948>
[c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37281>
[c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29947>
[c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37260>
[c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29962>
[c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll] <ATI Technologies Inc.><1.2.2026.29968>
[c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37228>
[c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll] <ATI Technologies Inc.><1.2.2026.29952>
[c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll] <ATI Technologies Inc.><1.2.2026.29945>
[c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37234>
[c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll] <ATI Technologies Inc.><1.2.2026.29951>
[c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37225>
[c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29949>
[c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37222>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37307>

angelcola - 2006-8-2 23:08:00

[c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37202>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37295>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29969>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37195>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29949>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37303>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll] <ATI Technologies Inc.><1.2.2033.19041>
[c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29945>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37206>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll] <ATI Technologies Inc.><1.2.2033.19045>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37290>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37285>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll] <ATI Technologies Inc.><1.2.2026.29961>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37299>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29970>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37198>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29949>
[c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37249>
[c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll] <ATI Technologies Inc.><1.2.2096.31471>
[c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37257>
[c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll] <ATI Technologies Inc.><1.2.2026.29969>
[c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37245>
[c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29951>
[c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll] <ATI Technologies Inc.><1.2.2026.29969>
[c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37272>
[c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37265>
[c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37269>
[c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29953>
[c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37210>
[c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll] <ATI Technologies Inc.><1.2.2036.20028>
[c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll] <ATI Technologies Inc.><1.2.2032.14723>
[c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll] <ATI Technologies Inc.><1.2.2049.17711>
[c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll] <ATI Technologies Inc.><1.2.2026.29967>
[c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll] <ATI Technologies Inc.><1.2.2026.29967>
[c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll] <ATI Technologies Inc.><1.2.2026.29950>
[c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll] <ATI Technologies Inc.><1.2.2026.29968>
[c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll] <ATI Technologies Inc.><1.2.2026.29960>
[c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29946>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll] <ATI Technologies Inc.><1.2.2026.29969>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll] <ATI Technologies Inc.><1.2.2026.29968>
[c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29946>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll] <ATI Technologies Inc.><1.2.2026.29947>
[c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.runtime.dll] <ATI Technologies Inc.><1.2.2130.37139>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29950>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll] <ATI Technologies Inc.><1.2.2026.29967>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll] <ATI Technologies Inc.><1.2.2026.29946>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll] <ATI Technologies Inc.><1.2.2026.29961>
[c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll] <ATI Technologies Inc.><1.2.2036.27417>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll] <ATI Technologies Inc.><1.2.2026.29968>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll] <ATI Technologies Inc.><1.2.2026.29948>
[c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll] <ATI Technologies Inc.><1.2.2096.31461>
[c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll] <ATI Technologies Inc.><1.2.2026.29952>
[c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll] <ATI Technologies Inc.><1.2.2026.29961>
[c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll] <ATI Technologies Inc.><1.2.2026.29951>
[c:\program files\ati technologies\ati.ace\apm.foundation.dll] <ATI Technologies Inc.><1.2.2026.29959>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[PID: 1016][D:\软件\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[D:\软件\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\软件\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\软件\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\软件\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[PID: 1688][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3427>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[PID: 1708][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[PID: 1884][C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe] <ATI Technologies Inc.><1.11.0.0>
[c:\windows\assembly\nativeimages1_v1.1.4322

angelcola - 2006-8-2 23:13:00

[c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_2b15d245\system.windows.forms.dll] <N/A><N/A>
[c:\program files\ati technologies\ati.ace\cli.implementation.dll] <ATI Technologies Inc.><1.2.2130.37343>
[c:\program files\ati technologies\ati.ace\log.foundation.dll] <ATI Technologies Inc.><1.2.2026.29944>
[c:\program files\ati technologies\ati.ace\cli.foundation.dll] <ATI Technologies Inc.><1.2.2026.29944>
[c:\program files\ati technologies\ati.ace\log.foundation.service.dll] <ATI Technologies Inc.><1.2.2130.37343>
[c:\program files\ati technologies\ati.ace\log.foundation.shared.dll] <ATI Technologies Inc.><1.2.2026.29970>
[c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0435562c\system.dll] <N/A><N/A>
[c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll] <ATI Technologies Inc.><1.2.2130.37343>
[c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_8e876e03\system.xml.dll] <N/A><N/A>
[c:\program files\ati technologies\ati.ace\cli.component.systemtray.dll] <ATI Technologies Inc.><1.2.2130.37317>
[c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll] <ATI Technologies Inc.><1.2.2028.21076>
[c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll] <ATI Technologies Inc.><1.2.2026.29945>
[c:\program files\ati technologies\ati.ace\cli.component.runtime.dll] <ATI Technologies Inc.><1.2.2130.37344>
[c:\program files\ati technologies\ati.ace\apm.foundation.dll] <ATI Technologies Inc.><1.2.2026.29959>
[c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_314a1d34\system.drawing.dll] <N/A><N/A>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[c:\program files\ati technologies\ati.ace\zh-chs\cli.component.systemtray.resources.dll] <ATI Technologies Inc.><1.2.2130.37317>
[PID: 1932][D:\软件\Logitech\SetPoint\SetPoint.exe] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\KemUtil.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\SetPointCOM.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\kemutb.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\KGame.dll] <TODO: <Company name>><1.0.0.1>
[D:\软件\Logitech\SetPoint\KemWnd.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[D:\软件\Logitech\SetPoint\KemXML.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\Macros\MacroCore.dll] <Logitech Inc.><2.30.399>
[C:\Program Files\Common Files\Logitech\KHAL\KhalApi.dll] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\LCabHandler.dll] <Logitech Inc.><2.30.399>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[PID: 1980][C:\WINDOWS\SYSTEM32\RUNDLL32.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 208][C:\Program Files\Common Files\LightScribe\LSSrvc.exe] <Hewlett-Packard Company><1.4.31.1>
[PID: 260][C:\WINDOWS\ATK0100\ATKOSD.exe] <><1043, 2, 15, 53>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[PID: 536][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] <Microsoft Corporation><7.00.9466>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[PID: 564][C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE] <Logitech Inc.><2.30.314>
[C:\Program Files\Common Files\Logitech\KHAL\KHALAPI.DLL] <Logitech Inc.><2.30.399>
[D:\软件\Logitech\SetPoint\GameHook.dll] <N/A><N/A>
[D:\软件\Logitech\SetPoint\lgscroll.dll] <Logitech Inc.><2.30.399>
[C:\Program Files\Common Files\Logitech\KHAL\KHALITCH.DLL] <Logitech Inc.><2.30.399>
[C:\Program Files\Common Files\Logitech\KHAL\KHALMW.DLL] <Logitech Inc.><2.30.399>
[C:\Program Files\Common Files\Logitech\KHAL\KHALHPP.DLL] <Logitech Inc.><2.30.399>
[C:\WINDOWS\cncmaxKey.DLL] <N/A><N/A>
[PID: 584][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe] <Intel Corporation><10, 1, 0, 1>
[PID: 708][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1616][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>

瑞星卡卡安全论坛