斑竹,我的主页怎么总是改不回来啊【求助】 bbs.ikaka.com

Vincent526 - 2006-9-3 23:05:00

我的主页一进就到了http://www.7939.com/,改了无数次都改不回来,是不是中病毒了,还有打开网页时地址栏右侧总出现好象是广告什么的(.......菜单),怎样才能把它消除啊,自从出现这个,扫描时经常发现病毒.

我无邪 - 2006-9-3 23:07:00

关于www.7939.com劫持的解决方法（Realplayer.exe）
http://forum.ikaka.com/topic.asp?board=67&artid=8155668

修复后重启
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

Vincent526 - 2006-9-3 23:15:00

Logfile of HijackThis v1.99.1
Scan saved at 23:04:52, on 2006-9-3
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
c:\program files\rising\rfw\RfwMain.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\Realplayer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Program Files\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Rising\Rav\Rav.exe
C:\Program Files\Adobe\Acrobat 5.0\Acrobat\Acrobat.exe
C:\Program Files\Common Files\Adobe\Web\AOM.exe
C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\Thunder5.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\创源网~1\LOCALS~1\Temp\Rar$EX00.372\HijackThis.exe

F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 61.141.8.87 www.tomatolei.com
O1 - Hosts: 124.254.44.152 www.mykh.net
O1 - Hosts: 192.150.18.61 www.adobe.com
O1 - Hosts: 218.30.101.109 www.eimhe.com
O1 - Hosts: 61.152.239.102 www.fx898.com
O2 - BHO: (no name) - {00000AAA-A363-466E-BEF5-9BB68697AA7F} - (no file)
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v11.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {08A312BB-5409-49FC-9347-54BB7D069AC6} - (no file)
O2 - BHO: SohuDAIEHelper - {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} - (no file)
O2 - BHO: (no name) - {0EEDB912-C5FA-486F-8334-57288578C627} - (no file)
O2 - BHO: (no name) - {27E96DE0-8211-42CF-9A1E-FA6246A95B77} - (no file)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: google bar - {607E95A1-8F89-4343-B9BC-2EFC2B291BB4} - (no file)
O2 - BHO: JMX.JmxCenter - {63859236-76BF-493C-A587-DF479EBA2D4B} - C:\WINDOWS\system32\EJMX.dll
O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O2 - BHO: BHOImp Class - {70AFF2CB-9DA2-499C-8D15-900729FCE83D} - C:\WINDOWS\system32\YHBO.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\新建文件夹\ComDlls\XunLeiBHO_002.dll
O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} - (no file)
O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - (no file)
O2 - BHO: Flash 8 ocx - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\system32\flash8.dll
O2 - BHO: Webacc - {CAC068F3-A608-406B-8581-458788A67694} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [BTEngine] C:\Program Files\Thunder Network\Thunder\新建文件夹 (2)\BT发动机\\btengine.exe
O4 - HKLM\..\Run: [Thunder] "C:\Program Files\Thunder Network\Thunder\新建文件夹\Thunder.exe" /s
O4 - HKLM\..\Run: [Realplayer.exe] C:\WINDOWS\system32\Realplayer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Realplayer.exe] C:\WINDOWS\system32\Realplayer.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\GetAllUrl.htm
O8 - Extra context menu item: >>彩信发送<< - res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm
O8 - Extra context menu item: Download with &Shareaza - res://C:\TDdownload\新建文件夹\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - C:\Program Files\Thunder Network\Thunder\新建文件夹\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - C:\Program Files\Thunder Network\Thunder\新建文件夹\Thunder.exe
O9 - Extra button: 番茄花园 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.tomatolei.com (file missing)
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O9 - Extra 'Tools' menuitem: 彩E精灵设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\FRONTP~1\FRONTP~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra 'Tools' menuitem: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: (no name) - {EE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=50 (file missing)
O9 - Extra button: YOK超级搜索 - {F869BB38-FFEF-4589-B986-610B7AD0ADA2} - http://www.yok.com (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.tomatolei.com
O23 - Service: ClipBook (ClipSrv) - Unknown owner - SVCH0ST.EXE (file missing)
O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe

Vincent526 - 2006-9-3 23:21:00

就这些了,斑竹看看哪里有问题啊?还有请教下解决的办法,谢谢

Vincent526 - 2006-9-3 23:28:00

2006-09-03,23:17:16

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<91cast><> []
<Realplayer.exe><C:\WINDOWS\system32\Realplayer.exe> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [Microsoft Corporation]
<StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> []
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<BTEngine><C:\Program Files\Thunder Network\Thunder\新建文件夹 (2)\BT发动机\\btengine.exe> []
<91cast><> []
<Thunder><"C:\Program Files\Thunder Network\Thunder\新建文件夹\Thunder.exe" /s> [Thunder Networking Technologies,LTD]
<Realplayer.exe><C:\WINDOWS\system32\Realplayer.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<DTService><rundll32.exe C:\WINDOWS\system32\soundmix.dll,Load> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
<{288BD9BD-F0DC-46B1-81B5-2B61DF8077CE}><C:\WINDOWS\system32\moi.dLl> []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<bgswitch><; C:\WINDOWS\system32\bgswitch.exe> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ExFilter><; Rundll32.exe C:\WINDOWS\system32\hookdll.dll,ExecFilter solo> []
<IdnMail><; > []
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<MSPY2002><; C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC> []
<PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<RaidTool><; C:\Program Files\VIA\RAID\raid_tool.exe> [VIA Technologies]
<SoundMan><; SOUNDMAN.EXE> [Realtek Semiconductor Corp.]
<StormCodec_Helper><; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> []
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<VTTimer><; VTTimer.exe> [S3 Graphics, Inc.]
<VTTrayp><; VTtrayp.exe> [S3 Graphics Co., Ltd.]

==================================
启动文件夹
[Acrobat Assistant]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Acrobat Assistant.lnk><N>
[Adobe Gamma Loader]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk><N>

==================================
服务
[ClipBook / ClipSrv]
<SVCH0ST.EXE><N/A>
[JMediaService / JMediaService]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\MMSASS~1\MMSSVER.DLL,Service><N/A>
[Rising Proxy Service / RfwProxySrv]
<c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

==================================
浏览器加载项
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v11.dll, Thunder Networking Technologies,LTD>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx, >
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[JMX.JmxCenter]
{63859236-76BF-493C-A587-DF479EBA2D4B} <C:\WINDOWS\system32\EJMX.dll, 广州盛行网络有限公司>
[Vision]
{6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, >
[BHOImp Class]
{70AFF2CB-9DA2-499C-8D15-900729FCE83D} <C:\WINDOWS\system32\YHBO.dll, YHBO>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\新建文件夹\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Flash 8 ocx ]
{B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} <C:\WINDOWS\system32\flash8.dll, MACROMEDlA>
[启动迅雷]
{0062C9BD-B349-40DE-91A0-755F37ACD559} <C:\Program Files\Thunder Network\Thunder\新建文件夹\Thunder.exe, Thunder Networking Technologies,LTD>
[番茄花园]
{6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.tomatolei.com, N/A>
[MMSAssistMenu]
{6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, >
[信息检索(&R)]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\FRONTP~1\FRONTP~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[启动Web迅雷]
{962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
{EE60714F-AC17-427e-861A-FD60CBDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=50, N/A>
[YOK超级搜索]
{F869BB38-FFEF-4589-B986-610B7AD0ADA2} <http://www.yok.com, N/A>
[ThunderIEHelper Class]
{0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v11.dll, Thunder Networking Technologies,LTD>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx, >
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[JMX.JmxCenter]
{63859236-76BF-493C-A587-DF479EBA2D4B} <C:\WINDOWS\system32\EJMX.dll, 广州盛行网络有限公司>
[Vision]
{6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, >
[BHOImp Class]
{70AFF2CB-9DA2-499C-8D15-900729FCE83D} <C:\WINDOWS\system32\YHBO.dll, YHBO>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\新建文件夹\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Flash 8 ocx ]
{B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} <C:\WINDOWS\system32\flash8.dll, MACROMEDlA>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[&使用迅雷下载]

Vincent526 - 2006-9-3 23:29:00

<C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
<C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\GetAllUrl.htm, N/A>
[>>彩信发送<<]
<res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm, N/A>
[Download with &Shareaza]
<res://C:\TDdownload\新建文件夹\Plugins\RazaWebHook.dll/3000, N/A>
[上传到QQ网络硬盘]
<C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
<, N/A>
[使用Web迅雷下载]
<, N/A>
[使用Web迅雷下载全部链接]
<, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 436][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 496][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 520][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 572][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 584][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 736][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 768][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 832][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 852][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 908][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1008][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1024][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[C:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
[C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32>
[C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6>
[C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34>
[C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
[C:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 13>
[C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
[C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
[C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
[C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[PID: 1100][c:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
[c:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
[c:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
[c:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
[c:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4>
[c:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[c:\program files\rising\rfw\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[PID: 1228][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp.050610-1527)>
[C:\WINDOWS\system32\pdfports.dll] <Adobe Systems Incorporated.><5.0.000>
[C:\Program Files\Adobe\Acrobat 5.0\Distillr\ADistRes.CHS] <Adobe Systems Incorporated.><5.0.0.0>
[PID: 1312][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1452][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\MMSASS~1\MMSSVER.DLL] <><1, 2, 0, 5>
[PID: 1804][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 424][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\WINDOWS\system32\soundmix.dll] <><1, 4, 0, 0>
[C:\WINDOWS\system32\Rsvtub.dll] <N/A><N/A>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\ComDlls\XunLeiBHO_002.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 2>
[C:\WINDOWS\system32\svchost.dll] <><1, 0, 0, 1>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx] <><1, 0, 0, 1>
[C:\WINDOWS\system32\iexpress.dll] <N/A><1.1.0.0>
[C:\WINDOWS\system32\EJMX.dll] <广州盛行网络有限公司><1.03.0001>
[C:\PROGRA~1\MMSASS~1\mmsass~1.dll] <><1, 2, 0, 5>
[C:\PROGRA~1\酷狗\KuGoo3\KUGOO3~1.OCX] <N/A><N/A>
[C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[C:\WINDOWS\system32\ext\dtdl.dll] <N/A><N/A>
[C:\WINDOWS\system32\ext\dtsm.dll] <N/A><N/A>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 696][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 824][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
[C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>

Vincent526 - 2006-9-3 23:29:00

[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 920][c:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 52>
[c:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[c:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[c:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 976][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3510>
[PID: 1268][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1544][C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe] <Adobe Systems Inc.><5, 0, 0, 0>
[PID: 336][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[PID: 3180][C:\Program Files\Rising\Rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 3260][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422>
[PID: 3988][C:\Program Files\Rising\Rav\Rav.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 75>
[C:\Program Files\Rising\Rav\PlugIn\RsPgScan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RavUI.Dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 64>
[C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
[C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\Rising\Rav\RavUIMsg.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
[C:\Program Files\Rising\Rav\RavQu.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[PID: 3836][C:\Program Files\Adobe\Acrobat 5.0\Acrobat\Acrobat.exe] <Adobe Systems Incorporated><5.0.1.2001032700>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\CoolType.dll] <Adobe Systems, Incorporated><4.04.26>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\BIB.dll] <Adobe Systems, Incorporated><1.0.20>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ACE.dll] <Adobe Systems, Incorporated><1.02.00>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\OPP.dll] <Adobe Systems Incorporated><1.00.02>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\AGM.dll] <Adobe Systems, Incorporated><4.04.26>
[c:\program files\adobe\acrobat 5.0\acrobat\exlang32.chs] <Adobe Systems Incorporated><5.0.0.377>
[C:\WINDOWS\system32\ATMLIB.dll] <Adobe Systems><5.1 Build 226>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\SPPlugins\ExpressViews.apl] <Adobe Systems Incorporated><1.1>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\SPPlugins\ADMPlugin.apl] <Adobe Systems Incorporated><2.82ac22 2001.05.04-0720h.51s>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\DigSig.api] <Adobe Systems Incorporated><5.0.0.2001033000>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\EScript.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\ADBC.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\PPKLite.api] <Adobe Systems Incorporated><5.0.0.2001033000>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\exportps.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\EWH32.api] <Adobe Systems Incorporated><5.0.0.2001031900>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Infusium.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\IA32.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\weblink.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\TouchUp.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\SendMail.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Scrubber.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\reflow.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\MSAA.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\AcroForm.api] <Adobe Systems Incorporated><5.0.0.2001032100>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\WHA.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\AccCheck.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\execmenu.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\hls.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\SaveAsRTF.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\HTML2PDF.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\WebPDF.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Scan\Scan.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Movie\Movie.api] <Adobe Systems, Inc.><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\ImageConversion\ImageConversion.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Spelling\Spelling.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Annotations\Annots.api] <Adobe Systems Incorporated><5.0.0.2001032100>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Webbuy\Webbuy.api] <Adobe Systems Incorporated><5.0.0.2001031500>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\xdict32.API] <Kingsoft Co, Ltd.><8, 5, 0, 0>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Spelling\Spelling.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\ADBC.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\PPKLite.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Webbuy\Webbuy.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\AccCheck.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\AcroForm.CHS] <N/A><N/A>

Vincent526 - 2006-9-3 23:29:00

[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Annotations\Annots.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\DigSig.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\EScript.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\EWH32.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\execmenu.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\exportps.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\hls.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\HTML2PDF.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\ImageConversion\ImageConversion.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Infusium.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Movie\Movie.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\MSAA.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\reflow.CHS] <Adobe Systems Incorporated><5.0.0.0>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\SaveAsRTF.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Scan\Scan.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\Scrubber.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\SendMail.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\TouchUp.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\weblink.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\WebPDF.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\plug_ins\WHA.CHS] <N/A><N/A>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\WHA Library.dll] <Adobe Systems Incorporated><0.2.0.0>
[C:\Program Files\Adobe\Acrobat 5.0\Acrobat\WHA Library.CHS] <Adobe Systems Incorporated><0.2.0.0>
[PID: 264][C:\Program Files\Common Files\Adobe\Web\AOM.exe] <Adobe Systems, Incorporated><2,7,0,51>
[PID: 2300][C:\WINDOWS\system32\Realplayer.exe] <N/A><N/A>
[PID: 3664][C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\Thunder5.exe] <Thunder Networking Technologies,LTD><5.3.0.220>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\UpdateDownload.dll] <Thunder Networking Technologies,LTD><1, 0, 1, 8>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\download_interface.dll] <Thunder Networking Technologies,LTD><1, 0, 4, 71>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\log4cplus.dll] <><1, 0, 2, 1>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\stlport_vc646.dll] <STLport Consulting, Inc.><4.6.2003.1031>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\asyn_dns.dll] <N/A><N/A>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\msgmanage.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 15>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\historyinfo_manage.dll] <Thunder Networking Technologies,LTD><5, 2, 0, 148>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\RegisterDll.dll] <Thunder Networking Technologies,LTD><2, 1, 0, 18>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\FloatBar.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Plugins\TingTing\TingTing.dll] <Thunder Networking Technologies,LTD><1, 1, 1, 9>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Components\InMedia\iEmbedShell.dll] <　><1, 0, 0, 11>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Components\InMedia\iEmbed04.dll] <　><2, 3, 0, 37>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Components\P4PClient\P4PClient.dll] <Thunder Networking Technologies,LTD><1, 0, 3, 8>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\Program Files\Thunder Network\Thunder\新建文件夹\Program\iTargetAd.dll] <Thunder Networking Technologies,LTD><1, 0, 1, 55>
[C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[PID: 1628][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[PID: 3700][C:\DOCUME~1\创源网~1\LOCALS~1\Temp\Rar$EX00.256\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

Vincent526 - 2006-9-3 23:30:00

斑竹,用了你说的那个东西扫描,麻烦斑竹帮忙看看

Vincent526 - 2006-9-3 23:34:00

晕,难道就没人懂吗?

Vincent526 - 2006-9-3 23:43:00

斑竹在不在啊?问题还没解决呢?帮帮忙,衷心感激

我无邪 - 2006-9-4 21:43:00

C:\WINDOWS\system32\Realplayer.exe
关于www.7939.com劫持的解决方法（Realplayer.exe）
http://forum.ikaka.com/topic.asp?board=67&artid=8155668
你告诉我，你做了吗？细心点，再做一次。

打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务ClipBook，选择“删除服务”点“设置”选择“否”

下载超级兔子,专业卸载。
http://www.pctutu.com/news.asp?id=92
安装好后，打开“winspeed”“专业卸载,卸载所有提示的垃圾软件，卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载

请到www.27814939.ys168.com,点“我的软件”下载KillBox.exe
重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows
双击打开KillBox.exe，分别删除
C:\WINDOWS\system32\soundmix.dll
C:\WINDOWS\system32\moi.dLl
（删除时勾选“删除前先结束Explorer.EXE进程”不行再试着勾选"删除DLL文件前反注册此文件"
重启后，再扫个日志粘上来。

瑞星卡卡安全论坛