求救!一个奇怪的聊天工具自动发送消息的问题! bbs.ikaka.com

ly777 - 2007-1-5 11:02:00

急!
症状:一打开QQ,MSN,淘宝旺旺等聊天工具中某人的聊天对话框,只要对话框不关闭,就会定时(30分钟/次)向对方发送:<元旦到了,祝元旦快乐 www.sms8341.com/yuandan>的消息,请问是什么原因,杀毒杀不出.拔除网线后没有症状,不知如何下手找根源.请大虾们赐教!
谢谢!

栈道上的狼 - 2007-1-5 11:08:00

肯定是中毒了，一打开那个网址，就立刻有病毒反应了。杀毒吧！！！

ly777 - 2007-1-5 12:01:00

最新的瑞星,AVG,都杀过了,都杀不出,他还是老是跳.
不知道有什么其他的方法没有.
大家帮帮忙,小弟先谢啦,就当是怪病,大家一起来讨论讨论.

afkp4e7 - 2007-1-5 12:09:00

扫日志贴上来才能讨论
要不怎么讨论啊

ly777 - 2007-1-5 12:45:00

问个菜鸟的问题,打日志,用什么软件比较好?

仙剑VS景天 - 2007-1-5 12:49:00

我很晕.貌似是尾巴.顺便扫日志用这个

请下载SREng2（最新版），使用“智能扫描”，按下“扫描”按钮进行扫描，
扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告
日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。

下载地址
http://www.kztechs.com/sreng/sreng2.zip

ly777 - 2007-1-5 12:54:00

谢谢，我等会去下载个，现有点事要晚上回来，到时候，我把日志贴出来．

ly777 - 2007-1-5 18:32:00

日志做好了,由于内容比较长,为了各位阅读方便,我做了个TXT文件.在我的FTP上.
地址:ftp://user:user@liyuanmusic.vicp.net
谢谢各位!

ly777 - 2007-1-6 20:37:00

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
<MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
<PhMain><C:\Program Files\PeanutHull3\PhMain.exe> [广东网域]
<ServUTrayIcon><C:\Program Files\RhinoSoft.com\Serv-U\ServUTray.exe> [Rhino Software, Inc. +1(262) 560-9627]
<MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<nwiz><nwiz.exe /install> [N/A]
<WinFoxV2><C:\WINDOWS\system32\WF2K.EXE Initial> [N/A]
<EM_EXEC><C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE> [Logitech Inc. ]
<IntelliType><"C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"> [Microsoft Corporation]
<BigDogPath><C:\WINDOWS\VM_STI.EXE USB PC Camera 301P> [N/A]
<NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A]
<WangWang><C:\Program Files\淘宝网\淘宝旺旺\WangWang.exe> [淘宝（中国）软件有限公司]
<RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<!AVG Anti-Spyware><"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized> [Anti-Malware Development a.s.]
<runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe> [Beijing Rising Technology Co., Ltd.]
<SSMCrack><C:\Documents and Settings\user\桌面\SSM破解工具\SSMCrack.exe /h> [N/A]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><EXPLORER.EXE> [(Verified)Microsoft Corporation]
<Userinit><userinit.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><"\Program Files\Logonui\Royale.exe"> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
<{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll> [Anti-Malware Development a.s.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\System Safety Monitor]
<WinlogonNotify: System Safety Monitor><SSMWinlogonEx.dll> [(Verified)System Safety Limited]

ly777 - 2007-1-6 20:38:00

启动文件夹
[TweakYC]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\TweakYC.lnk --> C:\PROGRA~1\VIDEOM~1\COMPRO~1\TweakYC.exe [Compro Technology, Inc.]><N>
[ComproScheduler]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\ComproScheduler.lnk --> C:\PROGRA~1\COMMON~1\VIDEOM~1\COMPRO~2.EXE [Compro Technology, Inc.]><N>
[ComproRemote]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\ComproRemote.lnk --> C:\PROGRA~1\COMMON~1\VIDEOM~1\COMPRO~1.EXE [Compro Technology, Inc.]><N>
[Adobe Reader Speed Launch]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk --> C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [Adobe Systems Incorporated]><N>
[Adobe Gamma Loader]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><N>
[金山词霸 2005]
<C:\Documents and Settings\user\「开始」菜单\程序\启动\金山词霸 2005.lnk --> C:\PROGRA~1\Kingsoft\POWERW~1\XDICT.EXE [Kingsoft Co, Ltd.]><N>
[Xfire]
<C:\Documents and Settings\user\「开始」菜单\程序\启动\Xfire.lnk --> C:\PROGRA~1\Xfire\Xfire.exe [Xfire Inc.]><N>

ly777 - 2007-1-6 20:38:00

服务
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start]
<C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe><Anti-Malware Development a.s.>
[CAC03559 / CAC03559][Stopped/Auto Start]
<C:\WINDOWS\system32\CAC03559.EXE -service><Microsoft Corporation>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[IIS Admin / IISADMIN][Running/Auto Start]
<C:\WINDOWS\system32\inetsrv\inetinfo.exe><Microsoft Corporation>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[PeanuthullCore / PeanuthullCore][Running/Auto Start]
<C:\Program Files\PeanutHull3\PhCore.exe -service><广东网域>
[Rising Proxy Service / RfwProxySrv][Stopped/Manual Start]
<c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
<C:\Program Files\Rising\Rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
<"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Serv-U FTP 服务器 / Serv-U][Running/Auto Start]
<C:\Program Files\RhinoSoft.com\Serv-U\ServUDaemon.exe><Rhino Software, Inc. +1(262) 560-9627>
[Simple Mail Transfer Protocol (SMTP) / SMTPSVC][Running/Auto Start]
<C:\WINDOWS\system32\inetsrv\inetinfo.exe><Microsoft Corporation>
[Ulead Burning Helper / UleadBurningHelper][Stopped/Auto Start]
<C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe><N/A>
[VMware Authorization Service / VMAuthdService][Running/Auto Start]
<C:\Program Files\VMware\VMware Workstation\vmware-authd.exe><VMware, Inc.>
[VMware DHCP Service / VMnetDHCP][Running/Auto Start]
<C:\WINDOWS\system32\vmnetdhcp.exe><VMware, Inc.>
[VMware Virtual Mount Manager Extended / vmount2][Running/Auto Start]
<"C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe"><VMware, Inc.>
[VMware NAT Service / VMware NAT Service][Running/Auto Start]
<C:\WINDOWS\system32\vmnat.exe><VMware, Inc.>
[World Wide Web Publishing / W3SVC][Running/Auto Start]
<C:\WINDOWS\system32\inetsrv\inetinfo.exe><Microsoft Corporation>

ly777 - 2007-1-6 20:42:00

正在运行的进程
[PID: 416][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 492][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 520][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SSMWinlogonEx.dll] [System Safety Limited, 2.2.0.583]
[PID: 564][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 576][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 728][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 792][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 920][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 936][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1012][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1072][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1084][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43]
[C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
[C:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
[C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
[C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
[C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
[C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
[C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
[C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
[C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
[C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[C:\Program Files\Rising\Rav\HookCont.dll] [Rising, 19, 0, 0, 0]
[C:\Program Files\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6]
[C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20]

ly777 - 2007-1-6 20:44:00

[C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
[C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15]
[C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 32]
[C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 23]
[C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
[C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
[C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
[C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17]
[C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18]
[C:\Program Files\Rising\Rav\RsVM.dll] [N/A, 19, 0, 0, 13]
[C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
[C:\Program Files\Rising\Rav\ScanNet.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17]
[C:\Program Files\Rising\Rav\ExtMail.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
[C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
[PID: 1188][C:\Program Files\Rising\Rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 30]
[C:\Program Files\Rising\Rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 3]
[C:\Program Files\Rising\Rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 2]
[C:\Program Files\Rising\Rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 9]
[C:\Program Files\Rising\Rfw\MonDrv.dll] [rs, 1, 0, 0, 4]
[C:\Program Files\Rising\Rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 5]
[C:\Program Files\Rising\Rfw\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[PID: 1380][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1456][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 1732][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
[C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [Anti-Malware Development a.s., 7, 5, 0, 47]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0]
[C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.9147]
[C:\WINDOWS\system32\nvapi.dll] [N/A, N/A]
[C:\WINDOWS\system32\CpDTVMen.dll] [Compro Tech., 1, 0, 0, 2]
[C:\WINDOWS\system32\nvshell.dll] [N/A, N/A]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\ACDSee\picaview.dll] [ACD Systems, Ltd., 2, 0, 0, 78]
[C:\Program Files\ACDSee\PlugIns\IDE_ACDStd.apl] [ACD Systems, Ltd., 1, 3, 4, 22]
[C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll] [Anti-Malware Development a.s., 7, 5, 0, 49]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.7.2006011200]
[C:\PROGRA~1\FLASHGET\jccatch.dll] [Amaze Soft, 1, 1, 4, 0]
[PID: 1832][C:\Program Files\Rising\Rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 56]
[C:\Program Files\Rising\Rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28]
[C:\Program Files\Rising\Rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
[C:\Program Files\Rising\Rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[C:\Program Files\Rising\Rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 2036][C:\WINDOWS\system32\WF2K.EXE] [Leadtek Research Inc., 5.13.01.2006-4.04]
[C:\WINDOWS\system32\WINFOXUT.dll] [Leadtek Research Inc., 5.13.01.2006-3.64]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[PID: 216][C:\WINDOWS\system32\inetsrv\inetinfo.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 324][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.9147]
[C:\WINDOWS\system32\nvapi.dll] [N/A, N/A]
[PID: 384][C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE] [Logitech Inc. , 9.70.216]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EVENTEX.dll] [Logitech Inc. , 9.70.216]
[C:\WINDOWS\system32\COMNCTR.dll] [Microsoft Corporation, 9.70.216]
[C:\Program Files\Logitech\MouseWare\system\ccresrce.dll] [Logitech Inc. , 7.30.003.0 ]
[C:\Program Files\Logitech\MouseWare\system\GlbResLt.dll] [Logitech Inc. , 9.70.216]
[C:\Program Files\Logitech\MouseWare\System\devices.dll] [Logitech Inc. , 9.70.216]
[C:\Program Files\Logitech\MouseWare\system\ccstmglb.dll] [Logitech Inc. , 9.70.216]
[C:\Program Files\Logitech\MouseWare\system\ccustom.dll] [Logitech Inc. , 9.70.216]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\ccmsghk.dll] [Logitech Inc. , 9.70.216]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 460][C:\Program Files\Microsoft Hardware\Keyboard\type32.exe] [Microsoft Corporation, 2.1.300.0]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 480][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\WINDOWS\system32\VM31bPrp.Ax] [VM, 4.2.711.31]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 772][C:\Program Files\淘宝网\淘宝旺旺\WangWang.exe] [淘宝（中国）软件有限公司, 1, 7, 6, 829]
[C:\Program Files\淘宝网\淘宝旺旺\AliViewCtrl.dll] [vline, 1, 0, 0, 1]
[C:\Program Files\淘宝网\淘宝旺旺\VLNetwork.dll] [, 1, 0, 0, 6]
[C:\Program Files\淘宝网\淘宝旺旺\AliViewMedia.dll] [vline, 1, 0, 0, 1]
[C:\Program Files\淘宝网\淘宝旺旺\VideoCAP.dll] [, 1, 0, 0, 4]
[C:\Program Files\淘宝网\淘宝旺旺\VLAudio.dll] [, 1, 0, 0, 4]
[C:\Program Files\淘宝网\淘宝旺旺\JsmShow.dll] [, 1, 0, 0, 3]
[C:\Program Files\淘宝网\淘宝旺旺\Ali_Res.DLL] [N/A, N/A]
[C:\Program Files\淘宝网\淘宝旺旺\RichOne.dll] [淘宝(中国)软件有限公司, 1.0.0.1]
[C:\Program Files\淘宝网\淘宝旺旺\WangWangX0.dll] [, 1, 0, 0, 1]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[PID: 880][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]

ly777 - 2007-1-6 20:45:00

[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 908][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36]
[C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28]
[C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 956][C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe] [Anti-Malware Development a.s., 7, 5, 0, 50]
[C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\engine.dll] [Anti-Malware Development a.s., 4, 2, 0, 15]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 1008][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 1, 3]
[C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 1040][C:\Documents and Settings\user\桌面\SSM破解工具\SSMCrack.exe] [, 1, 0, 0, 1]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 1136][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 1248][C:\Program Files\MSN Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.0.0812.00]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[PID: 1576][C:\Program Files\PeanutHull3\PhCore.exe] [广东网域, 1, 0, 0, 13]
[C:\Program Files\PeanutHull3\PhAlive.dll] [广东网域, 1, 0, 1, 26]
[PID: 1568][C:\Program Files\PeanutHull3\PhMain.exe] [广东网域, 3, 1, 0, 44]
[C:\Program Files\PeanutHull3\PhRes.dll] [广东网域, 1, 0, 8, 1]
[C:\Program Files\PeanutHull3\PhService.dll] [广东网域, 1, 0, 1, 21]
[C:\Program Files\PeanutHull3\iconv.dll] [Free Software Foundation, 1.9]
[C:\WINDOWS\PhIDNA.dll] [广东网域, 1, 0, 0, 2]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1764][C:\Program Files\RhinoSoft.com\Serv-U\ServUDaemon.exe] [Rhino Software, Inc. +1(262) 560-9627, 6, 2, 0, 1]
[C:\Program Files\RhinoSoft.com\Serv-U\zlib1.dll] [N/A, 1.2.3]
[C:\Program Files\RhinoSoft.com\Serv-U\RhinoNET.dll] [Rhino Software, Inc. +1(262) 560-9627, 1, 0, 0, 2]
[C:\Program Files\RhinoSoft.com\Serv-U\libeay32.DLL] [The OpenSSL Project, http://www.openssl.org/, 0.9.8a]
[C:\Program Files\RhinoSoft.com\Serv-U\ssleay32.DLL] [The OpenSSL Project, http://www.openssl.org/, 0.9.8a]
[PID: 1844][C:\Program Files\RhinoSoft.com\Serv-U\ServUTray.exe] [Rhino Software, Inc. +1(262) 560-9627, 6, 2, 0, 1]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 1932][C:\Program Files\Messenger\msmsgs.exe] [Microsoft Corporation, 4.7.3000]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 2264][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2424][C:\Program Files\Common Files\VideoMate\ComproScheduler.exe] [Compro Technology, Inc., 1, 0, 0, 9]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 2448][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)]
[PID: 2784][C:\Program Files\Common Files\VideoMate\ComproRemote.exe] [Compro Technology, Inc., 2, 0, 2, 5]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\WINDOWS\system32\34com.dll] [Philips Semiconductors, 2, 3, 0, 1]
[C:\WINDOWS\system32\34api.dll] [Philips Semiconductors, 2, 3, 0, 1]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 2960][C:\Program Files\VMware\VMware Workstation\vmware-authd.exe] [VMware, Inc., 5.5.2 build-29772]
[PID: 3328][C:\Program Files\Kingsoft\PowerWord 2005\XDICT.EXE] [Kingsoft Co, Ltd., 8, 5, 2, 0]
[C:\Program Files\Kingsoft\PowerWord 2005\DicMngr.dll] [Kingsoft, 1, 0, 0, 0]
[C:\Program Files\Kingsoft\PowerWord 2005\doshow.dll] [N/A, N/A]
[C:\Program Files\Kingsoft\PowerWord 2005\ITextOut.dll] [Kingsoft, 1, 1, 0, 0]
[C:\Program Files\Kingsoft\PowerWord 2005\KPic10.dll] [N/A, N/A]
[C:\Program Files\Kingsoft\PowerWord 2005\ijl11.dll] [Intel Corporation, 1.1.2]
[C:\Program Files\Kingsoft\PowerWord 2005\NormGrab.DLL] [Kingsoft Co, Ltd., 6, 0, 0, 0]
[C:\Program Files\Kingsoft\PowerWord 2005\toTTSEngine50.dll] [Kingsoft Corporation, 1, 0, 0, 1]
[C:\Program Files\Kingsoft\PowerWord 2005\xfile.dll] [N/A, N/A]
[C:\Program Files\Kingsoft\PowerWord 2005\DBCore10.dll] [Kingsoft Corp., 1, 0, 0, 0]

ly777 - 2007-1-6 20:46:00

[C:\Program Files\Kingsoft\PowerWord 2005\XdictGrb.dll] [Kingsoft Co, Ltd., 8, 5, 3, 0]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[PID: 3404][C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe] [VMware, Inc., 5.5.2 build-29772]
[C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmxScsiLib.dll] [VMware, Inc., 5.5.2 build-29772]
[PID: 3500][C:\WINDOWS\system32\vmnat.exe] [VMware, Inc., 5.5.2 build-29772]
[PID: 3628][C:\WINDOWS\system32\vmnetdhcp.exe] [VMware, Inc., 5.5.2 build-29772]
[PID: 2020][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2672][C:\Program Files\RhinoSoft.com\Serv-U\ServUAdmin.exe] [Rhino Software, Inc. +1(262) 560-9627, 6.2.0.1]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[C:\Program Files\RhinoSoft.com\Serv-U\libeay32.DLL] [The OpenSSL Project, http://www.openssl.org/, 0.9.8a]
[C:\Program Files\RhinoSoft.com\Serv-U\ssleay32.DLL] [The OpenSSL Project, http://www.openssl.org/, 0.9.8a]
[PID: 2012][C:\Program Files\Tencent\qq\QQ.exe] [TENCENT, 0, 0, 0, 0]
[C:\Program Files\Tencent\qq\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\QQHelperDll.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 14]
[C:\Program Files\Tencent\qq\QQAPI.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\Program Files\Tencent\qq\LoginCtrl.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\npkcntc.dll] [INCA Internet Co., Ltd., 2005, 9, 1, 1]
[C:\Program Files\Tencent\qq\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[C:\Program Files\Tencent\qq\QQRes.dll] [tencent, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\QQMainFrame.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\CQQApplication.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\NewSkin.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\HostingMgr.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\CameraDll.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\MailSummary.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\QQSpace.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\QQGroupMng.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\QQSysMsgMng.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\QQConfigPlugin.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\UserDefinedHead.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\QRingMng.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\PhoneAPI.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Tencent\qq\QQAvatar.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[C:\Program Files\Tencent\qq\LongConnection.dll] [tencent, 0, 3, 3, 8]
[C:\Program Files\Tencent\qq\QQPet.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\BQQApplication.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\QQPlugin.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\QQAllInOne.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\SCCore.dll] [N/A, N/A]
[C:\Program Files\Tencent\qq\QQCustomFace.dll] [N/A, N/A]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[C:\Program Files\Tencent\qq\QQSceneMng.dll] [N/A, N/A]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
[C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll] [Anti-Malware Development a.s., 7, 5, 0, 47]
[C:\Program Files\Tencent\qq\CommercesMng.dll] [, 1, 0, 0, 1]
[C:\Program Files\Tencent\qq\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[C:\Program Files\Tencent\qq\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 141]
[C:\Program Files\Tencent\qq\ImageOle.dll] [TODO: <Company name>, 1.0.0.1]
[C:\Program Files\Tencent\qq\GroupConnection.dll] [Tencent, 5, 0, 202, 30]
[C:\Program Files\Tencent\qq\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 2, 23]
[C:\Program Files\Tencent\qq\QQMagicFace.dll] [, 1, 0, 0, 1]
[PID: 3456][C:\Program Files\Tencent\qq\TIMPlatform.exe] [tencent, 0, 3, 1, 8]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\Program Files\Tencent\qq\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 2844][C:\Program Files\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 5, 8, 120]
[C:\Program Files\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2]
[C:\Program Files\RhinoSoft.com\Serv-U\ServUPerfCount.dll] [Rhino Software, Inc. +1(262) 560-9627, 6, 2, 0, 1]
[C:\Program Files\VMware\VMware Workstation\vmPerfmon.dll] [VMware, Inc., 5.5.2 build-29772]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 2152][C:\Program Files\VideoMate\ComproPVR 2\ComproPVR.exe] [Compro Technology, Inc., 2, 8, 1, 5]
[C:\Program Files\VideoMate\ComproPVR 2\ulOle32.dll] [Ulead System, Inc., 1, 0, 0, 1]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\WINDOWS\system32\prop7134.dll] [Philips Semiconductors, 2, 3, 0, 1]
[C:\Program Files\VideoMate\ComproPVR 2\Filters\CproSnapShot.ax] [Compro Tech., 2.0]
[C:\WINDOWS\system32\34com.dll] [Philips Semiconductors, 2, 3, 0, 1]
[C:\WINDOWS\system32\34api.dll] [Philips Semiconductors, 2, 3, 0, 1]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]
[PID: 2712][C:\Documents and Settings\user\桌面\sreng2\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\LGMOUSHK.dll] [Logitech Inc. , 9.70.216]

瑞星卡卡安全论坛