零三少 - 2007-1-29 22:49:00
==================================
正在运行的进程
[PID: 612][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 680][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 708][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 6.0.0.299]
[PID: 752][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 764][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 908][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1000][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1092][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1148][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1264][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1452][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1604][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.9380]
[C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.9380]
[C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.9380]
[C:\WINDOWS\system32\nvapi.dll] [N/A, N/A]
[C:\WINDOWS\system32\nvshell.dll] [N/A, N/A]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[D:\应用程序\kaba\shellex.dll] [Kaspersky Lab, 6.0.0.299]
[PID: 1740][C:\WINDOWS\ZSSnp211.exe] [ZSMCSNAP, 3, 6, 703, 6]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\WINDOWS\system32\ZS211Prp.Ax] [ZSMC, 3, 6, 703, 15]
[PID: 1748][C:\WINDOWS\Domino.exe] [, 3, 6, 703, 6]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[PID: 1756][C:\Program Files\Lenovo\file32\hotkey.exe] [N/A, N/A]
[C:\Program Files\Lenovo\file32\KeyHook.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[PID: 1788][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1800][C:\Program Files\ChinaNet\VnetClient.exe] [, 2005, 11, 14, 1]
[C:\Program Files\ChinaNet\Communicate.dll] [0, 2005, 3, 3, 1]
[C:\Program Files\ChinaNet\DialModule.dll] [GDCN, 2005, 11, 15, 1]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1]
[C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX] [, 2005, 7, 27, 1]
[C:\PROGRA~1\ChinaNet\sign.dll] [0, 2004, 12, 1, 1]
[C:\PROGRA~1\ChinaNet\PostPlug.dll] [, 2004, 12, 16, 2]
[C:\PROGRA~1\ChinaNet\ADVERT~1.OCX] [, 2005, 10, 13, 1]
[C:\PROGRA~1\ChinaNet\Gif89a.dll] [, 2005, 6, 21, 1]
[C:\PROGRA~1\ChinaNet\VnetBs.ocx] [, 2004, 11, 18, 1]
[C:\PROGRA~1\ChinaNet\ACCOUN~2.DLL] [, 2005, 11, 14, 1]
[C:\PROGRA~1\ChinaNet\AccountMgr.dll] [, 2005, 11, 14, 17]
[C:\PROGRA~1\ChinaNet\VnetSkin.ocx] [GDDC, 2005, 11, 14, 1]
[C:\PROGRA~1\ChinaNet\DialogStyle.dll] [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\Timer.ocx] [, 2005, 10, 9, 14]
[C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX] [, 2005, 2, 24, 1]
[C:\PROGRA~1\ChinaNet\NEWMES~1.DLL] [, 2005, 8, 26, 1]
[C:\PROGRA~1\ChinaNet\PassCtrl.dll] [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\PlugPush.dll] [, 2004, 12, 21, 1]
[C:\PROGRA~1\ChinaNet\ALLINT~1.DLL] [, 2004, 11, 23, 1]
[C:\PROGRA~1\ChinaNet\VNetLog.ocx] [, 2005, 10, 9, 1]
[C:\PROGRA~1\ChinaNet\StatNum.dll] [, 2004, 11, 18, 1]
[C:\PROGRA~1\ChinaNet\VNETON~1.OCX] [, 2005, 3, 2, 1]
[C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL] [GDCN, 2005, 10, 9, 1]
[C:\PROGRA~1\ChinaNet\VnetOptLog.dll] [, 2005, 9, 13, 9]
[D:\应用程序\kaba\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
[D:\应用程序\kaba\klscav.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\prloader.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\prkernel.ppl] [Kaspersky Lab, 6.0.0.304]
[d:\应用程序\kaba\params.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
[C:\PROGRA~1\ChinaNet\DlgSkin.ocx] [, 2005, 11, 14, 1]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.9380]
[PID: 1044][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.9380]
[C:\WINDOWS\system32\nvapi.dll] [N/A, N/A]
[C:\WINDOWS\system32\nvshell.dll] [N/A, N/A]
[PID: 1704][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.9380]
[C:\WINDOWS\system32\nvapi.dll] [N/A, N/A]
[PID: 1812][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 200][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 360][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[PID: 2844][D:\应用程序\迅雷\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5, 5, 5, 269]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[D:\应用程序\迅雷\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
[D:\应用程序\迅雷\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 12, 2, 46]
[D:\应用程序\迅雷\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 12, 2, 46]
[D:\应用程序\迅雷\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
[D:\应用程序\迅雷\Program\iTargetAD.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 15]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[D:\应用程序\迅雷\Components\DiagnoseHelper\DiagnoseHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
[C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.9380]
[D:\应用程序\迅雷\Components\PortVerify\PortVerify.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[D:\应用程序\迅雷\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[D:\应用程序\迅雷\Components\DTAG\DTAG.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[D:\应用程序\迅雷\Program\LiveUpdate.dll] [, 1, 0, 1, 17]
[D:\应用程序\迅雷\Components\InMedia\iEmbedShell.dll] [ , 1, 0, 0, 15]
[D:\应用程序\迅雷\Components\InMedia\iEmbed08.dll] [ , 3, 2, 0, 63]
[D:\应用程序\迅雷\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 14]
[D:\应用程序\迅雷\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
[D:\应用程序\迅雷\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 7]
[D:\应用程序\迅雷\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
[D:\应用程序\迅雷\Components\VPSHELL\VPSHELL.dll] [, 1, 0, 0, 1]
[D:\应用程序\迅雷\Components\VPSHELL\VideoPicture.dll] [XunLei, 1, 0, 0, 1]
[D:\应用程序\迅雷\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0]
[D:\应用程序\kaba\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
[D:\应用程序\kaba\klscav.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\prloader.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\prkernel.ppl] [Kaspersky Lab, 6.0.0.304]
[d:\应用程序\kaba\params.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
零三少 - 2007-1-29 22:50:00
[D:\应用程序\迅雷\Program\msgmanage.dll] [Thunder Networking Technologies,LTD, 2, 0, 1, 38]
[D:\应用程序\迅雷\Program\FloatBar.dll] [Giganology Inc., 1, 0, 0, 2]
[PID: 3296][D:\应用程序\BitSpirit\BitSpirit.exe] [LANSPIRIT.NET, 3.2.2.215]
[D:\应用程序\BitSpirit\BSOPLIB.DLL] [N/A, 1, 0, 0, 3]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.9380]
[PID: 2116][D:\应用程序\魔法兔子\MagicSet\SRIEH.EXE] [Super Rabbit Soft, 7.96]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[PID: 4024][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[C:\Program Files\Baidu\Bar\BaiduBar.dll] [, 2, 0, 2, 18]
[C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.9380]
[D:\应用程序\kaba\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
[D:\应用程序\kaba\klscav.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\prloader.dll] [Kaspersky Lab, 6.0.0.299]
[D:\应用程序\kaba\prkernel.ppl] [Kaspersky Lab, 6.0.0.304]
[d:\应用程序\kaba\params.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
[d:\应用程序\kaba\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[PID: 2824][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[C:\Program Files\Baidu\Bar\BaiduBar.dll] [, 2, 0, 2, 18]
[C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.9380]
[C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[PID: 2272][D:\安装程序\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
[C:\WINDOWS\system32\nview.dll] [N/A, N/A]
[C:\WINDOWS\system32\NVWRSZHC.DLL] [NVIDIA Corporation, 6.14.10.11060]
[C:\WINDOWS\system32\nvwddi.dll] [NVIDIA Corporation, 6.14.10.9380]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS Error. []
.JS Error. []
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
警告!System Repair Engineer 提醒
你下面的函数内容与预期值不符,他
们可能被一些恶意的软件所修改:
RVA 错误: LoadLibraryA
RVA 错误: LoadLibraryExA
RVA 错误: LoadLibraryExW
RVA 错误: LoadLibraryW
==================================
[/CODE]
© 2000 - 2026 Rising Corp. Ltd.