服务器运行很慢,是否中病毒,高手帮帮忙 bbs.ikaka.com

◎稻草人◎ - 2008-1-19 16:48:00

客户端打开服务器的文件,很慢,基本无法运行,重启服务器后游正常,但过了一段时间后(大概几个小时)突然又无法访问服务器,是不是中了病毒,高手帮忙看下吧!谢谢!

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<Internat.exe><internat.exe> [(Verified)Microsoft Windows 2000 Publisher]
<Cn99QDNS><C:\Program Files\cn99qdns\Cn99qdns.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"> [(Verified)Symantec Corporation]
<vptray><C:\PROGRA~1\SYMANT~1\VPTray.exe> [(Verified)Symantec Corporation]
<VxTaskbarMgr><C:\Program Files\VERITAS\VxUpdate\VxTaskbarMgr.exe> [(Verified)VERITAS Software Corporation]
<FTGateIcon><d:\Program Files\FTGate\FTGateIcon.exe> [Floosietek Ltd]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows 2000 Publisher]
<Userinit><C:\WINNT\system32\userinit.exe,> [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
<WinlogonNotify: NavLogon><C:\WINNT\system32\NavLogon.dll> [(Verified)Symantec Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player 6.4><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\mplayer2.inf,PerUserStub.NT> [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<Address Book 5><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
<CRLUpdate><%SystemRoot%\system32\updcrl.exe -e -u %SystemRoot%\system32\verisignpub1.crl> [N/A]

==================================
启动文件夹
N/A

==================================
服务
[Backup Exec Remote Agent for Windows Servers / BackupExecAgentAccelerator][Running/Auto Start]
<"C:\Program Files\VERITAS\Backup Exec\NT\beremote.exe"><VERITAS Software Corporation>
[Backup Exec Agent Browser / BackupExecAgentBrowser][Running/Auto Start]
<"C:\Program Files\VERITAS\Backup Exec\NT\benetns.exe"><VERITAS Software Corporation>
[Backup Exec Device & Media Service / BackupExecDeviceMediaService][Running/Auto Start]
<"C:\Program Files\VERITAS\Backup Exec\NT\pvlsvr.exe"><VERITAS Software Corporation>
[Backup Exec Job Engine / BackupExecJobEngine][Running/Auto Start]
<"C:\Program Files\VERITAS\Backup Exec\NT\bengine.exe"><VERITAS Software Corporation>
[Backup Exec Naming Service / BackupExecNamingService][Running/Auto Start]
<"C:\Program Files\VERITAS\Backup Exec\NT\benser.exe"><VERITAS Software Corporation>
[Backup Exec Server / BackupExecRPCService][Running/Auto Start]
<"C:\Program Files\VERITAS\Backup Exec\NT\beserver.exe"><VERITAS Software Corporation>
[Symantec Event Manager / ccEvtMgr][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc][Stopped/Manual Start]
<"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr][Running/Auto Start]
<"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Symantec AntiVirus Definition Watcher / DefWatch][Running/Auto Start]
<"C:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[ExecView Communication Module (ECM) / ECM Service][Stopped/Manual Start]
<C:\Program Files\VERITAS\Backup Exec\NT\ECM\ECM.exe><VERITAS Software Corporation>
[FTGate Mail Server / FTGate Mail Server][Running/Auto Start]
<D:\Program Files\FTGate\FTGateSrv.exe><Floosietek Ltd>
[MSSQL$BKUPEXEC / MSSQL$BKUPEXEC][Running/Auto Start]
<C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\sqlservr.exe -sBKUPEXEC><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
<C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[SavRoam / SavRoam][Stopped/Manual Start]
<"C:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec>
[Symantec Network Drivers Service / SNDSrvc][Stopped/Manual Start]
<"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec SPBBCSvc / SPBBCSvc][Stopped/Manual Start]
<C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe><Symantec Corporation>
[SQLAgent$BKUPEXEC / SQLAgent$BKUPEXEC][Stopped/Manual Start]
<C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\sqlagent.EXE -i BKUPEXEC><Microsoft Corporation>
[Symantec AntiVirus / Symantec AntiVirus][Running/Auto Start]
<"C:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation>

==================================
驱动程序
[4mmdat--VRTS / 4mmdat--VRTS][Running/System Start]
<system32\DRIVERS\04mmdat.sys><VERITAS Software>
[adpu160m / adpu160m][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\adpu160m.sys><Microsoft Corporation>
[atirage3 / atirage3][Running/Manual Start]
<System32\DRIVERS\atimpab.sys><ATI Technologies Inc.>
[cpqcissm / cpqcissm][Running/Boot Start]
<\SystemRoot\system32\drivers\cpqcissm.sys><Hewlett-Packard Company>
[dmboot / dmboot][Stopped/Disabled]
<System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio][Running/Boot Start]
<\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload][Running/Boot Start]
<\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[Symantec Eraser Control driver / eeCtrl][Running/System Start]
<\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation>
[NAVENG / NAVENG][Running/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\naveng.sys><Symantec Corporation>
[NAVEX15 / NAVEX15][Running/Manual Start]
<\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\navex15.sys><Symantec Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[HP NC7781 Gigabit Server Adapter / q57w2k][Running/Manual Start]
<System32\DRIVERS\q57w2k.sys><Hewlett-Packard Company>
[SAVRT / SAVRT][Running/System Start]
<\??\C:\Program Files\Symantec AntiVirus\savrt.sys><Symantec Corporation>
[SAVRTPEL / SAVRTPEL][Running/System Start]
<\??\C:\Program Files\Symantec AntiVirus\Savrtpel.sys><Symantec Corporation>
[SCSIChanger / SCSIChanger][Stopped/System Start]
<System32\DRIVERS\scsichng.sys><VERITAS Software>
[SPBBCDrv / SPBBCDrv][Stopped/Manual Start]
<\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation>
[SymEvent / SymEvent][Running/Manual Start]
<\??\C:\Program Files\Symantec\SYMEVENT.SYS><Symantec Corporation>
[SYMREDRV / SYMREDRV][Stopped/Manual Start]
<\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
[SYMTDI / SYMTDI][Running/System Start]
<\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
<system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>

[用户系统信息]Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

◎稻草人◎ - 2008-1-19 16:51:00

浏览器加载项
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[NavigatMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\PROGRA~1\360safe\safemon\safemon.dll, >
[@shdoclc.dll,-866]
{c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[电台(&R)]
{8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[JavaPlugin.Object]
{7B19E477-0FF8-11d4-9914-005004D3B3DB} <C:\Program Files\JavaSoft\JRE\1.2\bin\npjava122_013.dll, JavaSoft / Sun Microsystems, Inc.>
[JavaBeansBridge.Object]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\JavaSoft\JRE\1.2\bin\npjava122_013.dll, JavaSoft / Sun Microsystems, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9c.ocx, Adobe Systems, Inc.>
[360SafeLive]
{87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360safe.com>
[使用网际快车下载]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\Program Files\FlashGet\jc_all.htm, N/A>

==================================
正在运行的进程
[PID: 200 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 228 / SYSTEM][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 252 / SYSTEM][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6997]
[C:\WINNT\system32\NavLogon.dll] [Symantec Corporation, 10.0.1.1000]
[PID: 280 / SYSTEM][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.00.2195.7035]
[C:\WINNT\system32\dmserver.dll] [VERITAS Software Corp., 2195.6605.297.3]
[PID: 292 / SYSTEM][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.00.2195.7011]
[PID: 400 / SYSTEM][C:\WINNT\System32\termsrv.exe] [Microsoft Corporation, 5.00.2195.6696]
[PID: 520 / SYSTEM][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 560 / SYSTEM][C:\WINNT\system32\spoolsv.exe] [Microsoft Corporation, 5.00.2195.7059]
[PID: 788 / SYSTEM][C:\Program Files\VERITAS\Backup Exec\NT\beremote.exe] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bestdutl.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\system32\MSVCP60.dll] [Microsoft Corporation, 6.00.8972.0]
[C:\Program Files\VERITAS\Backup Exec\NT\engine_ZH.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\ndmpsrvr.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\ndmpcomm.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedscomn.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedssms.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bebsdu.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\benetapi.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\benetutl.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsnt5.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\intranw.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\beerrors_ZH.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedssql2.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsxchg.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsxese.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedspush.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsnote.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsmdoc.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsupfs.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsshadow.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsagnt.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedssmsp.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\benettcp.dll] [VERITAS Software Corporation, 9.0.4367]
[PID: 824 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\benetns.exe] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\benetutl.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\system32\MSVCP60.dll] [Microsoft Corporation, 6.00.8972.0]
[PID: 852 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\benser.exe] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\system32\MSVCP60.dll] [Microsoft Corporation, 6.00.8972.0]
[PID: 884 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe] [Symantec Corporation, 103.5.4.3]
[C:\WINNT\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINNT\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 103.5.4.3]
[PID: 892 / SYSTEM][C:\Program Files\Symantec AntiVirus\DefWatch.exe] [Symantec Corporation, 10.0.1.1000]
[C:\WINNT\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[PID: 908 / SYSTEM][C:\WINNT\system32\Dfssvc.exe] [Microsoft Corporation, 5.00.2195.6664]
[PID: 952 / SYSTEM][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 980 / SYSTEM][D:\Program Files\FTGate\FTGateSrv.exe] [Floosietek Ltd, 1, 2, 0, 0]
[D:\Program Files\FTGate\Core.dll] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\ScriptSupport.dll] [N/A, ]
[PID: 1004 / SYSTEM][D:\Program Files\FTGate\FTGate.exe] [N/A, ]
[D:\Program Files\FTGate\Core.dll] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\ScriptSupport.dll] [N/A, ]
[D:\Program Files\FTGate\Executive.dll] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\sock.dll] [Floosietek, 1, 2, 0, 0]

◎稻草人◎ - 2008-1-19 16:52:00

[D:\Program Files\FTGate\Mailbox.dll] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\MsgStore.dll] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\DataStore.dll] [N/A, ]
[D:\Program Files\FTGate\edbnt.dll] [Simple Software Solutions, Inc., 4, 1, 1, 1]
[D:\Program Files\FTGate\script.dll] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\Schedule.dll] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\Spool.dll] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\WebServ.dll] [N/A, ]
[D:\Program Files\FTGate\ext.dll] [N/A, ]
[D:\Program Files\FTGate\edb1nt.dll] [Simple Software Solutions, Inc., 4, 1, 1, 1]
[D:\Program Files\FTGate\zavScan.avs] [N/A, ]
[D:\Program Files\FTGate\FTGMon.fxt] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\inifile.fxt] [N/A, ]
[D:\Program Files\FTGate\LdapEx.fxt] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\Replicator.fxt] [N/A, ]
[D:\Program Files\FTGate\ScriptLib.fxt] [Floosietek, 1, 2, 0, 0]
[D:\Program Files\FTGate\SigInsert.fxt] [N/A, ]
[PID: 1012 / SYSTEM][C:\WINNT\System32\llssrv.exe] [Microsoft Corporation, 5.00.2195.7021]
[PID: 1068 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\sqlservr.exe] [Microsoft Corporation, 2000.080.0534.00]
[C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\OPENDS60.DLL] [Microsoft Corporation, 2000.080.0194.00]
[C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\UMS.DLL] [Microsoft Corporation, 2000.080.0382.00]
[C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\SQLSORT.DLL] [Microsoft Corporation, 2000.080.0534.00]
[C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\Resources\1033\sqlevn70.RLL] [Microsoft Corporation, 2000.080.0534.00]
[C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\SSNETLIB.dll] [Microsoft Corporation, 2000.080.0534.00]
[C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\SSNMPN70.dll] [Microsoft Corporation, 2000.080.0534.00]
[C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\SSmsLPCn.dll] [Microsoft Corporation, 2000.080.0534.00]
[PID: 1076 / SYSTEM][C:\WINNT\system32\ntfrs.exe] [Microsoft Corporation, 5.00.2195.6709]
[PID: 1152 / SYSTEM][C:\WINNT\system32\regsvc.exe] [Microsoft Corporation, 5.00.2195.6701]
[PID: 1164 / SYSTEM][C:\WINNT\System32\locator.exe] [Microsoft Corporation, 5.00.2195.6619]
[PID: 1204 / SYSTEM][C:\WINNT\system32\MSTask.exe] [Microsoft Corporation, 4.71.2195.6972]
[PID: 1288 / SYSTEM][C:\Program Files\Symantec AntiVirus\Rtvscan.exe] [Symantec Corporation, 10.0.1.1000]
[C:\WINNT\system32\CBA.DLL] [LANDesk Software Ltd., 6.12.0.137 E]
[C:\WINNT\system32\MsgSys.dll] [LANDesk Software Ltd., 6.12.0.137 E]
[C:\WINNT\system32\NTS.dll] [LANDesk Software Ltd., 6.12.0.137 E]
[C:\WINNT\system32\PDS.DLL] [LANDesk Software Ltd., 6.12.0.137 E]
[C:\Program Files\Symantec AntiVirus\NAVLU.dll] [Symantec Corporation, 10.0.1.1000]
[C:\WINNT\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINNT\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL] [Symantec Corporation, 10.0.1.1000]
[c:\program files\common files\symantec shared\ssc\ScsComms.dll] [Symantec Corporation, 10.0.1.1000]
[C:\WINNT\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Symantec AntiVirus\I2ldvp3.dll] [Symantec Corporation, 10.0.1.1000]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccDec.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\decsdk.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll] [Symantec Corporation, 3.02.12.35]
[C:\Program Files\Common Files\Symantec Shared\ccScan.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL] [Symantec Corporation, 1.4.0.11]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\ccEraser.dll] [Symantec Corporation, 107.3.4.3]
[C:\Program Files\Symantec AntiVirus\DefUtDCD.dll] [Symantec Corporation, 3.1.13a.0]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\ecmsvr32.dll] [Symantec Corporation, 71.3.0.25]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\NAVEX32a.DLL] [Symantec Corporation, 20071.3.1.10]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\NAVENG32.DLL] [Symantec Corporation, 20071.3.1.10]
[C:\Program Files\Symantec AntiVirus\NAVAP32.DLL] [Symantec Corporation, 9.5.0.44]
[C:\Program Files\Symantec AntiVirus\SAVRT32.DLL] [Symantec Corporation, 9.5.0.44]
[C:\Program Files\Symantec AntiVirus\IMail.dll] [Symantec Corporation, 10.0.1.1000]
[C:\Program Files\Symantec AntiVirus\NotesExt.dll] [Symantec Corporation, 10.0.1.1000]
[C:\Program Files\Symantec AntiVirus\vpmsece3.dll] [Symantec Corporation, 10.0.1.1000]
[C:\Program Files\Symantec AntiVirus\SymProtectStorage.dll] [Symantec Corporation, 10.0.1.1000]
[C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll] [Symantec Corporation, 1,5,1,3]
[PID: 1376 / SYSTEM][C:\WINNT\System32\lserver.exe] [Microsoft Corporation, 5.00.2195.6701]
[PID: 1428 / SYSTEM][C:\WINNT\System32\WBEM\WinMgmt.exe] [Microsoft Corporation, 1.50.1085.0100]
[PID: 1448 / SYSTEM][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 1488 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\pvlsvr.exe] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\MCHXFACE.dll] [Microsoft Corporation, 3.51]
[C:\Program Files\VERITAS\Backup Exec\NT\bestdutl.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\system32\MSVCP60.dll] [Microsoft Corporation, 6.00.8972.0]
[C:\Program Files\VERITAS\Backup Exec\NT\bemsdk.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\SigComp230.dll] [, 2.30.003]
[C:\Program Files\VERITAS\Backup Exec\NT\pvltypes.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\pvlsvr_ZH.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\system32\MSDART.DLL] [Microsoft Corporation, 2.62.7926.0]
[C:\Program Files\Common Files\System\OLE DB\sqloledb.dll] [Microsoft Corporation, 2000.080.0747]
[C:\Program Files\Common Files\System\OLE DB\MSDATL3.dll] [Microsoft Corporation, 2.62.7926.0]
[C:\Program Files\Common Files\System\OLE DB\SQLOLEDB.RLL] [Microsoft Corporation, 2000.080.0528]
[C:\WINNT\system32\DBNETLIB.DLL] [Microsoft Corporation, 2000.080.0747.00]
[C:\WINNT\system32\DBmsLPCn.dll] [Microsoft Corporation, 2000.080.0534.00]
[C:\WINNT\System32\SQLSRV32.dll] [Microsoft Corporation, 2000.080.0747.00]
[C:\WINNT\System32\SQLUNIRL.dll] [Microsoft Corporation, 2000.080.0380.00]
[C:\WINNT\System32\sqlsrv32.rll] [Microsoft Corporation, 2000.080.0528.00]
[C:\Program Files\VERITAS\Backup Exec\NT\devtypes.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\PROGRA~1\VERITAS\BACKUP~1\NT\ipvlapi.dll] [VERITAS Software Corporation, 9.0.4367]
[PID: 1616 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe] [Symantec Corporation, 103.5.4.3]
[C:\WINNT\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINNT\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]

◎稻草人◎ - 2008-1-19 16:52:00

[C:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.5.4.3]
[C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\BB.DLL] [Symantec Corporation, 1,5,1,3]
[C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL] [Symantec Corporation, 1,5,1,3]
[C:\Program Files\Common Files\Symantec Shared\ccSet.dll] [Symantec Corporation, 103.5.4.3]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL] [Symantec Corporation, 103.5.4.3]
[PID: 1640 / SYSTEM][C:\WINNT\System32\tcpsvcs.exe] [Microsoft Corporation, 5.00.2134.1]
[PID: 1664 / SYSTEM][C:\WINNT\System32\dns.exe] [Microsoft Corporation, 5.00.2195.7147]
[PID: 1684 / SYSTEM][C:\WINNT\System32\ismserv.exe] [Microsoft Corporation, 5.00.2195.6684]
[PID: 1720 / SYSTEM][C:\WINNT\System32\msdtc.exe] [Microsoft Corporation, 1999.9.3421.3]
[PID: 2184 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\beserver.exe] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\BeSQL.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\system32\MSVCP60.dll] [Microsoft Corporation, 6.00.8972.0]
[C:\Program Files\VERITAS\Backup Exec\NT\bemsdk.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\SigComp230.dll] [, 2.30.003]
[C:\Program Files\VERITAS\Backup Exec\NT\CRPE32.dll] [Seagate Software, Inc., 8.5.0.217]
[C:\Program Files\VERITAS\Backup Exec\NT\bestdutl.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\vxace502.dll] [, 5.2]
[C:\Program Files\VERITAS\Backup Exec\NT\msgq.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\InstOps.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\BeCatDrv.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bebsdu.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedscomn.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\shuie.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\engine_ZH.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\system32\MSDART.DLL] [Microsoft Corporation, 2.62.7926.0]
[C:\Program Files\Common Files\System\OLE DB\sqloledb.dll] [Microsoft Corporation, 2000.080.0747]
[C:\Program Files\Common Files\System\OLE DB\MSDATL3.dll] [Microsoft Corporation, 2.62.7926.0]
[C:\Program Files\Common Files\System\OLE DB\SQLOLEDB.RLL] [Microsoft Corporation, 2000.080.0528]
[C:\WINNT\system32\DBNETLIB.DLL] [Microsoft Corporation, 2000.080.0747.00]
[C:\WINNT\system32\DBmsLPCn.dll] [Microsoft Corporation, 2000.080.0534.00]
[C:\PROGRA~1\VERITAS\BACKUP~1\NT\schedmgrur.dll] [VERITAS Software Corporation, 1.00.053]
[C:\PROGRA~1\VERITAS\BACKUP~1\NT\sfcwall30u.dll] [Seagate Software, Inc., 3, 0, 17, ]
[C:\PROGRA~1\VERITAS\BACKUP~1\NT\schedu.dll] [VERITAS Software Corporation, 1.00.053]
[C:\Program Files\VERITAS\Backup Exec\NT\NS300.DLL] [VERITAS Software Corporation, 3.00.046]
[C:\Program Files\VERITAS\Backup Exec\NT\xerces-c_1_3.dll] [Apache Software Foundation, 1, 3, 0]
[C:\WINNT\System32\SQLSRV32.dll] [Microsoft Corporation, 2000.080.0747.00]
[C:\WINNT\System32\SQLUNIRL.dll] [Microsoft Corporation, 2000.080.0380.00]
[C:\WINNT\System32\sqlsrv32.rll] [Microsoft Corporation, 2000.080.0528.00]
[C:\Program Files\VERITAS\Backup Exec\NT\SIGMAPIMAIL300U.DLL] [, 3.00.018.0]
[C:\Program Files\VERITAS\Backup Exec\NT\SIGVIMMAIL100.DLL] [, 1.00.019]
[C:\Program Files\VERITAS\Backup Exec\NT\SIGPRINTNOTE100.DLL] [VERITAS Software Corporation, 1.00.005]
[C:\Program Files\VERITAS\Backup Exec\NT\PAGER300.DLL] [, 3.00.013]
[C:\Program Files\VERITAS\Backup Exec\NT\SigFCL250U.dll] [, 2.50.021]
[C:\Program Files\VERITAS\Backup Exec\NT\SMTPMAIL300.DLL] [, 3.00.009]
[C:\WINNT\system32\mapi32.dll] [Microsoft Corporation, 1.0.2536.0]
[PID: 2376 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\bengine.exe] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\benetapi.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\system32\MSVCP60.dll] [Microsoft Corporation, 6.00.8972.0]
[C:\Program Files\VERITAS\Backup Exec\NT\benetutl.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedscomn.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bestdutl.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bebsdu.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\becatsrv.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\BeCatDrv.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\daoview.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bemsdk.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\SigComp230.dll] [, 2.30.003]
[C:\Program Files\VERITAS\Backup Exec\NT\ndmpcomm.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\shuie.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\BECATDRV_ZH.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\engine_ZH.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\PROGRA~1\VERITAS\BACKUP~1\NT\ipvlapi.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\BeCatSrv_ZH.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\WINNT\System32\SQLSRV32.dll] [Microsoft Corporation, 2000.080.0747.00]
[C:\WINNT\System32\SQLUNIRL.dll] [Microsoft Corporation, 2000.080.0380.00]
[C:\WINNT\System32\sqlsrv32.rll] [Microsoft Corporation, 2000.080.0528.00]
[C:\WINNT\system32\DBNETLIB.DLL] [Microsoft Corporation, 2000.080.0747.00]
[C:\WINNT\system32\DBmsLPCn.dll] [Microsoft Corporation, 2000.080.0534.00]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsnt5.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\intranw.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedssql2.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsagnt.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedssms.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsxchg.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsxese.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedspush.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedssmsp.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsnote.dll] [VERITAS Software Corporation, 9.0.4367]

◎稻草人◎ - 2008-1-19 16:53:00

[C:\Program Files\VERITAS\Backup Exec\NT\bedsmdoc.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsupfs.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\bedsshadow.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\benettcp.dll] [VERITAS Software Corporation, 9.0.4367]
[C:\Program Files\VERITAS\Backup Exec\NT\beerrors_ZH.dll] [VERITAS Software Corporation, 9.0.4367]
[PID: 2464 / SYSTEM][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[C:\WINNT\System32\unimdm.tsp] [Microsoft Corporation, 5.00.2195.6601]
[C:\WINNT\System32\kmddsp.tsp] [Microsoft Corporation, 5.00.2150.1]
[C:\WINNT\System32\ndptsp.tsp] [Microsoft Corporation, 5.00.2143.1]
[C:\WINNT\System32\ipconf.tsp] [Microsoft Corporation, 5.00.2143.1]
[C:\WINNT\System32\h323.tsp] [Microsoft Corporation, 5.00.2195.6901]
[PID: 2548 / Administrator][C:\WINNT\Explorer.EXE] [Microsoft Corporation, 5.00.3700.6690]
[C:\PROGRA~1\FlashGet\jccatch.dll] [Amaze Soft, 1, 1, 4, 0]
[C:\PROGRA~1\360safe\safemon\safemon.dll] [, 3, 6, 3, 1001]
[PID: 2744 / Administrator][C:\Program Files\Common Files\Symantec Shared\ccApp.exe] [Symantec Corporation, 103.5.4.3]
[C:\WINNT\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINNT\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.5.4.3]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL] [Symantec Corporation, 103.5.4.3]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL] [Symantec Corporation, 103.5.4.3]
[C:\WINNT\system32\SYMREDIR.DLL] [Symantec Corporation, 5.5.2.1]
[C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 103.5.4.3]
[C:\Program Files\Symantec AntiVirus\SavEmail.dll] [Symantec Corporation, 10.0.1.1000]
[PID: 2756 / Administrator][C:\PROGRA~1\SYMANT~1\VPTray.exe] [Symantec Corporation, 10.0.1.1000]
[C:\WINNT\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINNT\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\Program Files\Symantec AntiVirus\SAVRT32.DLL] [Symantec Corporation, 9.5.0.44]
[C:\Program Files\Symantec AntiVirus\Cliscan.dll] [Symantec Corporation, 10.0.1.1000]
[C:\PROGRA~1\SYMANT~1\NAVNTUTL.DLL] [Symantec Corporation, 10.0.1.1000]
[C:\Program Files\Symantec AntiVirus\Cliproxy.dll] [Symantec Corporation, 10.0.1.1000]
[PID: 2780 / Administrator][C:\Program Files\VERITAS\VxUpdate\VxTaskbarMgr.exe] [VERITAS Software Corporation, 9.0.4367]
[PID: 2816 / Administrator][D:\Program Files\FTGate\FTGateIcon.exe] [Floosietek Ltd, 1, 2, 0, 0]
[PID: 1748 / Administrator][C:\WINNT\system32\internat.exe] [Microsoft Corporation, 5.00.2920.0000]
[PID: 612 / Administrator][C:\Program Files\cn99qdns\Cn99qdns.exe] [, 2, 0, 0, 1]
[PID: 2728 / Administrator][C:\Documents and Settings\administrator.CLASSIC-LIGHT\桌面\杀毒工具\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]
[C:\Documents and Settings\administrator.CLASSIC-LIGHT\桌面\杀毒工具\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 980, D:\PROGRAM FILES\FTGATE\FTGATESRV.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1004, D:\PROGRAM FILES\FTGATE\FTGATE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1068, C:\PROGRAM FILES\MICROSOFT SQL SERVER\MSSQL$BKUPEXEC\BINN\SQLSERVR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2816, D:\PROGRAM FILES\FTGATE\FTGATEICON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 612, C:\PROGRAM FILES\CN99QDNS\CN99QDNS.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================

[/CODE]

瑞星卡卡安全论坛