急救·！！！！高手来看看 Trojan.PSW.Lmir.kgx这是什么 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛急救·！！！！高手来看看 Trojan.PSW.Lmir.kgx这是什么

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

2 / 2 页

跳转页

急救·！！！！高手来看看 Trojan.PSW.Lmir.kgx这是什么

菜鸟小王first 快乐黄口狮帖子:228 注册: 2006-06-21 来自:	发表于： 2006-06-21 11:37 \| 短消息资料字号：小中大 11楼 ================================== 正在运行的进程 [PID: 512][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 600][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 624][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 692][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 704][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 864][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 912][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 980][C:\瑞星杀毒\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 996][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1056][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1180][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1224][C:\瑞星杀毒\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26> [C:\瑞星杀毒\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\瑞星杀毒\RsCommX.dll] <rising><18, 0, 0, 1> [C:\瑞星杀毒\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\瑞星杀毒\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\瑞星杀毒\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\瑞星杀毒\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\瑞星杀毒\HOOKSYS.dll] <Rising><18, 1, 0, 9> [C:\瑞星杀毒\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [C:\瑞星杀毒\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\瑞星杀毒\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\瑞星杀毒\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\瑞星杀毒\HookWeb.dll] <rising><18, 0, 0, 1> [C:\瑞星杀毒\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\瑞星杀毒\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\瑞星杀毒\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\瑞星杀毒\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\瑞星杀毒\SpamEng.dll] <N/A><18, 0, 0, 6> [C:\瑞星杀毒\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [C:\瑞星杀毒\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\瑞星杀毒\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\瑞星杀毒\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\瑞星杀毒\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\瑞星杀毒\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\瑞星杀毒\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [C:\瑞星杀毒\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15> [C:\瑞星杀毒\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\瑞星杀毒\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\瑞星杀毒\ScanNet.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\瑞星杀毒\RsStore.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [PID: 1328][d:\瑞星杀毒软件2006版本\rfwproxy.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 14> [d:\瑞星杀毒软件2006版本\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13> [d:\瑞星杀毒软件2006版本\MonMid.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 2> [PID: 1408][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\Program Files\E-Book Systems\FlipViewer\fplaunch.dll] <><1, 0, 0, 1> [C:\PROGRA~1\baidu\bar\baidubar.dll] <Baidu.com, Inc.><2, 0, 2, 78> [d:\迅雷5\ComDlls\XunLeiBHO_001.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 1> [D:\QQ\qdshm.dll] <><1, 0, 101, 20> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [C:\瑞星杀毒\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\瑞星杀毒\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
菜鸟小王first 快乐黄口狮帖子:228 注册: 2006-06-21 来自:

菜鸟小王first 快乐黄口狮帖子:228 注册: 2006-06-21 来自:	发表于： 2006-06-21 11:37 \| 短消息资料字号：小中大 12楼 [PID: 1444][d:\瑞星杀毒软件2006版本\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32> [d:\瑞星杀毒软件2006版本\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13> [d:\瑞星杀毒软件2006版本\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6> [d:\瑞星杀毒软件2006版本\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21> [d:\瑞星杀毒软件2006版本\MonDrv.dll] <rs><1, 0, 0, 4> [d:\瑞星杀毒软件2006版本\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9> [PID: 1648][C:\瑞星杀毒\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [C:\瑞星杀毒\RsCommX.dll] <rising><18, 0, 0, 1> [C:\瑞星杀毒\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1828][C:\WINDOWS\system32\LEXBCES.EXE] <Lexmark International, Inc.><8.16> [PID: 1876][C:\WINDOWS\system32\LEXPPS.EXE] <Lexmark International, Inc.><8.16> [C:\WINDOWS\system32\LEXBCE.DLL] <Lexmark International, Inc.><8.16> [PID: 1872][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LGBCPP5C.dll] <Lenovo><1.0.3.0> [PID: 1688][C:\happyhome\幸福飞梭\lxswitch.exe] <><1, 0, 0, 1> [PID: 1848][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1940][C:\Program Files\UPHClean\uphclean.exe] <Microsoft Corporation><1.5.5.21> [PID: 500][C:\Program Files\Common Files\DeviceManager\DeviceManager.exe] <><1, 0, 0, 1> [PID: 1336][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2740][C:\Program Files\Common Files\DeviceManager\lxdevclient.exe] <N/A><N/A> [PID: 2848][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.30> [PID: 2864][C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe] <ACD Systems, Ltd.><3,1,31,0> [PID: 2896][C:\瑞星杀毒\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\瑞星杀毒\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\瑞星杀毒\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\瑞星杀毒\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\瑞星杀毒\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 2916][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2948][C:\瑞星杀毒\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 20> [C:\瑞星杀毒\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [C:\瑞星杀毒\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\瑞星杀毒\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\瑞星杀毒\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\瑞星杀毒\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\瑞星杀毒\RsCommX.dll] <rising><18, 0, 0, 1> [C:\瑞星杀毒\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 3068][C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\skdaemon.exe] <><1, 0, 0, 1> [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\MacFun.dll] <Silitek><1, 0, 0, 0> [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\OpenDriver.dll] <Silitek><1, 0, 0, 0> [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\OSD.dll] <silitek><1, 0, 0, 1> [C:\WINDOWS\system32\lxkeyled.dll] <Silitek><1, 0, 0, 1> [PID: 3104][C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe] <><1.0> [PID: 3112][C:\happyhome\幸福飞梭\FlyShuttle.exe] <><1, 0, 0, 1> [C:\WINDOWS\system32\CLxUI.dll] <联想（北京）有限公司><1, 0, 0, 1> [C:\WINDOWS\system32\klhome.dll] <><1, 0, 0, 1> [C:\happyhome\幸福飞梭\FlyUI.ui] <联想（北京）有限公司 ><1, 0, 0, 1> [C:\happyhome\幸福飞梭\SK_OSD.dll] <silitek><1, 0, 0, 1> [C:\happyhome\幸福飞梭\VolumeOsd.dll] <N/A><N/A> [C:\happyhome\幸福飞梭\ScrOSD32.dll] <N/A><N/A> [C:\happyhome\幸福飞梭\uiresource.dll] <><1, 0, 0, 1> [C:\Program Files\Common Files\Legend\Happyhome\bin\AssistantMaster.dll] <><1, 0, 0, 1> [PID: 3324][C:\Program Files\Common Files\Legend\Happyhome\bin\AssistantApp.exe] <><1, 0, 0, 1> [C:\Program Files\Common Files\Legend\Happyhome\bin\ReminderMonitorCom.dll] <><1, 0, 0, 1> [C:\Program Files\Common Files\Legend\Happyhome\bin\AssistantCom.dll] <><1, 0, 0, 1> [PID: 1036][C:\瑞星杀毒\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\瑞星杀毒\RsCommX.dll] <rising><18, 0, 0, 1> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [PID: 1072][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422> [PID: 2644][d:\QQ\TIMPlatform.exe] <tencent><0, 3, 1, 8> [d:\QQ\TIMProxy.dll] <tencent><0, 3, 2, 4> [PID: 3292][C:\WINDOWS\system32\mssie.exe] <Microsoft Corporation><5.1.2600.2180> [PID: 2108][d:\瑞星杀毒软件2006版本\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51> [d:\瑞星杀毒软件2006版本\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [d:\瑞星杀毒软件2006版本\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [d:\瑞星杀毒软件2006版本\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 3784][C:\WINDOWS\system32\NOTEPAD.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2956][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\PROGRA~1\baidu\bar\baidubar.dll] <Baidu.com, Inc.><2, 0, 2, 78> [C:\Program Files\E-Book Systems\FlipViewer\fplaunch.dll] <><1, 0, 0, 1> [c:\PROGRA~1\chinanet\VNETTR~1.DLL] <><2005, 4, 6, 1> [c:\PROGRA~1\chinanet\Communicate.dll] <0><2005, 3, 3, 1> [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] <><2004, 2, 28, 1> [d:\QQ\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [d:\迅雷5\ComDlls\XunLeiBHO_001.dll] <Thunder Networking Technologies,LTD><5, 0, 0, 1> [C:\瑞星杀毒\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\WINDOWS\System32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 3684][D:\Maxthon IE\Maxthon.exe] <Maxthon International Ltd.><1, 5, 6, 42> [D:\Maxthon IE\maxzlib.dll] < ><1, 0, 0, 2> [D:\Maxthon IE\Services\RealTime\real_time.dll] <><1, 0, 0, 1> [C:\瑞星杀毒\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 2060][d:\迅雷5\Program\Thunder5.exe] <Thunder Networking Technologies,LTD><5.1.6.198> [d:\迅雷5\Program\UpdateDownload.dll] <Thunder Networking Technologies,LTD><1, 0, 1, 3> [d:\迅雷5\Program\download_interface.dll] <Thunder Networking Technologies,LTD><1, 0, 2, 69> [d:\迅雷5\Program\log4cplus.dll] <><1, 0, 2, 1> [d:\迅雷5\Program\stlport_vc646.dll] <STLport Consulting, Inc.><4.6.2003.1031> [d:\迅雷5\Program\asyn_dns.dll] <N/A><N/A> [d:\迅雷5\Program\msgmanage.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 15> [d:\迅雷5\Program\historyinfo_manage.dll] <Thunder Networking Technologies,LTD><5, 2, 0, 148> [d:\迅雷5\Program\RegisterDll.dll] <Thunder Networking Technologies,LTD><1, 2, 0, 7> [d:\迅雷5\Program\FloatBar.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2> [d:\迅雷5\Components\InMedia\iEmbedShell.dll] <　><1, 0, 0, 5> [d:\迅雷5\Components\InMedia\iEmbed.dll] <　><2, 1, 0, 29> [d:\迅雷5\Components\P4PClient\P4PClient.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 4> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [d:\迅雷5\Program\iTargetAd.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 60> [C:\瑞星杀毒\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\WINDOWS\System32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 3676][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [PID: 4092][C:\DOCUME~1\lenovo\LOCALS~1\Temp\Rar$EX00.969\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
菜鸟小王first 快乐黄口狮帖子:228 注册: 2006-06-21 来自:

菜鸟小王first 快乐黄口狮帖子:228 注册: 2006-06-21 来自:	发表于： 2006-06-21 11:38 \| 短消息资料字号：小中大 13楼 ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
菜鸟小王first 快乐黄口狮帖子:228 注册: 2006-06-21 来自:

<<上一主题|下一主题>>

12

2 / 2 页

跳转页

页面顶部

Powered by Discuz!NT