Backdoor.Gpigeon.xni..

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛 Backdoor.Gpigeon.xni..

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1 / 1 页

跳转页

icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:	发表于： 2006-06-19 02:13 \| 只看楼主短消息资料字号：小中大 1楼 Backdoor.Gpigeon.xni.. 这是什么病毒.. 杀完毒后的日志.. 帮我看下.. Logfile of HijackThis v1.99.1 Scan saved at 11:37:17, on 2006-6-18 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\rising\Rav\Ravmond.exe c:\program files\rising\rfw\rfwsrv.exe C:\Program Files\rising\Rav\RavStub.exe C:\WINDOWS\system32\spoolsv.exe C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe C:\WINDOWS\system32\svchost.exe C:\DOCUME~1\icfly\LOCALS~1\Temp\aua1\aua1.exe C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe e:\Program Files\Stardock\Object Desktop\WINDOW~1\wbload.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE c:\program files\rising\rfw\RfwMain.exe C:\WINDOWS\system32\Rundll32.exe C:\Program Files\Rising\Rav\RavTask.exe C:\Program Files\CNNIC\Cdn\cdnup.exe C:\WINDOWS\VM_STI.EXE C:\Program Files\Rising\Rav\Ravmon.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\conime.exe E:\Program Files\Tencent\TT\TTraveler.exe C:\WINDOWS\explorer.exe E:\实用工具\ha_hijackthis_1991\HijackThis.exe R3 - URLSearchHook: BDSrchHook Class - {2C5AA40E-8814-4EB6-876E-7EFB8B3F9662} - C:\WINDOWS\DOWNLO~1\BDSrHook.dll O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v13.dll O2 - BHO: CNNIC_IDN - {35980F6E-A137-4E50-953D-813BB8556899} - C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O2 - BHO: BDHlprObj Class - {CA92B524-BC8A-4610-BD2C-6BD3E28155D0} - C:\WINDOWS\DOWNLO~1\BDHelper.dll O2 - BHO: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - e:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll O3 - Toolbar: (no name) - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - (no file) O3 - Toolbar: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [CdnCtr] C:\Program Files\CNNIC\Cdn\cdnup.exe O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE USB PC Camera 301P O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm O8 - Extra context menu item: ←设置内容 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\SetContent.htm O8 - Extra context menu item: ←设置标题 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\SetTitle.htm O8 - Extra context menu item: →提取全部图片 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetAllPic.htm O8 - Extra context menu item: →提取图片 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetPic.htm O8 - Extra context menu item: →提取链接 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetHref.htm O8 - Extra context menu item: →获取Flash列表 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\ListFlash.htm O8 - Extra context menu item: →获取内容 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetContent.htm O8 - Extra context menu item: →获取标题 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetTitle.htm O8 - Extra context menu item: &使用迅雷下载 - e:\Program Files\Thunder Network\Thunder\geturl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - e:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - Extra context menu item: 使用网络传送带下载 - E:\常用工具超市\NetTransport_2.01.305_Crack_RIP\NetTransport\NXAddLink.html O8 - Extra context menu item: 使用网络传送带下载全部链接 - E:\常用工具超市\NetTransport_2.01.305_Crack_RIP\NetTransport\NXAddList.html O8 - Extra context menu item: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: 添加到QQ自定义面板 - E:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\game\hfgame3\GameClient.exe O9 - Extra button: 中文上网 - {35980F6E-A137-4E50-953D-813BB8556899} - C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll O9 - Extra 'Tools' menuitem: 中文上网 - {35980F6E-A137-4E50-953D-813BB8556899} - C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O9 - Extra button: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll O9 - Extra 'Tools' menuitem: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll O9 - Extra button: 易趣购物 - {DE607140-AC19-420e-861A-1D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing) O9 - Extra 'Tools' menuitem: 易趣购物 - {DE607140-AC19-420e-861A-1D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll O11 - Options group: [CDNCLIENT] 中文上网 O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AXSafeControls.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{C610953C-7C6E-4BB7-A90F-DB8AE8AEEA33}: NameServer = 218.85.157.99 202.101.111.55 O20 - Winlogon Notify: WB - E:\PROGRA~1\STARDOCK\OBJECT~1\WINDOW~1\fastload.dll O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing) O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\rising\Rav\Ravmond.exe O23 - Service: winaua - Unknown owner - C:\DOCUME~1\icfly\LOCALS~1\Temp\aua1\aua1.exe 2006-06-19 20:58:21.857000000
icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:	分享到：

轩辕小聪卡卡技术团队帖子:8368 注册: 2006-01-09 来自:	发表于： 2006-06-19 02:30 \| 短消息资料字号：小中大 2楼结束进程C:\DOCUME~1\icfly\LOCALS~1\Temp\aua1\aua1.exe 修复： O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O2 - BHO: BDHlprObj Class - {CA92B524-BC8A-4610-BD2C-6BD3E28155D0} - C:\WINDOWS\DOWNLO~1\BDHelper.dll O2 - BHO: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O9 - Extra button: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll O9 - Extra 'Tools' menuitem: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll O23 - Service: winaua - Unknown owner - C:\DOCUME~1\icfly\LOCALS~1\Temp\aua1\aua1.exe 卸载： C:\PROGRA~1\MMSASS~1\ C:\Program Files\Infofo Bar\ 删除： C:\PROGRA~1\MMSASS~1\ C:\Program Files\Infofo Bar\ C:\WINDOWS\DOWNLO~1\BDHelper.dll 安全模式下清空C:\DOCUME~1\icfly\LOCALS~1\Temp文件夹的所有内容日志中没有发现灰鸽子。做完以上步骤后，请重启在http://forum.ikaka.com/topic.asp?board=28&artid=6979213下载System Repair Engineer 2.0.21.505（RC2）导出全部日志。并说清楚病毒文件名称与具体路径。
轩辕小聪卡卡技术团队帖子:8368 注册: 2006-01-09 来自:

跳舞的猫初生襁褓狮帖子:158 注册: 2006-05-27 来自:	发表于： 2006-06-19 16:28 \| 短消息资料字号：小中大 3楼 sha a
跳舞的猫初生襁褓狮帖子:158 注册: 2006-05-27 来自:

icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:	发表于： 2006-06-19 19:50 \| 只看楼主短消息资料字号：小中大 4楼 aua1.exe 这个是什么程序??
icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:

icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:	发表于： 2006-06-19 20:25 \| 只看楼主短消息资料字号：小中大 5楼急等..
icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:

710207 叱咤花甲狮帖子:2341 注册: 2006-02-06 来自:	发表于： 2006-06-19 20:32 \| 短消息资料字号：小中大 6楼 aua1.exe 木马
710207 叱咤花甲狮帖子:2341 注册: 2006-02-06 来自:

icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:	发表于： 2006-06-19 20:51 \| 只看楼主短消息资料字号：小中大 7楼啥木马.? 有啥危害??
icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:

横据古稀狮

帖子:11896
注册: 2005-08-10
来自:花果山

发表于： 2006-06-19 20:58 | 短消息资料

字号：小中大 8楼

引用:

【轩辕小聪的贴子】结束进程C:\DOCUME~1\icfly\LOCALS~1\Temp\aua1\aua1.exe
修复：
O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O2 - BHO: BDHlprObj Class - {CA92B524-BC8A-4610-BD2C-6BD3E28155D0} - C:\WINDOWS\DOWNLO~1\BDHelper.dll
O2 - BHO: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll
O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra ''Tools'' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll
O9 - Extra button: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll
O9 - Extra ''Tools'' menuitem: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll
O23 - Service: winaua - Unknown owner - C:\DOCUME~1\icfly\LOCALS~1\Temp\aua1\aua1.exe

卸载：
C:\PROGRA~1\MMSASS~1\
C:\Program Files\Infofo Bar\

删除：
C:\PROGRA~1\MMSASS~1\
C:\Program Files\Infofo Bar\
C:\WINDOWS\DOWNLO~1\BDHelper.dll
安全模式下清空C:\DOCUME~1\icfly\LOCALS~1\Temp文件夹的所有内容

日志中没有发现灰鸽子。
做完以上步骤后，请重启
在http://forum.ikaka.com/topic.asp?board=28&artid=6979213下载System Repair Engineer 2.0.21.505（RC2）导出全部日志。
并说清楚病毒文件名称与具体路径。
...........................

照做就行了,
中毒关键是先杀毒,然后再慢慢去了解中的是什么毒.

<<上一主题|下一主题>>

1 / 1 页

跳转页

icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:	发表于： 2006-06-19 02:13 \| 只看楼主短消息资料字号：小中大 1楼 Backdoor.Gpigeon.xni.. 这是什么病毒.. 杀完毒后的日志.. 帮我看下.. Logfile of HijackThis v1.99.1 Scan saved at 11:37:17, on 2006-6-18 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\rising\Rav\Ravmond.exe c:\program files\rising\rfw\rfwsrv.exe C:\Program Files\rising\Rav\RavStub.exe C:\WINDOWS\system32\spoolsv.exe C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe C:\WINDOWS\system32\svchost.exe C:\DOCUME~1\icfly\LOCALS~1\Temp\aua1\aua1.exe C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe e:\Program Files\Stardock\Object Desktop\WINDOW~1\wbload.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE c:\program files\rising\rfw\RfwMain.exe C:\WINDOWS\system32\Rundll32.exe C:\Program Files\Rising\Rav\RavTask.exe C:\Program Files\CNNIC\Cdn\cdnup.exe C:\WINDOWS\VM_STI.EXE C:\Program Files\Rising\Rav\Ravmon.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\conime.exe E:\Program Files\Tencent\TT\TTraveler.exe C:\WINDOWS\explorer.exe E:\实用工具\ha_hijackthis_1991\HijackThis.exe R3 - URLSearchHook: BDSrchHook Class - {2C5AA40E-8814-4EB6-876E-7EFB8B3F9662} - C:\WINDOWS\DOWNLO~1\BDSrHook.dll O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v13.dll O2 - BHO: CNNIC_IDN - {35980F6E-A137-4E50-953D-813BB8556899} - C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll O2 - BHO: MMSAssist - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O2 - BHO: BDHlprObj Class - {CA92B524-BC8A-4610-BD2C-6BD3E28155D0} - C:\WINDOWS\DOWNLO~1\BDHelper.dll O2 - BHO: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - e:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll O3 - Toolbar: (no name) - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - (no file) O3 - Toolbar: Infofo 工具栏 - {D74EC18E-3DDD-4174-B1B1-949FE3B8366D} - C:\Program Files\Infofo Bar\infofobar.dll O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [CdnCtr] C:\Program Files\CNNIC\Cdn\cdnup.exe O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE USB PC Camera 301P O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\Mmsass~1.dll/mms.htm O8 - Extra context menu item: ←设置内容 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\SetContent.htm O8 - Extra context menu item: ←设置标题 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\SetTitle.htm O8 - Extra context menu item: →提取全部图片 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetAllPic.htm O8 - Extra context menu item: →提取图片 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetPic.htm O8 - Extra context menu item: →提取链接 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetHref.htm O8 - Extra context menu item: →获取Flash列表 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\ListFlash.htm O8 - Extra context menu item: →获取内容 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetContent.htm O8 - Extra context menu item: →获取标题 - E:\绿色软件\绝对超强最新专集-绿色软件102款一包打尽\green\BBS帖子精灵2.1\html\GetTitle.htm O8 - Extra context menu item: &使用迅雷下载 - e:\Program Files\Thunder Network\Thunder\geturl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - e:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - Extra context menu item: 使用网络传送带下载 - E:\常用工具超市\NetTransport_2.01.305_Crack_RIP\NetTransport\NXAddLink.html O8 - Extra context menu item: 使用网络传送带下载全部链接 - E:\常用工具超市\NetTransport_2.01.305_Crack_RIP\NetTransport\NXAddList.html O8 - Extra context menu item: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: 添加到QQ自定义面板 - E:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - E:\Program Files\Tencent\QQ\AddEmotion.htm O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - D:\game\hfgame3\GameClient.exe O9 - Extra button: 中文上网 - {35980F6E-A137-4E50-953D-813BB8556899} - C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll O9 - Extra 'Tools' menuitem: 中文上网 - {35980F6E-A137-4E50-953D-813BB8556899} - C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll O9 - Extra button: (no name) - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O9 - Extra 'Tools' menuitem: MMSAssist工具条设置 - {6671A433-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\Mmsass~1.dll O9 - Extra button: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll O9 - Extra 'Tools' menuitem: Infofo 工具栏 - {8507326C-B5C1-4559-BB91-0919E753836F} - C:\Program Files\Infofo Bar\infofobar.dll O9 - Extra button: 易趣购物 - {DE607140-AC19-420e-861A-1D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing) O9 - Extra 'Tools' menuitem: 易趣购物 - {DE607140-AC19-420e-861A-1D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll O11 - Options group: [CDNCLIENT] 中文上网 O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AXSafeControls.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{C610953C-7C6E-4BB7-A90F-DB8AE8AEEA33}: NameServer = 218.85.157.99 202.101.111.55 O20 - Winlogon Notify: WB - E:\PROGRA~1\STARDOCK\OBJECT~1\WINDOW~1\fastload.dll O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing) O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\rising\Rav\Ravmond.exe O23 - Service: winaua - Unknown owner - C:\DOCUME~1\icfly\LOCALS~1\Temp\aua1\aua1.exe 2006-06-19 20:58:21.857000000
icfly 初生襁褓狮帖子:11 注册: 2006-06-18 来自:	分享到：