瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 急急急!!!不知道中了什么毒,在使用weblogic时,一点就出现蓝屏并自动重起

123   2  /  3  页   跳转

急急急!!!不知道中了什么毒,在使用weblogic时,一点就出现蓝屏并自动重起

[d:\oracle\ora92\Apache\Apache\ApacheCore.dll]  <N/A><N/A>
    [d:\oracle\ora92\Apache\Apache\yod.dll]  <N/A><N/A>
    [d:\oracle\ora92\Apache\Apache\Win9xConHook.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulemimemagic.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulemime.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthanon.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthdbm.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthdigest.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulecernmeta.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduledigest.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleexpires.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleheaders.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleproxy.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulerewrite.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulespeling.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleinfo.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulestatus.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleusertrack.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduledms.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleperl.dll]  <N/A><N/A>
    [d:\oracle\ora92\Apache\Perl\5.00503\bin\mswin32-x86\Perl.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleoprocmgr.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulefastcgi.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulessl.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\jserv\apachemodulejserv.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\modplsql.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\oracore9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraunls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\OCI.dll]  <Oracle Corporation><9.2.0.1.0>
[PID: 956][C:\WINNT\system32\cmd.exe]  <Microsoft Corporation><5.00.2195.6656>
[PID: 1000][d:\oracle\ora92\BIN\TNSLSNR.exe]  <N/A><N/A>
    [d:\oracle\ora92\BIN\oransgr9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oran9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oranl9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oranldap9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\orannzsbb9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oracore9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oranls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oraunls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\orageneric9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\BIN\oracommon9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\BIN\oraclient9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\BIN\oravsn9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\BIN\orawtc9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\BIN\orancrypt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oranro9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\orapls9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\BIN\oraslax9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\orasnls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\orasql9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oraxml9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\BIN\oraxsd9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\BIN\oraldapclnt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\ORATRACE9.dll]  <N/A><N/A>
    [d:\oracle\ora92\BIN\oranhost9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oranoname9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\orancds9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\orantns9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\BIN\oranms.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\BIN\oranmsp.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranipc9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orantcp9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
[PID: 1012][d:\oracle\ora92\bin\dbsnmp.exe]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranmi.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oraclient9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oracore9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraunls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oravsn9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oracommon9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orageneric9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraxml9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\bin\oraxsd9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\bin\orannzsbb9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oran9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranl9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranldap9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraldapclnt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orancrypt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\ORATRACE9.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\oranro9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranhost9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranoname9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orancds9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orantns9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranms.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranmsp.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\orapls9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraslax9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orasnls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orawtc9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orasql9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oravppdc.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranmd.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranmt.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranml.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\tcl82.dll]  <Scriptics Corporation><8.2.3>
    [d:\oracle\ora92\bin\orantcp9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oravpnt.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oravpxdba.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oravpxeap.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oravpsqlsrv.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oravpxoafnd.dll]  <Oracle Corporation><9.2.0.0.0>
[PID: 1024][C:\WINNT\system32\Rundll32.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\SoDAHK.DLL]  <Sohu.com Inc.><1, 0, 1, 3>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\WINNT\DOWNLO~1\CnsMinIO.dll]  <北京三七二一科技有限公司><1, 0, 3, 6>
    [C:\WINNT\DOWNLO~1\cnsio.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINNT\DOWNLO~1\CnsMinEx.dll]  <国风因特软件(北京)有限公司><1, 0, 3, 1>
gototop
 

[PID: 1040][d:\oracle\ora92\bin\ORACLE.EXE]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraclient9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oracore9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraunls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oravsn9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oracommon9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orageneric9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraxml9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\bin\oraxsd9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\bin\orannzsbb9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oran9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranl9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranldap9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraldapclnt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orancrypt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\ORATRACE9.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\oranro9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranhost9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranoname9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orancds9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orantns9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranms.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranmsp.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\orapls9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraslax9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orasnls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orawtc9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orasql9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraodm9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraplp9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orajox9.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\oransgr9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orawwg9.dll]  <Oracle Corporation><8.1.7.0.0>
    [d:\oracle\ora92\bin\ocijdbc9.dll]  <N/A><N/A>
    [d:\oracle\ora92\BIN\ORAIMR9.Dll]  <Oracle Corporation><9.2.0.1.0>
    [d:\oracle\ora92\bin\oranbeq9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orannts9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orantcp9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
[PID: 1060][C:\Program Files\Common Files\Sogou PXP\p2psvr.exe]  <Sohu.com Inc.><2, 0, 0, 17>
    [C:\Program Files\P4P\tbupdate.dll]  <Sohu.com Inc.><1, 0, 0, 9>
    [C:\Program Files\P4P\p4pipc.dll]  <Sohu.com Inc.><1, 0, 0, 11>
[PID: 1104][C:\WINNT\system32\regsvc.exe]  <Microsoft Corporation><5.00.2195.6701>
[PID: 1120][C:\WINNT\system32\MSTask.exe]  <Microsoft Corporation><4.71.2195.6704>
[PID: 1176][C:\WINNT\system32\slserv.exe]  < ><2.80.00(24Apr2000)>
[PID: 1212][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
[PID: 1240][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 1376][d:\oracle\ora92\Apache\Apache\apache.exe]  <N/A><N/A>
    [d:\oracle\ora92\Apache\Apache\ApacheCore.dll]  <N/A><N/A>
    [d:\oracle\ora92\Apache\Apache\yod.dll]  <N/A><N/A>
    [d:\oracle\ora92\Apache\Apache\Win9xConHook.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulemimemagic.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulemime.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthanon.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthdbm.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthdigest.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulecernmeta.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduledigest.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleexpires.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleheaders.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleproxy.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulerewrite.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulespeling.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleinfo.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulestatus.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleusertrack.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduledms.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleperl.dll]  <N/A><N/A>
    [d:\oracle\ora92\Apache\Perl\5.00503\bin\mswin32-x86\Perl.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemoduleoprocmgr.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\apache\modules\apachemodulefastcgi.dll]  <N/A><N/A>
gototop
 

[d:\oracle\ora92\apache\apache\modules\apachemodulessl.dll]  <N/A><N/A>
    [d:\oracle\ora92\apache\jserv\apachemodulejserv.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\modplsql.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\oracore9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraunls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\OCI.dll]  <Oracle Corporation><9.2.0.1.0>
    [d:\oracle\ora92\bin\OraClient9.Dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oravsn9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oracommon9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orageneric9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraxml9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\bin\oraxsd9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\bin\orannzsbb9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oran9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranl9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranldap9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraldapclnt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orancrypt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\ORATRACE9.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\oranro9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranhost9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranoname9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orancds9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orantns9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranms.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranmsp.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\orapls9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraslax9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orasnls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orawtc9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orasql9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
[PID: 1404][d:\oracle\ora92\jdk\bin\java.exe]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\hotspot\jvm.dll]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\hpi.dll]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\verify.dll]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\java.dll]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\zip.dll]  <N/A><N/A>
    [D:\oracle\ora92\jdk\jre\bin\net.dll]  <N/A><N/A>
[PID: 1412][d:\oracle\ora92\jdk\bin\java.exe]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\hotspot\jvm.dll]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\hpi.dll]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\verify.dll]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\java.dll]  <N/A><N/A>
    [d:\oracle\ora92\jdk\jre\bin\zip.dll]  <N/A><N/A>
    [D:\oracle\ora92\jdk\jre\bin\net.dll]  <N/A><N/A>
    [d:\oracle\ora92\bin\isqlplus]  <N/A><N/A>
    [d:\oracle\ora92\bin\oracommon9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oracore9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraunls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orageneric9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraclient9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oravsn9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orawtc9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\orannzsbb9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oran9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranl9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranldap9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraldapclnt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orancrypt9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\ORATRACE9.dll]  <N/A><N/A>
gototop
 

[d:\oracle\ora92\bin\oranro9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranhost9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranoname9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orancds9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orantns9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oranms.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\oranmsp.dll]  <Oracle Corporation><9.2.0.0.0>
    [d:\oracle\ora92\bin\orapls9.dll]  <Oracle Corporation><9.2.0.1.0 Production >
    [d:\oracle\ora92\bin\oraslax9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orasnls9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\orasql9.dll]  <Oracle Corporation><9.2.0.1.0 Production>
    [d:\oracle\ora92\bin\oraxml9.dll]  <Oracle Corporation><>
    [d:\oracle\ora92\bin\oraxsd9.dll]  <Oracle Corporation><>
[PID: 1968][C:\WINNT\system32\igfxtray.exe]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\system32\hccutils.DLL]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\WINNT\system32\igfxdev.dll]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\system32\igfxsrvc.dll]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\system32\igfxres.dll]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\system32\igfxress.dll]  <Intel Corporation><3.0.0.3751>
[PID: 1996][C:\WINNT\system32\hkcmd.exe]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\system32\hccutils.DLL]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\WINNT\system32\igfxdev.dll]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\system32\igfxsrvc.dll]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\system32\igfxhk.dll]  <Intel Corporation><3.0.0.3751>
    [C:\WINNT\system32\igfxres.dll]  <Intel Corporation><3.0.0.3751>
[PID: 2084][C:\UFGOV-R96\GRP_R9F\APPServer\scktsrvr.exe]  <Inprise Corporation><5.0.5.62>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
[PID: 2076][C:\Program Files\rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
[PID: 2104][C:\WINNT\system32\rundll32.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\SoDAHK.DLL]  <Sohu.com Inc.><1, 0, 1, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 5, 1324>
    [C:\PROGRA~1\3721\alLiveEx.dll]  < ><1, 0, 3, 1006>
    [C:\PROGRA~1\3721\notifier.dll]  <><1, 0, 0, 5>
[PID: 2136][C:\Program Files\rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
    [C:\Program Files\rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [C:\Program Files\rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
[PID: 2144][C:\WINNT\system32\internat.exe]  <Microsoft Corporation><5.00.2920.0000>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
[PID: 344][C:\WINNT\system32\RUNDLL32.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\SoDAHK.DLL]  <Sohu.com Inc.><1, 0, 1, 3>
    [C:\PROGRA~1\P4P\Feed.dll]  <Sohu.com Inc.><1, 0, 3, 1>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\P4P\Toolbar.dll]  <Sohu.com Inc.><1, 4, 5, 5>
[PID: 764][C:\WINNT\system32\conime.exe]  <Microsoft Corporation><5.00.2195.6655>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
[PID: 2020][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2800.1106>
gototop
 

[C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\PROGRA~1\3721\scrblock.dll]  <3721><1, 0, 1, 1000>
    [C:\PROGRA~1\3721\alrex.dll]  <><1, 0, 1, 1001>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\WINNT\DOWNLO~1\CnsHint.dll]  <3721><1, 0, 0, 7>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 5, 1324>
    [C:\PROGRA~1\3721\alLiveEx.dll]  < ><1, 0, 3, 1006>
    [C:\WINNT\DOWNLO~1\cnsplus.dll]  <3721><1, 0, 0, 2>
    [C:\Program Files\P4P\ToolBar.dll]  <Sohu.com Inc.><1, 4, 5, 5>
    [C:\WINNT\system32\xunleibho_v4.dll]  <><4, 3, 2, 29>
    [C:\Program Files\P4P\sodaie.dll]  <Sohu.com Inc.><1, 1, 2, 6>
    [C:\Program Files\P4P\autolink.dll]  <Sohu.com Inc.><1.0.0.17>
    [C:\Program Files\Tencent\QQ\QQIEHelper.dll]  <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
    [C:\WINNT\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
    [C:\WINNT\DOWNLO~1\CnsMinIO.dll]  <北京三七二一科技有限公司><1, 0, 3, 6>
    [C:\WINNT\DOWNLO~1\cnsio.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
    [C:\WINNT\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
[PID: 736][C:\WINNT\system32\RUNDLL32.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\SoDAHK.DLL]  <Sohu.com Inc.><1, 0, 1, 3>
    [C:\PROGRA~1\P4P\ToolBar.dll]  <Sohu.com Inc.><1, 4, 5, 5>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
[PID: 2692][C:\Program Files\Antiy Labs\Alive\AliveCenter0.exe]  <N/A><N/A>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
[PID: 1648][C:\Program Files\rising\Rav\RsAgent.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\Program Files\rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 2708][C:\WINNT\msagent\AgentSvr.exe]  <Microsoft Corporation><2.00.0.3422>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
[PID: 492][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2800.1106>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\WINNT\DOWNLO~1\CnsHint.dll]  <3721><1, 0, 0, 7>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\PROGRA~1\3721\scrblock.dll]  <3721><1, 0, 1, 1000>
    [C:\PROGRA~1\3721\alrex.dll]  <><1, 0, 1, 1001>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 5, 1324>
    [C:\PROGRA~1\3721\alLiveEx.dll]  < ><1, 0, 3, 1006>
    [C:\WINNT\DOWNLO~1\cnsplus.dll]  <3721><1, 0, 0, 2>
    [C:\Program Files\P4P\ToolBar.dll]  <Sohu.com Inc.><1, 4, 5, 5>
    [C:\WINNT\system32\xunleibho_v4.dll]  <><4, 3, 2, 29>
    [C:\Program Files\P4P\sodaie.dll]  <Sohu.com Inc.><1, 1, 2, 6>
    [C:\Program Files\P4P\autolink.dll]  <Sohu.com Inc.><1.0.0.17>
    [C:\Program Files\Tencent\QQ\QQIEHelper.dll]  <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
    [C:\WINNT\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
    [C:\WINNT\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\WINNT\DOWNLO~1\CnsMinIO.dll]  <北京三七二一科技有限公司><1, 0, 3, 6>
    [C:\WINNT\DOWNLO~1\cnsio.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
[PID: 1200][C:\WINNT\system32\mmc.exe]  <Microsoft Corporation><5.00.2195.6601>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINNT\System32\dfrgsnap.dll]  <Executive Software International, Inc.><5.00.2195.6605>
    [C:\WINNT\system32\DfrgRes.dll]  <Executive Software International, Inc.><5.00.2150.1>
    [C:\WINNT\System32\dfrgui.dll]  <Executive Software International, Inc.><5.00.2150.1>
[PID: 2728][C:\WINNT\system32\DfrgFat.exe]  <Executive Software International, Inc.><5.00.2195.6605>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINNT\system32\DfrgRes.dll]  <Executive Software International, Inc.><5.00.2150.1>
[PID: 2856][C:\WINNT\system32\DfrgFat.exe]  <Executive Software International, Inc.><5.00.2195.6605>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
[PID: 2816][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.880\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINNT\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 3>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
gototop
 

文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
gototop
 

我就是找不出来是什么病毒,当然不知道路径在哪
gototop
 

启动项的图

附件附件:

下载次数:162
文件类型:image/pjpeg
文件大小:
上传时间:2006-6-27 15:33:55
描述:



gototop
 

下一步图

附件附件:

下载次数:155
文件类型:image/pjpeg
文件大小:
上传时间:2006-6-27 15:36:01
描述:



gototop
 

用超级兔子 先卸一下 再扫个日志 安全模式下...
gototop
 
123   2  /  3  页   跳转
页面顶部
Powered by Discuz!NT