【求助】请帮我分析一下日志 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【求助】请帮我分析一下日志

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

【求助】请帮我分析一下日志

柳叶儿飞初生襁褓狮帖子:44 注册: 2006-01-07 来自:	发表于： 2006-07-23 13:46 \| 只看楼主短消息资料字号：小中大 1楼【求助】请帮我分析一下日志 Logfile of HijackThis v1.99.1 Scan saved at 13:36:23, on 2006-7-23 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\VIPTray.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\Rundll32.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Winamp\Winampa.exe C:\Program Files\rising\Rfw\Rfw.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Herosoft\HeroV8\SysExplr.EXE C:\PROGRA~1\3721\assistse.exe C:\Program Files\rising\Rav\RavTask.exe C:\Program Files\MsnQun\MsnQun.exe C:\WINDOWS\lsass.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Tencent\QQ\QQ.exe C:\Program Files\Tencent\QQ\TIMPlatform.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\我的下载\二次修复\HijackThis.exe C:\Program Files\Tencent\QQ\QQexternal.exe R3 - URLSearchHook: (no name) - {BAB1AC41-6FF7-4F2E-A04E-5C592CCFEA7D} - (no file) R3 - URLSearchHook: (no name) - {EEB3EB48-D1B3-404E-95FE-EE5DAA33D8ED} - C:\WINDOWS\System32\Terri.dll R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr.dll O2 - BHO: BrowserHelper Class - {2D99E8F4-56B7-457B-9A92-61B5D247D263} - C:\WINDOWS\System32\WinDefendor.dll O2 - BHO: (no name) - {669751ED-D558-49AE-B01A-3B374CC7910E} - C:\WINDOWS\System32\ssup.dll O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll O2 - BHO: (no name) - {EEB3EB48-D1B3-404E-95FE-EE5DAA33D8ED} - C:\WINDOWS\System32\Terri.dll O2 - BHO: Letscool System Helper - {F0C15012-7DBD-4068-95A2-0A82DB03AC35} - C:\WINDOWS\System32\CoolBho.dll O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: 新浪点点通 - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - C:\WINDOWS\DOWNLO~1\DDTONG~1.DLL O3 - Toolbar: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll (file missing) O3 - Toolbar: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe" O4 - HKLM\..\Run: [rfw] C:\Program Files\rising\Rfw\Rfw.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [NMGameX_AutoRun] C:\WINDOWS\System32\Rundll32.exe nmgamex.dll,LiveProcess /aa O4 - HKLM\..\Run: [SysExplr] C:\Herosoft\HeroV8\SysExplr.EXE O4 - HKLM\..\Run: [assistse] "C:\PROGRA~1\3721\assistse.exe" O4 - HKLM\..\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32 O4 - HKLM\..\Run: [RavTask] "C:\Program Files\rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [MsnQun] C:\Program Files\MsnQun\MsnQun.exe O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe O4 - HKLM\..\Run: [Syetwlynus] C:\WINDOWS\lsass.exe O4 - HKLM\..\Run: [LetsCool] C:\Program Files\LetsCool\LetsCool.exe O4 - HKLM\..\RunOnce: [MSNQUNUPDATE] C:\Documents and Settings\77\qu.bat O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [Super Rabbit IEPro] C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: IE-BAR.lnk = ? O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm O9 - Extra button: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE O9 - Extra 'Tools' menuitem: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE O9 - Extra button: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing) O9 - Extra button: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao (file missing) O9 - Extra button: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing) O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing) O9 - Extra button: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing) O9 - Extra 'Tools' menuitem: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing) O9 - Extra button: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing) O9 - Extra 'Tools' menuitem: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing) O9 - Extra button: (no name) - {974AD624-EA50-4831-A6C0-3040F6665396} - C:\WINDOWS\DOWNLO~1\rssband.dll (HKCU) O9 - Extra 'Tools' menuitem: 新浪点点通阅读器 - {974AD624-EA50-4831-A6C0-3040F6665396} - C:\WINDOWS\DOWNLO~1\rssband.dll (HKCU) O9 - Extra button: 新浪点点通阅读器 - {F0646DC8-58CD-4C64-8F6B-525043914685} - C:\WINDOWS\DOWNLO~1\rssband.dll (HKCU) O11 - Options group: [!CNS] 网络实名 O11 - Options group: [TBH] 搜搜地址栏搜索 O16 - DPF: {15DDE989-CD45-4561-BF99-D22C0D5C2B74} - http://image2.sina.com.cn/home/ddtsource/ddt.cab O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/aliedit.cab O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/ravkill/rsonline.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{064303AA-CF4E-4DA4-BD17-A8EEF38625E4}: NameServer = 218.2.135.1 61.147.37.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{4A901DBA-D2C9-4AF7-B346-A85B9DB3D6CD}: NameServer = 202.102.4.141,202.102.15.162 O17 - HKLM\System\CS1\Services\Tcpip\..\{064303AA-CF4E-4DA4-BD17-A8EEF38625E4}: NameServer = 218.2.135.1 61.147.37.1 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\rising\Rav\CCenter.exe O23 - Service: Te1net - Unknown owner - C:\WINDOWS\System32\VIPTray.exe 2006-07-24 12:59:59
柳叶儿飞初生襁褓狮帖子:44 注册: 2006-01-07 来自:	分享到：

柳叶儿飞初生襁褓狮帖子:44 注册: 2006-01-07 来自:	发表于： 2006-07-23 13:49 \| 只看楼主短消息资料字号：小中大 2楼跳出广告网页,瑞星杀软不能打开. 进程中有一项system idle process,这是不是正常进程? 恳请帮助.谢谢.
柳叶儿飞初生襁褓狮帖子:44 注册: 2006-01-07 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-07-23 13:59 \| 短消息资料字号：小中大 3楼开始→运行→输入services.msc，打开“服务”→查找 Te1net→双击→启动类型→禁止→停止→应用→确定。禁止Te1net这个服务进入控制面版的添加删除程序中卸载IE-BAR 重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows 关闭所有浏览窗口以及一些不必要的程序运行Hijackthis，扫描结束后在下列选项前打上勾，然后选"修复" R3 - URLSearchHook: (no name) - {BAB1AC41-6FF7-4F2E-A04E-5C592CCFEA7D} - (no file) R3 - URLSearchHook: (no name) - {EEB3EB48-D1B3-404E-95FE-EE5DAA33D8ED} - C:\WINDOWS\System32\Terri.dll O2 - BHO: BrowserHelper Class - {2D99E8F4-56B7-457B-9A92-61B5D247D263} - C:\WINDOWS\System32\WinDefendor.dll O2 - BHO: (no name) - {EEB3EB48-D1B3-404E-95FE-EE5DAA33D8ED} - C:\WINDOWS\System32\Terri.dll O2 - BHO: Letscool System Helper - {F0C15012-7DBD-4068-95A2-0A82DB03AC35} - C:\WINDOWS\System32\CoolBho.dll O4 - HKLM\..\Run: [Syetwlynus] C:\WINDOWS\lsass.exe 删除 C:\WINDOWS\lsass.exe C:\WINDOWS\System32\Terri.dll C:\WINDOWS\System32\CoolBho.dll C:\WINDOWS\System32\WinDefendor.dll C:\WINDOWS\System32\VIPTray.exe C:\Program Files\IE-BAR 修复后重启，请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来下载网址 http://www.kztechs.com/sreng/sreng2.zip http://forum.ikaka.com/topic.asp?board=67&artid=5188931 日志一次粘不完，分次粘完，请不要修改。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

柳叶儿飞初生襁褓狮帖子:44 注册: 2006-01-07 来自:	发表于： 2006-07-24 13:07 \| 只看楼主短消息资料字号：小中大 4楼 2006-07-24,12:55:00 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation] <Super Rabbit IEPro><C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [Super Rabbit Soft] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] <run><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.] <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup> [NVIDIA Corporation] <nwiz><nwiz.exe /install> [NVIDIA Corporation] <WinampAgent><"C:\Program Files\Winamp\Winampa.exe"> [] <rfw><C:\Program Files\rising\Rfw\Rfw.exe> [Beijing Rising Technology Corporation Limited] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <NMGameX_AutoRun><C:\WINDOWS\System32\Rundll32.exe nmgamex.dll,LiveProcess /aa> [NMGameX] <SysExplr><C:\Herosoft\HeroV8\SysExplr.EXE> [] <assistse><"C:\PROGRA~1\3721\assistse.exe"> [yahoo] <CnsMin><Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32> [北京三七二一科技有限公司] <RavTask><"C:\Program Files\rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <MsnQun><C:\Program Files\MsnQun\MsnQun.exe> [Yoozone] <stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent] <LetsCool><C:\Program Files\LetsCool\LetsCool.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <CheckFaultKernel><C:\WINDOWS\System32\mswdm.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><C:\WINDOWS\DOWNLO~1\CnsHook.dll> [北京三七二一科技有限公司] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] <{EEB3EB48-D1B3-404E-95FE-EE5DAA33D8ED}><> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <WangWang><; ; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"> [] ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N> [IE-BAR] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IE-BAR.lnk><N> ================================== 服务 [NVIDIA Driver Helper Service / NVSvc] <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation> [Plug and Play / PlugPlay] <2 - 系统找不到指定的文件。 ><N/A> [Rising Process Communication Center / RsCCenter] <"C:\Program Files\rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Te1net / Te1net] <C:\WINDOWS\System32\VIPTray.exe><N/A> ================================== 浏览器加载项 [] {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\System32\ssup.dll, TENCENT> [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, N/A> [Yahoo 1G电邮] {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A> [寻宝乐趣多] {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao, N/A> [雅虎助手] {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <, N/A> [情景聊天] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A> [] {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A> [] {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A> [] {974AD624-EA50-4831-A6C0-3040F6665396} <C:\WINDOWS\DOWNLO~1\rssband.dll, 北京新浪信息技术有限公司> [新浪点点通阅读器] {F0646DC8-58CD-4C64-8F6B-525043914685} <C:\WINDOWS\DOWNLO~1\rssband.dll, 北京新浪信息技术有限公司> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [新浪点点通] {F60C7D81-8471-4D40-AAFE-56D318F34C2D} <C:\WINDOWS\DOWNLO~1\DDTONG~1.DLL, 北京新浪信息技术有限公司> [上网助手] {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\Program Files\3721\Assist\asbar.dll, N/A> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology> [CEditCtrl Object] {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\System32\aliedit\AliEdit.dll, www.alipay.com> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [Ravonline] {DA984A6D-508E-11D6-AA49-0050FF3C628D} <C:\WINDOWS\Downloaded Program Files\RsOnline.dll, Beijing Rising Tech. Co., Ltd.> [上传到QQ网络硬盘] <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A> ================================== 正在运行的进程 [PID: 436][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 492][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 516][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 568][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [PID: 580][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 740][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 788][C:\Program Files\rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 804][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 900][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 956][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1112][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620> [PID: 1368][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 1416][C:\WINDOWS\System32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.4523> [PID: 1768][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 7> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [C:\WINDOWS\downlo~1\Gdce.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [C:\PROGRA~1\KekSoft\MAGICC~1\mcshlex.dll] <N/A><N/A> [PID: 1988][C:\WINDOWS\System32\Rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
柳叶儿飞初生襁褓狮帖子:44 注册: 2006-01-07 来自:

柳叶儿飞初生襁褓狮帖子:44 注册: 2006-01-07 来自:	发表于： 2006-07-24 13:07 \| 只看楼主短消息资料字号：小中大 5楼 [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\WINDOWS\DOWNLO~1\CnsMinEx.dll] <国风因特软件(北京)有限公司><1, 0, 3, 1> [PID: 268][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.0.21> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [PID: 340][C:\Program Files\Winamp\Winampa.exe] <N/A><N/A> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [PID: 348][C:\Program Files\rising\Rfw\Rfw.exe] <Beijing Rising Technology Corporation Limited><2, 1, 0, 0> [C:\Program Files\rising\Rfw\BmpFace.dll] <Beijing Rising Technology Corporation Limited><2, 1, 0, 0> [C:\Program Files\rising\Rfw\rfw.dll] <Beijing Rising Technology Corporation Limited><2, 1, 0, 4> [C:\Program Files\rising\Rfw\chn\rfw.lag] <Beijing Rising Technology Corporation Limited><2, 0, 0, 15> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [PID: 356][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3018> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [PID: 376][C:\Herosoft\HeroV8\SysExplr.EXE] <N/A><N/A> [C:\Herosoft\HeroV8\HttpReq.dll] <N/A><N/A> [C:\Herosoft\HeroV8\CoolMenu.dll] <N/A><N/A> [C:\Herosoft\HeroV8\httphlp.dll] <N/A><N/A> [C:\Herosoft\HeroV8\AVCDROM.dll] <N/A><N/A> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\Herosoft\HeroV8\Sys936.DLL] <N/A><N/A> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [PID: 384][C:\PROGRA~1\3721\assistse.exe] <yahoo><1, 0, 1, 1001> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\PROGRA~1\3721\shell\AsMenu.dll] <3721><1, 0, 1, 1006> [C:\PROGRA~1\3721\Assist\assist.dll] <><2, 0, 3, 3> [C:\PROGRA~1\3721\shell\IEAngel.dll] <yahoo><1, 0, 0, 3> [C:\PROGRA~1\3721\shell\MenuInfo.dll] <yahoo><1, 0, 0, 2> [C:\PROGRA~1\3721\shell\Assecblk.dll] <3721><1, 0, 0, 9> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [PID: 400][C:\Program Files\rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [PID: 408][C:\Program Files\MsnQun\MsnQun.exe] <Yoozone><1, 0, 0, 1> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [PID: 424][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [PID: 1032][C:\Program Files\MSN Messenger\msnmsgr.exe] <Microsoft Corporation><7.5.0324> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\System32\msdmo.dll] <N/A><N/A> [PID: 1508][C:\Program Files\rising\rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\Program Files\rising\rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 1648][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [PID: 2676][C:\Program Files\Microsoft Office\Office\WINWORD.EXE] <Microsoft Corporation><9.0.2823> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\WINDOWS\DOWNLO~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 7> [C:\Program Files\rising\Rav\RsPlugIn.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 1> [C:\Program Files\rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [C:\Program Files\rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 2940][C:\Program Files\rising\Rav\RAV.EXE] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 61> [C:\Program Files\rising\Rav\PlugIn\RsPgScan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17> [C:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\rising\Rav\RavUI.Dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 57> [C:\Program Files\rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [C:\Program Files\rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> [C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28> [C:\Program Files\rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\rising\Rav\RavUIMsg.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [C:\Program Files\rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\Program Files\rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\rising\Rav\MVEngine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [C:\Program Files\rising\Rav\Engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [C:\Program Files\rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\Program Files\rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\Program Files\rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\Program Files\rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\Program Files\rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\rising\Rav\ExtMail.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [C:\Program Files\rising\Rav\ExtFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\Program Files\rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 4036][C:\我的下载\二次修复\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\WINDOWS\downlo~1\Prlx.dll] <Tencent><4, 1, 8, 81> [C:\Program Files\MsnQun\MSNHOOK.dll] <Yoozone><1, 0, 0, 2> [C:\WINDOWS\DOWNLO~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 3, 1> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
柳叶儿飞初生襁褓狮帖子:44 注册: 2006-01-07 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT