|
拙长孩提狮
- 帖子:164
- 注册:
2007-01-26
- 来自:
|
发表于：
2007-11-30 12:09
|
短消息
资料
| 引用: | 【路人甲在行走的贴子】[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620>
[PID: 1600][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3208>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[PID: 1612][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[PID: 1620][C:\WINDOWS\command\rundll32.exe] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[PID: 1632][C:\Program Files\Intel\svhost32.exe] <N/A><N/A>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
[PID: 1656][C:\WINDOWS\Config\svhost32.exe] <N/A><N/A>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[PID: 1672][C:\WINDOWS\System32\conime.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[PID: 1716][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[PID: 1812][C:\Program Files\flvplayer\flvplayer.exe] <N/A><N/A>
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
[PID: 988][C:\WINDOWS\System32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.8198>
[PID: 1108][C:\WINDOWS\System32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 688][C:\Documents and Settings\Huang\Local Settings\Temp\sreng2.zip 的临时目录 9\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\System32\bwdll.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllf.dll] <N/A><N/A>
[C:\WINDOWS\System32\dllz.dll] <N/A><N/A>
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
已经执行以下命令:
打开SRE 启动项目 注册表 删除
<load><C:\PROGRA~1\Intel\svhost32.exe> []
<_rx><C:\WINDOWS\command\rundll32.exe> []
<zt><C:\Program Files\Intel\svhost32.exe> []
<Telnet><C:\WINDOWS\System32\Telnet.exe> [Microsoft Corporation]
<fzg><C:\WINDOWS\Config\svhost32.exe> []
<CheckFaultKernel><C:\WINDOWS\System32\mswdm.exe> []
但无法删除:
C:\PROGRA~1\Intel\svhost32.exe
C:\WINDOWS\command\rundll32.exe
C:\Program Files\Intel\svhost32.exe
C:\WINDOWS\System32\Telnet.exe
C:\WINDOWS\Config\svhost32.exe
C:\WINDOWS\System32\mswdm.exe
C:\WINDOWS\System32\dllf.dll
C:\WINDOWS\System32\dllz.dll
C:\WINDOWS\System32\bwdll.dll
……………… |
你不是说没清除完病毒吗?怎么不清除?
|
