【求助】小弟一个病毒只要一打开IE它就复活了删了又来 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【求助】小弟一个病毒只要一打开IE它就复活了删了又来

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

3 / 5 页

跳转页

【求助】小弟一个病毒只要一打开IE它就复活了删了又来

NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:	发表于： 2006-09-02 18:12 \| 只看楼主短消息资料字号：小中大 21楼文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["G:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:

NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:	发表于： 2006-09-02 18:13 \| 只看楼主短消息资料字号：小中大 22楼正在运行的进程 [PID: 748][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 828][\??\G:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 868][\??\G:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\WINDOWS\system32\rpcfap.dll] <><3, 0, 5, 1> [PID: 920][G:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 932][G:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [PID: 1100][G:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1168][G:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [PID: 1308][G:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 1328][G:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [PID: 1404][G:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [PID: 1572][G:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [PID: 1588][G:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35> [G:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [G:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [G:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [G:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [G:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [G:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [G:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [G:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [G:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [G:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [G:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [G:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [G:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [G:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [G:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [G:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [G:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [G:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [G:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [G:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 13> [G:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [G:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [G:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [G:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 1672][g:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32> [g:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13> [g:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6> [g:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21> [g:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4> [g:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9> [PID: 1900][G:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [G:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [G:\WINDOWS\system32\fileap.dll] <><2, 1, 0, 1> [G:\WINDOWS\webwork\webwork.nls] <MSWebwork Cop.><1, 0, 0, 1> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [G:\WINDOWS\system32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62>
NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:

NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:	发表于： 2006-09-02 18:14 \| 只看楼主短消息资料字号：小中大 23楼 [G:\WINDOWS\system32\dpvvox32.dll] <Macromedia, Inc.><6.8.29.1> [G:\WINDOWS\system32\EJMX.dll] <广州盛行网络有限公司><1.03> [G:\PROGRA~1\MMSASS~1\mmsass~1.dll] <><1, 2, 0, 6> [G:\PROGRA~1\MMSASS~1\albus.dll] <Albus><1, 0, 0, 2> [G:\WINDOWS\SYSTEM32\stdup.dll] <MStdup Co Ltd.><3, 2, 2, 3> [G:\WINDOWS\ODBINT.dll] <N/A><N/A> [H:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A> [G:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll] <N/A><N/A> [G:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\WINDOWS\system32\nvcpl.dll] <NVIDIA Corporation><6.14.10.9131> [G:\WINDOWS\system32\NVRSZHC.DLL] <NVIDIA Corporation><6.14.10.9131> [G:\WINDOWS\system32\nvshell.dll] <N/A><N/A> [G:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [H:\PROGRA~1\Kingsoft\KnightV\Tools\KVD\kscdrush.dll] <金山软件股份有限公司><5, 0, 0, 0> [PID: 1988][G:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [PID: 236][G:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [G:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [G:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 588][G:\Program Files\DAEMON Tools\daemon.exe] <DT Soft Ltd.><4.03.0.0> [G:\Program Files\DAEMON Tools\daemon.dll] <DT Soft Ltd.><4.03.0.0> [G:\Program Files\DAEMON Tools\PFCTOC.DLL] <Padus(R), Inc.><1, 0, 0, 12> [G:\Program Files\DAEMON Tools\Plugins\Images\bw5mount.dll] <N/A><1.0.6.0> [G:\Program Files\DAEMON Tools\Plugins\Images\ccdmount.dll] <GENERIC><1.10.0.0> [G:\Program Files\DAEMON Tools\Plugins\Images\mdsmount.dll] <GENERIC><1.12.0.0> [G:\Program Files\DAEMON Tools\Plugins\Images\nrgmount.dll] <GENERIC><1.11.0.0> [G:\Program Files\DAEMON Tools\Plugins\Images\pdimount.dll] <GENERIC><1.01.0.0> [PID: 620][G:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [PID: 680][G:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [G:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [G:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [G:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 696][G:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [G:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25> [G:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [G:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [G:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [G:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [G:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38>
NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:

NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:	发表于： 2006-09-02 18:15 \| 只看楼主短消息资料字号：小中大 24楼 [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [PID: 704][G:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [PID: 1252][G:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5, 1, 0, 56> [PID: 548][G:\WINDOWS\system32\RUNDLL32.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\WINDOWS\system32\NvMcTray.dll] <NVIDIA Corporation><6.14.10.9131> [G:\WINDOWS\system32\NVRSZHC.DLL] <NVIDIA Corporation><6.14.10.9131> [PID: 772][G:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [g:\windows\system32\dx7vb32.dll] <N/A><N/A> [PID: 804][G:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [g:\windows\system32\eventquery.dll] <><6.8.29.1> [PID: 896][G:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\PROGRA~1\MMSASS~1\MMSSVER.DLL] <><1, 2, 0, 6> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [PID: 1116][G:\WINDOWS\system32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.9131> [PID: 1232][G:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [g:\windows\system32\winime.dll] <><6.8.29.1> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [PID: 1884][G:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\WINDOWS\System32\STDSVER.DLL] <MStdup Co Ltd.><3, 2, 2, 3> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [PID: 3152][G:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)> [PID: 4080][G:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\Program Files\NewDotNet\newdotnet6_38.dll] <New.net, Inc.><6, 0, 0, 38> [PID: 3140][G:\Program Files\Rising\Rav\Rav.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 75> [G:\Program Files\Rising\Rav\PlugIn\RsPgScan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17> [G:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [G:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [G:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [G:\Program Files\Rising\Rav\RavUI.Dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 64> [G:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25> [G:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [G:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [G:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [G:\Program Files\Rising\Rav\RavUIMsg.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [G:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [G:\WINDOWS\system32\fileap.dll] <><2, 1, 0, 1> [PID: 4052][G:\Program Files\Thunder Network\Thunder\Thunder.exe] <Thunder Networking Technologies,LTD><5.1.5.189> [G:\Program Files\Thunder Network\Thunder\UpdateDownload.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2> [G:\Program Files\Thunder Network\Thunder\download_interface.dll] <Thunder Networking Technologies,LTD><1, 0, 2, 74> [G:\Program Files\Thunder Network\Thunder\log4cplus.dll] <><1, 0, 2, 1> [G:\Program Files\Thunder Network\Thunder\stlport_vc646.dll] <STLport Consulting, Inc.><4.6.2003.1031> [G:\Program Files\Thunder Network\Thunder\msgmanage.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 15> [G:\Program Files\Thunder Network\Thunder\historyinfo_manage.dll] <Thunder Networking Technologies,LTD><5, 2, 0, 148> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\Thunder Network\Thunder\iEmbed.dll] <Thunder Networking Technologies,LTD><1, 1, 0, 22> [G:\Program Files\Thunder Network\Thunder\RegisterDll.dll] <Thunder Networking Technologies,LTD><1, 2, 0, 7> [G:\Program Files\Thunder Network\Thunder\FloatBar.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [G:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\Program Files\Thunder Network\Thunder\iTargetAd.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 59> [G:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0> [G:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [G:\WINDOWS\system32\fileap.dll] <><2, 1, 0, 1> [PID: 1388][G:\Program Files\Rising\Rav\RsLogVw.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [G:\Program Files\Rising\Rav\RsCommx.dll] <rising><18, 0, 0, 1> [G:\Program Files\Rising\Rav\rsguilib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25> [G:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [G:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [G:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [PID: 596][G:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2424][G:\WINDOWS\system32\notepad.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [PID: 3868][C:\TDdownload\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38> [G:\Program Files\NewDotNet\newdotnet7_22.dll] <New.net, Inc.><7, 0, 0, 22> [C:\TDdownload\sreng2\SREng2\Plugins\SREngPluginDemo.SRE] <Smallfrogs Studio><1, 1, 1, 0> [PID: 676][G:\WINDOWS\system32\mspaint.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [G:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL] <New.net, Inc.><6, 0, 0, 38>
NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:

NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:	发表于： 2006-09-02 18:16 \| 只看楼主短消息资料字号：小中大 25楼 AA 附件: 文件名:574872200692180801.JPG 下载次数:182 文件类型:image/pjpeg 文件大小: 上传时间:2006-9-2 18:16:01 描述:
NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:

westbeck 初生襁褓狮帖子:3572 注册: 2006-07-27 来自:	发表于： 2006-09-02 18:16 \| 短消息资料字号：小中大 26楼楼主你的日志贴得太乱了... 贴不同得日志分开贴,不要混在一起贴请开新贴,把SRENG得日志贴上
westbeck 初生襁褓狮帖子:3572 注册: 2006-07-27 来自:

NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:	发表于： 2006-09-02 18:16 \| 只看楼主短消息资料字号：小中大 27楼 DAS 附件: 文件名:574872200692180834.JPG 下载次数:158 文件类型:image/pjpeg 文件大小: 上传时间:2006-9-2 18:16:34 描述:
NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:

NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:	发表于： 2006-09-02 18:17 \| 只看楼主短消息资料字号：小中大 28楼 QWEQW 附件: 文件名:574872200692180901.JPG 下载次数:180 文件类型:image/pjpeg 文件大小: 上传时间:2006-9-2 18:17:01 描述:
NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:

轩辕小聪卡卡技术团队帖子:8368 注册: 2006-01-09 来自:	发表于： 2006-09-02 18:22 \| 短消息资料字号：小中大 29楼先下载超级兔子卸载流氓软件。特别是NewDotNet这个软件，它造成的LSP劫持（HijackThis日志O10项）是造成你一上网就中毒的原因。卸载完后再扫个日志发上来。
轩辕小聪卡卡技术团队帖子:8368 注册: 2006-01-09 来自:

NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:	发表于： 2006-09-02 18:26 \| 只看楼主短消息资料字号：小中大 30楼班主那里有的下
NAODO 拙长孩提狮帖子:115 注册: 2005-09-01 来自:

<<上一主题|下一主题>>

3 / 5 页

跳转页

页面顶部

Powered by Discuz!NT