“秋日里的蓝天”“我无邪”请帮忙看一下(附SRE扫描) >

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛 “秋日里的蓝天”“我无邪”请帮忙看一下(附SRE扫描) >

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

2 / 2 页

跳转页

“秋日里的蓝天”“我无邪”请帮忙看一下(附SRE扫描) >

eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:	发表于： 2006-10-03 21:19 \| 只看楼主短消息资料字号：小中大 11楼 ================================== 浏览器加载项 [VnetCookie Class] {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, > [Vision] {6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, > [stdup] {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} <C:\WINDOWS\SYSTEM32\stdup.dll, MStdup Co Ltd.> [bingo] {B626AE7E-4F5D-4CD4-B457-D8693015DEFC} <C:\WINDOWS\system32\amvda.dll, > [MMSAssistMenu] {6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, > [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.> [ActiveMovieControl Object] {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [Adobe PDF Reader Link Helper] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [Web Browser Applet Control] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation> [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [BitComet工具栏] {3F1ABCDB-A875-46C1-8345-B72A4567E486} <d:\BitComet\BitCometBar\BitCometBar0.6.dll, N/A> [VnetCookie Class] {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, > [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Vision] {6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\mmsass~1.dll, > [IMCv1 Control] {6924091F-CD97-41E1-B1D4-D9079409D413} <C:\PROGRA~1\LtUcx\1003\c0.dll, 北京莲塘软件技术有限公司 Liantang Software Tech. Inc. (http://www.lotuspond.com.cn)> [stdup] {6A512BF7-EC78-4E8D-9841-6C02E8FA9838} <C:\WINDOWS\SYSTEM32\stdup.dll, MStdup Co Ltd.> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AxInputControl Class] {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, > [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Qzone Media Tools] {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <d:\Tencent\QQ\QZone\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\KuGoo3\KuGoo3DownXControl.ocx, N/A> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [卡卡上网安全助手] {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [bingo] {B626AE7E-4F5D-4CD4-B457-D8693015DEFC} <C:\WINDOWS\system32\amvda.dll, > [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\Flash85.ocx, Macromedia, Inc.> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.> [>>彩信发送<<] <res://C:\PROGRA~1\MMSASS~1\mmsass~1.dll/mms.htm, N/A> [上传到QQ网络硬盘] <D:\Tencent\QQ\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <D:\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Tencent\QQ\SendMMS.htm, N/A>
eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:

eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:	发表于： 2006-10-03 21:20 \| 只看楼主短消息资料字号：小中大 12楼 ================================== 正在运行的进程 [PID: 300][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 348][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 372][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [PID: 416][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 428][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 572][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 620][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 700][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 716][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 788][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 840][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 912][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 35] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 18, 1, 0, 11] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\Program Files\Rising\Rav\HookWeb.dll] [rising, 18, 0, 0, 2] [C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\Program Files\Rising\Rav\MailMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 34] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 27] [C:\Program Files\Rising\Rav\RSUnpack.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 17] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19] [C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [PID: 968][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [C:\WINDOWS\system32\soundmix.dll] [, 1, 4, 0, 0] [C:\PROGRA~1\MMSASS~1\albus.dll] [Albus, 1, 0, 0, 2] [C:\WINDOWS\system32\amvda.dll] [, 1, 0, 0, 1] [D:\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:

eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:	发表于： 2006-10-03 21:21 \| 只看楼主短消息资料字号：小中大 13楼 [PID: 1012][c:\program files\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 33] [c:\program files\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13] [c:\program files\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6] [c:\program files\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21] [c:\program files\rising\rfw\MonDrv.dll] [rs, 1, 0, 0, 4] [c:\program files\rising\rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9] [PID: 1132][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\hpzsnt09.dll] [HP, 2.236.4.0] [PID: 1240][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 1404][c:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 52] [c:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23] [c:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [c:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [PID: 1480][C:\WINDOWS\system32\WinMgmt.exe] [N/A, N/A] [PID: 1536][C:\WINDOWS\system32\iexplorer.exe] [N/A, N/A] [PID: 1544][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1596][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [PID: 1828][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [PID: 1852][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 33] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [PID: 1880][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 56] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [PID: 1956][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3512] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [PID: 2004][C:\Program Files\MSN Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.0.0812.00] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [PID: 1308][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2068][C:\Program Files\ChinaNet\VnetClient.exe] [, 2006, 6, 30, 11] [C:\Program Files\ChinaNet\Communicate.dll] [GDCN, 2006, 2, 15, 1] [C:\Program Files\ChinaNet\DialModule.dll] [GDCN, 2006, 6, 26, 10] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1] [C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX] [, 2006, 6, 2, 14] [C:\PROGRA~1\ChinaNet\sign.dll] [0, 2004, 12, 1, 1] [C:\PROGRA~1\ChinaNet\ADVERT~1.OCX] [, 2005, 10, 13, 1] [C:\PROGRA~1\ChinaNet\Gif89a.dll] [, 2005, 6, 21, 1] [C:\PROGRA~1\ChinaNet\VnetBs.ocx] [, 2004, 11, 18, 1] [C:\PROGRA~1\ChinaNet\VnetSkin.ocx] [GDDC, 2005, 12, 21, 1] [C:\PROGRA~1\ChinaNet\DialogStyle.dll] [, 1, 0, 0, 1] [C:\PROGRA~1\ChinaNet\BDSearch.ocx] [gdcn, 2005, 12, 22, 1] [C:\PROGRA~1\ChinaNet\PageFram.ocx] [Workgroup, 2006, 6, 23, 17] [C:\PROGRA~1\ChinaNet\AccPage.ocx] [, 1, 0, 0, 1] [C:\PROGRA~1\ChinaNet\AccountMgr.dll] [, 2006, 6, 20, 16] [C:\PROGRA~1\ChinaNet\Timer.ocx] [, 2006, 7, 21, 9] [C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX] [, 2006, 4, 4, 1] [C:\PROGRA~1\ChinaNet\NEWMES~1.DLL] [, 2006, 7, 4, 16] [C:\PROGRA~1\ChinaNet\PassCtrl.dll] [GDCN, 2006, 3, 1, 16] [C:\WINDOWS\system32\wpcap.dll] [Politecnico di Torino, 3, 0, 0, 18] [C:\WINDOWS\system32\pthreadVC.dll] [N/A, N/A] [C:\WINDOWS\system32\packet.dll] [Politecnico di Torino, 3, 0, 0, 18] [C:\PROGRA~1\ChinaNet\PlugPush.dll] [, 2004, 12, 21, 1] [C:\PROGRA~1\ChinaNet\ALLINT~1.DLL] [, 2006, 7, 19, 14] [C:\PROGRA~1\ChinaNet\VNETLO~1.OCX] [, 2005, 10, 9, 1] [C:\PROGRA~1\ChinaNet\StatNum.dll] [, 2006, 3, 1, 1] [C:\PROGRA~1\ChinaNet\VNETON~1.OCX] [, 2005, 3, 2, 1] [C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL] [GDCN, 2006, 7, 20, 9] [C:\PROGRA~1\ChinaNet\VnetOptLog.dll] [ , 2006, 5, 10, 14] [C:\PROGRA~1\ChinaNet\Favorite.ocx] [, 1, 0, 0, 1] [C:\PROGRA~1\ChinaNet\DlgSkin.ocx] [, 2005, 11, 14, 1] [PID: 2320][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\PROGRA~1\MMSASS~1\MMSSVER.DLL] [, 1, 2, 0, 6] [PID: 2340][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\SYSTEM32\STDSVER.DLL] [MStdup Co Ltd., 3, 2, 2, 3] [PID: 2776][C:\Documents and Settings\Administrator\桌面\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [PID: 2872][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SYSPOL~1.DLL] [, 1, 0, 0, 1] [C:\WINDOWS\system32\KakaTool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 0, 9] [D:\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.7.2006011200] [c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1] [c:\PROGRA~1\chinanet\Communicate.dll] [GDCN, 2006, 2, 15, 1] [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1] [d:\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\PROGRA~1\MMSASS~1\mmsass~1.dll] [, 1, 2, 0, 6] [C:\PROGRA~1\MMSASS~1\albus.dll] [Albus, 1, 0, 0, 2] [C:\WINDOWS\SYSTEM32\stdup.dll] [MStdup Co Ltd., 3, 2, 2, 3] [C:\WINDOWS\system32\amvda.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\macromed\flash\Flash85.ocx] [Macromedia, Inc., 8,5,0,133]
eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:

eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:	发表于： 2006-10-03 21:21 \| 只看楼主短消息资料字号：小中大 14楼 ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ==================================
eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:

eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:	发表于： 2006-10-03 21:22 \| 只看楼主短消息资料字号：小中大 15楼已经按你分附删除一些东西,麻烦再帮我看一下吧.`
eva82822 初生襁褓狮帖子:14 注册: 2006-10-03 来自:

卡卡技术团队

帖子:7349
注册: 2004-09-30
来自:

发表于： 2006-10-03 21:43 | 短消息资料

字号：小中大 16楼

运行SREng2,使用“启动项目”－－注册表－－选择要修改的项
rundll32.exe C:\WINDOWS\system32\soundmix.dll,Load
rundll32.exe C:\WINDOWS\system32\SYSPOL~1.DLL,Start
，点“编辑”在“值”里删除
C:\WINDOWS\system32\soundmix.dll,Load
C:\WINDOWS\system32\SYSPOL~1.DLL,Start

运行SREng2,使用：系统修复－－浏览器加载项－－查找以下的项－－删除所选内容
C:\WINDOWS\system32\usercrd.dll
C:\WINDOWS\SYSTEM32\stdup.dll
C:\WINDOWS\system32\amvda.dll
C:\WINDOWS\system32\CMBEdit.dll
C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL
C:\WINDOWS\fonts\msshapi.dll
C:\PROGRA~1\DESKAD~1\deskipn.dll
C:\WINDOWS\system32\aliedit\AliEdit.dll
c:\PROGRA~1\chinanet\VNETTR~1.DLL
C:\Program Files\LtUcx\1002\c0.dll
C:\WINDOWS\system32\perfiup.dll
<C:\WINDOWS\system32\bsecoder.dll
<C:\WINDOWS\system32\henroer.dll

显示隐藏文件
删除
C:\PROGRA~1\MMSASS~1\整个目录
C:\WINDOWS\system32\MsServices\update\svchost.dll
C:\WINDOWS\System32\STDSVER.DLL
C:\WINDOWS\system32\soundmix.dll
C:\WINDOWS\system32\SYSPOL~1.DLL
C:\WINDOWS\system32\usercrd.dll
C:\WINDOWS\SYSTEM32\stdup.dll
C:\WINDOWS\system32\amvda.dll
C:\WINDOWS\system32\CMBEdit.dll
C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL
C:\WINDOWS\fonts\msshapi.dll
C:\PROGRA~1\DESKAD~1\deskipn.dll
C:\WINDOWS\system32\aliedit\AliEdit.dll
c:\PROGRA~1\chinanet\VNETTR~1.DLL
C:\Program Files\LtUcx\1002\c0.dll
C:\WINDOWS\system32\perfiup.dll
<C:\WINDOWS\system32\bsecoder.dll
<C:\WINDOWS\system32\henroer.dll

修复后,还有异常,请重新扫描上来
修复不了,重启按F8进入安全模式下修复
………………

这些再修复一下
用这贴子里面的方法
http://forum.ikaka.com/topic.asp?board=28&artid=8160799

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-10-04 00:34 \| 短消息资料字号：小中大 17楼修复后重启，再扫个个日志粘上来。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林