瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 感谢高手“westbeck”，我成功杀灭了Trojan.PSW.QQPass.pxx 病毒【原创】

12   2  /  2  页   跳转页

感谢高手“westbeck”，我成功杀灭了Trojan.PSW.QQPass.pxx 病毒【原创】

收藏
执著于此
头像
初生襁褓狮
  • 帖子:9
  • 注册: 2006-06-23
  • 来自:
发表于： 2006-10-25 15:12 | 短消息 资料
字号： 小 中 大 11楼

正在运行的进程
[PID: 792][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 876][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 900][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Intel\Wireless\Bin\LgNotify.dll]  [Intel Corporation, 9, 0, 1, 0]
[PID: 944][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 956][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1096][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1144][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1180][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [c:\windows\system32\jetspeed.dll]  [, 1, 0, 0, 1]
[PID: 1216][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe]  [Intel Corporation, 9, 0, 1, 12]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
[PID: 1272][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe]  [Intel Corporation , 9, 0, 1, 41]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 1348][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1520][C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe]  [Intel Corporation, 9, 0, 1, 51]
    [C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 9, 0, 1, 45]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  [Intel Corporation, 9, 0, 1, 56]
    [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 9, 0, 1, 7]
    [C:\Program Files\Intel\Wireless\Bin\C1XStngs.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\C8021CHS.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\LSAWRAPI.dll]  [Intel Corporation, 9, 0, 1, 1]
    [C:\Program Files\Intel\Wireless\Bin\ZcSvcCHS.dll]  [Intel Corporation, 9, 0, 1, 51]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL]  [N/A, N/A]
[PID: 1600][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1644][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\WINDOWS\webwork\webwork.nls]  [MSWebwork Cop., 1, 0, 0, 1]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.7.2006011200]
    [C:\PROGRA~1\MMSASS~1\mmsass~1.dll]  [, 1, 2, 0, 6]
    [C:\PROGRA~1\MMSASS~1\albus.dll]  [Albus, 1, 0, 0, 2]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.4332]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4332]
[PID: 1656][c:\program files\rising\rfw\rfwproxy.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 7]
    [c:\program files\rising\rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 11]
    [c:\program files\rising\rfw\MonMid.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 2]
[PID: 1928][c:\program files\rising\rfw\rfwsrv.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 29]
    [c:\program files\rising\rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 11]
    [c:\program files\rising\rfw\rfwlog.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6]
    [c:\program files\rising\rfw\Rfwdrv.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 19]
    [c:\program files\rising\rfw\MonDrv.dll]  [rs, 1, 0, 0, 4]
    [c:\program files\rising\rfw\ProcLib.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9]
[PID: 324][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 504][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\PROGRA~1\MMSASS~1\MMSSVER.DLL]  [, 1, 2, 0, 6]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 536][C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe]  [Intel Corporation, 9, 0, 1, 3]
    [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  [N/A, N/A]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
[PID: 560][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe]  [Intel Corporation, 9, 0, 1, 10]
[PID: 640][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\stdupnet.dll]  [ , 4, 1, 0, 3]
    [C:\WINDOWS\system32\albus.dll]  [Albus, 1, 0, 0, 3]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\WINDOWS\system32\stdvote.dll]  [ , 1, 0, 0, 5]
[PID: 1748][C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe]  [Intel, 9, 0, 1, 35]
    [C:\PROGRA~1\Intel\Wireless\Bin\IntelAE5.dll]  [Meetinghouse Data Communications, 3, 0, 0, 44]
    [C:\PROGRA~1\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\PROGRA~1\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL]  [N/A, N/A]
[PID: 192][C:\WINDOWS\ATK0100\HControl.exe]  [, 1043, 2, 15, 48]
    [C:\WINDOWS\ATK0100\CMSSC.dll]  [N/A, N/A]
    [C:\WINDOWS\ATK0100\inter_f2.dll]  [ATK, 1043, 2, 15, 46]
    [C:\WINDOWS\ATK0100\ATKWLIOC.DLL]  [ACTIONTEC Electronics,Inc, 2.01.02]
    [C:\WINDOWS\ATK0100\SiSPkt.dll]  [Silicon Integrated Systems Corp., 1, 0, 0, 45]
    [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  [Intel Corporation, 9, 0, 1, 56]
    [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 9, 0, 1, 7]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\C1XStngs.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\C8021CHS.dll]  [Intel Corporation, 9, 0, 1, 31]
    [C:\Program Files\Intel\Wireless\Bin\LSAWRAPI.dll]  [Intel Corporation, 9, 0, 1, 1]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\SynCOM.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
gototop
 
执著于此
头像
初生襁褓狮
  • 帖子:9
  • 注册: 2006-06-23
  • 来自:
发表于： 2006-10-25 15:14 | 短消息 资料
字号： 小 中 大 12楼

[PID: 280][C:\WINDOWS\system32\hkcmd.exe]  [Intel Corporation, 3.0.0.4332]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4332]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4332]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.4332]
[PID: 292][C:\WINDOWS\system32\igfxpers.exe]  [Intel Corporation, 3.0.0.4332]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4332]
[PID: 496][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 1, 0, 0, 14]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 844][C:\WINDOWS\ALCMTR.EXE]  [Realtek Semiconductor Corp., 1.6]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 820][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.3208]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 1580][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 1608][C:\Program Files\Messenger\msmsgs.exe]  [Microsoft Corporation, 4.7.3000]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 1564][C:\WINDOWS\system32\wscntfy.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 2252][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 2976][C:\WINDOWS\ATK0100\ATKOSD.exe]  [, 1043, 2, 15, 48]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 3368][c:\program files\rising\rfw\RfwMain.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 45]
    [c:\program files\rising\rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23]
    [c:\program files\rising\rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [c:\program files\rising\rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 4052][C:\Program Files\Rising\Rav\RavMon.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 33]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 4032][C:\WINDOWS\system32\explorer.exe]  [Microsoft Corporation, 6.2900.2180]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 4040][C:\WINDOWS\system32\wsctf.exe]  [Microsoft Corporation, 5.2600.2180]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 2224][C:\WINDOWS\system32\taskmgr.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 3352][C:\Program Files\锐捷网络\Ruijie Supplicant\8021x.exe]  [锐捷网络, 2, 50, 0, 0]
    [C:\WINDOWS\system32\W32N50.dll]  [Printing Communications Assoc., Inc. (PCAUSA), 5.03.16.54]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 3632][C:\Program Files\Tencent\TT\TTraveler.exe]  [腾讯公司, 3.1.0.259]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  [腾讯公司, 1, 1, 0, 5]
    [C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll]  [, 1, 0, 0, 3]
    [C:\Program Files\Tencent\TT\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
[PID: 3748][C:\Program Files\Rising\Rav\Rav.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 75]
    [C:\Program Files\Rising\Rav\PlugIn\RsPgScan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RavUI.Dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 65]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RavUIMsg.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 27]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[PID: 2032][C:\Program Files\Rising\Rav\RsAgent.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
[PID: 2880][C:\WINDOWS\msagent\AgentSvr.exe]  [Microsoft Corporation, 2.00.0.3422]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
[PID: 3772][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.7.2006011200]
    [C:\Program Files\Tencent\QQ\QQIEHelper.dll]  [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
    [C:\PROGRA~1\MMSASS~1\mmsass~1.dll]  [, 1, 2, 0, 6]
    [C:\PROGRA~1\MMSASS~1\albus.dll]  [Albus, 1, 0, 0, 2]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_003.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[PID: 2376][C:\Program Files\Rising\Rav\RsLogVw.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RsCommx.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\rsguilib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
[PID: 1384][D:\D.工具\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\system32\stdstub.dll]  [MS Stdup, 1, 0, 0, 4]
    [C:\WINDOWS\system32\stdplay.dll]  [ , 1, 0, 0, 5]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
gototop
 
执著于此
头像
初生襁褓狮
  • 帖子:9
  • 注册: 2006-06-23
  • 来自:
发表于： 2006-10-25 15:23 | 短消息 资料
字号： 小 中 大 13楼

第一次发日志，也不知道发了这么多，高手们怎么看，如果发得不好多批评，以后改进

监控不开都不敢上网，但事情所逼，又不能不上，提心吊胆阿，我已经重装了一次瑞星，但监控还是红伞
gototop
 
执著于此
头像
初生襁褓狮
  • 帖子:9
  • 注册: 2006-06-23
  • 来自:
发表于： 2006-10-25 15:25 | 短消息 资料
字号： 小 中 大 14楼

我按搂主说的方法去查，但有些文件根本找不到，怎么用killbox删呢
gototop
 
<<上一主题|下一主题>>
12   2  /  2  页   跳转页
页面顶部
Powered by Discuz!NT