12   2  /  2  页   跳转

http://www.blank168.com/

[PID: 1996][C:\WINNT\system\winlogon.exe]  [N/A, N/A]
[PID: 2032][C:\WINNT\System32\WBEM\WinMgmt.exe]  [Microsoft Corporation, 1.50.1085.0100]
[PID: 2060][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 2072][C:\WINNT\System32\inetsrv\inetinfo.exe]  [Microsoft Corporation, 5.00.0984]
[PID: 2096][C:\WINNT\system32\Dfssvc.exe]  [Microsoft Corporation, 5.00.2195.6664]
[PID: 3012][C:\WINNT\System32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 2904][\??\C:\WINNT\system32\csrss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 2908][\??\C:\WINNT\system32\winlogon.exe]  [Microsoft Corporation, 5.00.2195.6970]
    [C:\WINNT\system32\NavLogon.dll]  [N/A, N/A]
[PID: 3092][C:\WINNT\system32\rdpclip.exe]  [Microsoft Corporation, 5.00.2174.1]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
[PID: 2796][C:\WINNT\Explorer.EXE]  [Microsoft Corporation, 5.00.3700.6690]
    [C:\WINNT\system32\hafdbef7.log]  [N/A, N/A]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
    [C:\WINNT\system32\pvpsxu23.dll]  [N/A, N/A]
    [D:\FFFF\FLASHGET\jccatch.dll]  [FlashGet, 1, 1, 5, 0]
[PID: 3128][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\Program Files\Common Files\Microsoft Shared\MSInfo\mseafdbe.dll]  [N/A, N/A]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
[PID: 3196][C:\WINNT\csrss.exe]  [Microsoft Corporation, 5.01.2600]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
[PID: 3220][C:\Program Files\Common Files\{3C069AF7-0BC6-2052-0908-041117200056}\Update.exe]  [N/A, N/A]
    [C:\Program Files\Common Files\{3C069AF7-0BC6-2052-0908-041117200056}\Services.dll]  [N/A, N/A]
[PID: 3228][C:\WINNT\system32\internat.exe]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
[PID: 3248][D:\Program Files\Teamspeak2\server_windows.exe]  [, 2.0.20.1]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
    [D:\Program Files\Teamspeak2\sqlite.dll]  [N/A, N/A]
[PID: 3296][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
    [C:\WINNT\system32\KakaTool.dll]  [Beijing Rising Technology Co., Ltd., 2, 0, 2, 1]
    [D:\FFFF\FLASHGET\jccatch.dll]  [FlashGet, 1, 1, 5, 0]
    [C:\WINNT\POPNTS.DLL]  [, 1, 0, 0, 1]
    [D:\FFFF\FLASHGET\getflash.dll]  [N/A, 1, 0, 0, 1]
    [C:\WINNT\system32\hafdbef7.log]  [N/A, N/A]
    [C:\WINNT\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
[PID: 3244][F:\HLServer\hlds.exe]  [Valve, 4, 1, 1, 1]
    [F:\HLServer\dbg.dll]  [N/A, N/A]
    [F:\HLServer\Steam.dll]  [Valve Corporation, 2.0.0.0]
    [F:\HLServer\swds.dll]  [N/A, N/A]
    [F:\HLServer\vgui.dll]  [N/A, N/A]
    [F:\HLServer\mss32.dll]  [N/A, N/A]
    [F:\HLServer\filesystem_stdio.dll]  [N/A, N/A]
    [F:\HLServer\cstrike\addons\metamod\dlls\metamod.dll]  [Will Day <willday@metamod.org>, 1.19]
    [F:\HLServer\cstrike\dlls\mp.dll]  [N/A, N/A]
    [f:\hlserver\cstrike\addons\booster\booster_mm.dll]  [Jussi Kivilinna, 2.35]
    [f:\hlserver\cstrike\addons\amxmodx\dlls\amxmodx_mm.dll]  [N/A, 1.71]
    [F:\HLServer\cstrike\addons\amxmodx\modules\csx_amxx.dll]  [N/A, N/A]
    [f:\hlserver\cstrike\addons\cdeath\cdmod.dll]  [N/A, N/A]
    [C:\Program Files\Serv-U\ServUPerfCount.dll]  [N/A, N/A]
    [F:\HLServer\steamclient.dll]  [N/A, N/A]
    [F:\HLServer\vstdlib_s.dll]  [N/A, N/A]
    [F:\HLServer\tier0_s.dll]  [N/A, N/A]
[PID: 3444][C:\WINNT\system32\conime.exe]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
[PID: 3428][D:\HLSW\hlsw.exe]  [Stripf Software, 1, 0, 0, 43]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_aim_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_icq4_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_icq5_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_icq_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_icqlite_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_miranda_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_msn7_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_msn_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_skype_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_trillian_plugin.dll]  [N/A, N/A]
    [D:\HLSW\Plugins\hlsw_trillianpro_plugin.dll]  [N/A, N/A]
[PID: 3656][D:\FFFF\sreng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\Program Files\eafdbef7\dd6d6e5a.dll]  [N/A, N/A]

==================================
文件关联
.TXT  Error. [notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. [hh.exe %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [notepad.exe %1]
.INF  Error. [notepad.exe %1]
.VBS  Error. [wscript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
gototop
 

<C:\WINNT\winlogon.exe><N/A>
gototop
 

补充八楼:


关闭所有浏览窗口以及一些不必要的程序
运行SREng2,使用“启动项目”--注册表--选中以下的项删除
srvc.dll
C:\WINNT\system32\hafdbef7.log
C:\Program Files\ipwins\ipwins.exe> [N/A]
C:\WINNT\system32\wdfmgr32.exe
C:\Program Files\Common Files\{3C069AF7-0BC6-2052-0908-041117200056}\Update.exe


重启后删除
C:\WINNT\system32\srvc.dll    这个文件也有可能在:C:\WINNT\srvc.dll   
C:\WINNT\system32\hafdbef7.log
C:\Program Files\ipwins\ipwins.exe> [N/A]
C:\WINNT\system32\wdfmgr32.exe
C:\Program Files\Common Files\{3C069AF7-0BC6-2052-0908-041117200056}\Update.exe
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT