关于“svchost.exe” - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛关于“svchost.exe”

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

4 / 5 页

跳转页

关于“svchost.exe”

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:33 \| 只看楼主短消息资料字号：小中大 31楼 [C:\WINDOWS\system32\athcfg11.dll] [Atheros, 4.1.2.25] [C:\WINDOWS\system32\athcfg11Res.dll] [Atheros Communications, Inc., 4.1.2.25] [C:\WINDOWS\system32\athcfg11resloc.dll] [TP-LINK TECHNOLOGIES CO., LTD., 4.1.2.25] [C:\WINDOWS\system32\AegisE5.dll] [Meetinghouse Data Communications, 3, 0, 16, 0] [PID: 1768][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:33 \| 只看楼主短消息资料字号：小中大 32楼 [PID: 1872][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.13.10.2940] [PID: 1952][C:\WINDOWS\system32\slserv.exe] [ , 2.80.00(24Apr2000)] [PID: 1980][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)] [PID: 296][c:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 66] [c:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 31] [c:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [c:\program files\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:34 \| 只看楼主短消息资料字号：小中大 33楼 [c:\program files\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [c:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\DOCUME~1\George\LOCALS~1\Temp\LgSyzr.dll] [N/A, N/A] [C:\WINDOWS\system32\agtz.dll] [N/A, N/A] [PID: 1564][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 504][C:\WINDOWS\soundman.exe] [Avance Logic, Inc., 5, 0, 0, 0] [PID: 584][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:34 \| 只看楼主短消息资料字号：小中大 34楼 [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [PID: 284][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:34 \| 只看楼主短消息资料字号：小中大 35楼 [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\DOCUME~1\George\LOCALS~1\Temp\LgSyzr.dll] [N/A, N/A] [C:\WINDOWS\system32\agtz.dll] [N/A, N/A]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:35 \| 只看楼主短消息资料字号：小中大 36楼 [PID: 720][C:\Program Files\TP-LINK\TWCU\TWCU.exe] [TP-LINK TECHNOLOGIES CO., LTD, 4.1.2.25] [C:\WINDOWS\system32\wcapi.dll] [Atheros, 4.1.2.25] [C:\WINDOWS\system32\athcfg11.dll] [Atheros, 4.1.2.25] [C:\WINDOWS\system32\athcfg11Res.dll] [Atheros Communications, Inc., 4.1.2.25] [C:\WINDOWS\system32\wgapi.dll] [TP-LINK TECHNOLOGIES CO., LTD, 4.1.2.25] [C:\WINDOWS\system32\wgapiloc.dll] [TP-LINK, 4.1.2.25] [C:\Program Files\TP-LINK\TWCU\TWCUloc.dll] [TP-LINK TECHNOLOGIES CO., LTD., 4.1.2.25] [C:\Program Files\TP-LINK\TWCU\oemresloc.dll] [TP-LINK TECHNOLOGIES CO., LTD., 4.1.2.25]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:35 \| 只看楼主短消息资料字号：小中大 37楼 [PID: 1992][C:\WINDOWS\alga.exe] [N/A, N/A] [C:\WINDOWS\system32\agtz.dll] [N/A, N/A] [PID: 2136][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2236][C:\WINDOWS\system32\iexp1ore.exe] [N/A, N/A] [C:\DOCUME~1\George\LOCALS~1\Temp\LgSyzr.dll] [N/A, N/A] [PID: 2844][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\DOCUME~1\George\LOCALS~1\Temp\LgSyzr.dll] [N/A, N/A] [C:\WINDOWS\system32\agtz.dll] [N/A, N/A] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:36 \| 只看楼主短消息资料字号：小中大 38楼 [PID: 1992][C:\WINDOWS\alga.exe] [N/A, N/A] [C:\WINDOWS\system32\agtz.dll] [N/A, N/A] [PID: 2136][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2236][C:\WINDOWS\system32\iexp1ore.exe] [N/A, N/A] [C:\DOCUME~1\George\LOCALS~1\Temp\LgSyzr.dll] [N/A, N/A] [PID: 2844][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\DOCUME~1\George\LOCALS~1\Temp\LgSyzr.dll] [N/A, N/A] [C:\WINDOWS\system32\agtz.dll] [N/A, N/A] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:39 \| 只看楼主短消息资料字号：小中大 39楼 [PID: 2504][C:\WINDOWS\system32\taskmgr.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\DOCUME~1\George\LOCALS~1\Temp\LgSyzr.dll] [N/A, N/A] [C:\WINDOWS\system32\agtz.dll] [N/A, N/A] [PID: 572][C:\Documents and Settings\George\桌面\sreng2_PConline\SREng.EXE] [Smallfrogs Studio, 2.3.13.690] [C:\DOCUME~1\George\LOCALS~1\Temp\LgSyzr.dll] [N/A, N/A] [C:\WINDOWS\system32\agtz.dll] [N/A, N/A] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:	发表于： 2007-01-15 20:41 \| 只看楼主短消息资料字号：小中大 40楼 .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK N/A ================================== [/CODE]
南瓜超人初生襁褓狮帖子:52 注册: 2006-08-26 来自:

<<上一主题|下一主题>>

4 / 5 页

跳转页

页面顶部

Powered by Discuz!NT