麻烦大家帮忙看看小弟机子上的进程是否中毒了呢？谢谢 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛麻烦大家帮忙看看小弟机子上的进程是否中毒了呢？谢谢

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

3 / 4 页

跳转页

麻烦大家帮忙看看小弟机子上的进程是否中毒了呢？谢谢

hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:	发表于： 2007-04-17 08:28 \| 只看楼主短消息资料字号：小中大 21楼 [C:\WINDOWS\system32\MFC42LOC.DLL] [Microsoft Corporation, 6.00.8665.0] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\WINDOWS\system32\MSCTF.dll] [Microsoft Corporation, 5.1.2600.2575 (xpsp.041130-1728)] [C:\WINDOWS\system32\RICHED32.DLL] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\RICHED20.dll] [Microsoft Corporation, 5.30.23.1228] [C:\WINDOWS\system32\CLBCATQ.DLL] [Microsoft Corporation, 2001.12.4414.308] [C:\WINDOWS\system32\COMRes.dll] [Microsoft Corporation, 2001.12.4414.258] [C:\WINDOWS\system32\msctfime.ime] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winform.dll] [N/A, ] [C:\WINDOWS\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)] [C:\WINDOWS\system32\CRYPT32.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\MSASN1.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 20] [C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 13, 2, 61] [C:\WINDOWS\system32\WS2_32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WS2HELP.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder Network\Thunder\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [C:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 13, 2, 61] [C:\WINDOWS\system32\iphlpapi.dll] [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)] [C:\WINDOWS\system32\MSWSOCK.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\hnetcfg.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\wshtcpip.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mlang.dll] [Microsoft Corporation, 6.00.2900.2530 (xpsp.040919-1030)] [C:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 8] [C:\WINDOWS\system32\DNSAPI.dll] [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [C:\WINDOWS\System32\winrnr.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WLDAP32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0] [C:\WINDOWS\system32\Rnr20.dll] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\rasadhlp.dll] [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [C:\WINDOWS\system32\Secur32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 17] [C:\WINDOWS\system32\OLEPRO32.DLL] [Microsoft Corporation, 5.1.2600.2180] [C:\WINDOWS\system32\asycfilt.dll] [Microsoft Corporation, 5.1.2600.2180] [C:\WINDOWS\system32\urlmon.dll] [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)] [C:\WINDOWS\system32\wsock32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINDOWS\system32\WINTRUST.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\MSACM32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\midimap.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SXS.DLL] [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)] [C:\WINDOWS\system32\RASAPI32.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rasman.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\NETAPI32.dll] [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)] [C:\WINDOWS\system32\TAPI32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rtutils.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msv1_0.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\sensapi.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\USERENV.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msimg32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder Network\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll] [Thunder Networking Technologies,LTD, 1, 1, 1, 13] [C:\WINDOWS\system32\SHFOLDER.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder Network\Thunder\Components\PortVerify\PortVerify.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1] [C:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1] [C:\Program Files\Thunder Network\Thunder\Components\DTAG\DTAG.dll] [Thunder Networking Technologies,LTD, 1, 2, 0, 7] [C:\Program Files\Thunder Network\Thunder\Components\DTAG\ExtractMediaTag.dll] [Thunder Networking Technologies,LTD, 1, 2, 0, 7] [C:\WINDOWS\system32\WMVCore.DLL] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\WMASF.DLL] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\schannel.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll] [Thunder Networking Technologies,LTD, 1, 1, 1, 20] [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll] [　, 1, 0, 0, 15] [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed08.dll] [　, 3, 2, 0, 63] [C:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 20] [C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 13, 2, 61] [C:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 9]
hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:

hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:	发表于： 2007-04-17 08:29 \| 只看楼主短消息资料字号：小中大 22楼 [C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 18] [C:\Program Files\Thunder Network\Thunder\Program\XLNet.Dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 6] [C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll] [, 1, 2, 0, 5] [C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VideoPicture.dll] [XunLei, 1, 2, 0, 5] [C:\Program Files\Thunder Network\Thunder\Components\Tips\TipsClient.dll] [Thunder Networking Technologies,LTD, 2, 1, 1, 50] [C:\Program Files\Thunder Network\Thunder\Components\UserExperience\UserExperience.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1] [C:\WINDOWS\system32\shdocvw.dll] [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)] [C:\WINDOWS\system32\CRYPTUI.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\shdoclc.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xpsp2res.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mshtml.dll] [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)] [C:\WINDOWS\system32\msls31.dll] [Microsoft Corporation, 3.10.349.0] [C:\WINDOWS\system32\PSAPI.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SETUPAPI.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\vbscript.dll] [Microsoft Corporation, 5.6.0.8820] [C:\WINDOWS\system32\jscript.dll] [Microsoft Corporation, 5.6.0.8831] [C:\Program Files\Thunder Network\Thunder\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0] [C:\WINDOWS\system32\appHelp.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\IEBHO.dll] [, 1, 0, 0, 1] [C:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll] [Giganology Inc., 1, 0, 0, 2] [C:\WINDOWS\system32\browseui.dll] [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)] [C:\WINDOWS\system32\LINKINFO.dll] [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)] [C:\WINDOWS\system32\ntshrui.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\ATL.DLL] [Microsoft Corporation, 3.05.2284] [C:\WINDOWS\system32\MPR.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\drprov.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\ntlanman.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\NETUI0.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\NETUI1.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\NETRAP.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\SAMLIB.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\davclnt.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [C:\WINDOWS\system32\MSGINA.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WINSTA.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\ODBC32.dll] [Microsoft Corporation, 3.525.1117.0 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\odbcint.dll] [Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld)] [C:\WINDOWS\system32\sti.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\CFGMGR32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 184][D:\软件\杀毒软件\SREng.EXE] [Smallfrogs Studio, 2.4.12.806] [C:\WINDOWS\system32\ntdll.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\kernel32.dll] [Microsoft Corporation, 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)] [C:\WINDOWS\system32\USER32.dll] [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)] [C:\WINDOWS\system32\GDI32.dll] [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)] [C:\WINDOWS\system32\comdlg32.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SHLWAPI.dll] [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)] [C:\WINDOWS\system32\ADVAPI32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\RPCRT4.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msvcrt.dll] [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SHELL32.dll] [Microsoft Corporation, 6.00.2900.2951 (xpsp_sp2_gdr.060713-0009)] [C:\WINDOWS\system32\WINSPOOL.DRV] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\oledlg.dll] [Microsoft Corporation, 1.0 (xpsp_sp2_gdr.061016-0148)] [C:\WINDOWS\system32\ole32.dll] [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)] [C:\WINDOWS\system32\OLEAUT32.dll] [Microsoft Corporation, 5.1.2600.2180] [C:\WINDOWS\system32\VERSION.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\CRYPT32.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\MSASN1.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WINMM.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WS2_32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WS2HELP.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.3059 (xpsp_sp2_gdr.070104-0050)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\LPK.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\USP10.dll] [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\WINDOWS\system32\RICHED20.DLL] [Microsoft Corporation, 5.30.23.1228] [C:\WINDOWS\system32\MSCTF.dll] [Microsoft Corporation, 5.1.2600.2575 (xpsp.041130-1728)] [C:\WINDOWS\system32\msctfime.ime] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [C:\WINDOWS\system32\winform.dll] [N/A, ] [C:\WINDOWS\system32\sfc.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\WINTRUST.dll] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\IMAGEHLP.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Sensapi.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Secur32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\wsock32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\RASAPI32.DLL] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rasman.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\NETAPI32.dll] [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)] [C:\WINDOWS\system32\TAPI32.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rtutils.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msv1_0.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\iphlpapi.dll] [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)] [C:\WINDOWS\system32\USERENV.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\urlmon.dll] [Microsoft Corporation, 6.00.2900.3072 (xpsp_sp2_gdr.070124-2319)] [C:\WINDOWS\System32\mswsock.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\DNSAPI.dll] [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [C:\WINDOWS\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0] [C:\WINDOWS\system32\Rnr20.dll] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\rasadhlp.dll] [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)] [C:\WINDOWS\system32\hnetcfg.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\wshtcpip.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xpsp2res.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\rsaenh.dll] [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629)]
hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:

hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:	发表于： 2007-04-17 08:30 \| 只看楼主短消息资料字号：小中大 23楼 ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost 127.0.0.1 popwin.9983.com 61.152.169.246 www.npjxjy.com 61.152.169.246 quxiuu.com 61.152.169.246 www.23b.cn 61.152.169.246 www.baidulink.com 61.152.169.246 www.ookkw.com 61.152.169.246 www.97725.com 61.152.169.246 www.54699.com 61.152.169.246 www.wu7x.cn 61.152.169.246 d.qbbd.com 61.152.169.246 w.qbbd.com 61.152.169.246 web.77276.com 61.152.169.246 www.77276.com 61.152.169.246 www.npjxjy.com 61.152.169.246 www.baidulink.com 61.152.169.246 www.ookkw.com 61.152.169.246 www.wu7x.cn 61.152.169.246 www.wwwlm.net 61.152.169.246 dm1.yiall.com 61.152.169.246 www.my6688.cn 61.152.169.246 www.union123.com 61.152.169.246 www.ktan.cn 61.152.169.246 www.2t2t.cn 61.152.169.246 www.cq530.com 61.152.169.246 www.365tc.com 61.152.169.246 ad.qucha.net 61.152.169.246 www.tan8.cn 61.152.169.246 www.itjj.net 61.152.169.246 www.start188.com 61.152.169.246 www.at58.cn 61.152.169.246 union.yxad.com 61.152.169.246 www.iptan.com 61.152.169.246 www.ip2008.net 61.152.169.246 www.yqif.com 61.152.169.246 www.2t2t.cn 61.152.169.246 www.688ip.com 61.152.169.246 www.17tc.com 61.152.169.246 www1.6tan.com 61.152.169.246 www2.6tan.com 61.152.169.246 www.6tan.com 61.152.169.246 www.zztan.com 61.152.169.246 www.5tanip.com 61.152.169.246 www.16tc.com 61.152.169.246 www.163se.net 61.152.169.246 www.168080.com 61.152.169.246 www.baidu8.org 61.152.169.246 www.qqwei.com 61.152.169.246 qz.magforum.net 61.152.169.246 www.nze21.com 61.152.169.246 www.437799.com 61.152.169.246 www.168080.com 61.152.169.246 new2.jixie123.cn 61.152.169.246 www.18dmm.com 61.152.169.246 www.souxse.cn 61.152.169.246 x.vvcyin.com 61.152.169.246 dm1.yiall.com 61.152.169.246 www.168080.com 61.152.169.246 www.nze21.com 61.152.169.246 www.puma163.com 61.152.169.246 www.138505.com ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:

hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:	发表于： 2007-04-17 08:33 \| 只看楼主短消息资料字号：小中大 24楼这就是小弟的日志拉，麻烦大家了哈，这么多，不好意思！谢谢大家的帮忙了！偶机子老是中毒，也不晓得怎么就中木马了，黑客的功劳哈！麻烦哥哥姐姐们了！刚才偶的瑞星防火墙报了个这样的提示，是什么木马之类的东西吗？附件: 文件名:867837200741782313.bmp 下载次数:95 文件类型:application/octet-stream 文件大小: 上传时间:2007-4-17 8:33:01 描述:
hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:

Azuresky2005 初生襁褓狮帖子:91 注册: 2005-12-11 来自:	发表于： 2007-04-17 08:44 \| 短消息资料字号：小中大 25楼建议楼主先查杀一下恶意软件啊可以用瑞星上网安全助手下载地址：http://tool.ikaka.com 或者360安全卫士：下载地址：http:www.360safe.com 清除一下向中文官方上网软件之类的东西然后再用杀毒软件全盘扫描（建议在安全模式下进行，开机后按F8键选安全模式）我所发现的不正常的地方包括：（其中恶意软件也包括在内,比如中文官方上网软件) [PID: 2128][C:\WINDOWS\system32\117676462212.exe] [中国互联网络信息中心, 2.5.0.22] [PID: 2128][C:\WINDOWS\system32\117676462212.exe] [中国互联网络信息中心, 2.5.0.22] [C:\Program Files\CNNIC\Cdn\cdnuplib.dll] [CNNIC, 2, 5, 0, 11] [C:\Program Files\CNNIC\Cdn\cdnprh.dll] [CNNIC, 2, 4, 0, 7] [C:\Program Files\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 1, 0, 11] [C:\WINDOWS\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0] [C:\Program Files\CNNIC\Cdn\cdndet.dll] [CNNIC, 2, 5, 0, 0] [C:\Program Files\CNNIC\Cdn\imaoe.dll] [CNNIC, 2, 2, 0, 1] [C:\Program Files\CNNIC\Cdn\cdntdns.dll] [CNNIC, 2, 2, 0, 3] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [C:\WINDOWS\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0] [C:\PROGRA~1\CNNIC\Cdn\cdndrag.dll] [CNNIC, 1.0.0.7] [C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll] [CNNIC, 2, 1, 0, 11] [C:\PROGRA~1\CNNIC\Cdn\cdnuplib.dll] [CNNIC, 2, 5, 0, 11] [C:\WINDOWS\system32\cdnns.dll] [CNNIC, 2, 0, 0, 0] [C:\WINDOWS\system32\hyskvqcmecdsu.dll] [N/A, ] [C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll] [CNNIC, 1, 1, 0, 0] [C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll] [CNNIC, 1, 1, 0, 0] [C:\WINDOWS\system32\winform.dll] [N/A, ] 还有就是要删除HOSTS 文件里面的其它恶意网址有高手还看出其它不正常行为的可以在楼下补充的啊
Azuresky2005 初生襁褓狮帖子:91 注册: 2005-12-11 来自:

Azuresky2005 初生襁褓狮帖子:91 注册: 2005-12-11 来自:	发表于： 2007-04-17 08:46 \| 短消息资料字号：小中大 26楼是中文官方上网软件里的一个应用程序在连接网络啊建议拒绝之
Azuresky2005 初生襁褓狮帖子:91 注册: 2005-12-11 来自:

hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:	发表于： 2007-04-17 08:56 \| 只看楼主短消息资料字号：小中大 27楼谢谢你们的帮忙拉！真的很谢谢，这么一大早就来麻烦你们！真不好意思哈！
hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:

hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:	发表于： 2007-04-17 09:03 \| 只看楼主短消息资料字号：小中大 28楼偶还有一个问题，希望大家能帮忙，就是比如：有黑客在我机子上种马了，我怎样可以找出他的地址和他的那个盗我资料的邮箱呢？怎样可以找到他呢？
hotaiyy 初生襁褓狮帖子:27 注册: 2007-04-17 来自:

天月来了版主帖子:76904 注册: 2007-02-06 来自:	发表于： 2007-04-17 09:06 \| 短消息资料字号：小中大 29楼没法。找到又怎样？
天月来了版主帖子:76904 注册: 2007-02-06 来自:

lxr123 健康舞勺狮帖子:340 注册: 2006-10-27 来自:	发表于： 2007-04-17 09:19 \| 短消息资料字号：小中大 30楼 <mppds><; C:\WINDOWS\mppds.exe> [] <cmdbcs><; C:\WINDOWS\cmdbcs.exe> [] <shualai><; C:\WINDOWS\shualai.exe /i> [] 。。。。。。。。。。。。。。。参考http://forum.ikaka.com/topic.asp?board=28&artid=8290293 版权归newcenturymoon所有！呵呵！
lxr123 健康舞勺狮帖子:340 注册: 2006-10-27 来自:

<<上一主题|下一主题>>

3 / 4 页

跳转页

页面顶部

Powered by Discuz!NT