请高手帮我看看,最近机子好卡~~ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请高手帮我看看,最近机子好卡~~

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

请高手帮我看看,最近机子好卡~~

嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:	发表于： 2007-06-19 11:35 \| 只看楼主短消息资料字号：小中大 1楼请高手帮我看看,最近机子好卡~~ [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher] ================================== 启动文件夹 [腾讯QQ] <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\QQ\QQ.exe [TENCENT]><N> ================================== 服务 [ASP.NET State Service / aspnet_state][Stopped/Manual Start] <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation> [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.> [ATI Smart / ATI Smart][Stopped/Auto Start] <C:\WINDOWS\system32\ati2sgag.exe><> [ewido anti-spyware 4.0 guard / ewido anti-spyware 4.0 guard][Stopped/Auto Start] <D:\ewido anti-spyware 4.0\guard.exe><N/A> [Human Interface Device Access / HidServ][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [NOD32 Kernel Service / NOD32krn][Running/Auto Start] <"C:\Program Files\Eset\nod32krn.exe"><Eset> [Windows Media Connect (WMC) / WmcCds][Stopped/Manual Start] <c:\program files\windows media connect\mswmccds.exe><Microsoft Corporation> [Windows Media Connect (WMC) 帮助程序 / WmcCdsLs][Stopped/Manual Start] <C:\Program Files\Windows Media Connect\mswmcls.exe><Microsoft Corporation> [Remote Debug Service / RemoteDbg][Stopped/Auto Start] <C:\WINDOWS\system32\rundll32.exe RemoteDbg.dll,input><Microsoft Corporation> [Win32 Debug Service / MSDebugsvc][Stopped/Auto Start] <C:\WINDOWS\system32\rundll32.exe msdebug.dll,input><Microsoft Corporation> ================================== 驱动程序 [AMON / AMON][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\amon.sys><Eset> [ati2mtag / ati2mtag][Running/Manual Start] <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.> [ewido anti-spyware 4.0 driver / ewido anti-spyware 4.0 driver][Stopped/System Start] <\??\D:\ewido anti-spyware 4.0\guard.sys><N/A> [npkcrypt / npkcrypt][Running/Auto Start] <\??\D:\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [nvatabus / nvatabus][Running/Boot Start] <\SystemRoot\system32\DRIVERS\nvatabus.sys><NVIDIA Corporation> [Service for NVIDIA(R) nForce(TM) Audio Enumerator / nvax][Running/Manual Start] <system32\drivers\nvax.sys><NVIDIA Corporation> [NVIDIA Disk Cache Filter Driver / nvcchflt][Running/Boot Start] <\SystemRoot\system32\DRIVERS\nvcchflt.sys><NVIDIA Corporation> [NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start] <system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation> [NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start] <system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation> [Service for NVIDIA(R) nForce(TM) Audio / nvnforce][Running/Manual Start] <system32\drivers\nvapu.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [SKNFW / SKNFW][Running/System Start] <\??\C:\WINDOWS\system32\Drivers\SKNFW.sys><N/A> [SkyProcs / SkyProcs][Running/Manual Start] <\??\C:\PROGRA~1\SkyNet\FireWall\SkyProcs.sys><N/A> ================================== 浏览器加载项 [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} <D:\QQDownload\QQIEHelper01.dll, 腾讯公司> [Tencent Browser Helper] {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\SSPlus\SAddr.dll, Tencent> [NavigatMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, > [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\QQ\QQ.EXE, TENCENT> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [Java Plug-in 1.5.0_02] {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll, Sun Microsystems, Inc.> [Java Plug-in 1.5.0_02] {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll, Sun Microsystems, Inc.> [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} <D:\QQDownload\QQIEHelper01.dll, 腾讯公司> [Tencent Browser Helper] {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\SSPlus\SAddr.dll, Tencent> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [NavigatMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, > [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\Flash.ocx, Macromedia, Inc.> [BoBoControl Class] {EC0978ED-24E3-403C-AB7A-060E388553E6} <C:\WINDOWS\system32\BoBo_ActiveX_V3.ocx, 广州易播信息科技有限公司> [&V使用Vagaa哇嘎下载] <D:\Vagaa\Data\vg.htm, N/A> [&使用超级旋风下载] <D:\QQDownload\geturl.htm, N/A> [&使用超级旋风下载全部链接] <D:\QQDownload\getAllurl.htm, N/A> [上传到QQ网络硬盘] <D:\QQ\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <D:\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\QQ\SendMMS.htm, N/A> 2007-06-19 11:58:45
嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:	分享到：

嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:	发表于： 2007-06-19 11:38 \| 只看楼主短消息资料字号：小中大 2楼正在运行的进程 [PID: 608][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 700][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4124] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 744][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 756][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 904][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4124] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2499] [PID: 932][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1016][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_imon.dll] [N/A, ] [PID: 1112][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_imon.dll] [N/A, ] [PID: 1488][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\dh2103.dll] [N/A, ] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\Eset\nodshex.dll] [N/A, ] [C:\WINDOWS\system32\bzpfyk.dll] [N/A, ] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [C:\WINDOWS\system32\aafvtf.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zxzo0.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Gjzo1.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\WINDOWS\system32\vaqycl.dll] [N/A, ] [C:\Program Files\TENCENT\SSPlus\SAddr.dll] [Tencent, 5, 0, 1, 17] [PID: 392][C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe] [ATI Technologies, Inc., 6.14.10.5173] [C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll] [ATI Technologies, Inc., 6.14.10.5173] [C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.CHS] [ATI Technologies, Inc., 6.14.10.5173] [C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll] [ATI Technologies, Inc., 6.14.10.5173] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [PID: 420][C:\Program Files\Eset\nod32kui.exe] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\nod32rui.dll] [N/A, ] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [C:\Program Files\Eset\pu_amon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_amon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pu_dmon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_dmon.dll] [N/A, ] [C:\Program Files\Eset\pu_emon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_emon.dll] [N/A, ] [C:\Program Files\Eset\pu_imon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_imon.dll] [N/A, ] [C:\Program Files\Eset\pu_nod32.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_nod32.dll] [Eset , 2, 51, 26 ] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\Eset\pu_upd.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_upd.dll] [N/A, ] [C:\WINDOWS\system32\vaqycl.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Gjzo1.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zxzo0.dll] [N/A, ] [C:\WINDOWS\system32\aafvtf.dll] [N/A, ] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [C:\WINDOWS\system32\bzpfyk.dll] [N/A, ] [PID: 356][C:\Program Files\360safe\safemon\360tray.exe] [奇虎网, 1, 0, 1, 1004] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [C:\Program Files\360safe\safemon\SafeKrnl.dll] [奇虎网, 1, 0, 0, 3001] [C:\Program Files\360safe\AntiAdwa.dll] [360Safe.com, 2, 2, 5, 1000] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [PID: 1388][C:\WINDOWS\system32\Rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [PID: 1472][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [PID: 1404][C:\WINDOWS\system\winlogon.exe] [N/A, ] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [PID: 532][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [PID: 1968][D:\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0] [D:\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [D:\QQ\QQHelperDll.dll] [, 1, 0, 0, 1] [D:\QQ\BasicCtrlDll.dll] [Tencent, 7, 0, 101, 80] [D:\QQ\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [D:\QQ\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1] [D:\QQ\RICHED20.dll] [Microsoft Corporation, 5.31.23.1218] [D:\QQ\QQAPI.dll] [, 1, 0, 0, 1] [D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [D:\QQ\LoginCtrl.dll] [N/A, ] [D:\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1] [D:\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [D:\QQ\LoginCtrlRes.dll] [, 1, 0, 0, 1] [D:\QQ\QQRes.dll] [tencent, 1, 0, 0, 1] [D:\QQ\QQMainFrame.dll] [N/A, ] [D:\QQ\CQQApplication.dll] [N/A, ] [D:\QQ\NewSkin.dll] [, 1, 0, 0, 1] [D:\QQ\HostingMgr.dll] [, 1, 0, 0, 1] [D:\QQ\CameraDll.dll] [, 1, 0, 0, 1] [D:\QQ\MailSummary.dll] [, 1, 0, 0, 1] [D:\QQ\QQKnowledgeSearch.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_imon.dll] [N/A, ] [D:\QQ\QQAllInOne.dll] [N/A, ] [D:\QQ\GroupLive.dll] [N/A, ] [D:\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1] [D:\QQ\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)] [D:\QQ\QQSpace.dll] [, 1, 0, 0, 1] [D:\QQ\vbscript.dll] [Microsoft Corporation, 5.6.0.7426] [C:\WINDOWS\system32\msdmo.dll] [, ] [D:\QQ\QQGroupMng.dll] [, 1, 0, 0, 1] [D:\QQ\QQSysMsgMng.dll] [N/A, ] [D:\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1] [D:\QQ\QQPlugin.dll] [N/A, ] [D:\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:

嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:	发表于： 2007-06-19 11:38 \| 只看楼主短消息资料字号：小中大 3楼 [D:\QQ\QRingMng.dll] [N/A, ] [D:\QQ\QQAvatar.dll] [N/A, ] [D:\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1] [D:\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160] [D:\QQ\PhoneAPI.dll] [, 1, 0, 0, 1] [D:\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [D:\QQ\QQPet.dll] [, 1, 0, 0, 1] [D:\QQ\BQQApplication.dll] [N/A, ] [D:\QQ\CommercesMng.dll] [, 1, 0, 0, 1] [D:\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [D:\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 280] [D:\QQ\QQCustomFace.dll] [N/A, ] [D:\QQ\QQSceneMng.dll] [N/A, ] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll] [Microsoft Corporation, 1.1.4322.573] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll] [Microsoft Corporation, 1.1.4322.2032] [D:\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 93] [C:\WINDOWS\system32\msadp32.acm] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [D:\QQ\ImageOle.dll] [TODO: <Company name>, 1.0.0.1] [D:\QQ\GroupConnection.dll] [Tencent, 0, 3, 3, 5] [C:\WINDOWS\system32\macromed\flash\Flash.ocx] [Macromedia, Inc., 7,0,19,0] [D:\QQ\QQZip.dll] [tencent, 0, 3, 2, 4] [D:\QQ\QQMagicFace.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\vaqycl.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Gjzo1.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zxzo0.dll] [N/A, ] [C:\WINDOWS\system32\aafvtf.dll] [N/A, ] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [C:\WINDOWS\system32\bzpfyk.dll] [N/A, ] [D:\QQ\QQFileTransfer.dll] [Tencent, 0, 3, 3, 5] [D:\QQ\VqqModule.dll] [, 1, 0, 0, 1] [D:\QQ\VqqAllInOne.dll] [Tencent, 1, 6, 0, 1] [D:\QQ\InPlus.dll] [Tencent, 1, 6, 0, 0] [D:\QQ\tencent-proto1.dll] [tencent, 1, 6, 0, 0] [D:\QQ\tencent-comlib.dll] [tencent, 1, 6, 0, 0] [D:\QQ\tencent-proto2.dll] [tencent, 1, 6, 0, 0] [PID: 1044][D:\QQ\TIMPlatform.exe] [tencent, 0, 3, 1, 8] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [D:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 1700][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\RemoteDbg.dll] [N/A, ] [C:\WINDOWS\system32\msdebug.dll] [N/A, ] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\TENCENT\SSPlus\SAddr.dll] [Tencent, 5, 0, 1, 17] [D:\QQDownload\QQIEHelper01.dll] [腾讯公司, 1, 1, 0, 5] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [C:\WINDOWS\system32\vaqycl.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Gjzo1.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zxzo0.dll] [N/A, ] [C:\WINDOWS\system32\aafvtf.dll] [N/A, ] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [C:\WINDOWS\system32\bzpfyk.dll] [N/A, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_imon.dll] [N/A, ] [C:\WINDOWS\system32\macromed\flash\Flash.ocx] [Macromedia, Inc., 7,0,19,0] [C:\WINDOWS\system32\BoBo_ActiveX_V3.ocx] [广州易播信息科技有限公司, 3.4.612.2] [C:\WINDOWS\system32\rmoc3260.dll] [RealNetworks, Inc., 6.0.9.2102] [C:\WINDOWS\system32\PNCRT.dll] [Real Networks, Inc, 6.0.0.0] [C:\Program Files\Real\RealPlayer\rpplugins\embd3260.dll] [RealNetworks, Inc., 6.0.12.1212] [C:\Program Files\Common Files\Real\Common\pngu3267.dll] [RealNetworks, Inc., 6.7.0.2494] [C:\Program Files\Common Files\Real\Common\pnrs3260.dll] [RealNetworks, Inc., 6.0.9.3850] [C:\Program Files\Common Files\Real\Common\objb3201.dll] [RealNetworks, Inc., 0.1.0.6109] [C:\Program Files\Real\RealPlayer\rpplugins\rpcl3260.dll] [RealNetworks, Inc., 6.0.9.2888] [C:\Program Files\Real\RealPlayer\rpplugins\rput3260.dll] [RealNetworks, Inc., 6.0.9.2870] [C:\Program Files\Common Files\Real\Common\pnen3260.dll] [RealNetworks, Inc., 10.0.0.709] [C:\Program Files\Common Files\Real\Plugins\zipf3260.dll] [RealNetworks, Inc., 6.0.8.2334] [C:\Program Files\Common Files\Real\Plugins\vsrlocal.dll] [RealNetworks, Inc., 10.1.0.613] [C:\Program Files\Common Files\Real\Plugins\vidsite.dll] [RealNetworks, Inc., 10.0.0.686] [C:\Program Files\Common Files\Real\Plugins\clntxres.dll] [RealNetworks, Inc., 10.0.0.3153] [C:\Program Files\Real\RealPlayer\lang\cdplay_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\dbcomp_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\embed_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\gemctl_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\pngui_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\pdgenxfer_cn.dll] [N/A, ] [C:\Program Files\Real\RealPlayer\lang\rjctl_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjeq_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjres_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjskin_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjviz_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjfade_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjdlg_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjmisc_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rjprog_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rpapp_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rpclsvc_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rpclutil_cn.dll] [RealNetworks, Inc., 6.0.12.299] [C:\Program Files\Real\RealPlayer\lang\rpdemand_cn.dll] [RealNetworks, Inc., 6.0.12.299] [C:\Program Files\Real\RealPlayer\lang\rpdsplyr_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rpgutil_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rpmnpane_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rpplylst_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\rpwebctl_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\tcdinfo_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\tclsvc_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\tdwnmgr_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\tmp3_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\twave_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\teasdk_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\tearm_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\tmdedit_cn.dll] [RealNetworks, Inc., 6.0.12.298] [C:\Program Files\Real\RealPlayer\lang\mydevices_cn.dll] [RealNetworks, Inc., 6.0.12.299] [C:\Program Files\Common Files\Real\Plugins\memfsys.dll] [RealNetworks, Inc., 10.0.0.673] [C:\WINDOWS\system32\xpsp3res.dll] [Microsoft Corporation, 5.1.2600.2937 (xpsp_sp2_gdr.060623-0002)] [C:\Program Files\Common Files\Real\Plugins\authmgr.dll] [RealNetworks, Inc., 10.0.0.1133] [C:\Program Files\Common Files\Real\Codecs\hxltcolor.dll] [RealNetworks, Inc., 10.0.0.543] [C:\Program Files\Common Files\Real\Plugins\httpfsys.dll] [RealNetworks, Inc., 10.0.0.2486] [C:\Program Files\Real\RealPlayer\rpplugins\rpap3260.dll] [RealNetworks, Inc., 6.0.9.2815] [C:\Program Files\Common Files\Real\Plugins\ramfformat.dll] [RealNetworks, Inc., 10.0.0.1929] [C:\Program Files\Common Files\Real\Plugins\rmfformat.dll] [RealNetworks, Inc., 10.0.0.907] [C:\Program Files\Common Files\Real\Plugins\rarender.dll] [RealNetworks, Inc., 10.0.0.692] [C:\Program Files\Common Files\Real\Codecs\cook.dll] [RealNetworks, Inc., 10.0.0.1338] [C:\Program Files\Common Files\Real\Plugins\rvrender.dll] [RealNetworks, Inc., 10.0.0.1077] [C:\Program Files\Common Files\Real\Codecs\RV40.DLL] [RealNetworks, Inc., 10.0.0.1172] [C:\Program Files\Common Files\Real\Codecs\drvc.dll] [RealNetworks, Inc., 10.0.0.1172] [PID: 3640][E:\SREng.EXE] [Smallfrogs Studio, 2.4.12.806] [C:\WINDOWS\system32\RemoteDbg.dll] [N/A, ] [C:\WINDOWS\system32\msdebug.dll] [N/A, ] [C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 17] [C:\Program Files\360safe\safemon\safemon.dll] [, 1, 0, 0, 1003] [C:\WINDOWS\system32\vaqycl.dll] [N/A, ] [C:\WINDOWS\system32\msccrt.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Gjzo1.dll] [N/A, ] [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zxzo0.dll] [N/A, ] [C:\WINDOWS\system32\aafvtf.dll] [N/A, ] [C:\WINDOWS\system32\upxdnd.dll] [N/A, ] [C:\WINDOWS\system32\bzpfyk.dll] [N/A, ] [C:\WINDOWS\system32\imon.dll] [Eset , 2, 51, 26 ] [C:\Program Files\Eset\pr_imon.dll] [N/A, ]
嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:

嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:	发表于： 2007-06-19 11:39 \| 只看楼主短消息资料字号：小中大 4楼 ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 NOD32 protected [MSAFD Tcpip [TCP/IP]] C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 protected [MSAFD Tcpip [UDP/IP]] C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 protected [MSAFD Tcpip [RAW/IP]] C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 protected [RSVP UDP Service Provider] C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 protected [RSVP TCP Service Provider] C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) NOD32 C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support) ================================== Autorun.inf [C:\] [AutoRun] OPEN=setup.exe shellexecute=setup.exe shell\打开(&O)\command=setup.exe [D:\] [AutoRun] OPEN=setup.exe shellexecute=setup.exe shell\打开(&O)\command=setup.exe [E:\] [AutoRun] OPEN=setup.exe shellexecute=setup.exe shell\打开(&O)\command=setup.exe [F:\] [AutoRun] OPEN=setup.exe shellexecute=setup.exe shell\打开(&O)\command=setup.exe [G:\] [AutoRun] OPEN=setup.exe shellexecute=setup.exe shell\打开(&O)\command=setup.exe ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK 入口点错误：CreateProcessA (危险等级: 一般, 被下面模块所HOOK: C:\Program Files\360safe\safemon\safemon.dll) 入口点错误：CreateProcessW (危险等级: 一般, 被下面模块所HOOK: C:\Program Files\360safe\safemon\safemon.dll) ================================== 隐藏进程 N/A ================================== [/CODE]
嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:

嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:	发表于： 2007-06-19 11:54 \| 只看楼主短消息资料字号：小中大 5楼怎么没高手知道吗,最近老是一卡卡的,不知道怎么回事
嘉嘉yugo 初生襁褓狮帖子:31 注册: 2006-11-28 来自:

湘m浪子自信弱冠狮帖子:307 注册: 2007-04-08 来自:	发表于： 2007-06-19 12:08 \| 短消息资料字号：小中大 6楼兄弟,你的电脑成了毒窝了建议重装系统,重装系统后千万不要双击或都右键打开硬盘用WinRAR分别打开D\E\F\G 删除每个盘符下的autorun.inf和setup.exe 然后再扫个日志上来,不要修改,全部拷贝上来.你这个日志表头都没有
湘m浪子自信弱冠狮帖子:307 注册: 2007-04-08 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT