小白求助...（刚放了日志，请大家帮忙看看，谢谢了） - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛小白求助...（刚放了日志，请大家帮忙看看，谢谢了）

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第四十七次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

2 / 2 页

跳转页

小白求助...（刚放了日志，请大家帮忙看看，谢谢了）

糖糖吖初生襁褓狮帖子:21 注册: 2007-07-10 来自:	发表于： 2007-07-10 20:40 \| 只看楼主短消息资料字号：小中大 11楼 [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 160 / wanjingjing][C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe] [InstallShield Software Corporation, 3, 00, 100, 1161] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 168 / wanjingjing][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 4.0.0.15] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 200 / wanjingjing][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3760] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 260 / wanjingjing][C:\Program Files\360safe\safemon\360Tray.exe] [奇虎网, 3, 5, 2, 1001] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [C:\Program Files\360safe\safemon\SafeKrnl.dll] [奇虎网, 3, 5, 0, 1001] [C:\Program Files\360safe\AntiAdwa.dll] [360Safe.com, 3, 5, 1, 1001] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 340 / wanjingjing][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 384 / wanjingjing][D:\Tencent\QQ\QQ.exe] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQBaseClassInDll.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQHelperDll.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\BasicCtrlDll.dll] [TENCENT, 7, 0, 225, 1651] [C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [D:\Tencent\QQ\QQAPI.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [D:\Tencent\QQ\LoginCtrl.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\LoginCtrlRes.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQRes.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\MailSummary.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQMainFrame.dll] [N/A, ] [D:\Tencent\QQ\CQQApplication.dll] [N/A, ] [D:\Tencent\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1] [D:\Tencent\QQ\NewSkin.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\HostingMgr.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\CameraDll.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQKnowledgeSearch.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQAllInOne.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\SCCore.dll] [TENCENT, 1, 6, 0, 2] [D:\Tencent\QQ\QQSpace.dll] [TENCENT, 7,0,313,1681] [C:\WINDOWS\system32\msdmo.dll] [, ] [D:\Tencent\QQ\QQGroupMng.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQAvatar.dll] [N/A, ] [D:\Tencent\QQ\QQSysMsgMng.dll] [N/A, ] [D:\Tencent\QQ\UserDefinedHead.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQPlugin.dll] [N/A, ] [D:\Tencent\QQ\LongConnection.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQCustomFace.dll] [N/A, ] [D:\Tencent\QQ\QQConfigPlugin.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QRingMng.dll] [N/A, ] [D:\Tencent\QQ\QQPet.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\ImageOle.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQLiveQMng.dll] [TENCENT, 7,0,313,1681] [d:\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [D:\Tencent\QQ\QQFileTransfer.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\PhoneAPI.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [D:\Tencent\QQ\BQQApplication.dll] [N/A, ] [D:\Tencent\QQ\PersonalDesktop.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\CommercesMng.dll] [TENCENT, 7,0,313,1681] [D:\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 310] [D:\Tencent\QQ\QQSceneMng.dll] [N/A, ] [D:\Tencent\QQ\AddrSearch.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 93] [D:\Tencent\QQ\GroupConnection.dll] [TENCENT, 7,0,313,1681] [PID: 448 / wanjingjing][D:\Tencent\QQ\TIMPlatform.exe] [TENCENT, 7,0,313,1681] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [D:\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 812 / SYSTEM][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe] [Analog Devices, Inc., 3, 2, 6, 0] [PID: 1900 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [PID: 2292 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\WINDOWS\System32\SYNCOR11.DLL] [SoundMAX, 1.2.3] [PID: 2000 / wanjingjing][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 2376 / wanjingjing][D:\Rising\Rav\Rav.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36] [D:\Rising\Rav\PlugIn\RsPgScan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17] [C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3] [D:\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [D:\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [D:\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [D:\Rising\Rav\RavUI.Dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30] [D:\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [D:\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [D:\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [d:\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [D:\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [d:\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 2504 / wanjingjing][D:\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [D:\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 2524 / wanjingjing][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3424] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3] [PID: 2856 / wanjingjing][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [C:\WINDOWS\system32\KakaTool.dll] [Beijing Rising Technology Co., Ltd., 4.0.0.4] [C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3] [c:\program files\google\googletoolbar1.dll] [Google Inc., 3, 0, 131, 0] [D:\BitComet\tools\BitCometBHO_1.1.6.14.dll] [BitComet, 20070614] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [d:\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0] [PID: 3184 / wanjingjing][d:\WinRAR\WinRAR.exe] [N/A, ] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 3812 / wanjingjing][C:\DOCUME~1\WANJIN~1\LOCALS~1\Temp\Rar$EX00.375\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)] [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [C:\DOCUME~1\WANJIN~1\LOCALS~1\Temp\Rar$EX00.375\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
糖糖吖初生襁褓狮帖子:21 注册: 2007-07-10 来自:

糖糖吖初生襁褓狮帖子:21 注册: 2007-07-10 来自:	发表于： 2007-07-10 20:41 \| 只看楼主短消息资料字号：小中大 12楼文件关联 .TXT Error. [C:\WINDOWS\notepad.exe %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeLoadDriverPrivilege [PID = 1964, C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMTRAY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1988, D:\RISING\RAV\RAVTASK.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2028, D:\RISING\RAV\RAVMON.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 160, C:\PROGRAM FILES\COMMON FILES\INSTALLSHIELD\UPDATESERVICE\ISSCH.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 168, C:\PROGRAM FILES\RISING\ANTISPYWARE\RUNIEP.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 260, C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 260, C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2376, D:\RISING\RAV\RAV.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2504, D:\RISING\RAV\RSAGENT.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3184, D:\WINRAR\WINRAR.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
糖糖吖初生襁褓狮帖子:21 注册: 2007-07-10 来自:

糖糖吖初生襁褓狮帖子:21 注册: 2007-07-10 来自:	发表于： 2007-07-10 20:42 \| 只看楼主短消息资料字号：小中大 13楼发完了。。。高手帮忙看看``` 3Q```
糖糖吖初生襁褓狮帖子:21 注册: 2007-07-10 来自:

糖糖吖初生襁褓狮帖子:21 注册: 2007-07-10 来自:	发表于： 2007-07-10 21:01 \| 只看楼主短消息资料字号：小中大 14楼 5555谁帮我看看``` T。T
糖糖吖初生襁褓狮帖子:21 注册: 2007-07-10 来自:

<<上一主题|下一主题>>

12

2 / 2 页

跳转页

页面顶部

Powered by Discuz!NT