AdWare.Win32.VB.bk杀掉了又出现，怎么办啊 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛 AdWare.Win32.VB.bk杀掉了又出现，怎么办啊

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1 2 345 6 7 8 »

4 / 18 页

跳转页

AdWare.Win32.VB.bk杀掉了又出现，怎么办啊

小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:	发表于： 2007-09-10 12:09 \| 短消息资料字号：小中大 31楼 {C661F36D-DF85-4EF4-83C7-E107B83D04B1} <C:\WINDOWS\system32\3DShowVM.ocx, QQ> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, Adobe Systems, Inc.> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [PasswordEditCtrl Class] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司> [BoBoControl Class] {EC0978ED-24E3-403C-AB7A-060E388553E6} <C:\WINDOWS\Downloaded Program Files\BoBo_ActiveX_V3.ocx, 广州易播信息科技有限公司> [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\pplayer.dll_1_work, Thunder> [&使用超级旋风下载] <D:\新下载工具\geturl.htm, N/A> [&使用超级旋风下载全部链接] <D:\新下载工具\getAllurl.htm, N/A> [收藏到QQ书签] <http://shuqian.qq.com/favit.html, N/A> [添加到QQ表情] <E:\tool\QQ\AddEmotion.htm, N/A> ================================== 正在运行的进程 [PID: 628 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 684 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 708 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 752 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 764 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 924 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1000 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1096 / SYSTEM][C:\tool\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:

小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:	发表于： 2007-09-10 12:10 \| 短消息资料字号：小中大 32楼 [PID: 1112 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1232 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1308 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1320 / SYSTEM][C:\TOOL\RISING\RAV\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 49] [C:\TOOL\RISING\RAV\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\TOOL\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\TOOL\RISING\RAV\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [C:\TOOL\RISING\RAV\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\TOOL\RISING\RAV\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\TOOL\RISING\RAV\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\TOOL\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\TOOL\RISING\RAV\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\TOOL\RISING\RAV\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [C:\tool\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [C:\tool\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\tool\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [C:\TOOL\RISING\RAV\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\TOOL\RISING\RAV\psapi.dll] [Microsoft Corporation, 4.00] [C:\TOOL\RISING\RAV\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\TOOL\RISING\RAV\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 14] [C:\TOOL\RISING\RAV\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\TOOL\RISING\RAV\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\TOOL\RISING\RAV\HookCont.dll] [Rising, 19, 0, 0, 0] [C:\tool\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6] [C:\tool\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30] [C:\tool\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [C:\tool\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\tool\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\tool\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 82] [C:\tool\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36] [C:\tool\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\tool\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [C:\tool\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20] [C:\tool\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 24] [C:\tool\Rising\Rav\RsVM.dll] [, 19, 0, 0, 20] [C:\tool\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 57] [C:\tool\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14] [C:\tool\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\tool\Rising\Rav\ScanNet.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [PID: 1604 / Boss][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\shlhook.dll] [Beijing Rising Technology Co., Ltd., 4.0.0.9]
小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:

小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:	发表于： 2007-09-10 12:11 \| 短消息资料字号：小中大 33楼 [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\Program Files\LClock\LC.dll] [N/A, ] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\igfxpph.dll] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxress.dll] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4670] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\tool\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\WINDOWS\system32\ContextMenuExt.dll] [N/A, ] [PID: 1724 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1820 / SYSTEM][C:\TOOL\RISING\RAV\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [C:\TOOL\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\TOOL\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 2028 / SYSTEM][C:\WINDOWS\system32\inetsrv\inetinfo.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll] [Microsoft Corporation, 1.1.4322.573] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [PID: 180 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1184 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 244 / Boss][C:\Program Files\LClock\LClock.exe] [, 1, 0, 0, 1] [C:\Program Files\LClock\LC.dll] [N/A, ] [C:\Program Files\LClock\Calendar.dll] [N/A, ] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 264 / Boss][C:\WINDOWS\system32\igfxtray.exe] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxress.dll] [Intel Corporation, 3.0.0.4670] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 156 / Boss][C:\WINDOWS\system32\hkcmd.exe] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4670] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 948 / Boss][C:\WINDOWS\system32\igfxpers.exe] [Intel Corporation, 3.0.0.4670] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4670] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 1056 / Boss][C:\WINDOWS\RTHDCPL.EXE] [Realtek Semiconductor Corp., 2.0.9.8] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 1484 / Boss][C:\WINDOWS\ZSSnp211.exe] [ZSMCSNAP, 3, 6, 818, 7]
小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:

小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:	发表于： 2007-09-10 12:11 \| 短消息资料字号：小中大 34楼 [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\WINDOWS\system32\ZS211Prp.Ax] [ZSMC, 3, 6, 703, 15] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 1404 / Boss][C:\WINDOWS\Domino.exe] [, 3, 6, 818, 7] [C:\WINDOWS\system32\msdmo.dll] [, ] [PID: 1364 / Boss][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 4.0.0.18] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 1248 / Boss][C:\tool\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\tool\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\tool\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\tool\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\tool\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 1272 / Boss][C:\tool\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45] [C:\tool\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [C:\tool\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\tool\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\tool\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\tool\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\tool\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\tool\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\tool\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 1468 / Boss][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 2124 / Boss][F:\POPO\POPO2004\popo.exe] [网易(163.com), 1, 0, 0, 1] [F:\POPO\POPO2004\XGDI.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\XFile.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\P2PMgr.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\XComm.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\Trace.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\Updater.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\UNZIP32.dll] [Info-ZIP, 5.5] [F:\POPO\POPO2004\ResLoc.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\MailChecker.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\ExtraEditor.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\XMP.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\fmod.dll] [Firelight Technologies Pty, Ltd, 3.73] [F:\POPO\POPO2004\UrlObj.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\WebService.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\Bobo.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\SOX.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\share.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\XVideo.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\VCodec.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\XVoice.dll] [, 1, 0, 0, 2] [F:\POPO\POPO2004\GIPSVoiceEngineDLL.dll] [Global IP Sound, 2, 0, 4, 0] [F:\POPO\POPO2004\XEmotion.dll] [, 1, 0, 0, 1] [F:\POPO\POPO2004\MsgHis.dll] [, 1, 0, 0, 1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [F:\POPO\POPO2004\plugins\MSN.DLL] [, 1, 0, 0, 1]
小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:

小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:	发表于： 2007-09-10 12:12 \| 短消息资料字号：小中大 35楼 [F:\POPO\POPO2004\plugins\LIBCURL.dll] [N/A, ] [F:\POPO\POPO2004\plugins\SSLEAY32.dll] [N/A, ] [F:\POPO\POPO2004\plugins\LIBEAY32.dll] [N/A, ] [PID: 2128 / Boss][E:\tool\QQ\QQMusic.exe] [Tencent, 7, 9, 107, 96] [E:\tool\QQ\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [E:\tool\QQ\QQMusicUI.dll] [Tencent, 7, 9, 107, 96] [E:\tool\QQ\riched20.dll] [Microsoft Corporation, 5.31.23.1218] [E:\tool\QQ\QQMusicSkin.dll] [, 2, 3, 104, 32] [E:\tool\QQ\vbscript.dll] [Microsoft Corporation, 5.6.0.7426] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [E:\tool\QQ\VQQPLA~1.OCX] [Tencent Technology (Shenzhen) Company Limited, 3, 8, 109, 81] [C:\tool\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [E:\tool\QQ\vqqsdl.dll] [Tencent Technology (Shenzhen) Company Limited, 3, 8, 109, 81] [E:\tool\QQ\TNProxy.dll] [Tencent Technology(Shenzhen) Company Limited, 2, 1, 101, 60] [E:\tool\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\WINDOWS\system32\l3codeca.acm] [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305] [C:\WINDOWS\system32\ffdshow.ax] [, 1.0.2.2028] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [D:\DVD播放器\Codec\VSFilter.dll] [Gabest, 1, 0, 1, 3] [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0] [PID: 2204 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2764 / Boss][E:\tool\QQ\QQ.exe] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQBaseClassInDll.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQHelperDll.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\BasicCtrlDll.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0] [E:\tool\QQ\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1] [E:\tool\QQ\RICHED20.dll] [Microsoft Corporation, 5.31.23.1218] [E:\tool\QQ\QQAPI.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [E:\tool\QQ\LoginCtrl.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\LoginCtrlRes.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQRes.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQMainFrame.dll] [N/A, ] [E:\tool\QQ\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)] [E:\tool\QQ\CQQApplication.dll] [N/A, ] [E:\tool\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1] [E:\tool\QQ\NewSkin.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\HostingMgr.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\CameraDll.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\MailSummary.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQKnowledgeSearch.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQAllInOne.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\SCCore.dll] [TENCENT, 1, 6, 0, 2] [E:\tool\QQ\QQSpace.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\vbscript.dll] [Microsoft Corporation, 5.6.0.7426] [C:\WINDOWS\system32\msdmo.dll] [, ] [E:\tool\QQ\QQGroupMng.dll] [TENCENT, 7,0,365,1701] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [E:\tool\QQ\QQAvatar.dll] [N/A, ] [E:\tool\QQ\QQSysMsgMng.dll] [N/A, ] [E:\tool\QQ\UserDefinedHead.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQPlugin.dll] [N/A, ] [E:\tool\QQ\QQConfigPlugin.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQCustomFace.dll] [N/A, ] [E:\tool\QQ\QRingMng.dll] [N/A, ] [E:\tool\QQ\LongConnection.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\PhoneAPI.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [E:\tool\QQ\QQPet.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\BQQApplication.dll] [N/A, ] [E:\tool\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [E:\tool\QQ\CommercesMng.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 320] [E:\tool\QQ\ImageOle.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQLiveQMng.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\QQSceneMng.dll] [N/A, ] [E:\tool\QQ\GroupConnection.dll] [TENCENT, 7,0,365,1701] [E:\tool\QQ\AddrSearch.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 95] [PID: 3572 / Boss][E:\tool\QQ\TIMPlatform.exe] [TENCENT, 7,0,313,1681] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [E:\tool\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 4060 / Boss][F:\梦幻西游\my.exe] [Netease, 1, 0, 0, 1] [F:\梦幻西游\mhmain.dll] [N/A, ]
小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:

小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:	发表于： 2007-09-10 12:13 \| 短消息资料字号：小中大 36楼 [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1612 / Boss][C:\tool\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [C:\tool\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [PID: 3136 / Boss][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3424] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 3580 / Boss][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\kakatool.dll] [Beijing Rising Technology Co., Ltd., 4.0.0.4] [D:\新下载工具\QQIEHelper02.dll] [腾讯公司, 1, 1, 0, 5] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [C:\tool\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0] [PID: 1860 / Boss][D:\杀毒\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12] [D:\杀毒\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT Error. [C:\WINDOWS\notepad.exe %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeLoadDriverPrivilege [PID = 244, C:\PROGRAM FILES\LCLOCK\LCLOCK.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1484, C:\WINDOWS\ZSSNP211.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1404, C:\WINDOWS\DOMINO.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1364, C:\PROGRAM FILES\RISING\ANTISPYWARE\RUNIEP.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1248, C:\TOOL\RISING\RAV\RAVTASK.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1272, C:\TOOL\RISING\RAV\RAVMON.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2124, F:\POPO\POPO2004\POPO.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 4060, F:\梦幻西游\MY.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1612, C:\TOOL\RISING\RAV\RSAGENT.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
小小玉太子初生襁褓狮帖子:12 注册: 2007-09-10 来自:

龙小雪初生襁褓狮帖子:4 注册: 2007-09-12 来自:	发表于： 2007-09-12 12:29 \| 短消息资料字号：小中大 37楼 [CODE] 2007-09-12,12:00:14 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件进程特权扫描启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [(Verified)Microsoft Windows XP Publisher] <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit> [(Verified)Microsoft Windows XP Publisher] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows XP Publisher] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows XP Publisher] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows XP Publisher] <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <nwiz><nwiz.exe /install> [(Verified)Microsoft Windows XP Publisher] <runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe> [Beijing Rising Technology Co., Ltd.] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <EEventManager><C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe> [N/A] <Easy-PrintToolBox><C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon> [(Verified)Canon Inc.] <DAEMON Tools><"C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033> [(Verified)DAEMON Tools Code Signing Services] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows XP Publisher] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] <Microsoft Windows Media Player 6.4><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\mplayer2.inf,PerUserStub.NT> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{306D6C21-C1B6-4629-986C-E59E1875B8AF}] <N/A><"C:\WINDOWS\System32\rundll32.exe" "C:\Program Files\Messenger\msgsc.dll",ShowIconsUser> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.Install.PerUser> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <Microsoft Windows Media Player 8><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]
龙小雪初生襁褓狮帖子:4 注册: 2007-09-12 来自:

龙小雪初生襁褓狮帖子:4 注册: 2007-09-12 来自:	发表于： 2007-09-12 12:29 \| 短消息资料字号：小中大 38楼 ================================== 启动文件夹 [Adobe Gamma Loader] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><N> ================================== 服务 [Adobe LM Service / Adobe LM Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe><Macrovision Corporation> [PIXMA Extended Survey Program / IJPLMSVC][Running/Auto Start] <C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE><> [Maya 6.5 Documentation Server / maya65docserver][Running/Auto Start] <E:\MAYA\docs\wrapper.exe -s E:\MAYA\docs\Wrapper.conf><N/A> [Maya 7.0 Documentation Server / maya70docserver][Running/Auto Start] <E:\maya7.0\docs\wrapper.exe -s E:\maya7.0\docs\Wrapper.conf><N/A> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation> [Rising Proxy Service / RfwProxySrv][Stopped/Manual Start] <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService][Running/Auto Start] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon][Running/Auto Start] <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 驱动程序 [PPdus ASPI Shell / Afc][Running/Manual Start] <system32\drivers\Afc.sys><Arcsoft, Inc.> [Rising TDI Base Driver / BaseTDI][Running/Auto Start] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [DS1410D / DS1410D][Running/Auto Start] <\??\C:\WINDOWS\System32\drivers\ds1410d.sys><N/A> [dtscsi / dtscsi][Running/Manual Start] <\SystemRoot\System32\Drivers\dtscsi.sys><N/A> [ExpScaner / ExpScaner][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\ExpScan.sys><> [hardlock / hardlock][Running/Auto Start] <\??\C:\WINDOWS\System32\drivers\hardlock.sys><Aladdin Knowledge Systems> [Haspnt / Haspnt][Running/Auto Start] <\??\C:\WINDOWS\System32\drivers\Haspnt.sys><Aladdin Knowledge Systems> [HookCont / HookCont][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookSys.sys><Rising> [HookUrl / HookUrl][Running/Auto Start] <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\MEMSCAN.sys><Beijing Rising Technology Co., Ltd.> [mProcRs / mProcRs][Running/Auto Start] <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [npkcrypt / npkcrypt][Stopped/Manual Start] <\??\C:\WINDOWS\System32\npkcrypt.sys><N/A> [npkycryp / npkycryp][Stopped/Manual Start] <\??\C:\WINDOWS\System32\npkycryp.sys><N/A> [nv / nv][Running/Manual Start] <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [nvatabus / nvatabus][Running/Boot Start] <\SystemRoot\System32\DRIVERS\nvatabus.sys><NVIDIA Corporation> [Service for NVIDIA(R) nForce(TM) Audio Enumerator / nvax][Running/Manual Start] <system32\drivers\nvax.sys><NVIDIA Corporation> [NVIDIA nForce Networking Legacy Driver / NVENET][Running/Manual Start] <System32\DRIVERS\NVENET.sys><NVIDIA Corporation> [Service for NVIDIA(R) nForce(TM) Audio / nvnforce][Running/Manual Start] <system32\drivers\nvapu.sys><NVIDIA Corporation> [NVIDIA nForce AGP Bus Filter / nv_agp][Running/Boot Start] <\SystemRoot\System32\DRIVERS\nv_agp.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsAntiSpyware / RsAntiSpyware][Running/Boot Start] <\SystemRoot\System32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.> [RsFwDrv / RsFwDrv][Running/Auto Start] <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\System32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising> [Secdrv / Secdrv][Stopped/Manual Start] <System32\DRIVERS\secdrv.sys><N/A> [Sentinel / Sentinel][Running/Auto Start] <\SystemRoot\System32\Drivers\SENTINEL.SYS><Rainbow Technologies, Inc.> [StarForce Protection Environment Driver (version 1.x) / sfdrv01][Running/Boot Start] <\SystemRoot\System32\drivers\sfdrv01.sys><Protection Technology> [StarForce Protection Helper Driver (version 2.x) / sfhlp02][Running/Boot Start] <\SystemRoot\System32\drivers\sfhlp02.sys><Protection Technology> [StarForce Protection Synchronization Driver (version 3.x) / sfsync03][Running/Boot Start] <\SystemRoot\System32\drivers\sfsync03.sys><Protection Technology> [Rainbow USB SuperPro / Sntnlusb][Stopped/Manual Start] <System32\DRIVERS\SNTNLUSB.SYS><Rainbow Technologies Inc.> [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys><N/A>
龙小雪初生襁褓狮帖子:4 注册: 2007-09-12 来自:

龙小雪初生襁褓狮帖子:4 注册: 2007-09-12 来自:	发表于： 2007-09-12 12:30 \| 短消息资料字号：小中大 39楼 ================================= 浏览器加载项 [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD> [NaviHelperObj Class] {3E422F49-1566-40D3-B43D-077EF739AC32} <C:\WINDOWS\NaviHelper.dll, TODO: <公司名>> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD> [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD> [浩方对战平台] {0A155D3C-68E2-4215-A47A-E800A446447A} <D:\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [InstallShield Setup Player V11] {804F9BC5-0EAB-4150-8065-0DF485420670} <, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9d.ocx, Adobe Systems, Inc.> [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD> [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, > [XDRM] {693571CB-54A3-4E90-9D52-EEAE1334E2D3} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work, > [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin13.dll, Thunder Networking Technologies,LTD> [RMGetLicense Class] {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\System32\msnetobj.dll, Microsoft Corporation> [Thunder DapPlayer] {EEDD6FF9-13DE-496B-9A1C-D78B3215E266} <C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DapPlayer3.0.11.17.dll, ShenZhen Thunder Networking Technologies Ltd.> [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\pplayer.dll_1_work, Thunder> [使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> ================================== 正在运行的进程 [PID: 624 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 696 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 720 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 768 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 780 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 956 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1072 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1212 / NETWORK SERVICE][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1264 / LOCAL SERVICE][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1640 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\WINDOWS\system32\CNMLM8O.DLL] [CANON INC., 2.05.2.10] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD8O.DLL] [CANON INC., 2.05.2.10] [PID: 1732 / SYSTEM][C:\PROGRAM FILES\RISING\RAV\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 1980 / 王广华][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 328 / SYSTEM][C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE] [, 1.0.0.104] [PID: 364 / SYSTEM][E:\MAYA\docs\wrapper.exe] [N/A, ] [PID: 460 / SYSTEM][E:\maya7.0\docs\wrapper.exe] [N/A, ] [PID: 464 / 王广华][c:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 72] [c:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [c:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [c:\program files\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [c:\program files\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [c:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 520 / 王广华][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6] [C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 448 / 王广华][C:\Program Files\DAEMON Tools\daemon.exe] [DT Soft Ltd., 4.03.0.0] [C:\Program Files\DAEMON Tools\daemon.dll] [DT Soft Ltd., 4.03.0.0] [C:\Program Files\DAEMON Tools\PFCTOC.DLL] [Padus(R), Inc., 1, 0, 0, 12] [C:\Program Files\DAEMON Tools\Plugins\Images\bw5mount.dll] [, 1.0.6.0] [C:\Program Files\DAEMON Tools\Plugins\Images\ccdmount.dll] [GENERIC, 1.10.0.0] [C:\Program Files\DAEMON Tools\Plugins\Images\mdsmount.dll] [GENERIC, 1.12.0.0] [C:\Program Files\DAEMON Tools\Plugins\Images\nrgmount.dll] [GENERIC, 1.11.0.0] [C:\Program Files\DAEMON Tools\Plugins\Images\pdimount.dll] [GENERIC, 1.01.0.0] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 644 / 王广华][C:\WINDOWS\System32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 652 / 王广华][C:\WINDOWS\System32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\NVMCTRAY.DLL] [NVIDIA Corporation, 6.14.10.5216] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 692 / SYSTEM][C:\WINDOWS\System32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.5216] [PID: 1032 / SYSTEM][E:\MAYA\docs\jre\bin\java.exe] [N/A, ] [E:\MAYA\docs\jre\bin\client\jvm.dll] [N/A, ] [E:\MAYA\docs\jre\bin\hpi.dll] [N/A, ] [E:\MAYA\docs\jre\bin\verify.dll] [N/A, ] [E:\MAYA\docs\jre\bin\java.dll] [N/A, ] [E:\MAYA\docs\jre\bin\zip.dll] [N/A, ] [E:\MAYA\docs\lib\wrapper.dll] [N/A, ] [E:\MAYA\docs\jre\bin\net.dll] [N/A, ] [PID: 1036 / SYSTEM][E:\maya7.0\docs\jre\bin\java.exe] [N/A, ] [E:\maya7.0\docs\jre\bin\client\jvm.dll] [N/A, ] [E:\maya7.0\docs\jre\bin\hpi.dll] [N/A, ] [E:\maya7.0\docs\jre\bin\verify.dll] [N/A, ] [E:\maya7.0\docs\jre\bin\java.dll] [N/A, ] [E:\maya7.0\docs\jre\bin\zip.dll] [N/A, ] [E:\maya7.0\docs\lib\wrapper.dll] [N/A, ] [E:\maya7.0\docs\jre\bin\net.dll] [N/A, ] [PID: 3888 / 王广华][D:\Program Files\QQ2007\QQ.exe] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQBaseClassInDll.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQHelperDll.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\BasicCtrlDll.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0] [D:\Program Files\QQ2007\MSVCP60.dll] [Microsoft Corporation, 6.02.3104.0] [D:\Program Files\QQ2007\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1] [D:\Program Files\QQ2007\RICHED20.dll] [Microsoft Corporation, 5.31.23.1218] [D:\Program Files\QQ2007\QQAPI.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\TIMProxy.dll] [tencent, 0, 3, 2, 4] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [D:\Program Files\QQ2007\LoginCtrl.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\LoginCtrlRes.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQRes.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQMainFrame.dll] [N/A, ] [D:\Program Files\QQ2007\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)] [D:\Program Files\QQ2007\CQQApplication.dll] [N/A, ] [D:\Program Files\QQ2007\FlashAvatarDll.dll] [, 1, 4, 0, 1] [D:\Program Files\QQ2007\NewSkin.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\HostingMgr.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\CameraDll.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\MailSummary.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQKnowledgeSearch.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQAllInOne.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\SCCore.dll] [TENCENT, 1, 6, 0, 2] [D:\Program Files\QQ2007\vbscript.dll] [Microsoft Corporation, 5.6.0.7426] [C:\WINDOWS\System32\msdmo.dll] [, ] [D:\Program Files\QQ2007\QQGroupMng.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\UserDefinedHead.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQPlugin.dll] [N/A, ] [D:\Program Files\QQ2007\QQSpace.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQCustomFace.dll] [N/A, ] [C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\msadp32.acm] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [D:\Program Files\QQ2007\QQPet.dll] [TENCENT, 7,0,365,1701]
龙小雪初生襁褓狮帖子:4 注册: 2007-09-12 来自:

龙小雪初生襁褓狮帖子:4 注册: 2007-09-12 来自:	发表于： 2007-09-12 12:30 \| 短消息资料字号：小中大 40楼 [D:\Program Files\QQ2007\QQSysMsgMng.dll] [N/A, ] [D:\Program Files\QQ2007\QQConfigPlugin.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQAvatar.dll] [N/A, ] [D:\Program Files\QQ2007\QRingMng.dll] [N/A, ] [D:\Program Files\QQ2007\ImageOle.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQLiveQMng.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQMagicFace.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\QQSceneMng.dll] [N/A, ] [D:\Program Files\QQ2007\LongConnection.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\GroupConnection.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\PhoneAPI.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [D:\Program Files\QQ2007\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 320] [D:\Program Files\QQ2007\BQQApplication.dll] [N/A, ] [D:\Program Files\QQ2007\CommercesMng.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [D:\Program Files\QQ2007\QQZip.dll] [TENCENT, 7,0,365,1701] [D:\Program Files\QQ2007\AddrSearch.dll] [腾讯科技（深圳）有限公司, 2, 1, 9, 95] [C:\WINDOWS\System32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0] [D:\Program Files\QQ2007\QQMsgFriendMng.dll] [N/A, ] [PID: 3928 / 王广华][D:\Program Files\QQ2007\TIMPlatform.exe] [TENCENT, 7,0,365,1701] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [D:\Program Files\QQ2007\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 2532 / 王广华][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.15] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 18] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll] [, 1, 0, 0, 11] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 12] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0] [PID: 3604 / 王广华][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.15] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 18] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll] [, 1, 0, 0, 11] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 12] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0] [PID: 3876 / 王广华][C:\Program Files\WinRAR\WinRAR.exe] [N/A, ] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [PID: 2224 / 王广华][C:\DOCUME~1\王广华\LOCALS~1\Temp\Rar$EX00.765\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10] [C:\DOCUME~1\王广华\LOCALS~1\Temp\Rar$EX00.765\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT Error. [C:\WINDOWS\notepad.exe %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeLoadDriverPrivilege [PID = 720, C:\WINDOWS\SYSTEM32\WINLOGON.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3876, C:\PROGRAM FILES\WINRAR\WINRAR.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
龙小雪初生襁褓狮帖子:4 注册: 2007-09-12 来自:

<<上一主题|下一主题>>

1 2 345 6 7 8 »

4 / 18 页

跳转页

页面顶部

Powered by Discuz!NT