瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 新情况进程里有多个IE IE总是自己+进程 有时弹网页有时不弹 高手啊!

12   2  /  2  页   跳转

新情况进程里有多个IE IE总是自己+进程 有时弹网页有时不弹 高手啊!

==================================
浏览器加载项
[Info cache]
  {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(广州)科技有限公司>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program files\Thurday5\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[解霸]
  {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\HEROSOFT\Hero3000\MPLAYER.EXE, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[金山快译(&K)]
  {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <C:\PROGRA~1\Kingsoft\FASTAI~1\IEBand.dll, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9d.ocx, Adobe Systems, Inc.>
[&使用迅雷下载]
  <D:\Program files\Thurday5\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <D:\Program files\Thurday5\Program\GetAllUrl.htm, N/A>

==================================
正在运行的进程
[PID: 608][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 688][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 712][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\winlib .dll]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
[PID: 760][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\wlfpri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\LYMANGR.DLL]  [N/A, N/A]
[PID: 772][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\WINDOWS\system32\wlfpri.dll]  [N/A, N/A]
[PID: 1008][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\wlfpri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
[PID: 1132][D:\Program files\Rising\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
[PID: 1148][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
[PID: 1340][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
[PID: 1448][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
[PID: 1472][D:\PROGRAM FILES\RISING\RISING\RAV\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 49]
    [D:\PROGRAM FILES\RISING\RISING\RAV\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [D:\PROGRAM FILES\RISING\RISING\RAV\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\PROGRAM FILES\RISING\RISING\RAV\rfwctrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [D:\PROGRAM FILES\RISING\RISING\RAV\RsPPsys.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [D:\PROGRAM FILES\RISING\RISING\RAV\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\PROGRAM FILES\RISING\RISING\RAV\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [D:\PROGRAM FILES\RISING\RISING\RAV\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [D:\PROGRAM FILES\RISING\RISING\RAV\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [D:\PROGRAM FILES\RISING\RISING\RAV\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
    [D:\Program files\Rising\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15]
    [D:\Program files\Rising\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [D:\Program files\Rising\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15]
    [D:\PROGRAM FILES\RISING\RISING\RAV\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [D:\PROGRAM FILES\RISING\RISING\RAV\psapi.dll]  [Microsoft Corporation, 4.00]
    [D:\PROGRAM FILES\RISING\RISING\RAV\HookWeb.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
    [D:\PROGRAM FILES\RISING\RISING\RAV\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 14]
    [D:\PROGRAM FILES\RISING\RISING\RAV\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\PROGRAM FILES\RISING\RISING\RAV\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [D:\PROGRAM FILES\RISING\RISING\RAV\HookCont.dll]  [Rising, 19, 0, 0, 0]
    [D:\Program files\Rising\Rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [D:\Program files\Rising\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
    [D:\Program files\Rising\Rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [D:\Program files\Rising\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [D:\Program files\Rising\Rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [D:\Program files\Rising\Rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 78]
    [D:\Program files\Rising\Rising\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36]
    [D:\Program files\Rising\Rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [D:\Program files\Rising\Rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [D:\Program files\Rising\Rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20]
    [D:\Program files\Rising\Rising\Rav\ScanPack.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 24]
    [D:\Program files\Rising\Rising\Rav\RsVM.dll]  [N/A, 19, 0, 0, 20]
    [D:\Program files\Rising\Rising\Rav\Uroutine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 53]
    [D:\Program files\Rising\Rising\Rav\Uscript.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [D:\Program files\Rising\Rising\Rav\ExtOLE.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 14]
    [D:\Program files\Rising\Rising\Rav\ScanNet.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [D:\Program files\Rising\Rising\Rav\RsStore.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[PID: 1644][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
    [C:\WINDOWS\system32\wlfpri.dll]  [N/A, N/A]
[PID: 1848][D:\PROGRAM FILES\RISING\RISING\RAV\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
    [D:\PROGRAM FILES\RISING\RISING\RAV\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\PROGRAM FILES\RISING\RISING\RAV\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 1972][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
gototop
 

[C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\myepri.dll]  [N/A, N/A]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.yer]  [N/A, N/A]
    [C:\WINDOWS\System32\tlupri.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\s2n40pr.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVDHMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVMSMON.DAT]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\msccrt.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\cmdbcs.dll]  [N/A, N/A]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [D:\Program files\Thurday5\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [C:\Program Files\Internet Explorer\ravztmon.dat]  [N/A, N/A]
    [C:\WINDOWS\System32\MsIMMs32.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\SHQMANGR.DLL]  [N/A, N/A]
    [D:\Program files\Rising\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 428][C:\WINDOWS\System32\dllcache\1028\svchost.exe]  [Microsoft Corporation, N/A]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
[PID: 1056][D:\Program files\Rising\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [D:\Program files\Rising\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [D:\Program files\Rising\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\Program files\Rising\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [D:\Program files\Rising\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\tlupri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\myepri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\msccrt.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\cmdbcs.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\MsIMMs32.dll]  [N/A, N/A]
[PID: 1072][D:\Program files\Rising\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45]
    [D:\Program files\Rising\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [D:\Program files\Rising\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [D:\Program files\Rising\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\Program files\Rising\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [D:\Program files\Rising\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [D:\Program files\Rising\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\Program files\Rising\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [D:\Program files\Rising\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Internet Explorer\RAVMSMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVDHMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\tlupri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\myepri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\msccrt.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\cmdbcs.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\ravztmon.dat]  [N/A, N/A]
    [C:\WINDOWS\System32\MsIMMs32.dll]  [N/A, N/A]
[PID: 960][C:\WINDOWS\System32\CTFMON.EXE]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\Program Files\Internet Explorer\RAVMSMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVDHMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\tlupri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\myepri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\msccrt.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\cmdbcs.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\MsIMMs32.dll]  [N/A, N/A]
[PID: 2740][C:\WINDOWS\System32\conime.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\Program Files\Internet Explorer\ravztmon.dat]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVMSMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVDHMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\MsIMMs32.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\cmdbcs.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\msccrt.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\tlupri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\myepri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
[PID: 1876][D:\Program files\TTjt\TTPlayer.exe]  [Alen Soft, 4, 6, 8, 0]
    [D:\Program files\TTjt\ttpcomm.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\ravztmon.dat]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVMSMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVDHMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, N/A]
    [D:\Program files\TTjt\ttpres.dll]  [Alen Soft, 4, 6, 8, 0]
    [D:\Program files\TTjt\msdmo.dll]  [Microsoft Corporation, 6.03.01.0400]
    [C:\WINDOWS\System32\MsIMMs32.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\cmdbcs.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\msccrt.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\tlupri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\myepri.dll]  [N/A, N/A]
    [D:\Program files\TTjt\AddIn\ttp_asf.dll]  [N/A, N/A]
    [D:\Program files\TTjt\AddIn\ttp_aac.dll]  [N/A, N/A]
    [D:\Program files\TTjt\AddIn\ttp_ac3dts.dll]  [N/A, N/A]
[PID: 1240][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\ravztmon.dat]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVMSMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVDHMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, N/A]
    [C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll]  [金泰丰(广州)科技有限公司, 2, 3, 0, 0]
    [D:\Program files\Thurday5\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [C:\WINDOWS\System32\MsIMMs32.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\cmdbcs.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\msccrt.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\tlupri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\myepri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
    [D:\Program files\Rising\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\System32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9d.ocx]  [Adobe Systems, Inc., 9,0,47,0]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.yer]  [N/A, N/A]
[PID: 2868][C:\DOCUME~1\w\LOCALS~1\Temp\Rar$EX00.095\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [C:\Program Files\Internet Explorer\ravztmon.dat]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVMSMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\RAVDHMON.DAT]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\SysWin64.Sys]  [N/A, N/A]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, N/A]
    [C:\WINDOWS\System32\MsIMMs32.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\cmdbcs.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\msccrt.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\tlupri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\myepri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\wlfpri.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\mssql.dll]  [N/A, N/A]
gototop
 

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
MSSQL Tcpip [TCP/IP]
    C:\WINDOWS\System32\mssql.dll(N/A, N/A)
MSSQL Tcpip [UDP/IP]
    C:\WINDOWS\System32\mssql.dll(N/A, N/A)

==================================
Autorun.inf
[D:\]
[AutoRun]
open=SysAuto.exe
shellexecute=SysAuto.exe
shell\打开(&O)\command=SysAuto.exe
[E:\]
[AutoRun]
open=AutoRun.exe
shellexecute=AutoRun.exe
shell\打开(&O)\command=AutoRun.exe

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================


[/CODE]
gototop
 

我和你的状况一样啊~!  那破进程时不时就开始加了~!怎么办啊????
gototop
 

晕死,还有问题呐。你用瑞星杀毒了吗?
不希望让你手动清除。风险很大。
再装瑞星卡卡(http://tool.ikaka.com)(免费)。用它也杀一遍。而且要用瑞星杀毒软件反复杀毒,反复重启再杀毒,总会清除的。
你是不是局域网啊,怎么病毒屡清不除。
gototop
 

好像是局域网啊 网上邻居上有好几台机子呢.
gototop
 

好像是局域网啊 网上邻居上有好几台机子呢.
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT