瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

12   2  /  2  页   跳转页

[求助] 中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

收藏
中病毒高手
头像
初生襁褓狮
  • 帖子:36
  • 注册: 2007-01-14
  • 来自:
发表于： 2009-04-22 18:05 | 只看楼主 短消息 资料
字号： 小 中 大 11楼

回复：中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

==================================
浏览器加载项
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[Adobe PDF Link Helper]
  {18DF081C-E8AD-4283-A596-FA578C2EBDC3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, (Signed) Adobe Systems Incorporated>
[IESuper]
  {1A49F431-2A2E-41a5-9080-0F41D1A3AEC2} <C:\PROGRA~1\IESuper\iesuper.dll, (Signed) IESuper.com>
[QQ工具栏]
  {29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\360safe\safemon\safemon.dll, (Signed) 360.CN>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\MICROS~1\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[]
  {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
[QQ工具栏]
  {29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[PhotoDrawEx Class]
  {05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} <C:\WINDOWS\system32\QQPhotoDrawEx.dll, (Signed) TENCENT>
[nEdit Control]
  {32D72994-45B9-42B5-8980-FB561D1BE2D0} <C:\WINDOWS\system32\nEdit\nEdit.ocx, (Signed) NetEase Information Technology (Beijing) Co. Ltd>
[]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <, >
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx, (Signed) Adobe Systems, Inc.>
[]
  {00000000-12C9-4305-82F9-43058F20E8D2} <, >
[]
  {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\\program files\\google\\googletoolbar1.dll, N/A>
[]
  {01443AEB-0FD1-40FD-9C87-E93D1494C233} <, >
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[ActiveMovieControl Object]
  {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
[PhotoDrawEx Class]
  {05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} <C:\WINDOWS\system32\QQPhotoDrawEx.dll, (Signed) TENCENT>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[]
  {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} <, >
[Player Class]
  {11F2A418-94B2-4e16-9B0C-B00C0435F903} <d:\QQLive\LiveMedia.dll, (Signed) Tencent>
[Adobe PDF Link Helper]
  {18DF081C-E8AD-4283-A596-FA578C2EBDC3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, (Signed) Adobe Systems Incorporated>
[IESuperHelper]
  {1A49F431-2A2E-41A5-9080-0F41D1A3AEC1} <C:\PROGRA~1\IESuper\iesuper.dll, (Signed) IESuper.com>
[IESuper]
  {1A49F431-2A2E-41A5-9080-0F41D1A3AEC2} <C:\PROGRA~1\IESuper\iesuper.dll, (Signed) IESuper.com>
[InstallHelper Class]
  {1DABF8D5-8430-4985-9B7F-A30E53D709B3} <d:\QQLive\QQLiveInstaller.dll, (Signed) >
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
[]
  {2318C2B1-4965-11D4-9B18-009027A5CD4F} <, >
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, (Signed) N/A>
[QQ工具栏]
  {29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
[nEdit Control]
  {32D72994-45B9-42B5-8980-FB561D1BE2D0} <C:\WINDOWS\system32\nEdit\nEdit.ocx, (Signed) NetEase Information Technology (Beijing) Co. Ltd>
[Tabular Data Control]
  {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, (Signed) Microsoft Corporation>
[IETag Factory]
  {38481807-CA0E-42D2-BF39-B33AF135CC4D} <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, (Signed) Microsoft Corporation>
[Microsoft Office Control]
  {4453D895-F2A1-4A38-A285-1EF9BD3F6D5D} <D:\MICROS~1\OFFICE11\AUTHZAX.DLL, (Signed) Microsoft Corporation>
[XML Document]
  {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <, >
[]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <, >
[XML Data Source Object]
  {550DDA30-0541-11D2-9CA9-0060B0EC3D39} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[]
  {571ED1E4-CF9F-4784-A375-A404501AFA0D} <, >
[]
  {57421194-58FB-49AE-9B4F-FD48869B9AD4} <, >
[]
  {5967ABFB-C66C-4347-ADF4-59F4BA6A8520} <, >
[]
  {59BC54A2-56B3-44A0-93E5-432D58746E26} <, >
[HanGamePluginCn18 Class]
  {61F5C358-60FB-4A23-A312-D2B556620F20} <C:\WINDOWS\downloaded program files\hangameplugincn18.dll, >
[]
  {6354ABE6-05F1-49ED-B850-E423120EC338} <, >
[XMP Class]
  {6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, Xunlei Networking Technologies,LTD>
[]
  {6671A433-5C3D-463D-A7CF-5587F9B7E191} <, >
[XDRM]
  {693571CB-54A3-4E90-9D52-EEAE1334E2D3} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work, >
[QQLiveFile Class]
  {6B232760-90F1-41c3-9902-C8552C1D8A72} <d:\QQLive\FileVersion.dll, (Signed) Tencent>
[StormPlayer Object]
  {6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB} <E:\影音风暴\mps.dll, (Signed) 北京暴风网际科技有限公司>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, >
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin18.dll, (Signed) Thunder Networking Technologies,LTD>
[UUPlayerOCX Control]
  {77910CD3-5447-4CCB-92DE-35BA8198BE81} <H:\E盘文件\电影\uusee\UUPlayer.ocx, N/A>
[]
  {77FEF28E-EB96-44FF-B511-3185DEA48697} <, >
[]
  {7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2} <, >
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <D:\360safe\live.dll, (Signed) 360.cn>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, (Signed) Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {89AE5F82-410A-4040-9387-68D1144EFD03} <, >
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, >
[]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[]
  {9CA74596-B5BB-4634-971C-F0224115A15F} <, >
[RMGetLicense Class]
  {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, (Signed) Microsoft Corporation>
[]
  {AA58ED58-01DD-4D91-8333-CF10577473F7} <, >
[]
  {AC414988-E5BB-4C2C-873B-EA53D2F3D23A} <, >
[DapCtrl Class]
  {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5803.60.(295).dll, ShenZhen Thunder Networking Technologies Ltd.>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, (Signed) Microsoft Corporation>
[GlobalLink Chat Control]
  {AE93C5DF-A990-11D1-AEBD-5254ABDD2B69} <e:\游戏\联众世界\GLChat.ocx, GlobalLink>
[]
  {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <, >
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[]
  {B580CF65-E151-49C3-B73F-70B13FCA8E86} <, >
[]
  {B69F34DC-F0F9-42DC-9EDD-957187DA688D} <, >
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\360safe\safemon\safemon.dll, (Signed) 360.CN>
[WebPlayer Class]
  {B965124A-7C58-45f8-91BF-28A981CE7594} <d:\QQLive\WebLiveMedia.dll, (Signed) Tencent>
[]
  {BC7FFEA0-CCEB-486B-80F7-C1EBBFCED38F} <, >
[]
  {BC7FFEA1-CCEB-486B-80F7-C1EBBFCED38F} <, >
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, (Signed) Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\Program Files\StormII\Codec\rmoc3260.dll, (Signed) RealNetworks, Inc.>
[]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx, (Signed) Adobe Systems, Inc.>
[QQLive Class]
  {D9EBCF5D-3F8F-4b6a-89BA-70577BE73C62} <d:\QQLive\LiveAPI.dll, (Signed) Tencent>
[PlayerCtrl Class]
  {E05BC2A3-9A46-4A32-80C9-023A473F5B23} <E:\游戏\QQ\Plugin\Com.Tencent.QQMusic\bin\QQMusic\QzoneMusic.dll, (Signed) 深圳腾讯科技>
[]
  {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <, >
[PasswordEditCtrl Class]
  {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, (Signed) 腾讯科技（深圳）有限公司>
[BoBoControl Class]
  {EC0978ED-24E3-403C-AB7A-060E388553E6} <C:\WINDOWS\system32\BoBo_ActiveX_V3.ocx, (Signed) 广州易播信息科技有限公司>
[]
  {ECF2E268-F28C-48D2-9AB7-8F69C11CCB71} <, >
[Thunder DapPlayer]
  {EEDD6FF9-13DE-496B-9A1C-D78B3215E266} <C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DapPlayer3.0.5712.71.295.dll, ShenZhen Thunder Networking Technologies Ltd.>
[QvodCtrl Class]
  {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\benten\QvodInsert.dll, N/A>
[XPPlayer Class]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.0.0.181.(295).dll, Xunlei Networking Technologies,LTD>
[IEDown Class]
  {F917534D-535B-416B-8E8F-0C04756C31A8} <C:\WINDOWS\system32\GLIEDown2.dll, (Signed) 联众公司>
[]
  {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <, >
[]
  {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[]
  {FD00D911-7529-4084-9946-A29F1BDF4FE5} <, >
[&V使用Vagaa哇嘎下载]
  <E:\嘎哇\data\vg.htm, N/A>
[&使用QQ旋风下载]
  <C:\Program Files\Tencent\QQDownload2\geturl.htm, N/A>
[&使用QQ旋风下载全部链接]
  <C:\Program Files\Tencent\QQDownload2\getAllurl.htm, N/A>
[使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ表情]
  <E:\游戏\QQ\AddEmotion.htm, N/A>
[用比特精灵下载(&B)]
  <E:\BitSpirit\bsurl.htm, N/A>
gototop
 
中病毒高手
头像
初生襁褓狮
  • 帖子:36
  • 注册: 2007-01-14
  • 来自:
发表于： 2009-04-22 18:05 | 只看楼主 短消息 资料
字号： 小 中 大 12楼

回复：中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

==================================
正在运行的进程
[PID: 700 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 724 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 768 / SYSTEM][C:\WINDOWS\system32\services.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
    [C:\WINDOWS\system32\SCESRV.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
[PID: 780 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 944 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1004 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
[PID: 1124 / SYSTEM][C:\Program Files\Rising\Rav\CCENTER.EXE]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
    [C:\Program Files\Rising\Rav\combase.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\cnt09.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37]
    [C:\Program Files\Rising\Rav\cnt08.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1132 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [c:\windows\system32\QUtil.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [c:\windows\system32\ESENT.dll]  [Microsoft Corporation, 5.1.2468.0 (Lab03_N(jliem).010306-1456)]
    [C:\WINDOWS\System32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [c:\windows\system32\audiosrv.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
[PID: 1188 / SYSTEM][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24]
    [C:\Program Files\Rising\Rav\proccomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\Rav\rsconf.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.18]
    [C:\Program Files\Rising\Rav\rstask.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 36]
    [C:\Program Files\Rising\Rav\rsstub.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1240 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1344 / SYSTEM][C:\Program Files\Rising\Rav\RavMonD.exe]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\combase.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Rising\Rav\moncomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12]
    [C:\Program Files\Rising\Rav\MonBase.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6]
    [C:\Program Files\Rising\Rav\Rslog.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.34]
    [C:\Program Files\Rising\Rav\mondrv.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9]
    [C:\Program Files\Rising\Rav\defmon.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 31]
    [C:\Program Files\Rising\Rav\moncom08.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\MonRule.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9]
    [C:\Program Files\Rising\Rav\FileMon.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 22]
    [C:\Program Files\Rising\Rav\MailMon.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\proccomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.18]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\Hooksys.dll]  [Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 18]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HookCont.dll]  [Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 12]
    [C:\Program Files\Rising\Rav\rsnetsvr.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14]
    [C:\Program Files\Rising\Rav\BACore.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 22]
    [C:\Program Files\Rising\Rav\recomp.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\refs.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\RSStore.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 10]
    [C:\Program Files\Rising\Rav\ScanAdd.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.17]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.36]
    [C:\Program Files\Rising\Rav\viruslib.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\relibldr.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\Program Files\Rising\Rav\ffr.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\nvfile.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\extfile.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13]
    [C:\Program Files\Rising\Rav\scanexec.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5]
    [C:\Program Files\Rising\Rav\unexe.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\scanex.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 34]
    [C:\Program Files\Rising\Rav\pearc.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\scanpe.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\ur000.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12]
    [C:\Program Files\Rising\Rav\urutils.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\revm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\ur001.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7]
    [C:\Program Files\Rising\Rav\scansct.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\extmail.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5]
    [C:\Program Files\Rising\Rav\ur023.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5]
    [C:\Program Files\Rising\Rav\scriptci.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\uroutine.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\ur004.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\ur027.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5]
    [C:\Program Files\Rising\Rav\ur025.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
    [C:\Program Files\Rising\Rav\ur019.dat]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1]
[PID: 1480 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\hpzll3xu.dll]  [Hewlett-Packard Company, 60.051.641.00]
    [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.1897.0]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\hpzpp3xu.dll]  [Hewlett-Packard Corporation, 60.051.641.00]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.1897.0]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
[PID: 1632 / SYSTEM][C:\Program Files\Rising\Rav\rsnetsvr.exe]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 15]
    [C:\Program Files\Rising\Rav\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.12]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\ProcComm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\shell32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
[PID: 1656 / Administrator][C:\WINDOWS\Explorer.exe]  [(Verified) Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 9.0.0.2008061100]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 9.0.0.0]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.11.8206]
    [C:\WINDOWS\system32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.8206]
    [C:\WINDOWS\system32\nvshell.dll]  [, ]
    [C:\WINDOWS\system32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [E:\游戏\QQ\qdshm.dll]  [, 1, 0, 101, 20]
    [E:\游戏\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.29]
    [C:\WINDOWS\system32\icm32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [D:\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1007]
[PID: 676 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.11.8206]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\nvapi.dll]  [NVIDIA Corporation, 6.14.11.8206]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 900 / SYSTEM][C:\Program Files\Rising\Rav\ScanFrm.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.11]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Rising\Rav\combase.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\Program Files\Rising\Rav\moncomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12]
    [C:\Program Files\Rising\Rav\scansrvp.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.12]
    [C:\Program Files\Rising\Rav\proccomm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\Program Files\Rising\Rav\ScanSrv.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.10]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\Program Files\Rising\Rav\ScanRavT.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.25]
    [C:\Program Files\Rising\Rav\ScanBT.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.44]
    [C:\Program Files\Rising\Rav\ScanStub.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.9]
    [C:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.34]
    [C:\Program Files\Rising\Rav\ScanAdd.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.17]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.18]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.36]
    [C:\Program Files\Rising\Rav\recomp.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\refs.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3]
    [C:\Program Files\Rising\Rav\viruslib.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\relibldr.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
[PID: 932 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1044 / SYSTEM][C:\Program Files\UiTV\UiPlayer\msrv.exe]  [UiTV Corporation, 1, 0, 1, 4]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\Program Files\UiTV\UiPlayer\UiPlay.dll]  [UiTV Corporation, 3.0.5.9]
    [C:\WINDOWS\system32\WMASF.DLL]  [Microsoft Corporation, 10.00.00.4060 built by: Microsoft]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
    [C:\WINDOWS\system32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
[PID: 184 / Administrator][C:\WINDOWS\Paizhao.EXE]  [ZSMCSNAP, 3, 6, 818, 7]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [C:\WINDOWS\system32\VM303Prp.Ax]  [Vimicro, 3, 6, 411, 13]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
[PID: 2004 / Administrator][C:\WINDOWS\Recovery.EXE]  [Vimicro, 4, 2, 1124, 6]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
[PID: 1736 / Administrator][C:\WINDOWS\VM303_STI.EXE]  [Vimicro, 3, 5, 930, 9]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
gototop
 
中病毒高手
头像
初生襁褓狮
  • 帖子:36
  • 注册: 2007-01-14
  • 来自:
发表于： 2009-04-22 18:05 | 只看楼主 短消息 资料
字号： 小 中 大 13楼

回复：中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

[C:\WINDOWS\system32\VM303Prp.Ax]  [Vimicro, 3, 6, 411, 13]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
[PID: 1084 / Administrator][C:\Program Files\Rising\Rav\RsTray.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.22]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\Program Files\Rising\Rav\ComServ.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.49]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Rising\Rav\rslang.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28]
    [C:\Program Files\Rising\Rav\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\Rav\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rav\rsxml.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
    [C:\Program Files\Rising\Rav\ProcComm.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
    [C:\Program Files\Rising\Rav\MonState.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7]
    [C:\Program Files\Rising\Rav\ScanEvnt.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.14]
    [C:\Program Files\Rising\Rav\rsguilib.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 73]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\Rav\rsconf.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.18]
    [C:\Program Files\Rising\Rav\rspalvd.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.24]
    [C:\Program Files\Rising\Rav\ravbintl.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28]
    [C:\Program Files\Rising\Rav\mruleui.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 10]
    [C:\Program Files\Rising\Rav\MonTray.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.1.0]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RavITray.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 23]
    [C:\Program Files\Rising\Rav\ScanPrxy.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.16]
    [C:\Program Files\Rising\Rav\rsmginfo.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\WINDOWS\system32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
[PID: 1664 / Administrator][C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe]  [Conexant Systems Inc., 2.099.060.000]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\Program Files\Conexant\AccessRunner ADSL\CnxDslWz.dll]  [Conexant Systems Inc., 2.099.060.000]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\CnxHwIo.dll]  [Conexant Systems Inc., 2.099.060.000]
    [C:\WINDOWS\system32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
[PID: 1804 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 2660 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 2772 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 2932 / Administrator][d:\AntiSpyware\rstray.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.16]
    [d:\AntiSpyware\rsmginfo.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [d:\AntiSpyware\RsXML.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    [d:\AntiSpyware\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [d:\AntiSpyware\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [d:\AntiSpyware\ComServ.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.31]
    [d:\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [d:\AntiSpyware\rscommon.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.1.1]
    [d:\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [d:\AntiSpyware\pngdll.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [d:\AntiSpyware\runiep.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.42]
    [d:\AntiSpyware\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.11]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [d:\AntiSpyware\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\WINDOWS\system32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
[PID: 3372 / Administrator][C:\Program Files\Tencent\TT\bin\ttraveler.exe]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\TTUtilWidget.dll]  [Tencent, 4, 23, 0, 16]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [d:\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [d:\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\Program Files\Tencent\TT\bin\PlatformWidget.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\TTMainFrame.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\UpdateUtil.dll]  [N/A, ]
    [C:\Program Files\Tencent\TT\bin\TTStore.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\sqlite3.dll]  [N/A, ]
    [C:\Program Files\Tencent\TT\bin\TTMBrowser.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\TTabMgr.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\TTSkin.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\FavoriteLogical.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]
    [C:\Program Files\Tencent\TT\bin\TTPluginMng.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\Plugins\3TTWeather\TTWeather.dll]  [Tencent, 1.0.0.1]
    [C:\Program Files\Tencent\TT\Plugins\WebInfo\WebToolbar.dll]  [Tencent, 1.0.0.1]
    [C:\Program Files\Tencent\TT\bin\TTHtmlApp.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\TTFilter.dll]  [Tencent, 4, 23, 0, 16]
    [C:\Program Files\Tencent\TT\bin\TTNetwork.dll]  [Tencent, 4, 23, 0, 16]
    [C:\WINDOWS\system32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.70]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Tencent\TT\bin\TSupport.dll]  [TENCENT Inc., 1, 2, 11, 201]
    [C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx]  [Adobe Systems, Inc., 10,0,12,36]
    [C:\WINDOWS\system32\QQPINYIN.IME]  [Tencent, 1.7.393.201]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12]
[PID: 2936 / Administrator][d:\AntiSpyware\knownsvr.exe]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.14]
    [d:\AntiSpyware\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.11]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [d:\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [d:\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[PID: 2852 / Administrator][D:\注册表修复\SRE26d75638.EXE]  [Smallfrogs Studio, 2.7.0.1210]
    [C:\WINDOWS\system32\SHELL32.dll]  [Microsoft Corporation, 6.00.2900.5686 (xpsp_sp3_gdr.080929-1314)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [d:\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [d:\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [D:\注册表修复\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
    [C:\WINDOWS\system32\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [C:\Program Files\Bonjour\mdnsNSP.dll]  [Apple Computer, Inc., 1,0,3,1]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
gototop
 
中病毒高手
头像
初生襁褓狮
  • 帖子:36
  • 注册: 2007-01-14
  • 来自:
发表于： 2009-04-22 18:06 | 只看楼主 短消息 资料
字号： 小 中 大 14楼

回复：中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 676, C:\WINDOWS\SYSTEM32\NVSVC32.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 184, C:\WINDOWS\PAIZHAO.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2004, C:\WINDOWS\RECOVERY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1736, C:\WINDOWS\VM303_STI.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1664, C:\PROGRAM FILES\CONEXANT\ACCESSRUNNER ADSL\CNXDSLTB.EXE]

==================================
计划任务
N/A

==================================
API HOOK
RVA  错误： NtCreateFile (危险等级: 高,  被下面模块所HOOK: 0x003C56C8)
RVA  错误： NtCreateKey (危险等级: 高,  被下面模块所HOOK: 0x003C5868)
NtCreateProcess (危险等级: 一般,  被下面模块所HOOK: )
NtCreateProcessEx (危险等级: 一般,  被下面模块所HOOK: )
NtCreateThread (危险等级: 一般,  被下面模块所HOOK: )
NtDeleteFile (危险等级: 高,  被下面模块所HOOK: )
NtEnumerateKey (危险等级: 高,  被下面模块所HOOK: )
NtEnumerateValueKey (危险等级: 高,  被下面模块所HOOK: )
NtFsControlFile (危险等级: 高,  被下面模块所HOOK: )
RVA  错误： NtLoadDriver (危险等级: 高,  被下面模块所HOOK: 0x003C5FB8)
NtLoadKey2 (危险等级: 高,  被下面模块所HOOK: )
NtLoadKey (危险等级: 高,  被下面模块所HOOK: )
NtOpenKey (危险等级: 高,  被下面模块所HOOK: )
NtOpenProcess (危险等级: 高,  被下面模块所HOOK: )
NtOpenThread (危险等级: 高,  被下面模块所HOOK: )
NtQueryDirectoryFile (危险等级: 高,  被下面模块所HOOK: )
NtQueryDirectoryObject (危险等级: 高,  被下面模块所HOOK: )
NtQueryFullAttributesFile (危险等级: 高,  被下面模块所HOOK: )
NtQueryInformationFile (危险等级: 高,  被下面模块所HOOK: )
NtQueryInformationPort (危险等级: 高,  被下面模块所HOOK: )
NtQueryInformationProcess (危险等级: 高,  被下面模块所HOOK: )
NtQueryInformationThread (危险等级: 高,  被下面模块所HOOK: )
NtQuerySystemInformation (危险等级: 高,  被下面模块所HOOK: )
NtReadFile (危险等级: 一般,  被下面模块所HOOK: )
NtRenameKey (危险等级: 一般,  被下面模块所HOOK: )
NtReplaceKey (危险等级: 高,  被下面模块所HOOK: )
NtRestoreKey (危险等级: 高,  被下面模块所HOOK: )
NtSaveKey (危险等级: 高,  被下面模块所HOOK: )
NtSaveKeyEx (危险等级: 高,  被下面模块所HOOK: )
NtSetInformationFile (危险等级: 高,  被下面模块所HOOK: )
NtSetInformationKey (危险等级: 高,  被下面模块所HOOK: )
NtSetInformationProcess (危险等级: 高,  被下面模块所HOOK: )
NtSetInformationThread (危险等级: 高,  被下面模块所HOOK: )
NtSetSystemInformation (危险等级: 高,  被下面模块所HOOK: )
RVA  错误： NtSetValueKey (危险等级: 高,  被下面模块所HOOK: 0x003C5938)
NtTerminateProcess (危险等级: 高,  被下面模块所HOOK: )
NtTerminateThread (危险等级: 高,  被下面模块所HOOK: )
RVA  错误： NtWriteFile (危险等级: 高,  被下面模块所HOOK: 0x003C5798)
RVA  错误： ZwCreateFile (危险等级: 高,  被下面模块所HOOK: 0x003C56C8)
RVA  错误： ZwCreateKey (危险等级: 高,  被下面模块所HOOK: 0x003C5868)
ZwCreatePort (危险等级: 一般,  被下面模块所HOOK: )
ZwCreateProcess (危险等级: 一般,  被下面模块所HOOK: )
ZwCreateProcessEx (危险等级: 一般,  被下面模块所HOOK: )
ZwCreateThread (危险等级: 一般,  被下面模块所HOOK: )
ZwDeleteFile (危险等级: 高,  被下面模块所HOOK: )
ZwDeleteKey (危险等级: 高,  被下面模块所HOOK: )
ZwEnumerateKey (危险等级: 高,  被下面模块所HOOK: )
ZwEnumerateValueKey (危险等级: 高,  被下面模块所HOOK: )
ZwFsControlFile (危险等级: 高,  被下面模块所HOOK: )
ZwOpenFile (危险等级: 一般,  被下面模块所HOOK: )
ZwOpenProcess (危险等级: 一般,  被下面模块所HOOK: )
ZwOpenThread (危险等级: 一般,  被下面模块所HOOK: )
ZwQueryDirectoryFile (危险等级: 高,  被下面模块所HOOK: )
ZwQueryInformationFile (危险等级: 高,  被下面模块所HOOK: )
ZwQueryInformationProcess (危险等级: 高,  被下面模块所HOOK: )
ZwQueryInformationThread (危险等级: 高,  被下面模块所HOOK: )
ZwReadFile (危险等级: 一般,  被下面模块所HOOK: )
ZwRenameKey (危险等级: 一般,  被下面模块所HOOK: )
ZwReplaceKey (危险等级: 高,  被下面模块所HOOK: )
ZwRestoreKey (危险等级: 高,  被下面模块所HOOK: )
ZwSaveKey (危险等级: 高,  被下面模块所HOOK: )
ZwSaveKeyEx (危险等级: 高,  被下面模块所HOOK: )
ZwSetInformationFile (危险等级: 高,  被下面模块所HOOK: )
ZwSetInformationKey (危险等级: 高,  被下面模块所HOOK: )
ZwSetInformationProcess (危险等级: 高,  被下面模块所HOOK: )
ZwSetInformationThread (危险等级: 高,  被下面模块所HOOK: )
ZwSetSystemInformation (危险等级: 高,  被下面模块所HOOK: )
RVA  错误： ZwSetValueKey (危险等级: 高,  被下面模块所HOOK: 0x003C5938)
ZwSetVolumeInformationFile (危险等级: 高,  被下面模块所HOOK: )
ZwShutdownSystem (危险等级: 高,  被下面模块所HOOK: )
ZwTerminateProcess (危险等级: 高,  被下面模块所HOOK: )
ZwTerminateThread (危险等级: 高,  被下面模块所HOOK: )
RVA  错误： ZwWriteFile (危险等级: 高,  被下面模块所HOOK: 0x003C5798)
RVA  错误： CreateServiceA (危险等级: 高,  被下面模块所HOOK: 0x003C5C78)
RVA  错误： CreateServiceW (危险等级: 高,  被下面模块所HOOK: 0x003C5D48)
入口点错误：LoadLibraryA (危险等级: 高,  被下面模块所HOOK: 0x003C697D)
入口点错误：LoadLibraryExW (危险等级: 高,  被下面模块所HOOK: 0x003C5565)
入口点错误：CreateFileW (危险等级: 高,  被下面模块所HOOK: 0x003C649D)
入口点错误：CreateProcessA (危险等级: 高,  被下面模块所HOOK: 0x003C68AD)
入口点错误：CreateProcessW (危险等级: 高,  被下面模块所HOOK: 0x003C670D)

==================================
隐藏进程
N/A

==================================


[/CODE]
gototop
 
中病毒高手
头像
初生襁褓狮
  • 帖子:36
  • 注册: 2007-01-14
  • 来自:
发表于： 2009-04-22 18:07 | 只看楼主 短消息 资料
字号： 小 中 大 15楼

回复：中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

本人在线等结果~  谢谢啦
gototop
 
badboyhhz
头像
锋芒艾服狮
  • 帖子:2139
  • 注册: 2009-01-29
  • 来自:山水之城
论坛8周年活动礼物
发表于： 2009-04-22 19:18 | 短消息 资料
字号： 小 中 大 16楼

回复：中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

以附件形式发上来  这样子看眼都看花了
~♀~要知道方法总比问题多，每天记得留点时间给自己反省♀~
gototop
 
中病毒高手
头像
初生襁褓狮
  • 帖子:36
  • 注册: 2007-01-14
  • 来自:
发表于： 2009-04-22 20:28 | 只看楼主 短消息 资料
字号： 小 中 大 17楼

回复：中毒了！瑞星杀不出此病毒~ 无奈请求帮助！

帮帮忙啊  已经传上去了
gototop
 
<<上一主题|下一主题>>
12   2  /  2  页   跳转页
页面顶部
Powered by Discuz!NT