不言放弃大哥救救我啊~如何删除Rootkit.Vanti.gen病毒 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛不言放弃大哥救救我啊~如何删除Rootkit.Vanti.gen病毒

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

不言放弃大哥救救我啊~如何删除Rootkit.Vanti.gen病毒

风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	发表于： 2006-04-15 11:46 \| 只看楼主短消息资料字号：小中大 1楼不言放弃大哥救救我啊~如何删除Rootkit.Vanti.gen病毒安全模式查不出毒进入系统就提示有毒病毒路径C：WINDOWS/TEMP/wi.dll 我的日志，请大哥帮忙看看，我是菜鸟大哥要说的详细点啊~ 先谢谢了，路过知道的也帮忙看看啊 HijackThis@Qoo的扫描日志 V1.97.7 Scan saved at 11:35:10, on 2006-4-15 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe D:\Program Files\rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe D:\Program Files\rising\Rav\Ravmond.exe d:\program files\rising\rfw\rfwsrv.exe C:\WINDOWS\system32\spoolsv.exe D:\Program Files\rising\Rav\RavStub.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\VM303_STI.EXE C:\Program Files\CNNIC\Cdn\cdnup.exe C:\Program Files\Common Files\UPDAT\Update.exe D:\Program Files\rising\Rav\RavTask.exe C:\WINDOWS\system32\conime.exe D:\Program Files\rising\Rav\RsAgent.exe C:\WINDOWS\msagent\AgentSvr.exe D:\Program Files\QQ2005beat3\QQ.exe D:\Program Files\QQ2005beat3\TIMPlatform.exe C:\Program Files\Internet Explorer\iexplore.exe D:\Program Files\Thunder Network\Thunder\Thunder.exe D:\Program Files\Rising\Rfw\rfwmain.exe C:\Program Files\Tencent\TT\TTraveler.exe C:\Program Files\WinRAR\WinRAR.exe C:\WINDOWS\explorer.exe D:\各种小程序安装]\hijackthis1.97_qoo\HijackThis.exe O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v13.dll O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (file missing) O2 - BHO: (no name) - {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} - C:\Program Files\CoolWebsite\QuickLink.dll O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll (file missing) O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\Program Files\QQ2005beat3\QQIEHelper.dll O2 - BHO: (no name) - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL (file missing) O2 - BHO: (no name) - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll O2 - BHO: (no name) - {78C21EFD-53BA-406C-AF1A-33A38ABD3958} - C:\Program Files\LtUcx\1002\c0.dll O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FLASHGET\jccatch.dll (file missing) O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - C:\PROGRA~1\KuGoo2\KUGOO3~1.OCX O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: (no name) - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll O3 - Toolbar: ????? - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FLASHGET\fgiebar.dll (file missing) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera 301PLH O4 - HKLM\..\Run: [CdnCtr] C:\Program Files\CNNIC\Cdn\cdnup.exe O4 - HKLM\..\Run: [Update] C:\Program Files\Common Files\UPDAT\Update.exe O4 - HKLM\..\Run: [RfwMain] "D:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\Run: [RavTask] "D:\Program Files\rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\RunOnce: [RavStub] "D:\Program Files\rising\Rav\ravstub.exe" /RUNONCE O4 - Startup: ntuser.dat.LOG O4 - Startup: ntuser.ini O4 - Startup: New Oriental Words 3-DianNaoBao.cfg O4 - Startup: std.out O4 - Startup: trail.txt.1 O4 - Startup: trail.txt.2 O4 - Startup: dbisam.lck O4 - Startup: sys_log_184276281.upt O4 - Startup: NTUSER.DAT O4 - Startup: uninstalldrv.exe O4 - Global Startup: ntuser.dat O4 - Global Startup: ntuser.dat.LOG O8 - Extra context menu item: &使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\geturl.htm O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - Extra context menu item: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\QQ2005beat3\AddToNetDisk.htm O8 - Extra context menu item: 使用KuGoo3下载(&K) - C:\Program Files\KuGoo2\KuGoo3DownX.htm O8 - Extra context menu item: 反向链接 - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\QQ2005beat3\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\QQ2005beat3\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\QQ2005beat3\SendMMS.htm O8 - Extra context menu item: 百度-搜索MP3 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM O8 - Extra context menu item: 百度-搜索图片 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM O8 - Extra context menu item: 百度-搜索新闻 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM O8 - Extra context menu item: 百度-搜索歌词 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM O8 - Extra context menu item: 百度-搜索网页 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM O8 - Extra context menu item: 百度-搜索贴吧 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM O8 - Extra context menu item: 百度-词典搜索 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM O8 - Extra context menu item: 类似网页 - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: 访问通用网址 - C:\Program Files\CNNIC\Cdn\cnnic.htm O8 - Extra context menu item: 豪杰超级解霸V8实时播放 - C:\Herosoft\HeroV8\MPURLGET.HTM O9 - Extra button: QQ (HKLM) O9 - Extra button: FlashGet (HKLM) O9 - Extra 'Tools' menuitem: &FlashGet (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll O11 - Options group: [CDNCLIENT] O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab O16 - DPF: {9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} (LiveMediaOcx Control) - http://dl_dir.qq.com/qqtv/QQLiveOcxSetup.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/QQ/QQkill/rsonline.cab 2006-04-16 01:28:28
风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	分享到：

不言放弃社区嘉宾帖子:30678 注册: 2004-09-17 来自:蓝色星球	发表于： 2006-04-15 11:49 \| 短消息资料字号：小中大 2楼【回复“风过无烟”的帖子】 http://forum.ikaka.com/topic.asp?board=28&artid=6979213 下载System Repair Engineer 2.0.12.350 导出全部日志
不言放弃社区嘉宾帖子:30678 注册: 2004-09-17 来自:蓝色星球

风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	发表于： 2006-04-15 13:34 \| 只看楼主短消息资料字号：小中大 3楼 System Repair Engineer 2.0.12.350 (2.0 RC 1) Windows XP Professional Service Pack 2 - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <nwiz><nwiz.exe /install> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <SoundMan><SOUNDMAN.EXE> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <BigDog303><C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera 301PLH> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <Update><C:\Program Files\Common Files\UPDAT\Update.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RfwMain><"D:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <MSConfig><C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RavTask><"D:\Program Files\rising\Rav\RavTask.exe" -system> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <RavStub><"D:\Program Files\rising\Rav\ravstub.exe" /RUNONCE> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <Userinit><userinit.exe,> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N> ================================== 服务 [Routing Protect Access / BNESS] <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A> [C-DillaCdaC11BA / C-DillaCdaC11BA] <C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision> [C-DillaSrv / C-DillaSrv] <C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE><C-Dilla Ltd> [FLEXlm server for PTC / FLEXlm server for PTC] <><N/A> [HServer / HServer] <C:\WINDOWS\HServer.exe><N/A> [InstallDriver Table Manager / IDriverT] <"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation> [NVIDIA Display Driver Service / NVSvc] <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation> [Rising Proxy Service / RfwProxySrv] <d:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <d:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"D:\Program Files\rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"D:\Program Files\rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:

风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	发表于： 2006-04-15 13:35 \| 只看楼主短消息资料字号：小中大 4楼浏览器加载项 [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v13.dll, Thunder Networking Technologies,LTD> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX, N/A> [QuickBtn] {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} <C:\Program Files\CoolWebsite\QuickLink.dll, Fengcent> [Yahoo!Photo] {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Program Files\QQ2005beat3\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [DragSearch BHO] {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, N/A> [BandIE Class] {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [ltmenu Class] {78C21EFD-53BA-406C-AF1A-33A38ABD3958} <C:\Program Files\LtUcx\1002\c0.dll, 北京莲塘软件技术有限公司> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\PROGRA~1\FLASHGET\jccatch.dll, N/A> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo2\KUGOO3~1.OCX, N/A> [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.> [WMHlprObj Class] {F5824EFB-728A-4726-A5A5-85A68B20EDC3} <C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll, CNNIC> [QuickBtn] {1D901067-2529-4A9B-9B6B-7A1DB3A44CB5} <C:\Program Files\CoolWebsite\QuickLink.dll, Fengcent> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, N/A> [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [视频聊天] {6924091F-CD97-41E1-B1D4-D9079409D413} <http://www.liantang.net, N/A> [寻论网--中学作业解答] {6924091F-CD97-41E1-B1D4-D9079409D423} <http://www.xunlun.com, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\QQ2005beat3\QQ.EXE, TENCENT> [FlashGet] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <, N/A> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Program Files\QQ2005beat3\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [百度超级搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\PROGRA~1\FLASHGET\fgiebar.dll, N/A> [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.> [WebActivater Control] {3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINDOWS\system32\WEBACT~1.OCX, QQ> [LiveMediaOcx Control] {9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} <D:\PROGRA~1\Tencent\QQLive\qqlive.ocx, Tencent> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [Ravonline] {DA984A6D-508E-11D6-AA49-0050FF3C628D} <C:\WINDOWS\Downloaded Program Files\RsOnline.dll, Beijing Rising Tech. Co., Ltd.> [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v13.dll, Thunder Networking Technologies,LTD> [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar2.dll, Google Inc.> [ActiveMovieControl Object] {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX, N/A> [Web Browser Applet Control] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation> [QuickBtn] {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} <C:\Program Files\CoolWebsite\QuickLink.dll, Fengcent> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [BlueskyVideo Control] {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} <d:\PROGRA~1\bluesky\BLUESK~1\v2.ocx, 蓝天工作室(http://www.bluesky.cn)> [Tabular Data Control] {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation> [Yahoo!Photo] {33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, N/A> [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Program Files\QQ2005beat3\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [DragSearch BHO] {62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, N/A> [IMCv1 Control] {6924091F-CD97-41E1-B1D4-D9079409D413} <C:\PROGRA~1\LtUcx\1003\c0.dll, 北京莲塘软件技术有限公司 Liantang Software Tech. Inc. (http://www.lotuspond.com.cn)> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [BandIE Class] {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [ltmenu Class] {78C21EFD-53BA-406C-AF1A-33A38ABD3958} <C:\Program Files\LtUcx\1002\c0.dll, 北京莲塘软件技术有限公司> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Blueskyvoice Control] {991481A7-4669-4E15-8C24-100404E1F5CB} <d:\PROGRA~1\bluesky\BLUESK~1\BLUESK~1.OCX, 蓝天工作室(http://www.bluesky.cn)> [CNNIC_IDN] {9A578C98-3C2F-4630-890B-FC04196EF420} <C:\WINDOWS\system32\cdn.dll, CNNIC> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\PROGRA~1\FLASHGET\jccatch.dll, N/A> [Tool Class] {A7F05EE4-0426-454F-8013-C41E3596E9E9} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <C:\PROGRA~1\KuGoo2\KUGOO3~1.OCX, N/A> [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [百度超级搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\PROGRA~1\FLASHGET\fgiebar.dll, N/A> [WMHlprObj Class] {F5824EFB-728A-4726-A5A5-85A68B20EDC3} <C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll, CNNIC> [&使用迅雷下载] <D:\Program Files\Thunder Network\Thunder\geturl.htm, N/A> [&使用迅雷下载全部链接] <D:\Program Files\Thunder Network\Thunder\getallurl.htm, N/A> [Google 搜索(&G)] <res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html, N/A> [上传到QQ网络硬盘] <D:\Program Files\QQ2005beat3\AddToNetDisk.htm, N/A> [使用KuGoo3下载(&K)] <C:\Program Files\KuGoo2\KuGoo3DownX.htm, N/A> [使用网际快车下载] <, N/A> [使用网际快车下载全部链接] <, N/A> [反向链接] <res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html, N/A> [添加到QQ自定义面板] <D:\Program Files\QQ2005beat3\AddPanel.htm, N/A> [添加到QQ表情] <D:\Program Files\QQ2005beat3\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Program Files\QQ2005beat3\SendMMS.htm, N/A> [百度-搜索MP3] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM, N/A> [百度-搜索图片] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM, N/A> [百度-搜索新闻] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM, N/A> [百度-搜索歌词] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM, N/A> [百度-搜索网页] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM, N/A> [百度-搜索贴吧] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM, N/A> [百度-词典搜索] <res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM, N/A> [类似网页] <res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html, N/A> [缓存的网页快照] <res://c:\program files\google\GoogleToolbar2.dll/cmcache.html, N/A> [翻译英文字词(&T)] <res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html, N/A> [访问通用网址] <C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A> [豪杰超级解霸V8实时播放] <C:\Herosoft\HeroV8\MPURLGET.HTM, N/A>
风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:

风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	发表于： 2006-04-15 13:37 \| 只看楼主短消息资料字号：小中大 5楼 [PID: 628][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 696][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 720][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 772][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 784][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 952][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1020][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1116][D:\Program Files\rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 1144][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1240][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1444][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1524][D:\Program Files\rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19> [D:\Program Files\rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [D:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [D:\Program Files\rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9> [D:\Program Files\rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28> [D:\Program Files\rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [D:\Program Files\rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1> [D:\Program Files\rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [D:\Program Files\rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [D:\Program Files\rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [D:\Program Files\rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [D:\Program Files\rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [D:\Program Files\rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [D:\Program Files\rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [D:\Program Files\rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [D:\Program Files\rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [D:\Program Files\rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [D:\Program Files\rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [D:\Program Files\rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [D:\Program Files\rising\Rav\RsStore.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\Program Files\rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [D:\Program Files\rising\Rav\ExtMail.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [PID: 1632][d:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 30> [d:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 12> [d:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6> [d:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21> [d:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4> [d:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9> [d:\program files\rising\rfw\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [PID: 1796][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 1884][D:\Program Files\rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [D:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1280][C:\WINDOWS\eHome\ehRecvr.exe] <Microsoft Corporation><5.1.2700.2180 (private/xpsp_mce.040810-0205)> [C:\WINDOWS\system32\sbe.dll] <N/A><N/A> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [PID: 1308][C:\WINDOWS\eHome\ehSched.exe] <Microsoft Corporation><5.1.2700.2180 (private/xpsp_mce.040810-0205)> [PID: 1620][C:\WINDOWS\system32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.6172> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [PID: 1964][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1960][C:\WINDOWS\system32\dllhost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2308][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2372][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.27> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [PID: 2388][C:\WINDOWS\VM303_STI.EXE] <Vimicro><4, 2, 1124, 6> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [C:\WINDOWS\system32\VM303Prp.Ax] <Vimicro><1.00.01.00> [PID: 2396][C:\Program Files\CNNIC\Cdn\cdnup.exe] <><2, 3, 0, 5> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 2, 0, 3> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><1, 0, 0, 6> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 1> [C:\Program Files\CNNIC\Cdn\cdntdns.dll] <CNNIC><2, 2, 0, 3> [PID: 2420][C:\Program Files\Common Files\UPDAT\Update.exe] <N/A><N/A> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [PID: 2524][D:\Program Files\rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [D:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><1, 0, 0, 6> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 2, 0, 3> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [C:\WINDOWS\TEMP\wi.dll] <N/A><N/A> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 1>
风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:

风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	发表于： 2006-04-15 13:38 \| 只看楼主短消息资料字号：小中大 6楼 [PID: 2244][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 1> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><1, 0, 0, 6> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 2, 0, 3> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [C:\WINDOWS\system32\AcSignIcon.dll] <Autodesk><16.0.0.86> [C:\WINDOWS\system32\xunleibho_v13.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 48> [C:\Program Files\CoolWebsite\QuickLink.dll] <Fengcent><1, 0, 0, 2> [D:\Program Files\QQ2005beat3\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [C:\PROGRA~1\baidu\bar\baidubar.dll] <Baidu.com, Inc.><2, 0, 2, 62> [C:\Program Files\LtUcx\1002\c0.dll] <北京莲塘软件技术有限公司><1, 8, 0, 60> [C:\Program Files\LtUcx\ucx0.dll] <北京莲塘软件技术有限公司><1, 0, 3, 21> [C:\PROGRA~1\KuGoo2\KUGOO3~1.OCX] <N/A><N/A> [c:\program files\google\googletoolbar2.dll] <Google Inc.><3, 0, 131, 0> [C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll] <CNNIC><1, 1, 0, 0> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [D:\Program Files\rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [PID: 2288][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 1> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><1, 0, 0, 6> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 2, 0, 3> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [C:\WINDOWS\system32\AcSignIcon.dll] <Autodesk><16.0.0.86> [C:\WINDOWS\system32\xunleibho_v13.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 48> [C:\Program Files\CoolWebsite\QuickLink.dll] <Fengcent><1, 0, 0, 2> [D:\Program Files\QQ2005beat3\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [C:\PROGRA~1\baidu\bar\baidubar.dll] <Baidu.com, Inc.><2, 0, 2, 62> [C:\Program Files\LtUcx\1002\c0.dll] <北京莲塘软件技术有限公司><1, 8, 0, 60> [C:\Program Files\LtUcx\ucx0.dll] <北京莲塘软件技术有限公司><1, 0, 3, 21> [C:\PROGRA~1\KuGoo2\KUGOO3~1.OCX] <N/A><N/A> [c:\program files\google\googletoolbar2.dll] <Google Inc.><3, 0, 131, 0> [C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll] <CNNIC><1, 1, 0, 0> [D:\Program Files\rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0> [PID: 3416][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 1> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><1, 0, 0, 6> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 2, 0, 3> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [C:\WINDOWS\system32\AcSignIcon.dll] <Autodesk><16.0.0.86> [PID: 3228][C:\WINDOWS\TEMP\Rar$EX00.672\SREng.exe] <Smallfrogs Studio><2.0.12.350> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 1> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><1, 0, 0, 6> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 2, 0, 3> [C:\WINDOWS\HServerKey.DLL] <N/A><N/A> [C:\WINDOWS\system32\cdnns.dll] <CNNIC><2, 0, 0, 0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:

风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	发表于： 2006-04-15 13:41 \| 只看楼主短消息资料字号：小中大 7楼麻烦大哥帮帮我啊，我是电脑盲，还请大哥详细说说啊~ 谢谢了
风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:

风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	发表于： 2006-04-15 13:47 \| 只看楼主短消息资料字号：小中大 8楼自从中毒之后老是弹出Rav.exe应用程序出错0x09772097指令引用的0x099b0bb4内存不能为written 还有别的应用程序也是这种出错
风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:

风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:	发表于： 2006-04-16 00:36 \| 只看楼主短消息资料字号：小中大 9楼怎么没有人来救我啊~
风过无烟初生襁褓狮帖子:9 注册: 2006-04-15 来自:

轩辕小聪卡卡技术团队帖子:8368 注册: 2006-01-09 来自:	发表于： 2006-04-16 01:24 \| 短消息资料字号：小中大 10楼 [HServer / HServer] <C:\WINDOWS\HServer.exe><N/A> 灰鸽子。在注册表删除HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HServer项目重启后删除C:\WINDOWS\HServer.exe、C:\WINDOWS\HServerKey.DLL、C:\WINDOWS\HServer.dll、C:\WINDOWS\HServer_hook.dll。搞完以上步骤后，再用瑞星查毒，如已无病毒（的确有这样的例子，不知为何瑞星不报灰鸽子，而报Rootkit.Vanti.gen）则已完成，若仍报Rootkit.Vanti.gen并杀不掉，则做以下操作： http://forum.ikaka.com/topic.asp?board=28&artid=6979213下载icesword 运行icesword勾选“禁止进线程创建”并结束D:\Program Files\rising\Rav\RavTask.exe进程，之后用icesword找到并删除C：WINDOWS/TEMP/wi.dll。另外楼主的机子上还有流氓软件：结束进程C:\Program Files\Common Files\UPDAT\Update.exe http://forum.ikaka.com/topic.asp?board=28&artid=6979213下载HijackThis（楼主之前用的那个版本太老，因此才看不到灰鸽子，这个是1.99.1版的）扫日志并修复： O2 - BHO: (no name) - {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} - C:\Program Files\CoolWebsite\QuickLink.dll O4 - HKLM\..\Run: [Update] C:\Program Files\Common Files\UPDAT\Update.exe 卸载C:\Program Files\CoolWebsite\ 重启后删除： C:\Program Files\CoolWebsite\文件夹 C:\Program Files\Common Files\UPDAT\文件夹
轩辕小聪卡卡技术团队帖子:8368 注册: 2006-01-09 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT