求助，鼠标的小漏斗不停在闪，CPU狂飙 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛求助，鼠标的小漏斗不停在闪，CPU狂飙

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

求助，鼠标的小漏斗不停在闪，CPU狂飙

ningsa 初生襁褓狮帖子:5 注册: 2006-09-13 来自:	发表于： 2006-09-13 09:27 \| 只看楼主短消息资料字号：小中大 1楼求助，鼠标的小漏斗不停在闪，CPU狂飙用兔子删除了几个流氓软件后重启即出现这个情况，鼠标一直狂闪。CPU占用率居高不下，真郁闷，请各位帮忙看看到底是什么问题，小弟谢过 2006-09-13 23:19:49
ningsa 初生襁褓狮帖子:5 注册: 2006-09-13 来自:	分享到：

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2006-09-13 09:34 \| 短消息资料字号：小中大 2楼用Hijackthis扫个日志上来
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

lancom 锋芒艾服狮帖子:1679 注册: 2006-09-06 来自:	发表于： 2006-09-13 11:28 \| 短消息资料字号：小中大 3楼用HJ扫个日志上来
lancom 锋芒艾服狮帖子:1679 注册: 2006-09-06 来自:

ningsa 初生襁褓狮帖子:5 注册: 2006-09-13 来自:	发表于： 2006-09-13 12:01 \| 只看楼主短消息资料字号：小中大 4楼谢谢两位的帮忙： C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\ibmpmsvc.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\S24EvMon.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\System32\svchost.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\PROGRA~1\NETWOR~1\MCAFEE~1\FireSvc.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\Network Associates\VirusScan\mcshield.exe C:\Program Files\Network Associates\VirusScan\vstskmgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINNT\System32\QCONSVC.EXE C:\WINNT\System32\RegSrvc.exe C:\WINNT\System32\svchost.exe C:\Program Files\SetDNSHostName\setdnshostname.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\TpKmpSVC.exe C:\Program Files\RealVNC\VNC4\WinVNC4.exe C:\WINNT\System32\CCM\CLICOMP\RemCtrl\Wuser32.exe C:\WINNT\System32\CCM\CcmExec.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE C:\WINNT\system32\rundll32.exe C:\WINNT\System32\TpScrLk.exe C:\WINNT\system32\TpShocks.exe C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe C:\WINNT\system32\dla\tfswctrl.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\PROGRA~1\NETWOR~1\MCAFEE~1\Firetray.exe C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\WINNT\system32\RunDll32.exe C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe C:\WINNT\system32\ctfmon.exe C:\Program Files\lotus\notes\NLNOTES.EXE C:\Program Files\lotus\notes\nhldaemn.EXE C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE C:\Program Files\Maxthon\Maxthon.exe C:\Program Files\WinRAR\WinRAR.exe C:\Temp\Rar$EX00.734\HijackThis.exe O2 - BHO: (no name) - {14A21378-5BB1-4BC4-95D5-5D3F51527F6F} - (no file) O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINNT\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINNT\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINNT\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [PRONoMgrWired] ; c:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE O4 - HKLM\..\Run: [TPHOTKEY] ; C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe O4 - HKLM\..\Run: [TP4EX] tp4ex.exe O4 - HKLM\..\Run: [TPKMAPHELPER] ; C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper O4 - HKLM\..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE O4 - HKLM\..\Run: [BMMMONWND] rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor O4 - HKLM\..\Run: [TPKBDLED] C:\WINNT\System32\TpScrLk.exe O4 - HKLM\..\Run: [TpShocks] TpShocks.exe O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [McAfeeFireTray] C:\PROGRA~1\NETWOR~1\MCAFEE~1\Firetray.exe O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [51高级上传组件] ; C:\Program Files\51.com\51UpdateManager.exe O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe O4 - Startup: FireTray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Personal\XTZJQQ\AddToNetDisk.htm O8 - Extra context menu item: 使用网际快车下载 - C:\Personal\jc_link.htm O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Personal\XTZJQQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - C:\Personal\XTZJQQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Personal\XTZJQQ\SendMMS.htm O8 - Extra context menu item: 百度-搜索MP3 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUMP3.HTM O8 - Extra context menu item: 百度-搜索图片 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUIMG.HTM O8 - Extra context menu item: 百度-搜索新闻 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUNEWS.HTM O8 - Extra context menu item: 百度-搜索歌词 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDULYRIC.HTM O8 - Extra context menu item: 百度-搜索网页 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUSEARCH.HTM O8 - Extra context menu item: 百度-搜索贴吧 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUPOST.HTM O9 - Extra button: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe O9 - Extra 'Tools' menuitem: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe O14 - IERESET.INF: START_PAGE_URL=http://inside.abb.com O16 - DPF: JavaConnect - file://C:\temp\WrapGLF17\JavaConnect.cab O16 - DPF: Sametime BroadCast Client ST30IF3 - file://C:\temp\WrapGLF17\STBroadCastClient.cab O16 - DPF: Sametime Directory Applet ST30SP1 - file://C:\temp\WrapGLF17\STDirectoryApplet.cab O16 - DPF: Sametime Meeting Room Client ST30IF3 - file://C:\temp\WrapGLF17\STMeetingRoomClient.cab O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab O16 - DPF: {24CEC0BF-C8BC-4BCB-B804-226326B319EF} (JNILoader Control) - http://odcs01.sg.abb.com/sametime/STMeetingRoomClient/STJNILoader.cab O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {73BF47F8-04F4-4857-9F04-A1FF670CB5EA} (iChatX Control) - http://61.133.84.137/ocx/ichatx.ocx O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (PhotoUploadCtrl Control) - http://qz-photo.qq.com/qzone3/QzoneMediaTools.cab O16 - DPF: {A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} - http://upload.photo.163.com/photoup.cab O16 - DPF: {C07405FD-84D1-4A25-94E8-68609EA8335B} (iChatX Object) - http://chat.zbinfo.net/ichatx.dll O16 - DPF: {C4847596-972C-11D0-9567-00A0C9273C2A} (Crystal Report Viewer Control) - http://ete.cn.abb.com/viewer/activeXViewer/activexviewer.cab O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} - http://cache10.itv.mop.com/pCastCtl_1.0.0.87_20060601.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = cn.abb.com O17 - HKLM\Software\..\Telephony: DomainName = cn.abb.com O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = cn.abb.com O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = cn.abb.com O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: QConGina - C:\WINNT\SYSTEM32\QConGina.dll O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: McAfee Desktop Firewall Service (FireSvc) - McAfee, Inc. - C:\PROGRA~1\NETWOR~1\MCAFEE~1\FireSvc.exe O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINNT\System32\ibmpmsvc.exe O23 - Service: Tivoli Endpoint (lcfd) - Unknown owner - C:\Tivoli\lcf\bin\w32-ix86\mrt\lcfd.exe (file missing) O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart (file missing) O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: QCONSVC - IBM Corp. - C:\WINNT\System32\QCONSVC.EXE O23 - Service: RegSrvc - Intel Corporation - C:\WINNT\System32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINNT\System32\S24EvMon.exe O23 - Service: SetDNSHostName - Unknown owner - C:\Program Files\SetDNSHostName\setdnshostname.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINNT\system32\TpKmpSVC.exe O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)
ningsa 初生襁褓狮帖子:5 注册: 2006-09-13 来自:

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2006-09-13 12:11 \| 短消息资料字号：小中大 5楼你用的是IBM的本吗？没用的启动项太多了，先用超级兔子把没用的启动项闭掉，在扫个日志上来
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

★酷§侠★ 初生襁褓狮帖子:532 注册: 2006-02-02 来自:	发表于： 2006-09-13 12:54 \| 短消息资料字号：小中大 6楼 !!!
★酷§侠★ 初生襁褓狮帖子:532 注册: 2006-02-02 来自:

ningsa 初生襁褓狮帖子:5 注册: 2006-09-13 来自:	发表于： 2006-09-13 13:33 \| 只看楼主短消息资料字号：小中大 7楼 Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\System32\ibmpmsvc.exe C:\WINNT\System32\Ati2evxx.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\S24EvMon.exe C:\WINNT\system32\spoolsv.exe C:\WINNT\System32\svchost.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\PROGRA~1\NETWOR~1\MCAFEE~1\FireSvc.exe C:\Program Files\Network Associates\Common Framework\FrameworkService.exe C:\Program Files\Network Associates\VirusScan\mcshield.exe C:\Program Files\Network Associates\VirusScan\vstskmgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINNT\System32\QCONSVC.EXE C:\WINNT\System32\RegSrvc.exe C:\WINNT\System32\svchost.exe C:\Program Files\SetDNSHostName\setdnshostname.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\WINNT\System32\svchost.exe C:\WINNT\system32\TpKmpSVC.exe C:\Program Files\RealVNC\VNC4\WinVNC4.exe C:\WINNT\System32\CCM\CLICOMP\RemCtrl\Wuser32.exe C:\WINNT\System32\CCM\CcmExec.exe C:\WINNT\System32\msiexec.exe C:\WINNT\system32\Ati2evxx.exe C:\WINNT\Explorer.EXE C:\WINNT\System32\TpScrLk.exe C:\WINNT\system32\TpShocks.exe C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe C:\WINNT\system32\dla\tfswctrl.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\PROGRA~1\NETWOR~1\MCAFEE~1\Firetray.exe C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\WINNT\system32\userinit.exe C:\Downloads\ha_hijackthis_1991\HijackThis.exe C:\WINNT\System32\regsvr32.exe O2 - BHO: (no name) - {14A21378-5BB1-4BC4-95D5-5D3F51527F6F} - (no file) O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINNT\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINNT\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINNT\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SynTPLpr] ; C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] ; C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [PRONoMgrWired] ; c:\Program Files\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [QCWLICON] ; C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE O4 - HKLM\..\Run: [TPHOTKEY] ; C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe O4 - HKLM\..\Run: [TP4EX] ; tp4ex.exe O4 - HKLM\..\Run: [TPKMAPHELPER] ; C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper O4 - HKLM\..\Run: [BMMLREF] ; C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE O4 - HKLM\..\Run: [BMMMONWND] ; rundll32.exe C:\PROGRA~1\ThinkPad\UTILIT~1\BatInfEx.dll,BMMAutonomicMonitor O4 - HKLM\..\Run: [TPKBDLED] C:\WINNT\System32\TpScrLk.exe O4 - HKLM\..\Run: [TpShocks] TpShocks.exe O4 - HKLM\..\Run: [EZEJMNAP] ; C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [McAfeeFireTray] C:\PROGRA~1\NETWOR~1\MCAFEE~1\Firetray.exe O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [51高级上传组件] ; C:\Program Files\51.com\51UpdateManager.exe O4 - HKLM\..\Run: [BMMGAG] ; RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor O4 - HKLM\..\Run: [CnxDslTaskBar] ; "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe" O4 - HKLM\..\Run: [KernelFaultCheck] ; %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [ctfmon.exe] ; C:\WINNT\system32\ctfmon.exe O4 - Startup: FireTray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Personal\XTZJQQ\AddToNetDisk.htm O8 - Extra context menu item: 使用网际快车下载 - C:\Personal\jc_link.htm O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Personal\XTZJQQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - C:\Personal\XTZJQQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Personal\XTZJQQ\SendMMS.htm O8 - Extra context menu item: 百度-搜索MP3 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUMP3.HTM O8 - Extra context menu item: 百度-搜索图片 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUIMG.HTM O8 - Extra context menu item: 百度-搜索新闻 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUNEWS.HTM O8 - Extra context menu item: 百度-搜索歌词 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDULYRIC.HTM O8 - Extra context menu item: 百度-搜索网页 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUSEARCH.HTM O8 - Extra context menu item: 百度-搜索贴吧 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUPOST.HTM O9 - Extra button: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe O9 - Extra 'Tools' menuitem: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe O14 - IERESET.INF: START_PAGE_URL=http://inside.abb.com O16 - DPF: JavaConnect - file://C:\temp\WrapGLF17\JavaConnect.cab O16 - DPF: Sametime BroadCast Client ST30IF3 - file://C:\temp\WrapGLF17\STBroadCastClient.cab O16 - DPF: Sametime Directory Applet ST30SP1 - file://C:\temp\WrapGLF17\STDirectoryApplet.cab O16 - DPF: Sametime Meeting Room Client ST30IF3 - file://C:\temp\WrapGLF17\STMeetingRoomClient.cab O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab O16 - DPF: {24CEC0BF-C8BC-4BCB-B804-226326B319EF} (JNILoader Control) - http://odcs01.sg.abb.com/sametime/STMeetingRoomClient/STJNILoader.cab O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {73BF47F8-04F4-4857-9F04-A1FF670CB5EA} (iChatX Control) - http://61.133.84.137/ocx/ichatx.ocx O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (PhotoUploadCtrl Control) - http://qz-photo.qq.com/qzone3/QzoneMediaTools.cab O16 - DPF: {A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} - http://upload.photo.163.com/photoup.cab O16 - DPF: {C07405FD-84D1-4A25-94E8-68609EA8335B} (iChatX Object) - http://chat.zbinfo.net/ichatx.dll O16 - DPF: {C4847596-972C-11D0-9567-00A0C9273C2A} (Crystal Report Viewer Control) - http://ete.cn.abb.com/viewer/activeXViewer/activexviewer.cab O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} - http://cache10.itv.mop.com/pCastCtl_1.0.0.87_20060601.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = cn.abb.com O17 - HKLM\Software\..\Telephony: DomainName = cn.abb.com O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = cn.abb.com O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = cn.abb.com O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: QConGina - C:\WINNT\SYSTEM32\QConGina.dll O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: McAfee Desktop Firewall Service (FireSvc) - McAfee, Inc. - C:\PROGRA~1\NETWOR~1\MCAFEE~1\FireSvc.exe O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINNT\System32\ibmpmsvc.exe O23 - Service: Tivoli Endpoint (lcfd) - Unknown owner - C:\Tivoli\lcf\bin\w32-ix86\mrt\lcfd.exe (file missing) O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart (file missing) O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: QCONSVC - IBM Corp. - C:\WINNT\System32\QCONSVC.EXE O23 - Service: RegSrvc - Intel Corporation - C:\WINNT\System32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINNT\System32\S24EvMon.exe O23 - Service: SetDNSHostName - Unknown owner - C:\Program Files\SetDNSHostName\setdnshostname.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINNT\system32\TpKmpSVC.exe O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe" -service (file missing)
ningsa 初生襁褓狮帖子:5 注册: 2006-09-13 来自:

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2006-09-13 15:27 \| 短消息资料字号：小中大 8楼中文上网 C:\WINNT\system32\userinit.exe 清理掉 O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = cn.abb.com O17 - HKLM\Software\..\Telephony: DomainName = cn.abb.com O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = cn.abb.com O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = cn.abb.com 还有流氓软件没清干净，用最新版超级兔子清理
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2006-09-13 15:41 \| 短消息资料字号：小中大 9楼清理掉 O2 - BHO: (no name) - {14A21378-5BB1-4BC4-95D5-5D3F51527F6F} - (no file) 这些不是自己装的话也清理 O8 - Extra context menu item: 百度-搜索MP3 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUMP3.HTM O8 - Extra context menu item: 百度-搜索图片 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUIMG.HTM O8 - Extra context menu item: 百度-搜索新闻 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUNEWS.HTM O8 - Extra context menu item: 百度-搜索歌词 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDULYRIC.HTM O8 - Extra context menu item: 百度-搜索网页 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUSEARCH.HTM O8 - Extra context menu item: 百度-搜索贴吧 - res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUPOST.HTM
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

我不卡初生襁褓狮帖子:18 注册: 2005-08-15 来自:	发表于： 2006-09-13 17:19 \| 短消息资料字号：小中大 10楼 O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINNT\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINNT\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINNT\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [TP4EX] ; tp4ex.exe O4 - HKLM\..\Run: [TpShocks] TpShocks.exe O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe" O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [51高级上传组件] ; C:\Program Files\51.com\51UpdateManager.exe O4 - HKLM\..\Run: [KernelFaultCheck] ; %systemroot%\system32\dumprep 0 -k 以上的都禁用掉，我看你开机起码5分钟。这么多东东还有中文上网 C:\WINNT\system32\userinit.exe 我怎么感觉userinit是刚开机就会有的进程，然后过几分钟就没了
我不卡初生襁褓狮帖子:18 注册: 2005-08-15 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT