卡卡助手助我摆脱IE劫持 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛卡卡助手助我摆脱IE劫持

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

卡卡助手助我摆脱IE劫持

caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	发表于： 2006-09-24 00:17 \| 只看楼主短消息资料字号：小中大 1楼卡卡助手助我摆脱IE劫持前一阵，我的浏览器被恶意网站劫持了，每次开机都有7b.com网页，删也删不掉。曾试过yahoo助手，修复之后又自动还原。把恶意网站IP放到黄山IE修复工具中免疫，只能做到阻止它连接。现在根据鹰派联盟一本书的推荐，安装了卡卡。好了，劫持解除了。谢谢卡卡！ 2006-10-07 17:56:46
caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	分享到：

caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	发表于： 2006-09-24 00:19 \| 只看楼主短消息资料字号：小中大 2楼 √使用瑞星产品过程中遇到问题？对瑞星的意见建议？瑞星产品配合使用才会有效，比如我用的网络版瑞星，安上卡卡，就威力无穷，赶跑流氓软件的劫持！
caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-09-24 10:58 \| 短消息资料字号：小中大 3楼请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来下载网址 http://www.kztechs.com/sreng/sreng2.zip http://forum.ikaka.com/topic.asp?board=67&artid=5188931 日志一次粘不完，分次粘完，请不要修改。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	发表于： 2006-09-25 15:34 \| 只看楼主短消息资料字号：小中大 4楼 Logfile of Kaka v2. 0. 0. 9 Scan Module v2. 0. 0. 1 Scan saved at 15:21:17, on 2006-09-25 Platform: Microsoft Windows XP Professional Service Pack 2 (Build 2600) MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)) Running processes: [smss.exe] CommandLine = [csrss.exe] CommandLine = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 [winlogon.exe] CommandLine = winlogon.exe [services.exe] CommandLine = C:\WINDOWS\system32\services.exe [lsass.exe] CommandLine = C:\WINDOWS\system32\lsass.exe [svchost.exe] CommandLine = C:\WINDOWS\system32\svchost -k DcomLaunch [svchost.exe] CommandLine = C:\WINDOWS\system32\svchost -k rpcss [CCenter.exe] CommandLine = "C:\Program Files\Rising\Rav\CCenter.exe" [svchost.exe] CommandLine = C:\WINDOWS\System32\svchost.exe -k netsvcs [svchost.exe] CommandLine = C:\WINDOWS\system32\svchost.exe -k NetworkService [svchost.exe] CommandLine = C:\WINDOWS\system32\svchost.exe -k LocalService [RavMonD.exe] CommandLine = "C:\Program Files\Rising\Rav\Ravmond.exe" [spoolsv.exe] CommandLine = C:\WINDOWS\system32\spoolsv.exe [svchost.exe] CommandLine = C:\WINDOWS\system32\svchost.exe -k imgsvc [RavStub.exe] CommandLine = "C:\Program Files\Rising\Rav\RavStub.exe" /RAVMOND [alg.exe] CommandLine = C:\WINDOWS\System32\alg.exe [Explorer.EXE] CommandLine = C:\WINDOWS\Explorer.EXE [EagleSvr.exe] CommandLine = "C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe" [RavTask.exe] CommandLine = "C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE" -SYSTEM [RavMon.exe] CommandLine = "C:\Program Files\Rising\Rav\Ravmon.exe" -SYSTEM [ctfmon.exe] CommandLine = "C:\WINDOWS\system32\ctfmon.exe" [conime.exe] CommandLine = C:\WINDOWS\system32\conime.exe [ssreader.exe] CommandLine = "F:\sjx\NET\SSREADER36\ssreader.exe" [iexplore.exe] CommandLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" [KkScan.exe] CommandLine = "F:\Program Files\KaKa\KkScan.exe" R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr.dll O1 - Hosts: 127.0.0.1 7b.com.cn O1 - Hosts: 127.0.0.1 aifind.info O1 - Hosts: 127.0.0.1 allsearcher.info O1 - Hosts: 127.0.0.1 ehttp.cc O1 - Hosts: 127.0.0.1 freednshost.info O1 - Hosts: 127.0.0.1 i-lookup.com O1 - Hosts: 127.0.0.1 www.23.la O1 - Hosts: 127.0.0.1 www.joyiex.com O1 - Hosts: 127.0.0.1 www.mj2005.com O1 - Hosts: 127.0.0.1 www.mydj2005.com O1 - Hosts: 127.0.0.1 www.nkvd.us O1 - Hosts: 127.0.0.1 www.xfreehosting.com O1 - Hosts: 127.0.0.1 www.xxx166.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobatchs\ActiveX\AcroIEHelper.dll O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr.dll O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - F:\苏备迎\QQ\QQ\QQIEHelper.dll O2 - BHO: DragSearch BHO - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL (file missing) O2 - BHO: - {669751ED-D558-49AE-B01A-3B374CC7910E} - C:\WINDOWS\system32\ssup.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll O2 - BHO: C:\WINDOWS\EagleFlt.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll O4 - HKCU\..\Run: [Messenger.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [Realplayer.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [Messager.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKLM\..\Run: [EagleEye] C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [Messenger.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKLM\..\Run: [Realplayer.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKLM\..\Run: [Messager.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - Startup: desktop.ini = O4 - Global Startup: desktop.ini = O4 - Global Startup: delshare.bat = O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\sby\QQ\QQ\AddToNetDisk.htm O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: 添加到QQ自定义面板 - F:\sby\QQ\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - F:\sby\QQ\QQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\sby\QQ\QQ\SendMMS.htm O11 - Options group: [TBH] 搜搜地址栏搜索 O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/windows/ie_intl/cn/start/ O16 - DPF: DirectAnimation Java Classes - file://C:\WINDOWS\system32\dajava.cab O16 - DPF: Internet Explorer Classes for Java - file://C:\WINDOWS\system32\iejava.cab O18 - Filter : application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\mscoree.dll O18 - Filter : application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\mscoree.dll O18 - Filter : application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\mscoree.dll O18 - Filter : text/html - {F79B2338-A6E7-46D4-9201-422AA6E74F43} - C:\WINDOWS\EagleFlt.dll O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ic32pp - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll O18 - Protocol: ipp - (no CLSID) - (no file) O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - Protocol: msdaipp - (no CLSID) - (no file) O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll O23 - Service: Human Interface Device Access (HidServ) - - C:\WINDOWS\system32\svchost.exe -k netsvcs O23 - Service: lxcg_device (lxcg_device) - - C:\WINDOWS\system32\lxcgcoms.exe -service O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - "C:\Program Files\Rising\Rav\CCenter.exe" O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - "C:\Program Files\Rising\Rav\Ravmond.exe"
caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖

caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	发表于： 2006-09-26 00:03 \| 只看楼主短消息资料字号：小中大 5楼以下报告是未解除绑架前的扫描、诊断感谢您关注我的这份报告，小菜鸟急需您的帮助！本扫描/诊断报告由雅虎助手IE修复专家生成操作系统: Windows XP IE版本号: 6.0.2900.2180 =============================================================== 以下是我的扫描报告正文： * 扫描项列表 * 下列条目被IE修复专家判断为危险：下列条目被IE修复专家判断为有风险： 1.O06 - 禁止IE首页相关设置 - O06 - 禁止IE首页相关设置，，安全等级：有风险 2.O18 - 网络协议过滤器 - text/html，， CLSID：{F79B2338-A6E7-46D4-9201-422AA6E74F43} 相关文件：C:\WINDOWS\EagleFlt.dll 安全等级：有风险下列条目被IE修复专家判断为未知： 3.R03 - 搜索挂接 - Tencent SearchHook，Tencent， CLSID：{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} 相关文件：C:\Program Files\Tencent\Adplus\SSAddr.dll 安全等级：未知 4.O02 - 浏览器辅助对象(BHO) - Tencent Browser Helper，Tencent， CLSID：{0C7C23EF-A848-485B-873C-0ED954731014} 相关文件：C:\Program Files\Tencent\Adplus\SSAddr.dll 安全等级：未知 5.O02 - 浏览器辅助对象(BHO) - SSLive，TENCENT， CLSID：{669751ED-D558-49AE-B01A-3B374CC7910E} 相关文件：C:\WINDOWS\system32\ssup.dll 安全等级：未知 6.O02 - 浏览器辅助对象(BHO) - ，， CLSID：{F79B2338-A6E7-46D4-9202-422AA6E74F43} 相关文件：C:\WINDOWS\EagleFlt.dll 安全等级：未知 7.O04 - 自动运行项(Run) - 威盛公司的相关产品。，S3 Graphics, Inc.，相关文件：C:\WINDOWS\system32\VTTimer.exe 内容：VTTimer.exe 安全等级：未知 8.O04 - 自动运行项(Run) - VTTrayp，S3 Graphics Co., Ltd.，相关文件：C:\WINDOWS\system32\VTTrayp.exe 内容：VTtrayp.exe 安全等级：未知 9.O04 - 自动运行项(Run) - 一款键盘驱动程序。，Chicony，相关文件：C:\WINDOWS\LHOTKEY.exe 内容：LHotkey.exe 安全等级：未知 10.O04 - 自动运行项(Run) - EagleEye，tuEagles，相关文件：(隐藏)(系统)C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe 内容：C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe 安全等级：未知 11.O04 - 自动运行项(Run) - 网眼摄像头驱动，，相关文件：(文件不存在)(隐藏)(系统)C:\WINDOWS\VM_STI.EXE Anyvision USB PC Camera 内容：C:\WINDOWS\VM_STI.EXE Anyvision USB PC Camera 安全等级：未知 12.O04 - 自动运行项(Run) - RavTask，Beijing Rising Technology Co., Ltd.，相关文件：C:\Program Files\Rising\Rav\RavTask.exe -system 内容："C:\Program Files\Rising\Rav\RavTask.exe" -system 安全等级：未知 13.O04 - 自动运行项(Run) - stup.exe，Tencent，相关文件：C:\Program Files\Tencent\Adplus\stup.exe 内容：C:\PROGRA~1\TENCENT\Adplus\stup.exe 安全等级：未知 14.O04 - 自动运行项(Run) - LXCGCATS，，相关文件：C:\WINDOWS\system32\spool\drivers\w32x86\3\lxcgtime.dll 内容：rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 安全等级：未知 15.O04 - 自动运行项(Run) - lxcgmon.exe，Lexmark International, Inc.，相关文件：C:\Program Files\Lexmark 2300 Series\lxcgmon.exe 内容："C:\Program Files\Lexmark 2300 Series\lxcgmon.exe" 安全等级：未知 16.O04 - 自动运行项(Run) - EzPrint，Lexmark International Inc.，相关文件：C:\Program Files\Lexmark 2300 Series\ezprint.exe 内容："C:\Program Files\Lexmark 2300 Series\ezprint.exe" 安全等级：未知 17.O04 - 自动运行项(Run) - FaxCenterServer，，相关文件：C:\Program Files\Lexmark Fax Solutions\fm3032.exe /s 内容："C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s 安全等级：未知 18.O11 - IE高级操作 - TBH (搜搜地址栏搜索)，，安全等级：未知 19.O16 - 下载的ActiveX插件 - SSReaderPlug Control，CX， CLSID：{3359C0B1-2363-40B3-AFCA-1ABC799AC486} 相关文件：C:\WINDOWS\system32\ssreaderplug.ocx 网页路径：http://reg.ssreader.com/ssreaderplug.ocx 安全等级：未知 20.O18 - 网络协议处理器 - 电子书编译工具Web Compiler相关，， CLSID：{BBCA9F81-8F4F-11D2-90FF-0080C83D3571} 相关文件：C:\WINDOWS\wc98pp.dll 安全等级：未知 21.O27 - 文件执行挂钩 - ShlExecHack，Beijing Rising Technology Co., Ltd.， CLSID：{32CD708B-60A7-4C00-9377-D73EAA495F0F} 相关文件：C:\WINDOWS\system32\RavExt.dll 内容：Rising Execute File Exts hook 安全等级：未知 22.O36 - Winlogon通知包管理器 - MicroQC，，相关文件：C:\WINDOWS\system32\jsdll.dll 安全等级：未知下列条目被IE修复专家判断为安全： 23.R01 - IE用户指定空白页 - 空首页，，内容：C:\WINDOWS\system32\blank.htm 安全等级：安全 24.R01 - IE用户指定空白页 - 空首页，，内容：C:\WINDOWS\system32\blank.htm 安全等级：安全 25.R03 - 搜索挂接 - 雅虎助手，Yahoo!， CLSID：{406F94F0-504F-4a40-8DFD-58B0666ABEBD} 相关文件：C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll 内容：coolbar 安全等级：安全 26.O02 - 浏览器辅助对象(BHO) - AcrobatReader AcroIEHlprObj，Adobe Systems Incorporated， CLSID：{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 相关文件：C:\Program Files\Acrobatchs\ActiveX\AcroIEHelper.dll 安全等级：安全 27.O02 - 浏览器辅助对象(BHO) - Yahoo!Photo，Yahoo! China， CLSID：{33BBE430-0E42-4f12-B075-8D21ACB10DCB} 相关文件：C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll 安全等级：安全 28.O02 - 浏览器辅助对象(BHO) - (反钓鱼专家)，Yahoo.， CLSID：{38928D50-8A48-44C2-945F-D2F23F771410} 相关文件：C:\Program Files\Yahoo!\Assistant\Assist\yAngling.dll 安全等级：安全 29.O02 - 浏览器辅助对象(BHO) - 雅虎助手，Yahoo!， CLSID：{406F94F0-504F-4a40-8DFD-58B0666ABEBD} 相关文件：C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll 安全等级：安全 30.O02 - 浏览器辅助对象(BHO) - QQ IE助手，深圳市腾讯计算机系统有限公司， CLSID：{54EBD53A-9BC1-480B-966A-843A333CA162} 相关文件：F:\苏备迎\QQ\QQ\QQIEHelper.dll 安全等级：安全 31.O02 - 浏览器辅助对象(BHO) - DragSearch BHO，， CLSID：{62EED7C6-9F02-42f9-B634-98E2899E147B} 相关文件：C:\Program Files\Yahoo!\Assistant\Assist\YDragSearch.dll 安全等级：安全 32.O02 - 浏览器辅助对象(BHO) - FlashGet 监视网页点击插件，Amaze Soft， CLSID：{A5366673-E8CA-11D3-9CD9-0090271D075B} 相关文件：C:\Program Files\FlashGet\Jccatch.dll 安全等级：安全 33.O03 - IE工具条“链接”的标题 - 链接，，内容：链接安全等级：安全 34.O03 - IE第三方工具条 - FlashGet 工具条，Amaze Soft， CLSID：{E0E899AB-F487-11D5-8D29-0050BA6940E3} 相关文件：C:\Program Files\FlashGet\fgiebar.dll 内容：FlashGet Bar 安全等级：安全 35.O03 - IE第三方工具条 - 金山快译，金山软件股份有限公司， CLSID：{6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} 相关文件：C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll 安全等级：安全 36.O03 - IE第三方工具条 - 雅虎助手，Yahoo!， CLSID：{406F94F0-504F-4a40-8DFD-58B0666ABEBD} 相关文件：C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll 内容：雅虎助手安全等级：安全 37.O04 - 当前用户自启动目录 - QQ即时通讯软件，Tencent，相关文件：F:\苏备迎\QQ\QQ\QQ.exe 安全等级：安全 38.O04 - 自动运行项(Run) - 微软日语输入法，Microsoft Corporation，相关文件：C:\WINDOWS\ime\IMJP8_1\imjpmig.exe /Spoil /RemAdvDef /Migration32 内容："C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 安全等级：安全 39.O04 - 自动运行项(Run) - 微软智能输入法2002A(动态)，Microsoft Corporation，相关文件：C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC 内容：C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC 安全等级：安全 40.O04 - 自动运行项(Run) - 微软智能输入法2002A(名称)，Microsoft Corporation，相关文件：C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName 内容：C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName 安全等级：安全 41.O04 - 自动运行项(Run) - 声卡管理优化软件，Realtek Semiconductor Corp.，相关文件：C:\WINDOWS\SOUNDMAN.EXE 内容：SOUNDMAN.EXE 安全等级：安全 42.O04 - 自动运行项(Run) - Windows执行DLL的程序，Microsoft Windows，相关文件：C:\WINDOWS\Rundll32.exe 内容：C:\WINDOWS\Rundll32.exe 安全等级：安全 43.O04 - 自动运行项(Run) - YLive.exe，，相关文件：C:\Program Files\Yahoo!\Assistant\ylive.exe 内容：C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe 安全等级：安全 44.O04 - 自动运行项(Run) - yassistse，Yahoo!，相关文件：C:\Program Files\Yahoo!\Assistant\yassistse.exe 内容："C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe" 安全等级：安全 45.O04 - 自动运行项(Run) - Windows多种输入技术的支持程序，Microsoft Corporation，相关文件：C:\WINDOWS\system32\ctfmon.exe 内容：C:\WINDOWS\system32\ctfmon.exe 安全等级：安全 46.O16 - 下载的ActiveX插件 - Flash播放器，Adobe Systems, Inc.， CLSID：{D27CDB6E-AE6D-11CF-96B8-444553540000} 相关文件：C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx 网页路径：http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab 安全等级：安全 47.O21 - 自启动项SSODL - 管理托盘图标对象的程序，Microsoft Corporation， CLSID：{35CEC8A3-2BE6-11D2-8773-92E220524153} 相关文件：C:\WINDOWS\system32\stobject.dll 内容：{35CEC8A3-2BE6-11D2-8773-92E220524153} 安全等级：安全 48.O31 - 浏览栏区对象 - 每日提示，Microsoft Corporation， CLSID：{4D5C8C25-D075-11d0-B416-00C04FB90376} 相关文件：C:\WINDOWS\system32\shdocvw.dll 安全等级：安全 49.O31 - 浏览栏区对象 - 雅虎订阅(&Y)，Yahoo! China， CLSID：{19CE93DE-8334-42C6-B2CA-BFE3DF5196A3} 相关文件：C:\Program Files\Yahoo!\Assistant\Assist\yrss.dll 安全等级：安全 ===============================================================
caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-09-26 00:24 \| 短消息资料字号：小中大 6楼确认一下O23 - Service: lxcg_device (lxcg_device) - - C:\WINDOWS\system32\lxcgcoms.exe -service 请下载HijackThis.exe http://forum.ikaka.com/topic.asp?board=67&artid=5188931 关闭所有浏览窗口以及一些不必要的程序运行Hijackthis，扫描结束后在下列选项前打上勾，然后选"修复"" O1 - Hosts: 127.0.0.1 7b.com.cn O1 - Hosts: 127.0.0.1 aifind.info O1 - Hosts: 127.0.0.1 allsearcher.info O1 - Hosts: 127.0.0.1 ehttp.cc O1 - Hosts: 127.0.0.1 freednshost.info O1 - Hosts: 127.0.0.1 i-lookup.com O1 - Hosts: 127.0.0.1 www.23.la O1 - Hosts: 127.0.0.1 www.joyiex.com O1 - Hosts: 127.0.0.1 www.mj2005.com O1 - Hosts: 127.0.0.1 www.mydj2005.com O1 - Hosts: 127.0.0.1 www.nkvd.us O1 - Hosts: 127.0.0.1 www.xfreehosting.com O1 - Hosts: 127.0.0.1 www.xxx166.com O4 - HKCU\..\Run: [Messenger.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [Realplayer.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [Messager.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKLM\..\Run: [Messenger.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKLM\..\Run: [Realplayer.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKLM\..\Run: [Messager.exe] C:\Program Files\Tencent\QQ\Messenger.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O16 - DPF: DirectAnimation Java Classes - file://C:\WINDOWS\system32\dajava.cab O16 - DPF: Internet Explorer Classes for Java - file://C:\WINDOWS\system32\iejava.cab 重启请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来下载网址 http://www.kztechs.com/sreng/sreng2.zip http://forum.ikaka.com/topic.asp?board=67&artid=5188931 日志一次粘不完，分次粘完，请不要修改。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	发表于： 2006-10-05 00:52 \| 只看楼主短消息资料字号：小中大 7楼无邪大侠，刚才又发现桌面上出现了删不掉的gold.com图标。以下是我的扫描，请指教： Logfile of HijackThis v1.99.1 Scan saved at 0:32:38, on 2006-10-5 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Rising\Rav\Ravmond.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\RavStub.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe C:\Program Files\Rising\Rav\RavTask.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\conime.exe C:\Documents and Settings\EADING\桌面\g0ld.com F:\下载\HijackThis\ha_hijackthis_1991\HijackThis.exe R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr1.dll F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobatchs\ActiveX\AcroIEHelper.dll O2 - BHO: 搜搜地址栏搜索 - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr1.dll O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - F:\苏备迎\QQ\QQ\QQIEHelper.dll O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL (file missing) O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll O2 - BHO: (no name) - {F79B2338-A6E7-46D4-9202-422AA6E74F43} - C:\WINDOWS\EagleFlt.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll O4 - HKLM\..\Run: [EagleEye] C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16 O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [Messenger.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKLM\..\Run: [Realplayer.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKLM\..\Run: [Messager.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [Messenger.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [Realplayer.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [Messager.exe] C:\Program Files\Tencent\QQ\Messenger.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: delshare.bat O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\苏备迎\QQ\QQ\AddToNetDisk.htm O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: 添加到QQ自定义面板 - F:\苏备迎\QQ\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - F:\苏备迎\QQ\QQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\苏备迎\QQ\QQ\SendMMS.htm O11 - Options group: [TBH] 搜搜地址栏搜索 O14 - IERESET.INF: SEARCH_PAGE_URL= O14 - IERESET.INF: START_PAGE_URL= O18 - Filter: text/html - {F79B2338-A6E7-46D4-9201-422AA6E74F43} - C:\WINDOWS\EagleFlt.dll O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\system32\lxcgcoms.exe O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖

caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	发表于： 2006-10-05 00:53 \| 只看楼主短消息资料字号：小中大 8楼 2006-10-05,00:36:54 System Repair Engineer 2.2.6.605 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <Messenger.exe><C:\Program Files\Tencent\QQ\Messenger.exe> [N/A] <Realplayer.exe><C:\Program Files\Tencent\QQ\Messenger.exe> [N/A] <Messager.exe><C:\Program Files\Tencent\QQ\Messenger.exe> [N/A] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <EagleEye><C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe> [tuEagles] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <CheckFaultKernel><C:\WINDOWS\system32\mswdm.exe> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [Microsoft Corporation] <{F084FD46-EB63-4CC0-B814-99C16EE76BD1}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <WebCheck><%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Corporation] <SysTray><C:\WINDOWS\system32\stobject.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] <WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] <WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] <WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] <WinlogonNotify: ScCertProp><wlnotify.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] <WinlogonNotify: Schedule><wlnotify.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] <WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] <WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] <WinlogonNotify: termsrv><wlnotify.dll> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] <WinlogonNotify: wlballoon><wlnotify.dll> [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Control Panel\Desktop] <SCRNSAVE.EXE><C:\WINDOWS\system32\ssbezier.scr> [(Verified)Microsoft Corporation] ================================== 启动文件夹 [delshare] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\delshare.bat --> [N/A]><N> ================================== 服务 [ASP.NET State Service / aspnet_state] <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation> [DCOM Server Process Launcher / DcomLaunch] <C:\WINDOWS\system32\svchost -k DcomLaunch-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [Human Interface Device Access / HidServ] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Server / lanmanserver] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\srvsvc.dll><Microsoft Corporation> [lxcg_device / lxcg_device] <C:\WINDOWS\system32\lxcgcoms.exe -service><> [Remote Procedure Call (RPC) / RpcSs] <C:\WINDOWS\system32\svchost -k rpcss-->%SystemRoot%\system32\rpcss.dll><Microsoft Corporation> [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Portable Media Serial Number Service / WmdmPmSN] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\mspmsnsv.dll><Microsoft Corporation> ================================== 驱动程序 [ADProt / ADProt] <\SystemRoot\system32\drivers\ADProt.sys><N/A> [Service for WDM 3D Audio Driver / ALCXSENS] <system32\drivers\ALCXSENS.SYS><Sensaura> [Service for Realtek AC97 Audio (WDM) / ALCXWDM] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [AliIde / AliIde] <\SystemRoot\System32\DRIVERS\aliide.sys><N/A> [ati2mtag / ati2mtag] <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.> [CmdIde / CmdIde] <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.> [ExpScaner / ExpScaner] <\??\C:\Program Files\Rising\Rav\ExpScan.sys><N/A> [VIA Rhine-Family Fast Ethernet Adapter Driver Service / FETND5BV] <system32\DRIVERS\fetnd5bv.sys><VIA Technologies, Inc.> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS] <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.> [FixDrv / FixDrv] <C:\WINDOWS\SYSTEM32\DRIVERS\FixDrv.SYS><N/A> [HookCont / HookCont] <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd> [HookSys / HookSys] <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising> [HpaFilt / HpaFilt] <C:\WINDOWS\SYSTEM32\DRIVERS\HpaFilt.SYS><Lenovo Software inc.> [HpaLower / HpaLower] <C:\WINDOWS\SYSTEM32\DRIVERS\HpaLower.SYS><N/A> [HTTP / HTTP] <System32\Drivers\HTTP.sys><Microsoft Corporation> [IP Network Address Translator / IpNat] <system32\DRIVERS\ipnat.sys><Microsoft Corporation> [MegaIDE / MegaIDE] <\SystemRoot\System32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.> [MEMSCAN / MEMSCAN] <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [MRxSmb / MRxSmb] <system32\DRIVERS\mrxsmb.sys><Microsoft Corporation> [npkcrypt / npkcrypt] <\??\F:\苏备迎\QQ\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [NTSIM / NTSIM] <\??\C:\WINDOWS\system32\ntsim.sys><VIA Networking Technologies, Inc.> [pciidey / pciidey] <C:\WINDOWS\SYSTEM32\DRIVERS\pciidey.SYS><Windows (R) 2000 DDK provider> [Direct Parallel Link Driver / Ptilink] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [Rdbss / Rdbss] <system32\DRIVERS\rdbss.sys><Microsoft Corporation> [Secdrv / Secdrv] <system32\DRIVERS\secdrv.sys><N/A> [Sony USB Filter Driver (SONYPVU1) / SONYPVU1] <system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖

caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	发表于： 2006-10-05 00:54 \| 只看楼主短消息资料字号：小中大 9楼 [TCP/IP Protocol Driver / Tcpip] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [Microcode Update Driver / Update] <system32\DRIVERS\update.sys><Microsoft Corporation> [viagfx / viagfx] <system32\DRIVERS\vtmini.sys><Copyright (C) VIA/S3 Graphics Co, Ltd.> [ViaIde / ViaIde] <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation> ================================== 浏览器加载项 [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Acrobatchs\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [Tencent Browser Helper] {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\Adplus\SSAddr1.dll, Tencent> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <F:\苏备迎\QQ\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [DragSearch BHO] {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, N/A> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft> [] {F79B2338-A6E7-46D4-9202-422AA6E74F43} <C:\WINDOWS\EagleFlt.dll, N/A> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft> [金山快译(&K)] {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll, 金山软件股份有限公司> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Acrobatchs\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [Tencent Browser Helper] {0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\Adplus\SSAddr1.dll, Tencent> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [HHCtrl Object] {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <F:\苏备迎\QQ\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [DragSearch BHO] {62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [金山快译(&K)] {6C3797D2-3FEF-4CD4-B654-D3AE55B4128C} <C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll, 金山软件股份有限公司> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft> [RMGetLicense Class] {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation> [卡卡上网安全助手] {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [TencentVmpCtl Class] {D9819BD5-422B-4281-8523-726466ED692B} <C:\Program Files\Tencent\Viewpoint Media Player\AxMetaStream.dll, Viewpoint Corporation> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft> [] {F79B2338-A6E7-46D4-9202-422AA6E74F43} <C:\WINDOWS\EagleFlt.dll, N/A> [上传到QQ网络硬盘] <F:\苏备迎\QQ\QQ\AddToNetDisk.htm, N/A> [使用网际快车下载] <C:\Program Files\FlashGet\jc_link.htm, N/A> [使用网际快车下载全部链接] <C:\Program Files\FlashGet\jc_all.htm, N/A> [添加到QQ自定义面板] <F:\苏备迎\QQ\QQ\AddPanel.htm, N/A> [添加到QQ表情] <F:\苏备迎\QQ\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <F:\苏备迎\QQ\QQ\SendMMS.htm, N/A> ================================== 正在运行的进程 [PID: 384][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 444][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 468][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 512][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime] [N/A, N/A] [C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 2, 6, 61] [PID: 524][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 664][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 732][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 772][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 788][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 832][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 876][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 892][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 35] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 18, 1, 0, 11] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\Program Files\Rising\Rav\HookWeb.dll] [rising, 18, 0, 0, 2] [C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖

caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖	发表于： 2006-10-05 00:55 \| 只看楼主短消息资料字号：小中大 10楼 [C:\Program Files\Rising\Rav\MailMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 34] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 27] [C:\Program Files\Rising\Rav\RSUnpack.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 17] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19] [C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\Program Files\Rising\Rav\ScanNet.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\Rav\RsStore.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [PID: 1024][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\lxcglmpm.DLL] [, 1.154.7.0] [C:\WINDOWS\system32\LXPRMON.DLL] [N/A, N/A] [C:\WINDOWS\system32\IMGMAN32.dll] [Data Techniques, Inc., 7.20 ] [C:\WINDOWS\system32\IM31IMG.DIL] [Data Techniques, Inc., 7.20 ] [C:\WINDOWS\system32\LXPMONRC.DLL] [Lexmark International, Inc., 1.0.6.0] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\lxcgPP5C.dll] [Lexmark International, Inc., 2.15.111.14] [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxcgUI5C.DLL] [Lexmark International, Inc., 2.15.111.14] [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxcgSTRN.DLL] [Lexmark International, Inc., 2.15.111.14] [PID: 1180][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1300][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 1468][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1848][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 2, 6, 61] [C:\Program Files\Acrobatchs\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.0.2004121400] [C:\PROGRA~1\FLASHGET\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [C:\WINDOWS\EagleFlt.dll] [N/A, N/A] [C:\Program Files\Acrobatchs\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0] [C:\WINDOWS\system32\UNISPIM.IME] [北京清华紫光软件股份有限公司, 3.0.0.3045] [C:\WINDOWS\system32\upengine.dll] [北京清华紫光软件股份有限公司, 3.0.0.3045] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\TENCENT\Adplus\SSAddr1.dll] [Tencent, 4, 2, 6, 61] [C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime] [N/A, N/A] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21] [c:\test.dll] [, 1, 0, 0, 11] [PID: 2020][C:\Program Files\Lenovo\网络爸爸\EagleSvr.exe] [tuEagles, 6.5.4.14] [C:\Program Files\Lenovo\网络爸爸\eaglep.dll] [N/A, N/A] [C:\Program Files\Lenovo\网络爸爸\EglLogin.dll] [N/A, N/A] [C:\Program Files\Lenovo\网络爸爸\eagler.dll] [N/A, N/A] [C:\Program Files\Lenovo\网络爸爸\eaglek.dll] [N/A, N/A] [C:\Program Files\Lenovo\网络爸爸\eaglet.dll] [N/A, N/A] [C:\Program Files\Lenovo\网络爸爸\EagleC.dll] [N/A, N/A] [C:\Program Files\Lenovo\网络爸爸\workdll.dll] [N/A, N/A] [C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 2, 6, 61] [C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime] [N/A, N/A] [PID: 156][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 2, 6, 61] [C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime] [N/A, N/A] [PID: 168][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 2, 6, 61] [C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime] [N/A, N/A] [PID: 420][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 2, 6, 61] [C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime] [N/A, N/A] [C:\Documents and Settings\EADING\桌面\g0ld.com] [N/A, N/A] [C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime] [N/A, N/A] [C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 2, 6, 61] [PID: 200][F:\下载\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 2, 6, 61] [C:\Program Files\Common Files\Microsoft Shared\MSINFO\InfoMz.Ime] [N/A, N/A] ================================== 文件关联 .TXT Error. [C:\WINDOWS\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM Error. [C:\WINDOWS\hh.exe %1] .HLP Error. [C:\WINDOWS\winhlp32.exe %1] .INI Error. [C:\WINDOWS\NOTEPAD.EXE %1] .INF Error. [C:\WINDOWS\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 7b.com.cn 127.0.0.1 aifind.info 127.0.0.1 allsearcher.info 127.0.0.1 ehttp.cc 127.0.0.1 freednshost.info 127.0.0.1 i-lookup.com 127.0.0.1 www.23.la 127.0.0.1 www.joyiex.com 127.0.0.1 www.mj2005.com 127.0.0.1 www.mydj2005.com 127.0.0.1 www.nkvd.us 127.0.0.1 www.xfreehosting.com 127.0.0.1 www.xxx166.com ================================== 烦请指点迷津，谢谢！
caiizi 拙长孩提狮帖子:84 注册: 2004-10-29 来自:天之崖

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT