折磨我几天了,请版主帮我看看啊 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛折磨我几天了,请版主帮我看看啊

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

折磨我几天了,请版主帮我看看啊

JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	发表于： 2006-09-28 13:06 \| 只看楼主短消息资料字号：小中大 1楼折磨我几天了,请版主帮我看看啊当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Rising\Rav\Ravmond.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Rising\Rav\RavStub.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\Explorer.EXE C:\Program Files\rising\Rfw\Rfw.exe C:\Program Files\Rising\Rav\RavTask.exe C:\Program Files\Rising\Rav\Ravmon.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\System32\svchost.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\jason\LOCALS~1\Temp\Rar$EX00.781\HijackThis1991zww.exe F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe O2 - BHO: apronA Class - {557B9038-FC87-453C-8B08-32D85F46EAC4} - C:\WINDOWS\QQGame.dll O3 - IE工具栏增项: xtramsn - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-nz\msntb.dll (file missing) O3 - IE工具栏增项: 新浪ViVi收藏夹 - {15DDE989-CD45-4561-BF99-D22C0D5C2B85} - C:\WINDOWS\Downlo~1\vivimin.dll O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - 启动项HKLM\\Run: [IgfxTray] ; C:\WINDOWS\System32\igfxtray.exe O4 - 启动项HKLM\\Run: [rfw] C:\Program Files\rising\Rfw\Rfw.exe O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [IMEKRMIG6.1] ; C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE O4 - 启动项HKLM\\Run: [HotKeysCmds] ; C:\WINDOWS\System32\hkcmd.exe O4 - 启动项HKLM\\Run: [RavTimer] C:\Program Files\rising\Rav\RavTimer.exe O4 - 启动项HKLM\\Run: [BIE] ; ; ; Rundll32 C:\WINDOWS\DOWNLO~1\BDPlugin.dll,Rundll32 O4 - 启动项HKLM\\Run: [MSPY2002] ; ; ; C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] ; ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [PHIME2002ASync] ; ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [QuickTime Task] ; ; ; "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - 启动项HKLM\\Run: [StormCodec_Helper] ; ; ; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti O4 - 启动项HKLM\\Run: [UFD Monitor] ; ; ; C:\Program Files\USB Flash Disk Utility\UFD Utility\UFDMon.exe O4 - 启动项HKLM\\Run: [UFD Utility] ; ; ; C:\Program Files\USB Flash Disk Utility\UFD Utility\USBTD.exe O4 - 启动项HKLM\\Run: [AGRSMMSG] ; ; ; ; AGRSMMSG.exe O4 - 启动项HKLM\\Run: [helper.dll] ; ; ; ; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32 O4 - 启动项HKLM\\Run: [QGHLs] ; ; ; ; O4 - 启动项HKLM\\Run: [update] ; ; ; ; O4 - 启动项HKLM\\Run: [updater] ; ; ; ; O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [googletalk] ; ; ; "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - HKCU\..\Run: [Super Rabbit IEPro] ; ; ; C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD O4 - HKCU\..\Run: [MSMSGS] ; ; ; ; O4 - HKCU\..\Run: [Proh] ; ; ; ; O4 - HKCU\..\Run: [Skype] ; ; ; ; "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [Yahoo! Pager] ; ; ; ; rem C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm O8 - IE右键菜单中的新增项目: 收藏此页到新浪ViVi - http://vivi.sina.com.cn/collect/click.php?agent=viviband O9 - 浏览器额外的按钮: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - C:\Program Files\Thunder Network\Thunder\Thunder.exe O9 - 浏览器额外的“工具”菜单项: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - C:\Program Files\Thunder Network\Thunder\Thunder.exe O9 - 浏览器额外的按钮: Yahoo 3.5G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing) O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing) O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing) O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing) O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing) O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing) O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll O16 - DPF: {15DDE989-CD45-4561-BF99-D22C0D5C2B85} (新浪ViVi收藏夹) - http://image2.sina.com.cn/pfp/iweb/vivimin.cab O16 - DPF: {6B78B13A-6E99-4588-8EAB-C2399B202022} (iVocalize Web Conference 4 Setup) - http://chrissorensen.ivocalize.net/iv4.cab O16 - DPF: {733652F9-53EF-4BF1-B391-375980675D6F} (V3PROXL Control) - http://download.3721.com/download/myv3/plugin/myv3light.cab O16 - DPF: {CC32D4D8-2A0B-4CEB-B105-C9B968379105} (CGameManagerCtrl Object) - http://www.disney.go.com/games/downloads/gamemanager/DIGGameManager.cab O16 - DPF: {EA1B8527-E422-4909-825A-70BE0694F18E} (PortfolioManagerWT ProfileManager Class) - https://online.westpac.com.au/wtoa/wtOtherAccounts/portfoliomanagerwt.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{D2454A33-6E4C-4DE9-8682-74F5E379214E}: NameServer = 202.27.184.3,202.27.184.5 O18 - 列举现有的协议: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: reset5 - C:\WINDOWS\SYSTEM32\reset5.dll O20 - Winlogon Notify: System Safety Monitor - C:\WINDOWS\SYSTEM32\SSMWinlogonEx.dll O23 - NT 服务: huhu (hkk) - Unknown owner - C:\WINDOWS\dirshell O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe 2006-09-28 15:16:44.483000000
JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	分享到：

JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	发表于： 2006-09-28 13:06 \| 只看楼主短消息资料字号：小中大 2楼启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation] <googletalk><; ; ; "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart> [] <Super Rabbit IEPro><; ; ; C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [] <MSMSGS><; ; ; ; > [] <Proh><; ; ; ; > [] <Skype><; ; ; ; "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized> [] <Yahoo! Pager><; ; ; ; rem C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IgfxTray><; C:\WINDOWS\System32\igfxtray.exe> [Intel Corporation] <rfw><C:\Program Files\rising\Rfw\Rfw.exe> [Beijing Rising Technology Corporation Limited] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <IMEKRMIG6.1><; C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE> [Microsoft Corporation] <HotKeysCmds><; C:\WINDOWS\System32\hkcmd.exe> [Intel Corporation] <RavTimer><C:\Program Files\rising\Rav\RavTimer.exe> [] <BIE><; ; ; Rundll32 C:\WINDOWS\DOWNLO~1\BDPlugin.dll,Rundll32> [] <MSPY2002><; ; ; C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC> [] <PHIME2002A><; ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <PHIME2002ASync><; ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <QuickTime Task><; ; ; "C:\Program Files\QuickTime\qttask.exe" -atboottime> [] <StormCodec_Helper><; ; ; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [] <UFD Monitor><; ; ; C:\Program Files\USB Flash Disk Utility\UFD Utility\UFDMon.exe> [] <UFD Utility><; ; ; C:\Program Files\USB Flash Disk Utility\UFD Utility\USBTD.exe> [] <AGRSMMSG><; ; ; ; AGRSMMSG.exe> [] <helper.dll><; ; ; ; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [] <QGHLs><; ; ; ; > [] <update><; ; ; ; > [] <updater><; ; ; ; > [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\System32\Userinit.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\reset5] <WinlogonNotify: reset5><reset5.dll> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\System Safety Monitor] <WinlogonNotify: System Safety Monitor><SSMWinlogonEx.dll> [System Safety Limited] ================================== 启动文件夹服务 [huhu / hkk] <C:\WINDOWS\dirshell><N/A> [Reset 5 / Reset 5] <C:\WINDOWS\system32\srvany.exe><N/A> [WINS Client / RpcPatch] <><N/A> [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 浏览器加载项 [apronA Class] {557B9038-FC87-453C-8B08-32D85F46EAC4} <C:\WINDOWS\QQGame.dll, > [启动迅雷] {0062C9BD-B349-40DE-91A0-755F37ACD559} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD> [Yahoo 3.5G电邮] {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [情景聊天] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A> [] {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A> [] {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A> [xtramsn] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-nz\msntb.dll, N/A> [新浪ViVi收藏夹] {15DDE989-CD45-4561-BF99-D22C0D5C2B85} <C:\WINDOWS\Downlo~1\vivimin.dll, 北京新浪信息技术有限公司> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [新浪ViVi收藏夹] {15DDE989-CD45-4561-BF99-D22C0D5C2B85} <C:\WINDOWS\Downlo~1\vivimin.dll, 北京新浪信息技术有限公司> [iVocalize Web Conference 4 Setup] {6B78B13A-6E99-4588-8EAB-C2399B202022} <C:\WINDOWS\System32\iv4.dll, N/A> [V3PROXL Control] {733652F9-53EF-4BF1-B391-375980675D6F} <C:\WINDOWS\DOWNLO~1\v3proxl.ocx, Ahnlab, Inc.> [Update Class] {9F1C11AA-197B-4942-BA54-47A8489BB47F} <C:\WINDOWS\System32\iuctl.dll, Microsoft Corporation> [CGameManagerCtrl Object] {CC32D4D8-2A0B-4CEB-B105-C9B968379105} <C:\WINDOWS\Downloaded Program Files\DIGGameManager.dll, Disney Enterprises Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [PortfolioManagerWT ProfileManager Class] {EA1B8527-E422-4909-825A-70BE0694F18E} <C:\WINDOWS\Downloaded Program Files\portfoliomanagerwt.dll, eWise Systems Pty Ltd> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> [收藏此页到新浪ViVi] <http://vivi.sina.com.cn/collect/click.php?agent=viviband, N/A>
JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:

JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	发表于： 2006-09-28 13:07 \| 只看楼主短消息资料字号：小中大 3楼正在运行的进程 [PID: 372][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 428][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 452][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\system32\reset5.dll] <N/A><N/A> [C:\WINDOWS\system32\SSMWinlogonEx.dll] <System Safety Limited><2.0.8.582> [PID: 496][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 508][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 668][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 724][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 744][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 912][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 936][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 952][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15> [C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [C:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 16> [C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 1048][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\system32\CNMLM3y.DLL] <CANON INC.><1.52.2.0> [C:\WINDOWS\system32\E_SL2064.DLL] <SEIKO EPSON CORPORATION><2, 8, 0, 0> [C:\WINDOWS\system32\EBPMON3.DLL] <SEIKO EPSON CORPORATION><1, 1, 0, 0> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD3y.DLL] <CANON INC.><1.52.2.0> [PID: 1140][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1268][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 1320][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 1916][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [C:\WINDOWS\QQGame.dll] <><1, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 264][C:\Program Files\rising\Rfw\Rfw.exe] <Beijing Rising Technology Corporation Limited><2, 2, 0, 8> [C:\Program Files\rising\Rfw\BmpFace.dll] <Beijing Rising Technology Corporation Limited><2, 1, 0, 0> [C:\Program Files\rising\Rfw\rfw.dll] <Beijing Rising Technology Corporation Limited><2, 2, 0, 2> [C:\Program Files\rising\Rfw\chn\rfw.lag] <Beijing Rising Technology Corporation Limited><2, 2, 0, 8> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 276][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 316][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 324][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 1524][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\QQGame.dll] <><1, 0, 0, 1> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 1624][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [C:\WINDOWS\QQGame.dll] <><1, 0, 0, 1> [PID: 1504][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1680][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 2028][C:\DOCUME~1\jason\LOCALS~1\Temp\Rar$EX04.937\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:

JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	发表于： 2006-09-28 13:08 \| 只看楼主短消息资料字号：小中大 4楼正在运行的进程 [PID: 372][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 428][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 452][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\system32\reset5.dll] <N/A><N/A> [C:\WINDOWS\system32\SSMWinlogonEx.dll] <System Safety Limited><2.0.8.582> [PID: 496][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 508][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 668][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 724][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 744][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 912][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 936][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 952][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15> [C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [C:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 16> [C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 1048][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\system32\CNMLM3y.DLL] <CANON INC.><1.52.2.0> [C:\WINDOWS\system32\E_SL2064.DLL] <SEIKO EPSON CORPORATION><2, 8, 0, 0> [C:\WINDOWS\system32\EBPMON3.DLL] <SEIKO EPSON CORPORATION><1, 1, 0, 0> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD3y.DLL] <CANON INC.><1.52.2.0> [PID: 1140][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1268][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 1320][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 1916][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [C:\WINDOWS\QQGame.dll] <><1, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 264][C:\Program Files\rising\Rfw\Rfw.exe] <Beijing Rising Technology Corporation Limited><2, 2, 0, 8> [C:\Program Files\rising\Rfw\BmpFace.dll] <Beijing Rising Technology Corporation Limited><2, 1, 0, 0> [C:\Program Files\rising\Rfw\rfw.dll] <Beijing Rising Technology Corporation Limited><2, 2, 0, 2> [C:\Program Files\rising\Rfw\chn\rfw.lag] <Beijing Rising Technology Corporation Limited><2, 2, 0, 8> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 276][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 316][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 324][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 1524][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\QQGame.dll] <><1, 0, 0, 1> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 1624][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [C:\WINDOWS\QQGame.dll] <><1, 0, 0, 1> [PID: 1504][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1680][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> [PID: 2028][C:\DOCUME~1\jason\LOCALS~1\Temp\Rar$EX04.937\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\WINDOWS\System32\GDIPLUS32.dll] <N/A><N/A> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:

JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	发表于： 2006-09-28 13:09 \| 只看楼主短消息资料字号：小中大 5楼前几天我电脑用瑞星扫出好几个病毒,Trojan.PSW.QQGame.v, Rootkit.Callgate.a,Backdoor.Gpigeon.gen, Trojan.DL.Small.oab, Trojan.DL.Direct.bi, Trojan.DL.Agent.lro, Trojan.PSW.LMir.atc, Rootkit.Callgate.a, 我根据其他会员发的帖子尝试删掉了几个, 也不知道对不对,剩下 Rootkit.Callgate.a 在C:\System Volume Information的几个文件里不知应怎么做,今天我根据baohe版主关于手工杀毒的帖子去做,前面4项都能顺利地删除,但是在第5步回收站里没找到那几个文件,是不是跟我早就卸载了qq有关?,还有我的电脑经常出现explorer.exe出错的提示,是不是病毒的原因,还有瑞星实时监控老是提示删除病毒Trojan.DL.Agent.jmk,hijack日志和srenglog如下,请务必帮我看看啊,先谢谢了.
JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:

feifei飞飞初生襁褓狮帖子:74 注册: 2006-09-24 来自:	发表于： 2006-09-28 13:11 \| 短消息资料字号：小中大 6楼发个HJ上来
feifei飞飞初生襁褓狮帖子:74 注册: 2006-09-24 来自:

mopery 卡卡技术团队帖子:17737 注册: 2005-12-06 来自:New York	发表于： 2006-09-28 13:11 \| 短消息资料字号：小中大 7楼 O23 - NT 服务: huhu (hkk) - Unknown owner - C:\WINDOWS\dirshell 安全模式...打开注册表编辑器，展开：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services 搜索 hkk 删除... 删除 C:\WINDOWS\dirshell O10 - 未知的文件在 Winsock LSP: c:\windows\system32\gdiplus32.dll 需要用LSPFix 来修复.. LSPFix(汉化版) 下载地址:http://mopery.hits.io/LSPFix.zip 同时下载:http://mopery.hits.io/WinsockXPFix.zip ---------------------------------------------------------------- 先运行LSPFix ... 勾上我确定要进行修复操作 ... 然后将gdiplus32.dll移到右边...点下完成... ---------------------------------------------------------------- 如果在操作之后不能上网...请用WinsockXPFix.exe 修复一下即可...安全模式下.. 修复 O2 - BHO: apronA Class - {557B9038-FC87-453C-8B08-32D85F46EAC4} - C:\WINDOWS\QQGame.dll O3 - IE工具栏增项: xtramsn - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-nz\msntb.dll (file missing) O4 - 启动项HKLM\\Run: [QGHLs] ; ; ; ; O4 - 启动项HKLM\\Run: [update] ; ; ; ; O4 - 启动项HKLM\\Run: [updater] ; ; ; ; O4 - HKCU\..\Run: [MSMSGS] ; ; ; ; O4 - HKCU\..\Run: [Proh] ; ; ; ; O20 - Winlogon Notify: reset5 - C:\WINDOWS\SYSTEM32\reset5.dll 删除 C:\WINDOWS\QQGame.dll C:\WINDOWS\SYSTEM32\reset5.dll http://download5.pctutu.com/soft/winspeed782.zip 用超级兔子清理王在安全模式下卸载流氓软件...
mopery 卡卡技术团队帖子:17737 注册: 2005-12-06 来自:New York

JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	发表于： 2006-09-28 15:16 \| 只看楼主短消息资料字号：小中大 8楼十分感谢,我已完全按你说步骤操作完毕,感觉上应该没问题了,不过还请你帮我看看完成后的日志,谢谢. 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Rising\Rav\Ravmond.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Rising\Rav\RavStub.exe C:\WINDOWS\Explorer.EXE C:\Program Files\rising\Rfw\Rfw.exe C:\Program Files\Rising\Rav\RavTask.exe C:\Program Files\Rising\Rav\Ravmon.exe C:\WINDOWS\System32\ctfmon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\jason\LOCALS~1\Temp\Rar$EX00.437\HijackThis1991zww.exe C:\Program Files\Microsoft Office\Office\WINWORD.EXE F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe O3 - IE工具栏增项: 新浪ViVi收藏夹 - {15DDE989-CD45-4561-BF99-D22C0D5C2B85} - C:\WINDOWS\Downlo~1\vivimin.dll O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - 启动项HKLM\\Run: [IgfxTray] ; C:\WINDOWS\System32\igfxtray.exe O4 - 启动项HKLM\\Run: [rfw] C:\Program Files\rising\Rfw\Rfw.exe O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [IMEKRMIG6.1] ; C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE O4 - 启动项HKLM\\Run: [HotKeysCmds] ; C:\WINDOWS\System32\hkcmd.exe O4 - 启动项HKLM\\Run: [RavTimer] C:\Program Files\rising\Rav\RavTimer.exe O4 - 启动项HKLM\\Run: [BIE] ; ; ; Rundll32 C:\WINDOWS\DOWNLO~1\BDPlugin.dll,Rundll32 O4 - 启动项HKLM\\Run: [MSPY2002] ; ; ; C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] ; ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [PHIME2002ASync] ; ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [QuickTime Task] ; ; ; "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - 启动项HKLM\\Run: [StormCodec_Helper] ; ; ; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti O4 - 启动项HKLM\\Run: [UFD Monitor] ; ; ; C:\Program Files\USB Flash Disk Utility\UFD Utility\UFDMon.exe O4 - 启动项HKLM\\Run: [UFD Utility] ; ; ; C:\Program Files\USB Flash Disk Utility\UFD Utility\USBTD.exe O4 - 启动项HKLM\\Run: [AGRSMMSG] ; ; ; ; AGRSMMSG.exe O4 - 启动项HKLM\\Run: [helper.dll] ; ; ; ; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [googletalk] ; ; ; "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart O4 - HKCU\..\Run: [Super Rabbit IEPro] ; ; ; C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD O4 - HKCU\..\Run: [Skype] ; ; ; ; "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [Yahoo! Pager] ; ; ; ; rem C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm O8 - IE右键菜单中的新增项目: 收藏此页到新浪ViVi - http://vivi.sina.com.cn/collect/click.php?agent=viviband O9 - 浏览器额外的按钮: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - C:\Program Files\Thunder Network\Thunder\Thunder.exe O9 - 浏览器额外的“工具”菜单项: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - C:\Program Files\Thunder Network\Thunder\Thunder.exe O9 - 浏览器额外的按钮: Yahoo 3.5G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing) O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing) O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing) O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing) O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing) O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing) O16 - DPF: {15DDE989-CD45-4561-BF99-D22C0D5C2B85} (新浪ViVi收藏夹) - http://image2.sina.com.cn/pfp/iweb/vivimin.cab O16 - DPF: {6B78B13A-6E99-4588-8EAB-C2399B202022} (iVocalize Web Conference 4 Setup) - http://chrissorensen.ivocalize.net/iv4.cab O16 - DPF: {733652F9-53EF-4BF1-B391-375980675D6F} (V3PROXL Control) - http://download.3721.com/download/myv3/plugin/myv3light.cab O16 - DPF: {CC32D4D8-2A0B-4CEB-B105-C9B968379105} (CGameManagerCtrl Object) - http://www.disney.go.com/games/downloads/gamemanager/DIGGameManager.cab O16 - DPF: {EA1B8527-E422-4909-825A-70BE0694F18E} (PortfolioManagerWT ProfileManager Class) - https://online.westpac.com.au/wtoa/wtOtherAccounts/portfoliomanagerwt.cab O18 - 列举现有的协议: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - 列举现有的协议: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\System32\msvidctl.dll O18 - 列举现有的协议: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ipp - (no CLSID) - (no file) O18 - 列举现有的协议: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll O18 - 列举现有的协议: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - 列举现有的协议: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\System32\msvidctl.dll O18 - 列举现有的协议: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - 列举现有的协议: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - 列举现有的协议: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\WINDOWS\System32\inetcomm.dll O18 - 列举现有的协议: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll O18 - 列举现有的协议: msdaipp - (no CLSID) - (no file) O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - 列举现有的协议: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - 列举现有的协议: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\System32\mshtml.dll O18 - 列举现有的协议: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\System32\msvidctl.dll O18 - 列举现有的协议: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll O18 - 列举现有的协议: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\System32\msdxm.ocx O18 - 列举现有的协议: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\System32\wiascr.dll O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: System Safety Monitor - C:\WINDOWS\SYSTEM32\SSMWinlogonEx.dll O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:

JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	发表于： 2006-09-28 15:16 \| 只看楼主短消息资料字号：小中大 9楼启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation] <googletalk><; ; ; "C:\Program Files\Google\Google Talk\googletalk.exe" /autostart> [] <Super Rabbit IEPro><; ; ; C:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [] <Skype><; ; ; ; "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized> [] <Yahoo! Pager><; ; ; ; rem C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IgfxTray><; C:\WINDOWS\System32\igfxtray.exe> [Intel Corporation] <rfw><C:\Program Files\rising\Rfw\Rfw.exe> [Beijing Rising Technology Corporation Limited] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <IMEKRMIG6.1><; C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE> [Microsoft Corporation] <HotKeysCmds><; C:\WINDOWS\System32\hkcmd.exe> [Intel Corporation] <RavTimer><C:\Program Files\rising\Rav\RavTimer.exe> [] <BIE><; ; ; Rundll32 C:\WINDOWS\DOWNLO~1\BDPlugin.dll,Rundll32> [] <MSPY2002><; ; ; C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC> [] <PHIME2002A><; ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <PHIME2002ASync><; ; ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <QuickTime Task><; ; ; "C:\Program Files\QuickTime\qttask.exe" -atboottime> [] <StormCodec_Helper><; ; ; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [] <UFD Monitor><; ; ; C:\Program Files\USB Flash Disk Utility\UFD Utility\UFDMon.exe> [] <UFD Utility><; ; ; C:\Program Files\USB Flash Disk Utility\UFD Utility\USBTD.exe> [] <AGRSMMSG><; ; ; ; AGRSMMSG.exe> [] <helper.dll><; ; ; ; C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\System32\Userinit.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\System Safety Monitor] <WinlogonNotify: System Safety Monitor><SSMWinlogonEx.dll> [System Safety Limited] ================================== 启动文件夹服务 [Reset 5 / Reset 5] <C:\WINDOWS\system32\srvany.exe><N/A> [WINS Client / RpcPatch] <><N/A> [Rising Process Communication Center / RsCCenter] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 浏览器加载项 [启动迅雷] {0062C9BD-B349-40DE-91A0-755F37ACD559} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD> [Yahoo 3.5G电邮] {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [情景聊天] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A> [] {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A> [] {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A> [新浪ViVi收藏夹] {15DDE989-CD45-4561-BF99-D22C0D5C2B85} <C:\WINDOWS\Downlo~1\vivimin.dll, 北京新浪信息技术有限公司> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [新浪ViVi收藏夹] {15DDE989-CD45-4561-BF99-D22C0D5C2B85} <C:\WINDOWS\Downlo~1\vivimin.dll, 北京新浪信息技术有限公司> [iVocalize Web Conference 4 Setup] {6B78B13A-6E99-4588-8EAB-C2399B202022} <C:\WINDOWS\System32\iv4.dll, N/A> [V3PROXL Control] {733652F9-53EF-4BF1-B391-375980675D6F} <C:\WINDOWS\DOWNLO~1\v3proxl.ocx, Ahnlab, Inc.> [Update Class] {9F1C11AA-197B-4942-BA54-47A8489BB47F} <C:\WINDOWS\System32\iuctl.dll, Microsoft Corporation> [CGameManagerCtrl Object] {CC32D4D8-2A0B-4CEB-B105-C9B968379105} <C:\WINDOWS\Downloaded Program Files\DIGGameManager.dll, Disney Enterprises Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [PortfolioManagerWT ProfileManager Class] {EA1B8527-E422-4909-825A-70BE0694F18E} <C:\WINDOWS\Downloaded Program Files\portfoliomanagerwt.dll, eWise Systems Pty Ltd> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> [收藏此页到新浪ViVi] <http://vivi.sina.com.cn/collect/click.php?agent=viviband, N/A>
JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:

JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:	发表于： 2006-09-28 15:16 \| 只看楼主短消息资料字号：小中大 10楼正在运行的进程 [PID: 296][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 352][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 376][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\system32\SSMWinlogonEx.dll] <System Safety Limited><2.0.8.582> [PID: 420][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 432][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 588][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 624][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 644][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 788][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 816][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 828][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15> [C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [C:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 16> [C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 940][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\system32\CNMLM3y.DLL] <CANON INC.><1.52.2.0> [C:\WINDOWS\system32\E_SL2064.DLL] <SEIKO EPSON CORPORATION><2, 8, 0, 0> [C:\WINDOWS\system32\EBPMON3.DLL] <SEIKO EPSON CORPORATION><1, 1, 0, 0> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD3y.DLL] <CANON INC.><1.52.2.0> [PID: 1040][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1168][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 164][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 632][C:\Program Files\rising\Rfw\Rfw.exe] <Beijing Rising Technology Corporation Limited><2, 2, 0, 8> [C:\Program Files\rising\Rfw\BmpFace.dll] <Beijing Rising Technology Corporation Limited><2, 1, 0, 0> [C:\Program Files\rising\Rfw\rfw.dll] <Beijing Rising Technology Corporation Limited><2, 2, 0, 2> [C:\Program Files\rising\Rfw\chn\rfw.lag] <Beijing Rising Technology Corporation Limited><2, 2, 0, 8> [PID: 720][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 732][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 740][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 2008][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 304][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [PID: 1512][C:\Program Files\Microsoft Office\Office\WINWORD.EXE] <Microsoft Corporation><9.0.2823> [C:\Program Files\Rising\Rav\RsPlugIn.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMUI3y.DLL] <CANON INC.><1.52.2.0> [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMDR3y.DLL] <CANON INC.><1.52.2.0> [PID: 1860][C:\DOCUME~1\jason\LOCALS~1\Temp\Rar$EX36.218\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
JasoniI 初生襁褓狮帖子:30 注册: 2006-07-20 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT