求助!!帮帮小妹吧! - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛求助!!帮帮小妹吧!

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

求助!!帮帮小妹吧!

nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	发表于： 2006-11-02 16:35 \| 只看楼主短消息资料字号：小中大 1楼求助!!帮帮小妹吧! 前天登陆QQ,电脑忽然自动重启,重启后提示"系统从一个严重的错误中恢复",然后发现瑞星监控被禁用,杀毒程序也无法打开.我猜肯定是中毒了.请各位大哥大姐帮帮小妹吧1 先谢谢了 2006-11-03 13:42:17
nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	分享到：

建能横据古稀狮帖子:5755 注册: 2005-04-01 来自:	发表于： 2006-11-02 16:37 \| 短消息资料字号：小中大 2楼请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来下载网址 http://www.kztechs.com/sreng/sreng2.zip http://forum.ikaka.com/topic.asp?board=67&artid=5188931 日志一次粘不完，分次粘完，请不要修改
建能横据古稀狮帖子:5755 注册: 2005-04-01 来自:

nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	发表于： 2006-11-02 17:44 \| 只看楼主短消息资料字号：小中大 3楼启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] <bgswitch><C:\WINDOWS\system32\bgswitch.exe> [N/A] <P2kAutostart><D:\备份2\SETUP\新建文件夹\v3i\工具\P2kCommander-V3\P2kCommander-V3.2.6_ha_chinawrc\P2kAutostart.exe> [N/A] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <RfwMain><"D:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <IgfxTray><C:\WINDOWS\system32\igfxtray.exe> [(Verified)Intel Corporation] <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe> [(Verified)Intel Corporation] <SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.] <Desktop><C:\WINDOWS\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll> [N/A] <SearchNet_Up><"C:\Program Files\SearchNet\ServeUp.exe"> [中搜在线] <CdnCtr><> [N/A] <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [N/A] <WebThunder><C:\Program Files\Thunder Network\WebThunder\WebThunder.exe> [深圳市迅雷网络技术有限公司] <SoundMam><C:\WINDOWS\system32\svohost.exe> [N/A] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A] <RavTask><"D:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] <{B48F6409-4740-475B-A474-651F54CCE460}><C:\Program Files\Common Files\Microsoft Shared\Themes\MsInfo.Dll> [N/A] [HKEY_CURRENT_USER\Control Panel\Desktop] <SCRNSAVE.EXE><C:\WINDOWS\system32\FLURRY.SCR> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <lsl6><; RunDll32 "C:\WINDOWS\Downlo~1\lsl6.dll",Run> [Microsoft Corporation] <MoveSearch><; C:\Program Files\HuaCi\huaci\zsearch.exe> [N/A]
nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:

nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	发表于： 2006-11-02 17:45 \| 只看楼主短消息资料字号：小中大 4楼启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\Microsoft Office.lnk --> C:\PROGRA~1\MICROS~3\Office\OSA9.EXE [Microsoft Corporation]><N> [腾讯QQ] <C:\Documents and Settings\Administrator.C498AB2B1FCE479\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\Tencent\QQ\QQ.exe [TENCENT]><N> ================================== 服务 [Human Interface Device Access / HidServ] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Remote Log / Remote Log] <system32\ServeHost.exe><N/A> [Rising Proxy Service / RfwProxySrv] <d:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <d:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"D:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"D:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 驱动程序 [Service for WDM 3D Audio Driver / ALCXSENS] <system32\drivers\ALCXSENS.SYS><Sensaura Ltd> [Service for Realtek AC97 Audio (WDM) / ALCXWDM] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [Anfad / Anfad] <\??\C:\WINDOWS\system32\drivers\Anfad.sys><Systems Internals> [Rising TDI Base Driver / BaseTDI] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [ExpScaner / ExpScaner] <\??\D:\Program Files\Rising\Rav\ExpScan.sys><> [FAD / FAD] <system32\drivers\FAD.sys><Windows (R) 2000 DDK provider> [gvb0j / gvb0j] <\SystemRoot\system32\drivers\gvb0j.sys><N/A> [HCF_MSFT / HCF_MSFT] <system32\DRIVERS\HCF_MSFT.sys><N/A> [HOOKAPI / HOOKAPI] <\??\D:\PROGRAM FILES\RISING\RAV\HookApi.Sys><瑞星软件有限公司> [HookCont / HookCont] <\??\D:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd> [HookReg / HookReg] <\??\D:\Program Files\Rising\Rav\HookReg.sys><> [HookSys / HookSys] <\??\D:\Program Files\Rising\Rav\HookSys.sys><Rising> [HookUrl / HookUrl] <\??\D:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [ialm / ialm] <system32\DRIVERS\ialmnt5.sys><Intel Corporation> [KRegEx / KRegEx] <\??\C:\PROGRA~1\KV2006\KRegEx.sys><Jiangmin Co. Ltd.> [KSysCall Service / KSysCall] <\??\C:\PROGRA~1\KV2006\KSysCall.sys><Jiangmin Co. Ltd.> [MEMSCAN / MEMSCAN] <\??\D:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [mProcRs / mProcRs] <\??\d:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [npkcrypt / npkcrypt] <\??\D:\Tencent\QQ\npkcrypt.sys><N/A> [Motorola USB Device / P2k] <system32\DRIVERS\P2k.sys><Motorola Inc> [Direct Parallel Link Driver / Ptilink] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsFwDrv / RsFwDrv] <\??\D:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139] <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [Secdrv / Secdrv] <system32\DRIVERS\secdrv.sys><N/A> [TCP/IP Protocol Driver / Tcpip] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [tfq7z / tfq7z] <\??\C:\WINDOWS\system32\drivers\tfq7z.sys><N/A>
nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:

nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	发表于： 2006-11-02 17:45 \| 只看楼主短消息资料字号：小中大 5楼浏览器加载项 [WebThunder Browser Helper] {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll, Thunder Networking Technologies,LTD> [IEMonitor Class] {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\Program Files\DeskAdTop\deskipn.dll, > [IE Address Browser Helper] {2A0176FE-008B-4706-90F5-BBA532A49731} <C:\Program Files\SearchNet\SNHpr.dll, Beijing Zhongsou Online Software> [IE Browser Helper] {3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\arrc7gh.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Letscool System Helper] {F0C15012-7DBD-4068-95A2-0A82DB03AC35} <C:\WINDOWS\system32\CoolBho.dll, LETSCOOL Network Technology> [启动Web迅雷] {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <d:\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [BitComet工具栏] {3F1ABCDB-A875-46c1-8345-B72A4567E486} <D:\备份2\SETUP\BitComet\BitCometBar\BitCometBar0.6.dll, N/A> [PwdEdit Control] {5467862B-C477-437F-886E-EC5006B37DCA} <C:\WINDOWS\DOWNLO~1\PwdEdit.ocx, adtec> [ZLG11 Class] {979D3788-9F25-4CCC-9F66-2D7482D191E4} <C:\WINDOWS\DOWNLO~1\ZLG.dll, > [WebThunder Browser Helper] {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll, Thunder Networking Technologies,LTD> [IEMonitor Class] {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\Program Files\DeskAdTop\deskipn.dll, > [CEnroll Class] {127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, Microsoft Corporation> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [IE Address Browser Helper] {2A0176FE-008B-4706-90F5-BBA532A49731} <C:\Program Files\SearchNet\SNHpr.dll, Beijing Zhongsou Online Software> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation> [Tabular Data Control] {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation> [IE Browser Helper] {3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\arrc7gh.dll, N/A> [BitComet工具栏] {3F1ABCDB-A875-46C1-8345-B72A4567E486} <D:\备份2\SETUP\BitComet\BitCometBar\BitCometBar0.6.dll, N/A> [PwdEdit Control] {5467862B-C477-437F-886E-EC5006B37DCA} <C:\WINDOWS\DOWNLO~1\PwdEdit.ocx, adtec> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [AmarDWFa Class] {65652A12-F33E-11D0-8A4F-00C04FB9C3A5} <C:\WINDOWS\DOWNLO~1\AmarDWFa.dll, Amarsoft> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <C:\Program Files\Thunder Network\WebThunder\MediaAddin08.dll, Thunder Networking Technologies,LTD> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [ZLG11 Class] {979D3788-9F25-4CCC-9F66-2D7482D191E4} <C:\WINDOWS\DOWNLO~1\ZLG.dll, > [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [Microsoft Agent Control 2.0] {D45FD31B-5C6E-11D1-9EC1-00C04FD7081F} <C:\WINDOWS\msagent\agentctl.dll, Microsoft Corporation> [Letscool System Helper] {F0C15012-7DBD-4068-95A2-0A82DB03AC35} <C:\WINDOWS\system32\CoolBho.dll, LETSCOOL Network Technology> [上传到QQ网络硬盘] <D:\Tencent\QQ\AddToNetDisk.htm, N/A> [使用Web迅雷下载] <C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A> [使用Web迅雷下载全部链接] <C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm, N/A> [添加到QQ自定义面板] <D:\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Tencent\QQ\SendMMS.htm, N/A>
nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:

nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	发表于： 2006-11-02 17:46 \| 只看楼主短消息资料字号：小中大 6楼正在运行的进程 [PID: 296][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 352][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 376][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 420][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 440][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 584][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 632][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 672][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 796][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 828][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 852][d:\program files\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 32] [d:\program files\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13] [d:\program files\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6] [d:\program files\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21] [d:\program files\rising\rfw\MonDrv.dll] [rs, 1, 0, 0, 4] [d:\program files\rising\rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9] [PID: 996][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\WINDOWS\system32\igfxpph.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3,0,0,2104] [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll] [Thunder Networking Technologies,LTD, 6, 0, 0, 5] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [D:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [PID: 1136][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1392][C:\WINDOWS\system32\igfxtray.exe] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxress.dll] [Intel Corporation, 3,0,0,2104] [PID: 1400][C:\WINDOWS\system32\hkcmd.exe] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxhk.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3,0,0,2104] [PID: 1412][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.0.22] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [PID: 1648][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [PID: 1704][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [PID: 1292][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [PID: 2216][d:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 51] [d:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23] [d:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [d:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [PID: 3364][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\DeskAdTop\Run.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [PID: 2660][C:\Program Files\Thunder Network\WebThunder\WebThunder.exe] [深圳市迅雷网络技术有限公司, 1, 3, 0, 65] [C:\Program Files\Thunder Network\WebThunder\taskmanage.dll] [Thunder Networking Technologies,LTD, 1, 4, 1, 66] [C:\Program Files\Thunder Network\WebThunder\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 0, 0, 3] [C:\Program Files\Thunder Network\WebThunder\asyn_dns.dll] [N/A, N/A] [C:\Program Files\Thunder Network\WebThunder\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 2, 1, 34] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [C:\Program Files\Thunder Network\WebThunder\historyinfo_manage.dll] [Thunder Networking Technologies,LTD, 5, 3, 0, 228] [C:\Program Files\Thunder Network\WebThunder\UpdateDownload.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 8] [C:\Program Files\Thunder Network\WebThunder\UpdateExec.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 5] [C:\Program Files\Thunder Network\WebThunder\iEmbedShell.dll] [　, 1, 0, 0, 12] [C:\Program Files\Thunder Network\WebThunder\iEmbed05.dll] [　, 2, 3, 1, 41] [D:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [PID: 3944][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll] [Thunder Networking Technologies,LTD, 6, 0, 0, 5] [C:\Program Files\DeskAdTop\deskipn.dll] [, 1, 0, 0, 1] [C:\Program Files\SearchNet\SNHpr.dll] [Beijing Zhongsou Online Software, 1, 0, 3, 0] [d:\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\WINDOWS\system32\CoolBho.dll] [LETSCOOL Network Technology, 1, 3, 0, 2] [D:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [C:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091] [PID: 4052][D:\新建文件夹\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf [D:\] [AutoRun] open=sxs.exe shellexecute=sxs.exe shell\Auto\command=sxs.exe ================================== HOSTS 文件 127.0.0.1 localhost
nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:

nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	发表于： 2006-11-02 17:47 \| 只看楼主短消息资料字号：小中大 7楼正在运行的进程 [PID: 296][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 352][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 376][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 420][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 440][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 584][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 632][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 672][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 796][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 828][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 852][d:\program files\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 32] [d:\program files\rising\rfw\RfwRule.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13] [d:\program files\rising\rfw\rfwlog.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6] [d:\program files\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21] [d:\program files\rising\rfw\MonDrv.dll] [rs, 1, 0, 0, 4] [d:\program files\rising\rfw\ProcLib.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9] [PID: 996][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\WINDOWS\system32\igfxpph.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3,0,0,2104] [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll] [Thunder Networking Technologies,LTD, 6, 0, 0, 5] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [D:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [PID: 1136][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [PID: 1392][C:\WINDOWS\system32\igfxtray.exe] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxress.dll] [Intel Corporation, 3,0,0,2104] [PID: 1400][C:\WINDOWS\system32\hkcmd.exe] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxhk.dll] [Intel Corporation, 3,0,0,2104] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3,0,0,2104] [PID: 1412][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.0.22] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [PID: 1648][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [PID: 1704][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [PID: 1292][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [PID: 2216][d:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 51] [d:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23] [d:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [d:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [PID: 3364][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\DeskAdTop\Run.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [PID: 2660][C:\Program Files\Thunder Network\WebThunder\WebThunder.exe] [深圳市迅雷网络技术有限公司, 1, 3, 0, 65] [C:\Program Files\Thunder Network\WebThunder\taskmanage.dll] [Thunder Networking Technologies,LTD, 1, 4, 1, 66] [C:\Program Files\Thunder Network\WebThunder\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 0, 0, 3] [C:\Program Files\Thunder Network\WebThunder\asyn_dns.dll] [N/A, N/A] [C:\Program Files\Thunder Network\WebThunder\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 2, 1, 34] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [C:\Program Files\Thunder Network\WebThunder\historyinfo_manage.dll] [Thunder Networking Technologies,LTD, 5, 3, 0, 228] [C:\Program Files\Thunder Network\WebThunder\UpdateDownload.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 8] [C:\Program Files\Thunder Network\WebThunder\UpdateExec.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 5] [C:\Program Files\Thunder Network\WebThunder\iEmbedShell.dll] [　, 1, 0, 0, 12] [C:\Program Files\Thunder Network\WebThunder\iEmbed05.dll] [　, 2, 3, 1, 41] [D:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [PID: 3944][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll] [Thunder Networking Technologies,LTD, 6, 0, 0, 5] [C:\Program Files\DeskAdTop\deskipn.dll] [, 1, 0, 0, 1] [C:\Program Files\SearchNet\SNHpr.dll] [Beijing Zhongsou Online Software, 1, 0, 3, 0] [d:\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\WINDOWS\system32\CoolBho.dll] [LETSCOOL Network Technology, 1, 3, 0, 2] [D:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0] [C:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091] [PID: 4052][D:\新建文件夹\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605] [C:\WINDOWS\system32\winscok.dll] [N/A, N/A] [C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf [D:\] [AutoRun] open=sxs.exe shellexecute=sxs.exe shell\Auto\command=sxs.exe ================================== HOSTS 文件 127.0.0.1 localhost
nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:

nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	发表于： 2006-11-02 17:48 \| 只看楼主短消息资料字号：小中大 8楼谢谢
nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:

Romel 初生襁褓狮帖子:1 注册: 2006-11-02 来自:	发表于： 2006-11-02 18:15 \| 短消息资料字号：小中大 9楼你把SVOHOST.EXE这个进程结束,然后就好了.
Romel 初生襁褓狮帖子:1 注册: 2006-11-02 来自:

nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:	发表于： 2006-11-03 11:45 \| 只看楼主短消息资料字号：小中大 10楼就这么简单??!! 以后重启这个程序会不会自动运行??
nowornever 初生襁褓狮帖子:8 注册: 2006-11-02 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT