【原创】顽固的病毒...望高手指教... - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【原创】顽固的病毒...望高手指教...

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12 3 4

1 / 4 页

跳转页

【原创】顽固的病毒...望高手指教...

刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:	发表于： 2007-03-01 16:15 \| 只看楼主短消息资料字号：小中大 1楼【原创】顽固的病毒...望高手指教... 我电脑中了 Infostealer.Wowcraft 病毒... 文件为 A0016299.dll 位置为 C:\System Volume Information\_restore{EB08208B-E2C7-47A2-B749-2F4FB561B143}\RP89\ 提示已经删除成功... 但我感觉并不这么简单... 我想应该还没有找到病毒体... 请高手指教... 系统: Windows XP sp2 杀毒软件: Symantec Antivirus 完全版10.0 2007-03-05 15:34:34.590000000
刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:	分享到：

ch23 初生襁褓狮帖子:66 注册: 2006-02-16 来自:	发表于： 2007-03-01 16:20 \| 短消息资料字号：小中大 2楼病毒体就在在系统还原文件夹里（就是说你已经删除了病毒体），关掉系统还原即可．（个人不是非常推荐关闭系统还原）
ch23 初生襁褓狮帖子:66 注册: 2006-02-16 来自:

196TSV 初生襁褓狮帖子:524 注册: 2005-07-13 来自:	发表于： 2007-03-01 16:21 \| 短消息资料字号：小中大 3楼删了不就完了？还要干什么？
196TSV 初生襁褓狮帖子:524 注册: 2005-07-13 来自:

刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:	发表于： 2007-03-01 16:23 \| 只看楼主短消息资料字号：小中大 4楼不是... 这个A00的文件并不是病毒的原文件... 这个病毒很顽固的... 我查了很多资料... 都找不到病毒的主文件... 每次杀了... 过一久又出来了...
刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:

水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:	发表于： 2007-03-01 16:27 \| 短消息资料字号：小中大 5楼关闭系统还原，重启，打开系统还原，再查
水树雨下横据古稀狮帖子:8397 注册: 2006-07-26 来自:

oarbznd1 初生襁褓狮帖子:155 注册: 2007-02-28 来自:	发表于： 2007-03-01 16:33 \| 短消息资料字号：小中大 6楼建议扫个日志，删了又生，病毒主程序应该在别处或者去查杀病毒 ===================== 江民在线查毒 http://online.jiangmin.com/chadu.asp 金山在线查毒 http://shadu.duba.net/ 卡巴斯基在线杀毒(软件与瑞星常严重冲突，所以用在线) http://www.kaspersky.com.cn/webscanner/kavwebscan.html 开机时按F8安全模式而且通过KAKA看看"进程管理"（通过发行者和时间)和系统启动项管理有没可疑的若可疑文件被隐藏，双击我的电脑－工具－文件夹选项－查看－"显示所有文件和文件夹"---且把“隐藏受保护的系统文件”的勾去掉--应用--确定 ------ 日志 HijackThis V1.99.1 汉化版 http://www.skycn.com/soft/15753.html System Repair Engineer 2.3.13.690 正式版 http://www.newhua.com/soft/25562.htm
oarbznd1 初生襁褓狮帖子:155 注册: 2007-02-28 来自:

刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:	发表于： 2007-03-01 16:38 \| 只看楼主短消息资料字号：小中大 7楼 [CODE] 2007-03-01,16:25:18 System Repair Engineer 2.3.13.690 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] <PhotoShow Deluxe Media Manager><; D:\PROGRA~1\Ahead\NEROPH~1\data\xtras\mssysmgr.exe> [Ahead Software] <BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}><; "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"> [Nero AG] <MsnMsgr><; "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] <run><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation] <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.] <EPSON Stylus Photo R210 Series><; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3H2.EXE /P30 "EPSON Stylus Photo R210 Series" /O6 "USB001" /M "Stylus Photo R210"> [SEIKO EPSON CORPORATION] <PinnacleDriverCheck><; C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg> [] <NeroFilterCheck><; C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe> [Nero AG] <QuickTime Task><; "D:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Computer, Inc.] <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"> [(Verified)Symantec Corporation] <vptray><D:\PROGRA~1\SYMANT~1\VPTray.exe> [(Verified)Symantec Corporation] <StormCodec_Helper><; "D:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [N/A] <WebThunder><; D:\Program Files\Thunder Network\WebThunder\WebThunder.exe> [深圳市迅雷网络技术有限公司] <IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon] <WinlogonNotify: NavLogon><C:\WINDOWS\system32\NavLogon.dll> [(Verified)Symantec Corporation] ================================== 启动文件夹 [Adobe Gamma Loader] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><H> [Microtek 扫描仪探测器] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microtek 扫描仪探测器.lnk --> C:\PROGRA~1\Microtek\SCANWI~1\SCANNE~1.EXE []><N> [VIA RAID TOOL] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\VIA RAID TOOL.lnk --> C:\PROGRA~1\VIA\RAID\RAID_T~1.EXE [VIA Technologies]><N> [QQ游戏启动加速程序] <C:\Documents and Settings\JDCC-Media\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> D:\PROGRA~1\Tencent\QQGame\Accel.exe [深圳市腾讯计算机系统有限公司]><H> ================================== 服务 [Application Experience Lookup Services / AeLookupSvcs][Stopped/Auto Start] <C:\WINDOWS\system32\SVCH0ST.EXE -netsvcs><N/A> [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.> [Symantec Event Manager / ccEvtMgr][Running/Auto Start] <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation> [Symantec Password Validation / ccPwdSvc][Stopped/Manual Start] <"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation> [Symantec Settings Manager / ccSetMgr][Running/Auto Start] <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation> [Symantec AntiVirus Definition Watcher / DefWatch][Running/Auto Start] <"D:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation> [Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A> [SavRoam / SavRoam][Stopped/Manual Start] <"D:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec> [Symantec Network Drivers Service / SNDSrvc][Stopped/Manual Start] <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation> [Symantec SPBBCSvc / SPBBCSvc][Stopped/Manual Start] <"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><Symantec Corporation> [Symantec AntiVirus / Symantec AntiVirus][Running/Auto Start] <"D:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation> ================================== 驱动程序 [Service for WDM 3D Audio Driver / ALCXSENS][Running/Manual Start] <system32\drivers\ALCXSENS.SYS><Sensaura> [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [ASAPIW2k / ASAPIW2k][Running/Manual Start] <system32\drivers\ASAPIW2k.sys><Pinnacle Systems GmbH> [ati2mtag / ati2mtag][Running/Manual Start] <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.> [Pinnacle DV/AV Capture / BENDER][Running/Manual Start] <system32\drivers\bender.sys><Pinnacle Systems GmbH> [Symantec Eraser Control driver / eeCtrl][Running/System Start] <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start] <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.> [VIA Rhine Family Fast Ethernet Adapter Driver Service / FETNDISB][Running/Manual Start] <system32\DRIVERS\fetnd5b.sys><VIA Technologies, Inc.> [Hardlock / Hardlock][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\hardlock.sys><Aladdin Knowledge Systems> [Pinnacle Marvin Bus / MarvinBus][Running/Manual Start] <system32\DRIVERS\MarvinBus.sys><Pinnacle Systems GmbH> [NAVENG / NAVENG][Running/Manual Start] <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070228.017\naveng.sys><Symantec Corporation> [NAVEX15 / NAVEX15][Running/Manual Start] <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070228.017\navex15.sys><Symantec Corporation> [npkcrypt / npkcrypt][Running/Auto Start] <\??\D:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [NTSIM / NTSIM][Stopped/Manual Start] <\??\C:\WINDOWS\system32\ntsim.sys><VIA Networking Technologies, Inc.> [PCLEPCI / PCLEPCI][Running/System Start] <\??\C:\WINDOWS\system32\drivers\pclepci.sys><Pinnacle Systems GmbH> [Padus ASPI Shell / pfc][Running/Manual Start] <system32\drivers\pfc.sys><Padus, Inc.> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [SAVRT / SAVRT][Running/System Start] <\??\D:\Program Files\Symantec AntiVirus\savrt.sys><Symantec Corporation> [SAVRTPEL / SAVRTPEL][Running/System Start] <\??\D:\Program Files\Symantec AntiVirus\Savrtpel.sys><Symantec Corporation> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [SPBBCDrv / SPBBCDrv][Stopped/Manual Start] <\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation> [SymEvent / SymEvent][Running/Manual Start] <\??\C:\Program Files\Symantec\SYMEVENT.SYS><Symantec Corporation> [SYMREDRV / SYMREDRV][Running/Manual Start] <\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation> [SYMTDI / SYMTDI][Running/System Start] <\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation> [TCP/IP Protocol Driver / Tcpip][Running/System Start] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [VIA AGP Filter / viaagp1][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation> [viamraid / viamraid][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd> [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start] <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation> ==================================
刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:

傲气の西西初生襁褓狮帖子:9 注册: 2007-03-01 来自:	发表于： 2007-03-01 16:38 \| 短消息资料字号：小中大 8楼学习了
傲气の西西初生襁褓狮帖子:9 注册: 2007-03-01 来自:

刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:	发表于： 2007-03-01 16:38 \| 只看楼主短消息资料字号：小中大 9楼浏览器加载项 [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology> [番茄花园] {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://tomatolei.com, N/A> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [启动Web迅雷] {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [金山快译(&K)] {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll, 金山软件股份有限公司> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology> [MeadCo ScriptX] {1663ed61-23eb-11d2-b92f-008048fdd814} <C:\WINDOWS\system32\MCScripX.dll, Mead & Co Limited> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [WebThunder Browser Helper] {00000AAA-A363-466E-BEF5-9BB68697AA7F} <D:\Program Files\Thunder Network\WebThunder\WebThunderBHO_016.dll, Thunder Networking Technologies,LTD> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, N/A> [CLDown Object] {0BECAB3A-E1F8-45E6-8332-38DD750EBA01} <D:\Program Files\Tuotu\TuoTuHelper.dll, N/A> [CEnroll Class] {127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, Microsoft Corporation> [MeadCo ScriptX] {1663ED61-23EB-11D2-B92F-008048FDD814} <C:\WINDOWS\system32\MCScripX.dll, Mead & Co Limited> [MeadCo Extended HTML Printing] {1663ED6A-23EB-11D2-B92F-008048FDD814} <C:\WINDOWS\system32\MCPrintX.dll, Mead & Co Limited> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation> [HtmlDlgSafeHelper Class] {3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation> [IETag Factory] {38481807-CA0E-42D2-BF39-B33AF135CC4D} <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, Microsoft Corporation> [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology> [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [金山快译(&K)] {6C3797D2-3FEF-4CD4-B654-D3AE55B4128C} <C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll, 金山软件股份有限公司> [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A> [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [RMGetLicense Class] {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_ASF Moniker Class] {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [NMChatX Control] {D7F0CC2E-FB09-4B38-B9A7-6807CBCD4859} <C:\WINDOWS\system32\NMChatX.ocx, Netmarble> [TencentVmpCtl Class] {D9819BD5-422B-4281-8523-726466ED692B} <C:\Program Files\Tencent\Viewpoint Media Player\AxMetaStream.dll, Viewpoint Corporation> [使用Web迅雷下载] <D:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A> [使用Web迅雷下载全部链接] <D:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm, N/A> [使用脱兔下载] <D:\Program Files\Tuotu\TT_one.htm, N/A> [使用脱兔下载全部链接] <D:\Program Files\Tuotu\TT_all.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Program Files\Tencent\QQ\SendMMS.htm, N/A> ==================================
刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:

刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:	发表于： 2007-03-01 16:39 \| 只看楼主短消息资料字号：小中大 10楼正在运行的进程 [PID: 1092][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1148][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1172][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4107] [C:\WINDOWS\system32\NavLogon.dll] [Symantec Corporation, 10.0.0.359] [PID: 1220][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1232][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1392][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4107] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2495] [PID: 1408][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1516][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1624][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1780][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1884][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2012][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 103.5.1.9] [PID: 184][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.5.1.9] [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\BB.DLL] [Symantec Corporation, 1,5,1,3] [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL] [Symantec Corporation, 1,5,1,3] [C:\Program Files\Common Files\Symantec Shared\ccSet.dll] [Symantec Corporation, 103.5.1.9] [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL] [Symantec Corporation, 103.5.1.9] [PID: 416][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\EBPMON24.DLL] [SEIKO EPSON CORPORATION, 1, 10, 0, 0] [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DU18KE.DLL] [SEIKO EPSON Corporation, 0. 3. 0, 85] [C:\WINDOWS\system32\ECBTEG.DLL] [SEIKO EPSON CORPORATION, 2, 0, 0, 27] [C:\WINDOWS\system32\EBPCHP.DLL] [SEIKO EPSON CORPORATION, 1, 1, 0, 0] [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DMAI16.DLL] [SEIKO EPSON Corporation, 0. 3. 3. 10] [PID: 716][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4107] [C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2495] [PID: 788][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\JPWB.IME] [常诚研制, 4.00.950] [D:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll] [Symantec Corporation, 10.0.0.359] [PID: 924][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.0.27] [PID: 932][D:\Program Files\Symantec AntiVirus\DefWatch.exe] [Symantec Corporation, 10.0.0.359] [PID: 940][C:\Program Files\Common Files\Symantec Shared\ccApp.exe] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.5.1.9] [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL] [Symantec Corporation, 103.5.1.9] [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL] [Symantec Corporation, 103.5.1.9] [C:\WINDOWS\system32\SYMREDIR.DLL] [Symantec Corporation, 5.5.1.6] [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 103.5.1.9] [D:\Program Files\Symantec AntiVirus\SavEmail.dll] [Symantec Corporation, 10.0.0.359] [PID: 952][D:\PROGRA~1\SYMANT~1\VPTray.exe] [Symantec Corporation, 10.0.0.359] [D:\Program Files\Symantec AntiVirus\SAVRT32.DLL] [Symantec Corporation, 9.5.0.44] [D:\Program Files\Symantec AntiVirus\Cliscan.dll] [Symantec Corporation, 10.0.0.359] [D:\PROGRA~1\SYMANT~1\NAVNTUTL.DLL] [Symantec Corporation, 10.0.0.359] [D:\Program Files\Symantec AntiVirus\Cliproxy.dll] [Symantec Corporation, 10.0.0.359] [PID: 960][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1368][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\MSMUSD7.DLL] [Microtek International Inc., 1.2.0.0] [C:\Program Files\Microtek\ScanWizard 5\Scanners\SM0932.DLL] [Microtek, 2, 0, 0, 0] [PID: 1428][C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe] [, 1, 0, 0, 1] [C:\Program Files\Microtek\ScanWizard 5\SFRes.dll] [, 1, 0, 0, 1] [C:\Program Files\Microtek\ScanWizard 5\scanners\Msmgr32.dll] [Microtek International Inc., 3.3] [C:\Program Files\Microtek\ScanWizard 5\scanners\MS32RES.DLL] [N/A, N/A] [C:\Program Files\Microtek\ScanWizard 5\scanners\MPHASE32.DLL] [N/A, N/A] [C:\Program Files\Microtek\ScanWizard 5\scanners\MSSTI.DLL] [Microtek International Inc., 1.62.4] [C:\Program Files\Microtek\ScanWizard 5\scanners\SM0932.DLL] [Microtek, 2, 0, 0, 0] [PID: 1588][D:\Program Files\Symantec AntiVirus\Rtvscan.exe] [Symantec Corporation, 10.0.0.359] [C:\WINDOWS\system32\CBA.DLL] [Intel? Corporation, 6.12.0.130 E] [C:\WINDOWS\system32\MsgSys.dll] [Intel? Corporation, 6.12.0.130 E] [C:\WINDOWS\system32\NTS.dll] [Intel? Corporation, 6.12.0.130 E] [C:\WINDOWS\system32\PDS.DLL] [Intel? Corporation, 6.12.0.130 E] [D:\Program Files\Symantec AntiVirus\NAVLU.dll] [Symantec Corporation, 10.0.0.359] [D:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL] [Symantec Corporation, 10.0.0.359] [c:\program files\common files\symantec shared\ssc\ScsComms.dll] [Symantec Corporation, 10.0.0.359] [D:\Program Files\Symantec AntiVirus\I2ldvp3.dll] [Symantec Corporation, 10.0.0.359] [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccL35.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ccDec.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\Decomposers\decsdk.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll] [Symantec Corporation, 3.02.12.35] [C:\Program Files\Common Files\Symantec Shared\ccScan.dll] [Symantec Corporation, 103.5.1.9] [C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL] [Symantec Corporation, 1.4.0.11] [D:\Program Files\Symantec AntiVirus\DefUtDCD.dll] [Symantec Corporation, 3.1.13a.0] [D:\Program Files\Symantec AntiVirus\SAVRT32.DLL] [Symantec Corporation, 9.5.0.44] [D:\Program Files\Symantec AntiVirus\IMail.dll] [Symantec Corporation, 10.0.0.359] [D:\Program Files\Symantec AntiVirus\SymProtectStorage.dll] [Symantec Corporation, 10.0.0.359] [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll] [Symantec Corporation, 1,5,1,3] [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070228.017\ccEraser.dll] [Symantec Corporation, 107.1.1.3] [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070228.017\ecmsvr32.dll] [Symantec Corporation, 71.1.0.11] [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070228.017\NAVEX32a.DLL] [Symantec Corporation, 20071.1.1.10] [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070228.017\NAVENG32.DLL] [Symantec Corporation, 20071.1.1.10] [D:\Program Files\Symantec AntiVirus\NAVAP32.DLL] [Symantec Corporation, 9.5.0.44] [C:\Program Files\Common Files\Symantec Shared\SSC\scandlgs.dll] [Symantec Corporation, 10.0.0.359] [D:\Program Files\Symantec AntiVirus\Cliscan.dll] [Symantec Corporation, 10.0.0.359]
刹那客无名初生襁褓狮帖子:67 注册: 2007-03-01 来自:

<<上一主题|下一主题>>

12 3 4

1 / 4 页

跳转页

页面顶部

Powered by Discuz!NT