瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 求助:双击ie变成创建快捷方式?

1   1  /  1  页   跳转

求助:双击ie变成创建快捷方式?

求助:双击ie变成创建快捷方式?

双击ie变成创建快捷方式?
这是怎么回事?
请高手分析一下。

附:诊断报告由360安全卫士
诊断时间: 2007-08-22  09:36:14
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:759.35MB - 当前可用内存:273.07MB

100 - 未知 - Process: ngslotd.exe [ngslotd] - C:\Program Files\ngsrv\ngslotd.exe
100 - 未知 - Process: TdxW.exe [] - C:\jcb_gfzq\TdxW.exe
100 - 未知 - Process: FetionFx.exe [Fetion 2006] - C:\Program Files\China Mobile\Fetion\FetionFX.exe
O2 - 未知 - BHO: (Alcohol Toolbar Helper) - [无效的CLSID:{8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489}] - {8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489} - C:\Program Files\Alcohol Toolbar\v3.1.0.0\Alcohol_Toolbar.dll
O8 - 未知 - Extra context menu item: &使用BitComet下载 - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - 未知 - Extra context menu item: &使用BitComet下载全部链接 - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - 未知 - Extra context menu item: &使用BitComet下载本页视频 - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - 未知 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - 未知 - Extra context menu item: 在Foxmail中添加该RSS频道/频道组 - res://C:\WINDOWS\system32\fmrsslink.dll/201
O8 - 未知 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - 未知 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - 未知 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 未知 - Extra button: 资源搜索(HKLM) - C:\Program Files\BitComet\tools\BitCometBHO_1.1.7.4.dll
O9 - 未知 - Extra button: 信息检索(HKLM) - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - 未知 - Extra button: 腾讯QQ(HKLM) - C:\Program Files\Tencent\QQ\QQ.EXE
O15 - 未知 - Trusted Zone: easyabc.95599.cn
O15 - 未知 - Trusted Zone: www.95599.cn
O15 - 未知 - Trusted Zone: https://mybank.icbc.com.cn
O15 - 未知 - Trusted Zone: http://www.icbc.com.cn
O16 - 未知 - DPF: {072039AB-2117-4ED5-A85F-9B9EB903E021} (NowStarter Control) - http://www.clubbox.co.kr/neo.fld/NowStarter.cab
O16 - 未知 - DPF: {13B1792D-012A-4C8D-9E0A-08AE09FFFB4B} (TextEdit) - https://personal.bank.ecitic.com:444/SecPkg.cab
O16 - 未知 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - 未知 - DPF: {17915197-39D5-4DF4-9351-C20515FF8709} (Office Control) - http://192.168.9.8/OfficeProj.cab
O16 - 未知 - DPF: 无效的CLSID:{52DF16E3-6C4F-4B22-8BAF-09263E463B48} ({52DF16E3-6C4F-4B22-8BAF-09263E463B48}) - http://www.duba.net/cab/KOSInit.cab
O16 - 未知 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl Object) - https://www.tenpay.com/download/qqedit.cab
O16 - 未知 - DPF: {F3E92562-1B4D-4BFA-B2D4-E9BCABE3B5A8} (Iesign Control) - https://ebank.cebbank.com/per/js/iesign.ocx
O18 - 未知 - Protocol: 电子书编译工具Web Compiler相关 - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll
O18 - 未知 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\PROGRA~1\KUGOO2~1\InExtend\KUGOO3~1.OCX
O18 - 未知 - Protocol: IEProtocolHandler - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - 未知 - Protocol: TbsPlugProt - {3E4CEC51-CD44-4C57-8C52-B9597836C866} - H:\TbsPlug.dll
O21 - 未知 - Protocol Icons: HKCR\http\shell\open\command - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -requestPending -osint -url "%1"
O21 - 未知 - Protocol Icons: HKCR\ftp\shell\open\command - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -requestPending -osint -url "%1"
O21 - 未知 - Protocol Icons: HKCR\https\shell\open\command - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -requestPending -osint -url "%1"
O21 - 未知 - Protocol Icons: HKCR\http\DefaultIcon - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE,1
O21 - 未知 - Protocol Icons: HKCR\ftp\DefaultIcon - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE,1
O21 - 未知 - Protocol Icons: HKCR\https\DefaultIcon - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE,1
O23 - 未知 - Service: iPod Service [iPod 硬件管理服务] - "C:\Program Files\iPod\bin\iPodService.exe" - (running)
O23 - 未知 - Service: ngSlotD [ngSlotDaemon] - C:\Program Files\ngsrv\ngslotd.exe - (running)
O23 - 未知 - Service: ServiceLayer [ServiceLayer] - "C:\Program Files\PC Connectivity Solution\ServiceLayer.exe" - (not running)

最后编辑2007-08-22 09:45:02
分享到:
gototop
 

continued...

100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量,ms-dos驱动名称类似lpt1以及com,调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统,用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
100 - 安全 - Process: RavMonD.exe [瑞星杀毒软件的一部分。] - C:\Program Files\Rising\Rav\Ravmond.exe
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序,用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: RavStub.exe [瑞星出品的杀毒软件相关程序。] - C:\Program Files\Rising\Rav\RavStub.exe
100 - 安全 - Process: RavService.exe [瑞星杀毒软件客户端程序。] - C:\Program Files\Rising\Rav\RavService.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k imgsvc
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell,包括开始菜单、任务栏,桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: RavTray.exe [瑞星杀毒软件相关程序。] - C:\Program Files\Rising\Rav\RavTray.exe
100 - 安全 - Process: RavTask.exe [瑞星出品的杀毒软件相关程序。] - C:\Program Files\Rising\Rav\RavTask.exe
100 - 安全 - Process: RavMon.exe [瑞星杀毒软件防火墙。] - C:\Program Files\Rising\Rav\Ravmon.exe
100 - 安全 - Process: igfxtray.exe [intel显卡相关软件。] - C:\WINDOWS\system32\igfxtray.exe
100 - 安全 - Process: igfxpers.exe [intel公共用户界面模块。] - C:\WINDOWS\system32\igfxpers.exe
100 - 安全 - Process: StatusClient.exe [惠普公司出品的打印机相关软件的一部分。] - C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
100 - 安全 - Process: iPodService.exe [apple公司出品的itunes点对点文件下载工具。] - C:\Program Files\iPod\bin\iPodService.exe
100 - 安全 - Process: TIMPlatform.exe [腾讯即时通讯客户端软件的一部分。] - C:\Program Files\Tencent\QQ\TIMPlatform.exe
100 - 安全 - Process: javaw.exe [sun公司出版的jvav语言相关联的应用程序。] - C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: QQ.exe [腾讯公司出品的qq即时通讯软件。] - C:\Program Files\Tencent\QQ\QQ.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe
100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时监控程序。] - C:\Program Files\360safe\safemon\360Tray.exe
100 - 安全 - Process: AcroRd32Info.exe [adobe出品的acrobat阅读软件,支持pdf格式文件。] - C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士相关程序。] - C:\Program Files\360safe\360Safe.exe
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O2 - 安全 - BHO: (Adobe PDF Reader Link Helper) - [Adobe Reader, 查看和打印 Adobe 便携文档格式 (PDF) 文件。] - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - 安全 - BHO: (BitComet Helper) - [下载软件BitComet的相关程序。] - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.7.4.dll
O4 - 安全 - HKLM\..\Run: [RavTray] [瑞星公司出品的杀毒软件相关程序。] "C:\Program Files\Rising\Rav\RavTray.exe"
O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 安全 - Startup folder: [腾讯QQ.lnk] [qq:即时通讯软件] C:\Documents and Settings\何丰\「开始」菜单\程序\启动\腾讯QQ.lnk
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - 安全 - Extra button: Windows Messenger(HKLM) - C:\Program Files\Messenger\msmsgs.exe
O11 - 安全 - Options Group: International*
O16 - 安全 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN照片上传插件) - http://by118fd.bay118.hotmail.msn.com/resources/MsnPUpld.cab
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O18 - 安全 - Protocol: OFFICE 相关 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O22 - 安全 - Filename Extention: FIREFOX第三方浏览器 - FirefoxHTML
O22 - 安全 - Filename Extention: FIREFOX第三方浏览器 - FirefoxHTML
O23 - 安全 - Service: Pml Driver HPZ12 [是惠普PSC 2100、2200、4100和6100系列打印机驱动服务。] - C:\windows\system32\HPZipm12.exe - (not running)
O23 - 安全 - Service: RavService [瑞星杀毒软件相关服务。] - "C:\Program Files\Rising\Rav\RavService.exe" /service - (running)
O23 - 安全 - Service: RsCCenter [是瑞星杀毒软件控制台相关程序。] - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE - (running)
O23 - 安全 - Service: RsRavMon [是瑞星杀毒软件相关监控程序。] - "C:\Program Files\Rising\Rav\Ravmond.exe" - (running)
O23 - 安全 - Service: ShadowSystemService [影子系统相关服务。] - C:\windows\system32\shadow\ShadowService.exe - (not running)
O25 - 安全 - ABOUT: PostNotCached - res://ieframe.dll/repost.htm

gototop
 

continued....
O31 - 未知 - Folder Menu: {F9DB5320-233E-11D1-9F84-707F02C10627} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll - Adobe Systems, Inc. - PDF Shell Extension - 7.0.0.0 - 110592 - 4b0991cd076b617a2231b19a6663c1c9
O31 - 未知 - SODL: {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\windows\system32\WPDShServiceObj.dll - Microsoft Corporation - Windows Portable Device Shell Service Object - 5.2.5721.5145 - 133632 - 045e228f71c31901084b64be59093499
O31 - 未知 - SEApproved: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\ravext.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.7 - 106496 - fd0d1389219b779135ff6bc2086bac49
O31 - 未知 - SEApproved: {416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} - C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll - Nokia - Phone Browser - 6.82.63.9 - 566784 - d1d12242118ccef2e2279df2182ca2d6
O31 - 未知 - SEApproved: 无效的CLSID:Shell Extensions for RealOne Player -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {35786D3C-B075-49b9-88DD-029876E11C01} - C:\WINDOWS\system32\wpdshext.dll - Microsoft Corporation - Portable Devices Shell Extension - 5.2.5721.5145 - 2603008 -
O31 - 未知 - SEApproved: {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} - C:\WINDOWS\system32\wpdshext.dll - Microsoft Corporation - Portable Devices Shell Extension - 5.2.5721.5145 - 2603008 -
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 125440 - 41bb01bd6b374ce13c98493ab4c1ad66
O31 - 未知 - SEApproved: {e82a2d71-5b2f-43a0-97b8-81be15854de8} - C:\WINDOWS\system32\dfshim.dll - Microsoft Corporation - Application Deployment Support Library - 2.0.50727.42 - 83456 - b3511383c8be3a8c5b88a78971fc1141
O31 - 未知 - SEApproved: {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} - C:\WINDOWS\system32\dfshim.dll - Microsoft Corporation - Application Deployment Support Library - 2.0.50727.42 - 83456 - b3511383c8be3a8c5b88a78971fc1141
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID:Shell extensions for file compression -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID:加密上下文菜单 -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {07C45BB1-4A8C-4642-A1F5-237E7215FF66} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {1C1EDB47-CE22-4bbb-B608-77B48F83C823} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {205D7A97-F16D-4691-86EF-F3075DCCA57D} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {3028902F-6374-48b2-8DC6-9725E775B926} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {43886CD5-6529-41c4-A707-7B3C92C05E68} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {44C76ECD-F7FA-411c-9929-1B77BA77F524} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {4B78D326-D922-44f9-AF2A-07805C2A3560} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {6038EF75-ABFC-4e59-AB6F-12D397F6568D} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {6CF48EF8-44CD-45d2-8832-A16EA016311B} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {73CFD649-CD48-4fd8-A272-2070EA56526B} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {9D958C62-3954-4b44-8FAB-C4670C1DB4C2} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {B31C5FAE-961F-415b-BAF0-E697A5178B94} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {BC476F4C-D9D7-4100-8D4E-E043F6DEC409} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {E6EE9AAC-F76B-4947-8260-A9F136138E11} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {F2CF5485-4E02-4f68-819C-B92DE9277049} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - SEApproved: {FDE7673D-2E19-4145-8376-BBD58C4BC7BA} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.5730.11 - 6049280 -
O31 - 未知 - Directory Menu: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\ravext.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.7 - 106496 - fd0d1389219b779135ff6bc2086bac49
O31 - 未知 - Directory Menu: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\ravext.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.7 - 106496 - fd0d1389219b779135ff6bc2086bac49
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 125440 - 41bb01bd6b374ce13c98493ab4c1ad66
O31 - 未知 - BootExecute: bsmain -  -  -  - 0 -
O31 - 未知 - BootExecute:  -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - sv1_0.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll -  -  -  - 0 -
gototop
 

Continued…..
O40 - Explorer.EXE - Nokia - C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll - Phone Browser - d1d12242118ccef2e2279df2182ca2d6
O40 - Explorer.EXE - Nokia - C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll - PC Suite Common Modules - ca33b4b0aafe8c667b330738c8623a61
O40 - Explorer.EXE - Nokia. - C:\Program Files\PC Connectivity Solution\ConnAPI.DLL - Nokia Connectivity API - 3a42e0ce06b4ad78c07c80a419ad039c
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll - Microsoft? C++ Runtime Library - f33a2734000fc6d3dbae2e1337e2bb1f
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MSVCP71.dll - Microsoft? C++ Runtime Library - 561fa2abb31dfa8fab762145f81667c2
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MSVCR71.dll - Microsoft? C Runtime Library - 86f1895ae8c5e8b17d99ece768a70732
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\AntiSpyware\ieprot.dll - IE Protector - 369c1d78953b00cf8306e7028654092d
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\ravext.dll - Rising Shell Ext Module - fd0d1389219b779135ff6bc2086bac49
O40 - Explorer.EXE - 水晶情缘工作室 - C:\Program Files\木马分析专家\hyMenu.dll - 木马分析专家系统菜单 - 0f70c994d201eef9b7fcab9afee1a79a
O40 - Explorer.EXE - Adobe Systems, Inc. - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll - PDF Shell Extension - 4b0991cd076b617a2231b19a6663c1c9
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\shlhook.dll - shlhook Module - 47c020cafb8486eb33061f7ccdf206b6
O40 - Explorer.EXE - Biejing Baofeng Inc. - C:\PROGRA~1\StormII\spfa.dll -  - 641727095678cd24cb7becfe87bdde86
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\RSCOMMON.DLL - Rising Common Function Dynamic Link Library - 58432e6c58f1b4c339adc1a79bf864b6
O40 - Explorer.EXE -  - C:\Program Files\Tencent\QQ\qdshm.dll - QQDiskShellMenu Module - 3abe919a3c4426db72aa89a81e642f66
O40 - Explorer.EXE - Microsoft Corporation - C:\Program Files\Tencent\QQ\MFC42.DLL - MFCDLL Shared Library - Retail Version - c89eba9596771da3979a84fd425b8264
O40 - Explorer.EXE - LEAD Technologies, Inc. - C:\windows\system32\LCodcCMP.dll - LEAD MCMP/MJPEG Codec - 680dfb72688494d3bccd24079a0608c6
O40 - Explorer.EXE - Ahead Software AG - C:\Program Files\Common Files\Ahead\Lib\AdvrCntr.dll - AdvrCntr Module -
O40 - Explorer.EXE -  - C:\WINDOWS\system32\asusasv1.dll -  - c67ef9685a34fc2be3d7cf3c09e998c2
O40 - Explorer.EXE -  - C:\WINDOWS\system32\asusasv2.dll -  - 04dd6e0554475cbea04fdcea007eefac
O40 - Explorer.EXE - 北京清华紫光软件股份有限公司 - C:\WINDOWS\system32\upengine.dll - 紫光拼音输入法引擎 - 57f23e2b283da94fd79195859351be10

=======================================

O41 - BaseTDI - basetdi - C:\WINDOWS\system32\drivers\basetdi.sys - (running) - basetdi - Beijing Rising Technology Co., Ltd. - 0064810c1b03f2c889130b669a4ce937
O41 - ExpScaner - ExpScan.sys - C:\Program Files\Rising\Rav\ExpScan.sys - (running) - ExpScan.sys -  - 5a690926c7181d5c0b2721016442c9c3
O41 - HookCont - HookCont - C:\Program Files\Rising\Rav\HookCont.sys - (running) - HookCont - Rising - 3926cb7b005564bc77d6b40235c53817
O41 - HookReg - HookReg - C:\Program Files\Rising\Rav\HOOKREG.sys - (running) -  -  - 997c395147f8e5b3f714bdd112fe8945
O41 - HookSys - Hooksys - C:\Program Files\Rising\Rav\HookSys.sys - (running) - Hooksys - Rising - 265b67f85db6226f2439e13e7c1fa8bf
O41 - MEMSCAN - MemScan Driver - C:\Program Files\Rising\Rav\MemScan.sys - (running) - MemScan Driver - Beijing Rising Technology Co., Ltd. - a909256ef59a987fda249aa3ded01e76
O41 - npkcrypt - nProtect KeyCrypt Driver - C:\Program Files\Tencent\QQ\npkcrypt.sys - (running) - nProtect KeyCrypt Driver - INCA Internet Co., Ltd. - 8bcb281a2540e7aff0cd00f9878fe21f
O41 - RsAntiSpyware - Anti-RootKit Driver - C:\WINDOWS\system32\drivers\RsBoot.sys - (running) - Anti-RootKit Driver - Beijing Rising Technology Co., Ltd. - f9edc97f228c046832a24b5a76017912
O41 - RsNTGDI - RsNTGDI - C:\WINDOWS\system32\drivers\RsNTGdi.sys - (running) - RsNTGDI - Beijing Rising Technology Co., Ltd. - 17214e7b192cb93ff014fca1484b97ad
O41 - RSPPSYS - RSPPSYS - C:\Program Files\Rising\Rav\rsppsys.sys - (running) - RSPPSYS - Rising - 4197f8bb3251c22f806c1d7d8d6ca2e1
O41 - Nokia USB Generic - Nokia USB Phone Generic Client - C:\WINDOWS\system32\drivers\nmwcdc.sys - (not running) - Nokia USB Phone Generic Client - Nokia - 5abb6b2461c4eb0afdf1bf7f03963d59
O41 - Nokia USB Modem - Nokia USB Phone Modem Client - C:\WINDOWS\system32\drivers\nmwcdcm.sys - (not running) - Nokia USB Phone Modem Client - Nokia - 353c16d21eec1f11306270040b3713c1
O41 - Nokia USB Phone Parent - Nokia USB Phone Bus Driver - C:\WINDOWS\system32\drivers\nmwcd.sys - (not running) - Nokia USB Phone Bus Driver - Nokia - f5b1200c75b160c81e7e48cc0489aa5e
O41 - TSP - TSP - C:\WINDOWS\system32\drivers\klif.sys - (not running) -  -  -

gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT