瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 开机到不了桌面,反复重启【求助】

1   1  /  1  页   跳转

开机到不了桌面,反复重启【求助】

开机到不了桌面,反复重启【求助】

昨天开电脑就出现不能进入桌面,而且电脑反复重启(都是在选择启动模式的提示页),我选择别的启动模式都不能进入,只能从安全模式下进入,进入后我用杀毒软件杀毒,也没病毒,然后选择重新启动,可就能正常进入桌面,今天也遇到同样问题,也是这样才行。不知道什么原因。 
HijackThis_zww汉化版扫描日志 V1.99.1
保存于      18:53:33, 日期 2006-6-12
操作系统:  Windows XP SP2 (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Eset\nod32krn.exe
D:\dzh\internet\hypwise.exe
C:\WINDOWS\system32\svchost.exe
F:\Program Files\Tencent\TT\TTraveler.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
D:\HijackThis 1.99.1 汉化版\HijackThis1991汉化版\HijackThis1991zww.exe

R3 - 默认的URLSearchHook丢失。用HijackThis修复
O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - D:\Program Files\Thunder Network(迅雷)\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - BHO: ThunderBHO - {0FA24E3D-422C-4D94-A125-104F32352C90} - D:\Program Files\Thunder Network(迅雷)\Thunder\ComDlls\xunleiBHO_Now.dll
O2 - BHO: Promote Class - {0FA24E3E-422C-4D94-A125-104F32352C90} - C:\WINDOWS\system32\promote.dll
O2 - BHO: EyeOnIE Class - {5F35B79C-CDA0-456F-B3A3-B4DE806E8634} - C:\windows\system\SitaPlugin.dll
O2 - BHO: IEhlprObj Class - {A3803141-3CF5-4D66-B7EA-8D2674FE152C} - C:\WINDOWS\stdie.dll
O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [SKYNET Personal FireWall] D:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
O4 - 启动项HKLM\\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - 启动项HKLM\\Run: [SystemTray] SysTray.Exe
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [NMGameX_AutoRun] ; C:\WINDOWS\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa
O4 - 启动项HKLM\\Run: [KernelFaultCheck] ; %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [Storm2Set] ; C:\WINDOWS\system32\rundll32.exe "D:\PROGRA~1\StormII\StormSet.dll",CheckEnv
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: QQ.exe
O8 - IE右键菜单中的新增项目: 使用迅雷下载 - D:\Program Files\Thunder Network(迅雷)\Thunder\Program\geturl.htm
O8 - IE右键菜单中的新增项目: 使用迅雷下载全部链接 - D:\Program Files\Thunder Network(迅雷)\Thunder\Program\getallurl.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O9 - 浏览器额外的按钮: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\Program Files\Thunder Network(迅雷)\Thunder\Thunder.exe
O9 - 浏览器额外的“工具”菜单项: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\Program Files\Thunder Network(迅雷)\Thunder\Thunder.exe
O16 - DPF: {414E7D87-8073-4EFB-9E4B-C8DF04C979EE} (PortalCom AAA 1.0) - http://218.2.135.36/PortalAX02.cab
O16 - DPF: {52DF16E3-6C4F-4B22-8BAF-09263E463B48} (金山毒霸在线产品升级) - http://www.duba.net/cab/KOSInit.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2007/OL2006.cab
O16 - DPF: {E847C78C-C210-4195-8799-FBF3BF89797D} - http://cu004.www.duba.net/duba/scan/Package/KOSInit.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3B5C9164-1EBE-4C7D-9A24-90D899ADF453}: NameServer = 218.2.135.1 61.147.37.1
O20 - Winlogon Notify: AutorunsDisabled - C:\WINDOWS\
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - NT 服务: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - NT 服务: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe



[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; TencentTraveler ; (R1 1.5); .NET CLR 1.1.4322)
最后编辑2007-11-12 18:59:56
分享到:
gototop
 

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <load><>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <run><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SoundMan><SOUNDMAN.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SKYNET Personal FireWall><D:\PROGRA~1\SKYNET\FIREWALL\pfw.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <nod32kui><"C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SystemTray><SysTray.Exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NMGameX_AutoRun><; C:\WINDOWS\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Storm2Set><; C:\WINDOWS\system32\rundll32.exe "D:\PROGRA~1\StormII\StormSet.dll",CheckEnv>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
[QQ]
  <C:\Documents and Settings\homeuser\「开始」菜单\程序\启动\QQ.exe><H>

==================================
服务
[InstallDriver Table Manager / IDriverT]
  <"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[NOD32 Kernel Service / NOD32krn]
  <"C:\Program Files\Eset\nod32krn.exe"><Eset >

==================================
浏览器加载项
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <D:\Program Files\Thunder Network(迅雷)\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[Thunder Browser Helper]
  {0FA24E3D-422C-4D94-A125-104F32352C90} <D:\Program Files\Thunder Network(迅雷)\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
[Promote Class]
  {0FA24E3E-422C-4D94-A125-104F32352C90} <C:\WINDOWS\system32\promote.dll, >
[EyeOnIE Class]
  {5F35B79C-CDA0-456F-B3A3-B4DE806E8634} <C:\windows\system\SitaPlugin.dll, >
[IEhlprObj Class]
  {A3803141-3CF5-4D66-B7EA-8D2674FE152C} <C:\WINDOWS\stdie.dll, N/A>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <D:\Program Files\Thunder Network(迅雷)\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[PortalCom AAA 1.0]
  {414E7D87-8073-4EFB-9E4B-C8DF04C979EE} <C:\WINDOWS\DOWNLO~1\PORTAL~1.OCX, Huawei Co. Ltd.>
[金山毒霸在线产品升级]
  {52DF16E3-6C4F-4B22-8BAF-09263E463B48} <, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\DOWNLO~1\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <D:\Program Files\Thunder Network(迅雷)\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[Thunder Browser Helper]
  {0FA24E3D-422C-4D94-A125-104F32352C90} <D:\Program Files\Thunder Network(迅雷)\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
[Promote Class]
  {0FA24E3E-422C-4D94-A125-104F32352C90} <C:\WINDOWS\system32\promote.dll, >
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\WINDOWS\system32\dllcache\dhtmled.ocx, Microsoft Corporation>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <D:\Program Files\Thunder Network(迅雷)\Thunder\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD>
[EyeOnIE Class]
  {5F35B79C-CDA0-456F-B3A3-B4DE806E8634} <C:\windows\system\SitaPlugin.dll, >
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[IEhlprObj Class]
  {A3803141-3CF5-4D66-B7EA-8D2674FE152C} <C:\WINDOWS\stdie.dll, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[使用迅雷下载]
  <D:\Program Files\Thunder Network(迅雷)\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
  <D:\Program Files\Thunder Network(迅雷)\Thunder\Program\getallurl.htm, N/A>
[添加到QQ表情]
  <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
gototop
 

正在运行的进程
[PID: 384][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 436][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 460][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
[PID: 504][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 516][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
[PID: 668][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 728][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
[PID: 788][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
[PID: 900][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
[PID: 952][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1196][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [D:\Program Files\e2eSoft\VCam\MatroskaSplitter\mmfinfo.dll]  <N/A><N/A>
    [D:\Program Files\e2eSoft\VCam\MatroskaSplitter\mkunicode.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\igfxpph.dll]  <Intel Corporation><3,0,0,1517>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3,0,0,1517>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3,0,0,1517>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3,0,0,1517>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3,0,0,1517>
    [C:\windows\system\SitaPlugin.dll]  <><1, 0, 0, 1>
    [D:\Program Files\WinRAR(压缩软件)\rarext.dll]  <N/A><N/A>
    [C:\Program Files\Eset\nodshex.dll]  <N/A><N/A>
    [D:\Program Files\JetAudio\JetFlExt.dll]  <JetAudio, Inc.><6, 0, 0, 5124>
    [D:\Program Files\JetAudio\JetFlExt.CHS]  <JetAudio, Inc.><6, 0, 0, 4614>
[PID: 1280][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1356][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.1.00>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
[PID: 1440][C:\Program Files\Eset\nod32kui.exe]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\nod32rui.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\Program Files\Eset\pu_amon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_amon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pu_dmon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_dmon.dll]  <N/A><N/A>
    [C:\Program Files\Eset\pu_emon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_emon.dll]  <N/A><N/A>
    [C:\Program Files\Eset\pu_imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
    [C:\Program Files\Eset\pu_mirr.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_mirr.dll]  <N/A><N/A>
    [C:\Program Files\Eset\pu_nod32.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_nod32.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pu_upd.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_upd.dll]  <N/A><N/A>
[PID: 1496][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
[PID: 1628][C:\Program Files\Eset\nod32krn.exe]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\nod32krr.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\ps_amon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_amon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\ps_dmon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_dmon.dll]  <N/A><N/A>
    [C:\Program Files\Eset\ps_emon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_emon.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
    [C:\Program Files\Eset\ps_mirr.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_mirr.dll]  <N/A><N/A>
    [C:\Program Files\Eset\ps_nod32.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_nod32.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\ps_upd.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_upd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
[PID: 1660][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 400][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
[PID: 664][D:\dzh\internet\hypwise.exe]  <大智慧><1, 0, 0, 1>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
[PID: 2284][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3124][F:\Program Files\Tencent\TT\TTraveler.exe]  <深圳市腾讯计算机系统有限公司><1. 6. 9. 170>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\TT\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
    [C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xmvsource.dll_1_work]  <XunLei><1, 0, 0, 5>
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  <Adobe Systems, Inc.><9,0,28,0>
[PID: 1756][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
[PID: 2020][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
[PID: 3708][D:\sren扫描病毒软件\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\WINDOWS\system32\UNISPIM.IME]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\upengine.dll]  <北京清华紫光软件股份有限公司><3.0.0.3045>
    [C:\WINDOWS\system32\imon.dll]  <Eset ><2, 51, 26 >
    [C:\Program Files\Eset\pr_imon.dll]  <N/A><N/A>

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
NOD32 protected [MSAFD Tcpip [TCP/IP]]
    C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [MSAFD Tcpip [UDP/IP]]
    C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32 protected [MSAFD Tcpip [RAW/IP]]
    C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
NOD32
    C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT