瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 服务器运行很慢,是否中病毒,高手帮帮忙

1   1  /  1  页   跳转页

服务器运行很慢,是否中病毒,高手帮帮忙

收藏
◎稻草人◎
头像
拙长孩提狮
  • 帖子:82
  • 注册: 2006-09-15
  • 来自:
发表于： 2008-01-19 16:48 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

服务器运行很慢,是否中病毒,高手帮帮忙

客户端打开服务器的文件,很慢,基本无法运行,重启服务器后游正常,但过了一段时间后(大概几个小时)突然又无法访问服务器,是不是中了病毒,高手帮忙看下吧!谢谢!

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Internat.exe><internat.exe>  [(Verified)Microsoft Windows 2000 Publisher]
    <Cn99QDNS><C:\Program Files\cn99qdns\Cn99qdns.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [(Verified)Symantec Corporation]
    <vptray><C:\PROGRA~1\SYMANT~1\VPTray.exe>  [(Verified)Symantec Corporation]
    <VxTaskbarMgr><C:\Program Files\VERITAS\VxUpdate\VxTaskbarMgr.exe>  [(Verified)VERITAS Software Corporation]
    <FTGateIcon><d:\Program Files\FTGate\FTGateIcon.exe>  [Floosietek Ltd]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows 2000 Publisher]
    <Userinit><C:\WINNT\system32\userinit.exe,>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
    <WinlogonNotify: NavLogon><C:\WINNT\system32\NavLogon.dll>  [(Verified)Symantec Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player 6.4><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\mplayer2.inf,PerUserStub.NT>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <Address Book 5><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
    <CRLUpdate><%SystemRoot%\system32\updcrl.exe -e -u %SystemRoot%\system32\verisignpub1.crl>  [N/A]

==================================
启动文件夹
N/A

==================================
服务
[Backup Exec Remote Agent for Windows Servers / BackupExecAgentAccelerator][Running/Auto Start]
  <"C:\Program Files\VERITAS\Backup Exec\NT\beremote.exe"><VERITAS Software Corporation>
[Backup Exec Agent Browser / BackupExecAgentBrowser][Running/Auto Start]
  <"C:\Program Files\VERITAS\Backup Exec\NT\benetns.exe"><VERITAS Software Corporation>
[Backup Exec Device & Media Service / BackupExecDeviceMediaService][Running/Auto Start]
  <"C:\Program Files\VERITAS\Backup Exec\NT\pvlsvr.exe"><VERITAS Software Corporation>
[Backup Exec Job Engine / BackupExecJobEngine][Running/Auto Start]
  <"C:\Program Files\VERITAS\Backup Exec\NT\bengine.exe"><VERITAS Software Corporation>
[Backup Exec Naming Service / BackupExecNamingService][Running/Auto Start]
  <"C:\Program Files\VERITAS\Backup Exec\NT\benser.exe"><VERITAS Software Corporation>
[Backup Exec Server / BackupExecRPCService][Running/Auto Start]
  <"C:\Program Files\VERITAS\Backup Exec\NT\beserver.exe"><VERITAS Software Corporation>
[Symantec Event Manager / ccEvtMgr][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Symantec AntiVirus Definition Watcher / DefWatch][Running/Auto Start]
  <"C:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[ExecView Communication Module (ECM) / ECM Service][Stopped/Manual Start]
  <C:\Program Files\VERITAS\Backup Exec\NT\ECM\ECM.exe><VERITAS Software Corporation>
[FTGate Mail Server / FTGate Mail Server][Running/Auto Start]
  <D:\Program Files\FTGate\FTGateSrv.exe><Floosietek Ltd>
[MSSQL$BKUPEXEC / MSSQL$BKUPEXEC][Running/Auto Start]
  <C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\sqlservr.exe -sBKUPEXEC><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  <C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[SavRoam / SavRoam][Stopped/Manual Start]
  <"C:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec>
[Symantec Network Drivers Service / SNDSrvc][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec SPBBCSvc / SPBBCSvc][Stopped/Manual Start]
  <C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe><Symantec Corporation>
[SQLAgent$BKUPEXEC / SQLAgent$BKUPEXEC][Stopped/Manual Start]
  <C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\sqlagent.EXE -i BKUPEXEC><Microsoft Corporation>
[Symantec AntiVirus / Symantec AntiVirus][Running/Auto Start]
  <"C:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation>

==================================
驱动程序
[4mmdat--VRTS / 4mmdat--VRTS][Running/System Start]
  <system32\DRIVERS\04mmdat.sys><VERITAS Software>
[adpu160m / adpu160m][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\adpu160m.sys><Microsoft Corporation>
[atirage3 / atirage3][Running/Manual Start]
  <System32\DRIVERS\atimpab.sys><ATI Technologies Inc.>
[cpqcissm / cpqcissm][Running/Boot Start]
  <\SystemRoot\system32\drivers\cpqcissm.sys><Hewlett-Packard Company>
[dmboot / dmboot][Stopped/Disabled]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[Symantec Eraser Control driver / eeCtrl][Running/System Start]
  <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation>
[NAVENG / NAVENG][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\naveng.sys><Symantec Corporation>
[NAVEX15 / NAVEX15][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\navex15.sys><Symantec Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[HP NC7781 Gigabit Server Adapter / q57w2k][Running/Manual Start]
  <System32\DRIVERS\q57w2k.sys><Hewlett-Packard Company>
[SAVRT / SAVRT][Running/System Start]
  <\??\C:\Program Files\Symantec AntiVirus\savrt.sys><Symantec Corporation>
[SAVRTPEL / SAVRTPEL][Running/System Start]
  <\??\C:\Program Files\Symantec AntiVirus\Savrtpel.sys><Symantec Corporation>
[SCSIChanger / SCSIChanger][Stopped/System Start]
  <System32\DRIVERS\scsichng.sys><VERITAS Software>
[SPBBCDrv / SPBBCDrv][Stopped/Manual Start]
  <\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation>
[SymEvent / SymEvent][Running/Manual Start]
  <\??\C:\Program Files\Symantec\SYMEVENT.SYS><Symantec Corporation>
[SYMREDRV / SYMREDRV][Stopped/Manual Start]
  <\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
[SYMTDI / SYMTDI][Running/System Start]
  <\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>



[用户系统信息]Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
最后编辑2008-01-19 17:00:32
分享到：
gototop
 
◎稻草人◎
头像
拙长孩提狮
  • 帖子:82
  • 注册: 2006-09-15
  • 来自:
发表于： 2008-01-19 16:51 | 只看楼主 短消息 资料
字号： 小 中 大 2楼

浏览器加载项
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[NavigatMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\PROGRA~1\360safe\safemon\safemon.dll, >
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[JavaPlugin.Object]
  {7B19E477-0FF8-11d4-9914-005004D3B3DB} <C:\Program Files\JavaSoft\JRE\1.2\bin\npjava122_013.dll, JavaSoft / Sun Microsystems, Inc.>
[JavaBeansBridge.Object]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\JavaSoft\JRE\1.2\bin\npjava122_013.dll, JavaSoft / Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9c.ocx, Adobe Systems, Inc.>
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360safe.com>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>

==================================
正在运行的进程
[PID: 200 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 228 / SYSTEM][\??\C:\WINNT\system32\csrss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 252 / SYSTEM][\??\C:\WINNT\system32\winlogon.exe]  [Microsoft Corporation, 5.00.2195.6997]
    [C:\WINNT\system32\NavLogon.dll]  [Symantec Corporation, 10.0.1.1000]
[PID: 280 / SYSTEM][C:\WINNT\system32\services.exe]  [Microsoft Corporation, 5.00.2195.7035]
    [C:\WINNT\system32\dmserver.dll]  [VERITAS Software Corp., 2195.6605.297.3]
[PID: 292 / SYSTEM][C:\WINNT\system32\lsass.exe]  [Microsoft Corporation, 5.00.2195.7011]
[PID: 400 / SYSTEM][C:\WINNT\System32\termsrv.exe]  [Microsoft Corporation, 5.00.2195.6696]
[PID: 520 / SYSTEM][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 560 / SYSTEM][C:\WINNT\system32\spoolsv.exe]  [Microsoft Corporation, 5.00.2195.7059]
[PID: 788 / SYSTEM][C:\Program Files\VERITAS\Backup Exec\NT\beremote.exe]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bestdutl.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\Program Files\VERITAS\Backup Exec\NT\engine_ZH.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\ndmpsrvr.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\ndmpcomm.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedscomn.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedssms.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bebsdu.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\benetapi.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\benetutl.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsnt5.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\intranw.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\beerrors_ZH.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedssql2.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsxchg.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsxese.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedspush.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsnote.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsmdoc.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsupfs.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsshadow.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsagnt.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedssmsp.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\benettcp.dll]  [VERITAS Software Corporation, 9.0.4367]
[PID: 824 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\benetns.exe]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\benetutl.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 852 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\benser.exe]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 884 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe]  [Symantec Corporation, 103.5.4.3]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 103.5.4.3]
[PID: 892 / SYSTEM][C:\Program Files\Symantec AntiVirus\DefWatch.exe]  [Symantec Corporation, 10.0.1.1000]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[PID: 908 / SYSTEM][C:\WINNT\system32\Dfssvc.exe]  [Microsoft Corporation, 5.00.2195.6664]
[PID: 952 / SYSTEM][C:\WINNT\System32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 980 / SYSTEM][D:\Program Files\FTGate\FTGateSrv.exe]  [Floosietek Ltd, 1, 2, 0, 0]
    [D:\Program Files\FTGate\Core.dll]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\ScriptSupport.dll]  [N/A, ]
[PID: 1004 / SYSTEM][D:\Program Files\FTGate\FTGate.exe]  [N/A, ]
    [D:\Program Files\FTGate\Core.dll]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\ScriptSupport.dll]  [N/A, ]
    [D:\Program Files\FTGate\Executive.dll]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\sock.dll]  [Floosietek, 1, 2, 0, 0]
gototop
 
◎稻草人◎
头像
拙长孩提狮
  • 帖子:82
  • 注册: 2006-09-15
  • 来自:
发表于： 2008-01-19 16:52 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

[D:\Program Files\FTGate\Mailbox.dll]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\MsgStore.dll]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\DataStore.dll]  [N/A, ]
    [D:\Program Files\FTGate\edbnt.dll]  [Simple Software Solutions, Inc., 4, 1, 1, 1]
    [D:\Program Files\FTGate\script.dll]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\Schedule.dll]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\Spool.dll]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\WebServ.dll]  [N/A, ]
    [D:\Program Files\FTGate\ext.dll]  [N/A, ]
    [D:\Program Files\FTGate\edb1nt.dll]  [Simple Software Solutions, Inc., 4, 1, 1, 1]
    [D:\Program Files\FTGate\zavScan.avs]  [N/A, ]
    [D:\Program Files\FTGate\FTGMon.fxt]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\inifile.fxt]  [N/A, ]
    [D:\Program Files\FTGate\LdapEx.fxt]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\Replicator.fxt]  [N/A, ]
    [D:\Program Files\FTGate\ScriptLib.fxt]  [Floosietek, 1, 2, 0, 0]
    [D:\Program Files\FTGate\SigInsert.fxt]  [N/A, ]
[PID: 1012 / SYSTEM][C:\WINNT\System32\llssrv.exe]  [Microsoft Corporation, 5.00.2195.7021]
[PID: 1068 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\sqlservr.exe]  [Microsoft Corporation, 2000.080.0534.00]
    [C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\OPENDS60.DLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\UMS.DLL]  [Microsoft Corporation, 2000.080.0382.00]
    [C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\SQLSORT.DLL]  [Microsoft Corporation, 2000.080.0534.00]
    [C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\Resources\1033\sqlevn70.RLL]  [Microsoft Corporation, 2000.080.0534.00]
    [C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\SSNETLIB.dll]  [Microsoft Corporation, 2000.080.0534.00]
    [C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\SSNMPN70.dll]  [Microsoft Corporation, 2000.080.0534.00]
    [C:\Program Files\Microsoft SQL Server\MSSQL$BKUPEXEC\Binn\SSmsLPCn.dll]  [Microsoft Corporation, 2000.080.0534.00]
[PID: 1076 / SYSTEM][C:\WINNT\system32\ntfrs.exe]  [Microsoft Corporation, 5.00.2195.6709]
[PID: 1152 / SYSTEM][C:\WINNT\system32\regsvc.exe]  [Microsoft Corporation, 5.00.2195.6701]
[PID: 1164 / SYSTEM][C:\WINNT\System32\locator.exe]  [Microsoft Corporation, 5.00.2195.6619]
[PID: 1204 / SYSTEM][C:\WINNT\system32\MSTask.exe]  [Microsoft Corporation, 4.71.2195.6972]
[PID: 1288 / SYSTEM][C:\Program Files\Symantec AntiVirus\Rtvscan.exe]  [Symantec Corporation, 10.0.1.1000]
    [C:\WINNT\system32\CBA.DLL]  [LANDesk Software Ltd., 6.12.0.137 E]
    [C:\WINNT\system32\MsgSys.dll]  [LANDesk Software Ltd., 6.12.0.137 E]
    [C:\WINNT\system32\NTS.dll]  [LANDesk Software Ltd., 6.12.0.137 E]
    [C:\WINNT\system32\PDS.DLL]  [LANDesk Software Ltd., 6.12.0.137 E]
    [C:\Program Files\Symantec AntiVirus\NAVLU.dll]  [Symantec Corporation, 10.0.1.1000]
    [C:\WINNT\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL]  [Symantec Corporation, 10.0.1.1000]
    [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  [Symantec Corporation, 10.0.1.1000]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Symantec AntiVirus\I2ldvp3.dll]  [Symantec Corporation, 10.0.1.1000]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccDec.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\decsdk.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll]  [Symantec Corporation, 3.02.12.35]
    [C:\Program Files\Common Files\Symantec Shared\ccScan.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL]  [Symantec Corporation, 1.4.0.11]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\ccEraser.dll]  [Symantec Corporation, 107.3.4.3]
    [C:\Program Files\Symantec AntiVirus\DefUtDCD.dll]  [Symantec Corporation, 3.1.13a.0]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\ecmsvr32.dll]  [Symantec Corporation, 71.3.0.25]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\NAVEX32a.DLL]  [Symantec Corporation, 20071.3.1.10]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20080114.016\NAVENG32.DLL]  [Symantec Corporation, 20071.3.1.10]
    [C:\Program Files\Symantec AntiVirus\NAVAP32.DLL]  [Symantec Corporation, 9.5.0.44]
    [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  [Symantec Corporation, 9.5.0.44]
    [C:\Program Files\Symantec AntiVirus\IMail.dll]  [Symantec Corporation, 10.0.1.1000]
    [C:\Program Files\Symantec AntiVirus\NotesExt.dll]  [Symantec Corporation, 10.0.1.1000]
    [C:\Program Files\Symantec AntiVirus\vpmsece3.dll]  [Symantec Corporation, 10.0.1.1000]
    [C:\Program Files\Symantec AntiVirus\SymProtectStorage.dll]  [Symantec Corporation, 10.0.1.1000]
    [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  [Symantec Corporation, 1,5,1,3]
[PID: 1376 / SYSTEM][C:\WINNT\System32\lserver.exe]  [Microsoft Corporation, 5.00.2195.6701]
[PID: 1428 / SYSTEM][C:\WINNT\System32\WBEM\WinMgmt.exe]  [Microsoft Corporation, 1.50.1085.0100]
[PID: 1448 / SYSTEM][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 1488 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\pvlsvr.exe]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\MCHXFACE.dll]  [Microsoft Corporation, 3.51]
    [C:\Program Files\VERITAS\Backup Exec\NT\bestdutl.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\Program Files\VERITAS\Backup Exec\NT\bemsdk.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\SigComp230.dll]  [, 2.30.003]
    [C:\Program Files\VERITAS\Backup Exec\NT\pvltypes.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\pvlsvr_ZH.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\system32\MSDART.DLL]  [Microsoft Corporation, 2.62.7926.0]
    [C:\Program Files\Common Files\System\OLE DB\sqloledb.dll]  [Microsoft Corporation, 2000.080.0747]
    [C:\Program Files\Common Files\System\OLE DB\MSDATL3.dll]  [Microsoft Corporation, 2.62.7926.0]
    [C:\Program Files\Common Files\System\OLE DB\SQLOLEDB.RLL]  [Microsoft Corporation, 2000.080.0528]
    [C:\WINNT\system32\DBNETLIB.DLL]  [Microsoft Corporation, 2000.080.0747.00]
    [C:\WINNT\system32\DBmsLPCn.dll]  [Microsoft Corporation, 2000.080.0534.00]
    [C:\WINNT\System32\SQLSRV32.dll]  [Microsoft Corporation,  2000.080.0747.00]
    [C:\WINNT\System32\SQLUNIRL.dll]  [Microsoft Corporation, 2000.080.0380.00]
    [C:\WINNT\System32\sqlsrv32.rll]  [Microsoft Corporation,  2000.080.0528.00]
    [C:\Program Files\VERITAS\Backup Exec\NT\devtypes.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\PROGRA~1\VERITAS\BACKUP~1\NT\ipvlapi.dll]  [VERITAS Software Corporation, 9.0.4367]
[PID: 1616 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe]  [Symantec Corporation, 103.5.4.3]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
gototop
 
◎稻草人◎
头像
拙长孩提狮
  • 帖子:82
  • 注册: 2006-09-15
  • 来自:
发表于： 2008-01-19 16:52 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

[C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\BB.DLL]  [Symantec Corporation, 1,5,1,3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL]  [Symantec Corporation, 1,5,1,3]
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL]  [Symantec Corporation, 103.5.4.3]
[PID: 1640 / SYSTEM][C:\WINNT\System32\tcpsvcs.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 1664 / SYSTEM][C:\WINNT\System32\dns.exe]  [Microsoft Corporation, 5.00.2195.7147]
[PID: 1684 / SYSTEM][C:\WINNT\System32\ismserv.exe]  [Microsoft Corporation, 5.00.2195.6684]
[PID: 1720 / SYSTEM][C:\WINNT\System32\msdtc.exe]  [Microsoft Corporation, 1999.9.3421.3]
[PID: 2184 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\beserver.exe]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\BeSQL.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\Program Files\VERITAS\Backup Exec\NT\bemsdk.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\SigComp230.dll]  [, 2.30.003]
    [C:\Program Files\VERITAS\Backup Exec\NT\CRPE32.dll]  [Seagate Software, Inc., 8.5.0.217]
    [C:\Program Files\VERITAS\Backup Exec\NT\bestdutl.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\vxace502.dll]  [, 5.2]
    [C:\Program Files\VERITAS\Backup Exec\NT\msgq.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\InstOps.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\BeCatDrv.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bebsdu.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedscomn.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\shuie.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\engine_ZH.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\system32\MSDART.DLL]  [Microsoft Corporation, 2.62.7926.0]
    [C:\Program Files\Common Files\System\OLE DB\sqloledb.dll]  [Microsoft Corporation, 2000.080.0747]
    [C:\Program Files\Common Files\System\OLE DB\MSDATL3.dll]  [Microsoft Corporation, 2.62.7926.0]
    [C:\Program Files\Common Files\System\OLE DB\SQLOLEDB.RLL]  [Microsoft Corporation, 2000.080.0528]
    [C:\WINNT\system32\DBNETLIB.DLL]  [Microsoft Corporation, 2000.080.0747.00]
    [C:\WINNT\system32\DBmsLPCn.dll]  [Microsoft Corporation, 2000.080.0534.00]
    [C:\PROGRA~1\VERITAS\BACKUP~1\NT\schedmgrur.dll]  [VERITAS Software Corporation, 1.00.053]
    [C:\PROGRA~1\VERITAS\BACKUP~1\NT\sfcwall30u.dll]  [Seagate Software, Inc., 3, 0, 17, ]
    [C:\PROGRA~1\VERITAS\BACKUP~1\NT\schedu.dll]  [VERITAS Software Corporation, 1.00.053]
    [C:\Program Files\VERITAS\Backup Exec\NT\NS300.DLL]  [VERITAS Software Corporation, 3.00.046]
    [C:\Program Files\VERITAS\Backup Exec\NT\xerces-c_1_3.dll]  [Apache Software Foundation, 1, 3, 0]
    [C:\WINNT\System32\SQLSRV32.dll]  [Microsoft Corporation,  2000.080.0747.00]
    [C:\WINNT\System32\SQLUNIRL.dll]  [Microsoft Corporation, 2000.080.0380.00]
    [C:\WINNT\System32\sqlsrv32.rll]  [Microsoft Corporation,  2000.080.0528.00]
    [C:\Program Files\VERITAS\Backup Exec\NT\SIGMAPIMAIL300U.DLL]  [, 3.00.018.0]
    [C:\Program Files\VERITAS\Backup Exec\NT\SIGVIMMAIL100.DLL]  [, 1.00.019]
    [C:\Program Files\VERITAS\Backup Exec\NT\SIGPRINTNOTE100.DLL]  [VERITAS Software Corporation, 1.00.005]
    [C:\Program Files\VERITAS\Backup Exec\NT\PAGER300.DLL]  [, 3.00.013]
    [C:\Program Files\VERITAS\Backup Exec\NT\SigFCL250U.dll]  [, 2.50.021]
    [C:\Program Files\VERITAS\Backup Exec\NT\SMTPMAIL300.DLL]  [, 3.00.009]
    [C:\WINNT\system32\mapi32.dll]  [Microsoft Corporation, 1.0.2536.0]
[PID: 2376 / Administrator][C:\Program Files\VERITAS\Backup Exec\NT\bengine.exe]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\benetapi.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\beclass.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\Program Files\VERITAS\Backup Exec\NT\benetutl.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedscomn.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bestdutl.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bebsdu.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\becatsrv.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\BeCatDrv.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\daoview.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bemsdk.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\SigComp230.dll]  [, 2.30.003]
    [C:\Program Files\VERITAS\Backup Exec\NT\ndmpcomm.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\shuie.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\BECATDRV_ZH.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\engine_ZH.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\PROGRA~1\VERITAS\BACKUP~1\NT\ipvlapi.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\BeCatSrv_ZH.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\WINNT\System32\SQLSRV32.dll]  [Microsoft Corporation,  2000.080.0747.00]
    [C:\WINNT\System32\SQLUNIRL.dll]  [Microsoft Corporation, 2000.080.0380.00]
    [C:\WINNT\System32\sqlsrv32.rll]  [Microsoft Corporation,  2000.080.0528.00]
    [C:\WINNT\system32\DBNETLIB.DLL]  [Microsoft Corporation, 2000.080.0747.00]
    [C:\WINNT\system32\DBmsLPCn.dll]  [Microsoft Corporation, 2000.080.0534.00]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsnt5.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\intranw.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedssql2.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsagnt.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedssms.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsxchg.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsxese.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedspush.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedssmsp.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsnote.dll]  [VERITAS Software Corporation, 9.0.4367]
gototop
 
◎稻草人◎
头像
拙长孩提狮
  • 帖子:82
  • 注册: 2006-09-15
  • 来自:
发表于： 2008-01-19 16:53 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

[C:\Program Files\VERITAS\Backup Exec\NT\bedsmdoc.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsupfs.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\bedsshadow.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\benettcp.dll]  [VERITAS Software Corporation, 9.0.4367]
    [C:\Program Files\VERITAS\Backup Exec\NT\beerrors_ZH.dll]  [VERITAS Software Corporation, 9.0.4367]
[PID: 2464 / SYSTEM][C:\WINNT\System32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\System32\unimdm.tsp]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\kmddsp.tsp]  [Microsoft Corporation, 5.00.2150.1]
    [C:\WINNT\System32\ndptsp.tsp]  [Microsoft Corporation, 5.00.2143.1]
    [C:\WINNT\System32\ipconf.tsp]  [Microsoft Corporation, 5.00.2143.1]
    [C:\WINNT\System32\h323.tsp]  [Microsoft Corporation, 5.00.2195.6901]
[PID: 2548 / Administrator][C:\WINNT\Explorer.EXE]  [Microsoft Corporation, 5.00.3700.6690]
    [C:\PROGRA~1\FlashGet\jccatch.dll]  [Amaze Soft, 1, 1, 4, 0]
    [C:\PROGRA~1\360safe\safemon\safemon.dll]  [, 3, 6, 3, 1001]
[PID: 2744 / Administrator][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  [Symantec Corporation, 103.5.4.3]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  [Symantec Corporation, 103.5.4.3]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  [Symantec Corporation, 103.5.4.3]
    [C:\WINNT\system32\SYMREDIR.DLL]  [Symantec Corporation, 5.5.2.1]
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Symantec AntiVirus\SavEmail.dll]  [Symantec Corporation, 10.0.1.1000]
[PID: 2756 / Administrator][C:\PROGRA~1\SYMANT~1\VPTray.exe]  [Symantec Corporation, 10.0.1.1000]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  [Symantec Corporation, 9.5.0.44]
    [C:\Program Files\Symantec AntiVirus\Cliscan.dll]  [Symantec Corporation, 10.0.1.1000]
    [C:\PROGRA~1\SYMANT~1\NAVNTUTL.DLL]  [Symantec Corporation, 10.0.1.1000]
    [C:\Program Files\Symantec AntiVirus\Cliproxy.dll]  [Symantec Corporation, 10.0.1.1000]
[PID: 2780 / Administrator][C:\Program Files\VERITAS\VxUpdate\VxTaskbarMgr.exe]  [VERITAS Software Corporation, 9.0.4367]
[PID: 2816 / Administrator][D:\Program Files\FTGate\FTGateIcon.exe]  [Floosietek Ltd, 1, 2, 0, 0]
[PID: 1748 / Administrator][C:\WINNT\system32\internat.exe]  [Microsoft Corporation, 5.00.2920.0000]
[PID: 612 / Administrator][C:\Program Files\cn99qdns\Cn99qdns.exe]  [, 2, 0, 0, 1]
[PID: 2728 / Administrator][C:\Documents and Settings\administrator.CLASSIC-LIGHT\桌面\杀毒工具\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\Documents and Settings\administrator.CLASSIC-LIGHT\桌面\杀毒工具\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 980, D:\PROGRAM FILES\FTGATE\FTGATESRV.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1004, D:\PROGRAM FILES\FTGATE\FTGATE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1068, C:\PROGRAM FILES\MICROSOFT SQL SERVER\MSSQL$BKUPEXEC\BINN\SQLSERVR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2816, D:\PROGRAM FILES\FTGATE\FTGATEICON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 612, C:\PROGRAM FILES\CN99QDNS\CN99QDNS.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]
gototop
 
天月来了
头像
版主
  • 帖子:76904
  • 注册: 2007-02-06
  • 来自:
发表于： 2008-01-19 17:04 | 短消息 资料
字号： 小 中 大 6楼

没看出什么

试试设置你的那些自启动的软件不自启动看看怎样。
gototop
 
◎稻草人◎
头像
拙长孩提狮
  • 帖子:82
  • 注册: 2006-09-15
  • 来自:
发表于： 2008-01-19 17:12 | 只看楼主 短消息 资料
字号： 小 中 大 7楼

好的,谢谢
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT