瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

1   1  /  1  页   跳转

[求助] cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!  请高手帮忙弄一下,谢谢再谢谢!

有SREng.EXE 描扫日子如下,请高手帮我看一下,救救我!!

2009-07-28,11:11:43
System Repair Engineer 2.7.1.1261
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 3, v.5755 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描
    计划任务
    API HOOK
    隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
    <aliim><d:\Program Files\AliWangWang\aliim.exe>  [(Verified)"Alisoft(Shanghai) Co., Ltd."]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <TPHOTKEY><C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe>  []
    <360Safetray><d:\Program Files\360\360Safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <BDAgent><"C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe">  [BitDefender S.R.L.]
    <BitDefender Antiphishing Helper><"C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe">  [BitDefender]
    <Microsoft Pinyin IME Migration><C:\PROGRA~1\COMMON~1\MICROS~1\IME12\IMESC\IMSCMIG.EXE /INSTALL>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Windows Component Publisher]
    <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
    <WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
    <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
    <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
    <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
    <WinlogonNotify: tpfnf2><notifyf2.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
    <WinlogonNotify: tphotkey><tphklock.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
    <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
    <浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINDOWS\system32\logon.scr>  [(Verified)Microsoft Windows Component Publisher]
==================================
启动文件夹
[服务管理器]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\服务管理器.lnk --> C:\PROGRA~1\MICROS~3\80\Tools\Binn\sqlmangr.exe [Microsoft Corporation]><N>
==================================
服务
[ACU Configuration Service / ACS][Stopped/Manual Start]
  <C:\WINDOWS\system32\acs.exe><N/A>
[Adobe LM Service / Adobe LM Service][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[BitDefender Arrakis Server / Arrakis3][Stopped/Manual Start]
  <"C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe"><BitDefender S.R.L. http://www.bitdefender.com>
[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
  <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[ThinkPad PM Service / IBMPMSVC][Running/Auto Start]
  <C:\WINDOWS\system32\ibmpmsvc.exe><Lenovo>
[BitDefender Desktop Update Service / LIVESRV][Running/Auto Start]
  <"C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe" /service><BitDefender SRL>
[MSSQLSERVER / MSSQLSERVER][Running/Auto Start]
  <d:\PROGRA~1\MICROS~1\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  <C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[BitDefender Threat Scanner / scan][Stopped/Manual Start]
  <C:\WINDOWS\System32\svchost.exe -kbdx-->C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll><S.C. BitDefender S.R.L>
[SQLSERVERAGENT / SQLSERVERAGENT][Running/Auto Start]
  <d:\Program Files\Microsoft SQL Server\MSSQL\binn\sqlagent.exe -i MSSQLSERVER><Microsoft Corporation>
[BitDefender Virus Shield / VSSERV][Running/Auto Start]
  <"C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe" /service><BitDefender S. R. L.>
==================================
驱动程序
[aeaudio / aeaudio][Running/Manual Start]
  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[AEGIS Protocol (IEEE 802.1x) v3.4.10.0 / AegisP][Running/Auto Start]
  <system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications>
[Agere Systems Soft Modem / AgereSoftModem][Running/Manual Start]
  <system32\DRIVERS\AGRSM.sys><Agere Systems>
[Atheros Wireless Network Adapter Service / AR5211][Stopped/Manual Start]
  <system32\DRIVERS\ar5211.sys><Atheros Communications, Inc.>
[ati2mtag / ati2mtag][Running/Manual Start]
  <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[bdfm / bdfm][Running/Manual Start]
  <system32\drivers\bdfm.sys><BitDefender S.R.L. Bucharest, ROMANIA>
[BitDefender Firewall NDIS Filter Service / Bdfndisf][Running/Manual Start]
  <system32\DRIVERS\bdfndisf.sys><BitDefender LLC>
[bdfsfltr / bdfsfltr][Running/Manual Start]
  <system32\drivers\bdfsfltr.sys><BitDefender S.R.L. Bucharest, ROMANIA>
[bdftdif / bdftdif][Running/System Start]
  <\??\C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys><BitDefender LLC>
[BDSelfPr / BDSelfPr][Running/Manual Start]
  <\??\C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys><BitDefender S.R.L.>
[BDVEDISK / BDVEDISK][Running/Auto Start]
  <\??\C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys><BitDefender S.R.L.>
[Intel(R) PRO/1000 Network Connection Driver / E1000][Running/Manual Start]
  <system32\DRIVERS\e1000325.sys><Intel Corporation>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
  <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[IBMPMDRV / IBMPMDRV][Running/Manual Start]
  <system32\DRIVERS\ibmpmdrv.sys><Lenovo.>
[NSC Infrared Device Driver / NSCIRDA][Running/Manual Start]
  <system32\DRIVERS\nscirda.sys><National Semiconductor Corporation>
[nv / nv][Stopped/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Profos / Profos][Running/Manual Start]
  <\??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
  <\??\C:\WINDOWS\system32\Drivers\safeboxkrnl.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SATALink driver accelerator / SiFilter][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\SiWinAcc.sys><Silicon Image, Inc.>
[smwdm / smwdm][Running/Manual Start]
  <system32\drivers\smwdm.sys><Analog Devices, Inc.>
[Trufos / Trufos][Running/Manual Start]
  <\??\C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\trufos.sys><BitDefender S.R.L.>
==================================
浏览器加载项
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <d:\Program Files\360\360Safe\safemon\safemon.dll, (Signed) 360.CN>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[]
  {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
[BitDefender Toolbar]
  {381FFDE8-2394-4f90-B10D-FC6124A40F8C} <C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll, Bitdefender>
[nEdit Control]
  {32D72994-45B9-42B5-8980-FB561D1BE2D0} <C:\WINDOWS\system32\nEdit\nEdit.ocx, NetEase Information Technology (Beijing) Co. Ltd>
[BitDefender Toolbar]
  {381FFDE8-2394-4F90-B10D-FC6124A40F8C} <C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll, Bitdefender>
[WangWangX Class]
  {5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} <D:\Program Files\AliWangWang\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.>
[]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <d:\Program Files\360\360Safe\safemon\safemon.dll, (Signed) 360.CN>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, (Signed) Adobe Systems, Inc.>
[PlayerCtrl Class]
  {E05BC2A3-9A46-4A32-80C9-023A473F5B23} <d:\Program Files\Tencent\QQMusic\QzoneMusic.dll, 深圳腾讯科技>
[]
  {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[]
  {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[导出到 Microsoft Excel(&X)]
  <res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000, N/A>

用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
分享到:
gototop
 

回复:cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

[添加到QQ表情]
  <d:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
==================================
正在运行的进程
[PID: 900 / SYSTEM][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 972 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 1008 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\Ati2evxx.dll]  [ATI Technologies Inc., 6.14.10.4115]
    [C:\WINDOWS\system32\tphklock.dll]  [N/A, ]
[PID: 1052 / SYSTEM][C:\WINDOWS\system32\services.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[PID: 1064 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1224 / SYSTEM][C:\WINDOWS\system32\ibmpmsvc.exe]  [Lenovo, 1.41]
[PID: 1252 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe]  [ATI Technologies Inc., 6.14.10.4115]
    [C:\WINDOWS\system32\Ati2edxx.dll]  [ATI Technologies, Inc., 6, 14, 10, 2497]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1284 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1364 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1616 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 1736 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 196 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 276 / SYSTEM][d:\PROGRA~1\MICROS~1\MSSQL\binn\sqlservr.exe]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\opends60.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\sqlsort.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\ums.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\Resources\2052\sqlevn70.RLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\SSNETLIB.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\SSmsLPCn.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\SSnmPN70.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\xpsqlbot.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\odsole70.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\xpstar.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\SQLRESLD.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\SQLSVC.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\W95SCM.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\PROGRA~1\MICROS~1\MSSQL\binn\Resources\2052\SQLSVC.RLL]  [Microsoft Corporation, 2000.080.0194.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\xpstar.RLL]  [Microsoft Corporation, 2000.080.2039.00]
[PID: 784 / SYSTEM][d:\Program Files\Microsoft SQL Server\MSSQL\binn\sqlagent.exe]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\SQLRESLD.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\SQLSVC.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\W95SCM.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\SEMMAP.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\SQLSVC.RLL]  [Microsoft Corporation, 2000.080.0194.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\SEMMAP.RLL]  [Microsoft Corporation, 2000.080.0194.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\sqlagent.RLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\SQLAGENT.DLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\BINN\SQLCMDSS.DLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\BINN\Resources\2052\SQLCMDSS.RLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\BINN\SQLREPSS.DLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\BINN\Resources\2052\SQLREPSS.RLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\BINN\SQLATXSS.DLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\ATXCORE.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\binn\Resources\2052\ATXCORE.RLL]  [Microsoft Corporation, 2000.080.2039.00]
    [d:\Program Files\Microsoft SQL Server\MSSQL\BINN\Resources\2052\SQLATXSS.RLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\Program Files\Microsoft SQL Server\80\Tools\BINN\AXSCPHST.DLL]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\Program Files\Microsoft SQL Server\80\Tools\BINN\Resources\2052\AXSCPHST.RLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\WINDOWS\system32\DBmsLPCn.dll]  [Microsoft Corporation, 2000.080.2039.00]
[PID: 1704 / soft-2009][C:\WINDOWS\system32\Ati2evxx.exe]  [ATI Technologies Inc., 6.14.10.4115]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\Ati2edxx.dll]  [ATI Technologies, Inc., 6, 14, 10, 2497]
[PID: 320 / soft-2009][C:\WINDOWS\Explorer.EXE]  [(Verified) Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1020]
    [C:\Program Files\BitDefender\BitDefender 2009\bdfvsctx.dll]  [BitDefender S.R.L., 12.0.11.37]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\system32\txmlutil.dll]  [, 12, 0, 12, 5]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bdfvsctx.ui]  [BitDefender S.R.L., 12.0.11.37]
    [C:\Program Files\BitDefender\BitDefender 2009\bdshelxt.dll]  [BitDefender S.R.L, 12, 0, 3, 2]
    [C:\Program Files\BitDefender\BitDefender 2009\txmlx.dll]  [BitDefender S.R.L., 12, 0, 4, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bdshelxt.ui]  [, 12, 0, 0, 1]
    [C:\Program Files\WinRAR\rarext.dll]  [, ]
    [D:\Program Files\AliWangWang\AliIMExt.dll]  [Alibaba software (Shanghai) Corporation., 1.0.0.1]
    [C:\WINDOWS\system32\WMASF.DLL]  [Microsoft Corporation, 10.00.00.4060 built by: Microsoft]
[PID: 596 / soft-2009][C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe]  [N/A, ]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\Program Files\Lenovo\PkgMgr\HOTKEY_2\tphk_2k.dll]  [N/A, ]
    [C:\WINDOWS\system32\Oemdspif.dll]  [ATI Technologies, Inc., 6.14.0012]
[PID: 616 / soft-2009][C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe]  [N/A, ]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 640 / soft-2009][C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe]  [Lenovo Group Limited, 1.17]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 472 / soft-2009][C:\WINDOWS\system32\ctfmon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1020]
[PID: 1744 / soft-2009][C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Microsoft SQL Server\80\Tools\Binn\W95SCM.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\Program Files\Microsoft SQL Server\80\Tools\Binn\SQLSVC.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\Program Files\Microsoft SQL Server\80\Tools\Binn\SQLRESLD.dll]  [Microsoft Corporation, 2000.080.2039.00]
    [C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\2052\SQLSVC.RLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\Program Files\Microsoft SQL Server\80\Tools\Binn\Resources\2052\sqlmangr.RLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 2308 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[PID: 2436 / soft-2009][C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe]  [, 12, 0, 11, 54]
    [C:\Program Files\BitDefender\BitDefender 2009\bdutils.dll]  [BitDefender S.R.L., 12, 0, 11, 1]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\system32\txmlutil.dll]  [, 12, 0, 12, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\npcomm.dll]  [BitDefender LLC, 2.0.1.18]
    [C:\Program Files\BitDefender\BitDefender 2009\issues.dll]  [BitDefender, 12, 0, 11, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\bdguictl.dll]  [BitDefender S.R.L., 12, 0, 11, 19]
    [C:\Program Files\BitDefender\BitDefender 2009\txmlx.dll]  [BitDefender S.R.L., 12, 0, 4, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\ProductInfo.dll]  [BitDefender SRL, 12.0.11.1]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bdguictl.ui]  [BitDefender S.R.L., 12, 0, 11, 19]
    [C:\Program Files\BitDefender\BitDefender 2009\bdch.dll]  [BitDefender S.R.L., 12, 0, 11, 3]
    [C:\Program Files\BitDefender\BitDefender 2009\dbghelp.dll]  [Microsoft Corporation, 6.6.0007.5 (debuggers(dbg).051021-1446)]
    [C:\Program Files\BitDefender\BitDefender 2009\bdusers.dll]  [BitDefender S.R.L, 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\seccenter.ui]  [, 12, 0, 11, 54]
    [C:\Program Files\BitDefender\BitDefender 2009\hmplugin.dll]  [Bitdefender, 12, 0, 11, 3]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\hmplugin.ui]  [Bitdefender, 12, 0, 11, 3]
    [C:\Program Files\BitDefender\BitDefender 2009\hmcore.dll]  [, 12, 0, 140, 0]
    [C:\Program Files\BitDefender\BitDefender 2009\security.dll]  [BitDefender S.R.L, 12, 0, 11, 2]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\security.ui]  [BitDefender S.R.L, 12, 0, 11, 2]
    [C:\Program Files\BitDefender\BitDefender 2009\bdfvsecp.dll]  [BitDefender S.R.L, 12.0.11.6]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bdfvsecp.ui]  [BitDefender S.R.L, 12.0.11.6]
gototop
 

回复:cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

[C:\Program Files\BitDefender\BitDefender 2009\general.dll]  [S.C. BitDefender S.R.L, PRODUCT_VERSION_STR]
    [C:\Program Files\BitDefender\BitDefender 2009\bdplugin.dll]  [BITDEFENDER S.R.L., 12.0.5.1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\general.ui]  [S.C. BitDefender S.R.L, PRODUCT_VERSION_STR]
    [C:\Program Files\BitDefender\BitDefender 2009\dashboard.dll]  [BitDefender S.R.L., 12, 0, 11, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\advanced.dll]  [S.C. BitDefender S.R.L, 12, 0, 140, 0]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\advanced.ui]  [S.C. BitDefender S.R.L, 12, 0, 140, 0]
    [C:\Program Files\BitDefender\BitDefender 2009\sysinfo.dll]  [BitDefender S.R.L., 12, 0, 11, 3]
    [C:\Program Files\BitDefender\BitDefender 2009\bdelev.DLL]  [BitDefender S.R.L., 12, 0, 10, 19]
    [C:\Program Files\BitDefender\BitDefender 2009\antivirus.dll]  [BitDefender S.R.L., 12, 0, 7, 2]
    [C:\Program Files\BitDefender\BitDefender 2009\vshield.dll]  [BitDefender S.R.L., 12, 0, 11, 23]
    [C:\Program Files\BitDefender\BitDefender 2009\BTCommon.dll]  [Bitdefender, 12, 0, 11, 30]
    [C:\Program Files\BitDefender\BitDefender 2009\vscan.dll]  [BitDefender S.R.L., 12, 0, 11, 24]
    [C:\Program Files\BitDefender\BitDefender 2009\exclude.dll]  [BitDefender S.R.L., 12, 0, 11, 4]
    [C:\Program Files\BitDefender\BitDefender 2009\BDWizard.dll]  [BitDefender, 12, 0, 11, 3]
    [C:\Program Files\BitDefender\BitDefender 2009\excmgr.dll]  [BitDefender S.R.L., 12, 0, 7, 2]
    [C:\Program Files\BitDefender\BitDefender 2009\quarui.dll]  [BitDefender S.R.L., 12, 0, 11, 23]
    [C:\Program Files\BitDefender\BitDefender 2009\antispam.dll]  [BitDefender S.R.L., 12, 0, 11, 28]
    [C:\Program Files\BitDefender\BitDefender 2009\pcontrol.dll]  [BitDefender S.R.L., 12, 0, 11,13]
    [C:\Program Files\BitDefender\BitDefender 2009\Wizards.dll]  [BitDefender S.R.L., 12, 0, 11, 3]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\Wizards.ui]  [BitDefender S.R.L., 12, 0, 11, 3]
    [C:\Program Files\BitDefender\BitDefender 2009\antispy.dll]  [BitDefender S.R.L, 12, 0, 5, 4]
    [C:\Program Files\BitDefender\BitDefender 2009\ashield.dll]  [BitDefender S.R.L, 12, 0, 11, 2]
    [C:\Program Files\BitDefender\BitDefender 2009\privintf.dll]  [BitDefender S.R.L., 12, 0, 11, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\registry.dll]  [BitDefender S.R.L, 12, 0, 10, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\cookie.dll]  [BitDefender S.R.L, 12, 0, 10, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\script.dll]  [BitDefender S.R.L, 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\fwgui.dll]  [BitDefender LLC, 4.0.0.27]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\fwgui.ui]  [BitDefender LLC, 4.0.0.27]
    [C:\Program Files\BitDefender\BitDefender 2009\Vulnerability.dll]  [BitDefender S.R.L, 12, 0, 11, 4]
    [C:\Program Files\BitDefender\BitDefender 2009\encryption.dll]  [BitDefender S.R.L., 12.0.7.3]
    [C:\Program Files\BitDefender\BitDefender 2009\IMEncUI.dll]  [BitDefender S.R.L., 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\IMEncUI.ui]  [BitDefender S.R.L., 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\bdfvconp.dll]  [BitDefender S.R.L., 12, 0, 11, 14]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bdfvconp.ui]  [BitDefender S.R.L., 12, 0, 11, 14]
    [C:\Program Files\BitDefender\BitDefender 2009\ProductTweaksPlugin.dll]  [BitDefender, 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\dbokfui.dll]  [BITDEFENDER S.R.L., 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\ProductTweaksPlugin.ui]  [BitDefender, 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\live.dll]  [BitDefender SRL, 12, 0, 11, 8]
    [C:\Program Files\BitDefender\BitDefender 2009\reg_sup.dll]  [S.C. BitDefender S.R.L, 12, 0, 140, 0]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\reg_sup.ui]  [S.C. BitDefender S.R.L, 12, 0, 140, 0]
    [C:\Program Files\BitDefender\BitDefender 2009\reginfo.dll]  [S.C. BitDefender S.R.L, 12, 0, 140, 0]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\reginfo.ui]  [S.C. BitDefender S.R.L, 12, 0, 140, 0]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1020]
    [C:\Program Files\BitDefender\BitDefender 2009\actxcont.dll]  [N/A, ]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\issues.ui]  [BitDefender, 12, 0, 11, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\bdmcon.dll]  [S.C. BitDefender S.R.L, 12, 0, 11, 6]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bdmcon.ui]  [S.C. BitDefender S.R.L, 12, 0, 11, 6]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\dashboard.ui]  [BitDefender S.R.L., 12, 0, 11, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\sysinfo.ui]  [BitDefender S.R.L., 12, 0, 11, 3]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\antivirus.ui]  [BitDefender S.R.L., 12, 0, 7, 2]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\vshield.ui]  [BitDefender S.R.L., 12, 0, 11, 21]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\vscan.ui]  [BitDefender S.R.L., 12, 0, 11, 24]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\exclude.ui]  [BitDefender S.R.L., 12, 0, 11, 4]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\quarui.ui]  [BitDefender S.R.L., 12, 0, 11, 23]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\antispam.ui]  [BitDefender S.R.L., 12, 0, 11, 27]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\pcontrol.ui]  [BitDefender S.R.L., 12, 0, 11,13]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\antispy.ui]  [BitDefender S.R.L, 12, 0, 5, 4]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\ashield.ui]  [BitDefender S.R.L, 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\privintf.ui]  [BitDefender S.R.L., 12, 0, 11, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\registry.ui]  [BitDefender S.R.L, 12, 0, 10, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\cookie.ui]  [BitDefender S.R.L, 12, 0, 10, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\script.ui]  [BitDefender S.R.L, 12, 0, 10, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\Vulnerability.ui]  [BitDefender S.R.L, 12, 0, 11, 4]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\encryption.ui]  [, 12, 0, 0, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\live.ui]  [BitDefender SRL, 12, 0, 11, 8]
    [C:\Program Files\BitDefender\BitDefender 2009\bwlist.dll]  [BitDefender S.R.L., 12, 0, 11, 7]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bwlist.ui]  [BitDefender S.R.L., 12, 0, 11, 7]
    [C:\Program Files\BitDefender\BitDefender 2009\BDChartActiveX.dll]  [BitDefender S.R.L., 12, 0, 11, 1]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\BTCommon.ui]  [Bitdefender, 12, 0, 11, 30]
    [C:\Program Files\BitDefender\BitDefender 2009\proxymgrui.dll]  [BitDefender S.R.L., 12, 0, 11, 10]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\proxymgrui.ui]  [BitDefender S.R.L., 12, 0, 11, 10]
    [C:\Program Files\BitDefender\BitDefender 2009\proxymgr.dll]  [BitDefender S.R.L., 12, 0, 7, 4]
[PID: 1692 / soft-2009][D:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQHelperDll.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [TENCENT, 8,0,978,1833]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1020]
    [D:\Program Files\Tencent\QQ\QQAPI.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\LoginCtrl.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\LoginCtrlRes.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQRes.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQMainFrame.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQPlugin.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\UnReadMsgMgr.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQAllInOne.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 1, 6, 0, 2]
    [D:\Program Files\Tencent\QQ\CameraDll.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\CQQApplication.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\NewSkin.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\MailSummary.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQSpace.dll]  [TENCENT, 8,0,978,1833]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [D:\Program Files\Tencent\QQ\OEMApplication.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQAvatar.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQGroupMng.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQPet.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QRingMng.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQCustomFace.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\GroupConnection.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\ImageOle.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQLiveQMng.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\LongConnection.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\PhoneAPI.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
    [D:\Program Files\Tencent\QQ\BQQApplication.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQMagicFace.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\CommercesMng.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 330]
    [D:\Program Files\Tencent\QQ\QQFileTransfer.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\QQSceneMng.dll]  [TENCENT, 8,0,978,1833]
    [D:\Program Files\Tencent\QQ\AddrSearch.dll]  [Tencent, 2, 3, 12, 11]
[PID: 2840 / soft-2009][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1020]
    [C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll]  [Bitdefender, 12.0.11.14]
    [C:\Program Files\BitDefender\BitDefender 2009\BTCommon.dll]  [Bitdefender, 12, 0, 11, 30]
    [C:\Program Files\BitDefender\BitDefender 2009\bdutils.dll]  [BitDefender S.R.L., 12, 0, 11, 1]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\BitDefender\BitDefender 2009\bdguictl.dll]  [BitDefender S.R.L., 12, 0, 11, 19]
    [C:\Program Files\BitDefender\BitDefender 2009\txmlx.dll]  [BitDefender S.R.L., 12, 0, 4, 1]
    [C:\WINDOWS\system32\txmlutil.dll]  [, 12, 0, 12, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\ProductInfo.dll]  [BitDefender SRL, 12.0.11.1]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\BitDefender\BitDefender 2009\npcomm.dll]  [BitDefender LLC, 2.0.1.18]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bdguictl.ui]  [BitDefender S.R.L., 12, 0, 11, 19]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\BTCommon.ui]  [Bitdefender, 12, 0, 11, 30]
    [C:\WINDOWS\system32\WMASF.DLL]  [Microsoft Corporation, 10.00.00.4060 built by: Microsoft]
    [D:\Program Files\360\360Safe\safemon\urlproc.dll]  [360.CN, 1, 0, 0, 1006]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
    [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
[PID: 2080 / soft-2009][C:\WINDOWS\system32\taskmgr.exe]  [(Verified) Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1020]
[PID: 2952 / soft-2009][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1020]
    [C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll]  [Bitdefender, 12.0.11.14]
    [C:\Program Files\BitDefender\BitDefender 2009\BTCommon.dll]  [Bitdefender, 12, 0, 11, 30]
    [C:\Program Files\BitDefender\BitDefender 2009\bdutils.dll]  [BitDefender S.R.L., 12, 0, 11, 1]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\BitDefender\BitDefender 2009\bdguictl.dll]  [BitDefender S.R.L., 12, 0, 11, 19]
    [C:\Program Files\BitDefender\BitDefender 2009\txmlx.dll]  [BitDefender S.R.L., 12, 0, 4, 1]
    [C:\WINDOWS\system32\txmlutil.dll]  [, 12, 0, 12, 5]
    [C:\Program Files\BitDefender\BitDefender 2009\ProductInfo.dll]  [BitDefender SRL, 12.0.11.1]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\BitDefender\BitDefender 2009\npcomm.dll]  [BitDefender LLC, 2.0.1.18]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\bdguictl.ui]  [BitDefender S.R.L., 12, 0, 11, 19]
    [C:\Program Files\BitDefender\BitDefender 2009\CHS\BTCommon.ui]  [Bitdefender, 12, 0, 11, 30]
    [C:\WINDOWS\system32\WMASF.DLL]  [Microsoft Corporation, 10.00.00.4060 built by: Microsoft]
    [D:\Program Files\360\360Safe\safemon\urlproc.dll]  [360.CN, 1, 0, 0, 1006]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
[PID: 2592 / soft-2009][C:\Documents and Settings\Administrator\桌面\sreng2\SREngLdr.EXE]  [Smallfrogs Studio, 2.7.1.1261]
[PID: 2564 / soft-2009][C:\Documents and Settings\Administrator\桌面\sreng2\SRE26d75638.EXE]  [Smallfrogs Studio, 2.7.1.1261]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1020]
    [C:\Documents and Settings\Administrator\桌面\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1      localhost
==================================
进程特权扫描
特殊特权被允许: SeLoadDriverPrivilege [PID = 276, D:\PROGRA~1\MICROS~1\MSSQL\BINN\SQLSERVR.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 596, C:\PROGRA~1\LENOVO\PKGMGR\HOTKEY\TPHKMGR.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 616, C:\PROGRAM FILES\LENOVO\PKGMGR\HOTKEY\TPONSCR.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 640, C:\PROGRAM FILES\LENOVO\PKGMGR\HOTKEY_1\TPSCREX.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 1744, C:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLMANGR.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2436, C:\PROGRAM FILES\BITDEFENDER\BITDEFENDER 2009\SECCENTER.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2592, C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SRENG2\SRENGLDR.EXE]
==================================
计划任务
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================

[/CODE]
gototop
 

回复:cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

log文件以附件形式发上来
一颗红心向党,一片真心为民
gototop
 

回复:cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

日志中没看出什么异常,也没有cmd.exe进程啊
c:\windows\system32\txmlutil.dll 这个我不知道是什么
gototop
 

回复:cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

建议全盘搜索CMD.exe这个文件,不在C:\Windows\system32和C:\WINDOWS\system32\Dllcache\这个目录下的cmd.exe全部删除
建议装防火墙,可以组织cmd.exe被恶意程序利用
gototop
 

回复: cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

谢谢大家!我的电脑是装有SQL2000 的,上次在网上查到好象是有人利用SQL2000的端口的一种木马,重新装过好几次电脑,SQL2000一开,一上游戏  进程里就出现在好几个cmd.exe   
但关了SQL2000  关cmd.exe进程后就不出行了  我好痛苦!!
gototop
 

回复: cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

这是我的扫描LOG日志,高手帮我看一下,谢谢再谢谢

附件附件:

文件名:SREngLOG.log
下载次数:169
文件类型:application/octet-stream
文件大小:
上传时间:2009-7-28 23:52:47
描述:log

gototop
 

回复:cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

bitdefender你装的杀毒软件?我还是第一次接触
cmd.exe是XP系统的命令提示符程序,可以执行一些在DOS下执行的应用程序,但是并不会随系统启动时运行,这有可能是个木马或者其他病毒程序,建议查杀
打开“任务管理器”,在“进程”中结束cmd.exe的运行可不可以?
可以1)、如果安装文件就在硬盘上,而且系统是从硬盘的安装目录装的,那先将这个安装目录改个名字
  2)、删除c:\winnt\system32\dllcache(没有这个子文件)\cmd.exe,
  3)、然后再删除system32\cmd.exe
还可以:禁止运行命令解释器和批处理文件方法:通过修改注册表,可以禁止用户使用命令解释器(CMD.exe)和运行批处理文件(.bat文件)。新建一个双字节(REG_DWORD)执行HKEY_CURRENT_USER\Software\Policies\ Microsoft\Windows\System\DisableCMD,修改其值为2,命令解释器和批处理文件都不能被运行。修改其值为1,则只是禁止命令解释器的运行。 就是替换掉系统的cmd.exe文件。但是由于此文件受系统保护,所以必须用一种特殊的办法。
gototop
 

回复:cmd.exe进程莫明出现,不占cpu 重装电脑还是存在!!

那试试重装 SQL2000
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT