瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 请教专家.如何删除TIME.EXE这个文件.

12   1  /  2  页   跳转

请教专家.如何删除TIME.EXE这个文件.

请教专家.如何删除TIME.EXE这个文件.

求各位大虾,有谁知道关机出现C:\time.exe WINDOWS无法关闭程序的问题(系统是2000)我发现电脑出现这个,无论我在C 盘里删掉了安全模式或在注册表里删掉了它的健值都没用,只要关机或重启就出现,虽删了,但重新启动之后,系统又会加载了,请问有谁知道是什么原因呢?  小弟在这里多谢了~~
最后编辑2006-05-14 12:03:54
分享到:
gototop
 

这是一只木马
请下载 System Repair Engineer,使用“智能扫描”,按下“扫描”按钮进行扫描,扫描完成后按下“保存报告”按钮保存报告日志文件(SREng.LOG),把保存的报告日志文件内容复制-粘贴上来
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
www.27814939.ys168.com
gototop
 

恩..感谢专家.我用的是 HijackThis v1.99.1提取的日志报告.请帮忙分析一下..万分感谢.
Logfile of HijackThis v1.99.1
Scan saved at 23:53:02, on 2006-5-13
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

运行进程:           
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\llssrv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
F:\Program Files\Serv-U\ServUDaemon.exe
C:\WINNT\System32\tcpsvcs.exe
C:\WINNT\system32\tlntsvr.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\wins.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\System32\dns.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\Rundll32.exe
C:\WINNT\system32\ntvdm.exe
C:\WINNT\system32\conime.exe
C:\Program Files\Yahoo!\Assistant\yassistse.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINNT\system32\internat.exe
C:\Program Files\jj4\jjsvr4.exe
E:\zj\123\HijackThis v1.99.1 汉化版\HijackThis.exe

R3 - URLSearchHook: (no name) - {BC207F7D-3E63-4ACA-99B5-FB5F8428200C} - (没有文件) 
R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll
R3 - URLSearchHook: Tencent SearchHook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINNT\system32\xunleibho_v14.dll
O2 - BHO: QuickBtn - {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} - C:\Program Files\CoolWebsite\QuickLink.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - e:\Tencent\QQ\QQIEHelper.dll
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (文件故障)
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINNT\downlo~1\CnsHook.dll
O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll (文件故障)
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll
O4 - HKLM\..\Run: [CnsMin] Rundll32.exe C:\WINNT\downlo~1\CnsMin.dll,Rundll32
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [yassistse] "C:\Program Files\Yahoo!\Assistant\yassistse.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [pyjj] C:\Program Files\jj4\jjsvr4.exe
O4 - Startup: 复件 快捷方式 nserver.lnk = C:\hbsuiyue\Lotus\Domino\nserver.exe
O8 - Extra context menu item: &使用迅雷下载 - f:\Thunder Network\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - f:\Thunder Network\Thunder\getallurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - E:\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/246
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: 实用网址导航 - {1D901067-2529-4A9B-9B6B-7A1DB3A44CB5} - C:\Program Files\CoolWebsite\QuickLink.dll
O9 - Extra button: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (文件故障)
O9 - Extra button: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao (文件故障)
O9 - Extra button: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (文件故障)
O9 - Extra 'Tools' menuitem: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (文件故障)
O9 - Extra button: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (文件故障)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - e:\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - e:\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (文件故障)
O9 - Extra button: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (文件故障)
O9 - Extra 'Tools' menuitem: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (文件故障)
O9 - Extra button: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (文件故障)
O9 - Extra 'Tools' menuitem: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (文件故障)
O10 - Unknown file in Winsock LSP: c:\winnt\system32\cdnns.dll
O11 - Options group: [!CNS]  网络实名
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2354A44B-3CEB-4829-9940-545B03103538} (PowerPlr Control) - http://vnet.wuhan.net.cn/plugin/PowerPlr.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{98FF41F5-3479-4531-BC5A-DF46AFBA3EEC}: NameServer
gototop
 

最后一个选项后面有一个IP地址.我没有传上来..本人的确对这个不太懂..谢谢你了.
gototop
 

关闭所有浏览窗口以及一些不必要的程序
运行Hijackthis,扫描结束后在下列选项前打上勾,然后选"修复""
3 - URLSearchHook: (no name) - {BC207F7D-3E63-4ACA-99B5-FB5F8428200C} - (没有文件)
O2 - BHO: QuickBtn - {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} - C:\Program Files\CoolWebsite\QuickLink.dll
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (文件故障)
O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll (文件故障)

请下载 System Repair Engineer,使用“智能扫描”,按下“扫描”按钮进行扫描,扫描完成后按下“保存报告”按钮保存报告日志文件(SREng.LOG),把保存的报告日志文件内容复制-粘贴上来
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
www.27814939.ys168.com
日志一次报不完,分次粘完,不要修改。
gototop
 

2006-05-14,11:31:11

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows 2000 Server Service Pack 4 - 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <internat.exe><internat.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <pyjj><C:\Program Files\jj4\jjsvr4.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <CnsMin><Rundll32.exe C:\WINNT\downlo~1\CnsMin.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Synchronization Manager><mobsync.exe /logon>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <yassistse><"C:\Program Files\Yahoo!\Assistant\yassistse.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <SunJavaUpdateSched><C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <stup.exe><C:\PROGRA~1\TENCENT\Adplus\stup.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINNT\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>
gototop
 

启动文件夹
[复件 快捷方式 nserver]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\复件 快捷方式 nserver.lnk><N>

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Macromedia Licensing Service / Macromedia Licensing Service]
  <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Rising Proxy  Service / RfwProxySrv]
  <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Smart Card Helper / SCardDrv]
  <C:\WINNT\system32\scardsvr32.exe -v><N/A>
[Serv-U FTP 服务器 / Serv-U]
  <F:\Program Files\Serv-U\ServUDaemon.exe><Cat Soft>

==================================
浏览器加载项
[Yahoo!Photo]
  {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll, Yahoo.>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll, Yahoo!>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <e:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[DragSearch BHO]
  {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL, >
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, Sun Microsystems, Inc.>
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINNT\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[Java Plug-in]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, Sun Microsystems, Inc.>
[Yahoo 1G电邮]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[寻宝乐趣多]
  {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao, N/A>
[雅虎助手]
  {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <e:\Tencent\QQ\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <e:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A>
[]
  {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[]
  {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll, Yahoo!>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINNT\system32\LegitCheckControl.DLL, Microsoft Corp.>
[PowerPlr Control]
  {2354A44B-3CEB-4829-9940-545B03103538} <C:\WINNT\DOWNLO~1\PowerPlr.ocx, Powerise Digital>
[Java Plug-in]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in]
  {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_06]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll, Sun Microsystems, Inc.>
[上传到QQ网络硬盘]
  <E:\Tencent\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <E:\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\Tencent\QQ\AddEmotion.htm, N/A>
[添加到雅虎订阅(&Y)]
  <res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT, N/A>
[用QQ彩信发送该图片]
  <E:\Tencent\QQ\SendMMS.htm, N/A>
[雅虎搜索]
  <res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/246, N/A>
gototop
 

正在运行的进程
[PID: 164][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 196][\??\C:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 192][\??\C:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6970>
[PID: 248][C:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.6700>
    [C:\WINNT\system32\dmserver.dll]  <VERITAS Software Corp.><2195.6605.297.3>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 260][C:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6902>
[PID: 456][c:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [c:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 12>
    [c:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [c:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [c:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [c:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 468][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
    [c:\winnt\system32\yvcccant.d1l]  <N/A><N/A>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 484][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2800.1106>
    [C:\WINNT\system32\Yvcccant.d1l]  <N/A><N/A>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
    [C:\WINNT\TEMP\Yvcccant.dl1]  <N/A><N/A>
[PID: 560][C:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 576][C:\Program Files\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  <Rising><18, 1, 0, 9>
    [C:\Program Files\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
    [C:\Program Files\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [C:\Program Files\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [C:\Program Files\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
    [C:\Program Files\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\Program Files\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[PID: 612][C:\WINNT\system32\spoolsv.exe]  <Microsoft Corporation><5.00.2195.7059>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 648][C:\WINNT\System32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 684][C:\WINNT\System32\llssrv.exe]  <Microsoft Corporation><5.00.2195.7021>
[PID: 796][C:\WINNT\system32\regsvc.exe]  <Microsoft Corporation><5.00.2195.6701>
[PID: 924][F:\Program Files\Serv-U\ServUDaemon.exe]  <Cat Soft><6.0.0.1>
    [F:\Program Files\Serv-U\libeay32.DLL]  <N/A><N/A>
    [F:\Program Files\Serv-U\ssleay32.DLL]  <N/A><N/A>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 960][C:\WINNT\System32\tcpsvcs.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 1008][C:\WINNT\system32\tlntsvr.exe]  <Microsoft Corporation><5.00.99206.1>
[PID: 1068][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
[PID: 1104][C:\WINNT\System32\wins.exe]  <Microsoft Corporation><5.00.2195.7005>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 1112][C:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
gototop
 

[PID: 1196][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 1236][C:\WINNT\system32\Dfssvc.exe]  <Microsoft Corporation><5.00.2195.6664>
[PID: 1316][C:\WINNT\System32\dns.exe]  <Microsoft Corporation><5.00.2195.6715>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 1376][C:\WINNT\system32\inetsrv\inetinfo.exe]  <Microsoft Corporation><5.00.0984>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 1608][C:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3700.6690>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
    [C:\WINNT\downlo~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
    [C:\WINNT\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
    [C:\Program Files\CoolWebsite\QuickLink.dll]  <Fengcent><1, 0, 0, 2>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll]  <Yahoo! China><1, 1, 2, 1034>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll]  <Yahoo!><2, 1, 7, 1047>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL]  <><1, 2, 7, 1006>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 0, 1013>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  <><2, 1, 0, 1038>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 1, 1007>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ywiper.dll]  <N/A><1, 0, 1, 1014>
    [E:\Tencent\QQ\qdshm.dll]  <><1, 0, 1, 2>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
[PID: 1644][c:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 48>
    [c:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [c:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [c:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 0, 1013>
[PID: 1696][C:\WINNT\system32\Rundll32.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINNT\downlo~1\CnsMinIO.dll]  <北京三七二一科技有限公司><1, 0, 3, 6>
    [C:\WINNT\downlo~1\cnsio.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
    [C:\WINNT\downlo~1\CnsMinEx.dll]  <国风因特软件(北京)有限公司><1, 0, 3, 1>
[PID: 1632][C:\WINNT\System32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 2064][C:\WINNT\system32\ntvdm.exe]  <Microsoft Corporation><5.00.2195.6946>
[PID: 2080][C:\WINNT\system32\conime.exe]  <Microsoft Corporation><5.00.2195.6655>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
[PID: 1816][C:\Program Files\Yahoo!\Assistant\yassistse.exe]  <Yahoo!><1, 0, 1, 1001>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
    [C:\Program Files\Yahoo!\Assistant\shell\yAssecblk.dll]  <Yahoo><1, 0, 2, 1002>
    [C:\Program Files\Yahoo!\Assistant\shell\yMenuInfo.dll]  <Yahoo><1, 0, 0, 2>
    [C:\Program Files\Yahoo!\Assistant\shell\yIEAngel.dll]  <Yahoo><1, 0, 1, 1001>
    [C:\Program Files\Yahoo!\Assistant\shell\yAsMenu.dll]  <Yahoo><1, 0, 1, 1006>
[PID: 1824][C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe]  <Sun Microsystems, Inc.><5.0.60.5>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
[PID: 1728][C:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
[PID: 1656][C:\WINNT\system32\internat.exe]  <Microsoft Corporation><5.00.2920.0000>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
[PID: 2100][C:\Program Files\jj4\jjsvr4.exe]  <加加开发组><4.0.0.20>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
[PID: 2112][C:\hbsuiyue\Lotus\Domino\nserver.exe]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nserverl.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nTCP.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nNETBIOS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nNTCP.DLL]  <N/A><N/A>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
gototop
 

[PID: 2132][C:\Program Files\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 17>
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
[PID: 2340][C:\hbsuiyue\Lotus\Domino\nRouter.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nNTCP.DLL]  <N/A><N/A>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
    [C:\WINNT\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
    [C:\hbsuiyue\Lotus\Domino\nTCP.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nNETBIOS.DLL]  <N/A><N/A>
[PID: 2364][C:\hbsuiyue\Lotus\Domino\nReplica.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nTCP.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nNETBIOS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
[PID: 2424][C:\hbsuiyue\Lotus\Domino\nUpdate.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
[PID: 2436][C:\hbsuiyue\Lotus\Domino\nAmgr.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
[PID: 1904][C:\hbsuiyue\Lotus\Domino\namgr.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nlsxbe.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\LTOUIN22.dll]  <Lotus Development Corporation.><2.2.0.8911>
    [C:\WINNT\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\qkoziycsh.inf]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
[PID: 1652][C:\hbsuiyue\Lotus\Domino\nAdminP.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
[PID: 296][C:\hbsuiyue\Lotus\Domino\nCalConn.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
[PID: 1164][C:\hbsuiyue\Lotus\Domino\nEvent.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
[PID: 2476][C:\hbsuiyue\Lotus\Domino\nSched.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nTCP.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nNETBIOS.DLL]  <N/A><N/A>
[PID: 2408][C:\hbsuiyue\Lotus\Domino\nStats.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
[PID: 2484][C:\hbsuiyue\Lotus\Domino\nHTTP.EXE]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NINOTES.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\dmsecadm.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nnotes.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\js32.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLSCCSTR.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nhttpsrv.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nhttplib.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nHTTPSEC.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NSTRINGS.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nhtrszhcn.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\namhook.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\ndecsext.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\NLCAPI.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\javai.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\zip.dll]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\nlsxbe.DLL]  <N/A><N/A>
    [C:\hbsuiyue\Lotus\Domino\LTOUIN22.dll]  <Lotus Development Corporation.><2.2.0.8911>
gototop
 
12   1  /  2  页   跳转
页面顶部
Powered by Discuz!NT