帮忙看看我的log！！！ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛帮忙看看我的log！！！

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

帮忙看看我的log！！！

colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:	发表于： 2006-05-16 21:25 \| 只看楼主短消息资料字号：小中大 1楼帮忙看看我的log！！！最近总是跳出 http://u.7town.com/movie/full/yang1/index.html?uid=11384 贴上我的log，大家帮忙看看是哪的问题 HijackThis@Qoo的扫描日志 V1.97.7 Scan saved at 21:07:21, on 2006-5-16 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE D:\SKYNET\FIREWALL\pfw.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\inetsrv\DavCData.exe C:\Program Files\Internet Explorer\iexplore.exe D:\tvants\Tvants.exe C:\Documents and Settings\robber\桌面\hijackthis1.97_qoo\HijackThis.exe O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - d:\Tencent\QQ\QQIEHelper.dll O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\FLASHGET\jccatch.dll O2 - BHO: (no name) - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\system32\microapmddt.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\FLASHGET\fgiebar.dll O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [SKYNET Personal FireWall] D:\SKYNET\FIREWALL\pfw.exe O4 - HKLM\..\Run: [KAVPersonal50] "d:\Kaspersky Anti-Virus Personal\kav.exe" /minimize O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [BitComet] "D:\BitComet\BitComet.exe" O4 - Startup: NTUSER.DAT O4 - Startup: ntuser.dat.LOG O4 - Startup: ntuser.ini O4 - Startup: Motorola_Driver_Log.txt O4 - Startup: 1146898555-oem0.inf O4 - Startup: 1146898555-oem0.PNF O4 - Startup: USBMOT2000.INF O4 - Startup: usbsermpt.sys O4 - Startup: USB_CMCS_2000.INF O4 - Startup: usbsermptxp.sys O4 - Startup: USBMOT2000XP.INF O8 - Extra context menu item: 使用网际快车下载 - D:\FlashGet\jc_link.htm O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\FlashGet\jc_all.htm O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: 添加到QQ自定义面板 - d:\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - d:\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - d:\Tencent\QQ\SendMMS.htm O9 - Extra button: QQ (HKLM) O9 - Extra button: FlashGet (HKLM) O9 - Extra 'Tools' menuitem: &FlashGet (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1147567885074 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{89E2F016-E22A-45BD-87ED-0CD245A784DF}: NameServer = 202.99.160.68 202.99.168.8 2006-05-18 19:48:31
colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:	分享到：

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-05-16 21:46 \| 短消息资料字号：小中大 2楼修复 O2 - BHO: (no name) - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\system32\microapmddt.dll 以下这些如果你也不知道，建议修复。 O4 - Startup: NTUSER.DAT O4 - Startup: ntuser.dat.LOG O4 - Startup: ntuser.ini O4 - Startup: Motorola_Driver_Log.txt O4 - Startup: 1146898555-oem0.inf O4 - Startup: 1146898555-oem0.PNF O4 - Startup: USBMOT2000.INF O4 - Startup: usbsermpt.sys O4 - Startup: USB_CMCS_2000.INF O4 - Startup: usbsermptxp.sys O4 - Startup: USBMOT2000XP.INF 修复后请重启请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来 http://www.kztechs.com/sreng/sreng2.zip http://forum.ikaka.com/topic.asp?board=67&artid=5188931 日志一次粘不完，分次粘完，不要修改。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:	发表于： 2006-05-16 22:32 \| 只看楼主短消息资料字号：小中大 3楼这是System Repair Engineer扫描的log 2006-05-16,22:06:59 System Repair Engineer 2.0.12.350 (2.0 RC 1) Windows XP Professional Service Pack 2 - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <BitComet><"D:\BitComet\BitComet.exe"> [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <SKYNET Personal FireWall><D:\SKYNET\FIREWALL\pfw.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <KAVPersonal50><"d:\Kaspersky Anti-Virus Personal\kav.exe" /minimize> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <DTService><rundll32.exe C:\WINDOWS\system32\DTSERV~1.DLL,Load> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <Userinit><C:\WINDOWS\system32\userinit.exe,> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe> [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <pbmini><; C:\Program Files\pcast\PodcastbarMini\PodcastBarMiniStater.exe> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <PigUpdate><; C:\WINDOWS\system32\system\DownLoadPig.exe> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <StormCodec_Helper><; "d:\Storm Codec\StormSet.exe" /S /opti> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <YLive.exe><; C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe> ================================== 启动文件夹服务 [InterBase Guardian / InterBaseGuardian] <d:\InterBase\bin\ibguard.exe><Borland Software Corporation> [InterBase Server / InterBaseServer] <d:\InterBase\bin\ibserver.exe><Borland Software Corporation> [kavsvc / kavsvc] <"d:\Kaspersky Anti-Virus Personal\kavsvc.exe"><Kaspersky Lab> ================================== 浏览器加载项 [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\FLASHGET\jccatch.dll, Amaze Soft> [MacroMediapd] {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} <C:\WINDOWS\system32\microapmddt.dll, MACROMEDlA> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <d:\Tencent\QQ\QQ.EXE, TENCENT> [FlashGet] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <D:\FLASHGET\flashget.exe, Amaze Soft> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\FLASHGET\fgiebar.dll, Amaze Soft> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corp.> [PowerList Control] {20C2C286-BDE8-441B-B73D-AFA22D914DA5} <d:\PPStream\POWERL~1.OCX, PPStream.com> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [PowerPlayer Control] {5EC7C511-CD0F-42E6-830C-1BD9882F3458} <d:\PPStream\POWERP~1.DLL, PPStream Inc.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\FLASHGET\jccatch.dll, Amaze Soft> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [MacroMediapd] {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} <C:\WINDOWS\system32\microapmddt.dll, MACROMEDlA> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\FLASHGET\fgiebar.dll, Amaze Soft> [pCastPanel Class] {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} <C:\Program Files\pcast\PodcastbarMini\pcastctl.dll, N/A> [使用网际快车下载] <D:\FlashGet\jc_link.htm, N/A> [使用网际快车下载全部链接] <D:\FlashGet\jc_all.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <d:\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <d:\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <d:\Tencent\QQ\SendMMS.htm, N/A>
colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:

colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:	发表于： 2006-05-16 22:34 \| 只看楼主短消息资料字号：小中大 4楼正在运行的进程 [PID: 596][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 668][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 692][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 736][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 748][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 896][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 940][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1044][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1088][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1152][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1412][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1652][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\DTSERV~1.DLL] <><1, 3, 0, 0> [C:\WINDOWS\system32\ext\DTSM.dll] <N/A><N/A> [D:\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0> [D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [D:\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [d:\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [d:\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.372.2> [d:\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\shellex.dll] <Kaspersky Lab><5.0.372.1> [d:\WinRAR\rarext.dll] <N/A><N/A> [C:\WINDOWS\system32\vorbis.acm] <HMS http://hp.vector.co.jp/authors/VA012897/><0, 0, 3, 6> [C:\Program Files\Common Files\Ahead\Lib\AdvrCntr.dll] <Ahead Software AG><1,0,13, 2124> [PID: 1772][D:\SKYNET\FIREWALL\pfw.exe] <广州众达天网技术有限公司><2.7.7.1000> [D:\SKYNET\FIREWALL\SKYMISC.DLL] <N/A><N/A> [D:\SKYNET\FIREWALL\COMPRESSWRAP.DLL] <N/A><N/A> [PID: 1804][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1884][C:\WINDOWS\system32\inetsrv\inetinfo.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1976][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] <Microsoft Corporation><7.10.3077> [PID: 308][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)> [PID: 1740][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1876][C:\WINDOWS\system32\wscntfy.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1284][C:\WINDOWS\system32\taskmgr.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3996][C:\WINDOWS\system32\dllhost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [d:\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [d:\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.372.2> [d:\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.372.0> [PID: 432][C:\WINDOWS\system32\dllhost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3896][C:\WINDOWS\system32\msdtc.exe] <Microsoft Corporation><2001.12.4414.258> [PID: 1172][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [d:\Tencent\QQ\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [D:\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [C:\WINDOWS\system32\microapmddt.dll] <MACROMEDlA><1, 2, 0, 0> [d:\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [d:\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.372.2> [d:\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.372.0> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [C:\WINDOWS\system32\ffdshow.ax] <N/A><1.0.2.1997> [d:\Storm Codec\Codecs\VSFilter.dll] <Gabest><1, 0, 1, 3> [PID: 144][C:\WINDOWS\system32\inetsrv\DavCData.exe] <Microsoft Corporation><6.0.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 4032][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [d:\Tencent\QQ\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [D:\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [C:\WINDOWS\system32\microapmddt.dll] <MACROMEDlA><1, 2, 0, 0> [d:\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [d:\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.372.2> [d:\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.372.0> [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:

colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:	发表于： 2006-05-16 22:35 \| 只看楼主短消息资料字号：小中大 5楼 [PID: 3376][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [d:\Tencent\QQ\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [D:\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [C:\WINDOWS\system32\microapmddt.dll] <MACROMEDlA><1, 2, 0, 0> [d:\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [d:\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.372.2> [d:\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.372.0> [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 3888][D:\tvants\Tvants.exe] <Zhejiang University><1.0.0.58> [d:\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [d:\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.372.2> [d:\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.372.0> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [C:\WINDOWS\system32\ffdshow.ax] <N/A><1.0.2.1997> [d:\Storm Codec\Codecs\VSFilter.dll] <Gabest><1, 0, 1, 3> [PID: 2148][C:\Documents and Settings\robber\桌面\sreng2\SREng.exe] <Smallfrogs Studio><2.0.12.350> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-05-16 22:43 \| 短消息资料字号：小中大 6楼请到www.27814939.ys168.com下载诺顿进程管理器终止所有RUNDLL32.EXE 的进程关闭所有浏览窗口以及一些不必要的程序运行System Repair Engineer，使用“启动项目，注册表”来删除以下选项。（如果在注册表里无法识别那一下，可以选中一项后，点“编辑”这样会有很明细的路径） HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <DTService><rundll32.exe C:\WINDOWS\system32\DTSERV~1.DLL,Load [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <PigUpdate><; C:\WINDOWS\system32\system\DownLoadPig.exe> 运行System Repair Engineer，使用“系统修复，浏览器加载项”来删除以下选项。 MacroMediapd] {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} <C:\WINDOWS\system32\microapmddt.dll, MACROMEDlA> 双击我的电脑--工具---文件夹选项--查看--单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示您确定更改时，单击“是” 删除 C:\WINDOWS\system32\microapmddt.dll C:\WINDOWS\system32\system\DownLoadPig.exe C:\WINDOWS\system32\DTSERV~1.DLL
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:	发表于： 2006-05-18 19:37 \| 只看楼主短消息资料字号：小中大 7楼楼上大哥，按你说的都清除了，可是还有网页弹出。请再帮忙看看我的log 启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <BitComet><"D:\BitComet\BitComet.exe"> [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <SKYNET Personal FireWall><D:\SKYNET\FIREWALL\pfw.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <KAVPersonal50><d:\Kaspersky Anti-Virus Personal\kav.exe" /minimize> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <MSConfig><C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <Userinit><C:\WINDOWS\system32\userinit.exe,> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <NeroFilterCheck><; ; ; C:\WINDOWS\system32\NeroCheck.exe> [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <StormCodec_Helper><; ; ; d:\Storm Codec\StormSet.exe> ================================== 启动文件夹服务 [InterBase Guardian / InterBaseGuardian] <d:\InterBase\bin\ibguard.exe><Borland Software Corporation> [InterBase Server / InterBaseServer] <d:\InterBase\bin\ibserver.exe><Borland Software Corporation> [kavsvc / kavsvc] <"d:\Kaspersky Anti-Virus Personal\kavsvc.exe"><Kaspersky Lab>
colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:

colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:	发表于： 2006-05-18 19:39 \| 只看楼主短消息资料字号：小中大 8楼 ================================== 浏览器加载项 [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [MICROQIL2] {832C0563-0820-4fef-83D8-418261DBC233} <C:\WINDOWS\system32\RAdminl.dll, RAdminl> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\FLASHGET\jccatch.dll, Amaze Soft> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <d:\Tencent\QQ\QQ.EXE, TENCENT> [FlashGet] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <D:\FLASHGET\flashget.exe, Amaze Soft> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\FLASHGET\fgiebar.dll, Amaze Soft> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.> [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corp.> [PowerList Control] {20C2C286-BDE8-441B-B73D-AFA22D914DA5} <d:\PPStream\POWERL~1.OCX, PPStream.com> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [PowerPlayer Control] {5EC7C511-CD0F-42E6-830C-1BD9882F3458} <d:\PPStream\POWERP~1.DLL, PPStream Inc.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [MICROQIL2] {832C0563-0820-4FEF-83D8-418261DBC233} <C:\WINDOWS\system32\RAdminl.dll, RAdminl> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\FLASHGET\jccatch.dll, Amaze Soft> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\FLASHGET\fgiebar.dll, Amaze Soft> [pCastPanel Class] {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} <C:\Program Files\pcast\PodcastbarMini\pcastctl.dll, N/A> [使用网际快车下载] <D:\FlashGet\jc_link.htm, N/A> [使用网际快车下载全部链接] <D:\FlashGet\jc_all.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <d:\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <d:\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <d:\Tencent\QQ\SendMMS.htm, N/A>
colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:

colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:	发表于： 2006-05-18 19:40 \| 只看楼主短消息资料字号：小中大 9楼 ================================== 正在运行的进程 [PID: 640][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 704][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 736][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 780][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 792][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 940][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 988][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1092][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1132][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1200][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1444][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1600][C:\WINDOWS\system32\inetsrv\inetinfo.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1652][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] <Microsoft Corporation><7.10.3077> [PID: 1972][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [D:\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0> [D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [D:\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [PID: 2028][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)> [PID: 528][D:\SKYNET\FIREWALL\pfw.exe] <广州众达天网技术有限公司><2.7.7.1000> [D:\SKYNET\FIREWALL\SKYMISC.DLL] <N/A><N/A> [D:\SKYNET\FIREWALL\COMPRESSWRAP.DLL] <N/A><N/A> [PID: 572][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 580][D:\BitComet\BitComet.exe] <www.BitComet.com><0.63.> [PID: 340][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 972][C:\WINDOWS\system32\wscntfy.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3228][C:\WINDOWS\system32\taskmgr.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3368][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [d:\Tencent\QQ\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [C:\WINDOWS\system32\RAdminl.dll] <RAdminl><1, 0, 0, 0> [D:\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [d:\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [d:\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.372.2> [d:\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.372.0> [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 1348][C:\Documents and Settings\robber\桌面\sreng2\SREng.exe] <Smallfrogs Studio><2.0.12.350> [PID: 1776][C:\WINDOWS\system32\dllhost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1068][C:\Documents and Settings\robber\桌面\诺顿进程管理器\Norton Process Viewer\taskmgr.exe] <" "><5.2.11.1> [PID: 3892][C:\WINDOWS\system32\inetsrv\DavCData.exe] <Microsoft Corporation><6.0.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2904][C:\Program Files\Internet Explorer\IEXPLORE.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [d:\Tencent\QQ\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [C:\WINDOWS\system32\RAdminl.dll] <RAdminl><1, 0, 0, 0> [D:\FLASHGET\jccatch.dll] <Amaze Soft><1, 1, 4, 0> [d:\Kaspersky Anti-Virus Personal\scrchpg.dll] <Kaspersky Lab><5.0.1.18> [d:\Kaspersky Anti-Virus Personal\scrch_ag.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\FSSync.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\pr_rmt.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\ccclient.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\klipc.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\KLUtil.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\rpt.dll] <Kaspersky Lab><5.0.372.2> [d:\Kaspersky Anti-Virus Personal\CCIFACE.dll] <Kaspersky Lab><5.0.372.1> [d:\Kaspersky Anti-Virus Personal\prloader.dll] <Kaspersky Lab><5.0.372.0> [d:\Kaspersky Anti-Virus Personal\prkernel.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\prstring.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_srv.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\pr_clnt.ppl] <Kaspersky Lab><5.0.372.0> [d:\kaspersky anti-virus personal\tempfile.ppl] <Kaspersky Lab><5.0.372.0> [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
colourwolf 初生襁褓狮帖子:7 注册: 2006-05-16 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-05-18 19:48 \| 短消息资料字号：小中大 10楼关闭所有浏览窗口以及一些不必要的程序运行System Repair Engineer，使用“系统修复，浏览器加载项”来删除以下选项。 MICROQIL2] {832C0563-0820-4fef-83D8-418261DBC233} <C:\WINDOWS\system32\RAdminl.dll, RAdminl> 删除 :\WINDOWS\system32\RAdminl.dll
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT