谁来看看病毒猖狂的日志 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛谁来看看病毒猖狂的日志

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

谁来看看病毒猖狂的日志

丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	发表于： 2006-06-26 13:50 \| 只看楼主短消息资料字号：小中大 1楼谁来看看病毒猖狂的日志 Logfile of HijackThis v1.99.1 Scan saved at 13:38:23, on 2006-6-26 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe F:\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe F:\Rising\Rav\Ravmond.exe C:\WINDOWS\system32\spoolsv.exe F:\Rising\Rav\RavStub.exe C:\WINDOWS\System32\inetsrv\daemon\services.exe C:\WINDOWS\System32\inetsrv\daemon\ethernet.exe C:\WINDOWS\update\updmangr.exe C:\WINDOWS\system32\winmsi.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\RunDll32.exe C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe C:\Program Files\CNNIC\Cdn\cdnup.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe F:\Rising\Rav\RavTask.exe F:\Rising\Rav\Ravmon.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\System32\conime.exe F:\Program Files\Tencent\QQ\QQ.exe F:\Program Files\Tencent\QQ\TIMPlatform.exe C:\WINDOWS\System32\spoolsvc.exe F:\Program Files\Tencent\TT\TTraveler.exe F:\Rising\Rav\Rav.exe F:\新建文件夹\HijackThis1.99.1\HijackThis.exe R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file) F2 - REG:system.ini: UserInit=userinit.exe, O1 - Hosts: 83.228.30.22 www.halifax-online.co.uk O1 - Hosts: 83.228.30.22 ibank.barclays.co.uk O1 - Hosts: 83.228.30.22 online.lloydstsb.co.uk O1 - Hosts: 83.228.30.22 online-business.lloydstsb.co.uk O1 - Hosts: 83.228.30.22 www.ukpersonal.hsbc.co.uk O1 - Hosts: 83.228.30.22 banesnet.banesto.es O1 - Hosts: 83.228.30.22 extranet.banesto.es O1 - Hosts: 83.228.30.22 ebanking.bccbrescia.it O1 - Hosts: 83.228.30.22 www.bankofscotlandhalifax-online.co.uk O1 - Hosts: 83.228.30.22 oi.cajamadrid.es O1 - Hosts: 83.228.30.22 bancae.caixapenedes.com O1 - Hosts: 83.228.30.22 banking.postbank.de O1 - Hosts: 83.228.30.22 meine.deutsche-bank.de O1 - Hosts: 83.228.30.22 myonlineaccounts2.abbeynational.co.uk O1 - Hosts: 83.228.30.22 ibank.cahoot.com O1 - Hosts: 83.228.30.22 webbank.openplan.co.uk O1 - Hosts: 83.228.30.22 bancopostaonline.poste.it O1 - Hosts: 83.228.30.22 mybank.bybank.it O1 - Hosts: 83.228.30.22 ibank.internationalbanking.barclays.com O1 - Hosts: 83.228.30.22 welcome7.co-operativebank.co.uk O1 - Hosts: 83.228.30.22 welcome11.co-operativebankonline.co.uk O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll O2 - BHO: MFCOptimizeClass Object - {A6CEA0E7-6B4D-4CD9-9932-D85705CBC1A9} - C:\WINDOWS\System32\ddaba.dll O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll O3 - Toolbar: 上网助手 - {1B0E7716-898E-48cc-9690-4E338E8DE1D3} - C:\Program Files\3721\assist\assist.dll O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - F:\Downloads\BitComet\BitCometBar\BitCometBar0.1.dll O3 - Toolbar: UCmore XP - The Search Accelerator - {44BE0690-5429-47f0-85BB-3FFD8020233E} - C:\Program Files\TheSearchAccelerator\UCMTSAIE.dll O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe" O4 - HKLM\..\Run: [CdnCtr] C:\Program Files\CNNIC\Cdn\cdnup.exe O4 - HKLM\..\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [VJSITaSYH] C:\WINDOWS\System32\dhoyftj.exe O4 - HKLM\..\Run: [gimmygames] C:\\gimmygames.exe O4 - HKLM\..\Run: [rngpqxgxvwkl] C:\WINDOWS\System32\miwuaygjf.exe O4 - HKLM\..\Run: [RavTask] "F:\Rising\Rav\RavTask.exe" -system O4 - HKLM\..\Run: [keyboard] C:\\kybrd_1.exe O4 - HKLM\..\Run: [Microsoft (R) Windows Update Manager Tool] C:\WINDOWS\update\updmangr.exe O4 - HKLM\..\RunServices: [VJSITaSYH] C:\WINDOWS\System32\dhoyftj.exe O4 - HKLM\..\RunServices: [rngpqxgxvwkl] C:\WINDOWS\System32\miwuaygjf.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\CTFMON.EXE O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - Startup: 腾讯QQ.lnk = F:\Program Files\Tencent\QQ\QQ.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Program Files\Tencent\QQ\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - F:\Program Files\Tencent\QQ\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Program Files\Tencent\QQ\SendMMS.htm O8 - Extra context menu item: 访问通用网址 - C:\Program Files\CNNIC\Cdn\cnnic.htm O8 - Extra context menu item: 豪杰超级解霸V8实时播放 - C:\Herosoft\HeroV8\MPURLGET.HTM O9 - Extra button: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE O9 - Extra 'Tools' menuitem: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE O9 - Extra button: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll O9 - Extra 'Tools' menuitem: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - f:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - f:\Program Files\Tencent\QQ\QQ.EXE O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\cdnns.dll O11 - Options group: [CDNCLIENT] 中文上网 O15 - Trusted Zone: http://.billingnow.com O15 - Trusted Zone: http://.reliablestats.com O15 - Trusted Zone: http://.winantispyware.com O15 - Trusted Zone: http://.winantivirus.com O15 - Trusted Zone: http://.winantiviruspro.com O15 - Trusted Zone: http://.winfixer.com O15 - Trusted Zone: http://.winnanny.com O15 - Trusted Zone: http://.winsoftware.com O16 - DPF: {0150EB11-5FB4-4D9E-85EA-0F155705227E} (Yahoo! 相册轻松上载工具 Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_7cn.cab O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1123233667436 O16 - DPF: {7FC751A9-492D-41B1-9F8D-D2C8809D8907} (EmoWebInstallerCtl Class) - http://img.365ren.com/tv/cabs/EmoWebInstaller.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{A5005155-1BBE-47E3-8055-F1E6E1D9033A}: NameServer = 202.102.128.68,202.102.134.68 O17 - HKLM\System\CCS\Services\Tcpip\..\{FA91937E-E07A-4976-8D67-A63CFB6BA6B4}: NameServer = 202.102.134.68 202.102.128.68 O17 - HKLM\System\CS1\Services\Tcpip\..\{A5005155-1BBE-47E3-8055-F1E6E1D9033A}: NameServer = 202.102.128.68,202.102.134.68 O17 - HKLM\System\CS2\Services\Tcpip\..\{A5005155-1BBE-47E3-8055-F1E6E1D9033A}: NameServer = 202.102.128.68,202.102.134.68 O20 - AppInit_DLLs: KB2357802.LOG O20 - Winlogon Notify: ddaba - C:\WINDOWS\System32\ddaba.dll O20 - Winlogon Notify: jkhhf - jkhhf.dll (file missing) O23 - Service: DisplayController - Unknown owner - C:\WINDOWS\System32\inetsrv\daemon\services.exe O23 - Service: EthernetController - Unknown owner - C:\WINDOWS\System32\inetsrv\daemon\services.exe O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\CCenter.exe O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\Ravmond.exe O23 - Service: Windows Update Manager Tool (UpdateManagerTool) - Unknown owner - C:\WINDOWS\update\updmangr.exe O23 - Service: Windows MSI Services - Unknown owner - C:\WINDOWS\system32\winmsi.exe 2006-06-27 11:22:18
丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	分享到：

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-06-26 14:30 \| 短消息资料字号：小中大 2楼以下好几项无法查到资料，如果你知道，就不必修复。开始→运行→输入services.msc，打开“服务”→查找 Windows Update Manager Tool，Windows MSI Services，DisplayController→双击→启动类型→禁止→停止→应用→确定。禁止Windows Update Manager Tool，Windows MSI Services，DisplayController这3个服务（每一个逗号隔开的就是一个病毒的服务，请逐一禁用）重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows 运行Hijackthis，扫描结束后在下列选项前打上勾，然后选"修复 R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file) O1 - Hosts: 83.228.30.22 www.halifax-online.co.uk O1 - Hosts: 83.228.30.22 ibank.barclays.co.uk O1 - Hosts: 83.228.30.22 online.lloydstsb.co.uk O1 - Hosts: 83.228.30.22 online-business.lloydstsb.co.uk O1 - Hosts: 83.228.30.22 www.ukpersonal.hsbc.co.uk O1 - Hosts: 83.228.30.22 banesnet.banesto.es O1 - Hosts: 83.228.30.22 extranet.banesto.es O1 - Hosts: 83.228.30.22 ebanking.bccbrescia.it O1 - Hosts: 83.228.30.22 www.bankofscotlandhalifax-online.co.uk O1 - Hosts: 83.228.30.22 oi.cajamadrid.es O1 - Hosts: 83.228.30.22 bancae.caixapenedes.com O1 - Hosts: 83.228.30.22 banking.postbank.de O1 - Hosts: 83.228.30.22 meine.deutsche-bank.de O1 - Hosts: 83.228.30.22 myonlineaccounts2.abbeynational.co.uk O1 - Hosts: 83.228.30.22 ibank.cahoot.com O1 - Hosts: 83.228.30.22 webbank.openplan.co.uk O1 - Hosts: 83.228.30.22 bancopostaonline.poste.it O1 - Hosts: 83.228.30.22 mybank.bybank.it O1 - Hosts: 83.228.30.22 ibank.internationalbanking.barclays.com O1 - Hosts: 83.228.30.22 welcome7.co-operativebank.co.uk O1 - Hosts: 83.228.30.22 welcome11.co-operativebankonline.co.uk O2 - BHO: MFCOptimizeClass Object - {A6CEA0E7-6B4D-4CD9-9932-D85705CBC1A9} - C:\WINDOWS\System32\ddaba.dll O4 - HKLM\..\Run: [gimmygames] C:\\gimmygames.exe O4 - HKLM\..\Run: [VJSITaSYH] C:\WINDOWS\System32\dhoyftj.exe O4 - HKLM\..\Run: [rngpqxgxvwkl] C:\WINDOWS\System32\miwuaygjf.exe O4 - HKLM\..\Run: [Microsoft (R) Windows Update Manager Tool] C:\WINDOWS\update\updmangr.exe O4 - HKLM\..\RunServices: [VJSITaSYH] C:\WINDOWS\System32\dhoyftj.exe O4 - HKLM\..\RunServices: [rngpqxgxvwkl] C:\WINDOWS\System32\miwuaygjf.exe O15 - Trusted Zone: http://.billingnow.com O15 - Trusted Zone: http://.reliablestats.com O15 - Trusted Zone: http://.winantispyware.com O15 - Trusted Zone: http://.winantivirus.com O15 - Trusted Zone: http://.winantiviruspro.com O15 - Trusted Zone: http://.winfixer.com O15 - Trusted Zone: http://.winnanny.com O15 - Trusted Zone: http://.winsoftware.com O20 - AppInit_DLLs: KB2357802.LOG O20 - Winlogon Notify: ddaba - C:\WINDOWS\System32\ddaba.dll O20 - Winlogon Notify: jkhhf - jkhhf.dll (file missing) 双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示确定更改时，单击“是”，清除“隐藏已知文件类型的扩展名删除 C:\WINDOWS\System32\inetsrv\daemon C:\WINDOWS\system32\winmsi.exe C:\WINDOWS\update\updmangr.exe C:\WINDOWS\System32\ddaba.dll KB2357802.LOG搜一下 C:\WINDOWS\System32\miwuaygjf.exe C:\WINDOWS\System32\dhoyftj.exe C:\\gimmygames.exe 修复回到正常模式请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来下载网址 http://www.kztechs.com/sreng/sreng2.zip http://forum.ikaka.com/topic.asp?board=67&artid=5188931 日志一次粘不完，分次粘完，请不要修改。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	发表于： 2006-06-26 15:21 \| 只看楼主短消息资料字号：小中大 3楼【回复“我无邪”的帖子】扫描结果 2006-06-26,15:05:52 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\CTFMON.EXE> [] <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd> [] <CnxDslTaskBar><"C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"> [Conexant Systems Inc.] <CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe> [] <helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [] <rngpqxgxvwkl><C:\WINDOWS\System32\miwuaygjf.exe> [] <RavTask><"F:\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <IESAddr><> [] <keyboard><C:\\kybrd_1.exe> [.] <Microsoft (R) Windows Update Manager Tool><C:\WINDOWS\update\updmangr.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices] <rngpqxgxvwkl><C:\WINDOWS\System32\miwuaygjf.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [Microsoft Corporation] <Userinit><userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] <WinlogonNotify: AtiExtEvent><Ati2evxx.dll> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddaba] <WinlogonNotify: ddaba><C:\WINDOWS\System32\ddaba.dll> []
丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:

丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	发表于： 2006-06-26 15:22 \| 只看楼主短消息资料字号：小中大 4楼【回复“丝质流年”的帖子】 ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N> [腾讯QQ] <C:\Documents and Settings\www\「开始」菜单\程序\启动\腾讯QQ.lnk><N> ================================== 服务 [DisplayController / DisplayController] <C:\WINDOWS\System32\inetsrv\daemon\services.exe /name:"DisplayController" /start:"display.exe windows.conf"><N/A> [EthernetController / EthernetController] <C:\WINDOWS\System32\inetsrv\daemon\services.exe /name:"EthernetController" /start:"ethernet.exe"><N/A> [IMAPI CD-Burning COM Service / ImapiService] <C:\WINDOWS\System32\imapi.exe><Microsoft Corporation> [Rising Process Communication Center / RsCCenter] <"F:\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"F:\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Windows Update Manager Tool / UpdateManagerTool] <C:\WINDOWS\update\updmangr.exe /updatemgr><N/A> [Windows MSI Services / Windows MSI Services] <"C:\WINDOWS\system32\winmsi.exe"><N/A> ================================== 浏览器加载项 [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [MFCOptimizeClass Object] {A6CEA0E7-6B4D-4CD9-9932-D85705CBC1A9} <C:\WINDOWS\System32\ddaba.dll, N/A> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, herosoft> [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <f:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [FlashGet] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft> [上网助手] {1B0E7716-898E-48cc-9690-4E338E8DE1D3} <C:\Program Files\3721\assist\assist.dll, > [BitCometBar] {3F1ABCDB-A875-46c1-8345-B72A4567E486} <F:\Downloads\BitComet\BitCometBar\BitCometBar0.1.dll, N/A> [UCmore XP - The Search Accelerator] {44BE0690-5429-47f0-85BB-3FFD8020233E} <C:\Program Files\TheSearchAccelerator\UCMTSAIE.dll, Effective-i Inc.> [Yahoo! 相册轻松上载工具 Class] {0150EB11-5FB4-4D9E-85EA-0F155705227E} <C:\WINDOWS\Downloaded Program Files\YDropperCN.dll, Yahoo! Inc.> [Edit Class] {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINDOWS\System32\CMBEdit.dll, > [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\System32\wuweb.dll, Microsoft Corporation> [EmoWebInstallerCtl Class] {7FC751A9-492D-41B1-9F8D-D2C8809D8907} <C:\WINDOWS\Downloaded Program Files\EmoWebInstaller.dll, MotinOne Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [使用网际快车下载] <C:\Program Files\FlashGet\jc_link.htm, N/A> [使用网际快车下载全部链接] <C:\Program Files\FlashGet\jc_all.htm, N/A> [添加到QQ自定义面板] <F:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <F:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <F:\Program Files\Tencent\QQ\SendMMS.htm, N/A> [访问通用网址] <C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A> [豪杰超级解霸V8实时播放] <C:\Herosoft\HeroV8\MPURLGET.HTM, N/A>
丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:

丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	发表于： 2006-06-26 15:23 \| 只看楼主短消息资料字号：小中大 5楼【回复“丝质流年”的帖子】 ================================= 正在运行的进程 [PID: 372][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 420][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 456][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\system32\Ati2evxx.dll] <N/A><N/A> [C:\WINDOWS\System32\ddaba.dll] <N/A><N/A> [PID: 500][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 512][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 664][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 720][F:\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 736][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 896][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 920][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 952][F:\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26> [F:\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [F:\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [F:\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [F:\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [F:\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [F:\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9> [F:\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [F:\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [F:\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1> [F:\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [F:\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [F:\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [F:\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [F:\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [F:\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [F:\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [F:\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [F:\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [F:\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [F:\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [F:\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [F:\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15> [F:\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [F:\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 1112][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 1212][C:\WINDOWS\System32\inetsrv\daemon\services.exe] <N/A><N/A> [PID: 1244][C:\WINDOWS\System32\inetsrv\daemon\ethernet.exe] <N/A><N/A> [C:\WINDOWS\System32\inetsrv\daemon\BugSlayerUtil.dll] <MSJ - Bugslayer Column by John Robbins><2.1.000> [C:\WINDOWS\System32\inetsrv\daemon\libeay32.DLL] <N/A><N/A> [C:\WINDOWS\System32\inetsrv\daemon\ssleay32.DLL] <N/A><N/A> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 1308][F:\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [F:\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [F:\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 684][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)> [C:\WINDOWS\System32\ddaba.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [PID: 1684][C:\WINDOWS\System32\RunDll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\system\cmicnfg.cpl] <C-Media Corporation><1, 0, 41, 6> [C:\WINDOWS\System32\udaprop.dll] <C-Media Corporation><1.0.2.2>
丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:

丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	发表于： 2006-06-26 15:24 \| 只看楼主短消息资料字号：小中大 6楼【回复“丝质流年”的帖子】 Files\Conexant\AccessRunner ADSL\CnxDslTb.exe] <Conexant Systems Inc.><2.099.085.000> [C:\Program Files\Conexant\AccessRunner ADSL\CnxDslWz.dll] <Conexant Systems Inc.><2.099.085.000> [C:\WINDOWS\System32\CnxHwIo.dll] <Conexant Systems Inc.><2.099.085.000> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [PID: 1704][C:\Program Files\CNNIC\Cdn\cdnup.exe] <><2, 4, 0, 3> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\cdntdns.dll] <CNNIC><2, 2, 0, 3> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 1712][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\autolive.dll] <><1, 1, 4, 1026> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\PROGRA~1\3721\notifier.dll] <><1, 0, 0, 5> [PID: 1732][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3208> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [PID: 1744][F:\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [F:\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [F:\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [F:\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 1764][F:\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28> [F:\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [F:\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [F:\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [F:\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [F:\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [F:\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 1816][C:\Program Files\Messenger\msmsgs.exe] <Microsoft Corporation><4.0.0155> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 1052][C:\WINDOWS\System32\conime.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 404][C:\Program Files\Microsoft Office\Office\WINWORD.EXE] <Microsoft Corporation><9.0.2823> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [F:\Rising\Rav\RsPlugIn.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 1> [F:\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [F:\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 812][F:\Program Files\Tencent\TT\TTraveler.exe] <深圳市腾讯计算机系统有限公司><2, 0, 15, 200> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\PROGRA~1\3721\autolive.dll] <><1, 1, 4, 1026> [F:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [F:\Program Files\Tencent\TT\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4> [F:\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0> [PID: 2080][C:\WINDOWS\System32\winamp.exe] <N/A><N/A> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 2720][C:\WINDOWS\update\updmangr.exe] <N/A><N/A> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 3708][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Program Files\WinRAR\Formats\tar.fmt] <N/A><N/A> [C:\Program Files\WinRAR\Formats\arj.fmt] <N/A><N/A> [C:\Program Files\WinRAR\Formats\z.fmt] <N/A><N/A> [C:\Program Files\WinRAR\Formats\gz.fmt] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [PID: 1544][F:\新建文件夹\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:

我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林	发表于： 2006-06-26 20:01 \| 短消息资料字号：小中大 7楼运行(双击)System Repair Engineer，点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务DisplayController，EthernetController，Windows Update Manager Tool，Windows MSI Services 选择“删除服务”点“设置”选择“否”最后重启。（每一个逗号隔开的就是一个病毒的服务，请逐一删除）重新启动电脑, 开机检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式进入Windows 关闭所有浏览窗口以及一些不必要的程序运行(双击)System Repair Engineer，使用“系统修复，浏览器加载项”来删除以下选项。 C:\WINDOWS\System32\ddaba.dll C:\WINDOWS\System32\CMBEdit.dll 运行(双击)System Repair Engineer，使用“启动项目，注册表”来删除以下选项。 C:\WINDOWS\System32\miwuaygjf.exe C:\\kybrd_1.exe C:\WINDOWS\System32\miwuaygjf.exe C:\WINDOWS\System32\ddaba.dll 双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示确定更改时，单击“是”，清除“隐藏已知文件类型的扩展名删除 C:\WINDOWS\System32\ddaba.dll C:\WINDOWS\System32\CMBEdit.dll C:\WINDOWS\system32\winmsi.exe C:\WINDOWS\update\updmangr.exe C:\WINDOWS\System32\inetsrv\daemon C:\\kybrd_1.exe C:\WINDOWS\System32\miwuaygjf.exe C:\WINDOWS\System32\ddaba.dll 请按以上步骤，不要略过。修复后回到正常模式，烦再扫份日志粘上来。
我无邪高贵耄耋狮帖子:20720 注册: 2004-06-10 来自:广西玉林

丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	发表于： 2006-06-27 11:25 \| 只看楼主短消息资料字号：小中大 8楼【回复“我无邪”的帖子】 2006-06-27,11:14:09 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\CTFMON.EXE> [] <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd> [] <CnxDslTaskBar><"C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"> [Conexant Systems Inc.] <CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe> [] <helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [] <RavTask><"F:\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <IESAddr><> [] <Microsoft (R) Windows Update Manager Tool><C:\WINDOWS\update\updmangr.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [] <Userinit><userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] <WinlogonNotify: AtiExtEvent><Ati2evxx.dll> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddaba] <WinlogonNotify: ddaba><C:\WINDOWS\System32\ddaba.dll> []
丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:

丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	发表于： 2006-06-27 11:25 \| 只看楼主短消息资料字号：小中大 9楼【回复“丝质流年”的帖子】 ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N> [腾讯QQ] <C:\Documents and Settings\www\「开始」菜单\程序\启动\腾讯QQ.lnk><N> ================================== 服务 [IMAPI CD-Burning COM Service / ImapiService] <C:\WINDOWS\System32\imapi.exe><Microsoft Corporation> [Rising Process Communication Center / RsCCenter] <"F:\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"F:\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Windows Update Manager Tool / UpdateManagerTool] <C:\WINDOWS\update\updmangr.exe /updatemgr><N/A> ================================== 浏览器加载项 [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [MFCOptimizeClass Object] {A6CEA0E7-6B4D-4CD9-9932-D85705CBC1A9} <C:\WINDOWS\System32\ddaba.dll, N/A> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, herosoft> [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <f:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [FlashGet] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft> [上网助手] {1B0E7716-898E-48cc-9690-4E338E8DE1D3} <C:\Program Files\3721\assist\assist.dll, > [BitCometBar] {3F1ABCDB-A875-46c1-8345-B72A4567E486} <F:\Downloads\BitComet\BitCometBar\BitCometBar0.1.dll, N/A> [UCmore XP - The Search Accelerator] {44BE0690-5429-47f0-85BB-3FFD8020233E} <C:\Program Files\TheSearchAccelerator\UCMTSAIE.dll, Effective-i Inc.> [Yahoo! 相册轻松上载工具 Class] {0150EB11-5FB4-4D9E-85EA-0F155705227E} <C:\WINDOWS\Downloaded Program Files\YDropperCN.dll, Yahoo! Inc.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\System32\wuweb.dll, Microsoft Corporation> [EmoWebInstallerCtl Class] {7FC751A9-492D-41B1-9F8D-D2C8809D8907} <C:\WINDOWS\Downloaded Program Files\EmoWebInstaller.dll, MotinOne Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [使用网际快车下载] <C:\Program Files\FlashGet\jc_link.htm, N/A> [使用网际快车下载全部链接] <C:\Program Files\FlashGet\jc_all.htm, N/A> [添加到QQ自定义面板] <F:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <F:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <F:\Program Files\Tencent\QQ\SendMMS.htm, N/A> [访问通用网址] <C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A> [豪杰超级解霸V8实时播放] <C:\Herosoft\HeroV8\MPURLGET.HTM, N/A> ================================== 正在运行的进程 [PID: 372][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 420][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 456][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\system32\Ati2evxx.dll] <N/A><N/A> [C:\WINDOWS\System32\ddaba.dll] <N/A><N/A> [PID: 500][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 512][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 668][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 724][F:\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 740][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 844][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 908][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 932][F:\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26>
丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:

丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:	发表于： 2006-06-27 11:26 \| 只看楼主短消息资料字号：小中大 10楼【回复“丝质流年”的帖子】 [F:\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [F:\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [F:\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [F:\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [F:\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [F:\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9> [F:\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [F:\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [F:\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1> [F:\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [F:\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [F:\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [F:\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [F:\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [F:\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30> [F:\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [F:\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [F:\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [F:\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [F:\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [F:\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [F:\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15> [F:\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [F:\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 1108][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 1256][C:\WINDOWS\update\updmangr.exe] <N/A><N/A> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> [PID: 1308][F:\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [F:\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [F:\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1636][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)> [C:\WINDOWS\System32\ddaba.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\PROGRA~1\3721\autolive.dll] <><1, 1, 4, 1026> [PID: 1952][C:\WINDOWS\System32\RunDll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\system\cmicnfg.cpl] <C-Media Corporation><1, 0, 41, 6> [C:\WINDOWS\System32\udaprop.dll] <C-Media Corporation><1.0.2.2> [PID: 1960][C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe] <Conexant Systems Inc.><2.099.085.000> [C:\Program Files\Conexant\AccessRunner ADSL\CnxDslWz.dll] <Conexant Systems Inc.><2.099.085.000> [C:\WINDOWS\System32\CnxHwIo.dll] <Conexant Systems Inc.><2.099.085.000> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [PID: 1968][C:\Program Files\CNNIC\Cdn\cdnup.exe] <><2, 4, 0, 3> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\cdntdns.dll] <CNNIC><2, 2, 0, 3> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 1976][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\PROGRA~1\3721\autolive.dll] <><1, 1, 4, 1026> [PID: 1984][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3208> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 2016][F:\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [F:\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [F:\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [F:\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 2040][F:\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28> [F:\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [F:\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [F:\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [F:\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [F:\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [F:\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [F:\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [PID: 180][C:\Program Files\Messenger\msmsgs.exe] <Microsoft Corporation><4.0.0155> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 504][F:\新建文件夹\)System Repair Engineer\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\Program Files\CNNIC\Cdn\cdnspie.dll] <><2, 1, 0, 4> [C:\Program Files\CNNIC\Cdn\imaoe.dll] <CNNIC><2, 2, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 2> [C:\Program Files\CNNIC\Cdn\cdndet.dll] <CNNIC><2, 4, 0, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\System32\cdnns.dll] <N/A><N/A> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
丝质流年初生襁褓狮帖子:34 注册: 2005-07-19 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT