请高手帮忙，毒杀不掉 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请高手帮忙，毒杀不掉

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

请高手帮忙，毒杀不掉

zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	发表于： 2006-09-29 08:32 \| 只看楼主短消息资料字号：小中大 1楼请高手帮忙，毒杀不掉 2006-09-29,08:14:12 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] <daemon><C:\WINDOWS\daemon.exe> [] <MyShares><c:\program Files\忆多多\MyShares.exe /tray> [] <Syss><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setup.exe> [] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <IgfxTray><C:\WINDOWS\system32\igfxtray.exe> [Intel Corporation] <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe> [Intel Corporation] <SoundMAXPnP><C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe> [Analog Devices, Inc.] <SoundMAX><"C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray> [Analog Devices, Inc.] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <SysExplr><C:\Herosoft\HeroV8\SysExplr.EXE> [] <RavTray><"C:\Program Files\Rising\Rav\RavTray.exe"> [Rising] <OrderReminder><C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe> [Hewlett-Packard] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <rundll><C:\Program Files\Common Files\rundll.exe> [] <CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe> [] <RichMedia><C:\WINDOWS\system32\Rundll32.exe "C:\PROGRA~1\pcast\hbcast.dll",WaitWindows> [Shanghai Henbang Technology Co., Ltd] <Desktop><C:\WINDOWS\system32\rundll32.exe "C:\Program Files\DeskAdTop\Run.dll" ,Rundll> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <DTService><rundll32.exe C:\WINDOWS\system32\soundmix.dll,Load> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] ================================== 启动文件夹 [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N> [168854] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\168854.lnk><N> [IE-Bar] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\IE-Bar.lnk><N> ================================== 服务 [RavService / RavService] <"C:\Program Files\Rising\Rav\RavService.exe" /service><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <C:\Program Files\Rising\Rav\CCenter.exe><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Internet Protect Service / SOCEESe] <C:\WINDOWS\SYSTEM32\RUNDLL.EXE C:\WINDOWS\SYSTEM32\WBEM\SMTPCONFS.DLL,Export 1087><N/A> [SoundMAX Agent Service / SoundMAX Agent Service (default)] <C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.> 2006-09-30 10:13:15
zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	分享到：

zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	发表于： 2006-09-29 08:35 \| 只看楼主短消息资料字号：小中大 2楼 ================================== 浏览器加载项 [MyIEHelper Class] {16B770A0-0E87-4278-B748-2460D64A8386} <C:\Documents and Settings\All Users\Application Data\Microsoft\UserData\IEHelper_5025.dll, Microsoft Corporation> [raObject Class] {46F194EB-B7DB-4B7A-BD42-5FF39FD17664} <C:\PROGRA~1\pcast\hbcast.dll, Shanghai Henbang Technology Co., Ltd> [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [BHOImp Class] {70AFF2CB-9DA2-499C-8D15-900729FCE83D} <C:\WINDOWS\system32\YHBO.dll, N/A> [] {742976D5-2BD2-4A74-AC19-23B985D0A35A} <C:\WINDOWS\system32\asversys32.dll, N/A> [信息检索] {CE7C3CF0-98A8-474D-B2B5-1ED7E2E3B004} <C:\WINDOWS\system32\IEHelper.dll, N/A> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, herosoft> [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [CEditCtrl Object] {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Flash.ocx, Macromedia, Inc.> [Web Browser Applet Control] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation> [MyIEHelper Class] {16B770A0-0E87-4278-B748-2460D64A8386} <C:\Documents and Settings\All Users\Application Data\Microsoft\UserData\IEHelper_5025.dll, Microsoft Corporation> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [raObject Class] {46F194EB-B7DB-4B7A-BD42-5FF39FD17664} <C:\PROGRA~1\pcast\hbcast.dll, Shanghai Henbang Technology Co., Ltd> [CEditCtrl Object] {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com> [CdnForIE Class] {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [BHOImp Class] {70AFF2CB-9DA2-499C-8D15-900729FCE83D} <C:\WINDOWS\system32\YHBO.dll, N/A> [] {742976D5-2BD2-4A74-AC19-23B985D0A35A} <C:\WINDOWS\system32\asversys32.dll, N/A> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [AUDIO__MID Moniker Class] {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [AUDIO__X_MS_WMA Moniker Class] {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [信息检索] {CE7C3CF0-98A8-474D-B2B5-1ED7E2E3B004} <C:\WINDOWS\system32\IEHelper.dll, N/A> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Flash.ocx, Macromedia, Inc.> [访问通用网址] <C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A> [豪杰超级解霸V8实时播放] <C:\Herosoft\HeroV8\MPURLGET.HTM, N/A> ================================== 正在运行的进程 [PID: 448][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 496][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 520][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 564][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 576][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 720][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 768][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 844][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 908][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 964][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1012][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 1036][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [C:\Program Files\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 16> [C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\ExtFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 1252][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\soundmix.dll] <><1, 4, 0, 0> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [C:\Program Files\DeskAdTop\fshook.dll] <><1, 0, 0, 1> [C:\WINDOWS\system32\asversys32.dll] <N/A><N/A> [C:\WINDOWS\system32\IEHelper.dll] <N/A><1, 0, 0, 1> [PID: 1328][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\hptcpmon.dll] <Hewlett Packard><2.52.01.002> [C:\WINDOWS\system32\hpzjrd01.dll] <Hewlett Packard><1.00.01.006> [C:\WINDOWS\system32\HPZJSN01.dll] <Hewlett Packard Company><1, 0, 0, 3> [C:\WINDOWS\system32\HPTcpMUI.dll] <Microsoft Corporation><2.52.01.002> [C:\WINDOWS\system32\hptcpmib.dll] <Hewlett Packard><2.52.01.002> [C:\WINDOWS\system32\ZLhp1020.DLL] <Zenographics, Inc.><5, 53, 2317, 0> [C:\WINDOWS\system32\ZLM.dll] <Zenographics, Inc.><5, 50, 1416, 0> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\IMFPrint.DLL] <Zenographics, Inc.><5, 54, 330, 0> [C:\WINDOWS\system32\Imf32.dll] <Zenographics, Inc.><5, 60, 1204, 0> [C:\WINDOWS\system32\ZTAG32.dll] <Zenographics, Inc.><5, 60, 1210, 0> [C:\WINDOWS\system32\ZSPOOL.dll] <Zenographics, Inc.><5, 51, 709, 0> [PID: 1464][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1712][C:\Program Files\Rising\Rav\RavService.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 43> [C:\Program Files\Rising\Rav\DLCenter.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 27> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 1812][C:\WINDOWS\SYSTEM32\RUNDLL.EXE] <Microsoft Corporation><5.00.2134.1> [PID: 1916][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe] <Analog Devices, Inc.><3, 2, 6, 0> [PID: 128][C:\WINDOWS\system32\hkcmd.exe] <Intel Corporation><3.0.0.2285> [C:\WINDOWS\system32\hccutils.DLL] <Intel Corporation><3.0.0.2285> [C:\WINDOWS\system32\igfxdev.dll] <Intel Corporation><3.0.0.2285> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [C:\WINDOWS\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.2285> [C:\WINDOWS\system32\igfxhk.dll] <Intel Corporation><3.0.0.2285> [C:\WINDOWS\system32\igfxres.dll] <Intel Corporation><3.0.0.2285> [PID: 204][C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe] <Analog Devices, Inc.><5, 0, 1, 57>
zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:

zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	发表于： 2006-09-29 08:36 \| 只看楼主短消息资料字号：小中大 3楼 [C:\Program Files\Analog Devices\SoundMAX\SMWDMIF.dll] <Analog Devices, Inc.><5, 0, 0, 460> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [PID: 272][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.1622> [PID: 316][C:\Herosoft\HeroV8\SysExplr.EXE] <N/A><N/A> [C:\Herosoft\HeroV8\HttpReq.dll] <N/A><N/A> [C:\Herosoft\HeroV8\CoolMenu.dll] <N/A><N/A> [C:\Herosoft\HeroV8\httphlp.dll] <N/A><N/A> [C:\Herosoft\HeroV8\AVCDROM.dll] <N/A><N/A> [C:\Herosoft\HeroV8\Sys936.DLL] <N/A><N/A> [PID: 340][C:\Program Files\Rising\Rav\RavTray.exe] <Rising><18, 0, 0, 34> [C:\Program Files\Rising\Rav\RavUILib.dll] <><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RavTray936.dll] <Rising><18, 0, 0, 34> [C:\Program Files\Rising\Rav\RsCommx.dll] <rising><18, 0, 0, 1> [PID: 388][C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe] <Hewlett-Packard><2, 0, 1, 26> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [PID: 412][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 440][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30> [C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [C:\Program Files\DeskAdTop\fshook.dll] <><1, 0, 0, 1> [PID: 112][C:\Program Files\Common Files\rundll.exe] <N/A><N/A> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [C:\Program Files\DeskAdTop\fshook.dll] <><1, 0, 0, 1> [PID: 476][C:\Program Files\CNNIC\Cdn\cdnup.exe] <><2, 4, 0, 3> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [C:\Program Files\DeskAdTop\fshook.dll] <><1, 0, 0, 1> [PID: 628][C:\WINDOWS\system32\Rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\PROGRA~1\pcast\hbcast.dll] <Shanghai Henbang Technology Co., Ltd><1, 1, 3, 8> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [PID: 684][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\DeskAdTop\Run.dll] <><1, 0, 0, 1> [C:\Program Files\DeskAdTop\fshook.dll] <><1, 0, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [PID: 892][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\DeskAdTop\fshook.dll] <><1, 0, 0, 1> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [PID: 972][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setup.exe] <N/A><N/A> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [C:\Program Files\DeskAdTop\fshook.dll] <><1, 0, 0, 1> [PID: 2148][C:\WINDOWS\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [PID: 2220][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\DOCUME~1\ADMINI~1\TEMPLA~1\e5e6be0\1.dll] <千橡互联><3, 0, 2, 0> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [C:\DOCUME~1\ADMINI~1\TEMPLA~1\e5e6be0\3.dll] <千橡互联><3, 0, 2, 8> [C:\DOCUME~1\ADMINI~1\TEMPLA~1\e5e6be0\4.dll] <千橡互联><3, 0, 2, 8> [PID: 2432][C:\WINDOWS\system32\wuauclt.exe] <Microsoft Corporation><5.4.3790.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2560][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 3276][D:\办公文档\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\Program Files\CNNIC\Cdn\cdnforie.dll] <CNNIC><2, 0, 0, 0> [C:\Program Files\DeskAdTop\fshook.dll] <><1, 0, 0, 1> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者
zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:

zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	发表于： 2006-09-29 09:09 \| 只看楼主短消息资料字号：小中大 4楼请高手帮忙看看，谢谢！
zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:

zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	发表于： 2006-09-29 10:13 \| 只看楼主短消息资料字号：小中大 5楼请高手帮忙看看，谢谢！
zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:

zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	发表于： 2006-09-29 10:54 \| 只看楼主短消息资料字号：小中大 6楼请高手帮忙看看，谢谢！
zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:

宝马大哥哥初生襁褓狮帖子:9 注册: 2006-09-22 来自:	发表于： 2006-09-29 11:11 \| 短消息资料字号：小中大 7楼兄弟，还是重装吧．以后注意点．世界上没有杀到头的毒．就象世界上永远不可能没有小偷抢劫犯一样．有写人就是凡贱．
宝马大哥哥初生襁褓狮帖子:9 注册: 2006-09-22 来自:

zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	发表于： 2006-09-29 17:51 \| 只看楼主短消息资料字号：小中大 8楼请高手帮忙看看，谢谢！
zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:

zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:	发表于： 2006-09-30 08:58 \| 只看楼主短消息资料字号：小中大 9楼打开浏览器有别的网页打开，请高手帮忙看看，谢谢！
zyl1018 拙长孩提狮帖子:104 注册: 2006-08-03 来自:

newcenturymoon 社区嘉宾帖子:15158 注册: 2005-08-03 来自:	发表于： 2006-09-30 09:00 \| 短消息资料字号：小中大 10楼请到http://forum.ikaka.com/topic.asp?board=28&artid=8105899 下载HijackThis 下载后运行HijackThis.rar,再运行HijackThis.exe 单机＂扫描日志并保存日志＂把保存的日志复制粘贴上来．
newcenturymoon 社区嘉宾帖子:15158 注册: 2005-08-03 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT