瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】移动硬盘中毒,大人们救命啊(附上日志)

12   1  /  2  页   跳转页

【求助】移动硬盘中毒,大人们救命啊(附上日志)

收藏
xinmi
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2006-03-13
  • 来自:
发表于： 2007-03-10 23:12 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

【求助】移动硬盘中毒,大人们救命啊(附上日志)

今天去装了游戏,结果前2个盘的资料丢失了,但是查看属性又有那么多G被占用,选择了"显示所有隐藏文件"又能看到那些丢失的资料,但是无法打开,鼠标指到的文件夹显示为"文件夹是空",而且显示出来的隐藏文件名字都变成了乱码

而且,丢失资料的2个盘在我的电脑处显示是"本地磁盘",而不是"新加卷"

最后,移动硬盘的3个盘在打开时,都会再另外弹出一个新的窗口,以前不是这样的

不知道中了什么毒,请高手帮忙啊~~里面的资料都很宝贵的

附上日志

Logfile of HijackThis v1.99.1
Scan saved at 22:57:48, on 2007-3-10
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\windowblinds\WindowBlinds\wbload.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\lsass.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DragDrop.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\Toshiba\Toshiba Applet\tpwrsave.exe
C:\Program Files\Toshiba\Toshiba Applet\ButsMgr.exe
C:\Program Files\rising\Rav\RavTask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\深澜宽带控制器客户端\icclient.exe
C:\Program Files\rising\Rav\Ravmond.exe
C:\Program Files\rising\Rav\RAVMON.EXE
C:\Program Files\rising\Rav\RavStub.exe
D:\Program Files\qq\QQ.exe
D:\Program Files\qq\TIMPlatform.exe
D:\Program Files\Maxthon\Maxthon.exe
D:\Program Files\jack\HijackThis.exe

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [Drag'n Drop CD+DVD] C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DragDrop.exe /StartUp
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPWRSAVE] C:\Program Files\Toshiba\Toshiba Applet\tpwrsave.exe -S
O4 - HKLM\..\Run: [ButsMgr] C:\Program Files\Toshiba\Toshiba Applet\ButsMgr.exe
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Antiy Auto Update] C:\Program Files\Antiy Labs\Alive\AliveCenter0.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: 腾讯QQ.lnk = D:\Program Files\qq\QQ.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\qq\AddToNetDisk.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\qq\SendMMS.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java 控制台 - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\qq\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\qq\QQ.EXE
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\qq\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\qq\QQIEHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{449684A5-980F-48FB-A2C4-FDF7693B4E68}: NameServer = 61.128.128.68,202.202.192.29
O17 - HKLM\System\CS1\Services\Tcpip\..\{449684A5-980F-48FB-A2C4-FDF7693B4E68}: NameServer = 61.128.128.68,202.202.192.29
O17 - HKLM\System\CS2\Services\Tcpip\..\{449684A5-980F-48FB-A2C4-FDF7693B4E68}: NameServer = 61.128.128.68,202.202.192.29
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WB - D:\PROGRA~1\WINDOW~1\WINDOW~1\fastload.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Kerberos Key Distribution Centers (kkdc) - Unknown owner - C:\WINDOWS\lsass.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\rising\Rav\CCenter.exe
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\rising\Rav\Ravmond.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

最后编辑2007-03-11 16:36:29
分享到：
gototop
 
一心一意反病毒
头像
快乐黄口狮
  • 帖子:178
  • 注册: 2007-02-10
  • 来自:
发表于： 2007-03-10 23:32 | 短消息 资料
字号： 小 中 大 2楼

能用SRE扫描份日志上来么？
gototop
 
xinmi
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2006-03-13
  • 来自:
发表于： 2007-03-11 00:03 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

谢谢,不过我是电脑小白
请问要在哪里启动SRE来扫描日志?
gototop
 
UFO不幸外人
头像
特邀体验者
  • 帖子:2592
  • 注册: 2006-11-26
  • 来自:火星
发表于： 2007-03-11 00:16 | 短消息 资料
字号： 小 中 大 4楼

看我的置顶贴子  里面的SRE使用方法，详细教你
gototop
 
xinmi
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2006-03-13
  • 来自:
发表于： 2007-03-11 00:37 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

扫描上来了,麻烦大人看下了,谢谢~~


[CODE]

2007-03-11,00:21:22

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <SunJavaUpdateSched><"C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe">  [Sun Microsystems, Inc.]
    <IgfxTray><C:\WINDOWS\System32\igfxtray.exe>  [(Verified)Intel Corporation]
    <HotKeysCmds><C:\WINDOWS\System32\hkcmd.exe>  [(Verified)Intel Corporation]
    <SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe>  [(Verified)Synaptics, Inc.]
    <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [(Verified)Synaptics, Inc.]
    <ezShieldProtector for Px><C:\WINDOWS\System32\ezSP_Px.exe>  [Easy Systems Japan Ltd.]
    <Drag'n Drop CD+DVD><C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DragDrop.exe /StartUp>  [N/A]
    <NDSTray.exe><NDSTray.exe>  [N/A]
    <THotkey><C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe>  [TOSHIBA]
    <TPWRSAVE><C:\Program Files\Toshiba\Toshiba Applet\tpwrsave.exe -S>  [TOSHIBA]
    <ButsMgr><C:\Program Files\Toshiba\Toshiba Applet\ButsMgr.exe>  [TOSHIBA]
    <IMEKRMIG6.1><C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE>  [(Verified)Microsoft Corporation]
    <MSPY2002><C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC>  [(Verified)N/A]
    <RavTask><"C:\Program Files\rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <Antiy Auto Update><C:\Program Files\Antiy Labs\Alive\AliveCenter0.exe>  [N/A]
    <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><EXPLORER.EXE>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><wbsys.dll>  [Stardock.Net, Inc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WB]
    <WinlogonNotify: WB><D:\PROGRA~1\WINDOW~1\WINDOW~1\fastload.dll>  [Stardock]

==================================
启动文件夹
[Microsoft Office]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> C:\PROGRA~1\MICROS~2\Office10\OSA.EXE [Microsoft Corporation]><N>
[腾讯QQ]
  <C:\Documents and Settings\toshiba\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\PROGRA~1\qq\QQ.exe [TENCENT]><N>

==================================
服务
[Application Management / AppMgmt][Stopped/Manual Start]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
  <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[ConfigFree Service / CFSvcs][Running/Auto Start]
  <C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe><TOSHIBA CORPORATION>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Kerberos Key Distribution Centers / kkdc][Stopped/Auto Start]
  <C:\WINDOWS\lsass.exe -netsvcs><N/A>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd][Stopped/Manual Start]
  <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><CACE Technologies>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"C:\Program Files\rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
  <"C:\Program Files\rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SoundMAX Agent Service / SoundMAX Agent Service (default)][Running/Auto Start]
  <C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>

==================================
驱动程序
[aeaudio / aeaudio][Running/Manual Start]
  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[Intel(R) PRO Adapter Driver / E100B][Running/Manual Start]
  <System32\DRIVERS\e100b325.sys><Intel Corporation>
[EMCR / EMCR][Running/Manual Start]
  <System32\DRIVERS\EMCR7SK.sys><ENE Technology Inc.>
[ExpScaner / ExpScaner][Running/Auto Start]
  <\??\C:\Program Files\rising\Rav\ExpScan.sys><>
[gjt8set / gjt8set][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\gjt8set.sys><Microsoft Corporation>
[HOOKAPI / HOOKAPI][Stopped/Manual Start]
  <\??\C:\PROGRAM FILES\RISING\RAV\HOOKAPI.SYS><瑞星软件有限公司>
[HookCont / HookCont][Running/Auto Start]
  <\??\C:\Program Files\rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
  <\??\C:\Program Files\rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
  <\??\C:\Program Files\rising\Rav\HookSys.sys><Rising>
[ialm / ialm][Running/Manual Start]
  <System32\DRIVERS\ialmnt5.sys><Intel Corporation>
[MEMSCAN / MEMSCAN][Running/Auto Start]
  <\??\C:\Program Files\rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[TOSHIBA Network Device Usermode I/O Protocol / Netdevio][Running/Auto Start]
  <System32\DRIVERS\netdevio.sys><TOSHIBA Corporation.>
[New0 / New0][Running/Auto Start]
  <\??\C:\WINDOWS\System32\new.sys><N/A>
[NetGroup Packet Filter Driver / NPF][Running/Manual Start]
  <system32\drivers\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\D:\Program Files\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\PxHelp20.sys><Sonic Solutions>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
  <\??\C:\Program Files\rising\Rav\RSPPSYS.sys><Rising>
[Secdrv / Secdrv][Stopped/Manual Start]
  <System32\DRIVERS\secdrv.sys><N/A>
[smwdm / smwdm][Running/Manual Start]
  <system32\drivers\smwdm.sys><Analog Devices, Inc.>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1][Stopped/Manual Start]
  <system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[Synaptics TouchPad Driver / SynTP][Running/Manual Start]
  <System32\DRIVERS\SynTP.sys><Synaptics, Inc.>
[TOSHIBA Software Modem / TOSHIBASoftModem][Running/Manual Start]
  <System32\DRIVERS\LTSM.sys><LT>
[Toshiba Mobile PC Service / TVALD][Running/Manual Start]
  <System32\DRIVERS\NBSMI.sys><Toshiba Corporation>
[Intel(R) PRO/Wireless 2100 Adapter 驱动程序 / w70n51][Stopped/Manual Start]
  <System32\DRIVERS\w70n51.sys><Intel? Corporation>
[xgv7 / xgv7][Running/Boot Start]
  <\SystemRoot\system32\drivers\xgv7.sys><N/A>
[Intel(R) Graphics Platform (SoftBIOS) Driver / {6080A529-897E-4629-A488-ABA0C29B635E}][Running/Manual Start]
  <system32\drivers\ialmsbw.sys><Intel Corporation>
[Intel(R) Graphics Chipset (KCH) Driver / {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}][Running/Manual Start]
  <system32\drivers\ialmkchw.sys><Intel Corporation>
gototop
 
xinmi
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2006-03-13
  • 来自:
发表于： 2007-03-11 00:38 | 只看楼主 短消息 资料
字号： 小 中 大 6楼

==================================
浏览器加载项
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[Java Plug-in 1.5.0_10]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\qq\QQ.EXE, TENCENT>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Program Files\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[QuickTime Object]
  {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} <C:\WINDOWS\system32\QTPlugin.ocx, Apple Computer, Inc.>
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINDOWS\system32\CMBEdit.dll, >
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[Java Plug-in 1.5.0_10]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.4.2_03]
  {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_10]
  {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_10]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[MonitorURL Class]
  {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, N/A>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\System32\mshtml.dll, N/A>
[Tabular Data Control]
  {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\System32\tdc.ocx, Microsoft Corporation>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Program Files\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[上传到QQ网络硬盘]
  <D:\Program Files\qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Excel(&x)]
  <res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <D:\Program Files\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\Program Files\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\Program Files\qq\SendMMS.htm, N/A>
gototop
 
xinmi
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2006-03-13
  • 来自:
发表于： 2007-03-11 00:40 | 只看楼主 短消息 资料
字号： 小 中 大 7楼

==================================
正在运行的进程
[PID: 636][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 716][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 740][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\PROGRA~1\WINDOW~1\WINDOW~1\fastload.dll]  [Stardock, 1, 0, 0, 1]
[PID: 784][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 796][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 948][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 1028][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 1116][C:\Program Files\rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 1132][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 1176][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 1252][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 1548][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 1784][D:\Program Files\windowblinds\WindowBlinds\wbload.exe]  [Stardock Systems, Inc, 4.4]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
[PID: 1840][C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe]  [TOSHIBA CORPORATION, 4, 50, 0, 2]
    [C:\Program Files\TOSHIBA\ConfigFree\NDSAPI.dll]  [TOSHIBA CORPORATION, 4, 50, 0, 5]
    [C:\Program Files\TOSHIBA\ConfigFree\IpAdrSet.dll]  [TOSHIBA CORPORATION, 3, 0, 0, 5]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 176][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe]  [Analog Devices, Inc., 3, 2, 5, 0]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
[PID: 272][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [C:\PROGRA~1\FlashGet\jccatch.dll]  [Amaze Soft, 1, 1, 4, 0]
    [C:\WINDOWS\System32\igfxpph.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\hccutils.DLL]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\igfxdev.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll]  [Sun Microsystems, Inc., 5.0.100.3]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 1068][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 628][C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe]  [Sun Microsystems, Inc., 5.0.100.3]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
[PID: 560][C:\WINDOWS\System32\igfxtray.exe]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\hccutils.DLL]  [Intel Corporation, 3.0.0.2350]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\System32\igfxdev.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\igfxres.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\igfxress.dll]  [Intel Corporation, 3.0.0.2350]
[PID: 656][C:\WINDOWS\System32\hkcmd.exe]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\hccutils.DLL]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [C:\WINDOWS\System32\igfxdev.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\igfxhk.dll]  [Intel Corporation, 3.0.0.2350]
    [C:\WINDOWS\System32\igfxres.dll]  [Intel Corporation, 3.0.0.2350]
[PID: 1084][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe]  [Synaptics, Inc., 7.5.5 24Apr03]
gototop
 
xinmi
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2006-03-13
  • 来自:
发表于： 2007-03-11 00:40 | 只看楼主 短消息 资料
字号： 小 中 大 8楼

[C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
[PID: 1152][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]  [Synaptics, Inc., 7.5.5 24Apr03]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\System32\SynCOM.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [C:\WINDOWS\system32\SynTPAPI.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
[PID: 1184][C:\WINDOWS\System32\ezSP_Px.exe]  [Easy Systems Japan Ltd., 1, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
[PID: 1300][C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DragDrop.exe]  [, 3, 0, 0, 0]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DGSSTRM.DLL]  [DigiOn,Inc., 2.01]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\PRIMOSDK.dll]  [Sonic Solutions, 1.06.06b]
    [C:\WINDOWS\system32\PX.dll]  [Sonic Solutions, 1.06.06b]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\ezCDmker.dll]  [Easy Systems Japan, 3, 0, 0, 0]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\ezID3.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\TRANSWIN.dll]  [Easy Systems Japan, 1, 0, 0, 0]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\ezLICEN.dll]  [Easy Systems Japan, 2, 6, 3, 0]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\ezLICEN1.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\Wmp7Chk.dll]  [Easy Systems Japan Ltd., 1, 0, 0, 100]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\RegRcvry.dll]  [Easy Systems Japan Ltd., 1, 0, 0, 0]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DDCDRES.DLL]  [, 3, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [C:\WINDOWS\system32\PXDRV.DLL]  [Sonic Solutions, 1.00.44a]
    [C:\WINDOWS\system32\PXMAS.DLL]  [Sonic Solutions, 1.06.06b]
    [C:\WINDOWS\system32\PXWAVE.DLL]  [Sonic Solutions, 1.06.06b]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\TRANS.DLL]  [Easy Systems Japan, 1, 0, 0, 0]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DGID3LIB.dll]  [DigiOn Inc., 1.00]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DGWAVOT.DLL]  [DigiOn Inc., 2.00]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DGWAVRD.DLL]  [DigiOn Inc., 1.03]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DGWAVWT.DLL]  [DigiOn Inc., 1.10]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DGWMFRD.DLL]  [DigiOn,Inc., 1.04b]
    [C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DGWMFWT.DLL]  [DigiOn,Inc., 1.04b]
[PID: 1984][C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe]  [TOSHIBA CORPORATION, 4, 50, 0, 105]
    [C:\Program Files\TOSHIBA\ConfigFree\CFP2API.dll]  [TOSHIBA CORPORATION, 3, 0, 0, 0]
    [C:\Program Files\TOSHIBA\ConfigFree\OpenProp.dll]  [TOSHIBA CORPORATION, 2, 0, 0, 0]
    [C:\Program Files\TOSHIBA\ConfigFree\IpAdrSet.dll]  [TOSHIBA CORPORATION, 3, 0, 0, 5]
    [C:\Program Files\TOSHIBA\ConfigFree\NDSAPI.dll]  [TOSHIBA CORPORATION, 4, 50, 0, 5]
    [C:\Program Files\TOSHIBA\ConfigFree\NDSParts.dll]  [TOSHIBA CORPORATION, 4, 50, 0, 11]
    [C:\Program Files\TOSHIBA\ConfigFree\NDSNLS.dll]  [TOSHIBA CORPORATION, 4, 0, 2, 1006]
    [C:\Program Files\TOSHIBA\ConfigFree\QCDPJ.dll]  [Toshiba, 3, 0, 0, 53]
    [C:\Program Files\TOSHIBA\ConfigFree\VENAPI.dll]  [TOSHIBA, 2, 0, 0, 29]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
[PID: 1728][C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe]  [TOSHIBA, 1.00.0004]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [C:\WINDOWS\system32\TCMSVR.dll]  [TOSHIBA Corp., 1, 0, 0, 4M]
[PID: 1740][C:\Program Files\Toshiba\Toshiba Applet\tpwrsave.exe]  [TOSHIBA, 1.00.0004]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [C:\WINDOWS\system32\TCMSVR.dll]  [TOSHIBA Corp., 1, 0, 0, 4M]
[PID: 1768][C:\Program Files\Toshiba\Toshiba Applet\ButsMgr.exe]  [TOSHIBA, 1.00.0002]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [C:\WINDOWS\system32\TCMSVR.dll]  [TOSHIBA Corp., 1, 0, 0, 4M]
[PID: 1932][C:\Program Files\rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
[PID: 2064][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.3510]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
gototop
 
xinmi
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2006-03-13
  • 来自:
发表于： 2007-03-11 00:41 | 只看楼主 短消息 资料
字号： 小 中 大 9楼

[C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
[PID: 2228][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
[PID: 1352][D:\Program Files\深澜宽带控制器客户端\icclient.exe]  [DA Info, 2.6.0.11]
    [C:\WINDOWS\system32\WPCAP.DLL]  [CACE Technologies, 3, 1, 0, 27]
    [C:\WINDOWS\system32\packet.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\WINDOWS\system32\WanPacket.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
[PID: 2764][C:\Program Files\rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43]
    [C:\Program Files\rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\rising\Rav\rfwctrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [C:\Program Files\rising\Rav\RsPPsys.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
    [C:\Program Files\rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0]
    [C:\Program Files\rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
    [C:\Program Files\rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\rising\Rav\HookWeb.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1]
    [C:\Program Files\rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [C:\Program Files\rising\Rav\HookCont.dll]  [Rising, 19, 0, 0, 0]
    [C:\Program Files\rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [C:\Program Files\rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 26]
    [C:\Program Files\rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8]
    [C:\Program Files\rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\Program Files\rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 41]
    [C:\Program Files\rising\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25]
    [C:\Program Files\rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [C:\Program Files\rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
    [C:\Program Files\rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [C:\Program Files\rising\Rav\Unpacker.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [C:\Program Files\rising\Rav\ScanPack.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20]
    [C:\Program Files\rising\Rav\RsVM.dll]  [N/A, 19, 0, 0, 15]
    [C:\Program Files\rising\Rav\Uroutine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 23]
    [C:\Program Files\rising\Rav\ExtOLE.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
    [C:\Program Files\rising\Rav\Uscript.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18]
    [C:\Program Files\rising\Rav\ScanNet.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\rising\Rav\ScanElf.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
    [C:\Program Files\rising\Rav\ExtMail.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
[PID: 2872][C:\Program Files\rising\Rav\RAVMON.EXE]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45]
    [C:\Program Files\rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [C:\Program Files\rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\Program Files\rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [C:\Program Files\rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
[PID: 3320][C:\Program Files\rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
    [C:\Program Files\rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 3120][D:\Program Files\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\Program Files\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 14]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [D:\Program Files\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\Program Files\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2005, 9, 1, 1]
    [D:\Program Files\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\Program Files\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\Program Files\qq\QQMainFrame.dll]  [N/A, N/A]
    [D:\Program Files\qq\CQQApplication.dll]  [N/A, N/A]
    [D:\Program Files\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\QQAllInOne.dll]  [N/A, N/A]
    [D:\Program Files\qq\SCCore.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\Program Files\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\Program Files\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\LongConnection.dll]  [tencent, 0, 3, 3, 8]
    [D:\Program Files\qq\QQCustomFace.dll]  [N/A, N/A]
    [D:\Program Files\qq\GroupConnection.dll]  [Tencent, 5, 0, 202, 30]
    [D:\Program Files\qq\QRingMng.dll]  [N/A, N/A]
    [D:\Program Files\qq\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\Program Files\qq\QQAvatar.dll]  [N/A, N/A]
    [D:\Program Files\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\Program Files\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 141]
    [D:\Program Files\qq\QQPlugin.dll]  [N/A, N/A]
    [D:\Program Files\qq\BQQApplication.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
gototop
 
xinmi
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2006-03-13
  • 来自:
发表于： 2007-03-11 00:42 | 只看楼主 短消息 资料
字号： 小 中 大 10楼

[D:\Program Files\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\Program Files\qq\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 5, 50]
    [D:\Program Files\qq\QQSceneMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 124][D:\Program Files\qq\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [D:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 3700][D:\Program Files\Maxthon\Maxthon.exe]  [MY Soft Technology, 1, 5, 0, 95]
    [D:\Program Files\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
    [C:\WINDOWS\system32\wbsys.dll]  [Stardock.Net, Inc, 4, 0, 0, 0]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
    [D:\Program Files\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
[PID: 3444][C:\Program Files\FlashGet\flashget.exe]  [Amaze Soft, 1, 6, 5, 0]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]
[PID: 3576][D:\Downloads\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [D:\Program Files\windowblinds\WindowBlinds\WBlind.dll]  [Stardock.Net, Inc, 4.51]
    [D:\Program Files\windowblinds\WindowBlinds\wbhelp.dll]  [Stardock.Net, Inc, 4.01]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.5.5 24Apr03]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[C:\]
[AutoRun]
open=autorun.pif
shell\1=打开(&O)
shell\1\Command=autorun.pif
shell\2\=浏览(&B)
shell\2\Command=autorun.pif
shellexecute=autorun.pif
[G:\]
[AutoRun]
open=autorun.pif
shell\1=打开(&O)
shell\1\Command=autorun.pif
shell\2\=浏览(&B)
shell\2\Command=autorun.pif
shellexecute=autorun.pif
[I:\]
[AutoRun]
open=autorun.pif
shell\1=打开(&O)
shell\1\Command=autorun.pif
shell\2\=浏览(&B)
shell\2\Command=autorun.pif
shellexecute=autorun.pif
[J:\]
[AutoRun]
open=autorun.pif
shell\1=打开(&O)
shell\1\Command=autorun.pif
shell\2\=浏览(&B)
shell\2\Command=autorun.pif
shellexecute=autorun.pif

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================


[/CODE]
gototop
 
<<上一主题|下一主题>>
12   1  /  2  页   跳转页
页面顶部
Powered by Discuz!NT