急!!! 请教各位大虾中了这些病毒木马怎么杀掉 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛急!!! 请教各位大虾中了这些病毒木马怎么杀掉

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

急!!! 请教各位大虾中了这些病毒木马怎么杀掉

kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	发表于： 2007-03-23 17:20 \| 只看楼主短消息资料字号：小中大 1楼急!!! 请教各位大虾中了这些病毒木马怎么杀掉以下为不同的2种木马: 1: 病毒分类 WINDOWS下的PE病毒病毒名称 Trojan.Clicker.Agent.bbb 　别名　病毒长度依赖系统传播途径　行为类型 WINDOWS下的木马程序感染　病毒发作瑞星版本号 19.12.31 2: 病毒分类 WINDOWS下的PE病毒病毒名称 Trojan dl. agent.gul. 别名　病毒长度依赖系统传播途径　行为类型 WINDOWS下的木马程序感染　病毒发作瑞星版本号 19.12.31 请问怎么样复制日志?? 附件: 文件名:8571792007323171122.bmp 下载次数:314 文件类型:application/octet-stream 文件大小: 上传时间:2007-3-23 17:20:59 描述: 2007-03-24 15:05:46
kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	分享到：

bravoliuliu 初生襁褓狮帖子:282 注册: 2007-02-04 来自:	发表于： 2007-03-23 17:42 \| 短消息资料字号：小中大 2楼是扫日志吧？
bravoliuliu 初生襁褓狮帖子:282 注册: 2007-02-04 来自:

kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	发表于： 2007-03-24 14:13 \| 只看楼主短消息资料字号：小中大 3楼请问怎么样扫日志啊?
kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:

枫笑九洲强壮不惑狮帖子:881 注册: 2007-03-19 来自:	发表于： 2007-03-24 14:19 \| 短消息资料字号：小中大 4楼关闭所有应用软件，包括QQ 下载 System Repair Engineer， http://www.kztechs.com/sreng/download.html 1 解压缩sreng2.zip 2 运行SREng.exe 3 智能扫描=》扫描=》保存报告 4 把日志中的报告完整拷贝贴上来，不要修改
枫笑九洲强壮不惑狮帖子:881 注册: 2007-03-19 来自:

kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	发表于： 2007-03-24 14:56 \| 只看楼主短消息资料字号：小中大 5楼启动文件夹 [ads] <C:\Documents and Settings\admin\「开始」菜单\程序\启动\ads.lnk --> [N/A]><N> [QQ游戏启动加速程序] <C:\Documents and Settings\admin\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> D:\PROGRA~1\Tencent\QQGame\Accel.exe [深圳市腾讯计算机系统有限公司]><N> [珊瑚虫] <C:\Documents and Settings\admin\「开始」菜单\程序\启动\珊瑚虫.lnk --> E:\E盘PRO~1\Tencent\QQ\CoralQQ.exe [珊瑚虫工作室]><N> ================================== 服务 [Remote Registry Protect / Framework][Stopped/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\okpvt.dll><N/A> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Movie of any portable media player / Movie of any portable media player][Stopped/Auto Start] <C:\WINDOWS\system32\moviemk.exe><N/A> [Local Connection Manager / NHLscA][Running/Auto Start] <C:\WINDOWS\SYSTEM32\RUNDLL2000.EXE C:\WINDOWS\SYSTEM32\WBEM\YWYDO.DLL,Export 1087><Microsoft Corporation> [Number of any portable media. / Number of any portable media.][Stopped/Auto Start] <C:\WINDOWS\system32\command.com><N/A> [Rising Proxy Service / RfwProxySrv][Stopped/Manual Start] <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService][Running/Auto Start] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon][Running/Auto Start] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ==================================
kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:

kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	发表于： 2007-03-24 14:57 \| 只看楼主短消息资料字号：小中大 6楼驱动程序 [Asushwio / Asushwio][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\Asushwio.sys><N/A> [Rising TDI Base Driver / BaseTDI][Running/Auto Start] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [cgchghha / cgchghha][Stopped/Boot Start] <\SystemRoot\system32\drivers\cgchghha.sys><N/A> [C-Media WDM Audio Interface / cmuda][Running/Manual Start] <system32\drivers\cmuda.sys><C-Media Inc> [EagleNT / EagleNT][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\EagleNT.sys><N/A> [eapjwx8 / eapjwx82][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\eapjwx82.sys><N/A> [ExpScaner / ExpScaner][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\ExpScan.sys><> [GMSIPCI / GMSIPCI][Stopped/Manual Start] <\??\G:\INSTALL\GMSIPCI.SYS><N/A> [HookCont / HookCont][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising> [HookUrl / HookUrl][Running/Auto Start] <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [igjghejh / igjghejh][Stopped/Boot Start] <\SystemRoot\system32\drivers\igjghejh.sys><N/A> [lcoenhme / lcoenhme][Running/Boot Start] <\SystemRoot\\SystemRoot\System32\drivers\lcoenhme.sys><N/A> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [mProcRs / mProcRs][Running/Auto Start] <\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [msqmx / msqmx][Stopped/Boot Start] <\SystemRoot\system32\drivers\msqmx.sys><N/A> [nbobn / nbobn][Stopped/Manual Start] <\??\C:\WINDOWS\TEMP\nbobnwah><N/A> [npkcrypt / npkcrypt][Running/Auto Start] <\??\D:\Program Files\npkcrypt.sys><INCA Internet Co., Ltd.> [npkycryp / npkycryp][Stopped/Manual Start] <\??\D:\Program Files\npkycryp.sys><N/A> [oyekpp6 / oyekpp65][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\oyekpp65.sys><N/A> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [rgixtf71 / rgixtf71][Stopped/Boot Start] <\SystemRoot\system32\\drivers\\system32\\drivers\\%s.sys.sys><N/A> [RsAntiSpyware / RsAntiSpyware][Running/Boot Start] <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising> [RsFwDrv / RsFwDrv][Running/Auto Start] <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [SiS315 / SiS315][Running/Manual Start] <system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation> [SiS AGP Filter / sisagp][Running/Boot Start] <\SystemRoot\system32\DRIVERS\SISAGPX.sys><Silicon Integrated Systems Corporation> [SiSkp / SiSkp][Running/System Start] <system32\drivers\srvkp.sys><N/A> [SiS PCI Fast Ethernet Adapter Driver / SISNIC][Running/Manual Start] <system32\DRIVERS\sisnic.sys><SiS Corporation> [tozl / tozlt][Running/Boot Start] <\SystemRoot\System32\DRIVERS\tozlt.sys><N/A> [TSP / TSP][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\klif.sys><N/A> [tttfmt91 / tttfmt91][Stopped/Boot Start] <\SystemRoot\system32\\drivers\\system32\\drivers\\%s.sys.sys><N/A> [TYKeeper / TYKeeper][Stopped/] <2 - 系统找不到指定的文件。 ><N/A> [uumczm4 / uumczm41][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\uumczm41.sys><N/A> [xuxlif4 / xuxlif42][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\xuxlif42.sys><N/A> [xvtaaf0 / xvtaaf00][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\xvtaaf00.sys><N/A> [zotheo93 / zotheo93][Stopped/Boot Start] <\SystemRoot\system32\\drivers\\system32\\drivers\\%s.sys.sys><N/A> ==================================
kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:

kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	发表于： 2007-03-24 14:58 \| 只看楼主短消息资料字号：小中大 7楼浏览器加载项 [Thunder Browser Helper] {16B7709F-0E87-4278-B748-2460D64A8386} <f:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, N/A> [MyIEHelper Class] {16B770A0-0E87-4278-B748-2460D64A8386} <C:\Documents and Settings\All Users\Application Data\Microsoft\UserData\IEHelper_5034.dll, N/A> [WinMyFavor Class] {5537AA9F-7FE5-40E1-AEC7-D3B7E01FCA73} <C:\WINDOWS\system32\MyFavor32.dll, N/A> [实用搜索] {6CFD436C-7AAD-4e50-992F-C0C87A94CAD2} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com> [BandIE Class] {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [Windows Live Sign-in Helper] {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation> [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.> [Windows Shell] {B3FEFEA0-19B2-4118-8B06-DBC70437D175} <C:\WINDOWS\system32\riched3232.dll, N/A> [Windows Live Toolbar Helper] {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation> [BrowserCache Class] {E4B413A4-C6CA-475D-8D3B-45F323A6B62B} <C:\Documents and Settings\All Users\Application Data\Microsoft\Office\NAVDATA\Ji6Yy8Xqze_temp3.dll, N/A> [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <f:\Program Files\Thunder Network\Thunder\Thunder.exe, N/A> [浩方对战平台] {0A155D3C-68E2-4215-A47A-E800A446447A} <F:\Program Files\随存版\浩方对战平台\GameClient.exe, N/A> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [金山词霸] {9A687CA6-D585-4947-9ED9-BE96071F5CD9} <D:\Program Files~miao\金山词霸2003\XDictExB.dll, 金山软件股份有限公司> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\QQ.EXE, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [Windows Live Toolbar] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation> [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.> [百度超级搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [实用搜索工具条2.0] {03465FF5-00AE-411a-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com> [CMBSafeHelper Class] {26BCA338-BB94-4E8F-A082-3E5735875B79} <C:\WINDOWS\system32\CMBGUARD.dll, > [CMBSafeAssist Class] {2F40E3C1-F1F9-4BEF-82FA-7AB1158A88EF} <C:\WINDOWS\system32\CMBSafe.dll, > [163Uploader Control] {8686F2A6-DC01-4E8F-BDE3-DCC7DBBAD6AE} <C:\WINDOWS\system32\163UPL~1.OCX, 广州网易互动娱乐有限公司> [photo_uploader Control] {A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} <C:\WINDOWS\DOWNLO~1\PHOTO_~1.OCX, > [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [PBActiveX40 Control] {F2EB8999-766E-4BF6-AAAD-188D398C0D0B} <C:\WINDOWS\system32\PersonalBankMain.ocx, China Merchants Bank> [实用搜索工具条2.0] {03465FF5-00AE-411A-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com> [Thunder Browser Helper] {16B7709F-0E87-4278-B748-2460D64A8386} <f:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, N/A> [MyIEHelper Class] {16B770A0-0E87-4278-B748-2460D64A8386} <C:\Documents and Settings\All Users\Application Data\Microsoft\UserData\IEHelper_5034.dll, N/A> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation> [WinMyFavor Class] {5537AA9F-7FE5-40E1-AEC7-D3B7E01FCA73} <C:\WINDOWS\system32\MyFavor32.dll, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [实用搜索] {6CFD436C-7AAD-4E50-992F-C0C87A94CAD2} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com> [WangWangObj Class] {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} <D:\Program Files\淘宝网\淘宝旺旺\WangWangX4.dll, 阿里软件（中国）有限公司> [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A> [BandIE Class] {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <f:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, N/A> [Windows Live Sign-in Helper] {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation> [相关搜索] {A29F7F71-DCDB-412D-B19A-2002DC966E33} <C:\Program Files\yok\relband.dll, YOK.Com> [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation> [Windows Shell] {B3FEFEA0-19B2-4118-8B06-DBC70437D175} <C:\WINDOWS\system32\riched3232.dll, N/A> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [百度超级搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [Windows Live Toolbar] {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation> [Windows Live Toolbar Helper] {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [BrowserCache Class] {E4B413A4-C6CA-475D-8D3B-45F323A6B62B} <C:\Documents and Settings\All Users\Application Data\Microsoft\Office\NAVDATA\Ji6Yy8Xqze_temp3.dll, N/A> [&Windows Live Search] <res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm, N/A> [&使用迅雷下载] <f:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A> [&使用迅雷下载全部链接] <f:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A> [上传到QQ网络硬盘] <D:\Program Files\AddToNetDisk.htm, N/A> [在新的前台选项卡中打开] <res://C:\Program Files\Windows Live Toolbar\Components\zh-cn\msntabres.dll.mui/230?7c27203d2df448d18e2708f66bcaf9d8, N/A> [在新的后台选项卡中打开] <res://C:\Program Files\Windows Live Toolbar\Components\zh-cn\msntabres.dll.mui/229?7c27203d2df448d18e2708f66bcaf9d8, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <D:\Program Files\AddPanel.htm, N/A> [添加到QQ表情] <D:\Program Files\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Program Files\SendMMS.htm, N/A> ==================================
kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:

kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	发表于： 2007-03-24 15:04 \| 只看楼主短消息资料字号：小中大 8楼正在运行的进程 [PID: 428][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 500][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 524][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 568][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 580][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1168][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [C:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\Program Files\Rising\Rav\psapi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\Program Files\Rising\Rav\HookCont.dll] [Rising, 19, 0, 0, 0] [C:\Program Files\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 26] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 41] [C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 21] [C:\Program Files\Rising\Rav\RsVM.dll] [, 19, 0, 0, 16] [C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 24] [C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [PID: 1232][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\twemg.dll] [N/A, ] [C:\PROGRA~1\WINDOW~2\wmpband.dll] [Microsoft Corporation, 9.00.00.3250] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [C:\PROGRA~1\baidu\bar\baidubar.dll] [Baidu.com, Inc., 2, 0, 2, 134] [C:\Program Files\yok\yok.dll] [YOK.Com, 3, 0, 0, 1003] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [C:\WINDOWS\SYSTEM32\WBEM\YWYDO.DLL] [Microsoft Corporation, 5, 1, 2600, 2709] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 1732][c:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 70] [c:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [c:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [c:\program files\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [c:\program files\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [c:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 2008][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3249] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 360][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6] [C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 368][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:

kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	发表于： 2007-03-24 15:04 \| 只看楼主短消息资料字号：小中大 9楼 [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 388][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 844][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 944][C:\Program Files\Messenger\msmsgs.exe] [Microsoft Corporation, 4.7.3001] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 972][C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe] [Google Inc., 1, 2, 1128, 5462] [C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\res_zh-CN.dll] [Google Inc., 1, 2, 1128, 5462] [C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\swg.dll] [Google Inc., 1, 2, 1128, 5462] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [PID: 2052][C:\Program Files\TTPlayer\TTPlayer.exe] [Alen Soft, 4, 6, 8, 0] [C:\Program Files\TTPlayer\ttpcomm.dll] [N/A, ] [C:\Program Files\TTPlayer\ttpres.dll] [Alen Soft, 4, 6, 8, 0] [C:\Program Files\TTPlayer\msdmo.dll] [Microsoft Corporation, 6.03.01.0400] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\TTPlayer\AddIn\ttp_lrcsh.dll] [N/A, ] [PID: 2656][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [c:\program files\google\googletoolbar2.dll] [Google Inc., 4, 0, 1601, 4978] [C:\Program Files\Windows Live Toolbar\msntb.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\zh-cn\mtbres.dll.mui] [Microsoft Corporation, 03.00.0000.1398] [C:\Program Files\Windows Live Toolbar\mtbres.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\Tem.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\zh-cn\CMRes.dll.mui] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\CMRes.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\Components\zh-cn\MSNExtensionRes.dll.mui] [Microsoft Corporation, 03.00.0000.1398] [C:\Program Files\Windows Live Toolbar\Components\MSNExtensionRes.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\Components\zh-cn\RssFinderRes.dll.mui] [Microsoft Corporation, 03.00.0000.1398] [C:\Program Files\Windows Live Toolbar\Components\RssFinderRes.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\zh-cn\msn_slrs.DLL.mui] [Microsoft Corporation, 03.00.0000.1398] [C:\Program Files\Windows Live Toolbar\msn_slrs.DLL] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\Components\zh-cn\msntabres.dll.mui] [Microsoft Corporation, 03.00.0000.1398] [C:\Program Files\Windows Live Toolbar\Components\msntabres.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\Components\rssFinder.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\PROGRA~1\baidu\bar\baidubar.dll] [Baidu.com, Inc., 2, 0, 2, 134] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [C:\Program Files\yok\adblock.dll] [YOK.Com, 3, 0, 0, 1003] [C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll] [Microsoft Corporation, 4.000.249.1] [C:\Program Files\Common Files\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.000.249.1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [C:\Program Files\Windows Live Toolbar\stmain.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\msn_slps.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\cm.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\Components\MSNExtension.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Windows Live Toolbar\Components\msntab.dll] [Microsoft Corporation, 03.00.0000.1615] [C:\Program Files\Common Files\Microsoft Shared\INK\PENCHS.DLL] [Microsoft Corporation, 1.0.1038.0] [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\WINWB86.IME] [Microsoft Corporation, 5.00.2000.3] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 3304][E:\Program Files\SREng.EXE] [Smallfrogs Studio, 2.4.12.806] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [E:\Program Files\Plugins\NWMON.SRE] [Smallfrogs Studio, 1, 0, 0, 8] [PID: 3076][C:\Program Files\Rising\Rav\Rav.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28] [C:\Program Files\Rising\Rav\PlugIn\RsPgScan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 17] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RavUI.Dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\RavQu.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] ==================================
kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:

kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:	发表于： 2007-03-24 15:05 \| 只看楼主短消息资料字号：小中大 10楼文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
kosi请教你初生襁褓狮帖子:22 注册: 2007-03-22 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT