这些木马怎么杀不掉啊 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛这些木马怎么杀不掉啊

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

这些木马怎么杀不掉啊

zwttkl 初生襁褓狮帖子:10 注册: 2007-11-12 来自:	发表于： 2007-11-14 02:01 \| 只看楼主短消息资料字号：小中大 1楼这些木马怎么杀不掉啊已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hig 文件: C:\WINDOWS\system32\LotusHlp.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gxb 文件: C:\WINDOWS\system32\NVDispDrv.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhp 文件: C:\WINDOWS\system32\LYMANGR.DLL//UPack 已删除: 木马程序 Trojan-PSW.Win32.Lmir.bos 文件: C:\WINDOWS\853957MM.DLL 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hfr 文件: C:\WINDOWS\853957WL.DLL 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.fhz 运行模块: IGW.exe\IGW.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.fhz 文件: C:\WINDOWS\IGW.exe 已删除: 木马程序 Trojan-PSW.Win32.Lmir.bos 文件: c:\windows\igm.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hfr 文件: c:\windows\swchost.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gxb 文件: c:\windows\hcnubw.exe//NSPack//PE_Patch 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gti 文件: c:\windows\lotushlp.exe//NSPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhp 文件: c:\windows\system32\lyloader.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhp 文件: C:\Privilege.dat//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhp 文件: C:\Documents and Settings\zwttkl\Local Settings\Temp\LYLOADER.EXE//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhp 文件: C:\Documents and Settings\zwttkl\Local Settings\Temp\LYMANGR.DLL//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhp 文件: C:\Documents and Settings\zwttkl\Local Settings\Temp\MSDEG32.DLL//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.guz 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\01ABOTMR\10[1].exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gyu 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\01ABOTMR\12[1].exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhi 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\01ABOTMR\15[1].exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gvc 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\01ABOTMR\1[1].exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hdg 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\01ABOTMR\5[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hhm 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\01ABOTMR\9[1].exe//PE_Patch//UPack 未发现: 病毒 Worm.Win32.Downloader.al 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\01ABOTMR\bf[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hhj 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\G9IJCTAB\16[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hdu 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\G9IJCTAB\20[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.gti 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\G9IJCTAB\24[1].exe//NSPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hhl 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\G9IJCTAB\3[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-Downloader.Win32.Delf.axx 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\G9IJCTAB\7[1].exe//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hec 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\W9MROHYB\0[1].exe//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hhi 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\W9MROHYB\11[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hde 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\W9MROHYB\14[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.gxb 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\W9MROHYB\17[1].exe//NSPack//PE_Patch 未发现: 木马程序 Trojan-PSW.Win32.QQPass.ali 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\W9MROHYB\25[1].exe//UPX 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hlg 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\W9MROHYB\4[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.fhz 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\W9MROHYB\8[1].exe//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hkz 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\WTUJODA3\13[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hhk 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\WTUJODA3\19[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hlf 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\WTUJODA3\2[1].exe//PE_Patch//UPack 未发现: 木马程序 Trojan-PSW.Win32.Lmir.bou 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\WTUJODA3\6[1].exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hec 文件: C:\Program Files\conime0.exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hlf 文件: C:\Program Files\conime2.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhl 文件: C:\Program Files\conime3.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hlg 文件: C:\Program Files\conime4.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hdg 文件: C:\Program Files\conime5.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhm 文件: C:\Program Files\conime9.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhi 文件: C:\Program Files\conimeb.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gyu 文件: C:\Program Files\conimec.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hkz 文件: C:\Program Files\conimed.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hde 文件: C:\Program Files\conimee.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhi 文件: C:\Program Files\conimef.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhj 文件: C:\Program Files\conimeh.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhk 文件: C:\Program Files\conimek.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hdu 文件: C:\Program Files\conimel.exe//PE_Patch//UPack 已删除: 木马程序 Trojan-PSW.Win32.QQPass.ali 文件: C:\Program Files\conimeq.exe//UPX 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.fhz 文件: C:\WINDOWS\853957WO.DLL 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hhp 文件: C:\WINDOWS\system32\MSDEG32.DLL//UPack 已删除: 病毒 Worm.Win32.Downloader.ao 文件: C:\WINDOWS\system32\Com\comrepl32.exe 已删除: 病毒 Worm.Win32.Downloader.ao 文件: C:\WINDOWS\system32\drivers\pcibus.sys 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.guz 文件: C:\Program Files\conimea.exe//PE_Patch//UPack 已检测到: 风险软件 Hidden data sending 运行进程: C:\WINDOWS\conime.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnm 文件: C:\WINDOWS\system32\avzxfmn.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnm 文件: C:\WINDOWS\system32\avzxfst.exe//UPack 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hio 文件: C:\Documents and Settings\zwttkl\Local Settings\Temporary Internet Files\Content.IE5\Y5IP29SB\14[1].exe//FSG 未发现: 木马程序 Trojan-PSW.Win32.OnLineGames.hhl 文件: C:\WINDOWS\system32\zhtuatl.dll//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hop 文件: C:\WINDOWS\system32\kawdezy.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hov 文件: C:\WINDOWS\system32\swrcbzc.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gmn 文件: C:\WINDOWS\system32\kapjdaz.exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gmn 文件: C:\WINDOWS\system32\kapjdzy.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hdj 文件: C:\WINDOWS\system32\rsmygpm.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hpe 文件: C:\WINDOWS\system32\rarjepi.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hod 文件: C:\WINDOWS\system32\ratbipi.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hoc 文件: C:\WINDOWS\system32\kvdxiis.exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hoc 文件: C:\WINDOWS\system32\kvdxima.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnj 文件: C:\WINDOWS\system32\kvdxshis.exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnj 文件: C:\WINDOWS\system32\kvdxshma.dll 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hkd 文件: C:\RECYCLER\video.dll 已删除: 木马程序 Trojan-Downloader.Win32.Small.eyz 文件: C:\WINDOWS\conime.exe//UPX 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hfw 运行模块: rsmygsp.exe\rsmygsp.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hfw 文件: C:\WINDOWS\system32\rsmygsp.exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnm 运行模块: avzxfst.exe\avzxfst.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hod 运行模块: ratbitl.exe\ratbitl.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hod 文件: C:\WINDOWS\system32\ratbitl.exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hpe 运行模块: rarjetl.exe\rarjetl.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hpe 文件: C:\WINDOWS\system32\rarjetl.exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.gmn 运行模块: kapjdaz.exe\kapjdaz.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hoc 运行模块: kvdxiis.exe\kvdxiis.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnj 运行模块: kvdxshis.exe\kvdxshis.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnj 运行模块: swrcbac.exe\swrcbac.exe 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnj 文件: C:\WINDOWS\system32\swrcbac.exe//UPack 已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hjz 文件: C:\Program Files\conimec.exe//UPack 等到开机后又全都回来了，我用的是卡巴附件: 文件名:9764682007111415032.txt 下载次数:112 文件类型:application/octet-stream 文件大小: 上传时间:2007-11-14 2:01:42 描述: 2007-11-14 20:33:42
zwttkl 初生襁褓狮帖子:10 注册: 2007-11-12 来自:	分享到：

火影忍者横据古稀狮帖子:7855 注册: 2006-06-29 来自:火星	发表于： 2007-11-14 02:33 \| 短消息资料字号：小中大 2楼安全模式杀杀，若无法解决，下载 System Repair Engineer， http://www.kztechs.com/sreng/download.html 1 解压缩sreng2.zip 2 运行SREngPS.exe 3 智能扫描=》扫描=》保存报告 4 把日志中的报告完整拷贝贴上来，不要修改
火影忍者横据古稀狮帖子:7855 注册: 2006-06-29 来自:火星

流星陨落初生襁褓狮帖子:1 注册: 2008-04-17 来自:	发表于： 2007-11-14 13:22 \| 短消息资料字号：小中大 3楼用瑞星杀
流星陨落初生襁褓狮帖子:1 注册: 2008-04-17 来自:

意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:	发表于： 2007-11-14 20:38 \| 短消息资料字号：小中大 4楼麻烦高手看看了！貌似中了sbl那个autorun，还有avzxfmn.dll 日志报告如下： [CODE] 2007-11-14,20:16:12 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件进程特权扫描启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] <run><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher] <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [N/A] <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows Publisher] <Userinit><C:\WINDOWS\system32\userinit.exe,> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><avzxfmn.dll> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{6859245F-345D-BC13-AC4F-145D47DA34F6}><C:\WINDOWS\system32\avzxfmn.dll> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher] ================================== 启动文件夹 N/A ================================== 服务 [Contrl Center of Storm Media / ccosm][Running/Auto Start] <C:\Program Files\StormII\stormliv.exe /asservice><> [Help and Support / helpsvc][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon][Running/Auto Start] <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [System Restore Service / srservice][Stopped/Disabled] <C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\srsvc.dll><N/A> ================================== 驱动程序 [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [BaseTDI / BaseTDI][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\basetdi.sys><Beijing Rising Technology Co., Ltd.> [BB-RUN / BB-RUN][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\bb-run.sys><N/A> [DONTGO / DONTGO][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\DontGo.sys><N/A> [ExpScaner / ExpScaner][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\ExpScan.sys><> [HookCont / HookCont][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookSys.sys><Rising> [HPTPRO / HPTPRO][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\hptpro.sys><N/A> [ialm / ialm][Running/Manual Start] <system32\DRIVERS\ialmnt5.sys><Intel Corporation> [JGOGO / JGOGO][Running/Boot Start] <\SystemRoot\System32\DRIVERS\JGOGO.sys><JMicron> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\MEMSCAN.sys><瑞星软件有限公司> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [SIFILTER / SIFILTER][Running/Boot Start] <\SystemRoot\System32\DRIVERS\SiWinAcc.sys><Silicon Image, Inc.> [SIREMFIL / SIREMFIL][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SiRemFil.sys><N/A> [System Restore Filter Driver / sr][Stopped/Auto Start] <system32\DRIVERS\sr.sys><N/A> ================================== 浏览器加载项 [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD> [寒岩傲松最新系统下载] {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://491410999.qzone.qq.com, N/A> [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation> [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <C:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A> [PowerPlayer Control] {5EC7C511-CD0F-42E6-830C-1BD9882F3458} <C:\PROGRA~1\PPStream\POWERP~1.DLL, PPStream Inc.> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [VIDEO__MPEG Moniker Class] {CD3AFA89-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, Adobe Systems, Inc.> [使用迅雷下载] <C:\Program Files\Thunder\Program\geturl.htm, N/A> [使用迅雷下载全部链接] <C:\Program Files\Thunder\Program\getallurl.htm, N/A> ==================================
意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:

意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:	发表于： 2007-11-14 20:41 \| 短消息资料字号：小中大 5楼正在运行的进程 [PID: 464 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 524 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 548 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 596 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 608 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 768 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 832 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 892 / SYSTEM][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 912 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\avzxfmn.dll] [N/A, ] [PID: 996 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1064 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1088 / SYSTEM][C:\PROGRAM FILES\RISING\RAV\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 49] [C:\PROGRAM FILES\RISING\RAV\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [C:\PROGRAM FILES\RISING\RAV\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\PROGRAM FILES\RISING\RAV\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\PROGRAM FILES\RISING\RAV\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\PROGRAM FILES\RISING\RAV\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\PROGRAM FILES\RISING\RAV\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\PROGRAM FILES\RISING\RAV\psapi.dll] [Microsoft Corporation, 4.00] [C:\PROGRAM FILES\RISING\RAV\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\PROGRAM FILES\RISING\RAV\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\PROGRAM FILES\RISING\RAV\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\PROGRAM FILES\RISING\RAV\HookCont.dll] [Rising, 19, 0, 0, 0] [C:\Program Files\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 26] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 41] [C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 21] [C:\Program Files\Rising\Rav\RsVM.dll] [, 19, 0, 0, 16] [C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 24] [C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [PID: 1192 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1300 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1324 / SYSTEM][C:\Program Files\StormII\stormliv.exe] [, 2, 7, 10, 18] [C:\Program Files\StormII\MSVCP60.dll] [Microsoft Corporation, 6.02.3104.0] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1368 / SYSTEM][C:\WINDOWS\system32\inetsrv\inetinfo.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1492 / SYSTEM][C:\PROGRAM FILES\RISING\RAV\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 1784 / Administrator][C:\WINDOWS\system32\userinit.exe] [N/A, ] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1812 / Administrator][C:\WINDOWS\Explorer.exe] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll] [ppstream.com, 1.0.0.2] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\WINDOWS\system32\Audiodev.dll] [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sohu.com Inc., 3, 0, 3, 0] [C:\Program Files\SogouInput\Plugin\SgImeWord.dll] [, 1, 0, 0, 31] [C:\WINDOWS\system32\FREEWB.IME] [Delphi Fan Studio, 5.1] [C:\WINDOWS\system32\WINABCX.IME] [PKUETI, 5.22.216] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:

意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:	发表于： 2007-11-14 20:42 \| 短消息资料字号：小中大 6楼 [PID: 2008 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 452 / Administrator][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [PID: 516 / Administrator][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [PID: 528 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 2576 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\avzxfmn.dll] [N/A, ] [PID: 3868 / Administrator][c:\Program Files\Common Files\WIN.exe] [N/A, ] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 3288 / Administrator][C:\Program Files\Thunder\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.7.2.368] [C:\Program Files\Thunder\Program\ThunderEx.dll] [, 1, 1, 7, 13] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [C:\Program Files\Thunder\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 2, 2, 33] [C:\Program Files\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 18, 2, 151] [C:\Program Files\Thunder\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [C:\Program Files\Thunder\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 18, 2, 151] [C:\Program Files\Thunder\Program\streammedialib.dll] [, 1, 1, 2, 49] [C:\Program Files\Thunder\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 8] [C:\Program Files\Thunder\Program\FloatBar.dll] [Giganology Inc., 1, 0, 0, 2] [C:\Program Files\Thunder\Components\DownAndPlay\DownAndPlay.dll] [, 1, 0, 3, 21] [C:\Program Files\Thunder\Program\iTargetAD.dll] [N/A, ] [c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll] [ppstream.com, 1.0.0.2] [C:\Program Files\Thunder\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0] [C:\Program Files\Thunder\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 15] [C:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 4, 22] [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 18] [C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.15] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Thunder\Components\DownloadStat\DownloadStat.dll] [深圳市迅雷网络技术有限公司, 1, 1, 0, 1] [C:\Program Files\Thunder\Program\XLNet.Dll] [Thunder Networking Technologies,LTD, 1, 2, 1, 9] [PID: 2548 / Administrator][C:\Program Files\Rising\Rav\ScanBD.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [C:\Program Files\Rising\Rav\RsCommx.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\BDEngine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\BDEX.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 3] [C:\Program Files\Rising\Rav\BDLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 1] [PID: 3248 / Administrator][C:\WINDOWS\system32\NOTEPAD.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1884 / Administrator][F:\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [F:\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] [PID: 1340 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll] [ppstream.com, 1.0.0.2] [C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.15] [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 18] [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\WINABCX.IME] [PKUETI, 5.22.216] [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0]
意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:

意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:	发表于： 2007-11-14 20:43 \| 短消息资料字号：小中大 7楼 ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeDebugPrivilege [PID = 1784, C:\WINDOWS\SYSTEM32\USERINIT.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 452, C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 516, C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3868, C:\PROGRAM FILES\COMMON FILES\WIN.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3868, C:\PROGRAM FILES\COMMON FILES\WIN.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3288, C:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3288, C:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 2548, C:\PROGRAM FILES\RISING\RAV\SCANBD.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2548, C:\PROGRAM FILES\RISING\RAV\SCANBD.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ==================================
意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:

意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:	发表于： 2007-11-14 20:44 \| 短消息资料字号：小中大 8楼 [/CODE] 正在运行的进程 [PID: 464 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 524 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 548 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 596 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 608 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 768 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 832 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 892 / SYSTEM][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 912 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\avzxfmn.dll] [N/A, ] [PID: 996 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1064 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1088 / SYSTEM][C:\PROGRAM FILES\RISING\RAV\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 49] [C:\PROGRAM FILES\RISING\RAV\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [C:\PROGRAM FILES\RISING\RAV\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\PROGRAM FILES\RISING\RAV\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\PROGRAM FILES\RISING\RAV\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\PROGRAM FILES\RISING\RAV\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\PROGRAM FILES\RISING\RAV\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\PROGRAM FILES\RISING\RAV\psapi.dll] [Microsoft Corporation, 4.00] [C:\PROGRAM FILES\RISING\RAV\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\PROGRAM FILES\RISING\RAV\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\PROGRAM FILES\RISING\RAV\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\PROGRAM FILES\RISING\RAV\HookCont.dll] [Rising, 19, 0, 0, 0] [C:\Program Files\Rising\Rav\SpamEng.dll] [, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 26] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 41] [C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 25] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 21] [C:\Program Files\Rising\Rav\RsVM.dll] [, 19, 0, 0, 16] [C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 24] [C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12] [PID: 1192 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1300 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1324 / SYSTEM][C:\Program Files\StormII\stormliv.exe] [, 2, 7, 10, 18] [C:\Program Files\StormII\MSVCP60.dll] [Microsoft Corporation, 6.02.3104.0] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1368 / SYSTEM][C:\WINDOWS\system32\inetsrv\inetinfo.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1492 / SYSTEM][C:\PROGRAM FILES\RISING\RAV\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 1784 / Administrator][C:\WINDOWS\system32\userinit.exe] [N/A, ] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1812 / Administrator][C:\WINDOWS\Explorer.exe] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll] [ppstream.com, 1.0.0.2] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\WINDOWS\system32\Audiodev.dll] [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sohu.com Inc., 3, 0, 3, 0] [C:\Program Files\SogouInput\Plugin\SgImeWord.dll] [, 1, 0, 0, 31] [C:\WINDOWS\system32\FREEWB.IME] [Delphi Fan Studio, 5.1] [C:\WINDOWS\system32\WINABCX.IME] [PKUETI, 5.22.216] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:

意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:	发表于： 2007-11-14 20:44 \| 短消息资料字号：小中大 9楼 [PID: 2008 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 452 / Administrator][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [PID: 516 / Administrator][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 45] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [PID: 528 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 2576 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\avzxfmn.dll] [N/A, ] [PID: 3868 / Administrator][c:\Program Files\Common Files\WIN.exe] [N/A, ] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 3288 / Administrator][C:\Program Files\Thunder\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.7.2.368] [C:\Program Files\Thunder\Program\ThunderEx.dll] [, 1, 1, 7, 13] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [C:\Program Files\Thunder\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 2, 2, 33] [C:\Program Files\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 18, 2, 151] [C:\Program Files\Thunder\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [C:\Program Files\Thunder\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 18, 2, 151] [C:\Program Files\Thunder\Program\streammedialib.dll] [, 1, 1, 2, 49] [C:\Program Files\Thunder\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 8] [C:\Program Files\Thunder\Program\FloatBar.dll] [Giganology Inc., 1, 0, 0, 2] [C:\Program Files\Thunder\Components\DownAndPlay\DownAndPlay.dll] [, 1, 0, 3, 21] [C:\Program Files\Thunder\Program\iTargetAD.dll] [N/A, ] [c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll] [ppstream.com, 1.0.0.2] [C:\Program Files\Thunder\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0] [C:\Program Files\Thunder\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 15] [C:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 4, 22] [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 18] [C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.15] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Thunder\Components\DownloadStat\DownloadStat.dll] [深圳市迅雷网络技术有限公司, 1, 1, 0, 1] [C:\Program Files\Thunder\Program\XLNet.Dll] [Thunder Networking Technologies,LTD, 1, 2, 1, 9] [PID: 2548 / Administrator][C:\Program Files\Rising\Rav\ScanBD.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [C:\Program Files\Rising\Rav\RsCommx.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\BDEngine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\BDEX.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 3] [C:\Program Files\Rising\Rav\BDLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 1] [PID: 3248 / Administrator][C:\WINDOWS\system32\NOTEPAD.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [PID: 1884 / Administrator][F:\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [F:\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] [PID: 1340 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\avzxfmn.dll] [N/A, ] [c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll] [ppstream.com, 1.0.0.2] [C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.15] [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 18] [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\WINABCX.IME] [PKUETI, 5.22.216] [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0]
意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:

意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:	发表于： 2007-11-14 20:44 \| 短消息资料字号：小中大 10楼 ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeDebugPrivilege [PID = 1784, C:\WINDOWS\SYSTEM32\USERINIT.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 452, C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 516, C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3868, C:\PROGRAM FILES\COMMON FILES\WIN.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3868, C:\PROGRAM FILES\COMMON FILES\WIN.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3288, C:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3288, C:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 2548, C:\PROGRAM FILES\RISING\RAV\SCANBD.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 2548, C:\PROGRAM FILES\RISING\RAV\SCANBD.EXE] ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE] 全部发完，望高手指点一二！瑞星查半天没个发现，就别提杀毒了。
意识到飞初生襁褓狮帖子:8 注册: 2007-11-14 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT