第一个机器的相关扫描结果!
下面这些都是些什么呢???自己认真去看看文件去。
启动项目
注册表
<BHDCRegC><C:\WINDOWS\system32\BHDCRegC.exe> [SHHIC]
<security><C:\WINDOWS\system32\Service.exe> [ICBC]
==================================
服务
[Windows Help / WinHelp][Stopped/Auto Start]
<C:\WINDOWS\winhlep.exe -NetSata><N/A>
==================================
驱动程序
[BHDCKEY / BHDCKEY][Running/Manual Start]
<System32\Drivers\usbdriver.sys><BHDC>
==================================
正在运行的进程
[PID: 3856 / SYSTEM][C:\WINDOWS\TEMP\MY79C8.EXE] [N/A, ]
==================================
HOSTS 文件
102.0.14.1 innxfhoem001
102.0.14.2 innxfhoem000
102.0.14.3 innxfhorh000
102.0.14.8 nxdomain
83.1.14.1elearning
83.1.14.1icbcbnres001.intranet.icbc.com.cn
83.1.14.2icbcbnres002.intranet.icbc.com.cn
83.1.14.6icbcbnres006.intranet.icbc.com.cn
102.0.14.14 nxfhbnres002.intranet.icbc.com.cn
102.0.14.13 nxfhbnres001.intranet.icbc.com.cn
102.0.14.29 innxfhoas000
102.4.31.2 innxfhoas003
80.37.241.2 www.icbc.com.cn
80.37.241.2 www.95588.com
80.37.241.1 mybank.icbc.com.cn
80.37.241.5 corporbank.icbc.com.cn
——————————————————————————————————————————————
第二个机器的相关扫描结果
这个机器中过磁碟机吗???
启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><C:\WINDOWS\system32\dnsq.dll> [N/A]
==================================
启动文件夹
[~.exe.148531]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\~.exe.148531.exe --> [N/A]><N>
==================================
服务
[PnP plug 0n Service / PnP plug 0n Service][Running/Auto Start]
<C:\WINDOWS\system32\Lcass.exe><Miorosoft>
[Windows Help / WinHelp][Stopped/Auto Start]
<C:\WINDOWS\winhlep.exe -NetSata><N/A>
==================================
驱动程序
[BHDCKEY / BHDCKEY][Running/Manual Start]
<System32\Drivers\usbdriver.sys><BHDC>
==================================
正在运行的进程
[PID: 392 / SYSTEM][C:\WINDOWS\system32\Lcass.exe] [Miorosoft, 1.00.0195]
[PID: 1772 / SYSTEM][C:\WINDOWS\TEMP\WM7274.EXE] [N/A, ]
==================================
HOSTS 文件
84.33.30.9 cs2002a.icbc.com.cn #
16.54.252.2 ciis.icbc.com.cn #
102.0.14.3 INNXFHORH000 #
102.0.14.2 INNXFHOEM000 #
102.0.14.1 INNXFHOEM001 #
102.0.81.16 iwrserver.icbc.com.cn #
16.54.217.1 cs2002c.icbc.com.cn #
127.0.0.1 localhost
102.0.14.1 innxfhoem001
102.0.14.2 innxfhoem000
102.0.14.3 innxfhorh000
83.6.46.4 inhqhqoas000
102.40.14.1INNXSZORH000#
102.32.14.3INNXYNORH000#
83.1.14.1elearning
83.1.14.1icbcbnres001.intranet.icbc.com.cn
83.1.14.2icbcbnres002.intranet.icbc.com.cn
83.1.14.6icbcbnres006.intranet.icbc.com.cn
102.0.14.14 nxfhbnres002.intranet.icbc.com.cn
102.0.14.13 nxfhbnres001.intranet.icbc.com.cn
102.0.14.24 iwrserver.icbc.com.cn
102.0.14.29 innxfhoas000
83.6.46.3 INHQHQOEM000 #
83.6.46.43 INHQHQOEM007 #
102.0.81.14 websphere.icbc.com.cn
102.0.81.14 iwrserver.icbc.com.cn
102.0.81.14 cs2002.nx.intranet.icbc.com.cn