瑞星和一些第3方软件(中的应用软件) 被删了 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛瑞星和一些第3方软件(中的应用软件) 被删了

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

[求助] 瑞星和一些第3方软件(中的应用软件) 被删了

二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:	发表于： 2008-10-01 01:18 \| 只看楼主短消息资料字号：小中大 1楼瑞星和一些第3方软件(中的应用软件) 被删了各位高手：非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！该诊断报告由360安全卫士提供 http://www.360.cn 诊断时间: 2008-10-01 00:59:53 诊断平台: Microsoft Windows XP Service Pack 3 IE版本: Internet Explorer V6.0.2900.5512 Build:62900.5512 计算机物理内存:511.48MB - 当前可用内存:92.41MB 100 - 未知 - Process: yfdown.exe [] - D:\联合证券\易发\bin\yfdown.exe 100 - 未知 - Process: peer.exe [Grid Service] - C:\Program Files\GridService\peer.exe 100 - 未知 - Process: windowsmedia10-kb936782-x86-chs.exe [Hotfix Package] - c:\program files\360safe\hotfix\windowsmedia10-kb936782-x86-chs.exe R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.qq123.cc/index.html?qq123 R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=www.letv.com R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.google.com R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=C:\WINDOWS\Web\index.htm R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://www.google.com/ie R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.google.com/ie R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.google.com/ie R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Use Search Asst=no O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{710EB7A1-45ED-11D0-924A-0020AFC7AC4D}] - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} - O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{1E796980-9CC5-11D1-A83F-00C04FC99D61}] - {1E796980-9CC5-11D1-A83F-00C04FC99D61} - O4 - 未知 - HKLM\..\Run: [yfdown] [] D:\联合证券\易发\bin\yfdown.exe O4 - 未知 - HKLM\..\Run: [Grid Service] [Grid Service] "C:\Program Files\GridService\peer.exe" -n Grid O4 - 未知 - HKLM\..\RunOnce: [KKDelay] [RunOnce Application] C:\Program Files\Rising\AntiSpyware\RunOnce.exe O9 - 未知 - Extra button: Zcom 杂志(E-Space)(HKLM) - C:\Zcom\E-Space.exe O9 - 未知 - Extra button: @xpsp3res.dll,-20001(HKLM) - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O15 - 未知 - Trusted Zone: http://www.188vcd.cn O15 - 未知 - Trusted Zone: http://www.gougouvcd.cn O15 - 未知 - Trusted Zone: http://www.tom155.com O16 - 未知 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (PasswordEditCtrl) - https://password.qq.com/download/qqedit2.cab O20 - 未知 - AppInit DLLs: kmondll O23 - 未知 - Service: ccosm [Contrl Center of Storm Media] - C:\Program Files\StormII\stormliv.exe /asservice - (not running) O23 - 未知 - Service: letvp2p [使用户可正常观看网络电视的服务端] - C:\Program Files\Letv\P2P\commonxf.dll - (not running) O28 - 未知 - IELINK: C:\DOCUME~1\ADMINI~1\APPLIC~1\MICROS~1\INTERN~1\QUICKL~1\启动IN~1.LNK - c:\windows\web\index.htm O30 - 未知 - HKCU\..\Desktop: [Scrnsave.exe] [My Pictures Slideshow Screensaver] C:\WINDOWS\system32\ssmypics.scr ======================================= 100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe 100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base 100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe 100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe 100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss 100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] - C:\Program Files\Rising\Rav\CCenter.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService 100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe 100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE 100 - 安全 - Process: VM_STI.EXE [still image (sti) driver驱动程序，一般用于电脑摄像头。] - C:\WINDOWS\VM_STI.EXE 100 - 安全 - Process: RSTray.exe [卡卡上网助手6相关程序。] - C:\Program Files\Rising\AntiSpyware\rstray.exe 100 - 安全 - Process: safeboxTray.exe [360安全卫士保险箱相关程序。] - C:\Program Files\360Safebox\safeboxTray.exe 100 - 安全 - Process: 360tray.exe [360安全卫士实时监控程序。] - C:\Program Files\360safe\safemon\360tray.exe 100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe 100 - 安全 - Process: Thunder5.exe [迅雷5，支持多资源超线程技术的下载工具] - C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k imgsvc 100 - 安全 - Process: wdfmgr.exe [windows media player播放器相关程序。] - C:\WINDOWS\system32\wdfmgr.exe 100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe 100 - 安全 - Process: 360Safe.exe [360安全卫士相关程序。] - C:\Program Files\360safe\360Safe.exe 100 - 安全 - Process: 360hotfix.exe [360安全卫士漏洞补丁修复模块。] - C:\Program Files\360safe\360hotfix.exe 100 - 安全 - Process: SoftManager.exe [360软件管理] - C:\Program Files\360safe\SoftMgr\SoftManager.exe R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default)=http://www.google.com/search?q=%s O2 - 安全 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块。] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll O2 - 安全 - BHO: (BandIE Class) - [百度超级搜霸相关插件。] - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll O2 - 安全 - BHO: (卡卡上网安全助手) - [卡卡上网安全助手，网络辅助工具。] - {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} - C:\WINDOWS\system32\UrlFilter.dll O3 - 安全 - Toolbar: (百度工具栏) - [百度超级搜霸相关程序。] - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll O4 - 安全 - HKLM\..\Run: [BigDogPath] [网眼摄像头驱动] C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (ZC0301PL) O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 安全 - HKLM\..\Run: [runeip] [卡卡上网安全助手相关程序。] "C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup O4 - 安全 - HKLM\..\Run: [360Safebox] [360安全卫士保险箱相关程序。] "C:\Program Files\360Safebox\safeboxTray.exe" /r O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] C:\Program Files\360safe\safemon\360tray.exe /start O4 - 安全 - HKLM\..\RunOnce: [360Safe] [360安全卫士] Rundll32.exe C:\PROGRA~1\360safe\AntiAdwa.dll,KillAdware O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe O8 - 安全 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\geturl.htm O8 - 安全 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - 安全 - Extra button: 启动迅雷5(HKLM)(HKLM) - C:\Program Files\Thunder Network\Thunder\Thunder.exe O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe - (not running) O23 - 安全 - Service: RsCCenter [是瑞星杀毒软件控制台相关程序。] - "C:\Program Files\Rising\Rav\CCenter.exe" - (running) O23 - 安全 - Service: RsRavMon [是瑞星杀毒软件相关监控程序。] - "C:\PROGRAM FILES\RISING\RAV\Ravmond.exe" - (not running) ======================================= O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 - O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 - O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 - O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 - O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 129024 - 60fe004235a8108446dcfc1e526fde0e O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 129024 - 60fe004235a8108446dcfc1e526fde0e O31 - 未知 - BootExecute: bsmain - - - - 0 - O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 - O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 - ======================================= ======================================= O41 - BdGuard - BdGuard - C:\WINDOWS\system32\drivers\BDGuard.SYS - (not running) - - - O41 - IlvMoneyDRIVER53 - IlvMoneyDRIVER53 - F:\M E1129+CT\M E1129\IlvMoney1129.sys - (not running) - - - 3032f388c30f68bcb461be7819f7fc00 ======================================= 360Safe.exe=4.4.0.1001 AntiAdwa.dll=4.2.0.1001 AntiEng.dll=4.4.0.1001 AntiActi.dll=2.0.0.3000 CleanHis.dll=4.2.0.1002 live.dll=1.0.1.1028 ======================================= 操作历史报告： 2008-10-01 00:27 清理恶评插件 - U88财富快车 - 清理恶评插件 - SrchPlug工具条 - 2008-10-01 00:27 清理其它插件 - Fengli toolbar - C:\WINDOWS\system32\lingyu.dll 清理其它插件 - IEHelper Module - C:\WINDOWS\system32\lingyuhelper.dll 清理其它插件 - 新浪点点通 - C:\WINDOWS\system32\NMGameX 清理其它插件 - 青娱乐 - 清理其它插件 - Google工具栏 - c:\PROGRA~1\google\GOOGLE~2.DLL ======================================= 360安全卫士，彻底查杀各种流氓软件,全面保护系统安全最新免费下载：http://www.360.cn/download.html 用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)* 二十一国最后编辑于 2008-10-01 01:21:15
二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:	分享到：

二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:	发表于： 2008-10-01 01:19 \| 只看楼主短消息资料字号：小中大 2楼回复：瑞星和一些第3方软件被删了瑞星卡卡电脑诊断日志 v1.30 (2008-10-1 1:4:12) 北京瑞星信息技术有限公司注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services Ati HotKey Poller [A ] 1. c:\windows\system32\ati2evxx.exe ose [A ] 2. c:\program files\common files\microsoft shared\source engine\ose.exe RsCCenter [AM] 3. c:\program files\rising\rav\ccenter.exe RsRavMon [A ] 4. c:\program files\rising\rav\ravmond.exe spupdsvc [A ] 5. c:\windows\system32\spupdsvc.exe UMWdf [AM] 6. c:\windows\system32\wdfmgr.exe + 内核驱动 + HKLM\System\CurrentControlSet\Services ALCXWDM [A ] 7. c:\windows\system32\drivers\alcxwdm.sys AmdK8 [A ] 8. c:\windows\system32\drivers\amdk8.sys DKbFltr [A ] 9. c:\windows\system32\drivers\dkbfltr.sys FETNDISB [A ] 10. c:\windows\system32\drivers\fetnd5b.sys HookCont [A ] 11. c:\windows\system32\drivers\hookcont.sys HookNtos [A ] 12. c:\windows\system32\drivers\hookntos.sys HookReg [A ] 13. c:\windows\system32\drivers\hookreg.sys HookSys [A ] 14. c:\windows\system32\drivers\hooksys.sys IlvMoneyDRIVER53 [A ] 15. f:\m e1129+ct\m e1129\ilvmoney1129.sys RsNTGDI [A ] 16. c:\windows\system32\drivers\rsntgdi.sys SafeBoxKrnl [A ] 17. c:\windows\system32\drivers\safeboxkrnl.sys Secdrv [A ] 18. c:\windows\system32\drivers\secdrv.sys TesSafe [A ] 19. c:\windows\system32\tessafe.sys viaagp1 [A ] 20. c:\windows\system32\drivers\viaagp1.sys VIAMRAID [A ] 21. c:\windows\system32\drivers\viamraid.sys ZSMC301b [A ] 22. c:\windows\system32\drivers\usbvm31b.sys + 文件系统驱动 + HKLM\System\CurrentControlSet\Services BdGuard [A ] 23. c:\windows\system32\drivers\bdguard.sys + 系统登陆自运行 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify AtiExtEvent [AM] 24. c:\windows\system32\ati2evxx.dll + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {B580CF65-E151-49C3-B73F-70B13FCA8E86} [A ] 25. c:\program files\baidu\bar\baidubar.dll + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {01443AEC-0FD1-40fd-9C87-E93D1494C233} [AM] 26. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll {77FEF28E-EB96-44FF-B511-3185DEA48697} [A ] 25. c:\program files\baidu\bar\baidubar.dll {889D2FEB-5411-4565-8998-1DD2C5261283} [AM] 27. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [A ] 28. c:\windows\system32\urlfilter.dll {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [AM] 29. c:\program files\360safe\safemon\safemon.dll + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 30. c:\program files\thunder network\thunder\thunder.exe Exec [A ] 31. c:\zcom\e-space.exe Exec [A ] 32. c:\windows\network diagnostic\xpnetdiag.exe + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [AM] 33. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 34. c:\windows\system32\hticons.dll WinRAR shell extension [A ] 35. c:\program files\winrar\rarext.dll Portable Media Devices [A ] 36. c:\windows\system32\audiodev.dll Portable Media Devices Menu [A ] 36. c:\windows\system32\audiodev.dll Microsoft Office HTML Icon Handler [A ] 37. c:\program files\microsoft office\office11\msohev.dll Web Folders [A ] 38. c:\program files\common files\microsoft shared\web folders\msonsext.dll RISING [AM] 39. c:\windows\system32\ravext.dll + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {32CD708B-60A7-4C00-9377-D73EAA495F0F} [AM] 39. c:\windows\system32\ravext.dll + 用户登陆自运行项目 + HKCU\Software\Microsoft\Windows\CurrentVersion\Run DWQueuedReporting [A ] 40. c:\program files\common files\microsoft shared\dw\dwtrig20.exe + HKLM\Software\Microsoft\Windows\CurrentVersion\Run BigDogPath [AM] 41. c:\windows\vm_sti.exe RavTask [A ] 42. c:\program files\rising\rav\ravtask.exe yfdown [AM] 43. d:\联合证券\易发\bin\yfdown.exe Grid Service [AM] 44. c:\program files\gridservice\peer.exe runeip [AM] 45. c:\program files\rising\antispyware\rstray.exe 360Safebox [A ] 46. c:\program files\360safebox\safeboxtray.exe + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce KKDelay [A ] 47. c:\program files\rising\antispyware\runonce.exe + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 48. c:\windows\system32\bsmain.exe [A ] 49. c:\windows\system32\kknative.exe + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 50. c:\program files\microsoft office\office11\msohtmed.exe htmlfile\Print\Command [A ] 50. c:\program files\microsoft office\office11\msohtmed.exe + HKCR\.htm htmlfile\Edit\Command [A ] 50. c:\program files\microsoft office\office11\msohtmed.exe htmlfile\Print\Command [A ] 50. c:\program files\microsoft office\office11\msohtmed.exe + HKCR\.mp3 Audio.MP3\open\Command [A ] 51. c:\program files\ttplayer\ttplayer.exe Audio.MP3\PlayList\Command [A ] 51. c:\program files\ttplayer\ttplayer.exe + 程序初始化和已知动态连接库 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs [AM] 52. c:\windows\system32\kmon.dll
二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:

二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:	发表于： 2008-10-01 01:20 \| 只看楼主短消息资料字号：小中大 3楼回复：瑞星和一些第3方软件被删了 + 正在运行的进程 + 000001fc(508) knownsvr.exe 00400000[00072000] [ M] 53. c:\program files\rising\antispyware\knownsvr.exe 10000000[0002F000] [ M] 54. c:\program files\rising\antispyware\ncomm.dll 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 009A0000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 009D0000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll + 00000248(584) smss.exe + 00000294(660) csrss.exe + 000002b8(696) winlogon.exe 10000000[00021000] [AM] 24. c:\windows\system32\ati2evxx.dll 72C80000[00008000] [ M] 57. c:\windows\system32\msacm32.drv + 000002e4(740) services.exe 46040000[0000F000] [ M] 58. c:\windows\apppatch\acadproc.dll + 000002f0(752) lsass.exe + 00000380(896) svchost.exe + 000003d8(984) svchost.exe + 00000438(1080) CCenter.exe 00400000[0002A000] [AM] 3. c:\program files\rising\rav\ccenter.exe + 00000448(1096) svchost.exe + 00000480(1152) svchost.exe + 000004f4(1268) svchost.exe + 000005bc(1468) spoolsv.exe + 0000063c(1596) svchost.exe + 00000664(1636) wdfmgr.exe 01000000[0000C000] [AM] 6. c:\windows\system32\wdfmgr.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 00580000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll + 000006a8(1704) Explorer.EXE 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[0001C000] [AM] 39. c:\windows\system32\ravext.dll 02040000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll 72C80000[00008000] [ M] 57. c:\windows\system32\msacm32.drv + 0000070c(1804) VM_STI.EXE 00400000[00010000] [AM] 41. c:\windows\vm_sti.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[00037000] [ M] 59. c:\windows\system32\vm31bprp.ax + 0000071c(1820) yfdown.exe 00400000[00045000] [AM] 43. d:\联合证券\易发\bin\yfdown.exe 40000000[000C6000] [ M] 60. d:\联合证券\易发\bin\rtl70.bpl 00450000[00157000] [ M] 61. d:\联合证券\易发\bin\vcl70.bpl 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll + 00000724(1828) peer.exe 00400000[00359000] [AM] 44. c:\program files\gridservice\peer.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll + 00000730(1840) rstray.exe 00400000[00023000] [AM] 45. c:\program files\rising\antispyware\rstray.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[0003C000] [ M] 62. c:\program files\rising\antispyware\rsmginfo.dll 23800000[00022000] [ M] 63. c:\program files\rising\antispyware\rsxml.dll 7C3A0000[0007B000] [ M] 64. c:\program files\rising\antispyware\msvcp71.dll 7C340000[00056000] [ M] 65. c:\program files\rising\antispyware\msvcr71.dll 00B30000[00024000] [ M] 66. c:\program files\rising\antispyware\comserv.dll 00B60000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll 23700000[00026000] [ M] 67. c:\program files\rising\antispyware\rscommon.dll 00BA0000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 00E10000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll 23900000[00040000] [ M] 68. c:\program files\rising\antispyware\pngdll.dll 00FF0000[00061000] [ M] 69. c:\program files\rising\antispyware\runiep.dll 01060000[0002F000] [ M] 54. c:\program files\rising\antispyware\ncomm.dll 010B0000[0001F000] [ M] 70. c:\program files\rising\rav\proccom.dll 010D0000[00024000] [ M] 71. c:\program files\rising\rav\rscommx2.dll 02590000[0001C000] [AM] 39. c:\windows\system32\ravext.dll + 00000764(1892) ctfmon.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll + 000007e8(2024) Thunder5.exe 00400000[001CC000] [ M] 72. c:\program files\thunder network\thunder\program\thunder5.exe 22A90000[0000C000] [ M] 73. c:\program files\thunder network\thunder\program\bugreport.dll 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll 22CA0000[0003D000] [ M] 74. c:\program files\thunder network\thunder\program\taskmanager.dll 21880000[0003D000] [ M] 75. c:\program files\thunder network\thunder\program\download_interface.dll 21EA0000[00007000] [ M] 76. c:\program files\thunder network\thunder\program\mp.dll 7C3A0000[0007B000] [ M] 77. c:\windows\system32\msvcp71.dll 7C340000[00056000] [ M] 78. c:\windows\system32\msvcr71.dll 21440000[00064000] [ M] 79. c:\program files\thunder network\thunder\program\asyn_frame.dll 21530000[00019000] [ M] 80. c:\program files\thunder network\thunder\program\atl71.dll 21D70000[00028000] [ M] 81. c:\program files\thunder network\thunder\program\fs.dll 22D30000[0001E000] [ M] 82. c:\program files\thunder network\thunder\program\xlnet.dll 21840000[00011000] [ M] 83. c:\program files\thunder network\thunder\program\dl_peer_id.dll 22B70000[0002B000] [ M] 84. c:\program files\thunder network\thunder\program\itargetad.dll 21580000[0003E000] [ M] 85. c:\program files\thunder network\thunder\program\backend_agent.dll 22ED0000[00013000] [ M] 86. c:\program files\thunder network\thunder\program\zlib1.dll 223C0000[0009C000] [ M] 87. c:\program files\thunder network\thunder\program\ptl.dll 229E0000[0001C000] [ M] 88. c:\program files\thunder network\thunder\program\xl_stat.dll 22A70000[0000A000] [ M] 89. c:\program files\thunder network\thunder\program\bhostub.dll 23780000[00014000] [ M] 90. c:\program files\thunder network\thunder\components\downandplay\downandplay.dll 0E3C0000[0000D000] [AM] 33. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll 30000000[003AF000] [ M] 91. c:\windows\system32\macromed\flash\flash9f.ocx 72C80000[00008000] [ M] 57. c:\windows\system32\msacm32.drv 23BC0000[00017000] [ M] 92. c:\program files\thunder network\thunder\components\inmedia\iembedshell.dll 23B20000[0004B000] [ M] 93. c:\program files\thunder network\thunder\components\inmedia\iembed18.dll 23CA0000[00043000] [ M] 94. c:\program files\thunder network\thunder\components\inmedia\playerhelper.dll 23D70000[0000E000] [ M] 95. c:\program files\thunder network\thunder\components\inmedia\xlipc.dll 241A0000[0001E000] [ M] 96. c:\program files\thunder network\thunder\components\p4pclient\p4pclient.dll 23110000[00298000] [ M] 97. c:\program files\thunder network\thunder\components\community\xlcommunity.dll 22510000[00040000] [ M] 98. c:\program files\thunder network\thunder\program\registerdll.dll 22C60000[00011000] [ M] 99. c:\program files\thunder network\thunder\program\msvcirt.dll 22100000[0001D000] [ M] 100. c:\program files\thunder network\thunder\program\p2p_upload.dll 21EC0000[00086000] [ M] 101. c:\program files\thunder network\thunder\program\p2p.dll 227F0000[00061000] [ M] 102. c:\program files\thunder network\thunder\program\xldc.dll 225A0000[00119000] [ M] 103. c:\program files\thunder network\thunder\program\stream.dll 22150000[00111000] [ M] 104. c:\program files\thunder network\thunder\program\p2sp.dll 21900000[00041000] [ M] 105. c:\program files\thunder network\thunder\program\down_dispatcher.dll 21FE0000[00018000] [ M] 106. c:\program files\thunder network\thunder\program\p2p_local_res.dll 213B0000[0003D000] [ M] 107. c:\program files\thunder network\thunder\program\al.dll 22020000[00062000] [ M] 108. c:\program files\thunder network\thunder\program\p2p_network_com.dll 21DD0000[0005C000] [ M] 109. c:\program files\thunder network\thunder\program\imdt.dll 22390000[0000E000] [ M] 110. c:\program files\thunder network\thunder\program\p2sp_pd.dll 243D0000[0002C000] [ M] 111. c:\program files\thunder network\thunder\components\security\thundersafe.dll 24330000[0000C000] [ M] 112. c:\program files\thunder network\thunder\components\security\configmanager.dll 24360000[00016000] [ M] 113. c:\program files\thunder network\thunder\components\security\safemanager.dll 243B0000[0000A000] [ M] 114. c:\program files\thunder network\thunder\components\security\safestatistic.dll 22D80000[00020000] [ M] 115. c:\program files\thunder network\thunder\program\xlnetu.dll 21340000[0002F000] [ M] 116. c:\program files\thunder network\thunder\plugins\xlsafehost\xlsafehost.dll 210F0000[0011B000] [ M] 117. c:\program files\thunder network\thunder\plugins\xlsafehost\autohelp.dll 242D0000[00024000] [ M] 118. c:\program files\thunder network\thunder\components\search\xlsearch.dll 22BD0000[0003F000] [ M] 119. c:\program files\thunder network\thunder\program\liveupdate.dll 24550000[00053000] [ M] 120. c:\program files\thunder network\thunder\components\xlsoftbase\xlsoftwarebase.dll 210A0000[0000A000] [ M] 121. c:\program files\thunder network\thunder\plugins\gougoutop\gougoutop.dll 210D0000[0000A000] [ M] 122. c:\program files\thunder network\thunder\plugins\kankantop\kankantop.dll 23A80000[00010000] [ M] 123. c:\program files\thunder network\thunder\components\explorerhelper\explorerhelper.dll 119C0000[0001B000] [ M] 124. c:\program files\thunder network\thunder\comdlls\thunderagent_now.dll 11A30000[00031000] [AM] 27. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll 120B0000[0002C000] [AM] 26. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll 24430000[00037000] [ M] 125. c:\program files\thunder network\thunder\components\tips\tipsclient.dll 24500000[0001C000] [ M] 126. c:\program files\thunder network\thunder\components\vpshell\vpshell.dll 244D0000[0000B000] [ M] 127. c:\program files\thunder network\thunder\components\userexperience\userexperience.dll 24270000[0001F000] [ M] 128. c:\program files\thunder network\thunder\components\resworker\dsxlcom.dll 241F0000[0001E000] [ M] 129. c:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll 242B0000[00008000] [ M] 130. c:\program files\thunder network\thunder\components\resworker\mediaworker.dll 244B0000[0000E000] [ M] 131. c:\program files\thunder network\thunder\components\tips\xlipc.dll 11DB0000[00028000] [ M] 132. c:\program files\rising\rav\ravscrch.dll 23A40000[00011000] [ M] 133. c:\program files\thunder network\thunder\components\downloadstat\downloadstat.dll 21610000[00021000] [ M] 134. c:\program files\thunder network\thunder\program\bd.dll 23650000[00087000] [ M] 135. c:\program files\common files\thunder network\kankan\dapctrl.2.1.5805.77.(136).dll 23E70000[000DE000] [ M] 136. c:\program files\common files\thunder network\kankan\pplayer.2.1.5853.212.(136).dll 16AD0000[00138000] [ M] 137. c:\windows\system32\sogoupy.ime 143B0000[00042000] [ M] 138. c:\program files\sogouinput\plugin\sgimeword.dll 73200000[00031000] [ M] 139. c:\windows\system32\winwb86.ime 21D20000[0001F000] [ M] 140. c:\program files\thunder network\thunder\program\emule_id.dll + 00000874(2164) alg.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 00690000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll + 000008f8(2296) SoftManager.exe 00400000[000F6000] [ M] 141. c:\program files\360safe\softmgr\softmanager.exe 10000000[00024000] [ M] 142. c:\program files\360safe\softmgr\softwaremgr.dll 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 00A40000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll 00CA0000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 00CD0000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll 00D50000[00011000] [ M] 143. c:\program files\360safe\softmgr\360sfchk.dll + 00000ce0(3296) ras.exe 00400000[0000B000] [ M] 144. c:\program files\rising\antispyware\ras.exe 7C140000[00103000] [ M] 145. c:\program files\rising\antispyware\mfc71.dll 7C340000[00056000] [ M] 65. c:\program files\rising\antispyware\msvcr71.dll 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll 00AC0000[00047000] [ M] 146. c:\program files\rising\antispyware\kakamgr.dll 7C3A0000[0007B000] [ M] 64. c:\program files\rising\antispyware\msvcp71.dll 00A50000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll 00B20000[0001F000] [ M] 70. c:\program files\rising\rav\proccom.dll 00B40000[00024000] [ M] 71. c:\program files\rising\rav\rscommx2.dll 00C90000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 00F00000[00058000] [ M] 147. c:\program files\rising\antispyware\dbmgr.dll 23800000[00022000] [ M] 63. c:\program files\rising\antispyware\rsxml.dll 01060000[0002D000] [ M] 148. c:\program files\rising\antispyware\pweb.dll 01090000[000C1000] [ M] 149. c:\program files\rising\antispyware\pscan.dll 01160000[0002F000] [ M] 54. c:\program files\rising\antispyware\ncomm.dll 011B0000[00070000] [ M] 150. c:\program files\rising\antispyware\pset.dll 01240000[0002A000] [ M] 151. c:\program files\rising\antispyware\pdefend.dll 01270000[000B6000] [ M] 152. c:\program files\rising\antispyware\ptools.dll 01430000[0008C000] [ M] 153. c:\program files\rising\antispyware\psysinfo.dll 014E0000[0001C000] [AM] 39. c:\windows\system32\ravext.dll 23900000[00040000] [ M] 68. c:\program files\rising\antispyware\pngdll.dll 033D0000[00028000] [ M] 132. c:\program files\rising\rav\ravscrch.dll 30000000[003AF000] [ M] 91. c:\windows\system32\macromed\flash\flash9f.ocx 72C80000[00008000] [ M] 57. c:\windows\system32\msacm32.drv + 00000f24(3876) 360hotfix.exe 00400000[00077000] [ M] 154. c:\program files\360safe\360hotfix.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 00A00000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll 00B00000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll 36200000[0003D000] [ M] 155. c:\program files\360safe\leakcheck.dll 72C80000[00008000] [ M] 57. c:\windows\system32\msacm32.drv + 00000f3c(3900) conime.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 00910000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll 00A10000[00029000] [AM] 29. c:\program files\360safe\safemon\safemon.dll + 00000f68(3944) msiexec.exe 60000000[00074000] [AM] 52. c:\windows\system32\kmon.dll 10000000[0002E000] [ M] 55. c:\program files\rising\antispyware\comx3.dll 006A0000[00019000] [ M] 56. c:\program files\rising\antispyware\syslay.dll
二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:

海上涛头雪健康舞勺狮帖子:236 注册: 2008-04-01 来自:	发表于： 2008-10-01 06:33 \| 短消息资料字号：小中大 4楼回复：瑞星和一些第3方软件(中的应用软件) 被删了我只觉得conime.exe这个怎么会有？？
海上涛头雪健康舞勺狮帖子:236 注册: 2008-04-01 来自:

叶陵君锋芒艾服狮帖子:1561 注册: 2008-02-07 来自:	发表于： 2008-10-01 07:39 \| 短消息资料字号：小中大 5楼回复：瑞星和一些第3方软件(中的应用软件) 被删了到此http://bbs.ikaka.com/showtopic-8536393.aspx 下载SREng 日志扫描工具，重新上传一份日志。
叶陵君锋芒艾服狮帖子:1561 注册: 2008-02-07 来自:

二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:	发表于： 2008-10-01 08:28 \| 只看楼主短消息资料字号：小中大 6楼回复：瑞星和一些第3方软件(中的应用软件) 被删了下载后是个 attachment(1).aspx ASPX 文件回5楼的兄弟
二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:

aaccbbdd 卡卡巡查帖子:45933 注册: 2007-11-17 来自:蜀山仙剑派	发表于： 2008-10-01 09:25 \| 短消息资料字号：小中大 7楼回复 3F 二十一国的帖子先试试附件1 不行的话 SREng/智能扫描等扫描完成,保存日志(LOG格式) 放附件里附件: 文件名:sreng1018修改版.rar 下载次数:229 文件类型:application/octet-stream 文件大小: 上传时间:2008-10-1 9:26:21 描述:rar aaccbbdd 最后编辑于 2008-10-01 09:26:21
aaccbbdd 卡卡巡查帖子:45933 注册: 2007-11-17 来自:蜀山仙剑派

二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:	发表于： 2008-10-01 10:11 \| 只看楼主短消息资料字号：小中大 8楼回复：瑞星和一些第3方软件(中的应用软件) 被删了原来上因为用讯雷下载的原因(回上面兄弟) [CODE] 2008-10-01,10:09:45 System Repair Engineer 2.6.12.1018 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件进程特权扫描启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <BigDogPath><C:\WINDOWS\VM_STI.EXE Vimicro USB PC Camera (ZC0301PL)> [File is missing] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] <yfdown><D:\联合证券\易发\bin\yfdown.exe> [联合证券] <Grid Service><"C:\Program Files\GridService\peer.exe" -n Grid> [FS2YOU] <runeip><"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup> [(Verified)Beijing Rising Information Technology Corporation Limited] <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r> [(Verified)Qizhi Software (beijing) Co. Ltd] <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start> [(Verified)Qizhi Software (beijing) Co. Ltd] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <KKDelay><C:\Program Files\Rising\AntiSpyware\RunOnce.exe> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><kmon.dll> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing] ================================== 启动文件夹 N/A ================================== 服务 [Ati HotKey Poller / Ati HotKey Poller][Stopped/Disabled] <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.> [Contrl Center of Storm Media / ccosm][Stopped/Disabled] <C:\Program Files\StormII\stormliv.exe /asservice><北京暴风网际科技有限公司> [HID Input Service / HidServ][Stopped/Auto Start] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [letvp2p / letvp2p][Stopped/Manual Start] <C:\WINDOWS\System32\svchost.exe -k letvp2p-->C:\Program Files\Letv\P2P\commonxf.dll><N/A> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Information Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon][Stopped/Auto Start] <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Information Technology Co., Ltd.> ================================== 驱动程序 [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start] <system32\drivers\ac97intc.sys><Intel Corporation> [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [AmdK8 Compatible Device / AmdK8][Stopped/Manual Start] <System32\drivers\amdk8.sys><Advanced Micro Devices> [ati2mtag / ati2mtag][Running/Manual Start] <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.> [BdGuard / BdGuard][Stopped/Boot Start] <\SystemRoot\system32\drivers\BDGuard.SYS><N/A> [Dritek Keyboard Filter Driver / DKbFltr][Running/Manual Start] <system32\DRIVERS\DKbFltr.sys><Dritek System Inc.> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start] <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.> [VIA Rhine Family Fast Ethernet Adapter Driver Service / FETNDISB][Running/Manual Start] <system32\DRIVERS\fetnd5b.sys><VIA Technologies, Inc.> [HookCont / HookCont][Running/System Start] <\SystemRoot\system32\drivers\HookCont.sys><Beijing Rising Information Technology Co., Ltd.> [HookNtos / HookNtos][Running/System Start] <\SystemRoot\system32\drivers\HookNtos.sys><Beijing Rising Information Technology Co., Ltd.> [HookReg / HookReg][Running/System Start] <\SystemRoot\system32\drivers\HookReg.sys><Beijing Rising Information Technology Co., Ltd.> [HookSys / HookSys][Running/System Start] <\SystemRoot\system32\drivers\HookSys.sys><Beijing Rising Information Technology Co., Ltd.> [IlvMoneyDRIVER53 / IlvMoneyDRIVER53][Stopped/Manual Start] <\??\F:\M E1129+CT\M E1129\IlvMoney1129.sys><N/A> [nv / nv][Stopped/Manual Start] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Information Technology Co., Ltd.> [SafeBoxKrnl / SafeBoxKrnl][Running/System Start] <\??\C:\WINDOWS\system32\drivers\SafeBoxKrnl.sys><360安全中心> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.> [TesSafe / TesSafe][Stopped/Manual Start] <\??\C:\WINDOWS\system32\TesSafe.sys><TENCENT> [VIA AGP Filter / viaagp1][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.> [VIAMRAID / VIAMRAID][Running/Boot Start] <\SystemRoot\System32\Drivers\viamraid.sys><VIA Technologies inc,.ltd> [Vimicro USB PC Camera (ZC0301PL) / ZSMC301b][Running/Manual Start] <System32\Drivers\usbVM31b.sys><VM> [21968 / 21968][Running/] <2 - 系统找不到指定的文件。 ><N/A> ================================== 浏览器加载项 [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD> [BandIE Class] {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\baidubar.dll, (Signed) Baidu.com, Inc.> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD> [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.> [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, (Signed) 360.CN> [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD> [Zcom 杂志] {4045D313-1D5E-4fe4-93A0-A34630B6A00B} <C:\Zcom\E-Space.exe, 智通无限> [] {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A> [百度工具栏] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, (Signed) Baidu.com, Inc.> [PasswordEditCtrl Class] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, (Signed) 腾讯科技（深圳）有限公司> [] {00000AAA-A363-466E-BEF5-9BB68697AA7F} <, > [] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <, > [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD> [WebThunder Class] {03507A1A-E0C5-4404-AA26-205385C0892D} <, > [] {07A5BABA-6C77-4863-BD39-71962861753A} <, > [] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, > [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation> [] {2318C2B1-4965-11D4-9B18-009027A5CD4F} <, > [PhotoDraw Class] {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} <C:\Program Files\Tencent\Qzone\QQPhotoDraw.dll, (Signed) TENCENT> [] {2CACD7BB-1C59-4BBB-8E81-6E83F82C813B} <, > [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation> [] {2EEDA47E-8D5C-4d7e-B4B6-E16E19218555} <, > [] {4045D313-1D5E-4FE4-93A0-A34630B6A00B} <, > [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation> [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll, (Signed) Thunder Networking Technologies,LTD> [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, (Signed) Microsoft Corporation> [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A> [] {5CD4310E-88FB-43C1-BE24-5F3FA9C5C9D1} <, > [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_2_work, Xunlei Networking Technologies,LTD> [XDRM] {693571CB-54A3-4E90-9D52-EEAE1334E2D3} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work, > [StormPlayer Object] {6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB} <C:\Program Files\StormII\mps.dll, 北京暴风网际科技有限公司> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation> [CLetvP2pObj Object] {6E142BA4-D35D-4B45-A45C-87DC6F38FB74} <C:\Program Files\Letv\P2P\LetvP2p.dll, N/A> [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, (Signed) N/A> [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin17.dll, Thunder Networking Technologies,LTD> [BandIE Class] {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\baidubar.dll, (Signed) Baidu.com, Inc.> [360SafeLive] {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, (Signed) 360.cn> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, (Signed) Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD> [] {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} <, > [] {962EFB8E-2683-42D4-AC74-AAA4C759B9C6} <, > [ImageUploader Control] {97488D0C-D52F-4E0C-9B59-BCFCD3F7B390} <d:\MYDOCU~1\PHOTOU~1\PHOTOU~1.OCX, www.51.com> [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.> [] {AA58ED58-01DD-4D91-8333-CF10577473F7} <, > [] {AA9742E6-AB51-48A8-831C-C1EB757C3E61} <, > [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5805.77.(136).dll, ShenZhen Thunder Networking Technologies Ltd.> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, (Signed) Microsoft Corporation> [] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <, > [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A> [百度工具栏] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, (Signed) Baidu.com, Inc.> [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, (Signed) 360.CN> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, (Signed) Microsoft Corporation> [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, (Signed) Adobe Systems, Inc.> [] {E2E2DD38-D088-4134-82B7-F2BA38496583} <, > [PasswordEditCtrl Class] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, (Signed) 腾讯科技（深圳）有限公司> [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.5853.212.(136).dll, Xunlei Networking Technologies,LTD> [使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A> [使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> ==================================
二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:

二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:	发表于： 2008-10-01 10:11 \| 只看楼主短消息资料字号：小中大 9楼回复：瑞星和一些第3方软件(中的应用软件) 被删了正在运行的进程 [PID: 584 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 660 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 696 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)] [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4176] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 740 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 752 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)] [PID: 896 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 984 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 1084 / SYSTEM][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Information Technology Co., Ltd., 20.0.0.33] [PID: 1100 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 1152 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 1300 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 1512 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)] [PID: 1788 / Administrator][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 20.0.0.18] [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 2, 0, 1005] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.29] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 96] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 20] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 16] [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17] [C:\WINDOWS\system32\Audiodev.dll] [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)] [PID: 484 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 504 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31] [PID: 1580 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)] [PID: 1624 / Administrator][C:\WINDOWS\VM_STI.EXE] [Vimicro, 4, 2, 1124, 6] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\WINDOWS\system32\VM31bPrp.Ax] [Vimicro, 1.00.01.00] [PID: 1832 / Administrator][D:\联合证券\易发\bin\yfdown.exe] [联合证券, 1.0.0.725] [D:\联合证券\易发\bin\rtl70.bpl] [Borland Software Corporation, 7.0.4.453] [D:\联合证券\易发\bin\vcl70.bpl] [Borland Software Corporation, 7.0.4.453] [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 2, 0, 1005] [PID: 1856 / Administrator][C:\Program Files\GridService\peer.exe] [FS2YOU, 2, 1, 10, 8196] [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 2, 0, 1005] [PID: 1940 / Administrator][C:\Program Files\Rising\AntiSpyware\rstray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.16] [C:\Program Files\Rising\AntiSpyware\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 8] [C:\Program Files\Rising\AntiSpyware\RsXML.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2] [C:\Program Files\Rising\AntiSpyware\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\AntiSpyware\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\AntiSpyware\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.31] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\AntiSpyware\rscommon.dll] [Beijing Rising Information Technology Co., Ltd., 20.0.1.1] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 2, 0, 1005] [C:\Program Files\Rising\AntiSpyware\pngdll.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\runiep.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.39] [C:\Program Files\Rising\AntiSpyware\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.6] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 20.0.0.18] [PID: 2036 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 1824 / Administrator][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 2, 0, 1005] [C:\PROGRA~1\baidu\bar\baidubar.dll] [Baidu.com, Inc., 2, 0, 2, 179] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.29] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 96] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 20] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 16] [C:\WINDOWS\system32\UrlFilter.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15] [C:\Program Files\Rising\AntiSpyware\UrlRule.dll] [Beijing Rising Information Technology Co., Ltd., 1.0.0.15] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5] [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx] [Adobe Systems, Inc., 9,0,124,0] [C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xmvsource.dll_2_work] [XunLei, 1, 0, 0, 5] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 4, 23] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 20.0.0.18] [PID: 1648 / Administrator][C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.8.5.595] [C:\Program Files\Thunder Network\Thunder\Program\BugReport.dll] [Thunder Networking Technologies,LTD, 1, 4, 1, 20] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 2, 0, 1005] [C:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 3, 9, 71] [C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 3, 100, 2, 322] [C:\Program Files\Thunder Network\Thunder\Program\mp.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 2] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Thunder Network\Thunder\Program\asyn_frame.dll] [Thunder Networking Technologies,LTD, 1, 2, 2, 25] [C:\Program Files\Thunder Network\Thunder\Program\ATL71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Thunder Network\Thunder\Program\fs.dll] [Thunder Networking Technologies,LTD, 1, 1, 2, 12] [C:\Program Files\Thunder Network\Thunder\Program\XLNet.Dll] [Thunder Networking Technologies,LTD, 1, 5, 2, 25] [C:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 1, 1, 10] [C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DownAndPlay.dll] [, 1, 0, 12, 30] [C:\Program Files\Thunder Network\Thunder\Program\backend_agent.dll] [Thunder Networking Technologies,LTD, 1, 2, 2, 24] [C:\Program Files\Thunder Network\Thunder\Program\zlib1.dll] [, 1.2.3] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 35] [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx] [Adobe Systems, Inc., 9,0,124,0] [C:\Program Files\Thunder Network\Thunder\Program\ptl.dll] [Thunder Networking Technologies,LTD, 3,2,2,31] [C:\Program Files\Thunder Network\Thunder\Program\dl_peer_id.dll] [Thunder Networking Technologies,LTD, 3, 1, 2, 2] [C:\Program Files\Thunder Network\Thunder\Program\xl_stat.dll] [, 1, 1, 2, 6] [C:\Program Files\Thunder Network\Thunder\Program\p2p_upload.dll] [Thunder Networking Technologies,LTD, 1,2,2,12] [C:\Program Files\Thunder Network\Thunder\Program\p2p.dll] [Thunder Networking Technologies,LTD, 1,2,2,34] [C:\Program Files\Thunder Network\Thunder\Program\xldc.dll] [Thunder Networking Technologies,LTD, 2, 6, 2, 18] [C:\Program Files\Thunder Network\Thunder\Program\stream.dll] [Thunder Networking Technologies,LTD, 2, 1, 2, 399] [C:\Program Files\Thunder Network\Thunder\Program\p2sp.dll] [Thunder Networking Technologies,LTD, 1, 1, 2, 39] [C:\Program Files\Thunder Network\Thunder\Program\down_dispatcher.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 24] [C:\Program Files\Thunder Network\Thunder\Program\p2p_local_res.dll] [Thunder Networking Technologies,LTD, 1,2,2,16] [C:\Program Files\Thunder Network\Thunder\Program\al.dll] [Thunder Networking Technologies,LTD, 1,2,2,22] [C:\Program Files\Thunder Network\Thunder\Program\p2p_network_com.dll] [, 1, 0, 2, 25] [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL] [Microsoft Corporation, 11.0.8164] [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll] [　, 1, 0, 2, 26] [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed18.dll] [Thunder Networking Technologies,LTD, 3, 4, 9, 110] [C:\Program Files\Thunder Network\Thunder\Components\InMedia\PlayerHelper.dll] [thunder, 1, 2, 7, 61] [C:\Program Files\Thunder Network\Thunder\Components\InMedia\XLIPC.DLL] [Thunder Networking Technologies,LTD, 1, 0, 0, 2] [C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 2, 2, 5, 70] [C:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 2, 5, 0, 90] [C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 17, 0, 67] [C:\Program Files\Thunder Network\Thunder\Program\MSVCIRT.dll] [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder Network\Thunder\Program\imdt.dll] [Thunder Networking Technologies,LTD, 1.2.2.18] [C:\Program Files\Thunder Network\Thunder\Components\Security\ThunderSafe.dll] [深圳市迅雷网络技术有限公司, 2, 1, 3, 97] [C:\Program Files\Thunder Network\Thunder\Components\Security\ConfigManager.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 1] [C:\Program Files\Thunder Network\Thunder\Components\Security\SafeManager.dll] [Xunlei Networking Technologies,LTD, 1, 0, 5, 20] [C:\Program Files\Thunder Network\Thunder\Components\Security\SafeStatistic.dll] [Xunlei Networking Technologies,LTD, 1, 0, 0, 1] [C:\Program Files\Thunder Network\Thunder\Program\XLNetU.Dll] [Thunder Networking Technologies,LTD, 1, 5, 1, 24] [C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\XLSafeHost.dll] [深圳市迅雷网络技术有限公司, 1, 2, 5, 82] [C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\AutoHelp.dll] [Beijing Rising Technology Co., Ltd., 6.0.0.5] [C:\Program Files\Thunder Network\Thunder\Program\p2sp_pd.dll] [Thunder Networking Technologies,LTD, 1, 100, 2, 4] [C:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 1, 7, 25] [C:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll] [Thunder Networking Technologies,LTD, 1, 2, 4, 26] [C:\Program Files\Thunder Network\Thunder\Components\XLSoftBase\XLSoftwareBase.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 3] [C:\Program Files\Thunder Network\Thunder\Plugins\GouGouTop\GouGouTop.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 5] [C:\Program Files\Thunder Network\Thunder\Plugins\KanKanTop\KanKanTop.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 4] [C:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 19] [C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 4, 23] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 96] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.29] [C:\Program Files\Thunder Network\Thunder\Components\Tips\TipsClient.dll] [Thunder Networking Technologies,LTD, 2, 2, 14, 120] [C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll] [迅雷网络, 4, 0, 0, 38] [C:\Program Files\Thunder Network\Thunder\Components\UserExperience\UserExperience.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 5] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsXlCom.dll] [, 1, 0, 0, 30] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 16] [C:\Program Files\Thunder Network\Thunder\Components\ResWorker\MediaWorker.dll] [Thunder Networking Technologies,LTD, 1, 2, 0, 22] [C:\Program Files\Thunder Network\Thunder\Components\DownloadStat\DownloadStat.dll] [Thunder Networking Technologies,LTD, 1, 4, 1, 6] [C:\Program Files\Thunder Network\Thunder\Components\Tips\XLIPC.DLL] [Thunder Networking Technologies,LTD, 1, 0, 0, 2] [C:\Program Files\Thunder Network\Thunder\Program\bd.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 18] [PID: 1316 / Administrator][F:\新建文件夹\sre.EXE] [Small frogs Studio, 2.6.12.1018] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\360safe\safemon\safemon.dll] [360.CN, 4, 2, 0, 1005] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描特殊特权被允许： SeLoadDriverPrivilege [PID = 1648, C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\THUNDER5.EXE] ================================== API HOOK 入口点错误：NtCreateFile (危险等级: 高, 被下面模块所HOOK: 0x003C56DD) 入口点错误：NtCreateKey (危险等级: 高, 被下面模块所HOOK: 0x003C587D) 入口点错误：NtLoadDriver (危险等级: 高, 被下面模块所HOOK: 0x003C5FCD) 入口点错误：NtSetValueKey (危险等级: 高, 被下面模块所HOOK: 0x003C594D) 入口点错误：NtWriteFile (危险等级: 高, 被下面模块所HOOK: 0x003C57AD) 入口点错误：ZwCreateFile (危险等级: 高, 被下面模块所HOOK: 0x003C56DD) 入口点错误：ZwCreateKey (危险等级: 高, 被下面模块所HOOK: 0x003C587D) 入口点错误：ZwSetValueKey (危险等级: 高, 被下面模块所HOOK: 0x003C594D) 入口点错误：ZwWriteFile (危险等级: 高, 被下面模块所HOOK: 0x003C57AD) 入口点错误：CreateServiceA (危险等级: 高, 被下面模块所HOOK: 0x003C5C8D) 入口点错误：CreateServiceW (危险等级: 高, 被下面模块所HOOK: 0x003C5D5D) 入口点错误：LoadLibraryA (危险等级: 高, 被下面模块所HOOK: 0x003C698D) 入口点错误：LoadLibraryExW (危险等级: 高, 被下面模块所HOOK: 0x003C5575) 入口点错误：CreateFileW (危险等级: 高, 被下面模块所HOOK: 0x003C64AD) 入口点错误：CreateProcessA (危险等级: 高, 被下面模块所HOOK: 0x003C68BD) 入口点错误：CreateProcessW (危险等级: 高, 被下面模块所HOOK: 0x003C671D) ================================== 隐藏进程 N/A ================================== [/CODE]
二十一国初生襁褓狮帖子:6 注册: 2008-09-30 来自:

aaccbbdd 卡卡巡查帖子:45933 注册: 2007-11-17 来自:蜀山仙剑派	发表于： 2008-10-01 10:23 \| 短消息资料字号：小中大 10楼回复：瑞星和一些第3方软件(中的应用软件) 被删了病毒的头发丝都没看见根本没病毒的迹象到底到底什么情况？
aaccbbdd 卡卡巡查帖子:45933 注册: 2007-11-17 来自:蜀山仙剑派

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT