进程中有两个lsass、smss病毒的扫描结果1 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛进程中有两个lsass、smss病毒的扫描结果1

	瑞星ESM助力北京石龙医院筑牢安全防线		瑞星恶意代码管理系统助金华电力提升防御能力		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		助力国家网络安全瑞星获病毒应急处理中心感谢信
	实力拉满瑞星第四十四次通过VB100测评		瑞星发布2024年六大网络安全趋势		瑞星携手中国农业大学共筑网络安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

进程中有两个lsass、smss病毒的扫描结果1

xuhang 初生襁褓狮帖子:14 注册: 2007-01-31 来自:	发表于： 2007-01-31 20:48 \| 只看楼主短消息资料字号：小中大 1楼进程中有两个lsass、smss病毒的扫描结果1 [CODE] 2007-01-31,20:35:35 System Repair Engineer 2.3.13.690 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <LHotkey><LHotkey.exe> [(Verified)Chicony] <Lcc><C:\Program Files\Lenovo\联想键盘驱动\LCC.exe> [N/A] <模式转换><C:\Program Files\联想\模式转换\QuakeII.exe> [联想] <SysExplr><C:\Herosoft\HeroV8\SYSEXPLR.EXE> [N/A] <RavTimer><C:\Program Files\Rising\Rav\RavTimer.exe> [Beijing Rising Technology Co., Ltd.] <RavMon><C:\Program Files\Rising\Rav\RavMon.exe -system> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <ATIPTA><; C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe> [ATI Technologies, Inc.] <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh] <SoundMan><; SOUNDMAN.EXE> [(Verified)Realtek Semiconductor Corp.] <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] ================================== 启动文件夹 [VIA RAID TOOL] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\VIA RAID TOOL.lnk --> C:\PROGRA~1\VIA\RAID\RAID_T~1.EXE [VIA Technologies]><N> [腾讯QQ] <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\腾讯QQ.lnk --> C:\PROGRA~1\Tencent\QQ\QQ.exe [TENCENT]><N> ================================== 服务 [AMD PowerNow! (tm) Technology Service / GemServ][Running/Auto Start] <C:\Program Files\AMD\Cool'n'Quiet\GemServ.exe><Advanced Micro Devices> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><rising> [RsRavMon Service / RsRavMon][Running/Auto Start] <C:\PROGRAM FILES\RISING\RAV\Ravmond.exe><Beijing Rising Technology Co., Ltd.> ================================== 驱动程序 [Service for WDM 3D Audio Driver / ALCXSENS][Running/Manual Start] <system32\drivers\ALCXSENS.SYS><Sensaura> [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [ati2mtag / ati2mtag][Running/Manual Start] <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.> [BaseTDI / BaseTDI][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\basetdi.sys><Rising> [Rising Exploit Scaner 1.0 / ExpScaner][Running/Manual Start] <\??\C:\PROGRAM FILES\RISING\RAV\ExpScan.sys><N/A> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Running/Manual Start] <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.> [AMD PowerNow! (tm) Technology / gemwdm][Running/System Start] <system32\DRIVERS\gemwdm.sys><Advanced Micro Devices> [HOOKAPI / HOOKAPI][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookApi.Sys><瑞星软件有限公司> [HookCont / HookCont][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HOOKCONT.sys><Rising tech Co. ltd> [HookReg / HookReg][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\HOOKREG.sys><> [HookSys / HookSys][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\hooksys.sys><瑞星> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\C:\PROGRAM FILES\RISING\RAV\MEMSCAN.SYS><瑞星软件有限公司> [npkcrypt / npkcrypt][Running/Auto Start] <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [TCP/IP Protocol Driver / Tcpip][Running/System Start] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [VIA AGP Filter / viaagp1][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation> [viamraid / viamraid][Running/Boot Start] <\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd> [PNDIO / PNDIO][Running/Manual Start] <\??\C:\Program Files\联想\模式转换\pndio.sys><N/A> ================================== 浏览器加载项 [Thunder Browser Helper] {54EBD539-9BC1-480B-966A-843A333CA162} <E:\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [百度搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\WINDOWS\DOWNLO~1\BaiDuBar.dll, > [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <E:\Thunder\Thunder.exe, Thunder Networking Technologies,LTD> [豪杰超级解霸V8] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, N/A> [联想] {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.lenovo.com, N/A> [网际飞音] {8E4E4123-AAC7-42CA-AF1B-68CE70B8D385} <C:\Program Files\Donor\donor.exe, km169> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [百度搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\WINDOWS\DOWNLO~1\BaiDuBar.dll, > [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\Flash7.ocx, Macromedia, Inc.> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation> [Thunder Browser Helper] {54EBD539-9BC1-480B-966A-843A333CA162} <E:\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <E:\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD> [百度搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\WINDOWS\DOWNLO~1\BaiDuBar.dll, > [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\Flash7.ocx, Macromedia, Inc.> [&使用迅雷下载] <E:\Thunder\Program\geturl.htm, N/A> [&使用迅雷下载全部链接] <E:\Thunder\Program\getallurl.htm, N/A> [上传到QQ网络硬盘] <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A> [百度Flash搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/FLASHSEARCH.HTM, N/A> [百度mp3搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUMP3.HTM, N/A> [百度信息快递搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUIE.HTM, N/A> [百度图片搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUIMG.HTM, N/A> [百度搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUSEARCH.HTM, N/A> [百度新闻搜索] <res://C:\WINDOWS\DOWNLO~1\BaiDuBar.dll/BAIDUNEWS.HTM, N/A> [豪杰超级解霸V8实时播放] <C:\Herosoft\HeroV8\MPURLGET.HTM, N/A> 2007-01-31 20:48:27.607000000
xuhang 初生襁褓狮帖子:14 注册: 2007-01-31 来自:	分享到：

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT