【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1 / 2 页

跳转页

【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-25 19:29 \| 显示全部短消息资料字号：小中大 1楼【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU 刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU资源，还在逐渐地增加，（没有启动IE浏览器），该进程位于C:\Program Files\Internet Explorer\IEXPLORE.EXE，正是IE浏览器程序的位置。但是当我启动一个IE浏览器时，进程里显示的却是iexplore.exe,位置一样，却是是小写的，而且进程的用户名也不一样，多个IEXPLORE.EXE的用户名是system,IE浏览器的iexplore.exe却是Administrator。请教大家，请问这是什么病毒啊，该怎样对付呢？ 2006-12-26 10:19:53
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	分享到：

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-26 08:31 \| 显示全部短消息资料字号：小中大 2楼卡卡助手的扫描结果 Logfile of Kaka v2. 0. 2. 6 Scan Module v1. 0. 3. 7 Scan saved at 08:21:30, on 2006-12-26 Platform: Microsoft Windows XP Professional Service Pack 2 (Build 2600) MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)) R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=%SystemRoot%\system32\blank.htm O1 - Hosts: 127.0.0.1 localhost O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\Program Files\Thunder\xunleibho_v13.dll O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\program\QQ2006\QQIEHelper.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll O2 - BHO: NavigatMon Class - {B69F34DD-F0F9-42DC-9EDD-957187DA688D} - D:\program\360safe\safemon\safemon.dll O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [bgswitch] C:\WINDOWS\system32\bgswitch.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [runeip] D:\program\ikaka\runiep.exe O4 - HKLM\..\Run: [OrderReminder] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe O4 - HKLM\..\Run: [regbak] "D:\ERUNT\autoback.exe" D:\regbak\#date# sysreg curuser /noconfirmdelete /days:10 O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [360Safetray] D:\program\360safe\safemon\360tray.exe O4 - Startup: desktop.ini = O4 - Global Startup: desktop.ini = O8 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder\geturl.htm O8 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder\getallurl.htm O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: 添加到QQ自定义面板 - D:\program\QQ2006\AddPanel.htm O8 - Extra context menu item: 添加到QQ表情 - D:\program\QQ2006\AddEmotion.htm O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\program\QQ2006\SendMMS.htm O9 - Extra Button: 微软 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.microsoft.com/china/index.htm (file missing) O9 - Extra Button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra Button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\program\QQ2006\QQ.EXE O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\program\QQ2006\QQ.EXE O9 - Extra Button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\program\QQ2006\QQIEHelper.dll O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\program\QQ2006\QQIEHelper.dll O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1106897910625 O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ipp - (no CLSID) - (no file) O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - Protocol: msdaipp - (no CLSID) - (no file) O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll O20 - Winlogon Notify: igfxcui O23 - Service: Human Interface Device Access (HidServ) - - C:\WINDOWS\system32\svchost.exe -k netsvcs O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - "C:\Program Files\McAfee\Common Framework\FrameworkService.exe" /ServiceStart O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - "C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe" O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - "C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe"
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:

初生襁褓狮

帖子:18
注册: 2005-11-22
来自:

发表于： 2006-12-26 08:41 | 显示全部 短消息资料

字号：小中大 3楼

引用:

【鸟儿天上飞的贴子】
请下载SREng2（最新版），使用“智能扫描”，按下“扫描”按钮进行扫描，
扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告
日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。

下载地址
http://www.kztechs.com/sreng/sreng2.zip

………………

[CODE]

2006-12-26,08:25:14

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
<bgswitch><C:\WINDOWS\system32\bgswitch.exe> [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SoundMan><SOUNDMAN.EXE> [(Verified)Realtek Semiconductor Corp.]
<IgfxTray><C:\WINDOWS\system32\igfxtray.exe> [(Verified)Intel Corporation]
<HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe> [(Verified)Intel Corporation]
<runeip><D:\program\ikaka\runiep.exe> [Beijing Rising Technology Co., Ltd.]
<OrderReminder><C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe> [Hewlett-Packard]
<regbak><"D:\ERUNT\autoback.exe" D:\regbak\#date# sysreg curuser /noconfirmdelete /days:10> [N/A]
<ShStatEXE><"C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE> [(Verified)McAfee, Inc.]
<McAfeeUpdaterUI><"C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey> [(Verified)McAfee, Inc.]
<360Safetray><D:\program\360safe\safemon\360tray.exe> [奇虎网]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<twin><C:\WINDOWS\system32\twunk32.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\system32\热带鱼~1.SCR> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><; > [N/A]
<PHIME2002A><; > [N/A]
<PHIME2002ASync><; > [N/A]
<RealTray><; C:\Program Files\Real\RealPlayer\Realplay.exe SYSTEMBOOTHIDEPLAYER> [N/A]

==================================
启动文件夹
N/A

==================================
服务
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[McAfee Framework Service / McAfeeFramework][Running/Auto Start]
<"C:\Program Files\McAfee\Common Framework\FrameworkService.exe" /ServiceStart><McAfee, Inc.>
[McAfee McShield / McShield][Running/Auto Start]
<"C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe"><McAfee, Inc.>
[McAfee Task Manager / McTaskManager][Running/Auto Start]
<"C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe"><McAfee, Inc.>
[Windows DHCP Service / WinDHCPsvc][Stopped/Auto Start]
<C:\WINDOWS\system32\rundll32.exe windhcp.ocx,start><Microsoft Corporation>

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-26 08:43 \| 显示全部短消息资料字号：小中大 4楼 ================================== 驱动程序 [a320raid / a320raid][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\a320raid.sys><Adaptec, Inc.> [AAC / AAC][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\AAC.SYS><Adaptec, Inc.> [aar1210 / aar1210][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\aar1210.sys><Adaptec, Inc.> [abp480n5 / abp480n5][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\abp480n5.sys><Microsoft Corporation> [adpu160m / adpu160m][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\adpu160m.sys><Microsoft Corporation> [adpu320 / adpu320][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\adpu320.sys><Adaptec, Inc.> [ACARD AEC6210UF UltraDMA33 Controller / aec6210][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\aec6210.sys><ACARD Technology Corp.> [ACARD AEC6260 UltraDMA-66 Controller / aec6260][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\aec6260.sys><ACARD Technology Corp.> [aec6280 / aec6280][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\aec6280.sys><ACARD Technology Corp.> [AEC6290 / AEC6290][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\AEC6290.SYS><ACARD Technology Corp.> [AEC67160 / AEC67160][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\AEC67160.SYS><ACARD Technology Corp.> [AEC671X / AEC671X][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\AEC671X.SYS><ACARD Technology Corp.> [AEC6880 / AEC6880][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\AEC6880.SYS><ACARD Technology Corp.> [AEC6890 / AEC6890][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\AEC6890.sys><ACARD Technology Corp.> [aec68x5 / aec68x5][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\aec68x5.sys><ACARD Technology Corp.> [Aha154x / Aha154x][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\aha154x.sys><Microsoft Corporation> [aic78u2 / aic78u2][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\aic78u2.sys><Microsoft Corporation> [aic78xx / aic78xx][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\aic78xx.sys><Microsoft Corporation> [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [ALi Based Ethernet NT Driver / ALI5261][Stopped/Manual Start] <system32\DRIVERS\ALI5261.SYS><Acer Laboratories Inc.> [AliIde / AliIde][Running/Boot Start] <\SystemRoot\System32\DRIVERS\aliide.sys><Acer Laboratories Inc.> [AMD K8 Processor Driver / AmdK8][Stopped/Manual Start] <System32\DRIVERS\amdk8.sys><Microsoft Corporation> [arc / arc][Stopped/Boot Start] <\SystemRoot\system32\drivers\arc.sys><Adaptec, Inc.> [asc / asc][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\asc.sys><Advanced System Products, Inc.> [asc3550 / asc3550][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\asc3550.sys><Advanced System Products, Inc.> [CmdIde / CmdIde][Running/Boot Start] <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.> [dac2w2k / dac2w2k][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\dac2w2k.sys><Mylex Corporation> [dpti2o / dpti2o][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\dpti2o.sys><Microsoft Corporation> [elxstor / elxstor][Stopped/Boot Start] <\SystemRoot\system32\drivers\elxstor.sys><Emulex> [FASTSX / FASTSX][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\FASTSX.SYS><Promise Technology, Inc.> [fasttrak / fasttrak][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\fasttrak.sys><Promise Technology, Inc.> [fasttx2k / fasttx2k][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\fasttx2k.sys><Promise Technology, Inc.> [fasttx2k2 / fasttx2k2][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\fasttx2k2.sys><Promise Technology, Inc.> [HpCISSs / HpCISSs][Stopped/Boot Start] <\SystemRoot\system32\drivers\hpcisss.sys><Hewlett-Packard Company> [Hpt366 / Hpt366][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\Hpt366.sys><Microsoft Corporation> [HPT371 / HPT371][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\HPT371.sys><HighPoint Technologies, Inc.> [hpt374 / hpt374][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\hpt374.sys><HighPoint Technologies, Inc.> [hpt3xx / hpt3xx][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\hpt3xx.sys><HighPoint Technologies, Inc.> [hptmv / hptmv][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\hptmv.sys><HighPoint Technologies, Inc.> [hptpro / hptpro][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\hptpro.sys><HighPoint Technologies, Inc.> [ialm / ialm][Running/Manual Start] <system32\DRIVERS\ialmnt5.sys><Intel Corporation> [Intel Integrated RAID / iaStor][Stopped/Boot Start] <\SystemRoot\system32\drivers\iaStor.sys><Intel Corporation> [iirsp / iirsp][Stopped/Boot Start] <\SystemRoot\system32\drivers\iirsp.sys><Intel Corp./ICP vortex GmbH> [ini910u / ini910u][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\ini910u.sys><Microsoft Corporation> [IntelIde / IntelIde][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\intelide.sys><N/A> [ITERAID_Service_Install / iteraid][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\iteraid.sys><Integrated Technology Express, Inc.> [Kl1 / Kl1][Running/Boot Start] <\SystemRoot\System32\drivers\kl1.sys><Kaspersky Lab> [Klif / Klif][Running/System Start] <System32\drivers\klif.sys><Kaspersky Labs> [Klmc / Klmc][Running/System Start] <System32\drivers\klmc.sys><Kaspersky Lab> [LSI_FC / LSI_FC][Stopped/Boot Start] <\SystemRoot\system32\drivers\lsi_fc.sys><LSI Logic> [LSI_SAS / LSI_SAS][Stopped/Boot Start] <\SystemRoot\system32\drivers\lsi_sas.sys><LSI Logic> [LSI_SCSI / LSI_SCSI][Stopped/Boot Start] <\SystemRoot\system32\drivers\lsi_scsi.sys><LSI Logic> [m5228 / m5228][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\m5228.sys><ALi Corporation.> [m5281 / m5281][Stopped/Boot Start] <\SystemRoot\system32\drivers\m5281.sys><ALi Corporation>
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-26 08:44 \| 显示全部短消息资料字号：小中大 5楼 [MegaIDE / MegaIDE][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.> [megasas / megasas][Stopped/Boot Start] <\SystemRoot\system32\drivers\megasas.sys><LSI Logic Corporation> [McAfee Inc. / mfeapfk][Running/Manual Start] <system32\drivers\mfeapfk.sys><McAfee, Inc.> [McAfee Inc. / mfeavfk][Running/Manual Start] <system32\drivers\mfeavfk.sys><McAfee, Inc.> [McAfee Inc. / mfebopk][Running/Manual Start] <system32\drivers\mfebopk.sys><McAfee, Inc.> [McAfee Inc. / mfehidk][Running/Manual Start] <system32\drivers\mfehidk.sys><McAfee, Inc.> [VSCore mferkdk / mferkdk][Running/System Start] <\??\C:\Program Files\McAfee\VirusScan Enterprise\mferkdk.sys><McAfee, Inc.> [McAfee Inc. / mfetdik][Running/System Start] <system32\drivers\mfetdik.sys><McAfee, Inc.> [mraid2k / mraid2k][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\mraid2k.sys><American Megatrends, Inc.> [mraid35x / mraid35x][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\mraid35x.sys><American Megatrends Inc.> [nfrd960 / nfrd960][Stopped/Boot Start] <\SystemRoot\system32\drivers\nfrd960.sys><IBM Corporation> [npkcrypt / npkcrypt][Running/Auto Start] <\??\D:\program\QQ2006\npkcrypt.sys><INCA Internet Co., Ltd.> [nv / nv][Stopped/Manual Start] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Intel SCSI Controller / NvAtaBus][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\NVATABUS.SYS><NVIDIA Corporation> [NVIDIA nForce(tm) RAID Class Driver / nvraid][Stopped/Boot Start] <\SystemRoot\system32\DRIVERS\nvraid.sys><NVIDIA Corporation> [PNP649R / PNP649R][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\PNP649R.SYS><CMD Technology, Inc.> [SiI 680 ATA Controller / Pnp680][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\pnp680.sys><Silicon Image, Inc.> [Silicon Image SiI 0680 Medley Raid Controller / Pnp680r][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\pnp680r.sys><Silicon Image, Inc> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [ql1080 / ql1080][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\ql1080.sys><QLogic Corporation> [Ql10wnt / Ql10wnt][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\ql10wnt.sys><Microsoft Corporation> [ql12160 / ql12160][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\ql12160.sys><QLogic Corporation> [ql1280 / ql1280][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\ql1280.sys><QLogic Corporation> [QLogic Fibre Channel SCSI Miniport Driver / ql2300][Stopped/Boot Start] <\SystemRoot\system32\drivers\ql2300.sys><QLogic Corporation> [RAIDSRC / RAIDSRC][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\RAIDSRC.SYS><Intel/ICP> [Realtek 10/100/1000 NIC Family all in one NDIS XP Driver / RTL8023xp][Running/Manual Start] <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation> [S150SX8 / S150SX8][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\S150SX8.SYS><Promise Technology, Inc.> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [SiI-3512 SATALink Controller / SI3112][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SI3112.sys><Silicon Image, Inc.> [Silicon Image SiI 3512 SATARaid Controller / SI3112r][Stopped/Boot Start] <\SystemRoot\system32\drivers\SI3112r.sys><Silicon Image, Inc> [SiI-3114 SATALink Controller / SI3114][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SI3114.sys><Silicon Image, Inc.> [SiI-3114 SATARaid Controller / SI3114r][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SI3114R.sys><Silicon Image, Inc> [SiI-3124 SATALink Controller / SI3124][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SI3124.sys><Silicon Image, Inc.> [SiI-3124 SATARaid Controller / SI3124r][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SI3124R.sys><Silicon Image, Inc> [SATALink driver accelerator / SiFilter][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SiWinAcc.sys><Silicon Image, Inc.> [SISIDE / SISIDE][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SISIDE.SYS><Silicon Integrated Systems Corp.> [SiSRaid / SiSRaid][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SiSRaid.sys><Silicon Integrated Systems> [SiSRaid1 / SiSRaid1][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SiSRaid1.sys><Silicon Integrated Systems> [SISRAIDS / SISRAIDS][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SISRAIDS.SYS><Silicon Integrated Systems Corp> [Sparrow / Sparrow][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\sparrow.sys><Adaptec, Inc.> [sptrak / sptrak][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\sptrak.sys><Promise Technology, Inc.> [symc810 / symc810][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\symc810.sys><Symbios Logic Inc.> [symc8xx / symc8xx][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\symc8xx.sys><LSI Logic> [SYMMPI / SYMMPI][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\SYMMPI.SYS><LSI Logic> [sym_hi / sym_hi][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\sym_hi.sys><LSI Logic> [sym_u3 / sym_u3][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\sym_u3.sys><LSI Logic> [TCP/IP Protocol Driver / Tcpip][Running/System Start] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> [TosIde / TosIde][Running/Boot Start] <\SystemRoot\System32\DRIVERS\toside.sys><Microsoft Corporation> [TSP / TSP][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Labs> [UlSata / UlSata][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\ulsata.sys><Promise Technology, Inc.> [ULSATAS / ULSATAS][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\ULSATAS.SYS><Promise Technology, Inc.> [ultra / ultra][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\ultra.sys><Promise Technology, Inc.> [ViaIde / ViaIde][Running/Boot Start] <\SystemRoot\System32\DRIVERS\viaide.sys><Microsoft Corporation> [viamraid / viamraid][Stopped/Boot Start] <\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd> [VIA ATA/ATAPI Host Controller / viapdsk][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\viapdsk.sys><VIA Technologies, Inc.> [viaraid / viaraid][Stopped/Boot Start] <\SystemRoot\System32\DRIVERS\viaraid.sys><VIA Technologies inc,.ltd> [viasraid / viasraid][Stopped/Boot Start] <\SystemRoot\system32\drivers\viasraid.sys><VIA Technologies inc,.ltd> [vmscsi / vmscsi][Stopped/Boot Start] <\SystemRoot\system32\drivers\vmscsi.sys><VMware, Inc.> [XPROTECTOR / XPROTECTOR][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\Xprotector.sys><N/A>
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-26 08:45 \| 显示全部短消息资料字号：小中大 6楼浏览器加载项 [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\Program Files\Thunder\xunleibho_v13.dll, Thunder Networking Technologies,LTD> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\program\QQ2006\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [scriptproxy] {7DB2D5A0-7241-4E79-B68D-6309F01C5231} <C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll, McAfee, Inc.> [NavigatMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\program\360safe\safemon\safemon.dll, N/A> [微软] {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.microsoft.com/china/index.htm, N/A> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\program\QQ2006\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\program\QQ2006\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\Program Files\Thunder\xunleibho_v13.dll, Thunder Networking Technologies,LTD> [Windows Genuine Advantage] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.dll, Microsoft? Corporation> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\program\QQ2006\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation> [scriptproxy] {7DB2D5A0-7241-4E79-B68D-6309F01C5231} <C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll, McAfee, Inc.> [卡卡上网安全助手] {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [NavigatMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\program\360safe\safemon\safemon.dll, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.> [卡卡上网安全助手] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.> [使用迅雷下载] <C:\Program Files\Thunder\geturl.htm, N/A> [使用迅雷下载全部链接] <C:\Program Files\Thunder\getallurl.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <D:\program\QQ2006\AddPanel.htm, N/A> [添加到QQ表情] <D:\program\QQ2006\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\program\QQ2006\SendMMS.htm, N/A>
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-26 08:46 \| 显示全部短消息资料字号：小中大 7楼 ================================== 正在运行的进程 [PID: 552][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 608][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 632][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 676][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 688][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 852][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 916][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1008][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1112][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1184][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1560][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\ZLhp1020.DLL] [Zenographics, Inc., 5, 53, 3723, 0] [C:\WINDOWS\system32\ZLM.dll] [Zenographics, Inc., 5, 50, 1416, 0] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\IMFPrint.DLL] [Zenographics, Inc., 5, 54, 330, 0] [C:\WINDOWS\system32\Imf32.dll] [Zenographics, Inc., 5, 60, 1204, 0] [C:\WINDOWS\system32\ZTAG32.dll] [Zenographics, Inc., 5, 60, 1210, 0] [C:\WINDOWS\system32\ZSPOOL.dll] [Zenographics, Inc., 5, 51, 709, 0] [PID: 160][C:\Program Files\McAfee\Common Framework\FrameworkService.exe] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\nailog.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\naXML71.dll] [N/A, N/A] [C:\Program Files\McAfee\Common Framework\NaiSign.DLL] [N/A, N/A] [C:\WINDOWS\system32\epoPGPSDK.dll] [PGP Corporation, 3.5.3] [C:\Program Files\McAfee\Common Framework\naCmnLib71.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\applib.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\0409\AgentRes.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\Logging.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\InternetManager.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\naInet.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\UserSpace.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\SecureFrameworkFactory.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\Management.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\cmalib.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\naPolicyManager.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\ScriptSubSys.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\UpdateSubSys.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\Scheduler.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\TCSubSys.dll] [McAfee, Inc., 3.6.0.453] [PID: 296][C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mytilus.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mytilus2.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\RES0402\McShield.dll] [McAfee, Inc., VSCORE.13.3.1.100] [C:\Program Files\McAfee\VirusScan Enterprise\FTL.Dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\naiann.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\VsEvntUI.dll] [N/A, N/A] [C:\Program Files\McAfee\VirusScan Enterprise\NAEvent.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\Common Framework\GenEvtInf.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\SecureFrameworkFactory.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\VirusScan Enterprise\scriptsv.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mfebopa.dll] [McAfee, Inc., SYSCORE.13.3.0.116.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mfehida.dll] [McAfee, Inc., SYSCORE.13.3.0.116.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mfeapfa.dll] [McAfee, Inc., SYSCORE.13.3.0.116.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mfeavfa.dll] [McAfee, Inc., SYSCORE.13.3.0.116.x86] [C:\Program Files\Common Files\McAfee\Engine\mcscan32.dll] [McAfee, Inc., 5.1.00] [PID: 452][C:\Program Files\McAfee\Common Framework\naPrdMgr.exe] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\NaiSign.DLL] [N/A, N/A] [C:\WINDOWS\system32\epoPGPSDK.dll] [PGP Corporation, 3.5.3] [C:\Program Files\McAfee\Common Framework\naXML71.dll] [N/A, N/A] [C:\Program Files\McAfee\Common Framework\nailog.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\naCmnLib71.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\applib.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\0409\AgentRes.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\VirusScan Enterprise\VsPlugin.dll] [McAfee, Inc., 8.5.0.781] [PID: 344][C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mytilus2.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mytilus.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\condl.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\RES0402\McShield.dll] [McAfee, Inc., VSCORE.13.3.1.100] [C:\Program Files\McAfee\VirusScan Enterprise\MIDUtil.Dll] [McAfee, Inc., 8.5.0.148] [PID: 332][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [PID: 1308][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2260][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [C:\Program Files\McAfee\Common Framework\JrMac.dll] [McAfee, Inc., 1.0.0.125] [C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\WINDOWS\system32\igfxpph.dll] [Intel Corporation, 3.0.0.4342] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4342] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\Program Files\McAfee\VirusScan Enterprise\shext.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\Picaview\PicaView.dll] [ACD Systems, Ltd., 2, 0, 0, 84] [C:\Program Files\Picaview\IDE_ACDStd.apl] [ACD Systems, Ltd., 3,2,62,0] [PID: 2384][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 48] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [PID: 2424][C:\WINDOWS\system32\igfxtray.exe] [Intel Corporation, 3.0.0.4342] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4342] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.4342] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4342] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4342] [C:\WINDOWS\system32\igfxress.dll] [Intel Corporation, 3.0.0.4342] [PID: 2440][C:\WINDOWS\system32\hkcmd.exe] [Intel Corporation, 3.0.0.4342]
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-26 08:46 \| 显示全部短消息资料字号：小中大 8楼 [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4342] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.4342] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4342] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\WINDOWS\system32\igfxhk.dll] [Intel Corporation, 3.0.0.4342] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4342] [PID: 2448][D:\program\ikaka\runiep.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 1, 3] [D:\program\ikaka\iep_ctrl.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [PID: 2476][C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe] [Hewlett-Packard, 2, 0, 1, 26] [PID: 1140][C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\ftcfg.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\mytilus2.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\mytilus.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll] [McAfee, Inc., 8.5.0.781] [C:\Program Files\McAfee\VirusScan Enterprise\RES0402\McShield.dll] [McAfee, Inc., VSCORE.13.3.1.100] [C:\Program Files\McAfee\VirusScan Enterprise\Graphics.dll] [McAfee, Inc., 8.5.0.781] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2452][C:\Program Files\McAfee\Common Framework\UdaterUI.exe] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\nailog.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\naCmnLib71.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\naXML71.dll] [N/A, N/A] [C:\Program Files\McAfee\Common Framework\NaiSign.DLL] [N/A, N/A] [C:\WINDOWS\system32\epoPGPSDK.dll] [PGP Corporation, 3.5.3] [C:\Program Files\McAfee\Common Framework\applib.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\cmalib.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\0409\UpdRes.dll] [McAfee, Inc., 3.6.0.453] [C:\Program Files\McAfee\Common Framework\0409\AgentRes.dll] [McAfee, Inc., 3.6.0.453] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [C:\Program Files\McAfee\Common Framework\SecureFrameworkFactory.dll] [McAfee, Inc., 3.6.0.453] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2568][D:\program\360safe\safemon\360tray.exe] [奇虎网, 1, 0, 0, 1001] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [D:\program\360safe\safemon\SafeKrnl.dll] [奇虎网, 1, 0, 0, 1001] [D:\program\360safe\AntiAdwa.dll] [360Safe.com, 2, 2, 1, 1000] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 3048][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 3816][C:\Program Files\McAfee\Common Framework\McTray.exe] [McAfee, Inc., 1.0.0.125] [C:\Program Files\McAfee\Common Framework\JrMac.dll] [McAfee, Inc., 1.0.0.125] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2372][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\kakatool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 2, 6] [C:\Program Files\Thunder\xunleibho_v13.dll] [Thunder Networking Technologies,LTD, 4, 6, 0, 48] [D:\program\QQ2006\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [PID: 3728][D:\program\ikaka\Ras.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 3, 7] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [D:\program\ikaka\RasGui.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 19] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 1320][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\kakatool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 2, 6] [C:\Program Files\Thunder\xunleibho_v13.dll] [Thunder Networking Technologies,LTD, 4, 6, 0, 48] [D:\program\QQ2006\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] [Macromedia, Inc., 8,0,0,434] [PID: 2800][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\kakatool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 2, 6] [C:\Program Files\Thunder\xunleibho_v13.dll] [Thunder Networking Technologies,LTD, 4, 6, 0, 48] [D:\program\QQ2006\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] [Macromedia, Inc., 8,0,0,434] [PID: 4044][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [C:\WINDOWS\system32\kakatool.dll] [Beijing Rising Technology Co., Ltd., 2, 0, 2, 6] [C:\Program Files\Thunder\xunleibho_v13.dll] [Thunder Networking Technologies,LTD, 4, 6, 0, 48] [D:\program\QQ2006\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll] [McAfee, Inc., VSCORE.13.3.1.100.x86] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] [Macromedia, Inc., 8,0,0,434] [PID: 2020][C:\WINDOWS\system32\notepad.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 3924][C:\Program Files\Thunder\Thunder.exe] [Thunder Networking Technologies,LTD, 5.1.2.166] [C:\Program Files\Thunder\UpdateDownload.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 2] [C:\Program Files\Thunder\download_interface.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 57] [C:\Program Files\Thunder\log4cplus.dll] [, 1, 0, 2, 1] [C:\Program Files\Thunder\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [C:\Program Files\Thunder\msgmanage.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13] [C:\Program Files\Thunder\historyinfo_manage.dll] [Thunder Networking Technologies,LTD, 5, 2, 0, 148] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [C:\Program Files\Thunder\iEmbed.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 14] [C:\Program Files\Thunder\RegisterDll.dll] [Thunder Networking Technologies,LTD, 1, 2, 0, 6] [C:\Program Files\Thunder\FloatBar.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 2] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 4092][F:\soft\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690] [D:\program\360safe\safemon\safemon.dll] [N/A, 1, 0, 0, 1001] [D:\program\ikaka\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-26 08:46 \| 显示全部短消息资料字号：小中大 9楼文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf [E:\] [AutoRun] open=folder.exe ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK 警告！System Repair Engineer 提醒你下面的函数内容与预期值不符，他们可能被一些恶意的软件所修改： RVA 错误： LoadLibraryA RVA 错误： LoadLibraryExA RVA 错误： LoadLibraryExW RVA 错误： LoadLibraryW 入口点错误：CreateProcessA 入口点错误：CreateProcessW ================================== [/CODE]
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-26 08:47 \| 显示全部短消息资料字号：小中大 10楼发完了
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:

<<上一主题|下一主题>>

1 / 2 页

跳转页

Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	发表于： 2006-12-25 19:29 \| 显示全部短消息资料字号：小中大 1楼【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU 刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU资源，还在逐渐地增加，（没有启动IE浏览器），该进程位于C:\Program Files\Internet Explorer\IEXPLORE.EXE，正是IE浏览器程序的位置。但是当我启动一个IE浏览器时，进程里显示的却是iexplore.exe,位置一样，却是是小写的，而且进程的用户名也不一样，多个IEXPLORE.EXE的用户名是system,IE浏览器的iexplore.exe却是Administrator。请教大家，请问这是什么病毒啊，该怎样对付呢？ 2006-12-26 10:19:53
Skwalker 初生襁褓狮帖子:18 注册: 2005-11-22 来自:	分享到：

瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU

【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU

【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU

瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛【以上log】刚开机就出现多个IEXPLORE.EXE进程，占用很高CPU