中了trojan.spy.vidro.b病毒怎么办？？ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛中了trojan.spy.vidro.b病毒怎么办？？

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

2 / 2 页

跳转页

中了trojan.spy.vidro.b病毒怎么办？？

阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:	发表于： 2006-03-24 16:00 \| 显示全部短消息资料字号：小中大 11楼 [PID: 1508][C:\WINDOWS\System32\Rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 4> [C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 5> [C:\WINDOWS\downlo~1\CnsMinEx.dll] <国风因特软件(北京)有限公司><1, 0, 3, 0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1684][D:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1784][d:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 48> [d:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [d:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [d:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [PID: 1816][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 1864][C:\WINDOWS\System32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.5303> [PID: 1904][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1956][C:\WINDOWS\System32\DRIVERS\WtSrv.exe] <Tablet Driver><4.03.02> [C:\WINDOWS\System32\WinTab32.DLL] <Tablet WinTab Driver V1.0><4, 0, 3, 2> [PID: 1256][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.27> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1280][C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe] <Hewlett-Packard><00 .00 .14> [C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\hpptui0.dll] <Hewlett-Packard><01.00.56> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1532][C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe] <Hewlett-Packard><1, 0, 0, 24> [PID: 1564][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\PROGRA~1\3721\autolive.dll] <><1, 1, 2, 1023> [C:\PROGRA~1\3721\alLiveEx.dll] < ><1, 0, 0, 1> [C:\PROGRA~1\3721\notifier.dll] <><1, 0, 0, 5> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 892][C:\WINDOWS\System32\WService.EXE] <Tablet Driver><4.03.02> [C:\WINDOWS\System32\WinTab32.DLL] <Tablet WinTab Driver V1.0><4, 0, 3, 2> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1588][C:\PROGRA~1\3721\assistse.exe] <yahoo><1, 0, 1, 1001> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\PROGRA~1\3721\shell\Assecblk.dll] <3721><1, 0, 0, 9> [C:\PROGRA~1\3721\shell\MenuInfo.dll] <yahoo><1, 0, 0, 2> [C:\PROGRA~1\3721\shell\IEAngel.dll] <yahoo><1, 0, 0, 3> [C:\PROGRA~1\3721\shell\AsMenu.dll] <3721><1, 0, 1, 1001> [C:\PROGRA~1\3721\assist\assist.dll] <><2, 0, 3, 3> [C:\PROGRA~1\3721\assist\repair.dll] <北京三七二一科技有限公司><1, 0, 4, 1001> [C:\PROGRA~1\3721\assist\asfsks.dll] <3721.com><2, 1, 1, 87> [c:\progra~1\3721\assist\adfilter.dll] < ><1, 0, 1, 6> [C:\PROGRA~1\3721\assist\assecblk.dll] <3721><1, 0, 0, 9> [C:\PROGRA~1\3721\assist\optimum.dll] <N/A><N/A> [C:\PROGRA~1\3721\assist\assistex.dll] <3721><1, 0, 1, 1001> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1624][C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe] <Hewlett-Packard Co.><50.0.146.000> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1632][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3275> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1224][C:\WINDOWS\VM_STI.EXE] <VM.><4.2.610.4> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\WINDOWS\System32\msdmo.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1828][D:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:

阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:	发表于： 2006-03-24 16:01 \| 显示全部短消息资料字号：小中大 12楼 [PID: 2052][C:\WINDOWS\System32\dmbwo.exe] <N/A><N/A> [PID: 2064][D:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 16> [D:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [D:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 2076][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 2140][C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\hotspot\jvm.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\hpi.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\verify.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\java.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\zip.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\net.dll] <N/A><N/A> [C:\WINDOWS\system32\jst.dll] <N/A><N/A> [C:\WINDOWS\system32\d4channel.dll] <Hewlett-Packard><02.07.50> [PID: 2896][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\PROGRA~1\3721\scrblock.dll] <3721><1, 0, 1, 1000> [C:\PROGRA~1\3721\alrex.dll] <><1, 0, 0, 1> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\WINDOWS\downlo~1\CnsHint.dll] <3721><1, 0, 0, 4> [C:\PROGRA~1\3721\autolive.dll] <><1, 1, 2, 1023> [C:\PROGRA~1\3721\alLiveEx.dll] < ><1, 0, 0, 1> [C:\WINDOWS\downlo~1\cnsplus.dll] <3721><1, 0, 0, 2> [C:\PROGRA~1\3721\Assist\asbar.dll] <3721><1, 0, 1, 1001> [C:\PROGRA~1\3721\assist\ieaui.dll] <yahoo!china><1, 0, 1, 1006> [C:\PROGRA~1\3721\assist\tbwrap.dll] <3721><1, 0, 0, 2> [C:\PROGRA~1\3721\assist\asnoad.dll] <><1, 0, 0, 9> [C:\PROGRA~1\3721\assist\aswiper.dll] <3721><1, 0, 1, 1004> [C:\PROGRA~1\3721\assist\asiesec.dll] <yahoo><1, 0, 0, 9> [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [C:\PROGRA~1\DESKAD~1\deskipn.dll] <><1, 0, 0, 1> [C:\Program Files\Tencent\QQ\QQIEHelper.dll] <深圳市腾讯计算机系统有限公司><1, 1, 0, 5> [C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 5> [C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 4> [C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 5> [D:\Program Files\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\PROGRA~1\3721\assist\repair.dll] <北京三七二一科技有限公司><1, 0, 4, 1001> [C:\PROGRA~1\3721\assist\asfsks.dll] <3721.com><2, 1, 1, 87> [C:\PROGRA~1\3721\assist\optimum.dll] <N/A><N/A> [c:\progra~1\3721\assist\adfilter.dll] < ><1, 0, 1, 6> [C:\PROGRA~1\3721\assist\assecblk.dll] <3721><1, 0, 0, 9> [C:\PROGRA~1\3721\Assist\XPStyle.dll] <N/A><N/A> [C:\WINDOWS\System32\Macromed\Flash\flash.ocx] <Macromedia, Inc.><7,0,19,0> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [C:\WINDOWS\System32\UNISPIM.IME] <北京清华紫光软件股份有限公司><3.0.0.3045> [C:\WINDOWS\System32\upengine.dll] <北京清华紫光软件股份有限公司><3.0.0.3045> [PID: 2704][C:\WINDOWS\System32\Macromed\Flash\GetFlash.exe] <Macromedia, Inc.><7,0,19,0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 4764][E:\新建文件夹\SREng.exe] <Smallfrogs Studio><2.0.12.350> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> 劳烦勒...
阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:

阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:	发表于： 2006-03-24 16:11 \| 显示全部短消息资料字号：小中大 13楼启动文件夹 [Adobe Reader Speed Launch] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk><N> ================================== 服务 [InstallDriver Table Manager / IDriverT] <C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe><Macrovision Corporation> [NVIDIA Display Driver Service / NVSvc] <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation> [Pml Driver HPZ12 / Pml Driver HPZ12] <C:\WINDOWS\System32\hpzipm12.exe><HP> [Rising Personal Firewall Service / RfwService] <d:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"D:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"D:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [System Startup Service / SvcProc] <C:\WINDOWS\svcproc.exe><N/A> [WinTab Service / WinTabService] <C:\WINDOWS\System32\DRIVERS\WtSrv.exe><Tablet Driver> ================================== 浏览器加载项 [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [MonitorURL Class] {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, > [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [上网助手] {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\PROGRA~1\3721\Assist\asbar.dll, 3721> [CnsHook Class] {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司> [Yahoo 1G电邮] {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A> [寻宝乐趣多] {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao, N/A> [雅虎助手] {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [情景聊天] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A> [] {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A> [] {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [上网助手] {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\PROGRA~1\3721\Assist\asbar.dll, 3721> [YInstStarter Class] {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} <C:\WINDOWS\Downloaded Program Files\yinsthelper.dll, Yahoo! Inc.> [WebActivater Control] {3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINDOWS\System32\WEBACT~1.OCX, QQ> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\flash.ocx, Macromedia, Inc.> [添加到QQ自定义面板] <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A> 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者
阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:

阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:	发表于： 2006-03-24 20:24 \| 显示全部短消息资料字号：小中大 14楼我按你的方法做了，中搜那些好象删了，但是那两个嵌入explorer和csrss的那个trojan.spy.vidro.b病毒还在内存里，我在另一个网上找到一个关于这个病毒的帖子：http://www.9gty.com/bbs/archiver/?tid-184088.html 我再把弄完之后的日志发过来你看下，谢谢！！ 2006-03-24,20:16:48 System Repair Engineer 2.0.12.350 (2.0 RC 1) Windows XP Professional Service Pack 1 - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <MSMSGS><rem "C:\Program Files\Messenger\msmsgs.exe" /background> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <SubOlccr><C:\PROGRAM FILES\UCPEN\SubOlccr.exe> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <MsnMsgr><rem "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <Yahoo! Pager><"C:\Program Files\Yahoo!\Messenger\ypager.exe" -quiet> [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <NvCplDaemon><rem RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <nwiz><rem nwiz.exe /install> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <SoundMan><SOUNDMAN.EXE> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <StatusClient 2.6><C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <TomcatStartup 2.5><C:\Program Files\Hewlett-Packard\Toolbox\hpbpsttp.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <OrderReminder><C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <assistse><"C:\PROGRA~1\3721\assistse.exe"> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <CnsMin><Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <HP Software Update><C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <BigDogPath><C:\WINDOWS\VM_STI.EXE ZSMC USB PC Camera> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RfwMain><"D:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <RavTask><"D:\Program Files\Rising\Rav\RavTask.exe" -system> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <Userinit><C:\WINDOWS\system32\userinit.exe,> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><> ================================== 启动文件夹 [Adobe Reader Speed Launch] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk><N> ================================== 服务 [InstallDriver Table Manager / IDriverT] <C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe><Macrovision Corporation> [NVIDIA Display Driver Service / NVSvc] <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation> [Pml Driver HPZ12 / Pml Driver HPZ12] <C:\WINDOWS\System32\hpzipm12.exe><HP> [Rising Personal Firewall Service / RfwService] <d:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Process Communication Center / RsCCenter] <"D:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"D:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [System Startup Service / SvcProc] <C:\WINDOWS\svcproc.exe><N/A> [WinTab Service / WinTabService] <C:\WINDOWS\System32\DRIVERS\WtSrv.exe><Tablet Driver>
阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:

阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:	发表于： 2006-03-24 20:25 \| 显示全部短消息资料字号：小中大 15楼浏览器加载项 [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated> [MonitorURL Class] {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [上网助手] {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\PROGRA~1\3721\Assist\asbar.dll, 3721> [CnsHook Class] {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司> [Yahoo 1G电邮] {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A> [寻宝乐趣多] {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao, N/A> [雅虎助手] {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [情景聊天] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A> [] {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A> [] {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [上网助手] {BB936323-19FA-4521-BA29-ECA6A121BC78} <C:\PROGRA~1\3721\Assist\asbar.dll, 3721> [YInstStarter Class] {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} <C:\WINDOWS\Downloaded Program Files\yinsthelper.dll, Yahoo! Inc.> [WebActivater Control] {3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINDOWS\System32\WEBACT~1.OCX, QQ> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\flash.ocx, Macromedia, Inc.> [添加到QQ自定义面板] <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A> ================================== 正在运行的进程 [PID: 460][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 508][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 532][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 576][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 588][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 784][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 844][D:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 860][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 996][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1024][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1044][D:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 16> [D:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [D:\Program Files\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9> [D:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28> [D:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [D:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1> [D:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [D:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [D:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [D:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [D:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [D:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [D:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [D:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [D:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [D:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [D:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [D:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [D:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 1172][d:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 30> [d:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 12> [d:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6> [d:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21> [d:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4> [d:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9> [PID: 1356][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\PROGRA~1\3721\alrex.dll] <><1, 0, 1, 1001> [C:\PROGRA~1\3721\autolive.dll] <><1, 1, 2, 1023> [C:\PROGRA~1\3721\alLiveEx.dll] < ><1, 0, 0, 1> [C:\PROGRA~1\3721\Assist\asbar.dll] <3721><1, 0, 1, 1001> [C:\PROGRA~1\3721\assist\ieaui.dll] <yahoo!china><1, 0, 1, 1006> [C:\PROGRA~1\3721\assist\tbwrap.dll] <3721><1, 0, 0, 2> [C:\PROGRA~1\3721\assist\asnoad.dll] <><1, 0, 0, 9> [C:\PROGRA~1\3721\assist\aswiper.dll] <3721><1, 0, 1, 1004> [C:\PROGRA~1\3721\assist\asiesec.dll] <yahoo><1, 0, 0, 9> [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] <Adobe Systems Incorporated><7.0.0.2004121400> [C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 5> [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:

阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:	发表于： 2006-03-24 20:26 \| 显示全部短消息资料字号：小中大 16楼 [PID: 1468][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [C:\WINDOWS\system32\hppcappm.dll] <Hewlett-Packard><1, 0, 11, 100> [C:\WINDOWS\system32\LTKRN11n.dll] <LEAD Technologies, Inc.><11.5.0.012> [C:\WINDOWS\system32\LTFIL11n.DLL] <LEAD Technologies, Inc.><11.5.0.012> [C:\WINDOWS\system32\HPBMMON.DLL] <Hewlett-Packard><10.00.16> [C:\WINDOWS\system32\hpdomon.dll] <Hewlett-Packard><03.42.00> [C:\WINDOWS\system32\HPBHealr.dll] <N/A><N/A> [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\HPPRN05.DLL] <Hewlett-Packard Corporation><60.5.36.2> [C:\WINDOWS\system32\hppadt40.dll] <HP><7, 0, 5, 0> [C:\WINDOWS\system32\HPZidr12.dll] <HP><7, 0, 5, 0> [C:\WINDOWS\system32\hpbmmjno.dll] <Hewlett-Packard><00.01.00> [PID: 1560][D:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1784][d:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 48> [d:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [d:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [d:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 1792][C:\WINDOWS\System32\Rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 4> [C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 5> [PID: 1872][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 1928][C:\WINDOWS\System32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.5303> [PID: 1968][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 2000][C:\WINDOWS\System32\DRIVERS\WtSrv.exe] <Tablet Driver><4.03.02> [C:\WINDOWS\System32\WinTab32.DLL] <Tablet WinTab Driver V1.0><4, 0, 3, 2> [PID: 1736][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.27> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 1188][C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe] <Hewlett-Packard><00 .00 .14> [C:\Program Files\Hewlett-Packard\Toolbox\StatusClient\hpptui0.dll] <Hewlett-Packard><01.00.56> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 2040][C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder\OrderReminder.exe] <Hewlett-Packard><1, 0, 0, 24> [PID: 2052][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\PROGRA~1\3721\autolive.dll] <><1, 1, 2, 1023> [C:\PROGRA~1\3721\alLiveEx.dll] < ><1, 0, 0, 1> [PID: 2068][C:\PROGRA~1\3721\assistse.exe] <yahoo><1, 0, 1, 1001> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\PROGRA~1\3721\shell\Assecblk.dll] <3721><1, 0, 0, 9> [C:\PROGRA~1\3721\shell\MenuInfo.dll] <yahoo><1, 0, 0, 2> [C:\PROGRA~1\3721\shell\IEAngel.dll] <yahoo><1, 0, 0, 3> [C:\PROGRA~1\3721\shell\AsMenu.dll] <3721><1, 0, 1, 1001> [C:\PROGRA~1\3721\assist\assist.dll] <><2, 0, 3, 3> [C:\PROGRA~1\3721\assist\repair.dll] <北京三七二一科技有限公司><1, 0, 4, 1001> [C:\PROGRA~1\3721\assist\asfsks.dll] <3721.com><2, 1, 1, 87> [c:\progra~1\3721\assist\adfilter.dll] < ><1, 0, 1, 6> [C:\PROGRA~1\3721\assist\assecblk.dll] <3721><1, 0, 0, 9> [C:\PROGRA~1\3721\assist\optimum.dll] <N/A><N/A> [C:\PROGRA~1\3721\assist\assistex.dll] <3721><1, 0, 1, 1001> [PID: 2092][C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe] <Hewlett-Packard Co.><50.0.146.000> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 2108][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3275> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 2124][C:\WINDOWS\VM_STI.EXE] <VM.><4.2.610.4> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [C:\WINDOWS\System32\msdmo.dll] <N/A><N/A> [PID: 2156][D:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 2184][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 2192][D:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 16> [D:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [D:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [D:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 2280][C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe] <Adobe Systems Incorporated><7.0.0.0> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 2304][C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\javaw.exe] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\hotspot\jvm.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\hpi.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\verify.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\java.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\zip.dll] <N/A><N/A> [C:\Program Files\Hewlett-Packard\Toolbox\jre\bin\net.dll] <N/A><N/A> [C:\WINDOWS\system32\jst.dll] <N/A><N/A> [C:\WINDOWS\system32\d4channel.dll] <Hewlett-Packard><02.07.50> [PID: 2740][D:\Program Files\Rising\Rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [D:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 2764][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> [PID: 2620][E:\新建文件夹\SREng.exe] <Smallfrogs Studio><2.0.12.350> [C:\PROGRA~1\3721\helper.dll] <><1, 0, 9, 1324> [C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 2, 6> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}]
阿考ak47 初生襁褓狮帖子:21 注册: 2006-03-22 来自:

<<上一主题|下一主题>>

12

2 / 2 页

跳转页

页面顶部

Powered by Discuz!NT