瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 怎么没人给回复呀,大侠们帮帮我呀.

12   2  /  2  页   跳转

怎么没人给回复呀,大侠们帮帮我呀.

[F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2084 / new][F:\杀毒软件\AVG Anti-Spyware 7.5\avgas.exe]  [GRISOFT s.r.o., 7, 5, 1, 43]
    [F:\杀毒软件\AVG Anti-Spyware 7.5\engine.dll]  [GRISOFT s.r.o., 4, 2, 0, 19]
    [F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2176 / new][F:\杀毒软件\runiep.exe]  [Beijing Rising Technology Co., Ltd., 4.0.0.15]
    [F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2200 / new][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\PROGRA~1\storm\StormSet.dll]  [北京暴风网际科技有限公司, 2, 7, 4, 16]
[PID: 2264 / new][C:\WINDOWS\system32\Rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SysTdSvr.dll]  [N/A, ]
    [c:\windows\system32\cwebpage.dll]  [N/A, ]
    [F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2496 / new][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2736 / new][C:\WINDOWS\system32\WgaTray.exe]  [Microsoft Corporation, 1.7.0018.5]
    [F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 1360 / new][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2156 / new][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wbdics.dll]  [Microsoft Corporation, 1, 0, 2, 1]
    [E:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll]  [BitComet, 20070614]
    [F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [F:\杀毒软件\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx]  [Adobe Systems, Inc., 9,0,45,0]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL]  [Microsoft Corporation, 11.0.5510]
    [C:\WINDOWS\system32\WBJJU.IME]  [北京六合源软件技术有限公司, 2, 5, 0, 0]
    [C:\WINDOWS\system32\WbCodeU.dll]  [, 2, 5, 0, 0]
    [C:\WINDOWS\system32\wbjju.dll]  [N/A, ]
    [C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[PID: 2768 / new][F:\杀毒软件\sreng日志\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [F:\杀毒软件\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [F:\杀毒软件\sreng日志\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
N/A

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]
gototop
 

【回复“baohe”的帖子】我用sfrng扫描了以后,怎么结束进程呀,扫描完没有结束进程的按扭呀,只有保存报告的键
gototop
 

【回复“baohe”的帖子】C:\WINDOWS\system32\drivers\cfjfgddc.sys
C:\WINDOWS\System32\DRIVERS\clandt.sys
C:\WINDOWS\System32\DRIVERS\gnmjfh56.sys
C:\WINDOWS\system32\drivers\k.sys
这几个删不掉,提示说正在使用
gototop
 

【回复“baohe”的帖子】C:\WINDOWS\system32\drivers\cfjfgddc.sys
C:\WINDOWS\System32\DRIVERS\clandt.sys
C:\WINDOWS\System32\DRIVERS\gnmjfh56.sys
C:\WINDOWS\system32\drivers\k.sys
你说的这几个都删不掉呀,都说正在使用中,怎么才可以删掉
gototop
 

【回复“baohe”的帖子】驱动
[cfjfgddc / cfjfgddc][Stopped/Boot Start]
<\SystemRoot\system32\drivers\cfjfgddc.sys><N/A>
[cland / clandt][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\clandt.sys><N/A>
[gnmjfh5 / gnmjfh56][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\gnmjfh56.sys><N/A>
[k / k][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\drivers\k.sys><N/A>

我不知道在哪找这些文件,请慢慢告诉我好吗
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT