瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 再进来看一下。最后一步。。我完成不了

12   2  /  2  页   跳转

再进来看一下。最后一步。。我完成不了

[C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\zxipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\myhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\tlvpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\jzipri.dll]  [N/A, ]
    [C:\WINDOWS\winow.dll]  [N/A, ]
    [C:\WINDOWS\system32\mcqejn.dll]  [N/A, ]
    [C:\WINDOWS\video.dll]  [N/A, ]
    [C:\WINDOWS\system32\bcqiew.dll]  [N/A, ]
    [C:\WINDOWS\kulionwm.dll]  [N/A, ]
[PID: 1772 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.8464]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[PID: 2044 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
[PID: 1848 / SYSTEM][C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe]  [Hewlett-Packard Development Company, L.P., 2, 0, 1, 9]
[PID: 1868 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\WINDOWS\system32\zxipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\myhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\tlvpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\jzipri.dll]  [N/A, ]
    [C:\WINDOWS\winow.dll]  [N/A, ]
    [C:\WINDOWS\system32\mcqejn.dll]  [N/A, ]
    [C:\WINDOWS\video.dll]  [N/A, ]
    [C:\WINDOWS\system32\bcqiew.dll]  [N/A, ]
    [C:\WINDOWS\kulionwm.dll]  [N/A, ]
[PID: 2732 / SYSTEM][C:\WINDOWS\system32\wbem\wmiprvse.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
[PID: 2800 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 760 / Administrator][C:\WINDOWS\system32\qjhins.exe]  [N/A, ]
    [C:\WINDOWS\system32\jzipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
[PID: 2024 / Administrator][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\winow.dll]  [N/A, ]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\zxipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\myhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\tlvpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\jzipri.dll]  [N/A, ]
    [C:\WINDOWS\video.dll]  [N/A, ]
    [C:\WINDOWS\system32\mcqejn.dll]  [N/A, ]
    [C:\WINDOWS\kulionwm.dll]  [N/A, ]
    [C:\WINDOWS\system32\bcqiew.dll]  [N/A, ]
[PID: 3276 / Administrator][C:\WINDOWS\system32\mxbset.exe]  [N/A, ]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[PID: 4052 / Administrator][C:\WINDOWS\system32\jziins.exe]  [N/A, ]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\system32\jzipri.dll]  [N/A, ]
[PID: 2984 / Administrator][C:\WINDOWS\system32\qhfins.exe]  [N/A, ]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[PID: 4028 / Administrator][C:\WINDOWS\system32\tlvins.exe]  [N/A, ]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\system32\tlvpri.dll]  [N/A, ]
[PID: 1940 / Administrator][C:\WINDOWS\system32\myhins.exe]  [N/A, ]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\system32\myhpri.dll]  [N/A, ]
[PID: 1064 / Administrator][C:\WINDOWS\system32\zxiins.exe]  [N/A, ]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\WINDOWS\system32\zxipri.dll]  [N/A, ]
[PID: 2068 / Administrator][C:\Program Files\Rising\Rav\RsAgent.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 12]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\zxipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\kulionwm.dll]  [N/A, ]
    [C:\WINDOWS\system32\myhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\tlvpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\bcqiew.dll]  [N/A, ]
    [C:\WINDOWS\video.dll]  [N/A, ]
    [C:\WINDOWS\system32\jzipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\mcqejn.dll]  [N/A, ]
    [C:\WINDOWS\winow.dll]  [N/A, ]
[PID: 1340 / Administrator][C:\WINDOWS\msagent\AgentSvr.exe]  [Microsoft Corporation, 2.00.0.3424]
gototop
 

[C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\WINDOWS\system32\zxipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\qjhpri.dll]  [N/A, ]
    [C:\WINDOWS\kulionwm.dll]  [N/A, ]
    [C:\WINDOWS\system32\myhpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\tlvpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\bcqiew.dll]  [N/A, ]
    [C:\WINDOWS\video.dll]  [N/A, ]
    [C:\WINDOWS\system32\jzipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\mcqejn.dll]  [N/A, ]
    [C:\WINDOWS\winow.dll]  [N/A, ]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\rxavpw1.dll]  [N/A, ]
[PID: 688 / Administrator][C:\Documents and Settings\Administrator\桌面\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\WINDOWS\system32\mxbman.dll]  [N/A, ]
    [C:\WINDOWS\kulionwm.dll]  [N/A, ]
    [C:\WINDOWS\system32\bcqiew.dll]  [N/A, ]
    [C:\WINDOWS\video.dll]  [N/A, ]
    [C:\WINDOWS\system32\mcqejn.dll]  [N/A, ]
    [C:\WINDOWS\winow.dll]  [N/A, ]
    [C:\WINDOWS\system32\rxavpw1.dll]  [N/A, ]
    [C:\Documents and Settings\Administrator\桌面\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
进程特权扫描
特殊特权被允许: SeLoadDriverPrivilege [PID = 868, C:\PROGRAM FILES\HEWLETT-PACKARD\HP QUICK LAUNCH BUTTONS\QLBCTRL.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 760, C:\WINDOWS\SYSTEM32\QJHINS.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 3276, C:\WINDOWS\SYSTEM32\MXBSET.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 4052, C:\WINDOWS\SYSTEM32\JZIINS.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2984, C:\WINDOWS\SYSTEM32\QHFINS.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 4028, C:\WINDOWS\SYSTEM32\TLVINS.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 1940, C:\WINDOWS\SYSTEM32\MYHINS.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 1064, C:\WINDOWS\SYSTEM32\ZXIINS.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2068, C:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================

gototop
 

最后一步完成不了的扫描报告
gototop
 

看呀。你叫我上传的呀。。给个答复呀
gototop
 
12   2  /  2  页   跳转
页面顶部
Powered by Discuz!NT