瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 打开.exe文件，就出现很多stup.exe的进程，严重拖慢了系统阿！！！

1   1  /  1  页   跳转页

打开.exe文件，就出现很多stup.exe的进程，严重拖慢了系统阿！！！

收藏
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-06 20:25 | 显示全部 短消息 资料
字号： 小 中 大 1楼

打开.exe文件，就出现很多stup.exe的进程，严重拖慢了系统阿！！！

我也不知道是怎么回事，瑞星杀不了~！！难道要格盘么？
这是最近出现的，有时删了重启换个名字又有！！只有在打开文件时才出现，10秒后慢慢消失！


求助！

附件附件:

下载次数:659
文件类型:application/octet-stream
文件大小:
上传时间:2006-8-6 20:25:54
描述:



最后编辑2006-08-07 09:55:19
分享到：
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 09:32 | 显示全部 短消息 资料
字号： 小 中 大 2楼

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
    <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background>  [Microsoft Corporation]
    <Xplus><"e:\Xplus\Xplus_Wait.exe" /min>  []
    <msnnt><C:\WINDOWS\Updated.exe>  []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <spoolsv><C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer>  [广州傲讯信息科技有限公司]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\Windows\system32\userinit.exe,>  [Microsoft Corporation]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
    <{D3FB54EE-B92D-4A37-8C04-9C34F6601A5A}><C:\WINDOWS\system32\Qkkiby.dll>  []
    <{740D7035-9886-42EF-83F4-CF2DBDE2A25E}><C:\WINDOWS\system32\Mveq.dll>  []
    <{0C9E1415-1F39-4171-BB69-381227A4E4E1}><C:\WINDOWS\system32\Orpij.dll>  []
    <{C10C6A1D-6BCA-4E25-AE3C-27AF5CEB5839}><C:\WINDOWS\system32\Drfm.dll>  []
    <{F69F8E42-055F-413B-BF1C-926D857B9D1E}><C:\WINDOWS\system32\Jqvjxu.dll>  []
    <{EBA0CE93-57B7-4DD2-A7A1-AB0F39497891}><C:\WINDOWS\system32\Cuftko.dll>  []
    <{2B37C6C0-96BA-4E9F-9E87-4DBD0C1DB142}><C:\WINDOWS\system32\Evfwd.dll>  []
    <{13AAC815-5F23-4B1F-8F50-492BCC5AF3FA}><C:\WINDOWS\system32\Tvzc.dll>  []
    <{26331A48-09AC-4B04-877A-CEB3EAF6BEF3}><C:\WINDOWS\system32\Qnhc.dll>  []
    <{A7D93CF6-A1E7-42A0-B7F8-8B79E2514C82}><C:\WINDOWS\system32\Zegq.dll>  []
    <{8D187EB7-86C7-4ADE-A4C5-B51289E9E879}><C:\WINDOWS\system32\Wuzmx.dll>  []
    <{BC2D75F0-D7D9-4E30-B25E-9E84AB726177}><C:\WINDOWS\system32\Azam.dll>  []
    <{84F4BF21-B880-4F2D-BFA6-B8C97D9B5D0F}><C:\WINDOWS\system32\Acbex.dll>  []
    <{4268EBE6-9973-43A1-B1F7-20A3A639E28A}><C:\WINDOWS\system32\Fndu.dll>  []
    <{561A6665-79B5-456E-BA79-C6D21F6BC06C}><C:\WINDOWS\system32\Divknj.dll>  []
    <{620D4400-050F-4EB7-AC0E-28284A727E60}><C:\WINDOWS\system32\Xpdk.dll>  []
    <{B8D68AED-AF0B-429D-8CE7-20E7DE4179EC}><C:\WINDOWS\system32\Yolk.dll>  []
    <{913F8EFE-6844-41E9-A4E7-60BFA2EFB8C6}><C:\WINDOWS\system32\Fdadi.dll>  []
    <{1C4D908D-4677-4F06-93B7-BB1AE8E0C546}><C:\WINDOWS\system32\Jhiyc.dll>  []
    <{FB4777A3-7B05-437A-8E38-BF2BA5602C18}><C:\WINDOWS\system32\Wumht.dll>  []
    <{2E3F7897-295C-46EC-A5FD-9F19BE2ACB9F}><C:\WINDOWS\system32\Gdzu.dll>  []
    <{5A1012DF-0B3E-4444-99FE-647E66F2960E}><C:\WINDOWS\system32\Ivzf.dll>  []
    <{302F6FB5-3E72-49CA-AED3-D24DE62CF507}><C:\WINDOWS\system32\Llwyv.dll>  []
    <{D38CBB69-48B2-425F-AF75-EA1A04C5F3B6}><C:\WINDOWS\system32\Snpi.dll>  []
    <{5F28FB65-3A7F-4CF6-A71B-7B74F97FA5C2}><C:\WINDOWS\system32\Ybvwv.dll>  []
    <{B137A194-DA37-495D-88DE-0D196D9658A5}><C:\WINDOWS\system32\Lvbz.dll>  []
    <{393E1A9B-6B7F-4CB7-8A5E-0A060A3EC050}><C:\WINDOWS\system32\Toohnx.dll>  []
    <{ABBB6215-A57F-47B7-9DE3-0F2C57A4C48B}><C:\WINDOWS\system32\Xadxc.dll>  []
    <{D4002B83-764E-4167-9841-C06C5BE4B7E5}><C:\WINDOWS\system32\Vawxp.dll>  []
    <{EB830457-A7A7-4C7B-82D0-27A9532028BE}><C:\WINDOWS\system32\Pzftbv.dll>  []
    <{1AC7056A-5BD1-4C0F-89C6-80E601A2E463}><C:\WINDOWS\system32\Auqf.dll>  []
    <{C62C7E91-460D-4302-B1A8-C7275B0A2BE3}><C:\WINDOWS\system32\Kejmi.dll>  []
    <{FF3736A8-CDFB-4F76-BE32-FBFE726748AC}><C:\WINDOWS\system32\Rvfd.dll>  []
    <{AADBEA17-33F9-4A16-8999-3AC4EE665B5A}><C:\WINDOWS\system32\Klgkvl.dll>  []
    <{B30C9CCF-142A-4A78-8E2B-50ADD688058F}><C:\WINDOWS\system32\Qvcz.dll>  []
    <{51DE635C-1DAA-4A85-AD1F-F772FF81A471}><C:\WINDOWS\system32\Taojx.dll>  []
    <{39604B69-4A47-4A54-AF8D-30891A04F9E4}><C:\WINDOWS\system32\Ixya.dll>  []
    <{1A0F3E60-456D-4DF7-85C6-00A80A04A5E7}><C:\WINDOWS\system32\Zhadex.dll>  []
    <{A042F185-DC8C-4877-8D28-B9DF503B4B0A}><C:\WINDOWS\system32\Uofnu.dll>  []
    <{7C2E1B06-B7FB-487F-A2A6-727B68544700}><C:\WINDOWS\system32\Rlvatj.dll>  []
    <{7F2EE239-6EE8-4449-A6F1-8C8AFF432892}><C:\WINDOWS\system32\Wpmu.dll>  []
    <{7D96A826-926F-4542-9C45-EA020AA5B4AE}><C:\WINDOWS\system32\Bsbep.dll>  []
    <{5F2C8104-3C6E-4E3B-AC18-98020A003028}><C:\WINDOWS\system32\Czbwv.dll>  []
    <{727F1999-7A06-4D11-AA25-BD83989151C6}><C:\WINDOWS\system32\Shhd.dll>  []
    <{E748A3BB-322C-4807-B9C8-BB374CAFB5B2}><C:\WINDOWS\system32\Lqjtc.dll>  []
    <{04DA9EC7-934F-4778-9869-C987DC329450}><C:\WINDOWS\system32\Mbvy.dll>  []
    <{1633AB2D-6DAC-4130-9CA6-EFDFB8710BCF}><C:\WINDOWS\system32\Xyvsh.dll>  []
    <{8C13AC53-A1CA-4910-9DA2-DBBB4C6208F7}><C:\WINDOWS\system32\Knxlyo.dll>  []
    <{1A1C6764-014F-42F3-A51A-21C38230A303}><C:\WINDOWS\system32\Narqh.dll>  []
    <{1556BF31-6065-4EF7-BFBD-9F02500E8BEB}><C:\WINDOWS\system32\Ekcdnb.dll>  []
    <{422EFC36-1874-4697-B8E9-B4CAE56279A2}><C:\WINDOWS\system32\Nfnzsy.dll>  []
    <{2B6D4B1A-40EC-4AAF-9F2E-F142FFC16188}><C:\WINDOWS\system32\Rrruy.dll>  []
    <{52E9FE9B-FC52-45CD-BB50-CB462598C9F0}><C:\WINDOWS\system32\Jjsb.dll>  []
    <{5ED0015A-748A-4A2D-B0A1-3BB8732FDD1E}><C:\WINDOWS\system32\Uxhv.dll>  []
    <{B015C48B-007D-4276-B60C-2644268647B0}><C:\WINDOWS\system32\Iypbh.dll>  []
    <{4583B698-6D68-464D-A7CE-B17F8AC4F679}><C:\WINDOWS\system32\Dqlpjw.dll>  []
    <{9DB265D1-05F8-48AC-9C35-6C330600640B}><C:\WINDOWS\system32\Oqhhw.dll>  []
    <{0ED120A5-B521-4FEA-B5B4-00AA3E58F608}><C:\WINDOWS\system32\Awrlop.dll>  []
    <{040F1470-E88E-434B-A7B2-BCAE743C73C6}><C:\WINDOWS\system32\Ytmnd.dll>  []
    <{76F0CAE4-3D9D-4E13-91EC-6A6A90DF3BD6}><C:\WINDOWS\system32\Esrzmm.dll>  []
    <{368AE2BF-D6A5-4964-A3F7-936C2E08B78B}><C:\WINDOWS\system32\Syklb.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <DelayRun><C:\WINDOWS\system32\043d05e0.dll>  []

==================================
启动文件夹
[ADSL]
  <C:\Documents and Settings\a\「开始」菜单\程序\启动\ADSL.lnk><N>

==================================
服务
[Indexing Data / BKMARKS]
  <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[Macromedia Licensing Service / Macromedia Licensing Service]
  <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[User Profile Hive Cleanup / UPHClean]
  <C:\Program Files\UPHClean\uphclean.exe><N/A>
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 09:34 | 显示全部 短消息 资料
字号： 小 中 大 3楼

浏览器加载项
[]
  {040F1470-E88E-434B-A7B2-BCAE743C73C6} <C:\WINDOWS\system32\Ytmnd.dll, N/A>
[]
  {04DA9EC7-934F-4778-9869-C987DC329450} <C:\WINDOWS\system32\Mbvy.dll, N/A>
[MonitorURL Class]
  {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, >
[Tencent Browser Helper]
  {0C7C23EF-A848-485B-873C-0ED954731014} <, N/A>
[]
  {0C9E1415-1F39-4171-BB69-381227A4E4E1} <C:\WINDOWS\system32\Orpij.dll, N/A>
[ChajianHelper Class]
  {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} <C:\WINDOWS\system32\SYSREA~1.DLL, Kmedia>
[wmpdrm]
  {0E674588-66B7-4E19-9D0E-2053B800F69F} <C:\WINDOWS\system32\wmpdrm.dll, N/A>
[]
  {0ED120A5-B521-4FEA-B5B4-00AA3E58F608} <C:\WINDOWS\system32\Awrlop.dll, N/A>
[]
  {13AAC815-5F23-4B1F-8F50-492BCC5AF3FA} <C:\WINDOWS\system32\Tvzc.dll, N/A>
[]
  {1556BF31-6065-4EF7-BFBD-9F02500E8BEB} <C:\WINDOWS\system32\Ekcdnb.dll, N/A>
[]
  {1633AB2D-6DAC-4130-9CA6-EFDFB8710BCF} <C:\WINDOWS\system32\Xyvsh.dll, N/A>
[]
  {1A0F3E60-456D-4DF7-85C6-00A80A04A5E7} <C:\WINDOWS\system32\Zhadex.dll, N/A>
[]
  {1A1C6764-014F-42F3-A51A-21C38230A303} <C:\WINDOWS\system32\Narqh.dll, N/A>
[]
  {1AC7056A-5BD1-4C0F-89C6-80E601A2E463} <C:\WINDOWS\system32\Auqf.dll, N/A>
[]
  {1C4D908D-4677-4F06-93B7-BB1AE8E0C546} <C:\WINDOWS\system32\Jhiyc.dll, N/A>
[]
  {26331A48-09AC-4B04-877A-CEB3EAF6BEF3} <C:\WINDOWS\system32\Qnhc.dll, N/A>
[]
  {2B37C6C0-96BA-4E9F-9E87-4DBD0C1DB142} <C:\WINDOWS\system32\Evfwd.dll, N/A>
[]
  {2B6D4B1A-40EC-4AAF-9F2E-F142FFC16188} <C:\WINDOWS\system32\Rrruy.dll, N/A>
[]
  {2E3F7897-295C-46EC-A5FD-9F19BE2ACB9F} <C:\WINDOWS\system32\Gdzu.dll, N/A>
[]
  {302F6FB5-3E72-49CA-AED3-D24DE62CF507} <C:\WINDOWS\system32\Llwyv.dll, N/A>
[enhp32]
  {33559EBD-C831-4731-952F-E2BC2CC7B42F} <C:\WINDOWS\system32\enhp32.dll, N/A>
[]
  {368AE2BF-D6A5-4964-A3F7-936C2E08B78B} <C:\WINDOWS\system32\Syklb.dll, N/A>
[]
  {393E1A9B-6B7F-4CB7-8A5E-0A060A3EC050} <C:\WINDOWS\system32\Toohnx.dll, N/A>
[]
  {39604B69-4A47-4A54-AF8D-30891A04F9E4} <C:\WINDOWS\system32\Ixya.dll, N/A>
[IE Browser Helper]
  {3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\xc0c0.dll, N/A>
[]
  {422EFC36-1874-4697-B8E9-B4CAE56279A2} <C:\WINDOWS\system32\Nfnzsy.dll, N/A>
[]
  {4268EBE6-9973-43A1-B1F7-20A3A639E28A} <C:\WINDOWS\system32\Fndu.dll, N/A>
[KmediaHelper Class]
  {42D25F15-CF07-4A72-B191-DB0792BF310C} <C:\WINDOWS\system32\Kmedia.dll, Kmedia>
[]
  {4583B698-6D68-464D-A7CE-B17F8AC4F679} <C:\WINDOWS\system32\Dqlpjw.dll, N/A>
[]
  {51DE635C-1DAA-4A85-AD1F-F772FF81A471} <C:\WINDOWS\system32\Taojx.dll, N/A>
[]
  {52E9FE9B-FC52-45CD-BB50-CB462598C9F0} <C:\WINDOWS\system32\Jjsb.dll, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\QQ2005\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
  {561A6665-79B5-456E-BA79-C6D21F6BC06C} <C:\WINDOWS\system32\Divknj.dll, N/A>
[]
  {5A1012DF-0B3E-4444-99FE-647E66F2960E} <C:\WINDOWS\system32\Ivzf.dll, N/A>
[]
  {5ED0015A-748A-4A2D-B0A1-3BB8732FDD1E} <C:\WINDOWS\system32\Uxhv.dll, N/A>
[]
  {5F28FB65-3A7F-4CF6-A71B-7B74F97FA5C2} <C:\WINDOWS\system32\Ybvwv.dll, N/A>
[]
  {5F2C8104-3C6E-4E3B-AC18-98020A003028} <C:\WINDOWS\system32\Czbwv.dll, N/A>
[]
  {620D4400-050F-4EB7-AC0E-28284A727E60} <C:\WINDOWS\system32\Xpdk.dll, N/A>
[]
  {727F1999-7A06-4D11-AA25-BD83989151C6} <C:\WINDOWS\system32\Shhd.dll, N/A>
[]
  {740D7035-9886-42EF-83F4-CF2DBDE2A25E} <C:\WINDOWS\system32\Mveq.dll, N/A>
[]
  {76F0CAE4-3D9D-4E13-91EC-6A6A90DF3BD6} <C:\WINDOWS\system32\Esrzmm.dll, N/A>
[]
  {7C2E1B06-B7FB-487F-A2A6-727B68544700} <C:\WINDOWS\system32\Rlvatj.dll, N/A>
[]
  {7D96A826-926F-4542-9C45-EA020AA5B4AE} <C:\WINDOWS\system32\Bsbep.dll, N/A>
[]
  {7F2EE239-6EE8-4449-A6F1-8C8AFF432892} <C:\WINDOWS\system32\Wpmu.dll, N/A>
[]
  {84F4BF21-B880-4F2D-BFA6-B8C97D9B5D0F} <C:\WINDOWS\system32\Acbex.dll, N/A>
[]
  {8C13AC53-A1CA-4910-9DA2-DBBB4C6208F7} <C:\WINDOWS\system32\Knxlyo.dll, N/A>
[]
  {8D187EB7-86C7-4ADE-A4C5-B51289E9E879} <C:\WINDOWS\system32\Wuzmx.dll, N/A>
[]
  {913F8EFE-6844-41E9-A4E7-60BFA2EFB8C6} <C:\WINDOWS\system32\Fdadi.dll, N/A>
[ADefaultSearch Class]
  {944864A5-3916-46E2-96A9-A2E84F3F1208} <C:\Program Files\Accoona\ASearchAssist.dll, Accoona Corp.>
[]
  {9DB265D1-05F8-48AC-9C35-6C330600640B} <C:\WINDOWS\system32\Oqhhw.dll, N/A>
[]
  {A042F185-DC8C-4877-8D28-B9DF503B4B0A} <C:\WINDOWS\system32\Uofnu.dll, N/A>
[]
  {A7D93CF6-A1E7-42A0-B7F8-8B79E2514C82} <C:\WINDOWS\system32\Zegq.dll, N/A>
[Google Toolbar Helper]
  {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[]
  {AADBEA17-33F9-4A16-8999-3AC4EE665B5A} <C:\WINDOWS\system32\Klgkvl.dll, N/A>
[]
  {ABBB6215-A57F-47B7-9DE3-0F2C57A4C48B} <C:\WINDOWS\system32\Xadxc.dll, N/A>
[]
  {B015C48B-007D-4276-B60C-2644268647B0} <C:\WINDOWS\system32\Iypbh.dll, N/A>
[]
  {B137A194-DA37-495D-88DE-0D196D9658A5} <C:\WINDOWS\system32\Lvbz.dll, N/A>
[]
  {B30C9CCF-142A-4A78-8E2B-50ADD688058F} <C:\WINDOWS\system32\Qvcz.dll, N/A>
[]
  {B8D68AED-AF0B-429D-8CE7-20E7DE4179EC} <C:\WINDOWS\system32\Yolk.dll, N/A>
[]
  {BC2D75F0-D7D9-4E30-B25E-9E84AB726177} <C:\WINDOWS\system32\Azam.dll, N/A>
[]
  {C10C6A1D-6BCA-4E25-AE3C-27AF5CEB5839} <C:\WINDOWS\system32\Drfm.dll, N/A>
[OusArqgw Class]
  {C333AC8D-07D3-4E24-2480-637B517A98CB} <, N/A>
[NTIECatcher Class]
  {C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, Xi>
[IEHlprObj Class]
  {C5E5DB7E-46B1-47E6-8447-2E517F269925} <e:\Xplus\GETIE.dll, N/A>
[]
  {C62C7E91-460D-4302-B1A8-C7275B0A2BE3} <C:\WINDOWS\system32\Kejmi.dll, N/A>
[]
  {D38CBB69-48B2-425F-AF75-EA1A04C5F3B6} <C:\WINDOWS\system32\Snpi.dll, N/A>
[]
  {D3FB54EE-B92D-4A37-8C04-9C34F6601A5A} <C:\WINDOWS\system32\Qkkiby.dll, N/A>
[]
  {D4002B83-764E-4167-9841-C06C5BE4B7E5} <C:\WINDOWS\system32\Vawxp.dll, N/A>
[]
  {E748A3BB-322C-4807-B9C8-BB374CAFB5B2} <C:\WINDOWS\system32\Lqjtc.dll, N/A>
[]
  {EB830457-A7A7-4C7B-82D0-27A9532028BE} <C:\WINDOWS\system32\Pzftbv.dll, N/A>
[]
  {EBA0CE93-57B7-4DD2-A7A1-AB0F39497891} <C:\WINDOWS\system32\Cuftko.dll, N/A>
[BHelper Class]
  {F2E37336-BFDB-409B-8D0E-6F013C438B20} <C:\WINDOWS\043o05e0.dll, N/A>
[]
  {F69F8E42-055F-413B-BF1C-926D857B9D1E} <C:\WINDOWS\system32\Jqvjxu.dll, N/A>
[]
  {FB4777A3-7B05-437A-8E38-BF2BA5602C18} <C:\WINDOWS\system32\Wumht.dll, N/A>
[]
  {FF3736A8-CDFB-4F76-BE32-FBFE726748AC} <C:\WINDOWS\system32\Rvfd.dll, N/A>
[微软]
  {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.microsoft.com/china/index.htm, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\QQ2005\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\QQ2005\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[时尚精品，体验快感]
  {6E5EECAF-8879-4a75-8A88-B44B6382A763} <http://adfarm.mediaplex.com/ad/ck/4080-22910-9640-61?cn=chaoyue;rgbutton_120x60;hp&mpro=http://www.ebay.com.cn, N/A>
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 09:35 | 显示全部 短消息 资料
字号： 小 中 大 4楼

[Yahoo! Toolbar]
  {EF99BD32-C1FB-11D2-892F-0090271D4F88} <C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll, Yahoo! Inc.>
[金山快译(&K)]
  {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <D:\Kingsoft\FastAIT 2005\IEBand.dll, 金山软件股份有限公司>
[&Google]
  {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[Accoona]
  {364B6276-C6C1-40B6-A6D7-6C48871FD707} <C:\Program Files\Accoona\atoolbar.dll, Accoona Corp.>
[Shockwave ActiveX Control]
  {166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINDOWS\system32\Macromed\Director\SwDir.dll, Macromedia, Inc.>
[TRadio Control]
  {2761225D-F0F2-44E8-A2C9-476FB6A3316A} <C:\PROGRA~1\Tencent\TRadio\TRadio.ocx, 腾讯公司>
[CR64Loader Object]
  {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} <C:\WINDOWS\Downloaded Program Files\miniclipGameLoader.dll, N/A>
[Nexon Package Manager Control]
  {2931566C-B8A6-46C5-BF4D-E6AB9251E953} <C:\WINDOWS\nxpm.ocx, (c) Nexon>
[PowerPlayer Control]
  {5EC7C511-CD0F-42E6-830C-1BD9882F3458} <C:\WINDOWS\DOWNLO~1\POWERP~1.DLL, PPStream Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[Persits Software XUpload]
  {E87F6C8E-16C0-11D3-BEF7-009027438003} <C:\WINDOWS\Downloaded Program Files\XUpload.ocx, Persits Software, Inc.>
[]
  {040F1470-E88E-434B-A7B2-BCAE743C73C6} <C:\WINDOWS\system32\Ytmnd.dll, N/A>
[]
  {04DA9EC7-934F-4778-9869-C987DC329450} <C:\WINDOWS\system32\Mbvy.dll, N/A>
[MonitorURL Class]
  {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, >
[Tencent Browser Helper]
  {0C7C23EF-A848-485B-873C-0ED954731014} <, N/A>
[]
  {0C9E1415-1F39-4171-BB69-381227A4E4E1} <C:\WINDOWS\system32\Orpij.dll, N/A>
[ChajianHelper Class]
  {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} <C:\WINDOWS\system32\SYSREA~1.DLL, Kmedia>
[wmpdrm]
  {0E674588-66B7-4E19-9D0E-2053B800F69F} <C:\WINDOWS\system32\wmpdrm.dll, N/A>
[]
  {0ED120A5-B521-4FEA-B5B4-00AA3E58F608} <C:\WINDOWS\system32\Awrlop.dll, N/A>
[]
  {13AAC815-5F23-4B1F-8F50-492BCC5AF3FA} <C:\WINDOWS\system32\Tvzc.dll, N/A>
[]
  {1556BF31-6065-4EF7-BFBD-9F02500E8BEB} <C:\WINDOWS\system32\Ekcdnb.dll, N/A>
[]
  {1633AB2D-6DAC-4130-9CA6-EFDFB8710BCF} <C:\WINDOWS\system32\Xyvsh.dll, N/A>
[]
  {1A0F3E60-456D-4DF7-85C6-00A80A04A5E7} <C:\WINDOWS\system32\Zhadex.dll, N/A>
[]
  {1A1C6764-014F-42F3-A51A-21C38230A303} <C:\WINDOWS\system32\Narqh.dll, N/A>
[]
  {1AC7056A-5BD1-4C0F-89C6-80E601A2E463} <C:\WINDOWS\system32\Auqf.dll, N/A>
[]
  {1C4D908D-4677-4F06-93B7-BB1AE8E0C546} <C:\WINDOWS\system32\Jhiyc.dll, N/A>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[&Google]
  {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[]
  {26331A48-09AC-4B04-877A-CEB3EAF6BEF3} <C:\WINDOWS\system32\Qnhc.dll, N/A>
[]
  {2B37C6C0-96BA-4E9F-9E87-4DBD0C1DB142} <C:\WINDOWS\system32\Evfwd.dll, N/A>
[]
  {2B6D4B1A-40EC-4AAF-9F2E-F142FFC16188} <C:\WINDOWS\system32\Rrruy.dll, N/A>
[]
  {2E3F7897-295C-46EC-A5FD-9F19BE2ACB9F} <C:\WINDOWS\system32\Gdzu.dll, N/A>
[]
  {302F6FB5-3E72-49CA-AED3-D24DE62CF507} <C:\WINDOWS\system32\Llwyv.dll, N/A>
[enhp32]
  {33559EBD-C831-4731-952F-E2BC2CC7B42F} <C:\WINDOWS\system32\enhp32.dll, N/A>
[Accoona]
  {364B6276-C6C1-40B6-A6D7-6C48871FD707} <C:\Program Files\Accoona\atoolbar.dll, Accoona Corp.>
[]
  {368AE2BF-D6A5-4964-A3F7-936C2E08B78B} <C:\WINDOWS\system32\Syklb.dll, N/A>
[]
  {393E1A9B-6B7F-4CB7-8A5E-0A060A3EC050} <C:\WINDOWS\system32\Toohnx.dll, N/A>
[]
  {39604B69-4A47-4A54-AF8D-30891A04F9E4} <C:\WINDOWS\system32\Ixya.dll, N/A>
[IE Browser Helper]
  {3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\xc0c0.dll, N/A>
[HHCtrl Object]
  {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[]
  {422EFC36-1874-4697-B8E9-B4CAE56279A2} <C:\WINDOWS\system32\Nfnzsy.dll, N/A>
[]
  {4268EBE6-9973-43A1-B1F7-20A3A639E28A} <C:\WINDOWS\system32\Fndu.dll, N/A>
[KmediaHelper Class]
  {42D25F15-CF07-4A72-B191-DB0792BF310C} <C:\WINDOWS\system32\Kmedia.dll, Kmedia>
[]
  {4583B698-6D68-464D-A7CE-B17F8AC4F679} <C:\WINDOWS\system32\Dqlpjw.dll, N/A>
[]
  {51DE635C-1DAA-4A85-AD1F-F772FF81A471} <C:\WINDOWS\system32\Taojx.dll, N/A>
[]
  {52E9FE9B-FC52-45CD-BB50-CB462598C9F0} <C:\WINDOWS\system32\Jjsb.dll, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\QQ2005\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
  {561A6665-79B5-456E-BA79-C6D21F6BC06C} <C:\WINDOWS\system32\Divknj.dll, N/A>
[]
  {5A1012DF-0B3E-4444-99FE-647E66F2960E} <C:\WINDOWS\system32\Ivzf.dll, N/A>
[]
  {5ED0015A-748A-4A2D-B0A1-3BB8732FDD1E} <C:\WINDOWS\system32\Uxhv.dll, N/A>
[]
  {5F28FB65-3A7F-4CF6-A71B-7B74F97FA5C2} <C:\WINDOWS\system32\Ybvwv.dll, N/A>
[]
  {5F2C8104-3C6E-4E3B-AC18-98020A003028} <C:\WINDOWS\system32\Czbwv.dll, N/A>
[]
  {620D4400-050F-4EB7-AC0E-28284A727E60} <C:\WINDOWS\system32\Xpdk.dll, N/A>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[金山快译(&K)]
  {6C3797D2-3FEF-4CD4-B654-D3AE55B4128C} <D:\Kingsoft\FastAIT 2005\IEBand.dll, 金山软件股份有限公司>
[]
  {727F1999-7A06-4D11-AA25-BD83989151C6} <C:\WINDOWS\system32\Shhd.dll, N/A>
[]
  {740D7035-9886-42EF-83F4-CF2DBDE2A25E} <C:\WINDOWS\system32\Mveq.dll, N/A>
[]
  {76F0CAE4-3D9D-4E13-91EC-6A6A90DF3BD6} <C:\WINDOWS\system32\Esrzmm.dll, N/A>
[]
  {7C2E1B06-B7FB-487F-A2A6-727B68544700} <C:\WINDOWS\system32\Rlvatj.dll, N/A>
[]
  {7D96A826-926F-4542-9C45-EA020AA5B4AE} <C:\WINDOWS\system32\Bsbep.dll, N/A>
[]
  {7F2EE239-6EE8-4449-A6F1-8C8AFF432892} <C:\WINDOWS\system32\Wpmu.dll, N/A>
[]
  {84F4BF21-B880-4F2D-BFA6-B8C97D9B5D0F} <C:\WINDOWS\system32\Acbex.dll, N/A>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[]
  {8C13AC53-A1CA-4910-9DA2-DBBB4C6208F7} <C:\WINDOWS\system32\Knxlyo.dll, N/A>
[]
  {8D187EB7-86C7-4ADE-A4C5-B51289E9E879} <C:\WINDOWS\system32\Wuzmx.dll, N/A>
[]
  {913F8EFE-6844-41E9-A4E7-60BFA2EFB8C6} <C:\WINDOWS\system32\Fdadi.dll, N/A>
[ADefaultSearch Class]
  {944864A5-3916-46E2-96A9-A2E84F3F1208} <C:\Program Files\Accoona\ASearchAssist.dll, Accoona Corp.>
[]
  {9DB265D1-05F8-48AC-9C35-6C330600640B} <C:\WINDOWS\system32\Oqhhw.dll, N/A>
[]
  {A042F185-DC8C-4877-8D28-B9DF503B4B0A} <C:\WINDOWS\system32\Uofnu.dll, N/A>
[]
  {A7D93CF6-A1E7-42A0-B7F8-8B79E2514C82} <C:\WINDOWS\system32\Zegq.dll, N/A>
[Google Toolbar Helper]
  {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[]
  {AADBEA17-33F9-4A16-8999-3AC4EE665B5A} <C:\WINDOWS\system32\Klgkvl.dll, N/A>
[]
  {ABBB6215-A57F-47B7-9DE3-0F2C57A4C48B} <C:\WINDOWS\system32\Xadxc.dll, N/A>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[]
  {B015C48B-007D-4276-B60C-2644268647B0} <C:\WINDOWS\system32\Iypbh.dll, N/A>
[]
  {B137A194-DA37-495D-88DE-0D196D9658A5} <C:\WINDOWS\system32\Lvbz.dll, N/A>
[]
  {B30C9CCF-142A-4A78-8E2B-50ADD688058F} <C:\WINDOWS\system32\Qvcz.dll, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Messenger Object]
  {B69003B3-C55E-4B48-836C-BC5946FC3B28} <C:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[]
  {B8D68AED-AF0B-429D-8CE7-20E7DE4179EC} <C:\WINDOWS\system32\Yolk.dll, N/A>
[]
  {BC2D75F0-D7D9-4E30-B25E-9E84AB726177} <C:\WINDOWS\system32\Azam.dll, N/A>
[]
  {C10C6A1D-6BCA-4E25-AE3C-27AF5CEB5839} <C:\WINDOWS\system32\Drfm.dll, N/A>
[OusArqgw Class]
  {C333AC8D-07D3-4E24-2480-637B517A98CB} <, N/A>
[NTIECatcher Class]
  {C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, Xi>
[IEHlprObj Class]
  {C5E5DB7E-46B1-47E6-8447-2E517F269925} <e:\Xplus\GETIE.dll, N/A>
[]
  {C62C7E91-460D-4302-B1A8-C7275B0A2BE3} <C:\WINDOWS\system32\Kejmi.dll, N/A>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[]
  {D38CBB69-48B2-425F-AF75-EA1A04C5F3B6} <C:\WINDOWS\system32\Snpi.dll, N/A>
[]
  {D3FB54EE-B92D-4A37-8C04-9C34F6601A5A} <C:\WINDOWS\system32\Qkkiby.dll, N/A>
[]
  {D4002B83-764E-4167-9841-C06C5BE4B7E5} <C:\WINDOWS\system32\Vawxp.dll, N/A>
[]
  {E748A3BB-322C-4807-B9C8-BB374CAFB5B2} <C:\WINDOWS\system32\Lqjtc.dll, N/A>
[]
  {EB830457-A7A7-4C7B-82D0-27A9532028BE} <C:\WINDOWS\system32\Pzftbv.dll, N/A>
[]
  {EBA0CE93-57B7-4DD2-A7A1-AB0F39497891} <C:\WINDOWS\system32\Cuftko.dll, N/A>
[Yahoo! Toolbar]
  {EF99BD32-C1FB-11D2-892F-0090271D4F88} <C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll, Yahoo! Inc.>
[BHelper Class]
  {F2E37336-BFDB-409B-8D0E-6F013C438B20} <C:\WINDOWS\043o05e0.dll, N/A>
[]
  {F69F8E42-055F-413B-BF1C-926D857B9D1E} <C:\WINDOWS\system32\Jqvjxu.dll, N/A>
[]
  {FB4777A3-7B05-437A-8E38-BF2BA5602C18} <C:\WINDOWS\system32\Wumht.dll, N/A>
[]
  {FF3736A8-CDFB-4F76-BE32-FBFE726748AC} <C:\WINDOWS\system32\Rvfd.dll, N/A>
[上传到QQ网络硬盘]
  <C:\Program Files\QQ2005\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\QQ2005\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\QQ2005\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\QQ2005\SendMMS.htm, N/A>
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 09:35 | 显示全部 短消息 资料
字号： 小 中 大 5楼

正在运行的进程
[PID: 672][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 728][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 752][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 800][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 812][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 960][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1096][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1252][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1272][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1612][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\CNMLM3y.DLL]  <CANON INC.><1.52.2.0>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD3y.DLL]  <CANON INC.><1.52.2.0>
[PID: 1620][C:\WINDOWS\Explorer.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\WINDOWS\system32\Qnhc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Zegq.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wuzmx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Azam.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Acbex.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Fndu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Divknj.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xpdk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Yolk.dll]  <N/A><N/A>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
    [C:\WINDOWS\system32\Fdadi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Jhiyc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wumht.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ivzf.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Llwyv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Snpi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ybvwv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Lvbz.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Toohnx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xadxc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Vawxp.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Pzftbv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Auqf.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Kejmi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rvfd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Klgkvl.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Qvcz.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Taojx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ixya.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Zhadex.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Uofnu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rlvatj.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wpmu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Bsbep.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Czbwv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Shhd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Lqjtc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Mbvy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xyvsh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Knxlyo.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Narqh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ekcdnb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Nfnzsy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rrruy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Jjsb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Uxhv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Iypbh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Dqlpjw.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Oqhhw.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Awrlop.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ytmnd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Esrzmm.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Syklb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\msicn\msibm.dll]  <广州傲讯信息科技有限公司><2, 0, 0, 1>
    [C:\WINDOWS\system32\msicn\plugins\bse.dll]  <广州傲讯信息科技有限公司><2, 0, 0, 1>
    [C:\WINDOWS\system32\msicn\plugins\lup.dll]  <N/A><N/A>
[PID: 244][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\DOCUME~1\a\TEMPLA~1\c54c647\1.dll]  <千橡互联><3, 0, 1, 0>
    [C:\DOCUME~1\a\TEMPLA~1\c54c647\3.dll]  <千橡互联><3, 0, 1, 0>
    [C:\DOCUME~1\a\TEMPLA~1\c54c647\4.dll]  <千橡互联><3, 0, 1, 0>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
[PID: 3560][C:\WINDOWS\WINLOGON.EXE]  <mS8kajsdHusy><0.00.0088>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
[PID: 3580][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3275>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
[PID: 4064][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
    [C:\WINDOWS\system32\msicn\msibm.dll]  <广州傲讯信息科技有限公司><2, 0, 0, 1>
[PID: 4640][C:\Program Files\Messenger\msmsgs.exe]  <Microsoft Corporation><4.7.3001>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
[PID: 3460][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 2192][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 09:36 | 显示全部 短消息 资料
字号： 小 中 大 6楼

[PID: 3516][E:\tt\TTraveler.exe]  <腾讯公司><3.0.0.250>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
    [E:\tt\Plugins\TWeather\TWeather.dll]  <><1, 0, 0, 3>
    [E:\tt\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
    [C:\WINDOWS\system32\Qnhc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Zegq.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wuzmx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Azam.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Acbex.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Fndu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Divknj.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xpdk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Yolk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Fdadi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Jhiyc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wumht.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ivzf.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Llwyv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Snpi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ybvwv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Lvbz.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Toohnx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xadxc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Vawxp.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Pzftbv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Auqf.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Kejmi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rvfd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Klgkvl.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Qvcz.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Taojx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ixya.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Zhadex.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Uofnu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rlvatj.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wpmu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Bsbep.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Czbwv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Shhd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Lqjtc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Mbvy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xyvsh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Knxlyo.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Narqh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ekcdnb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Nfnzsy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rrruy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Jjsb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Uxhv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Iypbh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Dqlpjw.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Oqhhw.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Awrlop.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ytmnd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Esrzmm.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Syklb.dll]  <N/A><N/A>
    [C:\PROGRA~1\CNNIC\Cdn\iesrch.dll]  <CNNIC><2, 2, 0, 0>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
    [C:\WINDOWS\system32\msicn\msibm.dll]  <广州傲讯信息科技有限公司><2, 0, 0, 1>
    [C:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  <Macromedia, Inc.><10.1r11>
[PID: 3124][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\drivers\mcqd\add.dll]  <N/A><N/A>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
[PID: 480][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
    [C:\WINDOWS\system32\Qnhc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Zegq.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wuzmx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Azam.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Acbex.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Fndu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Divknj.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xpdk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Yolk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Fdadi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Jhiyc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wumht.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ivzf.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Llwyv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Snpi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ybvwv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Lvbz.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Toohnx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xadxc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Vawxp.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Pzftbv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Auqf.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Kejmi.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rvfd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Klgkvl.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Qvcz.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Taojx.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ixya.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Zhadex.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Uofnu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rlvatj.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wpmu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Bsbep.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Czbwv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Shhd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Lqjtc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Mbvy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xyvsh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Knxlyo.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Narqh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ekcdnb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Nfnzsy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rrruy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Jjsb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Uxhv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Iypbh.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Dqlpjw.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Oqhhw.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Awrlop.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ytmnd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Esrzmm.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Syklb.dll]  <N/A><N/A>
[PID: 2508][C:\DOCUME~1\a\LOCALS~1\Temp\Rar$EX00.969\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\Program Files\TENCENT\Adplus\Adplus.dll]  <Tencent><4, 1, 10, 100>
    [C:\DOCUME~1\a\LOCALS~1\Temp\Rar$EX00.969\SREng2\Plugins\SREngPluginDemo.SRE]  <Smallfrogs Studio><1, 1, 1, 0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 09:43 | 显示全部 短消息 资料
字号： 小 中 大 7楼

【回复“闪电风暴”的帖子】

我不懂这个，这个是什么意思？
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 09:55 | 显示全部 短消息 资料
字号： 小 中 大 8楼

操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\WINLOGON.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
E:\tt\TTraveler.exe
C:\WINDOWS\system32\rundll32.exe
E:\tt\TCPlus.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\a\LOCALS~1\Temp\Rar$EX06.968\HijackThis1991zww.exe

R3 - URLSearchHook: (no name) - {D3FB54EE-B92D-4A37-8C04-9C34F6601A5A} - C:\WINDOWS\system32\Qkkiby.dll (file missing)
R3 - URLSearchHook: (no name) - {740D7035-9886-42EF-83F4-CF2DBDE2A25E} - C:\WINDOWS\system32\Mveq.dll (file missing)
R3 - URLSearchHook: (no name) - {0C9E1415-1F39-4171-BB69-381227A4E4E1} - C:\WINDOWS\system32\Orpij.dll (file missing)
R3 - URLSearchHook: (no name) - {C10C6A1D-6BCA-4E25-AE3C-27AF5CEB5839} - C:\WINDOWS\system32\Drfm.dll (file missing)
R3 - URLSearchHook: (no name) - {F69F8E42-055F-413B-BF1C-926D857B9D1E} - C:\WINDOWS\system32\Jqvjxu.dll (file missing)
R3 - URLSearchHook: (no name) - {EBA0CE93-57B7-4DD2-A7A1-AB0F39497891} - C:\WINDOWS\system32\Cuftko.dll (file missing)
R3 - URLSearchHook: (no name) - {2B37C6C0-96BA-4E9F-9E87-4DBD0C1DB142} - C:\WINDOWS\system32\Evfwd.dll (file missing)
R3 - URLSearchHook: (no name) - {13AAC815-5F23-4B1F-8F50-492BCC5AF3FA} - C:\WINDOWS\system32\Tvzc.dll (file missing)
R3 - URLSearchHook: (no name) - {26331A48-09AC-4B04-877A-CEB3EAF6BEF3} - C:\WINDOWS\system32\Qnhc.dll
R3 - URLSearchHook: (no name) - {A7D93CF6-A1E7-42A0-B7F8-8B79E2514C82} - C:\WINDOWS\system32\Zegq.dll
R3 - URLSearchHook: (no name) - {8D187EB7-86C7-4ADE-A4C5-B51289E9E879} - C:\WINDOWS\system32\Wuzmx.dll
R3 - URLSearchHook: (no name) - {BC2D75F0-D7D9-4E30-B25E-9E84AB726177} - C:\WINDOWS\system32\Azam.dll
R3 - URLSearchHook: (no name) - {84F4BF21-B880-4F2D-BFA6-B8C97D9B5D0F} - C:\WINDOWS\system32\Acbex.dll
R3 - URLSearchHook: (no name) - {4268EBE6-9973-43A1-B1F7-20A3A639E28A} - C:\WINDOWS\system32\Fndu.dll
R3 - URLSearchHook: (no name) - {561A6665-79B5-456E-BA79-C6D21F6BC06C} - C:\WINDOWS\system32\Divknj.dll
R3 - URLSearchHook: (no name) - {620D4400-050F-4EB7-AC0E-28284A727E60} - C:\WINDOWS\system32\Xpdk.dll
R3 - URLSearchHook: (no name) - {B8D68AED-AF0B-429D-8CE7-20E7DE4179EC} - C:\WINDOWS\system32\Yolk.dll
R3 - URLSearchHook: (no name) - {913F8EFE-6844-41E9-A4E7-60BFA2EFB8C6} - C:\WINDOWS\system32\Fdadi.dll
R3 - URLSearchHook: (no name) - {1C4D908D-4677-4F06-93B7-BB1AE8E0C546} - C:\WINDOWS\system32\Jhiyc.dll
R3 - URLSearchHook: (no name) - {FB4777A3-7B05-437A-8E38-BF2BA5602C18} - C:\WINDOWS\system32\Wumht.dll
R3 - URLSearchHook: (no name) - {2E3F7897-295C-46EC-A5FD-9F19BE2ACB9F} - C:\WINDOWS\system32\Gdzu.dll (file missing)
R3 - URLSearchHook: (no name) - {5A1012DF-0B3E-4444-99FE-647E66F2960E} - C:\WINDOWS\system32\Ivzf.dll
R3 - URLSearchHook: (no name) - {302F6FB5-3E72-49CA-AED3-D24DE62CF507} - C:\WINDOWS\system32\Llwyv.dll
R3 - URLSearchHook: (no name) - {D38CBB69-48B2-425F-AF75-EA1A04C5F3B6} - C:\WINDOWS\system32\Snpi.dll
R3 - URLSearchHook: (no name) - {5F28FB65-3A7F-4CF6-A71B-7B74F97FA5C2} - C:\WINDOWS\system32\Ybvwv.dll
R3 - URLSearchHook: (no name) - {B137A194-DA37-495D-88DE-0D196D9658A5} - C:\WINDOWS\system32\Lvbz.dll
R3 - URLSearchHook: (no name) - {393E1A9B-6B7F-4CB7-8A5E-0A060A3EC050} - C:\WINDOWS\system32\Toohnx.dll
R3 - URLSearchHook: (no name) - {ABBB6215-A57F-47B7-9DE3-0F2C57A4C48B} - C:\WINDOWS\system32\Xadxc.dll
R3 - URLSearchHook: (no name) - {D4002B83-764E-4167-9841-C06C5BE4B7E5} - C:\WINDOWS\system32\Vawxp.dll
R3 - URLSearchHook: (no name) - {EB830457-A7A7-4C7B-82D0-27A9532028BE} - C:\WINDOWS\system32\Pzftbv.dll
R3 - URLSearchHook: (no name) - {1AC7056A-5BD1-4C0F-89C6-80E601A2E463} - C:\WINDOWS\system32\Auqf.dll
R3 - URLSearchHook: (no name) - {C62C7E91-460D-4302-B1A8-C7275B0A2BE3} - C:\WINDOWS\system32\Kejmi.dll
R3 - URLSearchHook: (no name) - {FF3736A8-CDFB-4F76-BE32-FBFE726748AC} - C:\WINDOWS\system32\Rvfd.dll
R3 - URLSearchHook: (no name) - {AADBEA17-33F9-4A16-8999-3AC4EE665B5A} - C:\WINDOWS\system32\Klgkvl.dll
R3 - URLSearchHook: (no name) - {B30C9CCF-142A-4A78-8E2B-50ADD688058F} - C:\WINDOWS\system32\Qvcz.dll
R3 - URLSearchHook: (no name) - {51DE635C-1DAA-4A85-AD1F-F772FF81A471} - C:\WINDOWS\system32\Taojx.dll
R3 - URLSearchHook: (no name) - {39604B69-4A47-4A54-AF8D-30891A04F9E4} - C:\WINDOWS\system32\Ixya.dll
R3 - URLSearchHook: (no name) - {1A0F3E60-456D-4DF7-85C6-00A80A04A5E7} - C:\WINDOWS\system32\Zhadex.dll
R3 - URLSearchHook: (no name) - {A042F185-DC8C-4877-8D28-B9DF503B4B0A} - C:\WINDOWS\system32\Uofnu.dll
R3 - URLSearchHook: (no name) - {7C2E1B06-B7FB-487F-A2A6-727B68544700} - C:\WINDOWS\system32\Rlvatj.dll
R3 - URLSearchHook: (no name) - {7F2EE239-6EE8-4449-A6F1-8C8AFF432892} - C:\WINDOWS\system32\Wpmu.dll
R3 - URLSearchHook: (no name) - {7D96A826-926F-4542-9C45-EA020AA5B4AE} - C:\WINDOWS\system32\Bsbep.dll
R3 - URLSearchHook: (no name) - {5F2C8104-3C6E-4E3B-AC18-98020A003028} - C:\WINDOWS\system32\Czbwv.dll
R3 - URLSearchHook: (no name) - {727F1999-7A06-4D11-AA25-BD83989151C6} - C:\WINDOWS\system32\Shhd.dll
R3 - URLSearchHook: (no name) - {E748A3BB-322C-4807-B9C8-BB374CAFB5B2} - C:\WINDOWS\system32\Lqjtc.dll
R3 - URLSearchHook: (no name) - {04DA9EC7-934F-4778-9869-C987DC329450} - C:\WINDOWS\system32\Mbvy.dll
R3 - URLSearchHook: (no name) - {1633AB2D-6DAC-4130-9CA6-EFDFB8710BCF} - C:\WINDOWS\system32\Xyvsh.dll
R3 - URLSearchHook: (no name) - {8C13AC53-A1CA-4910-9DA2-DBBB4C6208F7} - C:\WINDOWS\system32\Knxlyo.dll
R3 - URLSearchHook: (no name) - {1A1C6764-014F-42F3-A51A-21C38230A303} - C:\WINDOWS\system32\Narqh.dll
R3 - URLSearchHook: (no name) - {1556BF31-6065-4EF7-BFBD-9F02500E8BEB} - C:\WINDOWS\system32\Ekcdnb.dll
R3 - URLSearchHook: (no name) - {422EFC36-1874-4697-B8E9-B4CAE56279A2} - C:\WINDOWS\system32\Nfnzsy.dll
R3 - URLSearchHook: (no name) - {2B6D4B1A-40EC-4AAF-9F2E-F142FFC16188} - C:\WINDOWS\system32\Rrruy.dll
R3 - URLSearchHook: (no name) - {52E9FE9B-FC52-45CD-BB50-CB462598C9F0} - C:\WINDOWS\system32\Jjsb.dll
R3 - URLSearchHook: (no name) - {5ED0015A-748A-4A2D-B0A1-3BB8732FDD1E} - C:\WINDOWS\system32\Uxhv.dll
R3 - URLSearchHook: (no name) - {B015C48B-007D-4276-B60C-2644268647B0} - C:\WINDOWS\system32\Iypbh.dll
R3 - URLSearchHook: (no name) - {4583B698-6D68-464D-A7CE-B17F8AC4F679} - C:\WINDOWS\system32\Dqlpjw.dll
R3 - URLSearchHook: (no name) - {9DB265D1-05F8-48AC-9C35-6C330600640B} - C:\WINDOWS\system32\Oqhhw.dll
R3 - URLSearchHook: (no name) - {0ED120A5-B521-4FEA-B5B4-00AA3E58F608} - C:\WINDOWS\system32\Awrlop.dll
R3 - URLSearchHook: (no name) - {040F1470-E88E-434B-A7B2-BCAE743C73C6} - C:\WINDOWS\system32\Ytmnd.dll
R3 - URLSearchHook: (no name) - {76F0CAE4-3D9D-4E13-91EC-6A6A90DF3BD6} - C:\WINDOWS\system32\Esrzmm.dll
R3 - URLSearchHook: (no name) - {368AE2BF-D6A5-4964-A3F7-936C2E08B78B} - C:\WINDOWS\system32\Syklb.dll
R3 - URLSearchHook: SrchHook Class - {EED92A43-CFCE-4548-BD73-B0A405470ED5} - C:\PROGRA~1\CNNIC\Cdn\iesrch.dll
O2 - BHO: (no name) - {040F1470-E88E-434B-A7B2-BCAE743C73C6} - C:\WINDOWS\system32\Ytmnd.dll
O2 - BHO: (no name) - {04DA9EC7-934F-4778-9869-C987DC329450} - C:\WINDOWS\system32\Mbvy.dll
O2 - BHO: MonitorURL Class - {08A312BB-5409-49FC-9347-54BB7D069AC6} - C:\PROGRA~1\DESKAD~1\deskipn.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - (no file)
O2 - BHO: (no name) - {0C9E1415-1F39-4171-BB69-381227A4E4E1} - C:\WINDOWS\system32\Orpij.dll (file missing)
O2 - BHO: ChajianHelper Class - {0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2} - C:\WINDOWS\system32\SYSREA~1.DLL
O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINDOWS\system32\wmpdrm.dll
O2 - BHO: (no name) - {0ED120A5-B521-4FEA-B5B4-00AA3E58F608} - C:\WINDOWS\system32\Awrlop.dll
O2 - BHO: (no name) - {13AAC815-5F23-4B1F-8F50-492BCC5AF3FA} - C:\WINDOWS\system32\Tvzc.dll (file missing)
O2 - BHO: (no name) - {1556BF31-6065-4EF7-BFBD-9F02500E8BEB} - C:\WINDOWS\system32\Ekcdnb.dll
O2 - BHO: (no name) - {1633AB2D-6DAC-4130-9CA6-EFDFB8710BCF} - C:\WINDOWS\system32\Xyvsh.dll
O2 - BHO: (no name) - {1A0F3E60-456D-4DF7-85C6-00A80A04A5E7} - C:\WINDOWS\system32\Zhadex.dll
O2 - BHO: (no name) - {1A1C6764-014F-42F3-A51A-21C38230A303} -


---PART1
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 09:55 | 显示全部 短消息 资料
字号： 小 中 大 9楼

PART 2

C:\WINDOWS\system32\Narqh.dll
O2 - BHO: (no name) - {1AC7056A-5BD1-4C0F-89C6-80E601A2E463} - C:\WINDOWS\system32\Auqf.dll
O2 - BHO: (no name) - {1C4D908D-4677-4F06-93B7-BB1AE8E0C546} - C:\WINDOWS\system32\Jhiyc.dll
O2 - BHO: (no name) - {26331A48-09AC-4B04-877A-CEB3EAF6BEF3} - C:\WINDOWS\system32\Qnhc.dll
O2 - BHO: (no name) - {2B37C6C0-96BA-4E9F-9E87-4DBD0C1DB142} - C:\WINDOWS\system32\Evfwd.dll (file missing)
O2 - BHO: (no name) - {2B6D4B1A-40EC-4AAF-9F2E-F142FFC16188} - C:\WINDOWS\system32\Rrruy.dll
O2 - BHO: (no name) - {2E3F7897-295C-46EC-A5FD-9F19BE2ACB9F} - C:\WINDOWS\system32\Gdzu.dll (file missing)
O2 - BHO: (no name) - {302F6FB5-3E72-49CA-AED3-D24DE62CF507} - C:\WINDOWS\system32\Llwyv.dll
O2 - BHO: enhp32 - {33559EBD-C831-4731-952F-E2BC2CC7B42F} - C:\WINDOWS\system32\enhp32.dll
O2 - BHO: (no name) - {368AE2BF-D6A5-4964-A3F7-936C2E08B78B} - C:\WINDOWS\system32\Syklb.dll
O2 - BHO: (no name) - {393E1A9B-6B7F-4CB7-8A5E-0A060A3EC050} - C:\WINDOWS\system32\Toohnx.dll
O2 - BHO: (no name) - {39604B69-4A47-4A54-AF8D-30891A04F9E4} - C:\WINDOWS\system32\Ixya.dll
O2 - BHO: IE Browser Helper - {3CE496D1-1746-41CD-9489-3C0B93DF10E2} - C:\WINDOWS\Downlo~1\xc0c0.dll (file missing)
O2 - BHO: (no name) - {422EFC36-1874-4697-B8E9-B4CAE56279A2} - C:\WINDOWS\system32\Nfnzsy.dll
O2 - BHO: (no name) - {4268EBE6-9973-43A1-B1F7-20A3A639E28A} - C:\WINDOWS\system32\Fndu.dll
O2 - BHO: Kmedia - {42D25F15-CF07-4A72-B191-DB0792BF310C} - C:\WINDOWS\system32\Kmedia.dll
O2 - BHO: (no name) - {4583B698-6D68-464D-A7CE-B17F8AC4F679} - C:\WINDOWS\system32\Dqlpjw.dll
O2 - BHO: (no name) - {51DE635C-1DAA-4A85-AD1F-F772FF81A471} - C:\WINDOWS\system32\Taojx.dll
O2 - BHO: (no name) - {52E9FE9B-FC52-45CD-BB50-CB462598C9F0} - C:\WINDOWS\system32\Jjsb.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\QQ2005\QQIEHelper.dll
O2 - BHO: (no name) - {561A6665-79B5-456E-BA79-C6D21F6BC06C} - C:\WINDOWS\system32\Divknj.dll
O2 - BHO: (no name) - {5A1012DF-0B3E-4444-99FE-647E66F2960E} - C:\WINDOWS\system32\Ivzf.dll
O2 - BHO: (no name) - {5ED0015A-748A-4A2D-B0A1-3BB8732FDD1E} - C:\WINDOWS\system32\Uxhv.dll
O2 - BHO: (no name) - {5F28FB65-3A7F-4CF6-A71B-7B74F97FA5C2} - C:\WINDOWS\system32\Ybvwv.dll
O2 - BHO: (no name) - {5F2C8104-3C6E-4E3B-AC18-98020A003028} - C:\WINDOWS\system32\Czbwv.dll
O2 - BHO: (no name) - {620D4400-050F-4EB7-AC0E-28284A727E60} - C:\WINDOWS\system32\Xpdk.dll
O2 - BHO: (no name) - {727F1999-7A06-4D11-AA25-BD83989151C6} - C:\WINDOWS\system32\Shhd.dll
O2 - BHO: (no name) - {740D7035-9886-42EF-83F4-CF2DBDE2A25E} - C:\WINDOWS\system32\Mveq.dll (file missing)
O2 - BHO: (no name) - {76F0CAE4-3D9D-4E13-91EC-6A6A90DF3BD6} - C:\WINDOWS\system32\Esrzmm.dll
O2 - BHO: (no name) - {7C2E1B06-B7FB-487F-A2A6-727B68544700} - C:\WINDOWS\system32\Rlvatj.dll
O2 - BHO: (no name) - {7D96A826-926F-4542-9C45-EA020AA5B4AE} - C:\WINDOWS\system32\Bsbep.dll
O2 - BHO: (no name) - {7F2EE239-6EE8-4449-A6F1-8C8AFF432892} - C:\WINDOWS\system32\Wpmu.dll
O2 - BHO: (no name) - {84F4BF21-B880-4F2D-BFA6-B8C97D9B5D0F} - C:\WINDOWS\system32\Acbex.dll
O2 - BHO: (no name) - {8C13AC53-A1CA-4910-9DA2-DBBB4C6208F7} - C:\WINDOWS\system32\Knxlyo.dll
O2 - BHO: (no name) - {8D187EB7-86C7-4ADE-A4C5-B51289E9E879} - C:\WINDOWS\system32\Wuzmx.dll
O2 - BHO: (no name) - {913F8EFE-6844-41E9-A4E7-60BFA2EFB8C6} - C:\WINDOWS\system32\Fdadi.dll
O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} - C:\Program Files\Accoona\ASearchAssist.dll
O2 - BHO: (no name) - {9DB265D1-05F8-48AC-9C35-6C330600640B} - C:\WINDOWS\system32\Oqhhw.dll
O2 - BHO: (no name) - {A042F185-DC8C-4877-8D28-B9DF503B4B0A} - C:\WINDOWS\system32\Uofnu.dll
O2 - BHO: (no name) - {A7D93CF6-A1E7-42A0-B7F8-8B79E2514C82} - C:\WINDOWS\system32\Zegq.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {AADBEA17-33F9-4A16-8999-3AC4EE665B5A} - C:\WINDOWS\system32\Klgkvl.dll
O2 - BHO: (no name) - {ABBB6215-A57F-47B7-9DE3-0F2C57A4C48B} - C:\WINDOWS\system32\Xadxc.dll
O2 - BHO: (no name) - {B015C48B-007D-4276-B60C-2644268647B0} - C:\WINDOWS\system32\Iypbh.dll
O2 - BHO: (no name) - {B137A194-DA37-495D-88DE-0D196D9658A5} - C:\WINDOWS\system32\Lvbz.dll
O2 - BHO: (no name) - {B30C9CCF-142A-4A78-8E2B-50ADD688058F} - C:\WINDOWS\system32\Qvcz.dll
O2 - BHO: (no name) - {B8D68AED-AF0B-429D-8CE7-20E7DE4179EC} - C:\WINDOWS\system32\Yolk.dll
O2 - BHO: (no name) - {BC2D75F0-D7D9-4E30-B25E-9E84AB726177} - C:\WINDOWS\system32\Azam.dll
O2 - BHO: (no name) - {C10C6A1D-6BCA-4E25-AE3C-27AF5CEB5839} - C:\WINDOWS\system32\Drfm.dll (file missing)
O2 - BHO: OusArqgw Class - {C333AC8D-07D3-4E24-2480-637B517A98CB} - (no file)
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: IEHlprObj Class - {C5E5DB7E-46B1-47E6-8447-2E517F269925} - e:\Xplus\GETIE.dll (file missing)
O2 - BHO: (no name) - {C62C7E91-460D-4302-B1A8-C7275B0A2BE3} - C:\WINDOWS\system32\Kejmi.dll
O2 - BHO: (no name) - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - (no file)
O2 - BHO: (no name) - {D38CBB69-48B2-425F-AF75-EA1A04C5F3B6} - C:\WINDOWS\system32\Snpi.dll
O2 - BHO: (no name) - {D3FB54EE-B92D-4A37-8C04-9C34F6601A5A} - C:\WINDOWS\system32\Qkkiby.dll (file missing)
O2 - BHO: (no name) - {D4002B83-764E-4167-9841-C06C5BE4B7E5} - C:\WINDOWS\system32\Vawxp.dll
O2 - BHO: (no name) - {E748A3BB-322C-4807-B9C8-BB374CAFB5B2} - C:\WINDOWS\system32\Lqjtc.dll
O2 - BHO: (no name) - {EB830457-A7A7-4C7B-82D0-27A9532028BE} - C:\WINDOWS\system32\Pzftbv.dll
O2 - BHO: (no name) - {EBA0CE93-57B7-4DD2-A7A1-AB0F39497891} - C:\WINDOWS\system32\Cuftko.dll (file missing)
O2 - BHO: BHelper Class - {F2E37336-BFDB-409B-8D0E-6F013C438B20} - C:\WINDOWS\043o05e0.dll
O2 - BHO: (no name) - {F69F8E42-055F-413B-BF1C-926D857B9D1E} - C:\WINDOWS\system32\Jqvjxu.dll (file missing)
O2 - BHO: (no name) - {FB4777A3-7B05-437A-8E38-BF2BA5602C18} - C:\WINDOWS\system32\Wumht.dll
O2 - BHO: (no name) - {FF3736A8-CDFB-4F76-BE32-FBFE726748AC} - C:\WINDOWS\system32\Rvfd.dll
O3 - IE工具栏增项: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - IE工具栏增项: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - D:\Kingsoft\FastAIT 2005\IEBand.dll
O3 - IE工具栏增项: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - IE工具栏增项: Accoona - {364B6276-C6C1-40B6-A6D7-6C48871FD707} - C:\Program Files\Accoona\atoolbar.dll
O4 - 启动项HKLM\\Run: [spoolsv] C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Xplus] "e:\Xplus\Xplus_Wait.exe" /min
O4 - HKCU\..\Run: [msnnt] C:\WINDOWS\Updated.exe
O4 - Startup: ADSL.lnk = ?
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\QQ2005\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\QQ2005\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\QQ2005\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\QQ2005\SendMMS.htm
O9 - 浏览器额外的按钮: 微软 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.microsoft.com/china/index.htm (file missing)
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\QQ2005\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\QQ2005\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\QQ2005\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\QQ2005\QQIEHelper.dll
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的按钮: 时尚精品，体验快感 - {6E5EECAF-8879-4a75-8A88-B44B6382A763} - http://adfarm.mediaplex.com/ad/ck/4080-22910-9640-61?cn=chaoyue;rgbutton_120x60;hp&mpro=http://www.ebay.com.cn (file missing) (HKCU)
O9 - 浏览器额外的“工具”菜单项: 易趣时尚购物 - {6E5EECAF-8879-4a75-8A88-B44B6382A763} - http://adfarm.mediaplex.com/ad/ck/4080-22910-9640-61?cn=chaoyue;rgbutton_120x60;hp&mpro=http://www.ebay.com.cn (file missing) (HKCU)
O11 - Options group: [TBH]  QQ地址栏搜索插件
O16 - DPF: {2761225D-F0F2-44E8-A2C9-476FB6A3316A} (TRadio Control) - http://dl_dir.qq.com/qqtools/trsetup.exe
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/supergerball/miniclipGameLoader.dll
O16 - DPF: {2931566C-B8A6-46C5-BF4D-E6AB9251E953} (Nexon Package Manager Control) - http://file.nx.com/activex/public_new/nxpm.cab
O16 - DPF: {5EC7C511-CD0F-42E6-830C-1BD9882F3458} (PowerPlayer Control) - http://download.ppstream.com/bin/powerplayer.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://mediamax.streamload.com/Upload/XUpload.ocx
O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} - http://cache10.itv.mop.com/pCastCtl_1.0.0.87_20060601.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7CD792CD-62C1-43A1-99B3-E51672EDED93}: NameServer = 202.96.128.86,202.96.128.166
O17 - HKLM\System\CCS\Services\Tcpip\..\{F93572D7-E284-4916-A7FC-568B0267B788}: NameServer = 202.96.128.86 202.96.128.166
O21 - SSODL: DelayRun - {5A6F2F95-3191-433B-8533-EB0B596A7BAC} - C:\WINDOWS\system32\043d05e0.dll
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: User Profile Hive Cleanup (UPHClean) - Unknown owner - C:\Program Files\UPHClean\uphclean.exe
gototop
 
美国总统mj
头像
初生襁褓狮
  • 帖子:11
  • 注册: 2005-12-11
  • 来自:
发表于： 2006-08-07 10:03 | 显示全部 短消息 资料
字号： 小 中 大 10楼

谢谢大虾！！
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT