我的瑞星监控禁用。。。小伞也没有了 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛在线技术支持 在线技术支持[已关闭] 我的瑞星监控禁用。。。小伞也没有了

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

我的瑞星监控禁用。。。小伞也没有了

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-21 23:37 \| 显示全部短消息资料字号：小中大 1楼我的瑞星监控禁用。。。小伞也没有了 HijackThis_815汉化版扫描日志 V1.99.1 是怎么扫啊。。。是下载还是本机上有啊。。。我的瑞星监控禁用。。。小伞也没有了每天都有几十个病毒帮一下，，谢谢 2006-09-24 02:54:39
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	分享到：

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-22 13:00 \| 显示全部短消息资料字号：小中大 2楼 HijackThis_815汉化版扫描日志 V1.99.1 保存于 12:40:12, 日期 2006-9-14 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Common Files\UPDATE2\Update.exe C:\WINDOWS\VM_STI.EXE D:\新建文件夹\Rising\Rav\RavTask.exe C:\Program Files\Common Files\{04D6F49B-05D8-2052-1027-050718200056}\Update.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\rundll32.exe D:\新建文件夹\Rising\Rav\Ravmon.exe C:\WINDOWS\system32\netdde.exe c:\windows\system32\srvany.exe C:\WINDOWS\system32\svchost.exe c:\windows\system32\SockClient.exe C:\WINDOWS\system32\tlntsvr.exe C:\WINDOWS\System32\svchost.exe D:\文件夹\Program\Thunder5.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\Meizi\LOCALS~1\Temp\Rar$EX00.656\HijackThis1991zww.exe R3 - URLSearchHook: (no name) - {6D53ADB7-6AD5-4A59-BFE4-7B57D2F4AA89} - (no file) F2 - REG:system.ini: UserInit=userinit.exe, O1 - Hosts: 125.91.1.20 localhost O1 - Hosts: 125.91.1.20 www.7939.com O1 - Hosts: 125.91.1.20 www.hao123.com O1 - Hosts: 125.91.1.20 www.9991.com O1 - Hosts: 125.91.1.20 www.5566.net O1 - Hosts: 125.91.1.20 www.gjj.cc O1 - Hosts: 125.91.1.20 www.265.com O1 - Hosts: 125.91.1.20 www.v111.com O1 - Hosts: 125.91.1.20 www.7322.com O2 - BHO: (no name) - {A9930D97-9CF0-42A0-A10D-4F28836579D5} - D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX O2 - BHO: QuickBtn - {D1BB7CF4-4463-4e91-88D7-ECC3CE0A13B7} - C:\Program Files\kuzhan\kuzhan.dll O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [AGRSMMSG] AGRSMMSG.exe O4 - 启动项HKLM\\Run: [SoundMan] SOUNDMAN.EXE O4 - 启动项HKLM\\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - 启动项HKLM\\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - 启动项HKLM\\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - 启动项HKLM\\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [Thunder] "D:\文件夹\Thunder.exe" /s O4 - 启动项HKLM\\Run: [winla] c:\winla\winla.exe O4 - 启动项HKLM\\Run: [RfwMain] "D:\新建文件夹\Rising\Rfw\rfwmain.exe" -Startup O4 - 启动项HKLM\\Run: [Update] C:\Program Files\Common Files\UPDATE2\Update.exe O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE USB PC Camera 301x O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - 启动项HKLM\\Run: [RavTask] "D:\新建文件夹\Rising\Rav\RavTask.exe" -system O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: IE-Bar.lnk = C:\Program Files\Common Files\IE-Bar\iebar.exe O8 - IE右键菜单中的新增项目: &使用迅雷下载 - D:\文件夹\Program\GetUrl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - D:\文件夹\Program\GetAllUrl.htm O8 - IE右键菜单中的新增项目: Add to QQ Customized Emoticons - D:\新建文件夹\AddEmotion.htm O8 - IE右键菜单中的新增项目: Add to QQ Customized Panel - D:\新建文件夹\AddPanel.htm O8 - IE右键菜单中的新增项目: Send Picture with QQ MMS - D:\新建文件夹\SendMMS.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\新建文件夹\331023320\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用KuGoo3下载(&K) - D:\Program Files\KuGoo3\KuGoo3DownX.htm O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\新建文件夹\331023320\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\新建文件夹\331023320\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\新建文件夹\331023320\SendMMS.htm O9 - 浏览器额外的按钮: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - D:\文件夹\Thunder.exe O9 - 浏览器额外的“工具”菜单项: 启动迅雷 - {0062C9BD-B349-40DE-91A0-755F37ACD559} - D:\文件夹\Thunder.exe O9 - 浏览器额外的按钮: 酷站导航 - {1D901067-2529-4A9B-9B6B-7A1DB3A44CB5} - C:\Program Files\kuzhan\kuzhan.dll O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\新建文件夹\331023320\QQ.EXE O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\新建文件夹\331023320\QQ.EXE O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\新建文件夹\331023320\QQIEHelper.dll (file missing) O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\新建文件夹\331023320\QQIEHelper.dll (file missing) O10 - 未知的文件在 Winsock LSP: c:\windows\system32\wshcon32.dll O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O21 - SSODL: DLMon - {590498A3-4131-4D8F-BA4B-36791A0803B1} - C:\WINDOWS\system32\DLMain.dll (file missing) O21 - SSODL: DVDBurn - {790448C3-4239-45AF-C98B-367991A8B103} - C:\WINDOWS\Downloaded Program Files\AfxEdit.dll (file missing) O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\新建文件夹\rising\rfw\rfwproxy.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Unknown owner - d:\新建文件夹\rising\rfw\rfwsrv.exe O23 - NT 服务: SockClient - Unknown owner - c:\windows\system32\srvany.exe
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-22 13:15 \| 显示全部短消息资料字号：小中大 3楼谢谢
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-23 03:11 \| 显示全部短消息资料字号：小中大 4楼解决7939.com问题(只能用手工，运行中找不到 realplayer.exe）手工清除: 双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹" 并清除"隐藏受保护的操作系统文件（推荐）"前面的钩。在提示确定更改时，单击“是” 然后确定中没找到"显示隐藏文件或文件夹" “隐藏受保护的操作系统文件”到是找到了。说什么删除了系统无法运行。
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-23 03:37 \| 显示全部短消息资料字号：小中大 5楼非常抱歉，又粘贴错了。很对不起。这个才是SRENG扫描日志 2006-09-15,03:23:39 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <{04D6F49B-05D8-2052-1027-050718200056}><"C:\Program Files\Common Files\{04D6F49B-05D8-2052-1027-050718200056}\Update.exe" te-110-12-0000040> [] <zz><C:\WINDOWS\system32\intenet.exe> [] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <AGRSMMSG><AGRSMMSG.exe> [Agere Systems] <SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.] <igfxtray><C:\WINDOWS\system32\igfxtray.exe> [Intel Corporation] <igfxhkcmd><C:\WINDOWS\system32\hkcmd.exe> [Intel Corporation] <igfxpers><C:\WINDOWS\system32\igfxpers.exe> [Intel Corporation] <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <winla><c:\winla\winla.exe> [] <RfwMain><"D:\新建文件夹\Rising\Rfw\rfwmain.exe" -Startup> [] <Update><C:\Program Files\Common Files\UPDATE2\Update.exe> [] <BigDogPath><C:\WINDOWS\VM_STI.EXE USB PC Camera 301x> [] <RavTask><"D:\新建文件夹\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <RavStub><"D:\新建文件夹\Rising\Rav\ravstub.exe" /RUNONCE> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <DLMon><C:\WINDOWS\system32\DLMain.dll> [] <DVDBurn><C:\WINDOWS\Downloaded Program Files\AfxEdit.dll> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] <WinlogonNotify: igfxcui><igfxdev.dll> [Intel Corporation] ================================== 启动文件夹服务 [Rising Proxy Service / RfwProxySrv] <d:\新建文件夹\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <d:\新建文件夹\rising\rfw\rfwsrv.exe><N/A> [Rising Process Communication Center / RsCCenter] <"D:\新建文件夹\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"D:\新建文件夹\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [SockClient / SockClient] <c:\windows\system32\srvany.exe><N/A> ================================== 浏览器加载项 [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A> [启动迅雷] {0062C9BD-B349-40DE-91A0-755F37ACD559} <D:\文件夹\Thunder.exe, Thunder Networking Technologies,LTD> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\新建文件夹\331023320\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\新建文件夹\331023320\QQIEHelper.dll, N/A> [Downloader Class] {5932517A-3326-4439-A708-1C98EDB5C549} <C:\WINDOWS\system32\iMopDl.dll, > [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\Mshtml.dll, N/A> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\WINDOWS\system32\dllcache\dhtmled.ocx, Microsoft Corporation> [] {4BBC1A4D-DD20-4980-A645-2E13F6FC286D} <C:\WINDOWS\system32\3721.1.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\新建文件夹\331023320\QQIEHelper.dll, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <D:\文件夹\Components\InMedia\MediaAddin07.dll, Thunder Networking Technologies,LTD> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\文件夹\ComDlls\XunLeiBHO_002.dll, N/A> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\Mshtml.dll, Microsoft Corporation> [XBTP03129 Class] {B07D1F6B-6B8C-4904-8EE8-5E5A2B4624B3} <C:\PROGRA~1\MICRSO~1\tbu05344\SEARCH~1.DLL, IE Toolbar> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [isObject Class] {BE0B5843-553A-48C2-9A42-258A1D791AFC} <C:\PROGRA~1\pcast\hbcast.dll, N/A> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [conimehlp Class] {F4149F9B-E707-4CC0-917F-C892652B62A3} <C:\WINDOWS\system32\mskey16.dll, N/A> [&使用迅雷下载] <D:\文件夹\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <D:\文件夹\Program\GetAllUrl.htm, N/A> [Add to QQ Customized Emoticons] <D:\新建文件夹\AddEmotion.htm, N/A> [Add to QQ Customized Panel] <D:\新建文件夹\AddPanel.htm, N/A> [Send Picture with QQ MMS] <D:\新建文件夹\SendMMS.htm, N/A> [上传到QQ网络硬盘] <D:\新建文件夹\331023320\AddToNetDisk.htm, N/A> [使用KuGoo3下载(&K)] <D:\Program Files\KuGoo3\KuGoo3DownX.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <D:\新建文件夹\331023320\AddPanel.htm, N/A> [添加到QQ表情] <D:\新建文件夹\331023320\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\新建文件夹\331023320\SendMMS.htm, N/A>
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-23 03:37 \| 显示全部短消息资料字号：小中大 6楼 ================================== 正在运行的进程 [PID: 496][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 552][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 576][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\allopnhh.dll] <N/A><N/A> [PID: 620][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 632][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 780][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 828][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 896][D:\新建文件夹\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 912][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [c:\windows\system32\wuauservs.dll] <N/A><N/A> [c:\windows\system32\allopnhh.dll] <N/A><N/A> [PID: 1020][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1144][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1248][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1264][D:\新建文件夹\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35> [D:\新建文件夹\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [D:\新建文件夹\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\新建文件夹\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\新建文件夹\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [D:\新建文件夹\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [D:\新建文件夹\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [D:\新建文件夹\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\新建文件夹\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [D:\新建文件夹\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [D:\新建文件夹\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [D:\新建文件夹\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\新建文件夹\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [D:\新建文件夹\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [D:\新建文件夹\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [D:\新建文件夹\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [D:\新建文件夹\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15> [D:\新建文件夹\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [D:\新建文件夹\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 16> [D:\新建文件夹\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [D:\新建文件夹\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [D:\新建文件夹\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [D:\新建文件夹\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\ScanNet.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [D:\新建文件夹\Rising\Rav\RsStore.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 1540][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1644][D:\新建文件夹\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [D:\新建文件夹\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1868][C:\WINDOWS\system32\netdde.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1980][c:\windows\system32\srvany.exe] <N/A><N/A> [PID: 2000][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2004][c:\windows\system32\SockClient.exe] <co.><1.00.0043> [PID: 2020][C:\WINDOWS\system32\tlntsvr.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 636][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\wuauservs.dll] <N/A><N/A> [D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A> [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [PID: 2164][C:\WINDOWS\AGRSMMSG.exe] <Agere Systems><2.1.46 2.1.46 07/22/2004 13:38:36> [PID: 2172][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.34> [PID: 2348][C:\WINDOWS\system32\hkcmd.exe] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\hccutils.DLL] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxres.dll] <Intel Corporation><3.0.0.4363> [PID: 2400][C:\WINDOWS\system32\igfxpers.exe] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.4363> [PID: 2472][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3208> [PID: 2516][C:\WINDOWS\VM_STI.EXE] <BIGDOG><4, 2, 610, 4> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [PID: 2540][D:\新建文件夹\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\新建文件夹\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 2580][C:\Program Files\Common Files\{04D6F49B-05D8-2052-1027-050718200056}\Update.exe] <N/A><N/A> [C:\Program Files\Common Files\{04D6F49B-05D8-2052-1027-050718200056}\services.dll] <N/A><N/A> [PID: 2596][D:\新建文件夹\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [D:\新建文件夹\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [D:\新建文件夹\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [D:\新建文件夹\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\新建文件夹\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\新建文件夹\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 2616][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1028][C:\DOCUME~1\Meizi\LOCALS~1\Temp\Rar$EX00.250\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 ==================================
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-23 04:25 \| 显示全部短消息资料字号：小中大 7楼 360安全卫士复修漏洞的SRENG扫描日志 2006-09-15,04:11:41 System Repair Engineer 2.0.21.505 (2.0 RC 2) Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <{04D6F49B-05D8-2052-1027-050718200056}><"C:\Program Files\Common Files\{04D6F49B-05D8-2052-1027-050718200056}\Update.exe" te-110-12-0000040> [] <zz><C:\WINDOWS\system32\intenet.exe> [] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation] <AGRSMMSG><AGRSMMSG.exe> [Agere Systems] <SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.] <igfxtray><C:\WINDOWS\system32\igfxtray.exe> [Intel Corporation] <igfxhkcmd><C:\WINDOWS\system32\hkcmd.exe> [Intel Corporation] <igfxpers><C:\WINDOWS\system32\igfxpers.exe> [Intel Corporation] <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <winla><c:\winla\winla.exe> [] <RfwMain><"D:\新建文件夹\Rising\Rfw\rfwmain.exe" -Startup> [] <Update><C:\Program Files\Common Files\UPDATE2\Update.exe> [] <BigDogPath><C:\WINDOWS\VM_STI.EXE USB PC Camera 301x> [] <RavTask><"D:\新建文件夹\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <RavStub><"D:\新建文件夹\Rising\Rav\ravstub.exe" /RUNONCE> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><EXPLORER.EXE> [Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation] <UIHost><logonui.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <DLMon><C:\WINDOWS\system32\DLMain.dll> [] <DVDBurn><C:\WINDOWS\Downloaded Program Files\AfxEdit.dll> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] <WinlogonNotify: igfxcui><igfxdev.dll> [Intel Corporation] ================================== 启动文件夹服务 [Rising Proxy Service / RfwProxySrv] <d:\新建文件夹\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService] <d:\新建文件夹\rising\rfw\rfwsrv.exe><N/A> [Rising Process Communication Center / RsCCenter] <"D:\新建文件夹\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon] <"D:\新建文件夹\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [SockClient / SockClient] <c:\windows\system32\srvany.exe><N/A> ================================== 浏览器加载项 [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A> [启动迅雷] {0062C9BD-B349-40DE-91A0-755F37ACD559} <D:\文件夹\Thunder.exe, Thunder Networking Technologies,LTD> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\新建文件夹\331023320\QQ.EXE, TENCENT> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\新建文件夹\331023320\QQIEHelper.dll, N/A> [Downloader Class] {5932517A-3326-4439-A708-1C98EDB5C549} <C:\WINDOWS\system32\iMopDl.dll, > [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\Mshtml.dll, N/A> [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\WINDOWS\system32\dllcache\dhtmled.ocx, Microsoft Corporation> [] {4BBC1A4D-DD20-4980-A645-2E13F6FC286D} <C:\WINDOWS\system32\3721.1.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\新建文件夹\331023320\QQIEHelper.dll, N/A> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <D:\文件夹\Components\InMedia\MediaAddin07.dll, Thunder Networking Technologies,LTD> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\文件夹\ComDlls\XunLeiBHO_002.dll, N/A> [] {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A> [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\Mshtml.dll, Microsoft Corporation> [XBTP03129 Class] {B07D1F6B-6B8C-4904-8EE8-5E5A2B4624B3} <C:\PROGRA~1\MICRSO~1\tbu05344\SEARCH~1.DLL, IE Toolbar> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [isObject Class] {BE0B5843-553A-48C2-9A42-258A1D791AFC} <C:\PROGRA~1\pcast\hbcast.dll, N/A> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.> [conimehlp Class] {F4149F9B-E707-4CC0-917F-C892652B62A3} <C:\WINDOWS\system32\mskey16.dll, N/A> [&使用迅雷下载] <D:\文件夹\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <D:\文件夹\Program\GetAllUrl.htm, N/A> [Add to QQ Customized Emoticons] <D:\新建文件夹\AddEmotion.htm, N/A> [Add to QQ Customized Panel] <D:\新建文件夹\AddPanel.htm, N/A> [Send Picture with QQ MMS] <D:\新建文件夹\SendMMS.htm, N/A> [上传到QQ网络硬盘] <D:\新建文件夹\331023320\AddToNetDisk.htm, N/A> [使用KuGoo3下载(&K)] <D:\Program Files\KuGoo3\KuGoo3DownX.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <D:\新建文件夹\331023320\AddPanel.htm, N/A> [添加到QQ表情] <D:\新建文件夹\331023320\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\新建文件夹\331023320\SendMMS.htm, N/A>
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-23 04:26 \| 显示全部短消息资料字号：小中大 8楼 ================================== 正在运行的进程 [PID: 496][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 644][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 668][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\allopnhh.dll] <N/A><N/A> [PID: 712][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 732][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 884][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 976][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1048][D:\新建文件夹\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 1064][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [c:\windows\system32\allopnhh.dll] <N/A><N/A> [c:\windows\system32\wuauservs.dll] <N/A><N/A> [PID: 1164][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1260][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1300][D:\新建文件夹\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35> [D:\新建文件夹\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [D:\新建文件夹\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\新建文件夹\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\新建文件夹\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20> [D:\新建文件夹\Rising\Rav\HOOKSYS.dll] <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11> [D:\新建文件夹\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32> [D:\新建文件夹\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\新建文件夹\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [D:\新建文件夹\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [D:\新建文件夹\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 2> [D:\新建文件夹\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [D:\新建文件夹\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [D:\新建文件夹\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [D:\新建文件夹\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 6> [D:\新建文件夹\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34> [D:\新建文件夹\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15> [D:\新建文件夹\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [D:\新建文件夹\Rising\Rav\RSUnpack.dll] <Beijing Rising Technology Co., Ltd.><1, 0, 0, 16> [D:\新建文件夹\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [D:\新建文件夹\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9> [D:\新建文件夹\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [D:\新建文件夹\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\RsStore.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [D:\新建文件夹\Rising\Rav\ScanNet.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [D:\新建文件夹\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [PID: 1432][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\igfxpph.dll] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\hccutils.DLL] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxres.dll] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxress.dll] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.4363> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1652][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)> [PID: 1748][D:\新建文件夹\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [D:\新建文件夹\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 2004][C:\WINDOWS\system32\netdde.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 356][C:\WINDOWS\AGRSMMSG.exe] <Agere Systems><2.1.46 2.1.46 07/22/2004 13:38:36> [PID: 436][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.34> [PID: 472][c:\windows\system32\srvany.exe] <N/A><N/A> [PID: 516][C:\WINDOWS\system32\hkcmd.exe] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\hccutils.DLL] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxres.dll] <Intel Corporation><3.0.0.4363> [PID: 576][c:\windows\system32\SockClient.exe] <co.><1.00.0043> [PID: 584][C:\WINDOWS\system32\igfxpers.exe] <Intel Corporation><3.0.0.4363> [C:\WINDOWS\system32\igfxsrvc.dll] <Intel Corporation><3.0.0.4363> [PID: 600][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1028][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3208> [PID: 956][C:\WINDOWS\VM_STI.EXE] <BIGDOG><4, 2, 610, 4> [C:\WINDOWS\system32\msdmo.dll] <N/A><N/A> [PID: 968][D:\新建文件夹\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\新建文件夹\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [PID: 1340][C:\WINDOWS\system32\tlntsvr.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 1392][D:\新建文件夹\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33> [D:\新建文件夹\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26> [D:\新建文件夹\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19> [D:\新建文件夹\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [D:\新建文件夹\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11> [D:\新建文件夹\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [D:\新建文件夹\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [D:\新建文件夹\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 1372][C:\Program Files\Common Files\{04D6F49B-05D8-2052-1027-050718200056}\Update.exe] <N/A><N/A> [C:\Program Files\Common Files\{04D6F49B-05D8-2052-1027-050718200056}\services.dll] <N/A><N/A> [PID: 1112][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 2092][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\wuauservs.dll] <N/A><N/A> [D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX] <N/A><N/A> [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0> [PID: 3196][C:\DOCUME~1\Meizi\LOCALS~1\Temp\Rar$EX00.765\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:

洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:	发表于： 2006-09-24 03:02 \| 显示全部短消息资料字号：小中大 9楼 SRENG中我没找到下面文件 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <{04D6F49B-05D8-2052-1027-050718200056}><"C:\Program Files\Common Files\{04D6F49B-05D8-2052-1027-050718200056}\Update.exe" te-110-12-0000040> [] 没找到以下文件是不是不能用“ljs3509反病毒及安全工具”啊。。。瑞星监控可以使用了
洛xx真初生襁褓狮帖子:20 注册: 2006-09-19 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT