瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 新的扫描报告，请大侠们帮我看看，谢谢！

1   1  /  1  页   跳转页

新的扫描报告，请大侠们帮我看看，谢谢！

收藏
雨之情怀
头像
初生襁褓狮
  • 帖子:62
  • 注册: 2006-05-05
  • 来自:
发表于： 2006-09-29 21:23 | 显示全部 短消息 资料
字号： 小 中 大 1楼

新的扫描报告，请大侠们帮我看看，谢谢！

最近发现电脑总是很慢，不知是否有问题，请大侠们帮忙看看，谢谢！

2006-09-29,21:11:54

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
    <swg><; C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe>  []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Client Access Check Version><; ; "C:\Program Files\IBM\Client Access\cwbckver.exe" LOGIN>  []
    <Client Access Express Welcome><; ; "C:\Program Files\IBM\Client Access\cwbwlwiz.exe">  []
    <Client Access Help Update><; ; "C:\Program Files\IBM\Client Access\cwbinhlp.exe">  []
    <Client Access Service><; ; "C:\Program Files\IBM\Client Access\cwbsvstr.exe">  []
    <HotKeysCmds><; ; C:\WINDOWS\system32\hkcmd.exe>  [Intel Corporation]
    <IgfxTray><; ; C:\WINDOWS\system32\igfxtray.exe>  [Intel Corporation]
    <IMJPMIG8.1><; ; rem ; ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <IMSCMig><; ; rem ; ; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [Microsoft Corporation]
    <PHIME2002A><; ; rem ; ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <PHIME2002ASync><; ; rem ; ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [Symantec Corporation]
    <vptray><C:\PROGRA~1\SYMANT~1\VPTray.exe>  [Symantec Corporation]
    <YLive.exe><; C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>  []
    <yassistse><; "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">  []
    <PCSuiteTrayApplication><C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup>  [Nokia]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
    <WinlogonNotify: NavLogon><C:\WINDOWS\system32\NavLogon.dll>  [Symantec Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINDOWS\system32\YORK_S~1.SCR>  [Acme Photo Software]

==================================
启动文件夹
[Connector]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Connector.lnk><N>
[万能五笔95_98_NT输入法]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\万能五笔95_98_NT输入法.lnk><N>
[金山词霸2006 专业版]
  <C:\Documents and Settings\Jame.Peng\「开始」菜单\程序\启动\金山词霸2006 专业版.lnk><N>

==================================
服务
[Autodesk Licensing Service / Autodesk Licensing Service]
  <"C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe"><Autodesk>
[Symantec Event Manager / ccEvtMgr]
  <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc]
  <"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr]
  <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Crypkey License / Crypkey License]
  <crypserv.exe><Kenonic Controls Ltd.>
[iSeries Access for Windows Remote Command / Cwbrxd]
  <C:\WINDOWS\CWBRXD.EXE><IBM Corporation>
[Symantec AntiVirus Definition Watcher / DefWatch]
  <"C:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
[DameWare Mini Remote Control / DWMRCS]
  <C:\WINDOWS\SYSTEM32\DWRCS.EXE -service><DameWare Development LLC>
[SavRoam / SavRoam]
  <"C:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec>
[ServiceLayer / ServiceLayer]
  <"C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe"><Nokia.>
[Symantec Network Drivers Service / SNDSrvc]
  <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec SPBBCSvc / SPBBCSvc]
  <"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><Symantec Corporation>
[Symantec AntiVirus / Symantec AntiVirus]
  <"C:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation>

==================================
最后编辑2006-09-29 21:19:22
分享到：
gototop
 
雨之情怀
头像
初生襁褓狮
  • 帖子:62
  • 注册: 2006-05-05
  • 来自:
发表于： 2006-09-29 21:24 | 显示全部 短消息 资料
字号： 小 中 大 2楼

第二部份：
==================================
浏览器加载项
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Yahoo!Photo]
  {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, N/A>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[DragSearch BHO]
  {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[&Research]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, N/A>
[易趣购物]
  {DE607142-AC19-422e-864A-4D70ABDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=5, N/A>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[MofileUploadX Control]
  {7260569F-1D40-4E7F-B95B-2E68D35668B9} <C:\WINDOWS\DOWNLO~1\MoUpload.ocx, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Yahoo!Photo]
  {33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, N/A>
[雅虎助手]
  {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[DragSearch BHO]
  {62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[  >> 彩信发送 <<]
  <res://C:\Program Files\MMSAssist\Mmsass~1.dll/mms.htm, N/A>
[E&xport to Microsoft Excel]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[上传到QQ网络硬盘]
  <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用影音传送带下载]
  <C:\PROGRA~1\Xi\NETTRA~1\NTAddLink.html, N/A>
[使用影音传送带下载全部链接]
  <C:\PROGRA~1\Xi\NETTRA~1\NTAddList.html, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[添加到雅虎订阅(&Y)]
  <res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
[雅虎搜索]
  <res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll/246, N/A>

==================================
gototop
 
雨之情怀
头像
初生襁褓狮
  • 帖子:62
  • 注册: 2006-05-05
  • 来自:
发表于： 2006-09-29 21:26 | 显示全部 短消息 资料
字号： 小 中 大 3楼

第三部份：
==================================
正在运行的进程
[PID: 580][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 644][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 668][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\NavLogon.dll]  <Symantec Corporation><10.0.0.359>
[PID: 712][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 724][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 896][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 968][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1064][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1132][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1216][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1352][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  <Symantec Corporation><103.5.1.9>
[PID: 1380][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.1.9>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\BB.DLL]  <Symantec Corporation><1,5,1,3>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\SPBBC\SPBBCEVT.DLL]  <Symantec Corporation><1,5,1,3>
    [C:\Program Files\Common Files\Symantec Shared\ccSet.dll]  <Symantec Corporation><103.5.1.9>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL]  <Symantec Corporation><103.5.1.9>
[PID: 1512][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
    [C:\WINDOWS\system32\pdfports.dll]  <Adobe Systems Incorporated.><5.0.000>
    [C:\Program Files\Adobe\Acrobat 5.0\Distillr\ADistRes.CHS]  <Adobe Systems Incorporated.><5.0.0.0>
    [C:\WINDOWS\system32\wfpmon.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBF252E.DLL]  <Hewlett-Packard Company><4.27.5100.430>
[PID: 224][C:\WINDOWS\system32\crypserv.exe]  <Kenonic Controls Ltd.><5.4.0>
[PID: 240][C:\Program Files\Symantec AntiVirus\DefWatch.exe]  <Symantec Corporation><10.0.0.359>
[PID: 280][C:\WINDOWS\SYSTEM32\DWRCS.EXE]  <DameWare Development LLC><4, 9, 2, 6>
[PID: 488][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  <Microsoft Corporation><7.00.9466>
[PID: 608][C:\Program Files\Symantec AntiVirus\SavRoam.exe]  <symantec><10.0.0.359>
    [C:\Program Files\Common Files\Symantec Shared\SSC\Transman.dll]  <Symantec Corporation><10.0.0.359>
    [C:\WINDOWS\system32\CBA.DLL]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\MsgSys.dll]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\NTS.dll]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\PDS.DLL]  <Intel? Corporation><6.12.0.130 E>
    [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  <Symantec Corporation><10.0.0.359>
[PID: 648][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 860][C:\Program Files\Symantec AntiVirus\Rtvscan.exe]  <Symantec Corporation><10.0.0.359>
    [C:\WINDOWS\system32\CBA.DLL]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\MsgSys.dll]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\NTS.dll]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\PDS.DLL]  <Intel? Corporation><6.12.0.130 E>
    [C:\Program Files\Symantec AntiVirus\NAVLU.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL]  <Symantec Corporation><10.0.0.359>
    [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Symantec AntiVirus\I2ldvp3.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccDec.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\decsdk.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll]  <Symantec Corporation><3.02.12.35>
    [C:\Program Files\Common Files\Symantec Shared\ccScan.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL]  <Symantec Corporation><1.4.0.11>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060928.036\ccEraser.dll]  <Symantec Corporation><106.2.2.68>
    [C:\Program Files\Symantec AntiVirus\DefUtDCD.dll]  <Symantec Corporation><3.1.13a.0>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060928.036\ecmsvr32.dll]  <Symantec Corporation><61.2.1.10>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060928.036\NAVEX32a.DLL]  <Symantec Corporation><20061.2.0.26>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060928.036\NAVENG32.DLL]  <Symantec Corporation><20061.2.0.26>
    [C:\Program Files\Symantec AntiVirus\NAVAP32.DLL]  <Symantec Corporation><9.5.0.44>
    [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  <Symantec Corporation><9.5.0.44>
    [C:\Program Files\Symantec AntiVirus\IMail.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Symantec AntiVirus\NotesExt.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Symantec AntiVirus\vpmsece3.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Symantec AntiVirus\SymProtectStorage.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCEvt.dll]  <Symantec Corporation><1,5,1,3>
    [C:\Program Files\Common Files\Symantec Shared\SSC\scandlgs.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Symantec AntiVirus\Cliscan.dll]  <Symantec Corporation><10.0.0.359>
[PID: 1180][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 1708][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1608][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\AcSignIcon.dll]  <Autodesk><16.2.54.0>
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  <Autodesk><16.2.54.0>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>
gototop
 
雨之情怀
头像
初生襁褓狮
  • 帖子:62
  • 注册: 2006-05-05
  • 来自:
发表于： 2006-09-29 21:26 | 显示全部 短消息 资料
字号： 小 中 大 4楼

第四部份：
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><7.0.7.2006011200>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll]  <Yahoo! China><1, 1, 3, 1035>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 9, 1049>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL]  <><1, 2, 7, 1006>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\IBM\Client Access\Shared\cwbunddh.dll]  <IBM Corporation><09.000>
    [C:\WINDOWS\system32\igfxpph.dll]  <Intel Corporation><3,0,0,2104>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3,0,0,2104>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3,0,0,2104>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3,0,0,2104>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3,0,0,2104>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ywiper.dll]  <N/A><1, 0, 1, 1014>
    [C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll]  <Nokia><6, 81, 46, 1>
    [C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll]  <Nokia><6, 81, 68, 0>
    [C:\WINDOWS\system32\ConnAPI.DLL]  <Nokia.><6, 81, 62, 0>
    [C:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr]  <Nokia><6, 81, 29, 0>
    [C:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr]  <Nokia><6, 81, 11, 0>
[PID: 1816][C:\WINDOWS\SYSTEM32\DWRCST.exe]  <DameWare Development><4, 9, 2, 6>
[PID: 2276][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2340][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  <Symantec Corporation><103.5.1.9>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  <Symantec Corporation><103.5.1.9>
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  <Symantec Corporation><103.5.1.9>
    [C:\WINDOWS\system32\SYMREDIR.DLL]  <Symantec Corporation><5.5.1.6>
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  <Symantec Corporation><103.5.1.9>
    [C:\Program Files\Symantec AntiVirus\SavEmail.dll]  <Symantec Corporation><10.0.0.359>
[PID: 2356][C:\PROGRA~1\SYMANT~1\VPTray.exe]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  <Symantec Corporation><9.5.0.44>
    [C:\Program Files\Symantec AntiVirus\Cliproxy.dll]  <Symantec Corporation><10.0.0.359>
    [C:\PROGRA~1\SYMANT~1\NAVNTUTL.DLL]  <Symantec Corporation><10.0.0.359>
    [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  <Symantec Corporation><10.0.0.359>
    [C:\WINDOWS\system32\nts.dll]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\cba.dll]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\MsgSys.dll]  <Intel? Corporation><6.12.0.130 E>
    [C:\WINDOWS\system32\PDS.DLL]  <Intel? Corporation><6.12.0.130 E>
[PID: 2400][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2412][C:\Program Files\WaveFax\Client\WFAXConn.exe]  <WaveSource><6.0.2.69>
    [C:\WINDOWS\system32\vcl60.bpl]  <Borland Software Corporation><6.0.6.240>
    [C:\WINDOWS\system32\rtl60.bpl]  <Borland Software Corporation><6.0.6.240>
    [C:\WINDOWS\system32\BCBRcStr.bpl]  <WaveSource><1.0.0.4>
    [C:\WINDOWS\system32\BORLNDMM.DLL]  <Borland Software Corporation><6.0.10.157>
    [C:\WINDOWS\system32\CC3260MT.DLL]  <Borland Corporation><0.0.0.0 (informal build)>
    [C:\WINDOWS\system32\Rz30Ctls60.bpl]  <Raize Software, Inc.><3.0.9.0>
    [C:\WINDOWS\system32\vclx60.bpl]  <Borland Software Corporation><6.0.6.163>
    [C:\Program Files\WaveFax\Client\NWCLIENT.DLL]  <Wavesource Technologies><3.30>
    [C:\Program Files\WaveFax\Client\IMPLODE.DLL]  <N/A><N/A>
    [C:\Program Files\WaveFax\Client\WPrint.dll]  <WaveSource Technology ><1, 0, 0, 1>
    [C:\Program Files\WaveFax\Client\TIFF32.dll]  <N/A><N/A>
    [C:\Program Files\WaveFax\Client\BITMANI.dll]  <N/A><N/A>
    [C:\PROGRA~1\WaveFax\Client\TIFFOP~1.DLL]  <><1, 0, 0, 1>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>
[PID: 2420][C:\!WNM\wnb.exe]  <N/A><N/A>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>
[PID: 2512][C:\PowerWord 2006\Xdict.exe]  <Kingsoft Co, Ltd.><9, 0, 0, 0>
    [C:\PowerWord 2006\AccountActivate.dll]  <N/A><N/A>
    [C:\PowerWord 2006\DicMngr.dll]  <Kingsoft><2, 0, 0, 0>
    [C:\PowerWord 2006\doshow.dll]  <N/A><N/A>
    [C:\PowerWord 2006\ITextOut.dll]  <Kingsoft><1, 1, 0, 0>
    [C:\PowerWord 2006\KPic10.dll]  <N/A><N/A>
    [C:\PowerWord 2006\ijl11.dll]  <Intel Corporation><1.1.2>
    [C:\PowerWord 2006\NormGrab.DLL]  <Kingsoft Co, Ltd.><6, 0, 0, 0>
    [C:\PowerWord 2006\toTTSEngine50.dll]  <Kingsoft Corporation><1, 0, 0, 1>
    [C:\PowerWord 2006\xfile.dll]  <N/A><N/A>
    [C:\PowerWord 2006\DBCore10.dll]  <Kingsoft  Corp.><1, 0, 0, 0>
    [C:\PowerWord 2006\XdictGrb.dll]  <Kingsoft Co, Ltd.><9, 0, 0, 0>
    [C:\PowerWord 2006\KAVPassport.DLL]  <Kingsoft Corporation><2005, 4, 7, 25>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>
[PID: 2776][C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe]  <Nokia.><6, 81, 60, 0>
    [C:\WINDOWS\system32\NclTools.dll]  <Nokia.><6, 81, 21, 1>
    [C:\Program Files\Common Files\PCSuite\Transports\NCLIrDAMM.dll]  <Nokia Corp.><6, 81, 27, 0>
    [C:\Program Files\Common Files\PCSuite\Transports\NCLRSMM.dll]  <Nokia><6, 81, 34, 1>
    [C:\Program Files\Common Files\PCSuite\Transports\NCLUSBMM.dll]  <Nokia><6, 81, 39, 1>
    [C:\Program Files\Common Files\PCSuite\Transports\NclMSBTMM.dll]  <Nokia.><6, 81, 40, 2>
[PID: 2472][C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE]  <Microsoft Corporation><11.0.5510>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>
    [C:\Program Files\Symantec AntiVirus\vpmsece3.dll]  <Symantec Corporation><10.0.0.359>
    [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  <Symantec Corporation><9.5.0.44>
    [C:\WINDOWS\system32\AcSignIcon.dll]  <Autodesk><16.2.54.0>
[PID: 2864][C:\WINDOWS\system32\DllHost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3372][C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE]  <Microsoft Corporation><11.0.5604>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBF252E.DLL]  <Hewlett-Packard Company><4.27.5100.430>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBF252G.DLL]  <Hewlett-Packard Company><4.27.5100.430>
[PID: 804][C:\Program Files\MSN Messenger\msnmsgr.exe]  <Microsoft Corporation><8.0.0812.00>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>
    [C:\WINDOWS\system32\AcSignIcon.dll]  <Autodesk><16.2.54.0>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
[PID: 3868][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3976][C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE]  <Microsoft Corporation><11.0.5612>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBF252E.DLL]  <Hewlett-Packard Company><4.27.5100.430>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBF252G.DLL]  <Hewlett-Packard Company><4.27.5100.430>
[PID: 3148][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\AcSignIcon.dll]  <Autodesk><16.2.54.0>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 9, 1049>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yaswiper.dll]  <Yahoo><1, 0, 1, 1004>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasiesec.dll]  <Yahoo><1, 0, 2, 1003>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasnoad.dll]  <><1, 1, 4, 1006>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yzsNetProto.dll]  <Yahoo><1, 0, 0, 1>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll]  <Yahoo! China><1, 1, 3, 1035>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll]  <Yahoo! China><1, 0, 1, 1015>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><7.0.7.2006011200>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL]  <><1, 2, 7, 1006>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  <Autodesk><16.2.54.0>
[PID: 3648][D:\Data-Bak\Soft\反病毒常用小工具\System Repair Engineer 2.0.21.505\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\!WNM\WNMKEY.DLL]  <N/A><N/A>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
gototop
 
雨之情怀
头像
初生襁褓狮
  • 帖子:62
  • 注册: 2006-05-05
  • 来自:
发表于： 2006-09-29 21:27 | 显示全部 短消息 资料
字号： 小 中 大 5楼

拜托大侠了，谢谢！
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT