瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【原创】QQpass、橙色八月、无法显示文件和文件夹，病毒打包一块中，痛苦

1   1  /  1  页   跳转页

【原创】QQpass、橙色八月、无法显示文件和文件夹，病毒打包一块中，痛苦

收藏
十步穿肠散
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-10-06
  • 来自:
发表于： 2006-10-06 02:52 | 显示全部 短消息 资料
字号： 小 中 大 1楼

【原创】QQpass、橙色八月、无法显示文件和文件夹，病毒打包一块中，痛苦

痛苦，今天赶着做文件，着急下个补丁，没有下载后检测，结果那个程序竟然是个最新打包的所有病毒的文件，橙色八月杀得差不多啦（瑞星），qqpass内存中还有，总是杀不掉，最可气的是“不显示隐藏文件夹和显示所有文件和文件夹” 两个都单选项都被选中，而且改动后自动恢复，看不到所有盘符的隐藏文件（注册表修复没用，恢复我以前的注册表都没有，应该是病毒吧）。想从装系统估计也白搭。同时system32底下还有个1.exe和4.exe，杀不掉，只能检测是毒暂时隔离开，还有就是一启动机子就弹出《Generic Host Process for Win32 Services》（找不到原因，网上传说中的四种可能性及对应方法都没用）错误，关闭，但不影响机子正常工作。
现在这些毒怎么这么厉害，以前咱还能手动解决，现在人脑+电脑=豆腐脑！！！！！
求救，求救。

附件附件:

下载次数:516
文件类型:image/pjpeg
文件大小:
上传时间:2006-10-6 2:52:12
描述:



最后编辑2006-10-06 10:52:33.420000000
分享到：
gototop
 
十步穿肠散
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-10-06
  • 来自:
发表于： 2006-10-06 03:15 | 显示全部 短消息 资料
字号： 小 中 大 2楼

2006-10-06,01:00:01

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Realtek Semiconductor Corp.]
    <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <KAVPersonal50><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize>  [Kaspersky Lab]
    <ADMTray.exe><"C:\Acer\Empowering Technology\admtray.exe">  [Avocent Inc.]
    <EPM-DM><c:\acer\Empowering Technology\ePower\epm-dm.exe>  [N/A]
    <Acer ePower Management><C:\Acer\Empowering Technology\ePower\Acer ePower Management.exe boot>  [N/A]
    <eDataSecurity Loader><C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe>  [N/A]
    <SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe>  [(Verified)Synaptics, Inc.]
    <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [(Verified)Synaptics, Inc.]
    <INPROCOMMWireless><C:\Program Files\Atheros\Wireless\Utility\WlanUtil.exe>  [N/A]
    <ACU><"C:\Program Files\Atheros\ACU.exe" -nogui>  [Atheros Communications, Inc.]
    <LaunchAp><"C:\Program Files\Launch Manager\LaunchAp.exe">  [N/A]
    <PowerKey><"C:\Program Files\Launch Manager\PowerKey.exe">  [N/A]
    <LManager><"C:\Program Files\Launch Manager\HotkeyApp.exe">  [Wistron]
    <CtrlVol><"C:\Program Files\Launch Manager\CtrlVol.exe">  [Wistron]
    <LMgrOSD><"C:\Program Files\Launch Manager\OSDCtrl.exe">  [N/A]
    <Wbutton><"C:\Program Files\Launch Manager\Wbutton.exe">  [N/A]
    <STTVUpdate><E:\Program Files\STTVh\STTVUpdate.exe "check">  [N/A]
    <SunJavaUpdateSched><"C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe">  [Sun Microsystems, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <GinaDLL><athgina.dll>  [Atheros]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{8A238B14-A6FF-11E0-9A84-00C04FD8DBD8}><C:\WINDOWS\system32\sysldr.dll>  [N/A]
    <{25E1EECB-E580-4032-97A2-A456D33820D1}><C:\Program Files\Outlook Express\mqq.dll>  [N/A]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    <WinlogonNotify: igfxcui><igfxdev.dll>  [(Verified)Intel Corporation]

==================================
启动文件夹
N/A

==================================
服务
[Atheros 配置服务 / ACS]
  <C:\WINDOWS\system32\acs.exe><N/A>
[Adobe LM Service / Adobe LM Service]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[ASP.NET State Service / aspnet_state]
  <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[AdminWorks Agent X6 / AWService]
  <"C:\Acer\Empowering Technology\admServ.exe"><Avocent Inc.>
[kavsvc / kavsvc]
  <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"><Kaspersky Lab>
[onServer / nServer]
  <C:\WINDOWS\system.dll><N/A>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[User Profile Hive Cleanup / UPHClean]
  <C:\Program Files\UPHClean\uphclean.exe><Microsoft Corporation>

==================================
驱动程序
[actser / actser]
  <system32\drivers\actser.sys><Siemens AG>
[AEGIS Protocol (IEEE 802.1x) v3.2.0.3 / AegisP]
  <system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Atheros Wireless Network Adapter Service / AR5211]
  <system32\DRIVERS\ar5211.sys><Atheros Communications, Inc.>
[BaseTDI / BaseTDI]
  <\??\C:\WINDOWS\system32\drivers\basetdi.sys><Beijing Rising Technology Co., Ltd.>
[d347bus / d347bus]
  <\SystemRoot\system32\DRIVERS\d347bus.sys><>
[d347prt / d347prt]
  <\SystemRoot\System32\Drivers\d347prt.sys><>
[Acer EPM Power Scheme Driver / EpmPsd]
  <\??\C:\WINDOWS\system32\drivers\epm-psd.sys><Acer Value Labs, USA>
[Acer EPM System Hardware Driver / EpmShd]
  <\??\C:\WINDOWS\system32\drivers\epm-shd.sys><Acer Value Labs, USA>
[ExpScaner / ExpScaner]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[giveio / giveio]
  <\SystemRoot\system32\giveio.sys><N/A>
[HookCont / HookCont]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[Hotkey / Hotkey]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Hotkey.SYS><N/A>
[HSFHWICH / HSFHWICH]
  <system32\DRIVERS\HSFHWICH.sys><Conexant Systems, Inc.>
[HSF_DPV / HSF_DPV]
  <system32\DRIVERS\HSF_DPV.sys><Conexant Systems, Inc.>
[ialm / ialm]
  <system32\DRIVERS\ialmnt5.sys><Intel Corporation>
[ids00035 / ids00035]
  <\??\C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids00035.sys><N/A>
[Klick / Klick]
  <\SystemRoot\System32\drivers\klick.sys><Kaspersky Lab>
[Klif / Klif]
  <System32\drivers\klif.sys><Kaspersky Labs>
[Klin / Klin]
  <\SystemRoot\System32\drivers\klin.sys><Kaspersky Lab>
[Klmc / Klmc]
  <System32\drivers\klmc.sys><Kaspersky Lab>
[mdmxsdk / mdmxsdk]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[MEMSCAN / MEMSCAN]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[OSA NdisFilter Protocol / NdisFilt]
  <System32\Drivers\NdisFilt.sys><OSA Technologies>
[Acer NetMonitor Protocol / NETMNT]
  <system32\DRIVERS\NETMNT.sys><N/A>
[npkcrypt / npkcrypt]
  <\??\e:\Program Files\Tencent\QQ\npkcrypt.sys><N/A>
[npkcusb / npkcusb]
  <\??\E:\Program Files\Tencent\QQ\npkcusb.sys><INCA Internet Co., Ltd.>
[OsaFsLoc / OsaFsLoc]
  <\??\C:\WINDOWS\system32\drivers\OsaFsLoc.sys><OSA Technologies>
[osaio / osaio]
  <\??\C:\WINDOWS\system32\drivers\osaio.sys><OSA Technologies, An Avocent Company>
[osanbm / osanbm]
  <\??\C:\WINDOWS\system32\drivers\osanbm.sys><Windows (R) 2000 DDK provider>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver / RTL8023xp]
  <system32\DRIVERS\Rtlnicxp.sys><Realtek Semiconductor Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[siusbmod / siusbmod]
  <system32\DRIVERS\siusbmod.sys><Siemens AG>
[speedfan / speedfan]
  <\SystemRoot\system32\speedfan.sys><N/A>
[Synaptics TouchPad Driver / SynTP]
  <system32\DRIVERS\SynTP.sys><Synaptics, Inc.>
[TCP/IP Protocol Driver / Tcpip]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[VCD VNC Virtual Network Adapter / vcddev]
  <system32\DRIVERS\vcdvnic.sys><VNN B.J.>
[Wbutton / Wbutton]
  <\SystemRoot\system32\drivers\Wbutton.sys><N/A>
gototop
 
十步穿肠散
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-10-06
  • 来自:
发表于： 2006-10-06 03:19 | 显示全部 短消息 资料
字号： 小 中 大 3楼

==================================
正在运行的进程
[PID: 416][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 464][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 488][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\athgina.dll]  [Atheros, 4.1.2.25]
    [C:\WINDOWS\system32\athcfg11.dll]  [Atheros, 4.1.2.25]
    [C:\WINDOWS\system32\athcfg11Res.dll]  [Atheros Communications, Inc., 4.1.2.25]
[PID: 532][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 544][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 720][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 776][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 812][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 832][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 872][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 932][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 972][C:\Program Files\Rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 35]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 18, 1, 0, 11]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\Rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\HookWeb.dll]  [rising, 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [C:\Program Files\Rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [C:\Program Files\Rising\Rav\MailMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [C:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 34]
[PID: 1124][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1172][C:\WINDOWS\system32\acs.exe]  [N/A, N/A]
    [C:\WINDOWS\system32\athcfg11.dll]  [Atheros, 4.1.2.25]
    [C:\WINDOWS\system32\athcfg11Res.dll]  [Atheros Communications, Inc., 4.1.2.25]
    [C:\WINDOWS\system32\athcfg11resloc.dll]  [Atheros Communications, Inc., 4.1.2.25]
    [C:\WINDOWS\system32\AegisE5.dll]  [Meetinghouse Data Communications, 3, 0, 16, 0]
[PID: 1272][C:\Acer\Empowering Technology\admServ.exe]  [Avocent Inc., 1.5.28.78]
    [C:\Acer\Empowering Technology\OsaFsLoc.dll]  [OSA Technologies Inc. Taiwan Branch, 2, 0, 0, 1]
    [C:\Acer\Empowering Technology\osaiodll.dll]  [OSA Technologies Inc. Taiwan Branch, 1, 1, 2, 16]
    [C:\Acer\Empowering Technology\IpmiTrans.dll]  [OSA Technologies Inc. Taiwan Branch, 1, 0, 3, 14]
    [C:\Acer\Empowering Technology\SYSAPI.dll]  [OSA Technologies Inc. Taiwan Branch, 1, 0, 5, 17]
    [C:\Acer\Empowering Technology\SMBIOSAPI.dll]  [OSA Technologies Inc. Taiwan Branch, 1, 0, 6, 7]
    [C:\Acer\Empowering Technology\cpuid_dll.dll]  [ OSA Technologies, Inc., 1, 0, 6, 13]
    [C:\Acer\Empowering Technology\NBAPI.dll]  [OSA Technologies Inc. Taiwan Branch, 1, 0, 1, 2]
    [C:\Acer\Empowering Technology\NetMonitor.dll]  [N/A, N/A]
    [C:\Acer\Empowering Technology\s_lm85m.dll]  [OSA Technologies, An Avocent Company, 1, 2, 2, 5]
    [C:\Acer\Empowering Technology\s_smsc47m1.dll]  [OSA Technologies, An Avocent Company, 1, 2, 4, 9]
    [C:\Acer\Empowering Technology\s_it87.dll]  [OSA Technologies, An Avocent Company, 1, 2, 2, 3]
[PID: 1348][C:\WINDOWS\system32\inetsrv\inetinfo.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1424][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  [Microsoft Corporation, 7.00.9466]
[PID: 1524][C:\Program Files\UPHClean\uphclean.exe]  [Microsoft Corporation, 1.5.5.21]
[PID: 1896][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2676][C:\WINDOWS\system32\wbem\wmiprvse.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3180][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2328][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
    [E:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [E:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  [Kaspersky Lab, 1.0.227.342]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [e:\Program Files\IDM Computer Solutions\UltraEdit-32\ue32ctmn.dll]  [, 1, 0, 0, 1]
gototop
 
十步穿肠散
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-10-06
  • 来自:
发表于： 2006-10-06 03:20 | 显示全部 短消息 资料
字号： 小 中 大 4楼

续上。。。。。 
[C:\WINDOWS\system32\eDSshellExt.dll]  [HiTRUST, 1, 20, 0, 0]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\shellex.dll]  [Kaspersky Lab, 5.0.227.1]
    [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.4384]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4384]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.4384]
    [C:\WINDOWS\system32\igfxress.dll]  [Intel Corporation, 3.0.0.4384]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4384]
    [E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.7.2006011200]
[PID: 3592][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Common Files\Microsoft Shared\MSInfo\MSINFO16.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3664][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5.1.0.38]
[PID: 2176][C:\Acer\Empowering Technology\admtray.exe]  [Avocent Inc., 1.6.23.36]
    [C:\Acer\Empowering Technology\ServiceControl.dll]  [N/A, N/A]
    [C:\Acer\Empowering Technology\OsaFsLoc.dll]  [OSA Technologies Inc. Taiwan Branch, 2, 0, 0, 1]
    [C:\Acer\Empowering Technology\InstallNdis.dll]  [OSA Technologies Inc. Taiwan Branch, 1, 0, 1, 3]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 2464][C:\acer\Empowering Technology\ePower\epm-dm.exe]  [Acer Inc, 2.80]
[PID: 3088][C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe]  [N/A, N/A]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
[PID: 1756][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\SynCOM.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\SynTPAPI.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3780][C:\Program Files\Atheros\ACU.exe]  [Atheros Communications, Inc., 4.1.2.25]
    [C:\WINDOWS\system32\wcapi.dll]  [Atheros, 4.1.2.25]
    [C:\WINDOWS\system32\athcfg11.dll]  [Atheros, 4.1.2.25]
    [C:\WINDOWS\system32\athcfg11Res.dll]  [Atheros Communications, Inc., 4.1.2.25]
    [C:\WINDOWS\system32\wgapi.dll]  [Atheros, 4.1.2.25]
    [C:\WINDOWS\system32\wgapiloc.dll]  [Atheros, 4.1.2.25]
    [C:\Program Files\Atheros\ACUloc.dll]  [Atheros Communications, Inc., 4.1.2.25]
    [C:\Program Files\Atheros\oemresloc.dll]  [Atheros Communications, Inc., 4.1.2.25]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3812][C:\Program Files\Launch Manager\LaunchAp.exe]  [, 1, 0, 1, 0]
[PID: 3820][C:\Program Files\Launch Manager\PowerKey.exe]  [, 1, 4, 4, 0]
[PID: 3720][C:\Program Files\Launch Manager\HotkeyApp.exe]  [Wistron, 1, 0, 7, 3]
    [C:\Program Files\Launch Manager\AlchemyXML.dll]  [Wistron Corporation, 1, 0, 0, 3]
    [C:\Program Files\Launch Manager\KBHOOK.dll]  [Wistron Corp., 1, 6, 0, 0]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3856][C:\Program Files\Launch Manager\OSDCtrl.exe]  [, 1, 0, 1, 2]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 1724][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\SynCOM.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 1752][C:\Program Files\Launch Manager\Wbutton.exe]  [, 1, 0, 6, 9]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3860][C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe]  [Sun Microsystems, Inc., 5.0.80.3]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3124][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3056][C:\Program Files\Messenger\msmsgs.exe]  [Microsoft Corporation, 4.7.3001]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 2868][E:\Program Files\Maxthon\Max.exe]  [Maxthon International Ltd., 1, 5, 3, 18]
    [E:\Program Files\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
    [E:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [E:\Program Files\DuDu\Speed\dddiemon.dll]  [DuDu.com, 5, 5, 0, 1]
    [E:\Program Files\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  [Kaspersky Lab, 1.0.227.342]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  [Kaspersky Lab, 1.0.227.3]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  [Kaspersky Lab, 5.0.227.0]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  [Kaspersky Lab, 5.0.227.0]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
[PID: 3440][E:\Program Files\DuDu\Speed\dudupros.exe]  [DuDu.com, 5, 0, 0, 1]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
    [E:\Program Files\DuDu\Speed\dhtiwl.dll]  [DuDu.com, 4.3.0.1]
[PID: 2476][C:\WINDOWS\system32\wscntfy.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3244][C:\Program Files\Rising\Rav\RsAgent.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
[PID: 3312][C:\WINDOWS\msagent\AgentSvr.exe]  [Microsoft Corporation, 2.00.0.3422]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
[PID: 3912][C:\Documents and Settings\Administrator\桌面\sreng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.13.2 04Feb05]
    [C:\WINDOWS\system32\MSNChatHook.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\sysenv.dll]  [HiTRUST, 1, 20, 0, 0]
gototop
 
十步穿肠散
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-10-06
  • 来自:
发表于： 2006-10-06 10:05 | 显示全部 短消息 资料
字号： 小 中 大 5楼

有没有人呀！！！
gototop
 
十步穿肠散
头像
初生襁褓狮
  • 帖子:6
  • 注册: 2006-10-06
  • 来自:
发表于： 2006-10-06 10:35 | 显示全部 短消息 资料
字号： 小 中 大 6楼

老大，关键是无法打开隐藏文件！什么都看不到，什么都找不到！~！！我的天哪。。。。
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT