请红夜鬼1和其他高手帮忙支援一下解决9505病毒, - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请红夜鬼1和其他高手帮忙支援一下解决9505病毒,

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

请红夜鬼1和其他高手帮忙支援一下解决9505病毒,

唐律疏议初生襁褓狮帖子:13 注册: 2005-12-22 来自:	发表于： 2006-12-29 19:30 \| 显示全部短消息资料字号：小中大 1楼请红夜鬼1和其他高手帮忙支援一下解决9505病毒, 一点IE就进入http://yahoo.5009.cn/(9505上网导航),瑞星警报有RootKit.AdProt.g病毒,并弹出其他窗口,而且自动强制安装网络电视软件,用yahoo助手\windows清理助手\卡卡上网助手修复后,重起又是原样.用ghost恢复C盘也无效.sreng2扫描报告在下面 ---按红夜鬼1的方法操作,现在只剩下二点:即IE就进入http://yahoo.5009.cn/(9505上网导航),和一个实用搜索工具条2.0无法删除,其他都没有了,希望再帮忙一下,sreng2扫描报告在下面 [CODE] 2006-12-29,19:14:15 System Repair Engineer 2.3.13.690 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <wallpaper><c:\windows\system32\壁纸自动换.exe> [N/A] <ltnward><C:\WINDOWS\system32\ltnward.exe> [N/A] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation] <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [N/A] <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <RavStub><"C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{4BAB150F-DD97-476D-9C1E-41B6CDC0CA7A}><C:\PROGRA~1\Yahoo!\ASSIST~1\yclickon.dll> [N/A] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <SysTime><C:\PROGRA~1\WinKld\WinKld.dll> [www.88dog.com] ================================== 启动文件夹 [星空极速] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\星空极速.lnk --> C:\PROGRA~1\ChinaNet\VNETCL~1.EXE []><N> ================================== 服务 [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon][Running/Auto Start] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 驱动程序 [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start] <system32\drivers\ac97intc.sys><Intel Corporation> [AMD K8 Processor Driver / AmdK8][Stopped/Manual Start] <System32\DRIVERS\amdk8.sys><Advanced Micro Devices> [Rising TDI Base Driver / BaseTDI][Running/Auto Start] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [ExpScaner / ExpScaner][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\ExpScan.sys><> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start] <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.> [HookCont / HookCont][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [Netgroup Packet Filter / NPF][Running/Manual Start] <system32\drivers\npf.sys><Politecnico di Torino> [npkcrypt / npkcrypt][Stopped/Auto Start] <\??\C:\Program Files\QQ2006\npkcrypt.sys><N/A> [nv / nv][Running/Manual Start] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [parcls / parcls][Stopped/Auto Start] <\??\C:\WINDOWS\system32\drivers\parcls.sys><N/A> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising> [Realtek 10/100/1000 NIC Family all in one NDIS XP Driver / RTL8023xp][Running/Manual Start] <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [TCP/IP Protocol Driver / Tcpip][Running/System Start] <system32\DRIVERS\tcpip.sys><Microsoft Corporation> ================================== 浏览器加载项 [Thunder Browser Helper] {0CA51D01-7739-43EA-8D9A-1E8AD4327B03} <D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD> [CPub Object] {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} <C:\Program Files\P4P\sodaie.dll, N/A> [VnetCookie Class] {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, > [DragSearch BHO] {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, N/A> [Vision] {6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\vision\vision.dll, N/A> [实用搜索] {6CFD436C-7AAD-4e50-992F-C0C87A94CAD2} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com> [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <D:\D盘之downloads\迅雷\Thunder.exe, Thunder Networking Technologies,LTD> [MMSAssistMenu] {6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\vision\vision.dll, N/A> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\QQ\QQ.EXE, N/A> [实用搜索工具条2.0] {03465FF5-00AE-411a-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com> [Windows Genuine Advantage Validation Tool] {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation> [实用搜索工具条2.0] {03465FF5-00AE-411A-9C34-960ED566EC03} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com> [Thunder Browser Helper] {0CA51D01-7739-43EA-8D9A-1E8AD4327B03} <D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD> [CPub Object] {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} <C:\Program Files\P4P\sodaie.dll, N/A> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [VnetCookie Class] {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, > [DragSearch BHO] {62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, N/A> [Vision] {6671A431-5C3D-463D-A7CF-5587F9B7E191} <C:\PROGRA~1\vision\vision.dll, N/A> [实用搜索] {6CFD436C-7AAD-4E50-992F-C0C87A94CAD2} <C:\Program Files\superutilbar\superutilbar.dll, www.shiyongsousuo.com> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9a.ocx, Adobe Systems, Inc.> [&使用迅雷下载] <D:\D盘之downloads\迅雷\Program\geturl.htm, N/A> [&使用迅雷下载全部链接] <D:\D盘之downloads\迅雷\Program\getallurl.htm, N/A> [>>彩信发送<<] <res://C:\PROGRA~1\vision\vision.dll/mms.htm, N/A> [上传到QQ网络硬盘] <D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\Program Files\Tencent\QQ\SendMMS.htm, N/A> 2006-12-29 19:41:28
唐律疏议初生襁褓狮帖子:13 注册: 2005-12-22 来自:	分享到：

唐律疏议初生襁褓狮帖子:13 注册: 2005-12-22 来自:	发表于： 2006-12-29 19:32 \| 显示全部短消息资料字号：小中大 2楼 ================================== 正在运行的进程 [PID: 436][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 500][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 524][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 568][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 580][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 736][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 780][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 888][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 904][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 952][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1036][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1060][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 39] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [C:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\Program Files\Rising\Rav\psapi.dll] [Microsoft Corporation, 4.00] [C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\Program Files\Rising\Rav\HookCont.dll] [Rising, 19, 0, 0, 0] [C:\Program Files\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 30] [C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 23] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18] [C:\Program Files\Rising\Rav\RsVM.dll] [N/A, 19, 0, 0, 13] [C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\ExtMail.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [PID: 1212][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\PROGRA~1\WinKld\Winkld.dat] [www.88dog.com, 2, 0, 0, 1] [C:\WINDOWS\system32\ltnwardl.dll] [N/A, 1, 0, 0, 1] [C:\WINDOWS\system32\browselc.dll] [Microsoft Corporation, 6.00.2600.0000] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 3] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [PID: 1356][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1440][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1716][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [PID: 2032][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 156][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 36] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 28] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 248][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
唐律疏议初生襁褓狮帖子:13 注册: 2005-12-22 来自:

唐律疏议初生襁褓狮帖子:13 注册: 2005-12-22 来自:	发表于： 2006-12-29 19:36 \| 显示全部短消息资料字号：小中大 3楼 [PID: 992][C:\Program Files\ChinaNet\VnetClient.exe] [, 2006, 6, 30, 11] [C:\Program Files\ChinaNet\Communicate.dll] [GDCN, 2006, 2, 15, 1] [C:\Program Files\ChinaNet\DialModule.dll] [GDCN, 2006, 7, 25, 15] [C:\Program Files\ChinaNet\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1] [C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX] [, 2006, 6, 2, 14] [C:\PROGRA~1\ChinaNet\sign.dll] [0, 2004, 12, 1, 1] [C:\PROGRA~1\ChinaNet\ADVERT~1.OCX] [, 2006, 2, 20, 1] [C:\PROGRA~1\ChinaNet\Gif89a.dll] [, 2005, 6, 21, 1] [C:\PROGRA~1\ChinaNet\VnetBs.ocx] [, 2004, 11, 18, 1] [C:\PROGRA~1\ChinaNet\VnetSkin.ocx] [GDDC, 2005, 12, 21, 1] [C:\PROGRA~1\ChinaNet\DialogStyle.dll] [, 1, 0, 0, 1] [C:\PROGRA~1\ChinaNet\BDSearch.ocx] [gdcn, 2005, 12, 22, 1] [C:\PROGRA~1\ChinaNet\PageFram.ocx] [Workgroup, 2006, 9, 21, 21] [C:\PROGRA~1\ChinaNet\AccPage.ocx] [, 6, 12, 6, 11] [C:\PROGRA~1\ChinaNet\AccountMgr.dll] [, 2006, 5, 26, 11] [C:\PROGRA~1\ChinaNet\Timer.ocx] [, 2006, 12, 5, 17] [C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX] [, 2006, 4, 4, 1] [C:\PROGRA~1\ChinaNet\NEWMES~1.DLL] [, 2006, 12, 5, 11] [C:\PROGRA~1\ChinaNet\PassCtrl.dll] [GDCN, 2006, 3, 1, 16] [C:\WINDOWS\system32\wpcap.dll] [Politecnico di Torino, 3, 0, 0, 18] [C:\WINDOWS\system32\pthreadVC.dll] [N/A, N/A] [C:\WINDOWS\system32\packet.dll] [Politecnico di Torino, 3, 0, 0, 18] [C:\PROGRA~1\ChinaNet\PlugPush.dll] [, 2004, 12, 21, 1] [C:\PROGRA~1\ChinaNet\ALLINT~1.DLL] [, 2006, 7, 19, 14] [C:\PROGRA~1\ChinaNet\VNETLO~1.OCX] [, 2005, 10, 9, 1] [C:\PROGRA~1\ChinaNet\StatNum.dll] [, 2006, 3, 1, 1] [C:\PROGRA~1\ChinaNet\VNETON~1.OCX] [, 2005, 3, 2, 1] [C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL] [GDCN, 2006, 8, 23, 16] [C:\PROGRA~1\ChinaNet\VnetOptLog.dll] [ , 2006, 5, 10, 14] [C:\PROGRA~1\ChinaNet\DlgSkin.ocx] [, 2005, 11, 14, 1] [C:\WINDOWS\system32\Macromed\Flash\Flash9a.ocx] [Adobe Systems, Inc., 9,0,0,296] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL] [Microsoft Corporation, 5.10.2927.0] [PID: 1524][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2664][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\browselc.dll] [Microsoft Corporation, 6.00.2600.0000] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 3] [c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1] [c:\PROGRA~1\chinanet\Communicate.dll] [GDCN, 2006, 2, 15, 1] [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9a.ocx] [Adobe Systems, Inc., 9,0,0,296] [PID: 2840][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\browselc.dll] [Microsoft Corporation, 6.00.2600.0000] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 3] [c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1] [c:\PROGRA~1\chinanet\Communicate.dll] [GDCN, 2006, 2, 15, 1] [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9a.ocx] [Adobe Systems, Inc., 9,0,0,296] [C:\WINDOWS\system32\WINABCX.IME] [PKUETI, 5.22.216] [PID: 648][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\browselc.dll] [Microsoft Corporation, 6.00.2600.0000] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 3] [c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1] [c:\PROGRA~1\chinanet\Communicate.dll] [GDCN, 2006, 2, 15, 1] [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 2288][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\browselc.dll] [Microsoft Corporation, 6.00.2600.0000] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 3] [c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1] [c:\PROGRA~1\chinanet\Communicate.dll] [GDCN, 2006, 2, 15, 1] [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9a.ocx] [Adobe Systems, Inc., 9,0,0,296] [PID: 2748][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\browselc.dll] [Microsoft Corporation, 6.00.2600.0000] [C:\Program Files\superutilbar\superutilbar.dll] [www.shiyongsousuo.com, 2, 1, 8, 24] [D:\D盘之downloads\迅雷\ComDlls\XunLeiBHO_006.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 3] [c:\PROGRA~1\chinanet\VNETTR~1.DLL] [, 2005, 4, 6, 1] [c:\PROGRA~1\chinanet\Communicate.dll] [GDCN, 2006, 2, 15, 1] [C:\PROGRA~1\ChinaNet\CLIENT~1.DLL] [, 2004, 2, 28, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [PID: 3732][D:\TDDOWNLOAD\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 202.109.114.142 survey88.allyes.com 202.109.114.142 adtaobao.allyes.com 202.109.114.142 code.qihoo.com 202.109.114.142 union.mop.com 202.109.114.142 js.kkunion.com 202.109.114.142 v.kkunion.com 202.109.114.142 v.21cn.com 202.109.114.142 iplusms.allyes.com 202.109.114.142 mms.t2t2.com 202.109.114.142 ivr.dobig.net 202.109.114.142 www.u8u.com 202.109.114.142 u.u8u.com 202.109.114.142 img.zhangxiu.com 202.109.114.142 tl.linktone.com 202.109.114.142 channel.e78.com 202.109.114.142 u.7town.com 202.109.114.142 union.95ol.com.cn 202.109.114.142 mms1.95ol.com.cn 202.109.114.142 mfs.95ol.com.cn 202.109.114.142 tl.a8.com 202.109.114.142 ad01.a8.com 202.109.114.142 u2.caiku.com 202.109.114.142 mms.caiku.com 202.109.114.142 code1.caiku.com 202.109.114.142 pub.lele.com 202.109.114.142 u.lele.com 202.109.114.142 7town.com 202.109.114.142 tvsend.7town.com 202.109.114.142 ivrsend.7town.com 202.109.114.142 tlt.7town.com 202.109.114.142 gsend.7town.com 202.109.114.142 smssend.7town.com 202.109.114.142 mmssend.moyu.com 202.109.114.142 91ivr.com 202.109.114.142 myad.91ivr.com 202.109.114.142 u.91ivr.com 202.109.114.142 union.91ivr.com 202.109.114.142 cm.p4p.cn.yahoo.com 202.109.114.142 un.265.com 202.109.114.142 union.qq.com 202.109.114.142 view.aliunion.cn.yahoo.com 202.109.114.142 union.narrowad.com 202.109.114.142 ln.heima8.com 202.109.114.142 www.fboat.cn 202.109.114.142 cpro.baidu.com 202.109.114.142 unstat.baidu.com 202.109.114.142 y.cnxad.com 202.109.114.142 www.ewowo.com 202.109.114.142 template.union.163.com 202.109.114.142 new.is686.com 202.109.114.142 creative.unionsys.bolaa.com 202.109.114.142 www.qyule.com 202.109.114.142 99e.cc 202.109.114.142 www.91ivr.com 202.109.114.142 mg.ukaka.com 202.109.114.142 kooxoo2.ad4all.net 202.109.114.142 www.8fff.com 202.109.114.142 union.pomoho.com 202.109.114.142 202.107.233.211 202.109.114.142 www.end123.com 202.109.114.142 w1.7clink.com 202.109.114.142 w2.7clink.com 202.109.114.142 union01.com 202.109.114.142 click.8le8le.com 202.109.114.142 stbanner.allyes.com 202.109.114.142 mms1.moyu.com 202.109.114.142 u.moyu.com 202.109.114.142 mmsu.moyu.com 202.109.114.142 show.moyu.com 202.109.114.142 ivrsend.moyu.com 202.109.114.142 ivru.moyu.com 202.109.114.142 ivr1.moyu.com 203.191.146.205 corep.dmcast.com 203.191.146.205 m081.dmcast.com 203.191.146.205 dcww.dmcast.com 203.191.146.205 renren.dmcast.com 203.191.146.205 files.henbang.net 203.191.146.205 bannerbox.cn 203.191.146.205 www.bannerbox.cn 203.191.146.205 action.coopen.cn 203.191.146.205 u4.sky99.cn 203.191.146.205 u1.sky99.cn 203.191.146.205 u2.sky99.cn 203.191.146.205 u3.sky99.cn 203.191.146.205 sky99.cn 203.191.146.205 u.sky99.cn 203.191.146.205 u.ete.cn 203.191.146.205 ip.alexaanywhere.com
唐律疏议初生襁褓狮帖子:13 注册: 2005-12-22 来自:

唐律疏议初生襁褓狮帖子:13 注册: 2005-12-22 来自:	发表于： 2006-12-29 19:37 \| 显示全部短消息资料字号：小中大 4楼 203.191.146.205 www.365tan.com 203.191.146.205 www.winopen.cn 203.191.146.205 www.tanip.com 203.191.146.205 alexaanywhere.com 203.191.146.205 jssb.alexaanywhere.com 203.191.146.205 ns250.alexaanywhere.com 203.191.146.205 sb.alexaanywhere.com 203.191.146.205 ip.alexaanywhere.com 203.191.146.205 pop.9v.cn 203.191.146.205 xuni.myad.cn 203.191.146.205 iebar.t2t2.com 203.191.146.205 error.newcell.cn 203.191.146.205 auto.search.msn.com 203.191.146.205 cns.3721.com 203.191.146.205 seek.3721.com 203.191.146.205 name.cnnic.cn 203.191.146.205 toolsbar.kuaiso.com 203.191.146.205 www.kuaiso.com 203.191.146.205 kuaiso.com 203.191.146.205 www.copyso.com 203.191.146.205 union.copyso.com 203.191.146.205 auto.search.msn.com 203.191.146.205 ok.mop-hz.com 203.191.146.205 www.ncast.cn 203.191.146.205 www.ads3721.com 203.191.146.205 360.ads3721.com 203.191.146.205 www.maohehe.com 203.191.146.205 www.5566.net 203.191.146.205 5566.net 203.191.146.205 www.gjj.cc 203.191.146.205 gjj.cc 203.191.146.205 www.9495.com 203.191.146.205 9495.com 203.191.146.205 my123.com 203.191.146.205 www.my123.com 203.191.146.205 7b.com.cn 203.191.146.205 www.7b.com.cn 203.191.146.205 www.3567.com 203.191.146.205 3567.com 203.191.146.205 www.37021.com 203.191.146.205 37021.com 203.191.146.205 k369.com 203.191.146.205 www.k369.com 203.191.146.205 www.haourl.com 203.191.146.205 haourl.com 203.191.146.205 www.37021.net 203.191.146.205 37021.net 203.191.146.205 www.4199.com 203.191.146.205 4199.com 203.191.146.205 www.9505.com 203.191.146.205 9505.com 203.191.146.205 7939.com 203.191.146.205 www.7939.com 203.191.146.205 www.3448.com 203.191.146.205 3448.com 203.191.146.205 8925.com 203.191.146.205 www.8925.com 203.191.146.205 www.ttmp3.com 203.191.146.205 ttmp3.com 203.191.146.205 www.3tg.cn 203.191.146.205 3tg.cn 203.191.146.205 www.ttjj.com 203.191.146.205 ttjj.com 203.191.146.205 www.59178.com 203.191.146.205 59178.com 203.191.146.205 www.987654.com 203.191.146.205 987654.com 203.191.146.205 www.zhao123.com 203.191.146.205 zhao123.com 203.191.146.205 123wa.com 203.191.146.205 www.123wa.com 203.191.146.205 www.159.com 203.191.146.205 soft.159.com 203.191.146.205 www.v111.com 203.191.146.205 v111.com 203.191.146.205 www.855.com 203.191.146.205 855.com 203.191.146.205 www.wu123.com 203.191.146.205 wu123.com 203.191.146.205 www.haodx.com 203.191.146.205 haodx.com 203.191.146.205 19ku.com 203.191.146.205 www.19ku.com 203.191.146.205 www.t2t2.com 203.191.146.205 t2t2.com 203.191.146.205 www.ku8.com 203.191.146.205 ku8.com 203.191.146.205 www.v23.com 203.191.146.205 v23.com 203.191.146.205 www.51115.com 203.191.146.205 www.52.com 203.191.146.205 52.com 203.191.146.205 www.qu123.com 203.191.146.205 qu123.com 203.191.146.205 www.haokan123.com 203.191.146.205 haokan123.com 203.191.146.205 www.kan123.com 203.191.146.205 kan123.com 203.191.146.205 hang123.com 203.191.146.205 www.hang123.com 203.191.146.205 3tom.com 203.191.146.205 www.3tom.com 203.191.146.205 www.anyso.com 203.191.146.205 anyso.com 203.191.146.205 59178.com 203.191.146.205 www.59178.com 203.191.146.205 t3j4.com 203.191.146.205 www.t3j4.com 203.191.146.205 www.zh130.com 203.191.146.205 zh130.com 203.191.146.205 www.8757.com 203.191.146.205 8757.com 203.191.146.205 www.7667.com 203.191.146.205 7667.com 203.191.146.205 ie.union123.com 203.191.146.205 www.daohangtu.com 203.191.146.205 daohangtu.com 203.191.146.205 www.ld123.com 203.191.146.205 ld123.com 203.191.146.205 www.369.com 203.191.146.205 369.com 203.191.146.205 91ni.com 203.191.146.205 www.91ni.com 203.191.146.205 www.17995.com 203.191.146.205 17995.com 203.191.146.205 www.sha123.com 203.191.146.205 sha123.com 203.191.146.205 www.lethot.com 203.191.146.205 lethot.com 203.191.146.205 www.8757.com 203.191.146.205 8757.com 203.191.146.205 4533.cn 203.191.146.205 6h.com.cn 203.191.146.205 www.6h.com.cn 203.191.146.205 www.jjol.cn 203.191.146.205 jjol.cn 203.191.146.205 wangzhiku.com 203.191.146.205 www.wangzhiku.com 203.191.146.205 www.1zhan.com 203.191.146.205 1zhan.com 203.191.146.205 www.262.com 203.191.146.205 262.com 203.191.146.205 www.365.com 203.191.146.205 365.com 203.191.146.205 www.4533.cn 203.191.146.205 4533.cn 203.191.146.205 31tg.com 203.191.146.205 www.31tg.com 203.191.146.205 tomatolei.com 203.191.146.205 www.tomatolei.com 203.191.146.205 999cha.com 203.191.146.205 www.999cha.com ================================== API HOOK N/A ================================== [/CODE]
唐律疏议初生襁褓狮帖子:13 注册: 2005-12-22 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT