高手.帮忙看一下.我是新人..中毒了!!! - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛高手.帮忙看一下.我是新人..中毒了!!!

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

高手.帮忙看一下.我是新人..中毒了!!!

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 14:29 \| 显示全部短消息资料字号：小中大 1楼高手.帮忙看一下.我是新人..中毒了!!! HijackThis_815汉化版扫描日志 V1.99.1 保存于 14:16:35, 日期 2006-12-30 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\S24EvMon.exe C:\WINDOWS\system32\ZCfgSvc.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Rising\Rav\Ravmond.exe c:\program files\rising\rfw\rfwsrv.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\rising\rfw\RfwMain.exe C:\WINDOWS\system32\1XConfig.exe C:\WINDOWS\ATK0100\Hcontrol.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\rxzs.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\31124.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\23186.exe C:\Program Files\Rising\AntiSpyware\runiep.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Rising\Rav\RavTask.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\WINDOWS\system32\ctfmon.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\18300.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\Zt2\SVCH0ST.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Tencent\QQ\QQ.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\eMule\emule.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Thunder Network\Thunder\Thunder.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Admin\桌面\xy2dl-2.0.150.exe C:\WINDOWS\system32\scvhsot.exe C:\WINDOWS\system32\conime.exe C:\Documents and Settings\Admin\桌面\新建文件夹 (2)\HijackThis1991zww.exe R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v8.dll O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\flashget\jccatch.dll O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\flashget\fgiebar.dll O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - 启动项HKLM\\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe O4 - 启动项HKLM\\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - 启动项HKLM\\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - 启动项HKLM\\Run: [AGRSMMSG] AGRSMMSG.exe O4 - 启动项HKLM\\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - 启动项HKLM\\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - 启动项HKLM\\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1 O4 - 启动项HKLM\\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe O4 - 启动项HKLM\\Run: [rxzs] C:\DOCUME~1\Admin\LOCALS~1\Temp\rxzs.exe O4 - 启动项HKLM\\Run: [mhs2] C:\DOCUME~1\Admin\LOCALS~1\Temp\18300.exe O4 - 启动项HKLM\\Run: [wlzs] C:\DOCUME~1\Admin\LOCALS~1\Temp\23186.exe O4 - 启动项HKLM\\Run: [runeip] C:\Program Files\Rising\AntiSpyware\runiep.exe O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [RfwMain] C:\Program Files\Rising\Rfw\rfwmain.exe O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 启动项HKLM\\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [myZt2] C:\DOCUME~1\Admin\LOCALS~1\Temp\Zt2\SVCH0ST.EXE O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\PROGRA~1\flashget\jc_link.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\PROGRA~1\flashget\jc_all.htm O8 - IE右键菜单中的新增项目: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\flashget\flashget.exe O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\flashget\flashget.exe O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O20 - AppInit_DLLs: 721815M.BMP O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll O23 - NT 服务: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - c:\program files\rising\rfw\rfwsrv.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe O23 - NT 服务: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe 用什么才能杀掉???我把病毒杀了.他又蹦出来。烦死@!1!! 2006-12-30 15:45:03
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	分享到：

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 14:31 \| 显示全部短消息资料字号：小中大 2楼昨天我杀了800多个病毒出来.吓了死我了!!
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 14:38 \| 显示全部短消息资料字号：小中大 3楼怎么没有反映啊.那位高手帮帮忙啊!!
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 14:45 \| 显示全部短消息资料字号：小中大 4楼 HijackThis_815汉化版扫描日志 V1.99.1 保存于 14:33:03, 日期 2006-12-30 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Rising\Rav\CCenter.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\S24EvMon.exe C:\WINDOWS\system32\ZCfgSvc.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Rising\Rav\Ravmond.exe c:\program files\rising\rfw\rfwsrv.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\rising\rfw\RfwMain.exe C:\WINDOWS\system32\1XConfig.exe C:\WINDOWS\ATK0100\Hcontrol.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\rxzs.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\31124.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\23186.exe C:\Program Files\Rising\AntiSpyware\runiep.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Rising\Rav\RavTask.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\WINDOWS\system32\ctfmon.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\18300.exe C:\DOCUME~1\Admin\LOCALS~1\Temp\Zt2\SVCH0ST.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Tencent\QQ\QQ.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\eMule\emule.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Thunder Network\Thunder\Thunder.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Admin\桌面\xy2dl-2.0.150.exe C:\WINDOWS\system32\scvhsot.exe C:\WINDOWS\system32\conime.exe C:\Documents and Settings\Admin\桌面\新建文件夹 (2)\HijackThis1991zww.exe C:\WINDOWS\system32\NOTEPAD.EXE R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file) F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v8.dll O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\flashget\jccatch.dll O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\flashget\fgiebar.dll O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - 启动项HKLM\\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - 启动项HKLM\\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe O4 - 启动项HKLM\\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - 启动项HKLM\\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - 启动项HKLM\\Run: [AGRSMMSG] AGRSMMSG.exe O4 - 启动项HKLM\\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - 启动项HKLM\\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - 启动项HKLM\\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1 O4 - 启动项HKLM\\Run: [RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe O4 - 启动项HKLM\\Run: [rxzs] C:\DOCUME~1\Admin\LOCALS~1\Temp\rxzs.exe O4 - 启动项HKLM\\Run: [mhs2] C:\DOCUME~1\Admin\LOCALS~1\Temp\18300.exe O4 - 启动项HKLM\\Run: [wlzs] C:\DOCUME~1\Admin\LOCALS~1\Temp\23186.exe O4 - 启动项HKLM\\Run: [runeip] C:\Program Files\Rising\AntiSpyware\runiep.exe O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [RfwMain] C:\Program Files\Rising\Rfw\rfwmain.exe O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 启动项HKLM\\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [myZt2] C:\DOCUME~1\Admin\LOCALS~1\Temp\Zt2\SVCH0ST.EXE O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\PROGRA~1\flashget\jc_link.htm O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\PROGRA~1\flashget\jc_all.htm O8 - IE右键菜单中的新增项目: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\flashget\flashget.exe O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\flashget\flashget.exe O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - 列举现有的协议: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: cdl - {3DD53D40-7B8B-11D0-B013-00AA0059CE02} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL O18 - 列举现有的协议: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll O18 - 列举现有的协议: file - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ftp - {79EAC9E3-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: gopher - {79EAC9E4-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: http - {79EAC9E2-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: https - {79EAC9E5-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ipp - (no CLSID) - (no file) O18 - 列举现有的协议: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - 列举现有的协议: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: local - {79EAC9E7-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: mailto - {3050F3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: mhtml - {05300401-BCBC-11D0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll O18 - 列举现有的协议: mk - {79EAC9E6-BAF9-11CE-8C82-00AA004BA90B} - C:\WINDOWS\system32\urlmon.dll O18 - 列举现有的协议: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll O18 - 列举现有的协议: msdaipp - (no CLSID) - (no file) O18 - 列举现有的协议: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL O18 - 列举现有的协议: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll O18 - 列举现有的协议: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll O18 - 列举现有的协议: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll O20 - AppInit_DLLs: 721815M.BMP O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll O23 - NT 服务: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - c:\program files\rising\rfw\rfwsrv.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe O23 - NT 服务: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 14:59 \| 显示全部短消息资料字号：小中大 5楼 [CODE] 2006-12-30,14:45:37 System Repair Engineer 2.3.13.690 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation] <myZt2><C:\DOCUME~1\Admin\LOCALS~1\Temp\Zt2\SVCH0ST.EXE> [N/A] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <load><> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation] <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation] <MSPY2002><C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC> [(Verified)N/A] <Hcontrol><C:\WINDOWS\ATK0100\Hcontrol.exe> [(Verified)] <IgfxTray><C:\WINDOWS\system32\igfxtray.exe> [(Verified)Intel Corporation] <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe> [(Verified)Intel Corporation] <AGRSMMSG><AGRSMMSG.exe> [(Verified)Agere Systems] <SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [(Verified)Synaptics, Inc.] <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [(Verified)Synaptics, Inc.] <Power_Gear><C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1> [N/A] <RemoteControl><C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe> [Cyberlink Corp.] <rxzs><C:\DOCUME~1\Admin\LOCALS~1\Temp\rxzs.exe> [N/A] <mhs2><C:\DOCUME~1\Admin\LOCALS~1\Temp\18300.exe> [N/A] <wlzs><C:\DOCUME~1\Admin\LOCALS~1\Temp\23186.exe> [N/A] <runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe> [Beijing Rising Technology Co., Ltd.] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <RfwMain><C:\Program Files\Rising\Rfw\rfwmain.exe> [Beijing Rising Technology Corporation Limited] <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <twin><C:\WINDOWS\system32\twunk32.exe> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINDOWS\system32\Userinit.exe> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><721815M.BMP> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <UIHost><logonui.exe> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Sebring] <WinlogonNotify: Sebring><C:\WINDOWS\system32\LgNotify.dll> [Intel Corporation] ================================== 启动文件夹 [腾讯QQ] <C:\Documents and Settings\Admin\「开始」菜单\程序\启动\腾讯QQ.lnk --> C:\PROGRA~1\Tencent\QQ\QQ.exe [TENCENT]><N> ================================== 服务 [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [RegSrvc / RegSrvc][Stopped/Auto Start] <C:\WINDOWS\system32\RegSrvc.exe><Intel Corporation> [Rising Personal Firewall Service / RfwService][Running/Auto Start] <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Corporation Limited> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [RsRavMon Service / RsRavMon][Running/Auto Start] <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Spectrum24 Event Monitor / S24EventMonitor][Running/Auto Start] <C:\WINDOWS\system32\S24EvMon.exe><Intel Corporation> [Windows DHCP Service / WinDHCPsvc][Stopped/Auto Start] <C:\WINDOWS\system32\rundll32.exe windhcp.ocx,start><Microsoft Corporation> ================================== 驱动程序 [Agere Systems Soft Modem / AgereSoftModem][Running/Manual Start] <system32\DRIVERS\AGRSM.sys><Agere Systems> [Rising TDI Base Driver / BaseTDI][Running/Auto Start] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [ExpScaner / ExpScaner][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\ExpScan.sys><> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start] <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.> [FwDrv / FwDrv][Running/Auto Start] <\??\C:\Program Files\Rising\Rfw\FwDrv.sys><Rising> [HOOKAPI / HOOKAPI][Stopped/Manual Start] <\??\C:\PROGRAM FILES\RISING\RAV\HookApi.Sys><瑞星软件有限公司> [HookCont / HookCont][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising> [ialm / ialm][Running/Manual Start] <system32\DRIVERS\ialmnt5.sys><Intel Corporation> [laldla / laldla][Running/Boot Start] <\SystemRoot\\SystemRoot\System32\drivers\laldla.sys><N/A> [AEGIS Protocol (IEEE 802.1x) v2.2.1.0 / MDC8021X][Running/Auto Start] <system32\DRIVERS\mdc8021x.sys><Meetinghouse Data Communications> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [ATK0100 ACPI UTILITY / MTsensor][Running/Manual Start] <system32\DRIVERS\ATKACPI.sys><> [Netgroup Packet Filter / NPF][Stopped/Manual Start] <system32\DRIVERS\npf.sys><CACE Technologies> [npkcrypt / npkcrypt][Running/Auto Start] <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [NSC Infrared Device Driver / NSCIRDA][Running/Manual Start] <system32\DRIVERS\nscirda.sys><National Semiconductor Corporation> [nv / nv][Stopped/Manual Start] <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [RsAntiSpyware / RsAntiSpyware][Running/Boot Start] <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [WLAN Transport / s24trans][Running/Auto Start] <system32\DRIVERS\s24trans.sys><Intel Corporation> [Secdrv / Secdrv][Stopped/Manual Start] <system32\DRIVERS\secdrv.sys><N/A> [SigmaTel C-Major Audio / STAC97][Running/Manual Start] <system32\drivers\STAC97.sys><SigmaTel, Inc.> [Synaptics TouchPad Driver / SynTP][Running/Manual Start] <system32\DRIVERS\SynTP.sys><Synaptics, Inc.> [ViaIde / ViaIde][Stopped/Boot Start] <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation> [Intel(R) PRO/Wireless 2200 Adapter 驱动程序 / w22n51][Running/Manual Start] <system32\DRIVERS\w22n51.sys><Intel? Corporation>
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 15:02 \| 显示全部短消息资料字号：小中大 6楼 ================================== 浏览器加载项 [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v8.dll, Thunder Networking Technologies,LTD> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\flashget\jccatch.dll, Amaze Soft> [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT> [FlashGet] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\flashget\flashget.exe, Amaze Soft> [QQIEFloatBarCfgCmd Class] {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\flashget\fgiebar.dll, Amaze Soft> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v8.dll, Thunder Networking Technologies,LTD> [PowerPlr Control] {2354A44B-3CEB-4829-9940-545B03103538} <C:\PROGRA~1\创智数~1\PowerPlr.ocx, Powerise Digital> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A> [QQBrowserHelperObject Class] {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司> [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation> [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\flashget\jccatch.dll, Amaze Soft> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\flashget\fgiebar.dll, Amaze Soft> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\geturl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\getallurl.htm, N/A> [上传到QQ网络硬盘] <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A> [使用网际快车下载] <C:\PROGRA~1\flashget\jc_link.htm, N/A> [使用网际快车下载全部链接] <C:\PROGRA~1\flashget\jc_all.htm, N/A> [导出到 Microsoft Excel(&x)] <res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A> [添加到QQ表情] <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A> ================================== 正在运行的进程 [PID: 448][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 512][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 536][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\LgNotify.dll] [Intel Corporation, 8, 0, 0, 167] [PID: 580][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 592][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 732][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 780][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 820][C:\Program Files\Rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [PID: 836][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 920][C:\WINDOWS\system32\S24EvMon.exe] [Intel Corporation , 8, 0, 0, 167] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 1052][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1124][C:\WINDOWS\system32\ZCfgSvc.exe] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\PfMgrApi.dll] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\PsRegApi.dll] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\WConfig.DLL] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\WiFiAdap.DLL] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\PsGuiMgr.dll] [Intel Corporation., 8, 0, 0, 167] [C:\WINDOWS\system32\C1XStngs.dll] [Intel Corporation, 8, 0, 0, 167] [C:\Program Files\Intel\PROSetWireless\PROSet\CHS\ZcSvcCHS.dll] [Intel Corporation, 8, 0, 0, 107] [C:\Program Files\Intel\PROSetWireless\PROSet\CHS\PmApiCHS.dll] [Intel Corporation, 8, 0, 0, 107] [C:\WINDOWS\system32\S24MUDLL.dll] [Intel Corporation, 8, 0, 0, 167] [C:\Program Files\Intel\PROSetWireless\PROSet\CHS\C1XStCHS.dll] [Intel Corporation, 8, 0, 0, 107] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 1224][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 15:03 \| 显示全部短消息资料字号：小中大 7楼 [PID: 1240][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\PROGRA~1\3721\alrex.dll] [, 1, 0, 1, 1001] [C:\WINDOWS\system32\igfxpph.dll] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.3865] [C:\PROGRA~1\3721\autolive.dll] [, 1, 1, 9, 1329] [C:\PROGRA~1\3721\alLiveEx.dll] [ , 1, 0, 3, 1006] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\WinRAR\rarext.dll] [N/A, N/A] [C:\PROGRA~1\3721\ske\contmenu.dll] [N/A, N/A] [C:\WINDOWS\system32\xunleibho_v8.dll] [Thunder Networking Technologies,LTD, 4, 5, 1, 33] [C:\PROGRA~1\flashget\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [PID: 1248][C:\Program Files\Rising\Rav\Ravmond.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 43] [C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 6] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\Program Files\Rising\Rav\rfwctrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [C:\Program Files\Rising\Rav\RsPPsys.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20] [C:\Program Files\Rising\Rav\HOOKSYS.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 0] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [C:\Program Files\Rising\Rav\libload.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\VirusLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10] [C:\Program Files\Rising\Rav\regmon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6] [C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 1] [C:\Program Files\Rising\Rav\MemMon.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12] [C:\Program Files\Rising\Rav\expscan.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\Program Files\Rising\Rav\mPorts.dll] [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3] [C:\Program Files\Rising\Rav\HookCont.dll] [Rising, 19, 0, 0, 0] [C:\Program Files\Rising\Rav\SpamEng.dll] [N/A, 18, 0, 0, 6] [C:\Program Files\Rising\Rav\engine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 20] [C:\Program Files\Rising\Rav\PostTrt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 8] [C:\Program Files\Rising\Rav\UnExe.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\Program Files\Rising\Rav\ScanExec.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15] [C:\Program Files\Rising\Rav\ScanEx.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 32] [C:\Program Files\Rising\Rav\ExtFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 23] [C:\Program Files\Rising\Rav\NvFile.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11] [C:\Program Files\Rising\Rav\ScanMac.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [C:\Program Files\Rising\Rav\ScanSct.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16] [C:\Program Files\Rising\Rav\Unpacker.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [C:\Program Files\Rising\Rav\ScanPack.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 18] [C:\Program Files\Rising\Rav\RsVM.dll] [N/A, 19, 0, 0, 13] [C:\Program Files\Rising\Rav\Uroutine.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19] [C:\Program Files\Rising\Rav\Uscript.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 17] [C:\Program Files\Rising\Rav\RsStore.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [C:\Program Files\Rising\Rav\ScanNet.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\Program Files\Rising\Rav\ExtMail.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13] [C:\Program Files\Rising\Rav\ExtOLE.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 11]
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 15:04 \| 显示全部短消息资料字号：小中大 8楼 [PID: 1460][c:\program files\rising\rfw\rfwsrv.exe] [Beijing Rising Technology Corporation Limited, 3, 1, 0, 26] [c:\program files\rising\rfw\Rfwdrv.dll] [Beijing Rising Technology Corporation Limited, 3, 0, 1, 4] [c:\program files\rising\rfw\rfwrule.dll] [Beijing Rising Technology Corporation Limited, 3, 1, 0, 0] [c:\program files\rising\rfw\rfwlog.dll] [Beijing Rising Technology Corporation Limited, 3, 1, 0, 2] [PID: 1692][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] [Windows (R) 2000 DDK provider, 5.00.2195.1620] [PID: 1004][c:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Corporation Limited, 3, 1, 0, 15] [c:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 17, 0, 0, 40] [c:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 17, 0, 0, 17] [c:\program files\rising\rfw\PngDll.dll] [Rising, 17, 0, 0, 2] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] [PID: 1008][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1620][C:\WINDOWS\system32\1XConfig.exe] [Intel, 8, 0, 0, 167] [C:\WINDOWS\system32\IntelAE5.dll] [Meetinghouse Data Communications, 1, 42, 19, 1] [C:\WINDOWS\system32\SSLEAY32.dll] [N/A, N/A] [C:\WINDOWS\system32\LIBEAY32.dll] [N/A, N/A] [C:\WINDOWS\system32\PsRegApi.dll] [Intel Corporation, 8, 0, 0, 167] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2100][C:\WINDOWS\ATK0100\Hcontrol.exe] [, 1043, 2, 15, 31] [C:\WINDOWS\ATK0100\CMSSC.dll] [N/A, N/A] [C:\WINDOWS\ATK0100\inter_f2.dll] [ATK, 1043, 2, 15, 31] [C:\WINDOWS\ATK0100\ATKWLIOC.DLL] [ACTIONTEC Electronics,Inc, 2.01.02] [C:\WINDOWS\system32\SbrngAPI.dll] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\PfMgrApi.dll] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\PsRegApi.dll] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\WConfig.DLL] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\WiFiAdap.DLL] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\C1XStngs.dll] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\S24MUDLL.dll] [Intel Corporation, 8, 0, 0, 167] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Intel\PROSetWireless\PROSet\CHS\PmApiCHS.dll] [Intel Corporation, 8, 0, 0, 107] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2136][C:\WINDOWS\system32\hkcmd.exe] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\igfxhk.dll] [Intel Corporation, 3.0.0.3865] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.3865] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2156][C:\WINDOWS\AGRSMMSG.exe] [Agere Systems, 2.1.22 2.1.22 12/20/2002 13:07:18] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2180][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe] [Synaptics, Inc., 7.6.3 08Aug03] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2216][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] [Synaptics, Inc., 7.6.3 08Aug03] [C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\WINDOWS\system32\SynTPAPI.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2288][C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe] [ASUSTeK Computer Inc., 1043, 6, 15, 110] [C:\Program Files\ASUS\Power4 Gear\ATKMETHOD.dll] [ASUSTeK Computer Inc., 1043, 6, 15, 110] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2324][C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe] [Cyberlink Corp., 5.00.0000] [C:\Program Files\CyberLink\Shared Files\CLRCEngine2.dll] [CyberLink Corp., 3.20.0000] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2504][C:\DOCUME~1\Admin\LOCALS~1\Temp\rxzs.exe] [N/A, N/A] [C:\DOCUME~1\Admin\LOCALS~1\Temp\rxzs.dll] [N/A, N/A] [PID: 2528][C:\DOCUME~1\Admin\LOCALS~1\Temp\31124.exe] [N/A, N/A] [PID: 2644][C:\DOCUME~1\Admin\LOCALS~1\Temp\23186.exe] [N/A, N/A] [C:\DOCUME~1\Admin\LOCALS~1\Temp\wlzs.dll] [N/A, N/A] [PID: 2712][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 1, 3] [C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [PID: 2748][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3536] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2820][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13] [C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 15:05 \| 显示全部短消息资料字号：小中大 9楼 [PID: 2900][C:\WINDOWS\ATK0100\ATKOSD.exe] [, 1043, 2, 15, 31] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 2956][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 3404][C:\DOCUME~1\Admin\LOCALS~1\Temp\18300.exe] [N/A, N/A] [PID: 1440][C:\DOCUME~1\Admin\LOCALS~1\Temp\Zt2\SVCH0ST.EXE] [N/A, N/A] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] [PID: 1580][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xunleibho_v8.dll] [Thunder Networking Technologies,LTD, 4, 5, 1, 33] [C:\PROGRA~1\flashget\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [PID: 2464][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xunleibho_v8.dll] [Thunder Networking Technologies,LTD, 4, 5, 1, 33] [C:\PROGRA~1\flashget\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [PID: 2460][C:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0] [C:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQHelperDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Tencent\QQ\QQAPI.dll] [, 1, 0, 0, 1] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\Program Files\Tencent\QQ\LoginCtrl.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1] [C:\Program Files\Tencent\QQ\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [C:\Program Files\Tencent\QQ\QQRes.dll] [tencent, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQMainFrame.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\CQQApplication.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\NewSkin.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\HostingMgr.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\CameraDll.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\MailSummary.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQSpace.dll] [, 1, 0, 0, 1] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] [C:\WINDOWS\system32\msdmo.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\QQGroupMng.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\GroupLive.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\UserDefinedHead.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQPlugin.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QRingMng.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\PhoneAPI.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [C:\Program Files\Tencent\QQ\VPortal.dll] [, 1, 0, 0, 4] [C:\Program Files\Tencent\QQ\LongConnection.dll] [tencent, 5, 0, 200, 160] [C:\Program Files\Tencent\QQ\QQAvatar.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1] [C:\Program Files\Tencent\QQ\QQPet.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\QQAllInOne.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\SCCore.dll] [TENCENT, 2, 0, 0, 1] [C:\Program Files\Tencent\QQ\BQQApplication.dll] [N/A, N/A] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [C:\Program Files\Tencent\QQ\CommercesMng.dll] [, 1, 0, 0, 1] [C:\Program Files\Tencent\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [C:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240] [C:\Program Files\Tencent\QQ\QQSceneMng.dll] [N/A, N/A] [C:\Program Files\Tencent\QQ\QQPhoneHelper.dll] [腾讯科技（深圳）有限公司, 2, 1, 2, 23] [PID: 3604][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xunleibho_v8.dll] [Thunder Networking Technologies,LTD, 4, 5, 1, 33] [C:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\PROGRA~1\flashget\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [PID: 2168][C:\Program Files\eMule\emule.exe] [http://www.emule-project.net, 0.47.2 Unicode] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\eMule\lang\zh_CN.dll] [http://www.emule-project.net, 0.47.2] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [PID: 1596][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xunleibho_v8.dll] [Thunder Networking Technologies,LTD, 4, 5, 1, 33] [C:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\PROGRA~1\flashget\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [PID: 2908][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xunleibho_v8.dll] [Thunder Networking Technologies,LTD, 4, 5, 1, 33] [C:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5]
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:	发表于： 2006-12-30 15:05 \| 显示全部短消息资料字号：小中大 10楼 [C:\PROGRA~1\flashget\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [PID: 3060][C:\Program Files\Thunder Network\Thunder\Thunder.exe] [Thunder Networking Technologies,LTD, 5.0.6.98] [C:\Program Files\Thunder Network\Thunder\UpdateDownload.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1] [C:\Program Files\Thunder Network\Thunder\download_interface.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1] [C:\Program Files\Thunder Network\Thunder\log4cplus.dll] [, 1, 0, 2, 1] [C:\Program Files\Thunder Network\Thunder\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [C:\Program Files\Thunder Network\Thunder\historyinfo_manage.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 73] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Thunder Network\Thunder\iThunder.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 30] [C:\Program Files\Thunder Network\Thunder\RegisterDll.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 4] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7] [PID: 1592][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\xunleibho_v8.dll] [Thunder Networking Technologies,LTD, 4, 5, 1, 33] [C:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\PROGRA~1\flashget\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [PID: 3268][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\WINDOWS\system32\xunleibho_v8.dll] [Thunder Networking Technologies,LTD, 4, 5, 1, 33] [C:\Program Files\Tencent\QQ\QQIEHelper.dll] [深圳市腾讯计算机系统有限公司, 1, 1, 0, 5] [C:\PROGRA~1\flashget\jccatch.dll] [Amaze Soft, 1, 1, 4, 0] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4] [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [PID: 2132][C:\Documents and Settings\Admin\桌面\xy2dl-2.0.150.exe] [Netease, 1.0.0.1] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] [PID: 4072][C:\WINDOWS\system32\scvhsot.exe] [N/A, N/A] [PID: 3024][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [PID: 1992][C:\Documents and Settings\Admin\桌面\新建文件夹\SREng.EXE] [Smallfrogs Studio, 2.3.13.690] [C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.6.3 08Aug03] [C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7] [C:\DOCUME~1\Admin\LOCALS~1\Temp\ZtgM.dll] [N/A, N/A] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf [D:\] [AutoRun] open=sss.exe shellexecute=sss.exe shell\Auto\command=sss.exe [E:\] [AutoRun] open=sss.exe shellexecute=sss.exe shell\Auto\command=sss.exe [F:\] [AutoRun] open=sss.exe shellexecute=sss.exe shell\Auto\command=sss.exe ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK N/A ================================== [/CODE]
o中毒者o 初生襁褓狮帖子:14 注册: 2006-12-30 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT