谁帮我看下我这个文件是不是病毒？？ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛谁帮我看下我这个文件是不是病毒？？

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

谁帮我看下我这个文件是不是病毒？？

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 09:34 \| 显示全部短消息资料字号：小中大 1楼谁帮我看下我这个文件是不是病毒？？我的电脑最近忽然变好慢 CPU占用一直是100% 我看了一下进程发现有3个cmd.exe程序占用了将近90%的CPU,我不知道这是什么程序,是不是病毒呢?请懂的朋友回答谢谢备注:我把这3个相同的cmd.exe进程都结束了机器也就快了好象是结束了也对系统没什么影响...但是过一会这个进程又运行了还有（http://www.69262.com）这个地址，我把主页地址设置成空白页，过不了5分钟，这个网页由自动的变成主页了，注册表里也删不掉，麻烦这里的高手帮忙解决一下 2007-01-29 10:45:22
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	分享到：

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 09:48 \| 显示全部短消息资料字号：小中大 2楼这是图片附件: 文件名:829973200712993850.jpg 下载次数:607 文件类型:image/pjpeg 文件大小: 上传时间:2007-1-29 9:48:05 描述: 预览信息:EXIF信息 Y Resolution : 72/1 Resolution Unit : 2 Thumbnail Compression : 6 Software Used : Adobe Photoshop 7.0 JPEG InterLength : 3626 ColorSpace : 65535 Thumbnail Data : 255 JPEG InterFormat : 294 Thumbnail ResolutionUnit : 2 Thumbnail ResolutionY : 72/1 Thumbnail ResolutionX : 72/1 PixXDim : 1024 PixYDim : 768 Orientation : 1 拍摄日期 : 2007:01:29 09:38:05 X Resolution : 72/1
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 10:15 \| 显示全部短消息资料字号：小中大 3楼诊断时间: 2007-01-29 10:03:57 诊断平台: Microsoft Windows 2000 Service Pack 4 IE版本: Internet Explorer V6.0.2800.1106 Build:62800.1106 计算机物理内存:247MB - 当前可用内存:47MB O2 - 低危险 - BHO: (BandIE Class) - [百度超级搜霸,强制安装、浏览器劫持、无法彻底删除、干扰其他软件运行] - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 低危险 - Toolbar: (百度超级搜霸) - [BaiduBar Module] - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\BaiduBar.dll 100 - 未知 - Process: KWatch.EXE [Kingsoft Antivirus KWatch Service] - C:\KAV2007\KWatch.EXE 100 - 未知 - Process: KPFWSvc.EXE [Kingsoft Firewall Service] - C:\KAV2007\KPfwSvc.EXE 100 - 未知 - Process: KAVStart.EXE [Kingsoft Security Center] - C:\KAV2007\KAVStart.exe 100 - 未知 - Process: KPFW32.EXE [Kingsoft Firewall] - C:\KAV2007\KPFW32.EXE 100 - 未知 - Process: QQ.exe [QQ] - E:\QQ\QQ.exe 100 - 未知 - Process: TIMPlatform.exe [TIMPlatform] - E:\QQ\TIMPlatform.exe -Embedding O8 - 未知 - Extra context menu item: &使用BitComet下载 - res://E:\BT\BitComet\BitComet.exe/AddLink.htm O8 - 未知 - Extra context menu item: &使用BitComet下载全部链接 - res://E:\BT\BitComet\BitComet.exe/AddAllLink.htm O8 - 未知 - Extra context menu item: &使用BitComet下载本页视频 - res://E:\BT\BitComet\BitComet.exe/AddVideo.htm O8 - 未知 - Extra context menu item: 上传到QQ网络硬盘 - E:\QQ\AddToNetDisk.htm O8 - 未知 - Extra context menu item: 添加到QQ自定义面板 - E:\QQ\AddPanel.htm O8 - 未知 - Extra context menu item: 添加到QQ表情 - E:\QQ\AddEmotion.htm O8 - 未知 - Extra context menu item: 用QQ彩信发送该图片 - E:\QQ\SendMMS.htm O8 - 未知 - Extra context menu item: 金山毒霸反钓鱼... - C:\KAV2007\KAF\ShowSet.htm O9 - 未知 - Extra button: 信息检索(HKLM) - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - 未知 - Extra button: &FlashGet(HKLM) - E:\新建文~1\FLASHGET\flashget.exe O18 - 未知 - Protocol: 电子书编译工具Web Compiler相关 - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINNT\wc98pp.dll O23 - 未知 - Service: AotoLogon [系统性能监测服务] - C:\WINNT\svchost.exe - (not running) O23 - 未知 - Service: KPfwSvc [金山网镖网络实时监控服务程序] - "C:\KAV2007\KPfwSvc.EXE" - (running) O23 - 未知 - Service: NWCWorkstation [提供对 NetWare 网络上文件和打印资源的访问。] - C:\WINNT\System32\services.exe - (running) O23 - 未知 - Service: OracleOraHome81ClientCache [OracleOraHome81ClientCache] - D:\oracle\ora81\BIN\ONRSD.EXE - (not running) O23 - 未知 - Service: OracleOraHome81TNSListener [OracleOraHome81TNSListener] - D:\oracle\ora81\BIN\TNSLSNR - (not running) O23 - 未知 - Service: OracleServiceORACLE [OracleServiceORACLE] - d:\oracle\ora81\bin\ORACLE.EXE ORACLE - (not running) O23 - 未知 - Service: Patterns [启用 Windows 的系统监视器，保护 Windows 的程序正常运行。无法终止此服务。] - C:\WINNT\system32\zhfpv.dll - (starting) O23 - 未知 - Service: ServerAC [给予本地帐户高级保护机制。] - C:\WINNT\system32\Security.exe - (not running) O23 - 未知 - Service: test [test] - C:\WINNT\system32\test.exe - (not running) O23 - 未知 - Service: WinDHCPsvc [为远程计算机注册并更新 IP 地址。] - C:\WINNT\system32\\rundll32.exe windhcp.ocx,input - (not running)
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 10:16 \| 显示全部短消息资料字号：小中大 4楼 ======================================= 100 - 安全 - Process: SMSS.EXE [该进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINNT\System32\smss.exe 100 - 安全 - Process: CSRSS.EXE [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINNT\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512,512 Windows=On SubSystemType=Windows ServerDll=ba 100 - 安全 - Process: WINLOGON.EXE [windows nt用户登陆程序。] - C:\WINNT\system32\winlogon.exe 100 - 安全 - Process: SERVICES.EXE [用于管理windows服务系统进程。] - C:\WINNT\system32\services.exe 100 - 安全 - Process: LSASS.EXE [本地安全权限服务控制windows安全机制。] - C:\WINNT\system32\lsass.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINNT\system32\svchost -k rpcss 100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINNT\system32\spoolsv.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINNT\System32\svchost.exe -k netsvcs 100 - 安全 - Process: MDM.EXE [debug除错管理用于调试应用程序和microsoft office中的microsoft script editor脚本编辑器。] - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 100 - 安全 - Process: mstask.exe [windows计划任务用于设定继承在什么时间或者什么日期备份或者运行。] - C:\WINNT\system32\MSTask.exe 100 - 安全 - Process: WinMgmt.exe [windows management service透过windows management instrumentation data (wmi)技术处理来自应用客户端的请求。] - C:\WINNT\System32\WBEM\WinMgmt.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINNT\system32\svchost.exe -k wugroup 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINNT\System32\svchost.exe -k BITSgroup 100 - 安全 - Process: igfxtray.exe [intel显卡相关软件。] - C:\WINNT\System32\igfxtray.exe 100 - 安全 - Process: hkcmd.exe [intel显卡驱动相关软件。] - C:\WINNT\System32\hkcmd.exe 100 - 安全 - Process: realsched.exe [realone播放器安装时附带的升级提醒程序。] - C:\Program Files\Common Files\Real\Update_OB\realsched.exe 100 - 安全 - Process: CTFMON.EXE [office xp输入法图标。] - C:\WINNT\system32\ctfmon.exe 100 - 安全 - Process: KMailMon.EXE [金山毒霸杀毒软件的相关程序。] - C:\KAV2007\KMailMon.EXE 100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\IEXPLORE.EXE 100 - 安全 - Process: Thunder5.exe [迅雷5，支持多资源超线程技术的下载工具] - C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe 100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINNT\system32\conime.exe 100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe 100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINNT\explorer.exe 100 - 安全 - Process: 360Safe.exe [360安全卫士] - E:\安全卫士360\360safeV2.01\360Safe.exe R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINNT\system32\blank.htm R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=about:blank O2 - 安全 - BHO: (AcroIEHlprObj Class) - [Adobe Reader，查看和打印 Adobe 便携文档格式 (PDF) 文件。] - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - 安全 - BHO: (CAdLogic Object) - [搜狗工具条相关文件。] - {11F09AFD-75AD-4E51-AB43-E09E9351CE16} - C:\Program Files\Common Files\CPUSH\cpush.dll O2 - 安全 - BHO: (CBrowseStakeout Class) - [金山毒霸2007反钓鱼插件。] - {55302805-482E-470E-8A57-6795A1487F90} - C:\KAV2007\KAVAFish.DLL O3 - 安全 - Toolbar: (@msdxmLC.dll,-1@2052,电台(&R)) - [是Windows Media Player播放器ActiveX控制相关文件。] - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O4 - 安全 - HKLM\..\Run: [Synchronization Manager] [资料同步管理器] mobsync.exe /logon O4 - 安全 - HKLM\..\Run: [IgfxTray] [是Intel显卡配置和诊断程序，会同Intel 810芯片组的集成显卡安装。] C:\WINNT\System32\igfxtray.exe O4 - 安全 - HKLM\..\Run: [HotKeysCmds] [是Intel显示卡相关程序，用于配置和诊断相关设备。] C:\WINNT\System32\hkcmd.exe O4 - 安全 - HKLM\..\Run: [TkBellExe] [是Real Networks产品定时升级检测程序。] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 安全 - HKLM\..\Run: [KavStart] [金山出品的金山毒霸杀毒软件。] "C:\KAV2007\KAVStart.exe" -startup O4 - 安全 - HKLM\..\RunOnce: [360Safe] [360安全卫士] Rundll32.exe E:\安全卫~1\360SAF~1.01\AntiAdwa.dll,KillAdware O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] ctfmon.exe O4 - 安全 - HKCU\..\Run: [KavPFW] [金山出品的防火墙软件。] "C:\KAV2007\KPFW32.EXE" O8 - 安全 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm O8 - 安全 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - 安全 - Extra button: 电台(HKLM) - C:\WINNT\web\related.htm O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL O18 - 安全 - Protocol: OFFICE 相关 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL O23 - 安全 - Service: Fax [微软Microsoft传真服务相关程序，该服务允许用户创建和发送传真到微软Office组件中。] - C:\WINNT\system32\faxsvc.exe - (not running) O23 - 安全 - Service: KWatchSvc [金山毒霸反病毒软件相关程序。] - C:\KAV2007\KWatch.EXE - (running) O23 - 安全 - Service: Macromedia Licensing Service [是macromedia公司网页三剑客软件的注册程序。] - "C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe" - (not running) ======================================= O40 - explorer.exe - Kingsoft Corporation - C:\KAV2007\KMailOEBand.dll - KMailOEB Dynamic Link Library - 16eaf0cd6fff22c7344665fed276d9df O40 - explorer.exe - Microsoft Corporation - C:\WINNT\system32\MSVCR71.dll - Microsoft? C Runtime Library - 86f1895ae8c5e8b17d99ece768a70732 O40 - explorer.exe - Microsoft Corporation - C:\WINNT\system32\MSVCP71.dll - Microsoft? C++ Runtime Library - 561fa2abb31dfa8fab762145f81667c2 O40 - explorer.exe - Kingsoft Corporation - C:\KAV2007\KASocket.dll - Kingsoft Antivirus Winsock Module - 163627cf886ca3de7728070cd7b04751 O40 - explorer.exe - Microsoft Corporation - C:\WINNT\system32\msimtf.dll - Active IMM Server DLL - bedff9e8fa13aec8da69d505452783e4 O40 - explorer.exe - Baidu.com, Inc. - C:\PROGRA~1\baidu\bar\BaiduBar.dll - BaiduBar Module - 29146247deb8796cdcb43993e21df63e
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 10:16 \| 显示全部短消息资料字号：小中大 5楼 ======================================= O41 - BrPar - Brother Parallel class Driver version 1.01 - C:\WINNT\system32\drivers\BRPAR.SYS - (running) - Brother Parallel class Driver version 1.01 - Brother Industries Ltd. - 2fe6d5be0629f706197b30c0aa05de30 O41 - EntDrv50 - EntDrv50 - C:\WINNT\system32\drivers\EntDrv50.sys - (not running) - - - O41 - KNetWch - KNetWatch - C:\KAV2007\KNetWch.SYS - (running) - KNetWatch - Kingsoft Corporation - 2d656396b22d66cb7bf82b182dd1f667 O41 - KWatch3 - Kingsoft Antivirus KWatch Driver - C:\WINNT\system32\drivers\KWatch3.SYS - (running) - Kingsoft Antivirus KWatch Driver - Kingsoft Corporation - 00dd1d7c8f0875394d11aac715a80007 O41 - NPF - NPF - C:\WINNT\system32\drivers\npf.sys - (not running) - - - O41 - npkcrypt - nProtect KeyCrypt Driver - E:\QQ\npkcrypt.sys - (running) - nProtect KeyCrypt Driver - INCA Internet Co., Ltd. - 8bcb281a2540e7aff0cd00f9878fe21f O41 - Sentinel - Sentinel - C:\WINNT\system32\drivers\SENTINEL.SYS - (running) - - - 3e7ff2405bcc1384d946dc45edc7ed61 O41 - suhdlog.sys - suhdlog.sys - c:\suhdlog.sys - (not running) - - - b5c04780112a10a32684d415b6e8c6f8 O41 - TITAN - Rockey Device Driver - C:\WINNT\system32\drivers\TITAN.SYS - (running) - Rockey Device Driver - FeiTian Tech Co.,Ltd - ec813337515a7b48183a22cd4dc319c1 O41 - BdGuard - BdGuard - C:\WINNT\system32\drivers\BDGuard.SYS - (running) - - - ======================================= 360Safe.exe=2.3.0.1001 AntiAdwa.dll=2.2.2.1000 AntiEng.dll=2.2.0.1000 AntiActi.dll=2.0.0.3000 CleanHis.dll=2.0.0.1001 safelive.exe=1.0.0.2007 live.dll=1.0.0.1011 ======================================= 操作历史报告： ----------查杀恶意软件历史---------- 2006-11-07 12:58 查杀恶意软件 - 网络实名 - 危险 - 查杀恶意软件 - 雅虎助手&上网助手 - 危险 - C:\Program Files\Yahoo!\Assistant 查杀恶意软件 - 百度搜索伴侣 - 危险 - 2006-11-07 13:07 查杀恶意软件 - 雅虎助手&上网助手 - 危险 - 2006-12-11 13:25 查杀恶意软件 - 百度超级搜霸 - 危险 - C:\Documents and Settings\1234\Application Data\Microsoft\Internet Explorer\Quick Launch\因特网搜索.lnk 2006-12-23 09:00 查杀恶意软件 - 百度超级搜霸 - 危险 - C:\Documents and Settings\1234\Application Data\Microsoft\Internet Explorer\Quick Launch\因特网搜索.lnk 2006-12-26 12:23 查杀恶意软件 - Power - 危险 - 2007-01-24 11:07 查杀恶意软件 - System - 危险 - 查杀恶意软件 - DiRVIn - 危险 - C:\WINNT\system32\RUNDLL~1.EXE 查杀恶意软件 - 实用网址导航(酷站导航) - 危险 - C:\WINNT\system32\Score.txt 查杀恶意软件 - 实用搜索工具条 - 危险 - C:\PROGRA~1\SUPERU~1\SUPERU~1.DLL 2007-01-24 11:09 查杀恶意软件 - 实用搜索工具条 - 危险 - 查杀恶意软件 - System - 危险 - 2007-01-25 13:43 查杀恶意软件 - 实用网址导航(酷站导航) - 危险 - C:\WINNT\system32\advport.dll 2007-01-27 17:06 查杀恶意软件 - 百度超级搜霸 - 危险 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-27 17:44 查杀恶意软件 - 百度超级搜霸 - 危险 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-27 18:27 查杀恶意软件 - 百度超级搜霸 - 危险 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-29 08:09 查杀恶意软件 - 百度超级搜霸 - 危险 - 2007-01-29 09:09 查杀恶意软件 - 百度超级搜霸 - 危险 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-29 09:12 查杀恶意软件 - 百度超级搜霸 - 危险 - 2007-01-29 09:29 查杀恶意软件 - 百度超级搜霸 - 危险 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-29 10:01 查杀恶意软件 - 百度超级搜霸 - 危险 - C:\PROGRA~1\baidu\bar\BaiduBar.dll ----------插件卸载操作历史---------- 2006-11-15 08:29 插件管理 - 网际快车附带的工具栏 - 2006-11-15 08:30 插件管理 - 金山快译工具栏 - 2006-12-12 14:56 插件管理 - 未知 - C:\WINNT\system32\oonrudcy.dll 插件管理 - 未知 - C:\WINNT\system32\mllmj.dll 插件管理 - 未知 - C:\Program Files\VSAdd-in\VSAdd-in.dll 2006-12-12 14:56 插件管理 - 未知 - C:\WINNT\system32\mllmj.dll 2006-12-12 14:56 插件管理 - 未知 - C:\WINNT\system32\mllmj.dll 2006-12-12 14:57 插件管理 - 未知 - C:\WINNT\system32\mllmj.dll 2006-12-13 12:58 插件管理 - 百度超级搜霸 - C:\Documents and Settings\1234\Application Data\Microsoft\Internet Explorer\Quick Launch\因特网搜索.lnk 插件管理 - 未知 - C:\WINNT\system32\molqpmrl.dll 插件管理 - 未知 - C:\Program Files\VSAdd-in\VSAdd-in.dll 插件管理 - 未知 - C:\WINNT\system32\jkhhi.dll 2006-12-13 12:58 插件管理 - 未知 - C:\Program Files\VSAdd-in\VSAdd-in.dll 2006-12-23 15:27 插件管理 - adx广告 - C:\WINNT\PIF 2006-12-23 15:27 插件管理 - Helper Module - C:\WINNT\system32\helper.dll 2006-12-25 16:21 插件管理 - Power - C:\WINNT\svchost.exe 2007-01-24 11:13 插件管理 - 腾讯QQ附带的QQIEHelper插件 - 2007-01-29 09:15 插件管理 - 搜狗工具条 - C:\PROGRA~1\COMMON~1\CPUSH\cpush.dll 插件管理 - 腾讯QQ附带的QQIEHelper插件 - ----------修复IE浏览器操作历史---------- 2006-11-07 12:59 O27 - 危险 - 登录提示框标题 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon O27 - 危险 - 登录提示框文字 - HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon R0 - 危险 - IE使用的代理服务器 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings 2006-11-15 08:31 R0 - 危险 - IE使用的代理服务器 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings 2007-01-24 11:13 R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main 2007-01-26 08:12 O22 - 危险 - .HLP文件关联 - winhlp32.exe %1 2007-01-26 11:25 O22 - 危险 - .HLP文件关联 - winhlp32.exe %1 2007-01-26 13:44 O22 - 危险 - .HLP文件关联 - winhlp32.exe %1 R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main 2007-01-26 17:00 O22 - 危险 - .HLP文件关联 - winhlp32.exe %1 R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main 2007-01-27 17:06 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-27 17:07 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-27 17:07 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-27 17:44 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-27 17:44 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-27 17:44 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-27 17:44 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-29 09:15 O22 - 危险 - .HLP文件关联 - winhlp32.exe %1 2007-01-29 09:29 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-29 09:29 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-29 09:29 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-29 10:01 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll 2007-01-29 10:01 O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\BaiduBar.dll O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\BaiduBar.dll =======================================
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 10:18 \| 显示全部短消息资料字号：小中大 6楼清理流氓网站没用，清理了之后还是有，根本就清理不掉
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 10:47 \| 显示全部短消息资料字号：小中大 7楼 [CODE] 2007-01-29,10:31:25 System Repair Engineer 2.3.13.690 Smallfrogs (http://www.KZTechs.com) Windows 2000 Professional Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><ctfmon.exe> [Microsoft Corporation] <KavPFW><"C:\KAV2007\KPFW32.EXE"> [Kingsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <Synchronization Manager><mobsync.exe /logon> [(Verified)Microsoft Corporation] <IgfxTray><C:\WINNT\System32\igfxtray.exe> [(Verified)Intel Corporation] <HotKeysCmds><C:\WINNT\System32\hkcmd.exe> [(Verified)Intel Corporation] <IMSCMig><rem C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation] <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.] <KavStart><"C:\KAV2007\KAVStart.exe" -startup> [Kingsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] <360Safe><Rundll32.exe E:\安全卫~1\360SAF~1.01\AntiAdwa.dll,KillAdware> [360Safe.com] <KASTask><C:\KAV2007\KASTask.EXE> [Kingsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Corporation] <Userinit><C:\WINNT\system32\userinit.exe,> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{DD7D4640-4464-48C0-82FD-21338366D2D2}><C:\Program Files\Internet Explorer\InfoMs.tdm> [N/A] <{5D06580A-08EB-4DD0-8425-DDBB5198B30C}><C:\Program Files\Common Files\Microsoft Shared\MSInfo\IEINFO5.sys> [N/A] <{B8A170A8-7AD3-4678-B2FE-F2D7381CC1B5}><C:\Program Files\Internet Explorer\Connection Wizard\isignup.sys> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] <{9F143C3A-1457-6CCA-03A7-7AA23B61E40F}><C:\WINNT\comio32.dll> [N/A] ================================== 启动文件夹 N/A ================================== 服务 [System Performance Monitor / AotoLogon][Stopped/Auto Start] <C:\WINNT\svchost.exe><N/A> [Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start] <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.> [Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start] <"C:\KAV2007\KPfwSvc.EXE"><Kingsoft Corporation> [Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start] <C:\KAV2007\KWatch.EXE><Kingsoft Corporation> [Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A> [OracleOraHome81ClientCache / OracleOraHome81ClientCache][Stopped/Manual Start] <D:\oracle\ora81\BIN\ONRSD.EXE><N/A> [OracleOraHome81TNSListener / OracleOraHome81TNSListener][Stopped/Manual Start] <D:\oracle\ora81\BIN\TNSLSNR ><N/A> [OracleServiceORACLE / OracleServiceORACLE][Stopped/Auto Start] <d:\oracle\ora81\bin\ORACLE.EXE ORACLE><N/A> [Event Service / Patterns][Others/Auto Start] <C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\zhfpv.dll><N/A> [Server Advance / ServerAC][Stopped/Auto Start] <C:\WINNT\system32\Security.exe><N/A> [test / test][Stopped/Auto Start] <C:\WINNT\system32\test.exe><N/A> [Windows DHCP Service / WinDHCPsvc][Stopped/Auto Start] <C:\WINNT\system32\\rundll32.exe windhcp.ocx,input><Microsoft Corporation> [Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start] <C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\mspmsnsv.dll><Microsoft Corporation> ================================== 驱动程序 [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.> [BrPar / BrPar][Running/Auto Start] <\SystemRoot\System32\drivers\BrPar.sys><Brother Industries Ltd.> [dmboot / dmboot][Stopped/Disabled] <System32\drivers\dmboot.sys><VERITAS Software Corp.> [Logical Disk Manager Driver / dmio][Running/Boot Start] <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.> [dmload / dmload][Running/Boot Start] <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.> [EntDrv50 / EntDrv50][Stopped/Manual Start] <\??\C:\WINNT\system32\drivers\EntDrv50.sys><N/A> [ialm / ialm][Running/Manual Start] <System32\DRIVERS\ialmnt5.sys><Intel Corporation> [KNetWch / KNetWch][Running/System Start] <\??\C:\KAV2007\KNetWch.SYS><Kingsoft Corporation> [KWatch3 / KWatch3][Running/System Start] <\??\C:\WINNT\system32\drivers\KWatch3.SYS><Kingsoft Corporation> [Netgroup Packet Filter / NPF][Stopped/Manual Start] <system32\drivers\npf.sys><N/A> [npkcrypt / npkcrypt][Running/Auto Start] <\??\E:\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [Realtek 10/100/1000 NIC Family all in one NDIS NT Driver / RTL8023][Running/Manual Start] <System32\DRIVERS\Rtlnic.sys><Realtek Semiconductor Corporation> [Realtek RTL8139-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start] <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [Sentinel / Sentinel][Running/Auto Start] <\SystemRoot\System32\Drivers\SENTINEL.SYS><N/A> [suhdlog.sys / suhdlog.sys][Stopped/Manual Start] <\??\c:\suhdlog.sys><N/A> [TITAN / TITAN][Running/Auto Start] <\??\C:\WINNT\system32\drivers\TITAN.SYS><FeiTian Tech Co.,Ltd> [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start] <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation> [151484 / 151484][Running/] <2 - 系统找不到指定的文件。 ><N/A> [BdGuard / BdGuard][Running/] <2 - 系统找不到指定的文件。 ><N/A> ================================== 浏览器加载项 [AcroIEHlprObj Class] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, > [CBrowseStakeout Class] {55302805-482E-470E-8A57-6795A1487F90} <C:\KAV2007\KAVAFish.DLL, Kingsoft Corporation> [BandIE Class] {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation> [@shdoclc.dll,-866] {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A> [FlashGet] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <E:\新建文~1\FLASHGET\flashget.exe, N/A> [@msdxmLC.dll,-1@2052,电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation> [百度超级搜霸] {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [&使用BitComet下载] <res://E:\BT\BitComet\BitComet.exe/AddLink.htm, N/A> [&使用BitComet下载全部链接] <res://E:\BT\BitComet\BitComet.exe/AddAllLink.htm, N/A> [&使用BitComet下载本页视频] <res://E:\BT\BitComet\BitComet.exe/AddVideo.htm, N/A> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> [上传到QQ网络硬盘] <E:\QQ\AddToNetDisk.htm, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [添加到QQ自定义面板] <E:\QQ\AddPanel.htm, N/A> [添加到QQ表情] <E:\QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <E:\QQ\SendMMS.htm, N/A> [金山毒霸反钓鱼...] <C:\KAV2007\KAF\ShowSet.htm, N/A>
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 10:54 \| 显示全部短消息资料字号：小中大 8楼 ================================== 正在运行的进程 [PID: 140][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601] [PID: 164][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601] [PID: 184][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6970] [PID: 212][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.00.2195.6700] [C:\WINNT\system32\dmserver.dll] [VERITAS Software Corp., 2195.6605.297.3] [PID: 224][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.00.2195.6902] [PID: 412][C:\KAV2007\KWatch.EXE] [Kingsoft Corporation, 2005, 9, 27, 51] [C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20] [C:\KAV2007\KAEPlat.DLL] [Kingsoft Corp., 2006, 8, 29, 60] [C:\KAV2007\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16] [C:\KAV2007\KAEUnpack.DAT] [Kingsoft Corp., 2006, 10, 26, 69] [PID: 444][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1] [PID: 488][C:\WINNT\system32\spoolsv.exe] [Microsoft Corporation, 5.00.2195.7059] [PID: 528][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1] [PID: 544][C:\KAV2007\KPfwSvc.EXE] [Kingsoft Corporation, 2005, 9, 5, 28] [PID: 584][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] [Microsoft Corporation, 7.00.9466] [PID: 660][C:\WINNT\system32\MSTask.exe] [Microsoft Corporation, 4.71.2195.6920] [PID: 720][C:\WINNT\System32\WBEM\WinMgmt.exe] [Microsoft Corporation, 1.50.1085.0100] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [PID: 780][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [PID: 792][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [PID: 1012][C:\WINNT\System32\igfxtray.exe] [Intel Corporation, 3.0.0.3889] [C:\WINNT\System32\hccutils.DLL] [Intel Corporation, 3.0.0.3889] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\WINNT\System32\igfxdev.dll] [Intel Corporation, 3.0.0.3889] [C:\WINNT\System32\igfxsrvc.dll] [Intel Corporation, 3.0.0.3889] [C:\WINNT\System32\igfxres.dll] [Intel Corporation, 3.0.0.3889] [C:\WINNT\System32\igfxress.dll] [Intel Corporation, 3.0.0.3889] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [PID: 992][C:\WINNT\System32\hkcmd.exe] [Intel Corporation, 3.0.0.3889] [C:\WINNT\System32\hccutils.DLL] [Intel Corporation, 3.0.0.3889] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\WINNT\System32\igfxdev.dll] [Intel Corporation, 3.0.0.3889] [C:\WINNT\System32\igfxsrvc.dll] [Intel Corporation, 3.0.0.3889] [C:\WINNT\System32\igfxhk.dll] [Intel Corporation, 3.0.0.3889] [C:\WINNT\System32\igfxres.dll] [Intel Corporation, 3.0.0.3889] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [PID: 976][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3427] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [PID: 980][C:\KAV2007\KAVStart.exe] [Kingsoft Corporation, 2006, 11, 10, 212] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20] [C:\KAV2007\SvcTimer.DLL] [Kingsoft Corporation, 2006.12.22.84] [C:\KAV2007\PopSprt3.dll] [Kingsoft Corporation, 2006, 9, 26, 38] [C:\KAV2007\KAVPassp.dll] [Kingsoft Corporation, 2006, 12, 30, 271] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [PID: 1164][C:\WINNT\system32\ctfmon.exe] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [PID: 1168][C:\KAV2007\KPFW32.EXE] [Kingsoft Corporation, 2006, 12, 11, 666] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20] [C:\KAV2007\KAConfig.DLL] [Kingsoft Corporation, 2007, 1, 11, 41] [C:\KAV2007\FiltList.dll] [N/A, N/A] [C:\KAV2007\KAVPassp.DLL] [Kingsoft Corporation, 2006, 12, 30, 271] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [PID: 1224][C:\KAV2007\KMailMon.EXE] [Kingsoft Corporation, 2006, 12, 27, 942]
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:

山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:	发表于： 2007-01-29 10:54 \| 显示全部短消息资料字号：小中大 9楼 [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KAntiSpm.dll] [Kingsoft Corporation, 2006, 8, 19, 104] [C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20] [C:\KAV2007\KAECall2.DLL] [Kingsoft Corporation, 2004, 12, 28, 7] [C:\KAV2007\KAEPlat.DLL] [Kingsoft Corp., 2006, 8, 29, 60] [C:\KAV2007\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16] [C:\KAV2007\KAEUnpack.DAT] [Kingsoft Corp., 2006, 10, 26, 69] [C:\KAV2007\KAConfig.DLL] [Kingsoft Corporation, 2007, 1, 11, 41] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [PID: 1320][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2800.1106] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx] [, 1, 0, 0, 1] [C:\KAV2007\KAVAFish.DLL] [Kingsoft Corporation, 2006, 10, 25, 27] [C:\WINNT\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\PROGRA~1\baidu\bar\BaiduBar.dll] [Baidu.com, Inc., 2, 0, 2, 124] [C:\PROGRA~1\baidu\bar\bdgdins.dll] [Baidu.com, Inc., 1, 1, 8, 0] [C:\Program Files\Common Files\CPUSH\cpush.dll] [N/A, N/A] [PID: 1368][C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.2.0.207] [C:\Program Files\Thunder Network\Thunder\Program\UpdateDownload.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 8] [C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 70] [C:\Program Files\Thunder Network\Thunder\Program\log4cplus.dll] [, 1, 0, 2, 1] [C:\Program Files\Thunder Network\Thunder\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [C:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll] [N/A, N/A] [C:\Program Files\Thunder Network\Thunder\Program\msgmanage.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 15] [C:\Program Files\Thunder Network\Thunder\Program\historyinfo_manage.dll] [Thunder Networking Technologies,LTD, 5, 2, 0, 148] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 1, 2, 0, 7] [C:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 2] [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll] [　, 1, 0, 0, 5] [C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed.dll] [　, 2, 1, 0, 29] [C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 6] [C:\Program Files\Thunder Network\Thunder\Program\iTargetAd.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 60] [C:\WINNT\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [PID: 1284][C:\WINNT\system32\conime.exe] [Microsoft Corporation, 5.00.2195.6655] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [PID: 596][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2800.1106] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx] [, 1, 0, 0, 1] [C:\KAV2007\KAVAFish.DLL] [Kingsoft Corporation, 2006, 10, 25, 27] [C:\PROGRA~1\baidu\bar\BaiduBar.dll] [Baidu.com, Inc., 2, 0, 2, 124] [C:\WINNT\system32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [C:\WINNT\system32\msdmo.dll] [N/A, N/A] [E:\MVBOX\DCDSPFilter.ax] [http://www.dsp-worx.de/, 1, 0, 3, 0] [PID: 1044][E:\QQ\QQ.exe] [TENCENT, 0, 0, 0, 0] [E:\QQ\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [E:\QQ\QQHelperDll.dll] [, 1, 0, 0, 1] [E:\QQ\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 370] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [E:\QQ\QQAPI.dll] [, 1, 0, 0, 1] [E:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 1576][E:\QQ\TIMPlatform.exe] [tencent, 0, 3, 1, 8] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [E:\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4] [PID: 532][C:\WINNT\explorer.exe] [Microsoft Corporation, 5.00.3700.6690] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [C:\Program Files\Common Files\Microsoft Shared\MSInfo\IEINFO5.sys] [N/A, N/A] [C:\PROGRA~1\baidu\bar\BaiduBar.dll] [Baidu.com, Inc., 2, 0, 2, 124] [C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx] [, 1, 0, 0, 1] [D:\winrar3.11\rarext.dll] [N/A, N/A] [PID: 1896][C:\KAV2007\KAV32.EXE] [Kingsoft Corporation, 2006, 12, 29, 82] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [C:\KAV2007\KAV32Res.dll] [Kingsoft Corporation, 2006, 12, 25, 88] [C:\KAV2007\KAEPlat.DLL] [Kingsoft Corp., 2006, 8, 29, 60] [C:\KAV2007\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16] [C:\KAV2007\KAEUnpack.DAT] [Kingsoft Corp., 2006, 10, 26, 69] [C:\KAV2007\KAConfig.DLL] [Kingsoft Corporation, 2007, 1, 11, 41] [C:\KAV2007\KAVIPC2.DLL] [Kingsoft Corporation, 2004, 12, 28, 20] [C:\KAV2007\KAVPassp.DLL] [Kingsoft Corporation, 2006, 12, 30, 271] [C:\KAV2007\DBAgent.DLL] [Kingsoft Corporation, 2005, 10, 27, 9] [C:\KAV2007\KWindUp.DLL] [Kingsoft Corp., 2006, 1, 10, 18] [C:\KAV2007\KAEPrev.dll] [Kingsoft Corporation, 2006, 12, 7, 20] [C:\KAV2007\KAEMemEx.dll] [N/A, 2006, 10, 17, 16] [C:\KAV2007\KAEMalDt.dll] [N/A, 2006, 12, 7, 20] [C:\KAV2007\KAERemov.dll] [N/A, 2006, 12, 7, 20] [PID: 1920][C:\DOCUME~1\1234\LOCALS~1\Temp\Rar$EX00.750\SREng.EXE] [Smallfrogs Studio, 2.3.13.690] [C:\WINNT\system32\windhcp.ocx] [N/A, N/A] [C:\KAV2007\KMailOEBand.dll] [Kingsoft Corporation, 2006, 9, 7, 132] [C:\KAV2007\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233] [C:\DOCUME~1\1234\LOCALS~1\Temp\Rar$EX00.750\Plugins\SRECXTMG.SRE] [Smallfrogs Studio, 1, 5, 0, 55] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINNT\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK 警告！System Repair Engineer 提醒你下面的函数内容与预期值不符，他们可能被一些恶意的软件所修改：入口点错误：LoadLibraryExW ================================== [/CODE]
山东的农民初生襁褓狮帖子:66 注册: 2007-01-27 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT