瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】十万火急,帮一下忙(有扫描内志)

1   1  /  1  页   跳转页

【求助】十万火急,帮一下忙(有扫描内志)

收藏
独爱狂龙
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2007-01-31
  • 来自:
发表于： 2007-01-31 22:10 | 显示全部 短消息 资料
字号： 小 中 大 1楼

【求助】十万火急,帮一下忙(有扫描内志)

ystem Information Collect Tool - Designed By Smallfrogs


20070131-21:52
Windows XP Service Pack 1
Internet Explorer: 6.0.2800.1106


*****************************************************************
      Runing Processes information
*****************************************************************
=====================================================
PROCESS NAME:  System
-----------------------------------------------------
  Process ID  = 0x00000004
  Thread count= 48
  Parent process ID = 0
  Priority Class    = 32


Modules:
------------------------------------


=====================================================
PROCESS NAME:  smss.exe
-----------------------------------------------------
  Process ID  = 0x00000224
  Thread count= 3
  Parent process ID = 4
  Priority Class    = 32


Modules:
------------------------------------
\SystemRoot\System32\smss.exe (0x48580000)

C:\WINDOWS\System32\ntdll.dll (0x77F50000)



=====================================================
PROCESS NAME:  csrss.exe
-----------------------------------------------------
    WARNING: OpenProcess failed with error 5 ()
  Process ID  = 0x000002cc
  Thread count= 11
  Parent process ID = 548


Modules:
------------------------------------


=====================================================
PROCESS NAME:  winlogon.exe
-----------------------------------------------------
  Process ID  = 0x000002e4
  Thread count= 20
  Parent process ID = 548
  Priority Class    = 128


Modules:
------------------------------------
\??\C:\WINDOWS\system32\winlogon.exe (0x01000000)

C:\WINDOWS\System32\ntdll.dll (0x77F50000)

C:\WINDOWS\system32\kernel32.dll (0x77E40000)

C:\WINDOWS\system32\msvcrt.dll (0x77BE0000)

C:\WINDOWS\system32\ADVAPI32.dll (0x77DA0000)

C:\WINDOWS\system32\RPCRT4.dll (0x78000000)

C:\WINDOWS\system32\GDI32.dll (0x77C40000)

C:\WINDOWS\system32\USER32.dll (0x77D10000)

C:\WINDOWS\system32\USERENV.dll (0x759D0000)

C:\WINDOWS\system32\NDdeApi.dll (0x758A0000)

C:\WINDOWS\system32\CRYPT32.dll (0x76230000)

C:\WINDOWS\system32\MSASN1.dll (0x76210000)

C:\WINDOWS\system32\Secur32.dll (0x76F60000)

C:\WINDOWS\system32\WINSTA.dll (0x762D0000)

C:\WINDOWS\system32\PROFMAP.dll (0x75890000)

C:\WINDOWS\system32\NETAPI32.dll (0x71BA0000)

C:\WINDOWS\system32\REGAPI.dll (0x76B90000)

C:\WINDOWS\system32\WS2_32.dll (0x71A20000)

C:\WINDOWS\system32\WS2HELP.dll (0x71A10000)

C:\WINDOWS\system32\AUTHZ.dll (0x76C90000)

C:\WINDOWS\system32\PSAPI.DLL (0x76BC0000)

C:\WINDOWS\system32\VERSION.dll (0x77BD0000)

C:\WINDOWS\system32\SETUPAPI.dll (0x765E0000)

C:\WINDOWS\System32\IMM32.DLL (0x76300000)

C:\WINDOWS\System32\LPK.DLL (0x62C20000)

C:\WINDOWS\System32\USP10.dll (0x72F10000)

C:\WINDOWS\System32\MSGINA.dll (0x758D0000)

C:\WINDOWS\system32\SHELL32.dll (0x773A0000)

C:\WINDOWS\system32\SHLWAPI.dll (0x772A0000)

C:\WINDOWS\system32\COMCTL32.dll (0x77310000)

C:\WINDOWS\System32\ODBC32.dll (0x1F7B0000)

C:\WINDOWS\system32\comdlg32.dll (0x76320000)

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll (0x78090000)

C:\WINDOWS\System32\odbcint.dll (0x1F850000)

C:\WINDOWS\System32\SHSVCS.dll (0x76BA0000)

C:\WINDOWS\system32\sfc.dll (0x76B80000)

C:\WINDOWS\System32\sfc_os.dll (0x76C30000)

C:\WINDOWS\System32\WINTRUST.dll (0x76C00000)

C:\WINDOWS\system32\ole32.dll (0x77180000)

C:\WINDOWS\system32\IMAGEHLP.dll (0x76C60000)

C:\WINDOWS\System32\msctfime.ime (0x00D40000)

C:\WINDOWS\System32\WINSCARD.DLL (0x72360000)

C:\WINDOWS\System32\WTSAPI32.dll (0x76F20000)

C:\WINDOWS\System32\WINMM.dll (0x76B10000)

C:\WINDOWS\System32\uxtheme.dll (0x5ADC0000)

C:\WINDOWS\System32\sxs.dll (0x75E00000)

C:\WINDOWS\system32\cscdll.dll (0x76570000)

C:\WINDOWS\System32\rsaenh.dll (0x0FFD0000)

C:\WINDOWS\system32\WlNotify.dll (0x758B0000)

C:\WINDOWS\System32\WINSPOOL.DRV (0x72F70000)

C:\WINDOWS\system32\MPR.dll (0x71A90000)

C:\WINDOWS\System32\SAMLIB.dll (0x71B70000)

C:\WINDOWS\System32\cscui.dll (0x76590000)

C:\WINDOWS\System32\NavLogon.dll (0x51650000)

C:\WINDOWS\System32\NTMARTA.DLL (0x76CB0000)

C:\WINDOWS\system32\WLDAP32.dll (0x76F30000)

C:\WINDOWS\system32\msv1_0.dll (0x76CE0000)

C:\WINDOWS\System32\COMRes.dll (0x77020000)

C:\WINDOWS\system32\OLEAUT32.dll (0x770F0000)

C:\WINDOWS\System32\CLBCATQ.DLL (0x76FA0000)

C:\WINDOWS\System32\wdmaud.drv (0x72C90000)

C:\WINDOWS\System32\msacm32.drv (0x72C80000)

C:\WINDOWS\System32\MSACM32.dll (0x77BB0000)

C:\WINDOWS\System32\midimap.dll (0x77BA0000)

C:\WINDOWS\System32\wbem\wbemprox.dll (0x74E50000)

C:\WINDOWS\System32\wbem\wbemcomn.dll (0x751F0000)

C:\WINDOWS\System32\wbem\wbemsvc.dll (0x74E30000)

C:\WINDOWS\System32\wbem\fastprox.dll (0x755F0000)



=====================================================
PROCESS NAME:  services.exe
-----------------------------------------------------
  Process ID  = 0x00000310
  Thread count= 17
  Parent process ID = 740
  Priority Class    = 32


Modules:
------------------------------------
C:\WINDOWS\system32\services.exe (0x01000000)

C:\WINDOWS\System32\ntdll.dll (0x77F50000)

C:\WINDOWS\system32\kernel32.dll (0x77E40000)

C:\WINDOWS\system32\msvcrt.dll (0x77BE0000)

C:\WINDOWS\system32\ADVAPI32.dll (0x77DA0000)

C:\WINDOWS\system32\RPCRT4.dll (0x78000000)

C:\WINDOWS\system32\USER32.dll (0x77D10000)

C:\WINDOWS\system32\GDI32.dll (0x77C40000)

C:\WINDOWS\system32\USERENV.dll (0x759D0000)

C:\WINDOWS\system32\SCESRV.dll (0x75840000)

C:\WINDOWS\system32\AUTHZ.dll (0x76C90000)

C:\WINDOWS\system32\umpnpmgr.dll (0x75820000)

C:\WINDOWS\system32\WINSTA.dll (0x762D0000)

C:\WINDOWS\system32\NCObjAPI.DLL (0x5F9A0000)

C:\WINDOWS\System32\IMM32.DLL (0x76300000)

C:\WINDOWS\system32\LPK.DLL (0x62C20000)

C:\WINDOWS\system32\USP10.dll (0x72F10000)

C:\WINDOWS\system32\secur32.dll (0x76F60000)

C:\WINDOWS\system32\eventlog.dll (0x75800000)

C:\WINDOWS\system32\WS2_32.dll (0x71A20000)

C:\WINDOWS\system32\WS2HELP.dll (0x71A10000)

C:\WINDOWS\system32\PSAPI.DLL (0x76BC0000)

C:\WINDOWS\system32\wtsapi32.dll (0x76F20000)

C:\WINDOWS\system32\netapi32.dll (0x71BA0000)



=====================================================
PROCESS NAME:  lsass.exe
-----------------------------------------------------
  Process ID  = 0x0000031c
  Thread count= 20
  Parent process ID = 740
  Priority Class    = 32


Modules:
------------------------------------
C:\WINDOWS\system32\lsass.exe (0x01000000)

C:\WINDOWS\System32\ntdll.dll (0x77F50000)

C:\WINDOWS\system32\kernel32.dll (0x77E40000)

C:\WINDOWS\system32\ADVAPI32.dll (0x77DA0000)

C:\WINDOWS\system32\RPCRT4.dll (0x78000000)

C:\WINDOWS\system32\LSASRV.dll (0x74480000)

C:\WINDOWS\system32\msvcrt.dll (0x77BE0000)

C:\WINDOWS\system32\Secur32.dll (0x76F60000)

C:\WINDOWS\system32\USER32.dll (0x77D10000)

C:\WINDOWS\system32\GDI32.dll (0x77C40000)

C:\WINDOWS\system32\SAMSRV.dll (0x743A0000)

C:\WINDOWS\system32\cryptdll.dll (0x76760000)

C:\WINDOWS\system32\DNSAPI.dll (0x76EF0000)

C:\WINDOWS\system32\WS2_32.dll (0x71A20000)

C:\WINDOWS\system32\WS2HELP.dll (0x71A10000)

C:\WINDOWS\system32\MSASN1.dll (0x76210000)

C:\WINDOWS\system32\NETAPI32.dll (0x71BA0000)

C:\WINDOWS\system32\SAMLIB.dll (0x71B70000)

C:\WINDOWS\system32\MPR.dll (0x71A90000)

C:\WINDOWS\system32\NTDSAPI.dll (0x76770000)

C:\WINDOWS\system32\WLDAP32.dll (0x76F30000)

C:\WINDOWS\System32\IMM32.DLL (0x76300000)

C:\WINDOWS\system32\LPK.DLL (0x62C20000)

C:\WINDOWS\system32\USP10.dll (0x72F10000)

C:\WINDOWS\system32\msprivs.dll (0x74310000)

C:\WINDOWS\system32\kerberos.dll (0x71C70000)

C:\WINDOWS\system32\msv1_0.dll (0x76CE0000)

C:\WINDOWS\system32\netlogon.dll (0x74410000)

C:\WINDOWS\system32\w32time.dll (0x76790000)

C:\WINDOWS\system32\MSVCP60.dll (0x75FF0000)

C:\WINDOWS\system32\iphlpapi.dll (0x76D30000)

C:\WINDOWS\system32\USERENV.dll (0x759D0000)

C:\WINDOWS\system32\schannel.dll (0x767C0000)

C:\WINDOWS\system32\CRYPT32.dll (0x76230000)

C:\WINDOWS\system32\wdigest.dll (0x742E0000)

C:\WINDOWS\System32\rsaenh.dll (0x0FFD0000)

C:\WINDOWS\system32\scecli.dll (0x74370000)

C:\WINDOWS\system32\SETUPAPI.dll (0x765E0000)

C:\WINDOWS\system32\OLEAUT32.dll (0x770F0000)

C:\WINDOWS\system32\OLE32.DLL (0x77180000)

C:\WINDOWS\system32\shell32.dll (0x773A0000)

C:\WINDOWS\system32\SHLWAPI.dll (0x772A0000)

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll (0x78090000)

C:\WINDOWS\system32\comctl32.dll (0x77310000)

C:\WINDOWS\system32\ipsecsvc.dll (0x74340000)

C:\WINDOWS\system32\oakley.DLL (0x74530000)

C:\WINDOWS\system32\WINIPSEC.DLL (0x742D0000)

C:\WINDOWS\system32\pstorsvc.dll (0x74300000)

C:\WINDOWS\system32\mswsock.dll (0x719C0000)

C:\WINDOWS\system32\psbase.dll (0x74320000)

C:\WINDOWS\System32\wshtcpip.dll (0x71A00000)

C:\WINDOWS\System32\dssenh.dll (0x0FFA0000)

最后编辑2007-01-31 22:15:56
分享到：
gototop
 
独爱狂龙
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2007-01-31
  • 来自:
发表于： 2007-01-31 22:13 | 显示全部 短消息 资料
字号： 小 中 大 2楼

S

=====================================================
PROCESS NAME:  svchost.exe
-----------------------------------------------------
  Process ID  = 0x000003c4
  Thread count= 10
  Parent process ID = 784
  Priority Class    = 32


Modules:
------------------------------------
C:\WINDOWS\system32\svchost.exe (0x01000000)

C:\WINDOWS\System32\ntdll.dll (0x77F50000)

C:\WINDOWS\system32\kernel32.dll (0x77E40000)

C:\WINDOWS\system32\ADVAPI32.dll (0x77DA0000)

C:\WINDOWS\system32\RPCRT4.dll (0x78000000)

c:\windows\system32\rpcss.dll (0x757B0000)

C:\WINDOWS\system32\msvcrt.dll (0x77BE0000)

c:\windows\system32\WS2_32.dll (0x71A20000)

c:\windows\system32\WS2HELP.dll (0x71A10000)

C:\WINDOWS\system32\USER32.dll (0x77D10000)

C:\WINDOWS\system32\GDI32.dll (0x77C40000)

c:\windows\system32\Secur32.dll (0x76F60000)

C:\WINDOWS\System32\IMM32.DLL (0x76300000)

C:\WINDOWS\system32\LPK.DLL (0x62C20000)

C:\WINDOWS\system32\USP10.dll (0x72F10000)

C:\WINDOWS\system32\userenv.dll (0x759D0000)

C:\WINDOWS\system32\mswsock.dll (0x719C0000)

C:\WINDOWS\System32\wshtcpip.dll (0x71A00000)

C:\WINDOWS\system32\DNSAPI.dll (0x76EF0000)

C:\WINDOWS\system32\iphlpapi.dll (0x76D30000)

C:\WINDOWS\System32\winrnr.dll (0x76F80000)

C:\WINDOWS\system32\WLDAP32.dll (0x76F30000)

C:\WINDOWS\system32\rasadhlp.dll (0x76F90000)

C:\WINDOWS\system32\CLBCATQ.DLL (0x76FA0000)

C:\WINDOWS\system32\ole32.dll (0x77180000)

C:\WINDOWS\system32\OLEAUT32.dll (0x770F0000)

C:\WINDOWS\system32\COMRes.dll (0x77020000)

C:\WINDOWS\system32\VERSION.dll (0x77BD0000)

C:\WINDOWS\system32\urlmon.dll (0x76060000)

C:\WINDOWS\system32\SHLWAPI.dll (0x772A0000)

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll (0x78090000)

C:\WINDOWS\system32\Psapi.dll (0x76BC0000)

C:\WINDOWS\System32\MSCTF.dll (0x74680000)

C:\WINDOWS\system32\Apphelp.dll (0x75EB0000)



=====================================================
PROCESS NAME:  CCenter.exe
-----------------------------------------------------
  Process ID  = 0x000003f4
  Thread count= 3
  Parent process ID = 784
  Priority Class    = 32
gototop
 
独爱狂龙
头像
初生襁褓狮
  • 帖子:22
  • 注册: 2007-01-31
  • 来自:
发表于： 2007-01-31 22:14 | 显示全部 短消息 资料
字号： 小 中 大 3楼

Modules:
------------------------------------
C:\Program Files\Rising\Rav\CCenter.exe (0x00400000)

C:\WINDOWS\System32\ntdll.dll (0x77F50000)

C:\WINDOWS\system32\kernel32.dll (0x77E40000)

C:\WINDOWS\system32\USER32.dll (0x77D10000)

C:\WINDOWS\system32\GDI32.dll (0x77C40000)

C:\WINDOWS\system32\ADVAPI32.dll (0x77DA0000)

C:\WINDOWS\system32\RPCRT4.dll (0x78000000)

C:\WINDOWS\System32\IMM32.DLL (0x76300000)

C:\WINDOWS\System32\LPK.DLL (0x62C20000)

C:\WINDOWS\System32\USP10.dll (0x72F10000)



=====================================================
PROCESS NAME:  svchost.exe
-----------------------------------------------------
  Process ID  = 0x00000408
  Thread count= 66
  Parent process ID = 784
  Priority Class    = 32


Modules:
------------------------------------
C:\WINDOWS\System32\svchost.exe (0x01000000)

C:\WINDOWS\System32\ntdll.dll (0x77F50000)

C:\WINDOWS\system32\kernel32.dll (0x77E40000)

C:\WINDOWS\system32\ADVAPI32.dll (0x77DA0000)

C:\WINDOWS\system32\RPCRT4.dll (0x78000000)

C:\WINDOWS\system32\ole32.dll (0x77180000)

C:\WINDOWS\system32\GDI32.dll (0x77C40000)

C:\WINDOWS\system32\USER32.dll (0x77D10000)

C:\WINDOWS\System32\IMM32.DLL (0x76300000)

C:\WINDOWS\System32\LPK.DLL (0x62C20000)

C:\WINDOWS\System32\USP10.dll (0x72F10000)

c:\windows\system32\shsvcs.dll (0x76BA0000)

C:\WINDOWS\system32\msvcrt.dll (0x77BE0000)

C:\WINDOWS\system32\SHLWAPI.dll (0x772A0000)

C:\WINDOWS\system32\shell32.dll (0x773A0000)

C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\comctl32.dll (0x78090000)

C:\WINDOWS\system32\comctl32.dll (0x77310000)

C:\WINDOWS\System32\WINSTA.dll (0x762D0000)

C:\WINDOWS\System32\UxTheme.dll (0x5ADC0000)

c:\windows\system32\dhcpcsvc.dll (0x76D50000)

c:\windows\system32\DNSAPI.dll (0x76EF0000)

c:\windows\system32\WS2_32.dll (0x71A20000)

c:\windows\system32\WS2HELP.dll (0x71A10000)

c:\windows\system32\iphlpapi.dll (0x76D30000)

c:\windows\system32\Secur32.dll (0x76F60000)

C:\WINDOWS\System32\rsaenh.dll (0x0FFD0000)

C:\WINDOWS\System32\NTMARTA.DLL (0x76CB0000)

C:\WINDOWS\system32\WLDAP32.dll (0x76F30000)

C:\WINDOWS\System32\SAMLIB.dll (0x71B70000)

c:\windows\system32\wzcsvc.dll (0x77C80000)

c:\windows\system32\rtutils.dll (0x76E50000)

c:\windows\system32\WMI.dll (0x76D00000)

C:\WINDOWS\system32\OLEAUT32.dll (0x770F0000)

C:\WINDOWS\system32\CRYPT32.dll (0x76230000)

C:\WINDOWS\system32\MSASN1.dll (0x76210000)

c:\windows\system32\WTSAPI32.dll (0x76F20000)

c:\windows\system32\ESENT.dll (0x69A20000)

c:\windows\system32\NETAPI32.dll (0x71BA0000)

C:\WINDOWS\System32\rastls.dll (0x74E70000)

C:\WINDOWS\System32\ATL.DLL (0x76AF0000)

C:\WINDOWS\System32\CRYPTUI.dll (0x75430000)

C:\WINDOWS\System32\WINTRUST.dll (0x76C00000)

C:\WINDOWS\system32\IMAGEHLP.dll (0x76C60000)

C:\WINDOWS\system32\WININET.dll (0x76170000)

C:\WINDOWS\System32\MPRAPI.dll (0x76D10000)

C:\WINDOWS\System32\ACTIVEDS.dll (0x76E10000)

C:\WINDOWS\System32\adsldpc.dll (0x76DE0000)

C:\WINDOWS\System32\SETUPAPI.dll (0x765E0000)

C:\WINDOWS\System32\RASAPI32.dll (0x76EB0000)

C:\WINDOWS\System32\rasman.dll (0x76E60000)

C:\WINDOWS\System32\TAPI32.dll (0x76E80000)

C:\WINDOWS\System32\WINMM.dll (0x76B10000)

C:\WINDOWS\System32\SCHANNEL.dll (0x767C0000)

C:\WINDOWS\system32\USERENV.dll (0x759D0000)

C:\WINDOWS\System32\WinSCard.dll (0x72360000)

C:\WINDOWS\System32\raschap.dll (0x74F60000)

C:\WINDOWS\system32\msv1_0.dll (0x76CE0000)

C:\WINDOWS\System32\CLBCATQ.DLL (0x76FA0000)

C:\WINDOWS\System32\COMRes.dll (0x77020000)

C:\WINDOWS\system32\VERSION.dll (0x77BD0000)

c:\windows\system32\schedsvc.dll (0x75130000)

c:\windows\system32\NTDSAPI.dll (0x76770000)

C:\WINDOWS\System32\mswsock.dll (0x719C0000)

C:\WINDOWS\System32\wshtcpip.dll (0x71A00000)

C:\WINDOWS\System32\MSIDLE.DLL (0x74EB0000)

c:\windows\system32\audiosrv.dll (0x70DE0000)

c:\windows\system32\wkssvc.dll (0x750D0000)

c:\windows\system32\cryptsvc.dll (0x74F00000)

c:\windows\system32\certcli.dll (0x752B0000)

c:\windows\system32\srsvc.dll (0x75100000)

c:\windows\system32\POWRPROF.dll (0x74A30000)

c:\windows\system32\seclogon.dll (0x73C90000)

c:\windows\system32\netman.dll (0x76DB0000)

c:\windows\pchealth\helpctr\binaries\pchsvc.dll (0x74EA0000)

c:\windows\system32\es.dll (0x76B40000)

c:\windows\system32\ersvc.dll (0x74EE0000)

c:\windows\system32\dmserver.dll (0x74EF0000)

c:\windows\system32\tapisrv.dll (0x73350000)

c:\windows\system32\PSAPI.DLL (0x76BC0000)

c:\windows\system32\w32time.dll (0x76790000)

c:\windows\system32\MSVCP60.dll (0x75FF0000)

c:\windows\system32\trkwks.dll (0x74FD0000)

c:\windows\system32\wbem\wmisvc.dll (0x59470000)

c:\windows\system32\wbem\wbemcomn.dll (0x751F0000)

C:\WINDOWS\System32\VSSAPI.DLL (0x75340000)

c:\windows\system32\sens.dll (0x72260000)

c:\windows\system32\rasmans.dll (0x723F0000)

c:\windows\system32\WINIPSEC.DLL (0x742D0000)

c:\windows\system32\netcfgx.dll (0x75550000)

c:\windows\system32\CLUSAPI.dll (0x74F20000)

c:\windows\system32\wuauserv.dll (0x74E20000)
gototop
 
<<上一主题|下一主题>>
1   1  /  1  页   跳转页
页面顶部
Powered by Discuz!NT