高手LOOK哈.斑主进来哈.病毒啊 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛高手LOOK哈.斑主进来哈.病毒啊

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

高手LOOK哈.斑主进来哈.病毒啊

啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:	发表于： 2007-06-22 12:32 \| 显示全部短消息资料字号：小中大 1楼高手LOOK哈.斑主进来哈.病毒啊 [CODE] 2007-06-22,12:18:16 System Repair Engineer 2.4.12.806 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\windows\System32\ctfmon.exe> [(Verified)Microsoft Windows XP Publisher] <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Windows XP Publisher] <Super Rabbit IEPro><F:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [Super Rabbit Soft] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows XP Publisher] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows XP Publisher] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows XP Publisher] <SoundMan><soundman.exe> [Avance Logic, Inc.] <BigDogPath><C:\WINDOWS\VM_STI.EXE FAMETECH USB PC CAMERA> [N/A] <Super Rabbit SRRestore><F:\PROGRA~1\SUPERR~1\MagicSet\SRRest.exe /autosave> [] <HP Software Update><C:\Program Files\HP\HP Software Update\HPWuSchd2.exe> [Hewlett-Packard Co.] <RfwMain><"E:\CP\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <RavTask><"E:\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <adx.exe><C:\Program Files\adx\adx.exe> [N/A] <RunShadowTip><C:\WINDOWS\System32\shadow\ShadowTip.exe> [PowerShadow] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A] <Microsoft Autorun9><C:\windows\System32\Ravasktao.exe> [] <TIMHost><C:\windows\TIMHost.exe> [] <Microsoft Autorun14><C:\windows\System32\ztinetzt.exe> [] <Microsoft Autorun1><C:\windows\System32\nwizdh.exe> [] <Microsoft Autorun7><C:\windows\System32\nwiztlbu.exe> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] <MSDEG32><LYLoader.exe> [] <MSDWG32><LYLoadbr.exe> [N/A] <MSDCG32 ><LYLeador.exe> [N/A] <MSDOG32><LYLoador.exe> [N/A] <MSDSG32><LYLoadar.exe> [N/A] <MSDMG32><LYLoadmr.exe> [N/A] <MSDHG32><LYLoadhr.exe> [N/A] <MSDQG32><LYLoadqr.exe> [N/A] <twin><C:\windows\System32\ctfnom.exe> [Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows XP Publisher] <Userinit><c:\windows\system32\userinit.exe,> [(Verified)Microsoft Windows XP Publisher] <UIHost><logonui.exe> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{1496D5ED-7A09-46D0-8C92-B8E71A4304DF}><C:\windows\System32\Time.dll> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\System Safety Monitor] <WinlogonNotify: System Safety Monitor><SSMWinlogonEx.dll> [(Verified)System Safety Limited] ================================== 启动文件夹 [Adobe Gamma Loader] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><N> [HP Digital Imaging Monitor] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\HP Digital Imaging Monitor.lnk --> C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [Hewlett-Packard Co.]><N> [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> D:\program\office2k\Office\OSA9.EXE [Microsoft Corporation]><N> [QQ游戏启动加速程序] <C:\Documents and Settings\DCB\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> E:\QQGame\Accel.exe [N/A]><N> ================================== 服务 [Application Layer Gateway Service / ALG][Stopped/Manual Start] <C:\windows\System32\alg.exe><N/A> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] <C:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\windows\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Rising Proxy Service / RfwProxySrv][Stopped/Manual Start] <e:\cp\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService][Running/Auto Start] <e:\cp\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal FireWall / Rising Personal FireWall][Stopped/Disabled] <><N/A> [Remote Packet Capture Protocol v.0 (experimental) / rpcapd][Stopped/Manual Start] <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><CACE Technologies> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"E:\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon][Running/Auto Start] <"E:\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> [Windows DHCP Service / WinDHCPsvc][Stopped/Auto Start] <C:\windows\System32\rundll32.exe windhcp.ocx,input><Microsoft Corporation> ================================== 驱动程序 [ADProt / ADProt][Stopped/Boot Start] <\SystemRoot\system32\drivers\ADProt.sys><腾讯科技（深圳）有限公司> [Service for Avance AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Avance Logic, Inc.> [Rising TDI Base Driver / BaseTDI][Running/Auto Start] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [EagleNT / EagleNT][Stopped/Manual Start] <\??\C:\WINDOWS\System32\drivers\EagleNT.sys><N/A> [ExpScaner / ExpScaner][Running/Auto Start] <\??\E:\Rising\Rav\ExpScan.sys><> [HookCont / HookCont][Running/Auto Start] <\??\E:\Rising\Rav\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\E:\Rising\Rav\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\E:\Rising\Rav\HookSys.sys><Rising> [HookUrl / HookUrl][Running/Auto Start] <\??\E:\CP\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [jcum / jcumd][Running/Boot Start] <\SystemRoot\System32\DRIVERS\jcumd.sys><N/A> [kmsinput / kmsinput][Stopped/Manual Start] <\??\C:\WINDOWS\System32\drivers\kmsinput.sys><N/A> [mcnahook.sys / mcnahook.sys][Stopped/Auto Start] <\??\F:\反病毒软件\System Safety Monitor\mcnahook.sys><Max Computing> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\E:\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [mProcRs / mProcRs][Running/Auto Start] <\??\e:\cp\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [NetGroup Packet Filter Driver / NPF][Stopped/Manual Start] <system32\drivers\npf.sys><CACE Technologies> [npkcrypt / npkcrypt][Running/Auto Start] <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [nv / nv][Running/Manual Start] <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions> [QuakeDRV / QuakeDRV][Running/Boot Start] <\SystemRoot\System32\DRIVERS\quakedrv.sys><N/A> [RsFwDrv / RsFwDrv][Running/Auto Start] <\??\E:\CP\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\System32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\E:\Rising\Rav\RSPPSYS.sys><Rising> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [System Safety Monitor 2.0 Core Engine / safemon][Running/Boot Start] <\SystemRoot\system32\drivers\safemon.sys><System Safety Limited> [Secdrv / Secdrv][Stopped/Manual Start] <System32\DRIVERS\secdrv.sys><N/A> [SKNFW / SKNFW][Running/System Start] <\??\C:\WINDOWS\System32\Drivers\SKNFW.sys><N/A> [SkyProcs / SkyProcs][Stopped/Manual Start] <\??\E:\Program Files\SkyNet\FireWall\SkyProcs.sys><N/A> [TYKeeper / TYKeeper][Stopped/Boot Start] <\SystemRoot\System32\drivers\TYKeeper.sys><N/A> [VCD VNC Virtual Network Adapter / vcddev][Running/Manual Start] <System32\DRIVERS\vcdvnic.sys><VNN B.J.> [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start] <System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation> [FAMETECH USB PC CAMERA / ZSMC301b][Stopped/Manual Start] <System32\Drivers\usbVM31b.sys><VM> 2007-06-22 17:36:05
啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:	分享到：

啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:	发表于： 2007-06-22 12:33 \| 显示全部短消息资料字号：小中大 2楼浏览器加载项 [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <F:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD> [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.> [江民在线杀毒] {06926B30-424E-4f1c-8EE3-543CD96573DC} <http://online.jiangmin.com/online.asp, N/A> [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD> [浩方对战平台] {0A155D3C-68E2-4215-A47A-E800A446447A} <F:\浩方对战平台\GameClient.exe, > [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\qq\QQ.EXE, > [BitCometBar] {3F1ABCDB-A875-46c1-8345-B72A4567E486} <E:\BitComet\BitCometBar\BitCometBar0.3.dll, > [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <F:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.> [CEditCtrl Object] {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\windows\System32\aliedit\AliEdit.dll, www.alipay.com> [MediaGatewayX] {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} <C:\WINDOWS\Downloaded Program Files\MediaGatewayX.dll, 180solutions> [WebActivater Control] {C661F36D-DF85-4EF4-83C7-E107B83D04B1} <C:\WINDOWS\System32\3DShowVM.ocx, QQ> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [PasswordEditCtrl Class] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <D:\珊汉瑚鱍QQ\qqedit\qqedit.dll, N/A> [KvScanOnline Control] {EF6205C1-3F17-4829-BCB5-1336ED89E356} <C:\WINDOWS\System32\KvDown.ocx, dreamersoft> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> [Mail to a Friend...] <http://client.alexa.com/holiday/script/actions/mailto.htm, N/A> [上传到QQ网络硬盘] <E:\qq\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <E:\qq\AddPanel.htm, N/A> [添加到QQ表情] <E:\qq\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <E:\qq\SendMMS.htm, N/A> ================================== 正在运行的进程 [PID: 660][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 740][\??\C:\windows\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 764][\??\C:\windows\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [C:\windows\system32\SSMWinlogonEx.dll] [System Safety Limited, 2.4.0.615] [C:\windows\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\windows\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 808][C:\windows\system32\services.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\windows\System32\LYMANGR.DLL] [N/A, ] [PID: 820][C:\windows\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 996][C:\windows\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\windows\System32\whfsl.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\zkftx.dll] [N/A, ] [PID: 2004][C:\windows\Explorer.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)] [C:\windows\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\windows\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\windows\RichDll.dll] [N/A, ] [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4] [C:\windows\System32\Ravasktao.dll] [N/A, ] [C:\windows\System32\nwizzhuxians.dll] [N/A, ] [C:\windows\System32\nwizqjsj.dll] [N/A, ] [C:\windows\System32\TIMHost.dll] [N/A, ] [C:\windows\System32\ztinetzt.dll] [N/A, ] [C:\windows\System32\dh2104.dll] [N/A, ] [C:\windows\System32\nwiztlbb.dll] [N/A, ] [C:\windows\System32\nwizwlwzs.dll] [N/A, ] [C:\windows\System32\nwizwmgjs.dll] [N/A, ] [C:\windows\System32\nwizhx2.dll] [N/A, ] [C:\windows\System32\FindFiles.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\Time.dll] [N/A, ] [PID: 280][e:\cp\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 72] [e:\cp\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [e:\cp\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [e:\cp\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [e:\cp\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [e:\cp\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [C:\windows\System32\ztinetzt.dll] [N/A, ] [C:\windows\System32\TIMHost.dll] [N/A, ] [PID: 1264][C:\windows\soundman.exe] [Avance Logic, Inc., 5, 0, 0, 0] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [PID: 868][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4] [C:\windows\System32\msdmo.dll] [, ] [C:\windows\System32\whfsl.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\zkftx.dll] [N/A, ] [PID: 1324][C:\Program Files\HP\HP Software Update\HPWuSchd2.exe] [Hewlett-Packard Co., 53.0.13.000] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [PID: 1572][C:\windows\System32\conime.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [PID: 1916][C:\windows\System32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [C:\windows\System32\whfsl.dll] [N/A, ] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [PID: 2064][C:\windows\Logo1_.exe] [, 1.0.0.0] [PID: 2156][F:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE] [Super Rabbit Soft, 7.85] [C:\windows\System32\MSVBVM60.DLL] [Microsoft Corporation, 6.00.9237] [C:\windows\System32\vb6chs.dll] [Microsoft Corporation, 6.00.8988] [F:\PROGRA~1\SUPERR~1\MagicSet\shlobj71.ocx] [Sky Software (http://www.ssware.com), 7, 1, 0, 0] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\ztinetzt.dll] [N/A, ] [PID: 2216][C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpotradd.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpftra01.dll] [Hewlett-Packard, 1, 0, 0, 2]
啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:

啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:	发表于： 2007-06-22 12:34 \| 显示全部短消息资料字号：小中大 3楼 [C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll] [Hewlett-Packard Co., 53.0.20.000] [C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll] [Hewlett-Packard Co., 53.0.20.000] [C:\Program Files\HP\Digital Imaging\bin\hpodvd09.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpoddcomm09.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpodio08.dll] [Hewlett-Packard Co., 50.0.165.000] [C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [PID: 2516][C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqmfc09.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqtap08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.rsc] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqsti08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqcob08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqstv08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\HP\Digital Imaging\bin\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\HP\Digital Imaging\bin\hpqsem08.rsc] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpocxi08.dll] [Hewlett-Packard Co., 50.0.125.000] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [PID: 2740][C:\windows\System32\wuauclt.exe] [Microsoft Corporation, 5.4.3630.1106 (xpsp1.020828-1920)] [C:\windows\System32\windhcp.ocx] [N/A, ] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [PID: 3364][F:\反病毒软件\293_System Repair Engineer V2.3\242System Repair Engineer V2.4.12\SREng.EXE] [Smallfrogs Studio, 2.4.12.806] [C:\windows\System32\windhcp.ocx] [N/A, ] [C:\windows\System32\ztinetzt.dll] [N/A, ] [C:\windows\System32\zkftx.dll] [N/A, ] [C:\windows\System32\waxzd.dll] [N/A, ] [C:\windows\System32\wjhej.dll] [N/A, ] [C:\windows\System32\hmhfx.dll] [N/A, ] [C:\windows\System32\wjtrm.dll] [N/A, ] [C:\windows\System32\whfsl.dll] [N/A, ] [C:\windows\System32\TIMHost.dll] [N/A, ] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS Error. [] .JS Error. [] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK 入口点错误：CreateProcessA (危险等级: 一般, 被下面模块所HOOK: C:\windows\System32\TIMHost.dll) 入口点错误：CreateProcessW (危险等级: 一般, 被下面模块所HOOK: C:\windows\System32\TIMHost.dll) ================================== 隐藏进程 N/A ================================== [/CODE]
啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:

啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:	发表于： 2007-06-22 13:45 \| 显示全部短消息资料字号：小中大 4楼我按你说的做了。可是病毒好像还有
啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:

啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:	发表于： 2007-06-22 13:50 \| 显示全部短消息资料字号：小中大 5楼 [CODE] 2007-06-22,13:37:36 System Repair Engineer 2.4.12.806 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联 Winsock 提供者 Autorun.inf HOSTS 文件启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\windows\System32\ctfmon.exe> [N/A] <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Windows XP Publisher] <Super Rabbit IEPro><F:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD> [Super Rabbit Soft] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows XP Publisher] <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows XP Publisher] <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows XP Publisher] <SoundMan><soundman.exe> [Avance Logic, Inc.] <BigDogPath><C:\WINDOWS\VM_STI.EXE FAMETECH USB PC CAMERA> [N/A] <Super Rabbit SRRestore><F:\PROGRA~1\SUPERR~1\MagicSet\SRRest.exe /autosave> [Super Rabbit Soft] <HP Software Update><C:\Program Files\HP\HP Software Update\HPWuSchd2.exe> [Hewlett-Packard Co.] <RfwMain><"E:\CP\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.] <RavTask><"E:\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.] <RunShadowTip><C:\WINDOWS\System32\shadow\ShadowTip.exe> [PowerShadow] <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [(Verified)Microsoft Windows XP Publisher] <Userinit><c:\windows\system32\userinit.exe,> [(Verified)Microsoft Windows XP Publisher] <UIHost><logonui.exe> [(Verified)Microsoft Windows XP Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\System Safety Monitor] <WinlogonNotify: System Safety Monitor><SSMWinlogonEx.dll> [(Verified)System Safety Limited] ================================== 启动文件夹 [Adobe Gamma Loader] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><N> [HP Digital Imaging Monitor] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\HP Digital Imaging Monitor.lnk --> C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [Hewlett-Packard Co.]><N> [Microsoft Office] <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk --> D:\program\office2k\Office\OSA9.EXE [Microsoft Corporation]><N> [QQ游戏启动加速程序] <C:\Documents and Settings\DCB\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> E:\QQGame\Accel.exe [N/A]><N> ================================== 服务 [Application Layer Gateway Service / ALG][Stopped/Manual Start] <C:\windows\System32\alg.exe><N/A> [ASP.NET State Service / aspnet_state][Stopped/Manual Start] <C:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><> [Human Interface Device Access / HidServ][Stopped/Disabled] <C:\windows\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A> [Rising Proxy Service / RfwProxySrv][Stopped/Manual Start] <e:\cp\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal Firewall Service / RfwService][Running/Auto Start] <e:\cp\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.> [Rising Personal FireWall / Rising Personal FireWall][Stopped/Disabled] <><N/A> [Remote Packet Capture Protocol v.0 (experimental) / rpcapd][Stopped/Manual Start] <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><> [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"E:\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.> [Rising RealTime Monitor / RsRavMon][Running/Auto Start] <"E:\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.> ================================== 驱动程序 [ADProt / ADProt][Stopped/Boot Start] <\SystemRoot\system32\drivers\ADProt.sys><腾讯科技（深圳）有限公司> [Service for Avance AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] <system32\drivers\ALCXWDM.SYS><Avance Logic, Inc.> [Rising TDI Base Driver / BaseTDI][Running/Auto Start] <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.> [EagleNT / EagleNT][Stopped/Manual Start] <\??\C:\WINDOWS\System32\drivers\EagleNT.sys><N/A> [ExpScaner / ExpScaner][Running/Auto Start] <\??\E:\Rising\Rav\ExpScan.sys><> [HookCont / HookCont][Running/Auto Start] <\??\E:\Rising\Rav\HOOKCONT.sys><Rising> [HookReg / HookReg][Running/Auto Start] <\??\E:\Rising\Rav\HookReg.sys><> [HookSys / HookSys][Running/Auto Start] <\??\E:\Rising\Rav\HookSys.sys><Rising> [HookUrl / HookUrl][Running/Auto Start] <\??\E:\CP\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.> [jcum / jcumd][Running/Boot Start] <\SystemRoot\System32\DRIVERS\jcumd.sys><N/A> [kmsinput / kmsinput][Stopped/Manual Start] <\??\C:\WINDOWS\System32\drivers\kmsinput.sys><N/A> [mcnahook.sys / mcnahook.sys][Stopped/Auto Start] <\??\F:\反病毒软件\System Safety Monitor\mcnahook.sys><Max Computing> [MEMSCAN / MEMSCAN][Running/Auto Start] <\??\E:\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司> [mProcRs / mProcRs][Running/Auto Start] <\??\e:\cp\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.> [NetGroup Packet Filter Driver / NPF][Stopped/Manual Start] <system32\drivers\npf.sys><CACE Technologies> [npkcrypt / npkcrypt][Running/Auto Start] <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.> [nv / nv][Running/Manual Start] <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.> [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions> [QuakeDRV / QuakeDRV][Running/Boot Start] <\SystemRoot\System32\DRIVERS\quakedrv.sys><N/A> [RsFwDrv / RsFwDrv][Running/Auto Start] <\??\E:\CP\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\System32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.> [RSPPSYS / RSPPSYS][Running/Auto Start] <\??\E:\Rising\Rav\RSPPSYS.sys><Rising> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation> [System Safety Monitor 2.0 Core Engine / safemon][Running/Boot Start] <\SystemRoot\system32\drivers\safemon.sys><System Safety Limited> [Secdrv / Secdrv][Stopped/Manual Start] <System32\DRIVERS\secdrv.sys><N/A> [SKNFW / SKNFW][Running/System Start] <\??\C:\WINDOWS\System32\Drivers\SKNFW.sys><N/A> [SkyProcs / SkyProcs][Stopped/Manual Start] <\??\E:\Program Files\SkyNet\FireWall\SkyProcs.sys><N/A> [TYKeeper / TYKeeper][Stopped/Boot Start] <\SystemRoot\System32\drivers\TYKeeper.sys><N/A> [VCD VNC Virtual Network Adapter / vcddev][Running/Manual Start] <System32\DRIVERS\vcdvnic.sys><VNN B.J.> [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start] <System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation> [FAMETECH USB PC CAMERA / ZSMC301b][Stopped/Manual Start] <System32\Drivers\usbVM31b.sys><VM> ================================== 浏览器加载项 [超级兔子上网精灵] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <F:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology> [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD> [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.> [江民在线杀毒] {06926B30-424E-4f1c-8EE3-543CD96573DC} <http://online.jiangmin.com/online.asp, N/A> [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder Network\Thunder\Thunder.exe, > [浩方对战平台] {0A155D3C-68E2-4215-A47A-E800A446447A} <F:\浩方对战平台\GameClient.exe, > [QQ] {c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\qq\QQ.EXE, TENCENT> [BitCometBar] {3F1ABCDB-A875-46c1-8345-B72A4567E486} <E:\BitComet\BitCometBar\BitCometBar0.3.dll, > [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} <F:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll, Xiang Feng Technology> [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation> [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.> [CEditCtrl Object] {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\windows\System32\aliedit\AliEdit.dll, www.alipay.com> [MediaGatewayX] {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} <C:\WINDOWS\Downloaded Program Files\MediaGatewayX.dll, 180solutions> [WebActivater Control] {C661F36D-DF85-4EF4-83C7-E107B83D04B1} <C:\WINDOWS\System32\3DShowVM.ocx, QQ> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.> [PasswordEditCtrl Class] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <D:\珊汉瑚鱍QQ\qqedit\qqedit.dll, N/A> [KvScanOnline Control] {EF6205C1-3F17-4829-BCB5-1336ED89E356} <C:\WINDOWS\System32\KvDown.ocx, dreamersoft> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A> [Mail to a Friend...] <http://client.alexa.com/holiday/script/actions/mailto.htm, N/A> [上传到QQ网络硬盘] <E:\qq\AddToNetDisk.htm, N/A> [添加到QQ自定义面板] <E:\qq\AddPanel.htm, N/A> [添加到QQ表情] <E:\qq\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <E:\qq\SendMMS.htm, N/A>
啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:

啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:	发表于： 2007-06-22 13:51 \| 显示全部短消息资料字号：小中大 6楼正在运行的进程 [PID: 664][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 744][\??\C:\windows\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 768][\??\C:\windows\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [C:\windows\system32\SSMWinlogonEx.dll] [System Safety Limited, 2.4.0.615] [C:\windows\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\windows\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 2012][C:\windows\Explorer.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)] [C:\windows\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\windows\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9] [C:\windows\RichDll.dll] [N/A, ] [E:\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [C:\WINDOWS\System32\mscoree.dll] [Microsoft Corporation, 1.1.4322.2032] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Shfusion.dll] [Microsoft Corporation, 1.1.4322.573] [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4] [C:\windows\System32\Audiodev.dll] [Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act)] [PID: 632][e:\cp\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 72] [e:\cp\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33] [e:\cp\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5] [e:\cp\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11] [e:\cp\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2] [e:\cp\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5] [PID: 1292][C:\windows\soundman.exe] [Avance Logic, Inc., 5, 0, 0, 0] [PID: 1404][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4] [C:\windows\System32\msdmo.dll] [, ] [PID: 1440][C:\Program Files\HP\HP Software Update\HPWuSchd2.exe] [Hewlett-Packard Co., 53.0.13.000] [PID: 1552][C:\windows\System32\conime.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 272][F:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE] [Super Rabbit Soft, 7.85] [C:\windows\System32\MSVBVM60.DLL] [Microsoft Corporation, 6.00.9237] [C:\windows\System32\vb6chs.dll] [Microsoft Corporation, 6.00.8988] [F:\PROGRA~1\SUPERR~1\MagicSet\shlobj71.ocx] [Sky Software (http://www.ssware.com), 7, 1, 0, 0] [PID: 1284][C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpquio08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpotradd.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpftra01.dll] [Hewlett-Packard, 1, 0, 0, 2] [C:\Program Files\HP\Digital Imaging\bin\hpqrif08.dll] [Hewlett-Packard Co., 53.0.20.000] [C:\Program Files\HP\Digital Imaging\bin\hpqmif08.dll] [Hewlett-Packard Co., 53.0.20.000] [C:\Program Files\HP\Digital Imaging\bin\hpodvd09.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpoddcomm09.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpodio08.dll] [Hewlett-Packard Co., 50.0.165.000] [C:\Program Files\HP\Digital Imaging\bin\hpqusg.dll] [Hewlett-Packard Co., 53.0.13.000] [PID: 2180][C:\windows\System32\cmd.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 2192][C:\windows\system32\ntvdm.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 2212][C:\windows\System32\wuauclt.exe] [Microsoft Corporation, 5.4.3630.1106 (xpsp1.020828-1920)] [PID: 2232][C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqmfc09.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqtap08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.rsc] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqsti08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqcob08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpqstv08.dll] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\HP\Digital Imaging\bin\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\HP\Digital Imaging\bin\hpqsem08.rsc] [Hewlett-Packard Co., 53.0.13.000] [C:\Program Files\HP\Digital Imaging\bin\hpocxi08.dll] [Hewlett-Packard Co., 50.0.125.000] [PID: 3256][E:\qq\QQ.exe] [TENCENT, 0, 0, 0, 0] [E:\qq\QQBaseClassInDll.dll] [, 1, 0, 0, 1] [E:\qq\QQHelperDll.dll] [, 1, 0, 0, 1] [E:\qq\BasicCtrlDll.dll] [Tencent, 6, 0, 200, 320] [E:\qq\MFC42.DLL] [Microsoft Corporation, 6.00.8665.0] [E:\qq\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1] [E:\qq\RICHED20.dll] [Jiangmin Co Ltd, 10, 0, 0, 831] [E:\qq\riched20_.dll] [Microsoft Corporation, 5.31.23.1218] [E:\qq\QQAPI.dll] [, 1, 0, 0, 1] [E:\qq\LoginCtrl.dll] [, 1, 0, 0, 1] [E:\qq\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 6, 27, 1] [E:\qq\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1] [E:\qq\QQRes.dll] [tencent, 1, 0, 0, 1] [E:\qq\QQMainFrame.dll] [N/A, ] [E:\qq\CQQApplication.dll] [N/A, ] [E:\qq\NewSkin.dll] [, 1, 0, 0, 1] [E:\qq\HostingMgr.dll] [, 1, 0, 0, 1] [E:\qq\CameraDll.dll] [, 1, 0, 0, 1] [E:\qq\MailSummary.dll] [, 1, 0, 0, 1] [E:\qq\QQKnowledgeSearch.dll] [, 1, 0, 0, 1] [E:\qq\QQAllInOne.dll] [N/A, ] [E:\qq\GroupLive.dll] [N/A, ] [E:\qq\SCCore.dll] [TENCENT, 2, 0, 0, 1] [E:\qq\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)] [E:\qq\QQSpace.dll] [, 1, 0, 0, 1] [E:\qq\vbscript.dll] [Microsoft Corporation, 5.6.0.7426] [C:\windows\System32\msdmo.dll] [, ] [E:\qq\QQGroupMng.dll] [, 1, 0, 0, 1] [E:\qq\QQSysMsgMng.dll] [N/A, ] [E:\qq\UserDefinedHead.dll] [, 1, 0, 0, 1] [E:\qq\QQPlugin.dll] [N/A, ] [E:\qq\QQConfigPlugin.dll] [, 1, 0, 0, 1] [C:\windows\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\windows\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [E:\qq\QRingMng.dll] [N/A, ] [E:\qq\QQCustomFace.dll] [N/A, ] [E:\qq\LongConnection.dll] [tencent, 5, 0, 200, 160] [E:\qq\QQPet.dll] [, 1, 0, 0, 1] [E:\qq\QQAvatar.dll] [N/A, ] [E:\qq\FlashAvatarDll.dll] [, 1, 4, 0, 1] [C:\windows\System32\msadp32.acm] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [E:\qq\PhoneAPI.dll] [, 1, 0, 0, 1] [E:\qq\DialerAllinOne.dll] [tencent, 1, 4, 0, 0] [E:\qq\ImageOle.dll] [TODO: <Company name>, 1.0.0.1] [E:\qq\BQQApplication.dll] [N/A, ] [E:\qq\CommercesMng.dll] [, 1, 0, 0, 1] [E:\qq\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2] [E:\qq\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 271] [E:\qq\GroupConnection.dll] [Tencent, 0, 3, 3, 5] [C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [E:\qq\QQSceneMng.dll] [N/A, ] [PID: 3508][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)] [F:\PROGRA~1\SUPERR~1\MagicSet\haokanbar.dll] [Xiang Feng Technology, 2, 2, 0, 1612] [c:\program files\google\googletoolbar2.dll] [Google Inc., 4, 0, 1601, 4978] [C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4] [C:\windows\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [C:\windows\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0] [PID: 3572][C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe] [Google Inc., 1, 2, 1128, 5462] [C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\res_zh-CN.dll] [Google Inc., 1, 2, 1128, 5462] [C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\swg.dll] [Google Inc., 1, 2, 1128, 5462] [PID: 2948][F:\反病毒软件\293_System Repair Engineer V2.3\242System Repair Engineer V2.4.12\SREng.EXE] [Smallfrogs Studio, 2.4.12.806] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS Error. [] .JS Error. [] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]
啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:

啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:	发表于： 2007-06-22 17:46 \| 显示全部短消息资料字号：小中大 7楼高手看下啊
啊a啊我飘泊而立狮帖子:636 注册: 2006-07-22 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT