帮忙看看中毒了吗 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛帮忙看看中毒了吗

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

帮忙看看中毒了吗

jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	发表于： 2007-07-20 09:35 \| 显示全部短消息资料字号：小中大 1楼帮忙看看中毒了吗以下是我扫描的日志 2007-07-20 10:13:41
jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	分享到：

jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	发表于： 2007-07-20 09:36 \| 显示全部短消息资料字号：小中大 2楼瑞星卡卡电脑诊断日志 v1.30 (2007-7-20 9:15:15) 北京瑞星科技股份有限公司注释:[A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services Ip6FwHlp [A ] 1. c:\windows\system32\ip6fwhlp.dll Microsoft Corporation Microsoft IPv6 Firewall Helper Components .text,.data,.rsrc,.reloc, LightScribeService [AM] 2. c:\program files\common files\lightscribe\lssrvc.exe Hewlett-Packard Company .text,.rdata,.data,.rsrc, NVSvc [AM] 3. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 66.93 .text,.rdata,.data,.rsrc, ose [A ] 4. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, PsShutdownSvc [A ] 5. c:\windows\system32\pssdnsvc.exe .text,.rdata,.data,.rsrc, RfwProxySrv [A ] 6. g:\rising\rfw\rfwproxy.exe Beijing Rising Technology Co., Ltd. Rising Personal Proxy Service .text,.rdata,.data,.rsrc, RfwService [A ] 7. g:\rising\rfw\rfwsrv.exe Beijing Rising Technology Co., Ltd. Rising Personal FireWall Service .text,.rdata,.data,.rsrc, RsCCenter [A ] 8. g:\rising\rav\ccenter.exe Beijing Rising Technology Co., Ltd. CCenter .text,.rdata,.data,.rsrc, RsRavMon [A ] 9. g:\rising\rav\ravmond.exe Beijing Rising Technology Co., Ltd. RavMond .text,.rdata,.data,.rsrc, WmdmPmSN [A ] 10. c:\windows\system32\mspmsnsv.dll Microsoft Corporation Microsoft Media Device Service Provider .text,.data,.rsrc,.reloc,
jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:

jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	发表于： 2007-07-20 09:36 \| 显示全部短消息资料字号：小中大 3楼 + 内核驱动 + HKLM\System\CurrentControlSet\Services ALCXWDM [A ] 11. c:\windows\system32\drivers\alcxwdm.sys Realtek Semiconductor Corp. Realtek AC'97 Audio Driver (WDM) .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, AmdK8 [A ] 12. c:\windows\system32\drivers\amdk8.sys Microsoft Corporation Processor Device Driver .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc, BaseTDI [A ] 13. c:\windows\system32\drivers\basetdi.sys Beijing Rising Technology Co., Ltd. basetdi .text,.rdata,.data,INIT,.rsrc,.reloc, ExpScaner [A ] 14. g:\rising\rav\expscan.sys ExpScan.sys .text,.rdata,.data,INIT,.rsrc,.reloc, HookCont [A ] 15. g:\rising\rav\hookcont.sys Rising HookCont .text,.rdata,.data,INIT,.rsrc,.reloc, HookReg [A ] 16. g:\rising\rav\hookreg.sys .text,.rdata,.data,INIT,.rsrc,.reloc, HookSys [A ] 17. g:\rising\rav\hooksys.sys Rising Hooksys .text,.rdata,.data,INIT,.rsrc,.reloc, HookUrl [A ] 18. g:\rising\rfw\hookurl.sys Beijing Rising Technology Co., Ltd. HookUrl .text,.rdata,.data,INIT,.rsrc,.reloc, Ip6Fw [A ] 19. c:\windows\system32\drivers\ip6fw.sys Microsoft Corporation IPv6 Internet Connection Firewall .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, MEMSCAN [A ] 20. g:\rising\rav\memscan.sys 瑞星软件有限公司 MemScan Driver .text,.rdata,.data,INIT,.rsrc,.reloc, mProcRs [A ] 21. g:\rising\rfw\mprocrs.sys Beijing Rising Technology Co., Ltd. Rising Personal FireWall mprocrs.sys .text,.rdata,.data,INIT,.rsrc,.reloc, npkcrypt [A ] 22. f:\qq\npkcrypt.sys INCA Internet Co., Ltd. nProtect KeyCrypt Driver .text,.rdata,.data,INIT,.rsrc,.reloc, npkcusb [A ] 23. f:\qq\npkcusb.sys INCA Internet Co., Ltd. nProtect KeyCrypt Driver .text,page,init,.rdata,.data,INIT,.rsrc,.reloc, nvatabus [A ] 24. c:\windows\system32\drivers\nvatabus.sys NVIDIA Corporation NVIDIA? nForce(TM) IDE Performance Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, RsAntiSpyware [A ] 25. c:\windows\system32\drivers\rsboot.sys Beijing Rising Technology Co., Ltd. Anti-RootKit Driver .text,.rdata,.data,INIT,.rsrc,.reloc, RsFwDrv [A ] 26. g:\rising\rfw\rsfwdrv.sys Beijing Rising Technology Co., Ltd. nt_fwdrv .text,.rdata,.data,INIT,.rsrc,.reloc, RsNTGDI [A ] 27. c:\windows\system32\drivers\rsntgdi.sys Beijing Rising Technology Co., Ltd. RsNTGDI .text,.rdata,INIT,.rsrc,.reloc, RSPPSYS [A ] 28. g:\rising\rav\rsppsys.sys Rising RSPPSYS.SYS .text,.rdata,.data,INIT,.rsrc,.reloc, Secdrv [A ] 29. c:\windows\system32\drivers\secdrv.sys .text,.data,INIT,.reloc, st3wolf [A ] 30. c:\windows\system32\drivers\st3wolf.sys SCSI miniport .text,.rdata,.data,INIT,.rsrc,.reloc, stwlfbus [A ] 31. c:\windows\system32\drivers\stwlfbus.sys PnP BIOS Extension .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, usbehci [A ] 32. c:\windows\system32\drivers\usbehci.sys Microsoft Corporation EHCI eUSB Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, yukonwxp [A ] 33. c:\windows\system32\drivers\yk51x86.sys Marvell NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller .text,.rdata,.data,INIT,.rsrc,.reloc,
jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:

jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	发表于： 2007-07-20 09:37 \| 显示全部短消息资料字号：小中大 4楼 + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} [A ] 34. c:\windows\system32\kakatool.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware Toolbar .text,.rdata,.data,MonitorS,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {01443AEC-0FD1-40fd-9C87-E93D1494C233} [A ] 35. d:\迅雷\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, {889D2FEB-5411-4565-8998-1DD2C5261283} [A ] 36. d:\迅雷\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 37. d:\迅雷\thunder.exe Thunder Networking Technologies,LTD .text,.rdata,.data,.rsrc, Exec [A ] 38. c:\program files\flashget\flashget.exe Amaze Soft FlashGet .text,.rdata,.data,.rsrc, Exec [A ] 39. c:\program files\messenger\msmsgs.exe Microsoft Corporation Messenger .text,.data,.rsrc, Script [A ] 40. c:\windows\web\related.htm + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [A ] 41. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler mso-offdap [A ] 42. c:\program files\common files\microsoft shared\web components\10\owc10.dll Microsoft Corporation Microsoft Office XP Web Components .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc, mso-offdap11 [A ] 43. c:\program files\common files\microsoft shared\web components\11\owc11.dll Microsoft Corporation Microsoft Office Web Components 2003 .text,.data,.rtext,Shared,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 44. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, Auto Update Property Sheet Extension [A ] 45. c:\windows\system32\wuaucpl.cpl Microsoft Corporation Automatic Updates Control Panel .text,.data,.rsrc,.reloc, WinRAR shell extension [AM] 46. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, NvCpl DesktopContext Class [AM] 47. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.rdata,.data,.rsrc,.reloc, Play on my TV helper [AM] 47. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.rdata,.data,.rsrc,.reloc, Web Folders [A ] 48. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, Microsoft Office Outlook Desktop Icon Handler [A ] 49. c:\program files\microsoft office\office11\mlshext.dll Microsoft Corporation Microsoft Shell Extension Library .text,.data,.rsrc,.reloc, Microsoft Office Outlook Custom Icon Handler [A ] 50. c:\program files\microsoft office\office11\olkfstub.dll Microsoft Corporation Outlook Shell Hook for Start/Find .text,.data,.rsrc,.reloc, Microsoft Office HTML Icon Handler [A ] 51. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Shell Extensions for RealOne Player [A ] 52. e:\program files\rpshell.dll RealNetworks, Inc. RealPlayer Shell Extensions .text,.rdata,.data,.rsrc,.reloc, RISING [AM] 53. c:\windows\system32\ravext.dll Beijing Rising Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, Desktop Explorer [AM] 54. c:\windows\system32\nvshell.dll NVIDIA Corporation NVIDIA Desktop Explorer, Version 66.93 .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, Desktop Explorer Menu [AM] 54. c:\windows\system32\nvshell.dll NVIDIA Corporation NVIDIA Desktop Explorer, Version 66.93 .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, nView Desktop Context Menu [AM] 54. c:\windows\system32\nvshell.dll NVIDIA Corporation NVIDIA Desktop Explorer, Version 66.93 .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {32CD708B-60A7-4C00-9377-D73EAA495F0F} [AM] 53. c:\windows\system32\ravext.dll Beijing Rising Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc,
jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:

jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	发表于： 2007-07-20 09:37 \| 显示全部短消息资料字号：小中大 5楼 + 用户登陆自运行项目 + HKLM\Software\Microsoft\Windows\CurrentVersion\Run DAEMON Tools-1033 [AM] 55. c:\program files\d-tools\daemon.exe DAEMON'S HOME Virtual DAEMON Manager .text,.rdata,.data,.rsrc, nwiz [A ] 56. c:\windows\system32\nwiz.exe NVIDIA Corporation NVIDIA nView Wizard, Version 66.93 .text,.rdata,.data,.rsrc, SoundMan [AM] 57. c:\windows\soundman.exe Realtek Semiconductor Corp. Realtek Sound Manager .text,.rdata,.data,.sxdata,.rsrc, IMSCMig [A ] 58. c:\program files\common files\microsoft shared\ime\imsc40a\imscmig.exe Microsoft Corporation 微软拼音输入法安装工具 .text,.data,.rsrc, TkBellExe [AM] 59. c:\program files\common files\real\update_ob\realsched.exe RealNetworks, Inc. RealNetworks Scheduler .text,.rdata,.data,.rsrc, runeip [AM] 60. c:\program files\rising\antispyware\runiep.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware Monitor .text,.rdata,.data,.rsrc, RavTask [A ] 61. g:\rising\rav\ravtask.exe Beijing Rising Technology Co., Ltd. RavTimer .text,.rdata,.data,.rsrc, RfwMain [A ] 62. g:\rising\rfw\rfwmain.exe Beijing Rising Technology Co., Ltd. Rising Personal FireWall Main Program .text,.rdata,.data,.rsrc, NeroFilterCheck [A ] 63. c:\windows\system32\nerocheck.exe Ahead Software Gmbh NeroCheck .text,.rdata,.data,.rsrc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce KKDelay [A ] 64. c:\program files\rising\antispyware\runonce.exe Beijing Rising Technology Co., Ltd. RunOnce Application .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 65. c:\windows\system32\bsmain.exe Beijing Rising Technology Co., Ltd. BootScan .text,.data,.rsrc,.reloc, [A ] 66. c:\windows\system32\kknative.exe Beijing Rising Technology Co., Ltd. NativeAp .text,.data,.rsrc,.reloc, + 映像劫持 + HKCR\.bat batfile\edit\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, batfile\print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + HKCR\.html htmlfile\Edit\Command [A ] 68. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc, htmlfile\Print\Command [A ] 68. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 68. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc, htmlfile\Print\Command [A ] 68. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc, + HKCR\.log txtfile\print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, txtfile\printto\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + HKCR\.txt txtfile\print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, txtfile\printto\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + HKCR\.cmd cmdfile\edit\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, cmdfile\print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + HKCR\.reg regfile\edit\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, regfile\print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + HKCR\.vbs VBSFile\Edit\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, VBSFile\Print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + HKCR\.js JSFile\Edit\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, JSFile\Print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + HKCR\.mp3 RealPlayer.MP3.6\open\Command [A ] 69. e:\program files\realplay.exe RealNetworks, Inc. RealPlayer .text,.rdata,.data,.rsrc, + HKCR\.ini inifile\open\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, inifile\print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + HKCR\.inf inffile\open\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, inffile\print\Command [A ] 67. c:\windows\system32\notepad.exe UPX0,UPX1,.rsrc, + 打印机监控 + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors Microsoft Document Imaging Writer Monitor [AM] 70. c:\windows\system32\mdimon.dll Microsoft Corporation Microsoft? Document Imaging .text,.data,.rsrc,.reloc,
jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:

jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	发表于： 2007-07-20 09:38 \| 显示全部短消息资料字号：小中大 6楼 + 其他自启动项目 + C:\Documents and Settings\All Users\「开始」菜单\程序\启动 Adobe Reader Speed Launch.lnk [A ] 71. c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe Adobe Systems Incorporated Adobe Acrobat SpeedLauncher .text,.rdata,.data,.rsrc, + 正在运行的进程 + 000000bc(188) alg.exe + 000000d4(212) LSSrvc.exe 00400000[00012000] [AM] 2. c:\program files\common files\lightscribe\lssrvc.exe Hewlett-Packard Company .text,.rdata,.data,.rsrc, 7C340000[00056000] [ M] 72. c:\program files\common files\lightscribe\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 73. c:\program files\common files\lightscribe\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, + 00000124(292) nvsvc32.exe 00400000[00021000] [AM] 3. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 66.93 .text,.rdata,.data,.rsrc, 00D50000[00032000] [ M] 74. c:\windows\system32\nvrszhc.dll NVIDIA Corporation NVIDIA Simplified Chinese language resource library .rsrc,.reloc, + 00000254(596) smss.exe + 000002a4(676) csrss.exe + 000002bc(700) winlogon.exe 72C90000[00009000] [ M] 75. c:\windows\system32\wdmaud.drv Microsoft Corporation WDM Audio driver mapper .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 76. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 000002e8(744) services.exe + 000002f4(756) lsass.exe + 000003a4(932) svchost.exe + 00000418(1048) svchost.exe 50E60000[0000C000] [ M] 77. c:\windows\system32\wups2.dll Microsoft Corporation Windows Update client proxy stub 2 .text,.orpc,.data,.rsrc,.reloc, + 000004ac(1196) RavStub.exe 00400000[00018000] [ M] 78. g:\rising\rav\ravstub.exe Beijing Rising Technology Co., Ltd. Rising RavStub .text,.rdata,.data,.rsrc, 10000000[0001B000] [ M] 79. g:\rising\rav\rscommx.dll rising RsCommX .text,.rdata,.data,.rsrc,.reloc, 23700000[0001A000] [ M] 80. g:\rising\rav\rscommon.dll Beijing Rising Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000004d8(1240) svchost.exe + 0000051c(1308) svchost.exe + 00000594(1428) Explorer.EXE 10000000[0001B000] [AM] 53. c:\windows\system32\ravext.dll Beijing Rising Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, 01350000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 019C0000[00475000] [AM] 47. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.rdata,.data,.rsrc,.reloc, 01E40000[00032000] [ M] 74. c:\windows\system32\nvrszhc.dll NVIDIA Corporation NVIDIA Simplified Chinese language resource library .rsrc,.reloc, 01EC0000[00072000] [AM] 54. c:\windows\system32\nvshell.dll NVIDIA Corporation NVIDIA Desktop Explorer, Version 66.93 .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, 72C90000[00009000] [ M] 75. c:\windows\system32\wdmaud.drv Microsoft Corporation WDM Audio driver mapper .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 76. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 01580000[00029000] [AM] 46. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, 23700000[0001A000] [ M] 80. g:\rising\rav\rscommon.dll Beijing Rising Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000640(1600) daemon.exe 00400000[00016000] [AM] 55. c:\program files\d-tools\daemon.exe DAEMON'S HOME Virtual DAEMON Manager .text,.rdata,.data,.rsrc, 10000000[00020000] [ M] 82. c:\windows\daemon.dll Virtual DAEMON control library UPX0,UPX1,.rsrc, 00D20000[0002D000] [ M] 83. c:\program files\d-tools\pfctoc.dll Padus(R), Inc. CD/DVD pre-mastering toolkit for Win32 .text,.rdata,.data,.rsrc,.reloc, 00FA0000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000658(1624) RUNDLL32.EXE 10000000[00017000] [ M] 84. c:\windows\system32\nvmctray.dll NVIDIA Corporation NVIDIA Media Center Library .text,.rdata,.data,.shared,.rsrc,.reloc, 00A30000[00032000] [ M] 74. c:\windows\system32\nvrszhc.dll NVIDIA Corporation NVIDIA Simplified Chinese language resource library .rsrc,.reloc, 009F0000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000660(1632) SOUNDMAN.EXE 00400000[00015000] [AM] 57. c:\windows\soundman.exe Realtek Semiconductor Corp. Realtek Sound Manager .text,.rdata,.data,.sxdata,.rsrc, 10000000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000678(1656) realsched.exe 00400000[0002F000] [AM] 59. c:\program files\common files\real\update_ob\realsched.exe RealNetworks, Inc. RealNetworks Scheduler .text,.rdata,.data,.rsrc, 10000000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000688(1672) runiep.exe 00400000[00012000] [AM] 60. c:\program files\rising\antispyware\runiep.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware Monitor .text,.rdata,.data,.rsrc, 00C20000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000006bc(1724) ctfmon.exe 10000000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000790(1936) spoolsv.exe 008C0000[00008000] [AM] 70. c:\windows\system32\mdimon.dll Microsoft Corporation Microsoft? Document Imaging .text,.data,.rsrc,.reloc, 008D0000[00008000] [ M] 85. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll Microsoft Corporation Microsoft? Document Imaging .text,.data,.rsrc,.reloc, + 000009e0(2528) Ras.exe 00400000[0013F000] [ M] 86. c:\program files\rising\antispyware\ras.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[000A3000] [ M] 87. c:\program files\rising\antispyware\rasgui.dll Beijing Rising Technology Co., Ltd. RasGUI .text,.rdata,.data,.rsrc,.reloc, 01530000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 01810000[0002F000] [ M] 88. c:\program files\rising\antispyware\engine.dll Beijing Rising Technology Co., Ltd. kaka engine .text,.rdata,.data,.rsrc,.reloc, 02160000[00012000] [ M] 89. c:\program files\rising\antispyware\zip.dll rising zip UPX0,UPX1,.rsrc, + 00000b64(2916) wuauclt.exe 507E0000[00051000] [ M] 90. c:\windows\system32\wucltui.dll Microsoft Corporation Windows Update Client UI Plugin .text,.data,.rsrc,.reloc, 50E60000[0000C000] [ M] 77. c:\windows\system32\wups2.dll Microsoft Corporation Windows Update client proxy stub 2 .text,.orpc,.data,.rsrc,.reloc, 10000000[00005000] [ M] 91. c:\windows\system32\wucltui.dll.mui Microsoft Corporation Windows Update Client UI Plugin .rsrc,.reloc, 00CF0000[0001B000] [ M] 81. c:\program files\rising\antispyware\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc,
jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:

jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	发表于： 2007-07-20 10:07 \| 显示全部短消息资料字号：小中大 7楼 Trojan.DL.JS.Agent.lia还有Trojan.DL.VBS.Agent.xgk
jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:

jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:	发表于： 2007-07-20 10:24 \| 显示全部短消息资料字号：小中大 8楼好像是网通的局域网
jjdu3 初生襁褓狮帖子:271 注册: 2006-10-04 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT