设为首页收藏本站
开启辅助访问

 找回密码
 立即注册

QQ登录

只需一步，快速开始

赛盟中国KZ玩家社区»社区 › 交流与分享 › 计算机技术 › help/?|| - -
返回列表 发新帖
查看: 1092|回复: 6

help/?|| - -

[复制链接]
v.c|bin

该用户从未签到
发表于 2008-2-23 09:28:48 | 显示全部楼层 |阅读模式

  2. 2008-02-23,09:27:51
  3. System Repair Engineer 2.5.16.900
  4. Smallfrogs (http://www.KZTechs.com)
  5. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
  6. 以下内容被选中：
  7.     所有的启动项目（包括注册表、启动文件夹、服务等）
  8.     浏览器加载项
  9.     正在运行的进程（包括进程模块信息）
  10.     文件关联
  11.     Winsock 提供者
  12.     Autorun.inf
  13.     HOSTS 文件
  14.     进程特权扫描

  16. 启动项目
  17. 注册表
  18. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  19.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  20. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  21.     <FlashPlayerUpdate><C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe>  [(Verified)Adobe Systems Incorporated]
  22. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  23.     <AntiARPStandalone><C:\Program Files\AntiARP Stand-alone Edition\AntiArp.exe>  []
  24.     <switch><c:\windows\system32\壁纸自动换.exe>  []
  25.     <YuanZhiStudent><C:\Program Files\YuanZhi\Multimedia Education Network\Student.exe RunServices>  [N/A]
  26.     <runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup>  [Beijing Rising Technology Co., Ltd.]
  27.     <360Safetray><D:\D盘内容（软件）\⑤杀毒软件\360安全卫士\safemon\360tray.exe /start>  [奇虎网]
  28.     <360Antiarp><d:\d盘内容（软件）\⑤杀毒软件\360安全卫士\antiarp\AntiArp.exe /start>  [奇虎网]
  29. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
  30.     <wiasoisao><wiasoisao.exe>  []
  31. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  32.     <shell><Explorer.exe>  []
  33.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  34. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  35.     <AppInit_DLLs><>  [N/A]
  36. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  37.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
  38. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  39.     <{696ccf2b-badc-48ed-b6a6-4c74639663ba}><C:\WINDOWS\system32\CBBCBB1030.dll>  []
  40.     <{4f79092a-66ba-4317-b2c7-f839909661f0}><C:\WINDOWS\system32\KABKAB1032.dll>  []
  41.     <{9eb02d98-1c8f-45f5-93af-f66fa9174db0}><C:\WINDOWS\system32\BAABAA1028.dll>  []
  42.     <{6167F471-EF2B-41DD-A5E5-C26ACDB5C096}><C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys>  []
  43.     <{cd51bd9c-6264-4df0-96bf-8603019818e5}><C:\WINDOWS\system32\HACHAC1035.dll>  []
  44.     <{8C41B7F7-3168-400D-A702-0E7EFE0BA304}><C:\WINDOWS\system32\sgrefg.dll>  []
  45.     <{5aca2e15-0790-4170-812a-890df2fb6144}><C:\WINDOWS\system32\QABQAB1013.dll>  []
  46.     <{4FA10261-B890-F432-A453-69F1023513F4}><C:\WINDOWS\Fonts\gjcsdyc.dll>  []
  47. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  48.     <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Publisher]
  49. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\DfLogon]
  50.     <WinlogonNotify: DfLogon><LogonDll.dll>  []
  51. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
  52.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
  53. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  54.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
  55. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  56.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
  57. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  58.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
  59. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  60.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
  61. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  62.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
  63. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  64.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
  65. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  66.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
  67. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  68.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
  69.     <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [N/A]
  70.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
  71. ==================================
  72. 启动文件夹
  73. N/A
  74. ==================================
  75. 服务
  76. [DF5Serv / DF5Serv][Running/Auto Start]
  77.   <C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe><Faronics Corporation>
  78. [Human Interface Device Access / HidServ][Stopped/Disabled]
  79.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  80. [Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start]
  81.   <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><>
  82. ==================================
  83. 驱动程序
  84. [360AntiArp / 360AntiArp][Running/System Start]
  85.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><奇虎网>
  86. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start]
  87.   <system32\drivers\ac97intc.sys><Intel Corporation>
  88. [AliIde / AliIde][Running/Boot Start]
  89.   <\SystemRoot\System32\DRIVERS\aliide.sys><Acer Laboratories Inc.>
  90. [AMD K8 Processor Driver / AmdK8][Stopped/Manual Start]
  91.   <System32\DRIVERS\amdk8.sys><Advanced Micro Devices>
  92. [AntiARP NDIS Protocol Driver / AntiArpNdisProt][Running/Auto Start]
  93.   <system32\DRIVERS\AntiArpNdisProt.sys><Windows (R) 2000 DDK provider>
  94. [CmdIde / CmdIde][Running/Boot Start]
  95.   <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
  96. [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
  97.   <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
  98. [VIA Rhine Family Fast Ethernet Adapter Driver Service / FETNDISB][Running/Manual Start]
  99.   <system32\DRIVERS\fetnd5b.sys><VIA Technologies, Inc.>
  100. [npkcrypt / npkcrypt][Stopped/Auto Start]
  101.   <\??\C:\Program Files\QQ2006\npkcrypt.sys><N/A>
  102. [nv / nv][Stopped/Manual Start]
  103.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
  104. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  105.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  106. [RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  107.   <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.>
  108. [Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Stopped/Manual Start]
  109.   <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation>
  110. [S3SavageNB / S3SavageNB][Running/Manual Start]
  111.   <system32\DRIVERS\s3gnbm.sys><S3 Graphics, Inc.>
  112. [Secdrv / Secdrv][Stopped/Manual Start]
  113.   <system32\DRIVERS\secdrv.sys><N/A>
  114. [VIA AGP Filter / viaagp1][Running/Boot Start]
  115.   <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
  116. [ViaIde / ViaIde][Running/Boot Start]
  117.   <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
  118. [Vinyl AC'97 Audio Controller (WDM) / VIAudio][Stopped/Manual Start]
  119.   <system32\drivers\vinyl97.sys><VIA Technologies, Inc.>
  120. [xAntiArpSpoof Service / xAntiArp][Running/Manual Start]
  121.   <system32\DRIVERS\xAntiArp.sys><Windows (R) 2000 DDK provider>
  122. [fpids32 / fpids32][Running/Auto Start]
  123.   <\??\C:\WINDOWS\system32\drivers\msosfpids32.sys><N/A>
  124. [msertk / msertk][Running/Auto Start]
  125.   <system32\drivers\msyecp.sys><N/A>
  126. [pop / pop][Running/Manual Start]
  127.   <\??\C:\WINDOWS\system32\DRIVERS\pop.sys><N/A>
  128. ==================================
  129. 浏览器加载项
  130. [ThunderAtOnce Class]
  131.   {01443AEC-0FD1-40fd-9C87-E93D1494C233} <c:\program files\thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
  132. []
  133.   {6167F471-EF2B-41DD-A5E5-C26ACDB5C096} <C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys, N/A>
  134. [Thunder Browser Helper]
  135.   {B69F34DC-F0F9-42DC-9EDD-957187DA688D} <c:\program files\thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
  136. [SafeMon Class]
  137.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <d:\D盘内~1\⑤杀毒~1\360安~1\safemon\safemon.dll, 奇虎网>
  138. [ThunderAtOnce Class]
  139.   {01443AEC-0FD1-40FD-9C87-E93D1494C233} <c:\program files\thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
  140. [Thunder Agent Class]
  141.   {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <c:\program files\thunder\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD>
  142. []
  143.   {6167F471-EF2B-41DD-A5E5-C26ACDB5C096} <C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys, N/A>
  144. [360SafeLive]
  145.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <D:\D盘内容（软件）\⑤杀毒软件\360安全卫士\live.dll, 360safe.com>
  146. [Microsoft Web 浏览器]
  147.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
  148. [SearchAssistantOC]
  149.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
  150. [Thunder Browser Helper]
  151.   {B69F34DC-F0F9-42DC-9EDD-957187DA688D} <c:\program files\thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
  152. [SafeMon Class]
  153.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <d:\D盘内~1\⑤杀毒~1\360安~1\safemon\safemon.dll, 奇虎网>
  154. [RDS.DataSpace]
  155.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
  156. [Shockwave Flash Object]
  157.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
  158. [使用迅雷下载]
  159.   <c:\program files\thunder\Program\geturl.htm, N/A>
  160. [使用迅雷下载全部链接]
  161.   <c:\program files\thunder\Program\getallurl.htm, N/A>
  162. [导出到 Microsoft Office Excel(&X)]
  163.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
  164. [添加到QQ表情]
  165.   <d:\Program Files\QQ2007\AddEmotion.htm, N/A>
  166. ==================================
  167. 正在运行的进程
  168. [PID: 1644 / Administrator][C:\WINDOWS\Explorer.EXE]  [N/A, ]
  169.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  170.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  171.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  172.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  173.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  174.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  175.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  176.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  177.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  178.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  179.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  180.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  181.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  182. [PID: 1796 / Administrator][C:\WINDOWS\system32\dllcache\explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  183.     [C:\WINDOWS\system32\dllcache\BROWSEUI.dll]  [Microsoft Corporation, 6.00.2900.3231 (xpsp_sp2_gdr.071010-1320)]
  184.     [C:\WINDOWS\system32\dllcache\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  185.     [C:\WINDOWS\system32\dllcache\ShimEng.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  186.     [C:\WINDOWS\system32\dllcache\WINMM.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  187.     [C:\WINDOWS\system32\dllcache\MSACM32.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  188.     [C:\WINDOWS\system32\dllcache\LPK.DLL]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  189.     [C:\WINDOWS\system32\dllcache\USP10.dll]  [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  190.     [C:\WINDOWS\system32\dllcache\CLBCATQ.DLL]  [Microsoft Corporation, 2001.12.4414.308]
  191.     [C:\WINDOWS\system32\dllcache\COMRes.dll]  [Microsoft Corporation, 2001.12.4414.258]
  192.     [C:\WINDOWS\system32\dllcache\LINKINFO.dll]  [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)]
  193.     [C:\WINDOWS\system32\dllcache\ntshrui.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  194.     [C:\WINDOWS\system32\dllcache\ATL.DLL]  [Microsoft Corporation, 3.05.2284]
  195.     [C:\WINDOWS\system32\dllcache\msi.dll]  [Microsoft Corporation, 3.1.4000.4039]
  196.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  197.     [C:\WINDOWS\system32\dllcache\WINSTA.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  198.     [C:\WINDOWS\system32\WPDShServiceObj.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  199.     [C:\WINDOWS\system32\PortableDeviceTypes.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  200.     [C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  201.     [C:\WINDOWS\system32\dllcache\rsaenh.dll]  [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629)]
  202.     [C:\WINDOWS\system32\dllcache\SXS.DLL]  [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)]
  203.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  204.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  205.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  206.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  207.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  208.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  209.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  210.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  211.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  212.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  213.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  214.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  215.     [C:\WINDOWS\system32\CBBCBB1030.dll]  [N/A, ]
  216.     [C:\WINDOWS\system32\KABKAB1032.dll]  [N/A, ]
  217.     [C:\WINDOWS\system32\BAABAA1028.dll]  [N/A, ]
  218.     [C:\WINDOWS\system32\HACHAC1035.dll]  [N/A, ]
  219.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  220.     [C:\WINDOWS\system32\QABQAB1013.dll]  [N/A, ]
  221.     [C:\WINDOWS\system32\dllcache\RASAPI32.DLL]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  222.     [C:\WINDOWS\system32\dllcache\rasman.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  223.     [C:\WINDOWS\system32\dllcache\TAPI32.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  224.     [C:\WINDOWS\system32\dllcache\sensapi.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  225.     [C:\WINDOWS\system32\dllcache\DNSAPI.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]
  226.     [C:\WINDOWS\system32\dllcache\rasadhlp.dll]  [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020)]
  227.     [C:\WINDOWS\system32\dllcache\hnetcfg.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  228.     [C:\WINDOWS\system32\dllcache\browselc.dll]  [Microsoft Corporation, 6.00.2600.0000]
  229.     [C:\WINDOWS\system32\dllcache\DUSER.dll]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  230. [PID: 1880 / Administrator][C:\Program Files\AntiARP Stand-alone Edition\AntiArp.exe]  [N/A, ]
  231.     [C:\Program Files\AntiARP Stand-alone Edition\xantiarp.dll]  [N/A, ]
  232.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  233.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  234.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  235.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  236.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  237.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  238.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  239.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  240.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  241.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  242.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  243.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  244.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  245.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  246. [PID: 1900 / Administrator][C:\Program Files\YuanZhi\Multimedia Education Network\Student.exe]  [TopDomain Technologies Co., LTD., 1.00.1.282]
  247.     [C:\Program Files\YuanZhi\Multimedia Education Network\TDMaster.dll]  [TopDomain Technologies Co., LTD., 1.00.1.282]
  248.     [C:\Program Files\YuanZhi\Multimedia Education Network\Language\0804\StudentRes.dll]  [TopDomain Technologies Co., LTD., 1.00.1.282]
  249.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  250.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  251.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  252.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  253.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  254.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  255.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  256.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  257.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  258.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  259.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  260.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  261.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  262. [PID: 1916 / Administrator][C:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 4.0.0.18]
  263.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  264.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  265.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  266.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  267.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  268.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  269.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  270.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  271.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  272.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  273.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  274.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  275.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  276.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  277. [PID: 1944 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  278.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  279.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  280.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  281.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  282.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  283.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  284.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  285.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  286.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  287.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  288.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  289.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  290.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  291. [PID: 1592 / Administrator][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  292.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  293.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
  294.     [C:\Program Files\Real\RealPlayer\rpplugins\ierpplug.dll]  [RealNetworks, Inc., 1.0.1.2254]
  295.     [C:\WINDOWS\system32\PNCRT.dll]  [Real Networks, Inc, 6.0.0.0]
  296.     [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
  297.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  298.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  299.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  300.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  301.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  302.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  303.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  304.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  305.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  306.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  307.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  308.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  309.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  310.     [C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
  311.     [C:\WINDOWS\system32\CBBCBB1030.dll]  [N/A, ]
  312.     [C:\WINDOWS\system32\KABKAB1032.dll]  [N/A, ]
  313.     [C:\WINDOWS\system32\BAABAA1028.dll]  [N/A, ]
  314.     [C:\WINDOWS\system32\HACHAC1035.dll]  [N/A, ]
  315.     [C:\WINDOWS\system32\QABQAB1013.dll]  [N/A, ]
  316.     [C:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 3, 20]
  317. [PID: 1608 / Administrator][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  318.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  319.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  320.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  321.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  322.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  323.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  324.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  325.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  326.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  327.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  328.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  329.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  330.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  331. [PID: 2276 / Administrator][d:\d盘内容（软件）\⑤杀毒软件\360安全卫士\antiarp\AntiArp.exe]  [奇虎网, 1, 0, 1, 1003]
  332.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  333.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  334.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  335.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  336.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  337.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  338.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  339.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  340.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  341.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  342.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  343.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  344.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  345.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  346. [PID: 2552 / Administrator][c:\program files\thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5, 6, 2, 300]
  347.     [c:\program files\thunder\Program\ThunderEx.dll]  [, 1, 1, 2, 6]
  348.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  349.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  350.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  351.     [c:\program files\thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 1, 0, 21]
  352.     [c:\program files\thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 15, 2, 85]
  353.     [c:\program files\thunder\Program\stlport_vc646.dll]  [STLport Consulting, Inc., 4.6.2003.1031]
  354.     [c:\program files\thunder\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 15, 2, 85]
  355.     [c:\program files\thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 1, 0, 8]
  356.     [c:\program files\thunder\Program\FloatBar.dll]  [Giganology Inc., 1, 0, 0, 2]
  357.     [c:\program files\thunder\Components\DownAndPlay\DownAndPlay.dll]  [, 1, 0, 0, 3]
  358.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  359.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  360.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  361.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  362.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  363.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  364.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  365.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  366.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  367.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  368.     [c:\program files\thunder\Program\iTargetAD.dll]  [N/A, ]
  369.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  370.     [c:\program files\thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 0, 7, 29]
  371.     [c:\program files\thunder\Components\Security\ThunderSafe.dll]  [深圳市迅雷网络技术有限公司, 1.0.0.10]
  372.     [c:\program files\thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 15]
  373.     [c:\program files\thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 13, 2, 61]
  374.     [c:\program files\thunder\Program\XLNet.Dll]  [Thunder Networking Technologies,LTD, 1, 2, 0, 8]
  375.     [c:\program files\thunder\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
  376.     [c:\program files\thunder\ComDlls\ThunderAgent_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 3, 20]
  377.     [c:\program files\thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
  378.     [c:\program files\thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.0.4]
  379.     [C:\WINDOWS\system32\CBBCBB1030.dll]  [N/A, ]
  380.     [C:\WINDOWS\system32\KABKAB1032.dll]  [N/A, ]
  381.     [C:\WINDOWS\system32\BAABAA1028.dll]  [N/A, ]
  382.     [C:\WINDOWS\system32\HACHAC1035.dll]  [N/A, ]
  383.     [C:\WINDOWS\system32\QABQAB1013.dll]  [N/A, ]
  384. [PID: 1700 / Administrator][c:\documents and settings\administrator\桌面\srengps.exe]  [Smallfrogs Studio, 2.5.16.900]
  385.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  386.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  387.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  388.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  389.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  390.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  391.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  392.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  393.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  394.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  395.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  396.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  397.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  398.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  399.     [c:\documents and settings\administrator\桌面\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
  400. ==================================
  401. 文件关联
  402. .TXT  Error. [C:\WINDOWS\notepad.exe %1]
  403. .EXE  OK. ["%1" %*]
  404. .COM  OK. ["%1" %*]
  405. .PIF  OK. ["%1" %*]
  406. .REG  OK. [regedit.exe "%1"]
  407. .BAT  OK. ["%1" %*]
  408. .SCR  OK. ["%1" /S]
  409. .CHM  Error. ["hh.exe" %1]
  410. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  411. .INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
  412. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  413. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  414. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  415. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
  416. ==================================
  417. Winsock 提供者
  418. N/A
  419. ==================================
  420. Autorun.inf
  421. N/A
  422. ==================================
  423. HOSTS 文件
  424. 127.0.0.1       localhost
  425. 127.0.0.1  picon.chinaren.com
  426. 127.0.0.1  a.topxxxx.cn
  427. 127.0.0.1  588.star-google.com
  428. 127.0.0.1  mm.tt1890.com
  429. 127.0.0.1  ppp.buyaoni.com
  430. 127.0.0.1  ppp.749571.com
  431. 127.0.0.1  dd.749571.com
  432. 127.0.0.1  niu.xinniankl.com
  433. 127.0.0.1  xxx.haoqq1680.com
  434. 127.0.0.1  exe.xinniankl.com
  435. 127.0.0.1  the.microgood.net
  436. 127.0.0.1  iii.wzxyq.com
  437. 127.0.0.1  mm.sqmnoopt.com
  438. 127.0.0.1  ppp.buyaoni.com
  439. 127.0.0.1  keeppure.cn
  440. 127.0.0.1  aaa.1l1l1l.com
  441. 127.0.0.1  www.cfjs119.cn
  442. 127.0.0.1  cool.e0shop.cn
  443. 127.0.0.1  yun.yun878.com
  444. 127.0.0.1  web.47255.com
  445. 127.0.0.1  www.cike007.cn
  446. 127.0.0.1  www.exiao01.com
  447. 127.0.0.1  qqq.dzydhx.com
  448. 127.0.0.1  qqq.hao1658.com
  449. 127.0.0.1  www.333292.com
  450. 127.0.0.1  down.18dd.net
  451. 127.0.0.1  xxx.m111.biz
  452. 127.0.0.1  1.jopenqc.com
  453. 127.0.0.1  xxx.j41m.com
  454. 127.0.0.1  3.joppnqq.com
  455. 127.0.0.1  d.93se.com
  456. 127.0.0.1  1.jopenkk.com
  457. 127.0.0.1  xxx.vh7.biz
  458. 127.0.0.1  new.749571.com
  459. 127.0.0.1  xtx.kv8.info
  460. 127.0.0.1  cao.kv8.info
  461. 127.0.0.1  1.jopmmqq.com
  462. 127.0.0.1  yu.8s7.net
  463. 127.0.0.1  1.jopanqc.com
  464. 127.0.0.1  2.joppnqq.com
  465. 127.0.0.1  www.868wg.com
  466. 127.0.0.1  xxx.mmma.biz
  467. 127.0.0.1  ilove.com
  468. 127.0.0.1  www.22aaa.com
  469. 127.0.0.1  xx.exiao01.com
  470. 127.0.0.1  www.exiao01.com
  471. 127.0.0.1  tp.shpzhan.cn
  472. 127.0.0.1  www.tomwg.com
  473. 127.0.0.1  wg.47255.com
  474. 127.0.0.1  1.joppnqq.com
  475. 127.0.0.1  171817.171817.com
  476. 127.0.0.1  d2.llsging.com
  477. 127.0.0.1  llboss.com
  478. 127.0.0.1  nx.51ylb.cn
  479. 127.0.0.1  my.531jx.cn
  480. 127.0.0.1  up.22x44.com
  481. ==================================
  482. 进程特权扫描
  483. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2276, D:\D盘内容（软件）\⑤杀毒软件\360安全卫士\ANTIARP\ANTIARP.EXE]
  484. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2552, C:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE]
  485. ==================================
  486. API HOOK
  487. 入口点错误：CreateProcessW (危险等级: 高,  被下面模块所HOOK: C:\WINDOWS\system32\LotusHlp.dll)
  488. ==================================
  489. 隐藏进程
  490. N/A
  491. ==================================
复制代码
回复

使用道具 举报

v.c|bin

该用户从未签到
 楼主| 发表于 2008-2-23 09:30:46 | 显示全部楼层
x学校电脑病毒真多呀....

同志,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,****...................
回复 鲜花 鸡蛋

使用道具 举报

v.c|bin

该用户从未签到
 楼主| 发表于 2008-2-23 09:33:41 | 显示全部楼层
第二次的
  1. 2008-02-23,09:34:23

  3. System Repair Engineer 2.5.16.900
  4. Smallfrogs (http://www.KZTechs.com)

  6. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

  8. 以下内容被选中：
  9.     所有的启动项目（包括注册表、启动文件夹、服务等）
  10.     浏览器加载项
  11.     正在运行的进程（包括进程模块信息）
  12.     文件关联
  13.     Winsock 提供者
  14.     Autorun.inf
  15.     HOSTS 文件
  16.     进程特权扫描


  19. 启动项目
  20. 注册表
  21. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  22.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  23. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  24.     <FlashPlayerUpdate><C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe>  [(Verified)Adobe Systems Incorporated]
  25. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  26.     <AntiARPStandalone><C:\Program Files\AntiARP Stand-alone Edition\AntiArp.exe>  []
  27.     <switch><c:\windows\system32\壁纸自动换.exe>  []
  28.     <YuanZhiStudent><C:\Program Files\YuanZhi\Multimedia Education Network\Student.exe RunServices>  [N/A]
  29.     <runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup>  [Beijing Rising Technology Co., Ltd.]
  30.     <360Safetray><D:\D盘内容（软件）\⑤杀毒软件\360安全卫士\safemon\360tray.exe /start>  [奇虎网]
  31.     <360Antiarp><d:\d盘内容（软件）\⑤杀毒软件\360安全卫士\antiarp\AntiArp.exe /start>  [奇虎网]
  32.     <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
  33.     <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [N/A]
  34.     <PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [N/A]
  35. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
  36.     <wiasoisao><wiasoisao.exe>  []
  37. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  38.     <shell><Explorer.exe>  []
  39.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  40. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  41.     <AppInit_DLLs><>  [N/A]
  42. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  43.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
  44. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
  45.     <{696ccf2b-badc-48ed-b6a6-4c74639663ba}><C:\WINDOWS\system32\CBBCBB1030.dll>  []
  46.     <{4f79092a-66ba-4317-b2c7-f839909661f0}><C:\WINDOWS\system32\KABKAB1032.dll>  []
  47.     <{9eb02d98-1c8f-45f5-93af-f66fa9174db0}><C:\WINDOWS\system32\BAABAA1028.dll>  []
  48.     <{6167F471-EF2B-41DD-A5E5-C26ACDB5C096}><C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys>  []
  49.     <{cd51bd9c-6264-4df0-96bf-8603019818e5}><C:\WINDOWS\system32\HACHAC1035.dll>  []
  50.     <{8C41B7F7-3168-400D-A702-0E7EFE0BA304}><C:\WINDOWS\system32\sgrefg.dll>  []
  51.     <{5aca2e15-0790-4170-812a-890df2fb6144}><C:\WINDOWS\system32\QABQAB1013.dll>  []
  52.     <{4FA10261-B890-F432-A453-69F1023513F4}><C:\WINDOWS\Fonts\gjcsdyc.dll>  []
  53. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  54.     <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]
  55. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\DfLogon]
  56.     <WinlogonNotify: DfLogon><LogonDll.dll>  []
  57. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
  58.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
  59. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  60.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
  61. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  62.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
  63. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  64.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
  65. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  66.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
  67. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  68.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
  69. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  70.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
  71. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  72.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]

  74. ==================================
  75. 启动文件夹
  76. N/A

  78. ==================================
  79. 服务
  80. [DF5Serv / DF5Serv][Running/Auto Start]
  81.   <C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe><Faronics Corporation>
  82. [Human Interface Device Access / HidServ][Stopped/Disabled]
  83.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  84. [Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start]
  85.   <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><>

  87. ==================================
  88. 驱动程序
  89. [360AntiArp / 360AntiArp][Running/System Start]
  90.   <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys><奇虎网>
  91. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start]
  92.   <system32\drivers\ac97intc.sys><Intel Corporation>
  93. [AliIde / AliIde][Running/Boot Start]
  94.   <\SystemRoot\System32\DRIVERS\aliide.sys><Acer Laboratories Inc.>
  95. [AMD K8 Processor Driver / AmdK8][Stopped/Manual Start]
  96.   <System32\DRIVERS\amdk8.sys><Advanced Micro Devices>
  97. [AntiARP NDIS Protocol Driver / AntiArpNdisProt][Running/Auto Start]
  98.   <system32\DRIVERS\AntiArpNdisProt.sys><Windows (R) 2000 DDK provider>
  99. [CmdIde / CmdIde][Running/Boot Start]
  100.   <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
  101. [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
  102.   <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
  103. [VIA Rhine Family Fast Ethernet Adapter Driver Service / FETNDISB][Running/Manual Start]
  104.   <system32\DRIVERS\fetnd5b.sys><VIA Technologies, Inc.>
  105. [npkcrypt / npkcrypt][Stopped/Auto Start]
  106.   <\??\C:\Program Files\QQ2006\npkcrypt.sys><N/A>
  107. [nv / nv][Stopped/Manual Start]
  108.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
  109. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  110.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  111. [RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  112.   <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.>
  113. [Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Stopped/Manual Start]
  114.   <system32\DRIVERS\Rtnicxp.sys><Realtek Semiconductor Corporation>
  115. [S3SavageNB / S3SavageNB][Running/Manual Start]
  116.   <system32\DRIVERS\s3gnbm.sys><S3 Graphics, Inc.>
  117. [Secdrv / Secdrv][Stopped/Manual Start]
  118.   <system32\DRIVERS\secdrv.sys><N/A>
  119. [VIA AGP Filter / viaagp1][Running/Boot Start]
  120.   <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
  121. [ViaIde / ViaIde][Running/Boot Start]
  122.   <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
  123. [Vinyl AC'97 Audio Controller (WDM) / VIAudio][Stopped/Manual Start]
  124.   <system32\drivers\vinyl97.sys><VIA Technologies, Inc.>
  125. [xAntiArpSpoof Service / xAntiArp][Running/Manual Start]
  126.   <system32\DRIVERS\xAntiArp.sys><Windows (R) 2000 DDK provider>
  127. [fpids32 / fpids32][Running/Auto Start]
  128.   <\??\C:\WINDOWS\system32\drivers\msosfpids32.sys><N/A>
  129. [msertk / msertk][Running/Auto Start]
  130.   <system32\drivers\msyecp.sys><N/A>
  131. [pop / pop][Running/Manual Start]
  132.   <\??\C:\WINDOWS\system32\DRIVERS\pop.sys><N/A>

  134. ==================================
  135. 浏览器加载项
  136. [ThunderAtOnce Class]
  137.   {01443AEC-0FD1-40fd-9C87-E93D1494C233} <c:\program files\thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
  138. []
  139.   {6167F471-EF2B-41DD-A5E5-C26ACDB5C096} <C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys, N/A>
  140. [Thunder Browser Helper]
  141.   {B69F34DC-F0F9-42DC-9EDD-957187DA688D} <c:\program files\thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
  142. [SafeMon Class]
  143.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <d:\D盘内~1\⑤杀毒~1\360安~1\safemon\safemon.dll, 奇虎网>
  144. [ThunderAtOnce Class]
  145.   {01443AEC-0FD1-40FD-9C87-E93D1494C233} <c:\program files\thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
  146. [Thunder Agent Class]
  147.   {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <c:\program files\thunder\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD>
  148. []
  149.   {6167F471-EF2B-41DD-A5E5-C26ACDB5C096} <C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys, N/A>
  150. [360SafeLive]
  151.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <D:\D盘内容（软件）\⑤杀毒软件\360安全卫士\live.dll, 360safe.com>
  152. [Microsoft Web 浏览器]
  153.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
  154. [SearchAssistantOC]
  155.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
  156. [Thunder Browser Helper]
  157.   {B69F34DC-F0F9-42DC-9EDD-957187DA688D} <c:\program files\thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
  158. [SafeMon Class]
  159.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <d:\D盘内~1\⑤杀毒~1\360安~1\safemon\safemon.dll, 奇虎网>
  160. [RDS.DataSpace]
  161.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
  162. [Shockwave Flash Object]
  163.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
  164. [使用迅雷下载]
  165.   <c:\program files\thunder\Program\geturl.htm, N/A>
  166. [使用迅雷下载全部链接]
  167.   <c:\program files\thunder\Program\getallurl.htm, N/A>
  168. [导出到 Microsoft Office Excel(&X)]
  169.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
  170. [添加到QQ表情]
  171.   <d:\Program Files\QQ2007\AddEmotion.htm, N/A>

  173. ==================================
  174. 正在运行的进程
  175. [PID: 1644 / Administrator][C:\WINDOWS\Explorer.EXE]  [N/A, ]
  176.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  177.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  178.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  179.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  180.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  181.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  182.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  183.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  184.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  185.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  186.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  187.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  188.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  189. [PID: 1796 / Administrator][C:\WINDOWS\system32\dllcache\explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  190.     [C:\WINDOWS\system32\dllcache\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  191.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  192.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  193.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  194.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  195.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  196.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  197.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  198.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  199.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  200.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  201.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  202.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  203.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  204.     [C:\WINDOWS\system32\CBBCBB1030.dll]  [N/A, ]
  205.     [C:\WINDOWS\system32\KABKAB1032.dll]  [N/A, ]
  206.     [C:\WINDOWS\system32\BAABAA1028.dll]  [N/A, ]
  207.     [C:\WINDOWS\system32\HACHAC1035.dll]  [N/A, ]
  208.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  209.     [C:\WINDOWS\system32\QABQAB1013.dll]  [N/A, ]
  210.     [C:\WINDOWS\system32\dllcache\browselc.dll]  [Microsoft Corporation, 6.00.2600.0000]
  211. [PID: 1880 / Administrator][C:\Program Files\AntiARP Stand-alone Edition\AntiArp.exe]  [N/A, ]
  212.     [C:\Program Files\AntiARP Stand-alone Edition\xantiarp.dll]  [N/A, ]
  213.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  214.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  215.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  216.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  217.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  218.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  219.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  220.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  221.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  222.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  223.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  224.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  225.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  226.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  227. [PID: 1900 / Administrator][C:\Program Files\YuanZhi\Multimedia Education Network\Student.exe]  [TopDomain Technologies Co., LTD., 1.00.1.282]
  228.     [C:\Program Files\YuanZhi\Multimedia Education Network\TDMaster.dll]  [TopDomain Technologies Co., LTD., 1.00.1.282]
  229.     [C:\Program Files\YuanZhi\Multimedia Education Network\Language\0804\StudentRes.dll]  [TopDomain Technologies Co., LTD., 1.00.1.282]
  230.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  231.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  232.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  233.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  234.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  235.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  236.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  237.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  238.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  239.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  240.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  241.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  242.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  243. [PID: 1916 / Administrator][C:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 4.0.0.18]
  244.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  245.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  246.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  247.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  248.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  249.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  250.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  251.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  252.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  253.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  254.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  255.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  256.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  257.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  258. [PID: 1944 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  259.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  260.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  261.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  262.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  263.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  264.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  265.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  266.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  267.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  268.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  269.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  270.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  271.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  272. [PID: 1592 / Administrator][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  273.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  274.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
  275.     [C:\Program Files\Real\RealPlayer\rpplugins\ierpplug.dll]  [RealNetworks, Inc., 1.0.1.2254]
  276.     [C:\WINDOWS\system32\PNCRT.dll]  [Real Networks, Inc, 6.0.0.0]
  277.     [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
  278.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  279.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  280.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  281.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  282.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  283.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  284.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  285.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  286.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  287.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  288.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  289.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  290.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  291.     [C:\WINDOWS\system32\CBBCBB1030.dll]  [N/A, ]
  292.     [C:\WINDOWS\system32\KABKAB1032.dll]  [N/A, ]
  293.     [C:\WINDOWS\system32\BAABAA1028.dll]  [N/A, ]
  294.     [C:\WINDOWS\system32\HACHAC1035.dll]  [N/A, ]
  295.     [C:\WINDOWS\system32\QABQAB1013.dll]  [N/A, ]
  296.     [C:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 3, 20]
  297. [PID: 1608 / Administrator][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  298.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  299.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  300.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  301.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  302.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  303.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  304.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  305.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  306.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  307.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  308.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  309.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  310.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  311. [PID: 2276 / Administrator][d:\d盘内容（软件）\⑤杀毒软件\360安全卫士\antiarp\AntiArp.exe]  [奇虎网, 1, 0, 1, 1003]
  312.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  313.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  314.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  315.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  316.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  317.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  318.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  319.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  320.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  321.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  322.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  323.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  324.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  325.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  326. [PID: 1700 / Administrator][c:\documents and settings\administrator\桌面\srengps.exe]  [Smallfrogs Studio, 2.5.16.900]
  327.     [C:\WINDOWS\system32\ygoviotzyzj.dll]  [Microsoft Corporation, 5.1.2600.3099]
  328.     [C:\WINDOWS\system32\fktyhotwow.dll]  [Microsoft Corporation, 5.1.2600.3099]
  329.     [C:\Program Files\Internet Explorer\PLUGINS\WinSys8k.Sys]  [N/A, ]
  330.     [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
  331.     [C:\WINDOWS\system32\sgrefg.dll]  [N/A, ]
  332.     [C:\WINDOWS\system32\LotusHlp.dll]  [N/A, ]
  333.     [C:\WINDOWS\system32\DbgHlp32.dlL]  [N/A, ]
  334.     [C:\WINDOWS\system32\upxdnd.dll]  [N/A, ]
  335.     [C:\WINDOWS\system32\NVDispDrv.dll]  [N/A, ]
  336.     [C:\WINDOWS\system32\PTSShell.dll]  [N/A, ]
  337.     [C:\WINDOWS\system32\MsIMMs32.dll]  [N/A, ]
  338.     [C:\WINDOWS\kiefncol.dll]  [N/A, ]
  339.     [C:\WINDOWS\kfnrthoh.dll]  [N/A, ]
  340.     [C:\WINDOWS\Fonts\gjcsdyc.dll]  [N/A, ]
  341.     [c:\documents and settings\administrator\桌面\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
  342.     [c:\documents and settings\administrator\桌面\Plugins\NTFSTREAM.SRE]  [Smallfrogs Studio, 1, 0, 0, 5]
  343.     [C:\WINDOWS\system32\CBBCBB1030.dll]  [N/A, ]
  344.     [C:\WINDOWS\system32\KABKAB1032.dll]  [N/A, ]
  345.     [C:\WINDOWS\system32\BAABAA1028.dll]  [N/A, ]
  346.     [C:\WINDOWS\system32\HACHAC1035.dll]  [N/A, ]
  347.     [C:\WINDOWS\system32\QABQAB1013.dll]  [N/A, ]

  349. ==================================
  350. 文件关联
  351. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  352. .EXE  OK. ["%1" %*]
  353. .COM  OK. ["%1" %*]
  354. .PIF  OK. ["%1" %*]
  355. .REG  OK. [regedit.exe "%1"]
  356. .BAT  OK. ["%1" %*]
  357. .SCR  OK. ["%1" /S]
  358. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  359. .HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
  360. .INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  361. .INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  362. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  363. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  364. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]

  366. ==================================
  367. Winsock 提供者
  368. N/A

  370. ==================================
  371. Autorun.inf
  372. N/A

  374. ==================================
  375. HOSTS 文件
  376. 127.0.0.1       localhost
  377. 127.0.0.1  picon.chinaren.com
  378. 127.0.0.1  a.topxxxx.cn
  379. 127.0.0.1  588.star-google.com
  380. 127.0.0.1  mm.tt1890.com
  381. 127.0.0.1  ppp.buyaoni.com
  382. 127.0.0.1  ppp.749571.com
  383. 127.0.0.1  dd.749571.com
  384. 127.0.0.1  niu.xinniankl.com
  385. 127.0.0.1  xxx.haoqq1680.com
  386. 127.0.0.1  exe.xinniankl.com
  387. 127.0.0.1  the.microgood.net
  388. 127.0.0.1  iii.wzxyq.com
  389. 127.0.0.1  mm.sqmnoopt.com
  390. 127.0.0.1  ppp.buyaoni.com
  391. 127.0.0.1  keeppure.cn
  392. 127.0.0.1  aaa.1l1l1l.com
  393. 127.0.0.1  www.cfjs119.cn
  394. 127.0.0.1  cool.e0shop.cn
  395. 127.0.0.1  yun.yun878.com
  396. 127.0.0.1  web.47255.com
  397. 127.0.0.1  www.cike007.cn
  398. 127.0.0.1  www.exiao01.com
  399. 127.0.0.1  qqq.dzydhx.com
  400. 127.0.0.1  qqq.hao1658.com
  401. 127.0.0.1  www.333292.com
  402. 127.0.0.1  down.18dd.net
  403. 127.0.0.1  xxx.m111.biz
  404. 127.0.0.1  1.jopenqc.com
  405. 127.0.0.1  xxx.j41m.com
  406. 127.0.0.1  3.joppnqq.com
  407. 127.0.0.1  d.93se.com
  408. 127.0.0.1  1.jopenkk.com
  409. 127.0.0.1  xxx.vh7.biz
  410. 127.0.0.1  new.749571.com
  411. 127.0.0.1  xtx.kv8.info
  412. 127.0.0.1  cao.kv8.info
  413. 127.0.0.1  1.jopmmqq.com
  414. 127.0.0.1  yu.8s7.net
  415. 127.0.0.1  1.jopanqc.com
  416. 127.0.0.1  2.joppnqq.com
  417. 127.0.0.1  www.868wg.com
  418. 127.0.0.1  xxx.mmma.biz
  419. 127.0.0.1  ilove.com
  420. 127.0.0.1  www.22aaa.com
  421. 127.0.0.1  xx.exiao01.com
  422. 127.0.0.1  www.exiao01.com
  423. 127.0.0.1  tp.shpzhan.cn
  424. 127.0.0.1  www.tomwg.com
  425. 127.0.0.1  wg.47255.com
  426. 127.0.0.1  1.joppnqq.com
  427. 127.0.0.1  171817.171817.com
  428. 127.0.0.1  d2.llsging.com
  429. 127.0.0.1  llboss.com
  430. 127.0.0.1  nx.51ylb.cn
  431. 127.0.0.1  my.531jx.cn
  432. 127.0.0.1  up.22x44.com

  434. ==================================
  435. 进程特权扫描
  436. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2276, D:\D盘内容（软件）\⑤杀毒软件\360安全卫士\ANTIARP\ANTIARP.EXE]

  438. ==================================
  439. API HOOK
  440. 入口点错误：CreateProcessW (危险等级: 高,  被下面模块所HOOK: C:\WINDOWS\system32\LotusHlp.dll)

  442. ==================================
  443. 隐藏进程
  444. N/A

  446. ==================================
复制代码
回复 鲜花 鸡蛋

使用道具 举报

z1271472501

该用户从未签到
发表于 2008-2-23 10:07:18 | 显示全部楼层
不要指望我，我看拉这东西头晕~~~~~~~~~~~
回复 鲜花 鸡蛋

使用道具 举报

SiMen.Angel

该用户从未签到
发表于 2008-2-23 10:12:25 | 显示全部楼层
。。。。。。。。。好多。。
回复 鲜花 鸡蛋

使用道具 举报

SiMen.Hunter

该用户从未签到
发表于 2008-2-23 12:10:51 | 显示全部楼层
好多垃圾网站哦。。。
回复 鲜花 鸡蛋

使用道具 举报

Simen.Resh@d

该用户从未签到
发表于 2008-2-23 12:41:34 | 显示全部楼层
机器狗...  而且还有其他病毒 汗...  不光有 还相当的多....

把瑞星卸载了吧....  那玩意没啥用....    现在很多杀软都有KEY的...  推荐用微点
回复 鲜花 鸡蛋

使用道具 举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

快速回复 返回顶部 返回列表