设为首页收藏本站
开启辅助访问

 找回密码
 立即注册

QQ登录

只需一步，快速开始

赛盟中国KZ玩家社区»社区 › 交流与分享 › 计算机技术 › SREngLOG 上傳
返回列表 发新帖
查看: 872|回复: 6

SREngLOG 上傳

[复制链接]
Heton.S

该用户从未签到
发表于 2008-1-18 17:43:33 | 显示全部楼层 |阅读模式
  1. 2008-01-18,17:39:52

  3. System Repair Engineer 2.5.16.900
  4. Smallfrogs (http://www.KZTechs.com)

  6. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

  8. 以下内容被选中：
  9.     所有的启动项目（包括注册表、启动文件夹、服务等）
  10.     浏览器加载项
  11.     正在运行的进程（包括进程模块信息）
  12.     文件关联
  13.     Winsock 提供者
  14.     Autorun.inf
  15.     HOSTS 文件
  16.     进程特权扫描


  19. 启动项目
  20. 注册表
  21. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  22.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  23. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  24.     <AVP><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe">  [(Verified)Kaspersky Lab]
  25. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  26.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
  27.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  28.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
  29. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
  30.     <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows Component Publisher]
  31. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
  32.     <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll>  [(Verified)Kaspersky Lab]
  33. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
  34.     <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
  35. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  36.     <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
  37. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  38.     <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
  39. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  40.     <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
  41. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  42.     <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
  43. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  44.     <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
  45. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  46.     <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Windows Publisher]
  47. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  48.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]

  50. ==================================
  51. 启动文件夹
  52. N/A

  54. ==================================
  55. 服务
  56. [卡巴斯基反病毒软件 7.0 / AVP][Running/Auto Start]
  57.   <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r><Kaspersky Lab>
  58. [Human Interface Device Access / HidServ][Stopped/Disabled]
  59.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>

  61. ==================================
  62. 驱动程序
  63. [8z3h / 8z3hh][Stopped/Boot Start]
  64.   <\SystemRoot\System32\DRIVERS\8z3hh.sys><N/A>
  65. [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start]
  66.   <system32\drivers\ac97intc.sys><Intel Corporation>
  67. [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  68.   <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
  69. [AliIde / AliIde][Running/Boot Start]
  70.   <\SystemRoot\System32\DRIVERS\aliide.sys><Acer Laboratories Inc.>
  71. [AMD K8 Processor Driver / AmdK8][Stopped/Manual Start]
  72.   <System32\DRIVERS\amdk8.sys><Advanced Micro Devices>
  73. [RAS Asynchronous Media Driver / AsyncMac][Stopped/Auto Start]
  74.   <system32\DRIVERS\msconkt.sys><N/A>
  75. [RAS Asynchronous Media Driver / CCDECODE][Stopped/Auto Start]
  76.   <system32\DRIVERS\msconkt.sys><N/A>
  77. [CmdIde / CmdIde][Running/Boot Start]
  78.   <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
  79. [Lavalys EVEREST Kernel Driver / EverestDriver][Stopped/Manual Start]
  80.   <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RarSFX0\kerneld.wnt><N/A>
  81. [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
  82.   <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
  83. [VIA Rhine Family Fast Ethernet Adapter Driver Service / FETNDISB][Running/Manual Start]
  84.   <system32\DRIVERS\fetnd5b.sys><VIA Technologies, Inc.>
  85. [i2h8at7f / i2h8at7f][Running/Auto Start]
  86.   <\??\C:\WINDOWS\system32\drivers\i2h8at7f.sys><N/A>
  87. [joz / joze][Stopped/Boot Start]
  88.   <\SystemRoot\System32\DRIVERS\joze.sys><N/A>
  89. [kl1 / kl1][Running/Boot Start]
  90.   <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
  91. [klif / klif][Running/System Start]
  92.   <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
  93. [Kaspersky Anti-Virus NDIS Filter / klim5][Running/Manual Start]
  94.   <system32\DRIVERS\klim5.sys><Kaspersky Lab>
  95. [npkcrypt / npkcrypt][Stopped/Auto Start]
  96.   <\??\D:\Program Files\QQ2007\npkcrypt.sys><N/A>
  97. [nv / nv][Stopped/Manual Start]
  98.   <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
  99. [o4cyqb / o4cyqb][Stopped/Auto Start]
  100.   <\??\C:\WINDOWS\system32\drivers\o4cyqb.sys><N/A>
  101. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  102.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  103. [Secdrv / Secdrv][Stopped/Manual Start]
  104.   <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
  105. [VIA AGP Filter / viaagp1][Running/Boot Start]
  106.   <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
  107. [viagfx / viagfx][Running/Manual Start]
  108.   <system32\DRIVERS\vtmini.sys><Copyright (C) VIA/S3 Graphics Co, Ltd.>
  109. [ViaIde / ViaIde][Running/Boot Start]
  110.   <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
  111. [VIAMRAID / VIAMRAID][Stopped/Boot Start]
  112.   <\SystemRoot\system32\DRIVERS\viamraid.sys><VIA Technologies inc,.ltd>
  113. [4651859 / 4651859][Running/Manual Start]
  114.   <2 - 系统找不到指定的文件。
  115. ><N/A>

  117. ==================================
  118. 浏览器加载项
  119. [QQCycloneHelper Class]
  120.   {00000000-12BF-4305-82F9-43058F20E8D2} <D:\xfQQ\QQIEHelper01.dll, 腾讯公司>
  121. [Thunder Browser Helper]
  122.   {00000000-12C0-4305-82F9-43058F20E8D2} <C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
  123. [ThunderAtOnce Class]
  124.   {01443AEC-0FD1-40fd-9C87-E93D1494C233} <C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
  125. [SafeMon Class]
  126.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\XP\360\360safe\safemon\safemon.dll, 奇虎网>
  127. [Web 反病毒统计]
  128.   {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll, Kaspersky Lab>
  129. [QQCycloneHelper Class]
  130.   {00000000-12BF-4305-82F9-43058F20E8D2} <D:\xfQQ\QQIEHelper01.dll, 腾讯公司>
  131. [Thunder Browser Helper]
  132.   {00000000-12C0-4305-82F9-43058F20E8D2} <C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
  133. [ThunderAtOnce Class]
  134.   {01443AEC-0FD1-40FD-9C87-E93D1494C233} <C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
  135. [HTML Document]
  136.   {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
  137. [DHTML Edit Control Safe for Scripting for IE5]
  138.   {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
  139. [XML Document]
  140.   {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A>
  141. [Thunder Agent Class]
  142.   {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <C:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD>
  143. [Windows Media Player]
  144.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  145. [360SafeLive]
  146.   {87515F61-A66C-4319-A0E0-D416CB8059E3} <D:\XP\360\360safe\live.dll, 360safe.com>
  147. [Microsoft Web 浏览器]
  148.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
  149. [SearchAssistantOC]
  150.   {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
  151. [SafeMon Class]
  152.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\XP\360\360safe\safemon\safemon.dll, 奇虎网>
  153. [RDS.DataSpace]
  154.   {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
  155. [Shockwave Flash Object]
  156.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
  157. [&使用超级旋风下载]
  158.   <D:\xfQQ\geturl.htm, N/A>
  159. [&使用超级旋风下载全部链接]
  160.   <D:\xfQQ\getAllurl.htm, N/A>
  161. [使用迅雷下载]
  162.   <C:\Program Files\Thunder\Program\geturl.htm, N/A>
  163. [使用迅雷下载全部链接]
  164.   <C:\Program Files\Thunder\Program\getallurl.htm, N/A>
  165. [导出到 Microsoft Office Excel(&X)]
  166.   <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
  167. [添加到QQ表情]
  168.   <D:\Program Files\QQ2007\AddEmotion.htm, N/A>

  170. ==================================
  171. 正在运行的进程
  172. [PID: 872 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  173. [PID: 936 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  174. [PID: 960 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  175.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  176.     [C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 7.0.0.125]
  177. [PID: 1004 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  178. [PID: 1016 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  179.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.125]
  180.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  181. [PID: 1180 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  182. [PID: 1288 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  183.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.125]
  184. [PID: 1412 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  185.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  186.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.125]
  187.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.125]
  188.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\klscav.dll]  [Kaspersky Lab, 7.0.0.125]
  189.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  190.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prremote.dll]  [Kaspersky Lab, 7.0.0.125]
  191.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  192.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prloader.dll]  [Kaspersky Lab, 7.0.0.125]
  193.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prkernel.ppl]  [Kaspersky Lab, 7.0.0.125]
  194.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\params.ppl]  [Kaspersky Lab, 7.0.0.125]
  195.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\pxstub.ppl]  [Kaspersky Lab, 7.0.0.125]
  196.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\tempfile.ppl]  [Kaspersky Lab, 7.0.0.125]
  197. [PID: 1468 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  198. [PID: 1564 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  199.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  200.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.125]
  201. [PID: 1924 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
  202.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.125]
  203. [PID: 272 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
  204.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  205.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.125]
  206.     [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
  207.     [D:\XP\360\360safe\safemon\safemon.dll]  [奇虎网, 3, 6, 4, 1001]
  208. [PID: 428 / Administrator][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5, 1, 0, 58]
  209. [PID: 436 / Administrator][C:\WINDOWS\system32\VTTimer.exe]  [S3 Graphics, Inc., 2.00.01-0307]
  210. [PID: 444 / Administrator][C:\WINDOWS\system32\VTtrayp.exe]  [S3 Graphics Co., Ltd., 2.00.41-1031]
  211.     [C:\WINDOWS\system32\VTDisply.dll]  [S3 Graphics Co., Ltd., 2.00.58-0523]
  212.     [C:\WINDOWS\system32\VTGamma2.dll]  [S3 Graphics Co., Ltd., 2.00.28-1128]
  213.     [C:\WINDOWS\system32\VTInfo2.dll]  [S3 Graphics Co., Ltd., 2.00.35-1031]
  214.     [C:\WINDOWS\system32\VTOvrlay.dll]  [S3 Graphics Co., Ltd., 2.00.38-1117B]
  215. [PID: 464 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  216. [PID: 3724 / Administrator][D:\Program Files\QQ2007\QQ.exe]  [TENCENT, 7,1,576,1763]
  217.     [D:\Program Files\QQ2007\QQBaseClassInDll.dll]  [TENCENT, 7,1,576,1763]
  218.     [D:\Program Files\QQ2007\QQHelperDll.dll]  [TENCENT, 7,1,576,1763]
  219.     [D:\Program Files\QQ2007\BasicCtrlDll.dll]  [TENCENT, 7,1,576,1763]
  220.     [D:\Program Files\QQ2007\QQAPI.dll]  [TENCENT, 7,1,576,1763]
  221.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  222.     [D:\Program Files\QQ2007\LoginCtrl.dll]  [TENCENT, 7,1,576,1763]
  223.     [D:\Program Files\QQ2007\LoginCtrlRes.dll]  [TENCENT, 7,1,576,1763]
  224.     [D:\Program Files\QQ2007\QQRes.dll]  [TENCENT, 7,1,576,1763]
  225.     [D:\Program Files\QQ2007\WizardCtrl.dll]  [TENCENT, 7,1,576,1763]
  226.     [D:\Program Files\QQ2007\QQMainFrame.dll]  [N/A, ]
  227.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.125]
  228.     [D:\Program Files\QQ2007\UnReadMsgMgr.dll]  [N/A, ]
  229.     [D:\Program Files\QQ2007\CQQApplication.dll]  [N/A, ]
  230.     [D:\Program Files\QQ2007\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
  231.     [D:\Program Files\QQ2007\NewSkin.dll]  [TENCENT, 7,1,576,1763]
  232.     [D:\Program Files\QQ2007\MailSummary.dll]  [TENCENT, 7,1,576,1763]
  233.     [D:\Program Files\QQ2007\QQSpace.dll]  [TENCENT, 7,1,576,1763]
  234.     [C:\WINDOWS\system32\msdmo.dll]  [, ]
  235.     [D:\Program Files\QQ2007\QQKnowledgeSearch.dll]  [TENCENT, 7,1,576,1763]
  236.     [D:\Program Files\QQ2007\QQGroupMng.dll]  [TENCENT, 7,1,576,1763]
  237.     [D:\Program Files\QQ2007\QQAllInOne.dll]  [TENCENT, 7,1,576,1763]
  238.     [D:\Program Files\QQ2007\SCCore.dll]  [TENCENT, 1, 6, 0, 2]
  239.     [D:\Program Files\QQ2007\CameraDll.dll]  [TENCENT, 7,1,576,1763]
  240.     [D:\Program Files\QQ2007\QQSysMsgMng.dll]  [N/A, ]
  241.     [D:\Program Files\QQ2007\QQPet.dll]  [TENCENT, 7,1,576,1763]
  242.     [D:\Program Files\QQ2007\UserDefinedHead.dll]  [TENCENT, 7,1,576,1763]
  243.     [D:\Program Files\QQ2007\QQPlugin.dll]  [N/A, ]
  244.     [D:\Program Files\QQ2007\QQConfigPlugin.dll]  [TENCENT, 7,1,576,1763]
  245.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.125]
  246.     [D:\Program Files\QQ2007\QQCustomFace.dll]  [N/A, ]
  247.     [D:\Program Files\QQ2007\QQAvatar.dll]  [N/A, ]
  248.     [D:\Program Files\QQ2007\QRingMng.dll]  [N/A, ]
  249.     [D:\Program Files\QQ2007\LongConnection.dll]  [TENCENT, 7,1,576,1763]
  250.     [D:\Program Files\QQ2007\PhoneAPI.dll]  [TENCENT, 7,1,576,1763]
  251.     [D:\Program Files\QQ2007\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
  252.     [D:\Program Files\QQ2007\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 310]
  253.     [D:\Program Files\QQ2007\BQQApplication.dll]  [N/A, ]
  254.     [D:\Program Files\QQ2007\ImageOle.dll]  [TENCENT, 7,1,576,1763]
  255.     [D:\Program Files\QQ2007\QQLiveQMng.dll]  [TENCENT, 7,1,576,1763]
  256.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\klscav.dll]  [Kaspersky Lab, 7.0.0.125]
  257.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  258.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prremote.dll]  [Kaspersky Lab, 7.0.0.125]
  259.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  260.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prloader.dll]  [Kaspersky Lab, 7.0.0.125]
  261.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prkernel.ppl]  [Kaspersky Lab, 7.0.0.125]
  262.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\params.ppl]  [Kaspersky Lab, 7.0.0.125]
  263.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\pxstub.ppl]  [Kaspersky Lab, 7.0.0.125]
  264.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\tempfile.ppl]  [Kaspersky Lab, 7.0.0.125]
  265.     [D:\Program Files\QQ2007\GroupConnection.dll]  [TENCENT, 7,1,576,1763]
  266.     [D:\Program Files\QQ2007\CommercesMng.dll]  [TENCENT, 7,1,576,1763]
  267.     [D:\Program Files\QQ2007\PersonalDesktop.dll]  [TENCENT, 7,1,576,1763]
  268.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
  269.     [C:\WINDOWS\system32\UNISPIM6.IME]  [北京紫光华宇软件股份有限公司, 6.0.0.6138]
  270.     [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
  271.     [D:\Program Files\QQ2007\QQSettingCtrl.dll]  [TENCENT, 7,1,576,1763]
  272.     [D:\Program Files\QQ2007\QQSceneMng.dll]  [N/A, ]
  273.     [D:\Program Files\QQ2007\AddrSearch.dll]  [腾讯科技（深圳）有限公司, 2, 1, 9, 97]
  274. [PID: 796 / Administrator][D:\Program Files\QQ2007\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
  275.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  276. [PID: 3884 / Administrator][D:\qqJT\TTPlayer.exe]  [Alen Soft, 5, 0, 1, 0]
  277.     [D:\qqJT\ttpcomm.dll]  [N/A, ]
  278.     [D:\qqJT\ttpres.dll]  [Alen Soft, 5, 0, 1, 0]
  279.     [D:\qqJT\msdmo.dll]  [Microsoft Corporation, 6.03.01.0400]
  280.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  281. [PID: 2904 / Administrator][D:\TT\TTraveler.exe]  [腾讯公司, 3, 3, 200, 290]
  282.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  283.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.125]
  284.     [D:\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  [腾讯公司, 1, 1, 0, 5]
  285.     [D:\TT\Plugins\TWeather\TWeather.dll]  [, 1, 0, 0, 3]
  286.     [D:\TT\TTNetFavor.dll]  [N/A, ]
  287.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.125]
  288.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\klscav.dll]  [Kaspersky Lab, 7.0.0.125]
  289.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.42]
  290.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prremote.dll]  [Kaspersky Lab, 7.0.0.125]
  291.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.42]
  292.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prloader.dll]  [Kaspersky Lab, 7.0.0.125]
  293.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\prkernel.ppl]  [Kaspersky Lab, 7.0.0.125]
  294.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\params.ppl]  [Kaspersky Lab, 7.0.0.125]
  295.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\pxstub.ppl]  [Kaspersky Lab, 7.0.0.125]
  296.     [c:\program files\kaspersky lab\kaspersky anti-virus 7.0\tempfile.ppl]  [Kaspersky Lab, 7.0.0.125]
  297.     [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
  298.     [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
  299.     [C:\WINDOWS\system32\UNISPIM6.IME]  [北京紫光华宇软件股份有限公司, 6.0.0.6138]
  300. [PID: 3676 / Administrator][D:\XP\sreng2\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
  301.     [D:\XP\sreng2\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
  302.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll]  [Kaspersky Lab, 7.0.0.125]
  303.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll]  [Kaspersky Lab, 7.0.0.125]
  304.     [D:\XP\sreng2\sreng2\Plugins\NTFSTREAM.SRE]  [Smallfrogs Studio, 1, 0, 0, 5]
  305.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\scrchpg.dll]  [Kaspersky Lab, 7.0.0.125]

  307. ==================================
  308. 文件关联
  309. .TXT  Error. [C:\WINDOWS\notepad.exe %1]
  310. .EXE  OK. ["%1" %*]
  311. .COM  OK. ["%1" %*]
  312. .PIF  OK. ["%1" %*]
  313. .REG  OK. [regedit.exe "%1"]
  314. .BAT  OK. ["%1" %*]
  315. .SCR  OK. ["%1" /S]
  316. .CHM  Error. ["hh.exe" %1]
  317. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  318. .INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
  319. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  320. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  321. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  322. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]

  324. ==================================
  325. Winsock 提供者
  326. N/A

  328. ==================================
  329. Autorun.inf
  330. N/A

  332. ==================================
  333. HOSTS 文件
  334. N/A

  336. ==================================
  337. 进程特权扫描
  338. 特殊特权被允许： SeLoadDriverPrivilege [PID = 436, C:\WINDOWS\SYSTEM32\VTTIMER.EXE]
  339. 特殊特权被允许： SeLoadDriverPrivilege [PID = 444, C:\WINDOWS\SYSTEM32\VTTRAYP.EXE]
  340. 特殊特权被允许： SeLoadDriverPrivilege [PID = 3884, D:\QQJT\TTPLAYER.EXE]
  341. 特殊特权被允许： SeLoadDriverPrivilege [PID = 2904, D:\TT\TTRAVELER.EXE]

  343. ==================================
  344. API HOOK
  345. RVA  错误： LoadLibraryA (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
  346. RVA  错误： LoadLibraryExA (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
  347. RVA  错误： LoadLibraryExW (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
  348. RVA  错误： LoadLibraryW (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
  349. RVA  错误： GetProcAddress (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)

  351. ==================================
  352. 隐藏进程
  353. N/A

  355. ==================================
复制代码
回复

使用道具 举报

Simen.Error

该用户从未签到
发表于 2008-1-18 18:18:35 | 显示全部楼层

我是小孩 我不懂这玩意
回复 鲜花 鸡蛋

使用道具 举报

Simen.Resh@d

该用户从未签到
发表于 2008-1-18 18:20:18 | 显示全部楼层
日志没有任何问题..
应该是宽带提供商的问题...
回复 鲜花 鸡蛋

使用道具 举报

Heton.S

该用户从未签到
 楼主| 发表于 2008-1-18 18:37:00 | 显示全部楼层
那怎么办..???
回复 鲜花 鸡蛋

使用道具 举报

SiMen.Naomi

该用户从未签到
发表于 2008-1-18 20:06:37 | 显示全部楼层
当然是找宽贷提供商了........
回复 鲜花 鸡蛋

使用道具 举报

SiMen.T

该用户从未签到
发表于 2008-1-18 20:09:24 | 显示全部楼层
什么东西
回复 鲜花 鸡蛋

使用道具 举报

SiMen.CS.sp

该用户从未签到
发表于 2008-1-18 20:40:09 | 显示全部楼层
头都看大了 眼有看晕了 都还没看读什么...
回复 鲜花 鸡蛋

使用道具 举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

快速回复 返回顶部 返回列表