我一打开QQ程序,电脑就会自动关机!
HijackThis_815汉化版扫描日志 V1.99.1
保存于 19:35:03, 日期 2006-7-17
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
F:\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
F:\Rising\Rav\Ravmond.exe
f:\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
f:\rising\rfw\RfwMain.exe
F:\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\VeriSign\NAVI\naviagent.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe
F:\Rising\Rav\RavTask.exe
F:\Rising\Rav\Ravmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
I:\杀度软件3721\ske\TrojanAssistant.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\结结\LOCALS~1\Temp\Rar$EX00.786\HijackThis1991zww.exe
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - F:\Tencent\1\QQIEHelper.dll
O2 - BHO: (no name) - {80D47AD0-AE34-4E2F-AFF6-F68F8555ACED} - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\cnshook.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1> rem C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync> rem C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A> rem C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [CnsMin> rem Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [RavTask> ＂F:\Rising\Rav\RavTask.exe＂ -system
O4 - 启动项HKLM\\Run: [TkBellExe> ＂C:\Program Files\Common Files\Real\Update_OB\realsched.exe＂ -osboot
O4 - 启动项HKLM\\RunOnce: [RavStub> ＂F:\Rising\Rav\ravstub.exe＂ /RUNONCE
O4 - HKCU\..\Run: [ctfmon.exe> C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpyEmergency> ＂C:\DOCUME~1\结结\LOCALS~1\Temp\Rar$EX03.271\Spy Emergency\SpyEmergency.exe＂
O4 - Startup: 腾讯QQ.lnk = F:\Tencent\1\QQ.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - F:\Tencent\1\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - F:\Tencent\1\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - F:\Tencent\1\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - F:\Tencent\1\SendMMS.htm
O9 - 浏览器额外的按钮: (no name) - {00000000-0000-0001-0001-596BAEDD1289} - (no file)
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - (file missing)
O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - (file missing)
O9 - 浏览器额外的按钮: (no name) - {5d73ee86-05f1-49ed-b850-e423120ec338}@buttontext - (no file)
O9 - 浏览器额外的按钮: (no name) - {5d73ee86-05f1-49ed-b850-e423120ec338}@clsid - (no file)
O9 - 浏览器额外的按钮: (no name) - {5d73ee86-05f1-49ed-b850-e423120ec338}@default visible - (no file)
O9 - 浏览器额外的按钮: (no name) - {5d73ee86-05f1-49ed-b850-e423120ec338}@exec - (no file)
O9 - 浏览器额外的按钮: (no name) - {5d73ee86-05f1-49ed-b850-e423120ec338}@hoticon - (no file)
O9 - 浏览器额外的按钮: (no name) - {5d73ee86-05f1-49ed-b850-e423120ec338}@icon - (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {5d73ee86-05f1-49ed-b850-e423120ec338}@icon - (file missing)
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\Tencent\1\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\Tencent\1\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - F:\Tencent\1\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - F:\Tencent\1\QQIEHelper.dll
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - (file missing)
O9 - 浏览器额外的按钮: (no name) - {ecf2e268-f28c-48d2-9ab7-8f69c11ccb71}@clsid - (no file)
O9 - 浏览器额外的按钮: (no name) - {ecf2e268-f28c-48d2-9ab7-8f69c11ccb71}@default visible - (no file)
O9 - 浏览器额外的按钮: (no name) - {ecf2e268-f28c-48d2-9ab7-8f69c11ccb71}@exec - (no file)
O9 - 浏览器额外的按钮: (no name) - {ecf2e268-f28c-48d2-9ab7-8f69c11ccb71}@menutext - (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {ecf2e268-f28c-48d2-9ab7-8f69c11ccb71}@menutext - (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - (file missing)
O9 - 浏览器额外的按钮: (no name) - {fd00d911-7529-4084-9946-a29f1bdf4fe5}@clsid - (no file)
O9 - 浏览器额外的按钮: (no name) - {fd00d911-7529-4084-9946-a29f1bdf4fe5}@default visible - (no file)
O9 - 浏览器额外的按钮: (no name) - {fd00d911-7529-4084-9946-a29f1bdf4fe5}@exec - (no file)
O9 - 浏览器额外的按钮: (no name) - {fd00d911-7529-4084-9946-a29f1bdf4fe5}@menutext - (no file)
O11 - Options group: [!CNS> 网络实名
O16 - DPF: {52DF16E3-6C4F-4B22-8BAF-09263E463B48} -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O16 - DPF: {C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} (Kingsoft DUBA OnlineScan) -
O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{F3D353D7-9536-4D41-BF58-0F6121404B7C}: NameServer = 202.96.128.166
O23 - NT 服务: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - NT 服务: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: VeriSign Updater (navi) - VeriSign, Inc. - C:\Program Files\VeriSign\NAVI\naviagent.exe
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\Ravmond.exe
O23 - NT 服务: TGE CardReader Mgr Host v2 (TGECardReaderMgrHost.2) - Unknown owner - C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe
I:\杀度软件3721\ske\TrojanAssistant.exe
卸载，
O4 - HKCU\..\Run: [SpyEmergency> ＂C:\DOCUME~1\结结\LOCALS~1\Temp\Rar$EX03.271\Spy Emergency\SpyEmergency.exe＂
卸载
然后用置顶的恶意软件清理工具清理后，用hijackthis扫描系统，修复所有后缀为 （file missing) （no file）的项目。
怀疑杀毒软件之间的冲突。
重裝個QQ看沒..到騰訊官方網下個新的看看啊.....
我按照红桃jacker版主的说法做,还有重装QQ,但打开QQ时,电脑还是重启
建议重新扫描一个SRENG的报告看看，参考置顶帖子 一个页面贴不全/分页面贴
O4 - HKCU\..\Run: [SpyEmergency> ＂C:\DOCUME~1\结结\LOCALS~1\Temp\Rar$EX03.271\Spy Emergency\SpyEmergency.exe＂
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\Ravmond.exe
二杀软，去掉一个。再到安全模式下用恶意软件清理助手清理下
2 HijackThis_815汉化版扫描日志 V1.99.1保存于 0:37:49, 日期 2006-7-20
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
F:\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
F:\Rising\Rav\Ravmond.exe
f:\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
f:\rising\rfw\RfwMain.exe
F:\Rising\Rav\RavStub.exe
C:\Program Files\VeriSign\NAVI\naviagent.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe
C:\WINDOWS\system32\Rundll32.exe
F:\Rising\Rav\RavTask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
F:\Rising\Rav\Ravmon.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\TENCENT\QQTang\Client.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\结结\LOCALS~1\Temp\Rar$EX00.968\HijackThis1991zww.exe
O2 - BHO: (no name) - {80D47AD0-AE34-4E2F-AFF6-F68F8555ACED} - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\cnshook.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1> rem C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync> rem C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A> rem C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [CnsMin> rem Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [RavTask> ＂F:\Rising\Rav\RavTask.exe＂ -system
O4 - 启动项HKLM\\Run: [TkBellExe> ＂C:\Program Files\Common Files\Real\Update_OB\realsched.exe＂ -osboot
O4 - HKCU\..\Run: [ctfmon.exe> C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: 腾讯QQ.lnk = F:\Tencent\1\QQ.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - F:\Tencent\1\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - F:\Tencent\1\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - F:\Tencent\1\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - F:\Tencent\1\SendMMS.htm
O9 - 浏览器额外的按钮: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - (file missing)
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - (file missing)
O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - (file missing)
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\Tencent\1\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\Tencent\1\QQ.EXE
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - (file missing)
O11 - Options group: [!CNS> 网络实名
O16 - DPF: {52DF16E3-6C4F-4B22-8BAF-09263E463B48} -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O16 - DPF: {C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} (Kingsoft DUBA OnlineScan) -
O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{F3D353D7-9536-4D41-BF58-0F6121404B7C}: NameServer = 202.96.128.166
O23 - NT 服务: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - NT 服务: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: VeriSign Updater (navi) - VeriSign, Inc. - C:\Program Files\VeriSign\NAVI\naviagent.exe
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\Ravmond.exe
O23 - NT 服务: TGE CardReader Mgr Host v2 (TGECardReaderMgrHost.2) - Unknown owner - C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe
3 都没有O4 - HKCU\..\Run: [SpyEmergency> ＂C:\DOCUME~1\结结\LOCALS~1\Temp\Rar$EX03.271\Spy Emergency\SpyEmergency.exe＂
4 SRENG是什么来的？
5 mUninstall Microsoft基础应用程序是什么来的,我用木马克星查到有木马,但杀不了,可以删除吗？
[ 本帖最后由 87737901 于 2006-7-20 01:03 编辑 >
这个我不懂！！路过！
O23 - NT 服务: VeriSign Updater (navi) - VeriSign, Inc. - C:\Program Files\VeriSign\NAVI\naviagent.exe
昨天俺到处看了看，一个国外的广告插件
都没有O4 - HKCU\..\Run: [SpyEmergency> ＂C:\DOCUME~1\结结\LOCALS~1\Temp\Rar$EX03.271\Spy Emergency\SpyEmergency.exe＂
临时文件夹中，要显示所有文件，包括受到系统保护的操作系统文件
SRENG是什么来的？
看置顶帖子，一个扫描工具，和hijackthis相比较，各有千秋。
我前不久也碰到过了.你先把QQ这个目录.也QQ软件.删除掉..让后在杀毒...在去QQ官方网址上面下载一个QQ软件.用2006珊瑚版的就要小心了..有毒的.
如果还是会.你用一用2005版本的QQ试一试.
2006-07-20,16:51:05
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (
Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run>
＜ctfmon.exe＞＜C:\WINDOWS\system32\ctfmon.exe＞ [Microsoft Corporation>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows>
＜load＞＜＞ [>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
＜IMJPMIG8.1＞＜rem C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32＞ [Microsoft Corporation>
＜PHIME2002ASync＞＜rem C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC＞ [Microsoft Corporation>
＜PHIME2002A＞＜rem C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName＞ [Microsoft Corporation>
＜CnsMin＞＜rem Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32＞ [北京三七二一科技有限公司>
＜RavTask＞＜＂F:\Rising\Rav\RavTask.exe＂ -system＞ [Beijing Rising Technology Co., Ltd.>
＜TkBellExe＞＜＂C:\Program Files\Common Files\Real\Update_OB\realsched.exe＂ -osboot＞ [RealNetworks, Inc.>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce>
＜RavStub＞＜＂F:\Rising\Rav\ravstub.exe＂ /RUNONCE＞ [Beijing Rising Technology Co., Ltd.>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
＜shell＞＜explorer.exe＞ [Microsoft Corporation>
＜Userinit＞＜C:\WINDOWS\system32\userinit.exe,＞ [Microsoft Corporation>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows>
＜AppInit_DLLs＞＜＞ [>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
＜UIHost＞＜logonui.exe＞ [Microsoft Corporation>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks>
＜{D157330A-9EF3-49F8-9A67-4141AC41ADD4}＞＜C:\WINDOWS\DOWNLO~1\cnshook.dll＞ [北京三七二一科技有限公司>
＜{80D47AD0-AE34-4E2F-AFF6-F68F8555ACED}＞＜＞ [>
＜{b83fc273-3522-4cc6-92ec-75cc86678da4}＞＜C:\WINDOWS\DOWNLO~1\CnsMin.dll＞ [北京三七二一科技有限公司>
==================================
启动文件夹
[腾讯QQ>
＜C:\Documents and Settings\结结\「开始」菜单\程序\启动\腾讯QQ.lnk＞＜N＞
==================================
服务
[InstallDriver Table Manager / IDriverT>
＜＂C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe＂＞＜Macrovision Corporation＞
[LexBce Server / LexBceS>
＜C:\WINDOWS\system32\LEXBCES.EXE＞＜Lexmark International, Inc.＞
[Macromedia Licensing Service / Macromedia Licensing Service>
＜＂C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe＂＞＜N/A＞
[VeriSign Updater / navi>
＜C:\Program Files\VeriSign\NAVI\naviagent.exe manifest=＂https://manifest.verisign-grs.com/manifestNT_414.xml＂ guid={B562BC94-9A3A-4760-AE48-0D52FD01B1B5} interface={3FEFF9F3-B5F5-4F47-BB96-CE281BFBE15D}＞＜VeriSign, Inc.＞
[NVIDIA Driver Helper Service / NVSvc>
＜C:\WINDOWS\System32\nvsvc32.exe＞＜NVIDIA Corporation＞
[Rising Proxy Service / RfwProxySrv>
＜f:\rising\rfw\rfwproxy.exe＞＜Beijing Rising Technology Co., Ltd.＞
[Rising Personal Firewall Service / RfwService>
＜f:\rising\rfw\rfwsrv.exe＞＜Beijing Rising Technology Co., Ltd.＞
[Rising Process Communication Center / RsCCenter>
＜＂F:\Rising\Rav\CCenter.exe＂＞＜Beijing Rising Technology Co., Ltd.＞
[RsRavMon Service / RsRavMon>
＜＂F:\Rising\Rav\Ravmond.exe＂＞＜Beijing Rising Technology Co., Ltd.＞
[TGE CardReader Mgr Host v2 / TGECardReaderMgrHost.2>
＜C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe＞＜＞
==================================
浏览器加载项
[CnsHook Class>
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} ＜C:\WINDOWS\DOWNLO~1\cnshook.dll, 北京三七二一科技有限公司＞
[手机短信>
{00000000-0000-0001-0001-596BAEDD1289} ＜, N/A＞
[Yahoo 1G电邮>
{507F9113-CD77-4866-BA92-0E86DA3D0B97} ＜, N/A＞
[寻宝乐趣多>
{59BC54A2-56B3-44a0-93E5-432D58746E26} ＜, N/A＞
[上网助手>
{5D73EE86-05F1-49ed-B850-E423120EC338} ＜, N/A＞
[QQ>
{c95fe080-8f5d-11d2-a20b-00aa003c157b} ＜F:\Tencent\1\QQ.EXE, TENCENT＞
[情景聊天>
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} ＜, N/A＞
[>
{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} ＜, N/A＞
[>
{FD00D911-7529-4084-9946-A29F1BDF4FE5} ＜, N/A＞
[MUWebControl Class>
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ＜C:\WINDOWS\system32\muweb.dll, Microsoft Corporation＞
[Kingsoft DUBA OnlineScan>
{C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} ＜C:\WINDOWS\System32\kingsoft\ONLINE~1\kavclean.ocx, kingsoft＞
[Shockwave Flash Object>
{D27CDB6E-AE6D-11CF-96B8-444553540000} ＜C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.＞
[Ravonline>
{DA984A6D-508E-11D6-AA49-0050FF3C628D} ＜C:\WINDOWS\Downloaded Program Files\RsOnline.dll, Beijing Rising Tech. Co., Ltd.＞
[ActiveMovieControl Object>
{05589FA1-C356-11CE-BF01-00AA0055595A} ＜C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation＞
[MonitorURL Class>
{08A312BB-5409-49FC-9347-54BB7D069AC6} ＜C:\PROGRA~1\DESKAD~1\deskipn.dll, ＞
[Web Browser Applet Control>
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} ＜C:\WINDOWS\System32\msjava.dll, Microsoft Corporation＞
[Windows Genuine Advantage Validation Tool>
{17492023-C23A-453E-A040-C7C580BBF700} ＜C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation＞
[Windows Media Player>
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} ＜C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation＞
[HTML Document>
{25336920-03F9-11CF-8FD0-00AA00686F13} ＜%SystemRoot%\System32\mshtml.dll, N/A＞
[Passport 的批处理服务>
{2D2307C8-7DB4-40D6-9100-D52AF4F97A5B} ＜%SystemRoot%\System32\netplwiz.dll, N/A＞
[RealPlayer RAM Download Handler>
{2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} ＜C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.＞
[Tabular Data Control>
{333C7BC4-460F-11D0-BC04-0080C7055A83} ＜C:\WINDOWS\System32\tdc.ocx, Microsoft Corporation＞
[Wbho Class>
{40E3A34A-3282-41F8-AD2C-051BAB96AD4A} ＜C:\WINDOWS\system32\Ipripw.dll, ＞
[HHCtrl Object>
{52A2AAAE-085D-4187-97EA-8C30DB990436} ＜C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation＞
[Shell Name Space>
{55136805-B2DE-11D1-B9F2-00A0C98BC547} ＜%SystemRoot%\System32\shdocvw.dll, N/A＞
[WUWebControl Class>
{6414512B-B978-451D-A0D8-FCFDF33E833C} ＜C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation＞
[Windows Media Player>
{6BF52A52-394A-11D3-B153-00C04F79FAA6} ＜C:\WINDOWS\system32\wmp.dll, Microsoft Corporation＞
[MUWebControl Class>
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ＜C:\WINDOWS\system32\muweb.dll, Microsoft Corporation＞
[Active Desktop Mover>
{72267F6A-A6F9-11D0-BC94-00C04FB67863} ＜%SystemRoot%\system32\SHELL32.dll, N/A＞
[ShowBarObject Class>
{850B69E4-90DB-4F45-8621-891BF35A5B53} ＜C:\WINDOWS\system32\alitb\bar.dll, Alibaba＞
[Microsoft Web 浏览器>
{8856F961-340A-11D0-A96B-00C04FD705A2} ＜C:\WINDOWS\System32\shdocvw.dll, Microsoft Corporation＞
[RMGetLicense Class>
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062} ＜C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation＞
[Microsoft Scriptlet Component>
{AE24FDAE-03C6-11D1-8B76-0080C744F389} ＜C:\WINDOWS\System32\mshtml.dll, Microsoft Corporation＞
[SearchAssistantOC>
{B45FF030-4447-11D2-85DE-00C04FA35C89} ＜%SystemRoot%\System32\shdocvw.dll, N/A＞
[3721>
{b83fc273-3522-4cc6-92ec-75cc86678da4} ＜C:\WINDOWS\DOWNLO~1\CnsMin.dll, 北京三七二一科技有限公司＞
[VeriSign Inc. i-Nav IDN Resolver>
{CE000992-A58C-4441-8938-744CD72AB27F} ＜C:\Program Files\VeriSign\i-Nav\i-nav_4_1_4.dll, VeriSign, Inc.＞
[VeriSign i-Nav IE Tool Options>
{CE000996-A58C-4441-8938-744CD72AB27F} ＜C:\Program Files\VeriSign\i-Nav\i-nav_4_1_4.dll, VeriSign, Inc.＞
[RealPlayer G2 Control>
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} ＜C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.＞
[CnsHook Class>
{D157330A-9EF3-49F8-9A67-4141AC41ADD4} ＜C:\WINDOWS\DOWNLO~1\cnshook.dll, 北京三七二一科技有限公司＞
[Shockwave Flash Object>
{D27CDB6E-AE6D-11CF-96B8-444553540000} ＜C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.＞
[VqqSpeedDlProxy Class>
{F138084D-84D7-48CD-BEA8-04772457516E} ＜C:\WINDOWS\vqqsdl.dll, Tencent＞
[IERPCtl Class>
{FDC7A535-4070-4B92-A0EA-D9994BCC0DC5} ＜F:\Program Files\rpplugins\ierpplug.dll, RealNetworks, Inc.＞
[上传到QQ网络硬盘>
＜F:\Tencent\1\AddToNetDisk.htm, N/A＞
[使用网际快车下载>
＜C:\Program Files\FlashGet\jc_link.htm, N/A＞
[使用网际快车下载全部链接>
＜C:\Program Files\FlashGet\jc_all.htm, N/A＞
[添加到QQ自定义面板>
＜F:\Tencent\1\AddPanel.htm, N/A＞
[添加到QQ表情>
＜F:\Tencent\1\AddEmotion.htm, N/A＞
[用QQ彩信发送该图片>
＜F:\Tencent\1\SendMMS.htm, N/A＞
正在运行的进程
[PID: 444>[\SystemRoot\System32\smss.exe> ＜Microsoft Corporation＞＜5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)＞
[PID: 508>[\？？\C:\WINDOWS\system32\csrss.exe> ＜Microsoft Corporation＞
＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 532>[\？？\C:\WINDOWS\system32\winlogon.exe> ＜Microsoft Corporation＞
＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 576>[C:\WINDOWS\system32\services.exe> ＜Microsoft Corporation＞
＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 588>[C:\WINDOWS\system32\lsass.exe> ＜Microsoft Corporation＞
＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 736>[C:\WINDOWS\system32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 824>[C:\WINDOWS\system32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 908>[F:\Rising\Rav\CCenter.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 3＞
[PID: 924>[C:\WINDOWS\System32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 968>[C:\WINDOWS\System32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1008>[C:\WINDOWS\System32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1028>[F:\Rising\Rav\Ravmond.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 1, 26＞
[F:\Rising\Rav\BWList.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 19＞
[F:\Rising\Rav\RsCommX.dll> ＜rising＞＜18, 0, 0, 1＞
[F:\Rising\Rav\RSAPPMGR.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 2＞
[F:\Rising\Rav\CfgDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[F:\Rising\Rav\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[F:\Rising\Rav\RsLog.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 20＞
[F:\Rising\Rav\HOOKSYS.dll> ＜Rising＞＜18, 1, 0, 9＞
[F:\Rising\Rav\Scanner.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 30＞
[F:\Rising\Rav\libload.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[F:\Rising\Rav\VirusLib.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[F:\Rising\Rav\regmon.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 6＞
[F:\Rising\Rav\HookWeb.dll> ＜rising＞＜18, 0, 0, 1＞
[F:\Rising\Rav\MemMon.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 9＞
[F:\Rising\Rav\expscan.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[F:\Rising\Rav\mPorts.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 3＞
[F:\Rising\Rav\MailMon.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 5＞
[F:\Rising\Rav\SpamEng.dll> ＜N/A＞＜18, 0, 0, 6＞
[F:\Rising\Rav\engine.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 30＞
[F:\Rising\Rav\PostTrt.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 9＞
[F:\Rising\Rav\UnExe.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 11＞
[F:\Rising\Rav\ScanExec.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 11＞
[F:\Rising\Rav\ScanEx.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 11＞
[F:\Rising\Rav\NvFile.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 7＞
[F:\Rising\Rav\ScanMac.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 8＞
[F:\Rising\Rav\ScanSct.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 17＞
[F:\Rising\Rav\Unpacker.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 3＞
[PID: 1116>[f:\rising\rfw\rfwsrv.exe> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 32＞
[f:\rising\rfw\RfwRule.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 13＞
[f:\rising\rfw\rfwlog.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 6＞
[f:\rising\rfw\Rfwdrv.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 21＞
[f:\rising\rfw\MonDrv.dll> ＜rs＞＜1, 0, 0, 4＞
[f:\rising\rfw\ProcLib.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 9＞
[PID: 1296>[C:\WINDOWS\Explorer.EXE> ＜Microsoft Corporation＞＜6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\DOWNLO~1\cnshook.dll> ＜北京三七二一科技有限公司＞＜1, 0, 2, 4＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[PID: 1320>[C:\WINDOWS\system32\LEXBCES.EXE> ＜Lexmark International, Inc.＞＜7.4＞
[C:\WINDOWS\system32\lexp2p32.dll> ＜Lexmark International, Inc.＞＜7.4＞
[C:\WINDOWS\system32\lex2kusb.dll> ＜Lexmark International, Inc.＞＜7.4＞
[PID: 1368>[C:\WINDOWS\system32\LEXPPS.EXE> ＜Lexmark International, Inc.＞＜7.4＞
[C:\WINDOWS\system32\LEXBCE.DLL> ＜Lexmark International, Inc.＞＜7.4＞
[PID: 1424>[C:\WINDOWS\system32\spoolsv.exe> ＜Microsoft Corporation＞＜5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)＞
[C:\WINDOWS\system32\LEXLMPM.DLL> ＜Lexmark International, Inc.＞＜7.4＞
[C:\WINDOWS\system32\LexBce.dll> ＜Lexmark International, Inc.＞＜7.4＞
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LGAXPP5C.dll> ＜Lexmark International＞＜1.0.2.1＞
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll> ＜Windows (R) 2000 DDK provider＞＜5.00.2195.1620＞
[C:\WINDOWS\system32\LGAXpwr.dll> ＜Lexmark International, Inc.＞＜1, 0, 1, 0＞
[PID: 1472>[f:\rising\rfw\RfwMain.exe> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 51＞
[f:\rising\rfw\RsGuiLib.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 23＞
[f:\rising\rfw\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[f:\rising\rfw\PngDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 5＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[PID: 1608>[C:\Program Files\VeriSign\NAVI\naviagent.exe> ＜ VeriSign, Inc.＞＜1, 0, 0, 91＞
[C:\Program Files\VeriSign\NAVI\naviservice.dll> ＜VeriSign, Inc.＞＜2.0.0.9＞
[PID: 1664>[F:\Rising\Rav\RavStub.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 16＞
[F:\Rising\Rav\RsCommX.dll> ＜rising＞＜18, 0, 0, 1＞
[F:\Rising\Rav\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[PID: 1756>[C:\WINDOWS\System32\nvsvc32.exe> ＜NVIDIA Corporation＞＜6.13.10.2832＞
[PID: 1772>[C:\WINDOWS\system32\Rundll32.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[C:\WINDOWS\DOWNLO~1\CnsMinIO.dll> ＜北京三七二一科技有限公司＞＜1, 0, 3, 5＞
[C:\WINDOWS\DOWNLO~1\cnsio.dll> ＜北京三七二一科技有限公司＞＜1, 0, 2, 6＞
[PID: 1812>[C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe> ＜＞＜1, 0, 0, 1＞
[PID: 992>[F:\Rising\Rav\RavTask.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 22＞
[F:\Rising\Rav\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[F:\Rising\Rav\RSAPPMGR.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 2＞
[F:\Rising\Rav\CfgDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[F:\Rising\Rav\RsCommX.dll> ＜rising＞＜18, 0, 0, 1＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[PID: 692>[C:\Program Files\Common Files\Real\Update_OB\realsched.exe> ＜RealNetworks, Inc.＞＜0.1.0.3427＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[PID: 1088>[F:\Rising\Rav\Ravmon.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 1, 28＞
[F:\Rising\Rav\RsGuiLib.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 24＞
[F:\Rising\Rav\BWList.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 19＞
[F:\Rising\Rav\RSAPPMGR.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 2＞
[F:\Rising\Rav\CfgDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[F:\Rising\Rav\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[F:\Rising\Rav\RsCommX.dll> ＜rising＞＜18, 0, 0, 1＞
[F:\Rising\Rav\PngDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 5＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[PID: 1212>[C:\WINDOWS\System32\alg.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1236>[C:\WINDOWS\system32\ctfmon.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[PID: 3004>[C:\Program Files\Internet Explorer\iexplore.exe> ＜Microsoft Corporation＞＜6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[C:\WINDOWS\DOWNLO~1\CnsHint.dll> ＜3721＞＜1, 0, 0, 4＞
[C:\WINDOWS\DOWNLO~1\cnsplus.dll> ＜3721＞＜1, 0, 0, 2＞
[C:\WINDOWS\DOWNLO~1\cnshook.dll> ＜北京三七二一科技有限公司＞＜1, 0, 2, 4＞
[F:\Rising\Rav\RavScrCh.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 3＞
[PID: 3448>[D:\Program Files\TENCENT\QQTang\Client.exe> ＜深圳市腾讯计算机系统有限公司＞＜0, 10, 106, 8＞
[D:\Program Files\TENCENT\QQTang\boost_python.dll> ＜N/A＞＜N/A＞
[D:\Program Files\TENCENT\QQTang\python23.dll> ＜PythonLabs at Zope Corporation＞＜2.3.3＞
[D:\Program Files\TENCENT\QQTang\audiere.dll> ＜＞＜1.9.3＞
[D:\Program Files\TENCENT\QQTang\zlib1.dll> ＜N/A＞＜1.2.1＞
[D:\Program Files\TENCENT\QQTang\QQTHelp.dll> ＜深圳市腾讯计算机系统有限公司＞＜0, 10, 1, 1＞
[D:\Program Files\TENCENT\QQTang\Core.dll> ＜深圳市腾讯计算机系统有限公司＞＜0, 10, 106, 8＞
[D:\Program Files\TENCENT\QQTang\QQTTempDll.dll> ＜深圳市腾讯计算机系统有限公司＞＜0, 10, 1, 1＞
[D:\Program Files\TENCENT\QQTang\QQTStatistic.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\TENCENT\QQTang\QQTModules.dll> ＜深圳市腾讯计算机系统有限公司＞＜0, 10, 1, 1＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[D:\Program Files\TENCENT\QQTang\NetCenter.dll> ＜é？？úêDìú？？？？？？？ú？μí3óD？T1？？？＞＜0, 10, 1, 1＞
[D:\Program Files\TENCENT\QQTang\QQTDownloadCenter.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\TENCENT\QQTang\QQTEncoder.dll> ＜深圳市腾讯计算机系统有限公司＞＜0, 10, 1, 1＞
[D:\Program Files\TENCENT\QQTang\QQTDir.dll> ＜深圳市腾讯计算机系统有限公司＞＜0, 10, 1, 1＞
[D:\Program Files\TENCENT\QQTang\QQTPing.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\TENCENT\QQTang\displaySw.dll> ＜N/A＞＜N/A＞
[D:\Program Files\TENCENT\QQTang\gameUI.dll> ＜N/A＞＜N/A＞
[D:\Program Files\TENCENT\QQTang\QQTWebMgr.dll> ＜＞＜1, 0, 0, 1＞
[PID: 3652>[C:\Program Files\WinRAR\WinRAR.exe> ＜N/A＞＜N/A＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
[PID: 3760>[C:\DOCUME~1\结结\LOCALS~1\Temp\Rar$EX00.274\SREng2\SREng.exe> ＜Smallfrogs Studio＞＜2.0.21.505＞
[C:\WINDOWS\DOWNLO~1\CnsMin.dll> ＜北京三七二一科技有限公司＞＜1, 5, 2, 4＞
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1>
.EXE OK. [＂%1＂ %*>
.COM OK. [＂%1＂ %*>
.PIF OK. [＂%1＂ %*>
.REG OK. [regedit.exe ＂%1＂>
.BAT OK. [＂%1＂ %*>
.SCR OK. [＂%1＂ /S>
.CHM OK. [＂C:\WINDOWS\hh.exe＂ %1>
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1>
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1>
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1>
.VBS OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*>
.JS OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*>
.LNK OK. [{00021401-0000-0000-C000-000000000046}>
把启动自动加载的没用的都禁止,就可以了
我哪知道那些是启动自动加载的,哪些是没用
破QQ毛病还挺多的 |
|
设为首页
加入收藏
联系我们
打印本文 
返回顶部 
加入收藏 
关闭窗口
