ijackThis_815汉化版扫描日志 V1.99.1
保存于 0:17:57, 日期 2006-7-3
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
c:\program files\rising\rfw\RfwMain.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\Program Files\ChinaNet\VnetClient.exe
D:\Program Files\Tencent\QQ\TIMPlatform.exe
D:\Program Files\Tencent\QQ\QQ.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\liaozi\桌面\文件\HijackThis1991zww.exe
O3 - IE工具栏增项: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - C:\Documents and Settings\liaozi\桌面\文件\windows 流氓软件清理大师 V2[1>.3 免安装绿化版\MagicSet\haokanbar.dll
O4 - 启动项HKLM\\Run: [NvCplDaemon> RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz> nwiz.exe /install
O4 - 启动项HKLM\\Run: [NvMediaCenter> RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [SoundMan> SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [联想标准功能键盘 Ver1.0.0.4> C:\Program Files\联想\联想标准功能键盘\SkDaemond.exe
O4 - 启动项HKLM\\Run: [StateChange> C:\Program Files\lenovo\StateChange\QuakeII.exe
O4 - 启动项HKLM\\Run: [ATIPTA> ＂C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe＂
O4 - 启动项HKLM\\Run: [RavTask> ＂C:\Program Files\Rising\Rav\RavTask.exe＂ -system
O4 - 启动项HKLM\\Run: [RfwMain> ＂C:\Program Files\Rising\Rfw\rfwmain.exe＂ -Startup
O4 - 启动项HKLM\\Run: [NeroFilterCheck> C:\WINDOWS\system32\NeroCheck.exe
O4 - 启动项HKLM\\Run: [TkBellExe> ＂C:\Program Files\Common Files\Real\Update_OB\realsched.exe＂ -osboot
O4 - HKCU\..\Run: [ctfmon.exe> C:\WINDOWS\system32\ctfmon.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(＆X) - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm (file missing)
O9 - 浏览器额外的“工具”菜单项: Show ＆Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm (file missing)
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\Program Files\Tencent\QQ\QQIEHelper.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{E1075F21-44B8-4A40-B4F8-56B722173930}: NameServer = 202.96.128.86 202.96.134.133
O23 - NT 服务: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - NT 服务: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
2006-07-03,00:18:42
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (
Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run>
＜ctfmon.exe＞＜C:\WINDOWS\system32\ctfmon.exe＞ [Microsoft Corporation>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows>
＜load＞＜＞ [>
＜run＞＜＞ [>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
＜NvCplDaemon＞＜RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup＞ [NVIDIA Corporation>
＜nwiz＞＜nwiz.exe /install＞ [>
＜NvMediaCenter＞＜RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit＞ [NVIDIA Corporation>
＜SoundMan＞＜SOUNDMAN.EXE＞ [Realtek Semiconductor Corp.>
＜联想标准功能键盘 Ver1.0.0.4＞＜C:\Program Files\联想\联想标准功能键盘\SkDaemond.exe＞ [联想>
＜StateChange＞＜C:\Program Files\lenovo\StateChange\QuakeII.exe＞ [联想>
＜ATIPTA＞＜＂C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe＂＞ [ATI Technologies, Inc.>
＜RavTask＞＜＂C:\Program Files\Rising\Rav\RavTask.exe＂ -system＞ [Beijing Rising Technology Co., Ltd.>
＜RfwMain＞＜＂C:\Program Files\Rising\Rfw\rfwmain.exe＂ -Startup＞ [Beijing Rising Technology Co., Ltd.>
＜NeroFilterCheck＞＜C:\WINDOWS\system32\NeroCheck.exe＞ [Ahead Software Gmbh>
＜TkBellExe＞＜＂C:\Program Files\Common Files\Real\Update_OB\realsched.exe＂ -osboot＞ [RealNetworks, Inc.>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
＜shell＞＜Explorer.exe＞ [Microsoft Corporation>
＜Userinit＞＜C:\WINDOWS\system32\userinit.exe,＞ [Microsoft Corporation>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows>
＜AppInit_DLLs＞＜＞ [>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
＜UIHost＞＜logonui.exe＞ [Microsoft Corporation>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent>
＜WinlogonNotify: AtiExtEvent＞＜Ati2evxx.dll＞ [ATI Technologies Inc.>
==================================
启动文件夹
服务
[Adobe LM Service / Adobe LM Service>
＜＂C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe＂＞＜Adobe Systems＞
[Ati HotKey Poller / Ati HotKey Poller>
＜C:\WINDOWS\system32\Ati2evxx.exe＞＜ATI Technologies Inc.＞
[NVIDIA Display Driver Service / NVSvc>
＜C:\WINDOWS\system32\nvsvc32.exe＞＜NVIDIA Corporation＞
[Rising Proxy Service / RfwProxySrv>
＜c:\program files\rising\rfw\rfwproxy.exe＞＜Beijing Rising Technology Co., Ltd.＞
[Rising Personal Firewall Service / RfwService>
＜c:\program files\rising\rfw\rfwsrv.exe＞＜Beijing Rising Technology Co., Ltd.＞
[Rising Process Communication Center / RsCCenter>
＜＂C:\Program Files\Rising\Rav\CCenter.exe＂＞＜Beijing Rising Technology Co., Ltd.＞
[RsRavMon Service / RsRavMon>
＜＂C:\Program Files\Rising\Rav\Ravmond.exe＂＞＜Beijing Rising Technology Co., Ltd.＞
==================================
浏览器加载项
[@shdoclc.dll,-866>
{c95fe080-8f5d-11d2-a20b-00aa003c157a} ＜, N/A＞
[QQ>
{c95fe080-8f5d-11d2-a20b-00aa003c157b} ＜D:\Program Files\Tencent\QQ\QQ.EXE, TENCENT＞
[QQIEFloatBarCfgCmd Class>
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} ＜D:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司＞
[超级兔子上网精灵>
{43869BB3-22FD-4F15-9B46-238106BA2F4E} ＜C:\Documents and Settings\liaozi\桌面\文件\windows 流氓软件清理大师 V2[1>.3 免安装绿化版\MagicSet\haokanbar.dll, Xiang Feng Technology＞
[Shockwave Flash Object>
{D27CDB6E-AE6D-11CF-96B8-444553540000} ＜C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.＞
[Windows Media Player>
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} ＜C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation＞
[HTML Document>
{25336920-03F9-11CF-8FD0-00AA00686F13} ＜%SystemRoot%\system32\mshtml.dll, N/A＞
[超级兔子上网精灵>
{43869BB3-22FD-4F15-9B46-238106BA2F4E} ＜C:\Documents and Settings\liaozi\桌面\文件\windows 流氓软件清理大师 V2[1>.3 免安装绿化版\MagicSet\haokanbar.dll, Xiang Feng Technology＞
[>
{45A26E38-F931-4C6F-8106-FBB8534FB0AF} ＜C:\WINDOWS\trunk_16.dll, N/A＞
[VnetCookie Class>
{4E83D567-4697-4F7B-B1F0-A513B01DB89A} ＜c:\PROGRA~1\chinanet\VNETTR~1.DLL, N/A＞
[HHCtrl Object>
{52A2AAAE-085D-4187-97EA-8C30DB990436} ＜C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation＞
[QQBrowserHelperObject Class>
{54EBD53A-9BC1-480B-966A-843A333CA162} ＜D:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司＞
[Shell Name Space>
{55136805-B2DE-11D1-B9F2-00A0C98BC547} ＜%SystemRoot%\system32\shdocvw.dll, N/A＞
[Windows Media Player>
{6BF52A52-394A-11D3-B153-00C04F79FAA6} ＜C:\WINDOWS\system32\wmp.dll, Microsoft Corporation＞
[超级兔子上网精灵>
{7369D35A-5B70-4A5B-B789-B25FE09B4AF3} ＜C:\Documents and Settings\liaozi\桌面\文件\windows 流氓软件清理大师 V2[1>.3 免安装绿化版\MagicSet\haokanbar.dll, Xiang Feng Technology＞
[Microsoft Web 浏览器>
{8856F961-340A-11D0-A96B-00C04FD705A2} ＜C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation＞
[腾讯QQ>
{8A03D6E7-7FDA-4CE9-95D0-988790911BF0} ＜C:\WINDOWS\uact2.dll, N/A＞
[信息帮助>
{A753ED20-5836-4642-A71C-08AE83F21492} ＜C:\WINDOWS\webhelp1.dll, N/A＞
[Qzone Media Tools>
{A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} ＜D:\PROGRA~1\Tencent\QQ\QZone\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited＞
[Microsoft Scriptlet Component>
{AE24FDAE-03C6-11D1-8B76-0080C744F389} ＜C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation＞
[SearchAssistantOC>
{B45FF030-4447-11D2-85DE-00C04FA35C89} ＜%SystemRoot%\system32\shdocvw.dll, N/A＞
[AUDIO__WAV Moniker Class>
{CD3AFA7B-B84F-48F0-9393-7EDC34128127} ＜C:\WINDOWS\system32\wmp.dll, Microsoft Corporation＞
[RealPlayer G2 Control>
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} ＜C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.＞
[Shockwave Flash Object>
{D27CDB6E-AE6D-11CF-96B8-444553540000} ＜C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.＞
[上传到QQ网络硬盘>
＜D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A＞
[导出到 Microsoft Office Excel(＆X)>
＜res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A＞
[添加到QQ自定义面板>
＜D:\Program Files\Tencent\QQ\AddPanel.htm, N/A＞
[添加到QQ表情>
＜D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A＞
[用QQ彩信发送该图片>
＜D:\Program Files\Tencent\QQ\SendMMS.htm, N/A＞
==================================
正在运行的进程
[PID: 448>[\SystemRoot\System32\smss.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 580>[\？？\C:\WINDOWS\system32\csrss.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 612>[\？？\C:\WINDOWS\system32\winlogon.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\system32\Ati2evxx.dll> ＜ATI Technologies Inc.＞＜6.14.10.4118＞
[PID: 656>[C:\WINDOWS\system32\services.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\system32\icm32.dll> ＜Microsoft Corporation＞＜5.1.2600.2709 (xpsp_sp2_gdr.050628-1518)＞
[PID: 668>[C:\WINDOWS\system32\lsass.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 804>[C:\WINDOWS\system32\Ati2evxx.exe> ＜ATI Technologies Inc.＞＜6.14.10.4118＞
[C:\WINDOWS\system32\Ati2edxx.dll> ＜ATI Technologies, Inc.＞＜6, 14, 10, 2497＞
[PID: 844>[C:\WINDOWS\system32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 900>[C:\WINDOWS\system32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 944>[C:\Program Files\Rising\Rav\CCenter.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 3＞
[PID: 960>[C:\WINDOWS\System32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1016>[C:\WINDOWS\system32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1064>[C:\WINDOWS\system32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1076>[C:\Program Files\Rising\Rav\Ravmond.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 1, 26＞
[C:\Program Files\Rising\Rav\BWList.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 19＞
[C:\Program Files\Rising\Rav\RsCommX.dll> ＜rising＞＜18, 0, 0, 1＞
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 2＞
[C:\Program Files\Rising\Rav\CfgDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[C:\Program Files\Rising\Rav\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[C:\Program Files\Rising\Rav\RsLog.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 20＞
[C:\Program Files\Rising\Rav\HOOKSYS.dll> ＜Rising＞＜18, 1, 0, 9＞
[C:\Program Files\Rising\Rav\Scanner.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 30＞
[C:\Program Files\Rising\Rav\libload.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[C:\Program Files\Rising\Rav\VirusLib.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[C:\Program Files\Rising\Rav\regmon.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 6＞
rising＞＜18, 0, 0, 1＞
[C:\Program Files\Rising\Rav\MemMon.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 9＞
[C:\Program Files\Rising\Rav\expscan.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[C:\Program Files\Rising\Rav\mPorts.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 3＞
[C:\Program Files\Rising\Rav\MailMon.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 5＞
[C:\Program Files\Rising\Rav\SpamEng.dll> ＜N/A＞＜18, 0, 0, 6＞
[C:\Program Files\Rising\Rav\engine.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 30＞
[C:\Program Files\Rising\Rav\PostTrt.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 9＞
[C:\Program Files\Rising\Rav\UnExe.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 11＞
[C:\Program Files\Rising\Rav\ScanExec.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 11＞
[C:\Program Files\Rising\Rav\ScanEx.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 11＞
[C:\Program Files\Rising\Rav\NvFile.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 7＞
[C:\Program Files\Rising\Rav\ScanMac.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 8＞
[C:\Program Files\Rising\Rav\ScanSct.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 17＞
[C:\Program Files\Rising\Rav\Unpacker.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 3＞
[C:\Program Files\Rising\Rav\ExtFile.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 21＞
[C:\Program Files\Rising\Rav\ExtOLE.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 6＞
[C:\Program Files\Rising\Rav\ScanNet.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 5＞
[C:\Program Files\Rising\Rav\RsStore.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 2＞
[C:\Program Files\Rising\Rav\ScanElf.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 3＞
[C:\Program Files\Rising\Rav\ExtMail.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 13＞
[PID: 1168>[c:\program files\rising\rfw\rfwsrv.exe> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 32＞
[c:\program files\rising\rfw\RfwRule.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 13＞
[c:\program files\rising\rfw\rfwlog.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 6＞
[c:\program files\rising\rfw\Rfwdrv.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 21＞
[c:\program files\rising\rfw\MonDrv.dll> ＜rs＞＜1, 0, 0, 4＞
[c:\program files\rising\rfw\ProcLib.dll> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 9＞
[PID: 1352>[C:\WINDOWS\system32\spoolsv.exe> ＜Microsoft Corporation＞＜5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)＞
[PID: 2000>[C:\WINDOWS\System32\alg.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 3720>[C:\WINDOWS\system32\svchost.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 3088>[C:\WINDOWS\system32\Ati2evxx.exe> ＜ATI Technologies Inc.＞＜6.14.10.4118＞
[C:\WINDOWS\system32\Ati2edxx.dll> ＜ATI Technologies, Inc.＞＜6, 14, 10, 2497＞
[PID: 2668>[C:\WINDOWS\Explorer.EXE> ＜Microsoft Corporation＞＜6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)＞
[C:\WINDOWS\system32\nvcpl.dll> ＜NVIDIA Corporation＞＜6.14.10.7184＞
[C:\Program Files\WinRAR\rarext.dll> ＜N/A＞＜N/A＞
[C:\WINDOWS\system32\RavExt.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 21＞
[C:\Program Files\Rising\Rav\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[E:\金山游侠\Tools\KVD\kscdrush.dll> ＜金山软件股份有限公司＞＜5, 0, 0, 0＞
[C:\WINDOWS\system32\msdmo.dll> ＜N/A＞＜N/A＞
[PID: 2264>[c:\program files\rising\rfw\RfwMain.exe> ＜Beijing Rising Technology Co., Ltd.＞＜4, 0, 0, 51＞
[c:\program files\rising\rfw\RsGuiLib.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 23＞
[c:\program files\rising\rfw\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[c:\program files\rising\rfw\PngDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 5＞
[PID: 3020>[C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe> ＜ATI Technologies, Inc.＞＜6.14.10.5160＞
[C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll> ＜ATI Technologies, Inc.＞＜6.14.10.5160＞
[C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.CHS> ＜ATI Technologies, Inc.＞＜6.14.10.5160＞
[C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll> ＜ATI Technologies, Inc.＞＜6.14.10.5160＞
[PID: 2348>[C:\Program Files\Rising\Rav\RavTask.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 22＞
[C:\Program Files\Rising\Rav\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 2＞
[C:\Program Files\Rising\Rav\CfgDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[C:\Program Files\Rising\Rav\RsCommX.dll> ＜rising＞＜18, 0, 0, 1＞
[PID: 3892>[C:\Program Files\Common Files\Real\Update_OB\realsched.exe> ＜RealNetworks, Inc.＞＜0.1.0.3510＞
[PID: 3256>[C:\WINDOWS\system32\ctfmon.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 2812>[C:\Program Files\Rising\Rav\Ravmon.exe> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 1, 28＞
[C:\Program Files\Rising\Rav\RsGuiLib.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 24＞
[C:\Program Files\Rising\Rav\BWList.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 19＞
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 2＞
[C:\Program Files\Rising\Rav\CfgDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 10＞
[C:\Program Files\Rising\Rav\RSCOMMON.DLL> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 4＞
[C:\Program Files\Rising\Rav\RsCommX.dll> ＜rising＞＜18, 0, 0, 1＞
[C:\Program Files\Rising\Rav\PngDll.dll> ＜Beijing Rising Technology Co., Ltd.＞＜18, 0, 0, 5＞
[PID: 2684>[C:\Program Files\ChinaNet\VnetClient.exe> ＜＞＜2006, 4, 27, 1＞
[C:\Program Files\ChinaNet\Communicate.dll> ＜GDCN＞＜2006, 2, 15, 1＞
[C:\Program Files\ChinaNet\DialModule.dll> ＜GDCN＞＜2006, 3, 8, 18＞
[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL> ＜＞＜2004, 2, 28, 1＞
[C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX> ＜＞＜2006, 6, 2, 14＞
[C:\PROGRA~1\ChinaNet\sign.dll> ＜0＞＜2004, 12, 1, 1＞
[C:\PROGRA~1\ChinaNet\SETUPP~1.DLL> ＜＞＜1, 0, 0, 1＞
[C:\PROGRA~1\ChinaNet\WEBPLU~1.DLL> ＜＞＜2005, 8, 18, 1＞
[C:\PROGRA~1\ChinaNet\ADVERT~1.OCX> ＜＞＜2005, 10, 13, 1＞
[C:\PROGRA~1\ChinaNet\VnetBs.ocx> ＜＞＜2004, 11, 18, 1＞
[C:\PROGRA~1\ChinaNet\ACCOUN~2.DLL> ＜＞＜2006, 6, 2, 14＞
[C:\PROGRA~1\ChinaNet\AccountMgr.dll> ＜＞＜2006, 5, 26, 11＞
[C:\PROGRA~1\ChinaNet\VnetSkin.ocx> ＜GDDC＞＜2005, 12, 21, 1＞
[C:\PROGRA~1\ChinaNet\DialogStyle.dll> ＜＞＜1, 0, 0, 1＞
[C:\PROGRA~1\ChinaNet\BDSearch.ocx> ＜gdcn＞＜2005, 12, 22, 1＞
[C:\PROGRA~1\ChinaNet\Timer.ocx> ＜＞＜2006, 5, 26, 16＞
[C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX> ＜＞＜2006, 4, 4, 1＞
[C:\PROGRA~1\ChinaNet\NEWMES~1.DLL> ＜＞＜2006, 5, 26, 16＞
[C:\PROGRA~1\ChinaNet\PassCtrl.dll> ＜GDCN＞＜2006, 3, 1, 16＞
[C:\WINDOWS\system32\wpcap.dll> ＜Politecnico di Torino＞＜3, 0, 0, 18＞
[C:\WINDOWS\system32\pthreadVC.dll> ＜N/A＞＜N/A＞
[C:\WINDOWS\system32\packet.dll> ＜Politecnico di Torino＞＜3, 0, 0, 18＞
[C:\PROGRA~1\ChinaNet\PlugPush.dll> ＜＞＜2004, 12, 21, 1＞
[C:\PROGRA~1\ChinaNet\ALLINT~1.DLL> ＜＞＜2006, 6, 8, 15＞
[C:\PROGRA~1\ChinaNet\VNETLO~1.OCX> ＜＞＜2005, 10, 9, 1＞
[C:\PROGRA~1\ChinaNet\StatNum.dll> ＜＞＜2006, 3, 1, 1＞
[C:\PROGRA~1\ChinaNet\VNETON~1.OCX> ＜＞＜2005, 3, 2, 1＞
[C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL> ＜GDCN＞＜2006, 6, 12, 9＞
[C:\PROGRA~1\ChinaNet\VnetOptLog.dll> ＜ ＞＜2006, 5, 10, 14＞
[C:\PROGRA~1\ChinaNet\Favorite.ocx> ＜＞＜1, 0, 0, 1＞
[C:\PROGRA~1\ChinaNet\DlgSkin.ocx> ＜＞＜2005, 11, 14, 1＞
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx> ＜Macromedia, Inc.＞＜8,0,24,0＞
[PID: 3056>[D:\Program Files\Tencent\QQ\TIMPlatform.exe> ＜tencent＞＜0, 3, 1, 8＞
[D:\Program Files\Tencent\QQ\TIMProxy.dll> ＜tencent＞＜0, 3, 2, 4＞
[PID: 2992>[D:\Program Files\Tencent\QQ\QQ.exe> ＜TENCENT＞＜0, 0, 0, 0＞
[D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\QQHelperDll.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\BasicCtrlDll.dll> ＜Tencent＞＜5, 0, 200, 160＞
[D:\Program Files\Tencent\QQ\QQAPI.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\TIMProxy.dll> ＜tencent＞＜0, 3, 2, 4＞
[D:\Program Files\Tencent\QQ\LoginCtrl.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\npkcntc.dll> ＜INCA Internet Co., Ltd.＞＜2006, 3, 2, 1＞
[D:\Program Files\Tencent\QQ\npkpdb.dll> ＜INCA Internet Co., Ltd.＞＜2003, 10, 1, 1＞
[D:\Program Files\Tencent\QQ\QQRes.dll> ＜tencent＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\QQMainFrame.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\CQQApplication.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\NewSkin.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\HostingMgr.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\CameraDll.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\MailSummary.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\QQSpace.dll> ＜＞＜1, 0, 0, 1＞
[C:\WINDOWS\system32\msdmo.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\QQGroupMng.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\GroupLive.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\QQSysMsgMng.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\QQAllInOne.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\SCCore.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\QQCustomFace.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\UserDefinedHead.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\QQPlugin.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\QQConfigPlugin.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\QRingMng.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\PhoneAPI.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\DialerAllinOne.dll> ＜tencent＞＜1, 4, 0, 0＞
[D:\Program Files\Tencent\QQ\QQPet.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\QQAddr.dll> ＜深圳市腾讯计算机系统有限公司＞＜5, 0, 101, 200＞
[D:\Program Files\Tencent\QQ\QQAvatar.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\FlashAvatarDll.dll> ＜＞＜1, 4, 0, 1＞
[D:\Program Files\Tencent\QQ\LongConnection.dll> ＜tencent＞＜5, 0, 200, 160＞
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx> ＜Macromedia, Inc.＞＜8,0,24,0＞
[D:\Program Files\Tencent\QQ\QQSceneMng.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\BQQApplication.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\CommercesMng.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\PersonalDesktop.dll> ＜深圳市腾讯计算机系统公司QQ工作小组＞＜1, 0, 0, 2＞
[D:\Program Files\Tencent\QQ\QQPhoneHelper.dll> ＜腾讯科技（深圳）有限公司＞＜2, 0, 1, 10＞
[D:\Program Files\Tencent\QQ\ImageOle.dll> ＜TODO: ＜Company name＞＞＜1.0.0.1＞
[D:\Program Files\Tencent\QQ\GroupConnection.dll> ＜Tencent＞＜5, 0, 202, 170＞
[D:\Program Files\Tencent\QQ\QQMMSender.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\QQZip.dll> ＜tencent＞＜0, 3, 2, 4＞
[D:\Program Files\Tencent\QQ\QQMagicFace.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\QQFileTransfer.dll> ＜Tencent＞＜5, 0, 202, 180＞
[D:\Program Files\Tencent\QQ\QQSettingCtrl.dll> ＜＞＜1, 0, 0, 1＞
[D:\Program Files\Tencent\QQ\ShareFiles.dll> ＜N/A＞＜N/A＞
[D:\Program Files\Tencent\QQ\QQMsgFriendMng.dll> ＜N/A＞＜N/A＞
[PID: 200>[C:\WINDOWS\system32\conime.exe> ＜Microsoft Corporation＞＜5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 2852>[C:\Program Files\Internet Explorer\iexplore.exe> ＜Microsoft Corporation＞＜6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)＞
[PID: 1204>[C:\Documents and Settings\liaozi\桌面\文件\System Repair Engineer 2[1>.0.12.350 RC1版\SREng.exe> ＜Smallfrogs Studio＞＜2.0.21.505＞
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1>
.EXE OK. [＂%1＂ %*>
.COM OK. [＂%1＂ %*>
.PIF OK. [＂%1＂ %*>
.REG OK. [regedit.exe ＂%1＂>
.BAT OK. [＂%1＂ %*>
.SCR OK. [＂%1＂ /S>
.CHM OK. [＂C:\WINDOWS\hh.exe＂ %1>
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1>
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1>
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1>
.VBS OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*>
.JS OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*>
.LNK OK. [{00021401-0000-0000-C000-000000000046}>
==================================
Winsock 提供者
==================================
请说明什么系统文件坏了，最好抓个图。。。
这种情况应该先抓个图说明情况，并不是扫描贴日志！
related
这个!!麻烦您了! |
|
设为首页
加入收藏
联系我们
打印本文 
返回顶部 
加入收藏 
关闭窗口
