收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 原创工具区 › 今天刚刚会用SRE·扫了一下，貌似有问题，是不中毒了么 ...
12下一页
返回列表 发新帖
查看: 3313|回复: 11
收起左侧

今天刚刚会用SRE·扫了一下，貌似有问题，是不中毒了么？

[复制链接]
marliy
发表于 2007-4-5 21:04:04 | 显示全部楼层 |阅读模式


ssseeerrr.jpg
======
回复

举报

marliy
 楼主| 发表于 2007-4-5 21:04:44 | 显示全部楼层
下面的是日志：


  3. 2007-04-05,15:19:01

  5. System Repair Engineer 2.4.12.806
  6. Smallfrogs ([url]http://www.KZTechs.com[/url])

  8. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

  10. 以下内容被选中：
  11.     所有的启动项目（包括注册表、启动文件夹、服务等）
  12.     浏览器加载项
  13.     正在运行的进程（包括进程模块信息）
  14.     文件关联
  15.     Winsock 提供者
  16.     Autorun.inf
  17.     HOSTS 文件


  20. 启动项目
  21. 注册表
  22. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  23.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  24. [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  25.     <load><>  [N/A]
  26.     <run><>  [N/A]
  27. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  28.     <Zone Labs Client><C:\Program Files\CA\eTrust Internet Security Suite\eTrust Personal Firewall\ca.exe>  [(Verified)Check Point Software Technologies Inc.]
  29.     <AVP><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe">  [Kaspersky Lab]
  30.     <Vistadrv><C:\Program Files\Vista\systool\Vistadrive\vsdrv.exe>  []
  31.     <360Safetray><D:\精品优化系统软件\360safe_3.0b3\360safe_3.0b3\safemon\360Tray.exe /start>  [奇虎网]
  32. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  33.     <shell><Explorer.exe>  [(Verified)]
  34.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  35. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  36.     <AppInit_DLLs><>  [N/A]
  37. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  38.     <UIHost><"\Program Files\Logonui\Logonui.exe">  [N/A]
  39. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
  40.     <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll>  [Kaspersky Lab]
  41. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
  42.     <IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Windows]

  44. ==================================
  45. 启动文件夹
  46. N/A

  48. ==================================
  49. 服务
  50. [ASP.NET State Service / aspnet_state][Stopped/Manual Start]
  51.   <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
  52. [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
  53.   <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
  54. [ATI Smart / ATI Smart][Stopped/Auto Start]
  55.   <C:\WINDOWS\system32\ati2sgag.exe><>
  56. [卡巴斯基反病毒6.0 / AVP][Running/Auto Start]
  57.   <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab>
  58. [Human Interface Device Access / HidServ][Stopped/Disabled]
  59.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  60. [TrueVector Internet Monitor / vsmon][Running/Auto Start]
  61.   <C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service><Zone Labs, LLC>

  63. ==================================
  64. 驱动程序
  65. [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  66.   <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
  67. [ati2mtag / ati2mtag][Running/Manual Start]
  68.   <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
  69. [HelloNet PPPoE 虚拟网卡 / BRPPPOE][Running/Manual Start]
  70.   <system32\DRIVERS\brpppoe.sys><N/A>
  71. [713x_Genius TV Card Capture / Cap7134][Running/Manual Start]
  72.   <system32\DRIVERS\Cap7134.sys><Philips Semiconductors>
  73. [DSDrv4 / DSDrv4][Stopped/Manual Start]
  74.   <\??\c:\PROGRA~1\DScaler\DSDrv4.sys><>
  75. [kl1 / kl1][Running/Boot Start]
  76.   <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
  77. [klif / klif][Running/System Start]
  78.   <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
  79. [nvatabus / nvatabus][Running/Boot Start]
  80.   <\SystemRoot\system32\DRIVERS\nvatabus.sys><NVIDIA Corporation>
  81. [NVIDIA Disk Cache Filter Driver / nvcchflt][Running/Boot Start]
  82.   <\SystemRoot\system32\DRIVERS\nvcchflt.sys><NVIDIA Corporation>
  83. [NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
  84.   <system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
  85. [NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
  86.   <system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
  87. [Philips WDM TVTuner (FM1216ME) / PhTVTune][Running/Manual Start]
  88.   <system32\DRIVERS\PhTVTune.sys><Philips Semiconductors>
  89. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  90.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  91. [Secdrv / Secdrv][Stopped/Manual Start]
  92.   <system32\DRIVERS\secdrv.sys><N/A>
  93. [TSP / TSP][Stopped/Manual Start]
  94.   <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
  95. [vsdatant / vsdatant][Running/System Start]
  96.   <System32\vsdatant.sys><Zone Labs, LLC>
  97. [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  98.   <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>

  100. ==================================
  101. 浏览器加载项
  102. [超级兔子上网精灵]
  103.   {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\Program Files\MagicSet\haokanbar.dll, Xiang Feng Technology>
  104. [NavigatMon Class]
  105.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\精品优化系统软件\360safe_3.0b3\360safe_3.0b3\safemon\safemon.dll, N/A>
  106. [IE7pro ToolsExt]
  107.   {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} <, N/A>
  108. [Web反病]
  109.   {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
  110. [超级兔子上网精灵]
  111.   {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\Program Files\MagicSet\haokanbar.dll, Xiang Feng Technology>
  112. [WUWebControl Class]
  113.   {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
  114. [IE7pro BHO]
  115.   {00011268-E188-40DF-A514-835FCD78B1BF} <, N/A>
  116. [超级兔子上网精灵]
  117.   {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\Program Files\MagicSet\haokanbar.dll, Xiang Feng Technology>
  118. [Shell Name Space]
  119.   {55136805-B2DE-11D1-B9F2-00A0C98BC547} <C:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
  120. [WUWebControl Class]
  121.   {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
  122. [超级兔子上网精灵]
  123.   {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <D:\Program Files\MagicSet\haokanbar.dll, Xiang Feng Technology>
  124. [NavigatMon Class]
  125.   {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\精品优化系统软件\360safe_3.0b3\360safe_3.0b3\safemon\safemon.dll, N/A>
  126. [Shockwave Flash Object]
  127.   {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
  128. [XML HTTP Request]
  129.   {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A>
  130. [使用迅雷下载]
  131.   <D:\Program Files\Thunder\Program\geturl.htm, N/A>
  132. [使用迅雷下载全部链接]
  133.   <D:\Program Files\Thunder\Program\getallurl.htm, N/A>
  134. [用比特精灵下载(&B)]
  135.   <D:\BitSpirit_3.2.2.160\BitSpirit\bsurl.htm, N/A>

  137. ==================================
  138. 正在运行的进程
  139. [PID: 712][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  140. [PID: 816][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  141. [PID: 932][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  142.     [C:\WINDOWS\system32\Ati2evxx.dll]  [ATI Technologies Inc., 6.14.10.4116]
  143.     [C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 6.0.1.411]
  144.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  145. [PID: 1056][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  146. [PID: 1084][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  147. [PID: 1272][C:\WINDOWS\system32\Ati2evxx.exe]  [ATI Technologies Inc., 6.14.10.4116]
  148.     [C:\WINDOWS\system32\Ati2edxx.dll]  [ATI Technologies, Inc., 6, 14, 10, 2497]
  149. [PID: 1312][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  150. [PID: 1392][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  151. [PID: 1476][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  152.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  153.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  154. [PID: 1988][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  155.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  156.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  157.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 1.0.6.411]
  158.     [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  159.     [c:\windows\ContextBG.dll]  [Grigri, 1, 0, 0, 1]
  160.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  161.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
  162.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\ShellEx.dll]  [Kaspersky Lab, 6.0.1.411]
  163.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prremote.dll]  [Kaspersky Lab, 6.0.1.411]
  164.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.1.411]
  165.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 3, 0]
  166. [PID: 552][D:\精品优化系统软件\360safe_3.0b3\360safe_3.0b3\safemon\360Tray.exe]  [奇虎网, 3, 2, 1, 1001]
  167.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  168.     [D:\精品优化系统软件\360safe_3.0b3\360safe_3.0b3\safemon\SafeKrnl.dll]  [奇虎网, 3, 2, 0, 1001]
  169.     [D:\精品优化系统软件\360safe_3.0b3\360safe_3.0b3\AntiAdwa.dll]  [360Safe.com, 3, 2, 0, 1001]
  170.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  171.     [D:\精品优化系统软件\360safe_3.0b3\360safe_3.0b3\live.dll]  [360safe.COM, 1, 0, 0, 1011]
  172. [PID: 564][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  173. [PID: 492][C:\Program Files\ADSL拨号王\HNMainUI.exe]  [, 2, 3, 0, 1]
  174.     [C:\Program Files\ADSL拨号王\HNKernel.dll]  [HelloNet, 2.2.0.1]
  175.     [C:\Program Files\ADSL拨号王\HNUtils.dll]  [, 2, 2, 0, 1]
  176.     [C:\Program Files\ADSL拨号王\HNRes_0804.dll]  [, 2, 2, 0, 1]
  177.     [C:\Program Files\ADSL拨号王\plugins\Diagnose.dll]  [HelloNet, 2.2.0.1]
  178. [PID: 736][C:\WINDOWS\explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  179.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  180.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  181.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 1.0.6.411]
  182.     [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  183.     [c:\windows\ContextBG.dll]  [Grigri, 1, 0, 0, 1]
  184.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\ShellEx.dll]  [Kaspersky Lab, 6.0.1.411]
  185.     [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
  186. [PID: 348][D:\Program Files\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5, 5, 4, 268]
  187.     [D:\Program Files\Thunder\Program\msgmanage.dll]  [, 1, 0, 0, 1]
  188.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  189.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  190.     [D:\Program Files\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
  191.     [D:\Program Files\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 44]
  192.     [D:\Program Files\Thunder\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 12, 2, 44]
  193.     [D:\Program Files\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
  194.     [D:\Program Files\Thunder\Program\FloatBar.dll]  [Giganology Inc., 1, 0, 0, 2]
  195.     [D:\Program Files\Thunder\Program\iTargetAD.dll]  [N/A, ]
  196.     [D:\Program Files\Thunder\Components\DiagnoseHelper\DiagnoseHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
  197.     [D:\Program Files\Thunder\Components\PortVerify\PortVerify.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
  198.     [D:\Program Files\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
  199.     [D:\Program Files\Thunder\Components\DTAG\DTAG.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
  200.     [D:\Program Files\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 0, 3, 14]
  201.     [D:\Program Files\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
  202.     [D:\Program Files\Thunder\Components\VPSHELL\VPSHELL.dll]  [, 1, 0, 0, 1]
  203.     [D:\Program Files\Thunder\Components\VPSHELL\VideoPicture.dll]  [XunLei, 1, 0, 0, 1]
  204.     [D:\Program Files\Thunder\Plugins\TingTing\TingTing.dll]  [Thunder Networking Technologies,LTD, 1, 1, 1, 12]
  205.     [D:\Program Files\Thunder\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
  206.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 3, 0]
  207. [PID: 2620][D:\Program Files\GreenBrowser380112_DIY\GreenBrowser\GreenBrowser.ExE]  [MoreQuick, 1, 0, 0, 0]
  208.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  209.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  210.     [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  211.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 1.0.6.411]
  212.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.1.411]
  213.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prremote.dll]  [Kaspersky Lab, 6.0.1.411]
  214.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.1.411]
  215.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.1.411]
  216.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.1.411]
  217.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.1.411]
  218.     [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.1.411]
  219.     [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
  220.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  221.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 3, 0]
  222. [PID: 2892][D:\System Repair Engineer\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
  223.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  224.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
  225.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 3, 0]
  226. [PID: 3832][D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\HprSnap6.exe]  [Hyperionics Technology LLC, 6, 11, 2, 0]
  227.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LTFIL10N.DLL]  [LEAD Technologies, Inc., 10.0.0.024]
  228.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LTKRN10N.dll]  [LEAD Technologies, Inc., 10.0.0.024]
  229.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LTIMG10N.dll]  [LEAD Technologies, Inc., 10.0.0.018]
  230.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LTDIS10N.dll]  [LEAD Technologies, Inc., 10.0.0.024]
  231.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LTTWN10N.dll]  [LEAD Technologies, Inc., 10.0.0.024]
  232.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LTDLG10N.dll]  [LEAD Technologies, Inc., 10.0.0.024]
  233.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LTEFX10N.dll]  [LEAD Technologies, Inc., 10.0.0.018]
  234.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\HprRes6.dll]  [Hyperionics Technology LLC, 6, 10, 1, 0]
  235.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\HSTxtCap.dll]  [Hyperionics Technology LLC, 1, 0, 3, 0]
  236.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  237.     [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll]  [Kaspersky Lab, 1.0.6.411]
  238.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LFFAX10N.DLL]  [LEAD Technologies, Inc., 10.0.0.018]
  239.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LFCMP10N.DLL]  [LEAD Technologies, Inc., 10.0.0.024]
  240.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LFTIF10N.DLL]  [LEAD Technologies, Inc., 10.0.0.022]
  241.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LFLMB10N.DLL]  [LEAD Technologies, Inc., 10.0.0.011]
  242.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LFBMP10N.DLL]  [LEAD Technologies, Inc., 10.0.0.013]
  243.     [D:\Program Files\专业级屏幕抓图工具、可支持游戏和视频\LFPCX10N.DLL]  [LEAD Technologies, Inc., 10.0.0.009]
  244.     [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
  245.     [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]

  247. ==================================
  248. 文件关联
  249. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  250. .EXE  OK. ["%1" %*]
  251. .COM  OK. ["%1" %*]
  252. .PIF  OK. ["%1" %*]
  253. .REG  OK. [regedit.exe "%1"]
  254. .BAT  OK. ["%1" %*]
  255. .SCR  OK. ["%1" /S]
  256. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  257. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  258. .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  259. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  260. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  261. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  262. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]

  264. ==================================
  265. Winsock 提供者
  266. N/A

  268. ==================================
  269. Autorun.inf
  270. N/A

  272. ==================================
  273. HOSTS 文件
  274. 127.0.0.1       localhost

  276. ==================================
  277. API HOOK
  278. RVA  错误： LoadLibraryA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xAAE1BB25)
  279. RVA  错误： LoadLibraryExA (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xAAE1BD67)
  280. RVA  错误： LoadLibraryExW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xAAE1BF0B)
  281. RVA  错误： LoadLibraryW (危险等级: 一般,  被下面模块所HOOK: Dest Addr: 0xAAE1BC49)
  282. RVA  错误： GetProcAddress (危险等级: 高,  被下面模块所HOOK: Dest Addr: 0xAAE1BE8F)

  284. ==================================
  285. 隐藏进程
  286. N/A

  288. ==================================


复制代码
回复

举报

marliy
 楼主| 发表于 2007-4-5 21:05:05 | 显示全部楼层
各位大大帮忙看一下吧？？？
回复

举报

neu21
发表于 2007-4-5 21:32:35 | 显示全部楼层
是卡巴的启动画面
没有问题
回复

举报

wangjay1980
发表于 2007-4-5 21:51:05 | 显示全部楼层
<UIHost><"\Program Files\Logonui\Logonui.exe">  [N/A]
把这个修改为 <UIHost><Logonui.exe>
回复

举报

lynnken
发表于 2007-4-5 21:58:40 | 显示全部楼层
原帖由 wangjay1980 于 2007-4-5 21:51 发表
  [N/A]
把这个修改为  

这样修改，我也试过
但是，重启时WINDOWS会出现一个'BOOT.in'非法的提示画面
倒是可以正常启动
不知道是怎么回事？
会不会是系统优化软件把什么地方改的不能完全恢复了
回复

举报

wangjay1980
发表于 2007-4-5 23:09:37 | 显示全部楼层
你是不是用什么软件修改了启动画面
回复

举报

wangjay1980
发表于 2007-4-5 23:15:12 | 显示全部楼层
用SRE查看你的BOOT.ini，是不是正常的内容
回复

举报

marliy
 楼主| 发表于 2007-4-6 01:33:55 | 显示全部楼层
原帖由 wangjay1980 于 2007-4-5 23:09 发表
你是不是用什么软件修改了启动画面

我的确是把原来系统的启动画面给换了··怎么， 是这个的原因么？
回复

举报

wangjay1980
发表于 2007-4-6 08:39:53 | 显示全部楼层
那就正常了，你还是用这个吧<UIHost><"\Program Files\Logonui\Logonui.exe">  [N/A]这个就是你修改后造成的
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-12-23 03:54 , Processed in 0.127465 second(s), 20 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表