中了exe感染类型病毒求帮忙

显示全部楼层 · 发表于 2010-8-30 12:51:43

中了exe感染类型病毒恢复了C盘还有有病毒。恢复前C盘会有%%的文件夹提示病毒。恢复后杀毒软件还是一直提示exe文件有病毒。不知道是中了什么冰毒怎么样才能查到呀。怎么处理呀谁帮帮忙

显示全部楼层 · 发表于 2010-8-30 13:45:58

没有人帮忙吗

显示全部楼层 · 发表于 2010-8-30 14:58:24

不是不帮，我帮不上啊

因为我一般上金山急救箱，搞不定就重装

显示全部楼层 · 发表于 2010-8-30 16:55:03

。......郁闷啊不想从装很多东西

显示全部楼层 · 发表于 2010-8-30 17:01:23

不是不帮你，而是你的问题描述对于解决问题几乎没什么用。最起码也要上点详细信息吧？
话说“恢复前C盘会有%%的文件夹提示病毒。恢复后杀毒软件还是一直提示exe文件有病毒” 是什么意思？建议描述不清除直接上图。

显示全部楼层 · 发表于 2010-8-30 17:14:37

如果中了感染型病毒,我建议是把病毒上报,然后等取杀软进行查杀
而不是自己尝试去恢复.个人用户恢复被感染的数据很难.

我以前中了感染型病毒,上报dr.web,等了接近48小时就可以清理病毒了.
推荐上报dr.web,毕竟有清毒功能,其他杀软,遇到感染型病毒都是直接删除.

显示全部楼层 · 发表于 2010-8-30 17:34:08

图

显示全部楼层 · 发表于 2010-8-30 17:34:34

[CODE]

2010-08-30,17:26:55

System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
计划任务
Windows 安全更新检查
API HOOK
隐藏进程

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<360sd><"D:\360sd\360sdrun.exe">  [(Verified)Qizhi Software (beijing) Co. Ltd]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<360Safebox><"D:\360Safebox\SafeBoxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
<360Safetray><"D:\360safe\safemon\360Tray.exe" /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
<IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [File is missing]
<PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [File is missing]
<PHIME2002ASync><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [File is missing]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
<WebCheck><C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Windows Component Publisher]
<SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Component Publisher]
<UPnPMonitor><C:\WINDOWS\system32\upnpui.dll>  [(Verified)Microsoft Windows Component Publisher]
<WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
<WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
<Browser Customizations><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -BaseSettings>  [(Verified)Microsoft Windows Component Publisher]

显示全部楼层 · 发表于 2010-8-30 17:35:04

==================================
启动文件夹
N/A

==================================
服务
[360 杀毒实时防护服务 / 360rp][Running/Auto Start]
  <"D:\360sd\360rp.exe"><360.cn>
[Help and Support / helpsvc][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Disabled]
  <><(File is missing)>
[360 杀毒全盘扫描辅助服务 / scan][Stopped/Manual Start]
  <C:\WINDOWS\System32\svchost.exe -k bdx-->D:\360sd\Scan.dll><S.C. BitDefender S.R.L>
[主动防御 / ZhuDongFangYu][Running/Auto Start]
  <"d:\360safe\deepscan\zhudongfangyu.exe"><360.cn>
[Kingsoft Rescue Service / Kingsoft Rescue Service][Running/Auto Start]
  <d:\kingsoft\KSM\ksmsvc.exe><>

==================================
驱动程序
[360netmon / 360netmon][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\360netmon.sys><360.cn>
[360SelfProtection / 360SelfProtection][Running/System Start]
  <system32\drivers\360SelfProtection.sys><360安全中心>
[Lenovo Virtual Power Controller Driver / ACPIVPC][Running/Manual Start]
  <system32\DRIVERS\AcpiVpc.sys><Lenovo Corporation>
[Ambfilt / Ambfilt][Stopped/Manual Start]
  <system32\drivers\Ambfilt.sys><Creative>
[AMD AGP Bus Filter Driver / amdagp][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\amdagp.sys><Advanced Micro Devices, Inc.>
[AmdK8 Compatible Device / AmdK8][Stopped/Manual Start]
  <System32\drivers\amdk8.sys><Advanced Micro Devices>
[Broadcom NetXtreme Gigabit Ethernet / b57w2k][Running/Manual Start]
  <system32\DRIVERS\b57xp32.sys><Broadcom Corporation>
[BAPIDRV / BAPIDRV][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\BAPIDRV.SYS><360.cn>
[bdfsfltr / bdfsfltr][Running/System Start]
  <system32\DRIVERS\bdfsfltr.sys><BitDefender S.R.L. Bucharest, ROMANIA>
[bootsafe / bootsafe][Running/Boot Start]
  <\SystemRoot\system32\Drivers\bootsafe.sys><>
[Dritek Keyboard Filter Driver / DKbFltr][Running/Manual Start]
  <system32\DRIVERS\DKbFltr.sys><Dritek System Inc.>
[Dritek General Port I/O / DritekPortIO][Running/Auto Start]
  <\??\C:\PROGRA~1\EzButton\DPortIO.sys><Dritek System Inc.>
[EfiSystemMon / EfiMon][Running/System Start]
  <System32\Drivers\Efimon.sys><奇虎网>
[ELAN PS/2 Port Input Device / ETD][Running/Manual Start]
  <system32\DRIVERS\ETD.sys><ELAN Microelectronics Corp.>
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HookPort / HookPort][Running/Boot Start]
  <\SystemRoot\System32\Drivers\Hookport.sys><360安全中心>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[KAVBootC / KAVBootC][Running/Boot Start]
  <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
[KAVSafe / KAVSafe][Running/]
  <2 - 系统找不到指定的文件。
><N/A>
[krpr / krpr][Stopped/Manual Start]
  <\??\D:\kingsoft\KSM3.0\krpr.sys><N/A>
[Monfilt / Monfilt][Stopped/Manual Start]
  <system32\drivers\Monfilt.sys><Creative Technology Ltd.>
[Intel(R) Wireless WiFi Link 适配器驱动程序（适用于 Windows XP 32 位） / NETw5x32][Running/Manual Start]
  <system32\DRIVERS\NETw5x32.sys><Intel Corporation>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Quantum DeepScanner Servers / qutmdserv][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\qutmdrv.sys><360安全中心>
[qutmipc / qutmipc][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\qutmipc.sys><360安全中心>
[rimmptsk / rimmptsk][Running/Auto Start]
  <system32\DRIVERS\rimmptsk.sys><REDC>
[rimsptsk / rimsptsk][Running/Auto Start]
  <system32\DRIVERS\rimsptsk.sys><REDC>
[Ricoh xD-Picture Card Driver / rismxdp][Running/Auto Start]
  <system32\DRIVERS\rixdptsk.sys><REDC>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
  <\??\C:\WINDOWS\system32\Drivers\safeboxkrnl.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SATALink External Device Filter / SiRemFil][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
[SIS AGP Bus Filter / sisagp][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\sisagp.sys><Silicon Integrated Systems Corporation>
[smserial / smserial][Running/Manual Start]
  <system32\DRIVERS\smserial.sys><Motorola Inc.>
[USB2.0 PC Camera (SNP2UVC) / SNP2UVC][Stopped/Manual Start]
  <system32\DRIVERS\snp2uvc.sys><>
[System Restore Filter Driver / sr][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\sr.sys><N/A>
[Synaptics TouchPad Driver / SynTP][Stopped/Manual Start]
  <system32\DRIVERS\SynTP.sys><Synaptics Incorporated>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[BC / BC][Stopped/Boot Start]
  <\SystemRoot\system32\Drivers\BC.sys><Kingsoft Corporation>
[RsProtect / RsProtect][Stopped/System Start]
  <system32\drivers\RsPtect.sys><Beijing Rising Information Technology Co., Ltd.>

==================================
浏览器加载项
[迅雷流媒体探测IE支持]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <d:\Thunder\ComDlls\TDMediaDetector5.9.26.1538.dll, (Signed) 深圳市迅雷网络技术有限公司>
[迅雷网页图片浏览器IE支持]
  {2D90D33C-DE76-42D0-9040-E4466DDC24AC} <d:\Thunder\Program\EmbedDetectNow.dll, (Signed) Xunlei>
[迅雷下载IE支持]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[查看网页全部图片]
  {548BF84E-9665-47f9-B635-7380F8943E90} <, >
[InfosecCertInstall Class]
  {0EB487C8-E9AC-43A6-8C4C-083999B0622F} <C:\WINDOWS\Downloaded Program Files\certInStall.dll, (Signed) >
[ICBCOCX Public Key Check]
  {7AEA10C5-B38F-4D72-A8F0-ED2D43D2A59E} <C:\WINDOWS\DOWNLO~1\ICBCPK~1.OCX, Industrial and Commercial Bank of China Limited>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\Downloaded Program Files\SubmitControl.dll, (Signed) >
[InfoSecICBCNetSign Class]
  {B1FBC1AD-5644-4084-882A-0F8BA85E7506} <C:\WINDOWS\DOWNLO~1\ICBC_N~1.DLL, (Signed) Infosec Technologies Co., Ltd.>
[Icbc_gemplus2006dv Control]
  {C7EC0B9B-074B-40FE-BF29-B135FB4F57D7} <C:\WINDOWS\DOWNLO~1\ICBC_G~1.DLL, (Signed) goldpac>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx, (Signed) Adobe Systems, Inc.>
[迅雷流媒体探测IE支持]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <d:\Thunder\ComDlls\TDMediaDetector5.9.26.1538.dll, (Signed) 深圳市迅雷网络技术有限公司>
[InfosecCertInstall Class]
  {0EB487C8-E9AC-43A6-8C4C-083999B0622F} <C:\WINDOWS\Downloaded Program Files\certInStall.dll, (Signed) >
[InstallHelper Class]
  {1DABF8D5-8430-4985-9B7F-A30E53D709B3} <C:\WINDOWS\system32\MMInstaller.dll, (Signed) Tencent>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, (Signed) Microsoft Corporation>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
[迅雷网页图片浏览器IE支持]
  {2D90D33C-DE76-42D0-9040-E4466DDC24AC} <d:\Thunder\Program\EmbedDetectNow.dll, (Signed) Xunlei>
[]
  {3AA9CF07-DF20-48FF-98BE-DED276E40146} <, >
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <d:\Thunder\ComDlls\ThunderAgent5.9.26.1538.dll, (Signed) 深圳市迅雷网络技术有限公司>
[QQPYChecker Class]
  {5052B4D0-9DF7-45ef-88EF-F42C0EA33A43} <C:\Program Files\Tencent\QQPinyin\3.3.881.400\QQImeChecker.dll, (Signed) Tencent>
[]
  {548BF84E-9665-47F9-B635-7380F8943E90} <, >
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Access UserInfo by Script]
  {6EE9CD3E-A386-4DAE-9737-A759DBF927AE} <d:\Thunder\ComDlls\UserAgent.dll, (Signed) 深圳市迅雷网络技术有限公司>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\Downloaded Program Files\InputControl.dll, (Signed) >
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <d:\Thunder\userdata\Components\InMedia\MediaAddin.dll, (Signed) 深圳市迅雷网络技术有限公司>
[ICBCOCX Public Key Check]
  {7AEA10C5-B38F-4D72-A8F0-ED2D43D2A59E} <C:\WINDOWS\DOWNLO~1\ICBCPK~1.OCX, Industrial and Commercial Bank of China Limited>
[]
  {7CCE07A5-A590-4554-B5C3-082840D7012E} <, >
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <d:\360safe\Safelive.dll, (Signed) 360.cn>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, (Signed) Microsoft Corporation>
[迅雷下载IE支持]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[XML DOM 文档 5.0]
  {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, (Signed) Microsoft Corporation>
[XML DOM Document 6.0]
  {88D96A05-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
[XML HTTP 6.0]
  {88D96A0A-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\Downloaded Program Files\SubmitControl.dll, (Signed) >
[]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <, >
[]
  {95B3F550-91C4-4627-BCC4-521288C52977} <, >
[OFrameObject Class]
  {9701758C-4373-482E-B13C-776C048EC890} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5926.308.(727).dll, (Signed) 深圳市迅雷网络技术有限公司>
[VersionDetector Class]
  {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} <C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.32.(727).dll, (Signed) 深圳市迅雷网络技术有限公司>
[HallToolkit Class]
  {A24E6133-404F-4431-A296-2DE576FC5AEE} <C:\Program Files\Common Files\Thunder Network\XLGame\HallTool.1.0.0.5.(727).dll, (Signed) 深圳市迅雷网络技术有限公司>
[APlayer Control]
  {A9322148-C691-4B9D-91FC-B9C461DBE9DD} <C:\Program Files\Common Files\Thunder Network\APlayer\APlayer_001.dll, (Signed) ShenZhen Thunder Networking Technologies, LTD>
[DapCtrl Class]
  {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5926.308.(727).dll, (Signed) 深圳市迅雷网络技术有限公司>
[InfoSecICBCNetSign Class]
  {B1FBC1AD-5644-4084-882A-0F8BA85E7506} <C:\WINDOWS\DOWNLO~1\ICBC_N~1.DLL, (Signed) Infosec Technologies Co., Ltd.>
[Icbc_gemplus2006dv Control]
  {C7EC0B9B-074B-40FE-BF29-B135FB4F57D7} <C:\WINDOWS\DOWNLO~1\ICBC_G~1.DLL, (Signed) goldpac>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx, (Signed) Adobe Systems, Inc.>
[Microsoft Silverlight]
  {DFEAF541-F3E1-4C24-ACAC-99C30715084A} <c:\Program Files\Microsoft Silverlight\4.0.50401.0\npctrl.dll,  Microsoft Corporation>
[PlayerCtrl Class]
  {E05BC2A3-9A46-4a32-80C9-023A473F5B23} <D:\QQMusic\QzoneMusic.dll, (Signed) Tencent>
[]
  {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[SSOForPTLogin2 Class]
  {EAAED308-7322-4B9B-965E-171933ADD473} <C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOAxCtrlForPTLogin.dll, (Signed) >
[XML HTTP Request]
  {ED8C108E-4349-11D2-91A4-00C04F7969E8} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[PPLive Lite Class]
  {EF0D1A14-1033-41A2-A589-240C01EDC078} <C:\Program Files\Common Files\PPLiveNetwork\plugin\pplugin2.dll, N/A>
[]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <, >
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[使用迅雷下载]
  <d:\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <d:\Thunder\Program\GetAllUrl.htm, N/A>
[使用迅雷查看图片]
  <d:\Thunder\Program\repairimage.htm, N/A>

==================================
正在运行的进程
[PID: 956][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1032][\??\C:\WINDOWS\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1064][\??\C:\WINDOWS\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1108][C:\WINDOWS\system32\services.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)]
[PID: 1120][C:\WINDOWS\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1296][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1360][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1400][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1496][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1548][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 1572][d:\360safe\deepscan\zhudongfangyu.exe]  [360.cn, 3, 2, 2, 1002]
[d:\360safe\SoftMgr\360SoftMgrS.dll]  [360.cn, 2, 1, 5, 1100]
[d:\360safe\deepscan\CloudCom2.dll]  [360.cn, 3, 2, 3, 5006]
[D:\360safe\deepscan\bapi.dll]  [360.cn, 1.0.0.1012]
[d:\360safe\deepscan\heavygate.dll]  [360.cn, 3, 6, 21, 0]
[d:\360safe\deepscan\qutmload.dll]  [360安全中心, 6, 5, 0, 1003]
[PID: 1928][C:\WINDOWS\system32\spoolsv.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\msi.dll]  [Microsoft Corporation, 4.5.6001.22159]
[PID: 176][C:\WINDOWS\Explorer.EXE]  [(Verified) Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\msi.dll]  [Microsoft Corporation, 4.5.6001.22159]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[C:\WINDOWS\system32\QQPINYIN.IME]  [Tencent, 3.3.881.400]
[d:\Thunder\ComDlls\xunleiBHO_Now.dll]  [深圳市迅雷网络技术有限公司, 5,9,26,1538]
[d:\Thunder\ComDlls\zlib1.dll]  [, 1.2.3]
[d:\Thunder\ComDlls\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
[d:\Thunder\ComDlls\libexpat.dll]  [N/A, ]
[d:\Thunder\ComDlls\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
[d:\Thunder\ComDlls\ATL71.DLL]  [Microsoft Corporation, 7.10.6101.0]
[d:\Thunder\userdata\Components\ResWorker\DsBho_00.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 0, 33]
[d:\Thunder\userdata\Components\ResWorker\DataProcessor_00.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 1, 6]
[C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
[C:\Program Files\TeraCopy\TeraCopyExt.dll]  [N/A, ]
[D:\360sd\MenuEx.dll]  [360.cn, 1, 1, 0, 1080]
[C:\Program Files\TeraCopy\TeraCopy.dll]  [N/A, ]
[d:\Thunder\ComDlls\ThunderAgent5.9.26.1538.dll]  [深圳市迅雷网络技术有限公司, 5,9,26,1538]
[PID: 656][D:\360Safebox\SafeBoxTray.exe]  [360.cn, 3, 3, 0, 1005]
[D:\360Safebox\safeboxapi.dll]  [360.cn, 2, 3, 0, 1003]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\360Safebox\SafeLive.dll]  [, 1, 0, 0, 1006]
[D:\360Safebox\pdown.dll]  [360.cn, 1, 2, 0, 1012]
[D:\360Safebox\LiveUpd360.dll]  [360.cn, 1, 2, 0, 1030]
[D:\360Safebox\360net.dll]  [奇虎网, 1, 1, 14, 1017]
[D:\360Safebox\360P2SP.dll]  [360.cn, 1, 1, 0, 1041]
[D:\360Safebox\cloudsec2.dll]  [360.cn, 3, 2, 3, 1005]
[D:\360Safebox\deepscan.dll]  [360.cn, 3, 2, 3, 1003]
[D:\360Safebox\bapi.dll]  [360.cn, 1.0.0.1009]
[D:\360Safebox\cloudcom2.dll]  [360.cn, 3, 2, 3, 1005]
[D:\360Safebox\heavygate.dll]  [360.cn, 3, 6, 21, 0]
[PID: 672][D:\360safe\safemon\360Tray.exe]  [360.CN, 7, 3, 0, 1010]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\360safe\ipc\ipcservice.dll]  [360.CN, 6, 5, 5, 1001]
[D:\360safe\ipc\fileMgr.dll]  [360.cn, 6, 5, 2, 1003]
[D:\360safe\ipc\yhregd.dll]  [, 6, 5, 5, 1001]
[D:\360safe\ipc\appd.dll]  [360.cn, 6, 5, 3, 1002]
[D:\360safe\safemon\360compro.dll]  [360安全中心, 6, 2, 0, 1007]
[D:\360safe\safemon\360webpro.dll]  [360.CN, 1, 3, 0, 1031]
[D:\360safe\safemon\360traylive.dll]  [360安全中心, 6, 0, 1, 1013]
[D:\360safe\safemon\360procmon.dll]  [360.CN, 6, 5, 5, 1004]
[D:\360safe\safemon\SelfProtectAPI2.dll]  [360.CN, 6, 5, 5, 1001]
[D:\360safe\safemon\360safemonpro.tpi]  [360.cn, 1, 1, 2, 1002]
[D:\360safe\safemon\netm.tpi]  [360.cn, 1, 0, 2, 1013]
[D:\360safe\safemon\netmon.tpi]  [360.CN, 1, 0, 2, 1011]
[D:\360safe\deepscan\qutmload.dll]  [360安全中心, 6, 5, 0, 1003]
[D:\360safe\ipc\qutmipc.dll]  [360安全中心, 6, 2, 0, 1007]
[D:\360safe\SafeLive.dll]  [360.cn, 1, 0, 0, 1007]
[D:\360safe\pdown.dll]  [360.cn, 1, 2, 0, 1016]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[D:\360safe\safemon\urlproc.dll]  [360.cn, 1, 2, 2, 1004]
[D:\360safe\safemon\urlprocnet.dll]  [360.cn, 1, 2, 2, 1001]
[D:\360safe\360ver.dll]  [奇虎网, 7, 1, 1, 1003]
[D:\360safe\netmon\360netctrl.dll]  [360.CN, 1, 0, 3, 1010]
[D:\360safe\ipc\PatchCheck.dll]  [360.cn, 1, 0, 0, 1005]
[D:\360safe\efiproc.dll]  [奇虎360安全卫士, 1, 0, 0, 1005]
[D:\360safe\LiveUpd360.dll]  [360.cn, 1, 2, 0, 1038]
[D:\360safe\360net.dll]  [奇虎网, 1, 1, 18, 1021]
[D:\360safe\360P2SP.dll]  [360.cn, 1, 3, 0, 1006]
[D:\360safe\deepscan\Cloudcom2.dll]  [360.cn, 3, 2, 3, 5006]
[D:\360safe\deepscan\Bapi.dll]  [360.cn, 1.0.0.1012]
[D:\360safe\deepscan\deepscan.dll]  [360.cn, 3, 2, 3, 6003]
[C:\WINDOWS\system32\msi.dll]  [Microsoft Corporation, 4.5.6001.22159]
[D:\360safe\deepscan\heavygate.dll]  [360.cn, 3, 6, 21, 0]
[c:\Program Files\Microsoft Silverlight\xapauthenticodesip.dll]  [ Microsoft Corporation, 4.0.50401.0]
[PID: 708][C:\WINDOWS\system32\ctfmon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[PID: 728][D:\360sd\360sd.exe]  [360.cn, 1, 2, 0, 1316]
[D:\360sd\QTQuart.dll]  [360.cn, 1, 1, 0, 1203]
[D:\360sd\CrashReport.dll]  [360安全中心, 1, 0, 0, 1074]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\360sd\DmRule.dll]  [360.cn, 1, 2, 0, 1315]
[D:\360sd\sqlite3.dll]  [N/A, ]
[D:\360sd\360MalwareSection.dll]  [360.cn, 3, 2, 1, 1003]
[D:\360sd\bapi.dll]  [360.cn, 1.0.0.1010]
[D:\360sd\heavygate.dll]  [360.cn, 3, 6, 21, 0]
[D:\360sd\Cloudcom2.dll]  [360.cn, 3, 2, 3, 3002]
[PID: 1320][D:\360sd\360rp.exe]  [360.cn, 1, 2, 0, 1316]
[D:\360sd\Router.dll]  [360安全中心, 1, 0, 0, 1069]
[D:\360sd\BDFLTLIB.DLL]  [, ]
[D:\360sd\SCAN.DLL]  [S.C. BitDefender S.R.L, 12, 0, 53, 0]
[D:\360sd\Wrapper.dll]  [360安全中心, 1, 0, 0, 1]
[D:\360sd\QTQuart.dll]  [360.cn, 1, 1, 0, 1203]
[D:\360sd\cloudcom2.dll]  [360.cn, 3, 2, 3, 3002]
[D:\360sd\wlist.dll]  [360安全中心, 3, 0, 0, 1004]
[D:\360sd\bapi.dll]  [360.cn, 1.0.0.1010]
[D:\360sd\smartscn.dll]  [BitDefender S.R.L., 12.0.0.11]
[D:\360sd\bdcore.dll]  [BitDefender, 11, 0, 0, 33]
[D:\360sd\trufos.dll]  [N/A, ]
[D:\360sd\avxdisk.dll]  [BitDefender, 1, 0, 0, 1]
[D:\360sd\CrashReport.dll]  [360安全中心, 1, 0, 0, 1074]
[D:\360sd\heavygate.dll]  [360.cn, 3, 6, 21, 0]
[D:\360sd\cloudsec2.dll]  [360.cn, 3, 2, 3, 3003]
[D:\360sd\deepscan.dll]  [360.cn, 3, 2, 3, 3002]
[PID: 1488][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 2620][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 2060][C:\WINDOWS\system32\mstsc.exe]  [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[C:\WINDOWS\system32\QQPINYIN.IME]  [Tencent, 3.3.881.400]
[PID: 548][C:\WINDOWS\system32\mstsc.exe]  [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[C:\WINDOWS\system32\QQPINYIN.IME]  [Tencent, 3.3.881.400]
[PID: 3668][F:\yy-3.0\DuoSpeak.exe]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\PUBFUNC.dll]  [N/A, ]
[F:\yy-3.0\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[F:\yy-3.0\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[F:\yy-3.0\LCtrl.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\xgdi.dll]  [N/A, ]
[F:\yy-3.0\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[F:\yy-3.0\LayoutWrapper.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\LayoutUI.dll]  [N/A, ]
[F:\yy-3.0\Http.dll]  [N/A, ]
[F:\yy-3.0\Smile.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\LVDownloader.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\statistics.dll]  [N/A, ]
[F:\yy-3.0\richeditEx.dll]  [TODO: <公司名>, 1.0.0.1]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[F:\yy-3.0\crashreport.dll]  [N/A, ]
[F:\yy-3.0\protocol.dll]  [N/A, ]
[F:\yy-3.0\PluginSDK.dll]  [TODO: <公司名>, 1.0.0.1]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[F:\yy-3.0\CommModule.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\IM.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\yygroup.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\keyhook.dll]  [N/A, ]
[F:\yy-3.0\MessageHistroy.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\sqlite3.dll]  [N/A, ]
[PID: 1112][F:\yy-3.0\DuoSpeak.exe]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\PUBFUNC.dll]  [N/A, ]
[F:\yy-3.0\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[F:\yy-3.0\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[F:\yy-3.0\LCtrl.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\xgdi.dll]  [N/A, ]
[F:\yy-3.0\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[F:\yy-3.0\LayoutWrapper.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\LayoutUI.dll]  [N/A, ]
[F:\yy-3.0\Http.dll]  [N/A, ]
[F:\yy-3.0\Smile.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\LVDownloader.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\statistics.dll]  [N/A, ]
[F:\yy-3.0\richeditEx.dll]  [TODO: <公司名>, 1.0.0.1]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[F:\yy-3.0\crashreport.dll]  [N/A, ]
[F:\yy-3.0\protocol.dll]  [N/A, ]
[F:\yy-3.0\PluginSDK.dll]  [TODO: <公司名>, 1.0.0.1]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[F:\yy-3.0\CommModule.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\IM.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\yygroup.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\keyhook.dll]  [N/A, ]
[PID: 2768][F:\yy-3.0\DuoSpeak.exe]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\PUBFUNC.dll]  [N/A, ]
[F:\yy-3.0\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
[F:\yy-3.0\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[F:\yy-3.0\LCtrl.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\xgdi.dll]  [N/A, ]
[F:\yy-3.0\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
[F:\yy-3.0\LayoutWrapper.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\LayoutUI.dll]  [N/A, ]
[F:\yy-3.0\Http.dll]  [N/A, ]
[F:\yy-3.0\Smile.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\LVDownloader.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\statistics.dll]  [N/A, ]
[F:\yy-3.0\richeditEx.dll]  [TODO: <公司名>, 1.0.0.1]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[F:\yy-3.0\crashreport.dll]  [N/A, ]
[F:\yy-3.0\protocol.dll]  [N/A, ]
[F:\yy-3.0\PluginSDK.dll]  [TODO: <公司名>, 1.0.0.1]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[F:\yy-3.0\CommModule.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\IM.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\yygroup.dll]  [广州多玩信息技术有限公司, 1.0.0.1]
[F:\yy-3.0\keyhook.dll]  [N/A, ]
[F:\yy-3.0\MessageHistroy.dll]  [TODO: <公司名>, 1.0.0.1]
[F:\yy-3.0\sqlite3.dll]  [N/A, ]
[C:\WINDOWS\system32\QQPINYIN.IME]  [Tencent, 3.3.881.400]
[PID: 700][D:\QQ2010\Bin\QQ.exe]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\Common.dll]  [Tencent, 1, 51, 1760, 0]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.DLL]  [Microsoft Corporation, 8.00.50727.4053]
[D:\QQ2010\Bin\KernelUtil.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\GF.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\xGraphic32.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\AFUtil.dll]  [Tencent, 1, 51, 1760, 0]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[D:\QQ2010\Bin\LoginPanel.dll]  [Tencent, 1, 51, 1760, 0]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\QQ2010\Bin\IM.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\TaskTray.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\AppUtil.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\TXPFProxy.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\BasicCtrlDll.dll]  [TENCENT, 8,0,773,1801]
[D:\QQ2010\Bin\MainFrame.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\AppFramework.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\SkinMgr.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.PayCenter\Bin\PayCenter.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.QQVipMisc\Bin\QQVipMisc.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.NetBar\Bin\NetBar.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.VAS\Bin\VAS.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.Wireless\Bin\Wireless.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.PaiPaiGift\Bin\PaiPaiGift.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.QQShow\Bin\QQShow.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.Qzone\Bin\Qzone.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.CRM\Bin\CRM.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.AudioVideo\Bin\AudioVideo.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.Soso\Bin\Soso.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.Weather\Bin\Weather.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.Advertisement\Bin\Advertisement.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.Memo\Bin\Memo.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.QQVip\Bin\QQVip.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.MMOG\Bin\MMOG.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.QQGame\Bin\QQGame.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.QQMusic\Bin\QQMusic.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.Mail\Bin\Mail.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.PaiPai\Bin\PaiPai.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.SNSApp\Bin\SNSApp.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.QQLive\Bin\QQLive.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.WenWen\Bin\WenWen.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.QQPet\Bin\QQPet.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.QBar\Bin\QBar.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\Com.Tencent.qqwebsite\Bin\qqwebsite.dll]  [Tencent, 1, 51, 1760, 0]
[C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOPlatform.dll]  [Tencent, 1.2.1.10]
[C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOCommon.DLL]  [Tencent, 1.2.1.6]
[D:\QQ2010\Bin\AFCtrl.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\SystemMsg.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\ConfigCenter.dll]  [Tencent, 1, 51, 1760, 0]
[C:\WINDOWS\system32\msdmo.dll]  [, ]
[D:\QQ2010\Bin\ChatFrameApp.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\QInterLive.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\GroupApp.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\AppMisc.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\Contacts.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\WBlog.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\InformationBox.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\ContactInfoFrame.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\com.tencent.qqring\Bin\QQRing.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\com.tencent.today\Bin\Today.dll]  [Tencent, 1, 51, 1760, 0]
[C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx]  [Adobe Systems, Inc., 10,1,82,76]
[D:\QQ2010\Plugin\com.tencent.winks\Bin\Winks.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\com.tencent.gamelife\Bin\GameLife.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Plugin\com.tencent.filetransfer\Bin\FileTransfer.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\MsgMgr.dll]  [Tencent, 1, 51, 1760, 0]
[C:\WINDOWS\system32\QQPINYIN.IME]  [Tencent, 3.3.881.400]
[D:\QQ2010\Plugin\com.tencent.sobar\Bin\SoBar.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\LongCnn.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\appcom.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\CustomFace.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\AddrSearch.dll]  [Tencent, 2, 3, 12, 11]
[D:\QQ2010\Bin\SoftUpgrade.dll]  [Tencent, 1.0 Beta1 Build 109]
[D:\QQ2010\Plugin\com.tencent.netdisk\Bin\NetDisk.dll]  [Tencent, 1, 51, 1760, 0]
[C:\Program Files\Common Files\Tencent\TXFTN\TXFTNActiveX.dll]  [Tencent, 1, 0, 0, 11]
[D:\QQ2010\Bin\Camera.dll]  [Tencent, 1, 51, 1760, 0]
[D:\QQ2010\Bin\SCCore.dll]  [Tencent, 1, 7, 1, 6]
[D:\QQ2010\Bin\KernelMisc.dll]  [Tencent, 1, 51, 1760, 0]
[PID: 3608][D:\QQ2010\Bin\TXPlatform.exe]  [Tencent, 1, 51, 1760, 0]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[D:\QQ2010\Bin\TXPFProxy.dll]  [Tencent, 1, 51, 1760, 0]
[PID: 2484][d:\kingsoft\KSM\ksmsvc.exe]  [, 2010,07,15,1223]
[d:\kingsoft\KSM\kdump.dll]  [Kingsoft Corporation, 2010,08,02,1280]
[d:\kingsoft\KSM\kxestat.dll]  [Kingsoft Corporation, 2009,11,20,309]
[d:\kingsoft\KSM\kxebase.dll]  [Kingsoft Corporation, 2009,11,20,309]
[d:\kingsoft\KSM\scom.dll]  [Kingsoft Corporation, 2009,11,20,309]
[d:\kingsoft\KSM\kxecore\kxelog.dll]  [Kingsoft Corporation, 2009,11,20,309]
[d:\kingsoft\KSM\kxecore\kxecore.dll]  [Kingsoft Corporation, 2010,5,12,402]
[d:\kingsoft\KSM\kxecore\kxestat.dll]  [Kingsoft Corporation, 2009,11,20,309]
[d:\kingsoft\KSM\ksmcorex.dll]  [Kingsoft Corporation, 2010,08,27,62]
[d:\kingsoft\KSM\kcldrep.dll]  [Kingsoft Corporation, 2010,08,17,1333]
[d:\kingsoft\KSM\sqlite.dll]  [N/A, ]
[d:\kingsoft\KSM\kavifr.dll]  [Kingsoft Corporation, 2010,05,25,74]
[d:\kingsoft\KSM\kavquara.dll]  [Kingsoft Corporation, 2010,07,14,924]
[d:\kingsoft\KSM\ksecorex.dll]  [Kingsoft Corporation, 2010,07,15,926]
[d:\kingsoft\KSM\kae\kaecore.dat]  [Kingsoft Corporation, 2010,06,30,436]
[d:\kingsoft\KSM\ksbwdet2.dll]  [Kingsoft Corporation, 2010,07,12,1210]
[d:\kingsoft\KSM\ksbwsspx.dll]  [Kingsoft Corporation, 2010,05,27,1072]
[d:\kingsoft\KSM\kae\karchive.dat]  [Kingsoft Corporation, 2010,06,30,436]
[d:\kingsoft\KSM\kae\kaearcha.dat]  [Kingsoft Corporation, 2010,06,30,436]
[d:\kingsoft\KSM\kae\kaeolea.dat]  [Kingsoft Corporation, 2010,03,18,77]
[d:\kingsoft\KSM\kae\kaearchb.dat]  [Kingsoft Corporation, 2010,06,30,436]
[d:\kingsoft\KSM\ksreng3.dll]  [Kingsoft Corporation, 2010,08,20,1342]
[d:\kingsoft\KSM\COMRes.dll]  [Microsoft Corporation, 2001.12.4414.258]
[d:\kingsoft\KSM\kae\kaeunpak.dat]  [Kingsoft Corporation, 2010,03,18,77]
[d:\kingsoft\KSM\kae\kaeunpack.dat]  [Kingsoft Corporation, 2010,02,28,349]
[d:\kingsoft\KSM\kae\kaecorea.dat]  [Kingsoft Corporation, 2010,06,30,436]
[d:\kingsoft\KSM\kae\kaevname.dat]  [Kingsoft Corporation, 2010,03,18,77]
[d:\kingsoft\KSM\khandler.dll]  [Kingsoft Corporation, 2010,01,28,505]
[PID: 3080][d:\kingsoft\KSM\ksmgui.exe]  [, 2010,08,11,1313]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[d:\kingsoft\KSM\kdump.dll]  [Kingsoft Corporation, 2010,08,02,1280]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[d:\kingsoft\KSM\kxestat.dll]  [Kingsoft Corporation, 2009,11,20,309]
[d:\kingsoft\KSM\kcldrep.dll]  [Kingsoft Corporation, 2010,08,17,1333]
[d:\kingsoft\KSM\sqlite.dll]  [N/A, ]
[d:\kingsoft\KSM\kavifr.dll]  [Kingsoft Corporation, 2010,05,25,74]
[d:\kingsoft\KSM\COMRes.dll]  [Microsoft Corporation, 2001.12.4414.258]
[PID: 2672][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 7.00.6000.17080 (vista_gdr.100616-0452)]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[D:\360safe\safemon\LoadWDUI.dll]  [360.cn, 1, 0, 0, 1019]
[D:\360safe\safemon\urlproc.dll]  [360.cn, 1, 2, 2, 1004]
[D:\360safe\safemon\urlprocnet.dll]  [360.cn, 1, 2, 2, 1001]
[d:\Thunder\ComDlls\TDMediaDetector5.9.26.1538.dll]  [深圳市迅雷网络技术有限公司, 5,9,26,1538]
[d:\Thunder\ComDlls\ATL71.DLL]  [Microsoft Corporation, 7.10.6101.0]
[d:\Thunder\ComDlls\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
[d:\Thunder\ComDlls\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
[d:\Thunder\Program\EmbedDetectNow.dll]  [Xunlei, 1, 0, 1, 45]
[d:\Thunder\ComDlls\xunleiBHO_Now.dll]  [深圳市迅雷网络技术有限公司, 5,9,26,1538]
[d:\Thunder\ComDlls\zlib1.dll]  [, 1.2.3]
[d:\Thunder\ComDlls\libexpat.dll]  [N/A, ]
[d:\Thunder\ComDlls\ThunderAgent5.9.26.1538.dll]  [深圳市迅雷网络技术有限公司, 5,9,26,1538]
[d:\Thunder\userdata\Components\ResWorker\DsBho_00.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 0, 33]
[d:\Thunder\userdata\Components\ResWorker\DataProcessor_00.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 1, 6]
[C:\WINDOWS\system32\Macromed\Flash\Flash10i.ocx]  [Adobe Systems, Inc., 10,1,82,76]
[C:\WINDOWS\system32\QQPINYIN.IME]  [Tencent, 3.3.881.400]
[d:\Easy RealMedia Tools\common\VSFilter.dll]  [Gabest, 1, 0, 0, 9]
[d:\Easy RealMedia Tools\common\RealMediaSplitter.ax]  [Gabest, 1, 0, 0, 9]
[C:\Program Files\AC3Filter\ac3filter.ax]  [, 1.01a]
[PID: 4080][D:\sreng2\SREngLdr.EXE]  [Smallfrogs Studio, 2.8.2.1321]
[PID: 2684][D:\sreng2\SRE29510621.EXE]  [Smallfrogs Studio, 2.8.2.1321]
[D:\360safe\safemon\safemon.dll]  [360.cn, 6, 6, 5, 1006]
[C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

显示全部楼层 · 发表于 2010-8-30 18:22:11

图
cnzz 发表于 2010.8.30 17:34

parite这毒我也中过,属于轻度感染的.
你的杀软能修复吗?

[已解决] 中了exe感染类型病毒求帮忙

浏览过的版块

[已解决] 中了exe感染类型病毒 求帮忙

浏览过的版块

[已解决] 中了exe感染类型病毒求帮忙