查看: 5215|回复: 28
在线时间16 小时最后登录评分7 金币172 树叶0 注册时间阅读权限15帖子主题精华0积分8UID1005419
初显锋芒, 积分 8, 距离下一级还需 12 积分
树叶0 金币172 积分8
求助内容：笔记本的远程控制频繁被打开，有时会创建一个管理员级别的用户。（第一个问题）之前发过帖子，但图片出现问题，以及觉得各位的解释不够详尽。
最近给笔记本新装了Win7（当然是DB~），装完常用软件后的第二天。有一台陌生的电脑远程连接我的本本，我马上断开连接。但还是跳转到了登陆界面，并创建了一个陌生的管理员级别账户。我马上控制面板――账户管理，删除该账户以及相关文件。
& && && &注：WIN-T4PRNJ34J68居然是我自己的计算机名字，搞不懂& && &&&注：无论一图选择确定或者取消都会被创建新用户。而且每次新建的用户都是不同的，排除系统自动创建。
& && &&&这几次远程连接有一个共同之处，是基本都是正在使用迅雷看看时候出现的，不知道是不是软件漏洞。SQLDeb连接这次我怀疑是跟我电脑上装的SQL2005有关系，它的默认端口是1433，我安装时候没有修改，不知道现在如何修改。
& && &&&之后，每天用360体检，发现经常远程控制被打开，用360关闭也是。知道，远程控制是端口3389，于是手动”我的电脑“――”属性“――”远程“，将远程协助去掉勾，远程桌面，选择”不允许连接此电脑“。通过IP策略禁用端口的方法，没用过，望高手详细赐教。（第二个问题）
& && &&&虽然，如此问题依然如期而至。于是，升级卡巴斯基防病毒软件安全卫士至最新。卡巴全盘扫描没发现问题，只是速度很慢。360安全卫士云安全全盘扫描，没有发现问题。
& && &&&我也知道可能是木马或者后门开启了端口，导致被连接。所以，我需要的是解决方案。360木马扫描+卡巴2010全盘扫描，对于可疑文件我也是手动清理。
& && &&&查看，卡巴斯基详细报告，发现昨天的文件反病毒隔离了3个文件。卡巴2009界面清晰，发现病毒，会弹出消息框供用户选择处理。卡巴2010感觉界面复杂了点，我基本上没有让我手动处理过，全自动。是否，修改设置里面全盘扫描的处理方式？（第三个问题）
[ 本帖最后由 鹰羽狼.String 于
17:09 编辑 ]
鹰击九天，狼嚎神州……
在线时间0 小时最后登录评分695 金币1231 树叶746 注册时间阅读权限60帖子主题精华8积分1078UID879744
自成一派, 积分 1078, 距离下一级还需 422 积分
树叶746 金币1231 积分1078
等待版主发言
欢迎玩问问的坛友加入&/u&
在线时间2769 小时最后登录评分435 金币38716 树叶1710 注册时间阅读权限60帖子主题精华0积分1122UID516742
珍惜生命 远离电脑
自成一派, 积分 1122, 距离下一级还需 378 积分
树叶1710 金币38716 积分1122
什么网络环境？单机拨号上网还是局域网共享上网？
在线时间7857 小时最后登录评分785 金币25479 树叶726 注册时间阅读权限100帖子主题精华5积分2683UID10352
成事不说，遂事不谏
树叶726 金币25479 积分2683
请下载SREng扫描日志贴上来，下载及扫描方法见下面红色链接，如不能正常显示，请传附件或编辑原帖删除日志开头的“code”，除此外请保持日志的完整
　如果您的问题得到解决，请修改标题加上“[已解决]”
在线时间1 小时最后登录评分0 金币57 树叶0 注册时间阅读权限0帖子主题精华0积分1UID1225180
头像被屏蔽
树叶0 金币57 积分1
提示: 作者被禁止或删除 内容自动屏蔽
在线时间16 小时最后登录评分7 金币172 树叶0 注册时间阅读权限15帖子主题精华0积分8UID1005419
初显锋芒, 积分 8, 距离下一级还需 12 积分
树叶0 金币172 积分8
SREngLOG文件内容
System Repair Engineer 2.8.2.1321
Smallfrogs ()
Windows 7 Ultimate Edition&&(Build 7600) - 管理权限用户 - 完整功能
以下内容被选中：
& & 所有的启动项目（包括注册表、启动文件夹、服务等）
& & 浏览器加载项
& & 正在运行的进程（包括进程模块信息）
& & 文件关联
& & Winsock 提供者
& & Autorun.inf
& & HOSTS 文件
& & 进程特权扫描
& & 计划任务
& & Windows 安全更新检查
& & API HOOK
& & 隐藏进程
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &load&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
& & &EnergyUtility&&C:\Program Files\Lenovo\Energy Management\utility.exe&&&[(Verified)Lenovo (Beijing) Limited]
& & &Energy Management&&C:\Program Files\Lenovo\Energy Management\Energy Management.exe&&&[(Verified)Lenovo (Beijing) Limited]
& & &360Safetray&&&C:\Program Files\360\360safe\safemon\360tray.exe& /start&&&[(Verified)Qizhi Software (beijing) Co. Ltd]
& & &AVP&&&C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe&&&&[(Verified)Kaspersky Lab]
& & &1&&C:\Documents and Settings\Local User\3.exe&&&[File is missing]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &shell&&explorer.exe&&&[(Verified)Microsoft Windows]
& & &Userinit&&C:\Windows\system32\userinit.exe,&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
& & &WebCheck&&&&&[N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
& & &WinlogonNotify: klogon&&C:\Windows\system32\klogon.dll&&&[(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{22d6f312-b0f6-11d0-94ab-e95}]
& & &Microsoft Windows Media Player&&%SystemRoot%\system32\unregmp2.exe /ShowWMP&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{d38-484f-9b9e-dec}]
& & &Internet Explorer&&C:\Windows\System32\ie4uinit.exe -UserIconConfig&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}]
& & &Browser Customizations&&&C:\Windows\System32\rundll32.exe& &C:\Windows\System32\iedkcs32.dll&,BrandIEActiveSetup SIGNUP&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09--FED}]
& & &Themes Setup&&%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
& & &Microsoft Windows&&&%ProgramFiles%\Windows Mail\WinMail.exe& OCInstallUserConfigOE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
& & &Microsoft Windows Media Player&&%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4340}]
& & &Windows Desktop Update&&regsvr32.exe /s /n /i:U shell32.dll&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4383}]
& & &Web Platform Customizations&&C:\Windows\System32\ie4uinit.exe -BaseSettings&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018--5476DBF70820}]
& & &N/A&&C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install&&&[(Verified)Microsoft Corporation]
==================================
启动文件夹
==================================
[Kaspersky Anti-Virus / AVP][Running/Auto Start]
&&&&C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe& -r&&Kaspersky Lab&
[##Id_String1.8_4223_B5CC_5BB94B879762## / Bonjour Service][Stopped/Manual Start]
&&&&C:\Program Files\Bonjour\mDNSResponder.exe&&&Apple Computer, Inc.&
[FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start]
&&&&C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe&&&Macrovision Europe Ltd.&
[Kingsoft Common Content Service / KSDSVC][Running/Auto Start]
&&&D:\Program Files\Kingsoft\PowerWord PE\ksdsvc.exe&&Kingsoft Corporation&
[Lupiv360sde&&Server / Lupiv360sde][Stopped/Auto Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&C:\ProgramData\DRM\Lupiv360sde.dll&&N/A&
[NVIDIA Display Driver Service / nvsvc][Stopped/Manual Start]
&&&C:\Windows\system32\nvvsvc.exe&&NVIDIA Corporation&
[主动防御 / ZhuDongFangYu][Running/Auto Start]
&&&&C:\Program Files\360\360safe\deepscan\zhudongfangyu.exe&&&&
==================================
[360netmon / 360netmon][Running/System Start]
&&&\??\C:\Windows\system32\drivers\360netmon.sys&&&
[360SelfProtection / 360SelfProtection][Running/System Start]
&&&system32\drivers\360SelfProtection.sys&&360安全中心&
[Lenovo Virtual Power Controller Driver / ACPIVPC][Running/Manual Start]
&&&system32\DRIVERS\AcpiVpc.sys&&Lenovo Corporation&
[adp94xx / adp94xx][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\adp94xx.sys&&Adaptec, Inc.&
[adpahci / adpahci][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\adpahci.sys&&Adaptec, Inc.&
[adpu320 / adpu320][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\adpu320.sys&&Adaptec, Inc.&
[aic78xx / aic78xx][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\djsvs.sys&&Adaptec, Inc.&
[aliide / aliide][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\aliide.sys&&Acer Laboratories Inc.&
[amdsata / amdsata][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\amdsata.sys&&Advanced Micro Devices&
[amdsbs / amdsbs][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\amdsbs.sys&&AMD Technologies Inc.&
[amdxata / amdxata][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\amdxata.sys&&Advanced Micro Devices&
[arc / arc][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\arc.sys&&Adaptec, Inc.&
[arcsas / arcsas][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\arcsas.sys&&Adaptec, Inc.&
[Broadcom NetXtreme II VBD / b06bdrv][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\bxvbdx.sys&&Broadcom Corporation&
[Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 / b57nd60x][Running/Manual Start]
&&&system32\DRIVERS\b57nd60x.sys&&Broadcom Corporation&
[BAPIDRV / BAPIDRV][Running/System Start]
&&&\??\C:\Windows\system32\drivers\BAPIDRV.SYS&&&
[Broadcom 802.11 网络适配器驱动程序 / BCM43XX][Running/Manual Start]
&&&system32\DRIVERS\bcmwl6.sys&&Broadcom Corporation&
[Brother USB Mass-Storage Lower Filter Driver / BrFiltLo][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\BrFiltLo.sys&&Brother Industries, Ltd.&
[Brother USB Mass-Storage Upper Filter Driver / BrFiltUp][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\BrFiltUp.sys&&Brother Industries, Ltd.&
[Brother MFC Serial Port Interface Driver (WDM) / Brserid][Stopped/Manual Start]
&&&\SystemRoot\System32\Drivers\Brserid.sys&&Brother Industries Ltd.&
[Brother WDM Serial driver / BrSerWdm][Stopped/Manual Start]
&&&\SystemRoot\System32\Drivers\BrSerWdm.sys&&Brother Industries Ltd.&
[Brother MFC USB Fax Only Modem / BrUsbMdm][Stopped/Manual Start]
&&&\SystemRoot\System32\Drivers\BrUsbMdm.sys&&Brother Industries Ltd.&
[Brother MFC USB Serial WDM Driver / BrUsbSer][Stopped/Manual Start]
&&&\SystemRoot\System32\Drivers\BrUsbSer.sys&&Brother Industries Ltd.&
[cmdide / cmdide][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\cmdide.sys&&CMD Technology, Inc.&
[Broadcom NetXtreme II 10 GigE VBD / ebdrv][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\evbdx.sys&&Broadcom Corporation&
[EfiSystemMon / EfiMon][Running/System Start]
&&&System32\Drivers\Efimon.sys&&奇虎网&
[elxstor / elxstor][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\elxstor.sys&&Emulex&
[Hauppauge Consumer Infrared Receiver / hcw85cir][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\hcw85cir.sys&&Hauppauge Computer Works, Inc.&
[HookPort / HookPort][Running/Boot Start]
&&&\SystemRoot\System32\Drivers\Hookport.sys&&360安全中心&
[HpSAMD / HpSAMD][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\HpSAMD.sys&&Hewlett-Packard Company&
[iaStorV / iaStorV][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\iaStorV.sys&&Intel Corporation&
[iirsp / iirsp][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\iirsp.sys&&Intel Corp./ICP vortex GmbH&
[kl1 / kl1][Running/System Start]
&&&system32\DRIVERS\kl1.sys&&Kaspersky Lab&
[Kaspersky Lab Boot Guard Driver / klbg][Running/Boot Start]
&&&\SystemRoot\system32\drivers\klbg.sys&&Kaspersky Lab&
[Kaspersky Lab Driver / KLIF][Running/System Start]
&&&system32\DRIVERS\klif.sys&&Kaspersky Lab&
[Kaspersky Anti-Virus NDIS 6 Filter / KLIM6][Running/System Start]
&&&system32\DRIVERS\klim6.sys&&Kaspersky Lab&
[Kaspersky Lab KLMOUFLT / klmouflt][Running/Manual Start]
&&&system32\DRIVERS\klmouflt.sys&&Kaspersky Lab&
[LSI_FC / LSI_FC][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\lsi_fc.sys&&LSI Corporation&
[LSI_SAS / LSI_SAS][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\lsi_sas.sys&&LSI Corporation&
[LSI_SAS2 / LSI_SAS2][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\lsi_sas2.sys&&LSI Corporation&
[LSI_SCSI / LSI_SCSI][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\lsi_scsi.sys&&LSI Corporation&
[megasas / megasas][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\megasas.sys&&LSI Corporation&
[MegaSR / MegaSR][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\MegaSR.sys&&LSI Corporation, Inc.&
[ATK0110 ACPI UTILITY / MTsensor][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\ASACPI.sys&&&
[nfrd960 / nfrd960][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\nfrd960.sys&&IBM Corporation&
[NVIDIA nForce Networking Controller Driver / NVENETFD][Stopped/Manual Start]
&&&system32\DRIVERS\nvm62x32.sys&&NVIDIA Corporation&
[Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]
&&&system32\drivers\nvhda32v.sys&&NVIDIA Corporation&
[nvlddmkm / nvlddmkm][Running/Manual Start]
&&&system32\DRIVERS\nvlddmkm.sys&&NVIDIA Corporation&
[nvraid / nvraid][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\nvraid.sys&&NVIDIA Corporation&
[nvstor / nvstor][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\nvstor.sys&&NVIDIA Corporation&
[ql2300 / ql2300][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\ql2300.sys&&QLogic Corporation&
[ql40xx / ql40xx][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\ql40xx.sys&&QLogic Corporation&
[Quantum DeepScanner Servers / qutmdserv][Running/System Start]
&&&\??\C:\Windows\system32\drivers\qutmdrv.sys&&&
[qutmipc / qutmipc][Running/System Start]
&&&\??\C:\Windows\system32\drivers\qutmipc.sys&&360安全中心&
[SiSRaid2 / SiSRaid2][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\SiSRaid2.sys&&Silicon Integrated Systems Corp.&
[SiSRaid4 / SiSRaid4][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\sisraid4.sys&&Silicon Integrated Systems&
[sptd / sptd][Running/Boot Start]
&&&\SystemRoot\System32\Drivers\sptd.sys&&N/A&
[stexstor / stexstor][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\stexstor.sys&&Promise Technology&
[viaide / viaide][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\viaide.sys&&VIA Technologies, Inc.&
[vsmraid / vsmraid][Stopped/Manual Start]
&&&\SystemRoot\system32\DRIVERS\vsmraid.sys&&VIA Technologies Inc.,Ltd&
==================================
浏览器加载项
[ThunderAtOnce Class]
&&{01443AEC-0FD1-40fd-9C87-E93D} &D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Adobe PDF Link Helper]
&&{18DF081C-E8AD--FA578C2EBDC3} &C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, (Signed) Adobe Systems Incorporated&
[IEVkbdBHO Class]
&&{5D3-40F9-A1A8-6FA9CCA1862C} &C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll, (Signed) Kaspersky Lab&
[Thunder Browser Helper]
&&{889D2FEB-98-1DD2C5261283} &D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[谷歌金山词霸for IE]
&&{AA8-4b6c-9CC9-4A4CC1EFD55A} &D:\Program Files\Kingsoft\PowerWord PE\SelectForIE.dll, (Signed) Kingsoft Corporation&
[Microsoft Web Test Recorder 9.0 Helper]
&&{E31CE47F-C268-41ba-897B-B415E613947D} &C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO90.dll, (Signed) Microsoft Corporation&
[FilterBHO Class]
&&{E33CF602-D945-461A-83F0-819F76A199F8} &C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll, (Signed) Kaspersky Lab&
[VirtualKeyboardButtonHandler Class]
&&{FCB-46AC-B270-339F} &C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll, (Signed) Kaspersky Lab&
[查看网页全部图片]
&&{548BF84E--B635-} &, &
[CBMenu Class]
&&{9D5CCDC3-545F-4418-8AEC-9CD} &D:\Program Files\Kingsoft\PowerWord PE\SelectForIE.dll, (Signed) Kingsoft Corporation&
[FilterButtonHandler Class]
&&{CCF151D8-D089-449F-A5A4-DF} &C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll, (Signed) Kaspersky Lab&
[EditCtrl Class]
&&{488AB3-8F27-FA1AECAA8844} &C:\Windows\system32\aliedit\aliedit.dll, (Signed) &
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\Windows\system32\Macromed\Flash\Flash10e.ocx, (Signed) Adobe Systems, Inc.&
[ThunderAtOnce Class]
&&{01443AEC-0FD1-40FD-9C87-E93D} &D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[VistaWUWebControl Class]
&&{12AA-B9B960BF5EA} &%SystemRoot%\system32\wuwebv.dll, (Signed) N/A&
[Adobe PDF Link Helper]
&&{18DF081C-E8AD--FA578C2EBDC3} &C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, (Signed) Adobe Systems Incorporated&
[WWPicUploadCtrl Class]
&&{1D6-4A42-890D-EE617AA1537D} &D:\Program Files\AliWangWang\modules\1685\WWPictureUpload.dll, Alibaba software (Shanghai) Corporation&
[InstallHelper Class]
&&{1DABF8D5-B7F-A30E53D709B3} &C:\Windows\system32\MMInstaller.dll, (Signed) Tencent&
[iTrusPTA Class]
&&{1E0DFFCF-27FF-007349FEDA} &C:\Windows\system32\aliedit\pta.dll, (Signed) &
[HTML Document]
&&{F9-11CF-8FD0-00AA00686F13} &C:\Windows\System32\mshtml.dll, (Signed) Microsoft Corporation&
[XML DOM Document]
&&{B36-11D2-B20E-00C04F983E60} &%SystemRoot%\System32\msxml3.dll, (Signed) N/A&
&&{2D90D33C-DE76-42D0-DDC24AC} &, &
[VirtualKeyboardButtonHandler Class]
&&{FCB-46AC-B270-339F} &C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll, (Signed) Kaspersky Lab&
[XML Document]
&&{4D9-11D1-A6B3-00C04FD91555} &%SystemRoot%\System32\msxml3.dll, (Signed) N/A&
[Thunder Agent Class]
&&{-8FB2-4B3B-B29B-8B919B0EACCE} &D:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent5.9.19.1390.dll, (Signed) 深圳市迅雷网络技术有限公司&
[EditCtrl Class]
&&{488AB3-8F27-FA1AECAA8844} &C:\Windows\system32\aliedit\aliedit.dll, (Signed) &
&&{548BF84E--B635-} &, &
[IEVkbdBHO Class]
&&{5D3-40F9-A1A8-6FA9CCA1862C} &C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll, (Signed) Kaspersky Lab&
[WangWangX Class]
&&{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} &D:\Program Files\AliWangWang\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.&
[QQMusicCreator Class]
&&{A89--9} &, &
[Windows Media Player]
&&{6BF52A52-394A-11D3-B153-00C04F79FAA6} &%SystemRoot%\system32\wmp.dll, (Signed) N/A&
[MediaComm Class]
&&{1B-42AF-BDFE-46D26AF5EFF2} &D:\Program Files\Thunder Network\Thunder\userdata\Components\InMedia\MediaAddin.dll, (Signed) 深圳市迅雷网络技术有限公司&
[XDownloaddManager Class]
&&{802F530B-A8F6-4631-AE49-6BACAAC6373E} &D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[360SafeLive]
&&{C--D416CB8059E3} &C:\Program Files\360\360safe\Safelive.dll, (Signed) &
[Microsoft Web Browser]
&&{A-11D0-A96B-00C04FD705A2} &C:\Windows\System32\ieframe.dll, (Signed) Microsoft Corporation&
[Thunder Browser Helper]
&&{889D2FEB-98-1DD2C5261283} &D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[XML DOM Document 5.0]
&&{88D969E5-F192-11D4-A65F-E5} &C:\Program Files\Common Files\Microsoft Shared\OFFICE11\msxml5.dll, (Signed) Microsoft Corporation&
[XML DOM Document 6.0]
&&{88D96A05-F192-11D4-A65F-E5} &%SystemRoot%\System32\msxml6.dll, (Signed) N/A&
[XML HTTP 6.0]
&&{88D96A0A-F192-11D4-A65F-E5} &%SystemRoot%\System32\msxml6.dll, (Signed) N/A&
[OFrameObject Class]
&&{73-482E-B13C-776C048EC890} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.0).dll, (Signed) 深圳市迅雷网络技术有限公司&
&&{9D5CCDC3-545F-4418-8AEC-9CD} &, &
[VersionDetector Class]
&&{9EFFB1-AEF6-B2A3FE8BFE9B} &C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.30.(700).dll, (Signed) 深圳市迅雷网络技术有限公司&
[HallToolkit Class]
&&{A24E31-A296-2DE576FC5AEE} &C:\Program Files\Common Files\Thunder Network\XLGame\HallTool.1.0.0.5.(699).dll, (Signed) 深圳市迅雷网络技术有限公司&
[谷歌金山词霸for IE]
&&{AA8-4B6C-9CC9-4A4CC1EFD55A} &D:\Program Files\Kingsoft\PowerWord PE\SelectForIE.dll, (Signed) Kingsoft Corporation&
[APlayer Control]
&&{A1-4B9D-91FC-B9C461DBE9DD} &C:\Program Files\Common Files\Thunder Network\APlayer\APlayer_001.dll, (Signed) ShenZhen Thunder Networking Technologies, LTD&
[DapCtrl Class]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.0).dll, (Signed) 深圳市迅雷网络技术有限公司&
[QQCertCtrl Class]
&&{BAEA-43BB-E1A8F42} &C:\Program Files\Common Files\Tencent\Paycenter\qqcert.dll, (Signed) Tencent&
[FTNUpload Class]
&&{BDEACC50-F56D-4D60-860F-CF6ED1766D65} &C:\Program Files\Common Files\Tencent\TXFTN\TXFTNActiveX.dll, (Signed) Tencent&
[FilterButtonHandler Class]
&&{CCF151D8-D089-449F-A5A4-DF} &C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll, (Signed) Kaspersky Lab&
[AUDIO__MP3 Moniker Class]
&&{CD3AFA76-B84F-48F0-9393-7EDC} &%SystemRoot%\system32\wmp.dll, (Signed) N/A&
[Microsoft Url Search Hook]
&&{CFBFAE00-17A6-11D0-99CB-00C04FD64497} &C:\Windows\System32\ieframe.dll, (Signed) Microsoft Corporation&
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\Windows\system32\Macromed\Flash\Flash10e.ocx, (Signed) Adobe Systems, Inc.&
[PlayerCtrl Class]
&&{E05BC2A3-9A46-4a32-80C9-023A473F5B23} &d:\Program Files\Tencent\QQMusic\QzoneMusic.dll, (Signed) Tencent&
[Microsoft Web Test Recorder 9.0 Helper]
&&{E31CE47F-C268-41BA-897B-B415E613947D} &C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO90.dll, (Signed) Microsoft Corporation&
[RevealTrans]
&&{E31E87C4-86EA-A-5BD5D179A737} &C:\Windows\System32\Dxtmsft.dll, (Signed) Microsoft Corporation&
[FilterBHO Class]
&&{E33CF602-D945-461A-83F0-819F76A199F8} &C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll, (Signed) Kaspersky Lab&
[PasswordEditCtrl Class]
&&{E787FD25-8D7C-4693-AE67-DF} &C:\Program Files\Common Files\Tencent\Paycenter\qqedit.dll, (Signed) Tencent&
[SSOForPTLogin2 Class]
&&{EAAED308-B-965E-171933ADD473} &C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOAxCtrlForPTLogin.dll, (Signed) &
[TimwpDll.TimwpCheck]
&&{ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} &D:\PROGRA~1\Tencent\QQ\Bin\Timwp.dll, (Signed) Tencent&
[XML HTTP Request]
&&{ED8C108E--91A4-00C04F7969E8} &%SystemRoot%\System32\msxml3.dll, (Signed) N/A&
&&{F3E70CEA-956E-49CC-B444-73AFE593AD7F} &, &
[XML DOM Document]
&&{F6D90F11-9C73-11D3-B32E-00C04F990BB4} &%SystemRoot%\System32\msxml3.dll, (Signed) N/A&
[XML HTTP]
&&{F6D90F16-9C73-11D3-B32E-00C04F990BB4} &%SystemRoot%\System32\msxml3.dll, (Signed) N/A&
[webmod Class]
&&{FEE3C8C5-9BEA-4079-AB36-63ECABFC7392} &D:\Program Files\AliWangWang\alidcp.dll, (Signed)
[上传到淘江湖相册]
&&&D:\Program Files\AliWangWang\AddToAlbum.htm, N/A&
[使用迅雷下载]
&&&D:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm, N/A&
[使用迅雷下载全部链接]
&&&D:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A&
[添加为阿里旺旺表情]
&&&D:\Program Files\AliWangWang\AddNewEmotion.htm, N/A&
==================================
正在运行的进程
[PID: 328 / SYSTEM][\SystemRoot\System32\smss.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 436 / SYSTEM][C:\Windows\system32\csrss.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 500 / SYSTEM][C:\Windows\system32\wininit.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 512 / SYSTEM][C:\Windows\system32\csrss.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 552 / SYSTEM][C:\Windows\system32\services.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 568 / SYSTEM][C:\Windows\system32\lsass.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 576 / SYSTEM][C:\Windows\system32\lsm.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 708 / SYSTEM][C:\Windows\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 792 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 848 / LOCAL SERVICE][C:\Windows\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 896 / SYSTEM][C:\Windows\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 936 / SYSTEM][C:\Windows\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
[PID: 1048 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
[PID: 1136 / SYSTEM][C:\Windows\system32\winlogon.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 1144 / SYSTEM][C:\Program Files\360\360safe\deepscan\zhudongfangyu.exe]&&[, 3, 2, 2, 1001]
& & [C:\Program Files\360\360safe\deepscan\CloudCom2.dll]&&[, 3, 2, 3, 1006]
& & [C:\Program Files\360\360safe\SoftMgr\360SoftMgrS.dll]&&[奇虎网, 2, 1, 5, 1010]
& & [C:\Program Files\360\360safe\deepscan\heavygate.dll]&&[, 3, 6, 21, 0]
& & [C:\Program Files\360\360safe\deepscan\qutmload.dll]&&[360安全中心, 6, 2, 0, 1009]
[PID: 1220 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
[PID: 1500 / SYSTEM][C:\Windows\System32\spoolsv.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
[PID: 1568 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 1732 / SYSTEM][D:\Program Files\Kingsoft\PowerWord PE\ksdsvc.exe]&&[Kingsoft Corporation, , 51]
& & [D:\Program Files\Kingsoft\PowerWord PE\ksdcallcenter.dll]&&[Kingsoft Corporation, , 49]
& & [D:\Program Files\Kingsoft\PowerWord PE\queryprocesscenter.dll]&&[Kingsoft Corporation, , 58]
& & [D:\Program Files\Kingsoft\PowerWord PE\KSDIPC.DLL]&&[Kingsoft Corporation, , 48]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\baikequery.dll]&&[Kingsoft Corporation, , 22]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\googlequery.dll]&&[Kingsoft Corporation, , 48]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\huihuaquery.dll]&&[Kingsoft Corporation, , 22]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\localquery.dll]&&[Kingsoft Corporation, , 47]
& & [D:\Program Files\Kingsoft\PowerWord PE\localdictmgr.dll]&&[Kingsoft Corporation, , 53]
& & [D:\Program Files\Kingsoft\PowerWord PE\CBDBCoreplus.dll]&&[Kingsoft Corporation, , 39]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\netindex.dll]&&[Kingsoft Corporation, , 27]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\netquery.dll]&&[Kingsoft Corporation, , 52]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\situationsentence.dll]&&[Kingsoft Corporation, , 17]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\spellsuggest.dll]&&[Kingsoft Corporation, , 57]
& & [D:\Program Files\Kingsoft\PowerWord PE\plugin\WikiQuery.dll]&&[Kingsoft Corporation, , 52]
[PID: 1792 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe]&&[Microsoft Corporation, 9.00]
& & [C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.RLL]&&[Microsoft Corporation, 9.00]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
[PID: 1084 / Administrator][C:\Windows\system32\taskhost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 2292 / Administrator][C:\Windows\system32\Dwm.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
& & [C:\Windows\system32\nvwgf2um.dll]&&[NVIDIA Corporation, 8.15.11.8647]
[PID: 2344 / Administrator][C:\Windows\Explorer.EXE]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
& & [C:\Program Files\360\360safe\safemon\safemon.dll]&&[360安全中心, 6, 3, 1, 1016]
& & [C:\Windows\system32\FXSAPI.dll]&&[Microsoft Corporation, 6.1. (win7_rtm.5)]
& & [C:\Windows\system32\nvshext.dll]&&[NVIDIA Corporation, 186.47]
& & [C:\Windows\system32\nvapi.dll]&&[NVIDIA Corporation, 8.15.11.8647]
& & [D:\Program Files\Thunder Network\Thunder\ComDlls\ATL71.DLL]&&[Microsoft Corporation, 7.10.6101.0]
& & [D:\Program Files\Thunder Network\Thunder\ComDlls\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [D:\Program Files\Thunder Network\Thunder\ComDlls\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]&&[深圳市迅雷网络技术有限公司, 5,9,19,1390]
& & [D:\Program Files\Thunder Network\Thunder\ComDlls\zlib1.dll]&&[, 1.2.3]
& & [D:\Program Files\Thunder Network\Thunder\userdata\Components\ResWorker\DsBho_01.dll]&&[深圳市迅雷网络技术有限公司, 1, 0, 0, 31]
& & [D:\Program Files\Thunder Network\Thunder\userdata\Components\ResWorker\DataProcessor_01.dll]&&[深圳市迅雷网络技术有限公司, 1, 0, 1, 5]
& & [D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]&&[深圳市迅雷网络技术有限公司, 5,9,19,1390]
& & [D:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent5.9.19.1390.dll]&&[深圳市迅雷网络技术有限公司, 5,9,19,1390]
& & [C:\Program Files\WinRAR\rarext.dll]&&[, ]
& & [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\prremote.dll]&&[Kaspersky Lab, 9.0.0.736]
& & [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\prloader.dll]&&[Kaspersky Lab, 9.0.0.736]
& & [D:\Program Files\AliWangWang\AliIMExt.dll]&&[Alibaba software (Shanghai) Corporation., 1.0.0.1]
& & [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2010\shellex.dll]&&[Kaspersky Lab, 9.0.0.736]
[PID: 2436 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 2676 / Administrator][C:\Program Files\Lenovo\Energy Management\utility.exe]&&[Lenovo(beijing) Limited, 4, 3, 1, 1]
& & [C:\Program Files\Lenovo\Energy Management\kbdhook.dll]&&[N/A, ]
[PID: 2748 / Administrator][C:\Program Files\Lenovo\Energy Management\Energy Management.exe]&&[Lenovo (Beijing) Limited, 4, 2, 0, 2]
& & [C:\Program Files\Lenovo\Energy Management\HookLib.dll]&&[N/A, ]
[PID: 2828 / Administrator][C:\Program Files\360\360safe\safemon\360tray.exe]&&[, 6, 2, 0, 5003]
& & [C:\Program Files\360\360safe\ipc\ipcservice.dll]&&[, 6, 2, 0, 1011]
& & [C:\Program Files\360\360safe\ipc\fileMgr.dll]&&[, 6, 3, 0, 1001]
& & [C:\Program Files\360\360safe\ipc\yhregd.dll]&&[, 6, 2, 0, 3005]
& & [C:\Program Files\360\360safe\ipc\appd.dll]&&[, 6, 3, 0, 2008]
& & [C:\Program Files\360\360safe\safemon\360compro.dll]&&[360安全中心, 6, 2, 0, 1002]
& & [C:\Program Files\360\360safe\safemon\360webpro.dll]&&[, 1, 3, 0, 1030]
& & [C:\Program Files\360\360safe\safemon\360traylive.dll]&&[360安全中心, 6, 0, 1, 1013]
& & [C:\Program Files\360\360safe\safemon\360procmon.dll]&&[, 1, 3, 0, 2005]
& & [C:\Program Files\360\360safe\safemon\SelfProtectAPI2.dll]&&[, 1, 1, 0, 1012]
& & [C:\Program Files\360\360safe\safemon\360safemonpro.tpi]&&[360安全中心, 1, 1, 0, 1003]
& & [C:\Program Files\360\360safe\safemon\netm.tpi]&&[, 1, 0, 0, 1010]
& & [C:\Program Files\360\360safe\safemon\netmon.tpi]&&[, 1, 0, 1, 1007]
& & [C:\Program Files\360\360safe\deepscan\qutmload.dll]&&[360安全中心, 6, 2, 0, 1009]
& & [C:\Program Files\360\360safe\ipc\qutmipc.dll]&&[360安全中心, 6, 2, 0, 1007]
& & [C:\Program Files\360\360safe\safemon\safemon.dll]&&[360安全中心, 6, 3, 1, 1016]
& & [C:\Program Files\360\360safe\safemon\urlproc.dll]&&[360安全中心, 1, 2, 0, 1003]
& & [C:\Program Files\360\360safe\SafeLive.dll]&&[, 1, 0, 0, 1006]
& & [C:\Program Files\360\360safe\pdown.dll]&&[, 1, 2, 0, 1012]
& & [C:\Program Files\360\360safe\netmon\360netctrl.dll]&&[, 1, 0, 1, 1010]
& & [C:\Program Files\360\360safe\LiveUpd360.dll]&&[, 1, 2, 0, 1030]
& & [C:\Program Files\360\360safe\360net.dll]&&[奇虎网, 1, 1, 16, 1019]
& & [C:\Program Files\360\360safe\360P2SP.dll]&&[, 1, 1, 0, 1043]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
& & [C:\Program Files\360\360safe\efiproc.dll]&&[奇虎360安全卫士, 1, 0, 0, 1005]
& & [C:\Program Files\360\360safe\deepscan\Cloudcom2.dll]&&[, 3, 2, 3, 1006]
& & [C:\Program Files\360\360safe\deepscan\Bapi.dll]&&[, 1.0.0.1010]
& & [C:\Program Files\360\360safe\deepscan\deepscan.dll]&&[, 3, 2, 3, 1004]
[PID: 3172 / SYSTEM][C:\Windows\system32\SearchIndexer.exe]&&[(Verified) Microsoft Corporation, 7.00. (win7_rtm.5)]
[PID: 3872 / Administrator][C:\Program Files\360\360safe\LiveUpdate360.exe]&&[, 1, 2, 0, 1018]
& & [C:\Program Files\360\360safe\LiveUpd360.dll]&&[, 1, 2, 0, 1030]
& & [C:\Program Files\360\360safe\360net.dll]&&[奇虎网, 1, 1, 16, 1019]
& & [C:\Program Files\360\360safe\360P2SP.dll]&&[, 1, 1, 0, 1043]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
[PID: 4036 / SYSTEM][C:\Windows\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 2480 / Administrator][D:\Program Files\Tencent\QQ\Bin\QQ.exe]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\Common.dll]&&[Tencent, 1, 48, 1690, 0]
& & [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0._none_d1c738ec43578ea1\ATL80.DLL]&&[Microsoft Corporation, 8.00.]
& & [D:\Program Files\Tencent\QQ\Bin\KernelUtil.dll]&&[Tencent, 1, 48, 1690, 0]
& & [D:\Program Files\Tencent\QQ\Bin\GF.dll]&&[Tencent, 1, 48, 1690, 0]
& & [D:\Program Files\Tencent\QQ\Bin\xGraphic32.dll]&&[Tencent, 1, 48, 1690, 0]
& & [D:\Program Files\Tencent\QQ\Bin\AppUtil.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\AFUtil.dll]&&[Tencent, 1, 48, 1700, 0]
& & [C:\Program Files\360\360safe\safemon\safemon.dll]&&[360安全中心, 6, 3, 1, 1016]
& & [D:\Program Files\Tencent\QQ\Bin\AppFramework.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\MainFrame.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\AFCtrl.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\IM.dll]&&[Tencent, 1, 48, 1690, 0]
& & [D:\Program Files\Tencent\QQ\Bin\TaskTray.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\TXPFProxy.dll]&&[Tencent, 1, 48, 1690, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQShow\Bin\FlashAvatarDll.dll]&&[Tencent, 1.48.1.48]
& & [D:\Program Files\Tencent\QQ\Bin\KernelMisc.dll]&&[Tencent, 1, 48, 1690, 0]
& & [D:\Program Files\Tencent\QQ\Bin\AppMisc.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\ChatFrame.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\ConfigCenter.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\CustomFace.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\LongCnn.dll]&&[Tencent, 1, 48, 1690, 0]
& & [D:\Program Files\Tencent\QQ\Bin\ContactInfoFrame.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\MsgMgr.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\SkinMgr.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\QInterLive.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\SystemMsg.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.PaiPai\Bin\PaiPai.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.AudioVideo\Bin\AudioVideo.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.MMOG\Bin\MMOG.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Soso\Bin\Soso.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Qzone\Bin\Qzone.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Weather\Bin\Weather.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.SoBar\Bin\SoBar.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.PaiPaiGift\Bin\PaiPaiGift.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQLive\Bin\QQLive.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\Bin\QQMusic.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\Com.Tencent.taotao\Bin\Taotao.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\BasicCtrlDll.dll]&&[TENCENT, 8,0,773,1801]
& & [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOPlatform.dll]&&[Tencent, 1.2.1.6]
& & [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOCommon.DLL]&&[Tencent, 1.2.1.5]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
& & [D:\Program Files\Tencent\QQ\Bin\GroupApp.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.snsapp\Bin\SNSApp.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.paycenter\Bin\PayCenter.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.qbar\Bin\QBar.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.qqvipmisc\Bin\QQVipMisc.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.wenwen\Bin\WenWen.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\WBlog.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\Contacts.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.netbar\Bin\NetBar.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.vas\Bin\VAS.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.wireless\Bin\Wireless.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.qqshow\Bin\QQShow.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.crm\Bin\CRM.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\InformationBox.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.qqgame\Bin\QQGame.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.qqpet\Bin\QQPet.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.mail\Bin\Mail.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.qqvip\Bin\QQVip.dll]&&[Tencent, 1, 48, 1700, 0]
& & [C:\Windows\system32\Macromed\Flash\Flash10e.ocx]&&[Adobe Systems, Inc., 10,0,45,2]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.filetransfer\Bin\FileTransfer.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.memo\Bin\Memo.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.advertisement\Bin\Advertisement.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Bin\vqqsdl.dll]&&[Tencent, 5, 0, 3, 24]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.today\Bin\Today.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.qqring\Bin\QQRing.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.qqwebsite\Bin\QQWebsite.dll]&&[Tencent, 1, 48, 1700, 0]
& & [C:\Users\Administrator\AppData\Roaming\Tencent\QQ\SafeBase\TSEH.dat]&&[TENCENT, , 2]
& & [C:\Users\Administrator\AppData\Roaming\Tencent\QQ\SafeBase\TSELoder.DAT]&&[Tencent, , 13]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.gamelife\Bin\GameLife.dll]&&[Tencent, 1, 48, 1700, 0]
& & [D:\Program Files\Tencent\QQ\Plugin\com.tencent.winks\Bin\Winks.dll]&&[Tencent, 1, 48, 1700, 0]
& & [C:\Windows\system32\nvd3dum.dll]&&[NVIDIA Corporation, 8.15.11.8647]
& & [C:\Users\Administrator\AppData\Roaming\Tencent\QQ\SafeBase\TSEngine.DAT]&&[Tencent, , 25]
& & [C:\Users\Administrator\AppData\Roaming\Tencent\QQ\SafeBase\TSEPB.DAT]&&[Tencent, , 2]
[PID: 2372 / Administrator][D:\Program Files\Tencent\QQ\Bin\TXPlatform.exe]&&[Tencent, 1, 48, 1690, 0]
& & [C:\Program Files\360\360safe\safemon\safemon.dll]&&[360安全中心, 6, 3, 1, 1016]
& & [D:\Program Files\Tencent\QQ\Bin\TXPFProxy.dll]&&[Tencent, 1, 48, 1690, 0]
[PID: 2360 / SYSTEM][C:\Windows\system32\wbem\wmiprvse.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 2064 / SYSTEM][C:\Windows\system32\SearchProtocolHost.exe]&&[(Verified) Microsoft Corporation, 7.00. (win7_rtm.5)]
[PID: 3876 / SYSTEM][C:\Windows\system32\SearchFilterHost.exe]&&[(Verified) Microsoft Corporation, 7.00. (win7_rtm.5)]
[PID: 1296 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 6.1. (win7_rtm.5)]
[PID: 1836 / Administrator][F:\TDDOWNLOAD\sreng2\SREngLdr.EXE]&&[Smallfrogs Studio, 2.8.2.1321]
[PID: 3600 / Administrator][F:\TDDOWNLOAD\sreng2\SRE837cbd84.EXE]&&[Smallfrogs Studio, 2.8.2.1321]
& & [C:\Program Files\360\360safe\safemon\safemon.dll]&&[360安全中心, 6, 3, 1, 1016]
& & [F:\TDDOWNLOAD\sreng2\Upload\3rdUpd.DLL]&&[Smallfrogs Studio, 2, 1, 0, 15]
& & [C:\Program Files\Bonjour\mdnsNSP.dll]&&[Apple Computer, Inc., 1,0,3,1]
==================================
.TXT&&Error. [C:\Windows\notepad.exe %1]
.EXE&&OK. [&%1& %*]
.COM&&OK. [&%1& %*]
.PIF&&OK. [&%1& %*]
.REG&&OK. [regedit.exe &%1&]
.BAT&&OK. [&%1& %*]
.SCR&&OK. [&%1& /S]
.CHM&&OK. [&%SystemRoot%\hh.exe& %1]
.HLP&&OK. [%SystemRoot%\winhlp32.exe %1]
.INI&&OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF&&OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS&&OK. [&%SystemRoot%\System32\WScript.exe& &%1& %*]
.JS& &Error. [&D:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe&,&%1&]
.LNK&&OK. [{0-}]
==================================
Winsock 提供者
==================================
Autorun.inf
==================================
HOSTS 文件
==================================
进程特权扫描
==================================
& && &&&D:\PROGRA~1\SOGOUI~1\500~1.381\SGTool.exe --appid=pinyinrepair /S
[已禁用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
& && &&&N/A
[已启用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
& && &&&N/A
[已禁用] \Microsoft\Windows\AppID\PolicyConverter
& && &&&%windir%\system32\appidpolicyconverter.exe
[已禁用] \Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck
& && &&&%windir%\system32\appidcertstorecheck.exe
[已启用] \Microsoft\Windows\Application Experience\AitAgent
& && &&&aitagent
[已启用] \Microsoft\Windows\Application Experience\ProgramDataUpdater
& && &&&%windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
[已启用] \Microsoft\Windows\Autochk\Proxy
& && &&&%windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
[已启用] \Microsoft\Windows\Bluetooth\UninstallDeviceTask
& && &&&BthUdTask.exe $(Arg0)
[已启用] \Microsoft\Windows\CertificateServicesClient\SystemTask
& && &&&N/A
[已启用] \Microsoft\Windows\CertificateServicesClient\UserTask
& && &&&N/A
[已禁用] \Microsoft\Windows\CertificateServicesClient\UserTask-Roam
& && &&&N/A
[已启用] \Microsoft\Windows\Customer Experience Improvement Program\Consolidator
& && &&&%SystemRoot%\System32\wsqmcons.exe
[已启用] \Microsoft\Windows\Defrag\ScheduledDefrag
& && &&&%windir%\system32\defrag.exe -c
[已启用] \Microsoft\Windows\Location\Notifications
& && &&&%windir%\System32\LocationNotifications.exe
[已启用] \Microsoft\Windows\Maintenance\WinSAT
& && &&&N/A
[已禁用] \Microsoft\Windows\Media Center\ActivateWindowsSearch
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
[已禁用] \Microsoft\Windows\Media Center\ConfigureInternetTimeService
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
[已禁用] \Microsoft\Windows\Media Center\DispatchRecoveryTasks
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
[已禁用] \Microsoft\Windows\Media Center\ehDRMInit
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DRMInit
[已禁用] \Microsoft\Windows\Media Center\InstallPlayReady
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
[已启用] \Microsoft\Windows\Media Center\mcupdate
& && &&&%SystemRoot%\ehome\mcupdate $(Arg0)
[已禁用] \Microsoft\Windows\Media Center\MediaCenterRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
[已禁用] \Microsoft\Windows\Media Center\MediaCenterRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
[已禁用] \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
[已禁用] \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
[已禁用] \Microsoft\Windows\Media Center\OCURActivate
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
[已禁用] \Microsoft\Windows\Media Center\OCURDiscovery
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
[已禁用] \Microsoft\Windows\Media Center\PBDADiscovery
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
[已禁用] \Microsoft\Windows\Media Center\PBDADiscoveryW1
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
[已禁用] \Microsoft\Windows\Media Center\PBDADiscoveryW2
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
[已禁用] \Microsoft\Windows\Media Center\PeriodicScanRetry
& && &&&%windir%\ehome\MCUpdate.exe -pscn 0
[已禁用] \Microsoft\Windows\Media Center\PvrRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
[已禁用] \Microsoft\Windows\Media Center\PvrRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
[已禁用] \Microsoft\Windows\Media Center\PvrScheduleTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -PvrSchedule
[已禁用] \Microsoft\Windows\Media Center\PvrScheduleTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -PvrSchedule
[已禁用] \Microsoft\Windows\Media Center\RecordingRestart
& && &&&%SystemRoot%\ehome\ehrec /RestartRecording
[已禁用] \Microsoft\Windows\Media Center\RegisterSearch
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
[已禁用] \Microsoft\Windows\Media Center\ReindexSearchRoot
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
[已禁用] \Microsoft\Windows\Media Center\SqlLiteRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
[已禁用] \Microsoft\Windows\Media Center\SqlLiteRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
[已禁用] \Microsoft\Windows\Media Center\UpdateRecordPath
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
[已启用] \Microsoft\Windows\MobilePC\HotStart
& && &&&N/A
[已启用] \Microsoft\Windows\MUI\LPRemove
& && &&&%windir%\system32\lpremove.exe
[已启用] \Microsoft\Windows\MUI\Mcbuilder
& && &&&C:\Windows\System32\mcbuilder.exe
[已启用] \Microsoft\Windows\Multimedia\SystemSoundsService
& && &&&N/A
[已启用] \Microsoft\Windows\NetTrace\GatherNetworkInfo
& && &&&%windir%\system32\gatherNetworkInfo.vbs
[已禁用] \Microsoft\Windows\Offline Files\Background Synchronization
& && &&&N/A
[已禁用] \Microsoft\Windows\Offline Files\Logon Synchronization
& && &&&N/A
[已启用] \Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
& && &&&%SystemRoot%\System32\powercfg.exe -energy -auto
[已启用] \Microsoft\Windows\Ras\MobilityManager
& && &&&N/A
[已禁用] \Microsoft\Windows\SideShow\AutoWake
& && &&&N/A
[已启用] \Microsoft\Windows\SideShow\GadgetManager
& && &&&N/A
[已禁用] \Microsoft\Windows\SideShow\SessionAgent
& && &&&N/A
[已禁用] \Microsoft\Windows\SideShow\SystemDataProviders
& && &&&N/A
[已启用] \Microsoft\Windows\SystemRestore\SR
& && &&&%windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
[已启用] \Microsoft\Windows\Tcpip\IpAddressConflict1
& && &&&%windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
[已启用] \Microsoft\Windows\Tcpip\IpAddressConflict2
& && &&&%windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
[已启用] \Microsoft\Windows\Time Synchronization\SynchronizeTime
& && &&&%windir%\system32\sc.exe start w32time task_started
[已启用] \Microsoft\Windows\UPnP\UPnPHostConfig
& && &&&sc.exe config upnphost start= auto
[已禁用] \Microsoft\Windows\User Profile Service\HiveUploadTask
& && &&&N/A
[已启用] \Microsoft\Windows\Windows Error Reporting\QueueReporting
& && &&&%windir%\system32\wermgr.exe -queuereporting
[已启用] \Microsoft\Windows\Windows Media Sharing\UpdateLibrary
& && &&&&%ProgramFiles%\Windows Media Player\wmpnscfg.exe&
[已启用] \Microsoft\Windows\WindowsBackup\ConfigNotification
& && &&&%systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
[已禁用] \Microsoft\Windows\WindowsColorSystem\Calibration Loader
& && &&&N/A
==================================
Windows 安全更新检查
KB972813,&&西班牙语语言包 - Windows 7 (KB972813)
KB972813,&&希腊语语言包 - Windows 7 (KB972813)
KB972813,&&立陶宛语语言包 - Windows 7 (KB972813)
KB972813,&&阿拉伯语语言包 - Windows 7 (KB972813)
KB972813,&&瑞典语语言包 - Windows 7 (KB972813)
KB972813,&&德语语言包 - Windows 7 (KB972813)
KB972813,&&斯洛伐克语语言包 - Windows 7 (KB972813)
KB972813,&&乌克兰语语言包 - Windows 7 (KB972813)
KB972813,&&繁体中文语言包 - Windows 7 (KB972813)
KB972813,&&挪威语语言包 - Windows 7 (KB972813)
KB972813,&&爱沙尼亚语语言包 - Windows 7 (KB972813)
KB972813,&&捷克语语言包 - Windows 7 (KB972813)
KB972813,&&斯洛文尼亚语语言包 - Windows 7 (KB972813)
KB972813,&&日语语言包 - Windows 7 (KB972813)
KB972813,&&法语语言包 - Windows 7 (KB972813)
KB972813,&&罗马尼亚语语言包 - Windows 7 (KB972813)
KB972813,&&波兰语语言包 - Windows 7 (KB972813)
KB972813,&&泰语语言包 - Windows 7 (KB972813)
KB972813,&&保加利亚语语言包 - Windows 7 (KB972813)
KB972813,&&俄语语言包 - Windows 7 (KB972813)
KB972813,&&克罗地亚语语言包 - Windows 7 (KB972813)
KB972813,&&塞尔维亚语（拉丁语）语言包 - Windows 7 (KB972813)
KB972813,&&葡萄牙语（葡萄牙）语言包 - Windows 7 (KB972813)
KB972813,&&朝鲜语语言包 - Windows 7 (KB972813)
KB972813,&&意大利语语言包 - Windows 7 (KB972813)
KB972813,&&匈牙利语语言包 - Windows 7 (KB972813)
KB972813,&&土耳其语语言包 - Windows 7 (KB972813)
KB972813,&&丹麦语语言包 - Windows 7 (KB972813)
KB972813,&&芬兰语语言包 - Windows 7 (KB972813)
KB972813,&&拉脱维亚语语言包 - Windows 7 (KB972813)
KB972813,&&希伯来语语言包 - Windows 7 (KB972813)
KB972813,&&荷兰语语言包 - Windows 7 (KB972813)
KB972813,&&葡萄牙语（巴西）语言包 - Windows 7 (KB972813)
KB979099,&&用于 Windows 7 的 Rights Management Services 客户端更新程序 (KB979099)
KB976662,&&Windows 7 更新程序 (KB976662)
KB977863,&&Media Center for Windows 7 累积更新程序 (KB977863)
KB976264,&&Windows 7 更新程序 (KB976264)
KB980302,&&用于 Windows 7 的 Internet Explorer 8 兼容性视图列表的更新程序 (KB980302)
KB890830,&&Windows 恶意软件删除工具 - 2010 年 4 月 (KB890830)
KB976422,&&Windows 7 更新程序 (KB976422)
KB915597,&&Definition Update for Windows Defender - KB915597 (Definition 1.81.1347.0)
==================================
==================================
==================================
SREngLOG如上所示，请大侠们帮忙分析。。。
辛苦啦。。。
鹰击九天，狼嚎神州……
在线时间7857 小时最后登录评分785 金币25479 树叶726 注册时间阅读权限100帖子主题精华5积分2683UID10352
成事不说，遂事不谏
树叶726 金币25479 积分2683
1.建议使用XDelBox删除以下文件：()
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择从剪贴板导入，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。
c:\documents and settings\local user\3.exe
c:\programdata\drm\lupiv360sde.dll
2.删除重启后使用SREng修复下面各项：
& & 启动项目 －－ 注册表之如下项删除：
[1]& & &C:\Documents and Settings\Local User\3.exe&
& & 启动项目 －－ 服务 －－ Win32服务应用程序之如下项禁用：
[Lupiv360sde&&Server / Lupiv360sde]& & &C:\Windows\System32\svchost.exe -k netsvcs--&C:\ProgramData\DRM\Lupiv360sde.dll&
[ 本帖最后由 流风33 于
21:21 编辑 ]
　如果您的问题得到解决，请修改标题加上“[已解决]”
在线时间2769 小时最后登录评分435 金币38716 树叶1710 注册时间阅读权限60帖子主题精华0积分1122UID516742
珍惜生命 远离电脑
自成一派, 积分 1122, 距离下一级还需 378 积分
树叶1710 金币38716 积分1122
看完了？我又晚了一步:q1;
在线时间16 小时最后登录评分7 金币172 树叶0 注册时间阅读权限15帖子主题精华0积分8UID1005419
初显锋芒, 积分 8, 距离下一级还需 12 积分
树叶0 金币172 积分8
大侠果然是大侠！赞一个！~
之前，我手动删除了C盘下的几个可疑.VBS和.EXE文件，也发现开始启动项有一个svchost.exe 的可疑项目，360的介绍也全部为空，虽然禁止启动，但还是不确定源文件所在。
从分析结果来看是：3.exe和lupiv360sde.dll 这两个文件咯，请问是什么性质文件。木马，还是病毒。
小问题是：那个：XDelBox 下载链接找不到服务器，请重新给一个。不知可有使用说明，忘回复。
鹰击九天，狼嚎神州……
在线时间0 小时最后登录评分10 金币347 树叶0 注册时间阅读权限15帖子主题精华0积分11UID904654
初显锋芒, 积分 11, 距离下一级还需 9 积分
树叶0 金币347 积分11
你用sql干嘛。
影音猎手(影音娱乐)
斑竹纪念章
安全天使(病毒安全)
SecurityExpert(病毒与安全)