热点科技

标题: [求助] 发现W32/Fusic蠕虫怎么办啊 [打印本页]

作者: tdhtdh 时间: 2006-7-28 14:16
标题: [求助] 发现W32/Fusic蠕虫怎么办啊
发现W32/Fusic蠕虫怎么办啊
发现W32/Fusic蠕虫
可疑文件：C:\WINDOWS\system32\IEHelper.dll
该怎么办,强人帮忙啊

作者: masilei 时间: 2006-7-28 14:47
IEHelper.dll ？

有点像是“QQ表情助手”，怎么会是W32/Fusic蠕虫呢？

使用HijackThis或者SREng工具扫描保存LOG贴出来看看吧。

作者: ClaireLu0811 时间: 2006-7-28 14:49
用兔子清理，是流氓软件

作者: xiemeng000 时间: 2006-7-28 15:03
2006-07-28,14:15:16

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
<msq><C:\WINDOWS\system32\msq.exe>  [1000 Oaks]
<KavPFW><"C:\KAV2006\KPFW32.EXE">  [Kingsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
&lt

HIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
&lt

HIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
<Lskbdrv><C:\Program Files\Lenovo\幸福一键通\Kbdriver.exe>  []
<LenSoft><C:\Program Files\Lenovo\幸福一键通\FlyShuttle.exe>  []
<SoundMan><SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
<KavStart><"C:\KAV2006\KAVStart.exe" -startup>  [Kingsoft Corporation]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>  [RealNetworks, Inc.]
<IESAddr><>  []
<Windows Defender><"C:\Program Files\Windows Defender\MSASCui.exe" -hide>  [Microsoft Corporation]
<res><C:\WINDOWS\system32\res.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>  [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\bcffki.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{54D9498B-CF93-414F-8984-8CE7FDE0D391}><>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ATIModeChange><; Ati2mdxx.exe>  [ATI Technologies, Inc.]
<KuGoo3><; D:\Program Files\KuGoo3\KuGoo.exe>  []
<RichMedia><; C:\WINDOWS\system32\Rundll32.exe  "C:\PROGRA~1\HBClient\hbhelper.dll",WaitWindows>  []
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>  [RealNetworks, Inc.]
<Update><; >  []

==================================
启动文件夹
[InterVideo WinCinema Manager]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\InterVideo WinCinema Manager.lnk><N>
[星空极速]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\星空极速.lnk><N>

==================================
服务
[C-DillaSrv / C-DillaSrv]
  <C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE><C-Dilla Ltd>
[ewido security suite control / ewido security suite control]
  <D:\Ewido\ewido anti-malware\ewidoctrl.exe><ewido networks>
[Kingsoft Personal Firewall Service / KPfwSvc]
  <"C:\KAV2006\KPfwSvc.EXE"><Kingsoft Corporation>
[Kingsoft Antivirus KWatch Service / KWatchSvc]
  <C:\KAV2006\KWatch.EXE><Kingsoft Corporation>
[Te1net / Te1net]
  <><N/A>
[WinkldUP / WinkldUP]
  <><N/A>

==================================
浏览器加载项
[IEHlprObj Class]
  {D424FE4E-CAF9-4fdd-BC5F-E6E6B91D53BF} <C:\Progra~1\NetMeeting\nmview.dll, Microsoft Corporation>
[浩方对战平台]
  {0A155D3C-68E2-4215-A47A-E800A446447A} <D:\Program Files\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[联想]
  {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.legend.com, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <d:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <d:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[BitCometBar]
  {3F1ABCDB-A875-46c1-8345-B72A4567E486} <C:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll, N/A>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\System32\LegitCheckControl.DLL, Microsoft? Corporation>
[InstaFred]
  {1F831FA1-42FC-11D4-95A6-0080AD30DCE1} <C:\WINDOWS\DOWNLO~1\InstFred.ocx, Autodesk, Inc.>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\System32\wuweb.dll, Microsoft Corporation>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\System32\muweb.dll, Microsoft Corporation>
[AcDcToday 控件]
  {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} <C:\WINDOWS\DOWNLO~1\ACDCTO~1.OCX, Autodesk>
[NOXLATE-BANR]
  {AE563722-B4F5-11D4-A415-00108302FDFD} <C:\WINDOWS\DOWNLO~1\InstBanr.ocx, Autodesk, Inc.>
[AcPreview 控件]
  {F281A59C-7B65-11D3-8617-0010830243BD} <C:\WINDOWS\DOWNLO~1\ACPREV~1.OCX, Autodesk>
[FltSetUp Class]
  {1D49D58D-5C84-4B50-8359-D9809BEB2B32} <C:\Program Files\Internet Explorer\Connection Wizard\icwnet.dll, N/A>
[BitCometBar]
  {3F1ABCDB-A875-46C1-8345-B72A4567E486} <C:\Program Files\BitComet\BitCometBar\BitCometBar0.1.dll, N/A>
[VnetCookie Class]
  {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <d:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <F:\新建文件夹\Components\InMedia\MediaAddin04.dll, Thunder Networking Technologies,LTD>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\System32\shdocvw.dll, Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <F:\新建文件夹\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[IEHlprObj Class]
  {999ADFA2-8AD1-47FF-97FC-69FB847458F4} <C:\Progra~1\NetMeeting\nmview.dll, Microsoft Corporation>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, N/A>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[IEHlprObj Class]
  {D424FE4E-CAF9-4FDD-BC5F-E6E6B91D53BF} <C:\Progra~1\NetMeeting\nmview.dll, Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[&使用迅雷下载]
  <F:\新建文件夹\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <F:\新建文件夹\Program\GetAllUrl.htm, N/A>
[上传到QQ网络硬盘]
  <D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用KuGoo3下载(&K)]
  <D:\Program Files\KuGoo3\KuGoo3DownX.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
  <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
[用炫彩图铃发送该图片]
  <, N/A>

==================================
正在运行的进程
[PID: 436][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 484][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 508][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 552][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 564][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 704][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 772][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 848][C:\Program Files\Windows Defender\MsMpEng.exe]  <Microsoft Corporation><1.1.1347.0>
[PID: 892][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 964][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1048][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1124][C:\KAV2006\KWatch.EXE]  <Kingsoft Corporation><2005, 9, 27, 51>
[C:\KAV2006\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
[C:\KAV2006\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
[C:\KAV2006\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
[C:\KAV2006\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
[PID: 1292][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 1328][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1608][C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE]  <C-Dilla Ltd><3.23.000>
[PID: 1632][D:\Ewido\ewido anti-malware\ewidoctrl.exe]  <ewido networks><3, 0, 0, 1>
[D:\Ewido\ewido anti-malware\lang.dll]  <privat><1, 0, 0, 1>
[PID: 1652][C:\KAV2006\KPfwSvc.EXE]  <Kingsoft Corporation><2005, 9, 5, 28>
[PID: 1716][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 828][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1512][C:\Program Files\Lenovo\幸福一键通\Kbdriver.exe]  <N/A><N/A>
[C:\Program Files\Lenovo\幸福一键通\lxkeyled.dll]  <N/A><N/A>
[C:\Program Files\Lenovo\幸福一键通\VolumeOsd.dll]  <N/A><N/A>
[C:\Program Files\Lenovo\幸福一键通\ScrOSD32.dll]  <N/A><N/A>
[C:\Program Files\Lenovo\幸福一键通\tgekb.dll]  <N/A><N/A>
[C:\Program Files\Lenovo\幸福一键通\XPNyGet.dll]  <N/A><N/A>
[PID: 1644][C:\Program Files\Lenovo\幸福一键通\FlyShuttle.exe]  <><1, 0, 0, 1>
[C:\Program Files\Lenovo\幸福一键通\CLxUI.dll]  <联想（北京）有限公司><1, 0, 0, 1>
[C:\Program Files\Lenovo\幸福一键通\SKOSD.DLL]  <Silitek Corp.><1, 0, 6, 0>
[C:\Program Files\Lenovo\幸福一键通\SKUtil.DLL]  <Silitek Corp.><1, 0, 9, 0>
[C:\Program Files\Lenovo\幸福一键通\VolumeOsd.dll]  <N/A><N/A>
[C:\Program Files\Lenovo\幸福一键通\ScrOSD32.dll]  <N/A><N/A>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 1696][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.0.19>
[PID: 1760][C:\KAV2006\KAVStart.exe]  <Kingsoft Corporation><2006, 4, 10, 196>
[C:\KAV2006\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
[C:\KAV2006\PopSprt3.dll]  <Kingsoft Corporation><2005, 12, 6, 30>
[C:\KAV2006\KAVPassp.dll]  <Kingsoft Corporation><2006, 5, 9, 237>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 1780][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.1622>
[PID: 1964][C:\Program Files\Windows Defender\MSASCui.exe]  <Microsoft Corporation><1.1.1347.0>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 2012][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2044][C:\KAV2006\KMailMon.EXE]  <Kingsoft Corporation><2005, 10, 8, 85>
[C:\KAV2006\KAntiSpm.dll]  <N/A><1, 0, 0, 2>
[C:\KAV2006\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
[C:\KAV2006\KAECall2.DLL]  <Kingsoft Corporation><2004, 12, 28, 7>
[C:\KAV2006\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
[C:\KAV2006\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
[C:\KAV2006\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
[C:\KAV2006\KAConfig.DLL]  <Kingsoft Corporation><2005, 3, 23, 30>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 172][C:\KAV2006\KPFW32.EXE]  <Kingsoft Corporation><2006, 1, 17, 609>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[C:\KAV2006\KAVIPC2.DLL]  <Kingsoft Corporation><2004, 12, 28, 20>
[C:\KAV2006\KAConfig.DLL]  <Kingsoft Corporation><2005, 3, 23, 30>
[C:\KAV2006\FiltList.dll]  <N/A><N/A>
[C:\KAV2006\KAVPassp.DLL]  <Kingsoft Corporation><2006, 5, 9, 237>
[C:\KAV2006\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
[C:\KAV2006\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
[C:\KAV2006\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
[PID: 196][C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe]  <><1.0>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[PID: 340][C:\Program Files\ChinaNet\VnetClient.exe]  <><2005, 11, 14, 1>
[C:\Program Files\ChinaNet\Communicate.dll]  <0><2005, 3, 3, 1>
[C:\Program Files\ChinaNet\DialModule.dll]  <GDCN><2005, 11, 15, 1>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[C:\PROGRA~1\ChinaNet\CLIENT~1.DLL]  <><2004, 2, 28, 1>
[C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX]  <><2005, 7, 27, 1>
[C:\PROGRA~1\ChinaNet\sign.dll]  <0><2004, 12, 1, 1>
[C:\PROGRA~1\ChinaNet\WEBPLU~1.DLL]  <><2005, 8, 18, 1>
[C:\PROGRA~1\ChinaNet\PostPlug.dll]  <><2004, 12, 16, 2>
[C:\PROGRA~1\ChinaNet\ADVERT~1.OCX]  <><2005, 10, 13, 1>
[C:\PROGRA~1\ChinaNet\Gif89a.dll]  <><2005, 6, 21, 1>
[C:\PROGRA~1\ChinaNet\VnetBs.ocx]  <><2004, 11, 18, 1>
[C:\PROGRA~1\ChinaNet\ACCOUN~2.DLL]  <><2005, 11, 14, 1>
[C:\PROGRA~1\ChinaNet\AccountMgr.dll]  <><2005, 11, 14, 17>
[C:\PROGRA~1\ChinaNet\VnetSkin.ocx]  <GDDC><2005, 11, 14, 1>
[C:\PROGRA~1\ChinaNet\DialogStyle.dll]  <><1, 0, 0, 1>
[C:\PROGRA~1\ChinaNet\Timer.ocx]  <><2005, 10, 9, 14>
[C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX]  <><2005, 2, 24, 1>
[C:\PROGRA~1\ChinaNet\NEWMES~1.DLL]  <><2005, 8, 26, 1>
[C:\PROGRA~1\ChinaNet\PassCtrl.dll]  <><1, 0, 0, 1>
[C:\PROGRA~1\ChinaNet\PlugPush.dll]  <><2004, 12, 21, 1>
[C:\PROGRA~1\ChinaNet\ALLINT~1.DLL]  <><2004, 11, 23, 1>
[C:\PROGRA~1\ChinaNet\VNetLog.ocx]  <><2005, 10, 9, 1>
[C:\PROGRA~1\ChinaNet\StatNum.dll]  <><2004, 11, 18, 1>
[C:\PROGRA~1\ChinaNet\VNETON~1.OCX]  <><2005, 3, 2, 1>
[C:\PROGRA~1\ChinaNet\ALLFUN~1.DLL]  <GDCN><2005, 10, 9, 1>
[C:\PROGRA~1\ChinaNet\VnetOptLog.dll]  <><2005, 9, 13, 9>
[C:\KAV2006\KAScript.DLL]  <Kingsoft Corporation><2006, 2, 10, 60>
[C:\KAV2006\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
[C:\KAV2006\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
[C:\KAV2006\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
[C:\PROGRA~1\ChinaNet\DlgSkin.ocx]  <><2005, 11, 14, 1>
[C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 3860][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[C:\KAV2006\KAScript.DLL]  <Kingsoft Corporation><2006, 2, 10, 60>
[C:\KAV2006\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
[C:\KAV2006\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
[C:\KAV2006\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
[C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 3744][F:\新建文件夹\Program\Thunder5.exe]  <Thunder Networking Technologies,LTD><5.2.0.207>
[F:\新建文件夹\Program\UpdateDownload.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 8>
[F:\新建文件夹\Program\download_interface.dll]  <Thunder Networking Technologies,LTD><1, 0, 3, 70>
[F:\新建文件夹\Program\log4cplus.dll]  <><1, 0, 2, 1>
[F:\新建文件夹\Program\stlport_vc646.dll]  <STLport Consulting, Inc.><4.6.2003.1031>
[F:\新建文件夹\Program\asyn_dns.dll]  <N/A><N/A>
[F:\新建文件夹\Program\msgmanage.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 15>
[F:\新建文件夹\Program\historyinfo_manage.dll]  <Thunder Networking Technologies,LTD><5, 2, 0, 148>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
[F:\新建文件夹\Program\RegisterDll.dll]  <Thunder Networking Technologies,LTD><1, 2, 0, 7>
[F:\新建文件夹\Program\FloatBar.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 2>
[F:\新建文件夹\Components\InMedia\iEmbedShell.dll]  <　><1, 0, 0, 5>
[F:\新建文件夹\Components\InMedia\iEmbed.dll]  <　><2, 1, 0, 29>
[F:\新建文件夹\Components\P4PClient\P4PClient.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 6>
[F:\新建文件夹\Program\iTargetAd.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 60>
[C:\KAV2006\KAScript.DLL]  <Kingsoft Corporation><2006, 2, 10, 60>
[C:\KAV2006\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
[C:\KAV2006\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
[C:\KAV2006\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
[C:\WINDOWS\System32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 3260][C:\DOCUME~1\wf\LOCALS~1\Temp\Rar$EX00.687\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
[C:\KAV2006\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  Error. [AutoCADScriptFile]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

作者: SZF123 时间: 2006-7-28 15:19
兔子没用啊,急啊

欢迎光临热点科技 (http://www.itheat.com/activity/)