用户
 找回密码
 立即注册
搜索

[求助] 我这是不是中马了？ 请大家帮我看看

[复制链接]
wuyouwulv

20

主题

174

帖子

78

积分

注册会员

Rank: 2

积分
78
QQ
wuyouwulv 注册会员 21060 楼主
跳转到指定楼层
发表于 2007-4-20 11:25:00
我这是不是中马了？ 请大家帮我看看
<AppInit_DLLs><D:\Personal\Temp\Rar$EX00.547\IceShield\ISSYSPROTECT.DLL>  [N/A]
清楚不掉，不知是什么东西，请大家帮我看看，如何解决？

============================================================
  1. 2007-04-20,11:09:03
  2. System Repair Engineer 2.4.12.806
  3. Smallfrogs (http://www.KZTechs.com)
  4. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
  5. 以下内容被选中：
  6.     所有的启动项目（包括注册表、启动文件夹、服务等）
  7.     浏览器加载项
  8.     正在运行的进程（包括进程模块信息）
  9.     文件关联
  10.     Winsock 提供者
  11.     Autorun.inf
  12.     HOSTS 文件
  14. 启动项目
  15. 注册表
  16. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  17.     <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
  18. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  19.     <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
  20.     <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
  21.     <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
  22.     <IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
  23.     <IMEKRMIG6.1><; C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE>  [(Verified)Microsoft Windows Publisher]
  24.     <MSPY2002><; C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC>  [(Verified)Microsoft Windows Publisher]
  25.     <nod32kui><; "d:\Program Files\Eset\nod32kui.exe" /WAITSERVICE>  [Eset ]
  26.     <runeip><; D:\Program Files\Rising\AntiSpyware\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
  27.     <avgnt><"D:\Program Files\AntiVir PersonalEdition Premium\avgnt.exe" /min>  [Avira GmbH]
  28.     <CAPON><C:\WINDOWS\system32\Spool\Drivers\w32x86\3\CAPONN.EXE>  [CANON INC.]
  29. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  30.     <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
  31.     <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
  32. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  33.     <AppInit_DLLs><D:\Personal\Temp\Rar$EX00.547\IceShield\ISSYSPROTECT.DLL>  [N/A]
  34. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  35.     <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
  36. ==================================
  37. 启动文件夹
  38. [Canon LBP-810 状态窗口]
  39.   <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Canon LBP-810 状态窗口.LNK --> C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE [CANON INC.]><N>
  40. ==================================
  41. 服务
  42. [AntiVir PersonalEdition Premium MailGuard / AntiVirMailService][Stopped/Disabled]
  43.   <D:\Program Files\AntiVir PersonalEdition Premium\avmailc.exe><Avira GmbH>
  44. [AntiVir PersonalEdition Premium Guard / AntiVirService][Running/Auto Start]
  45.   <D:\Program Files\AntiVir PersonalEdition Premium\avguard.exe><Avira GmbH>
  46. [ASP.NET State Service / aspnet_state][Stopped/Manual Start]
  47.   <C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe><N/A>
  48. [Autodesk Licensing Service / Autodesk Licensing Service][Stopped/Manual Start]
  49.   <"C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe"><Autodesk>
  50. [AntiVir PersonalEdition Premium MailGuard helper service / AVEService][Stopped/Disabled]
  51.   <D:\Program Files\AntiVir PersonalEdition Premium\avesvc.exe><Avira GmbH>
  52. [Human Interface Device Access / HidServ][Stopped/Disabled]
  53.   <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
  54. [McAfee Framework Service / McAfeeFramework][Stopped/Auto Start]
  55.   <><N/A>
  56. [MSSQLSERVER / MSSQLSERVER][Stopped/Manual Start]
  57.   <d:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
  58. [MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  59.   <C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
  60. [MSSQLServerOLAPService / MSSQLServerOLAPService][Running/Auto Start]
  61.   <d:\Program Files\Microsoft Analysis Services\Bin\msmdsrv.exe><Microsoft Corporation>
  62. [NOD32 Kernel Service / NOD32krn][Stopped/Manual Start]
  63.   <"d:\Program Files\Eset\nod32krn.exe"><Eset>
  64. [SQLSERVERAGENT / SQLSERVERAGENT][Stopped/Manual Start]
  65.   <d:\PROGRA~1\MICROS~3\MSSQL\binn\sqlagent.exe><Microsoft Corporation>
  66. ==================================
  67. 驱动程序
  68. [AMON / AMON][Running/Auto Start]
  69.   <\??\C:\WINDOWS\system32\drivers\amon.sys><Eset>
  70. [avgio / avgio][Running/System Start]
  71.   <\??\D:\Program Files\AntiVir PersonalEdition Premium\avgio.sys><Avira GmbH>
  72. [avgntflt / avgntflt][Running/Manual Start]
  73.   <\??\D:\Program Files\AntiVir PersonalEdition Premium\avgntflt.sys><Avira GmbH>
  74. [KRegEx / KRegEx][Stopped/System Start]
  75.   <\??\C:\PROGRA~1\KV2006\KRegEx.sys><N/A>
  76. [KvMemon / KvMemon][Stopped/Manual Start]
  77.   <\??\C:\PROGRA~1\KV2006\KvMemon.sys><N/A>
  78. [MINICD / MINICD][Running/Auto Start]
  79.   <system32\DRIVERS\minicd.sys><http://www.138soft.com>
  80. [npkcrypt / npkcrypt][Running/Auto Start]
  81.   <\??\D:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
  82. [PNP14918 / PNP14918][Running/Boot Start]
  83.   <\SystemRoot\system32\Drivers\pnp14716.sys><Anti Driver>
  84. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  85.   <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
  86. [RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  87.   <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising>
  88. [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]
  89.   <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
  90. [sptd / sptd][Running/Boot Start]
  91.   <\SystemRoot\System32\Drivers\sptd.sys><N/A>
  92. [ssmdrv / ssmdrv][Stopped/Manual Start]
  93.   <system32\DRIVERS\ssmdrv.sys><Avira GmbH>
  94. [trid3d / trid3d][Running/Manual Start]
  95.   <system32\DRIVERS\trid3dm.sys><Trident Microsystems Inc.>
  96. [VIA AGP Filter / viaagp1][Running/Boot Start]
  97.   <\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
  98. [ViaIde / ViaIde][Running/Boot Start]
  99.   <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
  100. [VIA AC'97 Audio Controller (WDM) / VIAudio][Running/Manual Start]
  101.   <system32\drivers\ac97via.sys><VIA Technologies, Inc.>
  102. ==================================
  103. 浏览器加载项
  104. [FGCatchUrl]
  105.   {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <D:\Program Files\FlashGet\jccatch.dll, www.flashget.com>
  106. [QQ]
  107.   {c95fe080-8f5d-11d2-a20b-00aa003c157b}? <D:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
  108. [Windows Genuine Advantage Validation Tool]
  109.   {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
  110. [Windows Media Player]
  111.   {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
  112. [Windows Media Player]
  113.   {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  114. [Microsoft Web 浏览器]
  115.   {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
  116. [Thunder Browser Helper]
  117.   {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
  118. [AUDIO__MP3 Moniker Class]
  119.   {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  120. [VIDEO__X_MS_WMV Moniker Class]
  121.   {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
  122. [PasswordEditCtrl Class]
  123.   {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <d:\Program Files\Tencent\QQ\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
  124. [&使用快车(FlashGet)下载]
  125.   <D:\Program Files\FlashGet\jc_link.htm, N/A>
  126. [&使用快车(FlashGet)下载全部链接]
  127.   <D:\Program Files\FlashGet\jc_all.htm, N/A>
  128. [导出到 Microsoft Office Excel(&X)]
  129.   <res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
  130. [添加到QQ自定义面板]
  131.   <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
  132. ==================================
  133. 正在运行的进程
  134. [PID: 348][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  135. [PID: 436][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  136.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  137. [PID: 480][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  138. [PID: 492][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  139.     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 51, 26 ]
  140. [PID: 640][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  141. [PID: 1144][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  142.     [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 17.0.54.0]
  143.     [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 17.0.54.110]
  144.     [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  145. [PID: 1408][D:\Program Files\AntiVir PersonalEdition Premium\avgnt.exe]  [Avira GmbH, 7.00.04.05]
  146.     [D:\Program Files\AntiVir PersonalEdition Premium\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
  147.     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 51, 26 ]
  148. [PID: 1720][C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE]  [CANON INC., 1.00.1.012]
  149.     [C:\WINDOWS\system32\imon.dll]  [Eset , 2, 51, 26 ]
  150. ==================================
  151. 文件关联
  152. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  153. .EXE  OK. ["%1" %*]
  154. .COM  OK. ["%1" %*]
  155. .PIF  OK. ["%1" %*]
  156. .REG  OK. [regedit.exe "%1"]
  157. .BAT  OK. ["%1" %*]
  158. .SCR  OK. ["%1" /S]
  159. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  160. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  161. .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  162. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  163. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  164. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  165. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]
  166. ==================================
  167. Winsock 提供者
  168. NOD32 protected [MSAFD Tcpip [TCP/IP]]
  169.     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
  170. NOD32 protected [MSAFD Tcpip [RAW/IP]]
  171.     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
  172. NOD32 protected [RSVP TCP Service Provider]
  173.     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
  174. NOD32
  175.     C:\WINDOWS\system32\imon.dll(Eset , NOD32 IMON - Internet scanning support)
  176. ==================================
  177. Autorun.inf
  178. N/A
  179. ==================================
  180. HOSTS 文件
  181. 127.0.0.1       localhost
  182. ==================================
  183. API HOOK
  184. N/A
  185. ==================================
  186. 隐藏进程
  187. N/A
  188. ==================================
复制代码
使用道具 举报 回复
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则