一按f1就弹出暴风影音音老弹出一堆ie广告
点击联系发帖人
时间：2014-11-07 17:56
只需一步，快速开始
后使用快捷导航
电脑总是自动弹出网页
该用户从未签到
马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。
才可以下载或查看，没有帐号？
我的默认浏览器是遨游，毒霸，卫士，全盘杀无毒，电脑医生的清除流氓软件也无法解决，我看到/zt/weishi_zttgg.shtml上说，通过跟踪用户金山安全专家发现发现总出现弹出广告、自动弹出游戏广告、弹出游戏广告是游戏厂商与部分网站达成推广协议。但是，现在已经已有黑客利用该方法进行挂马、捆绑木马欺骗，请用金山卫士保护您的电脑，不受广告和广告木马带来的威胁。我安装了金山卫士，但不知道该怎么设置才能不弹网页？
附serng报告，高手帮我看下，谢谢。
,20:33:22
System Repair Engineer 2.8.4.1331
Smallfrogs ()
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
& & 所有的启动项目（包括注册表、启动文件夹、服务等）
& & 浏览器加载项
& & 正在运行的进程（包括进程模块信息）
& & 文件关联
& & Winsock 提供者
& & Autorun.inf
& & HOSTS 文件
& & 进程特权扫描
& & 计划任务
& & Windows 安全更新检查
& & API HOOK
& & 隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
& & &ctfmon.exe&&C:\WINDOWS\system32\ctfmon.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &load&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
& & &IMSS&&&C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe&&&&[(Verified)Intel Corporation]
& & &HotKeysCmds&&C:\WINDOWS\system32\hkcmd.exe&&&[(Verified)Intel Corporation]
& & &kxesc&&&d:\金山\kingsoft antivirus\kxetray.exe& -autorun&&&[(Verified)Beijing Kingsoft Security software Co.,Ltd]
& & &KSafeTray&&&d:\金山卫士\ksafe\KSafeTray.exe& -autorun&&&[(Verified)Kingsoft Security Co.,Ltd]
& & &shield&&C:\Program Files\Yuguo\shieldtray.exe&&&[(Verified)EAZ SOLUTION, INC.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &shell&&Explorer.exe&&&[(Verified)Microsoft Windows Component Publisher]
& & &Userinit&&C:\WINDOWS\system32\\userinit.exe,&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &AppInit_DLLs&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &UIHost&&logonui.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
& & &{AEB-11d0-97EE-00C04FD91972}&&shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
& & &PostBootReminder&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &CDBurn&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &WebCheck&&%SystemRoot%\system32\webcheck.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &SysTray&&C:\WINDOWS\system32\stobject.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
& & &WinlogonNotify: crypt32chain&&crypt32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
& & &WinlogonNotify: cryptnet&&cryptnet.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
& & &WinlogonNotify: cscdll&&cscdll.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
& & &WinlogonNotify: dimsntfy&&%SystemRoot%\System32\dimsntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
& & &WinlogonNotify: igfxcui&&igfxdev.dll&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
& & &WinlogonNotify: ScCertProp&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
& & &WinlogonNotify: Schedule&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
& & &WinlogonNotify: sclgntfy&&sclgntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
& & &WinlogonNotify: SensLogn&&WlNotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
& & &WinlogonNotify: termsrv&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
& & &WinlogonNotify: wlballoon&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
& & &{-A8BA-11D1-B96B-00A0C90312E1}&&%SystemRoot%\system32\browseui.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &{8C7461EF-2B13-11d2-BE35-0}&&%SystemRoot%\system32\browseui.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
& & &IE7 Uninstall Stub&&C:\WINDOWS\system32\ieudinit.exe&&&[Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{22d6f312-b0f6-11d0-94ab-e95}]
& & &Microsoft Windows Media Player&&C:\WINDOWS\inf\\unregmp2.exe /ShowWMP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{d38-484f-9b9e-dec}]
& & &Internet Explorer&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}MICROS]
& & &浏览器自定义组件&&RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
& & &Outlook Express&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09--FED}]
& & &Themes Setup&&%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
& & &Microsoft Outlook Express 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:OE /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
& & &NetMeeting 3.01&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{e7d-11d1-bc44-00c04fd912be}]
& & &Windows Messenger 4.7&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
& & &Microsoft Windows Media Player&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{71-11d2-AF11-00C04FA35D02}]
& & &通讯簿 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:WAB /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4340}]
& & &Windows 桌面更新&®svr32.exe /s /n /i:U shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4383}]
& & &Internet Explorer 6&&%SystemRoot%\system32\ie4uinit.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
& & &SCRNSAVE.EXE&&C:\WINDOWS\System32\logon.scr&&&[(Verified)Microsoft Windows Component Publisher]
==================================
启动文件夹
N/A
==================================
服务
[Adobe LM Service / Adobe LM Service][Stopped/Manual Start]
&&&&C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe&&&Adobe Systems&
[Adobe Flash Player Update Service / AdobeFlashPlayerUpdateSvc][Stopped/Manual Start]
&&&C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe&&Adobe Systems Incorporated&
[AppleChargerSrv / AppleChargerSrv][Stopped/Manual Start]
&&&system32\AppleChargerSrv.exe&&(File is missing)&
[CBoxService / CBoxService][Stopped/Manual Start]
&&&&D:\cbox\CBox\CBoxService.exe&&&中国网络电视台CNTV&
[Cmb WebProtect Support / CMBWPS][Running/Auto Start]
&&&C:\Program Files\CMBCHINA\WebProtect\WPService.exe /start&&China Merchants Bank&
[Intel(R) Capability Licensing Service Interface / Intel(R) Capability Licensing Service Interface][Running/Auto Start]
&&&&C:\Program Files\Intel\iCLS Client\HeciServer.exe&&&Intel(R) Corporation&
[Intel(R) Dynamic Application Loader Host Interface Service / jhi_service][Running/Auto Start]
&&&C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe&&Intel Corporation&
[KSafe service / KSafeSvc][Running/Auto Start]
&&&&d:\金山卫士\ksafe\KSafeSvc.exe& -svc&&Kingsoft Corporation&
[Kingsoft Core Service / kxescore][Running/Auto Start]
&&&&d:\金山\kingsoft antivirus\kxescore.exe& /service kxescore&&Kingsoft Corporation&
[Intel(R) Management and Security Application Local Management Service / LMS][Running/Auto Start]
&&&C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe&&Intel Corporation&
[SHDSERV / SHDSERV][Running/Auto Start]
&&&C:\Program Files\Yuguo\shdserv.exe&&南京安悦科技有限公司&
[Shield Client Service / ShieldClientService][Stopped/Manual Start]
&&&C:\Program Files\Yuguo\shieldclnt.exe&&N/A&
[Intel(R) Management and Security Application User Notification Service / UNS][Running/Manual Start]
&&&&C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe&&&Intel Corporation&
[VJVodClientServices / vvdsvc][Stopped/Manual Start]
&&&C:\WINDOWS\System32\svchost.exe -k vvdsvc--&D:\先锋网络电视\ltv\vjocx.dll&&南京纳加软件有限公司&
==================================
驱动程序
[Ambfilt / Ambfilt][Stopped/Manual Start]
&&&system32\drivers\Ambfilt.sys&&Creative&
[ApolloProtect / ApolloProtect][Stopped/Manual Start]
&&&\??\F:\街头篮球\Apollo\Apollo.sys&&N/A&
[AppleCharger / AppleCharger][Running/System Start]
&&&system32\DRIVERS\AppleCharger.sys&&N/A&
[BC / BC][Running/Boot Start]
&&&\SystemRoot\system32\Drivers\BC.sys&&Kingsoft Corporation&
[CMB8100 / CMB8100][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\Drivers\CertClient.dat&&N/A&
[CMBProtector / CMBProtector][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\Drivers\CMBProtector.dat&&N/A&
[gdrv / gdrv][Stopped/Manual Start]
&&&\??\C:\WINDOWS\gdrv.sys&&N/A&
[HaoZip Virtual Bus Driver / HaozipVirtualCDBus][Stopped/Manual Start]
&&&system32\DRIVERS\HaoZipVirtualCDBus.sys&&Shanghai RuiChuang&
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
&&&system32\DRIVERS\HDAudBus.sys&&Windows (R) Server 2003 DDK provider&
[ialm / ialm][Running/Manual Start]
&&&system32\DRIVERS\igxpmp32.sys&&Intel Corporation&
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
&&&system32\drivers\RtkHDAud.sys&&Realtek Semiconductor Corp.&
[kavbootc / kavbootc][Running/Boot Start]
&&&\SystemRoot\system32\drivers\kavbootc.sys&&Kingsoft Corporation&
[KDHacker / KDHacker][Running/System Start]
&&&\??\d:\金山\kingsoft antivirus\security\kxescan\kdhacker.sys&&Kingsoft Corporation&
[kisknl / kisknl][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\drivers\kisknl.sys&&Kingsoft Corporation&
[kmodurl / kmodurl][Running/System Start]
&&&\??\d:\金山卫士\ksafe\kmodurlxp.sys&&Kingsoft Corporation&
[ksafebootsafe / ksafebootsafe][Running/Boot Start]
&&&\SystemRoot\system32\Drivers\ksafebootsafe.sys&&Kingsoft Corporation&
[ksapi / ksapi][Running/Manual Start]
&&&\??\C:\WINDOWS\system32\drivers\ksapi.sys&&Kingsoft Corporation&
[Intel(R) Management Engine Interface&&/ MEI][Running/Manual Start]
&&&system32\DRIVERS\HECI.sys&&Intel Corporation&
[Monfilt / Monfilt][Stopped/Manual Start]
&&&system32\drivers\Monfilt.sys&&Creative Technology Ltd.&
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
&&&system32\DRIVERS\ptilink.sys&&Parallel Technologies, Inc.&
[QQProtect / QQProtect][Running/System Start]
&&&\??\C:\WINDOWS\system32\drivers\QQProtect.sys&&Tencent&
[Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Running/Manual Start]
&&&system32\DRIVERS\Rtenicxp.sys&&Realtek Semiconductor Corporation&
[Secdrv / Secdrv][Stopped/Manual Start]
&&&system32\DRIVERS\secdrv.sys&&Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.&
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
&&&system32\DRIVERS\tcpip.sys&&Microsoft Corporation&
[TesSafe / TesSafe][Stopped/Manual Start]
&&&\??\C:\WINDOWS\system32\TesSafe.sys&&TENCENT&
==================================
浏览器加载项
[QQDownload IE Left Helper]
&&{C9--D2} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{00000ADA-7E0D-47C1-986C-F017D09C4304} &, &
[IE2EMBHO Class]
&&{0A0DDBD3--873F-BBDD26D6C14E} &D:\电驴\easyMule\modules\IE2EM.dll, (Signed) &
[EyeOnIE Class]
&&{20E-41A9-954A-04DCCB1FD16C} &D:\暴风影音\StormPlayer\MediaLibraryIcon.dll, (Signed) 北京暴风科技股份有限公司&
[WebProtect]
&&{CA8-4C7C-B8FC063B} &C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank&
[迅雷下载支持]
&&{889D2FEB-98-1DD2C5261283} &D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[迅雷BHO平台]
&&{DE05CF4A-7B0A--} &D:\迅雷\Thunder BHO Platform\IEPlatform.dll, (Signed) 深圳市迅雷网络技术有限公司&
[PPLive]
&&{95B3F550-91C4-4627-BCC4-77} &D:\PPTV\PPLive.exe, (Signed) PPLive Corporation&
[金山快译(&K)]
&&{6CFEF-4cd4-B654-D3AE55B4128C} &D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll, Copyright (c) Kingsoft Corporation Limited. All rights reserved.&
[QQDownload IE Left Helper]
&&{C9--D2} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{00000ADA-7E0D-47C1-986C-F017D09C4304} &, &
[AliCertDOCtrl Class]
&&{08D512D2-7D97-4E22-B7DB-} &C:\Documents and Settings\VIP\Application Data\alipay\cf\alicdo.dll, (Signed) Alipay&
[IE2EMBHO Class]
&&{0A0DDBD3--873F-BBDD26D6C14E} &D:\电驴\easyMule\modules\IE2EM.dll, (Signed) &
[]
&&{14C1D00E-0B92-4FA2D740DD} &, &
[]
&&{1A3-4CAB-84EE-C814E1AE0D8F} &, &
[WWPicUploadCtrl Class]
&&{1D6-4A42-890D-EE617AA1537D} &D:\阿里旺旺\7.21.01C\modules\1685\WWPictureUpload.dll, (Signed) Alibaba software (Shanghai) Corporation&
[InstallHelper Class]
&&{1DABF8D5-B7F-A30E53D709B3} &C:\WINDOWS\system32\MMInstaller.dll, (Signed) Tencent&
[iTrusPTA Class]
&&{1E0DFFCF-27FF-007349FEDA} &C:\WINDOWS\system32\itruscert\PTA.dll, (Signed) iTruschina Co., Ltd.&
[EyeOnIE Class]
&&{20E-41A9-954A-04DCCB1FD16C} &D:\暴风影音\StormPlayer\MediaLibraryIcon.dll, (Signed) 北京暴风科技股份有限公司&
[]
&&{24C1D00E-0B92-4FA2D740DD} &, &
[HTML Document]
&&{F9-11CF-8FD0-00AA00686F13} &%SystemRoot%\system32\mshtml.dll, (Signed) N/A&
[XML DOM Document]
&&{B36-11D2-B20E-00C04F983E60} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{29B6CFD5-C42-1} &, &
[DHTML Edit Control Safe for Scripting for IE5]
&&{2D360201-FFF5-11D1-8D03-00A0C959BC0A} &C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation&
[HtmlDlgSafeHelper Class]
&&{B5-11CF-BB82-00AA00BDCE0B} &C:\WINDOWS\system32\mshtmled.dll, (Signed) Microsoft Corporation&
[IETag Factory]
&&{-CA0E-42D2-BF39-B33AF135CC4D} &C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, (Signed) Microsoft Corporation&
[UnityWebPlayer Control]
&&{-DE89-A-D46C3A781394} &C:\Documents and Settings\VIP\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx, (Signed) Unity Technologies ApS&
[Agent Class]
&&{-8FB2-4B3B-B29B-8B919B0EACCE} &D:\迅雷\BHO\ThunderAgent7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[EditCtrl Class]
&&{488AB3-8F27-FA1AECAA8844} &C:\WINDOWS\system32\aliedit\aliedit.dll, (Signed) &
[PPS浏览器插件]
&&{4E6A8DA1-B-B036-B9E16EF26CAC} &D:\PPS\PPStream\PPSPLU~1.DLL, (Signed) PPStream Inc.&
[WebProtect]
&&{CA8-4C7C-B8FC063B} &C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank&
[WangWangX Class]
&&{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} &D:\阿里旺旺\7.21.18C\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.&
[]
&&{5EF7B131-C278-4034-BC88-2CE28B128681} &, &
[Windows Media Player]
&&{6BF52A52-394A-11D3-B153-00C04F79FAA6} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[金山快译(&K)]
&&{6CFEF-4CD4-B654-D3AE55B4128C} &D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll, Copyright (c) Kingsoft Corporation Limited. All rights reserved.&
[Thunder59Agent Class]
&&{6EE9CD3E-A386-4DAE-DBF927AE} &C:\Program Files\Common Files\Thunder Network\UserAgent\UserAgent2.0.2.10.dll, (Signed) 深圳市迅雷网络技术有限公司&
[CertEnroll Class]
&&{7978461C-CC22-48F2-BC69-D} &C:\WINDOWS\system32\itruscert\itrusenroll.dll, (Signed) iTruschina Co., Ltd.&
[]
&&{-3DE7-4171-A0DD-A7A} &, &
[]
&&{87CCBB9A-C425-44D4-BBAA-83} &, &
[Microsoft Web 浏览器]
&&{A-11D0-A96B-00C04FD705A2} &C:\WINDOWS\system32\shdocvw.dll, (Signed) Microsoft Corporation&
[迅雷下载支持]
&&{889D2FEB-98-1DD2C5261283} &D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[XML DOM Document 6.0]
&&{88D96A05-F192-11D4-A65F-E5} &C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation&
[QQDownload Class]
&&{8AC3BC28-E145-AAC128ACB16} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{CC-41C8-B9BE-3C9C571A8263} &, &
[]
&&{95B3F550-91C4-4627-BCC4-77} &, &
[OFrameObject Class]
&&{73-482E-B13C-776C048EC890} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[]
&&{A2-4F68-A67B-A} &, &
[APlayer3 Control]
&&{A1-4B9D-91FC-B9C461DBE9DD} &C:\Documents and Settings\All Users\Application Data\Thunder Network\APlayer\APlayer_3.5.0.643.dll, (Signed) ShenZhen Thunder Networking Technologies, LTD&
[DapCtrl Class]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F9} &, &
[SearchAssistantOC]
&&{B45FF030--85DE-00C04FA35C89} &%SystemRoot%\system32\shdocvw.dll, (Signed) N/A&
[AUDIO__MP3 Moniker Class]
&&{CD3AFA76-B84F-48F0-9393-7EDC} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[AUDIO__X_MS_WMA Moniker Class]
&&{CD3AFA84-B84F-48F0-9393-7EDC} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx, (Signed) Adobe Systems, Inc.&
[]
&&{D9EBCF5D-3F8F-4b6a-89BA-7} &, &
[xoliimpl Class]
&&{DD5BF6D1--9DFA-5C343CAF178E} &C:\WINDOWS\xinstaller.dll, (Signed) 深圳市迅雷技术有限公司&
[迅雷BHO平台]
&&{DE05CF4A-7B0A--} &D:\迅雷\Thunder BHO Platform\IEPlatform.dll, (Signed) 深圳市迅雷网络技术有限公司&
[PlayerCtrl Class]
&&{E05BC2A3-9A46-4a32-80C9-023A473F5B23} &C:\Program Files\Tencent\QQMusic\QzoneMusic\QzoneMusic.dll, (Signed) Tencent&
[]
&&{E2E2DD38-D088--F2BA} &, &
[SSOForPTLogin2 Class]
&&{EAAED308-B-965E-171933ADD473} &C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\npSSOAxCtrlForPTLogin.dll, (Signed) Tencent&
[XML HTTP Request]
&&{ED8C108E--91A4-00C04F7969E8} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[PPLive Lite Class]
&&{EF0D1A14--A589-240C01EDC078} &C:\Program Files\Internet Explorer\PPLite\plugin\1.0.1.4584\pplugin2.dll, (Signed) &
[]
&&{F3D0D36F-23F8-C92B03D4AF} &, &
[]
&&{F3E70CEA-956E-49CC-B444-73AFE593AD7F} &, &
[Storm AxPlayer Class]
&&{F06-494D-87E2-} &D:\暴风影音\StormPlayer\webplayer\PlayerShell.dll, (Signed) 北京暴风科技股份有限公司&
[XML HTTP]
&&{F6D90F16-9C73-11D3-B32E-00C04F990BB4} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{F7E55BDF-9528-46ba-B550-} &, &
[]
&&{FB5FD2-BB9E-00C04F795683} &, &
[&使用&迅雷下载]
&&&D:\迅雷\BHO\\GetUrl.htm, N/A&
[&使用&迅雷下载全部链接]
&&&D:\迅雷\BHO\\GetAllUrl.htm, N/A&
[&使用&迅雷离线下载]
&&&D:\迅雷\BHO\OfflineDownload.htm, N/A&
[&迅雷下载到手机]
&&&http://static./shoulei/shouleidl.htm, N/A&
[使用QQ旋风下载(&X)]
&&&D:\QQDownload\geturl.htm, N/A&
[使用QQ旋风下载全部链接(&Q)]
&&&D:\QQDownload\getAllurl.htm, N/A&
[使用QQ旋风离线下载(&L)]
&&&D:\QQDownload\xfofflinedown.htm, N/A&
[使用电驴下载]
&&&D:\电驴\easyMule\IE2EM.htm, N/A&
[导出到 Microsoft Office Excel(&X)]
&&&res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A&
[添加为阿里旺旺表情]
&&&D:\阿里旺旺\7.21.01C\AddNewEmotion.htm, N/A&
==================================
正在运行的进程
[PID: 728 / SYSTEM][\SystemRoot\System32\smss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 788 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 812 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
[PID: 856 / SYSTEM][C:\WINDOWS\system32\services.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 868 / SYSTEM][C:\WINDOWS\system32\lsass.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
[PID: 1068 / SYSTEM][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1180 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1280 / SYSTEM][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1388 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1516 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1628 / SYSTEM][d:\金山卫士\ksafe\KSafeSvc.exe]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\json.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\kdump.dll]&&[Kingsoft Corporation, ,3229]
& & [d:\金山卫士\ksafe\kxebase.dll]&&[Kingsoft Corporation, ,1978]
& & [d:\金山卫士\ksafe\scom.dll]&&[Kingsoft Corporation, ,976]
& & [d:\金山卫士\ksafe\kxecore\kxecore.dll]&&[Kingsoft Corporation, ,2020]
& & [d:\金山卫士\ksafe\kexectrl.dll]&&[Kingsoft Corporation, ,1422]
& & [d:\金山卫士\ksafe\kwssp.dll]&&[Kingsoft Corporation, .4037]
& & [d:\金山卫士\ksafe\netstat.dll]&&[Kingsoft Corporation, 4.7.0.4042]
& & [d:\金山卫士\ksafe\fwproxy.dll]&&[Kingsoft Corporation, 4.7.0.4042]
& & [d:\金山卫士\ksafe\ksinst.dll]&&[Kingsoft Corporation, ,3056]
& & [d:\金山卫士\ksafe\kse\ksecansp.dll]&&[Kingsoft Corporation, 4.0.7.2420]
& & [d:\金山卫士\ksafe\kse\ksbwdet2.dll]&&[Kingsoft Corporation, ,2915]
& & [d:\金山卫士\ksafe\ksapi.dll]&&[Kingsoft Corporation, ,107]
& & [d:\金山卫士\ksafe\khistory.dll]&&[Kingsoft Corporation, ,2880]
& & [d:\金山卫士\ksafe\kse\kseutil.dll]&&[Kingsoft Corporation, ,14]
& & [d:\金山卫士\ksafe\kse\ksesscan.dll]&&[Kingsoft Corporation, ,2]
& & [d:\金山卫士\ksafe\kse\wfs.dll]&&[Kingsoft Corporation, ,1839]
& & [d:\金山卫士\ksafe\kse\sqlite.dll]&&[Kingsoft Corporation, ,1194]
& & [d:\金山卫士\ksafe\keng\kae\kaecore.dat]&&[Kingsoft Corporation, ,1887]
& & [d:\金山卫士\ksafe\ksscore.dll]&&[Kingsoft Corporation, ,3003]
& & [d:\金山卫士\ksafe\sqlite.dll]&&[Kingsoft Corporation, ,1194]
& & [d:\金山卫士\ksafe\khandler.dll]&&[Kingsoft Corporation, ,2036]
& & [d:\金山卫士\ksafe\keng\kae\karchive.dat]&&[Kingsoft Corporation, ,1746]
& & [d:\金山卫士\ksafe\keng\kae\kaearcha.dat]&&[Kingsoft Corporation, ,1407]
& & [d:\金山卫士\ksafe\keng\kae\kaeolea.dat]&&[Kingsoft Corporation, ,1847]
& & [d:\金山卫士\ksafe\keng\kae\kaearchb.dat]&&[Kingsoft Corporation, ,12]
[PID: 1924 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp_sp3_gdr.6)]
& & [C:\WINDOWS\system32\hpinksts9411LM.dll]&&[Hewlett-Packard Co., 22.50.191.0]
[PID: 1460 / VIP][C:\WINDOWS\Explorer.EXE]&&[(Verified) Microsoft Corporation, 6.00. (xpsp.5)]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kshmpg.dll]&&[Kingsoft Corporation, ,159]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山\kingsoft antivirus\kwansvc.dll]&&[Kingsoft Corporation, ,38]
& & [C:\WINDOWS\system32\igfxpph.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\hccutils.DLL]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxrCHS.lrc]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxsrvc.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxdev.dll]&&[Intel Corporation, 6.15.10.5406]
& & [D:\暴风影音\StormPlayer\MediaLibraryIcon.dll]&&[北京暴风科技股份有限公司, 5.28.829.0]
& & [C:\Program Files\WinRAR\rarext.dll]&&[Alexander Roshal, 5.0.0]
& & [C:\Program Files\Unlocker\UnlockerCOM.dll]&&[N/A, ]
& & [C:\WINDOWS\system32\shellfire.dll]&&[, 3,1,8,6069]
& & [D:\阿里旺旺\7.21.01C\AliIMExt.dll]&&[Alibaba software (Shanghai) Corporation., 1.0.0.1]
& & [D:\优化大师\Wopti\WoptiEncryptModule.dll]&&[Wopti, 1.6.10.816]
& & [C:\Program Files\Yuguo\shieldshell.dll]&&[南京安悦科技有限公司, 1,0,11,6]
& & [d:\金山\kingsoft antivirus\kavmenu.dll]&&[Kingsoft Corporation, ,3850]
& & [C:\WINDOWS\system32\msdmo.dll]&&[, ]
[PID: 1396 / SYSTEM][C:\Program Files\CMBCHINA\WebProtect\WPService.exe]&&[China Merchants Bank, 1, 0, 0, 1]
& & [C:\Program Files\CMBCHINA\WebProtect\WebProtectPlus.dll]&&[China Merchants Bank, 1, 0, 0, 1]
[PID: 1600 / SYSTEM][C:\Program Files\Intel\iCLS Client\HeciServer.exe]&&[Intel(R) Corporation, 1.24.738.1 SYSTEM]
[PID: 1664 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe]&&[Intel Corporation, 8.1.0.1265]
[PID: 1728 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe]&&[Intel Corporation, 8.1.0.1281]
[PID: 192 / SYSTEM][C:\Program Files\Yuguo\shdserv.exe]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\shdapi.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\schedule.dll]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\shdservps.dll]&&[N/A, ]
[PID: 312 / SYSTEM][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 2116 / VIP][C:\WINDOWS\system32\hkcmd.exe]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\hccutils.DLL]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxsrvc.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxrCHS.lrc]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\KIme.ime]&&[Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.1]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 2172 / VIP][D:\金山卫士\ksafe\KSafeTray.exe]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\kdump.dll]&&[Kingsoft Corporation, ,3229]
& & [D:\金山卫士\ksafe\ksftray.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\json.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\ksapi.dll]&&[Kingsoft Corporation, ,107]
& & [d:\金山卫士\ksafe\ksfskin.dll]&&[Kingsoft Corporation, 4.7.0.4046]
& & [d:\金山卫士\ksafe\ksafedb.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\krcmdmon.dll]&&[Kingsoft Corporation, 4.7.0.4050]
& & [D:\金山卫士\ksafe\actpush.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\pushapp\\usbmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kinfoc.dll]&&[Kingsoft Corporation, ,5159]
& & [D:\金山卫士\ksafe\krunopt.dll]&&[Kingsoft Corporation, 4.7.0.4041]
& & [d:\金山卫士\ksafe\khistory.dll]&&[Kingsoft Corporation, ,2880]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山卫士\ksafe\kwsctrl.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\ksafeup.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\zlib1.dll]&&[, 1.2.3]
& & [d:\金山卫士\ksafe\KEng\ksignup.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\KEng\KSGMerge.DLL]&&[Kingsoft Corporation, ,1656]
& & [d:\金山卫士\ksafe\ksgamemon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\cloudlib.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvipcore.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvip.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\klogin.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvipinter.dll]&&[Kingsoft Corporation, ,110]
& & [d:\金山卫士\ksafe\httpdlib.dll]&&[Kingsoft Corporation, 4.7.0.4037]
[PID: 2204 / VIP][C:\Program Files\Yuguo\shieldtray.exe]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\ps.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\shdservps.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\clientadd.dll]&&[, 1, 0, 0, 1]
[PID: 2248 / VIP][C:\WINDOWS\system32\ctfmon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.5)]
[PID: 2300 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.2)]
[PID: 3056 / SYSTEM][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 4932 / VIP][C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe]&&[Intel Corporation, 8.1.0.1281]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\cece9db6d4\mscorlib.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\afa9c1dbcbe\System.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\cad0df97be252ddb80a846b61f26a4dd\System.Drawing.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\039d68cb3f0e971d7d44a92dc6a259bf\System.Windows.Forms.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\cefbf03c151\System.Configuration.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\282ee44fd8c\System.Xml.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Management\6f67cb9ee4df908abddef7c542bf4bc2\System.Management.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
[PID: 4960 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\ACE.dll]&&[, 6.0.0]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WsmanClient.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\Common.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\GmsCommon.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\CONFIGURATOR.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\EVENTMANAGER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\SOAPSERVERSERVICE.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\COMEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\HISTORYEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\STATUSEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WMIEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WINLOGEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
[PID: 2136 / VIP][C:\Program Files\Internet Explorer\iexplore.exe]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kshmpg.dll]&&[Kingsoft Corporation, ,159]
& & [d:\金山\kingsoft antivirus\kdump.dll]&&[Kingsoft Corporation, ,3643]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [d:\金山\kingsoft antivirus\kspcore.dll]&&[Kingsoft Corporation, ,136]
& & [d:\金山\kingsoft antivirus\kswbc.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll]&&[Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.8]
& & [D:\QQDownload\QQIEHelper01.dll]&&[Tencent Technology (Shenzhen) Company Limited, 4, 2, 745, 401]
& & [D:\电驴\easyMule\modules\IE2EM.dll]&&[, 1.0.0.1]
& & [C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll]&&[China Merchants Bank, 1, 0, 0, 2]
& & [D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll]&&[深圳市迅雷网络技术有限公司, 7,9,8,4550]
& & [D:\迅雷\Thunder BHO Platform\IEPlatform.dll]&&[深圳市迅雷网络技术有限公司, 2.2.0.1087]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\迅雷\Thunder BHO Platform\XLUE.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\XLGraphic.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\libpng13.dll]&&[深圳市迅雷网络技术有限公司, 1.2.50]
& & [D:\迅雷\Thunder BHO Platform\zlib1.dll]&&[深圳市迅雷网络技术有限公司, 1.2.3]
& & [D:\迅雷\Thunder BHO Platform\XLFSIO.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\XLLuaRuntime.dll]&&[深圳市迅雷网络技术有限公司, 1.5.0.472]
& & [D:\迅雷\Thunder BHO Platform\libexpat.dll]&&[N/A, ]
& & [C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx]&&[Adobe Systems, Inc., 11,8,800,175]
& & [C:\WINDOWS\system32\SOGOUPY.IME]&&[ Inc., 6.7.0.0413]
& & [C:\Program Files\SogouInput\Components\PicFace\1.0.0.792\PicFace.dll]&&[ Inc., 1.0.0.792]
& & [C:\Program Files\SogouInput\6.7.0.0413\Resource.dll]&&[ Inc., 6.7.0.0413]
& & [d:\金山\kingsoft antivirus\MSVCP80.dll]&&[Microsoft Corporation, 8.00.]
& & [d:\金山\kingsoft antivirus\MSVCR80.dll]&&[Microsoft Corporation, 8.00.]
& & [d:\金山\kingsoft antivirus\ktoolupd.dll]&&[Kingsoft Corporation, ,6377]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOCommon.DLL]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOPlatform.dll]&&[Tencent, 1.2.2.22]
& & [D:\迅雷\BHO\ThunderAgent7.9.8.4550.dll]&&[深圳市迅雷网络技术有限公司, 7,9,8,4550]
[PID: 7880 / VIP][D:\酷狗\KGMusic\KuGou.exe]&&[酷狗音乐, 7.5.16.11257]
& & [D:\酷狗\KGMusic\MobileIdentifyDLL.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\statistics.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\storage.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\transmission.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\core.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\plugin.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\popads.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\suite.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\\upgrade.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\kgplayer.dll]&&[, 1.2.0.0]
& & [D:\酷狗\KGMusic\codecs.dll]&&[, 1.2.0.0]
[PID: 5072 / VIP][D:\酷狗\KGMusic\KgDaemon.exe]&&[酷狗音乐, 7.5.16.11257]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 7636 / VIP][D:\酷狗\KGMusic\KGService.exe]&&[酷狗音乐, 7.5.16.11257]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 596 / VIP][D:\酷狗\KGMusic\IEBox.exe]&&[酷狗音乐, 7.5.16.11257]
& & [D:\酷狗\KGMusic\plugin.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx]&&[Adobe Systems, Inc., 11,8,800,175]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 2264 / VIP][D:\迅雷\Program\ThunderNewTask.exe]&&[深圳市迅雷网络技术有限公司, 1, 0, 0, 5]
& & [D:\迅雷\Program\libexpat.dll]&&[N/A, ]
& & [D:\迅雷\Program\xlstat.dll]&&[深圳市迅雷网络技术有限公司, 2.2.1.6]
& & [D:\迅雷\Program\XLLuaRuntime.dll]&&[深圳市迅雷网络技术有限公司, 1.5.0.472]
& & [D:\迅雷\Program\XLFSIO.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\XLGraphic.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\libpng13.dll]&&[深圳市迅雷网络技术有限公司, 1.2.50]
& & [D:\迅雷\Program\zlib1.dll]&&[深圳市迅雷网络技术有限公司, 1.2.3]
& & [D:\迅雷\Program\XLGraphicPlus.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\XLUE.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [D:\迅雷\Program\DownloadClient.dll]&&[深圳市迅雷网络技术有限公司, 1, 0, 0, 54]
& & [D:\迅雷\Program\XLUEIPC.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 8888 / SYSTEM][C:\WINDOWS\system32\wbem\wmiprvse.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.8)]
[PID: 5280 / VIP][D:\QQDownload\QQDownload.exe]&&[Tencent Technology (Shenzhen) Company Limited, 4, 4, 755, 401]
& & [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0._x-ww_b77cec8e\MFC80U.DLL]&&[Microsoft Corporation, 8.00.]
& & [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0._x-ww_0ccc058c\MFC80CHS.DLL]&&[Microsoft Corporation, 8.00.]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [d:\金山\kingsoft antivirus\kspcore.dll]&&[Kingsoft Corporation, ,136]
& & [d:\金山\kingsoft antivirus\kswbc.dll]&&[Kingsoft Corporation, ,146]
& & [D:\QQDownload\xmain.dll]&&[Tencent Technology (Shenzhen) Company Limited, 1, 9, 743, 400]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOLUIControl.dll]&&[Tencent, 1.0.1.14]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOCommon.DLL]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOPlatform.dll]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\QQDownload\xdownload.dll]&&[Tencent, 1, 9, 749, 407]
& & [D:\QQDownload\xcore.dll]&&[Tencent Technology(Shenzhen) Company Limited, 2, 1, 104, 1]
[PID: 10080 / VIP][C:\Program Files\WinRAR\WinRAR.exe]&&[Alexander Roshal, 5.0.0]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 8020 / VIP][C:\DOCUME~1\VIP\LOCALS~1\Temp\Rar$EXa0.033\SREngLdr.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
[PID: 8424 / VIP][C:\DOCUME~1\VIP\LOCALS~1\Temp\Rar$EXa0.033\SRE94e1dcbe.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [C:\Program Files\Microsoft Silverlight\xapauthenticodesip.dll]&&[ Microsoft Corporation, 5.1.20125.0]
==================================
文件关联
.TXT&&OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE&&OK. [&%1& %*]
.COM&&OK. [&%1& %*]
.PIF&&OK. [&%1& %*]
.REG&&OK. [regedit.exe &%1&]
.BAT&&OK. [&%1& %*]
.SCR&&OK. [&%1& /S]
.CHM&&OK. [&C:\WINDOWS\hh.exe& %1]
.HLP&&OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI&&OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF&&OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS&&OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.JS& &OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.LNK&&OK. [{0-}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1& && & localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 10080, C:\PROGRAM FILES\WINRAR\WINRAR.EXE]
==================================
计划任务
[已启用] KsafeDelay.job
& && &&&D:\金山卫士\ksafe\KSafeTray.exe
[已禁用] AliUpdater{1E287CE8-4EBA-4029-B96A-BE547C1B2D81}.job
& && &&&D:\阿里旺旺\AliTask.exe
[已禁用] Adobe Flash Player Updater.job
& && &&&C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================================
Windows 安全更新检查
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
刚才将默认浏览器设置成IE，依然弹出，雨过天晴还原过，还是不行，重装系统就算了，文件看来隐藏很深啊。
我的也是，不知道是什么原因？
楼主您好，有尝试过更换DNS后再测试吗？如把本地连接的DNS更换为8.8.8.8 或者114.114.114.114 。
逛了这许久，何不进去瞧瞧？
关注我们：}
后使用快捷导航
电脑总是自动弹出网页
该用户从未签到
马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。
才可以下载或查看，没有帐号？
我的默认浏览器是遨游，毒霸，卫士，全盘杀无毒，电脑医生的清除流氓软件也无法解决，我看到/zt/weishi_zttgg.shtml上说，通过跟踪用户金山安全专家发现发现总出现弹出广告、自动弹出游戏广告、弹出游戏广告是游戏厂商与部分网站达成推广协议。但是，现在已经已有黑客利用该方法进行挂马、捆绑木马欺骗，请用金山卫士保护您的电脑，不受广告和广告木马带来的威胁。我安装了金山卫士，但不知道该怎么设置才能不弹网页？
附serng报告，高手帮我看下，谢谢。
,20:33:22
System Repair Engineer 2.8.4.1331
Smallfrogs ()
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
& & 所有的启动项目（包括注册表、启动文件夹、服务等）
& & 浏览器加载项
& & 正在运行的进程（包括进程模块信息）
& & 文件关联
& & Winsock 提供者
& & Autorun.inf
& & HOSTS 文件
& & 进程特权扫描
& & 计划任务
& & Windows 安全更新检查
& & API HOOK
& & 隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
& & &ctfmon.exe&&C:\WINDOWS\system32\ctfmon.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &load&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
& & &IMSS&&&C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe&&&&[(Verified)Intel Corporation]
& & &HotKeysCmds&&C:\WINDOWS\system32\hkcmd.exe&&&[(Verified)Intel Corporation]
& & &kxesc&&&d:\金山\kingsoft antivirus\kxetray.exe& -autorun&&&[(Verified)Beijing Kingsoft Security software Co.,Ltd]
& & &KSafeTray&&&d:\金山卫士\ksafe\KSafeTray.exe& -autorun&&&[(Verified)Kingsoft Security Co.,Ltd]
& & &shield&&C:\Program Files\Yuguo\shieldtray.exe&&&[(Verified)EAZ SOLUTION, INC.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &shell&&Explorer.exe&&&[(Verified)Microsoft Windows Component Publisher]
& & &Userinit&&C:\WINDOWS\system32\\userinit.exe,&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &AppInit_DLLs&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &UIHost&&logonui.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
& & &{AEB-11d0-97EE-00C04FD91972}&&shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
& & &PostBootReminder&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &CDBurn&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &WebCheck&&%SystemRoot%\system32\webcheck.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &SysTray&&C:\WINDOWS\system32\stobject.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
& & &WinlogonNotify: crypt32chain&&crypt32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
& & &WinlogonNotify: cryptnet&&cryptnet.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
& & &WinlogonNotify: cscdll&&cscdll.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
& & &WinlogonNotify: dimsntfy&&%SystemRoot%\System32\dimsntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
& & &WinlogonNotify: igfxcui&&igfxdev.dll&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
& & &WinlogonNotify: ScCertProp&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
& & &WinlogonNotify: Schedule&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
& & &WinlogonNotify: sclgntfy&&sclgntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
& & &WinlogonNotify: SensLogn&&WlNotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
& & &WinlogonNotify: termsrv&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
& & &WinlogonNotify: wlballoon&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
& & &{-A8BA-11D1-B96B-00A0C90312E1}&&%SystemRoot%\system32\browseui.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &{8C7461EF-2B13-11d2-BE35-0}&&%SystemRoot%\system32\browseui.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
& & &IE7 Uninstall Stub&&C:\WINDOWS\system32\ieudinit.exe&&&[Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{22d6f312-b0f6-11d0-94ab-e95}]
& & &Microsoft Windows Media Player&&C:\WINDOWS\inf\\unregmp2.exe /ShowWMP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{d38-484f-9b9e-dec}]
& & &Internet Explorer&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}MICROS]
& & &浏览器自定义组件&&RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
& & &Outlook Express&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09--FED}]
& & &Themes Setup&&%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
& & &Microsoft Outlook Express 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:OE /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
& & &NetMeeting 3.01&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{e7d-11d1-bc44-00c04fd912be}]
& & &Windows Messenger 4.7&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
& & &Microsoft Windows Media Player&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{71-11d2-AF11-00C04FA35D02}]
& & &通讯簿 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:WAB /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4340}]
& & &Windows 桌面更新&®svr32.exe /s /n /i:U shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4383}]
& & &Internet Explorer 6&&%SystemRoot%\system32\ie4uinit.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
& & &SCRNSAVE.EXE&&C:\WINDOWS\System32\logon.scr&&&[(Verified)Microsoft Windows Component Publisher]
==================================
启动文件夹
N/A
==================================
服务
[Adobe LM Service / Adobe LM Service][Stopped/Manual Start]
&&&&C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe&&&Adobe Systems&
[Adobe Flash Player Update Service / AdobeFlashPlayerUpdateSvc][Stopped/Manual Start]
&&&C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe&&Adobe Systems Incorporated&
[AppleChargerSrv / AppleChargerSrv][Stopped/Manual Start]
&&&system32\AppleChargerSrv.exe&&(File is missing)&
[CBoxService / CBoxService][Stopped/Manual Start]
&&&&D:\cbox\CBox\CBoxService.exe&&&中国网络电视台CNTV&
[Cmb WebProtect Support / CMBWPS][Running/Auto Start]
&&&C:\Program Files\CMBCHINA\WebProtect\WPService.exe /start&&China Merchants Bank&
[Intel(R) Capability Licensing Service Interface / Intel(R) Capability Licensing Service Interface][Running/Auto Start]
&&&&C:\Program Files\Intel\iCLS Client\HeciServer.exe&&&Intel(R) Corporation&
[Intel(R) Dynamic Application Loader Host Interface Service / jhi_service][Running/Auto Start]
&&&C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe&&Intel Corporation&
[KSafe service / KSafeSvc][Running/Auto Start]
&&&&d:\金山卫士\ksafe\KSafeSvc.exe& -svc&&Kingsoft Corporation&
[Kingsoft Core Service / kxescore][Running/Auto Start]
&&&&d:\金山\kingsoft antivirus\kxescore.exe& /service kxescore&&Kingsoft Corporation&
[Intel(R) Management and Security Application Local Management Service / LMS][Running/Auto Start]
&&&C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe&&Intel Corporation&
[SHDSERV / SHDSERV][Running/Auto Start]
&&&C:\Program Files\Yuguo\shdserv.exe&&南京安悦科技有限公司&
[Shield Client Service / ShieldClientService][Stopped/Manual Start]
&&&C:\Program Files\Yuguo\shieldclnt.exe&&N/A&
[Intel(R) Management and Security Application User Notification Service / UNS][Running/Manual Start]
&&&&C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe&&&Intel Corporation&
[VJVodClientServices / vvdsvc][Stopped/Manual Start]
&&&C:\WINDOWS\System32\svchost.exe -k vvdsvc--&D:\先锋网络电视\ltv\vjocx.dll&&南京纳加软件有限公司&
==================================
驱动程序
[Ambfilt / Ambfilt][Stopped/Manual Start]
&&&system32\drivers\Ambfilt.sys&&Creative&
[ApolloProtect / ApolloProtect][Stopped/Manual Start]
&&&\??\F:\街头篮球\Apollo\Apollo.sys&&N/A&
[AppleCharger / AppleCharger][Running/System Start]
&&&system32\DRIVERS\AppleCharger.sys&&N/A&
[BC / BC][Running/Boot Start]
&&&\SystemRoot\system32\Drivers\BC.sys&&Kingsoft Corporation&
[CMB8100 / CMB8100][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\Drivers\CertClient.dat&&N/A&
[CMBProtector / CMBProtector][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\Drivers\CMBProtector.dat&&N/A&
[gdrv / gdrv][Stopped/Manual Start]
&&&\??\C:\WINDOWS\gdrv.sys&&N/A&
[HaoZip Virtual Bus Driver / HaozipVirtualCDBus][Stopped/Manual Start]
&&&system32\DRIVERS\HaoZipVirtualCDBus.sys&&Shanghai RuiChuang&
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
&&&system32\DRIVERS\HDAudBus.sys&&Windows (R) Server 2003 DDK provider&
[ialm / ialm][Running/Manual Start]
&&&system32\DRIVERS\igxpmp32.sys&&Intel Corporation&
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
&&&system32\drivers\RtkHDAud.sys&&Realtek Semiconductor Corp.&
[kavbootc / kavbootc][Running/Boot Start]
&&&\SystemRoot\system32\drivers\kavbootc.sys&&Kingsoft Corporation&
[KDHacker / KDHacker][Running/System Start]
&&&\??\d:\金山\kingsoft antivirus\security\kxescan\kdhacker.sys&&Kingsoft Corporation&
[kisknl / kisknl][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\drivers\kisknl.sys&&Kingsoft Corporation&
[kmodurl / kmodurl][Running/System Start]
&&&\??\d:\金山卫士\ksafe\kmodurlxp.sys&&Kingsoft Corporation&
[ksafebootsafe / ksafebootsafe][Running/Boot Start]
&&&\SystemRoot\system32\Drivers\ksafebootsafe.sys&&Kingsoft Corporation&
[ksapi / ksapi][Running/Manual Start]
&&&\??\C:\WINDOWS\system32\drivers\ksapi.sys&&Kingsoft Corporation&
[Intel(R) Management Engine Interface&&/ MEI][Running/Manual Start]
&&&system32\DRIVERS\HECI.sys&&Intel Corporation&
[Monfilt / Monfilt][Stopped/Manual Start]
&&&system32\drivers\Monfilt.sys&&Creative Technology Ltd.&
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
&&&system32\DRIVERS\ptilink.sys&&Parallel Technologies, Inc.&
[QQProtect / QQProtect][Running/System Start]
&&&\??\C:\WINDOWS\system32\drivers\QQProtect.sys&&Tencent&
[Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Running/Manual Start]
&&&system32\DRIVERS\Rtenicxp.sys&&Realtek Semiconductor Corporation&
[Secdrv / Secdrv][Stopped/Manual Start]
&&&system32\DRIVERS\secdrv.sys&&Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.&
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
&&&system32\DRIVERS\tcpip.sys&&Microsoft Corporation&
[TesSafe / TesSafe][Stopped/Manual Start]
&&&\??\C:\WINDOWS\system32\TesSafe.sys&&TENCENT&
==================================
浏览器加载项
[QQDownload IE Left Helper]
&&{C9--D2} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{00000ADA-7E0D-47C1-986C-F017D09C4304} &, &
[IE2EMBHO Class]
&&{0A0DDBD3--873F-BBDD26D6C14E} &D:\电驴\easyMule\modules\IE2EM.dll, (Signed) &
[EyeOnIE Class]
&&{20E-41A9-954A-04DCCB1FD16C} &D:\暴风影音\StormPlayer\MediaLibraryIcon.dll, (Signed) 北京暴风科技股份有限公司&
[WebProtect]
&&{CA8-4C7C-B8FC063B} &C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank&
[迅雷下载支持]
&&{889D2FEB-98-1DD2C5261283} &D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[迅雷BHO平台]
&&{DE05CF4A-7B0A--} &D:\迅雷\Thunder BHO Platform\IEPlatform.dll, (Signed) 深圳市迅雷网络技术有限公司&
[PPLive]
&&{95B3F550-91C4-4627-BCC4-77} &D:\PPTV\PPLive.exe, (Signed) PPLive Corporation&
[金山快译(&K)]
&&{6CFEF-4cd4-B654-D3AE55B4128C} &D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll, Copyright (c) Kingsoft Corporation Limited. All rights reserved.&
[QQDownload IE Left Helper]
&&{C9--D2} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{00000ADA-7E0D-47C1-986C-F017D09C4304} &, &
[AliCertDOCtrl Class]
&&{08D512D2-7D97-4E22-B7DB-} &C:\Documents and Settings\VIP\Application Data\alipay\cf\alicdo.dll, (Signed) Alipay&
[IE2EMBHO Class]
&&{0A0DDBD3--873F-BBDD26D6C14E} &D:\电驴\easyMule\modules\IE2EM.dll, (Signed) &
[]
&&{14C1D00E-0B92-4FA2D740DD} &, &
[]
&&{1A3-4CAB-84EE-C814E1AE0D8F} &, &
[WWPicUploadCtrl Class]
&&{1D6-4A42-890D-EE617AA1537D} &D:\阿里旺旺\7.21.01C\modules\1685\WWPictureUpload.dll, (Signed) Alibaba software (Shanghai) Corporation&
[InstallHelper Class]
&&{1DABF8D5-B7F-A30E53D709B3} &C:\WINDOWS\system32\MMInstaller.dll, (Signed) Tencent&
[iTrusPTA Class]
&&{1E0DFFCF-27FF-007349FEDA} &C:\WINDOWS\system32\itruscert\PTA.dll, (Signed) iTruschina Co., Ltd.&
[EyeOnIE Class]
&&{20E-41A9-954A-04DCCB1FD16C} &D:\暴风影音\StormPlayer\MediaLibraryIcon.dll, (Signed) 北京暴风科技股份有限公司&
[]
&&{24C1D00E-0B92-4FA2D740DD} &, &
[HTML Document]
&&{F9-11CF-8FD0-00AA00686F13} &%SystemRoot%\system32\mshtml.dll, (Signed) N/A&
[XML DOM Document]
&&{B36-11D2-B20E-00C04F983E60} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{29B6CFD5-C42-1} &, &
[DHTML Edit Control Safe for Scripting for IE5]
&&{2D360201-FFF5-11D1-8D03-00A0C959BC0A} &C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation&
[HtmlDlgSafeHelper Class]
&&{B5-11CF-BB82-00AA00BDCE0B} &C:\WINDOWS\system32\mshtmled.dll, (Signed) Microsoft Corporation&
[IETag Factory]
&&{-CA0E-42D2-BF39-B33AF135CC4D} &C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, (Signed) Microsoft Corporation&
[UnityWebPlayer Control]
&&{-DE89-A-D46C3A781394} &C:\Documents and Settings\VIP\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx, (Signed) Unity Technologies ApS&
[Agent Class]
&&{-8FB2-4B3B-B29B-8B919B0EACCE} &D:\迅雷\BHO\ThunderAgent7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[EditCtrl Class]
&&{488AB3-8F27-FA1AECAA8844} &C:\WINDOWS\system32\aliedit\aliedit.dll, (Signed) &
[PPS浏览器插件]
&&{4E6A8DA1-B-B036-B9E16EF26CAC} &D:\PPS\PPStream\PPSPLU~1.DLL, (Signed) PPStream Inc.&
[WebProtect]
&&{CA8-4C7C-B8FC063B} &C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank&
[WangWangX Class]
&&{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} &D:\阿里旺旺\7.21.18C\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.&
[]
&&{5EF7B131-C278-4034-BC88-2CE28B128681} &, &
[Windows Media Player]
&&{6BF52A52-394A-11D3-B153-00C04F79FAA6} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[金山快译(&K)]
&&{6CFEF-4CD4-B654-D3AE55B4128C} &D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll, Copyright (c) Kingsoft Corporation Limited. All rights reserved.&
[Thunder59Agent Class]
&&{6EE9CD3E-A386-4DAE-DBF927AE} &C:\Program Files\Common Files\Thunder Network\UserAgent\UserAgent2.0.2.10.dll, (Signed) 深圳市迅雷网络技术有限公司&
[CertEnroll Class]
&&{7978461C-CC22-48F2-BC69-D} &C:\WINDOWS\system32\itruscert\itrusenroll.dll, (Signed) iTruschina Co., Ltd.&
[]
&&{-3DE7-4171-A0DD-A7A} &, &
[]
&&{87CCBB9A-C425-44D4-BBAA-83} &, &
[Microsoft Web 浏览器]
&&{A-11D0-A96B-00C04FD705A2} &C:\WINDOWS\system32\shdocvw.dll, (Signed) Microsoft Corporation&
[迅雷下载支持]
&&{889D2FEB-98-1DD2C5261283} &D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[XML DOM Document 6.0]
&&{88D96A05-F192-11D4-A65F-E5} &C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation&
[QQDownload Class]
&&{8AC3BC28-E145-AAC128ACB16} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{CC-41C8-B9BE-3C9C571A8263} &, &
[]
&&{95B3F550-91C4-4627-BCC4-77} &, &
[OFrameObject Class]
&&{73-482E-B13C-776C048EC890} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[]
&&{A2-4F68-A67B-A} &, &
[APlayer3 Control]
&&{A1-4B9D-91FC-B9C461DBE9DD} &C:\Documents and Settings\All Users\Application Data\Thunder Network\APlayer\APlayer_3.5.0.643.dll, (Signed) ShenZhen Thunder Networking Technologies, LTD&
[DapCtrl Class]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F9} &, &
[SearchAssistantOC]
&&{B45FF030--85DE-00C04FA35C89} &%SystemRoot%\system32\shdocvw.dll, (Signed) N/A&
[AUDIO__MP3 Moniker Class]
&&{CD3AFA76-B84F-48F0-9393-7EDC} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[AUDIO__X_MS_WMA Moniker Class]
&&{CD3AFA84-B84F-48F0-9393-7EDC} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx, (Signed) Adobe Systems, Inc.&
[]
&&{D9EBCF5D-3F8F-4b6a-89BA-7} &, &
[xoliimpl Class]
&&{DD5BF6D1--9DFA-5C343CAF178E} &C:\WINDOWS\xinstaller.dll, (Signed) 深圳市迅雷技术有限公司&
[迅雷BHO平台]
&&{DE05CF4A-7B0A--} &D:\迅雷\Thunder BHO Platform\IEPlatform.dll, (Signed) 深圳市迅雷网络技术有限公司&
[PlayerCtrl Class]
&&{E05BC2A3-9A46-4a32-80C9-023A473F5B23} &C:\Program Files\Tencent\QQMusic\QzoneMusic\QzoneMusic.dll, (Signed) Tencent&
[]
&&{E2E2DD38-D088--F2BA} &, &
[SSOForPTLogin2 Class]
&&{EAAED308-B-965E-171933ADD473} &C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\npSSOAxCtrlForPTLogin.dll, (Signed) Tencent&
[XML HTTP Request]
&&{ED8C108E--91A4-00C04F7969E8} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[PPLive Lite Class]
&&{EF0D1A14--A589-240C01EDC078} &C:\Program Files\Internet Explorer\PPLite\plugin\1.0.1.4584\pplugin2.dll, (Signed) &
[]
&&{F3D0D36F-23F8-C92B03D4AF} &, &
[]
&&{F3E70CEA-956E-49CC-B444-73AFE593AD7F} &, &
[Storm AxPlayer Class]
&&{F06-494D-87E2-} &D:\暴风影音\StormPlayer\webplayer\PlayerShell.dll, (Signed) 北京暴风科技股份有限公司&
[XML HTTP]
&&{F6D90F16-9C73-11D3-B32E-00C04F990BB4} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{F7E55BDF-9528-46ba-B550-} &, &
[]
&&{FB5FD2-BB9E-00C04F795683} &, &
[&使用&迅雷下载]
&&&D:\迅雷\BHO\\GetUrl.htm, N/A&
[&使用&迅雷下载全部链接]
&&&D:\迅雷\BHO\\GetAllUrl.htm, N/A&
[&使用&迅雷离线下载]
&&&D:\迅雷\BHO\OfflineDownload.htm, N/A&
[&迅雷下载到手机]
&&&http://static./shoulei/shouleidl.htm, N/A&
[使用QQ旋风下载(&X)]
&&&D:\QQDownload\geturl.htm, N/A&
[使用QQ旋风下载全部链接(&Q)]
&&&D:\QQDownload\getAllurl.htm, N/A&
[使用QQ旋风离线下载(&L)]
&&&D:\QQDownload\xfofflinedown.htm, N/A&
[使用电驴下载]
&&&D:\电驴\easyMule\IE2EM.htm, N/A&
[导出到 Microsoft Office Excel(&X)]
&&&res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A&
[添加为阿里旺旺表情]
&&&D:\阿里旺旺\7.21.01C\AddNewEmotion.htm, N/A&
==================================
正在运行的进程
[PID: 728 / SYSTEM][\SystemRoot\System32\smss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 788 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 812 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
[PID: 856 / SYSTEM][C:\WINDOWS\system32\services.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 868 / SYSTEM][C:\WINDOWS\system32\lsass.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
[PID: 1068 / SYSTEM][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1180 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1280 / SYSTEM][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1388 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1516 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1628 / SYSTEM][d:\金山卫士\ksafe\KSafeSvc.exe]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\json.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\kdump.dll]&&[Kingsoft Corporation, ,3229]
& & [d:\金山卫士\ksafe\kxebase.dll]&&[Kingsoft Corporation, ,1978]
& & [d:\金山卫士\ksafe\scom.dll]&&[Kingsoft Corporation, ,976]
& & [d:\金山卫士\ksafe\kxecore\kxecore.dll]&&[Kingsoft Corporation, ,2020]
& & [d:\金山卫士\ksafe\kexectrl.dll]&&[Kingsoft Corporation, ,1422]
& & [d:\金山卫士\ksafe\kwssp.dll]&&[Kingsoft Corporation, .4037]
& & [d:\金山卫士\ksafe\netstat.dll]&&[Kingsoft Corporation, 4.7.0.4042]
& & [d:\金山卫士\ksafe\fwproxy.dll]&&[Kingsoft Corporation, 4.7.0.4042]
& & [d:\金山卫士\ksafe\ksinst.dll]&&[Kingsoft Corporation, ,3056]
& & [d:\金山卫士\ksafe\kse\ksecansp.dll]&&[Kingsoft Corporation, 4.0.7.2420]
& & [d:\金山卫士\ksafe\kse\ksbwdet2.dll]&&[Kingsoft Corporation, ,2915]
& & [d:\金山卫士\ksafe\ksapi.dll]&&[Kingsoft Corporation, ,107]
& & [d:\金山卫士\ksafe\khistory.dll]&&[Kingsoft Corporation, ,2880]
& & [d:\金山卫士\ksafe\kse\kseutil.dll]&&[Kingsoft Corporation, ,14]
& & [d:\金山卫士\ksafe\kse\ksesscan.dll]&&[Kingsoft Corporation, ,2]
& & [d:\金山卫士\ksafe\kse\wfs.dll]&&[Kingsoft Corporation, ,1839]
& & [d:\金山卫士\ksafe\kse\sqlite.dll]&&[Kingsoft Corporation, ,1194]
& & [d:\金山卫士\ksafe\keng\kae\kaecore.dat]&&[Kingsoft Corporation, ,1887]
& & [d:\金山卫士\ksafe\ksscore.dll]&&[Kingsoft Corporation, ,3003]
& & [d:\金山卫士\ksafe\sqlite.dll]&&[Kingsoft Corporation, ,1194]
& & [d:\金山卫士\ksafe\khandler.dll]&&[Kingsoft Corporation, ,2036]
& & [d:\金山卫士\ksafe\keng\kae\karchive.dat]&&[Kingsoft Corporation, ,1746]
& & [d:\金山卫士\ksafe\keng\kae\kaearcha.dat]&&[Kingsoft Corporation, ,1407]
& & [d:\金山卫士\ksafe\keng\kae\kaeolea.dat]&&[Kingsoft Corporation, ,1847]
& & [d:\金山卫士\ksafe\keng\kae\kaearchb.dat]&&[Kingsoft Corporation, ,12]
[PID: 1924 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp_sp3_gdr.6)]
& & [C:\WINDOWS\system32\hpinksts9411LM.dll]&&[Hewlett-Packard Co., 22.50.191.0]
[PID: 1460 / VIP][C:\WINDOWS\Explorer.EXE]&&[(Verified) Microsoft Corporation, 6.00. (xpsp.5)]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kshmpg.dll]&&[Kingsoft Corporation, ,159]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山\kingsoft antivirus\kwansvc.dll]&&[Kingsoft Corporation, ,38]
& & [C:\WINDOWS\system32\igfxpph.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\hccutils.DLL]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxrCHS.lrc]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxsrvc.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxdev.dll]&&[Intel Corporation, 6.15.10.5406]
& & [D:\暴风影音\StormPlayer\MediaLibraryIcon.dll]&&[北京暴风科技股份有限公司, 5.28.829.0]
& & [C:\Program Files\WinRAR\rarext.dll]&&[Alexander Roshal, 5.0.0]
& & [C:\Program Files\Unlocker\UnlockerCOM.dll]&&[N/A, ]
& & [C:\WINDOWS\system32\shellfire.dll]&&[, 3,1,8,6069]
& & [D:\阿里旺旺\7.21.01C\AliIMExt.dll]&&[Alibaba software (Shanghai) Corporation., 1.0.0.1]
& & [D:\优化大师\Wopti\WoptiEncryptModule.dll]&&[Wopti, 1.6.10.816]
& & [C:\Program Files\Yuguo\shieldshell.dll]&&[南京安悦科技有限公司, 1,0,11,6]
& & [d:\金山\kingsoft antivirus\kavmenu.dll]&&[Kingsoft Corporation, ,3850]
& & [C:\WINDOWS\system32\msdmo.dll]&&[, ]
[PID: 1396 / SYSTEM][C:\Program Files\CMBCHINA\WebProtect\WPService.exe]&&[China Merchants Bank, 1, 0, 0, 1]
& & [C:\Program Files\CMBCHINA\WebProtect\WebProtectPlus.dll]&&[China Merchants Bank, 1, 0, 0, 1]
[PID: 1600 / SYSTEM][C:\Program Files\Intel\iCLS Client\HeciServer.exe]&&[Intel(R) Corporation, 1.24.738.1 SYSTEM]
[PID: 1664 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe]&&[Intel Corporation, 8.1.0.1265]
[PID: 1728 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe]&&[Intel Corporation, 8.1.0.1281]
[PID: 192 / SYSTEM][C:\Program Files\Yuguo\shdserv.exe]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\shdapi.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\schedule.dll]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\shdservps.dll]&&[N/A, ]
[PID: 312 / SYSTEM][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 2116 / VIP][C:\WINDOWS\system32\hkcmd.exe]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\hccutils.DLL]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxsrvc.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxrCHS.lrc]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\KIme.ime]&&[Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.1]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 2172 / VIP][D:\金山卫士\ksafe\KSafeTray.exe]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\kdump.dll]&&[Kingsoft Corporation, ,3229]
& & [D:\金山卫士\ksafe\ksftray.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\json.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\ksapi.dll]&&[Kingsoft Corporation, ,107]
& & [d:\金山卫士\ksafe\ksfskin.dll]&&[Kingsoft Corporation, 4.7.0.4046]
& & [d:\金山卫士\ksafe\ksafedb.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\krcmdmon.dll]&&[Kingsoft Corporation, 4.7.0.4050]
& & [D:\金山卫士\ksafe\actpush.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\pushapp\\usbmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kinfoc.dll]&&[Kingsoft Corporation, ,5159]
& & [D:\金山卫士\ksafe\krunopt.dll]&&[Kingsoft Corporation, 4.7.0.4041]
& & [d:\金山卫士\ksafe\khistory.dll]&&[Kingsoft Corporation, ,2880]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山卫士\ksafe\kwsctrl.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\ksafeup.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\zlib1.dll]&&[, 1.2.3]
& & [d:\金山卫士\ksafe\KEng\ksignup.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\KEng\KSGMerge.DLL]&&[Kingsoft Corporation, ,1656]
& & [d:\金山卫士\ksafe\ksgamemon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\cloudlib.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvipcore.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvip.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\klogin.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvipinter.dll]&&[Kingsoft Corporation, ,110]
& & [d:\金山卫士\ksafe\httpdlib.dll]&&[Kingsoft Corporation, 4.7.0.4037]
[PID: 2204 / VIP][C:\Program Files\Yuguo\shieldtray.exe]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\ps.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\shdservps.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\clientadd.dll]&&[, 1, 0, 0, 1]
[PID: 2248 / VIP][C:\WINDOWS\system32\ctfmon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.5)]
[PID: 2300 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.2)]
[PID: 3056 / SYSTEM][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 4932 / VIP][C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe]&&[Intel Corporation, 8.1.0.1281]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\cece9db6d4\mscorlib.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\afa9c1dbcbe\System.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\cad0df97be252ddb80a846b61f26a4dd\System.Drawing.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\039d68cb3f0e971d7d44a92dc6a259bf\System.Windows.Forms.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\cefbf03c151\System.Configuration.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\282ee44fd8c\System.Xml.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Management\6f67cb9ee4df908abddef7c542bf4bc2\System.Management.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
[PID: 4960 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\ACE.dll]&&[, 6.0.0]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WsmanClient.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\Common.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\GmsCommon.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\CONFIGURATOR.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\EVENTMANAGER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\SOAPSERVERSERVICE.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\COMEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\HISTORYEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\STATUSEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WMIEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WINLOGEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
[PID: 2136 / VIP][C:\Program Files\Internet Explorer\iexplore.exe]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kshmpg.dll]&&[Kingsoft Corporation, ,159]
& & [d:\金山\kingsoft antivirus\kdump.dll]&&[Kingsoft Corporation, ,3643]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [d:\金山\kingsoft antivirus\kspcore.dll]&&[Kingsoft Corporation, ,136]
& & [d:\金山\kingsoft antivirus\kswbc.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll]&&[Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.8]
& & [D:\QQDownload\QQIEHelper01.dll]&&[Tencent Technology (Shenzhen) Company Limited, 4, 2, 745, 401]
& & [D:\电驴\easyMule\modules\IE2EM.dll]&&[, 1.0.0.1]
& & [C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll]&&[China Merchants Bank, 1, 0, 0, 2]
& & [D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll]&&[深圳市迅雷网络技术有限公司, 7,9,8,4550]
& & [D:\迅雷\Thunder BHO Platform\IEPlatform.dll]&&[深圳市迅雷网络技术有限公司, 2.2.0.1087]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\迅雷\Thunder BHO Platform\XLUE.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\XLGraphic.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\libpng13.dll]&&[深圳市迅雷网络技术有限公司, 1.2.50]
& & [D:\迅雷\Thunder BHO Platform\zlib1.dll]&&[深圳市迅雷网络技术有限公司, 1.2.3]
& & [D:\迅雷\Thunder BHO Platform\XLFSIO.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\XLLuaRuntime.dll]&&[深圳市迅雷网络技术有限公司, 1.5.0.472]
& & [D:\迅雷\Thunder BHO Platform\libexpat.dll]&&[N/A, ]
& & [C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx]&&[Adobe Systems, Inc., 11,8,800,175]
& & [C:\WINDOWS\system32\SOGOUPY.IME]&&[ Inc., 6.7.0.0413]
& & [C:\Program Files\SogouInput\Components\PicFace\1.0.0.792\PicFace.dll]&&[ Inc., 1.0.0.792]
& & [C:\Program Files\SogouInput\6.7.0.0413\Resource.dll]&&[ Inc., 6.7.0.0413]
& & [d:\金山\kingsoft antivirus\MSVCP80.dll]&&[Microsoft Corporation, 8.00.]
& & [d:\金山\kingsoft antivirus\MSVCR80.dll]&&[Microsoft Corporation, 8.00.]
& & [d:\金山\kingsoft antivirus\ktoolupd.dll]&&[Kingsoft Corporation, ,6377]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOCommon.DLL]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOPlatform.dll]&&[Tencent, 1.2.2.22]
& & [D:\迅雷\BHO\ThunderAgent7.9.8.4550.dll]&&[深圳市迅雷网络技术有限公司, 7,9,8,4550]
[PID: 7880 / VIP][D:\酷狗\KGMusic\KuGou.exe]&&[酷狗音乐, 7.5.16.11257]
& & [D:\酷狗\KGMusic\MobileIdentifyDLL.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\statistics.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\storage.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\transmission.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\core.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\plugin.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\popads.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\suite.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\\upgrade.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\kgplayer.dll]&&[, 1.2.0.0]
& & [D:\酷狗\KGMusic\codecs.dll]&&[, 1.2.0.0]
[PID: 5072 / VIP][D:\酷狗\KGMusic\KgDaemon.exe]&&[酷狗音乐, 7.5.16.11257]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 7636 / VIP][D:\酷狗\KGMusic\KGService.exe]&&[酷狗音乐, 7.5.16.11257]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 596 / VIP][D:\酷狗\KGMusic\IEBox.exe]&&[酷狗音乐, 7.5.16.11257]
& & [D:\酷狗\KGMusic\plugin.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx]&&[Adobe Systems, Inc., 11,8,800,175]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 2264 / VIP][D:\迅雷\Program\ThunderNewTask.exe]&&[深圳市迅雷网络技术有限公司, 1, 0, 0, 5]
& & [D:\迅雷\Program\libexpat.dll]&&[N/A, ]
& & [D:\迅雷\Program\xlstat.dll]&&[深圳市迅雷网络技术有限公司, 2.2.1.6]
& & [D:\迅雷\Program\XLLuaRuntime.dll]&&[深圳市迅雷网络技术有限公司, 1.5.0.472]
& & [D:\迅雷\Program\XLFSIO.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\XLGraphic.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\libpng13.dll]&&[深圳市迅雷网络技术有限公司, 1.2.50]
& & [D:\迅雷\Program\zlib1.dll]&&[深圳市迅雷网络技术有限公司, 1.2.3]
& & [D:\迅雷\Program\XLGraphicPlus.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\XLUE.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [D:\迅雷\Program\DownloadClient.dll]&&[深圳市迅雷网络技术有限公司, 1, 0, 0, 54]
& & [D:\迅雷\Program\XLUEIPC.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 8888 / SYSTEM][C:\WINDOWS\system32\wbem\wmiprvse.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.8)]
[PID: 5280 / VIP][D:\QQDownload\QQDownload.exe]&&[Tencent Technology (Shenzhen) Company Limited, 4, 4, 755, 401]
& & [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0._x-ww_b77cec8e\MFC80U.DLL]&&[Microsoft Corporation, 8.00.]
& & [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0._x-ww_0ccc058c\MFC80CHS.DLL]&&[Microsoft Corporation, 8.00.]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [d:\金山\kingsoft antivirus\kspcore.dll]&&[Kingsoft Corporation, ,136]
& & [d:\金山\kingsoft antivirus\kswbc.dll]&&[Kingsoft Corporation, ,146]
& & [D:\QQDownload\xmain.dll]&&[Tencent Technology (Shenzhen) Company Limited, 1, 9, 743, 400]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOLUIControl.dll]&&[Tencent, 1.0.1.14]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOCommon.DLL]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOPlatform.dll]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\QQDownload\xdownload.dll]&&[Tencent, 1, 9, 749, 407]
& & [D:\QQDownload\xcore.dll]&&[Tencent Technology(Shenzhen) Company Limited, 2, 1, 104, 1]
[PID: 10080 / VIP][C:\Program Files\WinRAR\WinRAR.exe]&&[Alexander Roshal, 5.0.0]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 8020 / VIP][C:\DOCUME~1\VIP\LOCALS~1\Temp\Rar$EXa0.033\SREngLdr.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
[PID: 8424 / VIP][C:\DOCUME~1\VIP\LOCALS~1\Temp\Rar$EXa0.033\SRE94e1dcbe.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [C:\Program Files\Microsoft Silverlight\xapauthenticodesip.dll]&&[ Microsoft Corporation, 5.1.20125.0]
==================================
文件关联
.TXT&&OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE&&OK. [&%1& %*]
.COM&&OK. [&%1& %*]
.PIF&&OK. [&%1& %*]
.REG&&OK. [regedit.exe &%1&]
.BAT&&OK. [&%1& %*]
.SCR&&OK. [&%1& /S]
.CHM&&OK. [&C:\WINDOWS\hh.exe& %1]
.HLP&&OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI&&OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF&&OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS&&OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.JS& &OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.LNK&&OK. [{0-}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1& && & localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 10080, C:\PROGRAM FILES\WINRAR\WINRAR.EXE]
==================================
计划任务
[已启用] KsafeDelay.job
& && &&&D:\金山卫士\ksafe\KSafeTray.exe
[已禁用] AliUpdater{1E287CE8-4EBA-4029-B96A-BE547C1B2D81}.job
& && &&&D:\阿里旺旺\AliTask.exe
[已禁用] Adobe Flash Player Updater.job
& && &&&C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================================
Windows 安全更新检查
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
刚才将默认浏览器设置成IE，依然弹出，雨过天晴还原过，还是不行，重装系统就算了，文件看来隐藏很深啊。
我的也是，不知道是什么原因？
楼主您好，有尝试过更换DNS后再测试吗？如把本地连接的DNS更换为8.8.8.8 或者114.114.114.114 。
逛了这许久，何不进去瞧瞧？
关注我们：}
我要回帖
更多关于 暴风影音总是弹出广告 的文章
更多推荐
- ·反腐倡廉如何进一步提升清廉公安建设效能新经验与新对策内容提要
- ·顺丰怎么顺丰快递代收货款几天到账。
- ·台湾人打字用什么台湾繁体注音输入法下载??
- ·银监会可以投诉网贷监管电话多少吗24小时投诉电话是多少-股城理财
- ·寄新疆用什么快递便宜运费怎么这么贵
- ·创维电视e730.150p声音环绕有时有无求解。谢谢。
- ·百度贴吧那个显示帖子的用的是什么控件啊，谢谢回答
- ·如何找回原来的微信号龙哥的微信
- ·请问哪位知道，oppo x909屏幕换过之后手机黑屏下有一条条白点，之前没有！！！屏幕是原装的吗？
- ·qq5.1悄悄话激活
- ·本人已死！小事烧香，大事挖坟！
- ·为什么我的桌面上总是出现Installer 和User_Data userdata文件夹在哪
- ·秦时明月qq头像大全世界聊天qq交易可信吗
- ·微云是怎么看别人的微云偷拍的一种工具?
- ·加装的台式加装ssd固态硬盘盘如何安装系统不影响使用？
- ·行车记录仪用途上的显示器插口和usb什么用途
- ·鸢飞戾天 鱼跃于渊Gl 87，109章！ 342 27 3516@ Qq.c om
- ·微信没有漂流瓶漂流瓶什么情况，可以回报RMB
- ·qq不加好友怎么聊天加qq:1228389777
- ·一按f1就弹出暴风影音音老弹出一堆ie广告
- ·三星手机三星7109电信版版哪个厂家出的手机好?
- ·越狱版iphone5越狱后费电被装了流氓软件
- ·百度上介绍说：木槿的特点嫩叶可以制茶饮。谁知道，谁做过，帮忙告诉我！
- ·路由器网速慢怎么办和网速有关么,我家10兆电信网络玩lol很卡
- ·隐私欲望ipad能用迅雷下载吗告诉我可以吗!？
- ·台湾地区播放器能播放安卓腾讯视频播放器?
- ·怎么安装打印机?
- ·大家知道什么软件没有单号怎么查快递递更好用吗？
- ·我没有换卡自动弹出防盗密码，我爱你可是我不敢说没设置过，导致锁机怎么办？
- ·请问高手现在vagaa绿色版哪个版本还能下载小电影啊非常感谢朋友们!?
- ·千牛云盘为什么会自动回复，优惠券如何取消啊这句话，我根本没有设置这句话。
- ·与凶残表妹另类同居txt下载下载
- ·vivo xplay5s锁屏后wifi断开继续wifi下载
- ·为什么qq空间小秘密破解举报好几次没有用?
- ·天天风之旅狐狸好友求狐狸好友，苹果微信
