廣告廣告
  加入我的最愛 設為首頁 風格修改
首頁 首尾
 手機版   訂閱   地圖  簡體 
您是第 10604 個閱讀者
 
<<   1   2   3  下頁 >>(共 3 頁)
發表文章 發表投票 回覆文章
  可列印版   加為IE收藏   收藏主題   上一主題 | 下一主題   
n700715
數位造型
個人文章 個人相簿 個人日記 個人地圖
小人物
級別: 小人物 該用戶目前不上站
推文 x1 鮮花 x32
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片
推文 x0
[問題討論] 如何封鎖住廣告網頁
話說前幾天不知道在找一個電腦遊戲,去大陸網站下載了一個叫web迅雷的之後,
電腦每隔一段時間就會自己開一個小的廣告ie視窗,隔幾秒就自動連到別的怪怪網頁,
可是我裝卡巴司機卻都沒發現有毒,後來我查yahoo知識說有一款叫ad-aware se的可以
防木馬和鎖廣告網頁,我就下來試用試試,昨天剛下載下來後,一掃之後有20個檔可疑,
後來我就把這些檔刪掉,本以為可以安心了,卻隔沒多久,那個廣告視窗又開啟了,
而且又連到別的網頁,我又開ad-aware se來掃又多1個可疑檔又將它刪掉,今早開電腦
,又發生這件事,再用ad-adware又多1個!
請問各位大大有無辦法,將這隱藏的廣告視窗將它刪掉啊,我都快被煩死了!
表情


獻花 x0 回到頂端 [樓 主] From:臺灣中華電信HINET | Posted:2007-07-15 10:21 |
n700715
數位造型
個人文章 個人相簿 個人日記 個人地圖
小人物
級別: 小人物 該用戶目前不上站
推文 x1 鮮花 x32
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

有哪位大大能幫忙一下啊?我電腦一直跑出廣告網頁,每隔幾秒就彈跳出來,
先是彈跳一個小的ie視窗,之後就開啟連結如下
http://click.cpc.sogou.com/bill_cpc?p=JdoIsn8pSRipubX9lllmIZ6dlZlluy2llJm6Wdh4mrCv...MyZoPTE5NgA=&url=http://www.mmc123.cn/

有哪位大大能幫忙解決呢?我剛去yahoo知識搜尋,有人說要下載火狐就可以阻擋了,
結果還是沒用,真想哭啊 表情 表情


獻花 x0 回到頂端 [1 樓] From:臺灣中華電信HINET | Posted:2007-07-15 14:12 |
fs9949
數位造型
個人文章 個人相簿 個人日記 個人地圖
路人甲
級別: 路人甲 該用戶目前不上站
推文 x0 鮮花 x63
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

請立即刪除"web迅雷"這種鬼東西...
凡是made in china的東西都不要隨便亂安裝 不然廣告就...

然而人家說裝Firefox可以檔
那應該是說擋網頁上原本的廣告
並不是說擋你電腦中的廣告程式

所以建議你先"完整"移除掉那個怪程式 + 重新掃毒 + ad-aware se 2007 在掃一次!
最後不要再亂裝程式了...

(完整移除: 包含在C:\Program Files / regedit 中的所有檔案)


獻花 x0 回到頂端 [2 樓] From:臺灣臺北市 | Posted:2007-07-15 14:22 |
n700715
數位造型
個人文章 個人相簿 個人日記 個人地圖
小人物
級別: 小人物 該用戶目前不上站
推文 x1 鮮花 x32
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

我已經移除了web迅雷了,但奇怪的是它還是會自動彈跳廣告,
不知是否是移除不乾靜! 表情


獻花 x0 回到頂端 [3 樓] From:臺灣中華電信HINET | Posted:2007-07-15 14:27 |
darrenchou
數位造型
個人文章 個人相簿 個人日記 個人地圖
小人物
級別: 小人物 該用戶目前不上站
推文 x0 鮮花 x9
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

這跟WEB迅雷沒關希吧??我也有裝相同的WEB迅雷!!
但我並不會有你所說的廣告問題??
我看是你不知道哪裡逛網頁的時候,他可能說要你安裝什們才能下載或者才能遊覽網頁,而不小心裝了病毒吧!!有些這種東西是騙人的@@
所以以後逛網頁的時候,除了比較知名的YAHOO/PCHOME...等等的大網站要求你安直裝有些沒的軟體你可以考慮安裝也比較有信任感,應為他們比你更怕主機中毒@@
其他網站要求你下載安裝的時候你喲先看看是安裝什們不要亂下載安裝,那些常常是病毒啊@@你不接受安裝病毒是沒辦法進入你的電腦的!!
我以前不懂電腦的時候只要進網頁他只要一要求要下載安裝才能遊覽或下載東西我都給他接受,但往往都是接受病毒啊!!自從不亂接受安裝下載後就幾呼不中毒囉@@


獻花 x0 回到頂端 [4 樓] From:臺灣中華電信HINET | Posted:2007-07-15 14:55 |
n700715
數位造型
個人文章 個人相簿 個人日記 個人地圖
小人物
級別: 小人物 該用戶目前不上站
推文 x1 鮮花 x32
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

我也搞不懂,但我用卡巴掃毒還是掃不到病毒?真是奇怪!
不過還是感謝樓上大大的教導! 表情


獻花 x0 回到頂端 [5 樓] From:臺灣中華電信HINET | Posted:2007-07-15 15:03 |
lens690 手機
個人頭像
個人文章 個人相簿 個人日記 個人地圖
初露鋒芒
級別: 初露鋒芒 該用戶目前不上站
推文 x1 鮮花 x51
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

不知可否參考置頂公告,跑一份SRENG的報表出來呢?



確保電腦安全,勿點選不明檔案或網址
獻花 x0 回到頂端 [6 樓] From:臺灣中華電信HINET | Posted:2007-07-15 15:46 |
n700715
數位造型
個人文章 個人相簿 個人日記 個人地圖
小人物
級別: 小人物 該用戶目前不上站
推文 x1 鮮花 x32
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

用了一整個下午,剛發現我電腦還有安裝一個以前安裝卡巴時一起安裝的奇虎360安全衛士,
因為之前這是簡體的,一堆亂碼看不懂寫什麼都沒在用,剛想說用那個掃看看,結果終於抓
到3個惡評軟件,終於順利殺掉了,真是搞死我了,不知道等會還會不會再開廣告網頁!
不過這軟體還真不錯用,我用ad-aware se和卡巴都無法抓到的木馬程式,它竟然抓得到耶!
不過缺點就是簡體亂碼,如果有繁體的就好了!
再次感謝上面三個網友的幫忙!


獻花 x0 回到頂端 [7 樓] From:臺灣中華電信HINET | Posted:2007-07-15 17:13 |
n700715
數位造型
個人文章 個人相簿 個人日記 個人地圖
小人物
級別: 小人物 該用戶目前不上站
推文 x1 鮮花 x32
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

可惡問題還沒解決,雖然順利刪掉了,但過沒多久他又再生了,我用安全衛士查出的
該死軟件是這個"易趣购物按钮",這個該死的軟體!
我連到安全衛士的討論區,發現一堆人中了這該死的東西!
討論連結如下:http://bk.360safe.com/theme.html?id=10
以防日後跟我一樣,中了該死的程式,
不過也希望有哪位大大,能想到解套方式!唉~~真被整死 表情


獻花 x0 回到頂端 [8 樓] From:臺灣中華電信HINET | Posted:2007-07-15 20:42 |
n700715
數位造型
個人文章 個人相簿 個人日記 個人地圖
小人物
級別: 小人物 該用戶目前不上站
推文 x1 鮮花 x32
分享: 轉寄此文章 Facebook Plurk Twitter 複製連結到剪貼簿 轉換為繁體 轉換為簡體 載入圖片

我已經下載SREng來掃描了!發現幾個問題
CODE]

2007-07-15,21:56:07

System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZ....com)

Windows XP Home Edition Service Pack 2 (Build 2600) - 管理許可權用戶 - 完整功能

以下內容被選中:
  所有的啟動項目(包括註冊表、開機檔案夾、服務等)
  流覽器載入項
  正在運行的進程(包括進程模組資訊)
  文件關聯
  Winsock 提供者
  Autorun.inf
  HOSTS 文件
  進程特權掃描


啟動專案
註冊表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)]
  <MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
  <swg><C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe> [(Verified)Google Inc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)]
  <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)]
  <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)]
  <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
  <nwiz><nwiz.exe /install> [NVIDIA Corporation]
  <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation]
  <WinFoxV2><C:\WINDOWS\system32\WF2K.EXE Initial> [N/A]
  <WinFast2KLoadDefault><rundll32.exe wf2kcpl.dll,DllLoadDefaultSettings> [Leadtek Research Inc.]
  <WinFast Schedule><C:\Program Files\WinFast\WFTVFM\WFWIZ.exe> [麗臺科技股份有限公司]
  <High Definition Audio 屬性頁捷徑><HDAudPropShortcut.exe> [Windows (R) Server 2003 DDK provider]
  <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd> [N/A]
  <kav><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"> [Kaspersky Lab]
  <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
  <Thunder><"D:\迅雷程式\Thunder.exe" /s> [Thunder Networking Technologies,LTD]
  <StormCodec_Helper><"C:\Program Files\暴風影音\StormSet.exe" /S /opti> []
  <ClubBox><> [N/A]
  <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
  <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A]
  <360Safetray><C:\Program Files\360safe\safemon\360Tray.exe /start> [奇虎网]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx]
  <Flag><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe> [(Verified)]
  <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)]
  <UIHost><logonui.exe> [(Verified)]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
  <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll> [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
  <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  <Address Book 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]

==================================
開機檔案夾
[Adobe Reader Speed Launch]
<C:\Documents and Settings\All Users.WINDOWS\「開始」功能表\程式集\啟動\Adobe Reader Speed Launch.lnk --> C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [Adobe Systems Incorporated]><N>

==================================
服務
[Application Management / AppMgmt][Stopped/Manual Start]
<C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[Kaspersky Anti-Virus 6.0 / AVP][Running/Auto Start]
<"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r><Kaspersky Lab>
[Google Updater Service / gusvc][Stopped/Manual Start]
<"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Remote Access Connection Manager9 / Rmv9][Running/Auto Start]
<c:\windows\system\Rmv9\wdfmgr.exe><>
[StarWind iSCSI Service / StarWindService][Running/Auto Start]
<D:\Alcohol 120\StarWind\StarWindService.exe><Rocket Division Software>
[Windows User Mode Driver Framework / UMWdf][Running/Auto Start]
<C:\WINDOWS\system32\wdfmgr.exe><Microsoft Corporation>
==================================
驅動程式
[Broadcom NetXtreme Gigabit Ethernet / b57w2k][Running/Manual Start]
<system32\DRIVERS\b57xp32.sys><Broadcom Corporation>
[C-Media High Definition Audio Interface / cmudax][Running/Manual Start]
<system32\drivers\cmudax.sys><C-Media Inc>
[Microsoft UAA Function Driver for High Definition Audio 服務 / HdAudAddService][Stopped/Manual Start]
<system32\drivers\HdAudio.sys><Windows (R) Server 2003 DDK provider>
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
<system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[kl1 / kl1][Running/Boot Start]
<\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\klif.sys><N/A>
[NOWMEMDF / NOWMEMDF][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\NOWMEMDF.sys><(c)NOWCOM>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[直接平行連接埠連結驅動程式 / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Running/Auto Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[sptd / sptd][Running/Boot Start]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[WFIOCTL / WFIOCTL][Running/Manual Start]
<\??\C:\Program Files\WinFast\WFTVFM\WFIOCTL.SYS><Leadtek Research Inc.>
[WINFOXIO / WINFOXIO][Running/Disabled]
<\??\C:\WINDOWS\system32\Drivers\WINFOXIO.SYS><Leadtek Research Inc.>
[313625 / 313625][Running/]
<2 - 系統找不到指定的檔案。
><N/A>

==================================
流覽器載入項
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Google Toolbar Helper]
{AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[Google Toolbar Notifier BHO]
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
[NavigatMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\PROGRA~1\360safe\safemon\safemon.dll, >
[Windows Live Toolbar Helper]
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation>
[網頁防護程式]
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
[D.S.Lite]
{F8475519-8412-4D40-A46E-692D9D04DF7F} <D:\DSLite2\DSLite.exe, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Windows Live Toolbar]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[ewidoOnlineScan Control]
{193C772A-87BE-4B19-A7BB-445B226FE9A1} <C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL, Anti-Malware Development a.s.>
[System Requirements Lab Class]
{67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} <C:\WINDOWS\Downloaded Program Files\sysreqlab2.dll, Husdawg, LLC>
[NowStarter Control]
{A22B8FD2-4CAA-4EFB-82F7-680CD656D9B0} <C:\PROGRA~1\NextLink\GOGOBOX\GNOWST~1.OCX, (C) NOWCOM>
[MessengerStatsClient Class]
{C3F79A2B-B9B4-4A66-B012-3EE46475B072} <C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx, Adobe Systems, Inc.>
[Google Script Object]
{00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[NowStarter Control]
{072039AB-2117-4ED5-A85F-9B9EB903E021} <C:\WINDOWS\system32\NOWSTA~1.OCX, (C) NOWCOM>
[ewidoOnlineScan Control]
{193C772A-87BE-4B19-A7BB-445B226FE9A1} <C:\WINDOWS\DOWNLO~1\EWIDOO~1.DLL, Anti-Malware Development a.s.>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[&Google]
{2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
{2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[Vod Class]
{2EEDA47E-8D5C-4d7e-B4B6-E16E19218555} <C:\Program Files\Web迅雷\DownAndPlay\DapPlayer1.1.0.46.dll, N/A>
[HtmlDlgSafeHelper Class]
{3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation>
[XML Document]
{48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A>
[Shell Name Space]
{55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[WUWebControl Class]
{6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[System Requirements Lab Class]
{67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} <C:\WINDOWS\Downloaded Program Files\sysreqlab2.dll, Husdawg, LLC>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[360SafeLive]
{87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\PROGRA~1\360safe\live.dll, 360safe.com>
[Microsoft Web Browser]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[NowStarter Control]
{A22B8FD2-4CAA-4EFB-82F7-680CD656D9B0} <C:\PROGRA~1\NextLink\GOGOBOX\GNOWST~1.OCX, (C) NOWCOM>
[Google Toolbar Helper]
{AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[Microsoft Scriptlet Component]
{AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[Google Toolbar Notifier BHO]
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, Google Inc.>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[NavigatMon Class]
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\PROGRA~1\360safe\safemon\safemon.dll, >
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Windows Live Toolbar]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation>
[Windows Live Toolbar Helper]
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} <C:\Program Files\Windows Live Toolbar\msntb.dll, Microsoft Corporation>
[AUDIO__MP3 Moniker Class]
{CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
{CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
{CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMX Moniker Class]
{CD3AFA93-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
{CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Windows Live Sign-in Control]
{D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx, Adobe Systems, Inc.>
[&Windows Live Search]
<res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm, N/A>
[Add to Windows &Live Favorites]
<http://favorites.live....add.aspx, N/A>
[下載編碼內容(&D.S.Lite)]
<D:\DSLite2\dl_text.html, N/A>
[下載編碼檔案內容(&D.S.Lite)]
<D:\DSLite2\dl_url.html, N/A>
[在新的前景索引標籤中開啟]
<res://C:\Program Files\Windows Live Toolbar\Components\zh-tw\msntabres.dll.mui/230?0881901a00df4bee8adec5c7f748233a, N/A>
[在新的背景索引標籤中開啟]
<res://C:\Program Files\Windows Live Toolbar\Components\zh-tw\msntabres.dll.mui/229?0881901a00df4bee8adec5c7f748233a, N/A>

==================================
正在運行的進程
[PID: 696 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 756 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 780 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 824 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 836 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1004 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1072 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1168 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057)]
[PID: 1288 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1392 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1636 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1928 / kobe][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.0.2004121400]
  [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
  [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0]
  [C:\Program Files\WinRAR\rarext.dll] [N/A, ]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll] [Kaspersky Lab, 6.0.0.299]
[PID: 2020 / kobe][C:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.10.6632]
  [C:\WINDOWS\system32\NVRSZHT.DLL] [NVIDIA Corporation, 6.14.10.6632]
[PID: 2028 / kobe][C:\WINDOWS\system32\WF2K.EXE] [Leadtek Research Inc., 5.13.01.2004-3.32]
  [C:\WINDOWS\system32\WINFOXUT.dll] [Leadtek Research Inc., 5.13.01.2004-2.23]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  [C:\WINDOWS\system32\msg711.acm] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  [C:\WINDOWS\system32\msdmo.dll] [, ]
[PID: 2044 / kobe][C:\Program Files\WinFast\WFTVFM\WFWIZ.exe] [麗臺科技股份有限公司, 5.13.01.2004-2.05]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [C:\WINDOWS\system32\msdmo.dll] [, ]
[PID: 200 / kobe][C:\WINDOWS\system32\RunDll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\WINDOWS\system\cmicnfg.cpl] [C-Media Corporation, 1, 0, 43, 1]
  [C:\WINDOWS\System32\udaprop.dll] [C-Media Corporation, 1.0.2.3]
[PID: 216 / kobe][C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\FSSync.dll] [Kaspersky Lab, 6.0.5.0]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\AVPGS.PPL] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\winreg.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avpgui.ppl] [Kaspersky Lab, 6.0.0.303]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\basegui.dll] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\thpimpl.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\qb.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\inflate.ppl] [Kaspersky Lab, 6.0.0.16]
  [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 220 / kobe][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3018]
[PID: 288 / kobe][C:\Program Files\360safe\safemon\360Tray.exe] [奇虎网, 3, 5, 2, 1001]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [C:\Program Files\360safe\safemon\SafeKrnl.dll] [奇虎网, 3, 5, 0, 1001]
  [C:\Program Files\360safe\AntiAdwa.dll] [360Safe.com, 3, 5, 1, 1001]
[PID: 308 / kobe][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[PID: 316 / kobe][C:\Program Files\MSN Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.1.0178.00]
  [C:\Program Files\MSN Messenger\MSNCore.dll] [Microsoft Corporation, 8.1.0178.00]
  [C:\Program Files\MSN Messenger\msidcrl40.dll] [Microsoft Corporation, 4.100.313.1]
  [C:\Program Files\MSN Messenger\ContactsUX.dll] [Microsoft Corporation, 8.1.0178.00]
  [C:\Program Files\MSN Messenger\msgslang.8.1.0178.00.dll] [Microsoft Corporation, 8.1.0178.00]
  [C:\Program Files\MSN Messenger\msgsres.dll] [Microsoft Corporation, 8.1.0178.00]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [C:\Program Files\MSN Messenger\MSGSWCAM.dll] [Microsoft Corporation, 8.1.0178.00]
  [C:\WINDOWS\system32\sirenacm.dll] [Microsoft Corp., 8.1.0178.00]
  [C:\WINDOWS\system32\msdmo.dll] [, ]
  [C:\Program Files\MSN Messenger\lmcdata.dll] [Microsoft Corporation, 8.1.0178.00]
  [C:\Program Files\MSN Messenger\contact.dll] [Microsoft Corporation, 8.1.0178.00]
  [C:\Program Files\MSN Messenger\abssm.dll] [Microsoft Corporation, 8.1.0178.00]
  [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  [C:\Program Files\MSN Messenger\custsat.dll] [Microsoft Corporation, 9.0.3790.2428 (srv03_sp1_qfe.050422-1043)]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
  [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
  [C:\PROGRA~1\MSNMES~1\MSGSC8~1.DLL] [Microsoft Corporation, 8.1.0178.00]
  [C:\WINDOWS\system32\LIUNT.IME] [Microsoft Corporation, 4.00.950]
[PID: 324 / kobe][C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654]
  [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\gtn.dll] [Google Inc., 2, 0, 301, 7164]
  [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\res_zh-TW.dll] [Google Inc., 2, 0, 301, 7164]
  [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll] [Google Inc., 2, 0, 301, 7164]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
[PID: 1120 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.6632]
[PID: 1140 / SYSTEM][c:\windows\system\Rmv9\wdfmgr.exe] [, 1.0.0.0]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[PID: 1376 / SYSTEM][D:\Alcohol 120\StarWind\StarWindService.exe] [Rocket Division Software, 2.6.1 Build 0x20050401]
[PID: 1496 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 2468 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2756 / kobe][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [c:\program files\google\googletoolbar1.dll] [Google Inc., 4, 0, 1601, 4978]
  [C:\Program Files\Windows Live Toolbar\msntb.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\zh-tw\mtbres.dll.mui] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\mtbres.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\Tem.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\zh-tw\searchboxRes.dll.mui] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\searchboxRes.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\Components\zh-tw\wlscres.dll.mui] [Microsoft Corporation, 1.0.0001.1]
  [C:\Program Files\Windows Live Toolbar\zh-tw\CMRes.dll.mui] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\CMRes.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\zh-tw\obres.dll.mui] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\obres.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Favorites\wlfext.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\zh-tw\RssFinderRes.dll.mui] [Microsoft Corporation, 03.01.0000.0073]
  [C:\Program Files\Windows Live Toolbar\Components\RssFinderRes.dll] [Microsoft Corporation, 03.01.0000.0073]
  [C:\Program Files\Windows Live Toolbar\zh-tw\msn_slrs.DLL.mui] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\msn_slrs.DLL] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\Components\zh-tw\msntabres.dll.mui] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\msntabres.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\zh-tw\pgres.dll.mui] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\pgres.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\zh-tw\MSNExtensionRes.dll.mui] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\MSNExtensionRes.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\zh-tw\SmaMenRes.dll.mui] [Microsoft Corporation., 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\SmaMenRes.dll] [Microsoft Corporation., 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\zh-tw\CBRes.dll.mui] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\CBRes.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\Components\rssFinder.dll] [Microsoft Corporation, 03.01.0000.0073]
  [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 7.0.0.2004121400]
  [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
  [C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll] [Microsoft Corporation, 4.100.313.1]
  [C:\Program Files\Common Files\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.100.313.1]
  [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll] [Google Inc., 2, 0, 301, 7164]
  [C:\Program Files\Windows Live Toolbar\searchbox.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\stmain.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\Components\wlsctb.dll] [Microsoft Corporation, 03.00.0001.2050]
  [C:\Program Files\Windows Live Toolbar\cm.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\msn_slps.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\Components\msntab.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\WLExtension.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\smamen.dll] [Microsoft Corporation., 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\CB.dll] [Microsoft Corporation, 03.01.0000.0068]
  [C:\Program Files\Windows Live Toolbar\Components\msntbfltr.dll] [Microsoft Corporation, 4.0.6620.0]
  [C:\Program Files\Windows Live Favorites\WLFExtRes.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Favorites\TBIDCRL.dll] [Microsoft Corporation, 03.01.0000.0072]
  [C:\Program Files\Windows Live Toolbar\Components\COMCRF\COMCRF.dll] [Microsoft Corporation., 03.01.0000.0072]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
  [C:\PROGRA~1\MSNMES~1\MSGSC8~1.DLL] [Microsoft Corporation, 8.1.0178.00]
  [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl] [Kaspersky Lab, 6.0.0.299]
  [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0]
  [C:\WINDOWS\system32\xpsp3res.dll] [Microsoft Corporation, 5.1.2600.3121 (xpsp_sp2_gdr.070418-0032)]
[PID: 2880 / kobe][C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe] [Microsoft Corporation, 4.100.313.1]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [C:\Program Files\Common Files\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.100.313.1]
[PID: 3156 / kobe][D:\迅雷程式\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.3.0.220]
  [D:\迅雷程式\Program\UpdateDownload.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 8]
  [D:\迅雷程式\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 71]
  [D:\迅雷程式\Program\log4cplus.dll] [, 1, 0, 2, 1]
  [D:\迅雷程式\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031]
  [D:\迅雷程式\Program\asyn_dns.dll] [N/A, ]
  [D:\迅雷程式\Program\msgmanage.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 15]
  [D:\迅雷程式\Program\historyinfo_manage.dll] [Thunder Networking Technologies,LTD, 5, 2, 0, 148]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [D:\迅雷程式\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 1, 0, 18]
  [D:\迅雷程式\Program\FloatBar.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
  [D:\迅雷程式\Components\InMedia\iEmbedShell.dll] [ , 1, 0, 0, 11]
  [D:\迅雷程式\Components\InMedia\iEmbed04.dll] [ , 2, 3, 0, 37]
  [D:\迅雷程式\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 8]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll] [Kaspersky Lab, 1.0.6.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll] [Kaspersky Lab, 6.0.0.299]
  [D:\迅雷程式\Program\iTargetAd.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 55]
  [C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0]
  [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll] [Kaspersky Lab, 6.0.0.299]
  [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl] [Kaspersky Lab, 6.0.0.299]
  [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl] [Kaspersky Lab, 6.0.0.299]
[PID: 2292 / kobe][C:\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]
  [C:\sreng2\Lang\1028.DLL] [System Repair Engineer, 2.5.16.900]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [C:\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
  [C:\sreng2\Plugins\NTFSTREAM.SRE] [Smallfrogs Studio, 1, 0, 0, 5]
  [C:\WINDOWS\system32\asfsipc.dll] [Microsoft Corporation, 1.00.00.3845]
[PID: 1304 / kobe][C:\PROGRA~1\MOZILL~1\FIREFOX.EXE] [Mozilla Corporation, 1.8.1.4: 2007051502]
  [C:\PROGRA~1\MOZILL~1\js3250.dll] [Netscape Communications Corporation, 4.0]
  [C:\PROGRA~1\MOZILL~1\nspr4.dll] [Netscape Communications Corporation, 4.6.7]
  [C:\PROGRA~1\MOZILL~1\xpcom_core.dll] [Mozilla Foundation, 1.8.1.4: 2007051502]
  [C:\PROGRA~1\MOZILL~1\plc4.dll] [Netscape Communications Corporation, 4.6.7]
  [C:\PROGRA~1\MOZILL~1\plds4.dll] [Netscape Communications Corporation, 4.6.7]
  [C:\PROGRA~1\MOZILL~1\smime3.dll] [Mozilla Foundation, 3.11.5 Basic ECC]
  [C:\PROGRA~1\MOZILL~1\nss3.dll] [Mozilla Foundation, 3.11.5 Basic ECC]
  [C:\PROGRA~1\MOZILL~1\softokn3.dll] [Mozilla Foundation, 3.11.4 Basic ECC]
  [C:\PROGRA~1\MOZILL~1\ssl3.dll] [Mozilla Foundation, 3.11.5 Basic ECC]
  [C:\PROGRA~1\MOZILL~1\xpcom_compat.dll] [Mozilla Foundation, 1.8.1.4: 2007051502]
  [C:\Program Files\360safe\safemon\safemon.dll] [, 3, 5, 0, 1001]
  [C:\PROGRA~1\MOZILL~1\components\myspell.dll] [Mozilla Foundation, 1.8.1.4: 2007051502]
  [C:\PROGRA~1\MOZILL~1\components\jar50.dll] [Mozilla Foundation, 1.8.1.4: 2007051502]
  [C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\qfaservices.dll] [Mozilla Foundation, 1.8.1.4: 2007051502]
  [C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\FULLSOFT.DLL] [Full Circle Software, Inc., 2.2.unofficial]
  [C:\PROGRA~1\MOZILL~1\freebl3.dll] [Mozilla Foundation, 3.11.4 Basic ECC]
  [C:\Program Files\Mozilla Firefox\nssckbi.dll] [Mozilla Foundation, 1.62]
  [C:\PROGRA~1\MOZILL~1\components\spellchk.dll] [Mozilla Foundation, 1.8.1.4: 2007051502]

==================================
文件關聯
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1     localhost

==================================
進程特權掃描
特殊特權被允許: SeLoadDriverPrivilege [PID = 780, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 836, C:\WINDOWS\SYSTEM32\LSASS.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 1168, C:\WINDOWS\SYSTEM32\SVCHOST.EXE]
特殊特權被允許: SeSystemtimePrivilege [PID = 1168, C:\WINDOWS\SYSTEM32\SVCHOST.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 1636, C:\WINDOWS\SYSTEM32\SPOOLSV.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 1928, C:\WINDOWS\EXPLORER.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 2028, C:\WINDOWS\SYSTEM32\WF2K.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 2044, C:\PROGRAM FILES\WINFAST\WFTVFM\WFWIZ.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 200, C:\WINDOWS\SYSTEM32\RUNDLL32.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 216, C:\PROGRAM FILES\KASPERSKY LAB\KASPERSKY ANTI-VIRUS 6.0\AVP.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 220, C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE]
特殊特權被允許: SeDebugPrivilege [PID = 288, C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 1120, C:\WINDOWS\SYSTEM32\NVSVC32.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 1140, C:\WINDOWS\SYSTEM\RMV9\WDFMGR.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 2756, C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE]
特殊特權被允許: SeLoadDriverPrivilege [PID = 3156, D:\迅雷程式\PROGRAM\THUNDER5.EXE]

==================================
API HOOK
RVA 錯誤: LoadLibraryA (危險等級: 高, 被下麵模組所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA 錯誤: LoadLibraryExA (危險等級: 高, 被下麵模組所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA 錯誤: LoadLibraryExW (危險等級: 高, 被下麵模組所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA 錯誤: LoadLibraryW (危險等級: 高, 被下麵模組所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA 錯誤: GetProcAddress (危險等級: 高, 被下麵模組所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)

==================================
隱藏進程
N/A

大致上就是這樣吧!我也搞不太懂,有哪個利害的大大幫忙一下囉! 表情 表情


獻花 x0 回到頂端 [9 樓] From:臺灣中華電信HINET | Posted:2007-07-15 22:03 |

廣告
<<   1   2   3  下頁 >>(共 3 頁)
首頁  發表文章 發表投票 回覆文章
Powered by PHPWind v1.3.6
Copyright © 2003-04 PHPWind
Processed in 0.060010 second(s),query:17 Gzip disabled
本站由 簡榮宗律師 擔任常年法律顧問 | 免責聲明 | 本網站已依台灣網站內容分級規定處理 | 連絡我們 | 訪客留言