请教一个问题 日语CDC*的问题
点击联系发帖人
时间：2015-02-09 14:06
关于API函数的三个问题想请教。_百度知道
关于API函数的三个问题想请教。
载入图标、光标的时候要用到，作用是否是一样的API编程中的位图创建函数有CreateBitmap (), CreateCompatibleBitmap ()。HBITMAP BITMAP 这两个指向位图的句柄结构有什么不同HINSTANCE 实例句柄,这三个函数除了参数数目类型不同外, CreateBitmapIndirect ()
提问者采纳
详细方法请关注VC++ - CreateCompatibleBitmap()要创建彩色位图应用 CreateCompatibleBitmap 函数关于CreateBitmapIndirect
BITMAP参数的bmBits 创建成功后返回0的问题CBitmap，出于性能方面的应用程序应该使用CreateBitmapIndirect创建单色位图:CreateBitmapIndirect 函数创建位图成功却在CDC:SelectObject 的时候失败，用CreateCompatibleBitmap创建彩色位图、宽度和位模式（如果指定了一个的话）来初始化一个位图:SelectObject 选择位图时却失败:，虽然CreateBitmapIndirect创建彩色位图时也能返回成功:CreateBitmapIndirect函数的功能是用一个BITMAP结构体重的高度，用户可以设置bmBits字段为NULL或者设为像素位数据的地址（用以初始化该位图），只能创建单色位图CreateCompatibleBitmap是生成内存兼容位图CreateBitmap是生成一个位图句柄
CBitmap。MSDN只有在CreateBitmapIndirect 有说明:::。虽然CreateBitmapIndirect函数可用于创建彩色位图，但用CDC，原因是CreateBitmapIndirect不能创建彩色位图。调用该函数时
提问者评价
来自团队：
其他类似问题
为您推荐：
其他1条回答
、长度，它包含了HBITMAP的宽度，比如常用的dll加载，就得用BITMAP来做. HINSTANCE有很多的地方。CreateBitmap ()可以创建一个空白的bitmap，空白的bitmap可以用来动态绘制. HBITMAP是图像句柄。3、像素大小等等。2，要获取HBITMAP的信息，CDC绘制是靠HBITMAP来完成的，而BITMAP是一个图像信息结构体。两者不是一回事，还有线程中也会用到，但使用方式不一样. 这三个函数作用基本一样，CreateCompatibleBitmap ()及CreateBitmapIndirect ()都是依靠原有的bitmap进行创建的。具体可以在MSDN里查HINSTANCE就知道了
api函数的相关知识
等待您来回答
下载知道APP
随时随地咨询
出门在外也不愁查看: 2593|回复: 8
有个奇怪的问题请教大家
重装系统前浏览网页就会出现一个奇怪的问题，有时候会跳转到2345导航，问题是我根本没输入这个网站？
正好系统又好久没重装了，有些卡，于是就重装了。
结果重装后又出现这个问题，下载了360顽固木马专杀也没杀出什么来，但是有些网页还会跳转，比如，有时连不上服务器，
接下来就会跳转到2345导航，以前这种情况一般跳转到电信114。
所以只能来求教大家，看怎么解决这个问题。
张成学 该用户已被删除
下载可牛杀软，还不错。里面有系统修复工具，好几个软件
楼主安装的系统或软件自带的链接吧&&这个 不是中毒阿
楼主安装什么浏览器
本帖最后由 ttw1038 于
22:03 编辑
用的opera，系统是当年电脑疯子的原版系统加序列号安装的
也用sreng扫描过，貌似是没问题的,发上来大家帮忙看看吧
System Repair Engineer 2.8.2.1321
Smallfrogs ()
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
& & 所有的启动项目（包括注册表、启动文件夹、服务等）
& & 浏览器加载项
& & 正在运行的进程（包括进程模块信息）
& & 文件关联
& & Winsock 提供者
& & Autorun.inf
& & HOSTS 文件
& & 进程特权扫描
& & 计划任务
& & Windows 安全更新检查
& & API HOOK
& & 隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
& & &ctfmon.exe&&C:\WINDOWS\system32\ctfmon.exe&&&[(Verified)Microsoft Windows Component Publisher]
& & &aliim&&; E:\Program Files\AliWangWang\aliim.exe&&&[(Verified)Alibaba (China) Co. Ltd.]
& & &Fetion&&; E:\Program Files\China Mobile\Fetion\Fetion.exe -t&&&[(Verified)China Mobile Communications Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &load&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
& & &avgnt&&&C:\Program Files\Avira\AntiVir Desktop\avgnt.exe& /min&&&[Avira GmbH]
& & &NvCplDaemon&&RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
& & &cFosSpeed&&C:\Program Files\cFosSpeed\cFosSpeed.exe&&&[(Verified)cFos Software GmbH]
& & &Babylon Client&&E:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart&&&[Babylon Ltd.]
& & &wdcertm_ccb&&C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDCertM_CCB.exe&&&[ Beijing WatchData System Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &shell&&Explorer.exe&&&[(Verified)Microsoft Windows Component Publisher]
& & &Userinit&&C:\WINDOWS\system32\userinit.exe,&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &AppInit_DLLs&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &UIHost&&logonui.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
& & &{AEB-11d0-97EE-00C04FD91972}&&shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
& & &PostBootReminder&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &CDBurn&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &WebCheck&&C:\WINDOWS\system32\webcheck.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &SysTray&&C:\WINDOWS\system32\stobject.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &WPDShServiceObj&&C:\WINDOWS\system32\WPDShServiceObj.dll&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
& & &WinlogonNotify: crypt32chain&&crypt32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
& & &WinlogonNotify: cryptnet&&cryptnet.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
& & &WinlogonNotify: cscdll&&cscdll.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
& & &WinlogonNotify: dimsntfy&&%SystemRoot%\System32\dimsntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
& & &WinlogonNotify: ScCertProp&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
& & &WinlogonNotify: Schedule&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
& & &WinlogonNotify: sclgntfy&&sclgntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
& & &WinlogonNotify: SensLogn&&WlNotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
& & &WinlogonNotify: termsrv&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
& & &WinlogonNotify: wlballoon&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
& & &IE7 Uninstall Stub&&C:\WINDOWS\system32\ieudinit.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{22d6f312-b0f6-11d0-94ab-e95}]
& & &Microsoft Windows Media Player&&C:\WINDOWS\inf\unregmp2.exe /ShowWMP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{d38-484f-9b9e-dec}]
& & &Internet Explorer&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}]
& & &Browser Customizations&&RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}MICROS]
& & &浏览器自定义组件&&RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
& & &Outlook Express&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09--FED}]
& & &Themes Setup&&%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
& & &Microsoft Outlook Express 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:OE /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
& & &NetMeeting 3.01&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT&&&[(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{e7d-11d1-bc44-00c04fd912be}]
& & &Windows Messenger 4.7&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser&&&[(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
& & &Microsoft Windows Media Player&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{71-11d2-AF11-00C04FA35D02}]
& & &通讯簿 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:WAB /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4340}]
& & &Windows 桌面更新&®svr32.exe /s /n /i:U shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4383}]
& & &Internet Explorer&&C:\WINDOWS\system32\ie4uinit.exe -BaseSettings&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018--5476DBF70820}]
& & &N/A&&C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install&&&[Microsoft Corporation]
==================================
启动文件夹
N/A
==================================
服务
[Avira AntiVir 计划程序 / AntiVirSchedulerService][Running/Auto Start]
&&&&C:\Program Files\Avira\AntiVir Desktop\sched.exe&&&Avira GmbH&
[Avira AntiVir Guard / AntiVirService][Running/Auto Start]
&&&&C:\Program Files\Avira\AntiVir Desktop\avguard.exe&&&Avira GmbH&
[cFosSpeed System Service / cFosSpeedS][Running/Auto Start]
&&&&C:\Program Files\cFosSpeed\spd.exe& -service&&cFos Software GmbH&
[Diskeeper / Diskeeper][Running/Auto Start]
&&&&C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe&&&Diskeeper Corporation&
[Forceware Web Interface / ForcewareWebInterface][Stopped/Manual Start]
&&&&C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe& -k runservice&&Apache Software Foundation&
[Human Interface Device Access / HidServ][Stopped/Disabled]
&&&C:\WINDOWS\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\hidserv.dll&&N/A&
[MagicTuneEngine / MagicTuneEngine][Stopped/Manual Start]
&&&C:\Program Files\MagicTune Premium\MagicTuneEngine.exe&&N/A&
[ForceWare user log service / nSvcLog][Stopped/Manual Start]
&&&C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe&&NVIDIA&
[NVIDIA Display Driver Service / NVSvc][Stopped/Manual Start]
&&&C:\WINDOWS\system32\nvsvc32.exe&&NVIDIA Corporation&
[WatchData ccb V3.2 / WDMonitorCCB][Running/Auto Start]
&&&C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe&&Beijing WatchData System Co., Ltd.&
[Array Utility Service 8,4,0,264 / Array_Utility_Service8.4.0.264][Running/Auto Start]
&&&C:\Program Files\Array Networks\Common\8,4,0,264\arr_isrv.exe&&Array Networks, Inc.&
[Array SSL VPN Service 8,4,0,264 / ArraySSL_VPN_Service8.4.0.264][Running/Auto Start]
&&&C:\Program Files\Array Networks\Array SSL VPN\8,4,0,264\arr_srvs.exe&&Array Networks, Inc.&
==================================
驱动程序
[AMD Processor Driver / AmdK8][Running/System Start]
&&&system32\DRIVERS\AmdK8.sys&&Advanced Micro Devices&
[avgio / avgio][Running/System Start]
&&&\??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys&&Avira GmbH&
[avgntflt / avgntflt][Running/Auto Start]
&&&system32\DRIVERS\avgntflt.sys&&Avira GmbH&
[avipbb / avipbb][Running/System Start]
&&&system32\DRIVERS\avipbb.sys&&Avira GmbH&
[BAPIDRV / BAPIDRV][Running/System Start]
&&&\??\C:\WINDOWS\system32\drivers\BAPIDRV.SYS&&&
[cFosSpeed Miniport / cFosSpeed][Running/Manual Start]
&&&system32\DRIVERS\cfosspeed.sys&&cFos Software GmbH&
[MagicTune / MagicTune][Stopped/Manual Start]
&&&system32\drivers\MTiCtwl.sys&&Samsung Electronics, Inc.&
[nv / nv][Running/Manual Start]
&&&system32\DRIVERS\nv4_mini.sys&&NVIDIA Corporation&
[nvatabus / nvatabus][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\nvatabus.sys&&NVIDIA Corporation&
[Service for NVIDIA(R) nForce(TM) Audio Enumerator / nvax][Running/Manual Start]
&&&system32\drivers\nvax.sys&&NVIDIA Corporation&
[NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
&&&system32\DRIVERS\NVENETFD.sys&&NVIDIA Corporation&
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
&&&system32\DRIVERS\nvnetbus.sys&&NVIDIA Corporation&
[Service for NVIDIA(R) nForce(TM) Audio / nvnforce][Running/Manual Start]
&&&system32\drivers\nvapu.sys&&NVIDIA Corporation&
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
&&&system32\DRIVERS\ptilink.sys&&Parallel Technologies, Inc.&
[Quantum DeepScanner Servers / qutmdserv][Running/System Start]
&&&\??\C:\WINDOWS\system32\drivers\qutmdrv.sys&&360安全中心&
[Secdrv / Secdrv][Stopped/Manual Start]
&&&system32\DRIVERS\secdrv.sys&&Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.&
[ssmdrv / ssmdrv][Running/System Start]
&&&system32\DRIVERS\ssmdrv.sys&&Avira GmbH&
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
&&&system32\DRIVERS\tcpip.sys&&Microsoft Corporation&
[ArrayNetworks SSL VPN Miniport Driver / ATP][Stopped/Manual Start]
&&&system32\DRIVERS\atpdrvr.sys&&Array Networks, Inc.&
==================================
浏览器加载项
[迅雷流媒体探测IE支持]
&&{01443AEC-0FD1-40fd-9C87-E93D} &E:\Program Files\Thunder Network\ComDlls\TDMediaDetector5.9.22.1466.dll, (Signed) 深圳市迅雷网络技术有限公司&
[迅雷网页图片浏览器IE支持]
&&{2D90D33C-DE76-42D0-DDC24AC} &E:\Program Files\Thunder Network\Program\EmbedDetectNow.dll, (Signed) Xunlei&
[迅雷下载IE支持]
&&{889D2FEB-98-1DD2C5261283} &E:\Program Files\Thunder Network\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Windows Live 登录帮助程序]
&&{C02-4ABF-8ECC-C6} &C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation&
[Babylon IE plugin]
&&{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} &E:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll, (Signed) Babylon Ltd.&
[BHO Class]
&&{B0B0DE3C--AA9F-942FD07E1F00} &E:\Program Files\Thunder Network\Program\NoKankanAD.dll, Ayu&
[BlogThisToolbarButton Class]
&&{219C-491a-A3C7-D9FCDDC9D600} &C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll, (Signed) Microsoft Corporation&
[查看网页全部图片]
&&{548BF84E--B635-} &, &
[]
&&{e2e2dd38-d088--f2ba} &%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A&
[Translate this web page with Babylon]
&&{FEF1-4df5-BCE5-B3AC8ACF5478} &, &
[Messenger]
&&{FB5Fd2-BB9E-00C04F795683} &C:\Program Files\Messenger\msmsgs.exe, N/A&
[WUWebControl Class]
&&{6414512B-B978-451D-A0D8-FCFDF33E833C} &C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation&
[MUWebControl Class]
&&{6E3D-4EE6-879C-DC1FA91D2FC3} &C:\WINDOWS\system32\muweb.dll, (Signed) Microsoft Corporation&
[ArrVPNAX Control]
&&{B0-484F-C4C70} &C:\WINDOWS\system32\arr_x.ocx, (Signed) Array Networks, Inc.&
[]
&&{E2F-4FB0-9522-AC9BF37916A7} &, &
[迅雷流媒体探测IE支持]
&&{01443AEC-0FD1-40FD-9C87-E93D} &E:\Program Files\Thunder Network\ComDlls\TDMediaDetector5.9.22.1466.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Windows Genuine Advantage Validation Tool]
&&{A-453E-A040-C7C580BBF700} &C:\WINDOWS\system32\legitcheckcontrol.dll, (Signed) Microsoft Corporation&
[WWPicUploadCtrl Class]
&&{1D6-4A42-890D-EE617AA1537D} &E:\Program Files\AliWangWang\modules\1685\WWPictureUpload.dll, (Signed) Alibaba software (Shanghai) Corporation&
[]
&&{219C-491A-A3C7-D9FCDDC9D600} &, &
[迅雷网页图片浏览器IE支持]
&&{2D90D33C-DE76-42D0-DDC24AC} &E:\Program Files\Thunder Network\Program\EmbedDetectNow.dll, (Signed) Xunlei&
[Thunder Agent Class]
&&{-8FB2-4B3B-B29B-8B919B0EACCE} &E:\Program Files\Thunder Network\ComDlls\ThunderAgent5.9.22.1466.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Microsoft Terminal Services Client Control (redist)]
&&{4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[Microsoft Terminal Services Client Control (redist)]
&&{4EDCB26C-D24C-4e72-AF07-BDE} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[WangWangX Class]
&&{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} &E:\Program Files\AliWangWang\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.&
[WUWebControl Class]
&&{6414512B-B978-451D-A0D8-FCFDF33E833C} &C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation&
[MUWebControl Class]
&&{6E3D-4EE6-879C-DC1FA91D2FC3} &C:\WINDOWS\system32\muweb.dll, (Signed) Microsoft Corporation&
[Access UserInfo by Script]
&&{6EE9CD3E-A386-4DAE-DBF927AE} &E:\Program Files\Thunder Network\ComDlls\UserAgent.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Microsoft Terminal Services Client Control (redist)]
&&{--91e3-cf5cb290c3d0} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[Microsoft Terminal Services Client Control (redist)]
&&{4-4efb-b00b-d6aaba6d3850} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[迅雷下载IE支持]
&&{889D2FEB-98-1DD2C5261283} &E:\Program Files\Thunder Network\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Windows Live 登录帮助程序]
&&{C02-4ABF-8ECC-C6} &C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation&
[Microsoft Terminal Services Client Control (redist)]
&&{eb1-4bd2-9fdc-36f43a218f4a} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[]
&&{CC-41C8-B9BE-3C9C571A8263} &, &
[OFrameObject Class]
&&{73-482E-B13C-776C048EC890} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) 深圳市迅雷网络技术有限公司&
[Babylon IE plugin]
&&{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} &E:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll, (Signed) Babylon Ltd.&
[VersionDetector Class]
&&{9EFFB1-AEF6-B2A3FE8BFE9B} &C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.30.(646).dll, (Signed) 深圳市迅雷网络技术有限公司&
[APlayer Control]
&&{A1-4B9D-91FC-B9C461DBE9DD} &C:\Program Files\Common Files\Thunder Network\APlayer\APlayer_001.dll, (Signed) ShenZhen Thunder Networking Technologies, LTD&
[CCTVUpdateInstall]
&&{ACBB-4C2C-873B-EA53D2F3D23A} &C:\Documents and Settings\ttw\Application Data\CCTV\tv\CCTVUpdateInstall.dll, (Signed) CCTV International Networks Co.,Ltd&
[DapCtrl Class]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) 深圳市迅雷网络技术有限公司&
[KooPlayer Control]
&&{C728DAB8-FDF5-4CD7-89DD-879D25794C77} &C:\DOCUME~1\ttw\APPLIC~1\CCTV\tv\CCTVPL~1.OCX, (Signed) &
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx, (Signed) Adobe Systems, Inc.&
[Microsoft Silverlight]
&&{DFEAF541-F3E1-4C24-ACAC-99CA} &C:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll,&&Microsoft Corporation&
[]
&&{E2E2DD38-D088--F2BA} &, &
[XML HTTP Request]
&&{ED8C108E--91A4-00C04F7969E8} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{F3E70CEA-956E-49CC-B444-73AFE593AD7F} &, &
[XML DOM Document 3.0]
&&{F1-11D3-89B9-1} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[XML HTTP 3.0]
&&{F1-11D3-89B9-1} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[XML HTTP]
&&{F6D90F16-9C73-11D3-B32E-00C04F990BB4} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{FEF1-4DF5-BCE5-B3AC8ACF5478} &, &
[]
&&{FB5FD2-BB9E-00C04F795683} &, &
[Translate this web page with Babylon]
&&&res://E:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm, N/A&
[使用迅雷下载]
&&&E:\Program Files\Thunder Network\Program\GetUrl.htm, N/A&
[使用迅雷下载全部链接]
&&&E:\Program Files\Thunder Network\Program\GetAllUrl.htm, N/A&
[使用迅雷查看图片]
&&&E:\Program Files\Thunder Network\Program\repairimage.htm, N/A&
[导出到 Microsoft Excel(&X)]
&&&res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000, N/A&
[用Babylon翻译]
&&&res://E:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm, N/A&
==================================
正在运行的进程
[PID: 924 / SYSTEM][\SystemRoot\System32\smss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 984 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1016 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1060 / SYSTEM][C:\WINDOWS\system32\services.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp_sp3_gdr.4)]
[PID: 1072 / SYSTEM][C:\WINDOWS\system32\lsass.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1252 / SYSTEM][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1312 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
[PID: 1472 / SYSTEM][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\System32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
[PID: 1640 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\sched.exe]&&[Avira GmbH, 9.00.00.09]
& & [C:\Program Files\Avira\AntiVir Desktop\schedr.dll]&&[Avira GmbH, 8.00.05.00]
& & [C:\Program Files\Avira\AntiVir Desktop\avevtlog.dll]&&[Avira GmbH, 9.00.00.07]
& & [C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll]&&[, 3.06.01.00]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1952 / ttw][C:\WINDOWS\Explorer.EXE]&&[(Verified) Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
& & [E:\Program Files\Thunder Network\ComDlls\ATL71.DLL]&&[Microsoft Corporation, 7.10.6101.0]
& & [E:\Program Files\Thunder Network\ComDlls\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [E:\Program Files\Thunder Network\ComDlls\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [E:\Program Files\Thunder Network\ComDlls\xunleiBHO_Now.dll]&&[深圳市迅雷网络技术有限公司, 5,9,22,1466]
& & [E:\Program Files\Thunder Network\ComDlls\zlib1.dll]&&[, 1.2.3]
& & [C:\Program Files\Unlocker\UnlockerCOM.dll]&&[N/A, ]
& & [C:\Program Files\WinRAR\rarext.dll]&&[, ]
& & [C:\Program Files\Avira\AntiVir Desktop\shlext.dll]&&[Avira GmbH, 9.00.00.04]
& & [E:\Program Files\AliWangWang\AliIMExt.dll]&&[Alibaba software (Shanghai) Corporation., 1.0.0.1]
& & [C:\WINDOWS\system32\nvcpl.dll]&&[NVIDIA Corporation, 6.14.11.7519]
& & [C:\WINDOWS\system32\NVRSZHC.DLL]&&[NVIDIA Corporation, 6.14.11.7519]
& & [C:\WINDOWS\system32\nvapi.dll]&&[NVIDIA Corporation, 6.14.11.7519]
& & [C:\WINDOWS\system32\nvshell.dll]&&[, ]
& & [C:\WINDOWS\system32\SOGOUPY.IME]&&[ Inc., 5.0.1.4158]
[PID: 592 / ttw][C:\Program Files\Avira\AntiVir Desktop\avgnt.exe]&&[Avira GmbH, 9.00.00.12]
& & [C:\Program Files\Avira\AntiVir Desktop\cclib.dll]&&[Avira GmbH, 9.00.00.10]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [c:\program files\avira\antivir desktop\ccgen.dll]&&[Avira GmbH, 9.00.00.35]
& & [c:\program files\avira\antivir desktop\ccgenrc.dll]&&[Avira GmbH, 9.00.17.02]
& & [c:\program files\avira\antivir desktop\ccguard.dll]&&[Avira GmbH, 9.00.00.19]
& & [c:\program files\avira\antivir desktop\ccgrdrc.dll]&&[Avira GmbH, 9.00.06.02]
& & [c:\program files\avira\antivir desktop\avipc.dll]&&[Avira GmbH, 1.1.3.4]
& & [c:\program files\avira\antivir desktop\ccupdate.dll]&&[Avira GmbH, 9.00.00.16]
& & [c:\program files\avira\antivir desktop\ccupdrc.dll]&&[Avira GmbH, 9.00.06.02]
& & [c:\program files\avira\antivir desktop\cclic.dll]&&[Avira GmbH, 9.00.00.06]
& & [c:\program files\avira\antivir desktop\cclicrc.dll]&&[Avira GmbH, 9.00.01.00]
& & [c:\program files\avira\antivir desktop\ccmsg.dll]&&[Avira GmbH, 9.00.02.01]
[PID: 640 / ttw][C:\Program Files\cFosSpeed\cFosSpeed.exe]&&[cFos Software GmbH, 5.12.1652]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 668 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\avguard.exe]&&[Avira GmbH, 9.00.01.32]
& & [C:\Program Files\Avira\AntiVir Desktop\AVEvtLog.dll]&&[Avira GmbH, 9.00.00.07]
& & [C:\Program Files\Avira\AntiVir Desktop\guardmsg.dll]&&[Avira GmbH, 9.00.02.00]
& & [C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll]&&[, 3.06.01.00]
& & [C:\Program Files\Avira\AntiVir Desktop\AVPREF.DLL]&&[Avira GmbH, 9.00.03.00]
& & [C:\Program Files\Avira\AntiVir Desktop\SMTPLIB.DLL]&&[Avira GmbH, 9.02.00.25]
& & [C:\Program Files\Avira\AntiVir Desktop\AVGIO.DLL]&&[Avira GmbH, 9.00.01.04]
& & [C:\Program Files\Avira\AntiVir Desktop\aecore.dll]&&[Avira GmbH, 8.1.15.3]
& & [C:\Program Files\Avira\AntiVir Desktop\aevdf.dll]&&[Avira GmbH, 8.1.2.0]
& & [C:\Program Files\Avira\AntiVir Desktop\aescript.dll]&&[Avira GmbH, 8.1.3.33]
& & [C:\Program Files\Avira\AntiVir Desktop\aescn.dll]&&[Avira GmbH, 8.1.6.1]
& & [C:\Program Files\Avira\AntiVir Desktop\aesbx.dll]&&[Avira GmbH, 8.1.3.1]
& & [C:\Program Files\Avira\AntiVir Desktop\aerdl.dll]&&[Avira GmbH, 8.1.4.6]
& & [C:\Program Files\Avira\AntiVir Desktop\aepack.dll]&&[Avira GmbH, 8.2.2.5]
& & [C:\Program Files\Avira\AntiVir Desktop\unacev2.dll]&&[ACE Compression Software, 2.6.0.2]
& & [C:\Program Files\Avira\AntiVir Desktop\aeoffice.dll]&&[Avira GmbH, 8.1.1.0]
& & [C:\Program Files\Avira\AntiVir Desktop\aeheur.dll]&&[Avira GmbH, 8.1.1.38]
& & [C:\Program Files\Avira\AntiVir Desktop\aehelp.dll]&&[Avira GmbH, 8.1.11.6]
& & [C:\Program Files\Avira\AntiVir Desktop\aegen.dll]&&[Avira GmbH, 8.1.3.12]
& & [C:\Program Files\Avira\AntiVir Desktop\aeemu.dll]&&[Avira GmbH, 8.1.2.0]
& & [C:\Program Files\Avira\AntiVir Desktop\aebb.dll]&&[Avira GmbH, 8.1.1.0]
& & [C:\Program Files\Avira\AntiVir Desktop\avipc.dll]&&[Avira GmbH, 1.1.3.4]
[PID: 696 / ttw][C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDCertM_CCB.exe]&&[ Beijing WatchData System Co., Ltd., 3, 2, 0, 0]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\TokenMgr.dll]&&[ Beijing WatchData System Co., Ltd., 3, 6, 3, 2]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDAlg.DLL]&&[ Beijing WatchData System C0., Ltd., 3, 5, 12, 20]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\wdkmgr.dll]&&[Watchdata, 1, 0, 0, 39]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDPKCS.dll]&&[ Beijing WatchData System Co., Ltd., 3, 6, 2, 15]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDEvent.dll]&&[ Beijing WatchData System Co., Ltd., 3, 2, 5, 0]
[PID: 720 / ttw][C:\WINDOWS\system32\ctfmon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 752 / SYSTEM][C:\Program Files\cFosSpeed\spd.exe]&&[cFos Software GmbH, 5.12.1652]
& & [C:\Program Files\cFosSpeed\speedsrv.dll]&&[cFos Software GmbH, 5.12.1652]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 876 / SYSTEM][C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\MJS.dll]&&[Diskeeper Corporation, 2.0.93.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\PrFacade.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\DKLib.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\Tab.dll]&&[Diskeeper Corporation, 3.0.39.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\2052\DkRes.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\DkTabProvider.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Common Files\Diskeeper Corporation\MJS\MJSCR.dll]&&[Diskeeper Corporation, 2.0.93.0]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\NsIfaastMeas.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\NsNtfsAutoAnalyze.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\NsNtfsStd.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\NsNtfsFSConsolidate.dll]&&[Diskeeper Corporation, 13.0.835.0]
[PID: 1444 / SYSTEM][C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe]&&[ Beijing WatchData System Co., Ltd., 3, 2, 0, 0]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\TokenMgr.dll]&&[ Beijing WatchData System Co., Ltd., 3, 6, 3, 2]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDAlg.DLL]&&[ Beijing WatchData System C0., Ltd., 3, 5, 12, 20]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\wdkmgr.dll]&&[Watchdata, 1, 0, 0, 39]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDPKCS.dll]&&[ Beijing WatchData System Co., Ltd., 3, 6, 2, 15]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 388 / ttw][C:\WINDOWS\system32\conime.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1560 / SYSTEM][C:\Program Files\Array Networks\Common\8,4,0,264\arr_isrv.exe]&&[Array Networks, Inc., 8,4,0,264]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 3612 / SYSTEM][C:\Program Files\Array Networks\Array SSL VPN\8,4,0,264\arr_srvs.exe]&&[Array Networks, Inc., 8,4,0,264]
& & [C:\Program Files\Array Networks\Array SSL VPN\8,4,0,264\arr_inst.dll]&&[Array Networks, Inc., 8,4,0,264]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 3388 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 3860 / ttw][E:\Program Files\Opera\opera.exe]&&[Opera Software, 3423]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
& & [E:\Program Files\Opera\Opera.dll]&&[Opera Software, 3423]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\SOGOUPY.IME]&&[ Inc., 5.0.1.4158]
& & [C:\WINDOWS\system32\nvapi.dll]&&[NVIDIA Corporation, 6.14.11.7519]
& & [C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll]&&[, ]
[PID: 3580 / ttw][E:\Downloads\安全工具\安全检测\扫瞄修复工具\sreng2\SREngLdr.EXE]&&[Smallfrogs Studio, 2.8.2.1321]
[PID: 148 / ttw][E:\Downloads\安全工具\安全检测\扫瞄修复工具\sreng2\SREfa2ff374.EXE]&&[Smallfrogs Studio, 2.8.2.1321]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [E:\Downloads\安全工具\安全检测\扫瞄修复工具\sreng2\Upload\3rdUpd.DLL]&&[Smallfrogs Studio, 2, 1, 0, 15]
==================================
文件关联
.TXT&&Error. [C:\WINDOWS\notepad.exe %1]
.EXE&&OK. [&%1& %*]
.COM&&OK. [&%1& %*]
.PIF&&OK. [&%1& %*]
.REG&&OK. [regedit.exe &%1&]
.BAT&&OK. [&%1& %*]
.SCR&&OK. [&%1& /S]
.CHM&&Error. [&hh.exe& %1]
.HLP&&OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI&&Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF&&OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS&&OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.JS& &OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.LNK&&OK. [{0-}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1& && & localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 1640, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\SCHED.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 592, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\AVGNT.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 668, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\AVGUARD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 696, C:\WINDOWS\SYSTEM32\WATCHDATA\WATCHDATA CCB CSP V3.2\WDCERTM_CCB.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1444, C:\WINDOWS\SYSTEM32\WATCHDATA\WATCHDATA CCB CSP V3.2\WDKEYMONITORCCB.EXE]
==================================
计划任务
[已启用] SogouImeMgr.job
& && &&&E:\PROGRA~1\SOGOUI~1\501~1.415\SGTool.exe
==================================
Windows 安全更新检查
Microsoft .NET Framework 版本 1.1，简体中文版
KB829019,&&Microsoft .NET Framework 2.0 语言包：x86 (KB829019)
KB940157,&&用于 Windows XP 的 Windows 搜索 4.0 (KB940157)
KB949810,&&Office 正版增值计划通知 (KB949810)-CHS
KB905474,&&Windows Genuine Advantage 通知 (KB905474)
KB909520,&&Microsoft 基本智能卡加密服务提供程序包： x86 (KB909520)
KB923561,&&Windows XP 安全更新程序 (KB923561) MS09-010
KB961503,&&Windows XP 更新程序 (KB961503)
KB963678,&&Microsoft Office Excel 2007 帮助更新 (KB963678)
KB963677,&&Microsoft Office Outlook 2007 帮助更新 (KB963677)
KB963669,&&Microsoft Office PowerPoint 2007 帮助更新 (KB963669)
KB963665,&&Microsoft Office Word 2007 帮助更新 (KB963665)
KB953195,&&2007 Microsoft Office 套件 Service Pack 2 (SP2)
KB973924,&&Microsoft Visual C++ 2008 Redistributable Package 的安全更新 (KB973924) MS09-035
KB944036,&&用于 Windows XP 的 Internet Explorer 8
KB951847,&&Microsoft .NET Framework 3.5 Service Pack 1 和用于 .NET 版本 2.0 至 3.5 的 .NET Framework 3.5 Family Update (KB951847) x86
KB971513,&&Windows XP 更新程序 (KB971513)
KB931125,&&根证书更新程序 [2010 年 5 月] (KB931125)
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
刚刚又出现了那个情况，
病毒或者木马不是你做了系统之后
就会完全的消失
顶多只是删除了注册表中要自动启动的文件
而你做完系统之后
可能未完全清理干净的病毒和木马可能还侵入到了你的非系统盘符的文件中
你现在首先需要做的是换一个高查杀的杀软进行全盘的查杀
推荐你用小红伞或者可牛
清理完毕后
再重新做一次系统就好了
本帖最后由 zzczhang 于
22:54 编辑
额，没看5L
使用opera都会出现，就不清楚咯
把那个ip地址百度了一下，看样子是电信干的好事，见鬼的电信
重装系统前浏览网页就会出现一个奇怪的问题，有时候会跳转到2345导航，问题是我根本没输入这个网站？
ttw1038 发表于
是否ghost系统，很多由于利益的原因可能在系统修改某些东西，可以说是金山急救箱，如果还是这样，换个系统试试看
Copyright & KaFan & All Rights Reserved.
Powered by Discuz! X3.1( 苏ICP备号 ) GMT+8,}
关于API函数的三个问题想请教。
载入图标、光标的时候要用到，作用是否是一样的API编程中的位图创建函数有CreateBitmap (), CreateCompatibleBitmap ()。HBITMAP BITMAP 这两个指向位图的句柄结构有什么不同HINSTANCE 实例句柄,这三个函数除了参数数目类型不同外, CreateBitmapIndirect ()
提问者采纳
详细方法请关注VC++ - CreateCompatibleBitmap()要创建彩色位图应用 CreateCompatibleBitmap 函数关于CreateBitmapIndirect
BITMAP参数的bmBits 创建成功后返回0的问题CBitmap，出于性能方面的应用程序应该使用CreateBitmapIndirect创建单色位图:CreateBitmapIndirect 函数创建位图成功却在CDC:SelectObject 的时候失败，用CreateCompatibleBitmap创建彩色位图、宽度和位模式（如果指定了一个的话）来初始化一个位图:SelectObject 选择位图时却失败:，虽然CreateBitmapIndirect创建彩色位图时也能返回成功:CreateBitmapIndirect函数的功能是用一个BITMAP结构体重的高度，用户可以设置bmBits字段为NULL或者设为像素位数据的地址（用以初始化该位图），只能创建单色位图CreateCompatibleBitmap是生成内存兼容位图CreateBitmap是生成一个位图句柄
CBitmap。MSDN只有在CreateBitmapIndirect 有说明:::。虽然CreateBitmapIndirect函数可用于创建彩色位图，但用CDC，原因是CreateBitmapIndirect不能创建彩色位图。调用该函数时
提问者评价
来自团队：
其他类似问题
为您推荐：
其他1条回答
、长度，它包含了HBITMAP的宽度，比如常用的dll加载，就得用BITMAP来做. HINSTANCE有很多的地方。CreateBitmap ()可以创建一个空白的bitmap，空白的bitmap可以用来动态绘制. HBITMAP是图像句柄。3、像素大小等等。2，要获取HBITMAP的信息，CDC绘制是靠HBITMAP来完成的，而BITMAP是一个图像信息结构体。两者不是一回事，还有线程中也会用到，但使用方式不一样. 这三个函数作用基本一样，CreateCompatibleBitmap ()及CreateBitmapIndirect ()都是依靠原有的bitmap进行创建的。具体可以在MSDN里查HINSTANCE就知道了
api函数的相关知识
等待您来回答
下载知道APP
随时随地咨询
出门在外也不愁查看: 2593|回复: 8
有个奇怪的问题请教大家
重装系统前浏览网页就会出现一个奇怪的问题，有时候会跳转到2345导航，问题是我根本没输入这个网站？
正好系统又好久没重装了，有些卡，于是就重装了。
结果重装后又出现这个问题，下载了360顽固木马专杀也没杀出什么来，但是有些网页还会跳转，比如，有时连不上服务器，
接下来就会跳转到2345导航，以前这种情况一般跳转到电信114。
所以只能来求教大家，看怎么解决这个问题。
张成学 该用户已被删除
下载可牛杀软，还不错。里面有系统修复工具，好几个软件
楼主安装的系统或软件自带的链接吧&&这个 不是中毒阿
楼主安装什么浏览器
本帖最后由 ttw1038 于
22:03 编辑
用的opera，系统是当年电脑疯子的原版系统加序列号安装的
也用sreng扫描过，貌似是没问题的,发上来大家帮忙看看吧
System Repair Engineer 2.8.2.1321
Smallfrogs ()
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
& & 所有的启动项目（包括注册表、启动文件夹、服务等）
& & 浏览器加载项
& & 正在运行的进程（包括进程模块信息）
& & 文件关联
& & Winsock 提供者
& & Autorun.inf
& & HOSTS 文件
& & 进程特权扫描
& & 计划任务
& & Windows 安全更新检查
& & API HOOK
& & 隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
& & &ctfmon.exe&&C:\WINDOWS\system32\ctfmon.exe&&&[(Verified)Microsoft Windows Component Publisher]
& & &aliim&&; E:\Program Files\AliWangWang\aliim.exe&&&[(Verified)Alibaba (China) Co. Ltd.]
& & &Fetion&&; E:\Program Files\China Mobile\Fetion\Fetion.exe -t&&&[(Verified)China Mobile Communications Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &load&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
& & &avgnt&&&C:\Program Files\Avira\AntiVir Desktop\avgnt.exe& /min&&&[Avira GmbH]
& & &NvCplDaemon&&RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
& & &cFosSpeed&&C:\Program Files\cFosSpeed\cFosSpeed.exe&&&[(Verified)cFos Software GmbH]
& & &Babylon Client&&E:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart&&&[Babylon Ltd.]
& & &wdcertm_ccb&&C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDCertM_CCB.exe&&&[ Beijing WatchData System Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &shell&&Explorer.exe&&&[(Verified)Microsoft Windows Component Publisher]
& & &Userinit&&C:\WINDOWS\system32\userinit.exe,&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &AppInit_DLLs&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &UIHost&&logonui.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
& & &{AEB-11d0-97EE-00C04FD91972}&&shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
& & &PostBootReminder&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &CDBurn&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &WebCheck&&C:\WINDOWS\system32\webcheck.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &SysTray&&C:\WINDOWS\system32\stobject.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &WPDShServiceObj&&C:\WINDOWS\system32\WPDShServiceObj.dll&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
& & &WinlogonNotify: crypt32chain&&crypt32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
& & &WinlogonNotify: cryptnet&&cryptnet.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
& & &WinlogonNotify: cscdll&&cscdll.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
& & &WinlogonNotify: dimsntfy&&%SystemRoot%\System32\dimsntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
& & &WinlogonNotify: ScCertProp&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
& & &WinlogonNotify: Schedule&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
& & &WinlogonNotify: sclgntfy&&sclgntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
& & &WinlogonNotify: SensLogn&&WlNotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
& & &WinlogonNotify: termsrv&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
& & &WinlogonNotify: wlballoon&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
& & &IE7 Uninstall Stub&&C:\WINDOWS\system32\ieudinit.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{22d6f312-b0f6-11d0-94ab-e95}]
& & &Microsoft Windows Media Player&&C:\WINDOWS\inf\unregmp2.exe /ShowWMP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{d38-484f-9b9e-dec}]
& & &Internet Explorer&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}]
& & &Browser Customizations&&RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}MICROS]
& & &浏览器自定义组件&&RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
& & &Outlook Express&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09--FED}]
& & &Themes Setup&&%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
& & &Microsoft Outlook Express 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:OE /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
& & &NetMeeting 3.01&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT&&&[(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{e7d-11d1-bc44-00c04fd912be}]
& & &Windows Messenger 4.7&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser&&&[(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
& & &Microsoft Windows Media Player&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{71-11d2-AF11-00C04FA35D02}]
& & &通讯簿 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:WAB /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4340}]
& & &Windows 桌面更新&®svr32.exe /s /n /i:U shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4383}]
& & &Internet Explorer&&C:\WINDOWS\system32\ie4uinit.exe -BaseSettings&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018--5476DBF70820}]
& & &N/A&&C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install&&&[Microsoft Corporation]
==================================
启动文件夹
N/A
==================================
服务
[Avira AntiVir 计划程序 / AntiVirSchedulerService][Running/Auto Start]
&&&&C:\Program Files\Avira\AntiVir Desktop\sched.exe&&&Avira GmbH&
[Avira AntiVir Guard / AntiVirService][Running/Auto Start]
&&&&C:\Program Files\Avira\AntiVir Desktop\avguard.exe&&&Avira GmbH&
[cFosSpeed System Service / cFosSpeedS][Running/Auto Start]
&&&&C:\Program Files\cFosSpeed\spd.exe& -service&&cFos Software GmbH&
[Diskeeper / Diskeeper][Running/Auto Start]
&&&&C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe&&&Diskeeper Corporation&
[Forceware Web Interface / ForcewareWebInterface][Stopped/Manual Start]
&&&&C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe& -k runservice&&Apache Software Foundation&
[Human Interface Device Access / HidServ][Stopped/Disabled]
&&&C:\WINDOWS\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\hidserv.dll&&N/A&
[MagicTuneEngine / MagicTuneEngine][Stopped/Manual Start]
&&&C:\Program Files\MagicTune Premium\MagicTuneEngine.exe&&N/A&
[ForceWare user log service / nSvcLog][Stopped/Manual Start]
&&&C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe&&NVIDIA&
[NVIDIA Display Driver Service / NVSvc][Stopped/Manual Start]
&&&C:\WINDOWS\system32\nvsvc32.exe&&NVIDIA Corporation&
[WatchData ccb V3.2 / WDMonitorCCB][Running/Auto Start]
&&&C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe&&Beijing WatchData System Co., Ltd.&
[Array Utility Service 8,4,0,264 / Array_Utility_Service8.4.0.264][Running/Auto Start]
&&&C:\Program Files\Array Networks\Common\8,4,0,264\arr_isrv.exe&&Array Networks, Inc.&
[Array SSL VPN Service 8,4,0,264 / ArraySSL_VPN_Service8.4.0.264][Running/Auto Start]
&&&C:\Program Files\Array Networks\Array SSL VPN\8,4,0,264\arr_srvs.exe&&Array Networks, Inc.&
==================================
驱动程序
[AMD Processor Driver / AmdK8][Running/System Start]
&&&system32\DRIVERS\AmdK8.sys&&Advanced Micro Devices&
[avgio / avgio][Running/System Start]
&&&\??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys&&Avira GmbH&
[avgntflt / avgntflt][Running/Auto Start]
&&&system32\DRIVERS\avgntflt.sys&&Avira GmbH&
[avipbb / avipbb][Running/System Start]
&&&system32\DRIVERS\avipbb.sys&&Avira GmbH&
[BAPIDRV / BAPIDRV][Running/System Start]
&&&\??\C:\WINDOWS\system32\drivers\BAPIDRV.SYS&&&
[cFosSpeed Miniport / cFosSpeed][Running/Manual Start]
&&&system32\DRIVERS\cfosspeed.sys&&cFos Software GmbH&
[MagicTune / MagicTune][Stopped/Manual Start]
&&&system32\drivers\MTiCtwl.sys&&Samsung Electronics, Inc.&
[nv / nv][Running/Manual Start]
&&&system32\DRIVERS\nv4_mini.sys&&NVIDIA Corporation&
[nvatabus / nvatabus][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\nvatabus.sys&&NVIDIA Corporation&
[Service for NVIDIA(R) nForce(TM) Audio Enumerator / nvax][Running/Manual Start]
&&&system32\drivers\nvax.sys&&NVIDIA Corporation&
[NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
&&&system32\DRIVERS\NVENETFD.sys&&NVIDIA Corporation&
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
&&&system32\DRIVERS\nvnetbus.sys&&NVIDIA Corporation&
[Service for NVIDIA(R) nForce(TM) Audio / nvnforce][Running/Manual Start]
&&&system32\drivers\nvapu.sys&&NVIDIA Corporation&
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
&&&system32\DRIVERS\ptilink.sys&&Parallel Technologies, Inc.&
[Quantum DeepScanner Servers / qutmdserv][Running/System Start]
&&&\??\C:\WINDOWS\system32\drivers\qutmdrv.sys&&360安全中心&
[Secdrv / Secdrv][Stopped/Manual Start]
&&&system32\DRIVERS\secdrv.sys&&Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.&
[ssmdrv / ssmdrv][Running/System Start]
&&&system32\DRIVERS\ssmdrv.sys&&Avira GmbH&
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
&&&system32\DRIVERS\tcpip.sys&&Microsoft Corporation&
[ArrayNetworks SSL VPN Miniport Driver / ATP][Stopped/Manual Start]
&&&system32\DRIVERS\atpdrvr.sys&&Array Networks, Inc.&
==================================
浏览器加载项
[迅雷流媒体探测IE支持]
&&{01443AEC-0FD1-40fd-9C87-E93D} &E:\Program Files\Thunder Network\ComDlls\TDMediaDetector5.9.22.1466.dll, (Signed) 深圳市迅雷网络技术有限公司&
[迅雷网页图片浏览器IE支持]
&&{2D90D33C-DE76-42D0-DDC24AC} &E:\Program Files\Thunder Network\Program\EmbedDetectNow.dll, (Signed) Xunlei&
[迅雷下载IE支持]
&&{889D2FEB-98-1DD2C5261283} &E:\Program Files\Thunder Network\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Windows Live 登录帮助程序]
&&{C02-4ABF-8ECC-C6} &C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation&
[Babylon IE plugin]
&&{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} &E:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll, (Signed) Babylon Ltd.&
[BHO Class]
&&{B0B0DE3C--AA9F-942FD07E1F00} &E:\Program Files\Thunder Network\Program\NoKankanAD.dll, Ayu&
[BlogThisToolbarButton Class]
&&{219C-491a-A3C7-D9FCDDC9D600} &C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll, (Signed) Microsoft Corporation&
[查看网页全部图片]
&&{548BF84E--B635-} &, &
[]
&&{e2e2dd38-d088--f2ba} &%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A&
[Translate this web page with Babylon]
&&{FEF1-4df5-BCE5-B3AC8ACF5478} &, &
[Messenger]
&&{FB5Fd2-BB9E-00C04F795683} &C:\Program Files\Messenger\msmsgs.exe, N/A&
[WUWebControl Class]
&&{6414512B-B978-451D-A0D8-FCFDF33E833C} &C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation&
[MUWebControl Class]
&&{6E3D-4EE6-879C-DC1FA91D2FC3} &C:\WINDOWS\system32\muweb.dll, (Signed) Microsoft Corporation&
[ArrVPNAX Control]
&&{B0-484F-C4C70} &C:\WINDOWS\system32\arr_x.ocx, (Signed) Array Networks, Inc.&
[]
&&{E2F-4FB0-9522-AC9BF37916A7} &, &
[迅雷流媒体探测IE支持]
&&{01443AEC-0FD1-40FD-9C87-E93D} &E:\Program Files\Thunder Network\ComDlls\TDMediaDetector5.9.22.1466.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Windows Genuine Advantage Validation Tool]
&&{A-453E-A040-C7C580BBF700} &C:\WINDOWS\system32\legitcheckcontrol.dll, (Signed) Microsoft Corporation&
[WWPicUploadCtrl Class]
&&{1D6-4A42-890D-EE617AA1537D} &E:\Program Files\AliWangWang\modules\1685\WWPictureUpload.dll, (Signed) Alibaba software (Shanghai) Corporation&
[]
&&{219C-491A-A3C7-D9FCDDC9D600} &, &
[迅雷网页图片浏览器IE支持]
&&{2D90D33C-DE76-42D0-DDC24AC} &E:\Program Files\Thunder Network\Program\EmbedDetectNow.dll, (Signed) Xunlei&
[Thunder Agent Class]
&&{-8FB2-4B3B-B29B-8B919B0EACCE} &E:\Program Files\Thunder Network\ComDlls\ThunderAgent5.9.22.1466.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Microsoft Terminal Services Client Control (redist)]
&&{4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[Microsoft Terminal Services Client Control (redist)]
&&{4EDCB26C-D24C-4e72-AF07-BDE} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[WangWangX Class]
&&{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} &E:\Program Files\AliWangWang\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.&
[WUWebControl Class]
&&{6414512B-B978-451D-A0D8-FCFDF33E833C} &C:\WINDOWS\system32\wuweb.dll, (Signed) Microsoft Corporation&
[MUWebControl Class]
&&{6E3D-4EE6-879C-DC1FA91D2FC3} &C:\WINDOWS\system32\muweb.dll, (Signed) Microsoft Corporation&
[Access UserInfo by Script]
&&{6EE9CD3E-A386-4DAE-DBF927AE} &E:\Program Files\Thunder Network\ComDlls\UserAgent.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Microsoft Terminal Services Client Control (redist)]
&&{--91e3-cf5cb290c3d0} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[Microsoft Terminal Services Client Control (redist)]
&&{4-4efb-b00b-d6aaba6d3850} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[迅雷下载IE支持]
&&{889D2FEB-98-1DD2C5261283} &E:\Program Files\Thunder Network\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Windows Live 登录帮助程序]
&&{C02-4ABF-8ECC-C6} &C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, (Signed) Microsoft Corporation&
[Microsoft Terminal Services Client Control (redist)]
&&{eb1-4bd2-9fdc-36f43a218f4a} &%systemroot%\system32\mstscax.dll, (Signed) N/A&
[]
&&{CC-41C8-B9BE-3C9C571A8263} &, &
[OFrameObject Class]
&&{73-482E-B13C-776C048EC890} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) 深圳市迅雷网络技术有限公司&
[Babylon IE plugin]
&&{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} &E:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll, (Signed) Babylon Ltd.&
[VersionDetector Class]
&&{9EFFB1-AEF6-B2A3FE8BFE9B} &C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.30.(646).dll, (Signed) 深圳市迅雷网络技术有限公司&
[APlayer Control]
&&{A1-4B9D-91FC-B9C461DBE9DD} &C:\Program Files\Common Files\Thunder Network\APlayer\APlayer_001.dll, (Signed) ShenZhen Thunder Networking Technologies, LTD&
[CCTVUpdateInstall]
&&{ACBB-4C2C-873B-EA53D2F3D23A} &C:\Documents and Settings\ttw\Application Data\CCTV\tv\CCTVUpdateInstall.dll, (Signed) CCTV International Networks Co.,Ltd&
[DapCtrl Class]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) 深圳市迅雷网络技术有限公司&
[KooPlayer Control]
&&{C728DAB8-FDF5-4CD7-89DD-879D25794C77} &C:\DOCUME~1\ttw\APPLIC~1\CCTV\tv\CCTVPL~1.OCX, (Signed) &
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\WINDOWS\system32\Macromed\Flash\Flash10h.ocx, (Signed) Adobe Systems, Inc.&
[Microsoft Silverlight]
&&{DFEAF541-F3E1-4C24-ACAC-99CA} &C:\Program Files\Microsoft Silverlight\4.0.50524.0\npctrl.dll,&&Microsoft Corporation&
[]
&&{E2E2DD38-D088--F2BA} &, &
[XML HTTP Request]
&&{ED8C108E--91A4-00C04F7969E8} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{F3E70CEA-956E-49CC-B444-73AFE593AD7F} &, &
[XML DOM Document 3.0]
&&{F1-11D3-89B9-1} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[XML HTTP 3.0]
&&{F1-11D3-89B9-1} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[XML HTTP]
&&{F6D90F16-9C73-11D3-B32E-00C04F990BB4} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{FEF1-4DF5-BCE5-B3AC8ACF5478} &, &
[]
&&{FB5FD2-BB9E-00C04F795683} &, &
[Translate this web page with Babylon]
&&&res://E:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm, N/A&
[使用迅雷下载]
&&&E:\Program Files\Thunder Network\Program\GetUrl.htm, N/A&
[使用迅雷下载全部链接]
&&&E:\Program Files\Thunder Network\Program\GetAllUrl.htm, N/A&
[使用迅雷查看图片]
&&&E:\Program Files\Thunder Network\Program\repairimage.htm, N/A&
[导出到 Microsoft Excel(&X)]
&&&res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000, N/A&
[用Babylon翻译]
&&&res://E:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm, N/A&
==================================
正在运行的进程
[PID: 924 / SYSTEM][\SystemRoot\System32\smss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 984 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1016 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1060 / SYSTEM][C:\WINDOWS\system32\services.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp_sp3_gdr.4)]
[PID: 1072 / SYSTEM][C:\WINDOWS\system32\lsass.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1252 / SYSTEM][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1312 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
[PID: 1472 / SYSTEM][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\System32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
[PID: 1640 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\sched.exe]&&[Avira GmbH, 9.00.00.09]
& & [C:\Program Files\Avira\AntiVir Desktop\schedr.dll]&&[Avira GmbH, 8.00.05.00]
& & [C:\Program Files\Avira\AntiVir Desktop\avevtlog.dll]&&[Avira GmbH, 9.00.00.07]
& & [C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll]&&[, 3.06.01.00]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1952 / ttw][C:\WINDOWS\Explorer.EXE]&&[(Verified) Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
& & [E:\Program Files\Thunder Network\ComDlls\ATL71.DLL]&&[Microsoft Corporation, 7.10.6101.0]
& & [E:\Program Files\Thunder Network\ComDlls\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [E:\Program Files\Thunder Network\ComDlls\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [E:\Program Files\Thunder Network\ComDlls\xunleiBHO_Now.dll]&&[深圳市迅雷网络技术有限公司, 5,9,22,1466]
& & [E:\Program Files\Thunder Network\ComDlls\zlib1.dll]&&[, 1.2.3]
& & [C:\Program Files\Unlocker\UnlockerCOM.dll]&&[N/A, ]
& & [C:\Program Files\WinRAR\rarext.dll]&&[, ]
& & [C:\Program Files\Avira\AntiVir Desktop\shlext.dll]&&[Avira GmbH, 9.00.00.04]
& & [E:\Program Files\AliWangWang\AliIMExt.dll]&&[Alibaba software (Shanghai) Corporation., 1.0.0.1]
& & [C:\WINDOWS\system32\nvcpl.dll]&&[NVIDIA Corporation, 6.14.11.7519]
& & [C:\WINDOWS\system32\NVRSZHC.DLL]&&[NVIDIA Corporation, 6.14.11.7519]
& & [C:\WINDOWS\system32\nvapi.dll]&&[NVIDIA Corporation, 6.14.11.7519]
& & [C:\WINDOWS\system32\nvshell.dll]&&[, ]
& & [C:\WINDOWS\system32\SOGOUPY.IME]&&[ Inc., 5.0.1.4158]
[PID: 592 / ttw][C:\Program Files\Avira\AntiVir Desktop\avgnt.exe]&&[Avira GmbH, 9.00.00.12]
& & [C:\Program Files\Avira\AntiVir Desktop\cclib.dll]&&[Avira GmbH, 9.00.00.10]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [c:\program files\avira\antivir desktop\ccgen.dll]&&[Avira GmbH, 9.00.00.35]
& & [c:\program files\avira\antivir desktop\ccgenrc.dll]&&[Avira GmbH, 9.00.17.02]
& & [c:\program files\avira\antivir desktop\ccguard.dll]&&[Avira GmbH, 9.00.00.19]
& & [c:\program files\avira\antivir desktop\ccgrdrc.dll]&&[Avira GmbH, 9.00.06.02]
& & [c:\program files\avira\antivir desktop\avipc.dll]&&[Avira GmbH, 1.1.3.4]
& & [c:\program files\avira\antivir desktop\ccupdate.dll]&&[Avira GmbH, 9.00.00.16]
& & [c:\program files\avira\antivir desktop\ccupdrc.dll]&&[Avira GmbH, 9.00.06.02]
& & [c:\program files\avira\antivir desktop\cclic.dll]&&[Avira GmbH, 9.00.00.06]
& & [c:\program files\avira\antivir desktop\cclicrc.dll]&&[Avira GmbH, 9.00.01.00]
& & [c:\program files\avira\antivir desktop\ccmsg.dll]&&[Avira GmbH, 9.00.02.01]
[PID: 640 / ttw][C:\Program Files\cFosSpeed\cFosSpeed.exe]&&[cFos Software GmbH, 5.12.1652]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 668 / SYSTEM][C:\Program Files\Avira\AntiVir Desktop\avguard.exe]&&[Avira GmbH, 9.00.01.32]
& & [C:\Program Files\Avira\AntiVir Desktop\AVEvtLog.dll]&&[Avira GmbH, 9.00.00.07]
& & [C:\Program Files\Avira\AntiVir Desktop\guardmsg.dll]&&[Avira GmbH, 9.00.02.00]
& & [C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll]&&[, 3.06.01.00]
& & [C:\Program Files\Avira\AntiVir Desktop\AVPREF.DLL]&&[Avira GmbH, 9.00.03.00]
& & [C:\Program Files\Avira\AntiVir Desktop\SMTPLIB.DLL]&&[Avira GmbH, 9.02.00.25]
& & [C:\Program Files\Avira\AntiVir Desktop\AVGIO.DLL]&&[Avira GmbH, 9.00.01.04]
& & [C:\Program Files\Avira\AntiVir Desktop\aecore.dll]&&[Avira GmbH, 8.1.15.3]
& & [C:\Program Files\Avira\AntiVir Desktop\aevdf.dll]&&[Avira GmbH, 8.1.2.0]
& & [C:\Program Files\Avira\AntiVir Desktop\aescript.dll]&&[Avira GmbH, 8.1.3.33]
& & [C:\Program Files\Avira\AntiVir Desktop\aescn.dll]&&[Avira GmbH, 8.1.6.1]
& & [C:\Program Files\Avira\AntiVir Desktop\aesbx.dll]&&[Avira GmbH, 8.1.3.1]
& & [C:\Program Files\Avira\AntiVir Desktop\aerdl.dll]&&[Avira GmbH, 8.1.4.6]
& & [C:\Program Files\Avira\AntiVir Desktop\aepack.dll]&&[Avira GmbH, 8.2.2.5]
& & [C:\Program Files\Avira\AntiVir Desktop\unacev2.dll]&&[ACE Compression Software, 2.6.0.2]
& & [C:\Program Files\Avira\AntiVir Desktop\aeoffice.dll]&&[Avira GmbH, 8.1.1.0]
& & [C:\Program Files\Avira\AntiVir Desktop\aeheur.dll]&&[Avira GmbH, 8.1.1.38]
& & [C:\Program Files\Avira\AntiVir Desktop\aehelp.dll]&&[Avira GmbH, 8.1.11.6]
& & [C:\Program Files\Avira\AntiVir Desktop\aegen.dll]&&[Avira GmbH, 8.1.3.12]
& & [C:\Program Files\Avira\AntiVir Desktop\aeemu.dll]&&[Avira GmbH, 8.1.2.0]
& & [C:\Program Files\Avira\AntiVir Desktop\aebb.dll]&&[Avira GmbH, 8.1.1.0]
& & [C:\Program Files\Avira\AntiVir Desktop\avipc.dll]&&[Avira GmbH, 1.1.3.4]
[PID: 696 / ttw][C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDCertM_CCB.exe]&&[ Beijing WatchData System Co., Ltd., 3, 2, 0, 0]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\TokenMgr.dll]&&[ Beijing WatchData System Co., Ltd., 3, 6, 3, 2]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDAlg.DLL]&&[ Beijing WatchData System C0., Ltd., 3, 5, 12, 20]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\wdkmgr.dll]&&[Watchdata, 1, 0, 0, 39]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDPKCS.dll]&&[ Beijing WatchData System Co., Ltd., 3, 6, 2, 15]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDEvent.dll]&&[ Beijing WatchData System Co., Ltd., 3, 2, 5, 0]
[PID: 720 / ttw][C:\WINDOWS\system32\ctfmon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 752 / SYSTEM][C:\Program Files\cFosSpeed\spd.exe]&&[cFos Software GmbH, 5.12.1652]
& & [C:\Program Files\cFosSpeed\speedsrv.dll]&&[cFos Software GmbH, 5.12.1652]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 876 / SYSTEM][C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\MJS.dll]&&[Diskeeper Corporation, 2.0.93.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\PrFacade.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\DKLib.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\Tab.dll]&&[Diskeeper Corporation, 3.0.39.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\2052\DkRes.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\DkTabProvider.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Common Files\Diskeeper Corporation\MJS\MJSCR.dll]&&[Diskeeper Corporation, 2.0.93.0]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\NsIfaastMeas.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\NsNtfsAutoAnalyze.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\NsNtfsStd.dll]&&[Diskeeper Corporation, 13.0.835.0]
& & [C:\Program Files\Diskeeper Corporation\Diskeeper\NsNtfsFSConsolidate.dll]&&[Diskeeper Corporation, 13.0.835.0]
[PID: 1444 / SYSTEM][C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe]&&[ Beijing WatchData System Co., Ltd., 3, 2, 0, 0]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\TokenMgr.dll]&&[ Beijing WatchData System Co., Ltd., 3, 6, 3, 2]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDAlg.DLL]&&[ Beijing WatchData System C0., Ltd., 3, 5, 12, 20]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\wdkmgr.dll]&&[Watchdata, 1, 0, 0, 39]
& & [C:\WINDOWS\system32\WatchData\Watchdata CCB CSP v3.2\WDPKCS.dll]&&[ Beijing WatchData System Co., Ltd., 3, 6, 2, 15]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 388 / ttw][C:\WINDOWS\system32\conime.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1560 / SYSTEM][C:\Program Files\Array Networks\Common\8,4,0,264\arr_isrv.exe]&&[Array Networks, Inc., 8,4,0,264]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 3612 / SYSTEM][C:\Program Files\Array Networks\Array SSL VPN\8,4,0,264\arr_srvs.exe]&&[Array Networks, Inc., 8,4,0,264]
& & [C:\Program Files\Array Networks\Array SSL VPN\8,4,0,264\arr_inst.dll]&&[Array Networks, Inc., 8,4,0,264]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 3388 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 3860 / ttw][E:\Program Files\Opera\opera.exe]&&[Opera Software, 3423]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
& & [E:\Program Files\Opera\Opera.dll]&&[Opera Software, 3423]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\SOGOUPY.IME]&&[ Inc., 5.0.1.4158]
& & [C:\WINDOWS\system32\nvapi.dll]&&[NVIDIA Corporation, 6.14.11.7519]
& & [C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll]&&[, ]
[PID: 3580 / ttw][E:\Downloads\安全工具\安全检测\扫瞄修复工具\sreng2\SREngLdr.EXE]&&[Smallfrogs Studio, 2.8.2.1321]
[PID: 148 / ttw][E:\Downloads\安全工具\安全检测\扫瞄修复工具\sreng2\SREfa2ff374.EXE]&&[Smallfrogs Studio, 2.8.2.1321]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [E:\Downloads\安全工具\安全检测\扫瞄修复工具\sreng2\Upload\3rdUpd.DLL]&&[Smallfrogs Studio, 2, 1, 0, 15]
==================================
文件关联
.TXT&&Error. [C:\WINDOWS\notepad.exe %1]
.EXE&&OK. [&%1& %*]
.COM&&OK. [&%1& %*]
.PIF&&OK. [&%1& %*]
.REG&&OK. [regedit.exe &%1&]
.BAT&&OK. [&%1& %*]
.SCR&&OK. [&%1& /S]
.CHM&&Error. [&hh.exe& %1]
.HLP&&OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI&&Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF&&OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS&&OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.JS& &OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.LNK&&OK. [{0-}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1& && & localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 1640, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\SCHED.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 592, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\AVGNT.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 668, C:\PROGRAM FILES\AVIRA\ANTIVIR DESKTOP\AVGUARD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 696, C:\WINDOWS\SYSTEM32\WATCHDATA\WATCHDATA CCB CSP V3.2\WDCERTM_CCB.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1444, C:\WINDOWS\SYSTEM32\WATCHDATA\WATCHDATA CCB CSP V3.2\WDKEYMONITORCCB.EXE]
==================================
计划任务
[已启用] SogouImeMgr.job
& && &&&E:\PROGRA~1\SOGOUI~1\501~1.415\SGTool.exe
==================================
Windows 安全更新检查
Microsoft .NET Framework 版本 1.1，简体中文版
KB829019,&&Microsoft .NET Framework 2.0 语言包：x86 (KB829019)
KB940157,&&用于 Windows XP 的 Windows 搜索 4.0 (KB940157)
KB949810,&&Office 正版增值计划通知 (KB949810)-CHS
KB905474,&&Windows Genuine Advantage 通知 (KB905474)
KB909520,&&Microsoft 基本智能卡加密服务提供程序包： x86 (KB909520)
KB923561,&&Windows XP 安全更新程序 (KB923561) MS09-010
KB961503,&&Windows XP 更新程序 (KB961503)
KB963678,&&Microsoft Office Excel 2007 帮助更新 (KB963678)
KB963677,&&Microsoft Office Outlook 2007 帮助更新 (KB963677)
KB963669,&&Microsoft Office PowerPoint 2007 帮助更新 (KB963669)
KB963665,&&Microsoft Office Word 2007 帮助更新 (KB963665)
KB953195,&&2007 Microsoft Office 套件 Service Pack 2 (SP2)
KB973924,&&Microsoft Visual C++ 2008 Redistributable Package 的安全更新 (KB973924) MS09-035
KB944036,&&用于 Windows XP 的 Internet Explorer 8
KB951847,&&Microsoft .NET Framework 3.5 Service Pack 1 和用于 .NET 版本 2.0 至 3.5 的 .NET Framework 3.5 Family Update (KB951847) x86
KB971513,&&Windows XP 更新程序 (KB971513)
KB931125,&&根证书更新程序 [2010 年 5 月] (KB931125)
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
刚刚又出现了那个情况，
病毒或者木马不是你做了系统之后
就会完全的消失
顶多只是删除了注册表中要自动启动的文件
而你做完系统之后
可能未完全清理干净的病毒和木马可能还侵入到了你的非系统盘符的文件中
你现在首先需要做的是换一个高查杀的杀软进行全盘的查杀
推荐你用小红伞或者可牛
清理完毕后
再重新做一次系统就好了
本帖最后由 zzczhang 于
22:54 编辑
额，没看5L
使用opera都会出现，就不清楚咯
把那个ip地址百度了一下，看样子是电信干的好事，见鬼的电信
重装系统前浏览网页就会出现一个奇怪的问题，有时候会跳转到2345导航，问题是我根本没输入这个网站？
ttw1038 发表于
是否ghost系统，很多由于利益的原因可能在系统修改某些东西，可以说是金山急救箱，如果还是这样，换个系统试试看
Copyright & KaFan & All Rights Reserved.
Powered by Discuz! X3.1( 苏ICP备号 ) GMT+8,}
我要回帖
更多关于 请教一个问题 英语 的文章
更多推荐
- ·怎么克服小孩胆小怎么办子的胆小的问题？
- ·高中的孩子高二了,还沉迷游戏,怎么办叛逆玩游戏怎么教育的怎么办？
- ·家长如何提升孩子的自控力差的孩子怎么纠正？
- ·如何培养孩子自律的八个方法立能力？
- ·做建筑的想出海项目去哪里找商机？
- ·求大神解答matlab问题，解常微分方程习题解答组
- ·《老师您应该这样做》我的好老师作文300字字
- ·中密度匀质纤维板在青岛砂光机机青岛砂光机过程中半小时之内中间厚度由厚变薄
- ·河道里架空燃气管道道带0.02伏电,危险吗?怎么处理?
- ·半球电水壶官网可装几升水
- ·五年级小学生作文我喜欢小狗《我喜欢的一门科目 》要求:680字
- ·职校实习生预备党员转正超过一年年
- ·cljlkyeubhjbksbhb翻译成中文是什么意思
- ·藏族运动员切羊什姐2015十三届冬运会会参加了吗？
- ·有谁知道这是什么炉石传说动物园是什么呀
- ·求大神吧在线预测在线等
- ·看懂日语语的请来帮忙 SOS
- ·山大名师培训学校人培训班仲宫分部
- ·前天去检查说是身体偏胖得了治腰肌劳损的偏方，体重怎么跟治腰肌劳损的偏方扯上关系？
- ·请教一个问题 日语CDC*的问题
- ·甘露醇会造成手指关节囊破裂挛缩吗
- ·广东的2015高中课本和2015江西高中排名是一样的嘛
- ·从山东辽宁去辽宁的火车，买的 无座 ，请问是要一路站着吗？还是自带板凳呀~~
- ·东莞那家医院可以看男性早泄刷东莞社保卡密码
- ·宠物狗得了肾结石不停肾结石尿血怎么办办？
- ·有必要一定要流掉孩子吗 希望中肯的评价回答谢谢
- ·1818周岁还能长高吗？98年
- ·汤阴东关皮肤病科医保卡怎么报销能报销吗
- ·我头上破了衣服有一个口子怎么缝缝了一针最短几天可以拆线
- ·昆山重口味心理学 pdf在哪买
- ·汤阴东关皮肤病科有医保卡住院怎么报销能报销吗
- ·安阳汤阴房价东关皮肤病科能用医保卡报销吗
- ·电白县人民政府网第三人民医院有皮肤专科吗?
- ·检查b超看不到卵泡泡怎么办？
