电脑上的软件现在会经常出现强制关闭的现象-中国学网-中国IT综合门户网站
> 信息中心 >
电脑上的软件现在会经常出现强制关闭的现象
来源：互联网 发表时间： 1:10:24 责任编辑：鲁晓倩字体：
为了帮助网友解决“电脑上的软件现在会经常出现强制关闭的现象”相关的问题，中国学网通过互联网对“电脑上的软件现在会经常出现强制关闭的现象”相关的解决方案进行了整理,用户详细问题包括:RT,我想知道:电脑上的软件现在会经常出现强制关闭的现象，还有QQ，阿里旺旺和工作的软件，出现这一现象的原因是怎么回事？哪位高手知道？每天开机第一件事就是体检，然后清理垃圾但是还会出现这样的情况，有时电脑还特别的慢！，具体解决方案如下：解决方案1： 虚拟内存太小了吧 追问： 什么叫虚拟内存太小了？不太懂，能说得清楚点吗？ 回答： 你用优化大师调节一下虚拟内存。。。。 追问： 我电脑上没装优化大师呢，装下调节就可以了？确定是这个原因？ 回答： 你试试，应该不错。。 追问： 在网上下个优化大师就可以了？怎么调节的，没弄过呢…… 回答： 恩，在里面有系统优化 追问： &不会有什么其他的反应吧？？不会将电脑弄坏什么的吧。呵呵…… 回答： 不会，我一直用的就是优化大师 解决方案2： 换个系统吧！ 补充： 建议 追问： 电脑刚买的时间也不是太长呢 回答： 这和那没关系的， 或许是你的那些软件有病毒、 建议全盘格式化， 在做系统 追问： 哦 解决方案3： 难道被“肉鸡”了？ 追问： 什么意思？ 回答： 呵呵，肉鸡的意思就是被黑客控制了，估计你的电脑不会被肉鸡的，一个正常人的电脑还不足以让某某黑客感兴趣。 追问： 什么叫一个正常人的电脑？……
4个回答1个回答5个回答3个回答2个回答3个回答3个回答3个回答2个回答
相关文章：
最新添加资讯
24小时热门资讯
Copyright © 2004- All Rights Reserved. 中国学网 版权所有
京ICP备号-1 京公网安备02号解决应用程序池被自动禁用的一种方法 电脑关不了机老是自动重启,出现应用程序错 - 小小知识站
解决应用程序池被自动禁用的一种方法 电脑关不了机老是自动重启,出现应用程序错
描述：上述是初始化错误截屏的备份 应用程序正常初始化（0xc0000005）失败 说明文字：PAGE-FAULT-IN-NONPAGED-AREA 通常的原因：内存错误（数据不能使用分页文件交换到磁盘中）. 解决方法：卸掉所有的新近安装的硬件. 运行由计算机制造商提供的所有系统诊断软件.尤其是内存检查. 检查是否正确安装了所有新硬件或软件，如果这是一次全新安装，请与硬件或软件制造商联系，获得可能需要...
又是一个客户Exchange服务器的问题.Exchange 2003和DC是同一台服务器.安装好后，总是打不开默认网站的首页,显示Service
Unailable.1.首先是打开IIS管理器.检查应用程序池，果然DefaultAppPool出错了.而且不是平常的停止的图标.2.试着重启DefaultAppPool应用程序池，但是没过多久程序池又出错了.3.到了查看事件日志的时候了.发现了以下这类的日志事件类型: 警告事件来源: W3SVC事件种类: 无事件 ID: 1009日期: 事件: 16:12:33用户: N/A计算机: MAIL描述:为应用程序池 'DefaultAppPool' 提供服务的进程意外终止。进程 ID 是 '3160'。进程退出代码是
'0xffffffff'。有关更多信息，请参阅在 : go.microsoft./fwlink/events.asp 的帮助和支持中心。4.会不会是默认的程序池出问题了?于是，尝试新建一个新的程序池.将默认网站的程序池改成新的.但是问题依旧.出现相似的日志.事件类型: 错误事件来源: W3SVC事件种类: 无事件 ID: 1002日期: 事件: 14:17:04用户: N/A计算机: MAIL描述:应用程序池 'AppPool #1' 被自动禁用，原因是为此应用程序池提供服务的进程中出现一系列错误。有关更多信息，请参阅在 : go.microsoft./fwlink/events.asp 的帮助和支持中心。5.再查找事件日志另一个日志引起了我的注意.如下：事件类型: 错误事件来源: D事件种类: 无事件 ID: 10016日期: 事件: 16:12:33用户: NT AUTHORITYWORK SERVICE计算机: MAIL描述:应用程序-特定 权限设置未将
服务器应用程序(CLSID 为{A9E6D0-B9B9-00A0C922E750})的 本地 激活 权限授予用户 NT AUTHORITYWORK SERVICE SID
(S-1-5-20)。可以使用组件服务管理工具修改此安全权限。有关更多信息，请参阅在 : go.microsoft./fwlink/events.asp 的帮助和支持中心。6.有点戏了.看看CLSID 为
{A9E6D0-B9B9-00A0C922E750} 是什么服务先.最后在下面的注册表项中找到它：HKEY_CLASSES_ROOTAppID{A9E6D0-B9B9-00A0C922E750}7.名字刚好是IIS Admin Service8.好了，找到是什么了.从管理工具中打开组件服务，找到IIS Admin Service对比一下CLSID是否一致9.确定是这个以后，接下来的就是为它增加WORK SERVICE权限了.A启动和激活权限，点击自定义..B.在用户列表中添加WORK SERVICE,C.并给予本地启动和激活权限，保存退出.到此问题解决.
分享给小伙伴们：
主题：电脑关不了机老是自动重启,出现应用程序错误
描述：上述是初始化错误截屏的备份 应用程序正常初始化（0xc0000005）失败 说明文字：PAGE-FAULT-IN-NONPAGED-AREA 通常的原因：内存错误（数据不能使用分页
到磁盘中）. 解决方法：卸掉所有的新近安装的硬件. 运行由计算机制造商提供的所有系统诊断软件.尤其是内存 .
是否正确安装了所有新硬件或软件，如果这是一次全 装，请与硬件或软件制造商 ， 可能需要...
主题： 空间打开提示应用程序错误
描述：解决方法：首先点击桌面上的我的电脑-属性- -错误报告-错误汇报-勾选禁用错误汇报-但在发生严重错误时 我选项框，点击确定。这样处理对于一些小错误，Windows XP就不会 出错误提示了。或者在关闭错误报告提示，在开始-运行的输入框上输入services ，然后找到Error Reporting Service，双击打开Error Reporting Service的属性对话框，将该启动类型改为已禁用，在点击确定 ...
jscontent("before7"); 主题：了解Service Unavailable的原因以及解决方法
描述：...会相互影响。如果一个 的程序占 太多或者发生太多的错误，系统日志就会提示：&应用程序池'xxx'被自动禁用，原因是为此应用程序池提供 的进程中出现一系列错误，或者提示：应用程序池'xxx'超过了其作业 设置。这时，访问这个 就会提示：ServiceUnailable。一般系统会在30秒左右恢复正常，多 新几次就能正常访问了。另外，如果你的 当前访问人数过...
主题：优化系统 提升Win7系统运行速度
描述：...优化准备知识什么是 ? 是系统用以执行指定系统功能的程序或进程，其功用是支持其他应用程序，一般在 运行。与 运行的程序相比， 不会出现程序窗口或对话框，只有在任务管理器中才能观察到它们的身影。如何修改 的启动类型?在Win
7开始菜单的搜索程序和 栏里输入services.msc或 ，即可搜索到 项，点击之后就可以打开 管理列表窗口。双...
jscontent("before4"); 主题：如何解决 安装后无法打开
描述：...管理器中，依次打开 配置---管理模板--系统，然后在右面的列表中向下查找不要运行指定的应用程序这样一个选项，然后双击打开。如图。如果你发现你的设置为已启用，并且在列表中显示出了你的 软件，那么说明就是这里给禁止的，你只要禁用它就可以了。将已禁用前面的小圆圈选定，如图，不允 的程序列表处的按钮成了灰色的不可点击状态，这时就禁用了这个设置...
主题：Win8常见故障与解决方法
描述：...这个 默认是隐藏的，要显示隐藏 之后才能查看。　　 问题：win8如何查看已安装的metro应用程序？　　 Metro应用默认全部显示在开始菜单里。另外在开始菜单的空白处右击，右下角
06-0206-0106-0106-0206-02
09-1708-3008-3009-1509-14
也许你感兴趣为什么电脑老是自动弹出帮助和支持的窗口?_百度知道
为什么电脑老是自动弹出帮助和支持的窗口?
1、点击&开始&--运行--输入msconfig后回车--点击&启动&--只保留&ctfmon\杀毒软件\防火墙,&其它前面的勾都去掉--然后点击&应用&--点击&确定&。2、如果安装了优化大师，打开优化大师－系统性能优化－桌面菜单优化－去掉启动系统时为桌面和Explorer创建独立的进程！ 重启电脑，启动到桌面时会出现一个对话框，在对话框中添加勾选，确定即可。
其他类似问题
为您推荐：
F1就是“帮助和支持”的快捷键如果你的是精简版系统，“帮助和支持”一般都不会安装的是否你按了“F1”键，或者F1键坏了
1、点击&开始&--运行--输入msconfig后回车--点击&启动&--只保留&ctfmon\杀毒软件\防火墙,&其它前面的勾都去掉--然后点击&应用&--点击&确定&. 2、如果安装了优化大师，打开优化大师－系统性能优化－桌面菜单优化－去掉启动系统时为桌面和Explorer创建独立的进程！ 重启电脑，启动到桌面时会出现一个对话框，在对话框中添加勾选，确定即可
你好，是否你按了“F1”键，或者F1键坏了。-----------------------------------F1就是“帮助和支持”的快捷键如果你的是精简版系统，“帮助和支持”一般都不会安装的。
中毒了 重组系统
我的笔记本之前也一直出现这个问题，一开始我也很烦躁，怎么都找不到解决的方法。重装了两三次系统，但是还是会出现。后来我有一段时间不用电脑就关机，不让电脑待机很长时间，就没有出现过了。到现在一直没出现过了。
等待您来回答
下载知道APP
随时随地咨询
出门在外也不愁只需一步，快速开始
后使用快捷导航
电脑总是自动弹出网页
该用户从未签到
马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。
才可以下载或查看，没有帐号？
我的默认浏览器是遨游，毒霸，卫士，全盘杀无毒，电脑医生的清除流氓软件也无法解决，我看到/zt/weishi_zttgg.shtml上说，通过跟踪用户金山安全专家发现发现总出现弹出广告、自动弹出游戏广告、弹出游戏广告是游戏厂商与部分网站达成推广协议。但是，现在已经已有黑客利用该方法进行挂马、捆绑木马欺骗，请用金山卫士保护您的电脑，不受广告和广告木马带来的威胁。我安装了金山卫士，但不知道该怎么设置才能不弹网页？
附serng报告，高手帮我看下，谢谢。
,20:33:22
System Repair Engineer 2.8.4.1331
Smallfrogs ()
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
& & 所有的启动项目（包括注册表、启动文件夹、服务等）
& & 浏览器加载项
& & 正在运行的进程（包括进程模块信息）
& & 文件关联
& & Winsock 提供者
& & Autorun.inf
& & HOSTS 文件
& & 进程特权扫描
& & 计划任务
& & Windows 安全更新检查
& & API HOOK
& & 隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
& & &ctfmon.exe&&C:\WINDOWS\system32\ctfmon.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &load&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
& & &IMSS&&&C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe&&&&[(Verified)Intel Corporation]
& & &HotKeysCmds&&C:\WINDOWS\system32\hkcmd.exe&&&[(Verified)Intel Corporation]
& & &kxesc&&&d:\金山\kingsoft antivirus\kxetray.exe& -autorun&&&[(Verified)Beijing Kingsoft Security software Co.,Ltd]
& & &KSafeTray&&&d:\金山卫士\ksafe\KSafeTray.exe& -autorun&&&[(Verified)Kingsoft Security Co.,Ltd]
& & &shield&&C:\Program Files\Yuguo\shieldtray.exe&&&[(Verified)EAZ SOLUTION, INC.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &shell&&Explorer.exe&&&[(Verified)Microsoft Windows Component Publisher]
& & &Userinit&&C:\WINDOWS\system32\\userinit.exe,&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &AppInit_DLLs&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &UIHost&&logonui.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
& & &{AEB-11d0-97EE-00C04FD91972}&&shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
& & &PostBootReminder&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &CDBurn&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &WebCheck&&%SystemRoot%\system32\webcheck.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &SysTray&&C:\WINDOWS\system32\stobject.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
& & &WinlogonNotify: crypt32chain&&crypt32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
& & &WinlogonNotify: cryptnet&&cryptnet.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
& & &WinlogonNotify: cscdll&&cscdll.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
& & &WinlogonNotify: dimsntfy&&%SystemRoot%\System32\dimsntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
& & &WinlogonNotify: igfxcui&&igfxdev.dll&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
& & &WinlogonNotify: ScCertProp&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
& & &WinlogonNotify: Schedule&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
& & &WinlogonNotify: sclgntfy&&sclgntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
& & &WinlogonNotify: SensLogn&&WlNotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
& & &WinlogonNotify: termsrv&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
& & &WinlogonNotify: wlballoon&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
& & &{-A8BA-11D1-B96B-00A0C90312E1}&&%SystemRoot%\system32\browseui.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &{8C7461EF-2B13-11d2-BE35-0}&&%SystemRoot%\system32\browseui.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
& & &IE7 Uninstall Stub&&C:\WINDOWS\system32\ieudinit.exe&&&[Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{22d6f312-b0f6-11d0-94ab-e95}]
& & &Microsoft Windows Media Player&&C:\WINDOWS\inf\\unregmp2.exe /ShowWMP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{d38-484f-9b9e-dec}]
& & &Internet Explorer&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}MICROS]
& & &浏览器自定义组件&&RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
& & &Outlook Express&&%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09--FED}]
& & &Themes Setup&&%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
& & &Microsoft Outlook Express 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:OE /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
& & &NetMeeting 3.01&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{e7d-11d1-bc44-00c04fd912be}]
& & &Windows Messenger 4.7&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
& & &Microsoft Windows Media Player&&rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{71-11d2-AF11-00C04FA35D02}]
& & &通讯簿 6&&&%ProgramFiles%\Outlook Express\setup50.exe& /APP:WAB /CALLER:WINNT /user /install&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4340}]
& & &Windows 桌面更新&&regsvr32.exe /s /n /i:U shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4383}]
& & &Internet Explorer 6&&%SystemRoot%\system32\ie4uinit.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
& & &SCRNSAVE.EXE&&C:\WINDOWS\System32\logon.scr&&&[(Verified)Microsoft Windows Component Publisher]
==================================
启动文件夹
N/A
==================================
服务
[Adobe LM Service / Adobe LM Service][Stopped/Manual Start]
&&&&C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe&&&Adobe Systems&
[Adobe Flash Player Update Service / AdobeFlashPlayerUpdateSvc][Stopped/Manual Start]
&&&C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe&&Adobe Systems Incorporated&
[AppleChargerSrv / AppleChargerSrv][Stopped/Manual Start]
&&&system32\AppleChargerSrv.exe&&(File is missing)&
[CBoxService / CBoxService][Stopped/Manual Start]
&&&&D:\cbox\CBox\CBoxService.exe&&&中国网络电视台CNTV&
[Cmb WebProtect Support / CMBWPS][Running/Auto Start]
&&&C:\Program Files\CMBCHINA\WebProtect\WPService.exe /start&&China Merchants Bank&
[Intel(R) Capability Licensing Service Interface / Intel(R) Capability Licensing Service Interface][Running/Auto Start]
&&&&C:\Program Files\Intel\iCLS Client\HeciServer.exe&&&Intel(R) Corporation&
[Intel(R) Dynamic Application Loader Host Interface Service / jhi_service][Running/Auto Start]
&&&C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe&&Intel Corporation&
[KSafe service / KSafeSvc][Running/Auto Start]
&&&&d:\金山卫士\ksafe\KSafeSvc.exe& -svc&&Kingsoft Corporation&
[Kingsoft Core Service / kxescore][Running/Auto Start]
&&&&d:\金山\kingsoft antivirus\kxescore.exe& /service kxescore&&Kingsoft Corporation&
[Intel(R) Management and Security Application Local Management Service / LMS][Running/Auto Start]
&&&C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe&&Intel Corporation&
[SHDSERV / SHDSERV][Running/Auto Start]
&&&C:\Program Files\Yuguo\shdserv.exe&&南京安悦科技有限公司&
[Shield Client Service / ShieldClientService][Stopped/Manual Start]
&&&C:\Program Files\Yuguo\shieldclnt.exe&&N/A&
[Intel(R) Management and Security Application User Notification Service / UNS][Running/Manual Start]
&&&&C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe&&&Intel Corporation&
[VJVodClientServices / vvdsvc][Stopped/Manual Start]
&&&C:\WINDOWS\System32\svchost.exe -k vvdsvc--&D:\先锋网络电视\ltv\vjocx.dll&&南京纳加软件有限公司&
==================================
驱动程序
[Ambfilt / Ambfilt][Stopped/Manual Start]
&&&system32\drivers\Ambfilt.sys&&Creative&
[ApolloProtect / ApolloProtect][Stopped/Manual Start]
&&&\??\F:\街头篮球\Apollo\Apollo.sys&&N/A&
[AppleCharger / AppleCharger][Running/System Start]
&&&system32\DRIVERS\AppleCharger.sys&&N/A&
[BC / BC][Running/Boot Start]
&&&\SystemRoot\system32\Drivers\BC.sys&&Kingsoft Corporation&
[CMB8100 / CMB8100][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\Drivers\CertClient.dat&&N/A&
[CMBProtector / CMBProtector][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\Drivers\CMBProtector.dat&&N/A&
[gdrv / gdrv][Stopped/Manual Start]
&&&\??\C:\WINDOWS\gdrv.sys&&N/A&
[HaoZip Virtual Bus Driver / HaozipVirtualCDBus][Stopped/Manual Start]
&&&system32\DRIVERS\HaoZipVirtualCDBus.sys&&Shanghai RuiChuang&
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
&&&system32\DRIVERS\HDAudBus.sys&&Windows (R) Server 2003 DDK provider&
[ialm / ialm][Running/Manual Start]
&&&system32\DRIVERS\igxpmp32.sys&&Intel Corporation&
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
&&&system32\drivers\RtkHDAud.sys&&Realtek Semiconductor Corp.&
[kavbootc / kavbootc][Running/Boot Start]
&&&\SystemRoot\system32\drivers\kavbootc.sys&&Kingsoft Corporation&
[KDHacker / KDHacker][Running/System Start]
&&&\??\d:\金山\kingsoft antivirus\security\kxescan\kdhacker.sys&&Kingsoft Corporation&
[kisknl / kisknl][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\drivers\kisknl.sys&&Kingsoft Corporation&
[kmodurl / kmodurl][Running/System Start]
&&&\??\d:\金山卫士\ksafe\kmodurlxp.sys&&Kingsoft Corporation&
[ksafebootsafe / ksafebootsafe][Running/Boot Start]
&&&\SystemRoot\system32\Drivers\ksafebootsafe.sys&&Kingsoft Corporation&
[ksapi / ksapi][Running/Manual Start]
&&&\??\C:\WINDOWS\system32\drivers\ksapi.sys&&Kingsoft Corporation&
[Intel(R) Management Engine Interface&&/ MEI][Running/Manual Start]
&&&system32\DRIVERS\HECI.sys&&Intel Corporation&
[Monfilt / Monfilt][Stopped/Manual Start]
&&&system32\drivers\Monfilt.sys&&Creative Technology Ltd.&
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
&&&system32\DRIVERS\ptilink.sys&&Parallel Technologies, Inc.&
[QQProtect / QQProtect][Running/System Start]
&&&\??\C:\WINDOWS\system32\drivers\QQProtect.sys&&Tencent&
[Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Running/Manual Start]
&&&system32\DRIVERS\Rtenicxp.sys&&Realtek Semiconductor Corporation&
[Secdrv / Secdrv][Stopped/Manual Start]
&&&system32\DRIVERS\secdrv.sys&&Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.&
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
&&&system32\DRIVERS\tcpip.sys&&Microsoft Corporation&
[TesSafe / TesSafe][Stopped/Manual Start]
&&&\??\C:\WINDOWS\system32\TesSafe.sys&&TENCENT&
==================================
浏览器加载项
[QQDownload IE Left Helper]
&&{C9--D2} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{00000ADA-7E0D-47C1-986C-F017D09C4304} &, &
[IE2EMBHO Class]
&&{0A0DDBD3--873F-BBDD26D6C14E} &D:\电驴\easyMule\modules\IE2EM.dll, (Signed) &
[EyeOnIE Class]
&&{20E-41A9-954A-04DCCB1FD16C} &D:\暴风影音\StormPlayer\MediaLibraryIcon.dll, (Signed) 北京暴风科技股份有限公司&
[WebProtect]
&&{CA8-4C7C-B8FC063B} &C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank&
[迅雷下载支持]
&&{889D2FEB-98-1DD2C5261283} &D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[迅雷BHO平台]
&&{DE05CF4A-7B0A--} &D:\迅雷\Thunder BHO Platform\IEPlatform.dll, (Signed) 深圳市迅雷网络技术有限公司&
[PPLive]
&&{95B3F550-91C4-4627-BCC4-77} &D:\PPTV\PPLive.exe, (Signed) PPLive Corporation&
[金山快译(&K)]
&&{6CFEF-4cd4-B654-D3AE55B4128C} &D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll, Copyright (c) Kingsoft Corporation Limited. All rights reserved.&
[QQDownload IE Left Helper]
&&{C9--D2} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{00000ADA-7E0D-47C1-986C-F017D09C4304} &, &
[AliCertDOCtrl Class]
&&{08D512D2-7D97-4E22-B7DB-} &C:\Documents and Settings\VIP\Application Data\alipay\cf\alicdo.dll, (Signed) Alipay&
[IE2EMBHO Class]
&&{0A0DDBD3--873F-BBDD26D6C14E} &D:\电驴\easyMule\modules\IE2EM.dll, (Signed) &
[]
&&{14C1D00E-0B92-4FA2D740DD} &, &
[]
&&{1A3-4CAB-84EE-C814E1AE0D8F} &, &
[WWPicUploadCtrl Class]
&&{1D6-4A42-890D-EE617AA1537D} &D:\阿里旺旺\7.21.01C\modules\1685\WWPictureUpload.dll, (Signed) Alibaba software (Shanghai) Corporation&
[InstallHelper Class]
&&{1DABF8D5-B7F-A30E53D709B3} &C:\WINDOWS\system32\MMInstaller.dll, (Signed) Tencent&
[iTrusPTA Class]
&&{1E0DFFCF-27FF-007349FEDA} &C:\WINDOWS\system32\itruscert\PTA.dll, (Signed) iTruschina Co., Ltd.&
[EyeOnIE Class]
&&{20E-41A9-954A-04DCCB1FD16C} &D:\暴风影音\StormPlayer\MediaLibraryIcon.dll, (Signed) 北京暴风科技股份有限公司&
[]
&&{24C1D00E-0B92-4FA2D740DD} &, &
[HTML Document]
&&{F9-11CF-8FD0-00AA00686F13} &%SystemRoot%\system32\mshtml.dll, (Signed) N/A&
[XML DOM Document]
&&{B36-11D2-B20E-00C04F983E60} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{29B6CFD5-C42-1} &, &
[DHTML Edit Control Safe for Scripting for IE5]
&&{2D360201-FFF5-11D1-8D03-00A0C959BC0A} &C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation&
[HtmlDlgSafeHelper Class]
&&{B5-11CF-BB82-00AA00BDCE0B} &C:\WINDOWS\system32\mshtmled.dll, (Signed) Microsoft Corporation&
[IETag Factory]
&&{-CA0E-42D2-BF39-B33AF135CC4D} &C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, (Signed) Microsoft Corporation&
[UnityWebPlayer Control]
&&{-DE89-A-D46C3A781394} &C:\Documents and Settings\VIP\Local Settings\Application Data\Unity\WebPlayer\loader\UnityWebPluginAX.ocx, (Signed) Unity Technologies ApS&
[Agent Class]
&&{-8FB2-4B3B-B29B-8B919B0EACCE} &D:\迅雷\BHO\ThunderAgent7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[EditCtrl Class]
&&{488AB3-8F27-FA1AECAA8844} &C:\WINDOWS\system32\aliedit\aliedit.dll, (Signed) &
[PPS浏览器插件]
&&{4E6A8DA1-B-B036-B9E16EF26CAC} &D:\PPS\PPStream\PPSPLU~1.DLL, (Signed) PPStream Inc.&
[WebProtect]
&&{CA8-4C7C-B8FC063B} &C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank&
[WangWangX Class]
&&{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} &D:\阿里旺旺\7.21.18C\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.&
[]
&&{5EF7B131-C278-4034-BC88-2CE28B128681} &, &
[Windows Media Player]
&&{6BF52A52-394A-11D3-B153-00C04F79FAA6} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[金山快译(&K)]
&&{6CFEF-4CD4-B654-D3AE55B4128C} &D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll, Copyright (c) Kingsoft Corporation Limited. All rights reserved.&
[Thunder59Agent Class]
&&{6EE9CD3E-A386-4DAE-DBF927AE} &C:\Program Files\Common Files\Thunder Network\UserAgent\UserAgent2.0.2.10.dll, (Signed) 深圳市迅雷网络技术有限公司&
[CertEnroll Class]
&&{7978461C-CC22-48F2-BC69-D} &C:\WINDOWS\system32\itruscert\itrusenroll.dll, (Signed) iTruschina Co., Ltd.&
[]
&&{-3DE7-4171-A0DD-A7A} &, &
[]
&&{87CCBB9A-C425-44D4-BBAA-83} &, &
[Microsoft Web 浏览器]
&&{A-11D0-A96B-00C04FD705A2} &C:\WINDOWS\system32\shdocvw.dll, (Signed) Microsoft Corporation&
[迅雷下载支持]
&&{889D2FEB-98-1DD2C5261283} &D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll, (Signed) 深圳市迅雷网络技术有限公司&
[XML DOM Document 6.0]
&&{88D96A05-F192-11D4-A65F-E5} &C:\WINDOWS\system32\msxml6.dll, (Signed) Microsoft Corporation&
[QQDownload Class]
&&{8AC3BC28-E145-AAC128ACB16} &D:\QQDownload\QQIEHelper01.dll, (Signed) Tencent Technology (Shenzhen) Company Limited&
[]
&&{CC-41C8-B9BE-3C9C571A8263} &, &
[]
&&{95B3F550-91C4-4627-BCC4-77} &, &
[OFrameObject Class]
&&{73-482E-B13C-776C048EC890} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[]
&&{A2-4F68-A67B-A} &, &
[APlayer3 Control]
&&{A1-4B9D-91FC-B9C461DBE9DD} &C:\Documents and Settings\All Users\Application Data\Thunder Network\APlayer\APlayer_3.5.0.643.dll, (Signed) ShenZhen Thunder Networking Technologies, LTD&
[DapCtrl Class]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F9} &, &
[SearchAssistantOC]
&&{B45FF030--85DE-00C04FA35C89} &%SystemRoot%\system32\shdocvw.dll, (Signed) N/A&
[AUDIO__MP3 Moniker Class]
&&{CD3AFA76-B84F-48F0-9393-7EDC} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[AUDIO__X_MS_WMA Moniker Class]
&&{CD3AFA84-B84F-48F0-9393-7EDC} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx, (Signed) Adobe Systems, Inc.&
[]
&&{D9EBCF5D-3F8F-4b6a-89BA-7} &, &
[xoliimpl Class]
&&{DD5BF6D1--9DFA-5C343CAF178E} &C:\WINDOWS\xinstaller.dll, (Signed) 深圳市迅雷技术有限公司&
[迅雷BHO平台]
&&{DE05CF4A-7B0A--} &D:\迅雷\Thunder BHO Platform\IEPlatform.dll, (Signed) 深圳市迅雷网络技术有限公司&
[PlayerCtrl Class]
&&{E05BC2A3-9A46-4a32-80C9-023A473F5B23} &C:\Program Files\Tencent\QQMusic\QzoneMusic\QzoneMusic.dll, (Signed) Tencent&
[]
&&{E2E2DD38-D088--F2BA} &, &
[SSOForPTLogin2 Class]
&&{EAAED308-B-965E-171933ADD473} &C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\npSSOAxCtrlForPTLogin.dll, (Signed) Tencent&
[XML HTTP Request]
&&{ED8C108E--91A4-00C04F7969E8} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[PPLive Lite Class]
&&{EF0D1A14--A589-240C01EDC078} &C:\Program Files\Internet Explorer\PPLite\plugin\1.0.1.4584\pplugin2.dll, (Signed) &
[]
&&{F3D0D36F-23F8-C92B03D4AF} &, &
[]
&&{F3E70CEA-956E-49CC-B444-73AFE593AD7F} &, &
[Storm AxPlayer Class]
&&{F06-494D-87E2-} &D:\暴风影音\StormPlayer\webplayer\PlayerShell.dll, (Signed) 北京暴风科技股份有限公司&
[XML HTTP]
&&{F6D90F16-9C73-11D3-B32E-00C04F990BB4} &C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation&
[]
&&{F7E55BDF-9528-46ba-B550-} &, &
[]
&&{FB5FD2-BB9E-00C04F795683} &, &
[&使用&迅雷下载]
&&&D:\迅雷\BHO\\GetUrl.htm, N/A&
[&使用&迅雷下载全部链接]
&&&D:\迅雷\BHO\\GetAllUrl.htm, N/A&
[&使用&迅雷离线下载]
&&&D:\迅雷\BHO\OfflineDownload.htm, N/A&
[&迅雷下载到手机]
&&&http://static./shoulei/shouleidl.htm, N/A&
[使用QQ旋风下载(&X)]
&&&D:\QQDownload\geturl.htm, N/A&
[使用QQ旋风下载全部链接(&Q)]
&&&D:\QQDownload\getAllurl.htm, N/A&
[使用QQ旋风离线下载(&L)]
&&&D:\QQDownload\xfofflinedown.htm, N/A&
[使用电驴下载]
&&&D:\电驴\easyMule\IE2EM.htm, N/A&
[导出到 Microsoft Office Excel(&X)]
&&&res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A&
[添加为阿里旺旺表情]
&&&D:\阿里旺旺\7.21.01C\AddNewEmotion.htm, N/A&
==================================
正在运行的进程
[PID: 728 / SYSTEM][\SystemRoot\System32\smss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 788 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 812 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
[PID: 856 / SYSTEM][C:\WINDOWS\system32\services.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 868 / SYSTEM][C:\WINDOWS\system32\lsass.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
[PID: 1068 / SYSTEM][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1180 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1280 / SYSTEM][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1388 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1516 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 1628 / SYSTEM][d:\金山卫士\ksafe\KSafeSvc.exe]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\json.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\kdump.dll]&&[Kingsoft Corporation, ,3229]
& & [d:\金山卫士\ksafe\kxebase.dll]&&[Kingsoft Corporation, ,1978]
& & [d:\金山卫士\ksafe\scom.dll]&&[Kingsoft Corporation, ,976]
& & [d:\金山卫士\ksafe\kxecore\kxecore.dll]&&[Kingsoft Corporation, ,2020]
& & [d:\金山卫士\ksafe\kexectrl.dll]&&[Kingsoft Corporation, ,1422]
& & [d:\金山卫士\ksafe\kwssp.dll]&&[Kingsoft Corporation, .4037]
& & [d:\金山卫士\ksafe\netstat.dll]&&[Kingsoft Corporation, 4.7.0.4042]
& & [d:\金山卫士\ksafe\fwproxy.dll]&&[Kingsoft Corporation, 4.7.0.4042]
& & [d:\金山卫士\ksafe\ksinst.dll]&&[Kingsoft Corporation, ,3056]
& & [d:\金山卫士\ksafe\kse\ksecansp.dll]&&[Kingsoft Corporation, 4.0.7.2420]
& & [d:\金山卫士\ksafe\kse\ksbwdet2.dll]&&[Kingsoft Corporation, ,2915]
& & [d:\金山卫士\ksafe\ksapi.dll]&&[Kingsoft Corporation, ,107]
& & [d:\金山卫士\ksafe\khistory.dll]&&[Kingsoft Corporation, ,2880]
& & [d:\金山卫士\ksafe\kse\kseutil.dll]&&[Kingsoft Corporation, ,14]
& & [d:\金山卫士\ksafe\kse\ksesscan.dll]&&[Kingsoft Corporation, ,2]
& & [d:\金山卫士\ksafe\kse\wfs.dll]&&[Kingsoft Corporation, ,1839]
& & [d:\金山卫士\ksafe\kse\sqlite.dll]&&[Kingsoft Corporation, ,1194]
& & [d:\金山卫士\ksafe\keng\kae\kaecore.dat]&&[Kingsoft Corporation, ,1887]
& & [d:\金山卫士\ksafe\ksscore.dll]&&[Kingsoft Corporation, ,3003]
& & [d:\金山卫士\ksafe\sqlite.dll]&&[Kingsoft Corporation, ,1194]
& & [d:\金山卫士\ksafe\khandler.dll]&&[Kingsoft Corporation, ,2036]
& & [d:\金山卫士\ksafe\keng\kae\karchive.dat]&&[Kingsoft Corporation, ,1746]
& & [d:\金山卫士\ksafe\keng\kae\kaearcha.dat]&&[Kingsoft Corporation, ,1407]
& & [d:\金山卫士\ksafe\keng\kae\kaeolea.dat]&&[Kingsoft Corporation, ,1847]
& & [d:\金山卫士\ksafe\keng\kae\kaearchb.dat]&&[Kingsoft Corporation, ,12]
[PID: 1924 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp_sp3_gdr.6)]
& & [C:\WINDOWS\system32\hpinksts9411LM.dll]&&[Hewlett-Packard Co., 22.50.191.0]
[PID: 1460 / VIP][C:\WINDOWS\Explorer.EXE]&&[(Verified) Microsoft Corporation, 6.00. (xpsp.5)]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kshmpg.dll]&&[Kingsoft Corporation, ,159]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山\kingsoft antivirus\kwansvc.dll]&&[Kingsoft Corporation, ,38]
& & [C:\WINDOWS\system32\igfxpph.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\hccutils.DLL]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxrCHS.lrc]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxsrvc.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxdev.dll]&&[Intel Corporation, 6.15.10.5406]
& & [D:\暴风影音\StormPlayer\MediaLibraryIcon.dll]&&[北京暴风科技股份有限公司, 5.28.829.0]
& & [C:\Program Files\WinRAR\rarext.dll]&&[Alexander Roshal, 5.0.0]
& & [C:\Program Files\Unlocker\UnlockerCOM.dll]&&[N/A, ]
& & [C:\WINDOWS\system32\shellfire.dll]&&[, 3,1,8,6069]
& & [D:\阿里旺旺\7.21.01C\AliIMExt.dll]&&[Alibaba software (Shanghai) Corporation., 1.0.0.1]
& & [D:\优化大师\Wopti\WoptiEncryptModule.dll]&&[Wopti, 1.6.10.816]
& & [C:\Program Files\Yuguo\shieldshell.dll]&&[南京安悦科技有限公司, 1,0,11,6]
& & [d:\金山\kingsoft antivirus\kavmenu.dll]&&[Kingsoft Corporation, ,3850]
& & [C:\WINDOWS\system32\msdmo.dll]&&[, ]
[PID: 1396 / SYSTEM][C:\Program Files\CMBCHINA\WebProtect\WPService.exe]&&[China Merchants Bank, 1, 0, 0, 1]
& & [C:\Program Files\CMBCHINA\WebProtect\WebProtectPlus.dll]&&[China Merchants Bank, 1, 0, 0, 1]
[PID: 1600 / SYSTEM][C:\Program Files\Intel\iCLS Client\HeciServer.exe]&&[Intel(R) Corporation, 1.24.738.1 SYSTEM]
[PID: 1664 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe]&&[Intel Corporation, 8.1.0.1265]
[PID: 1728 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe]&&[Intel Corporation, 8.1.0.1281]
[PID: 192 / SYSTEM][C:\Program Files\Yuguo\shdserv.exe]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\shdapi.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\schedule.dll]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\shdservps.dll]&&[N/A, ]
[PID: 312 / SYSTEM][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 2116 / VIP][C:\WINDOWS\system32\hkcmd.exe]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\hccutils.DLL]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxsrvc.dll]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\igfxrCHS.lrc]&&[Intel Corporation, 6.15.10.5406]
& & [C:\WINDOWS\system32\KIme.ime]&&[Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.1]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 2172 / VIP][D:\金山卫士\ksafe\KSafeTray.exe]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\kdump.dll]&&[Kingsoft Corporation, ,3229]
& & [D:\金山卫士\ksafe\ksftray.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\json.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\ksapi.dll]&&[Kingsoft Corporation, ,107]
& & [d:\金山卫士\ksafe\ksfskin.dll]&&[Kingsoft Corporation, 4.7.0.4046]
& & [d:\金山卫士\ksafe\ksafedb.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\krcmdmon.dll]&&[Kingsoft Corporation, 4.7.0.4050]
& & [D:\金山卫士\ksafe\actpush.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\pushapp\\usbmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kinfoc.dll]&&[Kingsoft Corporation, ,5159]
& & [D:\金山卫士\ksafe\krunopt.dll]&&[Kingsoft Corporation, 4.7.0.4041]
& & [d:\金山卫士\ksafe\khistory.dll]&&[Kingsoft Corporation, ,2880]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山卫士\ksafe\kwsctrl.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\ksafeup.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山卫士\ksafe\zlib1.dll]&&[, 1.2.3]
& & [d:\金山卫士\ksafe\KEng\ksignup.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\KEng\KSGMerge.DLL]&&[Kingsoft Corporation, ,1656]
& & [d:\金山卫士\ksafe\ksgamemon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\cloudlib.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvipcore.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvip.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\klogin.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山卫士\ksafe\kvip\kvipinter.dll]&&[Kingsoft Corporation, ,110]
& & [d:\金山卫士\ksafe\httpdlib.dll]&&[Kingsoft Corporation, 4.7.0.4037]
[PID: 2204 / VIP][C:\Program Files\Yuguo\shieldtray.exe]&&[南京安悦科技有限公司, 1,0,11,6]
& & [C:\Program Files\Yuguo\ps.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\shdservps.dll]&&[N/A, ]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\clientadd.dll]&&[, 1, 0, 0, 1]
[PID: 2248 / VIP][C:\WINDOWS\system32\ctfmon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.5)]
[PID: 2300 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.2)]
[PID: 3056 / SYSTEM][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 4932 / VIP][C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe]&&[Intel Corporation, 8.1.0.1281]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\cece9db6d4\mscorlib.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\afa9c1dbcbe\System.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\cad0df97be252ddb80a846b61f26a4dd\System.Drawing.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\039d68cb3f0e971d7d44a92dc6a259bf\System.Windows.Forms.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\cefbf03c151\System.Configuration.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\282ee44fd8c\System.Xml.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 built by: RTMRel]
& & [C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Management\6f67cb9ee4df908abddef7c542bf4bc2\System.Management.ni.dll]&&[Microsoft Corporation, 4.0.30319.1 (RTMRel.0)]
[PID: 4960 / SYSTEM][C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\ACE.dll]&&[, 6.0.0]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WsmanClient.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\Common.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\GmsCommon.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\CONFIGURATOR.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\EVENTMANAGER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\SOAPSERVERSERVICE.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\COMEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\HISTORYEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\STATUSEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WMIEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
& & [C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\WINLOGEVENTHANDLER.dll]&&[Intel Corporation, 8.1.0.1281]
[PID: 2136 / VIP][C:\Program Files\Internet Explorer\iexplore.exe]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kshmpg.dll]&&[Kingsoft Corporation, ,159]
& & [d:\金山\kingsoft antivirus\kdump.dll]&&[Kingsoft Corporation, ,3643]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [d:\金山\kingsoft antivirus\kspcore.dll]&&[Kingsoft Corporation, ,136]
& & [d:\金山\kingsoft antivirus\kswbc.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [D:\金山快译\FASTAIT PERSONAL\addins\IEBand.dll]&&[Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.8]
& & [D:\QQDownload\QQIEHelper01.dll]&&[Tencent Technology (Shenzhen) Company Limited, 4, 2, 745, 401]
& & [D:\电驴\easyMule\modules\IE2EM.dll]&&[, 1.0.0.1]
& & [C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll]&&[China Merchants Bank, 1, 0, 0, 2]
& & [D:\迅雷\BHO\XunleiBHO7.9.8.4550.dll]&&[深圳市迅雷网络技术有限公司, 7,9,8,4550]
& & [D:\迅雷\Thunder BHO Platform\IEPlatform.dll]&&[深圳市迅雷网络技术有限公司, 2.2.0.1087]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\迅雷\Thunder BHO Platform\XLUE.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\XLGraphic.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\libpng13.dll]&&[深圳市迅雷网络技术有限公司, 1.2.50]
& & [D:\迅雷\Thunder BHO Platform\zlib1.dll]&&[深圳市迅雷网络技术有限公司, 1.2.3]
& & [D:\迅雷\Thunder BHO Platform\XLFSIO.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Thunder BHO Platform\XLLuaRuntime.dll]&&[深圳市迅雷网络技术有限公司, 1.5.0.472]
& & [D:\迅雷\Thunder BHO Platform\libexpat.dll]&&[N/A, ]
& & [C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx]&&[Adobe Systems, Inc., 11,8,800,175]
& & [C:\WINDOWS\system32\SOGOUPY.IME]&&[ Inc., 6.7.0.0413]
& & [C:\Program Files\SogouInput\Components\PicFace\1.0.0.792\PicFace.dll]&&[ Inc., 1.0.0.792]
& & [C:\Program Files\SogouInput\6.7.0.0413\Resource.dll]&&[ Inc., 6.7.0.0413]
& & [d:\金山\kingsoft antivirus\MSVCP80.dll]&&[Microsoft Corporation, 8.00.]
& & [d:\金山\kingsoft antivirus\MSVCR80.dll]&&[Microsoft Corporation, 8.00.]
& & [d:\金山\kingsoft antivirus\ktoolupd.dll]&&[Kingsoft Corporation, ,6377]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOCommon.DLL]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOPlatform.dll]&&[Tencent, 1.2.2.22]
& & [D:\迅雷\BHO\ThunderAgent7.9.8.4550.dll]&&[深圳市迅雷网络技术有限公司, 7,9,8,4550]
[PID: 7880 / VIP][D:\酷狗\KGMusic\KuGou.exe]&&[酷狗音乐, 7.5.16.11257]
& & [D:\酷狗\KGMusic\MobileIdentifyDLL.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\statistics.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\storage.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\transmission.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\core.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\plugin.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\popads.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\suite.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\\upgrade.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\酷狗\KGMusic\kgplayer.dll]&&[, 1.2.0.0]
& & [D:\酷狗\KGMusic\codecs.dll]&&[, 1.2.0.0]
[PID: 5072 / VIP][D:\酷狗\KGMusic\KgDaemon.exe]&&[酷狗音乐, 7.5.16.11257]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 7636 / VIP][D:\酷狗\KGMusic\KGService.exe]&&[酷狗音乐, 7.5.16.11257]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
[PID: 596 / VIP][D:\酷狗\KGMusic\IEBox.exe]&&[酷狗音乐, 7.5.16.11257]
& & [D:\酷狗\KGMusic\plugin.dll]&&[N/A, ]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\WINDOWS\system32\Macromed\Flash\Flash32_11_8_800_175.ocx]&&[Adobe Systems, Inc., 11,8,800,175]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 2264 / VIP][D:\迅雷\Program\ThunderNewTask.exe]&&[深圳市迅雷网络技术有限公司, 1, 0, 0, 5]
& & [D:\迅雷\Program\libexpat.dll]&&[N/A, ]
& & [D:\迅雷\Program\xlstat.dll]&&[深圳市迅雷网络技术有限公司, 2.2.1.6]
& & [D:\迅雷\Program\XLLuaRuntime.dll]&&[深圳市迅雷网络技术有限公司, 1.5.0.472]
& & [D:\迅雷\Program\XLFSIO.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\XLGraphic.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\libpng13.dll]&&[深圳市迅雷网络技术有限公司, 1.2.50]
& & [D:\迅雷\Program\zlib1.dll]&&[深圳市迅雷网络技术有限公司, 1.2.3]
& & [D:\迅雷\Program\XLGraphicPlus.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [D:\迅雷\Program\XLUE.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [D:\迅雷\Program\DownloadClient.dll]&&[深圳市迅雷网络技术有限公司, 1, 0, 0, 54]
& & [D:\迅雷\Program\XLUEIPC.dll]&&[深圳市迅雷网络技术有限公司, 1.7.2.532]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 8888 / SYSTEM][C:\WINDOWS\system32\wbem\wmiprvse.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.8)]
[PID: 5280 / VIP][D:\QQDownload\QQDownload.exe]&&[Tencent Technology (Shenzhen) Company Limited, 4, 4, 755, 401]
& & [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0._x-ww_b77cec8e\MFC80U.DLL]&&[Microsoft Corporation, 8.00.]
& & [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0._x-ww_0ccc058c\MFC80CHS.DLL]&&[Microsoft Corporation, 8.00.]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [d:\金山\kingsoft antivirus\kspcore.dll]&&[Kingsoft Corporation, ,136]
& & [d:\金山\kingsoft antivirus\kswbc.dll]&&[Kingsoft Corporation, ,146]
& & [D:\QQDownload\xmain.dll]&&[Tencent Technology (Shenzhen) Company Limited, 1, 9, 743, 400]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOLUIControl.dll]&&[Tencent, 1.0.1.14]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOCommon.DLL]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Common Files\Tencent\TXSSO\1.2.2.22\Bin\SSOPlatform.dll]&&[Tencent, 1.2.2.22]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [D:\QQDownload\xdownload.dll]&&[Tencent, 1, 9, 749, 407]
& & [D:\QQDownload\xcore.dll]&&[Tencent Technology(Shenzhen) Company Limited, 2, 1, 104, 1]
[PID: 10080 / VIP][C:\Program Files\WinRAR\WinRAR.exe]&&[Alexander Roshal, 5.0.0]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [d:\金山\kingsoft antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,139]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
[PID: 8020 / VIP][C:\DOCUME~1\VIP\LOCALS~1\Temp\Rar$EXa0.033\SREngLdr.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
[PID: 8424 / VIP][C:\DOCUME~1\VIP\LOCALS~1\Temp\Rar$EXa0.033\SRE94e1dcbe.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
& & [d:\金山卫士\ksafe\ksfmon.dll]&&[Kingsoft Corporation, 4.7.0.4037]
& & [d:\金山\kingsoft antivirus\kwsui.dll]&&[Kingsoft Corporation, ,146]
& & [C:\Program Files\Yuguo\idle.dll]&&[N/A, ]
& & [C:\Program Files\Microsoft Silverlight\xapauthenticodesip.dll]&&[ Microsoft Corporation, 5.1.20125.0]
==================================
文件关联
.TXT&&OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE&&OK. [&%1& %*]
.COM&&OK. [&%1& %*]
.PIF&&OK. [&%1& %*]
.REG&&OK. [regedit.exe &%1&]
.BAT&&OK. [&%1& %*]
.SCR&&OK. [&%1& /S]
.CHM&&OK. [&C:\WINDOWS\hh.exe& %1]
.HLP&&OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI&&OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF&&OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS&&OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.JS& &OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.LNK&&OK. [{0-}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1& && & localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 10080, C:\PROGRAM FILES\WINRAR\WINRAR.EXE]
==================================
计划任务
[已启用] KsafeDelay.job
& && &&&D:\金山卫士\ksafe\KSafeTray.exe
[已禁用] AliUpdater{1E287CE8-4EBA-4029-B96A-BE547C1B2D81}.job
& && &&&D:\阿里旺旺\AliTask.exe
[已禁用] Adobe Flash Player Updater.job
& && &&&C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================================
Windows 安全更新检查
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
刚才将默认浏览器设置成IE，依然弹出，雨过天晴还原过，还是不行，重装系统就算了，文件看来隐藏很深啊。
我的也是，不知道是什么原因？
楼主您好，有尝试过更换DNS后再测试吗？如把本地连接的DNS更换为8.8.8.8 或者114.114.114.114 。
逛了这许久，何不进去瞧瞧？
关注我们：