FPGA做DDS，向大神们求教！！

完全可以,我用的方案是Xilinx Virtex-5 FX70+DAC5682，或者DAC换成AD9736/AD9739；

最大输出频率fmax=fDAC*0.4，你懂的；关于FPGA的程序建议用RAM做查找表；现成的DDS核可能跑不到那么高频率500MHz；

如果你只须需要单频200MHz信号的话，不妨试试专用DDS芯片AD9910/AD9912；

病毒导致进安全模式蓝屏(不可装杀毒软件)2007年08月01日 星期三 13:04主要特点

1.破坏安全模式

2.不能显示隐藏文件

3.结束常见杀毒软件以及常用杀毒工具进程

4.监控窗口

5.IFEO映像劫持

6.可以通过移动存储传播

下面就具体分析一下这个病毒

File: 8668122F.exe

Size: 35912 bytes

MD5: 394A70F8591EAF1C3D1B0F85C45D3767

SHA1: 9A04503D5850F130CA619923E816C0FF4DBE9910

CRC32: 9B70F042

加壳方式 UPX

病毒文件名应该是一个随机的8个数字和字母组成的组合

更加增加了 查杀的难度

病毒运行后

在C:\Program Files\Common Files\Microsoft Shared\MSInfo\下面释放一个同样由8个数字和字母组成的组合的文件名的dll 和一个同名的dat 文件

我这里是C:\Program Files\Common Files\Microsoft Shared\MSInfo\41115BDD.dll

该dll插入Explorer进程

结束（包括但不限于）以下进程

360rpt.exe

360Safe.exe

360tray.exe

adam.exe

AgentSvr.exe

AppSvc32.exe

autoruns.exe

avgrssvc.exe

AvMonitor.exe

avp.com

avp.exe

CCenter.exe

ccSvcHst.exe

FileDsty.exe

FTCleanerShell.exe

HijackThis.exe

IceSword.exe

iparmo.exe

Iparmor.exe

isPwdSvc.exe

kabaload.exe

KaScrScn.SCR

KASMain.exe

KASTask.exe

KAV32.exe

KAVDX.exe

KAVPFW.exe

KAVSetup.exe

KAVStart.exe

KISLnchr.exe

KMailMon.exe

KMFilter.exe

KPFW32.exe

KPFW32X.exe

KPFWSvc.exe

KRegEx.exe

KRepair.COM

KsLoader.exe

KVCenter.kxp

KvDetect.exe

KvfwMcl.exe

KVMonXP.kxp

KVMonXP_1.kxp

kvol.exe

kvolself.exe

KvReport.kxp

KVScan.kxp

KVSrvXP.exe

KVStub.kxp

kvupload.exe

kvwsc.exe

KvXP.kxp

KvXP_1.kxp

KWatch.exe

KWatch9x.exe

KWatchX.exe

loaddll.exe

MagicSet.exe

mcconsol.exe

mmqczj.exe

mmsk.exe

NAVSetup.exe

nod32krn.exe

nod32kui.exe

PFW.exe

PFWLiveUpdate.exe

QHSET.exe

Ras.exe

Rav.exe

RavMon.exe

RavMonD.exe

RavStub.exe

RavTask.exe

RegClean.exe

rfwcfg.exe

RfwMain.exe

rfwProxy.exe

rfwsrv.exe

RsAgent.exe

Rsaupd.exe

runiep.exe

safelive.exe

scan32.exe

shcfg32.exe

SmartUp.exe

SREng.exe

symlcsvc.exe

SysSafe.exe

TrojanDetector.exe

Trojanwall.exe

TrojDie.kxp

UIHost.exe

UmxAgent.exe

UmxAttachment.exe

UmxCfg.exe

UmxFwHlp.exe

UmxPol.exe

UpLive.EXE.exe

WoptiClean.exe

zxsweep.exe

常见的杀毒软件和一些安全工具都被他干掉了

然后将这些exe通过IFEO进行映像劫持 指向c:\program files\common files\microsoft shared\msinfo\41115bdd.dat

监控带有如下字样的窗口 如果发现带有如下字样的窗口则马上将其关闭

木马

木马

病毒

杀毒

杀毒

查毒

防毒

反病毒

专杀

专杀

卡巴斯基

江民

瑞星

卡卡社区

金山毒霸

金山社区

360安全

恶意软件

流氓软件

举报

报警

杀软

杀软

防骇

以上这些监控和关闭窗口的工作全都是由插入Explorer进程的C:\Program Files\Common Files\Microsoft Shared\MSInfo\41115BDD.dll *** 作的

比熊猫更狠 让你找不到进程咯

然后在HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

下面添加注册表项目 <{15BD4111-4111-5BDD-115B-111BD1115BDD}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\41115BDD.dll>[N/A]

达到开机启动目的

而且那个dll会监控这个注册表项目 如果被删除则立即恢复

删除键

HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}

HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}

破坏安全模式

修改HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue值为0x00000000

使得显示不了隐藏文件

释放8668122F.exe和autorun.inf到除系统分区外的其他分区

然后通过Explorer进程链接网络下载一个自解压文件dl1.exe 到临时文件夹

自解压文件释放C:\WINDOWS\system\20290.exe

C:\WINDOWS\system\ad1309.exe

C:\WINDOWS\system\DiskFree_hy1.5.exe

C:\WINDOWS\system\dodolook027.exe等文件

这里面有驱动木马 也有流氓软件

所有的文件都运行后

添加了如下文件

C:\WINDOWS\system32\drivers\acpidisk.sys

C:\WINDOWS\system32\drivers\tolnfo47.sys

C:\WINDOWS\system32\drivers\vilpew30.sys

C:\WINDOWS\system32\drivers\ykagjt85.sys

C:\WINDOWS\system32\1b.dll

C:\WINDOWS\system32\48a69

C:\WINDOWS\system32\60e4.exe

C:\WINDOWS\system32\7df9.dll

C:\WINDOWS\system32\91b6.dll

C:\WINDOWS\system32\b60.dll

C:\WINDOWS\system32\bpjlgv91.dll

C:\WINDOWS\system32\df91.dll

C:\WINDOWS\system32\f91b.exe

C:\WINDOWS\system32\ieagent.exe

C:\WINDOWS\system32\mprmsgse.axz

C:\WINDOWS\system32\mscpx32r.det

C:\WINDOWS\system32\MSRundll.exe

C:\WINDOWS\system32\ntprint.dIl

C:\WINDOWS\system32\tolnfo47.dll

C:\WINDOWS\system32\tolnfo47.ini

C:\WINDOWS\system32\vilpew30.dll

C:\WINDOWS\system32\wingjt85.bin

C:\WINDOWS\system32\wingjt85.dll

C:\WINDOWS\system32\winkx.dll

C:\WINDOWS\system32\winlgv91.bin

C:\WINDOWS\system32\winpew30.bin

C:\WINDOWS\system32\winpew30.dll

C:\WINDOWS\system32\ykagjt85.dll

C:\WINDOWS\system32\cewrndm.dll

C:\WINDOWS\system32\tolnfo47.dll

C:\WINDOWS\system32\vilpew30.dll

C:\WINDOWS\system32\b60.dll

C:\WINDOWS\03.bmp

C:\WINDOWS\3fa.exe

C:\WINDOWS\41115BDD.hlp

C:\WINDOWS\fa7c.txt

C:\Program Files\Internet Explorer\PLUGINS\system2.jmp

C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys

还装了两个软件 一个是adpush software 一个是disk free

下面说说解决方法：

由于那个插入Explorer的dll是元凶 所以我们应该首先干掉那个dll

常见的小工具都被他弄掉了 找个没被屏蔽的吧

Xdelbox1.2 这个可以删除Windows下无法删除的文件

首先用Xdelbox 删除C:\Program Files\Common Files\Microsoft Shared\MSInfo\41115BDD.dll

重启

下载autoruns 由于IFEO也劫持了autoruns 所以我们将其改名

打开后 找到Image hijacks 里面除了+ Your Image File Name Here without a path Symbolic Debugger for Windows 2000 Microsoft Corporation

c:\windows\system32\ntsd.exe这项以外 全部删除

删除后 sreng就可以运行咯

打开他

系统修复 高级修复 修复安全模式

好了 成功后 重启 F8进入安全模式

打开sreng

启动项目 注册表 删除如下项目

<{754FB7D8-B8FE-4810-B363-A788CD060F1F}><C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys>[]

<{15BD4111-4111-5BDD-115B-111BD1115BDD}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\41115BDD.dll>[N/A]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ctl3d32]

<WinlogonNotify: ctl3d32><cewrndm.dll>[]

“启动项目”-“服务”-“Win32服务应用程序”中点“隐藏经认证的微软项目”，

选中以下项目，点“删除服务”，再点“设置”，在d出的框中点“否”：

[IEAgent service / IEAgent][Stopped/Auto Start]

<"C:\WINDOWS\system32\ieagent.exe"><>

[Fax Client / ms_fax][Running/Auto Start]

<C:\WINDOWS\system32\60e4.exe><N/A>

添加删除程序中卸载adpush software 和disk free

再次请出Xdelbox

强制删除如下文件

C:\WINDOWS\system32\drivers\acpidisk.sys

C:\WINDOWS\System32\DRIVERS\bpjlgv91.sys

C:\WINDOWS\System32\DRIVERS\tolnfo47.sys

C:\WINDOWS\System32\DRIVERS\vilpew30.sys

C:\WINDOWS\System32\DRIVERS\ykagjt85.sys

C:\WINDOWS\system32\cewrndm.dll

C:\WINDOWS\system32\tolnfo47.dll

C:\WINDOWS\system32\vilpew30.dll

C:\WINDOWS\system32\ykagjt85.dll

C:\WINDOWS\system32\b60.dll

C:\WINDOWS\system32\ieagent.exe

C:\WINDOWS\system32\1b.dll

重启

安全模式下 打开sreng

在“启动项目”-“服务”-“驱动程序”中点“隐藏经认证的微软项目”，

选中以下项目，点“删除服务”，再点“设置”，在d出的框中点“否”：

[acpidisk / acpidisk][Running/Auto Start]

<\??\C:\WINDOWS\system32\drivers\acpidisk.sys><N/A>

[bpjlgv9 / bpjlgv91][Stopped/Boot Start]

<\SystemRoot\System32\DRIVERS\bpjlgv91.sys><N/A>

[tolnfo4 / tolnfo47][Running/Boot Start]

<\SystemRoot\System32\DRIVERS\tolnfo47.sys><N/A>

[vilpew3 / vilpew30][Running/Boot Start]

<\SystemRoot\System32\DRIVERS\vilpew30.sys><Microsoft Corporation>

[ykagjt8 / ykagjt85][Running/Boot Start]

<\SystemRoot\System32\DRIVERS\ykagjt85.sys><Microsoft Corporation>

浏览器加载项中删除

[CAdLogic Object]

{11F09AFD-75AD-4E51-AB43-E09E9351CE16} <C:\Program Files\Common Files\CPUSH\cpush0.dll, >

[Abho Class]

{1238F6B9-C123-4049-B07E-7A71AF320032} <C:\WINDOWS\system32\b60.dll, TODO: <公司名>>

[Info cache]

{385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, 金泰丰(广州)科

技有限公司>

删除上述

把下面的 代码拷入记事本中然后另存为1.reg文件

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]

"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"

"Text"="@shell32.dll,-30500"

"Type"="radio"

"CheckedValue"=dword:00000001

"ValueName"="Hidden"

"DefaultValue"=dword:00000002

"HKeyRoot"=dword:80000001

"HelpID"="shell.hlp#51105"

双击1.reg把这个注册表项导入

双击我的电脑－工具－文件夹选项－查看－显示所有文件和文件夹，把“隐藏受保护的系统文件”的勾去掉。

右击点击 菜单上的打开 打开除系统分区外的其他分区 删除autorun.inf和8668122F.exe（文件名随机）

删除如下文件

C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys

C:\WINDOWS\system32\1b.dll

C:\WINDOWS\system32\48a69

C:\WINDOWS\system32\60e4.exe

C:\WINDOWS\system32\7df9.dll

C:\WINDOWS\system32\91b6.dll

C:\WINDOWS\system32\b60.dll

C:\WINDOWS\system32\bpjlgv91.dll

C:\WINDOWS\system32\df91.dll

C:\WINDOWS\system32\f91b.exe

C:\WINDOWS\system32\ieagent.exe

C:\WINDOWS\system32\mprmsgse.axz

C:\WINDOWS\system32\mscpx32r.det

C:\WINDOWS\system32\MSRundll.exe

C:\WINDOWS\system32\ntprint.dIl

C:\WINDOWS\system32\tolnfo47.dll

C:\WINDOWS\system32\tolnfo47.ini

C:\WINDOWS\system32\vilpew30.dll

C:\WINDOWS\system32\wingjt85.bin

C:\WINDOWS\system32\wingjt85.dll

C:\WINDOWS\system32\winkx.dll

C:\WINDOWS\system32\winlgv91.bin

C:\WINDOWS\system32\winpew30.bin

C:\WINDOWS\system32\winpew30.dll

C:\WINDOWS\03.bmp

C:\WINDOWS\3fa.exe

C:\WINDOWS\41115BDD.hlp

C:\WINDOWS\fa7c.txt

系统进程列表

actmovie.exe agentsvr.exe

alg.exe ASPNET_WP.exe btwdins.exe

ccmexec.exe cidaemon.exe cisvc.exe

clisvcl.exe cmd.exe Control.exe

csrss.exe ctfmon.exe ddhelp.exe

dfssvc.exe dllhost.exe dos4gw.exe

dotnetfx.exe dumprep.exe explorer.exe

fast.exe grpconv.exe hidserv.exe

iexplore.exe imapi.exe inetinfo.exe

internat.exe kernel32.dll launch32.exe

loadwc.exe locator.exe logonui.exe

lsass.exe mad.exe mapisp32.exe

mmc.exe mmtask.tsk mprexe.exe

msconfig.exe msdtc.exe msgsrv32.exe

msiexec.exe msoobe.exe mstask.exe

mstinit.exe ndisuio.sys netdde.exe

ntoskrnl.exe ntvdm.exe pchschd.exe

pstores.exe rasautou.exe rdpclip.exe

regsvc.exe regsvr32.exe rnaapp.exe

rpcss.exe rsvp.exe rundll.exe

rundll32.exe runonce.exe sapisvr.exe

savedump.exe scanregw.exe scardsvr.exe

services.exe smss.exe snmp.exe

spool32.exe spoolss.exe spoolsv.exe

srvany.exe svchost.exe system

System Idle Process systray.exe tapisrv.exe

taskmgr.exe taskmon.exe tcpsvcs.exe

tlntsvr.exe userinit.exe winlogon.exe

winmgmt.exe winoa386.mod WMIADAP.EXE

wmiexe.exe wmiprvse.exe wowexec.exe

wpabaln.exe wscntfy.exe wuaclt.exe

wuauboot.exe wuauclt.exe wuaudt.exe

wucrtupd.exe

应用程序进程列表

返回Dofile.com首页

000stthk.exe 1xconfig.exe

3dm2.exe AcctMgr.exe acrobat.exe

acrord32.exe acrotray.exe ACS.exe

acsd.exe adgjdet.exe AdobeUpdateManager.exe

adservice.exe adusermon.exe agent.exe

agrsmmsg.exe AgtServ.exe aim.exe

aim95.exe AIT alogserv.exe

anvshell.exe AOLacsd.exe AOLDial.exe

aom.exe apntex.exe apoint.exe

asfagent.exe ashWebSv.exe astart.exe

ati2evxx.exe ATIevxx.exe atiptaxx.exe

atrack.exe aupdate.exe autochk.exe

avconsol.exe AVENGINE.EXE avgserv.exe

avgupsvc.exe avgw.exe avpcc.exe

avsynmgr.exe backweb-137903.exe backweb-8876480.exe

bacstray.exe bcmsmmsg.exe blackd.exe

bpcpost.exe BRMFRSMG.EXE brss01a.exe

BRSVC01A.EXE bttnserv.exe ca.exe

calc.exe carpserv.exe CCAP.EXE

ccapp.exe ccevtmgr.exe ccproxy.exe

ccpxysvc.exe ccregvfy.exe cdac11ba.exe

cdantsrv.exe cdplayer.exe cfd.exe

cfgwiz.exe cftmon.exe charmap.exe

cleanup.exe cli.exe cmanager.exe

cmmpu.exe Companion.exe comsmd.exe

cpd.exe crypserv.exe crypserv.exe

cthelper.exe ctnotify.exe ctsvccda.exe

cvpnd.exe dadapp.exe dadtray.exe

damon.exe dap.exe DavCData.exe

dcfssvc.exe ddcman.exe defwatch.exe

delayrun.exe devenv.exe devldr.exe

devldr16.exe devldr32.exe dfrgntfs.exe

digstream.exe directcd.exe dit.exe

ditexp.exe dkservice.exe dlg.exe

dllcmd32.exe dmadmin.exe dpmw32.exe

dpps2.exe dragdiag.exe drwtsn32.exe

dsentry.exe dvzmsgr.exe dw.exe

dwrcs.exe dwwin.exe dxdllreg.exe

e_s10ic2.exe EasyShare.exe eausbkbd.exe

eEBSvc.exe em_exec.exe essspk.exe

evntsvc.exe excel.exe ezsp_px.exe

findfast.exe firedaemon.exe firefox.exe

flash.exe FrameworkService.exe full.exe

fxssvc.exe fxsvr2.exe gamechannel.exe

gbpoll.exe gcastdtserv.exe gcIPtoHostQueue.exe

gearsec.exe ghost_2.exe gwmdmmsg.exe

hc.exe helpctr.exe helper.exe

helpinst.exe hh.exe hijackthis.exe

hkcmd.exe hl.exe hndlrsvc.exe

hpcmpmgr.exe hpgs2wnd.exe hpgs2wnf.exe

hphmon05.exe hpoevm06.exe hpoevm08.exe

hpoevm09.exe hposts08.exe hpotdd01.exe

HPQTRA08.EXE hpsysdrv.exe hpzipm12.exe

hpztsb01.exe hpztsb02.exe hpztsb04.exe

hpztsb05.exe hpztsb06.exe hpztsb07.exe

hpztsb08.exe htpatch.exe iamapp.exe

iao.exe iap.exe icepack.exe

ico.exe icq.exe icwconn1.exe

ie5setup.exe ie6setup.exe igfxtray.exe

imgicon.exe InoRT.exe installstub.exe

instantaccess.exe ipmon32.exe iPodManager.exe

ipodservice.exe iPodWatcher.exe irmon.exe

isafe.exe issch.exe ISSVC.exe

isuspm.exe iTunesHelper.exe iw.exe

java.exe javaw.exe JDBGMGR.EXE

jusched.exe kav.exe kazaa.exe

kbd.exe KEM.exe khalmnpr.exe

khost.exe kodakimg.exe kontiki.exe

lexbces.exe lexpps.exe livenote.exe

llssrv.exe loadqm.exe logi_mwx.exe

logon.scr logwatnt.exe ltsmmsg.exe

luall.exe lucoms.exe lucoms~1.exe

lucomserver.exe lvcoms.exe LVCOMSX.EXE

lxsupmon.exe manifestengine.exe mantispm.exe

mcshield.exe mcvsescn.exe mcvsftsn.exe

mcvsrte.exe mdm.exe mediadet.exe

mgabg.exe mghtml.exe mimboot.exe

mixer.exe mm_tray.exe mmjb.exe

mmkeybd.exe mmtask.exe mmx.exe

mnmsrvc.exe mobsync.exe monwow.exe

mosearch.exe motivesb.exe motmon.exe

MpfAgent.exe mplayer.exe mplayer2.exe

mqsvc.exe mrt.exe mrtmngr.exe

msgsys.exe mshta.exe msimn.exe

MSKSrvr.exe msmsgs.exe msnappau.exe

msnmsgr.exe mspaint.exe mspmspsv.exe

mssvc.exe mssysmgr.exe mstsc.exe

naimas32.exe naprdmgr.exe navapsvc.exe

navapw32.exe navw32.exe NclTray.exe

ndetect.exe nerocheck.exe netscape.exe

netscp.exe netscp6.exe nhksrv.exe

nisserv.exe nisum.exe nmain.exe

nmssvc.exe nopdb.exe notepad.exe

notifyalert.exe nprotect.exe nsctop.exe

ntbackup.exe nvsvc32.exe nwiz.exe

ocraware.exe odhost.exe ofcdog.exe

olfsnt40.exe omtsreco.exe opscan.exe

opware32.exe opxpapp.exe osa.exe

osa9.exe osd.exe OSE.EXE

ossproxy.exe outlook.exe p_981116.exe

patch.exe pccpfw.exe PCMService.exe

pctptt.exe pctspk.exe pdesk.exe

pds.exe pelmiced.exe perl.exe

pinger.exe playlist.exe plib_version

pntiomon.exe point32.exe pop3trap.exe

poproxy.exe precisiontime.exe printray.exe

promon.exe pronomgr.exe prpcui.exe

ps2.exe psfree.exe ptsnoop.exe

putty.exe qagent.exe qserver.exe

qttask.exe quickpar.exe quickset.exe

qwdlls.exe r_server.exe RAMASST.exe

ramsys.exe rar.exe RcMan.exe

realevent.exe realplay.exe realsched.exe

realtime.exe reboot.exe recguard.exe

regedit.exe regshave.exe residence.exe

rmctrl.exe rnathchk.exe rnav.exe

rndal.exe rscmpt.exe rsednclient.exe

rtvscan.exe rulaunch.exe rxmon.exe

s3apphk.exe sagent2.exe savroam.exe

SAVScan.exe sbhc.exe scandisk.exe

schwizex.exe SDMCP.exe Search.exe

selfcert.exe sentry.exe server.exe

service.exe setup.exe sgtray.exe

shellmon.exe showbehind.exe shstat.exe

Shutdown.exe shwicon2k.exe sk9910dm.exe

slave.exe slmss.exe slrundll.exe

SM1BG.EXE smc.exe SNDMon.exe

SNDSrvc.exe sndvol32.exe soundman.exe

sp.exe srmclean.exe srng.exe

ssdpsrv.exe starteak.exe starter.exe

statemgr.exe steam.exe stimon.exe

stinger.exe stisvc.exe store.exe

stub.exe studio.exe suchost.exe

support.exe swdoctor.exe swEudora.exe

sxgtkbar.exe sychost.exe symproxysvc.exe

symwsc.exe sync.exe syntpenh.exe

syntplpr.exe SysAI.exe sysdoc32.exe

sysdoor.exe sysdown.exe system idle

Sysupd.exe tcaudiag.exe tclock.exe

TeaTimer.exe tfswctrl.exe tfswshx.dll

tgcmd.exe tgfix.exe tkbell.exe

TkBellExe tmlisten.exe tmntsrv.exe

TMOAgent.exe tmproxy.exe tppaldr.exe

tsc.exe TSMSvc.exe type32.exe

UAService7.exe ULCDRSvr.exe uninst.exe

uninstall.exe unrar.exe unwise.exe

updaterui.exe updatestats.exe updreg.exe

uptodate.exe UrlLstCk.exe urlmap.exe

UsrPrmpt.exe vetmsg.exe ViewMgr.exe

vpc32.exe vptray.exe vshwin32.exe

vsmon.exe vsstat.exe vstskmgr.exe

VTTimer.exe W3wp.exe wab.exe

wanmpsvc.exe waol.exe wcescomm.exe

wcmdmgr.exe wcmdmgrl.exe wdfmgr.exe

WEBPROXY.EXE webrebates1.exe webscanx.exe

webshots.scr win32sl.exe winamp.exe

winampa.exe winpopup.exe Winrar.exe

WinSync.exe winword.exe winzip32.exe

WISPTIS.EXE wjview.exe wkcalrem.exe

wkufind.exe wltrysvc.exe wm.exe

wmplayer.exe wordpad.exe wrapper.exe

wscript.exe wuser32.exe wwDisp.exe

wzqkpick.exe xfr.exe xl.exe

ybrwicon.exe ycommon.exe ypager.exe

zapro.exe zcfgsvc.exe zlclient.exe

QQ.exe timplatform.exe thunder.exe

tdupdate.exe pig.exe ttraveler.exe

nettransport.exe ylive.exe kavpfw.exe

rav.exe eebagent.exe pfw.exe

duduprosvc.exe kavstart.exe kvsrvxp.exe

Maxthon.exe hwhotkey.exe Theworld.exe

flashget.exe flyshuttle.exe fastait.exe

assistse.exe yassistse.exe kvmonxp.kxp

ravtimer.exe sdoclient.exe

存在安全风险进程Top榜

180ax.exe a.exe actalert.exe

adaware.exe Alchem.exe alevir.exe

aqadcup.exe archive.exe arr.exe

ARUpdate.exe asm.exe av.exe

avserve.exe avserve2.exe backWeb.exe

bargains.exe basfipm.exe belt.exe

Biprep.exe blss.exe bokja.exe

bootconf.exe bpc.exe brasil.exe

BRIDGE.DLL Buddy.exe BUGSFIX.EXE

bundle.exe bvt.exe cashback.exe

cdaEngine cmd32.exe cmesys.exe

conime.exe conscorr.exe crss.exe

cxtpls.exe datemanager.exe dcomx.exe

Desktop.exe directs.exe divx.exe

dllreg.exe dmserver.exe dpi.exe

dssagent.exe dvdkeyauth.exe emsw.exe

exdl.exe exec.exe EXP.EXE

explore.exe explored.exe Fash.exe

ffisearch.exe fntldr.exe fsg_4104.exe

FVProtect.exe game.exe gator.exe

gmt.exe goidr.exe hbinst.exe

hbsrv.exe hwclock.exe hxdl.exe

hxiul.exe iedll.exe iedriver.exe

IEHost.EXE iexplorer.exe infus.exe

infwin.exe intdel.exe isass.exe

istsvc.exe jawa32.exe jdbgmrg.exe

kazza.exe keenvalue.exe kernel32.exe

lass.exe lmu.exe loader.exe

lssas.exe mapisvc32.exe mario.exe

md.exe mfin32.exe mmod.exe

mostat.exe msapp.exe msbb.exe

msblast.exe mscache.exe msccn32.exe

mscman.exe msdm.exe msgfix.exe

msiexec16.exe msinfo.exe mslagent.exe

mslaugh.exe msmc.exe msmgt.exe

msmsgri32.exe MSN.exe msrexe.exe

mssvc32.exe mssys.exe msvxd.exe

mwsoemon.exe mwsvm.exe netd32.exe

nls.exe nssys32.exe nstask32.exe

nsupdate.exe ntfs64.exe NTOSA32.exe

omniscient.exe onsrvr.exe optimize.exe

P2P Networking.exe pcsvc.exe pgmonitr.exe

PIB.exe powerscan.exe prizesurfer.exe

prmt.exe prmvr.exe ray.exe

rb32.exe rcsync.exe rk.exe

run32dll.exe rundll16.exe ruxdll32.exe

saap.exe sahagent.exe saie.exe

sais.exe salm.exe satmat.exe

save.exe savenow.exe sc.exe

scam32.exe scrsvr.exe scvhost.exe

SearchUpdate33.exe SearchUpgrader.exe soap.exe

spoler.exe Ssk.exe start.exe

stcloader.exe Susp.exe svc.exe

svchosts.exe svshost.exe SyncroAd.exe

sysfit.exe system.exe system32.exe

tb_setup.exe TBPS.EXE teekids.exe

tibs3.exe trickler.exe ts.exe

ts2.exe tsa.exe tsadbot.exe

tsl.exe tsm2.exe Tvm.exe

tvmd.exe tvtmd.exe update.exe

updater.exe updmgr.exe VVSN.exe

wast.exe web.exe webdav.exe

webrebates.exe webrebates0.exe win-bugsfix.exe

win_upd2.exe win32.exe win32us.exe

winactive.exe winad.exe winadalt.exe

winadctl.exe WinAdTools.exe WINdirect.exe

windows.exe wingo.exe wininetd.exe

wininit.exe winlock.exe winlogin.exe

winmain.exe winnet.exe winppr32.exe

winrarshell32.exe WinRatchet.exe WinSched.exe

winservn.exe winshost.exe winssk32.exe

winstart.exe winstart001.exe WinStatKeep.exe

wintaskad.exe Wintime.exe wintsk32.exe

winupdate.exe winupdt.exe winupdtl.exe

winxp.exe wmon32.exe wnad.exe

wo.exe wovax.exe wsup.exe

wsxsvc.exe wtoolsa.exe WToolsA.exe

wtoolss.

参考资料：http://www.dofile.com/

---