遭遇修改系统时间、使用映像劫持的xibgptd.exe,netdde32.exe等2

简介: 遭遇修改系统时间、使用映像劫持的xibgptd.exe,netdde32.exe等2
(续log)

O9 - IE工具栏扩展按钮HKLM:中文上网 - {B012491E-8FA4-4851-AA9B-22E33784FBAD} - C:/Program Files/OCINS/config.exe
O9 - IE工具菜单扩展项HKLM:中文上网 - {B012491E-8FA4-4851-AA9B-22E33784FBAD} - C:/Program Files/OCINS/config.exe

O20 - AppInit_DLLs: jzgpri.dll

O23 - 服务: AEA6EAEC (AEA6EAEC) - C:/WINDOWS/system32/2DD519ED.EXE -p | 2007-8-10 8:7:20 | Microsoft(R) Windows(R) Operating System| ?| ? | (C) Microsoft Corporation. All rights reserved.| ? | Microsoft Corporation| ?| ?| ?(自动)
O23 - 服务: EagleNT (EagleNT) - C:/WINDOWS/system32/drivers/EagleNT.sys(手动)
O23 - 服务: he1p (he1p) - C:/WINDOWS/system32/he1p.exe -service | 2004-8-17 12:0:0 | Microsoft(R) Windows(R) Operating System | 5.1.2600.2180 | IExplorer | 版权所有(C) 2007 | 1, 0, 0, 1 | Microsoft Corporation |  | IExplorer | IExplorer.exe(自动)
O23 - 服务: qgqelbr (qgqelbr) - C:/WINDOWS/System32/drivers/qgqelbr.sys | 2007-4-7 14:13:22 |  sys 应用程序 | 1, 0, 1, 3 | sys 应用程序 | 版权所有 (C) 2006 | 1, 0, 1, 3 | 北京三七二一科技有限公司| ? | sys | sys.exe(引导)
O23 - 服务: RemoteDbg (Remote Debug Service) - C:/WINDOWS/system32/rundll32.exe RemoteDbg.dll,input(自动)
O23 - 服务: svchost (svchost) - C:/WINDOWS/system32/dllcache/svchost.exe -g | 2007-8-10 8:4:14 | Microsoft(R) Windows(R) Operating System| ?| ? | (C) Microsoft Corporation. All rights reserved.| ? | Microsoft Corporation| ?| ?| ?(自动)
O23 - 服务: SVCSVR (SVCSVR) - C:/WINDOWS/svrsvc.exe | 2004-8-17 12:0:0(自动)
O23 - 服务: TesSafe (TesSafe) - C:/WINDOWS/system32/TesSafe.sys | 2007-7-5 13:39:28(手动)
O23 - 服务: WinDHCPsvc (Windows DHCP Service) - C:/WINDOWS/system32/rundll32.exe windhcp.ocx,input(自动)

O24 - ShlExecHook: [] - {16B05AF4-16B0-9E38-F49E-5AF49E38D27C} = C:/WINDOWS/system32/JQXELW.dll
O24 - ShlExecHook: [] - {32311A42-AC1B-158F-FD32-5674345F23A3} = C:/WINDOWS/system32/dhcpri.dll
O24 - ShlExecHook: [] - {525AB2F3-234A-7469-2F43-E341713ABFA5} = C:/WINDOWS/system32/wgepri.dll
O24 - ShlExecHook: [] - {4562452F-FA36-BA4F-892A-FF5FBBAC5314} = C:/WINDOWS/system32/mydpri.dll
O24 - ShlExecHook: [] - {759AFD5B-159F-ACD8-954C-ACD545FA6587} = C:/WINDOWS/system32/jzgpri.dll

O26 - IFEO: 360rpt.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: 360Safe.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: 360tray.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: adam.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: AgentSvr.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: AppSvc32.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: ArSwp.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: AST.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: autoruns.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: avconsol.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: avgrssvc.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: AvMonitor.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: avp.com -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: avp.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: CCenter.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: ccSvcHst.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: EGHOST.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Explorer.exe -> C:/WINDOWS/system32/netdde32.exe
O26 - IFEO: FileDsty.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: FTCleanerShell.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: FYFireWall.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: HijackThis.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: IceSword.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: iparmo.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Iparmor.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: isPwdSvc.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: kabaload.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KaScrScn.SCR -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KASMain.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KASTask.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KAV32.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KAVDX.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KAVPF.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KAVPFW.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KAVSetup.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KAVStart.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KISLnchr.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KMailMon.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KMFilter.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KPFW32.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KPFW32X.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KPfwSvc.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KRegEx.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KRepair.com -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KsLoader.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KVCenter.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KvDetect.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KvfwMcl.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KVMonXP.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KVMonXP_1.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: kvol.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: kvolself.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KvReport.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KVScan.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KVSrvXP.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KVStub.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: kvupload.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: kvwsc.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KvXP.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KvXP_1.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KWatch.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KWatch9x.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: KWatchX.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: loaddll.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: MagicSet.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: mcconsol.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: mmqczj.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: mmsk.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Navapsvc.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Navapw32.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: nod32.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: nod32krn.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: nod32kui.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: NPFMntor.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: PFW.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: PFWLiveUpdate.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: QHSET.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: QQDoctor.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: QQKav.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: QQLiveUpdate.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: QQSC.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: QQUpdateCenter.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Ras.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Rav.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: RavMon.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: RavMonD.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: RavStub.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: RavTask.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: RegClean.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: rfwcfg.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: rfwmain.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: rfwsrv.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: RsAgent.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Rsaupd.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: rstrui.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: runiep.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: safelive.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: scan32.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: shcfg32.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: SmartUp.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: SREng.EXE -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: symlcsvc.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: SysSafe.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Timwp.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: TrojanDetector.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: Trojanwall.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: TrojDie.kxp -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: UIHost.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: UmxAgent.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: UmxAttachment.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: UmxCfg.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: UmxFwHlp.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: UmxPol.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: upiea.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: UpLive.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: USBCleaner.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: vsstat.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: webscanx.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe
O26 - IFEO: WoptiClean.exe -> C:/Program Files/Common Files/Microsoft Shared/xibgptd.exe

HKLM/SHOWALL    值非1
===/
相关文章
|
1月前
|
敏捷开发 人工智能 自然语言处理
87_文化适配:多语言提示设计 - 分析本地化提示的适配性
在全球化日益深入的今天,大型语言模型(LLM)的多语言能力已成为其核心竞争力之一。随着企业和开发者将AI应用推广到不同语言区域,如何设计适配各文化背景的提示词,确保模型输出既准确又符合目标语言使用者的文化习惯,已成为提示工程领域的重要挑战。文化适配的多语言提示设计不仅涉及简单的语言翻译,更需要深入理解目标文化的思维模式、表达习惯、价值观和禁忌,通过精心设计的提示策略,引导LLM生成真正贴合当地文化语境的内容。
|
机器学习/深度学习 存储 人工智能
英伟达 H100 vs. 苹果M2,大模型训练,哪款性价比更高?
训练和微调大型语言模型对于硬件资源的要求非常高。目前,主流的大模型训练硬件通常采用英特尔的CPU和英伟达的GPU。然而,最近苹果的M2 Ultra芯片和AMD的显卡进展给我们带来了一些新的希望。
2037 0
|
自然语言处理 数据处理 Python
python操作和解析ppt文件 | python小知识
本文将带你从零开始,了解PPT解析的工具、工作原理以及常用的基本操作,并提供具体的代码示例和必要的说明【10月更文挑战第4天】
2317 60
【PIL案例精讲】252行Python代码制作透明背景的电子印章
今天分享一个Python 制作透明背景的电子印章的代码,代码是通过网络获得并整理的,大家可以参考和学习。
【PIL案例精讲】252行Python代码制作透明背景的电子印章
|
运维 监控 虚拟化
阿里云郑晓:浅谈GPU虚拟化技术(第二章)
注:本系列第一章推送门:阿里云郑晓:浅谈GPU虚拟化技术(第一章) GPU虚拟化发展史 第二章 GPU虚拟化方案之——GPU直通模式 目前流行的商用GPU虚拟化方案可以分为以下几类:GPU 直通模式,GPU SRIOV 模式,GPU 半虚拟化(mediated passthrough:包括Intel GVT-g和Nvidia GRID vGPU),VMWare的GPU全虚拟化(vSGA)。
19039 1
阿里云郑晓:浅谈GPU虚拟化技术(第二章)
|
索引 Java 存储
Qt之自定义布局管理器(QCardLayout)
简述 手动布局另一种方法是通过继承QLayout类编写自己的布局管理器。 下面我们详细来举一个例子-QCardLayout。它由同名的Java布局管理器启发而来。也被称之为卡片布局,每个项目偏移QLayout::spacing()。 简述 定义 实现 效果 源码 定义 编写自己的布局,必须定义如下: 一种存储布局处理项目的数据结构,每个项目都是
1722 0
|
5天前
|
云安全 人工智能 安全
AI被攻击怎么办?
阿里云提供 AI 全栈安全能力,其中对网络攻击的主动识别、智能阻断与快速响应构成其核心防线,依托原生安全防护为客户筑牢免疫屏障。
|
15天前
|
域名解析 人工智能
【实操攻略】手把手教学,免费领取.CN域名
即日起至2025年12月31日,购买万小智AI建站或云·企业官网,每单可免费领1个.CN域名首年!跟我了解领取攻略吧~