TIMPlatform.exe里的运行模块是否正常？ - 病毒木马 - - 网络安全

社区导航: 专家门诊网络技术操作系统数据库程序设计系统应用考试认证 CIO及信息化站长交流综合交流下载基地 51CTO产品服务

【设为首页 | 收藏本站】

51CTO技术论坛» 网络安全 » 病毒木马 » TIMPlatform.exe里的运行模块是否正常？ [ 打印] [ 订阅] [ 收藏] [ 推荐给朋友] [ 本帖文本页]

论坛跳转:

yulinxia

新新人类

帖子 119
精华 0
无忧币 128
积分 134
阅读权限 20

注册日期 2007-6-18

最后登录 2008-10-7

离线

[查看资料] [发短消息] [Blog]

发表于:2007-8-10 15:38　　标题：TIMPlatform.exe里的运行模块是否正常？
＜上一帖 | 下一帖＞

下面是卡卡里的进程的内容。大家帮我看看，是否有木马？
[TIMPlatform.exe]
PID = 0xc30
CommandLine = "D:\Program Files\Tencent\QQ\TIMPlatform.exe" -Embedding
TIMPlatform.exe
0x400000
D:\Program Files\Tencent\QQ\TIMPlatform.exe
7,0,365,1701
TENCENT
TIMPlatform
2007-07-19 16:34:46
ntdll.dll
0x7c920000
C:\WINDOWS\system32\ntdll.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
NT Layer DLL
2004-08-17 18:00:00
kernel32.dll
0x7c800000
C:\WINDOWS\system32\kernel32.dll
5.1.2600.3119 (xpsp_sp2_gdr.070416-1301)
Microsoft Corporation
Windows NT BASE API Client DLL
2007-04-16 23:54:26
USER32.dll
0x77d10000
C:\WINDOWS\system32\user32.dll
5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)
Microsoft Corporation
Windows XP USER API Client DLL
2007-03-08 23:37:22
GDI32.dll
0x77ef0000
C:\WINDOWS\system32\gdi32.dll
5.1.2600.3099 (xpsp_sp2_gdr.070308-0222)
Microsoft Corporation
GDI Client DLL
2007-03-08 23:37:22
ADVAPI32.dll
0x77da0000
C:\WINDOWS\system32\advapi32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Advanced Windows 32 Base API
2004-08-17 18:00:00
RPCRT4.dll
0x77e50000
C:\WINDOWS\system32\rpcrt4.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Remote Procedure Call Runtime
2004-08-17 18:00:00
ole32.dll
0x76990000
C:\WINDOWS\system32\ole32.dll
5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)
Microsoft Corporation
Microsoft OLE for Windows
2005-07-26 12:39:50
msvcrt.dll
0x77be0000
C:\WINDOWS\system32\msvcrt.dll
7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT CRT DLL
2004-08-17 18:00:00
OLEAUT32.dll
0x770f0000
C:\WINDOWS\system32\oleaut32.dll
5.1.2600.2180
Microsoft Corporation

2004-08-17 18:00:00
IMM32.DLL
0x76300000
C:\WINDOWS\system32\imm32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows XP IMM32 API Client DLL
2004-08-17 18:00:00
LPK.DLL
0x62c20000
C:\WINDOWS\system32\lpk.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Language Pack
2004-08-17 18:00:00
USP10.dll
0x73fa0000
C:\WINDOWS\system32\usp10.dll
1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Uniscribe Unicode script processor
2004-08-17 18:00:00
uxtheme.dll
0x5adc0000
C:\WINDOWS\system32\uxtheme.dll
6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft UxTheme Library
2004-08-17 18:00:00
MSCTF.dll
0x74680000
C:\WINDOWS\system32\MSCTF.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
MSCTF Server DLL
2004-08-17 18:00:00
CLBCATQ.DLL
0x76fa0000
C:\WINDOWS\system32\clbcatq.dll
2001.12.4414.308
Microsoft Corporation

2005-07-26 12:39:45
COMRes.dll
0x77020000
C:\WINDOWS\system32\comres.dll
2001.12.4414.258
Microsoft Corporation

2004-08-17 18:00:00
VERSION.dll
0x77bd0000
C:\WINDOWS\system32\version.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Version Checking and File Installation Libraries
2004-08-17 18:00:00
xpsp2res.dll
0x20000000
C:\WINDOWS\system32\xpsp2res.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Service Pack 2 Messages
2004-08-17 18:00:00
ieprot.dll
0x10000000
C:\Program Files\Rising\AntiSpyware\ieprot.dll
1, 0, 0, 10
Beijing Rising Technology Co., Ltd.
IE Protector
2007-08-09 10:12:11
SHELL32.dll
0x7d590000
C:\WINDOWS\system32\shell32.dll
6.00.2900.3051 (xpsp_sp2_gdr.061219-0316)
Microsoft Corporation
Windows Shell Common Dll
2006-12-20 05:49:35
SHLWAPI.dll
0x77f40000
C:\WINDOWS\system32\shlwapi.dll
6.00.2900.3121 (xpsp_sp2_gdr.070418-1302)
Microsoft Corporation
Shell Light-weight Utility Library
2007-04-18 20:31:18
comctl32.dll
0x77180000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
6.0 (xpsp.060825-0040)
Microsoft Corporation
User Experience Controls Library
2006-08-25 08:49:42
comctl32.dll
0x5d170000
C:\WINDOWS\system32\comctl32.dll
5.82 (xpsp.060825-0040)
Microsoft Corporation
Common Controls Library
2006-08-25 23:49:44
TIMProxy.dll
0x623a0000
D:\Program Files\Tencent\QQ\TIMProxy.dll
0, 3, 2, 4
tencent
TIMProxy
2007-07-19 16:34:48
msi.dll
0x7c9c0000
C:\WINDOWS\system32\msi.dll
3.1.4000.4039
Microsoft Corporation
Windows Installer
2007-04-19 00:12:14
SXS.DLL
0x75e00000
C:\WINDOWS\system32\sxs.dll
5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)
Microsoft Corporation
Fusion 2.5
2006-10-20 09:37:48