瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 求救~~杀不掉的病毒们
tingyezhang - 2006-8-9 22:30:00
瑞星病毒查杀结果报告

提交者：Rav
系统版本：Microsoft Windows XP Professional
补丁版本：Service Pack 2 Build 2600
IE版本：6.0.2900.2180
IP地址：192.168.1.96

本次扫描文件数： 217443 个
本次扫描时间：5629 秒
发现病毒种类：  9 种
查杀病毒种类：  9 种

未清除病毒种类列表：

发现病毒种类列表：
病毒： Trojan.DL.Diyer.a        次数： 2   
病毒： Trojan.DL.Agent.amw      次数： 2   
病毒： Trojan.DL.Agent.knu      次数： 2   
病毒： Dropper.Agent.wl          次数： 1   
病毒： Trojan.DL.Delf.ccr        次数： 1   
病毒： Trojan.StartPage.szo      次数： 1   
病毒： Dropper.Misc.at          次数： 1   
病毒： Trojan.Agent.djp          次数： 1   
病毒： Trojan.DL.Agent.hdy      次数： 1
我无邪 - 2006-8-9 22:48:00
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。
tingyezhang - 2006-8-9 23:01:00
2006-08-09,22:49:08

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <LegendRemDriver><C:\Program Files\LEGEND\联想遥控器驱动\Remdrv.exe>  []
    <lxdevclient><C:\Program Files\Common Files\DeviceManager\lxdevclient.exe>  []
    <Agent><; C:\Program Files\CyberLink\PowerVCRII\Agent.exe>  [CyberLink]
    <Remote_Agent><; C:\Program Files\CyberLink\PowerVCRII\RemoteAgent.exe>  [Cyberlink Corp.]
    <SysExplr><C:\HEROSOFT\Hero3000\SYSEXPLR.EXE>  []
    <kpcdst><; C:\Program Files\Kingsoft\kingplayer2003\cdsprite.exe>  [金山软件股份有限公司]
    <Symantec NetDriver Monitor><C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer>  [Symantec Corporation]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [Microsoft Corporation]
    <RavTask><"D:\Program Files\Rising\Rav1\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <!ewido><"F:\ewido anti-spyware 4.0\ewido.exe" /minimized>  [Anti-Malware Development a.s.]
    <YOKAssiant><Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant uninstall>  []
    <CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <SoundMix><rundll32.exe C:\WINDOWS\system32\soundmix.dll,Load>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
    <{28A0345C-9549-452C-AAE7-11D7C7329154}><C:\WINDOWS\system32\Aggzv.dll>  []
    <{C019D24C-0C8B-4633-A1C4-9611480593C4}><C:\WINDOWS\system32\Lduhk.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\skwinlogon]
    <WinlogonNotify: skwinlogon><dll.dll>  []

==================================
启动文件夹
[联想键盘驱动程序]
  <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\联想键盘驱动程序.lnk><N>
[InterVideo WinCinema Manager]
  <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\InterVideo WinCinema Manager.lnk><N>
[Adobe Gamma Loader]
  <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk><N>

==================================
服务
[C-DillaCdaC11BA / C-DillaCdaC11BA]
  <C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision>
[C-DillaSrv / C-DillaSrv]
  <C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE><C-Dilla Ltd>
[LexBce Server / LexBceS]
  <C:\WINDOWS\system32\LEXBCES.EXE><Lexmark International, Inc.>
[LEGEND DeviceManager Service / lxdmg]
  <C:\Program Files\Common Files\DeviceManager\DeviceManager.exe><>
[lxswitch / lxswitch]
  <C:\happyhome\幸福飞梭\lxswitch.exe><>
[Norton AntiVirus Auto Protect Service / navapsvc]
  <"C:\Program Files\Norton AntiVirus\navapsvc.exe"><Symantec Corporation>
[Rising Proxy  Service / RfwProxySrv]
  <d:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
  <d:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <"D:\Program Files\Rising\Rav1\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"D:\Program Files\Rising\Rav1\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SAVScan / SAVScan]
  <"C:\Program Files\Norton AntiVirus\SAVScan.exe"><Symantec Corporation>
[ScriptBlocking Service / SBService]
  <><N/A>
[Srchpmd2a-h / Srchpmd2a-h]
  <><N/A>

==================================
tingyezhang - 2006-8-9 23:02:00
浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v5.dll, >
[]
  {044AC430-E755-409A-8464-684113EFA672} <C:\WINDOWS\system32\Dbkap.dll, N/A>
[MonitorURL Class]
  {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, N/A>
[]
  {0DE6B205-EDC2-4588-AB0A-616968DA8E6C} <C:\WINDOWS\system32\Wgagk.dll, N/A>
[wmpdrm]
  {0E674588-66B7-4E19-9D0E-2053B800F69F} <C:\WINDOWS\system32\wmpdrm.dll, N/A>
[]
  {10100A90-7646-427A-8599-992A393E4084} <C:\WINDOWS\system32\Uowdqv.dll, N/A>
[]
  {10E68CB2-C129-40A1-882F-D46A8E462BA6} <C:\WINDOWS\system32\Yper.dll, N/A>
[FltSetUp Class]
  {1D49D58D-5C84-4B50-8359-D9809BEB2B32} <C:\Program Files\Internet Explorer\Connection Wizard\icwuti1.dll, Microsoft Corporation>
[]
  {28A0345C-9549-452C-AAE7-11D7C7329154} <C:\WINDOWS\system32\Aggzv.dll, N/A>
[]
  {53707962-6F74-2D53-2644-206D7942484F} <D:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC>
[]
  {69844A4C-4FBA-4BB4-9CB0-BD7B66A6B306} <C:\WINDOWS\system32\Rxvre.dll, N/A>
[]
  {6C45DA6A-5441-4D66-BE5C-272E0425B195} <C:\WINDOWS\system32\Zksjov.dll, N/A>
[]
  {76A02F97-E874-4474-838E-70B8AA816E8B} <C:\WINDOWS\system32\Odhbal.dll, N/A>
[BandIE Class]
  {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[]
  {83B13ED4-CB49-49A1-BCA2-2D922BC1B93D} <C:\WINDOWS\system32\Vbhg.dll, N/A>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[]
  {8A89D7B7-9348-4C7D-ADDC-CD53CC1E544A} <C:\WINDOWS\system32\Wpsk.dll, N/A>
[IEHlprObj Class]
  {999ADFA2-8AD1-47ff-97FC-69FB847458F4} <C:\Progra~1\NetMeeting\nmview.dll, N/A>
[WinSC Class]
  {9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINDOWS\system32\WinSC64.dll, N/A>
[]
  {ADB92059-4701-4B73-9A75-8FCF330763AC} <C:\WINDOWS\system32\Fnky.dll, N/A>
[]
  {B30F4A32-8856-425C-82D6-6AC8C3FD8C5B} <C:\WINDOWS\system32\Eqmtdq.dll, N/A>
[]
  {C019D24C-0C8B-4633-A1C4-9611480593C4} <C:\WINDOWS\system32\Lduhk.dll, N/A>
[]
  {C90218CC-2D17-426D-A7DA-7CEF4A596D7F} <C:\WINDOWS\system32\Vjpos.dll, N/A>
[IEHlprObj Class]
  {D424FE4E-CAF9-4fdd-BC5F-E6E6B91D53BF} <C:\Progra~1\NetMeeting\conf.dll, N/A>
[]
  {D6D31DCD-314D-4582-B314-E1C5E1136455} <C:\WINDOWS\system32\Qdxhvd.dll, N/A>
[]
  {D85C6981-CE6C-4253-919A-5FA5F74B2370} <C:\WINDOWS\system32\Taqd.dll, N/A>
[]
  {E6F70B97-48C1-46C8-A675-B809B87E6BB4} <C:\WINDOWS\system32\Ucvu.dll, N/A>
[]
  {F98F967A-2E78-4F3D-A90C-AAC3E0BDFEED} <C:\WINDOWS\system32\Rklgs.dll, N/A>
[Yahoo 1G电邮]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[东方卫士]
  {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CE} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[在线杀毒]
  {A26ABCF0-1C8F-46e7-A67C-0489DC21B9EE} <http://www.i110.com/dfvsonline/, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <c:\documents and settings\user_common\my documents\qq\qq.exe, N/A>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Documents and Settings\user_common\My Documents\qq\QQIEHelper.dll, N/A>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[易趣购物]
  {EE60714F-AC17-427e-861A-FD60CBDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=50, N/A>
[YOK超级搜索]
  {F869BB38-FFEF-4589-B986-610B7AD0ADA2} <http://www.yok.com, N/A>
[百度超级搜霸]
  {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[东方卫士]
  {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[SnagIt]
  {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll, TechSmith Corporation>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[DFVSScanFile Control]
  {9BBD100C-E820-4930-9937-E8F3AA40E584} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSSFOL.ocx, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v5.dll, >
[]
  {044AC430-E755-409A-8464-684113EFA672} <C:\WINDOWS\system32\Dbkap.dll, N/A>
[MonitorURL Class]
  {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, N/A>
[]
  {0DE6B205-EDC2-4588-AB0A-616968DA8E6C} <C:\WINDOWS\system32\Wgagk.dll, N/A>
[wmpdrm]
  {0E674588-66B7-4E19-9D0E-2053B800F69F} <C:\WINDOWS\system32\wmpdrm.dll, N/A>
[]
  {10100A90-7646-427A-8599-992A393E4084} <C:\WINDOWS\system32\Uowdqv.dll, N/A>
[]
  {10E68CB2-C129-40A1-882F-D46A8E462BA6} <C:\WINDOWS\system32\Yper.dll, N/A>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[FltSetUp Class]
  {1D49D58D-5C84-4B50-8359-D9809BEB2B32} <C:\Program Files\Internet Explorer\Connection Wizard\icwuti1.dll, Microsoft Corporation>
[]
  {28A0345C-9549-452C-AAE7-11D7C7329154} <C:\WINDOWS\system32\Aggzv.dll, N/A>
[]
  {53707962-6F74-2D53-2644-206D7942484F} <D:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, CNNIC>
[]
  {69844A4C-4FBA-4BB4-9CB0-BD7B66A6B306} <C:\WINDOWS\system32\Rxvre.dll, N/A>
[]
  {6C45DA6A-5441-4D66-BE5C-272E0425B195} <C:\WINDOWS\system32\Zksjov.dll, N/A>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[]
  {76A02F97-E874-4474-838E-70B8AA816E8B} <C:\WINDOWS\system32\Odhbal.dll, N/A>
[BandIE Class]
  {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[]
  {83B13ED4-CB49-49A1-BCA2-2D922BC1B93D} <C:\WINDOWS\system32\Vbhg.dll, N/A>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[]
  {8A89D7B7-9348-4C7D-ADDC-CD53CC1E544A} <C:\WINDOWS\system32\Wpsk.dll, N/A>
[SnagIt]
  {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll, TechSmith Corporation>
[IEHlprObj Class]
  {999ADFA2-8AD1-47FF-97FC-69FB847458F4} <C:\Progra~1\NetMeeting\nmview.dll, N/A>
[WinSC Class]
  {9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINDOWS\system32\WinSC64.dll, N/A>
[东方卫士]
  {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[Tool Class]
  {A7F05EE4-0426-454F-8013-C41E3596E9E9} <C:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[]
  {ADB92059-4701-4B73-9A75-8FCF330763AC} <C:\WINDOWS\system32\Fnky.dll, N/A>
[]
  {B30F4A32-8856-425C-82D6-6AC8C3FD8C5B} <C:\WINDOWS\system32\Eqmtdq.dll, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[百度超级搜霸]
  {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\BaiduBar.dll, Baidu.com, Inc.>
[]
  {C019D24C-0C8B-4633-A1C4-9611480593C4} <C:\WINDOWS\system32\Lduhk.dll, N/A>
[]
  {C90218CC-2D17-426D-A7DA-7CEF4A596D7F} <C:\WINDOWS\system32\Vjpos.dll, N/A>
[Adobe Acrobat Control for ActiveX]
  {CA8A9780-280D-11CF-A24D-444553540000} <D:\应用软件\ADOBER~1.0\Reader\ActiveX\pdf.ocx, Adobe Systems Incorporated>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[IEHlprObj Class]
  {D424FE4E-CAF9-4FDD-BC5F-E6E6B91D53BF} <C:\Progra~1\NetMeeting\conf.dll, N/A>
[]
  {D6D31DCD-314D-4582-B314-E1C5E1136455} <C:\WINDOWS\system32\Qdxhvd.dll, N/A>
[]
  {D85C6981-CE6C-4253-919A-5FA5F74B2370} <C:\WINDOWS\system32\Taqd.dll, N/A>
[]
  {E6F70B97-48C1-46C8-A675-B809B87E6BB4} <C:\WINDOWS\system32\Ucvu.dll, N/A>
[]
  {F98F967A-2E78-4F3D-A90C-AAC3E0BDFEED} <C:\WINDOWS\system32\Rklgs.dll, N/A>
[上传到QQ网络硬盘]
  <c:\documents and settings\user_common\my documents\qq\addtonetdisk.htm, N/A>
[使用KuGoo3下载(&K)]
  <d:\program files\kugoo3\kugoo3downx.htm, N/A>
[使用迅雷下载]
  <d:\Program Files\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <d:\Program Files\Thunder\Program\GetAllUrl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <c:\documents and settings\user_common\my documents\qq\addpanel.htm, N/A>
[添加到QQ表情]
  <c:\documents and settings\user_common\my documents\qq\addemotion.htm, N/A>
[用QQ彩信发送该图片]
  <c:\documents and settings\user_common\my documents\qq\sendmms.htm, N/A>
[用比特精灵下载(&B)]
  <D:\Program Files\bitspirt\BitSpirit\bsurl.htm, N/A>
[访问通用网址]
  <C:\Program Files\CNNIC\Cdn\cnnic.htm, N/A>

==================================
tingyezhang - 2006-8-9 23:05:00
正在运行的进程
[PID: 872][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 924][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 948][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\dll.dll]  <N/A><N/A>
[PID: 1000][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1012][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1180][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1232][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1332][D:\Program Files\Rising\Rav1\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1348][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1452][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1504][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1524][D:\Program Files\Rising\Rav1\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
    [D:\Program Files\Rising\Rav1\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Program Files\Rising\Rav1\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
    [D:\Program Files\Rising\Rav1\HOOKSYS.dll]  <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
    [D:\Program Files\Rising\Rav1\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [D:\Program Files\Rising\Rav1\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Program Files\Rising\Rav1\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Program Files\Rising\Rav1\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [D:\Program Files\Rising\Rav1\HookWeb.dll]  <rising><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Program Files\Rising\Rav1\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [D:\Program Files\Rising\Rav1\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\Program Files\Rising\Rav1\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [D:\Program Files\Rising\Rav1\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [D:\Program Files\Rising\Rav1\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 14>
    [D:\Program Files\Rising\Rav1\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [D:\Program Files\Rising\Rav1\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [D:\Program Files\Rising\Rav1\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [D:\Program Files\Rising\Rav1\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [D:\Program Files\Rising\Rav1\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [D:\Program Files\Rising\Rav1\RsStore.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\Program Files\Rising\Rav1\ScanNet.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\Program Files\Rising\Rav1\ExtMail.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [D:\Program Files\Rising\Rav1\ScanElf.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1588][d:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [d:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [d:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [d:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [d:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [d:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 1728][C:\WINDOWS\system32\LEXBCES.EXE]  <Lexmark International, Inc.><7.4>
    [C:\WINDOWS\system32\lexp2p32.dll]  <Lexmark International, Inc.><7.4>
    [C:\WINDOWS\system32\lex2kusb.dll]  <Lexmark International, Inc.><7.4>
[PID: 1772][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
    [C:\WINDOWS\system32\LEXLMPM.DLL]  <Lexmark International, Inc.><7.4>
    [C:\WINDOWS\system32\LexBce.dll]  <Lexmark International, Inc.><7.4>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LGAXPP5C.dll]  <Lexmark International><1.0.4.0>
    [C:\WINDOWS\system32\LGAXpwr.dll]  <Lexmark International, Inc.><1, 0, 1, 0>
[PID: 1852][D:\Program Files\Rising\Rav1\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1972][C:\WINDOWS\system32\drivers\CDAC11BA.EXE]  <Macrovision><4.20.0>
[PID: 2000][C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE]  <C-Dilla Ltd><3.25.010>
[PID: 2040][C:\happyhome\幸福飞梭\lxswitch.exe]  <><1, 0, 0, 1>
[PID: 224][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe]  <Microsoft Corporation><7.00.9064.9150>
[PID: 336][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 464][C:\WINDOWS\System32\MsPMSPSv.exe]  <Microsoft Corporation><7.00.00.1956>
[PID: 908][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1400][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
    [C:\PROGRA~1\baidu\bar\BaiduBar.dll]  <Baidu.com, Inc.><2, 0, 2, 99>
    [C:\WINDOWS\system32\Aggzv.dll]  <N/A><N/A>
    [D:\PROGRA~1\SPYBOT~1\SDHelper.dll]  <Safer Networking Limited><1, 4, 0, 0>
    [C:\Progra~1\DoDoorRSSFinder\ActiveBandObject.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Rxvre.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Zksjov.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Vbhg.dll]  <N/A><N/A>
    [d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll]  <Thunder Networking Technologies,LTD><5, 0, 0, 2>
tingyezhang - 2006-8-9 23:05:00
[C:\WINDOWS\system32\Wpsk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Fnky.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Eqmtdq.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Lduhk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Taqd.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [d:\PROGRA~1\WinZip\WZSHLSTB.DLL]  <WinZip Computing, Inc.><3.0 (32-bit)>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll]  <TechSmith Corporation><1.0.6>
    [C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddinRes.dll]  <TechSmith 公司><1.0.6>
    [C:\WINDOWS\system32\xunleibho_v5.dll]  <><4, 3, 3, 30>
    [C:\Program Files\TechSmith\SnagIt 8\SnagItShellExt.dll]  <TechSmith 公司><1.0.0.1>
[PID: 1292][d:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
    [d:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [d:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [d:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
[PID: 2268][C:\Program Files\LEGEND\联想遥控器驱动\Remdrv.exe]  <N/A><N/A>
    [C:\Program Files\LEGEND\联想遥控器驱动\Remoted.dll]  <N/A><N/A>
    [C:\Program Files\LEGEND\联想遥控器驱动\XPNyGet.dll]  <N/A><N/A>
[PID: 2276][C:\Program Files\Common Files\DeviceManager\lxdevclient.exe]  <N/A><N/A>
[PID: 2308][C:\Program Files\Common Files\DeviceManager\DeviceManager.exe]  <><1, 0, 0, 1>
[PID: 2440][D:\Program Files\Rising\Rav1\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 2456][D:\Program Files\Rising\Rav1\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30>
    [D:\Program Files\Rising\Rav1\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [D:\Program Files\Rising\Rav1\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [D:\Program Files\Rising\Rav1\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Program Files\Rising\Rav1\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
[PID: 2616][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2700][C:\Program Files\CNNIC\Cdn\cdnup.exe]  <><2, 4, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
[PID: 2772][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
[PID: 3140][C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\skdaemon.exe]  <><1, 0, 0, 1>
    [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\MacFun.dll]  <Silitek><1, 0, 0, 0>
    [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\OpenDriver.dll]  <Silitek><1, 0, 0, 0>
    [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\OSD.dll]  <silitek><1, 0, 0, 1>
    [C:\WINDOWS\system32\lxkeyled.dll]  <Silitek><1, 0, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
[PID: 3072][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
[PID: 2716][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
    [C:\PROGRA~1\baidu\bar\BaiduBar.dll]  <Baidu.com, Inc.><2, 0, 2, 99>
    [C:\WINDOWS\system32\xunleibho_v5.dll]  <><4, 3, 3, 30>
    [C:\WINDOWS\system32\Aggzv.dll]  <N/A><N/A>
    [D:\PROGRA~1\SPYBOT~1\SDHelper.dll]  <Safer Networking Limited><1, 4, 0, 0>
    [C:\WINDOWS\system32\Rxvre.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Zksjov.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Vbhg.dll]  <N/A><N/A>
    [d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll]  <Thunder Networking Technologies,LTD><5, 0, 0, 2>
    [C:\WINDOWS\system32\Wpsk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Fnky.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Eqmtdq.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Lduhk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Taqd.dll]  <N/A><N/A>
    [D:\Program Files\Rising\Rav1\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\WINDOWS\system32\UNISPIM.IME]  <清华紫光><2.3.0.1042>
[PID: 3368][C:\WINDOWS\system32\DllHost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
[PID: 600][D:\Program Files\Rising\Rav1\Rav.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 75>
    [D:\Program Files\Rising\Rav1\PlugIn\RsPgScan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
    [D:\Program Files\Rising\Rav1\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Program Files\Rising\Rav1\RavUI.Dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 61>
    [D:\Program Files\Rising\Rav1\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [D:\Program Files\Rising\Rav1\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
tingyezhang - 2006-8-9 23:06:00
[C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [D:\Program Files\Rising\Rav1\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [D:\Program Files\Rising\Rav1\RavUIMsg.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
    [D:\Program Files\Rising\Rav1\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Program Files\Rising\Rav1\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Program Files\Rising\Rav1\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [D:\Program Files\Rising\Rav1\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 14>
    [D:\Program Files\Rising\Rav1\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [D:\Program Files\Rising\Rav1\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [D:\Program Files\Rising\Rav1\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [D:\Program Files\Rising\Rav1\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [D:\Program Files\Rising\Rav1\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [D:\Program Files\Rising\Rav1\ExtFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [D:\Program Files\Rising\Rav1\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [D:\Program Files\Rising\Rav1\ScanNet.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\Program Files\Rising\Rav1\ExtMail.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
[PID: 4384][C:\WINDOWS\system32\UPEngine.EXE]  <清华紫光><2.3.0.1042>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
[PID: 4836][F:\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\Program Files\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>

==================================
文件关联
.TXT  Error. [NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  Error. []
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
我无邪 - 2006-8-9 23:28:00
关闭所有浏览窗口以及一些不必要的程序
运行(双击)System Repair Engineer，使用“系统修复，浏览器加载项”来删除以下选项。
C:\WINDOWS\system32\Aggzv.dll
C:\WINDOWS\system32\Lduhk.dll
C:\WINDOWS\system32\Wpsk.dll
[C:\WINDOWS\system32\Fnky.dll
[C:\WINDOWS\system32\Eqmtdq.dll
[C:\WINDOWS\system32\Lduhk.dll
[C:\WINDOWS\system32\Taqd.dll
重启后删除
C:\WINDOWS\system32\Aggzv.dll
C:\WINDOWS\system32\Lduhk.dll
C:\WINDOWS\system32\Wpsk.dll
[C:\WINDOWS\system32\Fnky.dll
[C:\WINDOWS\system32\Eqmtdq.dll
[C:\WINDOWS\system32\Lduhk.dll
[C:\WINDOWS\system32\Taqd.dll
下载超级兔子。
http://www.pctutu.com/srmsdown.asp
安装好后，打开“超级兔子清理王”“专业卸载,卸载所有提示的垃圾软件，卸载是不要打开任何浏览窗口。卸载不了可以重启后再去卸载。
卸载完后，重启。
请再扫份日志粘上来。
tingyezhang - 2006-8-10 0:20:00
日志更新了,麻烦帮帮看看还有没有问题,真是万分感谢,我还想问问这是怎么引起的呀,是不是qq的问题,我该怎么办

2006-08-10,00:06:58

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <LegendRemDriver><C:\Program Files\LEGEND\联想遥控器驱动\Remdrv.exe>  []
    <lxdevclient><C:\Program Files\Common Files\DeviceManager\lxdevclient.exe>  []
    <Agent><; C:\Program Files\CyberLink\PowerVCRII\Agent.exe>  [CyberLink]
    <Remote_Agent><; C:\Program Files\CyberLink\PowerVCRII\RemoteAgent.exe>  [Cyberlink Corp.]
    <SysExplr><C:\HEROSOFT\Hero3000\SYSEXPLR.EXE>  []
    <kpcdst><; C:\Program Files\Kingsoft\kingplayer2003\cdsprite.exe>  [金山软件股份有限公司]
    <Symantec NetDriver Monitor><C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer>  [Symantec Corporation]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [Microsoft Corporation]
    <RavTask><"D:\Program Files\Rising\Rav1\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <!ewido><"F:\ewido anti-spyware 4.0\ewido.exe" /minimized>  [Anti-Malware Development a.s.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <SoundMix><rundll32.exe C:\WINDOWS\system32\soundmix.dll,Load>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
    <{28A0345C-9549-452C-AAE7-11D7C7329154}><>  []
    <{C019D24C-0C8B-4633-A1C4-9611480593C4}><>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\skwinlogon]
    <WinlogonNotify: skwinlogon><dll.dll>  []

==================================
启动文件夹
[联想键盘驱动程序]
  <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\联想键盘驱动程序.lnk><N>
[InterVideo WinCinema Manager]
  <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\InterVideo WinCinema Manager.lnk><N>
[Adobe Gamma Loader]
  <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk><N>

==================================
服务
[C-DillaCdaC11BA / C-DillaCdaC11BA]
  <C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision>
[C-DillaSrv / C-DillaSrv]
  <C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE><C-Dilla Ltd>
[LexBce Server / LexBceS]
  <C:\WINDOWS\system32\LEXBCES.EXE><Lexmark International, Inc.>
[LEGEND DeviceManager Service / lxdmg]
  <C:\Program Files\Common Files\DeviceManager\DeviceManager.exe><>
[lxswitch / lxswitch]
  <C:\happyhome\幸福飞梭\lxswitch.exe><>
[Norton AntiVirus Auto Protect Service / navapsvc]
  <"C:\Program Files\Norton AntiVirus\navapsvc.exe"><Symantec Corporation>
[Rising Proxy  Service / RfwProxySrv]
  <d:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
  <d:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <"D:\Program Files\Rising\Rav1\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"D:\Program Files\Rising\Rav1\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SAVScan / SAVScan]
  <"C:\Program Files\Norton AntiVirus\SAVScan.exe"><Symantec Corporation>
[ScriptBlocking Service / SBService]
  <><N/A>
[Srchpmd2a-h / Srchpmd2a-h]
  <><N/A>

==================================
tingyezhang - 2006-8-10 0:20:00
浏览器加载项
[Yahoo 1G电邮]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[东方卫士]
  {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CE} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[在线杀毒]
  {A26ABCF0-1C8F-46e7-A67C-0489DC21B9EE} <http://www.i110.com/dfvsonline/, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <c:\documents and settings\user_common\my documents\qq\qq.exe, N/A>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Documents and Settings\user_common\My Documents\qq\QQIEHelper.dll, N/A>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[东方卫士]
  {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[SnagIt]
  {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll, TechSmith Corporation>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[DFVSScanFile Control]
  {9BBD100C-E820-4930-9937-E8F3AA40E584} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSSFOL.ocx, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v5.dll, N/A>
[]
  {044AC430-E755-409A-8464-684113EFA672} <C:\WINDOWS\system32\Dbkap.dll, N/A>
[]
  {0DE6B205-EDC2-4588-AB0A-616968DA8E6C} <C:\WINDOWS\system32\Wgagk.dll, N/A>
[]
  {10100A90-7646-427A-8599-992A393E4084} <C:\WINDOWS\system32\Uowdqv.dll, N/A>
[]
  {10E68CB2-C129-40A1-882F-D46A8E462BA6} <C:\WINDOWS\system32\Yper.dll, N/A>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[FltSetUp Class]
  {1D49D58D-5C84-4B50-8359-D9809BEB2B32} <C:\Program Files\Internet Explorer\Connection Wizard\icwuti1.dll, N/A>
[]
  {53707962-6F74-2D53-2644-206D7942484F} <D:\PROGRA~1\SPYBOT~1\SDHelper.dll, N/A>
[]
  {69844A4C-4FBA-4BB4-9CB0-BD7B66A6B306} <C:\WINDOWS\system32\Rxvre.dll, N/A>
[]
  {6C45DA6A-5441-4D66-BE5C-272E0425B195} <C:\WINDOWS\system32\Zksjov.dll, N/A>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[]
  {76A02F97-E874-4474-838E-70B8AA816E8B} <C:\WINDOWS\system32\Odhbal.dll, N/A>
[]
  {83B13ED4-CB49-49A1-BCA2-2D922BC1B93D} <C:\WINDOWS\system32\Vbhg.dll, N/A>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll, N/A>
[SnagIt]
  {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll, TechSmith Corporation>
[IEHlprObj Class]
  {999ADFA2-8AD1-47FF-97FC-69FB847458F4} <C:\Progra~1\NetMeeting\nmview.dll, N/A>
[WinSC Class]
  {9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINDOWS\system32\WinSC64.dll, N/A>
[东方卫士]
  {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EF} <C:\WINDOWS\system32\dfvs\dfvsol\DFVSIEBR.dll, >
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[]
  {C90218CC-2D17-426D-A7DA-7CEF4A596D7F} <C:\WINDOWS\system32\Vjpos.dll, N/A>
[Adobe Acrobat Control for ActiveX]
  {CA8A9780-280D-11CF-A24D-444553540000} <D:\应用软件\ADOBER~1.0\Reader\ActiveX\pdf.ocx, Adobe Systems Incorporated>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[IEHlprObj Class]
  {D424FE4E-CAF9-4FDD-BC5F-E6E6B91D53BF} <C:\Progra~1\NetMeeting\conf.dll, N/A>
[]
  {D6D31DCD-314D-4582-B314-E1C5E1136455} <C:\WINDOWS\system32\Qdxhvd.dll, N/A>
[]
  {E6F70B97-48C1-46C8-A675-B809B87E6BB4} <C:\WINDOWS\system32\Ucvu.dll, N/A>
[]
  {F98F967A-2E78-4F3D-A90C-AAC3E0BDFEED} <C:\WINDOWS\system32\Rklgs.dll, N/A>
[上传到QQ网络硬盘]
  <c:\documents and settings\user_common\my documents\qq\addtonetdisk.htm, N/A>
[使用KuGoo3下载(&K)]
  <d:\program files\kugoo3\kugoo3downx.htm, N/A>
[使用迅雷下载]
  <d:\Program Files\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <d:\Program Files\Thunder\Program\GetAllUrl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <c:\documents and settings\user_common\my documents\qq\addpanel.htm, N/A>
[添加到QQ表情]
  <c:\documents and settings\user_common\my documents\qq\addemotion.htm, N/A>
[用QQ彩信发送该图片]
  <c:\documents and settings\user_common\my documents\qq\sendmms.htm, N/A>
[用比特精灵下载(&B)]
  <D:\Program Files\bitspirt\BitSpirit\bsurl.htm, N/A>

==================================
tingyezhang - 2006-8-10 0:20:00
正在运行的进程
[PID: 664][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 720][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 744][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\dll.dll]  <N/A><N/A>
[PID: 796][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 808][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 956][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1092][D:\Program Files\Rising\Rav1\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1108][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1188][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1244][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1256][D:\Program Files\Rising\Rav1\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
    [D:\Program Files\Rising\Rav1\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Program Files\Rising\Rav1\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
    [D:\Program Files\Rising\Rav1\HOOKSYS.dll]  <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
    [D:\Program Files\Rising\Rav1\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [D:\Program Files\Rising\Rav1\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Program Files\Rising\Rav1\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Program Files\Rising\Rav1\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [D:\Program Files\Rising\Rav1\HookWeb.dll]  <rising><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\Program Files\Rising\Rav1\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [D:\Program Files\Rising\Rav1\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\Program Files\Rising\Rav1\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [D:\Program Files\Rising\Rav1\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [D:\Program Files\Rising\Rav1\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 14>
    [D:\Program Files\Rising\Rav1\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [D:\Program Files\Rising\Rav1\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [D:\Program Files\Rising\Rav1\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [D:\Program Files\Rising\Rav1\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [D:\Program Files\Rising\Rav1\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[PID: 1320][d:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [d:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [d:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [d:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [d:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [d:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 1480][C:\WINDOWS\system32\LEXBCES.EXE]  <Lexmark International, Inc.><7.4>
    [C:\WINDOWS\system32\lexp2p32.dll]  <Lexmark International, Inc.><7.4>
    [C:\WINDOWS\system32\lex2kusb.dll]  <Lexmark International, Inc.><7.4>
[PID: 1516][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
    [C:\WINDOWS\system32\LEXLMPM.DLL]  <Lexmark International, Inc.><7.4>
    [C:\WINDOWS\system32\LexBce.dll]  <Lexmark International, Inc.><7.4>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LGAXPP5C.dll]  <Lexmark International><1.0.4.0>
    [C:\WINDOWS\system32\LGAXpwr.dll]  <Lexmark International, Inc.><1, 0, 1, 0>
[PID: 1628][C:\WINDOWS\system32\drivers\CDAC11BA.EXE]  <Macrovision><4.20.0>
[PID: 1648][C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE]  <C-Dilla Ltd><3.25.010>
[PID: 1740][C:\happyhome\幸福飞梭\lxswitch.exe]  <><1, 0, 0, 1>
[PID: 1780][D:\Program Files\Rising\Rav1\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1840][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe]  <Microsoft Corporation><7.00.9064.9150>
[PID: 2044][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll]  <TechSmith Corporation><1.0.6>
    [C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddinRes.dll]  <TechSmith 公司><1.0.6>
[PID: 204][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 284][C:\WINDOWS\System32\MsPMSPSv.exe]  <Microsoft Corporation><7.00.00.1956>
[PID: 464][d:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
    [d:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [d:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [d:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1732][C:\WINDOWS\system32\wuauclt.exe]  <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
[PID: 1852][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1408][C:\Program Files\LEGEND\联想遥控器驱动\Remdrv.exe]  <N/A><N/A>
    [C:\Program Files\LEGEND\联想遥控器驱动\Remoted.dll]  <N/A><N/A>
    [C:\Program Files\LEGEND\联想遥控器驱动\XPNyGet.dll]  <N/A><N/A>
[PID: 800][C:\Program Files\Common Files\DeviceManager\lxdevclient.exe]  <N/A><N/A>
[PID: 1172][C:\Program Files\Common Files\DeviceManager\DeviceManager.exe]  <><1, 0, 0, 1>
[PID: 1404][D:\Program Files\Rising\Rav1\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1964][D:\Program Files\Rising\Rav1\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30>
    [D:\Program Files\Rising\Rav1\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [D:\Program Files\Rising\Rav1\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [D:\Program Files\Rising\Rav1\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\Program Files\Rising\Rav1\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\Program Files\Rising\Rav1\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\Program Files\Rising\Rav1\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\Program Files\Rising\Rav1\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1052][C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\skdaemon.exe]  <><1, 0, 0, 1>
    [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\MacFun.dll]  <Silitek><1, 0, 0, 0>
    [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\OpenDriver.dll]  <Silitek><1, 0, 0, 0>
    [C:\Program Files\LEGEND\联想标准功能键盘驱动程序安装\OSD.dll]  <silitek><1, 0, 0, 1>
    [C:\WINDOWS\system32\lxkeyled.dll]  <Silitek><1, 0, 0, 1>
[PID: 2184][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2492][F:\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>

==================================
tingyezhang - 2006-8-10 0:20:00
文件关联
.TXT  Error. [NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  Error. []
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================
mopery - 2006-8-10 0:50:00
打开SRE 系统修复 修复文件关联..
1
查看完整版本: 求救~~杀不掉的病毒们
© 2000 - 2026 Rising Corp. Ltd.