瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 中了backdoor.gpigeon.uql，请各位大人帮帮我（有日志）
喵呜喵呜 - 2006-9-26 8:58:00
中了backdoor.gpigeon.uql，瑞星屡杀屡现，不得已根据高手们的帖子下载了HijackThis，请各位大人帮帮我看看，并告之解决办法，小女实在感激~~ 

Logfile of HijackThis v1.99.1
Scan saved at 8:25:35, on 2006-9-26
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\crypserv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSNShell\Bin\MSNShell.exe
C:\Program Files\eMule\eMule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\System32\svchost.exe
F:\tools\ha_hijackthis_1991\HijackThis.exe
喵呜喵呜 - 2006-9-26 8:59:00
R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe 1
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 222.223.155.118 auto.search.msn.com
O1 - Hosts: 222.223.155.118 dnsc.yahoo.com.cn
O1 - Hosts: 222.223.155.118 abc.265.com
O1 - Hosts: 222.223.155.118 265.com
O1 - Hosts: 222.223.155.118 www.265.com
O1 - Hosts: 222.223.155.118 hao123.com
O1 - Hosts: 222.223.155.118 www.hao123.com
O1 - Hosts: 222.223.155.118 9991.com
O1 - Hosts: 222.223.155.118 www.9991.com
O1 - Hosts: 222.223.155.118 gjj.cc
O1 - Hosts: 222.223.155.118 www.gjj.cc
O1 - Hosts: 222.223.155.118 ppgou.com
O1 - Hosts: 222.223.155.118 www.ppgou.com
O1 - Hosts: 222.223.155.118 t2t2.com
O1 - Hosts: 222.223.155.118 www.t2t2.com
O1 - Hosts: 222.223.155.118 5566.net
O1 - Hosts: 222.223.155.118 www.5566.net
O1 - Hosts: 222.223.155.118 qu123.com
O1 - Hosts: 222.223.155.118 www.qu123.com
O1 - Hosts: 222.223.155.118 855.com
O1 - Hosts: 222.223.155.118 www.855.com
O1 - Hosts: 222.223.155.118 7b.com.cn
O1 - Hosts: 222.223.155.118 www.7b.com.cn
O1 - Hosts: 222.223.155.118 v111.com
O1 - Hosts: 222.223.155.118 www.v111.com
O1 - Hosts: 222.223.155.118 xp13.com
O1 - Hosts: 222.223.155.118 www.xp13.com
O1 - Hosts: 222.223.155.118 521521.com
O1 - Hosts: 222.223.155.118 www.521521.com
O1 - Hosts: 222.223.155.118 19ku.com
O1 - Hosts: 222.223.155.118 www.19ku.com
O1 - Hosts: 222.223.155.118 37021.com
O1 - Hosts: 222.223.155.118 www.37021.com
O1 - Hosts: 222.223.155.118 da123.com
O1 - Hosts: 222.223.155.118 www.da123.com
O1 - Hosts: 222.223.155.118 x05.net
O1 - Hosts: 222.223.155.118 www.x05.net
O1 - Hosts: 222.223.155.118 ip138.com
O1 - Hosts: 222.223.155.118 www.ip138.com
O1 - Hosts: 222.223.155.118 ipseeker.cn
O1 - Hosts: 222.223.155.118 www.ipseeker.cn
O1 - Hosts: 222.223.155.118 123cha.com
O1 - Hosts: 222.223.155.118 www.123cha.com
O1 - Hosts: 222.223.155.118 ip.cn
O1 - Hosts: 222.223.155.118 www.ip.cn
O1 - Hosts: 222.223.155.118 letscool.cn
O1 - Hosts: 222.223.155.118 www.letscool.cn
O1 - Hosts: 222.223.155.118 yok.com
O1 - Hosts: 222.223.155.118 www.yok.com
O1 - Hosts: 222.223.155.118 yeskee.com
O1 - Hosts: 222.223.155.118 www.yeskee.com
O1 - Hosts: 222.223.155.118 reg.yeskee.com
O1 - Hosts: 222.223.155.118 qyule.com
O1 - Hosts: 222.223.155.118 www.qyule.com
O1 - Hosts: 222.223.155.118 99jk.com
O1 - Hosts: 222.223.155.118 www.99jk.com
O1 - Hosts: 222.223.155.118 shop.xf200.com
喵呜喵呜 - 2006-9-26 9:00:00
R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe 1
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 222.223.155.118 auto.search.msn.com
O1 - Hosts: 222.223.155.118 dnsc.yahoo.com.cn
O1 - Hosts: 222.223.155.118 abc.265.com
O1 - Hosts: 222.223.155.118 265.com
O1 - Hosts: 222.223.155.118 www.265.com
O1 - Hosts: 222.223.155.118 hao123.com
O1 - Hosts: 222.223.155.118 www.hao123.com
O1 - Hosts: 222.223.155.118 9991.com
O1 - Hosts: 222.223.155.118 www.9991.com
O1 - Hosts: 222.223.155.118 gjj.cc
O1 - Hosts: 222.223.155.118 www.gjj.cc
O1 - Hosts: 222.223.155.118 ppgou.com
O1 - Hosts: 222.223.155.118 www.ppgou.com
O1 - Hosts: 222.223.155.118 t2t2.com
O1 - Hosts: 222.223.155.118 www.t2t2.com
O1 - Hosts: 222.223.155.118 5566.net
O1 - Hosts: 222.223.155.118 www.5566.net
O1 - Hosts: 222.223.155.118 qu123.com
O1 - Hosts: 222.223.155.118 www.qu123.com
O1 - Hosts: 222.223.155.118 855.com
O1 - Hosts: 222.223.155.118 www.855.com
O1 - Hosts: 222.223.155.118 7b.com.cn
O1 - Hosts: 222.223.155.118 www.7b.com.cn
O1 - Hosts: 222.223.155.118 v111.com
O1 - Hosts: 222.223.155.118 www.v111.com
O1 - Hosts: 222.223.155.118 xp13.com
O1 - Hosts: 222.223.155.118 www.xp13.com
O1 - Hosts: 222.223.155.118 521521.com
O1 - Hosts: 222.223.155.118 www.521521.com
O1 - Hosts: 222.223.155.118 19ku.com
O1 - Hosts: 222.223.155.118 www.19ku.com
O1 - Hosts: 222.223.155.118 37021.com
O1 - Hosts: 222.223.155.118 www.37021.com
O1 - Hosts: 222.223.155.118 da123.com
O1 - Hosts: 222.223.155.118 www.da123.com
O1 - Hosts: 222.223.155.118 x05.net
O1 - Hosts: 222.223.155.118 www.x05.net
O1 - Hosts: 222.223.155.118 ip138.com
O1 - Hosts: 222.223.155.118 www.ip138.com
O1 - Hosts: 222.223.155.118 ipseeker.cn
O1 - Hosts: 222.223.155.118 www.ipseeker.cn
O1 - Hosts: 222.223.155.118 123cha.com
O1 - Hosts: 222.223.155.118 www.123cha.com
O1 - Hosts: 222.223.155.118 ip.cn
O1 - Hosts: 222.223.155.118 www.ip.cn
O1 - Hosts: 222.223.155.118 letscool.cn
O1 - Hosts: 222.223.155.118 www.letscool.cn
O1 - Hosts: 222.223.155.118 yok.com
O1 - Hosts: 222.223.155.118 www.yok.com
O1 - Hosts: 222.223.155.118 yeskee.com
O1 - Hosts: 222.223.155.118 www.yeskee.com
O1 - Hosts: 222.223.155.118 reg.yeskee.com
O1 - Hosts: 222.223.155.118 qyule.com
O1 - Hosts: 222.223.155.118 www.qyule.com
O1 - Hosts: 222.223.155.118 99jk.com
O1 - Hosts: 222.223.155.118 www.99jk.com
O1 - Hosts: 222.223.155.118 shop.xf200.com
喵呜喵呜 - 2006-9-26 9:00:00
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: DuDu.com - {6BDE1669-B490-48E3-B668-456314F2D6C3} - (no file)
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\downlo~1\CnsHook.dll
O3 - Toolbar: 新浪点点通 - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - C:\WINDOWS\Downlo~1\DDTONG~1.DLL
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [nwiz] ; nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] ; C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] ; "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ISUSPM Startup] ; C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] ; "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [iTunesHelper] ; "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [Super Rabbit SafeEdit] C:\Program Files\Super Rabbit\MagicSet\SRFC.EXE /Load
O4 - HKLM\..\Run: [hxgame-update] ; C:\Program Files\hxupdate\hxgame-update.exe
O4 - HKLM\..\Run: [assistse] "C:\PROGRA~1\3721\assistse.exe"
O4 - HKLM\..\Run: [yassistse] ; "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - HKLM\..\Run: [WangWang] ; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [DAEMON Tools-2052] "C:\Program Files\D-Tools\daemon.exe"  -lang 2052
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DrvMon.exe] ; C:\WINDOWS\system32\DrvMon.exe
O4 - HKCU\..\Run: [Skype] ; "C:\Program Files\skype\skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSNShell] C:\Program Files\MSNShell\Bin\MSNShell.exe autorun
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O4 - Startup: HolidayCalendar.lnk = C:\Program Files\Stardock\DesktopGadgets\HolidayCalendar\HolidayCalendar.exe
O4 - Startup: 买卖通IM.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: 新浪游戏下载加速器.lnk = C:\Program Files\DuDu\DddClient\DuDuAcc.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: IE-Bar.lnk = C:\Program Files\Common Files\IE-Bar\iebar.exe
O4 - Global Startup: 「我形我速」 4.0 Calendar Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0\CalCheck.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 设为 Messenger Live 头像 - C:\Program Files\MSNShell\Bin\SetMSNDP.htm
O9 - Extra button: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - C:\Program Files\MSNShell\Bin\MSNShell.exe
O9 - Extra 'Tools' menuitem: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - C:\Program Files\MSNShell\Bin\MSNShell.exe
O9 - Extra button: Yahoo 3.5G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing)
O9 - Extra button: 名品折扣 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://adtaobao.allyes.com/main/adfclick?db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816 (file missing)
O9 - Extra button: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing)
O9 - Extra button: 雅虎WIDGET - {6354ABE6-05F1-49ed-B850-E423120EC338} - http://cn.widget.yahoo.com/index.htm?source=Cns (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing)
O9 - Extra button: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - Extra 'Tools' menuitem: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - Extra button: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O9 - Extra 'Tools' menuitem: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O9 - Extra button: (no name) - {974AD624-EA50-4831-A6C0-3040F6665396} - C:\WINDOWS\Downlo~1\rssband.dll (HKCU)
O9 - Extra button: (no name) - {F0646DC8-58CD-4C64-8F6B-525043914685} - C:\WINDOWS\Downlo~1\rssband.dll (HKCU)
O11 - Options group: [!CNS]  中文上网
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} (Qzone Media Tools) - http://qqmusic.qq.com/QQPlayer.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {C661F36D-DF85-4EF4-83C7-E107B83D04B1} (WebActivater Control) - http://dl_dir.qq.com/3dshow/3DShowVM.cab
O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl Object) - https://www.tenpay.com/download/qqedit.cab
O16 - DPF: {EF9F1C48-1A63-495A-9317-B7B71B34A9CF} (Msp Class) - http://ddddl.dudu.com/ddd/update/plugin/sinamsp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B3521816-3808-4F15-B683-7332C61A4E6E}: NameServer = 202.96.209.5,202.96.209.133
O18 - Protocol: koboo - {7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6} - C:\WINDOWS\system32\mbprot.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
O23 - Service: ClipBook        (CilpBook        ) - Unknown owner - C:\WINDOWS\Hacker.com.cn.ini
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Pacsptisvr.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe
Flying1889 - 2006-9-26 9:13:00
O23 - Service: ClipBook (CilpBook ) - Unknown owner - C:\WINDOWS\Hacker.com.cn.ini

你的问题.
参照
http://forum.ikaka.com/topic.asp?board=28&artid=7713905
Flying1889 - 2006-9-26 9:16:00
还有..所有01项和后面带
(file missing)的项都修复.用HJ修复
taylor05771 - 2006-9-26 9:23:00
C:\WINDOWS\Hacker.com.cn.ini

找到 上面这个文件 QQ289039676 传给我

修复
O23 - Service: ClipBook (CilpBook ) - Unknown owner - C:\WINDOWS\Hacker.com.cn.ini
还有全部的01项
喵呜喵呜 - 2006-9-26 9:44:00
谢谢~~，我先试试看，如果有什么不懂再问你~呵呵
喵呜喵呜 - 2006-9-26 10:57:00
按Flying1889大人说的都做了，我现在把完成后的日志发上来，麻烦大人验收一下，呵呵~

Logfile of HijackThis v1.99.1
Scan saved at 10:43:21, on 2006-9-26
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\AlienGUIse\wbload.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\D-Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSNShell\Bin\MSNShell.exe
C:\Program Files\eMule\eMule.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\Program Files\买卖通IM\IM.exe
C:\Program Files\买卖通IM\mmt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
F:\tools\ha_hijackthis_1991\HijackThis.exe

R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe 1
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: DuDu.com - {6BDE1669-B490-48E3-B668-456314F2D6C3} - (no file)
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\downlo~1\CnsHook.dll
O3 - Toolbar: 新浪点点通 - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - C:\WINDOWS\Downlo~1\DDTONG~1.DLL
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [nwiz] ; nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] ; C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] ; "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ISUSPM Startup] ; C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] ; "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [iTunesHelper] ; "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [Super Rabbit SafeEdit] C:\Program Files\Super Rabbit\MagicSet\SRFC.EXE /Load
O4 - HKLM\..\Run: [hxgame-update] ; C:\Program Files\hxupdate\hxgame-update.exe
O4 - HKLM\..\Run: [assistse] "C:\PROGRA~1\3721\assistse.exe"
O4 - HKLM\..\Run: [yassistse] ; "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - HKLM\..\Run: [WangWang] ; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [DAEMON Tools-2052] "C:\Program Files\D-Tools\daemon.exe"  -lang 2052
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DrvMon.exe] ; C:\WINDOWS\system32\DrvMon.exe
O4 - HKCU\..\Run: [Skype] ; "C:\Program Files\skype\skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSNShell] C:\Program Files\MSNShell\Bin\MSNShell.exe autorun
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O4 - Startup: HolidayCalendar.lnk = C:\Program Files\Stardock\DesktopGadgets\HolidayCalendar\HolidayCalendar.exe
O4 - Startup: 买卖通IM.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: 新浪游戏下载加速器.lnk = C:\Program Files\DuDu\DddClient\DuDuAcc.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: IE-Bar.lnk = C:\Program Files\Common Files\IE-Bar\iebar.exe
O4 - Global Startup: 「我形我速」 4.0 Calendar Checker.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0\CalCheck.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - Extra context menu item: 设为 Messenger Live 头像 - C:\Program Files\MSNShell\Bin\SetMSNDP.htm
O9 - Extra button: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - C:\Program Files\MSNShell\Bin\MSNShell.exe
O9 - Extra 'Tools' menuitem: MSN Shell 4 - {0713E8D2-850A-101B-AFC0-4210102A8DA7} - C:\Program Files\MSNShell\Bin\MSNShell.exe
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra button: (no name) - {974AD624-EA50-4831-A6C0-3040F6665396} - C:\WINDOWS\Downlo~1\rssband.dll (HKCU)
O9 - Extra button: (no name) - {F0646DC8-58CD-4C64-8F6B-525043914685} - C:\WINDOWS\Downlo~1\rssband.dll (HKCU)
O11 - Options group: [!CNS]  中文上网
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (Edit Class) - https://www.sz1.cmbchina.com/download/CMBEdit.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} (Qzone Media Tools) - http://qqmusic.qq.com/QQPlayer.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {C661F36D-DF85-4EF4-83C7-E107B83D04B1} (WebActivater Control) - http://dl_dir.qq.com/3dshow/3DShowVM.cab
O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl Object) - https://www.tenpay.com/download/qqedit.cab
O16 - DPF: {EF9F1C48-1A63-495A-9317-B7B71B34A9CF} (Msp Class) - http://ddddl.dudu.com/ddd/update/plugin/sinamsp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B3521816-3808-4F15-B683-7332C61A4E6E}: NameServer = 202.96.209.5,202.96.209.133
O18 - Protocol: koboo - {7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6} - C:\WINDOWS\system32\mbprot.dll
O20 - Winlogon Notify: WB - C:\Program Files\AlienGUIse\fastload.dll
taylor05771 - 2006-9-26 10:59:00
F2 - REG:system.ini: Shell=Explorer.exe 1
F2 - REG:system.ini: UserInit=userinit.exe,
deadmanzj - 2006-9-26 11:06:00
修复
R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe 1（感觉像落雪）
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - Global Startup: IE-Bar.lnk = C:\Program Files\Common Files\IE-Bar\iebar.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present


把IE-bar卸掉，他自身带卸载程序的。
喵呜喵呜 - 2006-9-26 13:56:00
我刚才又修复了一下，这个IE-bar本来一直不知道该拿它怎么办好，原来这个文件夹里面还有两个文件，选中瑞星就会３次提示有病毒，用killbox都删不掉（急了瞎弄的)，后来用瑞星的光盘重起后直接杀毒，总算才杀掉了，但IE-bar的文件夹却删不掉,刷新就会又出现,弄的我总提心吊胆的,现在总算卸载了.
  还有,我在修复前用过超级兔子的,之后扫描时F2 - REG:system.ini: Shell=Explorer.exe 1（感觉像落雪）就不见了,是不是会有什么问题呀?
  我在刚才修复时还发现了一个问题,
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
  这两个东西我第一次扫描时明明已经修复了,怎么又出现了,我是按Flying1889提供的帖子的方法做的，会不会是有什么更严重的问题呢？第一次修复后，电脑好象变的稍微慢了些了，刚才瑞星还杀出了53个病毒，汗~
westbeck - 2006-9-26 14:09:00
还是感觉你的电脑有些问题
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。谢谢．．．
麻烦你再贴这个日志
喵呜喵呜 - 2006-9-27 8:53:00
【回复“westbeck”的帖子】

是我添麻烦了才对呀，我已经用System Repair Engineer扫描过了，现在再把日志贴上来，麻烦各位了~
2006-09-27,08:40:55

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
    <MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background>  [Microsoft Corporation]
    <eMuleAutoStart><C:\Program Files\eMule\eMule.exe -AutoStart>  [http://www.emule.org.cn]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
    <run><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <nwiz><; nwiz.exe /install>  [NVIDIA Corporation]
    <SoundMAXPnP><; C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe>  [Analog Devices, Inc.]
    <SoundMAX><; "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray>  [Analog Devices, Inc.]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <Super Rabbit SafeEdit><; C:\Program Files\Super Rabbit\MagicSet\SRFC.EXE /Load>  [Super Rabbit Soft]
    <assistse><; "C:\PROGRA~1\3721\assistse.exe">  []
    <yassistse><; "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">  [Yahoo!]
    <DAEMON Tools-2052><; "C:\Program Files\D-Tools\daemon.exe"  -lang 2052>  [DAEMON'S HOME]
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\SYSTEM32\Userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><C:\WINDOWS\downlo~1\CnsHook.dll>  [北京三七二一科技有限公司]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WB]
    <WinlogonNotify: WB><C:\Program Files\AlienGUIse\fastload.dll>  [Stardock]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINDOWS\System32\ah.scr>  [Stardust Software]
喵呜喵呜 - 2006-9-27 8:55:00
【回复“westbeck”的帖子】

启动文件夹
[Microsoft Office]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><H>
[新浪游戏下载加速器]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\新浪游戏下载加速器.lnk><H>
[腾讯QQ]
  <C:\Documents and Settings\user\「开始」菜单\程序\启动\腾讯QQ.lnk><H>
[买卖通IM]
  <C:\Documents and Settings\user\「开始」菜单\程序\启动\买卖通IM.lnk><H>

==================================
服务
[Rising Personal Firewall Service / RfwService]
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>

==================================
浏览器加载项
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, Yahoo.>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[DDDMon Class]
  {6BDE1669-B490-48E3-B668-456314F2D6C3} <, N/A>
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[MSN Shell 4]
  {0713E8D2-850A-101B-AFC0-4210102A8DA7} <C:\Program Files\MSNShell\Bin\MSNShell.exe, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[]
  {974AD624-EA50-4831-A6C0-3040F6665396} <C:\WINDOWS\Downlo~1\rssband.dll, 北京新浪信息技术有限公司>
[新浪点点通阅读器]
  {F0646DC8-58CD-4C64-8F6B-525043914685} <C:\WINDOWS\Downlo~1\rssband.dll, 北京新浪信息技术有限公司>
[新浪点点通]
  {F60C7D81-8471-4D40-AAFE-56D318F34C2D} <C:\WINDOWS\Downlo~1\DDTONG~1.DLL, 北京新浪信息技术有限公司>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINDOWS\system32\CMBEdit.dll, >
[Shockwave ActiveX Control]
  {166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINDOWS\system32\Macromed\Director\SwDir.dll, Macromedia, Inc.>
[Minesweeper Flags Class]
  {2917297F-F02B-4B9D-81DF-494B6333150B} <C:\WINDOWS\Downloaded Program Files\minesweeper.dll, Microsoft Corporation>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[MessengerStatsClient Class]
  {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} <C:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll, Microsoft Corporation>
[Qzone Media Tools]
  {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} <C:\PROGRA~1\Tencent\QQ\VQQPLA~1.OCX, Tencent Technology (Shenzhen) Company Limited>
[MsnMessengerSetupDownloadControl Class]
  {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} <C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx, Microsoft Corporation>
[WebActivater Control]
  {C661F36D-DF85-4EF4-83C7-E107B83D04B1} <C:\WINDOWS\system32\3DShowVM.ocx, QQ>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[CPasswordEditCtrl Object]
  {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[Msp Class]
  {EF9F1C48-1A63-495A-9317-B7B71B34A9CF} <C:\WINDOWS\Downloaded Program Files\dddmsp.dll, >
[ActiveMovieControl Object]
  {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\System32\msjava.dll, Microsoft Corporation>
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINDOWS\system32\CMBEdit.dll, >
[IDDTInitObj Class]
  {15DDE989-CD45-4561-BF99-D22C0D5C2B74} <, N/A>
[Shockwave ActiveX Control]
  {166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINDOWS\system32\Macromed\Director\SwDir.dll, Macromedia, Inc.>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[Yahoo!Photo]
  {33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, Yahoo.>
[雅虎助手]
  {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[HHCtrl Object]
  {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[超级兔子上网精灵]
  {43869BB3-22FD-4F15-9B46-238106BA2F4E} <, N/A>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\System32\shdocvw.dll, N/A>
[Yahoo!Live]
  {57421194-58FB-49AE-9B4F-FD48869B9AD4} <C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll, >
[DragSearch BHO]
  {62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[KillObj Class]
  {66C28884-4E5D-494B-80C9-CAA27528FD6D} <C:\WINDOWS\Downlo~1\ddtkillw.ocx, 北京新浪信息技术有限公司>
[DDDMon Class]
  {6BDE1669-B490-48E3-B668-456314F2D6C3} <, N/A>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[Windows Media Services DRM Storage object]
  {760C4B83-E211-11D2-BF3E-00805FBE84A6} <C:\WINDOWS\system32\drmstor.dll, Microsoft Corporation>
[AutoLive]
  {7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2} <C:\PROGRA~1\3721\autolive.dll, >
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\System32\shdocvw.dll, Microsoft Corporation>
[]
  {974AD624-EA50-4831-A6C0-3040F6665396} <C:\WINDOWS\Downlo~1\rssband.dll, 北京新浪信息技术有限公司>
[Qzone Media Tools]
  {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <C:\PROGRA~1\Tencent\QQ\QZone\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[卡卡上网安全助手]
  {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[MsnMessengerSetupDownloadControl Class]
  {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} <C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[Microsoft DirectAnimation Control]
  {B6FFC24C-7E13-11D0-9B47-00C04FC2F51D} <C:\WINDOWS\system32\danim.dll, Microsoft Corporation>
[3721]
  {B83FC273-3522-4CC6-92EC-75CC86678DA4} <C:\WINDOWS\downlo~1\CnsMin.dll, 北京三七二一科技有限公司>
[LojKeczf Class]
  {B95411F6-7304-48C1-142F-4B26E9012B1C} <C:\WINDOWS\DOWNLO~1\esqpxs.dll, krsobsoft>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[WebActivater Control]
  {C661F36D-DF85-4EF4-83C7-E107B83D04B1} <C:\WINDOWS\system32\3DShowVM.ocx, QQ>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\downlo~1\CnsHook.dll, 北京三七二一科技有限公司>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[iTunesDetector Class]
  {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} <, N/A>
[TencentVmpCtl Class]
  {D9819BD5-422B-4281-8523-726466ED692B} <C:\Program Files\Tencent\Viewpoint Media Player\AxMetaStream.dll, Viewpoint Corporation>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[CPasswordEditCtrl Object]
  {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[新浪点点通阅读器]
  {F0646DC8-58CD-4C64-8F6B-525043914685} <C:\WINDOWS\Downlo~1\rssband.dll, 北京新浪信息技术有限公司>
[新浪点点通]
  {F60C7D81-8471-4D40-AAFE-56D318F34C2D} <C:\WINDOWS\Downlo~1\DDTONG~1.DLL, 北京新浪信息技术有限公司>
[assist]
  {FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yassist.dll, Yahoo!>
[上传到QQ网络硬盘]
  <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
[设为 Messenger Live 头像]
  <C:\Program Files\MSNShell\Bin\SetMSNDP.htm, N/A>
喵呜喵呜 - 2006-9-27 8:56:00
【回复“westbeck”的帖子】

正在运行的进程
[PID: 1012][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1204][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1228][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\AlienGUIse\fastload.dll]  <Stardock><1, 0, 0, 1>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
[PID: 1272][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1284][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1448][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1560][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1676][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
[PID: 1820][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1960][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1996][c:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 23>
    [c:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
    [c:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [c:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 19>
    [c:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [c:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [c:\program files\rising\rfw\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[PID: 420][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\EBPMON2.DLL]  <SEIKO EPSON CORPORATION><2, 39, 0, 0>
    [C:\WINDOWS\system32\HPBMMON.DLL]  <Hewlett-Packard><10.00.16>
    [C:\WINDOWS\system32\hpdomon.dll]  <Hewlett-Packard><03.42.00>
    [C:\WINDOWS\system32\HPBHealr.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\IMFPrint.DLL]  <Zenographics, Inc.><5, 54, 330, 0>
    [C:\WINDOWS\system32\Imf32.dll]  <Zenographics, Inc.><5, 60, 1204, 0>
    [C:\WINDOWS\system32\ZTAG32.dll]  <Zenographics, Inc.><5, 60, 1210, 0>
    [C:\WINDOWS\system32\ZSPOOL.dll]  <Zenographics, Inc.><5, 51, 709, 0>
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll]  <Windows (R) 2000 DDK provider><5.00.2195.1620>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMUI6e.DLL]  <CANON INC.><1.80.2.50>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMDR6e.DLL]  <CANON INC.><1.80.2.50>
[PID: 672][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 1764][C:\Program Files\AlienGUIse\wbload.exe]  <Stardock Systems, Inc><4.4>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 1864][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 248][C:\WINDOWS\system32\wscntfy.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 568][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\WINDOWS\downlo~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 3, 2>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 8, 1048>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\WINDOWS\System32\nvcpl.dll]  <NVIDIA Corporation><6.14.10.6172>
    [C:\WINDOWS\system32\NVRSZHC.DLL]  <NVIDIA Corporation><6.14.10.6172>
    [C:\WINDOWS\System32\nvshell.dll]  <NVIDIA Corporation><6.14.10.6172>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CdrIco110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Common Files\Adobe\Shell\PSICON.DLL]  <Adobe Systems, Incorporated><7.0>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\WINDOWS\system32\contmenu.dll]  <N/A><N/A>
    [C:\PROGRA~1\3721\木马助手\contmenu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ywiper.dll]  <N/A><1, 0, 1, 1014>
    [C:\Program Files\Tencent\QQ\qdshm.dll]  <><1, 0, 101, 20>
[PID: 800][c:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 38>
    [c:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [c:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [c:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 1044][C:\WINDOWS\system32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
[PID: 1208][C:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 1288][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 1388][C:\Program Files\eMule\eMule.exe]  <http://www.emule.org.cn><0.47.0>
    [C:\Program Files\eMule\VNNClientS.Dll]  <VNN><3.0.22.1>
    [C:\Program Files\eMule\ZipLib.dll]  <VNN><1.0.0.1>
    [C:\Program Files\eMule\vdevstate.dll]  <N/A><N/A>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\Program Files\eMule\lang\zh_CN.dll]  <http://www.emule-project.net><0.47.0>
[PID: 1084][C:\Program Files\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 26>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 2140][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\Mira6\5250C\ScnWia04.dll]  <><2004, 9, 20, 1>
喵呜喵呜 - 2006-9-27 8:58:00
【回复“westbeck”的帖子】

[PID: 2948][C:\Program Files\Rising\Rav\ScanBD.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\Program Files\Rising\Rav\RsCommx.dll]  <rising><18, 0, 0, 1>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\Program Files\Rising\Rav\BDEngine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\BDEX.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\BDLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 1>
[PID: 716][C:\Program Files\Corel\Corel Graphics 11\Programs\CorelDrw.exe]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CorelDrw110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRSTY110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLFOM110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLCLR110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLUTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLUTLINTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLI18N110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLCLRINTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRRIP110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\cdrcrv110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRFLT110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRAUTOSENSE110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLCTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLCTLINTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRFNT110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\FN3API.dll]  <Bitstream, Inc.><4, 1, 0, 3>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRFNTINTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRTXT110.dll]  <Corel Corporation><11.706>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRTXTINTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRTXTUI110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLFRMWK110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLFRMWKINTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlWeb110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlInet.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlCmnRes110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRPRN110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLCUI110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLPPD110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRPRNINTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CdrCore110.dll]  <Corel Corporation><11.693>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLIUI110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\crllshape110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CdrTra110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLFOMUI110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLTWAIN110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CdrPDFUI110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CDRPDFINTL110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwArtisticMediaToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwBaseToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwBezierFreeHandToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwConnectorToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwContourTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwPickToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwDimensionToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwDistortionTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwDropShadowTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwFillToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwEllipseToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwEnvPerspTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwNodeEditToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwZoomPanToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwEraserToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwExtrudeTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwEyeDropperToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwGraphPaperToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwKnifeToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwLiveShapeToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwMeshFillToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwOutlineToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwPolygonToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwRectangleToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwSpiralToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwTextTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwTransparencyToolCore110.dll]  <Corel Corporation><11.704>
    [C:\WINDOWS\system32\ATMLIB.dll]  <Adobe Systems><5.1 Build 226>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlCuiIntl110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
喵呜喵呜 - 2006-9-27 8:59:00
【回复“westbeck”的帖子】

    [C:\Program Files\Corel\Corel Graphics 11\Programs\IUIIntl.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\SymbolTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\drawintl.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\ComponentIntl.dll]  <Corel Corporation><11.704>
    [c:\program files\corel\corel graphics 11\programs\kodakcms.dll]  <Eastman Kodak Company><4.2.12.00>
    [C:\Program Files\Common Files\Corel\Shared\Writing Tools\9.1\WT9_1LI.DLL]  <Corel Corporation Limited><9.1.0.689>
    [c:\program files\corel\corel graphics 11\programs\CDRCPR110.DLL]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwBlendToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\PolylineToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\ThreePtToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlFX110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlFXIntl.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlFXControls110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlFXControlsIntl.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwArtisticMediaTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwBezierTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwBlendTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwConnectorTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwDimensionTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwEllipseTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwEraserTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwEyeDropperTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwFHTransformTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwFillTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwFreeHandTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwGraphPaperTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwKnifeTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwLiveShapeTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwMeshFillTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwNodeEditTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwOutlineTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\PenTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwPickTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwPolygonTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\PolylineTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwRectangleTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwRoughenTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\DrwBrushToolCore110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\SmudgeTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwSpiralTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\ThreePtCurveTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\ThreePtEllipseTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\ThreePtRectTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwTransparencyTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\DrwZoomPanTool110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\PROGRAMS\CdrPDFCmp110.dll]  <Corel Corporation><11.704>
    [c:\program files\corel\corel graphics 11\filters\IECDR110.FLT]  <Corel Corporation><11.693>
    [c:\program files\corel\corel graphics 11\filters\IEcdrINTL110.dll]  <Corel Corporation><11.704>
    [c:\program files\corel\corel graphics 11\filters\IECMX110.FLT]  <Corel Corporation><11.704>
    [c:\program files\corel\corel graphics 11\filters\IEcmxIntl110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CrlRcvy110.dll]  <Corel Corporation><11.704>
    [C:\Program Files\Corel\Corel Graphics 11\Programs\CRLRCVYINTL110.dll]  <Corel Corporation><11.704>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMUI6e.DLL]  <CANON INC.><1.80.2.50>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNMDR6e.DLL]  <CANON INC.><1.80.2.50>
    [C:\Program Files\Corel\Corel Graphics 11\programs\CRLPREFLIGHTINTL110.dll]  <Corel Corporation><11.704>
    [c:\program files\corel\corel graphics 11\filters\IEsvgINTL110.dll]  <Corel Corporation><11.704>
    [c:\program files\corel\corel graphics 11\filters\IEswfINTL110.dll]  <Corel Corporation><11.704>
[PID: 3612][C:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
喵呜喵呜 - 2006-9-27 9:00:00
【回复“westbeck”的帖子】

[PID: 3628][C:\Program Files\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 35>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
    [C:\Program Files\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 32>
    [C:\Program Files\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [C:\Program Files\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [C:\Program Files\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 34>
    [C:\Program Files\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15>
    [C:\Program Files\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
    [C:\Program Files\Rising\Rav\RSUnpack.dll]  <Beijing Rising Technology Co., Ltd.><1, 0, 0, 17>
    [C:\Program Files\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\Program Files\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [C:\Program Files\Rising\Rav\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\ExtFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\Program Files\Rising\Rav\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[PID: 3760][C:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
[PID: 3100][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\WINDOWS\downlo~1\CnsHint.dll]  <3721><1, 0, 1, 1>
    [C:\WINDOWS\downlo~1\cnsplus.dll]  <3721><1, 0, 0, 2>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll]  <Yahoo.><1, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 8, 1048>
    [C:\WINDOWS\downlo~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 3, 2>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
    [C:\WINDOWS\system32\Macromed\Common\SwSupport.dll]  <Macromedia, Inc.><10.1r11>
[PID: 680][F:\tools\ha_hijackthis_1991\sreng2_PConline\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\Program Files\AlienGUIse\WBlind.dll]  <Stardock.Net, Inc><4.5>
    [C:\Program Files\AlienGUIse\wbhelp.dll]  <Stardock.Net, Inc><4.01>
    [C:\WINDOWS\downlo~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
喵呜喵呜 - 2006-9-27 9:00:00
【回复“westbeck”的帖子】

文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  Error. ["C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe" "%1"]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
喵呜喵呜 - 2006-9-27 9:02:00
哇，分了6次才贴完了，怪不得要一直强调不能修改什么的了~，那现在就继续麻烦大人们帮我看看了~
喵呜喵呜 - 2006-9-27 10:58:00
已经用System Repair Engineer扫描过了，日志也贴上来的，却没人帮我看了，汗～
不想一个人玩 - 2006-9-27 11:14:00
似乎没出现什么异常,修复一下错误的文件关联
看的眼疼...搂主的机器一定不是一般的好,不然开机就要3分钟了...
喵呜喵呜 - 2006-9-27 12:30:00
【回复“不想一个人玩”的帖子】

挖~还能看出开机要3分钟，汗！不过原来好象还好的样子，很快就好了，现在有点慢，桌面都出来了以后点什么都没反映的，还要再等一会才行。“修复一下错误的文件关联”用什么修复？HJ？哪些是错误的文件关联？
1
查看完整版本: 中了backdoor.gpigeon.uql，请各位大人帮帮我（有日志）
© 2000 - 2026 Rising Corp. Ltd.