<\??\C:\WINDOWS\system32\drivers\ghgifibc.sys><中国互联网络信息中心(CNNIC)>
[hbbicigh / hbbicigh]
<\??\C:\WINDOWS\system32\drivers\hbbicigh.sys><中国互联网络信息中心(CNNIC)>
[hchcdbdj / hchcdbdj]
<\??\C:\WINDOWS\system32\drivers\hchcdbdj.sys><中国互联网络信息中心(CNNIC)>
[hdaigbbg / hdaigbbg]
<\??\C:\WINDOWS\system32\drivers\hdaigbbg.sys><中国互联网络信息中心(CNNIC)>
[hgbdfjia / hgbdfjia]
<\??\C:\WINDOWS\system32\drivers\hgbdfjia.sys><中国互联网络信息中心(CNNIC)>
[hgjjcfhh / hgjjcfhh]
<\??\C:\WINDOWS\system32\drivers\hgjjcfhh.sys><中国互联网络信息中心(CNNIC)>
[hjcgfgaj / hjcgfgaj]
<\??\C:\WINDOWS\system32\drivers\hjcgfgaj.sys><中国互联网络信息中心(CNNIC)>
[iafhigaj / iafhigaj]
<\??\C:\WINDOWS\system32\drivers\iafhigaj.sys><中国互联网络信息中心(CNNIC)>
[ideabeic / ideabeic]
<\??\C:\WINDOWS\system32\drivers\ideabeic.sys><中国互联网络信息中心(CNNIC)>
[ids00026 / ids00026]
<\??\C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids00026.sys><N/A>
[ids00118 / ids00118]
<\??\C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids00118.sys><Kaspersky Lab>
[ieegihdc / ieegihdc]
<\??\C:\WINDOWS\system32\drivers\ieegihdc.sys><中国互联网络信息中心(CNNIC)>
[ifefheca / ifefheca]
<\??\C:\WINDOWS\system32\drivers\ifefheca.sys><中国互联网络信息中心(CNNIC)>
[ifjgbedf / ifjgbedf]
<\??\C:\WINDOWS\system32\drivers\ifjgbedf.sys><中国互联网络信息中心(CNNIC)>
[iijifdgf / iijifdgf]
<\??\C:\WINDOWS\system32\drivers\iijifdgf.sys><中国互联网络信息中心(CNNIC)>
[ijgjaheg / ijgjaheg]
<\??\C:\WINDOWS\system32\drivers\ijgjaheg.sys><中国互联网络信息中心(CNNIC)>
[jafeegga / jafeegga]
<\??\C:\WINDOWS\system32\drivers\jafeegga.sys><中国互联网络信息中心(CNNIC)>
[jbighjaa / jbighjaa]
<\??\C:\WINDOWS\system32\drivers\jbighjaa.sys><中国互联网络信息中心(CNNIC)>
[jbjdhdbj / jbjdhdbj]
<\??\C:\WINDOWS\system32\drivers\jbjdhdbj.sys><中国互联网络信息中心(CNNIC)>
[jcdafhjj / jcdafhjj]
<\??\C:\WINDOWS\system32\drivers\jcdafhjj.sys><中国互联网络信息中心(CNNIC)>
[jfjddgjh / jfjddgjh]
<\??\C:\WINDOWS\system32\drivers\jfjddgjh.sys><中国互联网络信息中心(CNNIC)>
[jidcbjjh / jidcbjjh]
<\??\C:\WINDOWS\system32\drivers\jidcbjjh.sys><中国互联网络信息中心(CNNIC)>
[jidiiaij / jidiiaij]
<\??\C:\WINDOWS\system32\drivers\jidiiaij.sys><中国互联网络信息中心(CNNIC)>
[jiiiafbj / jiiiafbj]
<\??\C:\WINDOWS\system32\drivers\jiiiafbj.sys><中国互联网络信息中心(CNNIC)>
[jjbhcgbf / jjbhcgbf]
<\??\C:\WINDOWS\system32\drivers\jjbhcgbf.sys><中国互联网络信息中心(CNNIC)>
[jjfbjbah / jjfbjbah]
<\??\C:\WINDOWS\system32\drivers\jjfbjbah.sys><中国互联网络信息中心(CNNIC)>
[jjhhbiij / jjhhbiij]
<\??\C:\WINDOWS\system32\drivers\jjhhbiij.sys><中国互联网络信息中心(CNNIC)>
[jjjfgidi / jjjfgidi]
<\??\C:\WINDOWS\system32\drivers\jjjfgidi.sys><中国互联网络信息中心(CNNIC)>
[Klick / Klick]
<\SystemRoot\System32\drivers\klick.sys><Kaspersky Lab>
[Klif / Klif]
<System32\drivers\klif.sys><Kaspersky Labs>
[Klin / Klin]
<\SystemRoot\System32\drivers\klin.sys><Kaspersky Lab>
[Klmc / Klmc]
<System32\drivers\klmc.sys><Kaspersky Lab>
[klstm / klstm]
<\??\C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\klstm.sys><Kaspersky Lab>
[kmsinput / kmsinput]
<\??\C:\WINDOWS\system32\drivers\kmsinput.sys><N/A>
[Netgroup Packet Filter / NPF]
<system32\drivers\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt]
<\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkycryp / npkycryp]
<\??\C:\Program Files\Tencent\QQ\npkycryp.sys><N/A>
[Padus ASPI Shell / pfc]
<system32\drivers\pfc.sys><Padus, Inc.>
[Direct Parallel Link Driver / Ptilink]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv]
<system32\DRIVERS\secdrv.sys><N/A>
[SiS315 / SiS315]
<system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation>
[SiSkp / SiSkp]
<system32\DRIVERS\srvkp.sys><Silicon Integrated Systems Corporation>
[SiS PCI Fast Ethernet Adapter Driver / SISNIC]
<system32\DRIVERS\sisnic.sys><SiS Corporation>
[sisraid / sisraid]
<\SystemRoot\system32\DRIVERS\SiSRaid.sys><Silicon Integrated Systems>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1]
<system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[TSP / TSP]
<\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Labs>
==================================
浏览器加载项
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[WebActivater Control]
{3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINDOWS\system32\WEBACT~1.OCX, QQ>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
<C:\Program Files\Thunder Network\Thunder\geturl.htm, N/A>
[上传到QQ网络硬盘]
<C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
<C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
==================================
正在运行的进程
[PID: 348][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 400][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 424][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 468][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 480][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 620][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 668][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 724][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 776][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 816][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1160][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\AcSignIcon.dll] [Autodesk, 16.2.54.0]
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] [Autodesk, 16.2.54.0]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0]
[C:\WINDOWS\system32\UNISPIM.IME] [北京清华紫光软件股份有限公司, 3.0.0.3045]
[C:\WINDOWS\system32\upengine.dll] [北京清华紫光软件股份有限公司, 3.0.0.3045]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\shellex.dll] [Kaspersky Lab, 5.0.227.1]
[PID: 1332][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1408][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1640][C:\Program Files\Canon\MultiPASS4\MPSERVIC.EXE] [Canon Inc., 4.30]
[C:\WINDOWS\system32\MPSUTIL.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\MPRPSYS.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\NETOS32.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\netsrv32.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\MpsMgr.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\MFDActif.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\MPACTCMD.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\MPTRANS.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\MpEnum.dll] [Canon Inc., 4.30]
[PID: 1708][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\CFFFWUD.DLL] [CANON INC., 1.0.0]
[C:\WINDOWS\system32\mpassif.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\MPSUTIL.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\NETOS32.dll] [Canon Inc., 4.30]
[C:\WINDOWS\system32\netsrv32.dll] [Canon Inc., 4.30]
[PID: 1724][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 1020][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1424][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[C:\WINDOWS\system32\MPASSMON.DLL] [Canon Inc., 4.30]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPDy8.DLL] [CANON INC., 1.52.2.0]
[PID: 2468][F:\常用\公司\我的文件\安装程序\sreng2\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================