求助，总是弹出一堆莫名其妙的网站（附日志） bbs.ikaka.com

starchild - 2006-10-10 14:27:00

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<pyjj><C:\Program Files\jj4\jjsvr4.exe> [加加开发组]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
<run><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<TPKMAPHELPER><C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper> [Lenovo]
<EZEJMNAP><C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe> [Lenovo Group Limited]
<TPHOTKEY><C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe> []
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [Synaptics, Inc.]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [Synaptics, Inc.]
<SoundMAXPnP><C:\Program Files\Analog Devices\Core\smax4pnp.exe> [Analog Devices, Inc.]
<SoundMAX><C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray> [Analog Devices, Inc.]
<suScheduler><C:\Program Files\ThinkVantage\SystemUpdate\UCLauncher.exe /SCHEDULER> []
<LPManager><C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe> [Lenovo Group Limited]
<AMSG><C:\Program Files\ThinkVantage\AMSG\Amsg.exe> [LENOVO]
<DLA><C:\WINDOWS\System32\DLA\DLACTRLW.EXE> [Sonic Solutions]
<ISUSPM Startup><c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup> [InstallShield Software Corporation]
<PDService.exe><"C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\pdservice.exe"> [Utimaco Safeware AG]
<ACTray><C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe> [Lenovo]
<ACWLIcon><C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe> [Lenovo]
<PWRMGRTR><rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor> [Lenovo Group Limited]
<BLOG><rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog> []
<IMEKRMIG6.1><C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE> [Microsoft Corporation]
<MSPY2002><C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC> []
<McAfeeUpdaterUI><"C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey> [Network Associates, Inc.]
<ShStatEXE><"C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE> [Network Associates, Inc.]
<Network Associates Error Reporting Service><"C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"> [Network Associates, Inc.]
<SunJavaUpdateSched><C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe> []
<Logitech Utility><Logi_MwX.Exe> [Logitech Inc.]
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<ATICCC><; "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay> []
<cssauth><; "C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauth.exe" silent> []
<DiskeeperSystray><; "C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe"> [Diskeeper Corporation]
<ISUSScheduler><; "c:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start> [InstallShield Software Corporation]
<Picasa Media Detector><; C:\Program Files\Picasa2\PicasaMediaDetector.exe> [Google Inc.]
<TP4EX><; tp4ex.exe> [Lenovo Group Limited]
<TpShocks><; TpShocks.exe> [Lenovo, Ltd. and IBM Corporation.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<GinaDLL><vrlogon.dll> [UPEK Inc.]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ACNotify]
<WinlogonNotify: ACNotify><ACNotify.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
<WinlogonNotify: AtiExtEvent><Ati2evxx.dll> [ATI Technologies Inc.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
<WinlogonNotify: psfus><psqlpwd.dll> [UPEK Inc.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
<WinlogonNotify: tpfnf2><notifyf2.dll> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
<WinlogonNotify: tphotkey><tphklock.dll> []

starchild - 2006-10-10 14:28:00

启动文件夹
服务
[Ac Profile Manager Service / AcPrfMgrSvc]
<C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe><N/A>
[Access Connections Main Service / AcSvc]
<C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe><Lenovo>
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[Diskeeper / Diskeeper]
<"C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe"><Diskeeper Corporation>
[Intel(R) PROSet/Wireless Event Log / EvtEng]
<C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[huawei-3com EAD appendix service / H3C_EAD_APX_SVR]
<C:\Program Files\Huawei-3Com\H3C 认证客户端\eadApxSvr.exe -startService ><N/A>
[huawei-3com protocol authentication service manage center / H3C_SVR_MNG_SERVICE]
<C:\Program Files\Huawei-3Com\H3C 认证客户端\AuthenMngService.exe -startService ><N/A>
[ThinkPad PM Service / IBMPMSVC]
<C:\WINDOWS\system32\ibmpmsvc.exe><N/A>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
[IPS 核心服务 / IPSSVC]
<C:\WINDOWS\system32\IPSSVC.EXE><Lenovo Group Limited>
[McAfee Framework Service / McAfeeFramework]
<"C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart><Network Associates, Inc.>
[Network Associates McShield / McShield]
<"C:\Program Files\Network Associates\VirusScan\Mcshield.exe"><Network Associates, Inc.>
[Network Associates Task Manager / McTaskManager]
<"C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe"><Network Associates, Inc.>
[OracleOraHome81ClientCache / OracleOraHome81ClientCache]
<D:\oracle\ora81\BIN\ONRSD.EXE><N/A>
[IBM PSA Access Driver Control / PsaSrv]
<><N/A>
[Intel(R) PROSet/Wireless Registry Service / RegSrvc]
<C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Intel(R) PROSet/Wireless Service / S24EventMonitor]
<C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>
[ThinkPad HDD APS Logging Service / TPHDEXLGSVC]
<System32\TPHDEXLG.EXE><Lenovo.>
[IBM KCU Service / TpKmpSVC]
<C:\WINDOWS\system32\TpKmpSVC.exe><N/A>
[TSS Core Service / TSSCoreService]
<"C:\Program Files\IBM ThinkVantage\Client Security Solution\ibmtcsd.exe"><IBM>
[TVT Backup Service / TVT Backup Service]
<"C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe"><>
[TVT Scheduler / TVT Scheduler]
<"C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe"><>
[ThinkVantage System Update / UCLauncherService]
<C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe><N/A>

starchild - 2006-10-10 14:28:00

浏览器加载项
[netup]
{0A44CDEC-87D0-4D4D-BF97-DE9AFB9B104A} <C:\WINDOWS\system32\netiup.dll, >
[SYM]
{36BF6929-DCBC-4CCD-A620-C5E3BBA77B95} <C:\WINDOWS\system32\usersrd.dll, >
[CibaCtrl Class]
{8DE0FCD4-5EB5-11D3-AD25-00002100131B} <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll, >
[JoyoCtrl Class]
{C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll, >
[更新 ThinkPad 软件]
{D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} <C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe, Lenovo Group Limited>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\flashget.exe, FlashGet.com>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[Search Bar]
{FBFF8F98-AE9D-4599-975E-E9B31E88EF04} <C:\WINDOWS\system32\ToolBar.dll, N/A>
[prjWebDownloader.WebDownloader]
{0BE32B6F-7667-4B86-A4D5-473A5A3B9E73} <C:\WINDOWS\Downloaded Program Files\WebDownloader.ocx, Singer>
[Edit Class]
{0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINDOWS\system32\CMBEdit.dll, >
[CEditCtrl Object]
{488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[Java Plug-in 1.4.2_04]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll, JavaSoft / Sun Microsystems, Inc.>
[Java Plug-in 1.4.2_04]
{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA} <C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll, JavaSoft / Sun Microsystems, Inc.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[Adobe PDF Reader Link Helper]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[netup]
{0A44CDEC-87D0-4D4D-BF97-DE9AFB9B104A} <C:\WINDOWS\system32\netiup.dll, >
[&Google]
{2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[IeCatch5 Class]
{2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <C:\PROGRA~1\FlashGet\jccatch.dll, FlashGet>
[SYM]
{36BF6929-DCBC-4CCD-A620-C5E3BBA77B95} <C:\WINDOWS\system32\usersrd.dll, >
[DriveLetterAccess]
{5CA3D70E-1895-11CF-8E15-001234567890} <C:\WINDOWS\System32\DLA\DLASHX_W.DLL, Sonic Solutions>
[CibaCtrl Class]
{8DE0FCD4-5EB5-11D3-AD25-00002100131B} <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll, >
[Google Toolbar Helper]
{AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, Google Inc.>
[JoyoCtrl Class]
{C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll, >
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[gFlash Class]
{F156768E-81EF-470C-9057-481BA8380DBA} <C:\PROGRA~1\FlashGet\getflash.dll, N/A>
[&Google Search]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html, N/A>
[&Translate English Word]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html, N/A>
[Backward Links]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html, N/A>
[Cached Snapshot of Page]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html, N/A>
[Similar Pages]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html, N/A>
[Translate Page into English]
<res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html, N/A>
[使用网际快车下载]
<C:\PROGRA~1\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<C:\PROGRA~1\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Excel(&x)]
<res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A>

starchild - 2006-10-10 14:31:00

正在运行的进程
[PID: 844][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 892][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 920][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2645 (xpsp.050331-1524)>
[C:\WINDOWS\system32\vrlogon.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll] <Lenovo><4, 11, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll] <N/A><N/A>
[C:\WINDOWS\system32\Ati2evxx.dll] <ATI Technologies Inc.><6.14.10.4124>
[C:\WINDOWS\system32\psqlpwd.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\ThinkVantage Fingerprint Software\infra.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\ThinkVantage Fingerprint Software\homefus2.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\ThinkVantage Fingerprint Software\homepass.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\ThinkVantage Fingerprint Software\bio.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\ThinkVantage Fingerprint Software\remote.dll] <UPEK Inc.><5.4.0.2659>
[C:\WINDOWS\system32\tphklock.dll] <N/A><N/A>
[PID: 964][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 976][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\psqlpwd.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\ThinkVantage Fingerprint Software\infra.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\ThinkVantage Fingerprint Software\homefus2.dll] <UPEK Inc.><5.4.0.2659>
[C:\Program Files\IBM ThinkVantage\Client Security Solution\csspwntfy.dll] <Lenovo Group Limited><6.01.0044.00>
[C:\Program Files\IBM ThinkVantage\Client Security Solution\ibmtsp.dll] <IBM><1,1,2,009>
[C:\Program Files\IBM ThinkVantage\Client Security Solution\tcsrpc.dll] <IBM><1,1,2,009>
[C:\Program Files\IBM ThinkVantage\Client Security Solution\cssuserdatadispatcher.dll] <Lenovo Group Limited><6.01.0044.00>
[PID: 1172][C:\WINDOWS\system32\ibmpmsvc.exe] <N/A><N/A>
[PID: 1200][C:\WINDOWS\system32\Ati2evxx.exe] <ATI Technologies Inc.><6.14.10.4124>
[C:\WINDOWS\system32\Ati2edxx.dll] <ATI Technologies, Inc.><6, 14, 10, 2499>
[PID: 1216][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1304][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1448][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\oracle\ora81\bin\oci.dll] <Oracle Corporation><8.1.7.0.0>
[PID: 1508][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] <Intel Corporation><10, 1, 0, 1>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><10, 1, 0, 2>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><10, 1, 0, 5>
[PID: 1564][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe] <Intel Corporation ><10, 1, 0, 34>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><10, 1, 0, 5>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><10, 1, 0, 2>
[C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll] <N/A><N/A>
[C:\Program Files\Intel\Wireless\Bin\IntStngs.dll] <><10, 1, 0, 3>
[C:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL] <N/A><N/A>
[PID: 1604][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1776][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 316][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[PID: 412][C:\Program Files\Huawei-3Com\H3C 认证客户端\AuthenMngService.exe] <N/A><N/A>
[C:\WINDOWS\system32\h3c_utility.dll] <N/A><N/A>
[C:\WINDOWS\system32\W32N50.dll] <Printing Communications Assoc., Inc. (PCAUSA)><5.03.16.56>
[C:\Program Files\Huawei-3Com\H3C 认证客户端\SecurityAuth.dll] <N/A><N/A>
[C:\Program Files\Huawei-3Com\H3C 认证客户端\X1Pt.dll] <N/A><N/A>
[C:\Program Files\Huawei-3Com\H3C 认证客户端\PortalPt.dll] <N/A><N/A>
[C:\Program Files\Huawei-3Com\H3C 认证客户端\LIBEAY32.dll] <N/A><N/A>
[PID: 1360][C:\WINDOWS\system32\IPSSVC.EXE] <Lenovo Group Limited><1, 0, 0, 0>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Lenovo\AwayTask\AwayDB.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[PID: 1404][C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocMigrator.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ThinQCon.dll] <N/A><N/A>

starchild - 2006-10-10 14:32:00

[PID: 1468][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[PID: 1520][C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe] <Diskeeper Corporation><9.0.535.0>
[C:\Program Files\Diskeeper Corporation\Diskeeper\DkLib.dll] <Diskeeper Corporation><9.0.535.0>
[C:\Program Files\Diskeeper Corporation\Diskeeper\Tab.dll] <Executive Software International, Inc.><1.0.34.0>
[C:\Program Files\Diskeeper Corporation\Diskeeper\GetFATExtents.dll] <Diskeeper Corporation><9.0.535.0>
[C:\Program Files\Diskeeper Corporation\Diskeeper\2052\DkRes.dll] <Diskeeper Corporation><9.0.535.0>
[C:\Program Files\Diskeeper Corporation\Diskeeper\DkTabProvider.dll] <Diskeeper Corporation><9.0.535.0>
[PID: 1712][C:\Program Files\Network Associates\Common Framework\FrameworkService.exe] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\nailog.dll] <Network Associates, Inc.><3.5.0.555>
[C:\Program Files\Network Associates\Common Framework\naXML.dll] <Network Associates, Inc.><3.5.0.555>
[C:\Program Files\Network Associates\Common Framework\naCmnLib.dll] <Network Associates, Inc.><3.5.0.555>
[C:\Program Files\Network Associates\Common Framework\applib.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\0804\AgentRes.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\Logging.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\InternetManager.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\naInet.dll] <Network Associates, Inc.><3.5.0.555>
[C:\Program Files\Network Associates\Common Framework\UserSpace.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\Management.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\cmalib.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\naPolicyManager.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\ScriptSubSys.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\UpdateSubSys.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\Scheduler.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\Agent.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\naSPIPE.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\ListenServer.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\TCSubSys.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] <Network Associates, Inc.><3.5.0.513>
[PID: 1808][C:\Program Files\Network Associates\VirusScan\Mcshield.exe] <Network Associates, Inc.><8.0.0.318>
[C:\Program Files\Network Associates\VirusScan\Res04\McShield.DLL] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Network Associates\VirusScan\FTL.Dll] <Network Associates, Inc.><8.0.0.135>
[C:\Program Files\Network Associates\VirusScan\naiann.dll] <Network Associates, Inc.><8.0.0.308>
[C:\Program Files\Network Associates\VirusScan\mytilus.dll] <Network Associates, Inc.><8.0.0.325>
[C:\Program Files\Network Associates\Common Framework\GenEvtInf.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\VirusScan\NaEventU.DLL] <Network Associates, Inc.><8.0.0.342>
[C:\Program Files\Network Associates\VirusScan\Res04\naEvtRes.dll] <Network Associates, Inc.><8.0.0.342>
[C:\Program Files\Network Associates\VirusScan\VSIDSvr.dll] <Network Associates, Inc.><8.0.0.291>
[C:\Program Files\Common Files\Network Associates\Engine\MCSCAN32.DLL] <McAfee, Inc.><4.4.00>
[C:\Program Files\Network Associates\VirusScan\EntSrv.Dll] <Network Associates, Inc><8.0.0.448>
[PID: 2012][C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe] <Network Associates, Inc.><8.0.0.1004>
[C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] <Network Associates, Inc.><8.0.0.1011>
[C:\Program Files\Network Associates\VirusScan\naiwmain.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\naicondl.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\VsTskMgr.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\MIDUtil.Dll] <McAfee, Inc.><8.0.0.155>
[PID: 324][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 484][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe] <Intel Corporation><10, 1, 0, 1>
[PID: 624][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 280][C:\WINDOWS\System32\TPHDEXLG.EXE] <Lenovo.><1.40>
[PID: 768][C:\WINDOWS\system32\TpKmpSVC.exe] <N/A><N/A>
[PID: 816][C:\Program Files\IBM ThinkVantage\Client Security Solution\ibmtcsd.exe] <IBM><1,1,2,009>
[PID: 828][C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe] <><3,0,27,0>
[C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rr_res.dll] <><3,0,29,0>
[C:\Program Files\IBM ThinkVantage\Rescue and Recovery\pui.dll] <International Business Machines Corporation><1, 0, 0, 6>
[C:\Program Files\IBM ThinkVantage\Rescue and Recovery\ui.dll] <><3,0,29,0>
[C:\Program Files\IBM ThinkVantage\Rescue and Recovery\CDRecord.dll] <N/A><N/A>
[C:\Program Files\IBM ThinkVantage\Rescue and Recovery\zlib.dll] <><1.1.4.0>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[PID: 880][C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe] <><3,0,9,0>
[PID: 896][C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe] <N/A><N/A>
[C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherCommon.dll] <N/A><N/A>
[PID: 1388][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 1648][C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe] <Lenovo><4, 11, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcHlpr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ANCA.dll] <IBM Corp.><8.3>
[C:\Program Files\ThinkPad\ConnectUtilities\ANC.dll] <IBM Corp.><8.3>
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll] <N/A><N/A>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\ACGolan.DLL] <N/A><N/A>

starchild - 2006-10-10 14:32:00

[C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll] <Intel Corporation><10, 1, 0, 46>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><10, 1, 0, 5>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><10, 1, 0, 2>
[C:\Program Files\Intel\Wireless\Bin\DbEngine.dll] <Intel Corporation><10, 1, 0, 13>
[C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll] <N/A><N/A>
[C:\Program Files\Intel\Wireless\Bin\IntStngs.dll] <><10, 1, 0, 3>
[C:\Program Files\Intel\Wireless\Bin\MurocAPI.dll] <Intel Corporation><10, 1, 0, 38>
[C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll] <Intel Corporation><10, 1, 0, 1>
[PID: 2104][C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe] <N/A><N/A>
[PID: 2140][C:\PROGRA~1\NETWOR~1\COMMON~1\naPrdMgr.exe] <Network Associates, Inc.><3.5.0.513>
[C:\PROGRA~1\NETWOR~1\COMMON~1\nailog.dll] <Network Associates, Inc.><3.5.0.555>
[C:\PROGRA~1\NETWOR~1\COMMON~1\naCmnLib.dll] <Network Associates, Inc.><3.5.0.555>
[C:\PROGRA~1\NETWOR~1\COMMON~1\naXML.dll] <Network Associates, Inc.><3.5.0.555>
[C:\PROGRA~1\NETWOR~1\COMMON~1\applib.dll] <Network Associates, Inc.><3.5.0.513>
[C:\PROGRA~1\NETWOR~1\COMMON~1\0804\AgentRes.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\AgentPlugin.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\NAGSHR32.DLL] <Network Associates, Inc.><3.5.0.555>
[C:\Program Files\Network Associates\VirusScan\VsPlugin.dll] <Network Associates, Inc.><8.0.0.1009>
[C:\Program Files\Network Associates\Common Framework\UpdPlug.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] <Network Associates, Inc.><3.5.0.513>
[PID: 2288][c:\windows\system32\wbem\winlogon.exe] <Microsoft><1.0.0.0>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[PID: 3472][C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe] <Lenovo><4, 11, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll] <Lenovo><4, 11, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll] <Lenovo><4, 0, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\SvcHlprRes.dll] <Lenovo><4, 0, 0, 0>
[PID: 3852][C:\WINDOWS\system32\Ati2evxx.exe] <ATI Technologies Inc.><6.14.10.4124>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\WINDOWS\system32\Ati2edxx.dll] <ATI Technologies, Inc.><6, 14, 10, 2499>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 3996][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\usersrd.dll] <><1, 0, 0, 1>
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] <Adobe Systems, Inc.><7.0.0.0>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\Network Associates\VirusScan\shext.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\ShExtRes.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\pdshell.dll] <Utimaco Safeware AG><1.10.2.1>
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDLib.dll] <Utimaco Safeware AG><1.10.2.1>
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDLib0804.dll] <Utimaco Safeware AG><1.10.2.1>
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDShell0804.dll] <Utimaco Safeware AG><1.10.2.1>
[PID: 2244][C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe] <Lenovo Group Limited><1, 0, 0, 0>
[C:\PROGRA~1\ThinkPad\UTILIT~1\SC\EzMApRes.dll] <N/A><N/A>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2264][C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe] <N/A><N/A>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\WINDOWS\system32\Oemdspif.dll] <ATI Technologies, Inc.><6.14.0014>
[C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\tpfnf7.dll] <N/A><N/A>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2028][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2284][C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe] <N/A><N/A>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2316][C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe] <Lenovo Group Limited><1.16>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2272][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\WINDOWS\system32\SynCOM.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\SynTPAPI.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2392][C:\Program Files\Analog Devices\Core\smax4pnp.exe] <Analog Devices, Inc.><6, 0, 0, 20>
[C:\Program Files\Analog Devices\Core\SMWDMIF.dll] <Analog Devices, Inc.><6, 0, 4200, 014>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2780][C:\PROGRA~1\THINKV~2\PrdCtr\LPMGR.exe] <Lenovo Group Limited><1, 0, 0, 1>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\PROGRA~1\THINKV~2\PrdCtr\SC\LPRESMGR.DLL] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\TrayRes.dll] <Lenovo><4, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2740][C:\Program Files\ThinkVantage\AMSG\Amsg.exe] <LENOVO><1, 0, 0, 0>
[C:\Program Files\ThinkVantage\AMSG\AHLPRUNL.dll] <N/A><N/A>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\PROGRA~1\THINKV~2\AMSG\AcpPollingEngine.dll] <><1, 0, 0, 7>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[PID: 3072][C:\WINDOWS\System32\DLA\DLACTRLW.EXE] <Sonic Solutions><5.10.15a>
[C:\WINDOWS\system32\DLAAPI_W.DLL] <Sonic Solutions><5.10.15a>
[C:\WINDOWS\System32\DLA\DLACResW.dll] <Sonic Solutions><5.10.15a>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 3336][C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\pdservice.exe] <Utimaco Safeware AG><1.10.2.1>
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDLib.dll] <Utimaco Safeware AG><1.10.2.1>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>

starchild - 2006-10-10 14:33:00

[ [C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDLib0804.dll] <Utimaco Safeware AG><1.10.2.1>
[C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\pdservice0804.dll] <Utimaco Safeware AG><1.10.2.1>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 3460][C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe] <Lenovo><4, 11, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll] <Lenovo><4, 11, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll] <Lenovo><4, 0, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\TrayRes.dll] <Lenovo><4, 0, 0, 0>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 3496][C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe] <Lenovo><4, 11, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll] <Lenovo><4, 11, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll] <N/A><N/A>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll] <Lenovo><4, 0, 0, 0>
[C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\IconRes.dll] <Lenovo><4, 0, 0, 0>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 3604][C:\WINDOWS\system32\rundll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWRMGRRT.DLL] <N/A><N/A>
[C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL] <N/A><N/A>
[C:\WINDOWS\system32\Sensor.dll] <Lenovo.><1.40>
[C:\WINDOWS\system32\OEMDSPIF.DLL] <ATI Technologies, Inc.><6.14.0014>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 3780][C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Network Associates\Common Framework\nailog.dll] <Network Associates, Inc.><3.5.0.555>
[C:\Program Files\Network Associates\Common Framework\naCmnLib.dll] <Network Associates, Inc.><3.5.0.555>
[C:\Program Files\Network Associates\Common Framework\naXML.dll] <Network Associates, Inc.><3.5.0.555>
[C:\Program Files\Network Associates\Common Framework\0804\UpdRes.dll] <Network Associates, Inc.><3.5.0.412>
[C:\Program Files\Network Associates\Common Framework\0804\AgentRes.dll] <Network Associates, Inc.><3.5.0.412>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory.dll] <Network Associates, Inc.><3.5.0.513>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2084][C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\SHUTIL.dll] <Network Associates, Inc.><8.0.0.1011>
[C:\Program Files\Network Associates\VirusScan\naiwmain.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\shstat.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\Product.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\RES04\McShield.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Network Associates\VirusScan\RES04\Shutilrc.dll] <Network Associates, Inc.><8.0.0.912>
[C:\Program Files\Network Associates\VirusScan\Graphics.dll] <Network Associates, Inc.><8.0.0.912>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[PID: 2408][C:\Program Files\Huawei-3Com\H3C 认证客户端\H3C Client.exe] <华为技术有限公司><CH V2.40-0130>
[C:\WINDOWS\system32\h3c_utility.dll] <N/A><N/A>
[C:\WINDOWS\system32\W32N50.dll] <Printing Communications Assoc., Inc. (PCAUSA)><5.03.16.56>
[C:\Program Files\Huawei-3Com\H3C 认证客户端\SecurityAuth.dll] <N/A><N/A>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Huawei-3Com\H3C 认证客户端\X1Face.dll] <N/A><N/A>
[C:\Program Files\Huawei-3Com\H3C 认证客户端\PortalFace.dll] <><1, 0, 0, 1>
[PID: 1988][C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe] <Network Associates, Inc.><2.0.275.0>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2400][C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe] <N/A><N/A>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[PID: 3108][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 3140][C:\Program Files\Logitech\MouseWare\system\em_exec.exe] <Logitech Inc.><9.79.019>
[C:\Program Files\Logitech\MouseWare\system\EVENTEX.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\COMNCTR.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Logitech\MouseWare\system\ccresrce.dll] <Logitech Inc.><9.79.019>
[C:\Program Files\Logitech\MouseWare\system\GlbResLt.dll] <Logitech Inc.><9.79.019>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Logitech\MouseWare\System\devices.dll] <Logitech Inc.><9.79.019>
[C:\Program Files\Logitech\MouseWare\system\ccstmglb.dll] <Logitech Inc.><9.79.019>
[C:\Program Files\Logitech\MouseWare\system\ccustom.dll] <Logitech Inc.><9.79.019>
[C:\Program Files\Logitech\MouseWare\system\ccmsghk.dll] <Logitech Inc.><9.79.019>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>

starchild - 2006-10-10 14:50:00

[PID: 3264][C:\Program Files\jj4\jjsvr4.exe] <加加开发组><4.0.0.20>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 1372][C:\Documents and Settings\zhuangli\桌面\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 2052][C:\Program Files\Maxthon\Maxthon.exe] <Maxthon International Ltd.><1, 5, 6, 42>
[C:\Program Files\Maxthon\maxzlib.dll] < ><1, 0, 0, 2>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Maxthon\Services\RealTime\real_time.dll] <><1, 0, 0, 1>
[C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] <Network Associates, Inc.><8.0.0.992>
[C:\Program Files\Network Associates\VirusScan\mytilus.dll] <Network Associates, Inc.><8.0.0.325>
[C:\Program Files\Network Associates\VirusScan\Res04\McShield.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Common Files\Network Associates\Engine\mcscan32.dll] <McAfee, Inc.><4.4.00>
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[C:\WINDOWS\system32\PYJJ4.IME] <加加工作组><4.0.0.21>
[PID: 1976][C:\Program Files\Outlook Express\msimn.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] <Network Associates, Inc.><8.0.0.992>
[C:\Program Files\Network Associates\VirusScan\mytilus.dll] <Network Associates, Inc.><8.0.0.325>
[C:\Program Files\Network Associates\VirusScan\Res04\McShield.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Common Files\Network Associates\Engine\mcscan32.dll] <McAfee, Inc.><4.4.00>
[PID: 2804][C:\Program Files\Messenger\msmsgs.exe] <Microsoft Corporation><4.7.3001>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[PID: 1948][C:\Program Files\Microsoft Office\Office10\POWERPNT.EXE] <Microsoft Corporation><10.0.6804>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpcfont.dll] <Hewlett-Packard Corporation><1.0.33.0>
[PID: 2884][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[c:\program files\google\googletoolbar1.dll] <Google Inc.><3, 0, 131, 0>
[C:\WINDOWS\system32\ToolBar.dll] <N/A><N/A>
[C:\WINDOWS\system32\netiup.dll] <><1, 0, 0, 1>
[C:\WINDOWS\system32\usersrd.dll] <><1, 0, 0, 1>
[C:\Program Files\Network Associates\VirusScan\scriptproxy.dll] <Network Associates, Inc.><8.0.0.992>
[C:\Program Files\Network Associates\VirusScan\mytilus.dll] <Network Associates, Inc.><8.0.0.325>
[C:\Program Files\Network Associates\VirusScan\Res04\McShield.dll] <Network Associates, Inc.><8.0.0.251>
[C:\Program Files\Common Files\Network Associates\Engine\mcscan32.dll] <McAfee, Inc.><4.4.00>
[PID: 1880][C:\WINDOWS\system32\wuauclt.exe] <Microsoft Corporation><5.8.0.2607 built by: dnsrv(wmbla)>
[PID: 208][C:\Documents and Settings\zhuangli\桌面\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll] <Logitech Inc.><9.79.019>
[C:\WINDOWS\system32\SynTPFcs.dll] <Synaptics, Inc.><7.5.17.18 15Sep05>
[C:\WINDOWS\system32\PROCHLP.DLL] <Lenovo Group Limited><1, 0, 0, 0>
[C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll] <Logitech Inc.><1.1.0>

==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

瑞星卡卡安全论坛