瑞星卡卡安全论坛
zzzwb - 2007-10-11 13:41:00
[CODE]
2007-10-11,13:24:12
System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中:
所有的启动项目(包括注册表、启动文件夹、服务等)
浏览器加载项
正在运行的进程(包括进程模块信息)
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
<wsctf.exe><wsctf.exe> [N/A]
<EXPLORER.EXE><EXPLORER.EXE> [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation]
<SoundMan><SOUNDMAN.EXE> [(Verified)Realtek Semiconductor Corp.]
<ATICCC><"C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"> [N/A]
<stup.exe><Rundll32.exe C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll,Rundll32 R> [TENCENT]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<AVP><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"> [(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<MSDEG32><LYLoader.exe> [N/A]
<MSDWG32><LYLoadbr.exe> [N/A]
<MSDCG32 ><LYLeador.exe> [N/A]
<MSDOG32><LYLoador.exe> [N/A]
<MSDSG32><LYLoadar.exe> [N/A]
<MSDMG32><LYLoadmr.exe> [N/A]
<MSDHG32><LYLoadhr.exe> [N/A]
<MSDQG32><LYLoadqr.exe> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><userinit.exe,EXPLORER.EXE> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><zinforms.dll> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [(Verified)Microsoft Corporation]
<{AEB6717E-7E19-11d0-97EE-00C04FD91975}><zinforms.dll> [N/A]
<{AEB6717E-7E19-11d0-97EE-00C04FD91974}><winforms.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation]
<CDBurn><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation]
<WebCheck><%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Corporation]
<SysTray><C:\WINDOWS\system32\stobject.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
<WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll> [(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><C:\WINDOWS\system32\logon.scr> [Microsoft Corporation]
==================================
启动文件夹
[腾讯QQ]
<C:\Documents and Settings\管理员\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\PROGRA~1\Tencent\QQ\QQ.exe [TENCENT]><N>
==================================
服务
[229011B2 / 229011B2][Stopped/Auto Start]
<C:\WINDOWS\system32\ED2B70B2.EXE -k><Microsoft Corporation>
[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
<C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[ATI Smart / ATI Smart][Stopped/Auto Start]
<C:\WINDOWS\system32\ati2sgag.exe><>
[Kaspersky Internet Security 7.0 / AVP][Running/Auto Start]
<"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r><Kaspersky Lab>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[ati2mtag / ati2mtag][Running/Manual Start]
<system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[kl1 / kl1][Running/Boot Start]
<\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Kaspersky Anti-Virus NDIS Filter / klim5][Running/Manual Start]
<system32\DRIVERS\klim5.sys><Kaspersky Lab>
[nvata / nvata][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\nvata.sys><NVIDIA Corporation>
[nvatabus / nvatabus][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\nvatabus.sys><NVIDIA Corporation>
[NVIDIA Disk Cache Filter Driver / nvcchflt][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\nvcchflt.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
<system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
<system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
<system32\DRIVERS\tcpip.sys><Microsoft Corporation>
==================================
浏览器加载项
[ThunderAtOnce Class]
{01443AEC-0FD1-40fd-9C87-E93D1494C233} <D:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\SSPlus\SAddr.dll, Tencent>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
[网络反病毒统计]
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll, Kaspersky Lab>
[ThunderAtOnce Class]
{01443AEC-0FD1-40FD-9C87-E93D1494C233} <D:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[Tencent Browser Helper]
{0C7C23EF-A848-485B-873C-0ED954731014} <C:\Program Files\TENCENT\SSPlus\SAddr.dll, Tencent>
[EWA Control]
{18226BF8-DC0B-4D81-80E9-A41AE37BB73A} <f:\PROGRA~1\PPLive\SYNACA~2.OCX, Synacast>
[Thunder Agent Class]
{485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <D:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD>
[XMP Class]
{6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, N/A>
[XDRM]
{693571CB-54A3-4E90-9D52-EEAE1334E2D3} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work, >
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[List Control]
{70CACCCA-8B83-4BCB-B2D1-188E9A495527} <f:\PROGRA~1\PPLive\SYNACA~1.OCX, >
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
[RMGetLicense Class]
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[Thunder DapPlayer]
{EEDD6FF9-13DE-496B-9A1C-D78B3215E266} <d:\Program Files\Thunder\Components\DownAndPlay\DapPlayer3.0.28.50.dll, ShenZhen Thunder Networking Technologies Ltd.>
[XPPlayer Class]
{F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\pplayer.dll_1_work, Thunder>
[使用迅雷下载]
<D:\Program Files\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
<D:\Program Files\Thunder\Program\getallurl.htm, N/A>
[添加到QQ表情]
<d:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[添加到反广告横幅]
<C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm, N/A>
[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
zzzwb - 2007-10-11 13:43:00
正在运行的进程
[PID: 916][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1004][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1048][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4146]
[C:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1092][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 1104][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1244][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4146]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2504]
[PID: 1292][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 1348][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1512][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\System32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1628][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1744][C:\WINDOWS\system32\Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4146]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2504]
[C:\WINDOWS\system32\ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4146]
[PID: 1892][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 240][C:\WINDOWS\EXPLORER.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\zinforms.dll] [N/A, N/A]
[C:\WINDOWS\system32\SHQMANGR.DLL] [N/A, N/A]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll] [, 1, 0, 0, 1]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 376][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 632][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5, 1, 0, 52]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 648][C:\WINDOWS\system32\Rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 660][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3512]
[C:\WINDOWS\system32\zinforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 664][C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE] [ATI Technologies Inc., 1.11.0.0]
[C:\WINDOWS\system32\zinforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Implementation.dll] [ATI Technologies Inc., 1.2.2460.36578]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29985]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29986]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.Service.dll] [ATI Technologies Inc., 1.2.2460.36737]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.Shared.dll] [ATI Technologies Inc., 1.2.2208.29991]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.XManifestation.dll] [ATI Technologies Inc., 1.2.2460.36738]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36741]
[C:\Program Files\ATI Technologies\ATI.ACE\ATICCCom.dll] [ATI Technologies Inc., 1.0.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\AEM.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29985]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29987]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36732]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Runtime.Shared.dll] [ATI Technologies Inc., 1.2.2208.29988]
[C:\Program Files\ATI Technologies\ATI.ACE\DEM.Foundation.dll] [ATI Technologies Inc., 1.11.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\DEM.Graphics.I0601.dll] [ATI Technologies Inc., 2.0.2344.17361]
[C:\Program Files\ATI Technologies\ATI.ACE\ACE.Graphics.DisplaysManager.Shared.dll] [ATI Technologies Inc., 1.11.0.0]
zzzwb - 2007-10-11 13:43:00
[C:\WINDOWS\system32\ATIDEMGR.dll] [ATI Technologies Inc., 1.2.2460.36563]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU3.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36616]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU3.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2302.19274]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36575]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29991]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36640]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MultiVPU.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.30001]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VeryLargeDesktop.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36615]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VeryLargeDesktop.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29993]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3D.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36658]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3DLegacy.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36655]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36622]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.30007]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36689]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysColour.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29990]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MMVideo.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36673]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MMVideo.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.30001]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VideoOverlay.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36648]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VideoOverlay.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29989]
[C:\Program Files\ATI Technologies\ATI.ACE\ACE.Graphics.VideoOverlay.Shared.dll] [ATI Technologies Inc., 1.11.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.SmartGart.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36652]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VPURecover.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36645]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.VPURecover.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29988]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.WorkstationConfig.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36643]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36709]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2236.29147]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36628]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCRT2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2236.29162]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36700]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29994]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36622]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29993]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36706]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2341.28028]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.CustomFormats.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2341.28007]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36631]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2341.28018]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36696]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36692]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36702]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2341.28013]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36625]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceDFP2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2341.28023]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive3.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36665]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive3.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2279.31385]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36670]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.PowerPlay3.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36662]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.PowerPlay3.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29989]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36683]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36677]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.InfoCentre.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36680]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.InfoCentre.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29990]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36634]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.30002]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3D.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2232.28756]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3DLegacy.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2232.28758]
[C:\Program Files\ATI Technologies\ATI.ACE\DEM.Graphics.I0600.dll] [ATI Technologies Inc., 1.11.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.SmartGart.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29990]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.WorkstationConfig.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2390.25922]
[C:\Program Files\ATI Technologies\ATI.ACE\DEM.Graphics.I0602.dll] [ATI Technologies Inc., 1.11.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceProperty.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29987]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceProperty2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29986]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceProperty2.Graphics.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36570]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2307.27448]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2307.27453]
[C:\WINDOWS\system32\ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2504]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.OverDrive2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2412.27525]
zzzwb - 2007-10-11 13:45:00
C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29993]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.IntegratedUMAFrameBuffer.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29988]
[C:\Program Files\ATI Technologies\ATI.ACE\APM.Foundation.dll] [ATI Technologies Inc., 1.2.2208.30002]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 760][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\zinforms.dll] [N/A, N/A]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 980][D:\Program Files\Tencent\QQ\QQ.exe] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQHelperDll.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\BasicCtrlDll.dll] [TENCENT, 7, 0, 431, 1723]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[D:\Program Files\Tencent\QQ\QQAPI.dll] [TENCENT, 7,0,431,1723]
[d:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\Program Files\Tencent\QQ\LoginCtrl.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\LoginCtrlRes.dll] [TENCENT, 7,0,431,1723]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Tencent\QQ\QQRes.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQMainFrame.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\UnReadMsgMgr.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\CQQApplication.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\Program Files\Tencent\QQ\NewSkin.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\MailSummary.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll] [TENCENT, 7,0,431,1723]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Tencent\QQ\QQAllInOne.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\SCCore.dll] [TENCENT, 1, 6, 0, 2]
[D:\Program Files\Tencent\QQ\CameraDll.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQSpace.dll] [TENCENT, 7,0,431,1723]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\QQGroupMng.dll] [TENCENT, 7,0,431,1723]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\macromed\flash\Flash.ocx] [Macromedia, Inc., 7,0,19,0]
[D:\Program Files\Tencent\QQ\QQAvatar.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\UserDefinedHead.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQPlugin.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\QQConfigPlugin.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQCustomFace.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Tencent\QQ\QRingMng.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\LongConnection.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\PhoneAPI.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[D:\Program Files\Tencent\QQ\QQPet.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQOneClick.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQSysMsgMng.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\BQQApplication.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\ImageOle.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQLiveQMng.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\QQMagicFace.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\CPaiPaiApplication.dll] [, 7, 0, 431, 1723]
[D:\Program Files\Tencent\QQ\QQSceneMng.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\QQFileTransfer.dll] [TENCENT, 7,0,431,1723]
[C:\WINDOWS\system32\zinforms.dll] [N/A, N/A]
[D:\Program Files\Tencent\QQ\CommercesMng.dll] [TENCENT, 7,0,431,1723]
[D:\Program Files\Tencent\QQ\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[D:\Program Files\Tencent\QQ\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 310]
[PID: 528][d:\Program Files\Tencent\QQ\TIMPlatform.exe] [TENCENT, 7,0,431,1723]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[d:\Program Files\Tencent\QQ\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 1968][C:\WINDOWS\system32\wbem\wmiprvse.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 2572][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 2720][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3164][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0]
[C:\WINDOWS\system32\zinforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Implementation.dll] [ATI Technologies Inc., 1.2.2460.36578]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29985]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29986]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.Service.dll] [ATI Technologies Inc., 1.2.2460.36737]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.Shared.dll] [ATI Technologies Inc., 1.2.2208.29991]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.XManifestation.dll] [ATI Technologies Inc., 1.2.2460.36738]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36607]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.Clients.dll] [ATI Technologies Inc., 1.2.2208.29986]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Wizard.Shared.dll] [ATI Technologies Inc., 1.2.2208.29987]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36741]
[C:\Program Files\ATI Technologies\ATI.ACE\ATICCCom.dll] [ATI Technologies Inc., 1.0.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29987]
[C:\Program Files\ATI Technologies\ATI.ACE\AEM.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29985]
[C:\Program Files\ATI Technologies\ATI.ACE\ACE.Graphics.DisplaysManager.Shared.dll] [ATI Technologies Inc., 1.11.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36610]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Wizard.Shared.dll] [ATI Technologies Inc., 1.2.2208.29990]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36597]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV2.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36600]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36592]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD2.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36616]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36587]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV2.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36589]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36604]
zzzwb - 2007-10-11 13:45:00
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3D.Graphics.Wizard.dll] [ , 1.2.2460.36579]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MMVideo.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36581]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.TransCode.Local.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36574]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.InfoCentre.Graphics.Wizard.dll] [ATI Technologies Inc., 1.2.2460.36584]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2341.28028]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceProperty.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29987]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceCV2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2341.28018]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceProperty2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29986]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.CustomFormats.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2341.28007]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29994]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceLCD2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29993]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2307.27453]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.DeviceTV2.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2307.27448]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.Radeon3D.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2232.28756]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.MMVideo.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.30001]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.TransCode.Local.Shared.dll] [ATI Technologies Inc., 1.2.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\atixclib.dll] [ , 1.0.0.0]
[C:\Program Files\Common Files\ATI Technologies\Multimedia\atixcode.dll] [ATI Technologies, Inc., 9.14.0.60504]
[C:\Program Files\Common Files\ATI Technologies\Multimedia\atidvcr.dll] [ATI Technologies, Inc., 9.14.0.60504]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Aspect.InfoCentre.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29990]
[PID: 3172][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe] [ATI Technologies Inc., 1.11.0.0]
[C:\WINDOWS\system32\zinforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Implementation.dll] [ATI Technologies Inc., 1.2.2460.36578]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29985]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29986]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.Service.dll] [ATI Technologies Inc., 1.2.2460.36737]
[C:\Program Files\ATI Technologies\ATI.ACE\LOG.Foundation.Shared.dll] [ATI Technologies Inc., 1.2.2208.29991]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Foundation.XManifestation.dll] [ATI Technologies Inc., 1.2.2460.36738]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Systemtray.dll] [ATI Technologies Inc., 1.2.2460.36717]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Caste.Graphics.Shared.dll] [ATI Technologies Inc., 1.2.2208.29987]
[C:\Program Files\ATI Technologies\ATI.ACE\CLI.Component.Runtime.dll] [ATI Technologies Inc., 1.2.2460.36741]
[C:\Program Files\ATI Technologies\ATI.ACE\ATICCCom.dll] [ATI Technologies Inc., 1.0.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\ACE.Graphics.DisplaysManager.Shared.dll] [ATI Technologies Inc., 1.11.0.0]
[C:\Program Files\ATI Technologies\ATI.ACE\AEM.Foundation.dll] [ATI Technologies Inc., 1.2.2208.29985]
[C:\Program Files\ATI Technologies\ATI.ACE\APM.Foundation.dll] [ATI Technologies Inc., 1.2.2208.30002]
[C:\Program Files\ATI Technologies\ATI.ACE\zh-CHS\CLI.Component.Systemtray.resources.dll] [ATI Technologies Inc., 1.2.2460.36717]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 2420][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[PID: 3580][C:\Program Files\WinRAR\WinRAR.exe] [N/A, N/A]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\zinforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1952][C:\DOCUME~1\管理员\LOCALS~1\Temp\Rar$EX01.329\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
[C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll] [TENCENT, 5, 0, 1, 22]
[C:\WINDOWS\system32\winforms.dll] [N/A, N/A]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
==================================
文件关联
.TXT Error. [C:\WINDOWS\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. ["hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
[C:\]
[AutoRun]
open=auto.exe
shellexecute=auto.exe
shell\Auto\command=auto.exe
[D:\]
[AutoRun]
open=auto.exe
shellexecute=auto.exe
shell\Auto\command=auto.exe
[E:\]
[AutoRun]
open=auto.exe
shellexecute=auto.exe
shell\Auto\command=auto.exe
[F:\]
[AutoRun]
open=auto.exe
shellexecute=auto.exe
shell\Auto\command=auto.exe
[G:\]
[AutoRun]
open=auto.exe
shellexecute=auto.exe
shell\Auto\command=auto.exe
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
警告!System Repair Engineer 提醒
你下面的函数内容与预期值不符,他
们可能被一些恶意的软件所修改:
RVA 错误: LoadLibraryA
RVA 错误: LoadLibraryExA
RVA 错误: LoadLibraryExW
RVA 错误: LoadLibraryW
==================================
mopery - 2007-10-11 14:47:00
用sreng
删除启动项目=>注册表
<wsctf.exe><wsctf.exe> [N/A]
<MSDEG32><LYLoader.exe> [N/A]
<MSDWG32><LYLoadbr.exe> [N/A]
<MSDCG32 ><LYLeador.exe> [N/A]
<MSDOG32><LYLoador.exe> [N/A]
<MSDSG32><LYLoadar.exe> [N/A]
<MSDMG32><LYLoadmr.exe> [N/A]
<MSDHG32><LYLoadhr.exe> [N/A]
<MSDQG32><LYLoadqr.exe> [N/A]
<{AEB6717E-7E19-11d0-97EE-00C04FD91975}><zinforms.dll> [N/A]
<{AEB6717E-7E19-11d0-97EE-00C04FD91974}><winforms.dll> [N/A]
删除启动项目=>服务
[229011B2 / 229011B2][Stopped/Auto Start]
<C:\WINDOWS\system32\ED2B70B2.EXE -k><Microsoft Corporation>
启动项目=>注册表
<Userinit> 修改为 C:\WINDOWS\system32\userinit.exe,
<AppInit_DLLs> 修改为空值..
重启,删除文件
C:\WINDOWS\system32\wsctf.exe
C:\WINDOWS\system32\EXPLORER.EXE
C:\WINDOWS\system32\LYLoader.exe
C:\WINDOWS\system32\LYLoadbr.exe
C:\WINDOWS\system32\LYLeador.exe
C:\WINDOWS\system32\LYLoador.exe
C:\WINDOWS\system32\LYLoadar.exe
C:\WINDOWS\system32\LYLoadmr.exe
C:\WINDOWS\system32\LYLoadhr.exe
C:\WINDOWS\system32\LYLoadqr.exe
C:\WINDOWS\system32\zinforms.dll
C:\WINDOWS\system32\winforms.dll
C:\WINDOWS\system32\ED2B70B2.EXE
右键 打开 各个盘符
删除
Autorun.inf
auto.exe
1
© 2000 - 2026 Rising Corp. Ltd.