瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 我的电脑中了病毒,请帮我看看扫描日志
hongyan046 - 2007-11-13 21:47:00


2007-11-13,20:51:06

System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Internat.exe><Internat.exe>  [Microsoft Corporation]
    <iTudouAutoStart><; D:\下载\网际快车\临时文件\新建文件夹\iTudou\iTudou.exe -AutoStart>  [土豆网]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Synchronization Manager><mobsync.exe /logon>  [Microsoft Corporation]
    <Super Rabbit SafeEdit><C:\Program Files\Super Rabbit\MagicSet\SRFC.EXE /Load>  [Super Rabbit Soft]
    <RavTask><"C:\Program Files\rising\Rav\RavTask.exe" -system>  [(Verified)Beijing Rising Science and Technology Corporation Limited]
    <IdnSvr><C:\Program Files\OCINS\idnsvr.exe>  [(Verified)China Internet Network Information Center]
    <WangWang><"C:\Program Files\Alisoft\WangWang\WangWang.EXE">  [(Verified)"Alibaba Software(Shanghai)Co,. Ltd"]
    <runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINNT\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <Network.ConnectionTray><C:\WINNT\system32\NETSHELL.dll>  [Microsoft Corporation]
    <SysTray><stobject.dll>  [Microsoft Corporation]
    <WebCheck><%SystemRoot%\system32\webcheck.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif]
    <WinlogonNotify: wzcnotif><wzcdlg.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Windows Media Player><C:\WINNT\inf\unregmp2.exe /ShowWMP>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer 访问><"C:\WINNT\system32\shmgrate.exe" OCInstallUserConfigIE>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
    <自定义浏览器><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express 访问><"C:\WINNT\system32\shmgrate.exe" OCInstallUserConfigOE>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6A5110B5-E14B-4268-A065-EF89FF33C325}]
    <EnableRevocation><regsvr32.exe /s /n /i:"S 2 true 3 true 4 true 5 true 6 true 7 true" initpki.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\wmp.inf,PerUserStub>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <Address Book 5><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
    <CRLUpdate><%SystemRoot%\system32\updcrl.exe -e -u %SystemRoot%\system32\verisignpub1.crl>  [N/A]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINNT\system32\ss3dfo.scr>  [Microsoft Corporation]

==================================
启动文件夹
[腾讯QQ]
  <C:\Documents and Settings\zou\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\下载\新建文~1\新建文~1\新建文~2\新建文~1\QQ\QQ.exe [TENCENT]><H>
[QQ游戏启动加速程序]
  <C:\Documents and Settings\zou\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> D:\Tencent\QQGame\Accel.exe [深圳市腾讯计算机系统有限公司]><H>

==================================
服务
[Background Intelligent Transfer Service / BITS][Running/Manual Start]
  <C:\WINNT\System32\svchost.exe -k BITSgroup-->%SystemRoot%\System32\qmgr.dll><Microsoft Corporation>
[Indexing Service / cisvc][Stopped/Manual Start]
  <C:\WINNT\System32\cisvc.exe><Microsoft Corporation>
[ClipBook / ClipSrv][Stopped/Manual Start]
  <C:\WINNT\system32\clipsrv.exe><Microsoft Corporation>
[Cmb WebProtect Support / CMBWPS][Running/Auto Start]
  <C:\Program Files\CMBCHINA\WebProtect\WPService.exe /start><China Merchants Bank>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Fax Service / Fax][Stopped/Manual Start]
  <C:\WINNT\system32\faxsvc.exe><Microsoft Corporation>
[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
  <C:\WINNT\System32\mnmsrvc.exe><Microsoft Corporation>
[Distributed Transaction Coordinator / MSDTC][Stopped/Manual Start]
  <C:\WINNT\System32\msdtc.exe><Microsoft Corporation>
[Removable Storage / NtmsSvc][Running/Auto Start]
  <C:\WINNT\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\NtmsSvc.dll><Microsoft Corporation>
[Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start]
  <C:\WINNT\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\rasauto.dll><Microsoft Corporation>
[Routing and Remote Access / RemoteAccess][Stopped/Disabled]
  <C:\WINNT\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\mprdim.dll><Microsoft Corporation>
[Remote Registry Service / RemoteRegistry][Stopped/Manual Start]
  <C:\WINNT\system32\regsvc.exe><Microsoft Corporation>
[Remote Procedure Call (RPC) Locator / RpcLocator][Stopped/Manual Start]
  <C:\WINNT\System32\locator.exe><Microsoft Corporation>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"C:\Program Files\rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
  <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[QoS RSVP / RSVP][Stopped/Manual Start]
  <C:\WINNT\System32\rsvp.exe -s><Microsoft Corporation>
[Smart Card / SCardSvr][Stopped/Manual Start]
  <C:\WINNT\System32\SCardSvr.exe><Microsoft Corporation>
[System Event Notification / SENS][Running/Auto Start]
  <C:\WINNT\system32\svchost.exe -k netsvcs-->%SystemRoot%\system32\sens.dll><Microsoft Corporation>
[Still Image Service / StiSvc][Running/Auto Start]
  <C:\WINNT\system32\stisvc.exe><Microsoft Corporation>
[Performance Logs and Alerts / SysmonLog][Stopped/Manual Start]
  <C:\WINNT\system32\smlogsvc.exe><Microsoft Corporation>
[Telnet / TlntSvr][Stopped/Manual Start]
  <C:\WINNT\system32\tlntsvr.exe><Microsoft Corporation>
[Uninterruptible Power Supply / UPS][Stopped/Disabled]
  <C:\WINNT\System32\ups.exe><Microsoft Corporation>
[Utility Manager / UtilMan][Stopped/Manual Start]
  <C:\WINNT\System32\UtilMan.exe><Microsoft Corporation>
[Windows Management Instrumentation / WinMgmt][Running/Auto Start]
  <C:\WINNT\System32\WBEM\WinMgmt.exe><Microsoft Corporation>
[Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start]
  <C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\mspmsnsv.dll><Microsoft Corporation>
[Automatic Updates / wuauserv][Running/Auto Start]
  <C:\WINNT\system32\svchost.exe -k wugroup-->C:\WINNT\system32\wuauserv.dll><Microsoft Corporation>
[Wireless Configuration / WZCSVC][Stopped/Manual Start]
  <C:\WINNT\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\wzcsvc.dll><Microsoft Corporation>


[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
hongyan046 - 2007-11-13 21:55:00
=============================
驱动程序
[60nyi7qn / 60nyi7qng][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\60nyi7qng.sys><N/A>
[Microsoft ACPI Driver / ACPI][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\ACPI.sys><Microsoft Corporation>
[RAS Asynchronous Media Driver / AsyncMac][Stopped/Manual Start]
  <System32\DRIVERS\asyncmac.sys><Microsoft Corporation>
[Standard IDE/ESDI Hard Disk Controller / atapi][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\atapi.sys><Microsoft Corporation>
[ATM ARP Client Protocol / Atmarpc][Stopped/Manual Start]
  <System32\DRIVERS\atmarpc.sys><Microsoft Corporation>
[Audio Stub Driver / audstub][Running/Manual Start]
  <System32\DRIVERS\audstub.sys><Microsoft Corporation>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[Closed Caption Decoder / CCDECODE][Stopped/Manual Start]
  <System32\DRIVERS\CCDECODE.sys><Microsoft Corporation>
[CD-ROM Driver / Cdrom][Running/System Start]
  <System32\DRIVERS\cdrom.sys><Microsoft Corporation>
[cnprov / cnprov][Running/Boot Start]
  <\SystemRoot\system32\drivers\cnprov.sys><中国互联网络信息中心(CNNIC)>
[Disk Driver / Disk][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\disk.sys><Microsoft Corporation>
[dmboot / dmboot][Stopped/Disabled]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[Microsoft DirectMusic SW Synth (WDM) / DMusic][Stopped/Manual Start]
  <system32\drivers\DMusic.sys><Microsoft Corporation>
[Floppy Disk Controller Driver / Fdc][Running/Manual Start]
  <System32\DRIVERS\fdc.sys><Microsoft Corporation>
[Floppy Disk Driver / Flpydisk][Running/Manual Start]
  <System32\DRIVERS\flpydisk.sys><Microsoft Corporation>
[FsVga / FsVga][Running/System Start]
  <System32\DRIVERS\fsvga.sys><Microsoft Corporation>
[Game Port Enumerator / gameenum][Running/Manual Start]
  <System32\DRIVERS\gameenum.sys><Microsoft Corporation>
[Generic Packet Classifier / Gpc][Running/Manual Start]
  <System32\DRIVERS\msgpc.sys><Microsoft Corporation>
[GPKiller / GPKiller][Running/Auto Start]
  <\SystemRoot\system32\drivers\gpkiller.sys><Yahoo!>
[Microsoft HID Class Driver / hidusb][Stopped/Auto Start]
  <System32\DRIVERS\hidusb.sys><Microsoft Corporation>
[HookCont / HookCont][Running/System Start]
  <\SystemRoot\system32\drivers\HookCont.sys><Beijing Rising Technology Co., Ltd>
[HookNtos / HookNtos][Running/System Start]
  <\SystemRoot\system32\drivers\HookNtos.sys><Beijing Rising Technology Co., Ltd>
[HookReg / HookReg][Running/System Start]
  <\SystemRoot\system32\drivers\HookReg.sys><Beijing Rising Technology Co., Ltd>
[HookSys / HookSys][Running/System Start]
  <\SystemRoot\system32\drivers\HookSys.sys><Beijing Rising Technology Co., Ltd>
[i8042 Keyboard and PS/2 Mouse Port Driver / i8042prt][Running/System Start]
  <System32\DRIVERS\i8042prt.sys><Microsoft Corporation>
[i81x / i81x][Running/Manual Start]
  <System32\DRIVERS\i81xnt5.sys><Intel Corporation>
[Service for AC'97 Driver (WDM) / ichaud][Running/Manual Start]
  <system32\drivers\ichaud.sys><Microsoft Corporation>
[IdeBusDr / IdeBusDr][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\IdeBusDr.sys><Intel Corporation>
[Intel(r) Ultra ATA Controller / IdeChnDr][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\IdeChnDr.sys><Intel Corporation>
[idnaux / idnaux][Running/Auto Start]
  <system32\drivers\idnaux.sys><中国互联网络信息中心(CNNIC)>
[IntelIde / IntelIde][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\intelide.sys><Microsoft Corporation>
[IP Traffic Filter Driver / IpFilterDriver][Stopped/Manual Start]
  <System32\DRIVERS\ipfltdrv.sys><Microsoft Corporation>
[IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start]
  <System32\DRIVERS\ipinip.sys><Microsoft Corporation>
[IR Enumerator Service / IRENUM][Stopped/Manual Start]
  <System32\DRIVERS\irenum.sys><Microsoft Corporation>
[PnP ISA/EISA Bus Driver / isapnp][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\isapnp.sys><Microsoft Corporation>
[Keyboard Class Driver / Kbdclass][Running/System Start]
  <System32\DRIVERS\kbdclass.sys><Microsoft Corporation>
[Microsoft Kernel Wave Audio Mixer / kmixer][Running/Manual Start]
  <system32\drivers\kmixer.sys><Microsoft Corporation>
[kmsinput / kmsinput][Stopped/Manual Start]
  <\??\C:\WINNT\system32\drivers\kmsinput.sys><N/A>
[malbsco / malbsco][Stopped/Disabled]
  <\SystemRoot\System32\drivers\malbsco.sys><N/A>
[mfs1makfn / mfs1makfn][Running/Auto Start]
  <\??\C:\WINNT\system32\drivers\mfs1makfn.sys><N/A>
[Mouse Class Driver / Mouclass][Running/System Start]
  <System32\DRIVERS\mouclass.sys><Microsoft Corporation>
[Mouse HID Driver / mouhid][Stopped/Manual Start]
  <System32\DRIVERS\mouhid.sys><Microsoft Corporation>
[BDA MPE Filter / MPE][Stopped/Manual Start]
  <System32\DRIVERS\MPE.sys><Microsoft Corporation>
[Microsoft Streaming Service Proxy / MSKSSRV][Stopped/Manual Start]
  <system32\drivers\MSKSSRV.sys><Microsoft Corporation>
[Microsoft Streaming Clock Proxy / MSPCLOCK][Stopped/Manual Start]
  <system32\drivers\MSPCLOCK.sys><Microsoft Corporation>
[Microsoft Streaming Quality Manager Proxy / MSPQM][Stopped/Manual Start]
  <system32\drivers\MSPQM.sys><Microsoft Corporation>
[Microsoft Streaming Tee/Sink-to-Sink Converter / MSTEE][Stopped/Manual Start]
  <system32\drivers\MSTEE.sys><Microsoft Corporation>
[Microsoft MPU-401 MIDI UART Driver / ms_mpu401][Running/Manual Start]
  <system32\drivers\msmpu401.sys><Microsoft Corporation>
[NABTS/FEC VBI Codec / NABTSFEC][Stopped/Manual Start]
  <System32\DRIVERS\NABTSFEC.sys><Microsoft Corporation>
[Microsoft TV/Video Connection / NdisIP][Stopped/Manual Start]
  <System32\DRIVERS\NdisIP.sys><Microsoft Corporation>
[Remote Access NDIS TAPI Driver / NdisTapi][Running/Manual Start]
  <System32\DRIVERS\ndistapi.sys><Microsoft Corporation>
[NDIS 用户模式 I/O 协议 / Ndisuio][Stopped/Manual Start]
  <System32\DRIVERS\ndisuio.sys><Microsoft Corporation>
[Remote Access NDIS WAN Driver / NdisWan][Running/Manual Start]
  <System32\DRIVERS\ndiswan.sys><Microsoft Corporation>
[NetBIOS Interface / NetBIOS][Running/System Start]
  <System32\DRIVERS\netbios.sys><Microsoft Corporation>
[NetDetect / NetDetect][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\netdtect.sys><Microsoft Corporation>
[New0 / New0][Running/Auto Start]
  <\??\C:\WINNT\system32\new.sys><N/A>
[nks / nks2][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\nks2.sys><N/A>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
  <system32\drivers\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\D:\Tencent\npkcrypt.sys><INCA Internet Co., Ltd.>
[IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start]
  <System32\DRIVERS\nwlnkflt.sys><Microsoft Corporation>
[IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start]
  <System32\DRIVERS\nwlnkfwd.sys><Microsoft Corporation>
[Parallel class driver / Parallel][Running/Manual Start]
  <System32\DRIVERS\parallel.sys><Microsoft Corporation>
[Parallel port driver / Parport][Running/System Start]
  <System32\DRIVERS\parport.sys><Microsoft Corporation>
[PCI Bus Driver / PCI][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\pci.sys><Microsoft Corporation>
[WAN Miniport (PPTP) / PptpMiniport][Running/Manual Start]
  <System32\DRIVERS\raspptp.sys><Microsoft Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Remote Access Auto Connection Driver / RasAcd][Running/System Start]
  <System32\DRIVERS\rasacd.sys><Microsoft Corporation>
[WAN Miniport (L2TP) / Rasl2tp][Running/Manual Start]
  <System32\DRIVERS\rasl2tp.sys><Microsoft Corporation>
[Direct Parallel / Raspti][Running/Manual Start]
  <System32\DRIVERS\raspti.sys><Microsoft Corporation>
[Microsoft Streaming Network Raw Channel Access / RCA][Stopped/Manual Start]
  <system32\drivers\RCA.sys><Microsoft Corporation>
[Digital CD Audio Playback Filter Driver / redbook][Stopped/System Start]
  <System32\DRIVERS\redbook.sys><Microsoft Corporation>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[Realtek RTL8139-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Serenum Filter Driver / serenum][Running/Manual Start]
  <System32\DRIVERS\serenum.sys><Microsoft Corporation>
[Serial port driver / Serial][Running/System Start]
  <System32\DRIVERS\serial.sys><Microsoft Corporation>
[Serial Mouse Driver / sermouse][Stopped/Manual Start]
  <System32\DRIVERS\sermouse.sys><Microsoft Corporation>
[BDA Slip De-Framer / SLIP][Stopped/Manual Start]
  <System32\DRIVERS\SLIP.sys><Microsoft Corporation>
[USB PC Camera (SNPSTD3) / SNPSTD3][Running/Manual Start]
  <system32\DRIVERS\snpstd3.sys><>
[BDA IPSink / streamip][Stopped/Manual Start]
  <System32\DRIVERS\StreamIP.sys><Microsoft Corporation>
[SVKP / SVKP][Running/Auto Start]
  <\??\C:\WINNT\system32\SVKP.sys><AntiCracking>
[Software Bus Driver / swenum][Running/Manual Start]
  <System32\DRIVERS\swenum.sys><Microsoft Corporation>
[Microsoft Kernel GS Wavetable Synthesizer / swmidi][Stopped/Manual Start]
  <system32\drivers\swmidi.sys><Microsoft Corporation>
[Microsoft System Audio Device / sysaudio][Running/Manual Start]
  <system32\drivers\sysaudio.sys><Microsoft Corporation>
[M-Systems DiskOnChip 2000 / tffsport][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\tffsport.sys><M-Systems>
[Microsoft USB Universal Host Controller Driver / uhcd][Running/Manual Start]
  <System32\DRIVERS\uhcd.sys><Microsoft Corporation>
[Microcode Update Driver / Update][Running/Manual Start]
  <System32\DRIVERS\update.sys><Microsoft Corporation>
[Microsoft USB Standard Hub Driver / usbhub][Running/Manual Start]
  <System32\DRIVERS\usbhub.sys><Microsoft Corporation>
[VgaSave / VgaSave][Running/System Start]
  <\SystemRoot\System32\drivers\vga.sys><Microsoft Corporation>
[Remote Access IP ARP Driver / Wanarp][Running/Manual Start]
  <System32\DRIVERS\wanarp.sys><Microsoft Corporation>
[Microsoft WINMM WDM Audio Compatibility Driver / wdmaud][Running/Manual Start]
  <system32\drivers\wdmaud.sys><Microsoft Corporation>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>

==================================
hongyan046 - 2007-11-13 21:59:00


==================================
浏览器加载项
[Flashget Catch Url Class]
  {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <, N/A>
[WebProtect]
  {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B} <C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, China Merchants Bank>
[IEAux Class]
  {7605CC7C-00FD-4A5F-BAFD-828342DE6279} <C:\PROGRA~1\OCINS\ieaux.dll, 中国互联网络信息中心(CNNIC)>
[ThunderMini Browser Helper]
  {8E6C1C49-F9CE-4311-9FB4-D70E8B0AEAEB} <C:\Program Files\Thunder Network\ThunderMini\ComDlls\XunLeiMiniBHO_001.dll, Thunder Networking Technologies,LTD>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[快车]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <D:\下载\网际快车\FlashGet.exe, FlashGet.com>
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation>
[全能助手广告拦截专家]
  {ED51E9A3-16C5-4236-99E0-9F093B021433} <D:\下载\新建文件夹\新建文件夹\新建文件夹2\TweakAssist\AssistIEBar.dll, 全能助手工作室>
[快车(FlashGet)]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <, N/A>
[淘宝工具条]
  {78B2F60E-AFA5-4d3d-A49E-2BFF013D9D23} <C:\PROGRA~1\Alisoft\Toolbar\Assist\yasbar.dll, Alibaba>
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINNT\system32\CMBEdit.dll, >
[XDownload Class]
  {165D83D3-359C-4783-9BF0-6FA6DC42A3F1} <C:\WINNT\Downloaded Program Files\SSDownload.dll, 北京世纪超星>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINNT\Downloaded Program Files\LegitCheckControl.DLL, Microsoft? Corporation>
[SSReaderPlug]
  {1DE88635-1C72-401E-B23B-93FA86D30F3B} <C:\WINNT\DOWNLO~1\SSREAD~1.DLL, 北京超星>
[WebActivater Control]
  {3D8F74EE-8692-4F8F-B8D2-7522E732519E} <C:\WINNT\system32\WEBACT~1.OCX, QQ>
[EditCtrl Class]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINNT\system32\aliedit\aliedit.dll, >
[ICBC Security Ctrl]
  {5AB9367B-DD7F-411D-A030-DF7DE5E17AAE} <C:\WINNT\DOWNLO~1\NETBAN~1.OCX, Industrial and Commercial Bank of China>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINNT\system32\SUBMIT~1.DLL, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Ravonline]
  {DA984A6D-508E-11D6-AA49-0050FF3C628D} <C:\WINNT\Downloaded Program Files\RsOnline.dll, Beijing Rising Tech. Co., Ltd.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINNT\DOWNLO~1\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[WangWangObj Class]
  {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} <C:\Program Files\Alisoft\WangWang\WangWangX4.dll, 阿里巴巴软件(上海)有限公司>
[JetCarNetscape Class]
  {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} <, N/A>
[&使用快车(FlashGet)下载]
  <D:\下载\网际快车\jc_link.htm, N/A>
[&使用快车(FlashGet)下载全部链接]
  <D:\下载\网际快车\jc_all.htm, N/A>
[&使用迷你迅雷下载]
  <C:\Program Files\Thunder Network\ThunderMini\Program\GetUrl.htm, N/A>
[添加到QQ表情]
  <D:\下载\新建文件夹\新建文件夹\新建文件夹2\新建文件夹\QQ\AddEmotion.htm, N/A>
hongyan046 - 2007-11-13 22:30:00
==============================
正在运行的进程
[PID: 152][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\System32\sfcfiles.dll]  [Microsoft Corporation, 5.00.2195.7038]
[PID: 184][\??\C:\WINNT\system32\csrss.exe]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\CSRSRV.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\basesrv.dll]  [Microsoft Corporation, 5.00.2195.7011]
    [C:\WINNT\system32\winsrv.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
[PID: 180][\??\C:\WINNT\system32\winlogon.exe]  [Microsoft Corporation, 5.00.2195.6997]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\NDdeApi.dll]  [Microsoft Corporation, 5.00.2195.6661]
    [C:\WINNT\system32\PROFMAP.dll]  [Microsoft Corporation, 5.00.2195.7000]
    [C:\WINNT\system32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WS2_32.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\sfc.dll]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\sfcfiles.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\USERENV.dll]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\msgina.dll]  [Microsoft Corporation, 5.00.2195.7018]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\WINSTA.dll]  [Microsoft Corporation, 5.00.2195.6701]
    [C:\WINNT\system32\WINMM.dll]  [Microsoft Corporation, 5.00.2161.1]
    [C:\WINNT\system32\setupapi.dll]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\wdmaud.drv]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\cscdll.dll]  [Microsoft Corporation, 5.00.2195.6713]
    [C:\WINNT\system32\WlNotify.dll]  [Microsoft Corporation, 5.00.2195.7000]
    [C:\WINNT\system32\certcli.dll]  [Microsoft Corporation, 5.00.2195.6619]
    [C:\WINNT\system32\ATL.DLL]  [Microsoft Corporation, 3.00.9435]
    [C:\WINNT\system32\CRYPT32.DLL]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\WinSCard.dll]  [Microsoft Corporation, 5.00.2195.6609]
    [C:\WINNT\system32\WINSPOOL.DRV]  [Microsoft Corporation, 5.00.2195.6659]
    [C:\WINNT\system32\MPR.DLL]  [Microsoft Corporation, 5.00.2195.7134]
    [C:\WINNT\system32\wzcdlg.dll]  [Microsoft Corporation, 5.00.2195.6604]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\WZCSAPI.DLL]  [Microsoft Corporation, 5.00.2195.6604]
    [C:\WINNT\system32\cscui.dll]  [Microsoft Corporation, 5.00.2195.6705]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\msacm32.drv]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MSACM32.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\msv1_0.dll]  [Microsoft Corporation, 5.00.2195.6926]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
[PID: 232][C:\WINNT\system32\services.exe]  [Microsoft Corporation, 5.00.2195.7035]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WS2_32.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\SCESRV.dll]  [Microsoft Corporation, 5.00.2195.7013]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USERENV.dll]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\umpnpmgr.dll]  [Microsoft Corporation, 5.00.2195.7069]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\eventlog.dll]  [Microsoft Corporation, 5.00.2195.7036]
    [C:\WINNT\system32\dhcpcsvc.dll]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C
hongyan046 - 2007-11-13 22:33:00



====c:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.DLL]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\dnsrslvr.dll]  [Microsoft Corporation, 5.00.2195.7102]
    [C:\WINNT\system32\lmhsvc.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\rsaenh.dll]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\shell32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\WINSTA.DLL]  [Microsoft Corporation, 5.00.2195.6701]
    [C:\WINNT\system32\dmserver.dll]  [VERITAS Software Corp., 2195.6605.297.3]
    [C:\WINNT\system32\CFGMGR32.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\Srvsvc.dll]  [Microsoft Corporation, 5.00.2195.6930]
    [C:\WINNT\system32\IMAGEHLP.dll]  [Microsoft Corporation, 5.00.2195.6613]
    [C:\WINNT\system32\WINSPOOL.DRV]  [Microsoft Corporation, 5.00.2195.6659]
    [C:\WINNT\system32\MPR.DLL]  [Microsoft Corporation, 5.00.2195.7134]
    [C:\WINNT\system32\wkssvc.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\cryptdll.dll]  [Microsoft Corporation, 5.00.2195.6607]
    [C:\WINNT\system32\cryptsvc.dll]  [Microsoft Corporation, 5.00.2195.7039]
    [C:\WINNT\system32\psbase.dll]  [Microsoft Corporation, 5.00.2195.7020]
    [C:\WINNT\system32\seclogon.dll]  [Microsoft Corporation, 5.00.2195.7003]
    [C:\WINNT\system32\trkwks.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\w32time.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\browser.dll]  [Microsoft Corporation, 5.00.2195.6866]
    [C:\WINNT\system32\ESENT.dll]  [Microsoft Corporation, 6.1.3940.31]
    [C:\WINNT\system32\wmicore.dll]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
[PID: 244][C:\WINNT\system32\lsass.exe]  [Microsoft Corporation, 5.00.2195.7011]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\LSASRV.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\cryptdll.dll]  [Microsoft Corporation, 5.00.2195.6607]
    [C:\WINNT\system32\ADVAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\SAMSRV.dll]  [Microsoft Corporation, 5.00.2195.7009]
    [C:\WINNT\system32\DNSAPI.dll]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WS2_32.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\msprivs.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\kerberos.dll]  [Microsoft Corporation, 5.00.2195.7053]
    [C:\WINNT\system32\msv1_0.dll]  [Microsoft Corporation, 5.00.2195.6926]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.DLL]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\system32\netlogon.dll]  [Microsoft Corporation, 5.00.2195.7011]
    [C:\WINNT\system32\schannel.dll]  [Microsoft Corporation, 5.00.2195.7136]
    [C:\WINNT\system32\rsabase.dll]  [Microsoft Corporation, 5.00.2195.6619]
    [C:\WINNT\system32\mpr.dll]  [Microsoft Corporation, 5.00.2195.7134]
    [C:\WINNT\system32\scecli.dll]  [Microsoft Corporation, 5.00.2195.7013]
    [C:\WINNT\system32\polagent.dll]  [Microsoft Corporation, 5.00.2195.6738]
    [C:\WINNT\system32\MFC42u.DLL]  [Microsoft Corporation, 6.00.9792.0]
    [C:\WINNT\system32\oakley.DLL]  [Microsoft Corporation, 5.00.2195.6738]
    [C:\WINNT\system32\MFC42LOC.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
hongyan046 - 2007-11-13 22:44:00
[C:\WINNT\system32\rsaenh.dll]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\dssenh.dll]  [Microsoft Corporation, 5.00.2195.6612]
[PID: 556][C:\PROGRAM FILES\RISING\RAV\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 20.0.0.9]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\ADVAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WS2_32.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\PROGRAM FILES\RISING\RAV\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
[PID: 576][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\ADVAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [c:\winnt\system32\rpcss.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [c:\winnt\system32\USERENV.dll]  [Microsoft Corporation, 5.00.2195.7002]
    [c:\winnt\system32\WS2_32.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [c:\winnt\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [c:\winnt\system32\WINSTA.dll]  [Microsoft Corporation, 5.00.2195.6701]
    [C:\WINNT\system32\rsaenh.dll]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\mswsock.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\SAMLIB.DLL]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\NETAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\OLEAUT32.DLL]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\System32\winrnr.dll]  [Microsoft Corporation, 5.00.2160.1]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\msv1_0.dll]  [Microsoft Corporation, 5.00.2195.6926]
[PID: 608][C:\WINNT\system32\spoolsv.exe]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
hongyan046 - 2007-11-13 22:50:00

    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\SPOOLSS.DLL]  [Microsoft Corporation, 5.00.2195.7054]
    [C:\WINNT\system32\WS2_32.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.DLL]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
    [C:\WINNT\system32\localspl.dll]  [Microsoft Corporation, 5.00.2195.7036]
    [C:\WINNT\system32\sfc.dll]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\sfcfiles.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\winspool.drv]  [Microsoft Corporation, 5.00.2195.6659]
    [C:\WINNT\system32\MPR.DLL]  [Microsoft Corporation, 5.00.2195.7134]
    [C:\WINNT\system32\cnbjmon.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\pjlmon.dll]  [Microsoft Corporation, 5.00.2165.1]
    [C:\WINNT\system32\tcpmon.dll]  [Microsoft Corporation, 5.00.2195.6659]
    [C:\WINNT\system32\usbmon.dll]  [Microsoft Corporation, 5.00.2195.6684]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\System32\winrnr.dll]  [Microsoft Corporation, 5.00.2160.1]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\win32spl.dll]  [Microsoft Corporation, 5.00.2195.7054]
    [C:\WINNT\system32\inetpp.dll]  [Microsoft Corporation, 5.00.2195.6707]
[PID: 636][C:\Program Files\CMBCHINA\WebProtect\WPService.exe]  [China Merchants Bank, 1, 0, 0, 1]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\Program Files\CMBCHINA\WebProtect\WebProtectPlus.dll]  [China Merchants Bank, 1, 0, 0, 1]
    [C:\WINNT\system32\PSAPI.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\rsaenh.dll]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\USERENV.dll]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\WININET.dll]  [Microsoft Corporation, 6.00.2800.1601]
    [C:\WINNT\system32\wsock32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WS2_32.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\RASAPI32.DLL]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\sensapi.dll]  [Microsoft Corporation, 5.00.2195.6627]
    [C:\WINNT\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2800.1601]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\SAMLIB.DLL]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\NETAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
hongyan046 - 2007-11-13 22:52:00

    [C:\WINNT\System32\winrnr.dll]  [Microsoft Corporation, 5.00.2160.1]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 652][C:\WINNT\System32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\ADVAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\System32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\System32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [c:\winnt\system32\es.dll]  [Microsoft Corporation, 2000.2.3529.0]
    [c:\winnt\system32\TxfAux.Dll]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [c:\winnt\system32\ntmssvc.dll]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\System32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [c:\winnt\system32\sens.dll]  [Microsoft Corporation, 5.00.2195.6627]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\System32\WS2_32.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\System32\COMSVCS.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\System32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\System32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\System32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\System32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\System32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\System32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\System32\MSDTCPRX.dll]  [Microsoft Corporation, 2000.2.3535.0]
    [C:\WINNT\System32\MTXCLU.DLL]  [Microsoft Corporation, 2000.2.3535.0]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\System32\CLUSAPI.DLL]  [Microsoft Corporation, 5.00.2195.6683]
    [C:\WINNT\System32\RESUTILS.DLL]  [Microsoft Corporation, 5.00.2195.6702]
    [C:\WINNT\System32\USERENV.dll]  [Microsoft Corporation, 5.00.2195.7002]
    [c:\winnt\system32\tapisrv.dll]  [Microsoft Corporation, 5.00.2195.7057]
    [c:\winnt\system32\rasmans.dll]  [Microsoft Corporation, 5.00.2195.7099]
    [c:\winnt\system32\rtutils.dll]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [c:\winnt\system32\netcfgx.dll]  [Microsoft Corporation, 5.00.2195.7003]
    [c:\winnt\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [c:\winnt\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [c:\winnt\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [c:\winnt\system32\RASDLG.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [c:\winnt\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [c:\winnt\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [c:\winnt\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [c:\winnt\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\System32\rastapi.dll]  [Microsoft Corporation, 5.00.2195.6604]
    [C:\WINNT\System32\unimdm.tsp]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\uniplat.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\CFGMGR32.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\System32\NTMARTA.DLL]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\System32\WINSPOOL.DRV]  [Microsoft Corporation, 5.00.2195.6659]
    [C:\WINNT\system32\MPR.DLL]  [Microsoft Corporation, 5.00.2195.7134]
    [c:\winnt\system32\netman.dll]  [Microsoft Corporation, 5.00.2195.7061]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\System32\kmddsp.tsp]  [Microsoft Corporation, 5.00.2150.1]
    [C:\WINNT\System32\ndptsp.tsp]  [Microsoft Corporation, 5.00.2143.1]
    [C:\WINNT\System32\ipconf.tsp]  [Microsoft Corporation, 5.00.2143.1]
    [C:\WINNT\System32\h323.tsp]  [Microsoft Corporation, 5.00.2195.6901]
    [C:\WINNT\System32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\System32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\System32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\system32\NETSHELL.dll]  [Microsoft Corporation, 5.00.2195.6604]
    [C:\WINNT\System32\WMI.dll]  [Microsoft Corporation, 5.00.2191.1]
    [C:\WINNT\System32\rasppp.dll]  [Microsoft Corporation, 5.00.2195.6626]
    [C:\WINNT\System32\ntlsapi.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\raschap.dll]  [Microsoft Corporation, 5.00.2195.6663]
    [C:\WINNT\System32\ATL.DLL]  [Microsoft Corporation, 3.00.9435]
    [C:\WINNT\System32\rastls.dll]  [Microsoft Corporation, 5.00.2195.6680]
    [C:\WINNT\System32\CRYPTUI.dll]  [Microsoft Corporation, 5.131.2195.6824]
    [C:\WINNT\System32\WINTRUST.dll]  [Microsoft Corporation, 5.131.2195.6824]
    [C:\WINNT\system32\IMAGEHLP.dll]  [Microsoft Corporation, 5.00.2195.6613]
    [C:\WINNT\System32\SCHANNEL.dll]  [Microsoft Corporation, 5.00.2195.7136]
    [C:\WINNT\System32\WinSCard.dll]  [Microsoft Corporation, 5.00.2195.6609]
    [C:\WINNT\System32\NTMSDBA.dll]  [Microsoft Corporation, 5.00.2195.6655]
[PID: 732][C:\WINNT\system32\MSTask.exe]  [Microsoft Corporation, 4.71.2195.6972]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WS2_32.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
hongyan046 - 2007-11-13 22:54:00

    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\USERENV.dll]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\mswsock.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\OLEAUT32.DLL]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\System32\winrnr.dll]  [Microsoft Corporation, 5.00.2160.1]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
    [C:\WINNT\system32\MSIDLE.DLL]  [Microsoft Corporation, 5.00.2920.0000]
[PID: 844][C:\WINNT\system32\stisvc.exe]  [Microsoft Corporation, 5.00.2195.6656]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\SETUPAPI.dll]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\STI.dll]  [Microsoft Corporation, 5.00.2195.6656]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\dsnpstd3.dll]  [, 1, 1, 0, 1]
[PID: 908][C:\WINNT\System32\WBEM\WinMgmt.exe]  [Microsoft Corporation, 1.50.1085.0100]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\System32\WBEM\wbemcomn.dll]  [Microsoft Corporation, 1.50.1085.0100]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\SETUPAPI.dll]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\WS2_32.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
[PID: 928][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\ADVAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [c:\winnt\system32\wuauserv.dll]  [Microsoft Corporation, 5.4.3630.2554 built by: lab04_n]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\wuaueng.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\USERENV.dll]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\WS2_32.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ESENT.dll]  [Microsoft Corporation, 6.1.3940.31]
    [C:\WINNT\system32\WTSAPI32.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\UTILDLL.dll]  [Microsoft Corporation, 5.00.2195.6701]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\SETUPAPI.dll]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\WINSTA.dll]  [Microsoft Corporation, 5.00.2195.6701]
    [C:\WINNT\system32\REGAPI.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\WINSPOOL.DRV]  [Microsoft Corporation, 5.00.2195.6659]
    [C:\WINNT\system32\MPR.DLL]  [Microsoft Corporation, 5.00.2195.7134]
    [C:\WINNT\system32\IPHLPAPI.DLL]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\system32\WINHTTP.dll]  [Microsoft Corporation, 5.1.2600.1557 (xpsp2_gdr.040517-1325)]
    [C:\WINNT\system32\WINTRUST.dll]  [Microsoft Corporation, 5.131.2195.6824]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\IMAGEHLP.dll]  [Microsoft Corporation, 5.00.2195.6613]
hongyan046 - 2007-11-13 22:56:00

    [C:\WINNT\system32\Cabinet.dll]  [Microsoft Corporation, 5.00.2195.7000]
    [C:\WINNT\system32\mspatcha.dll]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\sfc.dll]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\sfcfiles.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\System32\es.dll]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\System32\TxfAux.Dll]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\msxml3.dll]  [Microsoft Corporation, 8.90.1101.0]
    [C:\WINNT\System32\wbem\wbemprox.dll]  [Microsoft Corporation, 1.50.1085.0100]
    [C:\WINNT\System32\wbem\wbemcomn.dll]  [Microsoft Corporation, 1.50.1085.0100]
    [C:\WINNT\System32\wbem\wbemsvc.dll]  [Microsoft Corporation, 1.50.1085.0007]
    [C:\WINNT\System32\wbem\fastprox.dll]  [Microsoft Corporation, 1.50.1085.0100]
    [C:\WINNT\system32\rsaenh.dll]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\System32\winrnr.dll]  [Microsoft Corporation, 5.00.2160.1]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
    [C:\WINNT\system32\advpack.dll]  [Microsoft Corporation, 5.00.3502.6601]
    [C:\WINNT\system32\msi.dll]  [Microsoft Corporation, 3.1.4000.4033]
    [C:\WINNT\system32\dssbase.dll]  [Microsoft Corporation, 5.00.2195.6612]
    [C:\WINNT\System32\qmgrprxy.dll]  [Microsoft Corporation, 6.6.2600.1596 (xpsp2.040919-1003)]
    [C:\WINNT\system32\bitsprx3.dll]  [Microsoft Corporation, 6.6.2600.1596 (xpsp2.040919-1003)]
    [C:\WINNT\system32\bitsprx2.dll]  [Microsoft Corporation, 6.6.2600.1596 (xpsp2.040919-1003)]
    [C:\WINNT\system32\msv1_0.dll]  [Microsoft Corporation, 5.00.2195.6926]
    [C:\WINNT\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\WINNT\system32\schannel.dll]  [Microsoft Corporation, 5.00.2195.7136]
    [C:\WINNT\system32\dssenh.dll]  [Microsoft Corporation, 5.00.2195.6612]
[PID: 1068][C:\WINNT\Explorer.EXE]  [Microsoft Corporation, 5.00.3700.6690]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\ADVAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\GDI32.DLL]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\shim.dll]  [Microsoft Corporation, 5.00.2195.6717]
    [C:\WINNT\AppPatch\AcLayers.DLL]  [Microsoft Corporation, 5.00.2195.6717]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\cscui.dll]  [Microsoft Corporation, 5.00.2195.6705]
    [C:\WINNT\system32\CSCDLL.DLL]  [Microsoft Corporation, 5.00.2195.6713]
    [C:\WINNT\system32\MSI.DLL]  [Microsoft Corporation, 3.1.4000.4033]
    [C:\WINNT\system32\SHDOCVW.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\browseui.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\LINKINFO.DLL]  [Microsoft Corporation, 5.00.2195.7069]
    [C:\WINNT\system32\ntshrui.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ATL.DLL]  [Microsoft Corporation, 3.00.9435]
    [C:\WINNT\system32\NETAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WS2_32.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\mydocs.dll]  [Microsoft Corporation, 5.00.3502.6601]
    [C:\WINNT\system32\MPR.DLL]  [Microsoft Corporation, 5.00.2195.7134]
    [C:\WINNT\System32\ntlanman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\System32\NETUI0.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\NETUI1.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\NETSHELL.dll]  [Microsoft Corporation, 5.00.2195.6604]
    [C:\WINNT\system32\stobject.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\BATMETER.DLL]  [Microsoft Corporation, 5.00.3502.6601]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\POWRPROF.DLL]  [Microsoft Corporation, 5.00.3502.6601]
    [C:\WINNT\system32\WINMM.DLL]  [Microsoft Corporation, 5.00.2161.1]
    [C:\WINNT\system32\webcheck.dll]  [Microsoft Corporation, 5.00.3502.6601]
    [C:\WINNT\system32\wdmaud.drv]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
    [C:\WINNT\system32\msacm32.drv]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MSACM32.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\WINNT\system32\WININET.dll]  [Microsoft Corporation, 6.00.2800.1601]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\WINNT\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.16]
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\TudouUpload.dll]  [www.Tudou.com, 1.1.0.0]
    [C:\WINNT\system32\WINTRUST.dll]  [Microsoft Corporation, 5.131.2195.6824]
    [C:\WINNT\system32\IMAGEHLP.dll]  [Microsoft Corporation, 5.00.2195.6613]
    [C:\WINNT\system32\shdoclc.dll]  [Microsoft Corporation, 5.00.3700.6668]
    [C:\WINNT\system32\browselc.dll]  [Microsoft Corporation, 5.00.3700.6661]
    [C:\Program Files\Thunder Network\ThunderMini\ComDlls\XunLeiMiniBHO_001.dll]  [Thunder Networking Technologies,LTD, 2, 0, 0, 1]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.05.2144.0]
    [C:\WINNT\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2800.1601]
    [C:\WINNT\system32\msadp32.acm]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\CfgMgr32.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\actxprxy.dll]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\WINNT\System32\docprop2.dll]  [Microsoft Corporation, 5.00.2178.1]
hongyan046 - 2007-11-13 22:58:00

    [C:\WINNT\System32\MSVFW32.DLL]  [Microsoft Corporation, 5.00.2195.6612]
    [C:\WINNT\System32\AVIFIL32.DLL]  [Microsoft Corporation, 5.00.2195.6612]
    [C:\WINNT\system32\faxshell.dll]  [Microsoft Corporation, 5.00.2134.1]
[PID: 1096][C:\Program Files\rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 20.0.0.20]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\Program Files\rising\Rav\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [C:\Program Files\rising\Rav\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [C:\Program Files\rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\Program Files\rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]
    [C:\Program Files\rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.10]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
[PID: 748][C:\Program Files\OCINS\idnsvr.exe]  [中国互联网信息中心(CNNIC), 2, 6, 0, 1]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\WS2_32.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\OLEAUT32.DLL]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\cscui.dll]  [Microsoft Corporation, 5.00.2195.6705]
    [C:\WINNT\system32\CSCDLL.DLL]  [Microsoft Corporation, 5.00.2195.6713]
    [C:\Program Files\OCINS\idnsvr.dll]  [中国互联网信息中心(CNNIC), 2, 6, 0, 2]
    [C:\WINNT\system32\WININET.dll]  [Microsoft Corporation, 6.00.2800.1601]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\SETUPAPI.dll]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\NETAPI32.dll]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\System32\winrnr.dll]  [Microsoft Corporation, 5.00.2160.1]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
[PID: 1248][C:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 4.0.0.18]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\MFC42.DLL]  [Microsoft Corporation, 6.00.9586.0]
    [C:\WINNT\system32\MSVCRT.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
hongyan046 - 2007-11-13 22:58:00

    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\MFC42LOC.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\WINNT\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
[PID: 1272][C:\WINNT\system32\Internat.exe]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\KERNEL32.DLL]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\USER32.DLL]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\MSVCRT.DLL]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\SHELL32.DLL]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
[PID: 1312][D:\下载\新建文件夹\MagicSet\DS.EXE]  [Super Rabbit Software, 1.50]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\KERNEL32.DLL]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9690]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\vb6chs.dll]  [Microsoft Corporation, 6.00.8988]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
[PID: 1116][C:\WINNT\System32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\ADVAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\OLE32.DLL]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\System32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\System32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [c:\winnt\system32\qmgr.dll]  [Microsoft Corporation, 6.6.2600.1596 (xpsp2.040919-1003)]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [c:\winnt\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [c:\winnt\system32\WS2_32.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [c:\winnt\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [c:\winnt\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [c:\winnt\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [c:\winnt\system32\SAMLIB.DLL]  [Microsoft Corporation, 5.00.2195.6944]
    [c:\winnt\system32\NETAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7108]
    [c:\winnt\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [c:\winnt\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [c:\winnt\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [c:\winnt\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\OLEAUT32.DLL]  [Microsoft Corporation, 2.40.4531]
    [c:\winnt\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
hongyan046 - 2007-11-13 22:59:00

    [c:\winnt\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [c:\winnt\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [c:\winnt\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [c:\winnt\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [c:\winnt\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [c:\winnt\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [c:\winnt\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [c:\winnt\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\system32\MPR.dll]  [Microsoft Corporation, 5.00.2195.7134]
    [c:\winnt\system32\SHFOLDER.dll]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [c:\winnt\system32\WTSAPI32.dll]  [Microsoft Corporation, 5.00.2134.1]
    [c:\winnt\system32\UTILDLL.dll]  [Microsoft Corporation, 5.00.2195.6701]
    [c:\winnt\system32\WINSTA.dll]  [Microsoft Corporation, 5.00.2195.6701]
    [c:\winnt\system32\REGAPI.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [c:\winnt\system32\WINHTTP.dll]  [Microsoft Corporation, 5.1.2600.1557 (xpsp2_gdr.040517-1325)]
    [C:\WINNT\System32\NTMARTA.DLL]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\System32\WINSPOOL.DRV]  [Microsoft Corporation, 5.00.2195.6659]
    [C:\WINNT\System32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\System32\es.dll]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\System32\TxfAux.Dll]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\msv1_0.dll]  [Microsoft Corporation, 5.00.2195.6926]
    [C:\WINNT\System32\qmgrprxy.dll]  [Microsoft Corporation, 6.6.2600.1596 (xpsp2.040919-1003)]
    [C:\WINNT\system32\bitsprx3.dll]  [Microsoft Corporation, 6.6.2600.1596 (xpsp2.040919-1003)]
    [C:\WINNT\system32\bitsprx2.dll]  [Microsoft Corporation, 6.6.2600.1596 (xpsp2.040919-1003)]
[PID: 1456][C:\WINNT\system32\wuauclt.exe]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\ADVAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\SHLWAPI.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\wucltui.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\WINNT\system32\COMCTL32.dll]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHELL32.dll]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\MSIMG32.dll]  [Microsoft Corporation, 5.00.2180.1]
    [C:\WINNT\system32\Cabinet.dll]  [Microsoft Corporation, 5.00.2195.7000]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\WINTRUST.dll]  [Microsoft Corporation, 5.131.2195.6824]
    [C:\WINNT\system32\IMAGEHLP.dll]  [Microsoft Corporation, 5.00.2195.6613]
    [C:\WINNT\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\WINNT\system32\wucltui.dll.mui]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
[PID: 2088][C:\Program Files\Thunder Network\ThunderMini\program\ThunderMini.exe]  [Thunder Networking Technologies,LTD, 2, 0, 0, 29]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\KERNEL32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\comdlg32.dll]  [Microsoft Corporation, 5.00.3700.6693]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHELL32.DLL]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
hongyan046 - 2007-11-13 23:00:00

    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\Program Files\Thunder Network\ThunderMini\program\download_interface.dll]  [N/A, ]
    [C:\WINNT\system32\WS2_32.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.05.2144.0]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\SAMLIB.DLL]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\NETAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\WLDAP32.DLL]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\RASAPI32.dll]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\system32\WININET.dll]  [Microsoft Corporation, 6.00.2800.1601]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\System32\winrnr.dll]  [Microsoft Corporation, 5.00.2160.1]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
    [C:\Program Files\Thunder Network\ThunderMini\program\UpdateDownload.dll]  [Thunder Networking Technologies,LTD, 1, 0, 1, 6]
    [C:\Program Files\Thunder Network\ThunderMini\Components\InMedia\iEmbedShell.dll]  [　, 1, 0, 0, 6]
    [C:\Program Files\Thunder Network\ThunderMini\Components\InMedia\iEmbed.dll]  [　, 2, 1, 0, 30]
    [C:\WINNT\system32\mlang.dll]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\WINNT\system32\asycfilt.dll]  [Microsoft Corporation, 2.40.4522]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
    [C:\WINNT\system32\cscui.dll]  [Microsoft Corporation, 5.00.2195.6705]
    [C:\WINNT\system32\CSCDLL.DLL]  [Microsoft Corporation, 5.00.2195.6713]
    [C:\WINNT\system32\ntshrui.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ATL.DLL]  [Microsoft Corporation, 3.00.9435]
    [C:\WINNT\system32\browseui.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\SHDOCVW.dll]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2800.1601]
[PID: 2700][E:\电影\新建文件夹 (4)\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\WINNT\system32\ntdll.dll]  [Microsoft Corporation, 5.00.2195.7006]
    [C:\WINNT\system32\kernel32.dll]  [Microsoft Corporation, 5.00.2195.7135]
    [C:\WINNT\system32\USER32.dll]  [Microsoft Corporation, 5.00.2195.7133]
    [C:\WINNT\system32\GDI32.dll]  [Microsoft Corporation, 5.00.2195.7138]
    [C:\WINNT\system32\comdlg32.dll]  [Microsoft Corporation, 5.00.3700.6693]
    [C:\WINNT\system32\SHLWAPI.DLL]  [Microsoft Corporation, 6.00.2800.1914 (xpsp2.070817-1242)]
    [C:\WINNT\system32\msvcrt.dll]  [Microsoft Corporation, 6.10.9844.0]
    [C:\WINNT\system32\ADVAPI32.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\RPCRT4.dll]  [Microsoft Corporation, 5.00.2195.7090]
    [C:\WINNT\system32\Secur32.dll]  [Microsoft Corporation, 5.00.2195.6695]
    [C:\WINNT\system32\COMCTL32.DLL]  [Microsoft Corporation, 5.81]
    [C:\WINNT\system32\SHELL32.DLL]  [Microsoft Corporation, 5.00.3900.7105]
    [C:\WINNT\system32\WINSPOOL.DRV]  [Microsoft Corporation, 5.00.2195.6659]
    [C:\WINNT\system32\MPR.DLL]  [Microsoft Corporation, 5.00.2195.7134]
    [C:\WINNT\system32\oledlg.dll]  [Microsoft Corporation, 1.0]
    [C:\WINNT\system32\ole32.dll]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\OLEAUT32.dll]  [Microsoft Corporation, 2.40.4531]
    [C:\WINNT\system32\VERSION.dll]  [Microsoft Corporation, 5.00.2195.6623]
    [C:\WINNT\system32\LZ32.DLL]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\CRYPT32.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\MSASN1.dll]  [Microsoft Corporation, 5.00.2195.6905]
    [C:\WINNT\system32\WINMM.dll]  [Microsoft Corporation, 5.00.2161.1]
    [C:\WINNT\system32\WS2_32.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\WS2HELP.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\WININET.dll]  [Microsoft Corporation, 6.00.2800.1601]
    [C:\WINNT\system32\IMM32.DLL]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\LPK.DLL]  [Microsoft Corporation, 5.00.2195.6692]
    [C:\WINNT\system32\USP10.dll]  [Microsoft Corporation, 1.0325.2195.6692]
    [C:\WINNT\system32\RICHED20.DLL]  [Microsoft Corporation, 5.30.23.1227]
    [C:\WINNT\system32\NTMARTA.DLL]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\WLDAP32.dll]  [Microsoft Corporation, 5.00.2195.7017]
    [C:\WINNT\system32\SAMLIB.dll]  [Microsoft Corporation, 5.00.2195.6944]
    [C:\WINNT\system32\NTDSAPI.dll]  [Microsoft Corporation, 5.00.2195.6666]
    [C:\WINNT\system32\DNSAPI.DLL]  [Microsoft Corporation, 5.00.2195.7100]
    [C:\WINNT\system32\WSOCK32.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\NETAPI32.DLL]  [Microsoft Corporation, 5.00.2195.7108]
    [C:\WINNT\system32\NETRAP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\INDICDLL.dll]  [Microsoft Corporation, 5.00.2920.0000]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 12]
    [C:\WINNT\system32\sfc.dll]  [Microsoft Corporation, 5.00.2195.6673]
    [C:\WINNT\system32\sfcfiles.dll]  [Microsoft Corporation, 5.00.2195.7038]
    [C:\WINNT\system32\wintrust.dll]  [Microsoft Corporation, 5.131.2195.6824]
hongyan046 - 2007-11-13 23:01:00

    [C:\WINNT\system32\IMAGEHLP.dll]  [Microsoft Corporation, 5.00.2195.6613]
    [C:\WINNT\system32\RASAPI32.DLL]  [Microsoft Corporation, 5.00.2195.6920]
    [C:\WINNT\system32\rasman.dll]  [Microsoft Corporation, 5.00.2195.6824]
    [C:\WINNT\system32\TAPI32.dll]  [Microsoft Corporation, 5.00.2195.6664]
    [C:\WINNT\system32\RTUTILS.DLL]  [Microsoft Corporation, 5.00.2168.1]
    [C:\WINNT\system32\sensapi.dll]  [Microsoft Corporation, 5.00.2195.6627]
    [C:\WINNT\system32\USERENV.DLL]  [Microsoft Corporation, 5.00.2195.7002]
    [C:\WINNT\system32\urlmon.dll]  [Microsoft Corporation, 6.00.2800.1601]
    [C:\WINNT\System32\rnr20.dll]  [Microsoft Corporation, 5.00.2195.6603]
    [C:\WINNT\system32\iphlpapi.dll]  [Microsoft Corporation, 5.00.2195.7097]
    [C:\WINNT\system32\ICMP.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\MPRAPI.dll]  [Microsoft Corporation, 5.00.2181.1]
    [C:\WINNT\system32\ACTIVEDS.DLL]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\ADSLDPC.DLL]  [Microsoft Corporation, 5.00.2195.6993]
    [C:\WINNT\system32\SETUPAPI.DLL]  [Microsoft Corporation, 5.00.2195.6622]
    [C:\WINNT\system32\DHCPCSVC.DLL]  [Microsoft Corporation, 5.00.2195.7085]
    [C:\WINNT\System32\winrnr.dll]  [Microsoft Corporation, 5.00.2160.1]
    [C:\WINNT\system32\rasadhlp.dll]  [Microsoft Corporation, 5.00.2195.7098]
    [C:\WINNT\system32\msafd.dll]  [Microsoft Corporation, 5.00.2195.6602]
    [C:\WINNT\System32\wshtcpip.dll]  [Microsoft Corporation, 5.00.2195.6601]
    [C:\WINNT\system32\Winsta.dll]  [Microsoft Corporation, 5.00.2195.6701]
    [C:\WINNT\system32\utildll.dll]  [Microsoft Corporation, 5.00.2195.6701]
    [C:\WINNT\system32\rsaenh.dll]  [Microsoft Corporation, 5.00.2195.6611]
    [C:\WINNT\system32\cryptnet.dll]  [Microsoft Corporation, 5.131.2195.6926]
    [C:\WINNT\system32\PSAPI.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\WINHTTP.dll]  [Microsoft Corporation, 5.1.2600.1557 (xpsp2_gdr.040517-1325)]
    [C:\WINNT\System32\asfsipc.dll]  [Microsoft Corporation, 1.1.00.3917]
    [C:\WINNT\system32\MSISIP.DLL]  [Microsoft Corporation, 3.1.4000.1823]
    [C:\WINNT\system32\wshext.dll]  [Microsoft Corporation, 5.6.0.6626]
    [C:\WINNT\system32\wshCHS.DLL]  [Microsoft Corporation, 5.6.0.6626]
    [C:\WINNT\system32\CLBCATQ.DLL]  [Microsoft Corporation, 2000.2.3529.0]
    [C:\WINNT\system32\LINKINFO.DLL]  [Microsoft Corporation, 5.00.2195.7069]
    [C:\WINNT\system32\ntshrui.dll]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\ATL.DLL]  [Microsoft Corporation, 3.00.9435]
    [C:\WINNT\system32\cscui.dll]  [Microsoft Corporation, 5.00.2195.6705]
    [C:\WINNT\system32\CSCDLL.DLL]  [Microsoft Corporation, 5.00.2195.6713]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
hongyan046 - 2007-11-13 23:03:00

==================================
Winsock 提供者
MSAFD Tcpip [TCP/IP]
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD Tcpip [UDP/IP]
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD Tcpip [RAW/IP]
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
RSVP UDP Service Provider
    C:\WINNT\system32\rsvpsp.dll(Microsoft Corporation, Microsoft Windows Rsvp 1.0 Service Provider)
RSVP TCP Service Provider
    C:\WINNT\system32\rsvpsp.dll(Microsoft Corporation, Microsoft Windows Rsvp 1.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{C2C444B7-C8BC-43E8-8E41-B92B43EC04BB}] SEQPACKET 3
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{C2C444B7-C8BC-43E8-8E41-B92B43EC04BB}] DATAGRAM 3
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{5CDEA571-8E85-40D2-B9C6-5F8CD9B7DC20}] SEQPACKET 0
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{5CDEA571-8E85-40D2-B9C6-5F8CD9B7DC20}] DATAGRAM 0
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{EE5086E3-94B8-47C0-89A9-4EB68C2BE64A}] SEQPACKET 1
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{EE5086E3-94B8-47C0-89A9-4EB68C2BE64A}] DATAGRAM 1
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{F57F1890-3872-4A14-A892-B4808CE04882}] SEQPACKET 2
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)
MSAFD NetBIOS [\Device\NetBT_Tcpip_{F57F1890-3872-4A14-A892-B4808CE04882}] DATAGRAM 2
    C:\WINNT\system32\msafd.dll(Microsoft Corporation, Microsoft Windows Sockets 2.0 Service Provider)

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 652, C:\WINNT\SYSTEM32\SVCHOST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 844, C:\WINNT\SYSTEM32\STISVC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 908, C:\WINNT\SYSTEM32\WBEM\WINMGMT.EXE]
特殊特权被允许： SeSystemtimePrivilege [PID = 908, C:\WINNT\SYSTEM32\WBEM\WINMGMT.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 928, C:\WINNT\SYSTEM32\SVCHOST.EXE]
特殊特权被允许： SeSystemtimePrivilege [PID = 928, C:\WINNT\SYSTEM32\SVCHOST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1068, C:\WINNT\EXPLORER.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1248, C:\PROGRAM FILES\RISING\ANTISPYWARE\RUNIEP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1272, C:\WINNT\SYSTEM32\INTERNAT.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1312, D:\下载\新建文件夹\MAGICSET\DS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1116, C:\WINNT\SYSTEM32\SVCHOST.EXE]
特殊特权被允许： SeSystemtimePrivilege [PID = 1116, C:\WINNT\SYSTEM32\SVCHOST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2088, C:\PROGRAM FILES\THUNDER NETWORK\THUNDERMINI\PROGRAM\THUNDERMINI.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================
1
查看完整版本: 我的电脑中了病毒,请帮我看看扫描日志
© 2000 - 2026 Rising Corp. Ltd.