[CODE] 2008-06-09,104955 System Repair Engineer 2.5.16.900 Smallfrogs (httpwww.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能 以下内容被选中： 所有的启动项目（包括注册表、启动文件夹、服务等） 浏览器加载项 正在运行的进程（包括进程模块信息） 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 进程特权扫描 启动项目 注册表 [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun] ctfmon.exeCWINDOWSsystem32ctfmon.exe [(Verified)Microsoft Windows Publisher] swgCProgram FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe [(Verified)Google Inc] [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun] switchcwindowssystem32壁纸自动换.exe [] High Definition Audio 属性页快捷方式HDAShCut.exe [(Verified)Microsoft Windows XP Publisher] RavTaskCProgram FilesRisingRavRavTask.exe -system [(Verified)Beijing Rising Science and Technology Corporation Limited] RfwMainCProgram FilesRisingRfwrfwmain.exe -Startup [(Verified)BEIJING RISING SCIENCE AND TECHNOLOGY CORPORATION LIMITED] runeipCProgram FilesRisingAntiSpywareruniep.exe startup [Beijing Rising Technology Co., Ltd.] Grid ServiceCProgram FilesGridServicepeer.exe -n Grid [Mercury] TkBellExeCProgram FilesCommon FilesRealUpdate_OBrealsched.exe -osboot [(Verified)RealNetworks, Inc.] KernelFaultCheck%systemroot%system32dumprep 0 -k [NA] QuickTime TaskCProgram FilesQuickTimeqttask.exe -atboottime [Apple Inc.] iTunesHelperCProgram FilesiTunesiTunesHelper.exe [(Verified)Apple Inc.] [HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon] shellExplorer.exe [(Verified)Microsoft Windows Component Publisher] UserinitCWINDOWSsystem32userinit.exe, [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWindows] AppInit_DLLsieprot.dll [Beijing Rising Technology Co., Ltd.] [HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogon] UIHostlogonui.exe [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad] WPDShServiceObjCWINDOWSsystem32WPDShServiceObj.dll [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonNotifyWgaLogon] WinlogonNotify WgaLogonWgaLogon.dll [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] IE7 Uninstall StubCWINDOWSsystem32ieudinit.exe [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] Outlook Express%systemroot%system32shmgrate.exe OCInstallUserConfigOE [NA] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] Themes Setup%SystemRoot%system32regsvr32.exe s n iUserInstall %SystemRoot%system32themeui.dll [NA] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] Microsoft Outlook Express 6%ProgramFiles%Outlook Expresssetup50.exe APPOE CALLERWINNT user install [NA] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] NetMeeting 3.01rundll32.exe advpack.dll,LaunchINFSection CWINDOWSINFmsnetmtg.inf,NetMtg.Install.PerUser.NT [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{5945c046-1e7d-11d1-bc44-00c04fd912be}] Windows Messenger 4.7rundll32.exe advpack.dll,LaunchINFSection CWINDOWSINFmsmsgs.inf,BLC.QuietInstall.PerUser [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{6BF52A52-394A-11d3-B153-00C04F79FAA6}] Microsoft Windows Media Playerrundll32.exe advpack.dll,LaunchINFSection CWINDOWSINFwmp11.inf,PerUserStub [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{7790769C-0471-11d2-AF11-00C04FA35D02}] 通讯簿 6%ProgramFiles%Outlook Expresssetup50.exe APPWAB CALLERWINNT user install [NA] [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{89B4C1CD-B018-4511-B0A1-5476DBF70820}] NACWINDOWSsystem32Rundll32.exe CWINDOWSsystem32mscories.dll,Install [(Verified)Microsoft Corporation] ================================== 启动文件夹 [STTV自动升级] CDocuments and SettingsAll Users「开始」菜单程序启动STTV自动升级.lnk -- CProgram FilesSTTVSTTVupdate.exe [NA]N [self] CDocuments and SettingsAll Users「开始」菜单程序启动self.bat -- [NA]N [腾讯QQ] CDocuments and SettingsAdministrator「开始」菜单程序启动腾讯QQ.lnk -- DPROGRA~1QQ2007QQ.exe [TENCENT]N ================================== 服务 [Apple Mobile Device Apple Mobile Device][RunningAuto Start] CProgram FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exeApple, Inc. [Ati HotKey Poller Ati HotKey Poller][RunningAuto Start] CWINDOWSsystem32Ati2evxx.exeATI Technologies Inc. [ATI Smart ATI Smart][StoppedAuto Start] CWINDOWSsystem32ati2sgag.exe [Bonjour 服务 Bonjour Service][RunningAuto Start] CProgram FilesBonjourmDNSResponder.exeApple Inc. [Contrl Center of Storm Media ccosm][RunningAuto Start] CProgram FilesStormIIstormliv.exe asservice北京暴风网际科技有限公司 [Google Updater Service gusvc][StoppedManual Start] CProgram FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exeGoogle [Human Interface Device Access HidServ][StoppedDisabled] CWINDOWSSystem32svchost.exe -k netsvcs--%SystemRoot%System32hidserv.dllNA [iPod 服务 iPod Service][RunningManual Start] CProgram FilesiPodbiniPodService.exeApple Inc. [P4P Service P4P Service][RunningAuto Start] CProgram FilesCommon FilesSogou PXPp2psvr.exeSohu.com Inc. [Rising Proxy Service RfwProxySrv][RunningAuto Start] cprogram filesrisingrfwrfwproxy.exeBeijing Rising Technology Co., Ltd. [Rising Personal Firewall Service RfwService][RunningAuto Start] cprogram filesrisingrfwrfwsrv.exeBeijing Rising Technology Co., Ltd. [Rising Process Communication Center RsCCenter][RunningAuto Start] CProgram FilesRisingRavCCenter.exeBeijing Rising Technology Co., Ltd. [Rising RealTime Monitor RsRavMon][StoppedAuto Start] CPROGRAM FILESRISINGRAVRavmond.exeBeijing Rising Technology Co., Ltd. [ServiceLayer ServiceLayer][StoppedManual Start] CProgram FilesPC Connectivity SolutionServiceLayer.exeNokia. ================================== 驱动程序 [Intel(r) 82801 Audio Driver Install Service (WDM) ac97intc][StoppedManual Start] system32driversac97intc.sysIntel Corporation [AliIde AliIde][RunningBoot Start] SystemRootSystem32DRIVERSaliide.sysAcer Laboratories Inc. [AMD K8 Processor Driver AmdK8][StoppedManual Start] System32DRIVERSamdk8.sysAdvanced Micro Devices [ati2mtag ati2mtag][RunningManual Start] system32DRIVERSati2mtag.sysATI Technologies Inc. [CmdIde CmdIde][RunningBoot Start] SystemRootSystem32DRIVERScmdide.sysCMD Technology, Inc. [Intel(R) PRO Network Connection Driver E100B][RunningManual Start] system32DRIVERSe100b325.sysIntel Corporation [e2eCap - WDM Video Capture E2ECAP][RunningAuto Start] system32DRIVERSe2ecap.syse2eSoft [EagleNT EagleNT][StoppedManual Start] CWINDOWSsystem32driversEagleNT.sysNA [VIA PCI 10100Mb Fast Ethernet Adapter NT Driver FETNDIS][StoppedManual Start] system32DRIVERSfetnd5.sysVIA Technologies, Inc. [GEARAspiWDM GEARAspiWDM][RunningManual Start] System32DriversGEARAspiWDM.sysGEAR Software Inc. [Microsoft 用于 High Definition Audio 服务的 UAA 功能驱动程序 HdAudAddService][RunningManual Start] system32driversHdAudio.sysWindows (R) Server 2003 DDK provider [Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 HDAudBus][RunningManual Start] system32DRIVERSHDAudBus.sysWindows (R) Server 2003 DDK provider [HookCont HookCont][RunningSystem Start] SystemRootsystem32driversHookCont.sysBeijing Rising Technology Co., Ltd [HookNtos HookNtos][RunningSystem Start] SystemRootsystem32driversHookNtos.sysBeijing Rising Technology Co., Ltd [HookReg HookReg][RunningSystem Start] SystemRootsystem32driversHookReg.sysBeijing Rising Technology Co., Ltd [HookSys HookSys][RunningSystem Start] SystemRootsystem32driversHookSys.sysBeijing Rising Technology Co., Ltd [HookUrl HookUrl][RunningAuto Start] CProgram FilesRisingRfwHookUrl.sysBeijing Rising Technology Co., Ltd. [jfcaay jfcaay][StoppedManual Start] CWINDOWSsystem32jfcaayNA [jfdda jfdda][StoppedManual Start] CDOCUME~1ADMINI~1LOCALS~1Temp_temp.datNA [Nokia USB Phone Parent nmwcd][StoppedManual Start] system32driversccdcmb.sysNokia [Nokia USB Generic nmwcdc][StoppedManual Start] system32driversccdcmbo.sysNokia [npkcrypt npkcrypt][StoppedAuto Start] CProgram FilesQQ2006npkcrypt.sysNA [nv nv][StoppedManual Start] system32DRIVERSnv4_mini.sysNVIDIA Corporation [PCCS Mode Change Filter Driver pccsmcfd][StoppedManual Start] system32DRIVERSpccsmcfd.sysNokia [StarForce Protection Environment Driver v6 prodrv06][RunningSystem Start] SystemRootSystem32driversprodrv06.sysProtection Technology [StarForce Protection Helper Driver v2 prohlp02][RunningBoot Start] SystemRootSystem32driversprohlp02.sysProtection Technology [StarForce Protection Synchronization Driver v1 prosync1][RunningBoot Start] SystemRootSystem32driversprosync1.sysProtection Technology [Direct Parallel Link Driver Ptilink][RunningManual Start] system32DRIVERSptilink.sysParallel Technologies, Inc. [Rising Rfwbase Driver RfwBase][RunningAuto Start] System32DRIVERSrfwbase.SYSBeijing Rising Technology Co., Ltd. [RsAntiSpyware RsAntiSpyware][RunningBoot Start] SystemRootsystem32driversRsBoot.sysBeijing Rising Technology Co., Ltd. [RsFwDrv RsFwDrv][RunningSystem Start] CProgram FilesRisingRfwRsFwDrv.sysBeijing Rising Technology Co., Ltd. [RsNTGDI RsNTGDI][RunningBoot Start] SystemRootsystem32DriversRsNTGdi.sysBeijing Rising Technology Co., Ltd. [Secdrv Secdrv][StoppedManual Start] system32DRIVERSsecdrv.sysMacrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. [StarForce Protection Helper Driver sfhlp01][RunningBoot Start] SystemRootSystem32driverssfhlp01.sysProtection Technology [sptd sptd][RunningBoot Start] SystemRootSystem32Driverssptd.sysNA [upperdev upperdev][StoppedManual Start] system32DRIVERSusbser_lowerflt.sysWindows (R) Codename Longhorn DDK provider [UsbserFilt UsbserFilt][StoppedManual Start] system32DRIVERSusbser_lowerfltj.sysWindows (R) Codename Longhorn DDK provider [VMware Pointing Device vmmouse][RunningManual Start] system32DRIVERSvmmouse.sysVMware, Inc. [World Standard Teletext Codec WSTCODEC][StoppedManual Start] system32DRIVERSWSTCODEC.SYSMicrosoft Corporation ================================== 浏览器加载项 [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} dProgram FilesQQDownloadQQIEHelper01.dll, 腾讯公司 [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} CProgram FilesThunder NetworkThunderComDllsTDAtOnce_Now.dll, Thunder Networking Technologies,LTD [Flashget Catch Url Class] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} CProgram FilesFlashGetjccatch.dll, NA [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} CProgram FilesThunder NetworkThunderComDllsxunleiBHO_Now.dll, Thunder Networking Technologies,LTD [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} cprogram filesgooglegoogletoolbar2.dll, Google Inc. [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} CProgram FilesGoogleGoogleToolbarNotifier2.0.301.7164swg.dll, Google Inc. [gFlash Class] {F156768E-81EF-470C-9057-481BA8380DBA} CProgram FilesFlashGetgetflash.dll, NA [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} CProgram FilesThunder NetworkThunderThunder.exe, Thunder Networking Technologies,LTD [PPLive] {95B3F550-91C4-4627-BCC4-521288C52977} CProgram FilesPPLivePPLive.exe, NA [飞鸟超级下载] {A6A84943-17AB-4363-A518-8D750FDF57C3} DProgram Filesflyerflyer.exe, NA [] {e2e2dd38-d088-4134-82b7-f2ba38496583} %windir%Network Diagnosticxpnetdiag.exe, NA [快车(FlashGet)] {E0E899AB-F487-11D5-8D29-0050BA6940E3} CProgram FilesFlashGetfgiebar.dll, NA [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} cprogram filesgooglegoogletoolbar2.dll, Google Inc. [ULiveCtrl Control] {070CA17A-4BD2-4612-83B4-32B1B9159B47} CPROGRA~1sinaUCLiveUCLIVE~1.OCX, 北京新浪信息技术有限公司 [SiUpdaterCtrl Class] {BCA9A936-F557-408E-8301-D5B2B302EFD6} CWINDOWSDownloaded Program FilesiDanceUpdater1026.dll, www.idance.co.kr [UpdateC2 Control] {DC7094C6-8F61-42ED-AECE-63F5EEF647C5} CPROGRA~1COMMON~1uuseeupdateC2.ocx, uusee.com [DLMgr Class] {00000000-0000-0000-0000-000000000000} DProgram FilesflyerPluginsDLManager.dll, 飞鸟超级下载 [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} dProgram FilesQQDownloadQQIEHelper01.dll, 腾讯公司 [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} cprogram filesgooglegoogletoolbar2.dll, Google Inc. [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} CProgram FilesThunder NetworkThunderComDllsTDAtOnce_Now.dll, Thunder Networking Technologies,LTD [MMCPlayer Class] {05C1004E-2596-48E5-8E26-39362985EEB9} CProgram FilesSogou PXPMMCShell.dll, Sohu.com Inc. [ULiveCtrl Control] {070CA17A-4BD2-4612-83B4-32B1B9159B47} CPROGRA~1sinaUCLiveUCLIVE~1.OCX, 北京新浪信息技术有限公司 [GerneralPeerID Class] {0A47E819-F82E-4D5D-B806-6A9EA94D68CD} CProgram FilesThunder NetworkThunderComponentsInMediapeerid.dll, [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} CWINDOWSsystem32wmpdxm.dll, Microsoft Corporation [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} cprogram filesgooglegoogletoolbar2.dll, Google Inc. [Flashget Catch Url Class] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} CProgram FilesFlashGetjccatch.dll, NA [RealPlayer RAM Download Handler] {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} CWINDOWSsystem32rmoc3260.dll, RealNetworks, Inc. [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} %SystemRoot%system32msxml3.dll, NA [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} CProgram FilesThunder NetworkThunderComDllsThunderAgent_Now.dll, Thunder Networking Technologies,LTD [IE2EMUrlTaker Class] {48618374-565F-4CA0-B8CD-6F496C997FAF} CProgram FileseMuleIE2EM.dll, VeryCD.com [EditCtrl Class] {488A4255-3236-44B3-8F27-FA1AECAA8844} CWINDOWSsystem32alieditaliedit.dll, [TVAnts ActiveX Control] {4C833081-D026-4FF8-968F-7EAB660D2FBA} CPROGRA~1TVAntsTvantsX.ocx, Zhejiang University [VaCom.Application] {51E88884-1306-4444-B22D-C34119E44232} CPROGRA~1Tudou飞速TU~1TDVaCom.dll, 土豆网 [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} CWINDOWSsystem32ieframe.dll, Microsoft Corporation [PowerPlayer Control] {5EC7C511-CD0F-42E6-830C-1BD9882F3458} CPROGRA~1PPSPOWERP~1.DLL, NA [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} CWINDOWSsystem32wuweb.dll, Microsoft Corporation [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} CDocuments and SettingsAll UsersApplication DataThunder NetworkKanKanxplayer.dll_1_work, [XDRM] {693571CB-54A3-4E90-9D52-EEAE1334E2D3} CDocuments and SettingsAll UsersApplication DataThunder NetworkKanKanxdrm.dll_1_work, [StormPlayer Object] {6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB} CProgram FilesStormIImps.dll, 北京暴风网际科技有限公司 [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} CWINDOWSsystem32wmp.dll, Microsoft Corporation [WangWangObj Class] {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} CProgram FilesAlisoftWangWangWangWangX6.dll, 阿里巴巴软件(上海)有限公司 [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} %SystemRoot%system32SHELL32.dll, NA [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} CProgram FilesThunder NetworkThunderComponentsInMediaMediaAddin15.dll, Thunder Networking Technologies,LTD [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} CWINDOWSsystem32ieframe.dll, Microsoft Corporation [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} CProgram FilesThunder NetworkThunderComDllsxunleiBHO_Now.dll, Thunder Networking Technologies,LTD [SopCore Control] {8FEFF364-6A5F-4966-A917-A3AC28411659} CPROGRA~1SopCastsopocx.ocx, www.sopcast.com [RMGetLicense Class] {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} CWINDOWSsystem32msnetobj.dll, Microsoft Corporation [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} cprogram filesgooglegoogletoolbar2.dll, Google Inc. [Thunder DapCtrl] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} CProgram FilesCommon FilesThunder NetworkKanKanDapCtrl.1.6.5710.37.240.dll, ShenZhen Thunder Networking Technologies Ltd. [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} CProgram FilesGoogleGoogleToolbarNotifier2.0.301.7164swg.dll, Google Inc. [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} CProgram FilesCommon FilesSystemmsadcmsadco.dll, Microsoft Corporation [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} CWINDOWSsystem32rmoc3260.dll, RealNetworks, Inc. [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} CWINDOWSsystem32MacromedFlashFlash9e.ocx, Adobe Systems, Inc. [ARMP Control] {D5CD69C4-F983-46E2-AF79-455E892729FA} CPROGRA~1COMMON~1uuseeARMP.ocx, UUSEE [UpdateC2 Control] {DC7094C6-8F61-42ED-AECE-63F5EEF647C5} CPROGRA~1COMMON~1uuseeupdateC2.ocx, uusee.com [快车(FlashGet)] {E0E899AB-F487-11D5-8D29-0050BA6940E3} CProgram FilesFlashGetfgiebar.dll, NA [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} %SystemRoot%system32msxml3.dll, NA [Thunder DapPlayer] {EEDD6FF9-13DE-496B-9A1C-D78B3215E266} CProgram FilesThunder NetworkThunderComponentsDownAndPlayDapPlayer3.0.44.68.223.dll, ShenZhen Thunder Networking Technologies Ltd. [gFlash Class] {F156768E-81EF-470C-9057-481BA8380DBA} CProgram FilesFlashGetgetflash.dll, NA [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} CDocuments and SettingsAll UsersApplication DataThunder NetworkKanKanpplayer.dll_1_work, Thunder [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} %SystemRoot%system32msxml3.dll, NA [IERPCtl Class] {FDC7A535-4070-4B92-A0EA-D9994BCC0DC5} CProgram FilesRealRealPlayerrppluginsierpplug.dll, RealNetworks, Inc. [&U使用纳米机器人下载并收藏] CProgram FilesNamiRobotDatadu.html, NA [&使用超级旋风下载] dProgram FilesQQDownloadgeturl.htm, NA [&使用超级旋风下载全部链接] dProgram FilesQQDownloadgetAllurl.htm, NA [&使用飞鸟下载] DProgram Filesflyergeturl.htm, NA [&使用飞鸟下载全部链接] DProgram Filesflyergetallurl.htm, NA [使用iTudou下载节目] CProgram FilesTudouiTudouiTudou_Link.HTM, NA [使用迅雷下载] CProgram FilesThunder NetworkThunderProgramgeturl.htm, NA [使用迅雷下载全部链接] CProgram FilesThunder NetworkThunderProgramgetallurl.htm, NA [导出到 Microsoft Office Excel(&X)] resCPROGRA~1MICROS~2OFFICE11EXCEL.EXE3000, NA [添加到QQ表情] DProgram FilesQQ2007AddEmotion.htm, NA ================================== 正在运行的进程 [PID 580 SYSTEM][SystemRootSystem32smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID 648 SYSTEM][CWINDOWSsystem32csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 672 SYSTEM][CWINDOWSsystem32winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [CWINDOWSsystem32Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4116] [CWINDOWSsystem32WgaLogon.dll] [Microsoft Corporation, 1.7.0018.7] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CWINDOWSsystem32msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID 716 SYSTEM][CWINDOWSsystem32services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [CWINDOWSAppPatchAcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 728 SYSTEM][CWINDOWSsystem32lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 884 SYSTEM][CWINDOWSsystem32Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4116] [CWINDOWSsystem32Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2497] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 900 SYSTEM][CWINDOWSsystem32svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 992 NETWORK SERVICE][CWINDOWSsystem32svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 1088 SYSTEM][CProgram FilesRisingRavCCenter.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.28] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 1104 SYSTEM][CWINDOWSSystem32svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [PID 1144 SYSTEM][CWINDOWSsystem32svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [cwindowssystem32wudfsvc.dll] [Microsoft Corporation, 6.0.5730.0 (winmain.060915-1845)] [cwindowssystem32WUDFPlatform.dll] [Microsoft Corporation, 6.0.5730.0 (winmain.060915-1845)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 1196 NETWORK SERVICE][CWINDOWSsystem32svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 1252 LOCAL SERVICE][CWINDOWSsystem32svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [PID 1392 SYSTEM][CPROGRAM FILESRISINGRAVravmond.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.76] [CPROGRAM FILESRISINGRAVBWList.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.4] [CWINDOWSsystem32MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [CWINDOWSsystem32MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [CWINDOWSsystem32MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [CPROGRAM FILESRISINGRAVRSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0] [CPROGRAM FILESRISINGRAVCfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.16] [CPROGRAM FILESRISINGRAVRsLog.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.34] [CPROGRAM FILESRISINGRAVProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [CPROGRAM FILESRISINGRAVRsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [CPROGRAM FILESRISINGRAVMonRule.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.29] [CPROGRAM FILESRISINGRAVHooksys.dll] [Beijing Rising Technology Co., Ltd, 22, 0, 0, 9] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CPROGRAM FILESRISINGRAVHookReg.dll] [Beijing Rising Technology Co., Ltd, 22, 0, 0, 4] [CPROGRAM FILESRISINGRAVHookNtos.dll] [Beijing Rising Technology Co., Ltd, 22, 0, 0, 2] [CPROGRAM FILESRISINGRAVrswalmon.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 22] [CPROGRAM FILESRISINGRAVrecomp.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 39] [CPROGRAM FILESRISINGRAVrefs.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 17] [CPROGRAM FILESRISINGRAVffr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 14] [CProgram FilesRisingRavRsStore.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.8] [CPROGRAM FILESRISINGRAVHookCont.dll] [Beijing Rising Technology Co., Ltd, 22, 0, 0, 1] [CProgram FilesRisingRavfakescan.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.13] [CProgram FilesRisingRavScanner.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.36] [CPROGRAM FILESRISINGRAVviruslib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 26] [CPROGRAM FILESRISINGRAVrelibldr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [CPROGRAM FILESRISINGRAVHookWeb.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.2] [CPROGRAM FILESRISINGRAVextfile.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 29] [CPROGRAM FILESRISINGRAVpearc.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 5] [CPROGRAM FILESRISINGRAVnvfile.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 6] [CPROGRAM FILESRISINGRAVscanexec.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 17] [CPROGRAM FILESRISINGRAVunexe.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 5] [CPROGRAM FILESRISINGRAVscanex.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 75] [CPROGRAM FILESRISINGRAVscansct.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 9] [CPROGRAM FILESRISINGRAVscanpack.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 9] [CPROGRAM FILESRISINGRAVrevm.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 8] [CPROGRAM FILESRISINGRAVurutils.dll] [, 20, 0, 0, 6] [CPROGRAM FILESRISINGRAVur000.dat] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 18] [CPROGRAM FILESRISINGRAVextmail.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 9] [PID 1412 SYSTEM][cprogram filesrisingrfwrfwsrv.exe] [Beijing Rising Technology Co., Ltd., 7.0.0.68] [CWINDOWSsystem32MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [CWINDOWSsystem32MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [CWINDOWSsystem32MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [CProgram FilesRisingRfwProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [cprogram filesrisingrfwRsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [cprogram filesrisingrfwRSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0] [cprogram filesrisingrfwCfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.16] [cprogram filesrisingrfwRfwRule.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.13] [cprogram filesrisingrfwrfwlog.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.12] [cprogram filesrisingrfwRfwdrv.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.41] [cprogram filesrisingrfwpsapi.dll] [Microsoft Corporation, 4.00] [cprogram filesrisingrfwijt_ctrl.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.0] [cprogram filesrisingrfwunvdet.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.5] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [cprogram filesrisingrfwmPorts.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.3] [PID 1652 SYSTEM][cprogram filesrisingrfwrfwproxy.exe] [Beijing Rising Technology Co., Ltd., 7.0.0.33] [CWINDOWSsystem32MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [CWINDOWSsystem32MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [cprogram filesrisingrfwpsapi.dll] [Microsoft Corporation, 4.00] [CProgram FilesRisingRfwProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [cprogram filesrisingrfwRsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [cprogram filesrisingrfwRfwRule.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.13] [cprogram filesrisingrfwurlrule.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 9] [cprogram filesrisingrfwMonMid.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.4] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 1692 SYSTEM][cprogram filesrisingrfwrfwstub.exe] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [CWINDOWSsystem32MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [CWINDOWSsystem32MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [cprogram filesrisingrfwRSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 2036 SYSTEM][CPROGRAM FILESRISINGRAVRavStub.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.9] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CPROGRAM FILESRISINGRAVProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [CPROGRAM FILESRISINGRAVRsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [CPROGRAM FILESRISINGRAVRSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [PID 248 Administrator][CWINDOWSsystem32Ati2evxx.exe] [ATI Technologies Inc., 6.14.10.4116] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CWINDOWSsystem32Ati2edxx.dll] [ATI Technologies, Inc., 6, 14, 10, 2497] [PID 328 Administrator][CWINDOWSExplorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CWINDOWSsystem32ieframe.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CWINDOWSsystem32WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [CWINDOWSsystem32msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [CProgram FilesNokiaNokia PC Suite 6phonebrowser.dll] [Nokia, 6, 86, 101, 2] [CProgram FilesNokiaNokia PC Suite 6NGSCM.DLL] [Nokia, 6, 86, 134, 6] [CProgram FilesNokiaNokia PC Suite 6LangPhoneBrowser_chi-sc.nlr] [Nokia, 6, 86, 63, 0] [CProgram FilesNokiaNokia PC Suite 6ResourcePhoneBrowser_Nokia.ngr] [Nokia, 6, 86, 20, 0] [CWINDOWSsystem32PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [CWINDOWSsystem32PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)] [CProgram FilesThunder NetworkThunderComDllsxunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 96] [CProgram FilesThunder NetworkThunderComponentsResWorkerDsBho_00.dll] [, 1, 0, 0, 17] [CProgram FilesThunder NetworkThunderComponentsResWorkerDataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 16] [CProgram FilesRisingRavRSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [PID 388 Administrator][cprogram filesrisingrfwRfwMain.exe] [Beijing Rising Technology Co., Ltd., 7.0.1.65] [CWINDOWSsystem32MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [CWINDOWSsystem32MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [CWINDOWSsystem32MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [cprogram filesrisingrfwRsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 88] [CProgram FilesRisingRfwProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [cprogram filesrisingrfwRsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [cprogram filesrisingrfwRSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0] [cprogram filesrisingrfwCfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.16] [cprogram filesrisingrfwRSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [cprogram filesrisingrfwRfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.7] [cprogram filesrisingrfwRsXML.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0] [cprogram filesrisingrfwPngDll.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [cprogram filesrisingrfwRfwRule.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.13] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] [PID 484 SYSTEM][CWINDOWSsystem32spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CWINDOWSsystem32ZLhp1020.DLL] [Zenographics, Inc., 5, 53, 3723, 0] [CWINDOWSsystem32ZLM.dll] [Zenographics, Inc., 5, 50, 1416, 0] [CWINDOWSSystem32spoolPRTPROCSW32X86IMFPrint.DLL] [Zenographics, Inc., 5, 54, 330, 0] [CWINDOWSsystem32Imf32.dll] [Zenographics, Inc., 5, 60, 1204, 0] [CWINDOWSsystem32ZTAG32.dll] [Zenographics, Inc., 5, 60, 1210, 0] [CWINDOWSsystem32ZSPOOL.dll] [Zenographics, Inc., 5, 51, 709, 0] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] [PID 1604 SYSTEM][CProgram FilesCommon FilesAppleMobile Device SupportbinAppleMobileDeviceService.exe] [Apple, Inc., 1, 14, 0, 0] [PID 1668 SYSTEM][CProgram FilesBonjourmDNSResponder.exe] [Apple Inc., 1,0,4,12] [PID 1752 SYSTEM][CProgram FilesStormIIstormliv.exe] [北京暴风网际科技有限公司, 3, 8, 3, 15] [CProgram FilesStormIIMSVCP60.dll] [Microsoft Corporation, 6.02.3104.0] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] [PID 2132 SYSTEM][CProgram FilesCommon FilesSogou PXPp2psvr.exe] [Sohu.com Inc., 2, 0, 0, 33] [CProgram FilesSogou PXPvodsvr.dll] [Sohu.com Inc., 3, 0, 0, 35] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CProgram FilesSogou PXPpxpnet.dll] [Sohu.com Inc., 2, 0, 0, 18] [CProgram FilesSogou PXPp2pclient.dll] [Sohu.com Inc., 2, 9, 1, 20] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] [PID 2172 SYSTEM][CWINDOWSsystem32svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID 3128 LOCAL SERVICE][CWINDOWSSystem32alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID 3748 Administrator][CProgram FilesRisingRavRavTask.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.23] [CProgram FilesRisingRavProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [CProgram FilesRisingRavRsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [CProgram FilesRisingRavRSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [CProgram FilesRisingRavRSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 20.0.0.0] [CProgram FilesRisingRavCfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.16] [PID 3832 Administrator][CProgram FilesRisingAntiSpywareruniep.exe] [Beijing Rising Technology Co., Ltd., 5.0.0.16] [CProgram FilesRisingAntiSpywareMFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [CProgram FilesRisingAntiSpywareMSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [PID 3840 Administrator][CProgram FilesGridServicepeer.exe] [Mercury, 2, 0, 10, 7348] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] [PID 3852 Administrator][CProgram FilesCommon FilesRealUpdate_OBrealsched.exe] [RealNetworks, Inc., 0.1.0.4279] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 3888 Administrator][CProgram FilesRisingRavRavmon.exe] [Beijing Rising Technology Co., Ltd., 20.0.01.19] [CWINDOWSsystem32MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [CWINDOWSsystem32MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [CWINDOWSsystem32MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [CProgram FilesRisingRavProcCom.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [CProgram FilesRisingRavRsCommX2.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19] [CProgram FilesRisingRavRSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [CProgram FilesRisingRavrecomp.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 39] [CProgram FilesRisingRavrefs.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 17] [CProgram FilesRisingRavviruslib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 26] [CProgram FilesRisingRavrelibldr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [CProgram FilesRisingRavRSAPPMGR.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.0] [CProgram FilesRisingRavCfgDll.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.16] [CProgram FilesRisingRavMonRule.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.29] [CProgram FilesRisingRavPngDll.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4] [CProgram FilesRisingRavRsguilib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 89] [CProgram FilesRisingRavRsXML.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0] [PID 3992 Administrator][CProgram FilesiTunesiTunesHelper.exe] [Apple Inc., 7.6.2.9] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CProgram FilesiTunesiTunesHelper.Resourceszh_CN.lprojiTunesHelperLocalized.DLL] [Apple Inc., 7.6.2.1] [CProgram FilesiTunesiTunesHelper.ResourcesiTunesHelper.DLL] [Apple Inc., 7.6.2.9] [CProgram FilesQuickTimeQTSystemQuickTime.qts] [Apple Inc., 7.4.5] [CProgram FilesCommon FilesAppleMobile Device SupportbiniTunesMobileDevice.dll] [Apple Inc., 7, 6, 120, 1] [PID 4024 Administrator][CProgram FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe] [Google Inc., 2, 0, 301, 1654] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CProgram FilesGoogleGoogleToolbarNotifier2.0.301.7164gtn.dll] [Google Inc., 2, 0, 301, 7164] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CProgram FilesGoogleGoogleToolbarNotifier2.0.301.7164res_zh-CN.dll] [Google Inc., 2, 0, 301, 7164] [CProgram FilesGoogleGoogleToolbarNotifier2.0.301.7164swg.dll] [Google Inc., 2, 0, 301, 7164] [PID 2056 SYSTEM][CProgram FilesiPodbiniPodService.exe] [Apple Inc., 7.6.2.9] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [CProgram FilesiPodbiniPodService.Resourceszh_CN.lprojiPodServiceLocalized.DLL] [Apple Inc., 7.6.2.1] [CProgram FilesiPodbiniPodService.ResourcesiPodService.DLL] [Apple Inc., 7.6.2.9] [PID 3104 Administrator][CProgram FilesGreenBrowserGreenBrowser.exe] [MoreQuick, 4, 4, 129, 0] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CWINDOWSsystem32ieframe.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] [CProgram FilesRisingRavRavScrCh.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3] [CWINDOWSsystem32msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [CWINDOWSsystem32MFPlat.DLL] [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006)] [CWINDOWSsystem32rmoc3260.dll] [RealNetworks, Inc., 6.0.9.3084] [CWINDOWSsystem32MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [CWINDOWSsystem32MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [CProgram FilesRealRealPlayerrppluginsembd3260.dll] [RealNetworks, Inc., 6.0.12.2027] [CProgram FilesCommon filesRealCommonpngu3267.dll] [RealNetworks, Inc., 6.7.0.3485] [CProgram FilesCommon filesRealCommonpnrs3260.dll] [RealNetworks, Inc., 6.0.9.4840] [CProgram FilesThunder NetworkThunderComDllsxunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 96] [CWINDOWSsystem32mscoree.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [CWINDOWSMicrosoft.NETFrameworkv2.0.50727mscorie.dll] [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)] [CWINDOWSsystem32MacromedFlashFlash9e.ocx] [Adobe Systems, Inc., 9,0,115,0] [PID 3444 Administrator][CProgram FilesThunder NetworkThunderProgramThunder5.exe] [Thunder Networking Technologies,LTD, 5.7.7.441] [CProgram FilesThunder NetworkThunderProgramBugReport.dll] [迅雷网络, 1, 0, 1, 4] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CProgram FilesThunder NetworkThunderProgramTaskManager.dll] [Thunder Networking Technologies,LTD, 1, 3, 1, 56] [CProgram FilesThunder NetworkThunderProgramdownload_interface.dll] [Thunder Networking Technologies,LTD, 2, 21, 2, 217] [CProgram FilesThunder NetworkThunderProgramstlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [CProgram FilesThunder NetworkThunderProgramasyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 21, 2, 217] [CProgram FilesThunder NetworkThunderProgramstreammedialib.dll] [, 1, 3, 2, 124] [CProgram FilesThunder NetworkThunderProgramal.dll] [, 1, 0, 1, 3] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] [CProgram FilesThunder NetworkThunderProgramxldc.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 14] [CProgram FilesThunder NetworkThunderProgrambd.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 6] [CProgram FilesThunder NetworkThunderProgramXLNet.Dll] [Thunder Networking Technologies,LTD, 1, 3, 4, 18] [CProgram FilesThunder NetworkThunderProgramBHOStub.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 8] [CProgram FilesThunder NetworkThunderComponentsDownAndPlayDownAndPlay.dll] [, 1, 0, 11, 29] [CWINDOWSsystem32ieframe.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CProgram FilesThunder NetworkThunderProgramiTargetAD.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 34] [CWINDOWSsystem32MacromedFlashFlash9e.ocx] [Adobe Systems, Inc., 9,0,115,0] [CWINDOWSsystem32msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [CProgram FilesRisingRavRavScrCh.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3] [CWINDOWSsystem32MacromedCommonSwSupport.dll] [Adobe Systems, Inc., 10.2r22] [CProgram FilesThunder NetworkThunderComponentsInMediaiEmbedShell.dll] [　, 1, 0, 2, 24] [CProgram FilesThunder NetworkThunderComponentsInMediaiEmbed15.dll] [Thunder Networking Technologies,LTD, 3, 4, 6, 99] [CProgram FilesThunder NetworkThunderComponentsInMediaPlayerHelper.dll] [thunder, 1, 1, 4, 37] [CProgram FilesThunder NetworkThunderComponentsInMediaXLNet.dll] [Thunder Networking Technologies,LTD, 1, 3, 4, 18] [CProgram FilesThunder NetworkThunderComponentsInMediaXLIPC.DLL] [Thunder Networking Technologies,LTD, 1, 0, 0, 2] [CProgram FilesThunder NetworkThunderComponentsP4PClientP4PClient.dll] [Thunder Networking Technologies,LTD, 2, 2, 5, 70] [CProgram FilesThunder NetworkThunderComponentsCommunityXLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 5, 0, 16] [CProgram FilesThunder NetworkThunderProgramRegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 16, 5, 63] [CProgram FilesThunder NetworkThunderProgramMSVCIRT.dll] [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] [CProgram FilesThunder NetworkThunderComponentsSecurityThunderSafe.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 71] [CProgram FilesThunder NetworkThunderProgramATL71.DLL] [Microsoft Corporation, 7.10.3077.0] [CProgram FilesThunder NetworkThunderComponentsSecurityXLSafeUI.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 71] [CProgram FilesThunder NetworkThunderComponentsSearchXLSearch.dll] [Thunder Networking Technologies,LTD, 1, 1, 6, 20] [CProgram FilesThunder NetworkThunderProgramLiveUpdate.dll] [Thunder Networking Technologies,LTD, 1, 2, 2, 22] [CProgram FilesThunder NetworkThunderPluginsKLScanPluginKLScan.dll] [Thunder Networking Technologies,LTD, 1.1.0.9] [CProgram FilesThunder NetworkThunderPluginsXLSafeHostXLSafeHost.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 57] [CProgram FilesThunder NetworkThunderPluginsXLSafeHostThunderRAVThunderRAV.dll] [NA, ] [CProgram FilesThunder NetworkThunderPluginsXLSafeHostThunderRAVbinrsscan.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4] [CProgram FilesThunder NetworkThunderPluginsXLSafeHostThunderRAVbinrecomp.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 39] [CProgram FilesThunder NetworkThunderPluginsXLSafeHostThunderRAVbinrefs.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 17] [CProgram FilesThunder NetworkThunderPluginsXLSafeHostThunderRAVbinviruslib.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 26] [CProgram FilesThunder NetworkThunderPluginsXLSafeHostThunderRAVbinrelibldr.dll] [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16] [CProgram FilesThunder NetworkThunderPluginsKanKanTopKanKanTop.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 4] [CProgram FilesThunder NetworkThunderComponentsExplorerHelperExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 16] [CProgram FilesThunder NetworkThunderComDllsThunderAgent_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 4, 23] [CProgram FilesThunder NetworkThunderComDllsxunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 96] [CProgram FilesThunder NetworkThunderComDllsTDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16] [CProgram FilesThunder NetworkThunderComponentsTipsTipsClient.dll] [Thunder Networking Technologies,LTD, 2, 2, 11, 106] [CProgram FilesThunder NetworkThunderComponentsVPSHELLVPSHELL.dll] [迅雷网络, 3, 0, 1, 33] [CProgram FilesThunder NetworkThunderComponentsUserExperienceUserExperience.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1] [CProgram FilesThunder NetworkThunderComponentsResWorkerDsXlCom.dll] [, 1, 0, 0, 29] [CProgram FilesThunder NetworkThunderComponentsResWorkerDataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 16] [CProgram FilesThunder NetworkThunderComponentsResWorkerMediaWorker.dll] [Thunder Networking Technologies,LTD, 1, 2, 0, 22] [CProgram FilesThunder NetworkThunderComponentsDownloadStatDownloadStat.dll] [深圳市迅雷网络技术有限公司, 1, 3, 1, 4] [CProgram FilesThunder NetworkThunderComponentsTipsXLIPC.DLL] [Thunder Networking Technologies,LTD, 1, 0, 0, 2] [PID 3220 Administrator][CDOCUME~1ADMINI~1LOCALS~1TempRar$EX00.453ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [PID 3504 Administrator][CDocuments and SettingsAdministrator桌面新建文件夹SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [PID 3636 Administrator][CDocuments and SettingsAdministrator桌面新建文件夹SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [CWINDOWSsystem32Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [CWINDOWSsystem32iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [CWINDOWSsystem32ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 18] [cprogram filesrisingrfwijt_base.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.10] [cprogram filesrisingrfwolemon.dll] [Beijing Rising Technology Co., Ltd., 7.0.0.6] [CDocuments and SettingsAdministrator桌面新建文件夹Upload3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] [CProgram FilesBonjourmdnsNSP.dll] [Apple Inc., 1,0,4,12] ================================== 文件关联 .TXT Error. [CWINDOWSnotepad.exe %1] .EXE OK. [%1 %] .COM OK. [%1 %] .PIF OK. [%1 %] .REG OK. [regedit.exe %1] .BAT OK. [%1 %] .SCR OK. [%1 S] .CHM Error. [hh.exe %1] .HLP OK. [%SystemRoot%System32winhlp32.exe %1] .INI Error. [CWINDOWSSystem32NOTEPAD.EXE %1] .INF OK. [%SystemRoot%System32NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%System32WScript.exe %1 %] .JS OK. [%SystemRoot%System32WScript.exe %1 %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 NA ================================== Autorun.inf NA ================================== HOSTS 文件 NA ================================== 进程特权扫描 特殊特权被允许： SeLoadDriverPrivilege [PID = 672, CWINDOWSSYSTEM32WINLOGON.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1604, CPROGRAM FILESCOMMON FILESAPPLEMOBILE DEVICE SUPPORTBINAPPLEMOBILEDEVICESERVICE.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3832, CPROGRAM FILESRISINGANTISPYWARERUNIEP.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3832, CPROGRAM FILESRISINGANTISPYWARERUNIEP.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3840, CPROGRAM FILESGRIDSERVICEPEER.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3840, CPROGRAM FILESGRIDSERVICEPEER.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3104, CPROGRAM FILESGREENBROWSERGREENBROWSER.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3104, CPROGRAM FILESGREENBROWSERGREENBROWSER.EXE] 特殊特权被允许： SeDebugPrivilege [PID = 3444, CPROGRAM FILESTHUNDER NETWORKTHUNDERPROGRAMTHUNDER5.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3444, CPROGRAM FILESTHUNDER NETWORKTHUNDERPROGRAMTHUNDER5.EXE] ================================== API HOOK 入口点错误：NtCreateFile (危险等级 高, 被下面模块所HOOK 0x003E4445) 入口点错误：NtWriteFile (危险等级 高, 被下面模块所HOOK 0x003E44E5) 入口点错误：ZwCreateFile (危险等级 高, 被下面模块所HOOK 0x003E4445) 入口点错误：ZwWriteFile (危险等级 高, 被下面模块所HOOK 0x003E44E5) 入口点错误：CreateProcessA (危险等级 高, 被下面模块所HOOK 0x01201FFD) 入口点错误：CreateProcessW (危险等级 高, 被下面模块所HOOK 0x012020E5) ================================== 隐藏进程 NA ================================== [CODE]