[CODE] 2000-06-10,14:46:25 System Repair Engineer 2.5.16.900 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能 以下内容被选中: 所有的启动项目(包括注册表、启动文件夹、服务等) 浏览器加载项 正在运行的进程(包括进程模块信息) 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 进程特权扫描 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher] [(Verified)Microsoft Windows Publisher] [(Verified)Microsoft Windows Publisher] [(Verified)Microsoft Windows Publisher] [(Verified)Microsoft Windows Publisher] [(Verified)Microsoft Corporation] <"C:\Program Files\Rising\Rav\RavTask.exe" -system> [(Verified)Beijing Rising Science and Technology Corporation Limited] <"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [(Verified)"RealNetworks, Inc."] [Alibaba] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}> [(Verified)Beijing Rising Science and Technology Corporation Limited] <{4F4F0064-71E0-4f0d-0015-708476C7815F}> [N/A] <{189F087F-4378-405F-85FA-37D955AD7A8C}><> [N/A] <{4F4F0064-71E0-4f0d-0004-708476C7815F}> [N/A] <{4F4F0064-71E0-4f0d-0024-708476C7815F}> [N/A] <{18093456-9012-4568-9076-908765467181}> [] <{4F4F0064-71E0-4f0d-0022-708476C7815F}> [N/A] <{4F4F0064-71E0-4f0d-0003-708476C7815F}><> [N/A] <{4F4F0064-71E0-4f0d-0014-708476C7815F}><> [N/A] <{E8A3B193-77E3-4FB3-986D-F4FA4828BAFC}><> [N/A] <{8AD0F1B1-990D-4F52-A33D-2837E43CEF58}><> [N/A] <{47958181-270d-4547-a2c8-d73002b9a922}><> [N/A] <{c064c122-504c-4793-a16c-2b061dd0c774}> [] <{DC3D30AE-0380-4151-8934-EE98A34B0370}> [] <{18e64250-19a8-4d10-828f-30e101a22291}> [] <{C5E87A05-F463-4841-B19E-DD3EC3862368}><> [N/A] <{A45B2C37-01D0-4D3E-BE5E-CC119B17BE9E}><> [N/A] <{EE12D60D-AD9A-4095-B839-3BE6862679FD}><> [N/A] <{7C8D1401-A58D-A81C-CD24-A5915C4517C7}> [] <{5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5}> [] <{55694105-5108-9405-3695-954187462155}> [] <{9490415F-65F8-B5C5-D8BA-9405FB120549}> [] <{4C648541-1025-9650-9057-6541258720C4}> [] <{4629FF4F-ACDB-5C90-A098-FACB3456A264}> [] <{6A041F13-A111-12A3-B0CF-F99818AA68A6}> [] <{4FD45A54-9875-698F-E56E-65102358FDF4}> [] <{81954FAC-1023-154F-895A-1458258AD818}> [] <{67FD640A-158F-48AC-FD14-1597F14A9776}> [] <{528DF602-9541-A985-210A-984A698C6F25}> [] <{22596546-2036-9451-6058-658402589722}> [] <{2D698451-2015-6358-9871-2015987452D2}> [] <{4A698102-5904-AFD0-20DF-CD1A65829CA4}> [] <{AA59145F-315D-BC23-AC1F-145DF81A34AA}> [] <{50940F85-F015-14F1-A05F-F69858AC6D05}> [] <{83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38}> [] <{470165F1-9F65-569F-F895-F14F58F41074}> [] <{3E035987-F585-68D1-AC28-98FA58E459E3}> [] <{37AC9076-C898-B098-D098-A18319080973}> [] <{35671234-7890-ABCD-CDEF-567801237653}> [] <{6319A1F1-9410-9654-3201-345FFA349136}> [] <{91698482-6555-3666-1222-954784129019}> [] <{70AF1289-F140-A140-D012-C1458759FC07}> [] <{32023698-6984-8541-9654-698745012523}> [] <{14698742-2059-3025-9058-954023874141}> [] <{29109876-7619-9101-7012-901938475192}> [] <{2A095412-A568-B258-C587-D148E148F0A2}> [] <{5A069845-2036-6084-9054-6087502480A5}> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [N/A] [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavStub.exe] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavTask.exe] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwcfg.exe] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwmain.exe] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwProxy.exe] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwsrv.exe] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwstub.exe] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\runiep.exe] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SmartUp.exe] [(Verified)Microsoft Windows Publisher] ================================== 启动文件夹 [腾讯QQ] C:\PROGRA~1\Tencent\QQ\QQ.exe [TENCENT]> [QQ游戏启动加速程序] C:\PROGRA~1\Tencent\QQGame\Accel.exe [深圳市腾讯计算机系统有限公司]> ================================== 服务 [Contrl Center of Storm Media / ccosm][Running/Auto Start] <北京暴风网际科技有限公司> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [Human Interface Device Access / HidServ][Stopped/Disabled] %SystemRoot%\System32\hidserv.dll> [Rising Proxy Service / RfwProxySrv][Stopped/Auto Start] [Rising Personal Firewall Service / RfwService][Stopped/Auto Start] [Rising Process Communication Center / RsCCenter][Stopped/Auto Start] <"C:\Program Files\Rising\Rav\CCenter.exe"> [Rising RealTime Monitor / RsRavMon][Stopped/Auto Start] <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"> ================================== 驱动程序 [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] [Hdv32 / Hdv32][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\Hdv32_c.sys> [HookCont / HookCont][Running/System Start] <\SystemRoot\system32\drivers\HookCont.sys> [HookNtos / HookNtos][Running/System Start] <\SystemRoot\system32\drivers\HookNtos.sys> [HookReg / HookReg][Running/System Start] <\SystemRoot\system32\drivers\HookReg.sys> [HookSys / HookSys][Running/System Start] <\SystemRoot\system32\drivers\HookSys.sys> [HookUrl / HookUrl][Running/Auto Start] <\??\C:\Program Files\Rising\Rfw\HookUrl.sys> [ialm / ialm][Running/Manual Start] [IIS Manager / IIS Manager ][Stopped/Manual Start] <\??\C:\DOCUME~1\tydz\LOCALS~1\Temp\1.tmp> [msfpfis64 / msfpfis64][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\msosmsfpfis64.sys> [msp2p32 / msp2p32][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\msosmsp2p32.sys> [Netgroup Packet Filter / NPF][Stopped/Manual Start] [npkcrypt / npkcrypt][Stopped/Manual Start] <\??\C:\WINDOWS\system32\npkcrypt.sys> [npkycryp / npkycryp][Stopped/Manual Start] <\??\C:\WINDOWS\system32\npkycryp.sys> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [Rising Rfwbase Driver / RfwBase][Running/Auto Start] [RsFwDrv / RsFwDrv][Running/System Start] <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] [Secdrv / Secdrv][Stopped/Manual Start] [SAMSUNG Mobile USB Device 1.0 driver (WDM) / ss_bus][Stopped/Manual Start] [SAMSUNG Mobile USB Modem 1.0 Filter / ss_mdfl][Stopped/Manual Start] [SAMSUNG Mobile USB Modem 1.0 Drivers / ss_mdm][Stopped/Manual Start] [tuic / tuic][Stopped/Auto Start] <\??\C:\DOCUME~1\tydz\LOCALS~1\Temp\tmp74C.tmp> [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start] [zftp / zftp][Stopped/Auto Start] <\??\C:\DOCUME~1\tydz\LOCALS~1\Temp\tmp746.tmp> ================================== 浏览器加载项 [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} <, N/A> [] {14698742-2059-3025-9058-954023874141} [] {18093456-9012-4568-9076-908765467181} [] {22596546-2036-9451-6058-658402589722} [] {29109876-7619-9101-7012-901938475192} [] {2A095412-A568-B258-C587-D148E148F0A2} [] {2D698451-2015-6358-9871-2015987452D2} [FGCatchUrl] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <, N/A> [] {32023698-6984-8541-9654-698745012523} [] {35671234-7890-ABCD-CDEF-567801237653} [] {37AC9076-C898-B098-D098-A18319080973} [] {3E035987-F585-68D1-AC28-98FA58E459E3} [] {4629FF4F-ACDB-5C90-A098-FACB3456A264} [] {470165F1-9F65-569F-F895-F14F58F41074} [] {4A698102-5904-AFD0-20DF-CD1A65829CA4} [] {4C648541-1025-9650-9057-6541258720C4} [] {4FD45A54-9875-698F-E56E-65102358FDF4} [] {50940F85-F015-14F1-A05F-F69858AC6D05} [] {528DF602-9541-A985-210A-984A698C6F25} [] {55694105-5108-9405-3695-954187462155} [] {5A069845-2036-6084-9054-6087502480A5} [] {5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5} [] {6319A1F1-9410-9654-3201-345FFA349136} [] {67FD640A-158F-48AC-FD14-1597F14A9776} [] {6A041F13-A111-12A3-B0CF-F99818AA68A6} [] {70AF1289-F140-A140-D012-C1458759FC07} [] {7C8D1401-A58D-A81C-CD24-A5915C4517C7} [] {81954FAC-1023-154F-895A-1458258AD818} [] {83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38} [] {91698482-6555-3666-1222-954784129019} [] {9490415F-65F8-B5C5-D8BA-9405FB120549} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} <, N/A> [] {AA59145F-315D-BC23-AC1F-145DF81A34AA} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <, N/A> [FlashGet GetFlash Class] {F156768E-81EF-470C-9057-481BA8380DBA} <, N/A> [assist] {FE3FCAE7-0A37-4506-8A7D-3CC9A04D2CA8} <, N/A> [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [快车] {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} [] {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} [&Google] {2318C2B1-4965-11d4-9B18-009027A5CD4F} <, N/A> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} <, N/A> [Google Script Object] {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB} [ImageManager Class] {128D0E38-1FF4-47C3-B0F7-0BAF90F568BF} [] {14698742-2059-3025-9058-954023874141} [] {18093456-9012-4568-9076-908765467181} [] {22596546-2036-9451-6058-658402589722} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [&Google] {2318C2B1-4965-11D4-9B18-009027A5CD4F} <, N/A> [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [] {29109876-7619-9101-7012-901938475192} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, N/A> [] {2A095412-A568-B258-C587-D148E148F0A2} [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} [] {2D698451-2015-6358-9871-2015987452D2} [FGCatchUrl] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <, N/A> [] {32023698-6984-8541-9654-698745012523} [] {35671234-7890-ABCD-CDEF-567801237653} [] {37AC9076-C898-B098-D098-A18319080973} [] {3E035987-F585-68D1-AC28-98FA58E459E3} [] {4629FF4F-ACDB-5C90-A098-FACB3456A264} [] {470165F1-9F65-569F-F895-F14F58F41074} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\system32\msxml3.dll, N/A> [QQRightClick Class] {4836C333-208E-4BCE-B30B-00B9545B0F6E} [] {4A698102-5904-AFD0-20DF-CD1A65829CA4} [] {4C648541-1025-9650-9057-6541258720C4} [] {4FD45A54-9875-698F-E56E-65102358FDF4} [] {50940F85-F015-14F1-A05F-F69858AC6D05} [] {528DF602-9541-A985-210A-984A698C6F25} [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} [] {55694105-5108-9405-3695-954187462155} [] {5A069845-2036-6084-9054-6087502480A5} [] {5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5} [] {6319A1F1-9410-9654-3201-345FFA349136} [] {67FD640A-158F-48AC-FD14-1597F14A9776} [] {6A041F13-A111-12A3-B0CF-F99818AA68A6} [StormPlayer Object] {6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [WangWangObj Class] {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} [] {70AF1289-F140-A140-D012-C1458759FC07} [Windows Script Host Shell Object] {72C24DD5-D70A-438B-8A42-98424B88AFB8} [] {7C8D1401-A58D-A81C-CD24-A5915C4517C7} [] {81954FAC-1023-154F-895A-1458258AD818} [] {83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38} [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [XML DOM 文档 5.0] {88D969E5-F192-11D4-A65F-0040963251E5} [Free Threaded XML DOM Document 5.0] {88D969E6-F192-11D4-A65F-0040963251E5} [XSL Template 5.0] {88D969E8-F192-11D4-A65F-0040963251E5} [XML HTTP 5.0] {88D969EA-F192-11D4-A65F-0040963251E5} [] {91698482-6555-3666-1222-954784129019} [] {9490415F-65F8-B5C5-D8BA-9405FB120549} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} <, N/A> [] {AA59145F-315D-BC23-AC1F-145DF81A34AA} [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} [Wipe] {AF279B30-86EB-11D1-81BF-0000F87557DB} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <, N/A> [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A> [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [QQPlayerSvr Proxy Control] {CD108273-D434-43E6-AA90-1469F97EB398} [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A> [FlashGet GetFlash Class] {F156768E-81EF-470C-9057-481BA8380DBA} <, N/A> [XML DOM Document 3.0] {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A> [Free Threaded XML DOM Document 3.0] {F5078F33-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A> [XML HTTP 3.0] {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A> [XSL Template 3.0] {F5078F36-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A> [XML DOM Document] {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A> [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A> [FGAutoLive] {F90D830D-C175-4bbe-82C7-FF94669A4C42} [InfoCheck Class] {F91BA567-79B9-467E-BC97-5DBA01BBC5EE} [FGCatchUrl] {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} [IERPCtl Class] {FDC7A535-4070-4B92-A0EA-D9994BCC0DC5} [assist] {FE3FCAE7-0A37-4506-8A7D-3CC9A04D2CA8} <, N/A> [InstallCheck Class] {FFB8C97E-39D4-4E8A-9FE4-B451A0D6CA65} [&使用快车(FlashGet)下载] [&使用快车(FlashGet)下载全部链接] [&使用超级旋风下载] [&使用超级旋风下载全部链接] [导出到 Microsoft Office Excel(&X)] [添加到QQ表情] ================================== 正在运行的进程 [PID: 448 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 584 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 608 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.7.0018.7] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 708 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [PID: 720 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [PID: 968 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [PID: 1096 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [PID: 1300 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\System32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\System32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\System32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\System32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\System32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\System32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\System32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)] [PID: 1420 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [PID: 1564 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [PID: 1876 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\mdimon.dll] [Microsoft Corporation, 11.3.1897.0] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll] [Microsoft Corporation, 11.3.1897.0] [PID: 124 / SYSTEM][C:\Program Files\StormII\stormliv.exe] [北京暴风网际科技有限公司, 3, 8, 3, 15] [C:\Program Files\StormII\MSVCP60.dll] [Microsoft Corporation, 6.02.3104.0] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [PID: 264 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [PID: 1700 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\System32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\System32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\System32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\System32\xxxxxx.dll] [N/A, ] [PID: 1260 / tydz][C:\WINDOWS\system32\WgaTray.exe] [Microsoft Corporation, 1.7.0018.7] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\mfdesy.dll] [N/A, ] [PID: 3848 / tydz][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\MMMHXGGD1061.dll] [N/A, ] [C:\WINDOWS\system32\mfdesy.dll] [N/A, ] [C:\WINDOWS\system32\MMBAIKOK1092.dll] [N/A, ] [C:\WINDOWS\system32\mnmhgsrv.dll] [N/A, ] [C:\WINDOWS\system32\oohxdbyt.dll] [N/A, ] [C:\WINDOWS\system32\mpwdeapi.dll] [N/A, ] [C:\WINDOWS\system32\mndhddwd.dll] [N/A, ] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [C:\WINDOWS\system32\mpmydapi.dll] [N/A, ] [C:\WINDOWS\system32\zxmscwin.dll] [N/A, ] [C:\WINDOWS\system32\apsgdjba.dll] [N/A, ] [C:\WINDOWS\system32\ypdjfbmp.dll] [N/A, ] [C:\WINDOWS\system32\mndsfsrv.dll] [N/A, ] [C:\WINDOWS\system32\ptjhehlp.dll] [N/A, ] [C:\WINDOWS\system32\opshbbty.dll] [N/A, ] [C:\WINDOWS\system32\apzhbtde.dll] [N/A, ] [C:\WINDOWS\system32\zycbdime.dll] [N/A, ] [C:\WINDOWS\system32\zyzxjime.dll] [N/A, ] [C:\WINDOWS\system32\zptlcsys.dll] [N/A, ] [C:\WINDOWS\system32\yxfhcjpg.dll] [N/A, ] [C:\WINDOWS\system32\lofsdjbo.dll] [N/A, ] [C:\WINDOWS\system32\apfocdet.dll] [N/A, ] [C:\WINDOWS\system32\yxcschlp.dll] [N/A, ] [C:\WINDOWS\system32\zywmfime.dll] [N/A, ] [C:\WINDOWS\system32\zxptejpg.dll] [N/A, ] [C:\WINDOWS\system32\ypcqfhlp.dll] [N/A, ] [C:\WINDOWS\system32\jkhxaklo.dll] [N/A, ] [C:\WINDOWS\system32\cdwsbkop.dll] [N/A, ] [C:\WINDOWS\system32\ozfyebyt.dll] [N/A, ] [C:\WINDOWS\system32\igfxpph.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 20.0.0.17] [C:\Program Files\WinZip\wzshlstb.dll] [WinZip Computing, S.L., 4.1 (32-bit)] [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\Program Files\WinZip\wzshlex1.dll] [WinZip Computing, S.L., 4.1 (32-bit)] [C:\Program Files\WinZip\WZCAB3.DLL] [WinZip Computing, S.L., 3.1 (32-bit)] [PID: 3968 / tydz][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)] [PID: 2332 / tydz][C:\WINDOWS\system32\igfxtray.exe] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\mfdesy.dll] [N/A, ] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\igfxress.dll] [Intel Corporation, 3.0.0.4020] [PID: 2632 / tydz][C:\WINDOWS\system32\hkcmd.exe] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\mfdesy.dll] [N/A, ] [C:\WINDOWS\system32\igfxhk.dll] [Intel Corporation, 3.0.0.4020] [C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4020] [PID: 732 / tydz][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.4053] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\mfdesy.dll] [N/A, ] [PID: 2164 / tydz][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\mfdesy.dll] [N/A, ] [PID: 3268 / tydz][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\IEFRAME.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\IEUI.dll] [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130)] [C:\WINDOWS\system32\xmllite.dll] [Microsoft Corporation, 1.00.1018.0] [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510] [C:\Program Files\Internet Explorer\ieproxy.dll] [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130)] [C:\WINDOWS\system32\mfdesy.dll] [N/A, ] [C:\WINDOWS\system32\jkhxaklo.dll] [N/A, ] [C:\WINDOWS\system32\opshbbty.dll] [N/A, ] [C:\WINDOWS\system32\cdwsbkop.dll] [N/A, ] [C:\WINDOWS\system32\apzhbtde.dll] [N/A, ] [C:\WINDOWS\system32\yxcschlp.dll] [N/A, ] [C:\WINDOWS\system32\apfocdet.dll] [N/A, ] [C:\WINDOWS\system32\mpmydapi.dll] [N/A, ] [C:\WINDOWS\system32\lofsdjbo.dll] [N/A, ] [C:\WINDOWS\system32\zycbdime.dll] [N/A, ] [C:\WINDOWS\system32\mndhddwd.dll] [N/A, ] [C:\WINDOWS\system32\apsgdjba.dll] [N/A, ] [C:\WINDOWS\system32\zptlcsys.dll] [N/A, ] [C:\WINDOWS\system32\ptjhehlp.dll] [N/A, ] [C:\WINDOWS\system32\mpwdeapi.dll] [N/A, ] [C:\WINDOWS\system32\ozfyebyt.dll] [N/A, ] [C:\WINDOWS\system32\oohxdbyt.dll] [N/A, ] [C:\WINDOWS\system32\zywmfime.dll] [N/A, ] [C:\WINDOWS\system32\mndsfsrv.dll] [N/A, ] [C:\WINDOWS\system32\zxmscwin.dll] [N/A, ] [C:\WINDOWS\system32\ypcqfhlp.dll] [N/A, ] [C:\WINDOWS\system32\mnmhgsrv.dll] [N/A, ] [C:\WINDOWS\system32\ypdjfbmp.dll] [N/A, ] [C:\WINDOWS\system32\yxfhcjpg.dll] [N/A, ] [C:\WINDOWS\system32\zxptejpg.dll] [N/A, ] [C:\WINDOWS\system32\zyzxjime.dll] [N/A, ] [C:\WINDOWS\system32\ieapfltr.dll] [Microsoft Corporation, 7.0.6000.16461] [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx] [Adobe Systems, Inc., 9,0,115,0] [C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 2692 / tydz][C:\Documents and Settings\tydz\桌面\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900] [C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)] [C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)] [C:\WINDOWS\system32\skqncbib.dll] [N/A, ] [C:\WINDOWS\system32\yzztimsn.dll] [N/A, ] [C:\WINDOWS\system32\nhmxcjkl.dll] [N/A, ] [C:\WINDOWS\system32\tisqatyu.dll] [N/A, ] [C:\WINDOWS\system32\ietzbpaq.dll] [N/A, ] [C:\WINDOWS\system32\ytewcxzsw.dll] [N/A, ] [C:\WINDOWS\system32\aaaaaa.dll] [N/A, ] [C:\WINDOWS\system32\xxxxxx.dll] [N/A, ] [C:\WINDOWS\system32\mfdesy.dll] [N/A, ] [C:\Documents and Settings\tydz\桌面\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT Error. [C:\WINDOWS\notepad.exe %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost 127.0.0.1 mmsk.cn 127.0.0.1 bbs.mmsk.cn 127.0.0.1 www.mmsk.cn 127.0.0.1 soudong.com 127.0.0.1 www.soudong.com ================================== 进程特权扫描 N/A ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]