[CODE]

2008-08-15,23:47:51

SysLog Scanner 1.0 - build 20080726
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 3 (build 2600) - Administrators



========================================
注册项

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <Vistadrv><C:\Program Files\vsdrv\vsdrv.exe>  [3, 1, 0, 15, C:2008-08-13 01:18 M:2007-01-27 08:00]
    <360Safetray><C:\Program Files\360safe\safemon\360tray.exe /start>  []
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.1.70, C:2008-08-13 02:12 M:2008-08-13 02:10]
    <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k>  [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00]
    <NvCplDaemon><RUNDLL32.EXE NvQTwk,NvCplDaemon initialize>  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <paf><C:\WINDOWS\system32\kva.dll>  []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载]
    <><C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm>  [N/A, C:2008-08-13 01:59 M:2008-06-13 09:55]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接]
    <><C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm>  [N/A, C:2008-08-13 01:59 M:2008-06-13 09:55]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\查看当前站点排名]
    <><http://alexa.chinaz.com/alexa.htm>  []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00|(Verified)Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2008-05-01 08:00 M:2007-08-13 18:39|(Verified)N/A, C:2008-05-01 08:00 M:2008-05-01 08:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00|(Verified)Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2008-05-01 08:00 M:2007-08-13 18:39|(Verified)N/A, C:2008-05-01 08:00 M:2008-05-01 08:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00|(Verified)Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2008-05-01 08:00 M:2007-08-13 18:39|(Verified)N/A, C:2008-05-01 08:00 M:2008-05-01 08:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}]
    <启动迅雷5><C:\Program Files\Thunder Network\Thunder\Thunder.exe>  [Thunder Networking Technologies,LTD, 5, 6, 8, 19, C:2008-08-13 01:59 M:2008-07-10 21:15]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{0A155D3C-68E2-4215-A47A-E800A446447A}]
    <浩方对战平台><D:\Program Files\Holdfast\Platform\GameClient.exe>  [(Verified)上海浩方在线信息技术有限公司, 4.8.3.530, C:2008-05-30 20:20 M:2008-05-30 20:20]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{6096E38F-5AC1-4391-8EC4-75DFA92FB32F}]
    <番茄花园><http://www.tomatolei.com>  []


========================================
启动项

[QQ游戏启动加速程序]
    <C:\Documents and Settings\hu\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> "D:\Program Files\Tencent\QQGame\Accel.exe"  > [(Verified)深圳市腾讯计算机系统有限公司, 2, 0, 103, 5, C:2007-06-17 19:00 M:2007-06-17 19:00]


========================================
计划任务



========================================
组件


ShellServiceObjectDelayLoad
[]
    {f6b1a647-7e39-c38e-8f4a-7e392ecf643a}  <C:\WINDOWS\system32\kva.dll>  []

Shell Extension
[Display Panning CPL Extension]
    {42071714-76d4-11d1-8b24-00a0c9068ff3}  <deskpan.dll>  []
[HyperTerminal Icon Ext]
    {88895560-9AA2-1069-930E-00AA0030EBC8}  <C:\WINDOWS\system32\hticons.dll>  [(Verified)Hilgraeve, Inc., 5.1.2600.0, C:2008-08-13 01:03 M:2008-05-01 08:00]
[WinRAR shell extension]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2008-08-13 01:44 M:2008-08-02 19:04]

BrowserHelperObject
[ThunderAtOnce Class]
    {01443AEC-0FD1-40fd-9C87-E93D1494C233}  <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-08-13 01:59 M:2008-06-13 09:43]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-08-13 01:59 M:2008-06-13 09:43]
[SafeMon Class]
    {B69F34DD-F0F9-42DC-9EDD-957187DA688D}  <C:\Program Files\360safe\safemon\safemon.dll>  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42]

ActiveX Extension
[ThunderAtOnce Class]
    {01443AEC-0FD1-40FD-9C87-E93D1494C233}  <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-08-13 01:59 M:2008-06-13 09:43]
[Thunder Agent Class]
    {485463B7-8FB2-4B3B-B29B-8B919B0EACCE}  <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 4, 23, C:2008-08-13 01:59 M:2008-06-13 09:43]
[XMP Class]
    {6483F145-A768-4C41-AACC-52D4D7845851}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>  [Copyright XunLei 2007, 2, 1, 2, 77, C:2008-08-13 01:59 M:2008-07-29 16:40]
[XDRM]
    {693571CB-54A3-4E90-9D52-EEAE1334E2D3}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work>  [Copyright XunLei 2007, 1, 0, 0, 7, C:2008-08-13 01:59 M:2008-07-29 16:40]
[MediaComm Class]
    {7670648D-461B-42AF-BDFE-46D26AF5EFF2}  <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin17.dll>  [Thunder Networking Technologies,LTD, 3, 1, 5, 78, C:2008-08-13 01:59 M:2008-07-29 16:40]
[360SafeLive]
    {87515F61-A66C-4319-A0E0-D416CB8059E3}  <C:\Program Files\360safe\live.dll>  [(Verified)360.cn, 1, 0, 1, 1028, C:2008-07-16 22:00 M:2008-07-16 22:00]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-08-13 01:59 M:2008-06-13 09:43]
[DapCtrl Class]
    {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}  <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5803.60.(124).dll>  [ShenZhen Thunder Networking Technologies Ltd., 2, 1, 5803, 60, C:2008-08-13 01:59 M:2008-07-29 16:40]
[SafeMon Class]
    {B69F34DD-F0F9-42DC-9EDD-957187DA688D}  <C:\Program Files\360safe\safemon\safemon.dll>  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42]
[Tencent Safety Online Base Module]
    {C09B522F-8AED-4E21-A65C-DC1AB652BAEE}  <C:\WINDOWS\DOWNLO~1\TSOBase.ocx>  [(Verified)Tencent Corporation, 2007, 4, 10, 12, C:2008-08-14 21:44 M:2008-08-14 21:44]
[Shockwave Flash Object]
    {D27CDB6E-AE6D-11CF-96B8-444553540000}  <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx>  [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32]
[Thunder DapPlayer]
    {EEDD6FF9-13DE-496B-9A1C-D78B3215E266}  <C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DapPlayer3.0.5712.71.124.dll>  [ShenZhen Thunder Networking Technologies Ltd., 3, 0, 5712, 71, C:2008-08-13 01:59 M:2008-07-29 16:40]
[XPPlayer Class]
    {F3E70CEA-956E-49CC-B444-73AFE593AD7F}  <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.0.0.181.(124).dll>  [Xunlei Networking Technologies,LTD, 2, 0, 0, 181, C:2008-08-13 01:59 M:2008-07-29 16:40]

Context Menu
[WinRAR]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2008-08-13 01:44 M:2008-08-02 19:04]


========================================
服务

[Human Interface Device Access / HidServ][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll">  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]

[Rising Proxy  Service / RfwProxySrv][Running/Auto Start]
    <C:\Program Files\Rising\Rfw\rfwProxy.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.37, C:2008-08-13 02:12 M:2008-08-13 02:10]
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
    <C:\Program Files\Rising\Rfw\rfwsrv.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.76, C:2008-08-13 02:12 M:2008-08-13 02:10]


========================================
驱动

[nv / nv][Stopped/Manual Start]
    <system32\DRIVERS\nv4_mini.sys>  [NVIDIA Corporation, 5.13.01.1460, C:2008-08-13 00:55 M:2001-08-04 00:10]
[nv4 / nv4][Running/Manual Start]
    <system32\DRIVERS\nv4_mini.sys>  [NVIDIA Corporation, 5.13.01.1460, C:2008-08-13 00:55 M:2001-08-04 00:10]
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
    <system32\DRIVERS\tcpip.sys>  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-05-01 08:00 M:2008-06-20 19:51]

[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
    <system32\drivers\ac97intc.sys>  [(Verified)Intel Corporation, 5.10.3523 built by: WinDDK, C:2008-08-13 00:54 M:2001-08-17 12:20]
[HookUrl / HookUrl][Running/Auto Start]
    <\??\C:\Program Files\Rising\Rfw\HookUrl.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.12, C:2008-08-13 02:12 M:2008-08-13 02:10]
[KAVBootC / KAVBootC][Running/Boot Start]
    <system32\Drivers\KAVBootC.sys>  [(Verified)Kingsoft Corporation, 2008,04,28,85, C:2008-08-15 23:30 M:2008-06-17 08:59]
[KAVSafe / KAVSafe][Running/Auto Start]
    <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys>  [(Verified)Kingsoft Corporation, 2008,04,28,65, C:2008-08-15 23:30 M:2008-06-17 08:59]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2008-05-01 08:00 M:2008-05-01 08:00]
[Rising  Rfwbase Driver / RfwBase][Running/Auto Start]
    <System32\DRIVERS\rfwbase.SYS>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.10, C:2008-08-13 02:13 M:2008-08-13 02:10]
[RsFwDrv / RsFwDrv][Running/System Start]
    <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.34, C:2008-08-13 02:12 M:2008-08-13 02:10]
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
    <system32\DRIVERS\RTL8139.SYS>  [(Verified)Realtek Semiconductor Corporation, 5.398.613.2003 built by: WinDDK, C:2008-08-13 00:55 M:2008-04-13 09:35]
[Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys>  [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086, C:2008-05-01 08:00 M:2008-05-01 08:00]


========================================
进程

[PID: 424 / SYSTEM]   \SystemRoot\System32\smss.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]

[PID: 476 / SYSTEM]   \??\C:\WINDOWS\system32\csrss.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 500 / SYSTEM]   \??\C:\WINDOWS\system32\winlogon.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 544 / SYSTEM]   C:\WINDOWS\system32\services.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 556 / SYSTEM]   C:\WINDOWS\system32\lsass.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 708 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 756 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 860 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 932 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 972 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 1040 / SYSTEM]   C:\Program Files\Rising\Rfw\rfwsrv.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.76, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-08-13 01:45 M:2008-08-13 01:45]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-08-13 01:45 M:2008-08-13 01:45]
    C:\Program Files\Rising\Rfw\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RfwRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.17, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\rfwlog.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.16, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\Rfwdrv.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.48, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\ijt_ctrl.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.0, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\unvdet.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.8, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\mPorts.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.6, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 1224 / SYSTEM]   C:\Program Files\Rising\Rfw\rfwProxy.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.37, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-08-13 01:45 M:2008-08-13 01:45]
    C:\Program Files\Rising\Rfw\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RfwRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.17, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\urlrule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1.0.0.15, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\MonMid.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.6, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 1264 / SYSTEM]   C:\Program Files\Rising\Rfw\rfwstub.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.12, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-08-13 01:45 M:2008-08-13 01:45]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-08-13 01:45 M:2008-08-13 01:45]
    C:\Program Files\Rising\Rfw\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 1460 / hu]   C:\WINDOWS\Explorer.EXE   [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-08-13 01:59 M:2008-06-13 09:43]
    C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-08-13 01:59 M:2008-06-13 09:43]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-08-13 01:59 M:2008-07-29 16:40]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-08-13 01:59 M:2008-07-29 16:40]
    C:\Program Files\360safe\safemon\safemon.dll  [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42]
    C:\Program Files\WinRAR\rarext.dll  [N/A, C:2008-08-13 01:44 M:2008-08-02 19:04]

[PID: 1500 / hu]   C:\Program Files\Rising\Rfw\RfwMain.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.1.70, C:2008-08-13 02:12 M:2008-08-13 02:10]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-08-13 01:45 M:2008-08-13 01:45]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-08-13 01:45 M:2008-08-13 01:45]
    C:\Program Files\Rising\Rfw\RsGuiLib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RfwCtrl.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RsXML.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\PngDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\RfwRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.17, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 1616 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 1972 / LOCAL SERVICE]   C:\WINDOWS\System32\alg.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]

[PID: 212 / hu]   C:\WINDOWS\system32\ctfmon.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 2240 / hu]   C:\WINDOWS\system32\wuauclt.exe   [(Verified)Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740), C:2008-08-13 01:06 M:2007-07-30 19:19]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-08-13 02:13 M:2008-08-13 02:10]
    C:\Program Files\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-08-13 02:13 M:2008-08-13 02:10]

[PID: 2796 / hu]   C:\Program Files\arswp\ArSwp.exe   [(Verified)ArSwp.com, 2, 8, 0, 728, C:2008-08-15 23:42 M:2008-07-29 22:36]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-05-01 08:00 M:2008-05-01 08:00]
    C:\Program Files\arswp\plugin\ArFix.dll  [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2008-08-15 23:42 M:2007-11-28 15:19]


========================================
文件关联



========================================
AutoRun.INF



========================================
Winsock提供者



========================================
HOSTS

    127.0.0.1 localhost
    219.235.3.16 search.114.vnet.cn
    219.235.3.16 keyword.vnet.cn
    219.235.3.16 auto.search.msn.com
    219.235.3.16 search.msn.com
    219.235.3.16 cnweb.search.live.com
    219.235.3.16 www.360safe.com
    219.235.3.16 www.k369.com
    219.235.3.16 www.5566.net
    219.235.3.16 360safe.com
    202.165.102.243 update.360safe.com
    219.235.3.16 dl.360safe.com
    219.235.3.16 down.360safe.com
    219.235.3.16 bbs.360safe.com
    219.235.3.16 kaba.360safe.com
    219.235.3.16 baike.360safe.com
    219.235.3.16 www.360.cn
    219.235.3.16 360.cn
    219.235.3.16 wopti.360.cn
    202.165.102.243 update.360.cn
    219.235.3.16 dl.360.cn
    219.235.3.16 down.360.cn
    219.235.3.16 bbs.360.cn
    219.235.3.16 kaba.360.cn
    219.235.3.16 baike.360.cn
    219.235.3.16 360.qihoo.com
    219.235.3.16 360safe.qihoo.com
    219.235.3.16 forum.ikaka.com
    219.235.3.16 www.ikaka.com
    202.165.102.243 update.ikaka.com
    219.235.3.16 forum.jiangmin.com
    202.165.102.243 update.jiangmin.com
    219.235.3.16 tieba.baidu.com
    219.235.3.16 post.baidu.com
    219.235.3.16 zhidao.baidu.com
    219.235.3.16 www.baidu.com
    202.165.102.243 update.rising.com.cn
    219.235.3.16 online.rising.com.cn
    202.165.102.243 center.rising.com.cn
    219.235.3.16 up.duba.net
    219.235.3.16 vi.duba.net
    219.235.3.16 shadu.baidu.com
    219.235.3.16 du.baidu.com
    219.235.3.16 security.symantec.com
    219.235.3.16 shadu.duba.net
    219.235.3.16 bbs.duba.net
    219.235.3.16 online.jiangmin.com
    219.235.3.16 cn.mcafee.com
    219.235.3.16 www.ahn.com.cn
    219.235.3.16 www.kaspersky.com.cn
    219.235.3.16 www.pcav.cn
    219.235.3.16 www.luosoft.com
    219.235.3.16 www.im286.com
    219.235.3.16 an.baidu.com
    219.235.3.16 ma.baidu.com
    219.235.3.16 bbs.htmlman.net
    202.165.102.243 download.rising.com.cn
    202.165.102.243 rsup08.rising.com.cn
    219.235.3.16 10000.286er.com
    219.235.3.16 im286.net
    219.235.3.16 ju.qihoo.com
    219.235.3.16 bbs.chinaz.com
    219.235.3.16 www.qihoo.com
    202.165.102.243 dnl-cn1.kaspersky-labs.com
    202.165.102.243 dnl-cn2.kaspersky-labs.com
    202.165.102.243 dnl-cn3.kaspersky-labs.com
    202.165.102.243 dnl-cn4.kaspersky-labs.com
    202.165.102.243 dnl-cn5.kaspersky-labs.com
    202.165.102.243 dnl-cn6.kaspersky-labs.com
    202.165.102.243 dnl-cn7.kaspersky-labs.com
    202.165.102.243 dnl-cn8.kaspersky-labs.com
    202.165.102.243 dnl-cn9.kaspersky-labs.com
    202.165.102.243 dnl-cn10.kaspersky-labs.com
    202.165.102.243 dnl-cn11.kaspersky-labs.com
    202.165.102.243 dnl-cn12.kaspersky-labs.com
    202.165.102.243 dnl-cn13.kaspersky-labs.com
    202.165.102.243 dnl-cn14.kaspersky-labs.com
    202.165.102.243 dnl-cn15.kaspersky-labs.com
    202.165.102.243 dnl-eu1.kaspersky-labs.com
    202.165.102.243 dnl-eu2.kaspersky-labs.com
    202.165.102.243 dnl-eu3.kaspersky-labs.com
    202.165.102.243 dnl-eu4.kaspersky-labs.com
    202.165.102.243 dnl-eu5.kaspersky-labs.com
    202.165.102.243 dnl-eu6.kaspersky-labs.com
    202.165.102.243 dnl-eu7.kaspersky-labs.com
    202.165.102.243 dnl-eu8.kaspersky-labs.com
    202.165.102.243 dnl-eu9.kaspersky-labs.com
    202.165.102.243 dnl-eu10.kaspersky-labs.com
    202.165.102.243 dnl-eu11.kaspersky-labs.com
    202.165.102.243 dnl-eu12.kaspersky-labs.com
    202.165.102.243 dnl-eu13.kaspersky-labs.com
    202.165.102.243 dnl-eu14.kaspersky-labs.com
    202.165.102.243 dnl-eu15.kaspersky-labs.com
    202.165.102.243 dnl-us1.kaspersky-labs.com
    202.165.102.243 dnl-us2.kaspersky-labs.com
    202.165.102.243 dnl-us3.kaspersky-labs.com
    202.165.102.243 dnl-us4.kaspersky-labs.com
    202.165.102.243 dnl-us5.kaspersky-labs.com
    202.165.102.243 dnl-us6.kaspersky-labs.com
    202.165.102.243 dnl-us7.kaspersky-labs.com
    202.165.102.243 dnl-us8.kaspersky-labs.com
    202.165.102.243 dnl-us9.kaspersky-labs.com
    202.165.102.243 dnl-us10.kaspersky-labs.com
    202.165.102.243 dnl-us11.kaspersky-labs.com
    202.165.102.243 dnl-us12.kaspersky-labs.com
    202.165.102.243 dnl-us13.kaspersky-labs.com
    202.165.102.243 dnl-us14.kaspersky-labs.com
    202.165.102.243 dnl-us15.kaspersky-labs.com
    202.165.102.243 dnl-ru1.kaspersky-labs.com
    202.165.102.243 dnl-ru2.kaspersky-labs.com
    202.165.102.243 dnl-ru3.kaspersky-labs.com
    202.165.102.243 dnl-ru4.kaspersky-labs.com
    202.165.102.243 dnl-ru5.kaspersky-labs.com
    202.165.102.243 dnl-ru6.kaspersky-labs.com
    202.165.102.243 dnl-ru7.kaspersky-labs.com
    202.165.102.243 dnl-ru8.kaspersky-labs.com
    202.165.102.243 dnl-ru9.kaspersky-labs.com
    202.165.102.243 dnl-ru10.kaspersky-labs.com
    202.165.102.243 dnl-ru11.kaspersky-labs.com
    202.165.102.243 dnl-ru12.kaspersky-labs.com
    202.165.102.243 dnl-ru13.kaspersky-labs.com
    202.165.102.243 dnl-ru14.kaspersky-labs.com
    202.165.102.243 dnl-ru15.kaspersky-labs.com
    202.165.102.243 dnl-jp1.kaspersky-labs.com
    202.165.102.243 dnl-jp2.kaspersky-labs.com
    202.165.102.243 dnl-jp3.kaspersky-labs.com
    202.165.102.243 dnl-jp4.kaspersky-labs.com
    202.165.102.243 dnl-jp5.kaspersky-labs.com
    202.165.102.243 dnl-jp6.kaspersky-labs.com
    202.165.102.243 dnl-jp7.kaspersky-labs.com
    202.165.102.243 dnl-jp8.kaspersky-labs.com
    202.165.102.243 dnl-jp9.kaspersky-labs.com
    202.165.102.243 dnl-jp10.kaspersky-labs.com
    202.165.102.243 dnl-jp11.kaspersky-labs.com
    202.165.102.243 dnl-jp12.kaspersky-labs.com
    202.165.102.243 dnl-jp13.kaspersky-labs.com
    202.165.102.243 dnl-jp14.kaspersky-labs.com
    202.165.102.243 dnl-jp15.kaspersky-labs.com
    202.165.102.243 dnl-kr1.kaspersky-labs.com
    202.165.102.243 dnl-kr2.kaspersky-labs.com
    202.165.102.243 dnl-kr3.kaspersky-labs.com
    202.165.102.243 dnl-kr4.kaspersky-labs.com
    202.165.102.243 dnl-kr5.kaspersky-labs.com
    202.165.102.243 dnl-kr6.kaspersky-labs.com
    202.165.102.243 dnl-kr7.kaspersky-labs.com
    202.165.102.243 dnl-kr8.kaspersky-labs.com
    202.165.102.243 dnl-kr9.kaspersky-labs.com
    202.165.102.243 dnl-kr10.kaspersky-labs.com
    202.165.102.243 dnl-kr11.kaspersky-labs.com
    202.165.102.243 dnl-kr12.kaspersky-labs.com
    202.165.102.243 dnl-kr13.kaspersky-labs.com
    202.165.102.243 dnl-kr14.kaspersky-labs.com
    202.165.102.243 dnl-kr15.kaspersky-labs.com
    202.165.102.243 dnl-cd1.kaspersky-labs.com
    202.165.102.243 dnl-cd2.kaspersky-labs.com
    202.165.102.243 dnl-cd3.kaspersky-labs.com
    202.165.102.243 dnl-cd4.kaspersky-labs.com
    202.165.102.243 dnl-cd5.kaspersky-labs.com
    202.165.102.243 dnl-cd6.kaspersky-labs.com
    202.165.102.243 dnl-cd7.kaspersky-labs.com
    202.165.102.243 dnl-cd8.kaspersky-labs.com
    202.165.102.243 dnl-cd9.kaspersky-labs.com
    202.165.102.243 dnl-cd10.kaspersky-labs.com
    202.165.102.243 dnl-cd11.kaspersky-labs.com
    202.165.102.243 dnl-cd12.kaspersky-labs.com
    202.165.102.243 dnl-cd13.kaspersky-labs.com
    202.165.102.243 dnl-cd14.kaspersky-labs.com
    202.165.102.243 dnl-cd15.kaspersky-labs.com
    202.165.102.243 downloads1.kaspersky-labs.com
    202.165.102.243 downloads2.kaspersky-labs.com
    202.165.102.243 downloads3.kaspersky-labs.com
    202.165.102.243 downloads4.kaspersky-labs.com
    202.165.102.243 downloads5.kaspersky-labs.com
    219.235.3.16 rss.360safe.com
    219.235.3.16 x.360safe.com
    219.235.3.16 d.360safe.com
    219.235.3.16 updatem.360safe.com
    219.235.3.16 softm.360safe.com
    219.235.3.16 ishare.sina.com.cn
    219.235.3.16 search.cn.yahoo.com
    219.235.3.16 www.google.com
    219.235.3.16 google.com
    219.235.3.16 www.google.cn
    219.235.3.16 www.yahoo.com.cn
    219.235.3.16 cn.yahoo.com
    219.235.3.16 search.tom.com
    219.235.3.16 zhuansha.duba.net
    219.235.3.16 buy.duba.net
    219.235.3.16 client.download.duba.net
    219.235.3.16 page.so.163.com
    219.235.3.16 www.soso.com
    219.235.3.16 sou.china.com
    219.235.3.16 test.591jx.com
    219.235.3.16 a.topxxxx.cn
    219.235.3.16 picon.chinaren.com
    219.235.3.16 www.5566.net
    127.0.0.1 p.qqkx.com
    127.0.0.1 news.netandtv.com
    127.0.0.1 z.neter888.cn
    127.0.0.1 b.myblank.cn
    127.0.0.1 wvw.wokutu.com
    127.0.0.1 unionch.qyule.com
    127.0.0.1 www.qyule.com
    127.0.0.1 it.itjc.cn
    127.0.0.1 www.linkwww.com
    127.0.0.1 vod.kaicn.com
    127.0.0.1 www.tx8688.com
    127.0.0.1 b.neter888.cn
    127.0.0.1 promote.huanqiu.com
    127.0.0.1 www.huanqiu.com
    127.0.0.1 www.haokanla.com
    127.0.0.1 play.unionsky.cn
    127.0.0.1 www.52v.com
    127.0.0.1 www.gghka.cn
    127.0.0.1 icon.ajiang.net
    127.0.0.1 new.ete.cn
    127.0.0.1 www.stiae.cn
    127.0.0.1 o.neter888.cn
    127.0.0.1 comm.jinti.com
    127.0.0.1 www.google-analytics.com
    127.0.0.1 hz.mmstat.com
    127.0.0.1 www.game175.cn
    127.0.0.1 x.neter888.cn
    127.0.0.1 z.neter888.cn
    127.0.0.1 p.etimes888.com
    127.0.0.1 hx.etimes888.com
    127.0.0.1 abc.qqkx.com
    127.0.0.1 dm.popdm.cn
    127.0.0.1 www.yl9999.com
    127.0.0.1 www.dajiadoushe.cn
    127.0.0.1 down.nihao29.cn
    127.0.0.1 v.onondown.com.cn
    127.0.0.1 www.interoo.net
    127.0.0.1 bally1.bally-bally.net
    127.0.0.1 www.bao5605509.cn
    127.0.0.1 down.nihao29.cn
    127.0.0.1 www.mzd020.cn
    127.0.0.1 jzm015.cn
    127.0.0.1 down.hs7yue.cn
    127.0.0.1 new.doups.cn
    127.0.0.1 w.qq-uc.cn
    127.0.0.1 down.nihao69.cn
    127.0.0.1 www.rty456.cn
    127.0.0.1 www.werqwer.cn
    127.0.0.1 1.360-1.cn
    127.0.0.1 5.360-5.cn
    127.0.0.1 user1.23-16.net
    127.0.0.1 user1.23-18.net
    127.0.0.1 www.guccia.net
    127.0.0.1 www.interoo.net
    127.0.0.1 upa.netsool.net
    127.0.0.1 pua.lianxiac.net
    127.0.0.1 js.users.51.la
    127.0.0.1 vip2.51.la
    127.0.0.1 web.51.la
    127.0.0.1 qq.gong2008.com
    127.0.0.1 2008tl.copyip.com
    127.0.0.1 tla.laozihuolaile.cn
    127.0.0.1 www.tx6868.cn
    127.0.0.1 p001.tiloaiai.com
    127.0.0.1 s1.tl8tl.com
    127.0.0.1 s1.gong2008.com
    127.0.0.1 mm1.laozihuolaile.cn
    127.0.0.1 mm2.laozihuolaile.cn
    127.0.0.1 tlbm2.laozihuolaile.cn
    127.0.0.1 tlbm3.laozihuolaile.cn
    127.0.0.1 www.6161q1.cn
    127.0.0.1 www.6161q2.cn
    127.0.0.1 www.6161h1.cn
    127.0.0.1 www.6161h2.cn


[/CODE]