[CODE] 2008-09-20,19:36:15 SysLog Scanner 1.0 - build 20080726 Arswp (http://www.arswp.com) Windows XP Professional Service Pack 3 (build 2600) - Administrators ======================================== 注册项 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft Corporation, 1.07 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft Corporation, 1.09 (XPClient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{AEB6717E-7E19-11d0-97EE-00C04FD91972}> [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用iTudou下载节目] <> [N/A, C:2007-03-22 10:28 M:2007-03-22 10:28] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载] <> [N/A, C:2007-07-12 16:14 M:2007-02-28 14:59] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接] <> [N/A, C:2007-07-12 16:14 M:2007-02-10 14:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] [ATI Technologies Inc., 6.14.10.4162, C:1980-01-01 00:00 M:2007-03-03 04:47] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] [Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy] <%SystemRoot%\System32\dimsntfy.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-09-10 12:45 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] <浏览器自定义组件> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14|Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-11-07 01:31 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14|Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|N/A, C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14|Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|N/A, C:2004-08-17 12:00 M:2004-08-17 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14|Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|N/A, C:2006-11-02 23:38 M:2006-11-02 23:38] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-11-07 01:31 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] <%SystemRoot%\system32\ie4uinit.exe> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\BJ Language Monitor] [Microsoft Corporation, 5.1.2600.2082 (xpsp(skatari).040213-0952), C:2004-08-16 16:38 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Local Port] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\PJL Language Monitor] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-16 16:39 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Standard TCP/IP Port] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\USB Monitor] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] ======================================== 启动项 ======================================== 计划任务 ======================================== 组件 ShredTaskScheduler [Browseui 预加载程序] {438755C2-A8BA-11D1-B96B-00A0C90312E1} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [组件类别缓存程序] {8C7461EF-2B13-11d2-BE35-3078302C2030} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] ShellExecuteHook [URL 执行挂钩] {AEB6717E-7E19-11d0-97EE-00C04FD91972} [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] Shell Extension [Multimedia File Property Sheet] {00022613-0000-0000-C000-000000000046} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [ICM 扫描仪管理] {176d6597-26d3-11d1-b350-080036a75b03} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [NTFS Security Page] {1F2E5C40-9550-11CE-99D2-00AA006E086C} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [OLE Docfile Property Page] {3EA48300-8CF6-101B-84FB-666CCB9BCD32} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Shell extensions for sharing] {40dd6e20-7c17-11ce-a804-00aa003ca9f6} [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PlusPack CPL Extension] {41E300E0-78B6-11ce-849B-444553540000} <%SystemRoot%\system32\themeui.dll> [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Display Adapter CPL Extension] {42071712-76d4-11d1-8b24-00a0c9068ff3} [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Display Monitor CPL Extension] {42071713-76d4-11d1-8b24-00a0c9068ff3} [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Display Panning CPL Extension] {42071714-76d4-11d1-8b24-00a0c9068ff3} [] [DS Security Page] {4E40F770-369C-11d0-8922-00A024AB2DBB} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Compatibility Page] {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Shell Scrap DataHandler] {56117100-C0CD-101B-81E2-00AA004AE837} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Disk Copy Extension] {59099400-57FF-11CE-BD94-0020AF85B590} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Shell extensions for Microsoft Windows Network objects] {59be4990-f85c-11ce-aff7-00aa003ca9f6} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [ICM 监视器管理] {5DB2625A-54DF-11D0-B6C4-0800091AA605} <%SystemRoot%\System32\icmui.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [ICM 打印机管理] {675F097E-4C4D-11D0-B6C1-0800091AA605} <%SystemRoot%\system32\icmui.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Web Printer Shell Extension] {77597368-7b15-11d0-a0c2-080036af3f03} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Disk Quota UI] {7988B573-EC89-11cf-9C00-00AA00A14F56} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [HyperTerminal Icon Ext] {88895560-9AA2-1069-930E-00AA0030EBC8} [Hilgraeve, Inc., 5.1.2600.0, C:2006-11-07 01:29 M:2004-08-17 20:00] [字体] {BD84B380-8CA2-1069-AB1D-08000948F534} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [ICC 配置文件] {DBCE2480-C732-101B-BE72-BA78E9AD5B27} <%SystemRoot%\system32\icmui.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Printers Security Page] {F37C5810-4D3F-11d0-B4BF-00AA00BBB723} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Shell extensions for sharing] {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Display TroubleShoot CPL Extension] {f92e8c40-3d33-11d2-b1aa-080036a75b03} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Crypto PKO Extension] {7444C717-39BF-11D1-8CD9-00C04FC29D45} [Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [Crypto Sign Extension] {7444C719-39BF-11D1-8CD9-00C04FC29D45} [Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [网络连接] {7007ACC7-3202-11D1-AAD2-00805FC1270E} [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [网络连接] {992CFFA0-F557-101A-88EC-00DD010CCC48} [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [扫描仪和照相机] {E211B736-43FD-11D1-9EFB-0000F8757FCD} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [扫描仪和照相机] {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [扫描仪和照相机] {905667aa-acd6-11d2-8080-00805f6596d2} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [扫描仪和照相机] {3F953603-1008-4f6e-A73A-04AAC7A992F1} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [扫描仪和照相机] {83bbcbf3-b28a-4919-a5aa-73027445d672} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Remote Sessions CPL Extension] {F0152790-D56E-4445-850E-4F3117DB740C} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2006-11-07 01:29 M:2008-04-13 19:13] [Windows Script Host 的 Shell extensions] {60254CA5-953B-11CF-8C96-00AA00B8708C} [Microsoft Corporation, 5.7.0.18066, C:2004-08-17 12:00 M:2008-05-09 18:53] [Microsoft 数据链接] {2206CDB2-19C1-11D1-89E0-00C04FD7A829} [Microsoft Corporation, 2.81.1117.0 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:31 M:2004-08-17 20:00] [Tasks Folder Icon Handler] {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:31 M:2008-04-13 19:13] [Tasks Folder Shell Extension] {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:31 M:2008-04-13 19:13] [任务计划] {D6277990-4C6A-11CF-8D87-00AA0060F5BF} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:31 M:2008-04-13 19:13] [Set Program Access and Defaults] {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Auto Update Property Sheet Extension] {5F327514-6C5E-4d60-8F16-D07FA08A78ED} [(Verified)Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057), C:2006-11-07 01:31 M:2007-04-16 22:45] [搜索] {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [帮助和支持] {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [帮助和支持] {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [运行...] {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Internet] {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [电子邮件] {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [字体] {D20EA4E1-3957-11d2-A40B-0C5020524152} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [管理工具] {D20EA4E1-3957-11d2-A40B-0C5020524153} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Previous Versions Property Page] {596AB062-B4D2-4215-9F74-E9109B0A8153} [Microsoft Corporation, 6.00.3800.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Previous Versions] {9DB7A13C-F208-4981-8353-73CC61AE2783} [Microsoft Corporation, 6.00.3800.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Audio Media Properties Handler] {875CB1A1-0F29-45de-A1AE-CFB4950D0B78} <%SystemRoot%\system32\shmedia.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Video Media Properties Handler] {40C3D757-D6E4-4b49-BB41-0E5BBEA28817} <%SystemRoot%\system32\shmedia.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Wav Properties Handler] {E4B29F9D-D390-480b-92FD-7DDB47101D71} <%SystemRoot%\system32\shmedia.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Avi Properties Handler] {87D62D94-71B3-4b9a-9489-5FE6850DC73E} <%SystemRoot%\system32\shmedia.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Midi Properties Handler] {A6FD9E45-6E44-43f9-8644-08598F5A74D9} <%SystemRoot%\system32\shmedia.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Video Thumbnail Extractor] {c5a40261-cd64-4ccf-84cb-c394da41d590} <%SystemRoot%\system32\shmedia.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft Internet 工具栏] {5E6AB780-7743-11CF-A12B-00AA004AE837} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [下载状态] {22BF0C20-6DA7-11D0-B373-00A0C9034938} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [补充的外壳文件夹] {91EA3F8B-C99B-11d0-9815-00C04FD91972} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [补充的外壳文件夹 2] {6413BA2C-B461-11d1-A18A-080036B11A03} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [BandProxy] {F61FFEC1-754F-11d0-80CA-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft BrowserBand] {7BA4C742-9E81-11CF-99D3-00AA004AE837} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [搜索区] {30D02401-6A81-11d0-8274-00C04FD5AE38} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [窗格中的搜索] {169A0691-8DF9-11d1-A1C4-00C04FD75D13} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Web 搜索] {07798131-AF23-11d1-9111-00A0C98BA67D} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [注册数目路选项实用程序] {AF4F6510-F982-11d0-8595-00AA004CD6D8} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [地址(&A)] {01E04581-4EEE-11d0-BFE9-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [地址 EditBox] {A08C11D2-A228-11d0-825B-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft AutoComplete] {00BB2763-6A77-11D0-A535-00C04FD7D062} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [TridentImageExtractor] {7376D660-C583-11d0-A3A5-00C04FD706EC} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [MRU 自动完成列表] {6756A641-DE71-11d0-831B-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [自定义 MRU 自动完成列表] {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [可访问的] {7e653215-fa25-46bd-a339-34a2790f3cb7} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [跟踪弹出栏] {acf35015-526e-4230-9596-becbe19f0ac9} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft 历史自动完成列表] {00BB2764-6A77-11D0-A535-00C04FD7D062} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft 外壳文件夹自动完成列表] {03C036F1-A186-11D0-824A-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft 多个自动完成列表容器] {00BB2765-6A77-11D0-A535-00C04FD7D062} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Shell Band Site Menu] {ECD4FC4E-521C-11D0-B792-00A0C90312E1} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [外壳 DeskBarApp] {3CCF8A41-5C85-11d0-9796-00AA00B90ADF} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [外壳 DeskBar] {ECD4FC4C-521C-11D0-B792-00A0C90312E1} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [外壳 Rebar BandSite] {ECD4FC4D-521C-11D0-B792-00A0C90312E1} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [用户帮助] {DD313E04-FEFF-11d1-8ECD-0000F87A470C} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [全局文件夹设置] {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Favorites Band] {EFA24E61-B078-11d0-89E4-00C04FC9E26E} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Shell Automation Inproc Service] {0A89A860-D7B1-11CE-8350-444553540000} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Shell DocObject Viewer] {E7E4BC40-E76A-11CE-A9BB-00AA004AE837} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft Browser Architecture] {A5E46E3A-8849-11D1-9D8C-00C04FC99D61} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [InternetShortcut] {FBF23B40-E3F0-101B-8488-00AA003E56F8} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft Url History 服务] {3C374A40-BAE4-11CF-BF7D-00AA006946EE} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [历史记录] {FF393560-C2A7-11CF-BFF4-444553540000} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Internet 临时文件] {7BD29E00-76C1-11CF-9DD0-00A0C9034933} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Internet 临时文件] {7BD29E01-76C1-11CF-9DD0-00A0C9034933} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft Url 搜索挂接] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [IE4 套件初始屏幕] {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [CDF Extension Copy Hook] {67EA19A0-CCEF-11d0-8024-00C04FD75D13} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [ISFBand OC] {131A6951-7F78-11D0-A979-00C04FD705A2} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Search Assistant OC] {9461b922-3c5a-11d2-bf8b-00c04fb93661} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Internet] {3DC7A020-0ACD-11CF-A9BB-00AA004AE837} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Internet Name Space] {871C5380-42A0-1069-A2EA-08002B30309D} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [浏览器栏] {EFA24E64-B078-11d0-89E4-00C04FC9E26E} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Sendmail service] {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Sendmail service] {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [ActiveX 高速缓存文件夹] {88C6C381-2E85-11D0-94DE-444553540000} <%SystemRoot%\system32\occache.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [WebCheck] {E6FB5E20-DE35-11CF-9C87-00AA005127ED} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Subscription Mgr] {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [预订文件夹] {F5175861-2688-11d0-9C5E-00AA00A45957} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [WebCheckWebCrawler] {08165EA0-E946-11CF-9C87-00AA005127ED} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [WebCheckChannelAgent] {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [TrayAgent] {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Code Download Agent] {7D559C10-9FE9-11d0-93F7-00AA0059CE02} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [ConnectionAgent] {E6CC6978-6B6E-11D0-BECA-00C04FD940BE} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [PostAgent] {D8BD2030-6FC9-11D0-864F-00AA006809D9} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [WebCheck SyncMgr Handler] {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} <%SystemRoot%\system32\webcheck.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Shell Application Manager] {352EC2B7-8B9A-11D1-B8AE-006008059382} <%SystemRoot%\system32\appwiz.cpl> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [Installed Apps Enumerator] {0B124F8F-91F0-11D1-B8B5-006008059382} <%SystemRoot%\system32\appwiz.cpl> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [Darwin App Publisher] {CFCCC7A0-A282-11D1-9082-006008059382} <%SystemRoot%\system32\appwiz.cpl> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [Shell Image Verbs] {e84fda7c-1d6a-45f6-b725-cb260c236066} <%SystemRoot%\system32\shimgvw.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Shell Image Data Factory] {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178} <%SystemRoot%\system32\shimgvw.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [GDI+ 文件缩略图解压缩程序] {3F30C968-480A-4C6C-862D-EFC0897BB84B} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [摘要信息缩略图处理程序(DOCFILES)] {9DBD2C50-62AD-11d0-B806-00C04FD706EC} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [HTML 缩略图的解压缩程序] {EAB841A0-9550-11cf-8C16-00805F1408F3} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Shell Image Property Handler] {eb9b1153-3b57-4e68-959a-a3266bc3d7fe} <%SystemRoot%\system32\shimgvw.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [网络出版向导] {CC6EEFFB-43F6-46c5-9619-51D571967F7D} <%SystemRoot%\system32\netplwiz.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [通过 Web 订购照片] {add36aa8-751a-4579-a266-d66f5202ccbb} <%SystemRoot%\system32\netplwiz.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [外壳出版向导对象] {6b33163c-76a5-4b6c-bf21-45de9cd503a1} <%SystemRoot%\system32\netplwiz.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [获取 Passport 向导] {58f1f272-9240-4f51-b6d4-fd63d1618591} <%SystemRoot%\system32\netplwiz.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [频道文件] {f39a0dc0-9cc8-11d0-a599-00c04fd64433} <%SystemRoot%\system32\cdfview.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [频道快捷方式] {f3aa0dc0-9cc8-11d0-a599-00c04fd64434} <%SystemRoot%\system32\cdfview.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [频道句柄对象] {f3ba0dc0-9cc8-11d0-a599-00c04fd64435} <%SystemRoot%\system32\cdfview.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Channel Menu] {f3da0dc0-9cc8-11d0-a599-00c04fd64437} <%SystemRoot%\system32\cdfview.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Channel Properties] {f3ea0dc0-9cc8-11d0-a599-00c04fd64438} <%SystemRoot%\system32\cdfview.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Extensions Manager Folder] {692F0339-CBAA-47e6-B5B5-3B84DB604E87} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [FTP Folders Webview] {63da6ec0-2e98-11cf-8d82-444553540000} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft DocProp Shell Ext] {883373C3-BF89-11D1-BE35-080036B11A03} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft DocProp Inplace Edit Box Control] {A9CF0EAE-901A-4739-A481-E35B73E47F6D} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft DocProp Inplace ML Edit Box Control] {8EE97210-FD1F-4B19-91DA-67914005F020} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft DocProp Inplace Droplist Combo Control] {0EEA25CC-4362-4A12-850B-86EE61B0D3EB} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft DocProp Inplace Calendar Control] {6A205B57-2567-4A2C-B881-F787FAB579A3} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft DocProp Inplace Time Control] {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Directory Query UI] {8A23E65E-31C2-11d0-891C-00A024AB2DBB} <%SystemRoot%\system32\dsquery.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Shell properties for a DS object] {9E51E0D0-6E0F-11d2-9601-00C04FA31A86} <%SystemRoot%\system32\dsquery.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Directory Object Find] {163FDC20-2ABC-11d0-88F0-00A024AB2DBB} <%SystemRoot%\system32\dsquery.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Directory Start/Search Find] {F020E586-5264-11d1-A532-0000F8757D7E} <%SystemRoot%\system32\dsquery.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Directory Property UI] {0D45D530-764B-11d0-A1CA-00AA00C16E65} <%SystemRoot%\system32\dsuiext.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [Directory Context Menu Verbs] {62AE1F9A-126A-11D0-A14B-0800361B1103} <%SystemRoot%\system32\dsuiext.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [MyDocs Copy Hook] {ECF03A33-103D-11d2-854D-006008059367} <%SystemRoot%\system32\mydocs.dll> [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [MyDocs Drop Target] {ECF03A32-103D-11d2-854D-006008059367} <%SystemRoot%\system32\mydocs.dll> [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [MyDocs Properties] {4a7ded0a-ad25-11d0-98a8-0800361b1103} <%SystemRoot%\system32\mydocs.dll> [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Offline Files Menu] {750fdf0e-2a26-11d1-a3ea-080036587f03} <%SystemRoot%\System32\cscui.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Offline Files Folder Options] {10CFC467-4392-11d2-8DB4-00C04FA31A66} <%SystemRoot%\System32\cscui.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [脱机文件夹] {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E} <%SystemRoot%\System32\cscui.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Agent Character Property Sheet Handler] {143A62C8-C33B-11D1-84FE-00C04FA34A14} [Microsoft Corporation, 2.00.0.3427, C:2004-08-17 12:00 M:2008-04-13 19:13] [DfsShell] {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] [%DESC_PublishDropTarget%] {60fd46de-f830-4894-a628-6fa81bc0190d} <%SystemRoot%\system32\photowiz.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [MMC Icon Handler] {7A80E4A8-8005-11D2-BCF8-00C04F72C717} <%SystemRoot%\System32\mmcshext.dll> [Microsoft Corporation, 5.2.3790.4136 (srv03_sp2_qfe.070821-1204), C:2004-08-17 12:00 M:2008-04-13 19:13] [.CAB file viewer] {0CD7A5C0-9F37-11CE-AE65-08002B2E1262} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [用户(&P)...] {32714800-2E5F-11d0-8B85-00AA0044F941} [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-11-07 01:31 M:2008-04-13 19:13] [Windows Media Player Burn Audio CD Context Menu Handler] {8DD448E6-C188-4aed-AF92-44956194EB1F} [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 12:00 M:2006-11-02 23:06] [Windows Media Player Play as Playlist Context Menu Handler] {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C} [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 12:00 M:2006-11-02 23:06] [Windows Media Player Add to Playlist Context Menu Handler] {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD} [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 12:00 M:2006-11-02 23:06] [Shell Search Band] {21569614-B795-46b1-85F4-E737A8DC09AD} <%SystemRoot%\system32\browseui.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [WinRAR shell extension] {B41DB860-8EE4-11D2-9906-E49FADC173CA} [N/A, C:2007-02-01 13:57 M:2006-12-04 18:43] [Microsoft Office HTML Icon Handler] {42042206-2D85-11D3-8CFF-005004838597} [(Verified)Microsoft Corporation, 11.0.5510, C:2003-07-14 22:52 M:2003-07-14 22:52] [Web Folders] {BDEADF00-C265-11D0-BCED-00A0C90AB50F} [(Verified)Microsoft Corporation, 11.0.5510.0, C:2003-07-11 02:15 M:2003-07-11 02:15] [Portable Media Devices] {640167b4-59b0-47a6-b335-a6b3c0695aea} <%SystemRoot%\system32\Audiodev.dll> [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] [Portable Devices] {35786D3C-B075-49b9-88DD-029876E11C01} <%SystemRoot%\system32\wpdshext.dll> [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] [Portable Devices Menu] {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} <%SystemRoot%\system32\wpdshext.dll> [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] [DllRegShlExt extension] {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} [www.Tudou.com, 1.1.0.0, C:2007-01-24 18:07 M:2007-01-24 18:07] Protocols [AP Class Install Handler filter] {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [AP lzdhtml encoding/decoding Filter] {8f6b0360-b80d-11d0-a9b3-006097942311} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [WebView MIME Filter] {733AC4CB-F1A4-11d0-B951-00A0C90312E1} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] [] {807553E5-5146-11D5-A672-00B0D022E945} [(Verified)Microsoft Corporation, 11.0.5510, C:2003-07-14 22:45 M:2003-07-14 22:45] [Microsoft HTML About Pluggable Protocol] {3050F406-98B5-11CF-BB82-00AA00BDCE0B} <%SystemRoot%\system32\mshtml.dll> [Microsoft Corporation, 6.00.2900.3132 (xpsp_sp2_gdr.070504-1301), C:2004-08-17 12:00 M:2007-05-04 05:32] [CDL: Asychronous Pluggable Protocol Handler] {3dd53d40-7b8b-11D0-b013-00aa0059ce02} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [DVD: 可插入协议] {12D51199-0DB5-46FE-A120-47A3D7D937CC} [Microsoft Corporation, 6.05.2600.5512 (xpsp.080413-0845), C:2004-08-17 12:00 M:2008-04-13 19:13] [file:, local: Asychronous Pluggable Protocol Handler] {79eac9e7-baf9-11ce-8c82-00aa004ba90b} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [ftp: Asychronous Pluggable Protocol Handler] {79eac9e3-baf9-11ce-8c82-00aa004ba90b} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [gopher: Asychronous Pluggable Protocol Handler] {79eac9e4-baf9-11ce-8c82-00aa004ba90b} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [http: Asychronous Pluggable Protocol Handler] {79eac9e2-baf9-11ce-8c82-00aa004ba90b} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [https: Asychronous Pluggable Protocol Handler] {79eac9e5-baf9-11ce-8c82-00aa004ba90b} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft InfoTech Protocols for IE 4.0] {9D148291-B9C8-11D0-A4CC-0000F80149F6} [Microsoft Corporation, 5.2.3790.4186 (srv03_sp2_qfe.071108-1306), C:2004-08-17 12:00 M:2008-04-13 19:13] [Microsoft HTML Javascript Pluggable Protocol] {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} <%SystemRoot%\system32\mshtml.dll> [Microsoft Corporation, 6.00.2900.3132 (xpsp_sp2_gdr.070504-1301), C:2004-08-17 12:00 M:2007-05-04 05:32] [Microsoft HTML Mailto Pluggable Protocol] {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} <%SystemRoot%\system32\mshtml.dll> [Microsoft Corporation, 6.00.2900.3132 (xpsp_sp2_gdr.070504-1301), C:2004-08-17 12:00 M:2007-05-04 05:32] [MHTML Asychronous Pluggable Protocol Handler] {05300401-BCBC-11d0-85E3-00C04FD85AB4} <%SystemRoot%\system32\inetcomm.dll> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-11-07 01:31 M:2008-04-13 19:13] [mk: Asychronous Pluggable Protocol Handler] {79eac9e6-baf9-11ce-8c82-00aa004ba90b} [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Microsoft HTML Resource Pluggable Protocol] {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} <%SystemRoot%\system32\mshtml.dll> [Microsoft Corporation, 6.00.2900.3132 (xpsp_sp2_gdr.070504-1301), C:2004-08-17 12:00 M:2007-05-04 05:32] [Microsoft HTML Resource Pluggable Protocol] {76E67A63-06E9-11D2-A840-006008059382} <%SystemRoot%\system32\mshtml.dll> [Microsoft Corporation, 6.00.2900.3132 (xpsp_sp2_gdr.070504-1301), C:2004-08-17 12:00 M:2007-05-04 05:32] [TV: 可插入协议] {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} [Microsoft Corporation, 6.05.2600.5512 (xpsp.080413-0845), C:2004-08-17 12:00 M:2008-04-13 19:13] [WiaProtocol Class] {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] ActiveX Extension [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [(Verified)Thunder Networking Technologies,LTD, 1.0.2.9, C:2007-07-12 16:14 M:2007-06-26 17:04] [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [Thunder Networking Technologies,LTD, 5, 0, 3, 20, C:2007-07-12 16:14 M:2007-04-27 18:10] [Microsoft Terminal Services Client Control (redist)] {4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2} <%systemroot%\system32\mstscax.dll> [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2006-11-07 01:29 M:2008-04-13 19:13] [Microsoft Terminal Services Client Control (redist)] {4EDCB26C-D24C-4e72-AF07-B576699AC0DE} <%systemroot%\system32\mstscax.dll> [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2006-11-07 01:29 M:2008-04-13 19:13] [Microsoft Terminal Services Client Control (redist)] {7390f3d8-0439-4c05-91e3-cf5cb290c3d0} <%systemroot%\system32\mstscax.dll> [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2006-11-07 01:29 M:2008-04-13 19:13] [Microsoft Terminal Services Client Control (redist)] {7584c670-2274-4efb-b00b-d6aaba6d3850} <%systemroot%\system32\mstscax.dll> [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2006-11-07 01:29 M:2008-04-13 19:13] [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [(Verified)Thunder Networking Technologies,LTD, 5, 0, 3, 11, C:2007-07-12 16:14 M:2007-06-08 17:49] [Microsoft Terminal Services Client Control (redist)] {9059f30f-4eb1-4bd2-9fdc-36f43a218f4a} <%systemroot%\system32\mstscax.dll> [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2006-11-07 01:29 M:2008-04-13 19:13] [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll> [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32] Context Menu [ASW] {33C9E362-3EDA-4930-8AFE-5DA39A8BB77A} [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-28 13:16] [DLLRegSvr] {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} [www.Tudou.com, 1.1.0.0, C:2007-01-24 18:07 M:2007-01-24 18:07] [Offline Files] {750fdf0e-2a26-11d1-a3ea-080036587f03} <%SystemRoot%\System32\cscui.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Open With] {09799AFB-AD67-11d1-ABCD-00C04FC30936} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] [Open With EncryptionMenu] {A470F8CF-A1E8-4f65-8335-227475AA5C46} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] [WinRAR] {B41DB860-8EE4-11D2-9906-E49FADC173CA} [N/A, C:2007-02-01 13:57 M:2006-12-04 18:43] [Send To] {7BA4C740-9E81-11CF-99D3-00AA004AE837} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] [Sharing] {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] ======================================== 服务 [Alerter / Alerter][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\system32\alrsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [Application Layer Gateway Service / ALG][Stopped/Manual Start] <%SystemRoot%\System32\alg.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Application Management / AppMgmt][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\appmgmts.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] <%SystemRoot%\system32\Ati2evxx.exe> [ATI Technologies Inc., 6.14.10.4162, C:1980-01-01 00:00 M:2007-03-03 04:46] [Windows Audio / AudioSrv][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\audiosrv.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Background Intelligent Transfer Service / BITS][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\qmgr.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 6.7.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:31 M:2008-04-13 19:13] [Computer Browser / Browser][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\browser.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [Bluetooth Support Service / BthServ][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k bthsvcs --> "%SystemRoot%\System32\bthserv.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] [Indexing Service / CiSvc][Stopped/Disabled] <%SystemRoot%\system32\cisvc.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [ClipBook / ClipSrv][Stopped/Disabled] <%SystemRoot%\system32\clipsrv.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] [COM+ System Application / COMSysApp][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:14] [Cryptographic Services / CryptSvc][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\cryptsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [DCOM 服务器进程启动器 / DcomLaunch][Running/Auto Start] <%SystemRoot%\system32\svchost -k DcomLaunch --> "%SystemRoot%\system32\rpcss.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] [DHCP Client / Dhcp][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\dhcpcsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start] <%SystemRoot%\System32\dmadmin.exe /com> [Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2004-08-17 12:00 M:2008-04-13 19:14] [Logical Disk Manager / dmserver][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\dmserver.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corp., 2600.2180.503.0, C:2004-08-17 12:00 M:2004-08-17 12:00] [DNS Client / Dnscache][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k NetworkService --> "%SystemRoot%\System32\dnsrslvr.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Wired AutoConfig / Dot3svc][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k dot3svc --> "%SystemRoot%\System32\dot3svc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-09-10 12:45 M:2008-04-13 19:13] [Extensible Authentication Protocol Service / EapHost][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k eapsvcs --> "%SystemRoot%\System32\eapsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-09-10 12:45 M:2008-04-13 19:13] [Error Reporting Service / ERSvc][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\ersvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] [Event Log / Eventlog][Running/Auto Start] <%SystemRoot%\system32\services.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:14] [COM+ Event System / EventSystem][Running/Manual Start] "C:\WINDOWS\system32\es.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 2001.12.4414.308, C:2004-08-17 12:00 M:2005-07-26 12:39] [Fast User Switching Compatibility / FastUserSwitchingCompatibility][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2004-08-17 12:00 M:2006-12-20 05:49] [Help and Support / helpsvc][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 20:00 M:2008-04-13 19:13] [Human Interface Device Access / HidServ][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Health Key and Certificate Management Service / hkmsvc][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\kmsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-09-10 12:45 M:2008-04-13 19:13] [HTTP SSL / HTTPFilter][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k HTTPFilter --> "%SystemRoot%\System32\w3ssl.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 6.0.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [IMAPI CD-Burning COM Service / ImapiService][Stopped/Disabled] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [Workstation / lanmanworkstation][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\wkssvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [TCP/IP NetBIOS Helper / LmHosts][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\lmhsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Messenger / Messenger][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\msgsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Disabled] [Microsoft Corporation, 5.1.2600.5512, C:2006-11-07 01:31 M:2008-04-13 19:14] [Distributed Transaction Coordinator / MSDTC][Stopped/Manual Start] [Microsoft Corporation, 2001.12.4414.700, C:2006-11-07 01:29 M:2008-04-13 19:14] [Windows Installer / MSIServer][Stopped/Manual Start] [Microsoft Corporation, 3.1.4000.1823, C:2004-08-17 12:00 M:2005-05-04 14:45] [Network Access Protection Agent / napagent][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\qagentrt.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-09-10 12:45 M:2008-04-13 19:13] [Network DDE / NetDDE][Stopped/Disabled] <%SystemRoot%\system32\netdde.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [Network DDE DSDM / NetDDEdsdm][Stopped/Disabled] <%SystemRoot%\system32\netdde.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:14] [Net Logon / Netlogon][Stopped/Disabled] <%SystemRoot%\system32\lsass.exe> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Network Connections / Netman][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\netman.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), C:2004-08-17 12:00 M:2005-08-23 02:35] [Network Location Awareness (NLA) / Nla][Running/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\mswsock.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [NT LM Security Support Provider / NtLmSsp][Stopped/Manual Start] <%SystemRoot%\system32\lsass.exe> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Removable Storage / NtmsSvc][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\ntmssvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2400.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] [Outpost Firewall Service / OutpostFirewall][Stopped/Auto Start] [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:56] [Plug and Play / PlugPlay][Running/Auto Start] <%SystemRoot%\system32\services.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:14] [IPSEC Services / PolicyAgent][Running/Auto Start] <%SystemRoot%\system32\lsass.exe> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Protected Storage / ProtectedStorage][Running/Auto Start] <%SystemRoot%\system32\lsass.exe> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\rasauto.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Remote Access Connection Manager / RasMan][Running/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\rasmans.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), C:2004-08-17 12:00 M:2006-06-22 18:47] [Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2006-11-07 01:29 M:2008-04-13 19:14] [Routing and Remote Access / RemoteAccess][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\mprdim.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Remote Registry / RemoteRegistry][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\system32\regsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] [Remote Procedure Call (RPC) Locator / RpcLocator][Stopped/Manual Start] <%SystemRoot%\system32\locator.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:14] [Remote Procedure Call (RPC) / RpcSs][Running/Auto Start] <%SystemRoot%\system32\svchost -k rpcss --> "%SystemRoot%\system32\rpcss.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] [QoS RSVP / RSVP][Stopped/Disabled] <%SystemRoot%\system32\rsvp.exe> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Security Accounts Manager / SamSs][Running/Auto Start] <%SystemRoot%\system32\lsass.exe> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Smart Card / SCardSvr][Stopped/Disabled] <%SystemRoot%\System32\SCardSvr.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:14] [Task Scheduler / Schedule][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\schedsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:31 M:2004-08-17 20:00] [Secondary Logon / seclogon][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\seclogon.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [System Event Notification / SENS][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\sens.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Windows Firewall/Internet Connection Sharing (ICS) / SharedAccess][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\ipnathlp.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Shell Hardware Detection / ShellHWDetection][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2004-08-17 12:00 M:2006-12-20 05:49] [Print Spooler / Spooler][Stopped/Disabled] <%SystemRoot%\system32\spoolsv.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:14] [System Restore Service / srservice][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\srsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:31 M:2008-04-13 19:13] [SSDP Discovery Service / SSDPSRV][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\ssdpsrv.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Windows Image Acquisition (WIA) / stisvc][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k imgsvc --> "%SystemRoot%\system32\wiaservc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [MS Software Shadow Copy Provider / SwPrv][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:14] [Performance Logs and Alerts / SysmonLog][Stopped/Manual Start] <%SystemRoot%\system32\smlogsvc.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:14] [Telephony / TapiSrv][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\tapisrv.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), C:2004-08-17 12:00 M:2005-07-09 00:28] [Terminal Services / TermService][Running/Manual Start] <%SystemRoot%\System32\svchost -k DComLaunch --> "%SystemRoot%\System32\termsrv.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] [Themes / Themes][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2004-08-17 12:00 M:2006-12-20 05:49] [Telnet / TlntSvr][Stopped/Disabled] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:14] [Distributed Link Tracking Client / TrkWks][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\trkwks.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] [Universal Plug and Play Device Host / upnphost][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\upnphost.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Uninterruptible Power Supply / UPS][Stopped/Disabled] <%SystemRoot%\System32\ups.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:14] [Volume Shadow Copy / VSS][Stopped/Disabled] <%SystemRoot%\System32\vssvc.exe> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:14] [Windows Time / W32Time][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\w32time.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [WebClient / WebClient][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\webclnt.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] [Windows Management Instrumentation / winmgmt][Running/Auto Start] <%systemroot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\wbem\WMIsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] [Portable Media Serial Number Service / WmdmPmSN][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\MsPMSNSv.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 11.0.5721.5145, C:2004-08-17 12:00 M:2006-10-18 21:47] [Windows Management Instrumentation Driver Extensions / Wmi][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\advapi32.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] [WMI Performance Adapter / WmiApSrv][Stopped/Disabled] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:29 M:2008-04-13 19:14] [Windows Media Player Network Sharing Service / WMPNetworkSvc][Stopped/Disabled] <"C:\Program Files\Windows Media Player\WMPNetwk.exe"> [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2006-11-02 23:06 M:2006-11-02 23:06] [Security Center / wscsvc][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SYSTEMROOT%\system32\wscsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [Automatic Updates / wuauserv][Stopped/Disabled] <%systemroot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\wuauserv.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.4.3790.5512 (xpsp.080413-0852), C:2006-11-07 01:31 M:2008-04-13 19:13] [Windows Driver Foundation - User-mode Driver Framework / WudfSvc][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k WudfServiceGroup --> "%SystemRoot%\System32\WUDFSvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 18:56 M:2006-09-28 18:56] [Wireless Zero Configuration / WZCSVC][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\wzcsvc.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-16 16:39 M:2004-08-17 12:00] [Network Provisioning Service / xmlprov][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\xmlprov.dll"> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00|Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] [Office Source Engine / ose][Stopped/Manual Start] <"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"> [(Verified)Microsoft Corporation, 11.0.5525, C:2003-07-28 12:28 M:2003-07-28 12:28] ======================================== 驱动 [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start] [Intel Corporation, 5.10.3523 built by: WinDDK, C:2006-11-07 01:20 M:2001-08-17 12:20] [Microsoft ACPI Driver / ACPI][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 18:47] [Outpost Firewall PlugIn (ADBLOCK.DLL) / ADBLOCK.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\ADBLOCK.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [Microsoft Kernel Acoustic Echo Canceller / aec][Stopped/Manual Start] [Microsoft Corporation, 5.1.2601.3142, C:2006-11-07 01:22 M:2008-04-13 09:39] [AFD / AFD][Running/System Start] <\SystemRoot\System32\drivers\afd.sys> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 12:19] [Intel AGP Bus Filter / agp440][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2006-11-07 01:20 M:2008-04-13 11:36] [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] [Realtek Semiconductor Corp., 5.10.00.6240 built by: WinDDK, C:1980-01-01 00:00 M:2007-04-25 16:20] [AliIde / AliIde][Running/Boot Start] [Acer Laboratories Inc., 1.20, C:2005-06-29 18:14 M:2005-06-16 08:58] [AMD K8 Processor Driver / AmdK8][Stopped/Manual Start] [Advanced Micro Devices, 1.1.0 (srv03_sp1_rtm.050324-1447), C:2005-08-12 09:09 M:2005-05-21 20:43] [Outpost Firewall PlugIn (ARP.DLL) / ARP.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\ARP.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [RAS Asynchronous Media Driver / AsyncMac][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:57] [标准 IDE/ESDI 硬盘控制器 / atapi][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:40] [ati2mtag / ati2mtag][Running/Manual Start] [ATI Technologies Inc., 6.14.10.6677, C:1980-01-01 00:00 M:2007-03-03 04:53] [ATM ARP Client Protocol / Atmarpc][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:51] [音频存根驱动程序 / audstub][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2006-11-07 01:21 M:2001-08-17 13:59] [Bluetooth Request Block Driver / BthEnum][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-09-10 12:42 M:2008-04-13 11:46] [Bluetooth 串行通讯驱动程序 / BTHMODEM][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-09-10 12:42 M:2008-04-13 11:46] [Bluetooth 设备(个人区域网) / BthPan][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-09-10 12:42 M:2008-04-13 11:51] [Bluetooth Port Driver / BTHPORT][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5620 (xpsp_sp3_gdr.080613-1258), C:2008-09-08 13:21 M:2008-06-15 01:32] [Bluetooth Radio USB Driver / BTHUSB][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-09-10 12:42 M:2008-04-13 11:46] [CD-ROM Driver / Cdrom][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:40] [CmdIde / CmdIde][Running/Boot Start] [CMD Technology, Inc., 2.0.7 (XPClient.010817-1148), C:2004-04-12 20:37 M:2001-08-31 15:29] [Outpost Firewall PlugIn (CONTENT.DLL) / CONTENT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\CONTENT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [磁盘驱动器 / Disk][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:40] [dmboot / dmboot][Stopped/Disabled] [Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2004-08-17 12:00 M:2008-04-13 18:54] [Logical Disk Manager Driver / dmio][Running/Boot Start] [Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2004-08-17 12:00 M:2008-04-13 18:54] [dmload / dmload][Running/Boot Start] [Microsoft Corp., Veritas Software., 2600.0.503.0, C:2004-08-17 12:00 M:2004-08-17 12:00] [Microsoft Kernel DLS Syntheiszer / DMusic][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 11:45] [Outpost Firewall PlugIn (DNSCACHE.DLL) / DNSCACHE.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\DNSCACHE.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [Microsoft Kernel DRM Audio Descrambler / drmkaud][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 11:45] [Floppy Disk Controller Driver / Fdc][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:40] [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start] [VIA Technologies, Inc. , 2.66, C:2006-11-07 01:20 M:2001-08-17 12:13] [FltMgr / FltMgr][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2006-11-07 01:31 M:2008-04-13 11:33] [FsVga / FsVga][Running/System Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2001-08-31 15:43 M:2004-08-17 12:00] [Volume Manager Driver / Ftdisk][Running/Boot Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Outpost Firewall PlugIn (FTPFILT.DLL) / FTPFILT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\FTPFILT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [Game Port Enumerator / gameenum][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:20 M:2008-04-13 11:45] [Generic Packet Classifier / Gpc][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:56] [Microsoft HID Class Driver / HidUsb][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-09-03 11:51 M:2008-04-13 11:45] [Outpost Firewall PlugIn (HTMLFILT.DLL) / HTMLFILT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\HTMLFILT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [HTTP / HTTP][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:53] [Outpost Firewall PlugIn (HTTPFILT.DLL) / HTTPFILT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\HTTPFILT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [i8042 键盘和 PS/2 鼠标端口驱动程序 / i8042prt][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 18:52] [Outpost Firewall PlugIn (IMAPFILT.DLL) / IMAPFILT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\IMAPFILT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [CD 烧制筛选驱动器 / Imapi][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:41] [IntelIde / IntelIde][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 18:54] [Intel Processor Driver / intelppm][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 18:54] [IPv6 Windows Firewall Driver / Ip6Fw][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:53] [IP Traffic Filter Driver / IpFilterDriver][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:57] [IP Network Address Translator / IpNat][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:57] [IPSEC driver / IPSec][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 12:19] [IR Enumerator Service / IRENUM][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2006-11-07 01:16 M:2008-04-13 11:54] [PnP ISA/EISA Bus Driver / isapnp][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 18:54] [Keyboard Class Driver / Kbdclass][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 18:55] [Keyboard HID Driver / kbdhid][Stopped/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-09-03 11:51 M:2008-04-13 18:55] [Microsoft Kernel Wave Audio Mixer / kmixer][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 11:45] [Outpost Firewall PlugIn (MAILFILT.DLL) / MAILFILT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\MAILFILT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [Mouse Class Driver / Mouclass][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:23 M:2008-04-13 18:48] [Mouse HID Driver / mouhid][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2006-09-03 11:51 M:2005-06-16 08:58] [WebDav Client Redirector / MRxDAV][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 11:32] [MRXSMB / MRxSmb][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 12:17] [Microsoft Streaming Service Proxy / MSKSSRV][Stopped/Manual Start] [Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 11:39] [Microsoft Streaming Clock Proxy / MSPCLOCK][Stopped/Manual Start] [Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 11:39] [Microsoft Streaming Quality Manager Proxy / MSPQM][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 11:39] [Microsoft System Management BIOS Driver / mssmbios][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-03 23:07 M:2008-04-13 11:36] [Microsoft MPU-401 MIDI UART Driver / ms_mpu401][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2006-11-07 01:20 M:2001-08-17 14:00] [Remote Access NDIS TAPI Driver / NdisTapi][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:57] [NDIS 用户模式 I/O 协议 / Ndisuio][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-03 23:03 M:2008-04-13 11:56] [Remote Access NDIS WAN Driver / NdisWan][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 12:20] [NetBIOS Interface / NetBIOS][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:56] [NetBios over Tcpip / NetBT][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 12:21] [Outpost Firewall PlugIn (NNTPFILT.DLL) / NNTPFILT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\NNTPFILT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [npkcrypt / npkcrypt][Stopped/Auto Start] <\??\C:\Program Files\QQ2006\npkcrypt.sys> [] [nv / nv][Stopped/Manual Start] [NVIDIA Corporation, 6.14.10.5673, C:2006-11-07 01:20 M:2004-08-03 22:29] [IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Intel PentiumIII Processor Driver / P3][Stopped/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-16 16:22 M:2008-04-13 18:57] [Parallel port driver / Parport][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:22 M:2008-04-13 18:57] [PCI Bus Driver / PCI][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 18:57] [PCIIde / PCIIde][Running/Boot Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2007-07-18 00:45 M:2001-08-31 15:42] [Outpost Firewall PlugIn (POP3FILT.DLL) / POP3FILT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\POP3FILT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [WAN Miniport (PPTP) / PptpMiniport][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 12:19] [Outpost Firewall PlugIn (PROTECT.DLL) / PROTECT.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\PROTECT.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Remote Access Auto Connection Driver / RasAcd][Running/System Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [WAN Miniport (L2TP) / Rasl2tp][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 12:19] [远程访问 PPPOE 驱动程序 / RasPppoe][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:57] [Direct Parallel / Raspti][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Rdbss / Rdbss][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 12:28] [RDPCDD / RDPCDD][Running/System Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [Terminal Server Device Redirector Driver / rdpdr][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2006-11-07 01:28 M:2008-04-13 11:32] [Digital CD Audio Playback Filter Driver / redbook][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 18:51] [Bluetooth 设备 (RFCOMM 协议 TDI) / RFCOMM][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-09-10 12:42 M:2008-04-13 11:46] [Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Stopped/Manual Start] [Realtek Semiconductor Corporation , 5,663,1212,2006 built by: WinDDK, C:1980-01-01 00:00 M:2006-12-14 16:44] [Outpost Firewall Sandbox Driver / SandBox][Stopped/Disabled] <\??\E:\防御炮楼\kernel\Sandbox.SYS> [] [Secdrv / Secdrv][Stopped/Manual Start] [Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086, C:2004-08-17 12:00 M:2007-11-13 18:25] [Outpost Firewall PlugIn (SECRET.DLL) / SECRET.DLL][Stopped/Manual Start] <\??\E:\飞转的光彩夺目\kernel\SECRET.DLL> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:57] [Prolific Serial port driver / Ser2pl][Stopped/Manual Start] [Prolific Technology Inc., 2.0.0.18, C:2008-09-08 10:56 M:2003-07-16 14:27] [Serenum Filter Driver / serenum][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:40] [Serial port driver / Serial][Stopped/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 18:52] [Serial Mouse Driver / sermouse][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2006-09-03 11:51 M:2005-06-16 08:58] [Microsoft Kernel Audio Splitter / splitter][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:22 M:2008-04-13 11:45] [System Restore Filter Driver / sr][Running/Boot Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:31 M:2008-04-13 18:57] [Software Bus Driver / swenum][Running/Manual Start] [Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2004-08-03 22:58 M:2008-04-13 11:39] [Microsoft Kernel GS Wavetable Synthesizer / swmidi][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 11:45] [Microsoft Kernel System Audio Device / sysaudio][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 12:15] [TCP/IP Protocol Driver / Tcpip][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 12:20] [Terminal Device Driver / TermDD][Running/System Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2006-11-07 01:28 M:2008-04-13 19:14] [Microcode Update Driver / Update][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:39] [Microsoft USB Generic Parent Driver / usbccgp][Stopped/Manual Start] <\SystemRoot\system32\drivers\usbccgp.sys> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-09-03 11:51 M:2008-04-13 11:45] [Microsoft USB 2.0 Enhanced Host Controller Miniport Driver / usbehci][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-09-03 11:51 M:2008-04-13 11:45] [USB2 Enabled Hub / usbhub][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:45] [Microsoft USB Open Host Controller Miniport Driver / USBOHCI][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-09-03 11:51 M:2008-04-13 11:45] [USB 大容量存储设备 / USBSTOR][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-09-03 11:51 M:2008-04-13 11:45] [Microsoft USB Universal Host Controller Miniport Driver / usbuhci][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:45] [Outpost Firewall Kernel Driver / VFILT][Running/System Start] <\??\E:\飞转的光彩夺目\kernel\FILTNT.SYS> [Agnitum Ltd., 4.0.700.7605, C:2008-09-11 17:46 M:2007-04-05 16:56] [VGA 显示控制器。 / VgaSave][Running/System Start] <\SystemRoot\System32\drivers\vga.sys> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 11:44] [Remote Access IP ARP Driver / Wanarp][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 11:57] [Microsoft WINMM WDM Audio Compatibility Driver / wdmaud][Running/Manual Start] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:21 M:2008-04-13 12:17] [Windows Driver Foundation - User-mode Driver Framework Platform Driver / WudfPf][Stopped/Manual Start] [Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 18:55 M:2006-09-28 18:55] [Windows Driver Foundation - User-mode Driver Framework Reflector / WudfRd][Stopped/Manual Start] [Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 19:00 M:2006-09-28 19:00] [360AntiArp / 360AntiArp][Running/System Start] <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys> [(Verified)360安全中心, 1, 0, 1, 1007, C:2008-04-09 16:33 M:2008-04-09 16:33] ======================================== 进程 [PID: 348 / SYSTEM] \SystemRoot\System32\smss.exe [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:14] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] [PID: 404 / SYSTEM] \??\C:\WINDOWS\system32\csrss.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\CSRSRV.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\basesrv.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\winsrv.dll [Microsoft Corporation, 5.1.2600.3103 (xpsp_sp2_gdr.070316-1309), C:2004-08-17 12:00 M:2007-03-17 21:45] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\KERNEL32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\sxs.dll [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), C:2004-08-17 12:00 M:2006-10-20 09:37] [PID: 432 / SYSTEM] \??\C:\WINDOWS\system32\winlogon.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-09-24 16:42 M:2006-09-24 16:42] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\AUTHZ.dll [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), C:2004-08-17 12:00 M:2005-03-03 02:10] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NDdeApi.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\PROFMAP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\REGAPI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSGINA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\COMCTL32.dll [Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ODBC32.dll [Microsoft Corporation, 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] C:\WINDOWS\system32\odbcint.dll [Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SHSVCS.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2004-08-17 12:00 M:2006-12-20 05:49] C:\WINDOWS\system32\sfc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\sfc_os.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] E:\飞转的光彩夺目\wl_hook.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-29 11:15] C:\WINDOWS\system32\Apphelp.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msctfime.ime [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINSCARD.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WTSAPI32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\sxs.dll [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), C:2004-08-17 12:00 M:2006-10-20 09:37] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\Ati2evxx.dll [ATI Technologies Inc., 6.14.10.4162, C:1980-01-01 00:00 M:2007-03-03 04:47] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\cscdll.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\dimsntfy.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-09-10 12:45 M:2008-04-13 19:13] C:\WINDOWS\system32\rsaenh.dll [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WlNotify.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:14] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] C:\WINDOWS\system32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\cscui.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wdmaud.drv [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-16 16:39 M:2004-08-17 12:00] C:\WINDOWS\system32\msacm32.drv [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSACM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.258, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.308, C:2006-11-07 01:29 M:2005-07-26 12:39] C:\WINDOWS\system32\xpsp2res.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 476 / SYSTEM] C:\WINDOWS\system32\services.exe [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:14] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NCObjAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSVCP60.dll [Microsoft Corporation, 6.02.3104.0, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SCESRV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\AUTHZ.dll [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), C:2004-08-17 12:00 M:2005-03-03 02:10] C:\WINDOWS\system32\umpnpmgr.dll [Microsoft Corporation, 5.1.2600.2744 (xpsp_sp2_gdr.050822-1647), C:2004-08-17 12:00 M:2005-08-23 11:39] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] C:\WINDOWS\system32\ShimEng.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\AppPatch\AcAdProc.dll [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027), C:2007-02-01 17:10 M:2006-10-04 22:05] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Apphelp.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\eventlog.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wtsapi32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 488 / SYSTEM] C:\WINDOWS\system32\lsass.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LSASRV.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] C:\WINDOWS\system32\NTDSAPI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\DNSAPI.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\SAMSRV.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\cryptdll.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ShimEng.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\MSACM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] C:\WINDOWS\system32\comctl32.dll [Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\msprivs.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\kerberos.dll [Microsoft Corporation, 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522), C:2004-08-17 12:00 M:2005-06-16 01:50] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] C:\WINDOWS\system32\netlogon.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\w32time.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSVCP60.dll [Microsoft Corporation, 6.02.3104.0, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\schannel.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wdigest.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\rsaenh.dll [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\setupapi.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\scecli.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ipsecsvc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\AUTHZ.dll [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), C:2004-08-17 12:00 M:2005-03-03 02:10] C:\WINDOWS\system32\oakley.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINIPSEC.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\pstorsvc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\psbase.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\hnetcfg.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\dssenh.dll [Microsoft Corporation, 5.1.2600.2133 (xpsp.040514-1639), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 628 / SYSTEM] C:\WINDOWS\system32\Ati2evxx.exe [ATI Technologies Inc., 6.14.10.4162, C:1980-01-01 00:00 M:2007-03-03 04:46] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] E:\飞转的光彩夺目\wl_hook.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-29 11:15] C:\WINDOWS\system32\wtsapi32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] C:\WINDOWS\system32\powrprof.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\cfgMgr32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Ati2edxx.dll [ATI Technologies, Inc., 6, 14, 10, 2511, C:1980-01-01 00:00 M:2007-03-03 04:47] C:\WINDOWS\system32\atipdlxx.dll [ATI Technologies, Inc., 6, 14, 10, 2516, C:1980-01-01 00:00 M:2007-03-03 04:47] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] [PID: 656 / SYSTEM] C:\WINDOWS\system32\svchost.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ShimEng.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\MSACM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] C:\WINDOWS\system32\comctl32.dll [Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] c:\windows\system32\rpcss.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] c:\windows\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\xpsp2res.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\termsrv.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] c:\windows\system32\ICAAPI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] c:\windows\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] c:\windows\system32\AUTHZ.dll [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), C:2004-08-17 12:00 M:2005-03-03 02:10] c:\windows\system32\mstlsapi.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\ACTIVEDS.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\adsldpc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] c:\windows\system32\ATL.DLL [Microsoft Corporation, 3.05.2284, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\REGAPI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\rsaenh.dll [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.308, C:2006-11-07 01:29 M:2005-07-26 12:39] C:\WINDOWS\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.258, C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 724 / NETWORK SERVICE] C:\WINDOWS\system32\svchost.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\rpcss.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] c:\windows\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\userenv.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\xpsp2res.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\rsaenh.dll [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\hnetcfg.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\DNSAPI.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] C:\WINDOWS\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wshbth.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\rasadhlp.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] C:\WINDOWS\system32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.308, C:2006-11-07 01:29 M:2005-07-26 12:39] C:\WINDOWS\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.258, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 784 / SYSTEM] C:\WINDOWS\System32\svchost.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\ShimEng.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\System32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\System32\MSACM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\UxTheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] C:\WINDOWS\system32\comctl32.dll [Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\System32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\System32\xpsp2res.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\shsvcs.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2004-08-17 12:00 M:2006-12-20 05:49] C:\WINDOWS\System32\WINSTA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] c:\windows\system32\dhcpcsvc.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] c:\windows\system32\DNSAPI.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] c:\windows\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] c:\windows\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\schedsvc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:31 M:2004-08-17 20:00] c:\windows\system32\NTDSAPI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] c:\windows\system32\WTSAPI32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\System32\MSIDLE.DLL [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\audiosrv.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\cryptsvc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\certcli.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\ATL.DLL [Microsoft Corporation, 3.05.2284, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CRYPTUI.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WININET.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] c:\windows\system32\ESENT.dll [Microsoft Corporation, 5.1.2468.0 (Lab03_N(jliem).010306-1456), C:2004-08-17 12:00 M:2005-10-21 06:26] c:\windows\system32\wbem\wmisvc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\system32\VSSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\seclogon.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\netman.dll [Microsoft Corporation, 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), C:2004-08-17 12:00 M:2005-08-23 02:35] c:\windows\system32\MPRAPI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\ACTIVEDS.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\adsldpc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\rtutils.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\netshell.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\credui.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\RASAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] c:\windows\system32\rasman.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] c:\windows\system32\TAPI32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\WZCSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-16 16:39 M:2004-08-17 12:00] c:\windows\system32\WZCSvc.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-16 16:39 M:2004-08-17 12:00] c:\windows\system32\WMI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.308, C:2006-11-07 01:29 M:2005-07-26 12:39] C:\WINDOWS\System32\COMRes.dll [Microsoft Corporation, 2001.12.4414.258, C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\es.dll [Microsoft Corporation, 2001.12.4414.308, C:2004-08-17 12:00 M:2005-07-26 12:39] c:\windows\system32\dmserver.dll [Microsoft Corp., 2600.2180.503.0, C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\wscsvc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\msi.dll [Microsoft Corporation, 3.1.4000.4039, C:2004-08-17 12:00 M:2007-04-19 00:12] c:\windows\system32\HNetCfg.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\sens.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wbem\wbemcomn.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] c:\windows\system32\ipnathlp.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\MSWSOCK.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\AUTHZ.dll [Microsoft Corporation, 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), C:2004-08-17 12:00 M:2005-03-03 02:10] C:\WINDOWS\System32\SXS.DLL [Microsoft Corporation, 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), C:2004-08-17 12:00 M:2006-10-20 09:37] C:\WINDOWS\System32\Wbem\wbemcore.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\System32\MSVCP60.dll [Microsoft Corporation, 6.02.3104.0, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\Wbem\esscli.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\System32\Wbem\FastProx.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\system32\comsvcs.dll [Microsoft Corporation, 2001.12.4414.308, C:2006-11-07 01:29 M:2005-07-26 12:39] C:\WINDOWS\system32\colbact.DLL [Microsoft Corporation, 2001.12.4414.308, C:2006-11-07 01:29 M:2005-07-26 12:39] C:\WINDOWS\system32\MTXCLU.DLL [Microsoft Corporation, 2001.12.4414.311, C:2004-08-17 12:00 M:2006-03-02 03:43] C:\WINDOWS\system32\WSOCK32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\CLUSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\RESUTILS.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wbem\wmiutils.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\system32\wbem\repdrvfs.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\System32\rasadhlp.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] C:\WINDOWS\system32\wbem\wmiprvsd.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\system32\NCObjAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wbem\wbemess.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\System32\rasmans.dll [Microsoft Corporation, 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), C:2004-08-17 12:00 M:2006-06-22 18:47] C:\WINDOWS\System32\WINIPSEC.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\netcfgx.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\tapisrv.dll [Microsoft Corporation, 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), C:2004-08-17 12:00 M:2005-07-09 00:28] c:\windows\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wbem\ncprov.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\System32\rastapi.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\System32\unimdm.tsp [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\uniplat.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\kmddsp.tsp [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\ndptsp.tsp [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\ipconf.tsp [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\h323.tsp [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\hidphone.tsp [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\HID.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-16 16:38 M:2004-08-17 12:00] C:\WINDOWS\System32\rasppp.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\ntlsapi.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kerberos.dll [Microsoft Corporation, 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522), C:2004-08-17 12:00 M:2005-06-16 01:50] C:\WINDOWS\System32\cryptdll.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\raschap.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\rastls.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\SCHANNEL.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\System32\WinSCard.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 832 / NETWORK SERVICE] C:\WINDOWS\system32\svchost.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\dnsrslvr.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\DNSAPI.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] c:\windows\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] [PID: 876 / SYSTEM] C:\WINDOWS\system32\Ati2evxx.exe [ATI Technologies Inc., 6.14.10.4162, C:1980-01-01 00:00 M:2007-03-03 04:46] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] E:\飞转的光彩夺目\wl_hook.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-29 11:15] C:\WINDOWS\system32\wtsapi32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] C:\WINDOWS\system32\powrprof.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\cfgMgr32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msctfime.ime [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\xpsp2res.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Ati2edxx.dll [ATI Technologies, Inc., 6, 14, 10, 2511, C:1980-01-01 00:00 M:2007-03-03 04:47] C:\WINDOWS\system32\atipdlxx.dll [ATI Technologies, Inc., 6, 14, 10, 2516, C:1980-01-01 00:00 M:2007-03-03 04:47] C:\WINDOWS\system32\ati2evxx.dll [ATI Technologies Inc., 6.14.10.4162, C:1980-01-01 00:00 M:2007-03-03 04:47] C:\WINDOWS\system32\winspool.drv [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:14] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] [PID: 1028 / LOCAL SERVICE] C:\WINDOWS\system32\svchost.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] c:\windows\system32\bthserv.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] c:\windows\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 1236 / 孙子们爷来了哈哈] C:\WINDOWS\Explorer.EXE [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\BROWSEUI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\SHDOCVW.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CRYPTUI.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] C:\WINDOWS\system32\WININET.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\ShimEng.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSACM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] C:\WINDOWS\system32\comctl32.dll [Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] E:\飞转的光彩夺目\wl_hook.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-29 11:15] C:\WINDOWS\system32\msctfime.ime [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\appHelp.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.308, C:2006-11-07 01:29 M:2005-07-26 12:39] C:\WINDOWS\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.258, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\cscui.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\CSCDLL.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\themeui.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSIMG32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\xpsp2res.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LINKINFO.dll [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), C:2004-08-17 12:00 M:2005-09-01 09:45] C:\WINDOWS\system32\ntshrui.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ATL.DLL [Microsoft Corporation, 3.05.2284, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\urlmon.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSCTF.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msi.dll [Microsoft Corporation, 3.1.4000.4039, C:2004-08-17 12:00 M:2007-04-19 00:12] C:\Program Files\WinRAR\rarext.dll [N/A, C:2007-02-01 13:57 M:2006-12-04 18:43] E:\飞转的光彩夺目\op_shell.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-28 13:16] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll [Microsoft Corporation, 8.00.50727.762, C:2006-12-01 22:54 M:2006-12-01 22:54] C:\WINDOWS\system32\browselc.dll [Microsoft Corporation, 6.00.2600.0000, C:2001-09-29 14:39 M:2001-09-29 14:39] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\drprov.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\DUSER.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\PortableDeviceApi.dll [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\Program Files\Microsoft Office\OFFICE11\msohev.dll [(Verified)Microsoft Corporation, 11.0.5510, C:2003-07-14 22:52 M:2003-07-14 22:52] C:\WINDOWS\system32\MLANG.dll [Microsoft Corporation, 6.00.2900.2530 (xpsp.040919-1030), C:2004-08-17 12:00 M:2004-10-16 04:54] C:\WINDOWS\system32\shdoclc.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wdmaud.drv [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-16 16:39 M:2004-08-17 12:00] C:\WINDOWS\system32\msacm32.drv [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\srclient.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:31 M:2004-08-17 20:00] C:\WINDOWS\System32\Wbem\framedyn.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2006-11-07 01:29 M:2004-08-17 20:00] C:\WINDOWS\system32\TudouUpload.dll [www.Tudou.com, 1.1.0.0, C:2007-01-24 18:07 M:2007-01-24 18:07] C:\WINDOWS\system32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXEV.DLL [(Verified)Microsoft Corporation, 11.0.5510, C:2003-07-14 22:46 M:2003-07-14 22:46] C:\WINDOWS\system32\mstask.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:31 M:2008-04-13 19:13] C:\WINDOWS\system32\NTDSAPI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\DNSAPI.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] C:\WINDOWS\system32\webcheck.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\WSOCK32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\occache.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\adsldpc.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\rsaenh.dll [Microsoft Corporation, 5.1.2600.2161 (xpsp.040706-1629), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\shmedia.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\MSVFW32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\AVIFIL32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\mydocs.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\sendmail.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\wpdshext.dll [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416), C:2008-09-12 15:11 M:2008-04-16 01:47] C:\WINDOWS\system32\Audiodev.dll [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\system32\WMVCore.DLL [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 12:00 M:2006-10-18 21:47] C:\WINDOWS\system32\WMASF.DLL [Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 12:00 M:2006-10-18 21:47] [PID: 1708 / 孙子们爷来了哈哈] C:\WINDOWS\system32\taskmgr.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VDMDBG.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ShimEng.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\MSACM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] E:\飞转的光彩夺目\wl_hook.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-29 11:15] C:\WINDOWS\system32\msctfime.ime [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] C:\WINDOWS\system32\UTILDLL.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\TAPI32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\rtutils.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\WTSAPI32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSCTF.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 1776 / 孙子们爷来了哈哈] C:\WINDOWS\system32\ctfmon.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\MSCTF.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSUTB.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ShimEng.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\MSACM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] E:\飞转的光彩夺目\wl_hook.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-29 11:15] C:\WINDOWS\system32\msctfime.ime [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 1820 / 孙子们爷来了哈哈] E:\arswp\ArSwp.exe [(Verified)ArSwp.com, 2, 8, 1, 815, C:2008-08-15 22:25 M:2008-08-15 22:25] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WININET.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\imagehlp.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WTSAPI32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETAPI32.dll [Microsoft Corporation, 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), C:2004-08-17 12:00 M:2006-08-17 20:29] C:\WINDOWS\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\COMCTL32.dll [Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:14] C:\WINDOWS\system32\oledlg.dll [Microsoft Corporation, 1.0 (xpsp_sp2_gdr.061016-0148), C:2004-08-17 12:00 M:2006-10-17 00:15] C:\WINDOWS\system32\OLEPRO32.DLL [Microsoft Corporation, 5.1.2600.2180, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\urlmon.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\WSOCK32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2_32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\iphlpapi.dll [Microsoft Corporation, 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), C:2004-08-17 12:00 M:2006-05-19 21:14] C:\WINDOWS\system32\MSVCP60.dll [Microsoft Corporation, 6.02.3104.0, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\IMM32.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] E:\飞转的光彩夺目\wl_hook.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-29 11:15] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\MSCTF.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\appHelp.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.308, C:2006-11-07 01:29 M:2005-07-26 12:39] C:\WINDOWS\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.258, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msctfime.ime [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] E:\arswp\plugin\ArFix.dll [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2007-11-28 15:19 M:2007-11-28 15:19] C:\WINDOWS\system32\shdocvw.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\CRYPTUI.dll [Microsoft Corporation, 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\asycfilt.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\mlang.dll [Microsoft Corporation, 6.00.2900.2530 (xpsp.040919-1030), C:2004-08-17 12:00 M:2004-10-16 04:54] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\hnetcfg.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\RASAPI32.DLL [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\rasman.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\TAPI32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\rtutils.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\DNSAPI.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\wshbth.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\rasadhlp.dll [Microsoft Corporation, 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), C:2004-08-17 12:00 M:2006-06-27 01:41] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\sensapi.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\LINKINFO.dll [Microsoft Corporation, 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), C:2004-08-17 12:00 M:2005-09-01 09:45] C:\WINDOWS\system32\ntshrui.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ATL.DLL [Microsoft Corporation, 3.05.2284, C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NETSHELL.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\credui.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\mstask.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2006-11-07 01:31 M:2008-04-13 19:13] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\NTDSAPI.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] [PID: 1036 / 孙子们爷来了哈哈] C:\WINDOWS\system32\conime.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ntdll.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\kernel32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\GDI32.dll [Microsoft Corporation, 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), C:2004-08-17 12:00 M:2007-03-08 23:37] C:\WINDOWS\system32\IMM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ShimEng.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), C:2004-08-17 12:00 M:2005-07-26 12:39] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 12:00 M:2008-04-13 19:13] C:\WINDOWS\system32\MSACM32.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), C:2006-12-20 05:49 M:2006-12-20 05:49] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2900.3121 (xpsp_sp2_gdr.070418-1302), C:2004-08-17 12:00 M:2007-04-18 20:31] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-07 09:37 M:2004-08-07 09:37] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11] C:\WINDOWS\system32\comctl32.dll [Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 12:00 M:2008-04-13 19:13] E:\飞转的光彩夺目\wl_hook.dll [Agnitum Ltd., 4.0.1025.7828, C:2008-09-11 17:46 M:2007-06-29 11:15] C:\WINDOWS\system32\MSCTF.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] C:\WINDOWS\system32\msctfime.ime [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] ======================================== 文件关联 [.txt] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2006-11-07 01:16 M:2008-04-13 19:14] [.log] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2006-11-07 01:16 M:2008-04-13 19:14] [.hlp] <%SystemRoot%\System32\winhlp32.exe %1> [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2004-08-17 12:00 M:2004-08-17 12:00] [.vbs] <%SystemRoot%\System32\WScript.exe "%1" %*> [Microsoft Corporation, 5.7.0.18066, C:2004-08-17 12:00 M:2008-05-08 19:24] [.js] <%SystemRoot%\System32\WScript.exe "%1" %*> [Microsoft Corporation, 5.7.0.18066, C:2004-08-17 12:00 M:2008-05-08 19:24] [.chm] <"C:\WINDOWS\hh.exe" %1> [Microsoft Corporation, 5.2.3790.2453 (srv03_sp1_qfe.050525-1536), C:2004-08-17 12:00 M:2008-04-13 19:14] ======================================== AutoRun.INF ======================================== Winsock提供者 MSAFD Tcpip [TCP/IP] <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD Tcpip [UDP/IP] <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD Tcpip [RAW/IP] <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] RSVP UDP Service Provider <%SystemRoot%\system32\rsvpsp.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] RSVP TCP Service Provider <%SystemRoot%\system32\rsvpsp.dll> [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 12:00 M:2008-04-13 19:13] MSAFD RfComm [Bluetooth] <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{A728660E-E0AB-407D-B559-02ABF11C1BC6}] SEQPACKET 6 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{A728660E-E0AB-407D-B559-02ABF11C1BC6}] DATAGRAM 6 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{9FDF98D2-689A-4CD9-BE28-9E9F7C8E86F6}] SEQPACKET 0 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{9FDF98D2-689A-4CD9-BE28-9E9F7C8E86F6}] DATAGRAM 0 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{FCD4B0C8-53FA-44D6-A408-6C7060274ED9}] SEQPACKET 1 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{FCD4B0C8-53FA-44D6-A408-6C7060274ED9}] DATAGRAM 1 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{980B5A24-5754-498C-AE73-EBFAA6E25AE8}] SEQPACKET 2 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{980B5A24-5754-498C-AE73-EBFAA6E25AE8}] DATAGRAM 2 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{73DFB231-EF52-44CA-82F0-DDC55A9E6B3D}] SEQPACKET 3 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{73DFB231-EF52-44CA-82F0-DDC55A9E6B3D}] DATAGRAM 3 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{CEBF533E-0F6B-4548-ADF5-CF9764691DB4}] SEQPACKET 4 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{CEBF533E-0F6B-4548-ADF5-CF9764691DB4}] DATAGRAM 4 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2004-08-17 12:00 M:2004-08-17 12:00] ======================================== HOSTS 127.0.0.1 localhost [/CODE]