[CODE]

2008-10-19,10:29:02

SysLog Scanner 1.0 - build 20080726
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 2 (build 2600) - Administrators



========================================
注册项

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <Alitalk><C:\Program Files\Alisoft\Alitalk\AliTalk.EXE>  [(Verified)Alibaba, 5, 7, 0, 5, C:2008-09-24 12:43 M:2008-05-07 16:26]
    <WangWang><"C:\Program Files\Alisoft\WangWang\WangWang.exe">  [(Verified)阿里巴巴软件(上海)有限公司, 5, 7, 0, 5, C:2008-10-13 20:36 M:2008-05-07 15:19]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <RTHDCPL><RTHDCPL.EXE>  [(Verified)Realtek Semiconductor Corp., 2.1.3.0, C:2008-09-24 11:50 M:2007-04-10 15:28]
    <Alcmtr><ALCMTR.EXE>  [(Verified)Realtek Semiconductor Corp., 1.6.0.2, C:2008-09-24 11:50 M:2005-05-03 18:43]
    <IgfxTray><C:\WINDOWS\system32\igfxtray.exe>  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-20 13:57]
    <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe>  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-20 13:57]
    <Persistence><C:\WINDOWS\system32\igfxpers.exe>  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-20 13:57]
    <Adobe Reader Speed Launcher><"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe">  [(Verified)Adobe Systems Incorporated, 8.0.0.0, C:2008-01-11 22:16 M:2008-01-11 22:16]
    <powerword 2007><"C:\Program Files\Kingsoft\Powerword 2007\xdict.exe" -s -nosplash>  [Kingsoft Co, Ltd., 10, 0, 0, 4, C:2008-09-24 12:39 M:2007-04-05 14:36]
    <CertificateRegistration><SafeSignCertReg.exe>  [A.E.T. Europe B.V., 2.0.0.2, C:2008-09-24 12:46 M:2004-02-17 09:00]
    <><>  []
    <Sony Ericsson PC Suite><"C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions>  [Sony Ericsson Mobile Communications AB, 1.1.1.3, C:2005-10-26 17:17 M:2005-10-26 17:17]
    <ISUSPM Startup><"c:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup>  [Macrovision Corporation, 4, 60, 100, 37068, C:2005-08-11 16:30 M:2005-08-11 16:30]
    <ISUSScheduler><"C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start>  [Macrovision Corporation, 4, 60, 100, 37068, C:2005-08-11 16:30 M:2005-08-11 16:30]
    <wpsautoupdate><C:\Program Files\Kingsoft\WPS Office Personal\office6\wpsupdate.exe InstallAfterReStart>  [Kingsoft Corp. Ltd., 1,0,0,1515, C:2008-03-06 00:00 M:2008-03-06 00:00]
    <runeip><"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.16, C:2008-10-09 09:05 M:2008-10-09 09:05]
    <Thunder><"C:\Program Files\Thunder Network\Thunder\Thunder.exe" /s>  [Thunder Networking Technologies,LTD, 5, 6, 8, 19, C:2008-09-28 13:42 M:2008-07-10 21:15]
    <360Safebox><; "C:\Program Files\360Safebox\safeboxTray.exe" /r>  []
    <360Safetray><; C:\Program Files\360safe\safemon\360Tray.exe /start>  []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_Dlls><kmon.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><"\Program Files\ROYALE\Logonui.exe">  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2002-10-07 20:00 M:2002-10-07 20:00]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载]
    <><C:\Program Files\Thunder Network\Thunder\Program\geturl.htm>  [N/A, C:2008-09-28 13:42 M:2008-06-13 09:55]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接]
    <><C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm>  [N/A, C:2008-09-28 13:42 M:2008-06-13 09:55]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\添加到QQ表情]
    <><C:\Program Files\Tencent\QQ\AddEmotion.htm>  [N/A, C:2008-05-23 06:45 M:2008-05-23 06:45]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    <WinlogonNotify: igfxcui><igfxdev.dll>  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02|(Verified)Microsoft Corporation, 7.00.6000.20861 (vista_ldr.080618-1506), C:2007-08-11 21:02 M:2008-06-23 23:37|(Verified)N/A, C:2007-08-11 21:02 M:2007-08-11 21:02]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02|(Verified)Microsoft Corporation, 7.00.6000.20861 (vista_ldr.080618-1506), C:2007-08-11 21:02 M:2008-06-23 23:37|(Verified)N/A, C:2007-08-11 21:02 M:2007-08-11 21:02]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02|(Verified)Microsoft Corporation, 7.00.6000.20861 (vista_ldr.080618-1506), C:2007-08-11 21:02 M:2008-06-23 23:37|(Verified)N/A, C:2006-11-02 23:38 M:2006-11-02 23:38]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}]
    <启动迅雷5><C:\Program Files\Thunder Network\Thunder\Thunder.exe>  [Thunder Networking Technologies,LTD, 5, 6, 8, 19, C:2008-09-28 13:42 M:2008-07-10 21:15]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
    <><>  []


========================================
启动项

[QQ游戏启动加速程序]
    <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> "C:\Program Files\Tencent\QQGame\Accel.exe"  > [(Verified)深圳市腾讯计算机系统有限公司, 2, 0, 103, 5, C:2007-08-14 17:46 M:2007-08-14 17:46]
[腾讯QQ]
    <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\腾讯QQ.lnk --> "C:\Program Files\Tencent\QQ\QQ.exe"  > [(Verified)TENCENT, 8,0,830,1811, C:2008-05-27 09:43 M:2008-05-27 09:43]
[快快捷]
    <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\快快捷.lnk --> "C:\Program Files\快快捷\KKjie.exe"  > [www.kkjie.com, 1, 0, 0, 3, C:2008-09-23 08:58 M:2008-09-23 08:58]
[REALTEK RTL8187 Wireless LAN Utility]
    <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\REALTEK RTL8187 Wireless LAN Utility.lnk --> "C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe" /H > [Realtek Semiconductor Corp., 402, 1180, 626, 2006, C:2008-10-09 20:44 M:2006-06-28 17:32]


========================================
计划任务



========================================
组件


Shell Extension
[Display Panning CPL Extension]
    {42071714-76d4-11d1-8b24-00a0c9068ff3}  <deskpan.dll>  []
[HyperTerminal Icon Ext]
    {88895560-9AA2-1069-930E-00AA0030EBC8}  <C:\WINDOWS\system32\hticons.dll>  [(Verified)Hilgraeve, Inc., 5.1.2600.0, C:2008-09-23 21:03 M:2007-08-12 05:02]
[WinRAR shell extension]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2008-09-24 11:49 M:2007-09-23 18:59]
[Sony Ericsson 文件管理器]
    {A5110426-177D-4e08-AB3F-785F10B4439C}  <C:\Program Files\Sony Ericsson\Mobile2\File Manager\fmgrgui.dll>  [Sony Ericsson Mobile Communications AB, 1, 3, 11, 0, C:2006-03-14 16:23 M:2006-03-14 16:23]

Protocols
[]
    {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC}  <C:\WINDOWS\system32\KuGoo3DownXControl.ocx>  [酷狗, 5.2.4.4, C:2008-09-28 13:42 M:2008-10-02 16:56]
[IEProtocolHandler Class]
    {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}  <C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL>  [(Verified)Skype Technologies, 1, 0, 27, 2, C:2008-05-13 13:28 M:2008-05-13 13:28]

BrowserHelperObject
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-10-15 08:02 M:2008-06-13 09:43]
[SafeMon Class]
    {B69F34DD-F0F9-42DC-9EDD-957187DA688D}  <C:\PROGRA~1\360safe\safemon\safemon.dll>  []

ActiveX Extension
[ThunderAtOnce Class]
    {01443AEC-0FD1-40FD-9C87-E93D1494C233}  <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll>  []
[Adobe PDF Reader Link Helper]
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}  <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll>  []
[GerneralPeerID Class]
    {0A47E819-F82E-4D5D-B806-6A9EA94D68CD}  <C:\Program Files\Thunder Network\Thunder\Components\InMedia\peerid.dll>  [Copyright 2007, 1, 0, 0, 1, C:2008-09-28 13:43 M:2008-06-11 16:11]
[Thunder Agent Class]
    {485463B7-8FB2-4B3B-B29B-8B919B0EACCE}  <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 4, 23, C:2008-09-28 13:43 M:2008-06-13 09:43]
[MSN Photo Upload Tool]
    {4F1E5B1A-2A80-42CA-8532-2D05CB959537}  <C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll>  [(Verified)Microsoft? Corporation, 10.00.0913.0, C:2006-06-20 15:44 M:2006-06-20 15:44]
[XMP Class]
    {6483F145-A768-4C41-AACC-52D4D7845851}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>  [Copyright XunLei 2007, 2, 1, 2, 77, C:2008-09-28 13:43 M:2008-08-04 12:58]
[XDRM]
    {693571CB-54A3-4E90-9D52-EEAE1334E2D3}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work>  [Copyright XunLei 2007, 1, 0, 0, 7, C:2008-09-28 13:43 M:2008-08-04 12:58]
[WangWangObj Class]
    {6E213FC7-DD5A-4115-B7E6-D4C7838C361E}  <C:\Program Files\Alisoft\WangWang\WangWangX6.dll>  [(Verified)阿里巴巴软件(上海)有限公司, 1, 0, 0, 5, C:2008-10-13 20:36 M:2008-03-18 12:14]
[MediaComm Class]
    {7670648D-461B-42AF-BDFE-46D26AF5EFF2}  <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin17.dll>  [Thunder Networking Technologies,LTD, 3, 1, 5, 78, C:2008-09-28 13:43 M:2008-06-11 16:11]
[360SafeLive]
    {87515F61-A66C-4319-A0E0-D416CB8059E3}  <C:\Program Files\360safe\live.dll>  [(Verified)360.cn, 1, 0, 1, 1028, C:2008-07-16 22:00 M:2008-07-16 22:00]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-10-15 08:02 M:2008-06-13 09:43]
[DapCtrl Class]
    {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}  <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5803.60.(621).dll>  [ShenZhen Thunder Networking Technologies Ltd., 2, 1, 5803, 60, C:2008-09-28 14:18 M:2008-08-04 12:58]
[SafeMon Class]
    {B69F34DD-F0F9-42DC-9EDD-957187DA688D}  <C:\PROGRA~1\360safe\safemon\safemon.dll>  []
[QQPlayerCtrl Class]
    {CD108273-D434-43E6-AA90-1469F97EB398}  <C:\Program Files\Tencent\QQMusic\QzoneMusic.dll>  [(Verified)深圳腾讯科技, 3, 1, 163, 202, C:2008-05-19 10:09 M:2008-05-19 10:09]
[Shockwave Flash Object]
    {D27CDB6E-AE6D-11CF-96B8-444553540000}  <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx>  [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32]
[PlayerCtrl Class]
    {E05BC2A3-9A46-4A32-80C9-023A473F5B23}  <C:\Program Files\Tencent\QQMusic\QzoneMusic.dll>  [(Verified)深圳腾讯科技, 3, 1, 163, 202, C:2008-05-19 10:09 M:2008-05-19 10:09]
[Thunder DapPlayer]
    {EEDD6FF9-13DE-496B-9A1C-D78B3215E266}  <C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DapPlayer3.0.5712.71.621.dll>  [ShenZhen Thunder Networking Technologies Ltd., 3, 0, 5712, 71, C:2008-09-28 14:18 M:2008-08-04 12:58]
[XPPlayer Class]
    {F3E70CEA-956E-49CC-B444-73AFE593AD7F}  <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.0.0.181.(622).dll>  [Xunlei Networking Technologies,LTD, 2, 0, 0, 181, C:2008-09-28 14:18 M:2008-08-04 12:58]
[InfoCheck Class]
    {F91BA567-79B9-467E-BC97-5DBA01BBC5EE}  <C:\Program Files\Alisoft\Alitalk\Ali_Check.dll>  [(Verified)Copyright 2008, 1, 0, 0, 2, C:2008-09-24 12:43 M:2008-04-21 11:04]
[InstallCheck Class]
    {FFB8C97E-39D4-4E8A-9FE4-B451A0D6CA65}  <C:\Program Files\Alisoft\Alitalk\Ali_Check.dll>  [(Verified)Copyright 2008, 1, 0, 0, 2, C:2008-09-24 12:43 M:2008-04-21 11:04]

Context Menu
[WinRAR]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2008-09-24 11:49 M:2007-09-23 18:59]


========================================
服务

[Human Interface Device Access / HidServ][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll">  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[Contrl Center of Storm Media / ccosm][Running/Auto Start]
    <C:\Program Files\StormII\stormliv.exe /asservice>  [(Verified)北京暴风网际科技有限公司, 3, 8, 9, 17, C:2008-03-11 14:33 M:2008-09-16 19:35]
[Kingsoft Basic Service / kaccore][Running/Manual Start]
    <"C:\Program Files\Kingsoft\KAC\Service\kaccore.exe">  [(Verified)Kingsoft Corporation, 2008,09,04,252, C:2008-09-04 16:18 M:2008-09-04 16:18]


========================================
驱动

[TCP/IP Protocol Driver / Tcpip][Running/System Start]
    <system32\DRIVERS\tcpip.sys>  [Microsoft Corporation, 5.1.2600.3394 (xpsp_sp2_qfe.080620-1259), C:2007-08-11 21:02 M:2008-06-20 18:44]

[usb Card Device / ft2kEnum][Running/Manual Start]
    <system32\DRIVERS\ic2kenum.sys>  [(Verified)OEM Corporation, 2.4.3.403, C:2008-09-24 12:46 M:2008-09-24 12:46]
[USB Chip Holder Service / GDBaseSmc][Running/Manual Start]
    <system32\DRIVERS\Chip_smc.sys>  [(Verified)OEM, 2.4.3.1110, C:2008-09-24 12:46 M:2008-09-24 12:46]
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
    <system32\DRIVERS\HDAudBus.sys>  [(Verified)Windows (R) Server 2003 DDK provider, 5.10.01.5013 built by: WinDDK, C:2005-01-07 17:07 M:2005-01-07 17:07]
[ialm / ialm][Running/Manual Start]
    <system32\DRIVERS\igxpmp32.sys>  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 14:16]
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
    <system32\drivers\RtkHDAud.sys>  [(Verified)Realtek Semiconductor Corp., 5.10.0.5397 built by: WinDDK, C:2008-09-24 11:50 M:2007-04-10 19:04]
[KAVBootC / KAVBootC][Running/Boot Start]
    <system32\Drivers\KAVBootC.sys>  [(Verified)Kingsoft Corporation, 2008,04,28,85, C:2008-10-10 19:04 M:2008-06-17 08:59]
[KAVSafe / KAVSafe][Running/Auto Start]
    <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys>  [(Verified)Kingsoft Corporation, 2008,04,28,65, C:2008-10-19 10:13 M:2008-06-17 08:59]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2007-08-11 21:02 M:2007-08-11 21:02]
[SmartCard Reader Device  / Reader_Device][Running/Manual Start]
    <system32\DRIVERS\usbic2k.sys>  [(Verified)OEM, 2.4.3.403, C:2008-09-24 12:46 M:2008-09-24 12:46]
[Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys>  [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086, C:2007-08-11 21:02 M:2007-11-13 18:25]
[Sony Ericsson W700 Driver driver (WDM) / W700bus][Stopped/Manual Start]
    <system32\DRIVERS\W700bus.sys>  [(Verified)MCCI, V4.34, C:2008-09-24 17:25 M:2006-02-19 17:47]
[Sony Ericsson W700 USB WMC Modem Filter / W700mdfl][Stopped/Manual Start]
    <system32\DRIVERS\W700mdfl.sys>  [(Verified)MCCI, V4.34, C:2008-09-24 17:25 M:2006-02-19 17:47]
[Sony Ericsson W700 USB WMC Modem Driver / W700mdm][Stopped/Manual Start]
    <system32\DRIVERS\W700mdm.sys>  [(Verified)MCCI, V4.34, C:2008-09-24 17:25 M:2006-02-19 17:47]
[Sony Ericsson W700 USB WMC Device Management Drivers (WDM) / W700mgmt][Stopped/Manual Start]
    <system32\DRIVERS\W700mgmt.sys>  [(Verified)MCCI, V4.34, C:2008-09-24 17:25 M:2006-02-19 17:48]
[Sony Ericsson W700 USB WMC OBEX Interface / W700obex][Stopped/Manual Start]
    <system32\DRIVERS\W700obex.sys>  [(Verified)MCCI, V4.34, C:2008-09-24 17:25 M:2006-02-19 17:48]
[NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller / yukonwxp][Running/Manual Start]
    <system32\DRIVERS\yk51x86.sys>  [(Verified)Marvell, 10.12.5.3 built by: WinDDK, C:2007-03-13 16:12 M:2007-03-13 16:12]


========================================
进程

[PID: 628 / SYSTEM]   \SystemRoot\System32\smss.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 676 / SYSTEM]   \??\C:\WINDOWS\system32\csrss.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 704 / SYSTEM]   \??\C:\WINDOWS\system32\winlogon.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 748 / SYSTEM]   C:\WINDOWS\system32\services.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 760 / SYSTEM]   C:\WINDOWS\system32\lsass.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 908 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 972 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 1024 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 1068 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 1344 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.2696 (xpsp.050610-1527), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 1452 / LOCAL SERVICE]   C:\WINDOWS\System32\SCardSvr.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\System32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]

[PID: 1624 / SYSTEM]   C:\Program Files\StormII\stormliv.exe   [(Verified)北京暴风网际科技有限公司, 3, 8, 9, 17, C:2008-03-11 14:33 M:2008-09-16 19:35]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\StormII\bfoptdll.dll  [(Verified)北京暴风网际科技有限公司, 3, 8, 7, 16, C:2008-08-01 20:11 M:2008-08-01 20:11]

[PID: 152 / Administrator]   C:\WINDOWS\RTHDCPL.EXE   [(Verified)Realtek Semiconductor Corp., 2.1.3.0, C:2008-09-24 11:50 M:2007-04-10 15:28]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]

[PID: 180 / Administrator]   C:\WINDOWS\system32\igfxtray.exe   [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-20 13:57]
    C:\WINDOWS\system32\hccutils.DLL  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\igfxsrvc.dll  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]
    C:\WINDOWS\system32\igfxres.dll  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:55 M:2007-04-16 12:53]
    C:\WINDOWS\system32\igfxress.dll  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]

[PID: 168 / Administrator]   C:\WINDOWS\system32\hkcmd.exe   [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-20 13:57]
    C:\WINDOWS\system32\hccutils.DLL  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\igfxsrvc.dll  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]
    C:\WINDOWS\system32\igfxres.dll  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:55 M:2007-04-16 12:53]

[PID: 208 / Administrator]   C:\WINDOWS\system32\igfxpers.exe   [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-20 13:57]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\igfxsrvc.dll  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]

[PID: 212 / Administrator]   C:\WINDOWS\system32\igfxsrvc.exe   [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-20 13:57]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\igfxsrvc.dll  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]
    C:\WINDOWS\system32\igfxdev.dll  [(Verified)Intel Corporation, 6.14.10.4820, C:2008-09-24 11:53 M:2007-04-16 12:50]

[PID: 408 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 532 / Administrator]   C:\WINDOWS\system32\SafeSignCertReg.exe   [A.E.T. Europe B.V., 2.0.0.2, C:2008-09-24 12:46 M:2004-02-17 09:00]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 540 / Administrator]   C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe   [Sony Ericsson Mobile Communications AB, 1.1.1.3, C:2005-10-26 17:17 M:2005-10-26 17:17]
    C:\Program Files\Common Files\Teleca Shared\Telecalib_logging.dll  [Teleca/Popwire AB, 1, 0, 2, 3, C:2005-06-21 11:36 M:2005-06-21 11:36]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42]
    C:\Program Files\Common Files\Teleca Shared\boost_log-vc71-mt-1_32.dll  [N/A, C:2005-05-11 14:23 M:2005-05-11 14:23]
    C:\WINDOWS\system32\MFC71U.DLL  [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 21:12 M:2003-03-18 21:12]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\MFC71CHS.DLL  [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:44 M:2003-03-18 20:44]
    C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application LauncherLg.dll  [Sony Ericsson Mobile Communications AB, 1.0.6.1, C:2006-03-29 11:24 M:2006-03-29 11:24]
    C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application LauncherBmp.dll  [Sony Ericsson Mobile Communications AB, 1.0.6.1, C:2006-03-29 11:24 M:2006-03-29 11:24]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 21:20 M:2003-03-18 21:20]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Common Files\Teleca Shared\TC Device Mgmt.dll  [Teleca Software Solutions, 1, 0, 1, 1, C:2005-07-17 10:53 M:2005-07-17 10:53]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]

[PID: 588 / Administrator]   C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe   [Macrovision Corporation, 4, 60, 100, 37068, C:2005-08-11 16:30 M:2005-08-11 16:30]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]

[PID: 656 / Administrator]   C:\Program Files\Kingsoft\WPS Office Personal\office6\wpsupdate.exe   [Kingsoft Corp. Ltd., 1,0,0,1515, C:2008-03-06 00:00 M:2008-03-06 00:00]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Kingsoft\Powerword 2007\Grabgdip.dll  [Kingsoft Co, Ltd., 1, 0, 0, 1, C:2008-09-24 12:39 M:2007-04-04 17:36]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]

[PID: 668 / Administrator]   C:\Program Files\Rising\AntiSpyware\rstray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.16, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\rsmginfo.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 8, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Rising\AntiSpyware\RsXML.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\ComServ.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\rscommon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.1.1, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\pngdll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\runiep.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.39, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\NComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-10-09 13:14 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-10-09 13:14 M:2008-10-09 13:14]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]

[PID: 876 / LOCAL SERVICE]   C:\WINDOWS\System32\alg.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\System32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]

[PID: 1076 / Administrator]   C:\WINDOWS\system32\ctfmon.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]

[PID: 1092 / Administrator]   C:\Program Files\Alisoft\Alitalk\AliTalk.EXE   [(Verified)Alibaba, 5, 7, 0, 5, C:2008-09-24 12:43 M:2008-05-07 16:26]
    C:\Program Files\Alisoft\Alitalk\SysIdle.dll  [版权所有 (C) 2003, 1, 0, 0, 1, C:2008-09-24 12:43 M:2007-03-30 16:16]
    C:\Program Files\Alisoft\Alitalk\ww_network.dll  [版权所有 (C) 2006-2007 阿里巴巴软件(上海)有限公司, 2, 1, 0, 1, C:2008-09-24 12:43 M:2008-03-04 16:16]
    C:\Program Files\Alisoft\Alitalk\AliViewerApi.dll  [N/A, C:2008-09-24 12:43 M:2007-01-05 16:31]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Alisoft\Alitalk\RICHED20.dll  [Microsoft Corporation, 5.30.23.1210, C:2008-09-24 12:43 M:2007-01-05 16:31]
    C:\Program Files\Alisoft\Alitalk\RichOne.dll  [阿里巴巴软件(上海)有限公司, 1.0.0.1, C:2008-09-24 12:43 M:2007-08-13 15:54]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]
    C:\WINDOWS\system32\aliedit\aliedit.dll  [(Verified)Copyright 2008, 2, 1, 2, 1, C:2008-09-24 12:43 M:2008-07-14 09:42]

[PID: 1208 / Administrator]   C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe   [Teleca Software Solutions AB, 0.0.1.48, C:2005-06-08 17:45 M:2005-06-08 17:45]
    C:\Program Files\Common Files\Teleca Shared\Telecalib_logging.dll  [Teleca/Popwire AB, 1, 0, 2, 3, C:2005-06-21 11:36 M:2005-06-21 11:36]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42]
    C:\Program Files\Common Files\Teleca Shared\boost_log-vc71-mt-1_32.dll  [N/A, C:2005-05-11 14:23 M:2005-05-11 14:23]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\msxml4.dll  [Microsoft Corporation, 4.20.9848.0, C:2007-05-08 15:10 M:2007-05-08 15:10]

[PID: 1300 / Administrator]   C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe   [(Verified)Microsoft Corporation, 8.5.1302.1018, C:2007-10-18 11:35 M:2007-10-18 11:35]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll  [Microsoft Corporation, 8.00.50727.762, C:2007-08-23 00:18 M:2007-08-23 00:18]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Windows Live\Messenger\SensApi.dll  [N/A, C:2008-09-24 12:40 M:2008-09-24 12:40]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Incesoft\XiaoiAlerts\MSNPlugin.dll  [(Verified)赢思软件 版权所有 (C) 2007, 2. 0. 4.701, C:2008-09-24 12:40 M:2008-09-25 16:54]
    C:\WINDOWS\system32\detoured.dll  [Microsoft Corporation, Express Version 2.1 Build_216, C:2008-09-24 12:40 M:2008-09-24 12:40]
    C:\Program Files\Incesoft\XiaoiAlerts\Capture.dll  [, 1. 0. 0. 1, C:2008-09-25 16:54 M:2008-09-25 16:54]
    C:\Program Files\Incesoft\XiaoiAlerts\resource.dll  [N/A, C:2008-09-24 12:40 M:2008-09-24 12:40]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]
    C:\WINDOWS\system32\msdmo.dll  [(Verified)N/A, C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 1500 / Administrator]   C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtWLan.exe   [Realtek Semiconductor Corp., 402, 1180, 626, 2006, C:2008-10-09 20:44 M:2006-06-28 17:32]
    C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\EnumDevLib.dll  [Copyright (C) 2006, 400, 1010, 530, 2006, C:2008-10-09 20:44 M:2006-06-28 15:26]
    C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\RtlLib.dll  [Realtek Semiconductor Corp., 402, 1160, 615, 2006, C:2008-10-09 20:44 M:2006-06-28 15:26]
    C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\acAuth.dll  [Copyright (c) 2004-2005, Meetinghouse Data Communications, 4.0.2.0 2005-07-19 16:52:58, C:2008-10-09 20:44 M:2006-06-28 16:24]
    C:\Program Files\REALTEK RTL8187 Wireless LAN Driver and Utility\IpLib.dll  [TODO: <Company name>, 1.0.0.1, C:2008-10-09 20:44 M:2006-06-28 15:26]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 2096 / Administrator]   C:\Program Files\快快捷\KKjie_safe.exe   [www.kkjie.com, 1,0,0,3, C:2008-09-18 23:04 M:2008-09-18 23:04]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\快快捷\Languages\Chinese.lang  [www.kkjie.com, 1.0.0.3, C:2008-09-19 10:43 M:2008-09-19 10:43]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]
    C:\Program Files\360safe\360Safe.exe  [(Verified)奇虎网, 4, 3, 0, 1009, C:2008-09-22 14:25 M:2008-09-22 14:25]

[PID: 3412 / Administrator]   C:\Program Files\Common Files\Teleca Shared\Generic.exe   [Teleca Software Solutions, 1, 0, 3, 2, C:2005-08-10 08:54 M:2005-08-10 08:54]
    C:\Program Files\Common Files\Teleca Shared\Telecalib_logging.dll  [Teleca/Popwire AB, 1, 0, 2, 3, C:2005-06-21 11:36 M:2005-06-21 11:36]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42]
    C:\Program Files\Common Files\Teleca Shared\boost_log-vc71-mt-1_32.dll  [N/A, C:2005-05-11 14:23 M:2005-05-11 14:23]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Common Files\Teleca Shared\TC Device Mgmt.dll  [Teleca Software Solutions, 1, 0, 1, 1, C:2005-07-17 10:53 M:2005-07-17 10:53]
    C:\WINDOWS\system32\msxml4.dll  [Microsoft Corporation, 4.20.9848.0, C:2007-05-08 15:10 M:2007-05-08 15:10]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Sony Ericsson\Mobile2\Device Manager\SpecificMPM.dll  [SonyEricsson, 1, 0, 2, 1, C:2005-07-17 11:42 M:2005-07-17 11:42]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\anubisps.dll  [N/A, C:2006-05-10 13:42 M:2006-05-10 13:42]
    C:\Program Files\Common Files\Teleca Shared\SpecificUSB.dll  [Popwire AB, 1, 2, 1, 1, C:2006-02-21 14:46 M:2006-02-21 14:46]
    C:\Program Files\Common Files\Teleca Shared\tlib_log.dll  [Popwire AB, 1, 0, 3, 3, C:2005-11-04 12:54 M:2005-11-04 12:54]
    C:\Program Files\Common Files\Teleca Shared\boost_log-vc71-mt-1_33.dll  [N/A, C:2005-10-07 10:22 M:2005-10-07 10:22]

[PID: 3680 / Administrator]   C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe   [Sony Ericsson Mobile Communications AB, 1, 2, 0,1186, C:2006-05-10 13:42 M:2006-05-10 13:42]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\ShowMfcDialog.dll  [Sony Ericsson Mobile Communications AB, 1, 0, 0,118, C:2006-05-10 13:42 M:2006-05-10 13:42]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\anubisps.dll  [N/A, C:2006-05-10 13:42 M:2006-05-10 13:42]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\cellphone_object.dll  [Sony Ericsson Mobile Communications AB, 1, 0, 0,1190, C:2006-05-10 13:42 M:2006-05-10 13:42]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\ecsmoddata.dll  [Sony Ericsson Mobile Communications AB, 1, 2, 0,305, C:2006-05-10 13:41 M:2006-05-10 13:41]
    C:\WINDOWS\system32\msxml4.dll  [Microsoft Corporation, 4.20.9848.0, C:2007-05-08 15:10 M:2007-05-08 15:10]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\Capires0804.DLL  [Popwire AB, 1, 0, 0,2013, C:2006-01-05 09:31 M:2006-01-05 09:31]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\cabmain.dll  [Sony Ericsson Mobile Communications AB, 1, 0, 0,1222, C:2006-05-10 13:41 M:2006-05-10 13:41]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\msmeirsock_object.dll  [Sony Ericsson Mobile Communications AB, 1, 0, 0,941, C:2006-05-10 13:41 M:2006-05-10 13:41]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\ms98irsock_object.dll  [Sony Ericsson Mobile Communications AB, 1, 0, 0,986, C:2006-05-10 13:41 M:2006-05-10 13:41]
    C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\msirsock_object.dll  [Sony Ericsson Mobile Communications AB, 1, 0, 0,998, C:2006-05-10 13:41 M:2006-05-10 13:41]

[PID: 4032 / Administrator]   c:\program files\common files\installshield\updateservice\isuspm.exe   [Macrovision Corporation, 4, 60, 100, 37068, C:2005-08-11 16:30 M:2005-08-11 16:30]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Common Files\InstallShield\UpdateService\_ispmres.dll  [Macrovision Corporation, 4, 60, 100, 37068, C:2005-08-11 16:30 M:2005-08-11 16:30]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]

[PID: 2504 / Administrator]   C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe   [Macrovision Corporation, 4, 60, 100, 37068, C:2005-08-11 16:30 M:2005-08-11 16:30]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]

[PID: 2896 / Administrator]   C:\WINDOWS\system32\wuauclt.exe   [(Verified)Microsoft Corporation, 7.2.6001.784 (winmain_oob/wu_wsuswlc(wmbla).080718-1904), C:2008-09-23 21:04 M:2008-07-18 22:10]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]

[PID: 224 / Administrator]   C:\Program Files\Tencent\TT\bin\TTraveler.exe   [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:58 M:2008-09-01 18:58]
    C:\Program Files\Tencent\TT\bin\TTUtilWidget.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:58 M:2008-09-01 18:58]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Tencent\TT\bin\TTStore.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:58 M:2008-09-01 18:58]
    C:\Program Files\Tencent\TT\bin\sqlite3.dll  [(Verified)N/A, C:2008-09-01 18:56 M:2008-09-01 18:56]
    C:\Program Files\Tencent\TT\bin\PlatformWidget.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:56 M:2008-09-01 18:56]
    C:\Program Files\Tencent\TT\bin\TTMainFrame.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:57 M:2008-09-01 18:57]
    C:\Program Files\Tencent\TT\bin\UpdateUtil.dll  [(Verified)N/A, C:2008-09-01 18:58 M:2008-09-01 18:58]
    C:\Program Files\Tencent\TT\bin\TTMBrowser.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:57 M:2008-09-01 18:57]
    C:\Program Files\Tencent\TT\bin\TTabMgr.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:56 M:2008-09-01 18:56]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]
    C:\Program Files\Tencent\TT\bin\TTSkin.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:58 M:2008-09-01 18:58]
    C:\Program Files\Tencent\TT\bin\TTPluginMng.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:58 M:2008-09-01 18:58]
    C:\Program Files\Tencent\TT\Plugins\3TTWeather\TTWeather.dll  [Tencent, 1.0.0.1, C:2008-09-01 18:08 M:2008-09-01 18:08]
    C:\Program Files\Tencent\TT\Plugins\WebInfo\WebToolbar.dll  [Tencent, 1.0.0.1, C:2008-09-01 18:08 M:2008-09-01 18:08]
    C:\Program Files\Tencent\TT\bin\FavoriteLogical.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:55 M:2008-09-01 18:55]
    C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll  [Adobe Systems, Inc., 8.1.0.0, C:2007-05-10 22:54 M:2007-05-10 22:54]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll  [Microsoft Corporation, 8.00.50727.762, C:2007-08-23 00:18 M:2007-08-23 00:18]
    C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS  [Adobe Systems, Inc., 8.0.0.0, C:2006-11-17 00:37 M:2006-11-17 00:37]
    C:\Program Files\Tencent\TT\bin\TSupport.dll  [(Verified)TENCENT Inc., 1, 2, 11, 201, C:2008-09-01 18:56 M:2008-09-01 18:56]
    C:\Program Files\Tencent\TT\bin\TTHtmlApp.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:56 M:2008-09-01 18:56]
    C:\Program Files\Tencent\TT\bin\TTFilter.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:56 M:2008-09-01 18:56]
    C:\Program Files\Tencent\TT\bin\TTNetwork.dll  [(Verified)Tencent, 4, 13, 0, 13, C:2008-09-01 18:58 M:2008-09-01 18:58]
    C:\Program Files\Kingsoft\Powerword 2007\Grabgdip.dll  [Kingsoft Co, Ltd., 1, 0, 0, 1, C:2008-09-24 12:39 M:2007-04-04 17:36]
    C:\Program Files\Alisoft\WangWang\WangWangX6.dll  [(Verified)阿里巴巴软件(上海)有限公司, 1, 0, 0, 5, C:2008-10-13 20:36 M:2008-03-18 12:14]
    C:\WINDOWS\system32\aliedit\aliedit.dll  [(Verified)Copyright 2008, 2, 1, 2, 1, C:2008-09-24 12:43 M:2008-07-14 09:42]
    C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx  [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32]
    C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-10-15 08:02 M:2008-06-13 09:43]

[PID: 3752 / Administrator]   C:\Program Files\arswp\ArSwp.exe   [(Verified)ArSwp.com, 2, 8, 1, 815, C:2008-10-19 10:06 M:2008-08-15 22:25]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]
    C:\Program Files\arswp\plugin\ArFix.dll  [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2008-10-19 10:06 M:2007-11-28 15:19]

[PID: 2660 / SYSTEM]   C:\Program Files\Kingsoft\KAC\Service\kaccore.exe   [(Verified)Kingsoft Corporation, 2008,09,04,252, C:2008-09-04 16:18 M:2008-09-04 16:18]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\WINDOWS\system32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\Program Files\Kingsoft\KAC\Service\corehelper.dll  [(Verified)Kingsoft Corporation, 2008,09,04,252, C:2008-09-04 16:18 M:2008-09-04 16:18]

[PID: 1492 / Administrator]   C:\WINDOWS\explorer.exe   [(Verified)Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), C:2007-08-11 21:02 M:2007-06-13 21:21]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-08-11 21:02 M:2007-08-11 21:02]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 31, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-10-09 09:05 M:2008-10-09 13:14]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-10-09 09:05 M:2008-10-09 09:05]
    C:\Program Files\快快捷\KKjie_safe.hlp  [www.kkjie.com, 1, 0, 0, 3, C:2008-09-06 11:59 M:2008-09-06 11:59]


========================================
文件关联

[.hlp] <winhlp32.exe %1> [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:1601-01-01 08:00 M:1601-01-01 08:00]


========================================
AutoRun.INF



========================================
Winsock提供者



========================================
HOSTS

    127.0.0.1 localhost


[/CODE]