[CODE]

2008-11-18,13:36:22

System Repair Engineer 2.7.0.1210
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描
    计划任务
    API HOOK
    隐藏进程


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
    <bgswitch><; C:\WINDOWS\system32\bgswitch.exe>  [File is missing]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <runeip><"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <ATIPTA><; "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe">  [ATI Technologies, Inc.]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
    <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>  [File is missing]
    <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
    <PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
    <SoundMan><; SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <KKDelay><C:\Program Files\Rising\AntiSpyware\RunOnce.exe>  [(Verified)Beijing Rising Information Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><kmon.dll>  [(Verified)Beijing Rising Information Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Windows Publisher]
    <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
    <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
    <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
    <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
    <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
    <浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe>  [(Verified)Microsoft Windows Publisher]

==================================
启动文件夹
N/A

==================================
服务
[Ati HotKey Poller / Ati HotKey Poller][Stopped/Auto Start]
  <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[HD_CertService / HD_CertService][Running/Auto Start]
  <C:\Program Files\95599 Certificate Tools\CIDC\HD_CertService.exe><>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[LightScribeService Direct Disc Labeling Service / LightScribeService][Running/Auto Start]
  <"C:\Program Files\Common Files\LightScribe\LSSrvc.exe"><Hewlett-Packard Company>
[PnpWMmng / PnpWMmng][Stopped/Auto Start]
  <2 - 系统找不到指定的文件。
><(File is missing)>
[Rising Proxy  Service / RfwProxySrv][Running/Auto Start]
  <C:\Program Files\Rising\Rfw\rfwProxy.exe><Beijing Rising Information Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
  <C:\Program Files\Rising\Rfw\rfwsrv.exe><Beijing Rising Information Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Information Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Stopped/Auto Start]
  <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Information Technology Co., Ltd.>
[Windows Media Connect Service / WMConnectCDS][Stopped/Manual Start]
  <C:\Program Files\Windows Media Connect 2\wmccds.exe><Microsoft Corporation>

==================================
驱动程序
[AlcwWmDrv / AlcwWmDrv][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\AlcwWmDrv.sys><N/A>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[ati2mtag / ati2mtag][Running/Manual Start]
  <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[中国华大智能密码钥匙驱动程序 / CIDCUSB][Stopped/Manual Start]
  <System32\Drivers\cidcusb.sys><CIDC.>
[HookCont / HookCont][Running/System Start]
  <\SystemRoot\system32\drivers\HookCont.sys><Beijing Rising Information Technology Co., Ltd.>
[HookNtos / HookNtos][Running/System Start]
  <\SystemRoot\system32\drivers\HookNtos.sys><Beijing Rising Information Technology Co., Ltd.>
[HookReg / HookReg][Running/System Start]
  <\SystemRoot\system32\drivers\HookReg.sys><Beijing Rising Information Technology Co., Ltd.>
[HookSys / HookSys][Running/System Start]
  <\SystemRoot\system32\drivers\HookSys.sys><Beijing Rising Information Technology Co., Ltd.>
[HookUrl / HookUrl][Running/Auto Start]
  <\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Information Technology Co., Ltd.>
[HWiNFO32 内核驱动 / HWiNFO32][Stopped/Auto Start]
  <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.094\HWiNFO32.SYS><N/A>
[nvatabus / nvatabus][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\nvatabus.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
  <system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
  <system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[NVIDIA nForce AGP Bus Filter / nv_agp][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\nv_agp.sys><NVIDIA Corporation>
[PnpWmkDrv / PnpWmkDrv][Stopped/System Start]
  <\??\C:\WINDOWS\system32\drivers\PnpWmkDrv.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Rising  Rfwbase Driver / RfwBase][Running/Auto Start]
  <System32\DRIVERS\rfwbase.SYS><Beijing Rising Information Technology Co., Ltd.>
[RsFwDrv / RsFwDrv][Running/System Start]
  <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Information Technology Co., Ltd.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Information Technology Co., Ltd.>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[WmKillDrv / WmKillDrv][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\WmKillDrv.sys><N/A>
[WmRegProDrv / WmRegProDrv][Stopped/Manual Start]
  <System32\Drivers\WmRegProDrv.sys><Windows (R) 2000 DDK provider>

==================================
浏览器加载项
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <F:\应用程序\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {0E43571F-3477-4A6A-8505-19BB75A970D4} <, >
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <F:\应用程序\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <F:\应用程序\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[番茄花园]
  {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.tomatolei.com, N/A>
[]
  {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[清理]
  {FC5F1910-F130-11DB-BB90-00C04F79FFC0} <F:\应用程序\完美卸载V2008\TrackClean.exe, >
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[]
  {05C1004E-2596-48E5-8E26-39362985EEB9} <, >
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <F:\应用程序\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[GerneralPeerID Class]
  {0A47E819-F82E-4D5D-B806-6A9EA94D68CD} <F:\应用程序\Thunder\Components\InMedia\peerid.dll, >
[]
  {0E43571F-3477-4A6A-8505-19BB75A970D4} <, >
[CEnroll Class]
  {127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, (Signed) Microsoft Corporation>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation>
[ctl4RA Class]
  {27984DB8-C851-439E-B625-81740482BE7C} <C:\WINDOWS\system32\PRINTC~1.DLL, INFOSEC Tech. corp>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation>
[雅虎助手]
  {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[XML Document]
  {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, (Signed) Microsoft Corporation>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <F:\应用程序\Thunder\ComDlls\ThunderAgent_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[]
  {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <, >
[InfoSecNetSign Class]
  {62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\WINDOWS\system32\NetSign.dll, Infosec Technologies Co., Ltd.>
[XMP Class]
  {6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, Xunlei Networking Technologies,LTD>
[XDRM]
  {693571CB-54A3-4E90-9D52-EEAE1334E2D3} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work, >
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation>
[CCtInf Class]
  {6DBB2904-082D-4DB0-944A-21C22BA121F4} <C:\WINDOWS\system32\BANKCE~1.DLL, >
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <F:\应用程序\Thunder\Components\InMedia\MediaAddin17.dll, Thunder Networking Technologies,LTD>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, (Signed) Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <F:\应用程序\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[RMGetLicense Class]
  {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, (Signed) Microsoft Corporation>
[DapCtrl Class]
  {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5805.77.(256).dll, ShenZhen Thunder Networking Technologies Ltd.>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, (Signed) Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[]
  {BE9C13C3-9E46-4DB1-BC05-BD8DA44599F2} <, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, (Signed) Adobe Systems, Inc.>
[]
  {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[Thunder DapPlayer]
  {EEDD6FF9-13DE-496B-9A1C-D78B3215E266} <F:\应用程序\Thunder\Components\DownAndPlay\DapPlayer3.0.5712.71.324.dll, ShenZhen Thunder Networking Technologies Ltd.>
[XPPlayer Class]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.5853.212.(257).dll, Xunlei Networking Technologies,LTD>
[]
  {FC5F1910-F130-11DB-BB90-00C04F79FFC0} <, >
[使用迅雷下载]
  <F:\应用程序\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <F:\应用程序\Thunder\Program\GetAllUrl.htm, N/A>

==================================
正在运行的进程
[PID: 564][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 640][\??\C:\WINDOWS\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 676][\??\C:\WINDOWS\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\WINDOWS\system32\Ati2evxx.dll]  [ATI Technologies Inc., 6.14.10.4119]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 720][C:\WINDOWS\system32\services.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 732][C:\WINDOWS\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\WINDOWS\system32\wdigest.dll]  [Microsoft Corporation, 5.1.2600.2874 (xpsp.060323-1528)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 920][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 980][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 1108][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.33]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
[PID: 1124][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 1208][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 1260][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 1376][C:\PROGRAM FILES\RISING\RAV\ravmond.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.80]
    [C:\PROGRAM FILES\RISING\RAV\BWList.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.5]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.1]
    [C:\PROGRAM FILES\RISING\RAV\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.19]
    [C:\PROGRAM FILES\RISING\RAV\RsLog.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.36]
    [C:\PROGRAM FILES\RISING\RAV\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\PROGRAM FILES\RISING\RAV\MonRule.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.29]
    [C:\PROGRAM FILES\RISING\RAV\Hooksys.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\PROGRAM FILES\RISING\RAV\HookReg.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    [C:\PROGRAM FILES\RISING\RAV\HookNtos.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    [C:\PROGRAM FILES\RISING\RAV\rswalmon.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 24]
    [C:\PROGRAM FILES\RISING\RAV\recomp.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41]
    [C:\PROGRAM FILES\RISING\RAV\refs.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18]
    [C:\PROGRAM FILES\RISING\RAV\ffr.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\Program Files\Rising\Rav\RsStore.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.9]
    [C:\PROGRAM FILES\RISING\RAV\HookCont.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    [C:\Program Files\Rising\Rav\fakescan.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.14]
    [C:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.39]
    [C:\PROGRAM FILES\RISING\RAV\viruslib.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27]
    [C:\PROGRAM FILES\RISING\RAV\relibldr.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\PROGRAM FILES\RISING\RAV\HookWeb.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.3]
    [C:\PROGRAM FILES\RISING\RAV\nvfile.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7]
    [C:\PROGRAM FILES\RISING\RAV\scanexec.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22]
    [C:\PROGRAM FILES\RISING\RAV\unexe.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 6]
    [C:\PROGRAM FILES\RISING\RAV\scanex.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 98]
    [C:\PROGRAM FILES\RISING\RAV\pearc.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 8]
    [C:\PROGRAM FILES\RISING\RAV\extfile.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 32]
    [C:\PROGRAM FILES\RISING\RAV\extmail.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10]
    [C:\PROGRAM FILES\RISING\RAV\scanpack.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10]
    [C:\PROGRAM FILES\RISING\RAV\revm.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11]
    [C:\PROGRAM FILES\RISING\RAV\urutils.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7]
    [C:\PROGRAM FILES\RISING\RAV\ur000.dat]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22]
    [C:\PROGRAM FILES\RISING\RAV\extole.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 13]
    [C:\PROGRAM FILES\RISING\RAV\scriptci.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 4]
    [C:\PROGRAM FILES\RISING\RAV\ur023.dat]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 3]
    [C:\PROGRAM FILES\RISING\RAV\uroutine.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27]
    [C:\PROGRAM FILES\RISING\RAV\ur001.dat]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [C:\PROGRAM FILES\RISING\RAV\scansct.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11]
[PID: 1392][C:\Program Files\Rising\Rfw\rfwsrv.exe]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.77]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rfw\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.1]
    [C:\Program Files\Rising\Rfw\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.19]
    [C:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.17]
    [C:\Program Files\Rising\Rfw\rfwlog.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.16]
    [C:\Program Files\Rising\Rfw\Rfwdrv.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.50]
    [C:\Program Files\Rising\Rfw\ijt_ctrl.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.0]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\Program Files\Rising\Rfw\unvdet.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.8]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\mPorts.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.6]
[PID: 1448][C:\Program Files\Rising\Rfw\rfwProxy.exe]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.37]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.17]
    [C:\Program Files\Rising\Rfw\urlrule.dll]  [Beijing Rising Information Technology Co., Ltd., 1.0.0.15]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\Program Files\Rising\Rfw\MonMid.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.6]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
[PID: 1668][C:\Program Files\Rising\Rfw\rfwstub.exe]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.12]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\Rfw\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 1892][C:\PROGRAM FILES\RISING\RAV\RavStub.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.10]
    [C:\PROGRAM FILES\RISING\RAV\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 2012][C:\WINDOWS\system32\spoolsv.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 2656][C:\Program Files\95599 Certificate Tools\CIDC\HD_CertService.exe]  [, 1, 0, 0, 4]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 2676][C:\Program Files\Common Files\LightScribe\LSSrvc.exe]  [Hewlett-Packard Company, 1.4.44.1]
    [C:\Program Files\Common Files\LightScribe\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\LightScribe\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 2752][C:\WINDOWS\system32\sessmgr.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 2832][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 2852][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 3464][C:\WINDOWS\System32\alg.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\WINDOWS\System32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 3540][C:\WINDOWS\Explorer.EXE]  [(Verified) Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_qfe.070613-1311)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.18]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [F:\应用程序\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.29]
    [F:\应用程序\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
[PID: 3176][C:\Program Files\Rising\Rfw\RfwMain.exe]  [Beijing Rising Information Technology Co., Ltd., 7.0.1.70]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\Rfw\RsGuiLib.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90]
    [C:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rfw\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.1]
    [C:\Program Files\Rising\Rfw\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.19]
    [C:\Program Files\Rising\Rfw\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\Program Files\Rising\Rfw\RfwCtrl.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\Program Files\Rising\Rfw\RsXML.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    [C:\Program Files\Rising\Rfw\PngDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.17]
[PID: 1540][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.24]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.19]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 3876][C:\Program Files\Rising\AntiSpyware\rstray.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.16]
    [C:\Program Files\Rising\AntiSpyware\rsmginfo.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 8]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\AntiSpyware\RsXML.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    [C:\Program Files\Rising\AntiSpyware\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\AntiSpyware\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Rising\AntiSpyware\ComServ.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.31]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\AntiSpyware\rscommon.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.1.1]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\pngdll.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [C:\Program Files\Rising\AntiSpyware\runiep.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.41]
    [C:\Program Files\Rising\AntiSpyware\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.6]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\AntiSpyware\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.18]
[PID: 3300][C:\WINDOWS\system32\ctfmon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 880][C:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Information Technology Co., Ltd., 20.0.01.27]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\Program Files\Rising\Rav\recomp.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41]
    [C:\Program Files\Rising\Rav\refs.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18]
    [C:\Program Files\Rising\Rav\viruslib.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27]
    [C:\Program Files\Rising\Rav\relibldr.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.1]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.19]
    [C:\Program Files\Rising\Rav\MonRule.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.29]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\Program Files\Rising\Rav\Rsguilib.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90]
    [C:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 1900][C:\Program Files\Rising\AntiSpyware\knownsvr.exe]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.12]
    [C:\Program Files\Rising\AntiSpyware\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.6]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[PID: 1400][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  [Yahoo!, 2, 1, 0, 1038]
    [F:\应用程序\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.29]
    [F:\应用程序\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
    [C:\WINDOWS\system32\UrlFilter.dll]  [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15]
    [C:\Program Files\Rising\AntiSpyware\UrlRule.dll]  [Beijing Rising Information Technology Co., Ltd., 1.0.0.15]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx]  [Adobe Systems, Inc., 9,0,47,0]
[PID: 3292][F:\应用程序\系统诊断工具\SREngLdr.EXE]  [Smallfrogs Studio, 2.7.0.1210]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\WINDOWS\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
[PID: 256][F:\应用程序\系统诊断工具\SREb5805b12.EXE]  [Smallfrogs Studio, 2.7.0.1210]
    [C:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.21]
    [C:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Information Technology Co., Ltd., 7.0.0.9]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2523 (xpsp.040919-1030)]
    [F:\应用程序\系统诊断工具\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1       localhost
127.0.0.1	89382.cn
127.0.0.1	97725.com
127.0.0.1	43242.com
127.0.0.1	gualeifafksajof.43242.com
127.0.0.1	jiaofei123.140.tofor.com
127.0.0.1	ben666888.www1.910idc.com
127.0.0.1	pchorne.com
127.0.0.1	www.ctv163.com
127.0.0.1	www.aiaiso.com
127.0.0.1	cool.47555.com
127.0.0.1	guajfskajiw.43242.com
127.0.0.1	www.3448.com
127.0.0.1	pkdown.3322.org
127.0.0.1	ddos2.sz45.com
127.0.0.1	www.113678.com
127.0.0.1	www.1861.sh
127.0.0.1	www.x44.cn
127.0.0.1	www.799789.com
127.0.0.1	www.zhengdian.com
127.0.0.1	www.9000music.com
127.0.0.1	girlchinese.com
127.0.0.1	www.yibinren.com
127.0.0.1	www.mtv51.com
127.0.0.1	www.163[1].com
127.0.0.1	www.37021.com
127.0.0.1	www.cnqb.net
127.0.0.1	www.qq3344.com
127.0.0.1	www.qq3344.net
127.0.0.1	youlove.3322.net
127.0.0.1	www.58589.com
127.0.0.1	tty.yyun.net
127.0.0.1	www.ftlink.net
127.0.0.1	home.kimo.com.tw
127.0.0.1	www.pixpox.com
127.0.0.1	www.k163.com
127.0.0.1	www.dj3344.com
127.0.0.1	www.yysky.net
127.0.0.1	61.145.117.212
127.0.0.1	ResponseMedia-ad.flycast.com
127.0.0.1	Suissa-ad.flycast.com
127.0.0.1	UGO.eu-adcenter.net
127.0.0.1	VNU.eu-adcenter.net
127.0.0.1	a32.g.a.yimg.com
127.0.0.1	ad-adex3.flycast.com
127.0.0.1	ad.adsmart.net
127.0.0.1	ad.ca.doubleclick.net
127.0.0.1	ad.de.doubleclick.net
127.0.0.1	ad.doubleclick.net
127.0.0.1	ad.fr.doubleclick.net
127.0.0.1	ad.jp.doubleclick.net
127.0.0.1	ad.linkexchange.com
127.0.0.1	ad.linksynergy.com
127.0.0.1	ad.nl.doubleclick.net
127.0.0.1	ad.no.doubleclick.net
127.0.0.1	ad.preferences.com
127.0.0.1	ad.sma.punto.net
127.0.0.1	ad.uk.doubleclick.net
127.0.0.1	ad.webprovider.com
127.0.0.1	ad08.focalink.com
127.0.0.1	adcontroller.unicast.com
127.0.0.1	adcreatives.imaginemedia.com
127.0.0.1	adforce.ads.imgis.com
127.0.0.1	adforce.imgis.com
127.0.0.1	adfu.blockstackers.com
127.0.0.1	adimage.blm.net
127.0.0.1	adimages.earthweb.com
127.0.0.1	adimg.egroups.com
127.0.0.1	admedia.xoom.com
127.0.0.1	adpick.switchboard.com
127.0.0.1	adremote.pathfinder.com
127.0.0.1	ads.admaximize.com
127.0.0.1	ads.bfast.com
127.0.0.1	ads.clickhouse.com
127.0.0.1	ads.enliven.com
127.0.0.1	ads.fairfax.com.au
127.0.0.1	ads.fool.com
127.0.0.1	ads.freshmeat.net
127.0.0.1	ads.hollywood.com
127.0.0.1	ads.i33.com
127.0.0.1	ads.infi.net
127.0.0.1	ads.jwtt3.com
127.0.0.1	ads.link4ads.com
127.0.0.1	ads.lycos.com
127.0.0.1	ads.madison.com
127.0.0.1	ads.mediaodyssey.com
127.0.0.1	ads.msn.com
127.0.0.1	ads.ninemsn.com.au
127.0.0.1	ads.seattletimes.com
127.0.0.1	ads.smartclicks.com
127.0.0.1	ads.smartclicks.net
127.0.0.1	ads.sptimes.com
127.0.0.1	ads.tripod.com
127.0.0.1	ads.web.aol.com
127.0.0.1	ads.x10.com
127.0.0.1	ads.xtra.co.nz
127.0.0.1	ads.zdnet.com
127.0.0.1	ads01.focalink.com
127.0.0.1	ads02.focalink.com
127.0.0.1	ads03.focalink.com
127.0.0.1	ads04.focalink.com
127.0.0.1	ads05.focalink.com
127.0.0.1	ads06.focalink.com
127.0.0.1	ads08.focalink.com
127.0.0.1	ads09.focalink.com
127.0.0.1	ads1.activeagent.at
127.0.0.1	ads10.focalink.com
127.0.0.1	ads11.focalink.com
127.0.0.1	ads12.focalink.com
127.0.0.1	ads14.focalink.com
127.0.0.1	ads16.focalink.com
127.0.0.1	ads17.focalink.com
127.0.0.1	ads18.focalink.com
127.0.0.1	ads19.focalink.com
127.0.0.1	ads2.zdnet.com
127.0.0.1	ads20.focalink.com
127.0.0.1	ads21.focalink.com
127.0.0.1	ads22.focalink.com
127.0.0.1	ads23.focalink.com
127.0.0.1	ads24.focalink.com
127.0.0.1	ads25.focalink.com
127.0.0.1	ads3.zdnet.com
127.0.0.1	ads5.gamecity.net
127.0.0.1	adserv.iafrica.com
127.0.0.1	adserv.quality-channel.de
127.0.0.1	adserver.dbusiness.com
127.0.0.1	adserver.garden.com
127.0.0.1	adserver.janes.com
127.0.0.1	adserver.merc.com
127.0.0.1	adserver.monster.com
127.0.0.1	adserver.track-star.com
127.0.0.1	adserver1.ogilvy-interactive.de
127.0.0.1	adtegrity.spinbox.net
127.0.0.1	antfarm-ad.flycast.com
127.0.0.1	au.ads.link4ads.com
127.0.0.1	banner.media-system.de
127.0.0.1	banner.orb.net
127.0.0.1	banner.relcom.ru
127.0.0.1	banners.easydns.com
127.0.0.1	banners.looksmart.com
127.0.0.1	banners.wunderground.com
127.0.0.1	barnesandnoble.bfast.com
127.0.0.1	beseenad.looksmart.com
127.0.0.1	bizad.nikkeibp.co.jp
127.0.0.1	bn.bfast.com
127.0.0.1	c3.xxxcounter.com
127.0.0.1	califia.imaginemedia.com
127.0.0.1	cds.mediaplex.com
127.0.0.1	click.avenuea.com
127.0.0.1	click.go2net.com
127.0.0.1	click.linksynergy.com
127.0.0.1	cookies.cmpnet.com
127.0.0.1	cornflakes.pathfinder.com
127.0.0.1	counter.hitbox.com
127.0.0.1	crux.songline.com
127.0.0.1	erie.smartage.com
127.0.0.1	etad.telegraph.co.uk
127.0.0.1	fp.valueclick.com
127.0.0.1	gadgeteer.pdamart.com
127.0.0.1	gm.preferences.com
127.0.0.1	gp.dejanews.com
127.0.0.1	hg1.hitbox.com
127.0.0.1	image.click2net.com
127.0.0.1	image.eimg.com
127.0.0.1	images2.nytimes.com
127.0.0.1	jobkeys.ngadcenter.net
127.0.0.1	kansas.valueclick.com
127.0.0.1	leader.linkexchange.com
127.0.0.1	liquidad.narrowcastmedia.com
127.0.0.1	ln.doubleclick.net
127.0.0.1	m.doubleclick.net
127.0.0.1	macaddictads.snv.futurenet.com
127.0.0.1	maximumpcads.imaginemedia.com
127.0.0.1	media.preferences.com
127.0.0.1	mercury.rmuk.co.uk
127.0.0.1	mojofarm.sjc.mediaplex.com
127.0.0.1	nbc.adbureau.net
127.0.0.1	newads.cmpnet.com
127.0.0.1	ng3.ads.warnerbros.com
127.0.0.1	ngads.smartage.com
127.0.0.1	nsads.hotwired.com
127.0.0.1	ntbanner.digitalriver.com
127.0.0.1	ph-ad05.focalink.com
127.0.0.1	ph-ad07.focalink.com
127.0.0.1	ph-ad16.focalink.com
127.0.0.1	ph-ad17.focalink.com
127.0.0.1	ph-ad18.focalink.com
127.0.0.1	realads.realmedia.com
127.0.0.1	redherring.ngadcenter.net
127.0.0.1	redirect.click2net.com
127.0.0.1	regio.adlink.de
127.0.0.1	retaildirect.realmedia.com
127.0.0.1	s2.focalink.com
127.0.0.1	sh4sure-images.adbureau.net
127.0.0.1	spin.spinbox.net
127.0.0.1	static.admaximize.com
127.0.0.1	stats.superstats.com
127.0.0.1	sview.avenuea.com
127.0.0.1	thinknyc.eu-adcenter.net
127.0.0.1	tracker.clicktrade.com
127.0.0.1	tsms-ad.tsms.com
127.0.0.1	v0.extreme-dm.com
127.0.0.1	v1.extreme-dm.com
127.0.0.1	van.ads.link4ads.com
127.0.0.1	view.accendo.com
127.0.0.1	w113.hitbox.com
127.0.0.1	w25.hitbox.com
127.0.0.1	web2.deja.com
127.0.0.1	webads.bizservers.com
127.0.0.1	www.PostMasterBannerNet.com
127.0.0.1	www.ad-up.com
127.0.0.1	www.admex.com
127.0.0.1	www.alladvantage.com
127.0.0.1	www.burstnet.com
127.0.0.1	www.commission-junction.com
127.0.0.1	www.eads.com
127.0.0.1	www.freestats.com
127.0.0.1	www.imaginemedia.com
127.0.0.1	www.netdirect.nl
127.0.0.1	www.oneandonlynetwork.com
127.0.0.1	www.targetshop.com
127.0.0.1	www.teknosurf2.com
127.0.0.1	www.teknosurf3.com
127.0.0.1	www.valueclick.com
127.0.0.1	www.websitefinancing.com
127.0.0.1	www2.burstnet.com
127.0.0.1	www4.trix.net
127.0.0.1	www80.valueclick.com
127.0.0.1	z.extreme-dm.com
127.0.0.1	z0.extreme-dm.com
127.0.0.1	z1.extreme-dm.com
127.0.0.1	ads.rediff.com
127.0.0.1	ads.indya.com
127.0.0.1	ads.adflight.com
127.0.0.1	ads.beguide.net
127.0.0.1	ads.mediaturf.net
127.0.0.1	ad1.adcept.net
127.0.0.1	ad2.adcept.net
127.0.0.1	ad3.adcept.net
127.0.0.1	ads.fortunecity.com
127.0.0.1	www.139cn.com
127.0.0.1	www.7liao.com
127.0.0.1	chat.51liao.net
127.0.0.1	www.51liao.net
127.0.0.1	www.7liao.net
127.0.0.1	www.6see.com
127.0.0.1	bliao.com
127.0.0.1	www.bliao.com
127.0.0.1	hao123.net
127.0.0.1	www.hao123.net
127.0.0.1	www.hao222.net
127.0.0.1	www.hao222.com
127.0.0.1	www.v111.com
127.0.0.1	music.v111.com
127.0.0.1	www.qq165.com
127.0.0.1	www.xicu.com
127.0.0.1	www.haodx.com
127.0.0.1	www.haohz.com
127.0.0.1	www.dj99.com
127.0.0.1	www.dj99.net
127.0.0.1	www.yqdj.com
127.0.0.1	www.qq530.com
127.0.0.1	www.tt67.com
127.0.0.1	ad.t2t2.com
127.0.0.1	www.yexr.com
127.0.0.1	chat.9see.com
127.0.0.1	www.ok816.com
127.0.0.1	www.3399.net
127.0.0.1	www.ads8.com
127.0.0.1	www.5566.net
127.0.0.1	www.t2t2.com
127.0.0.1	popad.qq.com
127.0.0.1	v.jsdownload.com
127.0.0.1	www.linktoad.com
127.0.0.1	club.homeway.com.cn
127.0.0.1	sms1.ctn.com.cn
127.0.0.1	sms2.ctn.com.cn
127.0.0.1	sms3.ctn.com.cn
127.0.0.1	www.331122.com
127.0.0.1	mmpic.uni.cc
127.0.0.1	www.love34.com
127.0.0.1	www.free-movie.org
127.0.0.1	www.skyhits.com
127.0.0.1	www.rd18.com
127.0.0.1	tadsweb.tencent.com
127.0.0.1	www.vlike.com
127.0.0.1	www.chinasee.net
127.0.0.1	www.japansky.net
127.0.0.1	www.225.com.cn
127.0.0.1	ads.china.com
127.0.0.1	www.yes521.com
127.0.0.1	www.today6.com
127.0.0.1	www.h2004.com
127.0.0.1	www.movie4.com
127.0.0.1	www.rm88.com
127.0.0.1	www.qq300.com
127.0.0.1	www.qq500.com
127.0.0.1	www.av126.com
127.0.0.1	www.kissmm.com
127.0.0.1	www.cn808.net
127.0.0.1	www.hao168.com
127.0.0.1	www.mm91.com
127.0.0.1	www.huole.com
127.0.0.1	www.kan69.com
127.0.0.1	ulinkdir.tom.com
127.0.0.1	cpc.sohu.com
127.0.0.1	images.sohu.com
127.0.0.1	adv.pconline.com.cn
127.0.0.1	goto.sohu.com
127.0.0.1	images2.sohu.com
127.0.0.1	www.sexy-books.com
127.0.0.1	www.xxbooks.com
127.0.0.1	www.18it.com
127.0.0.1	www.cnxxx.com
127.0.0.1	www.18-girl.net
127.0.0.1	ad.tom.com
127.0.0.1	ad4.sina.com.cn
127.0.0.1	sina.allyes.com
127.0.0.1	adtaobao.allyes.com
127.0.0.1	smarttrade.allyes.com
127.0.0.1	tom.allyes.com
127.0.0.1	szwindow.allyes.com
127.0.0.1	eachnetmember.allyes.com
127.0.0.1	iplus.allyes.com
127.0.0.1	sinatest.allyes.com
127.0.0.1	casting9.allyes.com
127.0.0.1	yinsha.allyes.com
127.0.0.1	stockstar.allyes.com
127.0.0.1	www.001x.com
127.0.0.1	www.hksexweb.com
127.0.0.1	www.99adultx.com
127.0.0.1	www2.xfreehosting.com
127.0.0.1	www1.xfreehosting.com
127.0.0.1	www.w555.net
127.0.0.1	www.excitecity.com
127.0.0.1	www.0xing.com
127.0.0.1	sba.3322.net
127.0.0.1	www.zgxl.net
127.0.0.1	www.qqpic.com
127.0.0.1	webspacecn.com
127.0.0.1	www.yeapple.com
127.0.0.1	manage.link8.com
127.0.0.1	www.web888.org
127.0.0.1	www.432.cn
127.0.0.1	www.kan123.com
127.0.0.1	www.3tom.com
127.0.0.1	www.sotop.com
127.0.0.1	www3.7789.com
127.0.0.1	www.66036.com
127.0.0.1	www1.66036.com
127.0.0.1	www2.66036.com
127.0.0.1	www3.66036.com
127.0.0.1	www4.66036.com
127.0.0.1	www5.66036.com
127.0.0.1	www6.66036.com
127.0.0.1	www7.66036.com
127.0.0.1	www8.66036.com
127.0.0.1	www9.66036.com
127.0.0.1	www10.66036.com
127.0.0.1	tj4.7789.com
127.0.0.1	tj5.7789.com
127.0.0.1	tj6.7789.com
127.0.0.1	tj7.7789.com
127.0.0.1	www.7789.com
127.0.0.1	count.zhao123.com
127.0.0.1	count1.zhao123.com
127.0.0.1	count2.zhao123.com
127.0.0.1	count3.zhao123.com
127.0.0.1	count4.zhaocount.com
127.0.0.1	count5.zhaocount.com
127.0.0.1	count6.zhaocount.com
127.0.0.1	count7.zhaocount.com
127.0.0.1	count8.zhaocount.com
127.0.0.1	count9.zhaocount.com
127.0.0.1	count10.zhaocount.com
127.0.0.1	count11.zhaocount.com
127.0.0.1	tj1.mytongji.com
127.0.0.1	count1.99count.com
127.0.0.1	www.99count.com
127.0.0.1	bar.baidu.com
127.0.0.1	www2.7789.com
127.0.0.1	www.guang.org
127.0.0.1	www.dlmovie.com
127.0.0.1	www.91look.com
127.0.0.1	www.kan51.com
127.0.0.1	www.mewo.com
127.0.0.1	coolsite21.com
127.0.0.1	www.t3j4.com
127.0.0.1	www.yun8.com
127.0.0.1	film.yun8.com
127.0.0.1	www.wo123.com
127.0.0.1	www.da123.com
127.0.0.1	www.1ya.cn
127.0.0.1	www.sleazydream.com
127.0.0.1	www.easypic2.com
127.0.0.1	serv.sexushost.com
127.0.0.1	www.xfreehosting.com
127.0.0.1	www.888txt.com
127.0.0.1	asiafriendfinder.com
127.0.0.1	www3.cool168.com
127.0.0.1	www2.cool168.com
127.0.0.1	www1.cool168.com
127.0.0.1	www.happy8.cn
127.0.0.1	www.topsex2k.com
127.0.0.1	topxxx.sexushost.com
127.0.0.1	www.cool168.com
127.0.0.1	www.s6.cn
127.0.0.1	popme.163.com
127.0.0.1	adclient.163.com
127.0.0.1	fadama.com
127.0.0.1	www.66vv.com
127.0.0.1	www.qqee.com
127.0.0.1	www.sohu123.com
127.0.0.1	www.xgmm.com
127.0.0.1	www.7t7t.com
127.0.0.1	www.cnimg.com
127.0.0.1	cdn2.cnnic.cn
127.0.0.1	cool.vv66.com
127.0.0.1	www.vv66.com
127.0.0.1	www.freepicturepage.com
127.0.0.1	www.snasty.com
127.0.0.1	www.yourcage.com
127.0.0.1	www.shagadelic.com
127.0.0.1	hualiao.net
127.0.0.1	www.qq163.com
127.0.0.1	www.qq163.net
127.0.0.1	www.superdown.com
127.0.0.1	web.114.com.cn
127.0.0.1	www.114.com.cn
127.0.0.1	www.91f.cn
127.0.0.1	wwww.tthao.com
127.0.0.1	www.91f.org
127.0.0.1	www.v23.com
127.0.0.1	auto.search.msn.com
127.0.0.1	x2.51link.com
127.0.0.1	www.dosboy.com
127.0.0.1	x1.51link.com
127.0.0.1	www.textlink.cn
127.0.0.1	stat.textclick.com
127.0.0.1	www.easyhere.com
127.0.0.1	www.xxx168.com
127.0.0.1	ally.263.net
127.0.0.1	www.hualiao.net
127.0.0.1	www.xchina.com
127.0.0.1	www.sex.com
127.0.0.1	www.3xcn.com
127.0.0.1	www.20girl.com
127.0.0.1	www.x365x.com
127.0.0.1	chat.263.net
127.0.0.1	chat.yinsha.com
127.0.0.1	chat.tom.com
127.0.0.1	chat.xilu.com
127.0.0.1	www.aliao.com
127.0.0.1	chat.163.com
127.0.0.1	www.haoliao.com
127.0.0.1	www.liaoliao.com
127.0.0.1	www.haoliao.net
127.0.0.1	www.haoliao.cn
127.0.0.1	www.qqliao.com
127.0.0.1	www.qliao.com
127.0.0.1	www.loveliao.com
127.0.0.1	www.mmliao.com
127.0.0.1	chat.qq.com
127.0.0.1	vchat.xaonline.com
127.0.0.1	www.loveliao.net
127.0.0.1	www.sogua.com
127.0.0.1	www.99music.net
127.0.0.1	www.yzskdj.com
127.0.0.1	music.feifa.com
127.0.0.1	www.aisex.com
127.0.0.1	www.movie-down.com
127.0.0.1	www2.movie-down.com
127.0.0.1	www.tt90.com
127.0.0.1	www.tt78.com
127.0.0.1	www.tiankong.net
127.0.0.1	www.qqchat.cn
127.0.0.1	www.9see.com
127.0.0.1	www.woliao.net
127.0.0.1	www.woliao.com
127.0.0.1	www.kuro.com.cn
127.0.0.1	www.wangzhiku.com
127.0.0.1	hothack.home.chinaren.com
127.0.0.1	www.777888.com
127.0.0.1	www.5dsoft.com
127.0.0.1	www.wokoo.net
127.0.0.1	movie.sx.zj.cn
127.0.0.1	xyxy68.8u8.net
127.0.0.1	www.youmiss.com
127.0.0.1	www.cctv8.net
127.0.0.1	www.kuliao.com
127.0.0.1	www.yyqy.com
127.0.0.1	www.sunvod.com
127.0.0.1	www.t168.com
127.0.0.1	www.coolcdrom.com
127.0.0.1	www.girl008.com
127.0.0.1	xajh.15888.net
127.0.0.1	www.51bug.com
127.0.0.1	www.wplune.com
127.0.0.1	www.777888.net
127.0.0.1	pollen.my001.net
127.0.0.1	www.yule21.com
127.0.0.1	www.fish3000.com
127.0.0.1	www.666e.com
127.0.0.1	qm.8ok.com
127.0.0.1	www.guosir.ccoo.com
127.0.0.1	www.163mm.com
127.0.0.1	www.cnooo.com
127.0.0.1	www.es158.com
127.0.0.1	www.aisa-girl.net
127.0.0.1	www.boliwu.com
127.0.0.1	www.89005.com
127.0.0.1	www.cctv1.net
127.0.0.1	www.play.cn.gs
127.0.0.1	newyouth.3322.net
127.0.0.1	chinabdkx.363.net
127.0.0.1	www.zknew.com
127.0.0.1	www.dhchao.com
127.0.0.1	www.top666.net
127.0.0.1	www.amoisonic.com
127.0.0.1	www.markguide.com
127.0.0.1	www.xyxc.ccoo.com
127.0.0.1	www.flyingwalk.com
127.0.0.1	www.yezine.net
127.0.0.1	www.mmgirls.com
127.0.0.1	www.wa***.net
127.0.0.1	www.net5w.com
127.0.0.1	www.fbstu.com
127.0.0.1	www.qlwl.com
127.0.0.1	www.yinshang.com
127.0.0.1	www.ncunet.com
127.0.0.1	www.555666.net
127.0.0.1	www.fm1058.cc
127.0.0.1	meim.y365.com
127.0.0.1	www.qq520.net
127.0.0.1	jjkafei.longcity.net
127.0.0.1	chow.yesky.net
127.0.0.1	oicq.hk.st
127.0.0.1	www.my288.com
127.0.0.1	www.laws-online.net
127.0.0.1	www.hj168.net
127.0.0.1	16888.6to23.com
127.0.0.1	www.love520.net
127.0.0.1	www.qq520.com
127.0.0.1	www.ezhgc.com
127.0.0.1	www.eastedu.com.cn
127.0.0.1	www.435000.com
127.0.0.1	sdik.8ok.net
127.0.0.1	feiying.coolwww.net
127.0.0.1	zhongxuesheng.myrice.com
127.0.0.1	www.yes9999.com 　　
127.0.0.1	www.nnptt.com
127.0.0.1	vod.hengshui.com
127.0.0.1	tv.megajoy.com
127.0.0.1	www.h444.net
127.0.0.1	update.myxq.com
127.0.0.1	www.qq168.net 　
127.0.0.1	www.777888.com 　
127.0.0.1	www.5dsoft.com 　
127.0.0.1	movie.sx.zj.cn 　　
127.0.0.1	www.yeapple.com 　
127.0.0.1	winzheng.126.com
127.0.0.1	www.boliwo.com
127.0.0.1	www.pk.com
127.0.0.1	www.unionsky.cn
127.0.0.1	www.allyes.com
127.0.0.1	www.xxx.com
127.0.0.1	204.177.92.68
127.0.0.1	www.fassia.net 　　　　　 　
127.0.0.1	www.jinpin.net 　　　　　 　
127.0.0.1	www.happy666.net
127.0.0.1	www.myxq.com
127.0.0.1	dvd.qq92.com
127.0.0.1	www.16yi.com
127.0.0.1	www.ye77.com
127.0.0.1	www.7sese.com
127.0.0.1	www.1yin.net
127.0.0.1	www.77ttt.com
127.0.0.1	www.7mao.com
127.0.0.1	www.mydj2005.com
127.0.0.1	www.vv78.com
127.0.0.1	www.v119.com
127.0.0.1	100.332233.com
127.0.0.1	www.cashbackbuddy.com
127.0.0.1	www.10uu.com
127.0.0.1	fly950.nease.net

==================================
进程特权扫描
特殊特权被允许： SeDebugPrivilege [PID = 3292, F:\应用程序\系统诊断工具\SRENGLDR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3292, F:\应用程序\系统诊断工具\SRENGLDR.EXE]

==================================
计划任务
N/A

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]