[CODE] 2008-12-07,19:28:39 SysLog Scanner 1.0 - build 20080726 Arswp (http://www.arswp.com) Windows XP Professional Service Pack 1 (build 2600) - Administrators ======================================== Registries [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; C:\WINDOWS\System32\ctfmon.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] <360Antiarp><; C:\Program Files\360safe\antiarp\antiarp.exe /start> [(Verified)360安全中心, 2, 0, 0, 1008, C:2008-04-11 20:45 M:2008-04-11 20:45] <3PMmUpdate><; rundll32 "C:\WINDOWS\Update.dll",Main> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] <; C:\WINDOWS\VM_STI.EXE USB PC Camera 301P> [VM., 4.2.610.4, C:2005-02-18 13:55 M:2003-01-21 15:19] <; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation, 8.1.4005.0, C:2008-11-27 16:05 M:2002-10-07 20:00] <; %systemroot%\system32\dumprep 0 -k> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] <; rundll32 "C:\WINDOWS\MPKrnl.dll",KrnlMsgProc> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|N/A, C:2008-12-04 12:56 M:2008-12-04 12:57] <; C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC> [N/A, C:2008-11-27 16:05 M:2002-10-07 12:00] <; RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] <; nwiz.exe /install> [N/A, C:2006-03-09 15:29 M:2006-03-09 15:29] <; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation, 5.2.2801, C:2003-10-20 11:15 M:2002-10-07 20:00] <; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation, 5.2.2801, C:2003-10-20 11:15 M:2002-10-07 20:00] <; "D:\Program Files\Rising\Rav\ScanBD.exe" /INST> [] <; D:\Program Files\SkyNet\FireWall\pfw.exe> [] <; C:\WINDOWS\smss.exe> [] <; SOUNDMAN.EXE> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] <; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [] <; "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"> [(Verified)阿里巴巴软件(上海)有限公司, 5, 7, 0, 4, C:2005-04-20 20:52 M:2008-03-20 02:27] <_TBHTray><; RUNDLL32.EXE C:\WINDOWS\DOWNLO~1\Ksouzm.dll,Rundll32> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|N/A, C:2008-12-04 12:57 M:2008-12-07 13:29] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <01AFE3DC.dll,HBmhly.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_CURRENT_USER\Control Panel\Desktop] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Corporation, 1.07 (xpsp2.050722-1526), C:2005-07-26 12:38 M:2005-07-26 12:38] [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2002-10-07 12:00 M:2005-07-26 12:38] [Microsoft Corporation, 1.09 (XPClient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Corporation, 4.7.3000, C:2008-12-04 12:50 M:2008-12-07 14:33] [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2008-11-27 16:04 M:2006-07-05 18:54] [Thunder Networking Technologies,LTD, 5, 0, 8, 74, C:2008-12-07 13:29 M:2008-12-07 13:29] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{DFB3DAC5-B0B5-4B05-BFCF-FB42737778FA}> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] <{DA63E650-537C-4042-87BB-9D19D844680B}> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] <{133AEAC9-9C88-4905-864C-38BBA312D9B0}><133AEAC9.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] <{A1A6BC2E-C6A1-43C1-8884-A31D772F42B8}> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] <{5934EA2B-B2C4-4BE7-BF7A-FBA781A12E40}><5934EA2B.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] <{56BC86C7-0692-4F94-A2C1-6CF1DBF8096C}><56BC86C7.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] <{A55F538E-9E65-4706-9458-852BF6592063}> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] <{122B901E-493F-4AD9-BC69-7DE8C3E52FCC}><122B901E.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] <{FFAE967F-D0FC-4D2B-A0F5-D1BF27F46418}> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] <{4D023DE9-F4B5-4BE0-99C6-7C7AD0CF5426}><4D023DE9.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] <{08223B03-1B38-4A33-A83A-A4D3CC1D6E4E}><08223B03.dll> [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] <{93DEE065-EC9B-4505-ADD3-19880AD3C38F}><93DEE065.dll> [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] <{E0D39066-96D7-4891-8527-488ADAFCD60F}> [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] <{950D1600-DE4A-448D-93B4-7BAE5A7A8052}><950D1600.dll> [N/A, C:2008-12-04 12:55 M:2008-12-07 13:27] <{4FBFD5A4-5FE8-4444-8BD9-FD0FAFA64F96}><4FBFD5A4.dll> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] <{755D0ED0-3996-4ADB-9B1F-AD8F0E9E4738}><755D0ED0.dll> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] <{F8E07BB2-7A19-4057-80F1-E14646E630B4}> [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] <{D9C002DD-EA51-43A2-9009-54EAAAF031A4}> [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] <{201476D0-2B18-462E-AB9F-3E2B0CC8732B}><201476D0.dll> [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] <{1FD51F1F-97E4-498C-AB12-93332EEAD266}><1FD51F1F.dll> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] <{66AFCB56-FAA9-42D2-8C72-2767A46C7FA8}><66AFCB56.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] <{9CA963CA-107C-4089-B0AB-31380F90D7E3}><9CA963CA.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] <{C8FFD223-C0FB-40C5-94A0-FD7891AC18E9}> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] <{BA7EDF54-8408-4B21-B351-7B447B344BA4}> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] <{2EF0D734-21FD-4225-A1A2-BCD296182AAF}><2EF0D734.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] <{29EA67E0-9EE5-4D1A-A056-5B7BDAC4CF97}><29EA67E0.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] <{3D144530-43DA-47CC-B7C7-A3A9F3B9A6B2}><3D144530.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] <{B6E23E89-C925-4BF7-92EB-77EFDF8C58A6}> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:29] <{01AFE3DC-2242-436E-9B44-6DD1C664E828}><01AFE3DC.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用网际快车下载] <> [N/A, C:2003-12-25 14:43 M:2000-02-06 11:06] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用网际快车下载全部链接] <> [N/A, C:2003-12-25 14:43 M:2000-02-06 11:06] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载] <> [N/A, C:2008-10-12 14:51 M:2008-07-28 15:43] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接] <> [N/A, C:2008-10-12 14:51 M:2007-12-10 14:17] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\添加到QQ表情] <> [N/A, C:2007-10-11 15:11 M:2007-10-11 15:11] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] [Microsoft Corporation, 5.1.2600.1599 (xpsp2.040919-1003), C:2008-11-27 16:05 M:2004-10-28 09:30] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] <浏览器自定义组件> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00|N/A, C:2008-11-27 16:05 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00|N/A, C:2008-11-27 16:06 M:2005-10-09 10:14] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00|N/A, C:2005-09-27 13:54 M:2004-08-11 21:16] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] <%SystemRoot%\system32\ie4uinit.exe> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}] <启动迅雷5> [(Verified)Thunder Networking Technologies,LTD, 5, 6, 8, 19, C:2008-10-12 14:51 M:2008-09-23 17:40] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360rpt.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360Safe.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360tray.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\arvmon.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AST.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AvMonitor.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HelpSvc.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\killhidepid.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPFWSvc.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvDetect.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvfw.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvfwMcl.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvol.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvolself.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVSrvXP.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvupload.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvwsc.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KWatch.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KWatchX.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\loaddll.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MagicSet.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mcconsol.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmqczj.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmsk.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NAVSetup.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32krn.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32kui.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PFW.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PFWLiveUpdate.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QHSET.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ras.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rav.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavMon.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavMonD.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavStore.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavStub.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ravt08.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavTask.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegClean.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwcfg.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwProxy.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwsrv.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RsAgent.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rsaupd.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\runiep.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safelive.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\scan32.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SREng.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SREngPS.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\symlcsvc.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Syscheck2.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SysSafe.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojanDetector.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trojanwall.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojDie.kxp] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UIHost.kxp] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\修复工具.exe] <> [N/A, C:1601-01-01 08:00 M:1601-01-01 08:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\BJ Language Monitor] [Microsoft Corporation, 5.1.2503.0 (Lab06_N.010129-0357), C:2008-11-27 16:05 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Lenovo Network Port] [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 18:11 M:2003-02-25 18:11] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Local Port] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\PJL Language Monitor] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Standard TCP/IP Port] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\USB Monitor] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}] <><> [] ======================================== Startup Folders ======================================== Task ======================================== Components ShellServiceObjectDelayLoad [PostBootReminder 对象] {7849596a-48ea-486e-8937-a2a3009f31a9} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] [烧 CD 的 ShellFolder] {fbeb8a05-beee-4442-804e-409d6c4515e9} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] [WebCheck] {E6FB5E20-DE35-11CF-9C87-00AA005127ED} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [SysTray] {35CEC8A3-2BE6-11D2-8773-92E220524153} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [] {DA191DE0-AA86-4ED0-4B87-293D48B2AE99} [Microsoft Corporation, 4.7.3000, C:2008-12-04 12:50 M:2008-12-07 14:33] [] {DE01DA19-A6A8-EB80-4D47-248DEB2A9399} [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2008-11-27 16:04 M:2006-07-05 18:54] [ThunderHlpObj Class] {97421D0D-E07F-40DF-8F07-99597B9585AD} [Thunder Networking Technologies,LTD, 5, 0, 8, 74, C:2008-12-07 13:29 M:2008-12-07 13:29] ShellExecuteHook [] {DFB3DAC5-B0B5-4B05-BFCF-FB42737778FA} [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [] {DA63E650-537C-4042-87BB-9D19D844680B} [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [] {133AEAC9-9C88-4905-864C-38BBA312D9B0} <133AEAC9.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [] {A1A6BC2E-C6A1-43C1-8884-A31D772F42B8} [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [] {5934EA2B-B2C4-4BE7-BF7A-FBA781A12E40} <5934EA2B.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [] {56BC86C7-0692-4F94-A2C1-6CF1DBF8096C} <56BC86C7.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [] {A55F538E-9E65-4706-9458-852BF6592063} [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [] {122B901E-493F-4AD9-BC69-7DE8C3E52FCC} <122B901E.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [] {FFAE967F-D0FC-4D2B-A0F5-D1BF27F46418} [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] [] {4D023DE9-F4B5-4BE0-99C6-7C7AD0CF5426} <4D023DE9.dll> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] [] {08223B03-1B38-4A33-A83A-A4D3CC1D6E4E} <08223B03.dll> [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] [] {93DEE065-EC9B-4505-ADD3-19880AD3C38F} <93DEE065.dll> [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] [] {E0D39066-96D7-4891-8527-488ADAFCD60F} [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] [] {950D1600-DE4A-448D-93B4-7BAE5A7A8052} <950D1600.dll> [N/A, C:2008-12-04 12:55 M:2008-12-07 13:27] [] {4FBFD5A4-5FE8-4444-8BD9-FD0FAFA64F96} <4FBFD5A4.dll> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] [] {755D0ED0-3996-4ADB-9B1F-AD8F0E9E4738} <755D0ED0.dll> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] [] {F8E07BB2-7A19-4057-80F1-E14646E630B4} [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] [] {D9C002DD-EA51-43A2-9009-54EAAAF031A4} [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] [] {201476D0-2B18-462E-AB9F-3E2B0CC8732B} <201476D0.dll> [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] [] {1FD51F1F-97E4-498C-AB12-93332EEAD266} <1FD51F1F.dll> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] [] {66AFCB56-FAA9-42D2-8C72-2767A46C7FA8} <66AFCB56.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] [] {9CA963CA-107C-4089-B0AB-31380F90D7E3} <9CA963CA.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] [] {C8FFD223-C0FB-40C5-94A0-FD7891AC18E9} [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] [] {BA7EDF54-8408-4B21-B351-7B447B344BA4} [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] [] {2EF0D734-21FD-4225-A1A2-BCD296182AAF} <2EF0D734.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] [] {29EA67E0-9EE5-4D1A-A056-5B7BDAC4CF97} <29EA67E0.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] [] {3D144530-43DA-47CC-B7C7-A3A9F3B9A6B2} <3D144530.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] [] {B6E23E89-C925-4BF7-92EB-77EFDF8C58A6} [N/A, C:2008-12-07 13:28 M:2008-12-07 13:29] [] {01AFE3DC-2242-436E-9B44-6DD1C664E828} <01AFE3DC.dll> [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] Shell Extension [Multimedia File Property Sheet] {00022613-0000-0000-C000-000000000046} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [ICM 扫描仪管理] {176d6597-26d3-11d1-b350-080036a75b03} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [NTFS Security Page] {1F2E5C40-9550-11CE-99D2-00AA006E086C} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [OLE Docfile Property Page] {3EA48300-8CF6-101B-84FB-666CCB9BCD32} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Shell extensions for sharing] {40dd6e20-7c17-11ce-a804-00aa003ca9f6} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PlusPack CPL Extension] {41E300E0-78B6-11ce-849B-444553540000} <%SystemRoot%\System32\themeui.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Display Adapter CPL Extension] {42071712-76d4-11d1-8b24-00a0c9068ff3} [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Display Monitor CPL Extension] {42071713-76d4-11d1-8b24-00a0c9068ff3} [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [DS Security Page] {4E40F770-369C-11d0-8922-00A024AB2DBB} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Compatibility Page] {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Shell Scrap DataHandler] {56117100-C0CD-101B-81E2-00AA004AE837} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Disk Copy Extension] {59099400-57FF-11CE-BD94-0020AF85B590} [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Shell extensions for Microsoft Windows Network objects] {59be4990-f85c-11ce-aff7-00aa003ca9f6} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [ICM 监视器管理] {5DB2625A-54DF-11D0-B6C4-0800091AA605} <%SystemRoot%\System32\icmui.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [ICM 打印机管理] {675F097E-4C4D-11D0-B6C1-0800091AA605} <%SystemRoot%\system32\icmui.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Web Printer Shell Extension] {77597368-7b15-11d0-a0c2-080036af3f03} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Disk Quota UI] {7988B573-EC89-11cf-9C00-00AA00A14F56} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [公文包] {85BBD920-42A0-1069-A2E4-08002B30309D} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HyperTerminal Icon Ext] {88895560-9AA2-1069-930E-00AA0030EBC8} [Hilgraeve, Inc., 5.1.2600.0, C:2003-10-20 11:26 M:2002-10-07 20:00] [字体] {BD84B380-8CA2-1069-AB1D-08000948F534} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [ICC 配置文件] {DBCE2480-C732-101B-BE72-BA78E9AD5B27} <%SystemRoot%\system32\icmui.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Printers Security Page] {F37C5810-4D3F-11d0-B4BF-00AA00BBB723} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Shell extensions for sharing] {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Display TroubleShoot CPL Extension] {f92e8c40-3d33-11d2-b1aa-080036a75b03} [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Crypto PKO Extension] {7444C717-39BF-11D1-8CD9-00C04FC29D45} [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [Crypto Sign Extension] {7444C719-39BF-11D1-8CD9-00C04FC29D45} [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [网络连接] {7007ACC7-3202-11D1-AAD2-00805FC1270E} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [网络连接] {992CFFA0-F557-101A-88EC-00DD010CCC48} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [扫描仪和照相机] {E211B736-43FD-11D1-9EFB-0000F8757FCD} [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [扫描仪和照相机] {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD} [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [扫描仪和照相机] {905667aa-acd6-11d2-8080-00805f6596d2} [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [扫描仪和照相机] {3F953603-1008-4f6e-A73A-04AAC7A992F1} [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [扫描仪和照相机] {83bbcbf3-b28a-4919-a5aa-73027445d672} [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Remote Sessions CPL Extension] {F0152790-D56E-4445-850E-4F3117DB740C} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [Auto Update Property Sheet Extension] {5F327514-6C5E-4d60-8F16-D07FA08A78ED} [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla), C:2005-02-18 14:19 M:2005-05-26 04:16] [Windows Script Host 的 Shell extensions] {60254CA5-953B-11CF-8C96-00AA00B8708C} [Microsoft Corporation, 5.6.0.6626, C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft 数据链接] {2206CDB2-19C1-11D1-89E0-00C04FD7A829} [Microsoft Corporation, 2.71.9042.0 built by: Lab06_N(_sqlbld), C:2008-11-27 16:05 M:2003-10-27 20:10] [Tasks Folder Icon Handler] {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [Tasks Folder Shell Extension] {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [任务计划] {D6277990-4C6A-11CF-8D87-00AA0060F5BF} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [Audio Media Properties Handler] {875CB1A1-0F29-45de-A1AE-CFB4950D0B78} <%SystemRoot%\System32\shmedia.dll> [Microsoft Corporation, 6.00.2800.1125 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-10-01 01:58] [Video Media Properties Handler] {40C3D757-D6E4-4b49-BB41-0E5BBEA28817} <%SystemRoot%\System32\shmedia.dll> [Microsoft Corporation, 6.00.2800.1125 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-10-01 01:58] [Wav Properties Handler] {E4B29F9D-D390-480b-92FD-7DDB47101D71} <%SystemRoot%\System32\shmedia.dll> [Microsoft Corporation, 6.00.2800.1125 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-10-01 01:58] [Avi Properties Handler] {87D62D94-71B3-4b9a-9489-5FE6850DC73E} <%SystemRoot%\System32\shmedia.dll> [Microsoft Corporation, 6.00.2800.1125 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-10-01 01:58] [Midi Properties Handler] {A6FD9E45-6E44-43f9-8644-08598F5A74D9} <%SystemRoot%\System32\shmedia.dll> [Microsoft Corporation, 6.00.2800.1125 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-10-01 01:58] [Video Thumbnail Extractor] {c5a40261-cd64-4ccf-84cb-c394da41d590} <%SystemRoot%\System32\shmedia.dll> [Microsoft Corporation, 6.00.2800.1125 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-10-01 01:58] [Sendmail service] {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE} [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Sendmail service] {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE} [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [ActiveX 高速缓存文件夹] {88C6C381-2E85-11D0-94DE-444553540000} <%SystemRoot%\System32\occache.dll> [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [WebCheck] {E6FB5E20-DE35-11CF-9C87-00AA005127ED} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Subscription Mgr] {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [预订文件夹] {F5175861-2688-11d0-9C5E-00AA00A45957} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [WebCheckWebCrawler] {08165EA0-E946-11CF-9C87-00AA005127ED} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [WebCheckChannelAgent] {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [TrayAgent] {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Code Download Agent] {7D559C10-9FE9-11d0-93F7-00AA0059CE02} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [ConnectionAgent] {E6CC6978-6B6E-11D0-BECA-00C04FD940BE} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PostAgent] {D8BD2030-6FC9-11D0-864F-00AA006809D9} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [WebCheck SyncMgr Handler] {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} <%SystemRoot%\System32\webcheck.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Shell Application Manager] {352EC2B7-8B9A-11D1-B8AE-006008059382} <%SystemRoot%\System32\appwiz.cpl> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Installed Apps Enumerator] {0B124F8F-91F0-11D1-B8B5-006008059382} <%SystemRoot%\System32\appwiz.cpl> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Darwin App Publisher] {CFCCC7A0-A282-11D1-9082-006008059382} <%SystemRoot%\System32\appwiz.cpl> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Shell Image Verbs] {e84fda7c-1d6a-45f6-b725-cb260c236066} <%SystemRoot%\System32\shimgvw.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Shell Image Data Factory] {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178} <%SystemRoot%\System32\shimgvw.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [GDI+ 文件缩略图解压缩程序] {3F30C968-480A-4C6C-862D-EFC0897BB84B} [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [摘要信息缩略图处理程序(DOCFILES)] {9DBD2C50-62AD-11d0-B806-00C04FD706EC} [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [HTML 缩略图的解压缩程序] {EAB841A0-9550-11cf-8C16-00805F1408F3} [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Shell Image Property Handler] {eb9b1153-3b57-4e68-959a-a3266bc3d7fe} <%SystemRoot%\System32\shimgvw.dll> [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [网络出版向导] {CC6EEFFB-43F6-46c5-9619-51D571967F7D} <%SystemRoot%\System32\netplwiz.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [通过 Web 订购照片] {add36aa8-751a-4579-a266-d66f5202ccbb} <%SystemRoot%\System32\netplwiz.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [外壳出版向导对象] {6b33163c-76a5-4b6c-bf21-45de9cd503a1} <%SystemRoot%\System32\netplwiz.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [获取 Passport 向导] {58f1f272-9240-4f51-b6d4-fd63d1618591} <%SystemRoot%\System32\netplwiz.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [压缩(zipped)文件夹] {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} <%SystemRoot%\System32\zipfldr.dll> [Microsoft Corporation, 6.00.2800.1126 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-09-26 06:19] [Compressed (zipped) Folder Right Drag Handler] {BD472F60-27FA-11cf-B8B4-444553540000} <%SystemRoot%\System32\zipfldr.dll> [Microsoft Corporation, 6.00.2800.1126 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-09-26 06:19] [Compressed (zipped) Folder SendTo Target] {888DCA60-FC0A-11CF-8F0F-00C04FD7D062} <%SystemRoot%\System32\zipfldr.dll> [Microsoft Corporation, 6.00.2800.1126 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-09-26 06:19] [FTP Folders Webview] {63da6ec0-2e98-11cf-8d82-444553540000} [Microsoft Corporation, 6.00.2800.1724 (xpsp2.050802-1533), C:2008-11-27 16:04 M:2005-08-06 01:24] [Microsoft DocProp Shell Ext] {883373C3-BF89-11D1-BE35-080036B11A03} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Microsoft DocProp Inplace Edit Box Control] {A9CF0EAE-901A-4739-A481-E35B73E47F6D} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Microsoft DocProp Inplace ML Edit Box Control] {8EE97210-FD1F-4B19-91DA-67914005F020} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Microsoft DocProp Inplace Droplist Combo Control] {0EEA25CC-4362-4A12-850B-86EE61B0D3EB} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Microsoft DocProp Inplace Calendar Control] {6A205B57-2567-4A2C-B881-F787FAB579A3} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Microsoft DocProp Inplace Time Control] {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Directory Query UI] {8A23E65E-31C2-11d0-891C-00A024AB2DBB} <%SystemRoot%\System32\dsquery.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Shell properties for a DS object] {9E51E0D0-6E0F-11d2-9601-00C04FA31A86} <%SystemRoot%\System32\dsquery.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Directory Object Find] {163FDC20-2ABC-11d0-88F0-00A024AB2DBB} <%SystemRoot%\System32\dsquery.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Directory Start/Search Find] {F020E586-5264-11d1-A532-0000F8757D7E} <%SystemRoot%\System32\dsquery.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Directory Property UI] {0D45D530-764B-11d0-A1CA-00AA00C16E65} <%SystemRoot%\System32\dsuiext.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Directory Context Menu Verbs] {62AE1F9A-126A-11D0-A14B-0800361B1103} <%SystemRoot%\System32\dsuiext.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [MyDocs Copy Hook] {ECF03A33-103D-11d2-854D-006008059367} <%SystemRoot%\System32\mydocs.dll> [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [MyDocs Drop Target] {ECF03A32-103D-11d2-854D-006008059367} <%SystemRoot%\System32\mydocs.dll> [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [MyDocs Properties] {4a7ded0a-ad25-11d0-98a8-0800361b1103} <%SystemRoot%\System32\mydocs.dll> [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Offline Files Menu] {750fdf0e-2a26-11d1-a3ea-080036587f03} <%SystemRoot%\System32\cscui.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Offline Files Folder Options] {10CFC467-4392-11d2-8DB4-00C04FA31A66} <%SystemRoot%\System32\cscui.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [脱机文件夹] {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E} <%SystemRoot%\System32\cscui.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Microsoft Agent Character Property Sheet Handler] {143A62C8-C33B-11D1-84FE-00C04FA34A14} [Microsoft Corporation, 2.00.0.3422, C:2008-11-27 16:05 M:2002-10-07 12:00] [DfsShell] {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [%DESC_PublishDropTarget%] {60fd46de-f830-4894-a628-6fa81bc0190d} <%SystemRoot%\System32\photowiz.dll> [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [MMC Icon Handler] {7A80E4A8-8005-11D2-BCF8-00C04F72C717} <%SystemRoot%\System32\mmcshext.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [.CAB file viewer] {0CD7A5C0-9F37-11CE-AE65-08002B2E1262} [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [Windows Media Player Play as Playlist Context Menu Handler] {8DD448E6-C188-4aed-AF92-44956194EB1F} [Microsoft Corporation, 10.00.00.3646, C:2004-08-11 21:16 M:2004-08-11 21:16] [Windows Media Player Burn Audio CD Context Menu Handler] {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C} [Microsoft Corporation, 10.00.00.3646, C:2004-08-11 21:16 M:2004-08-11 21:16] [Windows Media Player Add to Playlist Context Menu Handler] {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD} [Microsoft Corporation, 10.00.00.3646, C:2004-08-11 21:16 M:2004-08-11 21:16] [WinRAR shell extension] {B41DB860-8EE4-11D2-9906-E49FADC173CA} [N/A, C:2003-10-20 11:50 M:2004-02-03 11:15] [PowerWord ExplorerBar] {47B92A27-8252-420D-9630-378EF61434D7} [金山软件股份有限公司, 1, 0, 0, 0, C:2004-07-05 14:16 M:2003-01-07 16:24] [Shell Extensions for RealOne Player] {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} [RealNetworks, 1.0.0.447, C:2004-07-05 14:21 M:2006-09-15 23:12] [Portable Media Devices] {640167b4-59b0-47a6-b335-a6b3c0695aea} <%SystemRoot%\System32\Audiodev.dll> [Microsoft Corporation, 5.2.3790.3646 built by: DNSRV(bld4act), C:2004-08-11 21:16 M:2004-08-11 21:16] [Portable Media Devices Menu] {cc86590a-b60a-48e6-996b-41d25ed39a1e} <%SystemRoot%\System32\Audiodev.dll> [Microsoft Corporation, 5.2.3790.3646 built by: DNSRV(bld4act), C:2004-08-11 21:16 M:2004-08-11 21:16] [粉碎文件] {C14F7681-33D8-11D3-A09B-00500402F30B} [] [Messenger Sharing Folders] {FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D} [] [频道文件] {f39a0dc0-9cc8-11d0-a599-00c04fd64433} <%SystemRoot%\System32\cdfview.dll> [Microsoft Corporation, 6.00.2800.1612 (xpsp2.041207-1145), C:2008-11-27 16:05 M:2004-12-07 20:15] [频道快捷方式] {f3aa0dc0-9cc8-11d0-a599-00c04fd64434} <%SystemRoot%\System32\cdfview.dll> [Microsoft Corporation, 6.00.2800.1612 (xpsp2.041207-1145), C:2008-11-27 16:05 M:2004-12-07 20:15] [频道句柄对象] {f3ba0dc0-9cc8-11d0-a599-00c04fd64435} <%SystemRoot%\System32\cdfview.dll> [Microsoft Corporation, 6.00.2800.1612 (xpsp2.041207-1145), C:2008-11-27 16:05 M:2004-12-07 20:15] [Channel Menu] {f3da0dc0-9cc8-11d0-a599-00c04fd64437} <%SystemRoot%\System32\cdfview.dll> [Microsoft Corporation, 6.00.2800.1612 (xpsp2.041207-1145), C:2008-11-27 16:05 M:2004-12-07 20:15] [Channel Properties] {f3ea0dc0-9cc8-11d0-a599-00c04fd64438} <%SystemRoot%\System32\cdfview.dll> [Microsoft Corporation, 6.00.2800.1612 (xpsp2.041207-1145), C:2008-11-27 16:05 M:2004-12-07 20:15] [NvCpl DesktopContext Class] {A70C977A-BF00-412C-90B7-034C51DA2439} [NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] [Play on my TV helper] {FFB699E0-306A-11d3-8BD1-00104B6F7516} [NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] [Desktop Explorer] {1CDB2949-8F65-4355-8456-263E7C208A5D} [N/A, C:2006-03-09 15:29 M:2006-03-09 15:29] [Desktop Explorer Menu] {1E9B04FB-F9E5-4718-997B-B8DA88302A47} [N/A, C:2006-03-09 15:29 M:2006-03-09 15:29] [nView Desktop Context Menu] {1E9B04FB-F9E5-4718-997B-B8DA88302A48} [N/A, C:2006-03-09 15:29 M:2006-03-09 15:29] Protocols [WebView MIME Filter] {733AC4CB-F1A4-11d0-B951-00A0C90312E1} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] [PowerWord Asychronous Pluggable Protocol Handler] {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} [金山软件股份有限公司, 1, 0, 0, 0, C:2004-07-05 14:16 M:2003-01-07 16:24] [DVD: Pluggable Protocol] {12D51199-0DB5-46FE-A120-47A3D7D937CC} [Microsoft Corporation, 6.05.00001.900 built by: DIRECTX, C:2008-11-27 16:04 M:2004-07-09 04:26] [Microsoft InfoTech Protocols for IE 4.0] {9D148291-B9C8-11D0-A4CC-0000F80149F6} [Microsoft Corporation, 5.2.3790.315 (srv03_gdr.050421-1728), C:2008-11-27 16:04 M:2005-05-27 10:04] [] {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} [酷狗, 5.0.0.0, C:2008-04-01 22:45 M:2008-02-01 13:15] [] {828030A1-22C1-4009-854F-8E305202313F} [] [TV: Pluggable Protocol] {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} [Microsoft Corporation, 6.05.00001.900 built by: DIRECTX, C:2008-11-27 16:04 M:2004-07-09 04:26] [AsyncPProt Class] {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} [Microsoft Corporation, 6.4.09.1128, C:2008-11-27 16:04 M:2003-09-18 12:25] [WiaProtocol Class] {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] BrowserHelperObject [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34, C:2008-10-12 14:51 M:2008-09-06 10:36] [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2008-10-12 14:51 M:2008-09-19 16:44] [ThunderHlpObj Class] {97421D0D-E07F-40DF-8F07-99597B9585AD} [Thunder Networking Technologies,LTD, 5, 0, 8, 74, C:2008-12-07 13:29 M:2008-12-07 13:29] [IeCatch2 Class] {A5366673-E8CA-11D3-9CD9-0090271D075B} [Amaze Soft, 1, 1, 4, 0, C:2003-12-25 14:43 M:2002-01-16 19:12] [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] ToolBar [FlashGet Bar] {E0E899AB-F487-11D5-8D29-0050BA6940E3} [Amaze Soft, 1, 2, 0, 0, C:2003-12-25 14:43 M:2002-05-27 03:17] [电台(&R)] {8E718888-423F-11D2-876E-00A0C9082467} [Microsoft Corporation, 6.4.09.1128, C:2008-11-27 16:04 M:2003-09-18 12:25] ActiveX Extension [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [(Verified)Thunder Networking Technologies,LTD, 6, 0, 4, 42, C:2008-10-12 14:51 M:2008-09-23 10:40] [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} [Xunlei Networking Technologies,LTD, 2, 1, 8, 85, C:2008-10-12 14:51 M:2008-09-23 17:39] [WangWangObj Class] {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} [(Verified)阿里巴巴软件(上海)有限公司, 1, 0, 0, 5, C:2008-05-13 11:59 M:2008-03-18 04:14] [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [(Verified)Thunder Networking Technologies,LTD, 3, 1, 5, 78, C:2008-10-12 14:51 M:2008-09-19 16:30] [360SafeLive] {87515F61-A66C-4319-A0E0-D416CB8059E3} [(Verified)360.cn, 1, 0, 1, 1028, C:2008-07-16 22:00 M:2008-07-16 22:00] [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [(Verified)ShenZhen Thunder Networking Technologies Ltd., 2, 1, 5804, 63, C:2008-10-12 14:51 M:2008-09-19 16:30] [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [(Verified)Xunlei Networking Technologies,LTD, 2, 1, 5853, 212, C:2008-10-16 20:52 M:2008-09-24 11:03] Context Menu [Offline Files] {750fdf0e-2a26-11d1-a3ea-080036587f03} <%SystemRoot%\System32\cscui.dll> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Open With] {09799AFB-AD67-11d1-ABCD-00C04FC30936} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] [Open With EncryptionMenu] {A470F8CF-A1E8-4f65-8335-227475AA5C46} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] [WinRAR] {B41DB860-8EE4-11D2-9906-E49FADC173CA} [N/A, C:2003-10-20 11:50 M:2004-02-03 11:15] [Send To] {7BA4C740-9E81-11CF-99D3-00AA004AE837} <%SystemRoot%\system32\SHELL32.dll> [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] [Sharing] {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] ======================================== Services [Adobe LM Service / Adobe LM Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"> [Adobe Systems, 2.67.010, C:2007-02-11 13:01 M:2007-02-11 13:01] [Alerter / Alerter][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k LocalService --> "%SystemRoot%\system32\alrsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [Application Layer Gateway Service / ALG][Stopped/Manual Start] <%SystemRoot%\System32\alg.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Application Management / AppMgmt][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\appmgmts.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Windows Audio / AudioSrv][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\audiosrv.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Background Intelligent Transfer Service / BITS][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\qmgr.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 6.6.2600.1569 (xpsp2_gdr.040517-1325), C:2008-11-27 16:05 M:2004-07-02 06:08] [Computer Browser / Browser][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\browser.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Indexing Service / CiSvc][Stopped/Manual Start] <%SystemRoot%\system32\cisvc.exe> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [ClipBook / ClipSrv][Stopped/Manual Start] <%SystemRoot%\system32\clipsrv.exe> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [COM+ System Application / COMSysApp][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [Cryptographic Services / CryptSvc][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\cryptsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1190 (xpsp2.030320-1720), C:2008-11-27 16:05 M:2003-03-26 08:41] [DHCP Client / Dhcp][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\dhcpcsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1847 (xpsp2.060519-0009), C:2008-11-27 16:04 M:2006-05-19 20:14] [Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start] <%SystemRoot%\System32\dmadmin.exe /com> [Microsoft Corp., Veritas Software, 2600.0.503.0, C:2008-11-27 16:05 M:2002-10-07 12:00] [Logical Disk Manager / dmserver][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\dmserver.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corp., 2600.0.503.0, C:2008-11-27 16:05 M:2002-10-07 12:00] [DNS Client / Dnscache][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k NetworkService --> "%SystemRoot%\System32\dnsrslvr.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [Error Reporting Service / ERSvc][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\ersvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Event Log / Eventlog][Running/Auto Start] <%SystemRoot%\system32\services.exe> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [COM+ Event System / EventSystem][Running/Manual Start] "C:\WINDOWS\System32\es.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:04 M:2005-07-26 12:38] [Fast User Switching Compatibility / FastUserSwitchingCompatibility][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 6.00.2800.1605 (xpsp2.040919-1003), C:2008-11-27 16:04 M:2004-10-28 09:30] [Help and Support / helpsvc][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] [Human Interface Device Access / HidServ][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [IMAPI CD-Burning COM Service / ImapiService][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Server / lanmanserver][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\srvsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1613 (xpsp2.041130-1838), C:2008-11-27 16:04 M:2004-12-08 03:34] [Workstation / lanmanworkstation][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\wkssvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1309 (xpsp2.031013-2110), C:2008-11-27 16:04 M:2003-10-22 07:17] [TCP/IP NetBIOS Helper / LmHosts][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k LocalService --> "%SystemRoot%\System32\lmhsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"> [Copyright (c) 1998-2003 Macrovision Corp., 2.42.000, C:2006-03-27 20:49 M:2006-03-27 20:49] [MS Media Controler / MediaC][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k krnlsrvc --> "C:\WINDOWS\System32\NerrtHG.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|@ Microsoft Corporation. All rights reserved., 5.1.2600.2180, C:2004-08-17 20:00 M:2004-08-17 20:00] [Messenger / Messenger][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\msgsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1309 (xpsp2.031013-2110), C:2008-11-27 16:04 M:2003-10-22 07:17] [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start] [Microsoft Corporation, 4.4.3400, C:2008-11-27 16:04 M:2002-10-07 20:00] [Distributed Transaction Coordinator / MSDTC][Stopped/Manual Start] [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:04 M:2002-10-07 20:00] [Windows Installer / MSIServer][Stopped/Manual Start] [Microsoft Corporation, 3.1.4000.1823, C:2002-10-07 12:00 M:2005-05-04 14:45] [Network DDE / NetDDE][Stopped/Manual Start] <%SystemRoot%\system32\netdde.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Network DDE DSDM / NetDDEdsdm][Stopped/Manual Start] <%SystemRoot%\system32\netdde.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Net Logon / Netlogon][Stopped/Manual Start] <%SystemRoot%\System32\lsass.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Network Connections / Netman][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\netman.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1733 (xpsp2.050819-1534), C:2008-11-27 16:04 M:2005-08-23 02:36] [Network Location Awareness (NLA) / Nla][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\mswsock.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [NT LM Security Support Provider / NtLmSsp][Stopped/Manual Start] <%SystemRoot%\System32\lsass.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Removable Storage / NtmsSvc][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\ntmssvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2400.1106, C:2008-11-27 16:04 M:2002-10-07 12:00] [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] <%SystemRoot%\System32\nvsvc32.exe> [NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] [Plug and Play / PlugPlay][Running/Auto Start] <%SystemRoot%\system32\services.exe> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [IPSEC Services / PolicyAgent][Running/Auto Start] <%SystemRoot%\System32\lsass.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Protected Storage / ProtectedStorage][Running/Auto Start] <%SystemRoot%\system32\lsass.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\rasauto.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Remote Access Connection Manager / RasMan][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\rasmans.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1861 (xpsp2.060622-0007), C:2008-11-27 16:04 M:2006-06-22 18:59] [Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [Routing and Remote Access / RemoteAccess][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\mprdim.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Remote Registry / RemoteRegistry][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\system32\regsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Remote Procedure Call (RPC) Locator / RpcLocator][Stopped/Manual Start] <%SystemRoot%\System32\locator.exe> [Microsoft Corporation, 5.1.2600.1147 (xpsp2.021108-1929), C:2008-11-27 16:04 M:2002-12-04 09:50] [Remote Procedure Call (RPC) / RpcSs][Running/Auto Start] <%SystemRoot%\system32\svchost -k rpcss --> "%SystemRoot%\system32\rpcss.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] [QoS RSVP / RSVP][Stopped/Manual Start] <%SystemRoot%\System32\rsvp.exe> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Security Accounts Manager / SamSs][Running/Auto Start] <%SystemRoot%\system32\lsass.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Smart Card Helper / SCardDrv][Stopped/Manual Start] <%SystemRoot%\System32\SCardSvr.exe> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Smart Card / SCardSvr][Stopped/Manual Start] <%SystemRoot%\System32\SCardSvr.exe> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Task Scheduler / Schedule][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\schedsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [Secondary Logon / seclogon][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\seclogon.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [System Event Notification / SENS][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\sens.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) / SharedAccess][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\ipnathlp.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1364 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] [Shell Hardware Detection / ShellHWDetection][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 6.00.2800.1605 (xpsp2.040919-1003), C:2008-11-27 16:04 M:2004-10-28 09:30] [Print Spooler / Spooler][Running/Auto Start] <%SystemRoot%\system32\spoolsv.exe> [Microsoft Corporation, 5.1.2600.1699 (xpsp2.050610-1533), C:2008-11-27 16:04 M:2005-06-11 07:55] [System Restore Service / srservice][Stopped/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\System32\srsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [SSDP Discovery Service / SSDPSRV][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k LocalService --> "%SystemRoot%\System32\ssdpsrv.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Windows Image Acquisition (WIA) / stisvc][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k imgsvc --> "%SystemRoot%\system32\wiaservc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [MS Software Shadow Copy Provider / SwPrv][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [Performance Logs and Alerts / SysmonLog][Stopped/Manual Start] <%SystemRoot%\system32\smlogsvc.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Telephony / TapiSrv][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\tapisrv.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1715 (xpsp2.050706-1530), C:2008-11-27 16:04 M:2005-07-09 00:09] [Terminal Services / TermService][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\termsrv.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [Themes / Themes][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 6.00.2800.1605 (xpsp2.040919-1003), C:2008-11-27 16:04 M:2004-10-28 09:30] [Telnet / TlntSvr][Stopped/Disabled] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] [Distributed Link Tracking Client / TrkWks][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\trkwks.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Windows User Mode Driver Framework / UMWdf][Stopped/Manual Start] [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act), C:2004-08-10 22:05 M:2004-08-10 22:05] [Upload Manager / uploadmgr][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] [Universal Plug and Play Device Host / upnphost][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k LocalService --> "%SystemRoot%\System32\upnphost.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Uninterruptible Power Supply / UPS][Stopped/Manual Start] <%SystemRoot%\System32\ups.exe> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Messenger 共享文件夹 USN 杂志阅读器服务 / usnjsvc][Stopped/Manual Start] <"C:\Program Files\MSN Messenger\usnsvc.exe"> [] [User Privilege Service / usprserv][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Volume Shadow Copy / VSS][Stopped/Manual Start] <%SystemRoot%\System32\vssvc.exe> [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Windows Time / W32Time][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\System32\w32time.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [WebClient / WebClient][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k LocalService --> "%SystemRoot%\System32\webclnt.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1790 (xpsp2.060103-1544), C:2008-11-27 16:04 M:2006-01-04 11:37] [Windows Management Instrumentation / winmgmt][Running/Auto Start] <%systemroot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\wbem\WMIsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] [Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\System32\MsPMSNSv.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 10.0.3790.3646, C:2004-08-11 00:45 M:2004-08-11 00:45] [Windows Management Instrumentation Driver Extensions / Wmi][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\advapi32.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [WMI Performance Adapter / WmiApSrv][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 20:00] [Automatic Updates / wuauserv][Running/Auto Start] <%systemroot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\System32\wuauserv.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.4.3630.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] [Wireless Zero Configuration / WZCSVC][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\wzcsvc.dll"> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00|Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [LexBce Server / LexBceS][Running/Auto Start] [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 17:52 M:2003-02-25 17:52] ======================================== Drivers [19b5406 / 19b5406][Stopped/Manual Start] <\??\C:\WINDOWS\System32\19b5406.sys> [] [5102a80 / 5102a80][Stopped/Manual Start] <\??\C:\WINDOWS\System32\5102a80.sys> [] [6457aed / 6457aed][Stopped/Manual Start] <\??\C:\WINDOWS\System32\6457aed.sys> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [9fd8db / 9fd8db][Stopped/Manual Start] <\??\C:\WINDOWS\System32\9fd8db.sys> [] [Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start] [Intel Corporation, 5.10.3523 built by: WinDDK, C:2003-12-25 14:36 M:2001-08-17 12:20] [Microsoft ACPI Driver / ACPI][Running/Boot Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft Kernel Acoustic Echo Canceller / aec][Stopped/Manual Start] [Microsoft Corporation, 5.1.2601.1095 built by: xpsp1, C:2008-11-27 16:04 M:2002-08-28 23:16] [AFD 网络支持环境 / AFD][Running/Auto Start] <\SystemRoot\System32\drivers\afd.sys> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Intel AGP Bus Filter / agp440][Running/Boot Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2001-08-17 13:58] [RAS Asynchronous Media Driver / AsyncMac][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [标准 IDE/ESDI 硬盘控制器 / atapi][Running/Boot Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [ati2mtaa / ati2mtaa][Stopped/Manual Start] [ATI Technologies Inc., 6.13.10.5019, C:2008-11-27 16:05 M:2002-09-09 15:36] [ATM ARP Client Protocol / Atmarpc][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [音频存根驱动程序 / audstub][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2003-10-20 11:21 M:2001-08-17 13:59] [b160485 / b160485][Stopped/Manual Start] <\??\C:\WINDOWS\System32\b160485.sys> [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] [b1a18a3e / b1a18a3e][Stopped/Manual Start] <\??\C:\WINDOWS\System32\b1a18a3e.sys> [N/A, C:2008-12-07 13:27 M:2008-12-07 13:27] [b71fe93 / b71fe93][Stopped/Manual Start] <\??\C:\WINDOWS\System32\b71fe93.sys> [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] [basic2 / basic2][Stopped/Manual Start] [Conexant, 3.05.12.04, C:2004-07-05 13:40 M:2001-08-17 13:28] [c39e8db / c39e8db][Stopped/Manual Start] <\??\C:\WINDOWS\System32\c39e8db.sys> [] [ca99d57 / ca99d57][Stopped/Manual Start] <\??\C:\WINDOWS\System32\ca99d57.sys> [] [Closed Caption Decoder / CCDECODE][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2004-07-09 04:26] [CD-ROM Driver / Cdrom][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [d7b49fa / d7b49fa][Stopped/Manual Start] <\??\C:\WINDOWS\System32\d7b49fa.sys> [] [d812a079 / d812a079][Stopped/Manual Start] <\??\C:\WINDOWS\System32\d812a079.sys> [] [磁盘驱动器 / Disk][Running/Boot Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [dmboot / dmboot][Stopped/Disabled] [Microsoft Corp., Veritas Software, 2600.0.503.0, C:2008-11-27 16:04 M:2002-10-07 12:00] [Logical Disk Manager Driver / dmio][Running/Boot Start] [Microsoft Corp., Veritas Software, 2600.0.503.0, C:2008-11-27 16:04 M:2002-10-07 12:00] [dmload / dmload][Running/Boot Start] [Microsoft Corp., Veritas Software., 2600.0.503.0, C:2002-10-07 12:00 M:2002-10-07 12:00] [Microsoft Kernel DLS Syntheiszer / DMusic][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2001-08-17 13:59] [Microsoft Kernel DRM Audio Descrambler / drmkaud][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:32] [eth8023 / eth8023][Running/Manual Start] <\SystemRoot\system32\drivers\eth8023.sys> [N/A, C:2008-12-04 21:08 M:2008-12-07 18:04] [f28907d / f28907d][Stopped/Manual Start] <\??\C:\WINDOWS\System32\f28907d.sys> [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] [Fallback / Fallback][Running/Auto Start] [Conexant, 3.05.12.04, C:2004-07-05 13:40 M:2001-08-17 13:28] [Floppy Disk Controller Driver / Fdc][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [软盘驱动程序 / Flpydisk][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Fsks / Fsks][Running/Auto Start] [Conexant, 3.05.12.04, C:2004-07-05 13:40 M:2001-08-17 13:28] [FsVga / FsVga][Running/System Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2001-08-31 15:43 M:2002-10-07 12:00] [Volume Manager Driver / Ftdisk][Running/Boot Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Game Port Enumerator / gameenum][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:32] [GMSIPCI / GMSIPCI][Stopped/Manual Start] <\??\G:\INSTALL\GMSIPCI.SYS> [] [Generic Packet Classifier / Gpc][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [HBKernel32 Driver / HBKernel32][Stopped/Boot Start] [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] [Microsoft HID Class Driver / HidUsb][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2005-02-18 13:51 M:2001-08-17 14:02] [hsf_msft / hsf_msft][Stopped/Manual Start] [Conexant, 3.05.12.06, C:2004-07-05 13:40 M:2001-08-17 13:28] [i8042 键盘和 PS/2 鼠标端口驱动程序 / i8042prt][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [CD 烧制筛选驱动器 / Imapi][Stopped/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [IntelIde / IntelIde][Running/Boot Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-09-09 15:45] [IP Traffic Filter Driver / IpFilterDriver][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [IP Network Address Translator / IpNat][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [IR Enumerator Service / IRENUM][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 20:00] [PnP ISA/EISA Bus Driver / isapnp][Running/Boot Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [K56 / K56][Running/Auto Start] [Conexant, 3.05.12.04, C:2004-07-05 13:40 M:2001-08-17 13:28] [Keyboard Class Driver / Kbdclass][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Keyboard HID Driver / kbdhid][Stopped/System Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2001-08-31 15:25] [Microsoft Kernel Wave Audio Mixer / kmixer][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:32] [kmsinput / kmsinput][Stopped/Manual Start] <\??\C:\WINDOWS\System32\drivers\kmsinput.sys> [N/A, C:2005-02-18 18:49 M:2006-03-07 11:00] [Mouse Class Driver / Mouclass][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Mouse HID Driver / mouhid][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2005-02-18 13:51 M:2001-08-31 15:31] [Microsoft Streaming Service Proxy / MSKSSRV][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2002-12-12 00:14] [Microsoft Streaming Clock Proxy / MSPCLOCK][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2002-12-12 00:14] [Microsoft Streaming Quality Manager Proxy / MSPQM][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2001-08-23 05:00] [Microsoft Streaming Tee/Sink-to-Sink Converter / MSTEE][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2002-12-12 00:14] [Microsoft MPU-401 MIDI UART Driver / ms_mpu401][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2004-07-05 13:40 M:2001-08-17 14:00] [NABTS/FEC VBI Codec / NABTSFEC][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2004-07-09 04:26] [Microsoft TV/Video Connection / NdisIP][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2004-07-09 04:26] [Remote Access NDIS TAPI Driver / NdisTapi][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [NDIS 用户模式 I/O 协议 / Ndisuio][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Remote Access NDIS WAN Driver / NdisWan][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [NetBIOS Interface / NetBIOS][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [NetBios over Tcpip / NetBT][Running/System Start] [Microsoft Corporation, 5.1.2600.1243 (xpsp2.030702-2125), C:2008-11-27 16:04 M:2003-07-09 07:48] [npkcrypt / npkcrypt][Running/Auto Start] <\??\C:\Program Files\Tencent\qq\npkcrypt.sys> [INCA Internet Co., Ltd., 2005. 6. 22. 1, C:2006-03-02 08:53 M:2006-03-02 08:53] [nv / nv][Running/Manual Start] [NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] [IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Parallel port driver / Parport][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PCI Bus Driver / PCI][Running/Boot Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PCIIde / PCIIde][Running/Boot Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2003-10-20 12:35 M:2001-08-31 15:42] [WAN Miniport (PPTP) / PptpMiniport][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1129 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-10-02 08:52] [处理器驱动程序 / Processor][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [QoS Packet Scheduler / PSched][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Remote Access Auto Connection Driver / RasAcd][Running/System Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [WAN Miniport (L2TP) / Rasl2tp][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [远程访问 PPPOE 驱动程序 / RasPppoe][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Direct Parallel / Raspti][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [RDPCDD / RDPCDD][Running/System Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [Terminal Server Device Redirector Driver / rdpdr][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:06] [Digital CD Audio Playback Filter Driver / redbook][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-09-09 15:37] [Rksample / Rksample][Stopped/Manual Start] [Conexant, 3.05.12.05, C:2004-07-05 13:40 M:2001-08-17 13:28] [Realtek RTL8029(AS)-based PCI Ethernet Adapter NT Driver / rtl8029][Stopped/Manual Start] [Realtek Semiconductor Corporation, 5.508.0803.2000, C:2003-10-20 11:19 M:2001-08-17 12:12] [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] [Realtek Semiconductor Corporation , 5.396.0530.2001, C:2008-11-27 16:04 M:2001-08-17 12:12] [Secdrv / Secdrv][Stopped/Manual Start] [N/A, C:2002-10-07 12:00 M:2002-10-07 12:00] [Serenum Filter Driver / serenum][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Serial port driver / Serial][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [sisidex / sisidex][Running/Boot Start] [Windows (R) 2000 DDK provider, 5.1.2600.0 built by: WinDDK, C:2004-07-05 13:53 M:2002-10-17 15:14] [Add Performance Filter Driver / sisperf][Running/Boot Start] [Silicon Integrated Systems Corp., 2.02.03.00 built by: WinDDK, C:2004-07-05 13:53 M:2002-08-20 17:19] [SkyProcs / SkyProcs][Stopped/Manual Start] <\??\D:\Program Files\SkyNet\FireWall\SkyProcs.sys> [] [BDA Slip De-Framer / SLIP][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2004-07-09 04:26] [SoftFax / SoftFax][Running/Auto Start] [Conexant, 3.05.12.04, C:2004-07-05 13:40 M:2001-08-17 13:28] [Microsoft Kernel Audio Splitter / splitter][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:32] [System Restore Filter Driver / sr][Stopped/Disabled] <\SystemRoot\System32\DRIVERS\sr.sys> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] [BDA IPSink / streamip][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2004-07-09 04:26] [Software Bus Driver / swenum][Running/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2002-12-12 00:14] [Microsoft Kernel GS Wavetable Synthesizer / swmidi][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2003-10-20 11:21 M:2001-08-17 14:00] [Microsoft Kernel System Audio Device / sysaudio][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 02:01] [Terminal Device Driver / TermDD][Running/System Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-09-09 15:54] [TesSafe / TesSafe][Stopped/Manual Start] <\??\C:\WINDOWS\System32\TesSafe.sys> [TENCENT, 0, 0, 3, 2, C:2007-11-04 20:13 M:2007-11-04 20:13] [Tones / Tones][Running/Auto Start] [Conexant, 3.05.12.04, C:2004-07-05 13:40 M:2001-08-17 13:28] [Microcode Update Driver / Update][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft USB Generic Parent Driver / usbccgp][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:32] [Microsoft USB 2.0 Enhanced Host Controller Miniport Driver / usbehci][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-08-29 01:32] [USB2 Enabled Hub / usbhub][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft USB Open Host Controller Miniport Driver / usbohci][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:32] [Microsoft USB PRINTER Class / usbprint][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:50] [USB 大容量存储设备 / USBSTOR][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 01:32] [Microsoft USB Universal Host Controller Miniport Driver / usbuhci][Stopped/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [V124 / V124][Running/Auto Start] [Conexant, 3.05.12.04, C:2004-07-05 13:40 M:2001-08-17 13:28] [VgaSave / VgaSave][Running/System Start] <\SystemRoot\System32\drivers\vga.sys> [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [VIA AGP Bus Filter / viaagp][Running/Boot Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2001-08-17 13:58] [ViaIde / ViaIde][Running/Boot Start] [Microsoft Corporation, 1.00.01.00, C:2008-11-27 16:04 M:2002-10-07 12:00] [VIA AC'97 Audio Controller (WDM) / VIAudio][Stopped/Manual Start] [VIA Technologies, Inc., 5.10.00.3622 built by: WinDDK, C:2003-10-20 11:19 M:2002-08-28 23:00] [Remote Access IP ARP Driver / Wanarp][Running/Manual Start] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [Microsoft WINMM WDM Audio Compatibility Driver / wdmaud][Running/Manual Start] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-08-29 02:00] [WINIO / WINIO][Stopped/Manual Start] <\??\C:\Program Files\简单游\winio.sys> [] [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start] [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:04 M:2004-07-09 04:26] [USB PC Camera 301P / ZSMC301b][Running/Manual Start] [VM, 4.2.1010.41, C:2005-02-18 13:55 M:2003-12-16 18:13] [360AntiArp / 360AntiArp][Running/System Start] <\??\C:\WINDOWS\System32\drivers\360AntiArp.sys> [(Verified)360安全中心, 1, 0, 1, 1007, C:2008-04-09 16:33 M:2008-04-09 16:33] [Service for WDM 3D Audio Driver / ALCXSENS][Running/Manual Start] [(Verified)Sensaura Ltd, 5.10.00.3511, C:2004-07-05 13:56 M:2003-11-13 19:25] [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] [(Verified)Realtek Semiconductor Corp., 5.10.5370, C:2004-07-05 13:56 M:2003-11-13 15:05] [DDK PACKET Protocol / Packet][Stopped/Manual Start] [(Verified)360安全中心, 1, 0, 1, 1001, C:2008-04-09 16:36 M:2008-04-09 16:36] [SafeBoxKrnl / SafeBoxKrnl][Running/System Start] <\??\C:\WINDOWS\System32\drivers\SafeBoxKrnl.sys> [(Verified)360安全中心, 2, 2, 2, 1007, C:2008-09-02 18:12 M:2008-09-02 18:12] [SiS AGP Filter / SISAGP][Running/Boot Start] [(Verified)Silicon Integrated Systems Corporation, 7.2.0.1160 built by: WinDDK, C:2004-07-05 13:52 M:2003-02-20 09:18] [SiSide / SiSide][Running/Boot Start] [(Verified)Silicon Integrated Systems Corp., 2.04.00.00 built by: WinDDK, C:2004-07-05 13:51 M:2003-03-25 17:50] ======================================== Running Processes [PID: 456 / SYSTEM] \SystemRoot\System32\smss.exe [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] [PID: 516 / SYSTEM] \??\C:\WINDOWS\system32\csrss.exe [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\CSRSRV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\basesrv.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\winsrv.dll [Microsoft Corporation, 5.1.2600.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-09-01 09:51] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sxs.dll [Microsoft Corporation, 5.1.2600.1579 (xpsp2.040720-1705), C:2008-11-27 16:04 M:2004-08-21 05:53] [PID: 540 / SYSTEM] \??\C:\WINDOWS\system32\winlogon.exe [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\NDdeApi.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\PROFMAP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\REGAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\AUTHZ.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:05 M:2005-03-03 02:21] C:\WINDOWS\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\MSGINA.dll [Microsoft Corporation, 5.1.2600.1343 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\ODBC32.dll [Microsoft Corporation, 3.520.9042.0, C:2008-11-27 16:04 M:2003-10-27 20:09] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\odbcint.dll [Microsoft Corporation, 3.520.7713.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHSVCS.dll [Microsoft Corporation, 6.00.2800.1605 (xpsp2.040919-1003), C:2008-11-27 16:04 M:2004-10-28 09:30] C:\WINDOWS\system32\sfc.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\sfc_os.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\WINSCARD.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WTSAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\sxs.dll [Microsoft Corporation, 5.1.2600.1579 (xpsp2.040720-1705), C:2008-11-27 16:04 M:2004-08-21 05:53] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\cscdll.dll [Microsoft Corporation, 5.1.2600.1599 (xpsp2.040919-1003), C:2008-11-27 16:05 M:2004-10-28 09:30] C:\WINDOWS\system32\WlNotify.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\cscui.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\wdmaud.drv [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\msacm32.drv [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\system32\MSACM32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\midimap.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] [PID: 584 / SYSTEM] C:\WINDOWS\system32\services.exe [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SCESRV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\AUTHZ.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:05 M:2005-03-03 02:21] C:\WINDOWS\system32\umpnpmgr.dll [Microsoft Corporation, 5.1.2600.1734 (xpsp2.050822-1657), C:2008-11-27 16:04 M:2005-08-23 11:52] C:\WINDOWS\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\NCObjAPI.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\eventlog.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\wtsapi32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 596 / SYSTEM] C:\WINDOWS\system32\lsass.exe [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\LSASRV.dll [Microsoft Corporation, 5.1.2600.1597 (xpsp2.040919-1003), C:2008-11-27 16:04 M:2004-10-28 09:30] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\NTDSAPI.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SAMSRV.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\cryptdll.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\msprivs.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\kerberos.dll [Microsoft Corporation, 5.1.2600.1701 (xpsp2.050614-1532), C:2008-11-27 16:04 M:2005-06-16 01:51] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\netlogon.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\w32time.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\MSVCP60.dll [Microsoft Corporation, 6.00.8972.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\schannel.dll [Microsoft Corporation, 5.1.2600.1347 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\wdigest.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\setupapi.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\scecli.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\OLE32.DLL [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\shell32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\pstorsvc.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\psbase.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\dssenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 772 / SYSTEM] C:\WINDOWS\system32\svchost.exe [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] c:\windows\system32\rpcss.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] c:\windows\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\userenv.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\shell32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\system32\wsock32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RASAPI32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\rasman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\TAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 824 / SYSTEM] C:\WINDOWS\System32\svchost.exe [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\system32\MSVCRT.DLL [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\shsvcs.dll [Microsoft Corporation, 6.00.2800.1605 (xpsp2.040919-1003), C:2008-11-27 16:04 M:2004-10-28 09:30] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\shell32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\System32\WINSTA.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\UxTheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\audiosrv.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] c:\windows\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\WTSAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\wkssvc.dll [Microsoft Corporation, 5.1.2600.1309 (xpsp2.031013-2110), C:2008-11-27 16:04 M:2003-10-22 07:17] c:\windows\system32\NTDSAPI.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\qmgr.dll [Microsoft Corporation, 6.6.2600.1569 (xpsp2_gdr.040517-1325), C:2008-11-27 16:05 M:2004-07-02 06:08] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\SHFOLDER.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\WINHTTP.dll [Microsoft Corporation, 5.1.2600.1557 (xpsp2_gdr.040517-1325), C:2008-11-27 16:05 M:2004-07-02 06:08] c:\windows\system32\srvsvc.dll [Microsoft Corporation, 5.1.2600.1613 (xpsp2.041130-1838), C:2008-11-27 16:04 M:2004-12-08 03:34] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\pchealth\helpctr\binaries\pchsvc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] c:\windows\system32\es.dll [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:04 M:2005-07-26 12:38] c:\windows\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] c:\windows\system32\ersvc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\dmserver.dll [Microsoft Corp., 2600.0.503.0, C:2008-11-27 16:05 M:2002-10-07 12:00] c:\windows\system32\cryptsvc.dll [Microsoft Corporation, 5.1.2600.1190 (xpsp2.030320-1720), C:2008-11-27 16:05 M:2003-03-26 08:41] c:\windows\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\certcli.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] c:\windows\system32\ATL.DLL [Microsoft Corporation, 3.00.9435, C:2008-11-27 16:05 M:2002-10-07 12:00] c:\windows\system32\CRYPTUI.dll [Microsoft Corporation, 5.131.2600.1243 (xpsp2.030702-2125), C:2008-11-27 16:05 M:2003-07-24 16:42] c:\windows\system32\seclogon.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\trkwks.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\srsvc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] c:\windows\system32\POWRPROF.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\sens.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\wuauserv.dll [Microsoft Corporation, 5.4.3630.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] c:\windows\system32\wbem\wmisvc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] c:\windows\system32\wbem\wbemcomn.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] C:\WINDOWS\System32\VSSAPI.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\w32time.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\MSVCP60.dll [Microsoft Corporation, 6.00.8972.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wuaueng.dll [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla), C:2003-10-20 11:26 M:2005-05-26 04:16] C:\WINDOWS\System32\ADVPACK.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Cabinet.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\mspatcha.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sfc.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sfc_os.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\browser.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\SXS.DLL [Microsoft Corporation, 5.1.2600.1579 (xpsp2.040720-1705), C:2008-11-27 16:04 M:2004-08-21 05:53] C:\WINDOWS\system32\comsvcs.dll [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\system32\colbact.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\system32\WSOCK32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\CLUSAPI.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\RESUTILS.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\termsrv.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] c:\windows\system32\ICAAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] c:\windows\system32\AUTHZ.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:05 M:2005-03-03 02:21] c:\windows\system32\mstlsapi.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\ACTIVEDS.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] c:\windows\system32\adsldpc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\REGAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\netman.dll [Microsoft Corporation, 5.1.2600.1733 (xpsp2.050819-1534), C:2008-11-27 16:04 M:2005-08-23 02:36] c:\windows\system32\MPRAPI.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\RASAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\rasman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\TAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\WZCSvc.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\WMI.dll [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\NETSHELL.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\credui.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\upnp.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SSDPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\hnetcfg.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Wbem\wbemcore.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] C:\WINDOWS\System32\Wbem\esscli.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] C:\WINDOWS\System32\Wbem\FastProx.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] C:\WINDOWS\System32\wbem\wmiutils.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] C:\WINDOWS\System32\wbem\repdrvfs.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] C:\WINDOWS\System32\wbem\wmiprvsd.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] C:\WINDOWS\System32\NCObjAPI.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wbem\wbemess.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] c:\windows\system32\tapisrv.dll [Microsoft Corporation, 5.1.2600.1715 (xpsp2.050706-1530), C:2008-11-27 16:04 M:2005-07-09 00:09] c:\windows\system32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\netcfgx.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rastapi.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\unimdm.tsp [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\uniplat.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\kmddsp.tsp [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ndptsp.tsp [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ipconf.tsp [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\h323.tsp [Microsoft Corporation, 5.1.2600.1348 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\System32\hidphone.tsp [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HID.DLL [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rasppp.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntlsapi.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\raschap.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rastls.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SCHANNEL.dll [Microsoft Corporation, 5.1.2600.1347 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\System32\WinSCard.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\RASDLG.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wbem\ncprov.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 20:00] [PID: 908 / NETWORK SERVICE] C:\WINDOWS\System32\svchost.exe [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] c:\windows\system32\dnsrslvr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] c:\windows\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\upnpsrv.dll [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2008-11-27 16:04 M:2006-07-05 18:54] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\OLE32.DLL [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\System32\MPRAPI.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ACTIVEDS.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\adsldpc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ATL.DLL [Microsoft Corporation, 3.00.9435, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 936 / LOCAL SERVICE] C:\WINDOWS\System32\svchost.exe [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\system32\MSVCRT.DLL [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\lmhsvc.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\shell32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\System32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wsock32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\ssdpsrv.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\RASAPI32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rasman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\TAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sensapi.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 956 / SYSTEM] C:\WINDOWS\system32\LEXBCES.EXE [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 17:52 M:2003-02-25 17:52] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\lexp2p32.dll [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 17:49 M:2003-02-25 17:49] C:\WINDOWS\system32\WSOCK32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\lex2kusb.dll [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 17:54 M:2003-02-25 17:54] C:\WINDOWS\system32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 980 / SYSTEM] C:\WINDOWS\system32\LEXPPS.EXE [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 17:50 M:2003-02-25 17:50] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LEXBCE.DLL [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 17:51 M:2003-02-25 17:51] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 984 / SYSTEM] C:\WINDOWS\system32\spoolsv.exe [Microsoft Corporation, 5.1.2600.1699 (xpsp2.050610-1533), C:2008-11-27 16:04 M:2005-06-11 07:55] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SPOOLSS.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\localspl.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\sfc_os.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\winspool.drv [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\cnbjmon.dll [Microsoft Corporation, 5.1.2503.0 (Lab06_N.010129-0357), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\LEXLMPM.DLL [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 18:11 M:2003-02-25 18:11] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\LexBce.dll [(Verified)Lexmark International, Inc., 8.16, C:2003-02-25 17:51 M:2003-02-25 17:51] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\pjlmon.dll [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\tcpmon.dll [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\usbmon.dll [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LGBCPP5C.dll [(Verified)Lenovo, 1.0.3.0, C:2003-04-09 00:04 M:2003-04-09 00:04] C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll [Windows (R) 2000 DDK provider, 5.00.2195.1620, C:2005-09-22 21:02 M:2005-02-02 15:21] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\win32spl.dll [Microsoft Corporation, 5.1.2600.1699 (xpsp2.050610-1533), C:2008-11-27 16:04 M:2005-06-11 10:42] C:\WINDOWS\system32\NETRAP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\system32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\inetpp.dll [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\icmp.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\LGBCpwr.dll [(Verified)Lenovo, 1, 0, 1, 0, C:2005-09-27 13:50 M:2003-04-08 23:47] [PID: 1512 / Bluewater] C:\WINDOWS\Explorer.EXE [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\UxTheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Msctf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\appHelp.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\System32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\cscui.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\CSCDLL.dll [Microsoft Corporation, 5.1.2600.1599 (xpsp2.040919-1003), C:2008-11-27 16:05 M:2004-10-28 09:30] C:\WINDOWS\System32\themeui.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MSIMG32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Msimtf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msutb.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntshrui.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ATL.DLL [Microsoft Corporation, 3.00.9435, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\NETSHELL.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\credui.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sfc.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sfc_os.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\linkinfo.dll [Microsoft Corporation, 5.1.2600.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-09-01 09:51] C:\WINDOWS\System32\DFB3DAC5.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\DA63E650.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\133AEAC9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\A1A6BC2E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\5934EA2B.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\56BC86C7.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\psapi.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\A55F538E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\drprov.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msi.dll [Microsoft Corporation, 3.1.4000.2435, C:2002-10-07 12:00 M:2005-05-04 14:45] C:\WINDOWS\System32\ntlanman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NETUI0.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NETUI1.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NETRAP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\davclnt.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\122B901E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\FFAE967F.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\4D023DE9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\08223B03.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\93DEE065.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\E0D39066.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\950D1600.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:27] C:\WINDOWS\System32\4FBFD5A4.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\755D0ED0.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\F8E07BB2.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\D9C002DD.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\201476D0.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\1FD51F1F.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\66AFCB56.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\9CA963CA.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\C8FFD223.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\BA7EDF54.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\2EF0D734.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\WINSTA.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\29EA67E0.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\3D144530.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\B6E23E89.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:29] C:\WINDOWS\System32\webcheck.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\stobject.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\BatMeter.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\POWRPROF.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WTSAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\Fonts\Framdee.ttf [N/A, C:2008-12-04 12:50 M:2008-12-07 17:59] C:\WINDOWS\AppPatch\AcXtrnel.sdb [N/A, C:2008-12-04 12:57 M:2008-12-04 12:57] C:\WINDOWS\AppPatch\AcSpecf.dll [N/A, C:2008-12-04 12:57 M:2008-12-07 17:59] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\upnpsrv.dll [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2008-11-27 16:04 M:2006-07-05 18:54] C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll [Thunder Networking Technologies,LTD, 5, 0, 8, 74, C:2008-12-07 13:29 M:2008-12-07 13:29] C:\WINDOWS\System32\wsock32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\RASAPI32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rasman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\TAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sensapi.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wdmaud.drv [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msacm32.drv [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\MSACM32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\midimap.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\printui.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ACTIVEDS.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\adsldpc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\CFGMGR32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\nvcpl.dll [NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] C:\WINDOWS\System32\OLEACC.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\MSVCP60.dll [Microsoft Corporation, 6.00.8972.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NVRSZHC.DLL [NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] C:\WINDOWS\System32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\nvshell.dll [N/A, C:2006-03-09 15:29 M:2006-03-09 15:29] C:\Program Files\WinRAR\rarext.dll [N/A, C:2003-10-20 11:50 M:2004-02-03 11:15] C:\WINDOWS\System32\SXS.DLL [Microsoft Corporation, 5.1.2600.1579 (xpsp2.040720-1705), C:2008-11-27 16:04 M:2004-08-21 05:53] C:\WINDOWS\System32\RASDLG.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MPRAPI.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\shdoclc.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\browselc.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2008-10-12 14:51 M:2008-09-19 16:44] C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\PROGRA~1\FLASHGET\jccatch.dll [Amaze Soft, 1, 1, 4, 0, C:2003-12-25 14:43 M:2002-01-16 19:12] C:\WINDOWS\System32\DUSER.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sti.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MSGINA.dll [Microsoft Corporation, 5.1.2600.1343 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\System32\ODBC32.dll [Microsoft Corporation, 3.520.9042.0, C:2008-11-27 16:04 M:2003-10-27 20:09] C:\WINDOWS\System32\odbcint.dll [Microsoft Corporation, 3.520.7713.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\zipfldr.dll [Microsoft Corporation, 6.00.2800.1126 (xpsp2.020921-0842), C:2008-11-27 16:04 M:2002-09-26 06:19] C:\WINDOWS\System32\shimgvw.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.10.0_x-ww_712befd8\gdiplus.dll [Microsoft Corporation, 5.1.3101.0 (xpsp1.020828-1920), C:2003-10-20 11:14 M:2002-10-07 20:00] C:\WINDOWS\System32\mscms.dll [Microsoft Corporation, 5.1.2600.1710 (xpsp2.050628-1527), C:2008-11-27 16:04 M:2005-06-29 09:55] C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34, C:2008-10-12 14:51 M:2008-09-06 10:36] C:\WINDOWS\System32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2006-06-05 17:34 M:2006-06-05 17:34] C:\WINDOWS\System32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2006-05-16 16:38 M:2006-05-16 16:38] C:\Program Files\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] C:\WINDOWS\System32\wiashext.dll [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Audiodev.dll [Microsoft Corporation, 5.2.3790.3646 built by: DNSRV(bld4act), C:2004-08-11 21:16 M:2004-08-11 21:16] C:\WINDOWS\System32\WMVCore.DLL [Microsoft Corporation, 10.00.00.3646 built by: DNSRV(bld4act), C:2004-08-11 01:39 M:2004-08-11 01:39] C:\WINDOWS\System32\WMASF.DLL [Microsoft Corporation, 10.00.00.3646 built by: DNSRV(bld4act), C:2004-08-11 00:41 M:2004-08-11 00:41] C:\WINDOWS\System32\diskcopy.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [PID: 1904 / SYSTEM] C:\WINDOWS\System32\nvsvc32.exe [NVIDIA Corporation, 6.14.10.8421, C:2006-03-09 15:29 M:2006-03-09 15:29] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\POWRPROF.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wtsapi32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINSTA.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\System32\secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\msv1_0.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 1936 / SYSTEM] C:\WINDOWS\System32\svchost.exe [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] c:\windows\system32\wiaservc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\OLE32.DLL [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] c:\windows\system32\CFGMGR32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\setupapi.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\mscms.dll [Microsoft Corporation, 5.1.2600.1710 (xpsp2.050628-1527), C:2008-11-27 16:04 M:2005-06-29 09:55] c:\windows\system32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] c:\windows\system32\WINSTA.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\System32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\wiavusd.dll [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.10.0_x-ww_712befd8\gdiplus.dll [Microsoft Corporation, 5.1.3101.0 (xpsp1.020828-1920), C:2003-10-20 11:14 M:2002-10-07 20:00] C:\WINDOWS\System32\SHFOLDER.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sti.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 1500 / Bluewater] C:\WINDOWS\System32\rundll32.exe [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\MKMKrnl.dll [N/A, C:2008-12-04 12:57 M:2008-12-07 13:29] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\OLE32.DLL [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Msctf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\shell32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\System32\B6E23E89.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:29] C:\WINDOWS\System32\29EA67E0.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\wsock32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\2EF0D734.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\D9C002DD.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\755D0ED0.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\F8E07BB2.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\201476D0.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\4FBFD5A4.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\950D1600.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:27] C:\WINDOWS\System32\08223B03.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\4D023DE9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\93DEE065.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\56BC86C7.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\122B901E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\FFAE967F.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\DA63E650.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\133AEAC9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\A1A6BC2E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\5934EA2B.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\DFB3DAC5.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\RASAPI32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rasman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\TAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sensapi.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\drprov.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ntlanman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NETUI0.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NETUI1.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NETRAP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\davclnt.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\cscdll.dll [Microsoft Corporation, 5.1.2600.1599 (xpsp2.040919-1003), C:2008-11-27 16:05 M:2004-10-28 09:30] [PID: 3584 / Bluewater] D:\maxthoncn\Maxthon.exe [Maxthon International Ltd., 1, 5, 9, 80, C:2006-01-19 11:38 M:2007-02-11 17:46] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] D:\maxthoncn\maxzlib.dll [ , 1, 0, 0, 2, C:2006-01-19 11:38 M:2005-01-03 15:46] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oledlg.dll [Microsoft Corporation, 1.0 (XPClient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\OLEPRO32.DLL [Microsoft Corporation, 5.0.5014, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\System32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WSOCK32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\01AFE3DC.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\NTMARTA.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Msctf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\appHelp.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\System32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Msimtf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] D:\maxthoncn\Plugin\ViewSource\ViewSrc.dll [Copyright 2002, 1, 0, 0, 1, C:2006-01-19 11:38 M:2002-11-19 17:42] C:\WINDOWS\System32\ATL.DLL [Microsoft Corporation, 3.00.9435, C:2008-11-27 16:05 M:2002-10-07 12:00] D:\maxthoncn\Plugin\FloatBar\FloatBar.dll [Copyright 2004, 1, 8, 0, 0, C:2006-01-19 11:38 M:2004-10-09 12:02] C:\WINDOWS\System32\pdh.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ODBC32.dll [Microsoft Corporation, 3.520.9042.0, C:2008-11-27 16:04 M:2003-10-27 20:09] C:\WINDOWS\System32\odbcbcp.dll [Microsoft Corporation, 2000.081.9042.00, C:2008-11-27 16:04 M:2003-10-27 20:13] C:\WINDOWS\System32\odbcint.dll [Microsoft Corporation, 3.520.7713.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\pschdprf.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\TRAFFIC.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\WMI.dll [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rasctrs.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\rasman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rsvpperf.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\tapiperf.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\tapi32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\SXS.DLL [Microsoft Corporation, 5.1.2600.1579 (xpsp2.040720-1705), C:2008-11-27 16:04 M:2004-08-21 05:53] C:\WINDOWS\System32\shdoclc.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\mlang.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\B6E23E89.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:29] C:\WINDOWS\System32\29EA67E0.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\2EF0D734.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\D9C002DD.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\755D0ED0.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\F8E07BB2.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\201476D0.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\4FBFD5A4.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\950D1600.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:27] C:\WINDOWS\System32\08223B03.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\4D023DE9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\93DEE065.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\56BC86C7.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\122B901E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\FFAE967F.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\DA63E650.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\133AEAC9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\A1A6BC2E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\5934EA2B.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\DFB3DAC5.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\MSLS31.DLL [Microsoft Corporation, 3.10.349.0, C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\RASAPI32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] D:\maxthoncn\Services\RealTime\real_time.dll [Copyright 2003, 1, 0, 0, 1, C:2006-01-19 11:38 M:2003-12-18 17:12] C:\WINDOWS\System32\MFC42.DLL [Microsoft Corporation, 6.00.8665.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MFC42LOC.DLL [Microsoft Corporation, 6.00.8665.0, C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\wdmaud.drv [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msacm32.drv [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\MSACM32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\midimap.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Macromed\Flash\Flash9f.ocx [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32] C:\WINDOWS\System32\imgutil.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\schannel.dll [Microsoft Corporation, 5.1.2600.1347 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\System32\ddrawex.dll [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:05 M:2002-12-12 00:14] C:\WINDOWS\System32\DDRAW.dll [Microsoft Corporation, 5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00), C:2008-11-27 16:05 M:2004-07-09 04:27] C:\WINDOWS\System32\DCIMAN32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\mshtmled.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\VBScript.dll [Microsoft Corporation, 5.6.0.7426, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wintrust.dll [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\corpol.dll [Microsoft Corporation, 1998.03.6074.0, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\SOFTPUB.DLL [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\cryptnet.dll [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\riched32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\RICHED20.dll [Microsoft Corporation, 5.30.23.1211, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\sfc_os.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ADVPACK.DLL [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Cabinet.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\sfc.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MSRATING.DLL [Microsoft Corporation, 6.00.2800.1623 (xpsp2.050222-1638), C:2008-11-27 16:04 M:2005-02-24 15:01] C:\WINDOWS\System32\msratelc.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\A55F538E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\E0D39066.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\1FD51F1F.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\66AFCB56.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\9CA963CA.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\C8FFD223.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\BA7EDF54.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\3D144530.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\ntshrui.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\freeime.ime [极点五笔工作室, 6.10.950, C:2007-12-22 11:19 M:2007-11-11 12:33] C:\WINDOWS\System32\MSIMG32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2008-10-12 14:51 M:2008-09-19 16:44] C:\WINDOWS\System32\OLEACC.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\MSVCP60.dll [Microsoft Corporation, 6.00.8972.0, C:2008-11-27 16:04 M:2002-10-07 12:00] [PID: 2376 / Bluewater] C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe [(Verified)Thunder Networking Technologies,LTD, 5.8.6.600, C:2008-10-12 14:51 M:2008-09-23 17:40] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\Program Files\Thunder Network\Thunder\Program\BugReport.dll [Thunder Networking Technologies,LTD, 1, 4, 1, 20, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\MSVCRT.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\OLE32.DLL [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\System32\MFC42.DLL [Microsoft Corporation, 6.00.8665.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\System32\MSVCP60.dll [Microsoft Corporation, 6.00.8972.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\MFC42LOC.DLL [Microsoft Corporation, 6.00.8665.0, C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\RICHED32.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\RICHED20.dll [Microsoft Corporation, 5.30.23.1211, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll [Thunder Networking Technologies,LTD, 1, 3, 10, 72, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll [Thunder Networking Technologies,LTD, 3, 3, 2, 325, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\mp.dll [Thunder Networking Technologies,LTD, 1, 0, 2, 2, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2006-06-05 17:34 M:2006-06-05 17:34] C:\WINDOWS\System32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2006-05-16 16:38 M:2006-05-16 16:38] C:\WINDOWS\System32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\System32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\mlang.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\asyn_frame.dll [Thunder Networking Technologies,LTD, 1, 3, 2, 28, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\MSWSOCK.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\ATL71.DLL [Microsoft Corporation, 7.10.3077.0, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\XLNet.Dll [Thunder Networking Technologies,LTD, 1, 5, 2, 25, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\RASAPI32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rasman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\TAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Msctf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll [Thunder Networking Technologies,LTD, 1, 1, 1, 10, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll [Giganology Inc., 1, 0, 0, 2, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DownAndPlay.dll [Copyright 2007, 1, 0, 12, 30, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\ATL.DLL [Microsoft Corporation, 3.00.9435, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\backend_agent.dll [Thunder Networking Technologies,LTD, 1, 1, 2, 25, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\zlib1.dll [(C) 1995-2004 Jean-loup Gailly & Mark Adler, 1.2.3, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\B6E23E89.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:29] C:\WINDOWS\System32\29EA67E0.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\2EF0D734.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\Program Files\Thunder Network\Thunder\Program\ptl.dll [Thunder Networking Technologies,LTD, 3, 2, 2, 35, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\D9C002DD.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\Program Files\Thunder Network\Thunder\Program\dl_peer_id.dll [Thunder Networking Technologies,LTD, 3, 1, 2, 3, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\755D0ED0.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\F8E07BB2.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\201476D0.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\4FBFD5A4.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\950D1600.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:27] C:\Program Files\Thunder Network\Thunder\Program\xl_stat.dll [Copyright 2007, 1, 1, 2, 6, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\08223B03.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\4D023DE9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\93DEE065.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\56BC86C7.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\122B901E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\FFAE967F.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\DA63E650.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\133AEAC9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\Program Files\Thunder Network\Thunder\Program\p2p_upload.dll [Thunder Networking Technologies,LTD, 1,1,2,13, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\A1A6BC2E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\Program Files\Thunder Network\Thunder\Program\p2p.dll [Thunder Networking Technologies,LTD, 1,1,2,37, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\5934EA2B.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\DFB3DAC5.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\Program Files\Thunder Network\Thunder\Program\fs.dll [Thunder Networking Technologies,LTD, 1, 1, 2, 13, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\xldc.dll [Thunder Networking Technologies,LTD, 3, 6, 2, 23, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\system32\appHelp.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Msimtf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\stream.dll [Thunder Networking Technologies,LTD, 2, 1, 2, 397, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\p2sp.dll [Thunder Networking Technologies,LTD, 1, 1, 2, 43, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\down_dispatcher.dll [Thunder Networking Technologies,LTD, 1, 0, 2, 29, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\SXS.DLL [Microsoft Corporation, 5.1.2600.1579 (xpsp2.040720-1705), C:2008-11-27 16:04 M:2004-08-21 05:53] C:\WINDOWS\System32\shdoclc.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\p2p_local_res.dll [Thunder Networking Technologies,LTD, 1,1,2,18, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\wsock32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\al.dll [Thunder Networking Technologies,LTD, 1,1,2,23, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\p2p_network_com.dll [版权所有 (C) 2008, 1, 0, 2, 25, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll [Thunder Networking Technologies,LTD, 1, 0, 4, 35, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\OLEPRO32.DLL [Microsoft Corporation, 5.0.5014, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\asycfilt.dll [Microsoft Corporation, 3.50.5014, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Macromed\Flash\Flash9f.ocx [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32] C:\WINDOWS\System32\wdmaud.drv [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msacm32.drv [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\MSACM32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\midimap.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MSLS31.DLL [Microsoft Corporation, 3.10.349.0, C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msimg32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll [　, 1, 0, 2, 26, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed18.dll [Thunder Networking Technologies,LTD, 3, 4, 9, 110, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\InMedia\PlayerHelper.dll [thunder, 1, 2, 7, 61, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\InMedia\XLIPC.DLL [Thunder Networking Technologies,LTD, 1, 0, 0, 2, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\system32\schannel.dll [Microsoft Corporation, 5.1.2600.1347 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll [Thunder Networking Technologies,LTD, 2, 2, 5, 70, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll [Thunder Networking Technologies,LTD, 2, 5, 0, 90, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\dbghelp.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll [Thunder Networking Technologies,LTD, 2, 17, 0, 67, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\MSVCIRT.dll [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\imdt.dll [Thunder Networking Technologies,LTD, 1.2.0.21, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\emule_id.dll [Copyright 2007, 1, 0, 2, 11, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\Security\ThunderSafe.dll [深圳市迅雷网络技术有限公司, 2, 1, 5, 99, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\Security\ConfigManager.dll [深圳市迅雷网络技术有限公司, 1, 0, 0, 1, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\Security\SafeManager.dll [Xunlei Networking Technologies,LTD, 1, 0, 5, 20, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\Security\SafeStatistic.dll [Xunlei Networking Technologies,LTD, 1, 0, 0, 1, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\XLNetU.Dll [Thunder Networking Technologies,LTD, 1, 5, 1, 24, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\XLSafeHost.dll [深圳市迅雷网络技术有限公司, 1, 2, 7, 87, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll [Thunder Networking Technologies,LTD, 1, 1, 7, 25, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll [Thunder Networking Technologies,LTD, 1, 2, 4, 26, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\XLSoftBase\DrThunderHost.dll [深圳市迅雷网络技术有限公司, 1.0.0.9, C:2008-10-12 14:51 M:2008-10-16 18:17] C:\Program Files\Thunder Network\Thunder\Components\XLSoftBase\DrKernel.dll [深圳市迅雷网络技术有限公司, 1.0.0.4, C:2008-10-12 14:51 M:2008-10-16 18:17] C:\Program Files\Thunder Network\Thunder\Components\XLSoftBase\DrSoftIdentifier.dll [深圳市迅雷网络技术有限公司, 1.0.0.9, C:2008-10-12 14:51 M:2008-10-16 18:17] C:\Program Files\Thunder Network\Thunder\Components\XLSoftBase\DrUpdate.dll [深圳市迅雷网络技术有限公司, 1.1.0.3, C:2008-10-12 14:51 M:2008-10-16 18:17] C:\Program Files\Thunder Network\Thunder\Plugins\KanKanTop\KanKanTop.dll [Thunder Networking Technologies,LTD, 1, 0, 0, 4, C:2008-10-16 20:52 M:2008-03-11 13:59] C:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll [Thunder Networking Technologies,LTD, 1, 0, 4, 19, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\Tips\TipsClient.dll [Thunder Networking Technologies,LTD, 2, 2, 14, 120, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll [迅雷网络, 4, 0, 0, 38, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\ddrawex.dll [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:05 M:2002-12-12 00:14] C:\WINDOWS\System32\DDRAW.dll [Microsoft Corporation, 5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00), C:2008-11-27 16:05 M:2004-07-09 04:27] C:\WINDOWS\System32\DCIMAN32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Components\UserExperience\UserExperience.dll [Thunder Networking Technologies,LTD, 1, 0, 3, 5, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\Tips\XLIPC.DLL [Thunder Networking Technologies,LTD, 1, 0, 0, 2, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsXlCom.dll [版权所有 (C) 2007, 1, 0, 0, 30, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\ResWorker\MediaWorker.dll [Thunder Networking Technologies,LTD, 1, 2, 0, 22, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\WMVCore.DLL [Microsoft Corporation, 10.00.00.3646 built by: DNSRV(bld4act), C:2004-08-11 01:39 M:2004-08-11 01:39] C:\WINDOWS\System32\WMASF.DLL [Microsoft Corporation, 10.00.00.3646 built by: DNSRV(bld4act), C:2004-08-11 00:41 M:2004-08-11 00:41] C:\WINDOWS\System32\AVIFIL32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\MSVFW32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Components\DownloadStat\DownloadStat.dll [Thunder Networking Technologies,LTD, 1, 4, 1, 6, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin17.dll [(Verified)Thunder Networking Technologies,LTD, 3, 1, 5, 78, C:2008-10-12 14:51 M:2008-09-19 16:30] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.10.0_x-ww_712befd8\gdiplus.dll [Microsoft Corporation, 5.1.3101.0 (xpsp1.020828-1920), C:2003-10-20 11:14 M:2002-10-07 20:00] C:\WINDOWS\System32\wmploc.dll [Microsoft Corporation, 10.00.00.3646, C:2004-08-11 21:16 M:2004-08-11 21:16] C:\Program Files\Thunder Network\Thunder\Program\bd.dll [Thunder Networking Technologies,LTD, 1, 0, 2, 19, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\imgutil.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MPRAPI.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ACTIVEDS.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\adsldpc.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\SAMLIB.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\pngfilt.dll [Microsoft Corporation, 6.00.2800.1505, C:2008-11-27 16:04 M:2005-04-27 10:53] [PID: 1432 / Bluewater] C:\Program Files\Thunder Network\Thunder\Components\InMedia\ThunderMinisite.exe [Thunder Networking Technologies,LTD, 1, 0, 5, 20, C:2008-10-12 14:51 M:2008-08-12 17:41] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\MSVCRT.DLL [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MSVCP60.dll [Microsoft Corporation, 6.00.8972.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Msctf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\System32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\System32\SXS.DLL [Microsoft Corporation, 5.1.2600.1579 (xpsp2.040720-1705), C:2008-11-27 16:04 M:2004-08-21 05:53] C:\WINDOWS\System32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\Program Files\Thunder Network\Thunder\Components\InMedia\XLIPC.DLL [Thunder Networking Technologies,LTD, 1, 0, 0, 2, C:2008-10-12 14:51 M:2008-09-23 17:39] C:\WINDOWS\System32\B6E23E89.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\29EA67E0.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\2EF0D734.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\D9C002DD.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\755D0ED0.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\F8E07BB2.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\201476D0.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\4FBFD5A4.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\950D1600.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:27] C:\WINDOWS\System32\08223B03.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\4D023DE9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\93DEE065.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\56BC86C7.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\122B901E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\FFAE967F.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\DA63E650.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\133AEAC9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\A1A6BC2E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\5934EA2B.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\DFB3DAC5.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\shdoclc.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\mlang.dll [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wsock32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\wshtcpip.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\RASAPI32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rasman.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\TAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\rtutils.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINMM.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\winrnr.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\WLDAP32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msimtf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\MSLS31.DLL [Microsoft Corporation, 3.10.349.0, C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\Macromed\Flash\Flash9f.ocx [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\wdmaud.drv [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msacm32.drv [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\MSACM32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\midimap.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\schannel.dll [Microsoft Corporation, 5.1.2600.1347 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin17.dll [(Verified)Thunder Networking Technologies,LTD, 3, 1, 5, 78, C:2008-10-12 14:51 M:2008-09-19 16:30] C:\WINDOWS\System32\MSVFW32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.10.0_x-ww_712befd8\gdiplus.dll [Microsoft Corporation, 5.1.3101.0 (xpsp1.020828-1920), C:2003-10-20 11:14 M:2002-10-07 20:00] C:\WINDOWS\System32\wmploc.dll [Microsoft Corporation, 10.00.00.3646, C:2004-08-11 21:16 M:2004-08-11 21:16] C:\WINDOWS\System32\imgutil.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\ATL.DLL [Microsoft Corporation, 3.00.9435, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\ddrawex.dll [Microsoft Corporation, 5.3.0000000.900 built by: DIRECTX, C:2008-11-27 16:05 M:2002-12-12 00:14] C:\WINDOWS\System32\DDRAW.dll [Microsoft Corporation, 5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00), C:2008-11-27 16:05 M:2004-07-09 04:27] C:\WINDOWS\System32\DCIMAN32.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:05 M:2002-10-07 12:00] [PID: 1116 / Bluewater] F:\kill\SysLog-0804\SysLog-0804\SysLog.exe [N/A, C:2008-12-07 19:28 M:2008-08-04 21:19] C:\WINDOWS\System32\ntdll.dll [Microsoft Corporation, 5.1.2600.1217 (xpsp2.030429-2131), C:2008-11-27 16:04 M:2003-05-02 07:57] C:\WINDOWS\system32\SHLWAPI.dll [Microsoft Corporation, 6.00.2800.1740 (xpsp2.050831-1533), C:2008-11-27 16:04 M:2005-08-31 18:51] C:\WINDOWS\system32\ADVAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\RPCRT4.dll [Microsoft Corporation, 5.1.2600.1361 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-06 10:17] C:\WINDOWS\system32\USER32.dll [Microsoft Corporation, 5.1.2600.1634 (xpsp2.050301-1526), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\system32\msvcrt.dll [Microsoft Corporation, 7.0.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\VERSION.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINTRUST.dll [Microsoft Corporation, 5.131.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\ole32.dll [Microsoft Corporation, 5.1.2600.1720 (xpsp2.050722-1526), C:2008-11-27 16:04 M:2005-07-26 12:38] C:\WINDOWS\system32\CRYPT32.dll [Microsoft Corporation, 5.131.2600.1123 (xpsp2.020921-0842), C:2008-11-27 16:05 M:2002-09-24 06:10] C:\WINDOWS\system32\MSASN1.dll [Microsoft Corporation, 5.1.2600.1362 (xpsp2.040109-1800), C:2008-11-27 16:04 M:2004-03-30 09:50] C:\WINDOWS\system32\IMAGEHLP.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WTSAPI32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WINSTA.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\PSAPI.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\WS2HELP.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\SHELL32.dll [Microsoft Corporation, 6.00.2800.1873 (xpsp2.060713-0016), C:2008-11-27 16:04 M:2006-07-13 21:50] C:\WINDOWS\System32\WINSPOOL.DRV [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oledlg.dll [Microsoft Corporation, 1.0 (XPClient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] C:\WINDOWS\System32\OLEPRO32.DLL [Microsoft Corporation, 5.0.5014, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\OLEAUT32.dll [Microsoft Corporation, 3.50.5016.0, C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\IMM32.DLL [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\LPK.DLL [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\USP10.dll [Microsoft Corporation, 1.0409.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\HBmhly.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\msctfime.ime [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\Msctf.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\B6E23E89.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:29] C:\WINDOWS\System32\rsaenh.dll [Microsoft Corporation, 5.1.2600.1029 (xpsp1.020426-1800), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\29EA67E0.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\2EF0D734.dll [N/A, C:2008-12-04 12:56 M:2008-12-07 13:28] C:\WINDOWS\System32\D9C002DD.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\755D0ED0.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\F8E07BB2.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\201476D0.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:28] C:\WINDOWS\System32\4FBFD5A4.dll [N/A, C:2008-12-07 13:28 M:2008-12-07 13:28] C:\WINDOWS\System32\950D1600.dll [N/A, C:2008-12-04 12:55 M:2008-12-07 13:27] C:\WINDOWS\System32\08223B03.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\4D023DE9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\93DEE065.dll [N/A, C:2008-12-04 12:56 M:2008-12-04 12:56] C:\WINDOWS\System32\56BC86C7.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\122B901E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\FFAE967F.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:56] C:\WINDOWS\System32\DA63E650.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\133AEAC9.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\A1A6BC2E.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\5934EA2B.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\DFB3DAC5.dll [N/A, C:2008-12-04 12:55 M:2008-12-04 12:55] C:\WINDOWS\System32\mswsock.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\oleadp.dll [Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2005-03-03 02:21] C:\WINDOWS\System32\SETUPAPI.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\CLBCATQ.DLL [Microsoft Corporation, 2001.12.4414.62, C:2008-11-27 16:05 M:2005-07-26 12:38] C:\WINDOWS\System32\COMRes.dll [Microsoft Corporation, 2001.12.4414.42, C:2008-11-27 16:05 M:2002-10-07 12:00] C:\WINDOWS\System32\mstask.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 20:00] C:\WINDOWS\system32\MPR.dll [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\System32\Secur32.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] C:\WINDOWS\system32\USERENV.dll [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920), C:2008-11-27 16:04 M:2002-10-07 12:00] ======================================== File Link [.txt] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [.log] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [.ini] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [.hlp] <%SystemRoot%\System32\winhlp32.exe %1> [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] [.vbs] <%SystemRoot%\System32\WScript.exe "%1" %*> [Microsoft Corporation, 5.6.0.6626, C:2008-11-27 16:04 M:2002-10-07 12:00] [.js] <%SystemRoot%\System32\WScript.exe "%1" %*> [Microsoft Corporation, 5.6.0.6626, C:2008-11-27 16:04 M:2002-10-07 12:00] [.chm] <"hh.exe" %1> [Microsoft Corporation, 4.74.8875, C:2000-06-08 17:00 M:2000-06-08 17:00] ======================================== Autorun ======================================== Winsock Providers MSAFD Tcpip [TCP/IP] <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD Tcpip [UDP/IP] <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD Tcpip [RAW/IP] <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] RSVP UDP Service Provider <%SystemRoot%\system32\rsvpsp.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] RSVP TCP Service Provider <%SystemRoot%\system32\rsvpsp.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2002-10-07 12:00 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{FF85530F-9A85-4EE3-B47C-B3F8E35822EE}] SEQPACKET 3 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{FF85530F-9A85-4EE3-B47C-B3F8E35822EE}] DATAGRAM 3 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{B3A03C58-91E9-4729-B8D3-9E3E6CF6EBCA}] SEQPACKET 0 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{B3A03C58-91E9-4729-B8D3-9E3E6CF6EBCA}] DATAGRAM 0 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{AAA92436-455F-446A-95BD-60B18C155407}] SEQPACKET 1 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{AAA92436-455F-446A-95BD-60B18C155407}] DATAGRAM 1 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{74A2C430-8C73-47E2-A5C8-531F870A2F2F}] SEQPACKET 2 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{74A2C430-8C73-47E2-A5C8-531F870A2F2F}] DATAGRAM 2 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{3C899802-6E98-4534-803D-4C5E8CD20714}] SEQPACKET 4 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{3C899802-6E98-4534-803D-4C5E8CD20714}] DATAGRAM 4 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{739D92A6-F152-4099-AA21-7BE1AC22B0A4}] SEQPACKET 5 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{739D92A6-F152-4099-AA21-7BE1AC22B0A4}] DATAGRAM 5 <%SystemRoot%\system32\mswsock.dll> [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-11-27 16:04 M:2002-10-07 12:00] [/CODE]