[CODE]

2008-12-15,17:56:28

System Repair Engineer 2.7.0.1210
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Professional Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描
    计划任务
    API HOOK
    隐藏进程


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <H/PC Connection Agent><"C:\Program Files\Microsoft ActiveSync\wcescomm.exe">  [Microsoft Corporation]
    <updateMgr><"C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_1_0 -reboot 1>  [File is missing]
    <internat.exe><internat.exe>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <WheelMouse><C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe>  [A4Tech Co.,Ltd.]
    <SSC_UserPrompt><C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe>  [(Verified)Symantec Corporation]
    <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [(Verified)Symantec Corporation]
    <vptray><C:\PROGRA~1\SYMANT~1\VPTray.exe>  [(Verified)Symantec Corporation]
    <NvCplDaemon><RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup>  [NVIDIA Corporation]
    <NvMediaCenter><RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit>  [NVIDIA Corporation]
    <Acronis True Image Monitor><"C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe">  [Acronis]
    <Acronis Scheduler2 Service><"C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe">  [Acronis]
    <Logitech Utility><Logi_MwX.Exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  []
    <Google IME Autoupdater><"C:\Program Files\Google\Google Pinyin\GooglePinyinDaemon.exe">  [(Verified)Google Inc]
    <Synchronization Manager><mobsync.exe /logon>  [(Verified)Microsoft Windows 2000 Publisher]
    <OSSelectorReinstall><C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe>  []
    <runeip><"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <IgfxTray><C:\WINNT\system32\igfxtray.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <HotKeysCmds><C:\WINNT\system32\hkcmd.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <Persistence><C:\WINNT\system32\igfxpers.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <ms08_067_patch><"C:\WINNT\system32\nap32.exe" /run>  [Beijing Rising Information Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows 2000 Publisher]
    <Userinit><C:\WINNT\system32\userinit.exe,>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><kmon.dll>  [(Verified)Beijing Rising Information Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <Network.ConnectionTray><C:\WINNT\system32\NETSHELL.dll>  [(Verified)Microsoft Windows 2000 Publisher]
    <WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Windows Component Publisher]
    <SysTray><stobject.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ActiveSync]
    <WinlogonNotify: ActiveSync><WcesWlgn.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    <WinlogonNotify: igfxcui><igfxdev.dll>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
    <WinlogonNotify: NavLogon><C:\WINNT\system32\NavLogon.dll>  [(Verified)Symantec Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif]
    <WinlogonNotify: wzcnotif><wzcdlg.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Windows Media Player><C:\WINNT\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer 访问><"C:\WINNT\system32\shmgrate.exe" OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express 访问><"C:\WINNT\system32\shmgrate.exe" OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6A5110B5-E14B-4268-A065-EF89FF33C325}]
    <EnableRevocation><regsvr32.exe /s /n /i:"S 2 true 3 true 4 true 5 true 6 true 7 true" initpki.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\wmp.inf,PerUserStub>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <Address Book 5><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <N/A><C:\WINNT\system32\Rundll32.exe C:\WINNT\system32\mscories.dll,Install>  [(Verified)Microsoft Corporation]

==================================
启动文件夹
[Adobe Reader Speed Launch]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk --> C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [Adobe Systems Incorporated]><N>

==================================
服务
[Acronis Scheduler2 Service / AcrSch2Svc][Running/Auto Start]
  <"C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe"><Acronis>
[AnmChannelFactoryServer / AnmChannelFactoryServer][Stopped/Manual Start]
  <C:\PROGRA~1\DIALOGIC\BIN\ANMCHANNELFACTORYSERVER.exe><Dialogic Corporation>
[AnmChannelServer / AnmChannelServer][Stopped/Manual Start]
  <C:\PROGRA~1\DIALOGIC\BIN\ANMCHANNELSERVER.exe><Dialogic Corporation>
[AnmLoggerServer / AnmLoggerServer][Stopped/Manual Start]
  <C:\PROGRA~1\DIALOGIC\BIN\ANMLOGGERSERVER.exe><Dialogic Corporation>
[AnmSupplierServer / AnmSupplierServer][Stopped/Manual Start]
  <C:\PROGRA~1\DIALOGIC\BIN\ANMSUPPLIERSERVER.exe><Dialogic Corporation>
[Autodesk Licensing Service / Autodesk Licensing Service][Running/Auto Start]
  <"C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe"><Autodesk>
[Symantec Event Manager / ccEvtMgr][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Contrl Center of Storm Media / ccosm][Running/Auto Start]
  <C:\Program Files\StormII\stormliv.exe /asservice><北京暴风网际科技有限公司>
[Symantec Password Validation / ccPwdSvc][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr][Running/Auto Start]
  <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[Cmb WebProtect Support / CMBWPS][Running/Auto Start]
  <C:\Program Files\CMBCHINA\WebProtect\WPService.exe /start><China Merchants Bank>
[CT Bus Broker / CTBusBroker][Stopped/Manual Start]
  <C:\PROGRA~1\Dialogic\bin\ctbbserv.exe><Dialogic Corporation>
[Symantec AntiVirus Definition Watcher / DefWatch][Running/Auto Start]
  <"C:\Program Files\Symantec AntiVirus\DefWatch.exe"><Symantec Corporation>
[Dialogic / Dialogic][Stopped/Manual Start]
  <C:\PROGRA~1\Dialogic\bin\dlgc_srv.exe><Dialogic Corporation>
[Dialogic SS7 Service / DlgcS7Srv][Stopped/Manual Start]
  <C:\PROGRA~1\Dialogic\bin\DlgcS7Srv.exe><Intel Corporation>
[IPLink H.323 Stack / dlgH323][Stopped/Manual Start]
  <C:\PROGRA~1\Dialogic\bin\dlgH323.exe><>
[DM3Config / DM3Config][Stopped/Manual Start]
  <C:\PROGRA~1\Dialogic\bin\DM3Config.exe><Dialogic Corporation>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Persits Software Email Agent / EmailAgent][Stopped/Manual Start]
  <C:\PROGRA~1\PERSIT~1\AspEmail\EMAILA~1\BIN\EMAILA~1.EXE><Persits Software, Inc.>
[Google Updater Service / gusvc][Stopped/Manual Start]
  <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
[Envox CT ADE?ICR Service / ICRService][Stopped/Manual Start]
  <C:\Program Files\Envox\CT ADE\Common\Bin\ICRService.exe><Envox Group AB>
[Kingsoft Basic Service / kaccore][Running/Auto Start]
  <"C:\Program Files\Kingsoft\KAC\Service\kaccore.exe"><Kingsoft Corporation>
[Machine Debug Manager / MDM][Running/Auto Start]
  <"C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe"><Microsoft Corporation>
[mental ray 3.5 Satellite (32-bit) / mi-raysat_3dsmax9_32][Running/Auto Start]
  <"C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe"><N/A>
[MSSQLSERVER / MSSQLSERVER][Stopped/Manual Start]
  <C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  <C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[NVIDIA Display Driver Service / NVSvc][Stopped/Auto Start]
  <C:\WINNT\system32\nvsvc32.exe><NVIDIA Corporation>
[PSSDIAG / PSSDIAG][Stopped/Manual Start]
  <C:\pssdiag\Bin\pssdiag.exe><Microsoft>
[SavRoam / SavRoam][Stopped/Manual Start]
  <"C:\Program Files\Symantec AntiVirus\SavRoam.exe"><symantec>
[Symantec Network Drivers Service / SNDSrvc][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[SQLSERVERAGENT / SQLSERVERAGENT][Stopped/Manual Start]
  <C:\Program Files\Microsoft SQL Server\MSSQL\binn\sqlagent.exe -i MSSQLSERVER><Microsoft Corporation>
[Symantec AntiVirus / Symantec AntiVirus][Running/Auto Start]
  <"C:\Program Files\Symantec AntiVirus\Rtvscan.exe"><Symantec Corporation>
[SymWMI Service / SymWSC][Stopped/Auto Start]
  <C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe><Symantec Corporation>
[User Profile Hive Cleanup / UPHClean][Running/Auto Start]
  <C:\Program Files\UPHClean\uphclean.exe><Microsoft Corporation>
[Visual Studio Analyzer RPC bridge / Visual Studio Analyzer RPC bridge][Stopped/Manual Start]
  <C:\Program Files\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe><Microsoft Corporation>
[Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start]
  <C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\mspmsnsv.dll><Microsoft Corporation>

==================================
驱动程序
[360AntiArp / 360AntiArp][Running/System Start]
  <\??\C:\WINNT\system32\drivers\360AntiArp.sys><360安全中心>
[Service for WDM 3D Audio Driver / ALCXSENS][Stopped/Manual Start]
  <system32\drivers\ALCXSENS.SYS><Sensaura Ltd>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[A4Tech PS/2 Port Mouse Driver / Amps2prt][Stopped/Manual Start]
  <system32\DRIVERS\Amps2prt.sys><A4Tech Co.,Ltd.>
[Broadcom NetXtreme Gigabit Ethernet / b57w2k][Stopped/Manual Start]
  <system32\DRIVERS\b57w2k.sys><Broadcom Corporation>
[CMB8100 / CMB8100][Running/Auto Start]
  <\??\C:\WINNT\system32\Drivers\CertClient.dat><N/A>
[CMBProtector / CMBProtector][Running/Auto Start]
  <\??\C:\WINNT\system32\Drivers\CMBProtector.dat><N/A>
[Dialogic Antares Protocol Driver / DlgcAntares][Stopped/Manual Start]
  <system32\DRIVERS\DlgcAntares.sys><Dialogic, an Intel Company>
[dlgcmcd / dlgcmcd][Stopped/Manual Start]
  <\??\C:\WINNT\system32\Drivers\dlgcmcd.sys><Dialogic Corporation>
[dlgcmpd / dlgcmpd][Stopped/Manual Start]
  <\??\C:\WINNT\system32\Drivers\dlgcmpd.sys><Dialogic Corporation>
[DialogicUPGRADEDRV / dlgcupgrade][Stopped/Manual Start]
  <\??\C:\WINNT\system32\Drivers\dlgcupgrade.sys><Dialogic Corporation>
[dmboot / dmboot][Stopped/Disabled]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[Symantec Eraser Control driver / eeCtrl][Running/System Start]
  <\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys><Symantec Corporation>
[Dialogic FW Download Driver / Gloaddrv][Stopped/Manual Start]
  <\??\C:\WINNT\system32\Drivers\Gloaddrv.sys><Dialogic Corporation>
[HOSTNT / HOSTNT][Running/Auto Start]
  <\??\C:\WINNT\system32\drivers\hostnt.sys><N/A>
[ialm / ialm][Running/Manual Start]
  <system32\DRIVERS\igxpmp32.sys><Intel Corporation>
[KAVBootC / KAVBootC][Running/Boot Start]
  <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
[KAVSafe / KAVSafe][Running/Auto Start]
  <\??\C:\WINNT\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
[Logitech PS/2 Mouse Filter Driver / L8042PR2][Running/Manual Start]
  <System32\Drivers\l8042pr2.sys><Logitech, Inc.>
[Logitech HID/USB Mouse Filter Driver / LHidFlt2][Running/Manual Start]
  <system32\DRIVERS\LHidFlt2.Sys><Logitech, Inc.>
[Logitech USB Receiver device driver / LHidUsb][Running/Manual Start]
  <System32\Drivers\LHidUsb.Sys><Logitech, Inc.>
[Logitech Mouse Class Filter Driver / LMouFlt2][Running/Manual Start]
  <System32\Drivers\LMouFlt2.sys><Logitech, Inc.>
[MHDRV / MHDRV][Running/Auto Start]
  <\??\C:\WINNT\system32\drivers\mhdrv.sys><Rainbow China Co., Ltd.>
[NAVENG / NAVENG][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20081214.003\naveng.sys><Symantec Corporation>
[NAVEX15 / NAVEX15][Running/Manual Start]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20081214.003\navex15.sys><Symantec Corporation>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\C:\Program Files\Tencent\qq\TMDlls\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkcusb / npkcusb][Running/Manual Start]
  <\??\C:\Program Files\Tencent\qq\TMDlls\npkcusb.sys><INCA Internet Co., Ltd.>
[npkycryp / npkycryp][Stopped/Manual Start]
  <\??\C:\Program Files\Tencent\qq\TMDlls\npkycryp.sys><N/A>
[nv / nv][Stopped/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[nv4 / nv4][Stopped/Manual Start]
  <System32\DRIVERS\nv4.sys><NVIDIA Corporation>
[DDK PACKET Protocol / Packet][Stopped/Manual Start]
  <system32\DRIVERS\ProtoDrv.sys><360安全中心>
[Padus ASPI Shell / pfc][Stopped/Manual Start]
  <system32\drivers\pfc.sys><Padus, Inc.>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RCMHDOG / RCMHDOG][Running/Auto Start]
  <\??\C:\WINNT\system32\drivers\rcmhdog.sys><Rainbow China Co., Ltd.>
[ROCKEYNT / ROCKEYNT][Running/Auto Start]
  <\??\C:\WINNT\system32\drivers\Rockeynt.sys><FeiTian Tech Co.,Ltd>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.>
[Realtek RTL8139-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
  <\??\C:\WINNT\system32\drivers\SafeBoxKrnl.sys><360安全中心>
[SAVRT / SAVRT][Running/System Start]
  <\??\C:\Program Files\Symantec AntiVirus\savrt.sys><Symantec Corporation>
[SAVRTPEL / SAVRTPEL][Running/Auto Start]
  <\??\C:\Program Files\Symantec AntiVirus\Savrtpel.sys><Symantec Corporation>
[SENSE3 / SENSE3][Running/Auto Start]
  <system32\drivers\sense3.sys><Beijing Senselock>
[Acronis Snapshots Manager / snapman][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\snapman.sys><Acronis>
[SNIFFER Protocol Driver / Sniffer][Running/Auto Start]
  <system32\DRIVERS\sniffer.sys><N/A>
[Superk5 / Superk5][Running/Auto Start]
  <\SystemRoot\System32\drivers\superk5.sys><Microsoft Corporation>
[SymEvent / SymEvent][Running/Manual Start]
  <\??\C:\Program Files\Symantec\SYMEVENT.SYS><Symantec Corporation>
[SYMREDRV / SYMREDRV][Running/Manual Start]
  <\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
[SYMTDI / SYMTDI][Running/System Start]
  <\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
[Acronis TrueImage FS Filter / tifsfilter][Running/Auto Start]
  <system32\DRIVERS\tifsfilt.sys><Acronis>
[Acronis TrueImage Backup Archive Explorer / timounter][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\timntr.sys><Acronis>
[Rainbow China UDA Driver / UDA][Stopped/Manual Start]
  <System32\Drivers\rcudawdm.sys><Rainbow China Co,. Ltd.>
[Senselock USB Lock driver / USBLOCK][Stopped/Auto Start]
  <System32\Drivers\usblock.sys><Beijing Senselock>
[VMware Virtual Ethernet Adapter Driver / VMnetAdapter][Stopped/Manual Start]
  <system32\DRIVERS\vmnetadapter.sys><VMware, Inc.>
[Virtual PC Application Services / VPCAppSv][Running/Auto Start]
  <system32\DRIVERS\VPCAppSv.sys><Connectix Corporation>
[Performance Tools Driver / VSPerfDrv][Stopped/Manual Start]
  <\??\C:\Program Files\Microsoft Visual Studio 8\Team Tools\Performance Tools\VSPerfDrv.sys><Microsoft Corporation>

==================================
浏览器加载项
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[Kingsoft Trojan Webshield]
  {4E8A5278-C04E-4FE3-BF78-8A7CCD6EF333} <C:\Program Files\baidu\safecenter\iebuddy.dll, (Signed) Kingsoft Corporation>
[WebProtect]
  {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B} <C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll, (Signed) China Merchants Bank>
[Microsoft Web Test Recorder Helper]
  {62355041-605D-4469-84FD-5D66ED67A7E3} <C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO.dll, Microsoft Corporation>
[IcbcBho Class]
  {90760F64-1931-4AAC-8E2E-AB39AAC071E1} <C:\Program Files\中国工商银行\工行IE浏览器安全插件\IcbcToolBar.dll, 中国工商银行>
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINNT\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[CBBrowerBuddy Class]
  {A412E581-59B2-485E-834F-C5F0C0268C79} <C:\Program Files\Kingsoft\PowerWord Lite\CBEBand.dll, (Signed) Copyright (c) Kingsoft Corporation Limited. All rights reserved.>
[Google Toolbar Helper]
  {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, (Signed) Google Inc.>
[Google Toolbar Notifier BHO]
  {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll, (Signed) Google Inc.>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, (Signed) 360.CN>
[SafeCenterEyeOnIE Class]
  {D2DA0BDA-D20F-4B0B-98D4-8BEAAE175E6D} <C:\Program Files\baidu\safecenter\safecenterstatus.dll, (Signed) Kingsoft Corporation>
[IEBuddyExtControl Class]
  {3AECD3C1-7085-4731-96DC-47B6CF7EF749} <C:\Program Files\baidu\safecenter\iebuddyext.dll, (Signed) Kingsoft Corporation>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[CBBrowerBuddy Class]
  {A412E581-59B2-485E-834F-C5F0C0268C79} <C:\Program Files\Kingsoft\PowerWord Lite\CBEBand.dll, (Signed) Copyright (c) Kingsoft Corporation Limited. All rights reserved.>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, >
[Fiddler2]
  {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} <"C:\Program Files\Fiddler2\Fiddler.exe", N/A>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, (Signed) Microsoft Corporation>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[&Google]
  {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, (Signed) Google Inc.>
[工行工具栏]
  {DBAC56F9-1623-425F-BC03-EB2602F423A0} <C:\Program Files\中国工商银行\工行IE浏览器安全插件\IcbcToolBar.dll, 中国工商银行>
[Edit Class]
  {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} <C:\WINNT\system32\CMBEdit.dll, >
[CKAVWebScan Object]
  {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} <C:\WINNT\system32\Kaspersky Lab\Kaspersky Online Scanner Pro\kavwebscan.dll, Kaspersky Lab>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINNT\system32\LegitCheckControl.DLL, (Signed) Microsoft Corporation>
[EditCtrl Class]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINNT\system32\aliedit\aliedit.dll, (Signed) >
[Windows Live Safety Center Base Module]
  {5ED80217-570B-4DA9-BF44-BE107C0EC166} <C:\WINNT\Downloaded Program Files\wlscBase.dll, (Signed) Microsoft Corporation>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINNT\system32\wuweb.dll, (Signed) Microsoft Corporation>
[MUWebControl Class]
  {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINNT\system32\muweb.dll, (Signed) Microsoft Corporation>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINNT\DOWNLO~1\INPUTC~1.DLL, >
[RavOnline Class]
  {9FAFB576-6933-4CCC-AB3D-B988EC43D04E} <C:\WINNT\Downloaded Program Files\RavOLCtl.dll, Beijing Rising Information Technology Co., Ltd.>
[UploadFilePartition Class]
  {A877BA28-1F7E-4876-B299-50B3199A1A5D} <C:\WINNT\system32\TXGYMailActiveX.dll, (Signed) Tencent Inc.>
[ScreenCapture Class]
  {BFB79EE1-04AE-4D4A-B85E-27EE5F30C095} <C:\WINNT\system32\TXGYMailActiveX.dll, (Signed) Tencent Inc.>
[Tencent Safety Online Base Module]
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINNT\DOWNLO~1\TSOBase.ocx, (Signed) Tencent Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash10a.ocx, (Signed) Adobe Systems, Inc.>
[KUpdateObj2 Class]
  {D82303B7-A754-4DCB-8AFC-8CF99435AACE} <C:\WINNT\system32\KingSoft\KOS\UpdateOcx2.dll, (Signed) Kingsoft Corporation>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINNT\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[IFlashGetNetscapeEx Class]
  {116BA71C-8187-4F15-9A1F-C9D6289155D1} <C:\Documents and Settings\All Users\Application Data\FlashGetBHO\FlashGetBHO.dll, (Signed) FlashGet>
[WangWangObj Class]
  {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} <C:\Program Files\Alisoft\WangWang\WangWangX6.dll, (Signed) 阿里巴巴软件(上海)有限公司>
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, (Signed) 360.cn>
[]
  {FB5DA724-162B-11D3-8B9B-AA70B4B0B525} <, >
[使用快车(Flas&hGet)下载]
  <C:\Program Files\FlashGet Network\Flashget\GetUrl.htm, N/A>
[使用快车(Flash&Get)下载全部链接]
  <C:\Program Files\FlashGet Network\Flashget\GetAllUrl.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[在Foxmail中添加该RSS频道/频道组]
  <res://C:\WINNT\system32\fmrsslink.dll/201, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>

==================================
正在运行的进程
[PID: 260][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6601]
[PID: 288][\??\C:\WINNT\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6601]
[PID: 284][\??\C:\WINNT\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6997]
    [C:\WINNT\system32\ATL.DLL]  [Microsoft Corporation, 3.00.9782]
    [C:\WINNT\system32\NavLogon.dll]  [Symantec Corporation, 9.0.0.338]
[PID: 336][C:\WINNT\system32\services.exe]  [(Verified) Microsoft Corporation, 5.00.2195.7035]
    [C:\WINNT\system32\dmserver.dll]  [VERITAS Software Corp., 2195.6605.297.3]
[PID: 348][C:\WINNT\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.00.2195.7011]
[PID: 584][C:\WINNT\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe]  [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400)]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 596][C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe]  [Autodesk, 2.70.000]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 636][C:\Program Files\CMBCHINA\WebProtect\WPService.exe]  [China Merchants Bank, 1, 0, 0, 1]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\CMBCHINA\WebProtect\WebProtectPlus.dll]  [China Merchants Bank, 1, 0, 0, 1]
[PID: 644][C:\Program Files\Symantec AntiVirus\DefWatch.exe]  [Symantec Corporation, 9.0.0.338]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 664][C:\WINNT\system32\hidserv.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 692][C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe]  [N/A, ]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 756][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\nap32.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 1]
[PID: 792][C:\WINNT\system32\stisvc.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6656]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 840][C:\Program Files\Symantec AntiVirus\Rtvscan.exe]  [Symantec Corporation, 9.0.0.338]
    [C:\WINNT\system32\CBA.DLL]  [Intel? Corporation, 6.12.0.112 E]
    [C:\WINNT\system32\MsgSys.dll]  [Intel? Corporation, 6.12.0.112 E]
    [C:\WINNT\system32\NTS.dll]  [Intel? Corporation, 6.12.0.112 E]
    [C:\WINNT\system32\PDS.DLL]  [Intel? Corporation, 6.12.0.112 E]
    [C:\Program Files\Symantec AntiVirus\NAVLU.dll]  [Symantec Corporation, 9.0.0.338]
    [C:\WINNT\system32\MFC42.DLL]  [Microsoft Corporation, 6.00.9782.0]
    [C:\Program Files\Symantec AntiVirus\I2ldvp3.dll]  [Symantec Corporation, 9.0.0.338]
    [C:\Program Files\Symantec AntiVirus\ecmldr32.DLL]  [Symantec Corp., 1.1.0.3]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  [Symantec Corporation, 9.3.0.28]
    [C:\Program Files\Symantec AntiVirus\NAVNTUTL.DLL]  [Symantec Corporation, 9.0.0.338]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20081214.003\ecmsvr32.dll]  [Symantec Corporation, 81.3.0.13]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20081214.003\NAVEX32a.DLL]  [Symantec Corporation, 20081.3.0.17]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20081214.003\NAVENG32.DLL]  [Symantec Corporation, 20081.3.0.17]
    [C:\Program Files\Symantec AntiVirus\IMail.dll]  [Symantec Corporation, 9.0.0.338]
    [C:\Program Files\Symantec AntiVirus\NotesExt.dll]  [Symantec Corporation, 9.0.0.338]
    [C:\Program Files\Symantec AntiVirus\vpmsece.dll]  [Symantec Corporation, 9.0.0.338]
    [C:\Program Files\Common Files\Symantec Shared\SSC\scandlgs.dll]  [Symantec Corporation, 9.0.0.338]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\Program Files\Symantec AntiVirus\DecSDK.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2ID.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2ZIP.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2SS.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2GZIP.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2CAB.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2LHA.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2ARJ.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2TNEF.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2LZ.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2AMG.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2TAR.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2RTF.dll]  [Symantec Corporation, 3.02.11.32]
    [C:\Program Files\Symantec AntiVirus\Dec2Text.dll]  [Symantec Corporation, 3.02.11.32]
[PID: 896][C:\WINNT\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\System32\ATL.DLL]  [Microsoft Corporation, 3.00.9782]
    [C:\WINNT\system32\nap32.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 1]
[PID: 924][C:\Program Files\UPHClean\uphclean.exe]  [Microsoft Corporation, 1.6.30.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 944][C:\WINNT\System32\WBEM\WinMgmt.exe]  [(Verified) Microsoft Corporation, 1.50.1085.0100]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 956][C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe]  [Acronis, 1,0,0,216]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 980][C:\Program Files\StormII\stormliv.exe]  [北京暴风网际科技有限公司, 3, 8, 3, 15]
    [C:\Program Files\StormII\MSVCP60.dll]  [Microsoft Corporation, 6.02.3104.0]
    [C:\WINNT\system32\MFC42.DLL]  [Microsoft Corporation, 6.00.9782.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 1004][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe]  [Symantec Corporation, 2.2.0.577]
    [C:\WINNT\system32\MSVCP70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 2.2.0.577]
[PID: 1056][C:\Program Files\Kingsoft\KAC\Service\kaccore.exe]  [Kingsoft Corporation, 2008,12,03,369]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Kingsoft\KAC\Service\errorreport.dll]  [Kingsoft Corporation, 2008,07,23,168]
    [C:\Program Files\Kingsoft\KAC\Service\dbghelp.dll]  [Microsoft Corporation, 6.5.0003.7 (vbl_core_fbrel(jshay).050527-1915)]
    [C:\Program Files\Kingsoft\KAC\Service\corehelper.dll]  [Kingsoft Corporation, 2008,10,20,303]
    [C:\Program Files\baidu\SafeCenter\productproxy.dll]  [N/A, ]
    [C:\Program Files\baidu\SafeCenter\kacc.dll]  [Kingsoft Corporation, 1, 0, 0, 1]
    [C:\Program Files\baidu\SafeCenter\infoc.dll]  [Kingsoft Corporation, 1,0,0,159]
[PID: 1120][C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe]  [Microsoft Corporation, 7.10.6030]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Common Files\Microsoft Shared\VS7Debug\2052\mdmui.dll]  [Microsoft Corporation, 7.10.6030]
    [C:\Program Files\Common Files\Microsoft Shared\VS7Debug\csm.dll]  [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
    [C:\Program Files\Common Files\Microsoft Shared\VS7Debug\msdbg2.dll]  [Microsoft Corporation, 8.0.50727.42 (RTM.050727-4200)]
[PID: 1264][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe]  [Symantec Corporation, 2.2.0.577]
    [C:\WINNT\system32\MSVCP70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 2.2.0.577]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL]  [Symantec Corporation, 2.2.0.577]
[PID: 1176][C:\WINNT\system32\inetsrv\inetinfo.exe]  [(Verified) Microsoft Corporation, 5.00.0984]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 2304][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system32\nap32.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 1]
[PID: 1512][C:\WINNT\Explorer.EXE]  [(Verified) Microsoft Corporation, 5.00.3700.6690]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\WINNT\system32\ATL.DLL]  [Microsoft Corporation, 3.00.9782]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
    [D:\RTX\BQQHook.dll]  [N/A, ]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll]  [Symantec Corporation, 9.0.0.338]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.9.2006121800]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO.dll]  [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 2, 0, 1007]
    [C:\Program Files\Haali\MatroskaSplitter\mmfinfo.dll]  [N/A, ]
    [C:\Program Files\Haali\MatroskaSplitter\mkunicode.dll]  [N/A, ]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\Program Files\Tencent\qq\TMDlls\qdshm.dll]  [, 1, 0, 1, 2]
[PID: 2380][C:\WINNT\system32\conime.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6655]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 1520][C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe]  [A4Tech Co.,Ltd., 7.42.0.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 408][C:\Program Files\Common Files\Symantec Shared\ccApp.exe]  [Symantec Corporation, 2.2.0.577]
    [C:\WINNT\system32\MSVCP70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 2.2.0.577]
    [C:\Program Files\Symantec\LiveUpdate\ProductRegCom.DLL]  [Symantec Corporation, 2.0.39.0]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\Program Files\Symantec\LiveUpdate\LuComServerPS.DLL]  [Symantec Corporation, 2.0.39.0]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL]  [Symantec Corporation, 2.2.0.577]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL]  [Symantec Corporation, 2.2.0.577]
    [C:\WINNT\system32\SYMREDIR.dll]  [Symantec Corporation, 5.3.0.46]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll]  [Symantec Corporation, 2.2.0.577]
    [C:\Program Files\Common Files\Symantec Shared\ccProSub.dll]  [Symantec Corporation, 2.2.0.577]
    [C:\Program Files\Symantec AntiVirus\SavEmail.dll]  [Symantec Corporation, 9.0.0.338]
[PID: 744][C:\PROGRA~1\SYMANT~1\VPTray.exe]  [Symantec Corporation, 9.0.0.338]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Symantec AntiVirus\SAVRT32.DLL]  [Symantec Corporation, 9.3.0.28]
    [C:\Program Files\Symantec AntiVirus\Cliproxy.dll]  [Symantec Corporation, 9.0.0.338]
    [C:\PROGRA~1\SYMANT~1\NAVNTUTL.DLL]  [Symantec Corporation, 9.0.0.338]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 1256][C:\Program Files\Acronis\TrueImage\TrueImageMonitor.exe]  [Acronis, 8,0,0,1022]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
[PID: 2296][C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe]  [Acronis, 1,0,0,216]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 2136][C:\Program Files\Google\Google Pinyin\GooglePinyinDaemon.exe]  [Google Inc., 1, 0, 0, 1]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 2228][C:\Program Files\Logitech\MouseWare\system\em_exec.exe]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Logitech\MouseWare\system\EVENTEX.dll]  [Logitech Inc., 9.79.025]
    [C:\WINNT\system32\COMNCTR.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Logitech\MouseWare\system\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Logitech\MouseWare\system\ccresrce.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Logitech\MouseWare\system\GlbResLt.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\Program Files\Logitech\MouseWare\System\devices.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Logitech\MouseWare\system\ccstmglb.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Logitech\MouseWare\system\ccustom.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Logitech\MouseWare\system\ccmsghk.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
[PID: 976][C:\Program Files\Rising\AntiSpyware\rstray.exe]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.16]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\AntiSpyware\rsmginfo.dll]  [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 8]
    [C:\Program Files\Rising\AntiSpyware\RsXML.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    [C:\Program Files\Rising\AntiSpyware\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\AntiSpyware\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Rising\AntiSpyware\ComServ.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.31]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\AntiSpyware\rscommon.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.1.1]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\pngdll.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [C:\Program Files\Rising\AntiSpyware\runiep.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.41]
    [C:\Program Files\Rising\AntiSpyware\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.6]
    [C:\Program Files\Rising\AntiSpyware\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\AntiSpyware\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 2216][C:\WINNT\system32\hkcmd.exe]  [Intel Corporation, 6.14.10.4926]
    [C:\WINNT\system32\hccutils.DLL]  [Intel Corporation, 6.14.10.4926]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\WINNT\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4926]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 2252][C:\WINNT\system32\igfxpers.exe]  [Intel Corporation, 6.14.10.4926]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\WINNT\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4926]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 2152][C:\WINNT\system32\igfxsrvc.exe]  [Intel Corporation, 6.14.10.4926]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\WINNT\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4926]
    [C:\WINNT\system32\igfxdev.dll]  [Intel Corporation, 6.14.10.4926]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 1916][C:\Program Files\Microsoft ActiveSync\wcescomm.exe]  [Microsoft Corporation, 4.1.4841.0]
    [C:\WINNT\system32\CEUTIL.dll]  [Microsoft Corporation, 4.1.4841.0]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\WINNT\system32\RAPI.dll]  [Microsoft Corporation, 4.1.4841.0]
    [C:\Program Files\Microsoft ActiveSync\TCP2UDP.dll]  [Microsoft Corporation, 4.1.4841.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Microsoft ActiveSync\rapiproxystub.dll]  [N/A, ]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [C:\Program Files\Microsoft ActiveSync\dtptdns.dll]  [Microsoft Corporation, 4.1.4841.0]
[PID: 2064][C:\WINNT\system32\internat.exe]  [(Verified) Microsoft Corporation, 5.00.2920.0000]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 1884][C:\PROGRA~1\MI3AA1~1\rapimgr.exe]  [Microsoft Corporation, 4.1.4841.0]
    [C:\WINNT\system32\CEUTIL.dll]  [Microsoft Corporation, 4.1.4841.0]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\PROGRA~1\MI3AA1~1\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Microsoft ActiveSync\rapiproxystub.dll]  [N/A, ]
[PID: 1228][D:\RTX\rtxc.exe]  [Tencent, 3,3,0,2003]
    [D:\RTX\RTXDbug.dll]  [N/A, ]
    [D:\RTX\Utility.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\UILib.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.3352 (xpsp_sp2_qfe.080415-1302)]
    [D:\RTX\Crypt.dll]  [N/A, ]
    [D:\RTX\BqqZip.dll]  [N/A, ]
    [D:\RTX\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [D:\RTX\CameraWnd.dll]  [Tencent, 3,3,0,2003]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [D:\RTX\QQRes.dll]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [D:\RTX\RICHED20.DLL]  [Microsoft Corporation, 5.30.23.1205]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
    [D:\RTX\Core.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\MPBase.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\ProxySocketLib.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\Parser.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\MsgRec.dll]  [N/A, ]
    [D:\RTX\MsgDb.dll]  [N/A, ]
    [D:\RTX\libdb42.dll]  [Sleepycat Software, 4.2.52]
    [D:\RTX\BQQApi.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\Store.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\ClientAPI.dll]  [Tencent, 3,3,0,2003]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [D:\RTX\QQSkin.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\ATL.DLL]  [Microsoft Corporation, 3.00.8168]
    [D:\RTX\NewSkin.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\BQQHook.dll]  [N/A, ]
    [D:\RTX\DeptHideSet.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\RTCBuddy.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
    [D:\RTX\RTXInfoComm.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\IntegrationIM.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\SendFile.dll]  [Tencent, 3,3,0,2003]
    [D:\RTX\BQQAVPlugin.dll]  [Tencent, 3,3,0,2003]
[PID: 1964][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.9.2006121800]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\baidu\safecenter\iebuddy.dll]  [Kingsoft Corporation, 2008,05,15,156]
    [C:\Program Files\baidu\safecenter\iebuddyext.dll]  [Kingsoft Corporation, 2007,09,29,200]
    [C:\Program Files\CMBCHINA\WebProtect\WebProtect.dll]  [China Merchants Bank, 1, 0, 0, 1]
    [C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO.dll]  [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
    [C:\Program Files\中国工商银行\工行IE浏览器安全插件\IcbcToolBar.dll]  [中国工商银行, 1.0.0.1]
    [C:\WINNT\system32\UrlFilter.dll]  [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15]
    [C:\WINNT\system32\ATL.DLL]  [Microsoft Corporation, 3.00.9782]
    [C:\Program Files\Rising\AntiSpyware\UrlRule.dll]  [Beijing Rising Information Technology Co., Ltd., 1.0.0.15]
    [C:\Program Files\Kingsoft\PowerWord Lite\CBEBand.dll]  [Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.2]
    [c:\program files\google\googletoolbar2.dll]  [Google Inc., 4, 0, 1606, 6690]
    [C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll]  [Google Inc., 2, 0, 301, 7164]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 2, 0, 1007]
    [C:\Program Files\baidu\safecenter\safecenterstatus.dll]  [Kingsoft Corporation, 2008,07,02,143]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [D:\RTX\BQQHook.dll]  [N/A, ]
    [C:\Program Files\Haali\MatroskaSplitter\mmfinfo.dll]  [N/A, ]
    [C:\Program Files\Haali\MatroskaSplitter\mkunicode.dll]  [N/A, ]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\WINNT\system32\Macromed\Flash\Flash10a.ocx]  [Adobe Systems, Inc., 10,0,12,36]
    [C:\WINNT\system32\msjava.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\WINNT\system32\VMHELPER.DLL]  [Microsoft Corporation, 5.00.3810]
    [C:\Program Files\Common Files\Microsoft Shared\VS7Debug\pdm.dll]  [Microsoft Corporation, 8.0.50727.762 (SP.050727-7600)]
    [C:\WINNT\system32\JAVALE.DLL]  [Microsoft Corporation, 6.00.8424]
    [C:\WINNT\system32\JIT.DLL]  [Microsoft Corporation, 5.00.3810]
    [C:\WINNT\system32\javart.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\WINNT\system32\msawt.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\WINNT\system32\javacypt.dll]  [Microsoft Corporation, 5.00.3810]
    [C:\WINNT\system32\GOOGLEPINYIN.IME]  [Google Inc., ]
    [C:\WINNT\Downloaded Program Files\RavOLCtl.dll]  [Beijing Rising Information Technology Co., Ltd., 20.0.0.17]
[PID: 2272][C:\WINNT\system32\taskmgr.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6620]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 1748][C:\Program Files\Rising\AntiSpyware\ras.exe]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.7]
    [C:\Program Files\Rising\AntiSpyware\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\AntiSpyware\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\WINNT\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.6030.0]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Rising\AntiSpyware\KakaMgr.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.27]
    [C:\Program Files\Rising\AntiSpyware\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    [C:\Program Files\Rising\AntiSpyware\ProcCom.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\AntiSpyware\RsCommX2.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\dbmgr.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.4]
    [C:\Program Files\Rising\AntiSpyware\RSXML.DLL]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    [C:\Program Files\Rising\AntiSpyware\pweb.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.19]
    [C:\Program Files\Rising\AntiSpyware\pscan.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.59]
    [C:\Program Files\Rising\AntiSpyware\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.6]
    [C:\Program Files\Rising\AntiSpyware\pset.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.12]
    [C:\Program Files\Rising\AntiSpyware\pdefend.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.14]
    [C:\Program Files\Rising\AntiSpyware\ptools.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.16]
    [C:\Program Files\Rising\AntiSpyware\psysinfo.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.56]
    [C:\Program Files\Rising\AntiSpyware\PngDll.dll]  [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [D:\RTX\BQQHook.dll]  [N/A, ]
    [C:\WINNT\system32\ATL.dll]  [Microsoft Corporation, 3.00.9782]
[PID: 220][C:\Program Files\Rising\AntiSpyware\knownsvr.exe]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.14]
    [C:\Program Files\Rising\AntiSpyware\NComm.dll]  [Beijing Rising Information Technology Co., Ltd., 6.0.0.6]
    [C:\WINNT\system32\kmon.dll]  [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33]
    [C:\Program Files\Rising\AntiSpyware\comx3.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    [C:\Program Files\Rising\AntiSpyware\Syslay.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[PID: 2088][D:\Download\sreng2\SREngLdr.EXE]  [Smallfrogs Studio, 2.7.0.1210]
[PID: 548][D:\Download\sreng2\SRE4b3e068f.EXE]  [Smallfrogs Studio, 2.7.0.1210]
    [C:\Program Files\Logitech\MouseWare\System\LgWndHk.dll]  [Logitech Inc., 9.79.025]
    [C:\Program Files\Common Files\Logitech\Scrolling\LgMsgHk.dll]  [Logitech Inc., 1.1.0]
    [C:\WINNT\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
    [D:\RTX\BQQHook.dll]  [N/A, ]
    [D:\Download\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
    [C:\WINNT\system32\ATL.DLL]  [Microsoft Corporation, 3.00.9782]

==================================
文件关联
.TXT  Error. [C:\WINNT\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [UltraEdit.ini]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  Error. [C:\WINNT\WScript.exe "%1" %*]
.JS   Error. [C:\WINNT\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1       localhost
192.168.3.6 	tyfovcrm

==================================
进程特权扫描
特殊特权被允许： SeSystemtimePrivilege [PID = 956, C:\PROGRAM FILES\COMMON FILES\ACRONIS\SCHEDULE2\SCHEDUL2.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1120, C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE]
特殊特权被允许： SeSystemtimePrivilege [PID = 1120, C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1520, C:\PROGRA~1\A4TECH\MOUSE\AMOUMAIN.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1256, C:\PROGRAM FILES\ACRONIS\TRUEIMAGE\TRUEIMAGEMONITOR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2296, C:\PROGRAM FILES\COMMON FILES\ACRONIS\SCHEDULE2\SCHEDHLP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2228, C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1916, C:\PROGRAM FILES\MICROSOFT ACTIVESYNC\WCESCOMM.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1884, C:\PROGRA~1\MI3AA1~1\RAPIMGR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1228, D:\RTX\RTXC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2088, D:\DOWNLOAD\SRENG2\SRENGLDR.EXE]

==================================
计划任务
[已启用] Symantec NetDetect.job
        C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE 

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]