这份系统诊断报告是由 [Autorun病毒防御者 2.3.3.180] 生成的。
病毒库日期：2009.04.24 08:56:58
======================================================
操作系统：Windows Vista (TM) Ultimate (6.00.6000)
系统语言：简体中文 (zh-cn)
物理内存：总量 2095808 KB，可用 1260728 KB。
IE浏览器版本：7.0.6000.16830

注册表启动项
======================================================
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup>[7.15.11.8250, NVIDIA Corporation]
<NvMediaCenter><RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit>[7.15.11.8250, NVIDIA Corporation]
<RavTray><"d:\Program Files\Rising\Rav\RsTray.exe" -system>[21.0.0.22, Beijing Rising Information Technology Co., Ltd.]
<RtHDVCpl><RtHDVCpl.exe>[1, 0, 0, 69, Realtek Semiconductor]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>[0.1.1.137, RealNetworks, Inc.]
<360Safetray><D:\Program Files\360\360Safe\safemon\360Tray.exe /start>[5, 0, 0, 1018, 360安全中心]

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
<WMPNSCFG><C:\Program Files\Windows Media Player\WMPNSCFG.exe>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Shell><explorer.exe>
<Userinit><C:\Windows\system32\userinit.exe,>

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>

启动文件夹
======================================================
<N/A>

系统服务及驱动程序
======================================================
[360AntiArp][自动启动]
<C:\Windows\system32\drivers\360AntiArp.sys>[1, 0, 1, 1009, 360安全中心]
[360IceBreaker][手动启动]
<C:\Windows\system32\drivers\360IceBreaker.sys>[, ]
[Autodesk Licensing Service][自动启动]
<C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe>[2.70.000, Autodesk]
[Bonjour Service][自动启动]
<C:\Program Files\Bonjour\mDNSResponder.exe>[1,0,3,1, Apple Computer, Inc.]
[ccosm][自动启动]
<d:\Program Files\StormII\stormliv.exe>[3, 9, 4, 17, 北京暴风网际科技有限公司]
[Ch000001][手动启动]
<D:\Download\risings\天琊0228\Ch000001.sys>[, ]
[CmBatt][手动启动]
<system32\DRIVERS\CmBatt.sys>[6.0.6000.16553 (vista_gdr.070830-1500), Microsoft Corporation]
[FLEXnet Licensing Service][手动启动]
<C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe>[11.03.005, Macrovision Europe Ltd.]
[GMSIPCI][手动启动]
<G:\INSTALL\GMSIPCI.SYS>[, ]
[gusvc][手动启动]
<C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe>[2.0.711.37800.beta, Google]
[HdAudAddService][手动启动]
<system32\drivers\HdAudio.sys>[6.0.5840.16387 (vbl_media_core.060511-1323), Microsoft Corporation]
[hookcont][自动启动]
<system32\drivers\HookCont.sys>[23, 0, 0, 6, Beijing Rising Information Technology Co., Ltd.]
[hooksys][自动启动]
<system32\drivers\HookSys.sys>[23, 0, 0, 55, Beijing Rising Information Technology Co., Ltd.]
[IntcAzAudAddService][手动启动]
<system32\drivers\RTKVHDA.sys>[6.0.1.5436 built by: WinDDK, Realtek Semiconductor Corp.]
[mi-raysat_3dsmax8][自动启动]
<D:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe>[, ]
[NPF][手动启动]
<system32\drivers\npf.sys>[4.0.0.1040, CACE Technologies]
[NTACCESS][手动启动]
<G:\NTACCESS.sys>[, ]
[OemBiosDevice][自动启动]
<system32\DRIVERS\royal.sys>[1, 0, 0, 0, PARADOX]
[RavCCenter][自动启动]
<d:\Program Files\Rising\Rav\CCENTER.EXE>[21, 0, 0, 2, Beijing Rising Information Technology Co., Ltd.]
[RavTask][自动启动]
<d:\Program Files\Rising\Rav\RavTask.exe>[21, 0, 0, 24, Beijing Rising Information Technology Co., Ltd.]
[rpcapd][手动启动]
<%ProgramFiles%\WinPcap\rpcapd.exe>[, ]
[RsNTGDI][自动启动]
<system32\Drivers\RsNTGdi.sys>[21, 0, 0, 2, Beijing Rising Information Technology Co., Ltd.]
[RsProtect][自动启动]
<system32\drivers\RsPtect.sys>[23, 0, 0, 10, Beijing Rising Information Technology Co., Ltd.]
[RsRavMon][自动启动]
<d:\Program Files\Rising\Rav\RavMonD.exe>[21, 0, 0, 1, Beijing Rising Information Technology Co., Ltd.]
[RsScanSrv][自动启动]
<d:\Program Files\Rising\Rav\ScanFrm.exe>[21.0.0.11, Beijing Rising Information Technology Co., Ltd.]
[RTL8169][手动启动]
<system32\DRIVERS\Rtlh86.sys>[6.1837.0926.2006 built by: WinDDK, Realtek Corporation]
[SafeBoxKrnl][自动启动]
<C:\Windows\system32\Drivers\safeboxkrnl.sys>[2, 3, 0, 1010, 360安全中心]
[SetupNTGLM7X][手动启动]
<G:\NTGLM7X.sys>[, ]
[sptd][自动启动]
<System32\Drivers\sptd.sys>[, ]
[WUDFRd][手动启动]
<system32\DRIVERS\WUDFRd.sys>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]

当前系统进程
======================================================
* [PID:420]<smss.exe><C:\Windows\System32\smss.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:496]<csrss.exe><C:\Windows\system32\csrss.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:548]<csrss.exe><C:\Windows\system32\csrss.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:556]<wininit.exe><C:\Windows\system32\wininit.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:596]<services.exe><C:\Windows\system32\services.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:608]<lsass.exe><C:\Windows\system32\lsass.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:616]<lsm.exe><C:\Windows\system32\lsm.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:716]<winlogon.exe><C:\Windows\system32\winlogon.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:804]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:860]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:972]<CCenter.exe><d:\Program Files\Rising\Rav\CCENTER.EXE>[21, 0, 0, 2, Beijing Rising Information Technology Co., Ltd.]
* [PID:1012]<svchost.exe><C:\Windows\System32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1072]<svchost.exe><C:\Windows\System32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1100]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1220]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1236]<SLsvc.exe><C:\Windows\system32\SLsvc.exe>[6.0.6000.16509 (vista_gdr.070620-1500), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1320]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1484]<RavTask.exe><d:\Program Files\Rising\Rav\RavTask.exe>[21, 0, 0, 24, Beijing Rising Information Technology Co., Ltd.]
* [PID:1548]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1628]<RavMonD.exe><d:\Program Files\Rising\Rav\RavMonD.exe>[21, 0, 0, 1, Beijing Rising Information Technology Co., Ltd.]
* [PID:1716]<RsStub.exe><d:\Program Files\Rising\Rav\RsStub.exe>[21, 0, 0, 2, Beijing Rising Information Technology Co., Ltd.]
* [PID:1768]<spoolsv.exe><C:\Windows\System32\spoolsv.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Bonjour\mdnsNSP.dll>[1,0,3,1, Apple Computer, Inc.]
* [PID:1792]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1988]<rsnetsvr.exe><d:\Program Files\Rising\Rav\rsnetsvr.exe>[21, 0, 0, 15, Beijing Rising Information Technology Co., Ltd.]
* [PID:1032]<dwm.exe><C:\Windows\system32\Dwm.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1228]<taskeng.exe><C:\Windows\system32\taskeng.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:788]<explorer.exe><C:\Windows\Explorer.EXE>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16683_none_9ea0f08ac96e2537\gdiplus.dll>[5.2.6000.16683 (vista_gdr.080429-1705), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\AcSignIcon.dll>[17.0.54.0, Autodesk]
    - <C:\PROGRA~1\WI4EB4~1\wmpband.dll>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\thumbcache.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll>[17.0.54.110, Autodesk]
    - <C:\Windows\ehome\ehSSO.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <d:\Program Files\Thunder Network\Thunder6\ComDlls\xunleiBHO_Now.dll>[5, 0, 8, 106, Xunlei Networking Technologies,LTD]
    - <C:\Windows\System32\ntlanman.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\System32\drprov.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\System32\davclnt.dll>[6.0.6000.20751 (vista_ldr.080111-1500), Microsoft Corporation]
    - <C:\Windows\system32\nvcpl.dll>[7.15.11.8250, NVIDIA Corporation]
    - <C:\Windows\system32\cryptnet.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\windowscodecsext.dll>[6.0.6000.16740 (vista_gdr.080827-1507), Microsoft Corporation]
    - <C:\Windows\system32\icm32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:2144]<AdskScSrv.exe><C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe>[2.70.000, Autodesk]
* [PID:2176]<mDNSResponder.exe><C:\Program Files\Bonjour\mDNSResponder.exe>[1,0,3,1, Apple Computer, Inc.]
* [PID:2196]<stormliv.exe><d:\Program Files\StormII\stormliv.exe>[3, 9, 4, 17, 北京暴风网际科技有限公司]
    - <d:\Program Files\StormII\MSVCP60.dll>[6.02.3104.0, Microsoft Corporation]
    - <C:\Windows\system32\MFC42.DLL>[6.06.8063.0, Microsoft Corporation]
    - <C:\Windows\system32\ODBC32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\OLEPRO32.DLL>[6.0.6000.16386, Microsoft Corporation]
    - <C:\Windows\system32\odbcint.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Bonjour\mdnsNSP.dll>[1,0,3,1, Apple Computer, Inc.]
    - <d:\Program Files\StormII\bfoptdll.dll>[3, 8, 7, 16, 北京暴风网际科技有限公司]
    - <d:\Program Files\StormII\box\BoxLog.dll>[3, 9, 4, 17, 北京暴风网际科技有限公司]
* [PID:2360]<raysat_3dsmax8server.exe><D:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe>[, ]
    - <C:\Windows\system32\WSOCK32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Bonjour\mdnsNSP.dll>[1,0,3,1, Apple Computer, Inc.]
* [PID:2444]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:2528]<ScanFrm.exe><d:\Program Files\Rising\Rav\ScanFrm.exe>[21.0.0.11, Beijing Rising Information Technology Co., Ltd.]
* [PID:2544]<svchost.exe><C:\Windows\system32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:2596]<svchost.exe><C:\Windows\System32\svchost.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:2716]<SearchIndexer.exe><C:\Windows\system32\SearchIndexer.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3032]<taskeng.exe><C:\Windows\system32\taskeng.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3332]<rundll32.exe><C:\Windows\System32\rundll32.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\AppPatch\AcLayers.DLL>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\NvMcTray.dll>[7.15.11.8250, NVIDIA Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6000.16386_none_87e0cb09378714f1\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3352]<RsTray.exe><D:\Program Files\Rising\Rav\RsTray.exe>[21.0.0.22, Beijing Rising Information Technology Co., Ltd.]
* [PID:3360]<RtHDVCpl.exe><C:\Windows\RtHDVCpl.exe>[1, 0, 0, 69, Realtek Semiconductor]
    - <C:\Windows\system32\DSOUND.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16683_none_9ea0f08ac96e2537\gdiplus.dll>[5.2.6000.16683 (vista_gdr.080429-1705), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\mfplat.dll>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3372]<realsched.exe><C:\Program Files\Common Files\Real\Update_OB\realsched.exe>[0.1.1.137, RealNetworks, Inc.]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3388]<360tray.exe><D:\Program Files\360\360Safe\safemon\360tray.exe>[5, 0, 0, 1018, 360安全中心]
    - <C:\Windows\system32\MFC42u.DLL>[6.06.8063.0, Microsoft Corporation]
    - <C:\Windows\system32\ODBC32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\odbcint.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\RICHED32.DLL>[6.0.6000.16517 (vista_gdr.070702-1500), Microsoft Corporation]
    - <C:\Windows\system32\RICHED20.dll>[5.31.23.1227, Microsoft Corporation]
    - <D:\Program Files\360\360Safe\safemon\360compro.dll>[1, 0, 0, 1004, 360安全中心]
    - <D:\Program Files\360\360Safe\safemon\safemon.dll>[5, 0, 0, 1009, 360.CN]
    - <C:\Windows\system32\MSVCP60.dll>[7.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <D:\Program Files\360\360Safe\safemon\SafeKrnl.dll>[4, 3, 0, 1005, 奇虎网]
    - <D:\Program Files\360\360Safe\AntiAdwa.dll>[4, 2, 0, 1002, 360Safe.com]
    - <D:\Program Files\360\360Safe\safemon\360webpro.dll>[1, 0, 0, 1007, 360.CN]
    - <D:\Program Files\360\360Safe\live.dll>[1, 0, 1, 1030, 360.cn]
    - <C:\Program Files\Bonjour\mdnsNSP.dll>[1,0,3,1, Apple Computer, Inc.]
* [PID:3488]<wmpnscfg.exe><C:\Program Files\Windows Media Player\wmpnscfg.exe>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16683_none_9ea0f08ac96e2537\gdiplus.dll>[5.2.6000.16683 (vista_gdr.080429-1705), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Windows Media Player\wmpnssci.dll>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3700]<wmpnetwk.exe><C:\Program Files\Windows Media Player\wmpnetwk.exe>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\WSOCK32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\wmpmde.dll>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\MF.dll>[11.0.6000.6346 (vista_gdr.080622-1335), Microsoft Corporation]
    - <C:\Windows\system32\MFPlat.DLL>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\EVR.dll>[5.00 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\WMDRMSDK.DLL>[11.0.6000.6324, Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\DXVA2.DLL>[5.00 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\wmp.dll>[11.0.6000.6349 (vista_gdr.081215-1506), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6000.16386_none_87e0cb09378714f1\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\MSVFW32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\wmploc.dll>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16683_none_9ea0f08ac96e2537\gdiplus.dll>[5.2.6000.16683 (vista_gdr.080429-1705), Microsoft Corporation]
    - <C:\Windows\system32\cryptnet.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\System32\wmpps.dll>[11.0.6000.6324 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3936]<unsecapp.exe><C:\Windows\system32\wbem\unsecapp.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:4004]<WmiPrvSE.exe><C:\Windows\system32\wbem\wmiprvse.exe>[6.0.6000.16830 (vista_gdr.090302-1506), Microsoft Corporation]
    - <C:\Windows\system32\wbem\wmiprov.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\WMI.dll>[6.0.6000.16470 (vista_gdr.070416-1510), Microsoft Corporation]
* [PID:648]<iexplore.exe><C:\Program Files\Internet Explorer\iexplore.exe>[7.00.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\AppPatch\iebrshim.dll>[6.0.6000.16830 (vista_gdr.090302-1506), Microsoft Corporation]
    - <C:\Windows\AppPatch\AcRedir.DLL>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\AppPatch\AcLayers.DLL>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\IEUI.dll>[7.00.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16683_none_9ea0f08ac96e2537\gdiplus.dll>[5.2.6000.16683 (vista_gdr.080429-1705), Microsoft Corporation]
    - <C:\Windows\system32\AcSignIcon.dll>[17.0.54.0, Autodesk]
    - <C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <d:\Program Files\Thunder Network\Thunder6\ComDlls\TDAtOnce_Now.dll>[1, 2, 6, 86, Xunlei Networking Technologies,LTD]
    - <C:\Windows\system32\ATL71.DLL>[7.10.6041.0, Microsoft Corporation]
    - <C:\Windows\system32\MSVCP71.dll>[7.10.3077.0, Microsoft Corporation]
    - <C:\Windows\system32\MSVCR71.dll>[7.10.3052.4, Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6000.16386_none_87e0cb09378714f1\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <d:\Program Files\Thunder Network\Thunder6\ComDlls\xunleiBHO_Now.dll>[5, 0, 8, 106, Xunlei Networking Technologies,LTD]
    - <D:\Program Files\360\360Safe\safemon\safemon.dll>[5, 0, 0, 1009, 360.CN]
    - <C:\Windows\system32\MSVCP60.dll>[7.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Bonjour\mdnsNSP.dll>[1,0,3,1, Apple Computer, Inc.]
    - <C:\Windows\system32\mshtml.dll>[7.00.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\msls31.dll>[3.10.349.0, Microsoft Corporation]
    - <C:\Windows\system32\ieapfltr.dll>[7.0.6000.16461, Microsoft Corporation]
    - <d:\Program Files\Rising\Rav\RavScrCh.dll>[21.0.0.70, Beijing Rising Information Technology Co., Ltd.]
    - <C:\Windows\system32\jscript.dll>[5.7.0.6000, Microsoft Corporation]
    - <C:\Windows\system32\vbscript.dll>[5.7.0.6000, Microsoft Corporation]
    - <C:\Windows\system32\msimtf.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\mshtmled.dll>[7.00.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\ImgUtil.dll>[7.00.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\pngfilt.dll>[7.00.6000.16830 (vista_gdr.090302-1506), Microsoft Corporation]
    - <C:\Windows\system32\Macromed\Flash\Flash10b.ocx>[10,0,22,87, Adobe Systems, Inc.]
    - <C:\Windows\system32\ddrawex.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\dssenh.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\cryptnet.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\iepeers.dll>[7.00.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3844]<AutoGuarder.exe><D:\Program Files\AutoGuarder\AutoGuarder.exe>[2.3.3.180, 任软工作室]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\AppPatch\AcLayers.DLL>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:1600]<Photoshop.exe><D:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe>[10.0 (10.0x20070521 [20070521.r.1559 02:00:00 cutoff; r branch]), Adobe Systems, Incorporated]
    - <C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\MSVCR80.dll>[8.00.50727.762, Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.762_none_10b2f55f9bffb8f8\MSVCP80.dll>[8.00.50727.762, Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6000.16683_none_9ea0f08ac96e2537\gdiplus.dll>[5.2.6000.16683 (vista_gdr.080429-1705), Microsoft Corporation]
    - <C:\Windows\system32\OPENGL32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\GLU32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\AdobeLinguistic.dll>[3.1RC, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\AdobeOwl.dll>[1.0.92, Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\ahclient.dll>[1, 1, 0, 0, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\AXEDOMCore.dll>[3.3.402, Adobe Systems Incorporated]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\STI.DLL>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\CFGMGR32.dll>[6.0.6000.16609 (vista_gdr.071205-1500), Microsoft Corporation]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.dll>[, ]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\PSViews.dll>[10.0 (10.0x20070521 [20070521.r.1559 02:00:00 cutoff; r branch]), Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\PSArt.dll>[10.0 (10.0x20070521 [20070521.r.1559 02:00:00 cutoff; r branch]), Adobe Systems, Incorporated]
    - <C:\Windows\system32\c_g18030.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\adobe_caps.dll>[0,0,120,0, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\增效工具\扩展\FastCore.8BX>[10.0 (10.0x20070521 [20070521.r.1559 02:00:00 cutoff; r branch]), Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\PLUGIN.dll>[10.0 (10.0x20070521 [20070521.r.1559 02:00:00 cutoff; r branch]), Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\增效工具\扩展\MMXCore.8BX>[10.0 (10.0x20070521 [20070521.r.1559 02:00:00 cutoff; r branch]), Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\libmmd.dll>[9.1.9.2, Intel Corporation]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\增效工具\扩展\多处理器扩展功能.8BX>[10.0 (10.0x20070521 [20070521.r.1559 02:00:00 cutoff; r branch]), Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\Required\ADMPlugin.apl>[3.10x21, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\Required\PNGIcons.apl>[1.22x1, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\Required\ASDataStream.apl>[1.03x2, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\QuickTimeGlue.dll>[, ]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\增效工具\文件格式\Dicom.8bi>[1.0, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\AdobeXMP.dll>[4.1-c036, 46.276720, Mon Feb 19 2007 22:40:08, ]
    - <C:\Windows\system32\WSOCK32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Common Files\Adobe\Plug-Ins\CS3\File Formats\Camera Raw.8bi>[4.0, Adobe Systems Incorporated]
    - <C:\Windows\system32\wiadss.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\BIB.dll>[1.2.01, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\BIBUtils.dll>[1.1.01, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\ACE.dll>[2.11.36, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\AGM.dll>[4.17.24, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\CoolType.dll>[5.04.15, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\AXE8SharedExpat.dll>[3.3.402, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\增效工具\自动\脚本支持.8li>[10.0, Adobe Systems Incorporated]
    - <C:\Windows\system32\AcSignIcon.dll>[17.0.54.0, Autodesk]
    - <C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Client\3.0.0\VersionCue.DLL>[3.0.0.78client931c, Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\ExtendScript.dll>[3.7.69, Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\ScCore.dll>[3.7.69, Adobe Systems, Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\shfolder.dll>[5.50.4027.300, Microsoft Corporation]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\adobe_epic.dll>[2.0.1.1082, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\adobe_eula.dll>[2.0.1.1082, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\adobe_personalization.dll>[2.0.1.1082, Adobe Systems Incorporated]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\AdobeLM_libFNP.dll>[11.03.005, Macrovision Europe Ltd.]
    - <C:\Program Files\Bonjour\mdnsNSP.dll>[1,0,3,1, Apple Computer, Inc.]
    - <C:\Windows\system32\icmp.Dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <D:\Program Files\Adobe\Adobe Photoshop CS3\AdobeUpdater.dll>[5, 1, 0, 1082, Adobe Systems Incorporated]
    - <C:\Windows\system32\spool\DRIVERS\W32X86\3\unidrvui.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\spool\DRIVERS\W32X86\3\mxdwdrv.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\FontSub.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\prntvpt.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\spool\DRIVERS\W32X86\3\mxdwdui.DLL>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Client\3.0.0\VersionCueUI.DLL>[3.0.0.78client931c, Adobe Systems, Incorporated]
    - <C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\thumbcache.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:3944]<FNPLicensingService.exe><C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe>[11.03.005, Macrovision Europe Ltd.]
* [PID:1168]<ArSwp.exe><D:\Program Files\arswp\ArSwp.exe>[2, 8, 2, 1115, ArSwp.com]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6000.16386_none_87e0cb09378714f1\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\OLEPRO32.DLL>[6.0.6000.16386, Microsoft Corporation]
    - <C:\Windows\system32\WSOCK32.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\MSVCP60.dll>[7.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <D:\Program Files\arswp\plugin\ArFix.dll>[2, 5, 0, 0, ArSwp.Com]
    - <C:\Windows\system32\cryptnet.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Program Files\Bonjour\mdnsNSP.dll>[1,0,3,1, Apple Computer, Inc.]
    - <C:\Windows\system32\asycfilt.dll>[6.0.6000.16386, Microsoft Corporation]
    - <C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\thumbcache.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\System32\ntlanman.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\System32\drprov.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\System32\davclnt.dll>[6.0.6000.20751 (vista_ldr.080111-1500), Microsoft Corporation]
    - <C:\Windows\system32\mshtml.dll>[7.00.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\msls31.dll>[3.10.349.0, Microsoft Corporation]
* [PID:2116]<TrustedInstaller.exe><C:\Windows\servicing\TrustedInstaller.exe>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\cbscore.dll>[6.0.6000.16649 (vista_gdr.080305-1503), Microsoft Corporation]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\system32\dpx.dll>[6.0.6000.16609 (vista_gdr.071205-1500), Microsoft Corporation]
    - <C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\wcp.dll>[6.0.6000.16649 (vista_gdr.080305-1503), Microsoft Corporation]
    - <C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\DrUpdate.dll>[6.0.6000.16649 (vista_gdr.080305-1503), Microsoft Corporation]
    - <C:\Windows\system32\SrClient.dll>[6.0.6000.16646 (vista_gdr.080228-1724), Microsoft Corporation]
    - <C:\Windows\system32\SPP.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6000.16649_none_0756e58cca3c3d46\wrpint.dll>[6.0.6000.16649 (vista_gdr.080305-1503), Microsoft Corporation]
    - <C:\Windows\system32\SxsStore.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\servicing\CbsApi.dll>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
* [PID:2160]<arvmon.exe><D:\Program Files\AutoGuarder\arvmon.exe>[2.3.3.180, 任软工作室]
    - <C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\COMCTL32.dll>[6.10 (vista_rtm.061101-2205), Microsoft Corporation]
    - <C:\Windows\AppPatch\AcLayers.DLL>[6.0.6000.16386 (vista_rtm.061101-2205), Microsoft Corporation]
    - <D:\Program Files\AutoGuarder\Vdata.dll>[2, 4, 0, 139, 任软工作室]

文件类型关联
======================================================
.exe文件：正常。["%1" %*]
.com文件：正常。["%1" %*]
.pif文件：正常。["%1" %*]
.bat文件：正常。["%1" %*]
.scr文件：正常。["%1" /S]
.vbs文件：正常。["%SystemRoot%\System32\WScript.exe" "%1" %*]
.txt文件：正常。[%SystemRoot%\system32\NOTEPAD.EXE %1]
.ini文件：正常。[%SystemRoot%\system32\NOTEPAD.EXE %1]
.inf文件：正常。[%SystemRoot%\system32\NOTEPAD.EXE %1]
.hlp文件：正常。[%SystemRoot%\winhlp32.exe %1]
.reg文件：正常。[regedit.exe "%1"]
.lnk文件：正常。[{00021401-0000-0000-C000-000000000046}]

IE浏览器相关设置
======================================================
当前IE主页：http://www.baidu.com/
当前IE搜索页：http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
禁止IE主页修改：否

浏览器BHO
======================================================
[ThunderAtOnce Class]
<{01443AEC-0FD1-40fd-9C87-E93D1494C233}><d:\Program Files\Thunder Network\Thunder6\ComDlls\TDAtOnce_Now.dll>[1, 2, 6, 86, Xunlei Networking Technologies,LTD]

[Thunder Browser Helper]
<{889D2FEB-5411-4565-8998-1DD2C5261283}><d:\Program Files\Thunder Network\Thunder6\ComDlls\xunleiBHO_Now.dll>[5, 0, 8, 106, Xunlei Networking Technologies,LTD]

[SafeMon Class]
<{B69F34DD-F0F9-42DC-9EDD-957187DA688D}><D:\Program Files\360\360Safe\safemon\safemon.dll>[5, 0, 0, 1009, 360.CN]


资源管理器HOOK项
======================================================

IFEO映像劫持
======================================================
<N/A>

Hosts文件
======================================================
127.0.0.1       localhost
::1            localhost

Autorun.inf文件及指向文件
======================================================
本地磁盘C: - 没有发现
本地磁盘D: - 没有发现
本地磁盘E: - 没有发现
本地磁盘F: - 没有发现