狙剑(V2008)-系统体检记录
狙剑下载地址：http://www.ZhuLinFeng.com/

======================================================
操作系统：Windows XP 版本号：5.1.2600.2 (Service Pack 2)

======================================================
SSDT－HOOK：
  序号：11
   函数：NtAdjustPrivilegesToken
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：17
   函数：NtAllocateVirtualMemory
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：19
   函数：NtAssignProcessToJobObject
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：41
   函数：NtCreateKey
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：43
   函数：NtCreateMutant
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：47
   函数：NtCreateProcess
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：48
   函数：NtCreateProcessEx
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：50
   函数：NtCreateSection
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：53
   函数：NtCreateThread
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：57
   函数：NtDebugActiveProcess
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：63
   函数：NtDeleteKey
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：65
   函数：NtDeleteValueKey
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：66
   函数：NtDeviceIoControlFile
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：68
   函数：NtDuplicateObject
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：97
   函数：NtLoadDriver
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：103
   函数：NtLockVirtualMemory
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：119
   函数：NtOpenKey
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：122
   函数：NtOpenProcess
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：125
   函数：NtOpenSection
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：137
   函数：NtProtectVirtualMemory
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：145
   函数：NtQueryDirectoryFile
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：177
   函数：NtQueryValueKey
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：180
   函数：NtQueueApcThread
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：192
   函数：NtRenameKey
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：200
   函数：NtRequestWaitReplyPort
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：204
   函数：NtRestoreKey
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：213
   函数：NtSetContextThread
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：237
   函数：NtSetSecurityObject
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：240
   函数：NtSetSystemInformation
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：242
   函数：NtSetSystemTime
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：247
   函数：NtSetValueKey
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：253
   函数：NtSuspendProcess
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：254
   函数：NtSuspendThread
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：255
   函数：NtSystemDebugControl
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：257
   函数：NtTerminateProcess
   模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
   HOOK类型：HOOK

  序号：258
   函数：NtTerminateThread
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：267
   函数：NtUnmapViewOfSection
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK

  序号：277
   函数：NtWriteVirtualMemory
   模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   HOOK类型：HOOK


======================================================
FSD－HOOK：
  序号：0
   IRP：IRP_MJ_CREATE
   HOOK模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   INLINE-HOOK模块：

  序号：2
   IRP：IRP_MJ_CLOSE
   HOOK模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   INLINE-HOOK模块：

  序号：4
   IRP：IRP_MJ_WRITE
   HOOK模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   INLINE-HOOK模块：

  序号：6
   IRP：IRP_MJ_SET_INFORMATION
   HOOK模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   INLINE-HOOK模块：

  序号：13
   IRP：IRP_MJ_FILE_SYSTEM_CONTROL
   HOOK模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   INLINE-HOOK模块：

  序号：18
   IRP：IRP_MJ_CLEANUP
   HOOK模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   INLINE-HOOK模块：

  序号：21
   IRP：IRP_MJ_SET_SECURITY
   HOOK模块：\SystemRoot\system32\drivers\HOOKHELP.sys
   INLINE-HOOK模块：


======================================================
文件过滤系统驱动：
  文件系统：\FileSystem\sr　文件：system32\DRIVERS\sr.sys
  文件系统：\FileSystem\Fastfat　文件：C:\WINDOWS\system32\drivers\Fastfat.sys

======================================================
内核Inline-HOOK：
  无

======================================================
API-HOOK:
  无

======================================================
无微软签名进程：
  进程：C:\Documents and Settings\xcm\桌面\狙剑\狙剑\SnipeSword.exe
  进程：C:\WINDOWS\system32\Ati2evxx.exe
  进程：C:\WINDOWS\system32\Ati2evxx.exe
  进程：C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
  进程：C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
  进程：C:\WINDOWS\VM303_STI.EXE
  进程：system

======================================================
无微软签名模块
  进程：C:\Program Files\Rising\Rav\ScanFrm.exe
    模块：C:\Program Files\Rising\Rav\comx3.dll
    模块：C:\Program Files\Rising\Rav\Syslay.dll
    模块：C:\Program Files\Rising\Rav\ScanSrv.dll
    模块：C:\Program Files\Rising\Rav\proccomm.dll
    模块：C:\Program Files\Rising\Rav\scansrvp.dll
    模块：C:\Program Files\Rising\Rav\moncomm.dll
    模块：C:\Program Files\Rising\Rav\combase.dll
    模块：C:\WINDOWS\system32\MSVCP71.dll
    模块：C:\WINDOWS\system32\MSVCR71.dll
  进程：C:\Program Files\Rising\Rav\RavTask.exe
    模块：C:\Program Files\Rising\Rav\PSAPI.DLL
    模块：C:\Program Files\Rising\Rav\rsstub.dll
    模块：C:\Program Files\Rising\Rav\rstask.dll
    模块：C:\Program Files\Rising\Rav\CfgDll.dll
    模块：C:\Program Files\Rising\Rav\RSAPPMGR.dll
    模块：C:\Program Files\Rising\Rav\rsconf.dll
    模块：C:\Program Files\Rising\Rav\proccomm.dll
    模块：C:\WINDOWS\system32\MSVCP71.dll
    模块：C:\WINDOWS\system32\MSVCR71.dll
  进程：C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Dashboard\2.0.2721.36944__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.2721.36875__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.2721.36990__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.2721.36896__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.2721.37050__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.2721.36975__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.2721.37086__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.2721.37044__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.2721.36982__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.2721.37009__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.2721.36889__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.2721.36847__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.2721.37126__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2700.34729__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.2721.36840__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2700.34711__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2700.34694__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.2721.36834__90ba9c70f846762e\CLI.Component.Dashboard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.2721.37064__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.2721.37092__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.2721.36883__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.2721.37070__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll
    模块：C:\Program Files\Common Files\ATI Technologies\Multimedia\atidvcr.dll
    模块：C:\Program Files\Common Files\ATI Technologies\Multimedia\atixcode.dll
    模块：C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCP80.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2700.34759__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.2721.36868__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.2721.37056__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.2721.37121__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray.resources\2.0.2721.37099_zh-CHS_90ba9c70f846762e\CLI.Component.Systemtray.resources.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2700.34713__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.2721.36860__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2700.34752__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2700.34705__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2700.34686__90ba9c70f846762e\CLI.Component.Client.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.2721.36855__90ba9c70f846762e\CLI.Component.Wizard.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2700.34698__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.2721.37099__90ba9c70f846762e\CLI.Component.Systemtray.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\2bd97c2d02713f4980a84358334bb30a\System.Web.ni.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\777cba6451ae4e4eb6d193604c05fd3a\System.Configuration.ni.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2700.34704__90ba9c70f846762e\APM.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.2721.36818__90ba9c70f846762e\APM.Server.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2705.19134__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.2721.36989__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2700.34727__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.2721.37049__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll
    模块：C:\WINDOWS\system32\atipdlxx.dll
    模块：C:\WINDOWS\system32\ati2edxx.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Shared\2.0.2700.34719__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.OverDrive3.Graphics.Runtime\2.0.2721.36937__90ba9c70f846762e\CLI.Aspect.OverDrive3.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.2700.34714__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.2721.36874__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2700.34721__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.2721.36981__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2700.34721__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.2721.37029__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2700.34722__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.2721.36989__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2700.34724__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.2721.37008__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2700.34716__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.2721.36902__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Shared\2.0.2700.34714__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Runtime\2.0.2721.36882__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2700.34750__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2700.34728__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.2721.37084__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2700.34709__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll
    模块：C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\DEM.Graphics.I0703.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2700.34708__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.2721.36981__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2700.34726__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2700.34740__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.2721.37043__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2700.34717__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.2721.36846__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.2721.36819__90ba9c70f846762e\ATIDEMOS.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2700.34718__90ba9c70f846762e\DEM.OS.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2700.34689__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2700.34751__90ba9c70f846762e\DEM.OS.I0602.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2700.34697__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.2721.36826__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2700.34706__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll
    模块：C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
    模块：C:\WINDOWS\system32\ATIDEMGX.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2700.34754__90ba9c70f846762e\DEM.Graphics.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2700.34701__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2700.34739__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.2721.37150__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2700.34697__90ba9c70f846762e\AEM.Server.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2700.34672__90ba9c70f846762e\AEM.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.2721.36817__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2700.34680__90ba9c70f846762e\NEWAEM.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.2721.36817__90ba9c70f846762e\AEM.Server.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2700.34702__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2700.34690__90ba9c70f846762e\CLI.Foundation.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2700.34706__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.2721.36818__90ba9c70f846762e\CLI.Component.Runtime.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\33ea0dffa3cd4649ba3c5ecc564878ea\System.Xml.ni.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2700.34808__90ba9c70f846762e\CLI.Foundation.XManifest.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.2721.37107__90ba9c70f846762e\MOM.Implementation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2700.34681__90ba9c70f846762e\LOG.Foundation.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.2721.37106__90ba9c70f846762e\LOG.Foundation.Implementation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2700.34708__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2700.34674__90ba9c70f846762e\CLI.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2700.34703__90ba9c70f846762e\MOM.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2700.34671__90ba9c70f846762e\LOG.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.2721.37107__90ba9c70f846762e\CCC.Implementation.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\04a7e55face2754aa4fd8db6b0906097\System.Windows.Forms.ni.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\6051a8f8e0434c41be763dcdce2af1dc\System.Drawing.ni.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\0b52c6d86f21624594a661c473cdffa6\System.ni.dll
    模块：C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\e80dd017073bbf4baec6102e98a50fac\mscorlib.ni.dll
    模块：C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    模块：C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll
    模块：C:\WINDOWS\system32\mscoree.dll
  进程：C:\WINDOWS\system32\Ati2evxx.exe
    模块：C:\WINDOWS\system32\atipdlxx.dll
    模块：C:\WINDOWS\system32\Ati2edxx.dll
    模块：C:\WINDOWS\system32\ati2evxx.dll
    模块：C:\WINDOWS\system32\atipdlxx.dll
    模块：C:\WINDOWS\system32\Ati2edxx.dll
  进程：C:\Program Files\Rising\Rav\CCENTER.EXE
    模块：C:\Program Files\Rising\Rav\cnt08.dll
    模块：C:\Program Files\Rising\Rav\cnt09.dll
    模块：C:\Program Files\Rising\Rav\combase.dll
  进程：C:\Program Files\Rising\Rav\RsTray.exe
    模块：C:\Program Files\Rising\Rav\rsmginfo.dll
    模块：C:\Program Files\Rising\Rav\ScanPrxy.dll
    模块：C:\Program Files\Rising\Rav\RavITray.dll
    模块：C:\Program Files\Rising\Rav\PngDll.dll
    模块：C:\Program Files\Rising\Rav\MonTray.dll
    模块：C:\Program Files\Rising\Rav\mruleui.dll
    模块：C:\Program Files\Rising\Rav\ravbintl.dll
    模块：C:\Program Files\Rising\Rav\rspalvd.dll
    模块：C:\Program Files\Rising\Rav\CfgDll.dll
    模块：C:\Program Files\Rising\Rav\RSAPPMGR.dll
    模块：C:\Program Files\Rising\Rav\rsconf.dll
    模块：C:\Program Files\Rising\Rav\rsguilib.dll
    模块：C:\WINDOWS\system32\MFC71.DLL
    模块：C:\Program Files\Rising\Rav\ScanEvnt.dll
    模块：C:\Program Files\Rising\Rav\MonState.dll
    模块：C:\Program Files\Rising\Rav\ProcComm.dll
    模块：C:\Program Files\Rising\Rav\rsxml.dll
    模块：C:\Program Files\Rising\Rav\comx3.dll
    模块：C:\Program Files\Rising\Rav\Syslay.dll
    模块：C:\Program Files\Rising\Rav\rslang.dll
    模块：C:\Program Files\Rising\Rav\ComServ.dll
    模块：C:\WINDOWS\system32\MSVCP71.dll
    模块：C:\WINDOWS\system32\MSVCR71.dll
  进程：C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
    模块：C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2700.34680__90ba9c70f846762e\NEWAEM.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.2721.36817__90ba9c70f846762e\AEM.Server.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\2bd97c2d02713f4980a84358334bb30a\System.Web.ni.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2700.34708__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2700.34703__90ba9c70f846762e\MOM.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.2721.37106__90ba9c70f846762e\LOG.Foundation.Implementation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2700.34681__90ba9c70f846762e\LOG.Foundation.Private.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2700.34671__90ba9c70f846762e\LOG.Foundation.dll
    模块：C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.2721.37107__90ba9c70f846762e\MOM.Implementation.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\04a7e55face2754aa4fd8db6b0906097\System.Windows.Forms.ni.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\6051a8f8e0434c41be763dcdce2af1dc\System.Drawing.ni.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\0b52c6d86f21624594a661c473cdffa6\System.ni.dll
    模块：C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
    模块：C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\e80dd017073bbf4baec6102e98a50fac\mscorlib.ni.dll
    模块：C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
    模块：C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll
    模块：C:\WINDOWS\system32\mscoree.dll
  进程：C:\WINDOWS\VM303_STI.EXE
    模块：C:\WINDOWS\system32\VM303Prp.Ax
  进程：C:\WINDOWS\system32\spoolsv.exe
    模块：C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll
    模块：C:\WINDOWS\system32\mdimon.dll
  进程：C:\Program Files\Rising\Rav\RavMonD.exe
    模块：C:\Program Files\Rising\Rav\ur023.dat
    模块：C:\Program Files\Rising\Rav\scansct.dll
    模块：C:\Program Files\Rising\Rav\revm.dll
    模块：C:\Program Files\Rising\Rav\extfile.dll
    模块：C:\Program Files\Rising\Rav\heurex.dll
    模块：C:\Program Files\Rising\Rav\pecompd.dll
    模块：C:\Program Files\Rising\Rav\methodex.dll
    模块：C:\Program Files\Rising\Rav\urutils.dll
    模块：C:\Program Files\Rising\Rav\ur000.dat
    模块：C:\Program Files\Rising\Rav\scanpe.dll
    模块：C:\Program Files\Rising\Rav\pearc.dll
    模块：C:\Program Files\Rising\Rav\scanex.dll
    模块：C:\Program Files\Rising\Rav\unexe.dll
    模块：C:\Program Files\Rising\Rav\scanexec.dll
    模块：C:\Program Files\Rising\Rav\nvfile.dll
    模块：C:\Program Files\Rising\Rav\ffr.dll
    模块：C:\Program Files\Rising\Rav\relibldr.dll
    模块：C:\Program Files\Rising\Rav\viruslib.dll
    模块：C:\Program Files\Rising\Rav\Scanner.dll
    模块：C:\Program Files\Rising\Rav\ScanAdd.dll
    模块：C:\Program Files\Rising\Rav\RSStore.dll
    模块：C:\Program Files\Rising\Rav\refs.dll
    模块：C:\Program Files\Rising\Rav\recomp.dll
    模块：C:\Program Files\Rising\Rav\BACore.dll
    模块：C:\Program Files\Rising\Rav\rsnetsvr.dll
    模块：C:\Program Files\Rising\Rav\HookCont.dll
    模块：C:\Program Files\Rising\Rav\ProcCom.dll
    模块：C:\Program Files\Rising\Rav\RsCommX2.dll
    模块：C:\Program Files\Rising\Rav\Hooksys.dll
    模块：C:\Program Files\Rising\Rav\comx3.dll
    模块：C:\Program Files\Rising\Rav\Syslay.dll
    模块：C:\Program Files\Rising\Rav\CfgDll.dll
    模块：C:\Program Files\Rising\Rav\RSAPPMGR.dll
    模块：C:\Program Files\Rising\Rav\proccomm.dll
    模块：C:\Program Files\Rising\Rav\HookWeb.dll
    模块：C:\Program Files\Rising\Rav\MailMon.dll
    模块：C:\Program Files\Rising\Rav\FileMon.dll
    模块：C:\Program Files\Rising\Rav\MonRule.dll
    模块：C:\Program Files\Rising\Rav\moncom08.dll
    模块：C:\Program Files\Rising\Rav\defmon.dll
    模块：C:\Program Files\Rising\Rav\mondrv.dll
    模块：C:\Program Files\Rising\Rav\Rslog.dll
    模块：C:\Program Files\Rising\Rav\MonBase.dll
    模块：C:\Program Files\Rising\Rav\moncomm.dll
    模块：C:\WINDOWS\system32\MSVCP71.dll
    模块：C:\WINDOWS\system32\MSVCR71.dll
    模块：C:\Program Files\Rising\Rav\combase.dll
  进程：C:\Program Files\Rising\Rav\rsnetsvr.exe
    模块：C:\Program Files\Rising\Rav\ProcComm.dll
    模块：C:\WINDOWS\system32\MSVCP71.dll
    模块：C:\WINDOWS\system32\MSVCR71.dll
    模块：C:\Program Files\Rising\Rav\comx3.dll
    模块：C:\Program Files\Rising\Rav\Syslay.dll
    模块：C:\Program Files\Rising\Rav\NComm.dll
  进程：C:\WINDOWS\Explorer.EXE
    模块：C:\Program Files\Microsoft Office\OFFICE11\msohev.dll
    模块：D:\WinRAR\rarext.dll
    模块：C:\WINDOWS\system32\RavExt.dll
  进程：C:\WINDOWS\system32\winlogon.exe
    模块：C:\WINDOWS\system32\Ati2evxx.dll
  进程：C:\Program Files\Internet Explorer\iexplore.exe
    模块：C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
    模块：C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll
    模块：C:\WINDOWS\system32\mscoree.dll
    模块：C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx
    模块：C:\Program Files\Rising\Rav\RavScrCh.dll
    模块：C:\WINDOWS\system32\MSVCP71.dll
    模块：C:\WINDOWS\system32\MSVCR71.dll
    模块：C:\Program Files\Microsoft Office\OFFICE11\msohev.dll

======================================================
无签名自启动项(包含了IE劫持、服务、SPI等)：
  名称：
   注册键：◆ Logon　Run ↓
   注册值：
   类别：

  名称：StartCCC
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   注册值：C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
   类别：2

  名称：NeroFilterCheck
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   注册值：C:\WINDOWS\system32\NeroCheck.exe
   类别：2

  名称：BigDog303
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   注册值：C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
   类别：2

  名称：ms08_067_patch
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
   注册值："C:\WINDOWS\system32\nap32.exe" /run
   类别：2

  名称：
   注册键：◆ Serivce And Drivers ↓
   注册值：
   类别：

  名称：Adobe LM Service
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值："C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"
   类别：21

  名称：Ati HotKey Poller
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：%SystemRoot%\system32\Ati2evxx.exe
   类别：21

  名称：ATI Smart
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\system32\ati2sgag.exe
   类别：21

  名称：ati2mtag
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：system32\DRIVERS\ati2mtag.sys
   类别：21

  名称：Changer
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\Changer.sys
   类别：21

  名称：EagleNT
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：\??\C:\WINDOWS\system32\drivers\EagleNT.sys
   类别：21

  名称：i2omgmt
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\i2omgmt.sys
   类别：21

  名称：lbrtfdc
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\lbrtfdc.sys
   类别：21

  名称：PCIDump
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\PCIDump.sys
   类别：21

  名称：PDCOMP
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\PDCOMP.sys
   类别：21

  名称：PDFRAME
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\PDFRAME.sys
   类别：21

  名称：PDRELI
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\PDRELI.sys
   类别：21

  名称：PDRFRAME
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\PDRFRAME.sys
   类别：21

  名称：vmfilter303
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：system32\drivers\vmfilter303.sys
   类别：21

  名称：WDICA
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\WDICA.sys
   类别：21

  名称：Winsock
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\System32\Drivers\Winsock.sys
   类别：21

  名称：ZSMC303
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：System32\Drivers\usbVM303.sys
   类别：21

  名称：HidServ
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：%SystemRoot%\System32\hidserv.dll
   类别：11

  名称：uiszwruk
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\system32\sqmjjd.dll
   类别：11

  名称：vzguhmlq
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
   注册值：C:\WINDOWS\system32\jernuss.dll
   类别：11

  名称：
   注册键：◆ WinLogon ↓
   注册值：
   类别：

  名称：AtiExtEvent
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
   注册值：Ati2evxx.dll
   类别：1

  名称：
   注册键：◆ Internet Explorer ↓
   注册值：
   类别：

  名称：{D27CDB6E-AE6D-11CF-96B8-444553540000}
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units
   注册值：http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
   类别：6

  名称：
   注册键：◆ Internet Explorer ActiveX ↓
   注册值：
   类别：

  名称：
   注册键：◆ Explorer ↓
   注册值：
   类别：

  名称：application/octet-stream
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter
   注册值：mscoree.dll
   类别：8

  名称：application/x-complus
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter
   注册值：mscoree.dll
   类别：8

  名称：application/x-msdownload
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter
   注册值：mscoree.dll
   类别：8

  名称：{89B4C1CD-B018-4511-B0A1-5476DBF70820}
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components
   注册值：C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
   类别：1

  名称：
   注册键：◆ Explorer　ShellEx ↓
   注册值：
   类别：

  名称：WinRAR
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers
   注册值：D:\WinRAR\rarext.dll
   类别：9

  名称：WinRAR
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers
   注册值：D:\WinRAR\rarext.dll
   类别：9

  名称：ACE
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers
   注册值：C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
   类别：9

  名称：{42071714-76d4-11d1-8b24-00a0c9068ff3}
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
   注册值：deskpan.dll
   类别：7

  名称：{e82a2d71-5b2f-43a0-97b8-81be15854de8}
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
   注册值：C:\WINDOWS\system32\dfshim.dll
   类别：7

  名称：{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
   注册值：C:\WINDOWS\system32\dfshim.dll
   类别：7

  名称：{5E2121EE-0300-11D4-8D3B-444553540000}
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
   注册值：C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
   类别：7

  名称：{B41DB860-8EE4-11D2-9906-E49FADC173CA}
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
   注册值：D:\WinRAR\rarext.dll
   类别：7

  名称：
   注册键：◆ LSA Providers ↓
   注册值：
   类别：

  名称：Security Packages
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
   注册值：channel
   类别：3

  名称：Security Packages
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
   注册值：sv1_0
   类别：3

  名称：
   注册键：◆ ImageFile　Hijacks ↓
   注册值：
   类别：

  名称：WinRAR
   注册键：HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers
   注册值：D:\WinRAR\rarext.dll
   类别：9

  名称：
   注册键：◆ Print　Monitors ↓
   注册值：
   类别：

  名称：Microsoft Document Imaging Writer Monitor
   注册键：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors
   注册值：mdimon.dll
   类别：1

  名称：
   注册键：◆ Session　Manager ↓
   注册值：
   类别：

  名称：
   注册键：◆ Other ↓
   注册值：
   类别：


======================================================
无签名内核模块：
  模块基址：AB66F000　模块：\??\c:\documents and settings\xcm\桌面\狙剑\狙剑\SnipeSword.sys
  模块基址：BFDA6000　模块：\SystemRoot\System32\ativvaxx.dll
  模块基址：BFAD7000　模块：\SystemRoot\System32\ati3duag.dll
  模块基址：BFAC5000　模块：\SystemRoot\System32\atiok3x2.dll
  模块基址：BFA74000　模块：\SystemRoot\System32\atikvmag.dll
  模块基址：BFA18000　模块：\SystemRoot\System32\ati2cqag.dll
  模块基址：BF9D3000　模块：\SystemRoot\System32\ati2dvag.dll
  模块基址：F799D000　模块：\SystemRoot\System32\Drivers\dump_WMILIB.SYS
  模块基址：AE8AB000　模块：\SystemRoot\System32\Drivers\dump_atapi.sys
  模块基址：AE8C3000　模块：\SystemRoot\system32\drivers\vmfilter303.sys
  模块基址：AE92C000　模块：\SystemRoot\System32\Drivers\usbVM303.sys
  模块基址：F6EF8000　模块：\SystemRoot\system32\DRIVERS\ati2mtag.sys

======================================================
硬件设备及其支持文件列表：
  设备：ATI Radeon HD 2400 PRO
    支持文件：oem3.inf
    支持文件：ati2cqag.dll
    支持文件：ati2dvag.dll
    支持文件：ati2edxx.dll
    支持文件：ati2erec.dll
    支持文件：ati2evxx.dll
    支持文件：ati2evxx.exe
    支持文件：ati2mdxx.exe
    支持文件：ati2mtag.sys
    支持文件：ati3duag.dll
    支持文件：atiddc.dll
    支持文件：atidemgx.dll
    支持文件：atifglpf.xml
    支持文件：atiicdxx.dat
    支持文件：atiiiexx.dll
    支持文件：atikvmag.dll
    支持文件：atiodcli.exe
    支持文件：atiode.exe
    支持文件：atiogl.xml
    支持文件：atioglgl.xml
    支持文件：atioglx2.dll
    支持文件：atioglxx.dll
    支持文件：atiok3x2.dll
    支持文件：atipdlxx.dll
    支持文件：atitvo32.dll
    支持文件：ativcaxx.cpa
    支持文件：ativcaxx.vp
    支持文件：ativckxx.vp
    支持文件：ativcoxx.dll
    支持文件：ativdkxx.vp
    支持文件：ativva5x.dat
    支持文件：ativva6x.dat
    支持文件：ativvaxx.dat
    支持文件：ativvaxx.dll
    支持文件：ativvpxx.vp
    支持文件：oemdspif.dll
  设备：Realtek High Definition Audio
    支持文件：oem1.inf
    支持文件：RtkHDAud.sys
    支持文件：RTHDCPL.EXE
    支持文件：MicCal.exe
    支持文件：SkyTel.exe
    支持文件：SOUNDMAN.EXE
    支持文件：RTLCPL.EXE
    支持文件：ALCWZRD.EXE
    支持文件：ALCMTR.EXE
    支持文件：ALSNDMGR.CPL
    支持文件：RTSndMgr.CPL
    支持文件：RtlCPAPI.dll
    支持文件：RTCOMDLL.dll
    支持文件：RtlUpd.exe
  设备：ATI Function Driver for High Definition Audio - ATI AA01
    支持文件：oem5.inf
    支持文件：AtiHdAud.sys
  设备：Realtek RTL8169/8110 Family Gigabit Ethernet NIC
    支持文件：oem2.inf
    支持文件：Rtnic.sys
    支持文件：Rtnicxp.sys
    支持文件：Rtnic64.sys
  设备：Microsoft UAA Bus Driver for High Definition Audio
    支持文件：hdaudbus.inf
    支持文件：hdaudbus.sys
  设备：Microsoft UAA Bus Driver for High Definition Audio
    支持文件：hdaudbus.inf
    支持文件：hdaudbus.sys
  设备：VICKEY 3 PC Camera (Vimicro301 Neptune)
    支持文件：oem4.inf
    支持文件：usbVM303.sys
    支持文件：VM303Prp.Ax
    支持文件：VM303STI.dll
    支持文件：VM303TWN.DS
    支持文件：VM303TXP.DS
    支持文件：amcap.exe
    支持文件：Sti303.exe
    支持文件：VM303Cap.exe
    支持文件：VM303_STI.EXE
    支持文件：vmfilter303.sys
    支持文件：setupfilter.exe
    支持文件：3.dat
    支持文件：bcbsmp50.bpl
    支持文件：borlndmm.dll
    支持文件：Canvas.vmd
    支持文件：cc3250mt.dll
    支持文件：DriverPage.ini
    支持文件：FrameWizard.exe
    支持文件：Image109.bmp
    支持文件：Negative.vmd
    支持文件：RainDrop.vmd
    支持文件：Random.db
    支持文件：vcl50.bpl
    支持文件：vclx50.bpl
    支持文件：VMD101.vmd
    支持文件：VMD102.vmd
    支持文件：VMD103.vmd
    支持文件：VMD104.vmd
    支持文件：VMD105.vmd
    支持文件：VMD106.vmd
    支持文件：VMD107.vmd
    支持文件：VMD108.vmd
    支持文件：VMImage.ini
  设备：VICKEY 3 PC Camera (Vimicro301 Neptune)
    支持文件：oem4.inf
    支持文件：usbVM303.sys
    支持文件：VM303Prp.Ax
    支持文件：VM303STI.dll
    支持文件：VM303TWN.DS
    支持文件：VM303TXP.DS
    支持文件：amcap.exe
    支持文件：Sti303.exe
    支持文件：VM303Cap.exe
    支持文件：VM303_STI.EXE
    支持文件：vmfilter303.sys
    支持文件：setupfilter.exe
    支持文件：3.dat
    支持文件：bcbsmp50.bpl
    支持文件：borlndmm.dll
    支持文件：Canvas.vmd
    支持文件：cc3250mt.dll
    支持文件：DriverPage.ini
    支持文件：FrameWizard.exe
    支持文件：Image109.bmp
    支持文件：Negative.vmd
    支持文件：RainDrop.vmd
    支持文件：Random.db
    支持文件：vcl50.bpl
    支持文件：vclx50.bpl
    支持文件：VMD101.vmd
    支持文件：VMD102.vmd
    支持文件：VMD103.vmd
    支持文件：VMD104.vmd
    支持文件：VMD105.vmd
    支持文件：VMD106.vmd
    支持文件：VMD107.vmd
    支持文件：VMD108.vmd
    支持文件：VMImage.ini

======================================================
当前已安装软件列表：
  ACDSee 9.0.55
  Adobe Flash Player 10 ActiveX
  Adobe Photoshop CS2
  ATI - 软件卸载实用程序
  ATI Display Driver
  High Definition Audio Driver Package - KB888111
  Windows Installer 3.1 (KB893803)
  Hotfix for Windows XP (KB926239)
  Microsoft .NET Framework 2.0
  Microsoft Compression Client Pack 1.0 for Windows XP
  Nero Suite
  NVIDIA Drivers
  瑞星杀毒软件
  RealPlayer
  瑞星MS08-067内存补丁程序
  Adobe Flash Player 9 ActiveX
  Windows Media Format 11 runtime
  Windows Media Player 11
  WinRAR 压缩文件管理器
  Windows Media Format 11 runtime
  Windows Media Player 11
  Microsoft User-Mode Driver Framework Feature Pack 1.0
  ATI Catalyst Control Center
  CCC Help French
  ccc-core-static
  CCC Help Hungarian
  CCC Help Chinese Standard
  Catalyst Control Center Localization Chinese Standard
  CCC Help Portuguese
  CCC Help Chinese Traditional
  Adobe Photoshop CS2
  Skins
  CCC Help Spanish
  CCC Help Danish
  Catalyst Control Center Graphics Light
  WebFldrs XP
  ATI Parental Control & Encoder
  Catalyst Control Center Localization Polish
  Catalyst Control Center Localization Korean
  Catalyst Control Center Localization Spanish
  Catalyst Control Center Localization Portuguese
  Catalyst Control Center Graphics Previews Common
  Catalyst Control Center Localization Thai
  Catalyst Control Center Localization Turkish
  CCC Help English
  CCC Help Czech
  AVIVO
  CCC Help Russian
  CCC Help German
  Catalyst Control Center Core Implementation
  Catalyst Control Center Localization Hungarian
  CCC Help Italian
  CCC Help Norwegian
  Catalyst Control Center Localization Swedish
  Microsoft .NET Framework 2.0
  Adobe Stock Photos 1.0
  CCC Help Thai
  Catalyst Control Center Localization French
  Catalyst Control Center Localization Czech
  CCC Help Greek
  Catalyst Control Center Graphics Full New
  Catalyst Control Center Localization Italian
  CCC Help Korean
  CCC Help Japanese
  Catalyst Control Center Localization Dutch
  Adobe Common File Installer
  Microsoft Office Professional Edition 2003
  Catalyst Control Center Localization German
  Catalyst Control Center Localization Japanese
  Catalyst Control Center Localization Greek
  Microsoft Visual C++ 2005 Redistributable
  CCC Help Polish
  REALTEK GbE & FE Ethernet PCI NIC Driver
  CCC Help Dutch
  Adobe Bridge 1.0
  CCC Help Finnish
  Catalyst Control Center Localization Chinese Traditional
  Catalyst Control Center Localization Russian
  CCC Help Turkish
  VICKEY 3 PC Camera (Vimicro301 Neptune)
  ccc-core-preinstall
  ccc-utility
  Catalyst Control Center Graphics Full Existing
  Adobe Help Center 1.0
  Catalyst Control Center Localization Danish
  CCC Help Swedish
  Realtek High Definition Audio Driver
  Catalyst Control Center Localization Norwegian
  Catalyst Control Center Localization Finnish
  《劲舞团Season3.1》客户端安装程序
  千千静听 V4.6.9
  游戏茶苑大厅

======================================================
Host文件：
  127.0.0.1       localhost

======================================================
系统体检全部完成
  2009-06-13-14:34:29