[CODE]

2009-07-13,14:10:17

System Repair Engineer 2.6.8.980
Smallfrogs (http://www.KZTechs.com)

Windows Vista Home Basic Edition Service Pack 1 (Build 6001) - 

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Sidebar><C:\Program Files\Windows Sidebar\sidebar.exe /autoRun>  [(Verified)Microsoft Windows]
    <ISUSPM><"C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler>  [(Verified)Macrovision Corporation]
    <KavPFW><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kpfw32.exe" -startup>  [(Verified)"Zhuhai  Kingsoft Software Co.,Ltd"]
    <WMPNSCFG><C:\Program Files\Windows Media Player\WMPNSCFG.exe>  [(Verified)Microsoft Windows]
    <IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}><"C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020>  [File is missing]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Windows Defender><%ProgramFiles%\Windows Defender\MSASCui.exe -hide>  [(Verified)Microsoft Windows]
    <OnScreenDisplay><C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe>  [(Verified)Microsoft Windows]
    <QlbCtrl.exe><C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start>  [(Verified)Hewlett-Packard Company]
    <Apoint><C:\Program Files\Apoint2K\Apoint.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <KavStart><"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)"Zhuhai  Kingsoft Software Co.,Ltd"]
    <NeroCheck><C:\Windows\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <DpAgent><C:\Program Files\DigitalPersona\Bin\dpagent.exe>  [DigitalPersona, Inc.]
    <SysTrayApp><%ProgramFiles%\IDT\WDM\sttray.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <hpWirelessAssistant><C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe>  [(Verified)Hewlett-Packard Company]
    <360Safetray><; C:\Program Files\360\360Safe\safemon\360tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <NvCplDaemon><RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <NvMediaCenter><RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <Adobe Reader Speed Launcher><"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe">  [(Verified)"Adobe Systems, Incorporated"]
    <360Safebox><; "C:\Program Files\360\360safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <NBKeyScan><"C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe">  [(Verified)Nero AG]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><explorer.exe>  [(Verified)Microsoft Windows]
    <Userinit><c:\windows\system32\userinit.exe,>  [(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Windows Mail 7><"%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE>  [File is missing]

==================================
启动文件夹
[QQ游戏启动加速程序]
  <C:\Users\yy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\QQ游戏启动加速程序.lnk --> C:\PROGRA~1\腾讯游戏\QQGAME\Accel.exe [深圳市腾讯计算机系统有限公司]><N>
[QQ游戏启动加速程序]
  <C:\Users\yy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\QQ游戏启动加速程序.lnk --> C:\PROGRA~1\腾讯游戏\QQGAME\Accel.exe [深圳市腾讯计算机系统有限公司]><N>

==================================
服务
[Andrea ST Filters Service / AESTFilters][Running/Auto Start]
  <C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e7ea6efc\aestsrv.exe><Andrea Electronics Corporation>
[Contrl Center of Storm Media / ccosm][Running/Auto Start]
  <F:\暴风影音\stormliv.exe /asservice><北京暴风网际科技有限公司>
[Com4QLBEx / Com4QLBEx][Running/Manual Start]
  <"C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe"><Hewlett-Packard Development Company, L.P.>
[生物辨识验证服务 / DpHost][Running/Auto Start]
  <C:\Program Files\DigitalPersona\Bin\DpHostW.exe><DigitalPersona, Inc.>
[Google Software Updater / gusvc][Stopped/Auto Start]
  <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"><Google>
[hpqwmiex / hpqwmiex][Running/Manual Start]
  <"C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe"><Hewlett-Packard Development Company, L.P.>
[HP Service / hpsrv][Running/Auto Start]
  <C:\Windows\system32\Hpservice.exe><Hewlett-Packard Corporation>
[ICBC Daemon Service / ICBC Daemon Service][Running/Auto Start]
  <C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\IcbcDaemon.exe><N/A>
[InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
  <"C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe"><Macrovision Corporation>
[Kingsoft Basic Service / kaccore][Stopped/Manual Start]
  <"C:\Program Files\Kingsoft\KAC\Service\kaccore.exe"><Kingsoft Corporation>
[Kingsoft Antivirus WebShield Service / Kingsoft Antivirus WebShield Service][Running/Auto Start]
  <C:\Program Files\kingsoft\KSWebShieldSVC\KSWebShield.exe><Kingsoft Corporation>
[Kingsoft Internet Security Common Service / KISSvc][Running/Auto Start]
  <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KISSvc.EXE><Kingsoft Corporation>
[Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
  <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KPfwSvc.EXE"><Kingsoft Corporation>
[Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
  <"C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KWatch.EXE"><Kingsoft Corporation>
[Nero BackItUp Scheduler 3 / Nero BackItUp Scheduler 3][Running/Auto Start]
  <C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe><Nero AG>
[NMIndexingService / NMIndexingService][Running/Manual Start]
  <"C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe"><Nero AG>
[NVIDIA Display Driver Service / nvsvc][Running/Auto Start]
  <C:\Windows\system32\nvvsvc.exe><NVIDIA Corporation>
[PLFlash DeviceIoControl Service / PLFlash DeviceIoControl Service][Running/Auto Start]
  <C:\Windows\system32\IoctlSvc.exe><Prolific Technology Inc.>
[Audio Service / STacSV][Running/Auto Start]
  <C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e7ea6efc\STacSV.exe><IDT, Inc.>
[Tencent Software Update Service / TSUSVC][Stopped/Manual Start]
  <"C:\Program Files\Tencent\QQSoftMgr\TencentUpdateSvc.exe" -run><Tencent>

==================================
驱动程序
[HP Accelerometer / Accelerometer][Running/Manual Start]
  <system32\DRIVERS\Accelerometer.sys><Hewlett-Packard Corporation>
[adp94xx / adp94xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adp94xx.sys><Adaptec, Inc.>
[adpahci / adpahci][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpahci.sys><Adaptec, Inc.>
[adpu160m / adpu160m][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpu160m.sys><Adaptec, Inc.>
[adpu320 / adpu320][Stopped/Disabled]
  <\SystemRoot\system32\drivers\adpu320.sys><Adaptec, Inc.>
[aic78xx / aic78xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\djsvs.sys><Adaptec, Inc.>
[aliide / aliide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\aliide.sys><Acer Laboratories Inc.>
[Alps Pointing-device Filter Driver / ApfiltrService][Running/Manual Start]
  <system32\DRIVERS\Apfiltr.sys><Alps Electric Co., Ltd.>
[arc / arc][Stopped/Disabled]
  <\SystemRoot\system32\drivers\arc.sys><Adaptec, Inc.>
[arcsas / arcsas][Stopped/Disabled]
  <\SystemRoot\system32\drivers\arcsas.sys><Adaptec, Inc.>
[BC / BC][Running/Boot Start]
  <\SystemRoot\system32\Drivers\BC.sys><Kingsoft Corporation>
[Broadcom 802.11 网络适配器驱动程序 / BCM43XX][Running/Manual Start]
  <system32\DRIVERS\bcmwl6.sys><Broadcom Corporation>
[blbdrive / blbdrive][Stopped/Disabled]
  <\SystemRoot\system32\drivers\blbdrive.sys><N/A>
[bootsafe / bootsafe][Running/Boot Start]
  <\SystemRoot\system32\Drivers\bootsafe.sys><>
[Brother USB Mass-Storage Lower Filter Driver / BrFiltLo][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brfiltlo.sys><Brother Industries, Ltd.>
[Brother USB Mass-Storage Upper Filter Driver / BrFiltUp][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brfiltup.sys><Brother Industries, Ltd.>
[Brother MFC Serial Port Interface Driver (WDM) / Brserid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brserid.sys><Brother Industries Ltd.>
[Brother WDM Serial driver / BrSerWdm][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brserwdm.sys><Brother Industries Ltd.>
[Brother MFC USB Fax Only Modem / BrUsbMdm][Stopped/Disabled]
  <\SystemRoot\system32\drivers\brusbmdm.sys><Brother Industries Ltd.>
[Brother MFC USB Serial WDM Driver / BrUsbSer][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\brusbser.sys><Brother Industries Ltd.>
[cmdide / cmdide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\cmdide.sys><CMD Technology, Inc.>
[Transmeta Crusoe Processor Driver / Crusoe][Stopped/Disabled]
  <\SystemRoot\system32\drivers\crusoe.sys><Microsoft Corporation>
[Intel(R) PRO/1000 NDIS 6 Adapter Driver / E1G60][Stopped/Manual Start]
  <system32\DRIVERS\E1G60I32.sys><Intel Corporation>
[elxstor / elxstor][Stopped/Disabled]
  <\SystemRoot\system32\drivers\elxstor.sys><Emulex>
[ENE CIR Receiver / enecir][Running/Manual Start]
  <system32\DRIVERS\enecir.sys><ENE TECHNOLOGY INC.>
[Floppy Disk Driver / flpydisk][Stopped/Disabled]
  <system32\DRIVERS\flpydisk.sys><Microsoft Corporation>
[HpCISSs / HpCISSs][Stopped/Disabled]
  <\SystemRoot\system32\drivers\hpcisss.sys><Hewlett-Packard Company>
[HP Filter / hpdskflt][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\hpdskflt.sys><Hewlett-Packard Corporation>
[HpqKbFilter Driver / HpqKbFiltr][Running/Manual Start]
  <system32\DRIVERS\HpqKbFiltr.sys><Hewlett-Packard Development Company, L.P.>
[i2omp / i2omp][Stopped/Disabled]
  <\SystemRoot\system32\drivers\i2omp.sys><Microsoft Corporation>
[Intel RAID Controller Vista / iaStorV][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iastorv.sys><Intel Corporation>
[iirsp / iirsp][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iirsp.sys><Intel Corp./ICP vortex GmbH>
[IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start]
  <system32\DRIVERS\ipinip.sys><N/A>
[IPMIDRV / IPMIDRV][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ipmidrv.sys><Microsoft Corporation>
[ITEATAPI_Service_Install / iteatapi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iteatapi.sys><Integrated Technology Express, Inc.>
[ITERAID_Service_Install / iteraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\iteraid.sys><Integrated Technology Express, Inc.>
[JMCR / JMCR][Running/Manual Start]
  <system32\DRIVERS\jmcr.sys><JMicron Technology Corporation>
[KAVBase / KAVBase][Running/Auto Start]
  <\??\C:\Windows\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
[KAVBootC / KAVBootC][Running/Boot Start]
  <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
[KAVSafe / KAVSafe][Running/Auto Start]
  <\??\C:\Windows\system32\Drivers\KAVSafe.sys><Kingsoft Corporation>
[KNetWch / KNetWch][Running/System Start]
  <\??\C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KNetWch.SYS><Kingsoft Corporation>
[Kingsoft Firewall NDIS Filter / KNetWchV][Running/System Start]
  <system32\DRIVERS\KNetWchV.SYS><Kingsoft Corporation>
[KWatch3 / KWatch3][Running/Auto Start]
  <\??\C:\Windows\system32\Drivers\KWatch3.sys><Kingsoft Corporation>
[LSI_FC / LSI_FC][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_fc.sys><LSI Logic>
[LSI_SAS / LSI_SAS][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_sas.sys><LSI Logic>
[LSI_SCSI / LSI_SCSI][Stopped/Disabled]
  <\SystemRoot\system32\drivers\lsi_scsi.sys><LSI Logic>
[megasas / megasas][Stopped/Disabled]
  <\SystemRoot\system32\drivers\megasas.sys><LSI Logic Corporation>
[Microsoft Multi-Path Bus Driver / mpio][Stopped/Disabled]
  <\SystemRoot\system32\drivers\mpio.sys><Microsoft Corporation>
[Mraid35x / Mraid35x][Stopped/Disabled]
  <\SystemRoot\system32\drivers\mraid35x.sys><LSI Logic Corporation>
[msahci / msahci][Running/Boot Start]
  <\SystemRoot\system32\drivers\msahci.sys><Microsoft Corporation>
[Microsoft Multi-Path Device Specific Module / msdsm][Stopped/Disabled]
  <\SystemRoot\system32\drivers\msdsm.sys><Microsoft Corporation>
[nfrd960 / nfrd960][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nfrd960.sys><IBM Corporation>
[WinPcap Packet Driver (NPF) / NPF][Stopped/Manual Start]
  <system32\drivers\NPF.sys><CACE Technologies>
[N-trig HID Tablet Driver / ntrigdigi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ntrigdigi.sys><N-trig Innovative Technologies>
[Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start]
  <system32\drivers\nvhda32v.sys><NVIDIA Corporation>
[nvlddmkm / nvlddmkm][Running/Manual Start]
  <system32\DRIVERS\nvlddmkm.sys><NVIDIA Corporation>
[nvraid / nvraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nvraid.sys><NVIDIA Corporation>
[nvstor / nvstor][Stopped/Disabled]
  <\SystemRoot\system32\drivers\nvstor.sys><NVIDIA Corporation>
[IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start]
  <system32\DRIVERS\nwlnkflt.sys><N/A>
[IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start]
  <system32\DRIVERS\nwlnkfwd.sys><N/A>
[Parallel port driver / Parport][Stopped/Disabled]
  <\SystemRoot\system32\drivers\parport.sys><Microsoft Corporation>
[Parvdm / Parvdm][Stopped/Auto Start]
  <\SystemRoot\system32\drivers\parvdm.sys><Microsoft Corporation>
[QLogic Fibre Channel Miniport Driver / ql2300][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ql2300.sys><QLogic Corporation>
[QLogic iSCSI Miniport Driver / ql40xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ql40xx.sys><QLogic Corporation>
[Realtek 8169 NT Driver / RTL8169][Running/Manual Start]
  <system32\DRIVERS\Rtlh86.sys><Realtek Corporation>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
  <\??\C:\Windows\system32\drivers\SafeBoxKrnl.sys><360安全中心>
[SBP-2 Transport/Protocol Bus Driver / sbp2port][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sbp2port.sys><Microsoft Corporation>
[SFF Storage Class Driver / sffdisk][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sffdisk.sys><Microsoft Corporation>
[SiSRaid2 / SiSRaid2][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sisraid2.sys><Silicon Integrated Systems Corp.>
[SiSRaid4 / SiSRaid4][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sisraid4.sys><Silicon Integrated Systems>
[IDT High Definition Audio CODEC / STHDA][Running/Manual Start]
  <system32\DRIVERS\stwrt.sys><IDT, Inc.>
[Software Bus Driver / swenum][Running/Manual Start]
  <system32\DRIVERS\swenum.sys><Microsoft Corporation>
[Symc8xx / Symc8xx][Stopped/Disabled]
  <\SystemRoot\system32\drivers\symc8xx.sys><LSI Logic>
[Sym_hi / Sym_hi][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sym_hi.sys><LSI Logic>
[Sym_u3 / Sym_u3][Stopped/Disabled]
  <\SystemRoot\system32\drivers\sym_u3.sys><LSI Logic>
[TesSafe / TesSafe][Stopped/Manual Start]
  <\??\C:\Windows\system32\TesSafe.sys><TENCENT>
[Uli AGP Bus Filter / uliagpkx][Stopped/Manual Start]
  <\SystemRoot\system32\drivers\uliagpkx.sys><Microsoft Corporation>
[uliahci / uliahci][Stopped/Disabled]
  <\SystemRoot\system32\drivers\uliahci.sys><ULi Electronics Inc.>
[UlSata / UlSata][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ulsata.sys><Promise Technology, Inc.>
[ulsata2 / ulsata2][Stopped/Disabled]
  <\SystemRoot\system32\drivers\ulsata2.sys><Promise Technology, Inc.>
[Microsoft USB Generic Parent Driver / usbccgp][Stopped/Disabled]
  <\SystemRoot\system32\drivers\usbccgp.sys><Microsoft Corporation>
[viaide / viaide][Stopped/Disabled]
  <\SystemRoot\system32\drivers\viaide.sys><VIA Technologies, Inc.>
[vsmraid / vsmraid][Stopped/Disabled]
  <\SystemRoot\system32\drivers\vsmraid.sys><VIA Technologies Inc.,Ltd>
[Wacom Serial Pen HID Driver / WacomPen][Stopped/Disabled]
  <\SystemRoot\system32\drivers\wacompen.sys><Microsoft Corporation>
[Microsoft Watchdog Timer Driver / Wd][Stopped/Disabled]
  <\SystemRoot\system32\drivers\wd.sys><Microsoft Corporation>

==================================
浏览器加载项
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <F:\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[Adobe PDF Link Helper]
  {18DF081C-E8AD-4283-A596-FA578C2EBDC3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, Adobe Systems Incorporated>
[Skype add-on (mastermind)]
  {22BF413B-C6D2-4d91-82A9-A0F997BA588C} <C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll, Skype Technologies S.A.>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <F:\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
[CBBrowerBuddy Class]
  {A412E581-59B2-485E-834F-C5F0C0268C79} <C:\Program Files\Kingsoft\PowerWord Lite\CBEBand.DLL, Copyright (c) Kingsoft Corporation Limited. All rights reserved.>
[Google Toolbar Notifier BHO]
  {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll, Google Inc.>
[FlashGetBHO]
  {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} <C:\Users\yy\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll, FlashGet>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360\360Safe\safemon\safemon.dll, 360.CN>
[ICBC Anti-Phishing class]
  {BB4491A2-D11A-4c6b-91C0-B53246A3122B} <C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\Icbc_AntiPhishing.dll, 中国工商银行>
[kingsoft browser shield]
  {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <F:\Thunder\Thunder.exe, ShenZhen Thunder Networking Technologies,LTD>
[Skype add-on (button)]
  {77BF5300-1474-4EC7-9980-D32B190E9B07} <C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll, Skype Technologies S.A.>
[CBBrowerBuddy Class]
  {A412E581-59B2-485E-834F-C5F0C0268C79} <C:\Program Files\Kingsoft\PowerWord Lite\CBEBand.DLL, Copyright (c) Kingsoft Corporation Limited. All rights reserved.>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <F:\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[PhotoDrawEx Class]
  {05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} <C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Qzone\bin\QQPhotoDrawEx\QQPhotoDrawEx.dll, TENCENT>
[IFlashGetNetscapeEx Class]
  {116BA71C-8187-4F15-9A1F-C9D6289155D1} <C:\Users\yy\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll, FlashGet>
[Player Class]
  {11F2A418-94B2-4e16-9B0C-B00C0435F903} <C:\Program Files\Tencent\QQLive\LiveMedia.dll, Tencent>
[VistaWUWebControl Class]
  {12A66224-5E8A-4679-8941-0B9B960BF5EA} <%SystemRoot%\system32\wuwebv.dll, N/A>
[Fade]
  {16B280C5-EE70-11D1-9066-00C04FD9189D} <C:\Windows\system32\Dxtmsft.dll, Microsoft Corporation>
[Adobe PDF Link Helper]
  {18DF081C-E8AD-4283-A596-FA578C2EBDC3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, Adobe Systems Incorporated>
[InstallHelper Class]
  {1DABF8D5-8430-4985-9B7F-A30E53D709B3} <C:\Program Files\Tencent\QQLive\QQLiveInstaller.dll, >
[iTrusPTA Class]
  {1E0DFFCF-27FF-4574-849B-55007349FEDA} <C:\Windows\system32\aliedit\pta.dll, >
[Skype add-on (mastermind)]
  {22BF413B-C6D2-4D91-82A9-A0F997BA588C} <C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll, Skype Technologies S.A.>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\Windows\System32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <C:\Windows\system32\mshtml.dll, Microsoft Corporation>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\System32\msxml3.dll, N/A>
[JetCarNetscape Class]
  {2974c985-8151-4de5-b23c-b875f0a8522f} <C:\Users\yy\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll, FlashGet>
[XML Document]
  {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\System32\msxml3.dll, N/A>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <F:\Thunder\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD>
[EditCtrl Class]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\Windows\system32\aliedit\aliedit.dll, >
[HHCtrl Object]
  {52A2AAAE-085D-4187-97EA-8C30DB990436} <%SystemRoot%\System32\hhctrl.ocx, N/A>
[WangWangX Class]
  {5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} <C:\Program Files\Alisoft\WangWang\AliIMX.dll, Alibaba software (Shanghai) Corporation.>
[PowerPlayer Control]
  {5EC7C511-CD0F-42E6-830C-1BD9882F3458} <C:\PROGRA~1\PPStream\110~2.268\POWERP~1.DLL, PPStream Inc.>
[CAntiVersion Object]
  {5EFE0AA6-B28B-41BD-9B3C-02AA3F79EA9A} <C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\AntiPhishingVer.dll, 中国工商银行>
[XMP Class]
  {6483F145-A768-4C41-AACC-52D4D7845851} <C:\ProgramData\Thunder Network\KanKan\xplayer.dll_1_work, ShenZhen Thunder Networking Technologies,LTD>
[Yodao Toolbar Helper]
  {6516E5BB-1186-4E2B-B8B8-2DC0E35AB1FA} <C:\Program Files\Yodao\Toolbar\ydtbv1.01\YodaoToolbar.dll, N/A>
[QQLiveFile Class]
  {6B232760-90F1-41c3-9902-C8552C1D8A72} <C:\Program Files\Tencent\QQLive\FileVersion.dll, Tencent>
[StormPlayer Object]
  {6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB} <F:\暴风影音\mps.dll, 北京暴风网际科技有限公司>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <%SystemRoot%\system32\wmp.dll, N/A>
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <F:\Thunder\Components\InMedia\MediaAddin19.dll, ShenZhen Thunder Networking Technologies,LTD>
[Skype add-on (button)]
  {77BF5300-1474-4EC7-9980-D32B190E9B07} <C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll, Skype Technologies S.A.>
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360\360Safe\live.dll, 360.cn>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\Windows\system32\ieframe.dll, Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <F:\Thunder\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
[XML DOM 文档 5.0]
  {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[Free Threaded XML DOM Document 5.0]
  {88D969E6-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XSL Template 5.0]
  {88D969E8-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XML HTTP 5.0]
  {88D969EA-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XML DOM Document 6.0]
  {88D96A05-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, N/A>
[XML HTTP 6.0]
  {88D96A0A-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, N/A>
[SSOForPTLogin Class]
  {8FC1EE75-72B3-4A23-B987-2B1C4C8A611B} <C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOAxCtrlForPTLogin.dll, Tencent>
[OFrameObject Class]
  {9701758C-4373-482E-B13C-776C048EC890} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5814.166.(147).dll, ShenZhen Thunder Networking Technologies Ltd.>
[VersionDetector Class]
  {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} <C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.15.(147).dll, ShenZhen Thunder Networking Technologies,Ltd.>
[CBBrowerBuddy Class]
  {A412E581-59B2-485E-834F-C5F0C0268C79} <C:\Program Files\Kingsoft\PowerWord Lite\CBEBand.DLL, Copyright (c) Kingsoft Corporation Limited. All rights reserved.>
[DapCtrl Class]
  {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5814.166.(147).dll, ShenZhen Thunder Networking Technologies Ltd.>
[Google Toolbar Notifier BHO]
  {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll, Google Inc.>
[FlashGetBHO]
  {B070D3E3-FEC0-47D9-8E8A-99D4EEB3D3B0} <C:\Users\yy\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll, FlashGet>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360\360Safe\safemon\safemon.dll, 360.CN>
[ICBC Anti-Phishing class]
  {BB4491A2-D11A-4C6B-91C0-B53246A3122B} <C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\Icbc_AntiPhishing.dll, 中国工商银行>
[QQPlayerCtrl Class]
  {CD108273-D434-43E6-AA90-1469F97EB398} <C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\bin\QQMusic\QzoneMusic.dll, 深圳腾讯科技>
[AUDIO__MID Moniker Class]
  {CD3AFA74-B84F-48F0-9393-7EDC34128127} <%SystemRoot%\system32\wmp.dll, N/A>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <%SystemRoot%\system32\wmp.dll, N/A>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <%SystemRoot%\system32\wmp.dll, N/A>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <%SystemRoot%\system32\wmp.dll, N/A>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <F:\暴风影音\Codec\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\Windows\system32\Macromed\Flash\Flash10b.ocx, Adobe Systems, Inc.>
[kingsoft browser shield]
  {D963BE1A-6B35-47DB-B002-49FAE71D85CC} <C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KASBrowserShield.DLL, Kingsoft Corporation>
[QQLive Class]
  {D9EBCF5D-3F8F-4b6a-89BA-70577BE73C62} <C:\Program Files\Tencent\QQLive\LiveAPI.dll, Tencent>
[PlayerCtrl Class]
  {E05BC2A3-9A46-4A32-80C9-023A473F5B23} <C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\bin\QQMusic\QzoneMusic.dll, 深圳腾讯科技>
[RevealTrans]
  {E31E87C4-86EA-4940-9B8A-5BD5D179A737} <C:\Windows\system32\Dxtmsft.dll, Microsoft Corporation>
[TimwpDll.TimwpCheck]
  {ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} <C:\PROGRA~1\Tencent\QQ\Bin\Timwp.dll, Tencent>
[XML HTTP Request]
  {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\System32\msxml3.dll, N/A>
[XPPlayer Class]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.58110.250.(978).dll, ShenZhen Thunder Networking Technologies,LTD>
[XML DOM Document 3.0]
  {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, N/A>
[Free Threaded XML DOM Document 3.0]
  {F5078F33-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, N/A>
[XML HTTP 3.0]
  {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, N/A>
[XSL Template 3.0]
  {F5078F36-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, N/A>
[XML DOM Document]
  {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, N/A>
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, N/A>
[webmod Class]
  {FEE3C8C5-9BEA-4079-AB36-63ECABFC7392} <C:\Program Files\Alisoft\WangWang\alidcp.dll, Alipay.com Co.,Ltd>
[&Yodao搜索]
  <res://C:\Program Files\Yodao\Toolbar\ydtbv1.01\YodaoToolbar.dll/158.htm, N/A>
[+放进我的口袋(&Y)]
  <http://koudai.360.cn/post_js.html, N/A>
[使用光影编辑和美化]
  <C:\Program Files\nEO iMAGING\NeoOpenNeo.htm, N/A>
[使用快车3下载]
  <C:\Users\yy\AppData\Roaming\FlashGetBHO\GetUrl.htm, N/A>
[使用快车3下载全部链接]
  <C:\Users\yy\AppData\Roaming\FlashGetBHO\GetAllUrl.htm, N/A>
[使用迅雷下载]
  <F:\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <F:\Thunder\Program\GetAllUrl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\Bin\AddEmotion.htm, N/A>

==================================
正在运行的进程
[PID: 432 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 616 / SYSTEM][C:\Windows\system32\wininit.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 660 / SYSTEM][C:\Windows\system32\services.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 672 / SYSTEM][C:\Windows\system32\lsass.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\system32\DPPWDFLT.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 680 / SYSTEM][C:\Windows\system32\lsm.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 848 / SYSTEM][C:\Windows\system32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 892 / SYSTEM][C:\Windows\system32\nvvsvc.exe]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 920 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 956 / SYSTEM][C:\Windows\System32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{16E596E4-A506-4149-AC0E-619ACAA48714}\mpengine.dll]  [Microsoft Corporation, 1.1.4803.0]
[PID: 1004 / LOCAL SERVICE][C:\Windows\System32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\system32\stapo.dll]  [IDT, Inc., 1.0.6087.0]
[PID: 1036 / SYSTEM][C:\Windows\System32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
[PID: 1068 / SYSTEM][C:\Windows\system32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 1088 / SYSTEM][C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e7ea6efc\STacSV.exe]  [IDT, Inc., 1.0.6087.0]
    [C:\Windows\system32\stapi32.dll]  [IDT, Inc., 1.0.6087.0]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 1136 / SYSTEM][C:\Windows\system32\winlogon.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 1288 / NETWORK SERVICE][C:\Windows\system32\SLsvc.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
[PID: 1312 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 1392 / SYSTEM][C:\Windows\system32\Hpservice.exe]  [Hewlett-Packard Corporation, 3, 10, 2, 1]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\system32\accelerometerDLL.dll]  [Hewlett-Packard Corporation, 3, 10, 2, 1]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 1528 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 1580 / SYSTEM][C:\Windows\system32\rundll32.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\system32\NVSVC.DLL]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Windows\system32\nvapi.dll]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
[PID: 1776 / SYSTEM][C:\Windows\system32\WLANExt.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\System32\bcmihvsrv.dll]  [Broadcom Corporation, 5.10.38.26]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 1784 / SYSTEM][C:\Program Files\kingsoft\KSWebShieldSVC\KSWebShield.exe]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kwssp.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kxestat.dll]  [Kingsoft Corporation, 2009,06,17,27]
[PID: 200 / SYSTEM][C:\Windows\System32\spoolsv.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\System32\mdimon.dll]  [Microsoft Corporation, 11.3.2175.0]
    [C:\Windows\system32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.2175.0]
[PID: 376 / SYSTEM][C:\Program Files\DigitalPersona\Bin\DpHostW.exe]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DPILPro.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Windows\system32\dpHMatch.dll]  [DigitalPersona, Inc., 4.1.4.743]
    [C:\Program Files\DigitalPersona\Bin\DpPMInfo.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DPCOper2.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DPCrStor.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Windows\system32\DPFPApi.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DPMux.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DPDB.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Windows\system32\DPCLBACK.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DPDeviceAfss.dll]  [DigitalPersona, Inc., 4.3.0.1731]
    [C:\Program Files\DigitalPersona\Bin\DPDeviceAuthentec.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DPDeviceUpekBs.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DPDeviceValidity.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DPDevice2.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Windows\system32\dpHFtrEx.dll]  [DigitalPersona, Inc., 4.1.4.743]
[PID: 452 / yy][C:\Windows\system32\taskeng.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\system32\nvapi.dll]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 612 / yy][C:\Windows\system32\Dwm.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
[PID: 1524 / yy][C:\Windows\Explorer.EXE]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\ktaskbar.dll]  [Kingsoft Corporation, 2009,03,11,790]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Windows\system32\nvcpl.dll]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Windows\system32\nvapi.dll]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Program Files\Hewlett-Packard\HP QuickTouch\HPShared.dll]  [ Hewlett-Packard Development Company, L.P., 1.0.8]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [F:\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    [F:\Thunder\Components\ResWorker\DsBho_01.dll]  [ShenZhen Thunder Networking Technologies,LTD, 1, 0, 0, 20]
    [F:\Thunder\Components\ResWorker\DataProcessor_01.dll]  [ShenZhen Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    [C:\Windows\system32\SOGOUPY.IME]  [Sogou.com Inc., 4.1.1.2379]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2008,07,09,459]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\NBShell.dll]  [Nero AG, 3, 5, 3, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Program Files\Alisoft\WangWang\AliIMExt.dll]  [Alibaba software (Shanghai) Corporation., 1.0.0.1]
    [C:\Program Files\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll]  [Nero AG, 3, 3, 3, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [F:\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.34]
    [C:\Windows\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Windows\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Nero\Lib\MediaLibraryNSE.dll]  [Nero AG, 3.3.8.0]
[PID: 1728 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 2116 / SYSTEM][C:\Windows\system32\taskeng.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 2208 / yy][C:\Program Files\Windows Defender\MSASCui.exe]  [Microsoft Corporation, 1.1.1600.0]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
[PID: 2220 / yy][C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe]  [ Hewlett-Packard Development Company, L.P., 1.0.8]
    [C:\Program Files\Hewlett-Packard\HP QuickTouch\HPShared.dll]  [ Hewlett-Packard Development Company, L.P., 1.0.8]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 2244 / yy][C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe]  [ Hewlett-Packard Development Company, L.P., 6, 4, 4, 1]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBSERVICE.DLL]  [Hewlett-Packard Development Company, L.P., 6, 3, 5, 2]
    [C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\hpqExec.DLL]  [Hewlett-Packard Company, 6, 3, 4, 2]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
[PID: 2276 / yy][C:\Program Files\Apoint2K\Apoint.exe]  [Alps Electric Co., Ltd., 7.0.2101.272]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\Apoint2K\ApResCS.dll]  [Alps Electric Co., Ltd., 5.5.1701.21]
    [C:\Windows\system32\VXDIF.DLL]  [Alps Electric Co., Ltd., 6.0.3.19]
    [C:\Program Files\Apoint2K\Apoint.DLL]  [Alps Electric Co., Ltd., 7.0.202.271]
    [C:\Program Files\Apoint2K\EzAuto.dll]  [Alps Electric Co., Ltd., 5.5.1.93]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\Apoint2K\EzLaunch.DLL]  [Alps Electric Co., Ltd., 7.0.202.90]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 2308 / yy][C:\Program Files\DigitalPersona\Bin\DpAgent.exe]  [DigitalPersona, Inc., ]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Windows\system32\DPFPApi.DLL]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Windows\system32\DPCLBACK.dll]  [DigitalPersona, Inc., 4.3.0.1737]
    [C:\Program Files\DigitalPersona\Bin\DpOCache.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
[PID: 2328 / SYSTEM][C:\Program Files\kingsoft\KSWebShieldSVC\KSWebShield.exe]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
[PID: 2340 / yy][C:\Program Files\IDT\WDM\sttray.exe]  [IDT, Inc., 1.0.6087.0]
    [C:\Program Files\IDT\WDM\STLang.dll]  [IDT, Inc., 1.0.6087.0]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Windows\system32\stapi32.dll]  [IDT, Inc., 1.0.6087.0]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 2348 / yy][C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe]  [Hewlett-Packard Development Company, L.P., 3, 0, 9, 1]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 2516 / yy][C:\Program Files\kingsoft\KSWebShieldSVC\kwstray.exe]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 2624 / yy][C:\Windows\System32\rundll32.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\system32\NvMcTray.dll]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\System32\nvapi.dll]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 2836 / yy][C:\Program Files\360\360safebox\safeboxTray.exe]  [360安全中心, 2, 5, 2, 1005]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\360\360safebox\360wservice.dll]  [360安全中心, 1, 0, 0, 1004]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\360\360safebox\safeboxapi.dll]  [360安全中心, 2, 3, 0, 1001]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\360\360safebox\liveupdate.dll]  [360安全中心, 1, 2, 0, 1010]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
[PID: 2860 / yy][C:\Program Files\Windows Sidebar\sidebar.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Windows\system32\icm32.dll]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\system32\nvd3dum.dll]  [NVIDIA Corporation, 7.15.11.7904]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
[PID: 2868 / yy][C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe]  [Macrovision Corporation, 6.1.100.64905   ]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 3136 / yy][C:\Program Files\Windows Media Player\wmpnscfg.exe]  [Microsoft Corporation, 11.0.6000.6324 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 3180 / SYSTEM][C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e7ea6efc\aestsrv.exe]  [Andrea Electronics Corporation, 1.0.32.3]
[PID: 3232 / SYSTEM][F:\暴风影音\stormliv.exe]  [北京暴风网际科技有限公司, 3, 9, 5, 29]
    [F:\暴风影音\MSVCP60.dll]  [Microsoft Corporation, 6.02.3104.0]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [F:\暴风影音\bfoptdll.dll]  [北京暴风网际科技有限公司, 3, 8, 7, 16]
    [F:\暴风影音\box\BoxLog.dll]  [北京暴风网际科技有限公司, 3, 9, 5, 30]
[PID: 3304 / SYSTEM][C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\IcbcDaemon.exe]  [N/A, ]
    [C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\MSVCP90.dll]  [Microsoft Corporation, 9.00.21022.8]
    [C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\MSVCR90.dll]  [Microsoft Corporation, 9.00.21022.8]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 3516 / yy][C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMSQLDB.dll]  [Nero AG, 3.3.8.0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\Common Files\Nero\Lib\NMLogCxx.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\log4cxx.dll]  [Nero AG, 1, 0, 1, 0]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\Common Files\Nero\Lib\NMIndexingServicePS.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMCoFoundation.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMPluginBase.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMFullTextExtraction.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMSearchPluginSimilarImages.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMDataServices.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvrPS.dll]  [Nero AG, 3.3.8.0]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Program Files\Common Files\Nero\Lib\NMSlideShow.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NeroIPP.dll]  [Nero AG, 5, 1, 3, 100]
[PID: 3604 / SYSTEM][C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe]  [Nero AG, 3, 5, 3, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\NB.dll]  [Nero AG, 3, 5, 3, 0]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\NeroAPIGlueLayerUnicode.dll]  [Nero AG, 8.3.6.0]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\LBFC.dll]  [Nero AG, 3, 5, 3, 0]
    [C:\Program Files\Nero\Nero8\Nero BackItUp\NBHDMgr.dll]  [Nero AG, 3, 5, 3, 0]
[PID: 3728 / SYSTEM][C:\Windows\system32\IoctlSvc.exe]  [Prolific Technology Inc., 1, 6, 0, 0]
[PID: 3776 / NETWORK SERVICE][C:\Windows\system32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 3804 / LOCAL SERVICE][C:\Windows\system32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 3848 / SYSTEM][C:\Windows\System32\svchost.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 3888 / SYSTEM][C:\Windows\system32\SearchIndexer.exe]  [Microsoft Corporation, 7.0.6001.16503 (longhorn(wmbla).080526-2159)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 2508 / SYSTEM][C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe]  [Hewlett-Packard Development Company, L.P., 2, 00, 2, 4]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 3176 / yy][C:\Program Files\Apoint2K\ApMsgFwd.exe]  [Alps Electric Co., Ltd., 7, 0, 0, 20]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
[PID: 3212 / yy][C:\Program Files\Apoint2K\Apntex.exe]  [Alps Electric Co., Ltd., 7.0.1.29]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\system32\VXDIF.DLL]  [Alps Electric Co., Ltd., 6.0.3.19]
    [C:\Program Files\Apoint2K\Apoint.DLL]  [Alps Electric Co., Ltd., 7.0.202.271]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 3632 / NETWORK SERVICE][C:\Program Files\Windows Media Player\wmpnetwk.exe]  [Microsoft Corporation, 11.0.6000.6324 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
[PID: 528 / SYSTEM][C:\Windows\system32\wbem\wmiprvse.exe]  [Microsoft Corporation, 6.0.6001.18226 (vistasp1_gdr.090302-1506)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Program Files\Common Files\Microsoft Shared\office11\mso.dll]  [Microsoft Corporation, 11.0.8221]
[PID: 3760 / SYSTEM][C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe]  [Nero AG, 3.3.8.0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\Common Files\Nero\Lib\NMIndexingServicePS.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMLogCxx.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\log4cxx.dll]  [Nero AG, 1, 0, 1, 0]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\Common Files\Nero\Lib\NMDataServices.dll]  [Nero AG, 3.3.8.0]
    [C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvrPS.dll]  [Nero AG, 3.3.8.0]
[PID: 1224 / yy][C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE]  [Hewlett-Packard Development Company, L.P., 3.0.4.1]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 2852 / SYSTEM][C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe]  [Hewlett-Packard Development Company, L.P., 6.4.4.2]
[PID: 4440 / yy][C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe]  [, 1, 10, 1, 6]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
[PID: 4840 / yy][C:\Program Files\360\360Safe\safemon\360tray.exe]  [360安全中心, 5, 0, 0, 1020]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\360\360Safe\safemon\360compro.dll]  [360安全中心, 1, 0, 0, 1009]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Program Files\360\360Safe\safemon\urlproc.dll]  [360.CN, 1, 0, 0, 1006]
    [C:\Program Files\360\360Safe\safemon\SafeKrnl.dll]  [奇虎网, 5, 0, 0, 1001]
    [C:\Program Files\360\360Safe\AntiAdwa.dll]  [360Safe.com, 4, 2, 0, 1002]
    [C:\Program Files\360\360Safe\safemon\360webpro.dll]  [360.CN, 1, 0, 0, 1008]
    [C:\Program Files\360\360Safe\live.dll]  [360.cn, 1, 0, 2, 1005]
    [C:\Program Files\360\360Safe\pdown.dll]  [360Safe.com, 1, 1, 0, 0]
    [C:\Program Files\360\360Safe\LiveUpd360.dll]  [360Safe.com, 1, 1, 0, 1004]
    [C:\Program Files\360\360Safe\360net.dll]  [奇虎网, 1, 1, 3, 1006]
[PID: 5216 / yy][C:\Windows\system32\wbem\unsecapp.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
[PID: 6292 / yy][F:\暴风影音\stMgr.exe]  [北京暴风网际科技有限公司, 3, 9, 5, 24]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [F:\暴风影音\bfoptdll.dll]  [北京暴风网际科技有限公司, 3, 8, 7, 16]
    [F:\暴风影音\MSVCP60.dll]  [Microsoft Corporation, 6.02.3104.0]
    [F:\暴风影音\corelog.dll]  [北京暴风网际科技有限公司, 3, 9, 5, 29]
    [F:\暴风影音\Tips.dll]  [北京暴风网际科技有限公司, 3, 9, 5, 15]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
[PID: 2728 / yy][C:\Windows\system32\conime.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
[PID: 3648 / yy][C:\Windows\system32\taskeng.exe]  [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
[PID: 5504 / yy][C:\Windows\system32\dfrgui.exe]  [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
[PID: 7532 / SYSTEM][C:\Windows\system32\defrag.exe]  [Microsoft Corp., 6.0.6000.16386 (vista_rtm.061101-2205)]
[PID: 7632 / SYSTEM][C:\Windows\system32\DfrgNtfs.exe]  [Microsoft Corp., 6.0.6000.16386 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 7004 / yy][C:\Program Files\Tencent\QQ\Bin\QQ.exe]  [Tencent, 1, 26, 760, 0]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6001.18000_none_886786f450a74a05\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\Tencent\QQ\Bin\Common.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_11ecb0ab9b2caf3c\ATL80.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1434_none_d08b6002442c891f\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.1434]
    [C:\Program Files\Tencent\QQ\Bin\KernelUtil.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\GF.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll]  [Microsoft Corporation, 5.2.6001.18065 (vistasp1_gdr.080429-1705)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\Tencent\QQ\Bin\AppUtil.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\MainFrame.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\DigitalPersona\Bin\DpoSet.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\Tencent\QQ\Bin\MSVCP60.dll]  [Microsoft Corporation, 6.00.8168.0]
    [C:\Program Files\Tencent\QQ\Bin\TaskTray.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Hewlett-Packard\HP QuickTouch\HPShared.dll]  [ Hewlett-Packard Development Company, L.P., 1.0.8]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\MFC80CHS.DLL]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\Tencent\QQ\Bin\TXPFProxy.dll]  [N/A, ]
    [C:\Program Files\Tencent\QQ\Bin\AppMisc.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\ChatFrame.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\ConfigCenter.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\CustomFace.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\IM.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\KernelMisc.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\LongCnn.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\ContactInfoFrame.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\MsgMgr.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\SkinMgr.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\QInterLive.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\AppCtrl.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\SystemMsg.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.PaiPai\Bin\PaiPai.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.AudioVideo\Bin\AudioVideo.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.MMOG\Bin\MMOG.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Soso\Bin\Soso.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Qzone\Bin\Qzone.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.Weather\Bin\Weather.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.SoBar\Bin\SoBar.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.PaiPaiGift\Bin\PaiPaiGift.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQLive\Bin\QQLive.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQMusic\Bin\QQMusic.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.taotao\Bin\Taotao.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOPlatform.dll]  [Tencent, 1.1.1.6]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOCommon.DLL]  [Tencent, 1.1.1.3]
    [C:\Program Files\Tencent\QQ\Bin\BasicCtrlDll.dll]  [TENCENT, 8,0,773,1801]
    [C:\Program Files\Tencent\QQ\Plugin\Com.Tencent.QQShow\Bin\FlashAvatarDll.dll]  [Tencent, 1.26.1.26]
    [C:\Windows\system32\Macromed\Flash\Flash10b.ocx]  [Adobe Systems, Inc., 10,0,22,87]
    [C:\Program Files\DigitalPersona\Bin\DpFbview.dll]  [DigitalPersona, Inc., ]
    [C:\Program Files\Tencent\QQ\Bin\RICHED20.dll]  [Microsoft Corporation, 5.50.99.2012]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.advertisement\Bin\Advertisement.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.snsapp\Bin\SNSApp.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.NetBar\Bin\NetBar.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.wireless\Bin\Wireless.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqshow\Bin\QQShow.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.crm\Bin\CRM.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.wenwen\Bin\WenWen.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqgame\Bin\QQGame.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.mail\Bin\Mail.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.paycenter\Bin\PayCenter.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqring\Bin\QQRing.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqvip\Bin\QQVip.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\InformationBox.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\GroupApp.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\vqqsdl.dll]  [Tencent, 5, 0, 3, 24]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qbar\Bin\QBar.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqpet\Bin\QQPet.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.today\Bin\Today.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.memo\Bin\Memo.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.filetransfer\Bin\FileTransfer.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.gamelife\Bin\GameLife.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.qqwebsite\Bin\QQWebsite.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL]  [Microsoft Corporation, 11.0.5510]
    [C:\Windows\system32\SOGOUPY.IME]  [Sogou.com Inc., 4.1.1.2379]
    [C:\Program Files\Tencent\QQ\Bin\AddrSearch.dll]  [Tencent, 2, 3, 10, 12]
    [C:\Program Files\Tencent\QQ\Plugin\com.tencent.winks\Bin\Winks.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\Camera.dll]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\Tencent\QQ\Bin\SCCore.dll]  [Tencent, 1, 7, 1, 6]
[PID: 6252 / yy][C:\Program Files\Tencent\QQ\Bin\TXPlatform.exe]  [Tencent, 1, 26, 760, 0]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\DigitalPersona\Bin\DpoFeedb.dll]  [DigitalPersona, Inc., 4.3.0.3276]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
    [C:\Program Files\Tencent\QQ\Bin\TXPFProxy.dll]  [N/A, ]
[PID: 7432 / yy][F:\文件\SRE9d2c65c3.EXE]  [Smallfrogs Studio, 2.6.8.980]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
    [C:\Program Files\360\360Safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1017]
    [C:\Program Files\kingsoft\KSWebShieldSVC\kswebshield.dll]  [Kingsoft Corporation, 2009,07,08,187]
[PID: 6284 / SYSTEM][C:\Windows\system32\SearchProtocolHost.exe]  [Microsoft Corporation, 7.0.6001.16503 (longhorn(wmbla).080526-2159)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]
[PID: 7084 / SYSTEM][C:\Windows\system32\SearchFilterHost.exe]  [Microsoft Corporation, 7.0.6001.16503 (longhorn(wmbla).080526-2159)]
    [C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\comctl32.dll]  [Microsoft Corporation, 6.10 (vista_rtm.061101-2205)]

==================================
文件关联
.TXT  OK. [%systemroot%\system32\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["%SystemRoot%\hh.exe" %1]
.HLP  Error. [%systemroot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  Error. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 localhost

==================================
进程特权扫描
N/A

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]