[CODE] 2009-08-14,23:18:04 System Repair Engineer 2.7.1.1261 Smallfrogs (http://www.KZTechs.com) Windows Vista Home Basic Edition Service Pack 1 (Build 6001) - 管理权限用户 - 完整功能 以下内容被选中: 所有的启动项目(包括注册表、启动文件夹、服务等) 浏览器加载项 正在运行的进程(包括进程模块信息) 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 进程特权扫描 计划任务 API HOOK 隐藏进程 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows] [(Verified)Hewlett-Packard Company] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [Cognizance Corporation] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [ASUSTeK Computer INC.] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <"C:\Program Files\P4P\P4P.exe"> [] [(Verified)ASUSTeK Computer Inc.] [] [(Verified)China Merchants Bank] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [ Beijing WatchData System Co., Ltd.] <"C:\Program Files\Rising\RFW\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] <"C:\Program Files\Rising\Rav\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] [Cognizance Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] <"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] <"C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"> [(Verified)Hewlett-Packard Company] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [(Verified)Microsoft Windows] [HKEY_CURRENT_USER\Control Panel\Desktop] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray> [Nokia] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; "g:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [] <; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [(Verified)"RealNetworks, Inc."] <; "g:\Program Files\Alisoft\WangWang\WangWang.EXE"> [阿里巴巴软件(上海)有限公司] <; %ProgramFiles%\Windows Defender\MSASCui.exe -hide> [File is missing] ================================== 启动文件夹 [QQ游戏启动加速程序] G:\PROGRA~1\Tencent\QQGame\Accel.exe [深圳市腾讯计算机系统有限公司]> [QQ游戏启动加速程序] G:\PROGRA~1\Tencent\QQGame\Accel.exe [深圳市腾讯计算机系统有限公司]> ================================== 服务 [登录会话中介器 / ASBroker][Running/Auto Start] C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll> [本地信道 / ASChannel][Running/Auto Start] C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll> [ASLDR Service / ASLDRService][Running/Auto Start] <> [ATKGFNEX Service / ATKGFNEXSrv][Running/Auto Start] <> [FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"> [Google Updater Service / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [LightScribeService Direct Disc Labeling Service / LightScribeService][Running/Auto Start] <"C:\Program Files\Common Files\LightScribe\LSSrvc.exe"> [NBService / NBService][Stopped/Manual Start] [NMIndexingService / NMIndexingService][Stopped/Manual Start] <"C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe"> [PnkBstrA / PnkBstrA][Running/Auto Start] [Rav Process Communication Center / RavCCenter][Stopped/Auto Start] [Rising RavTask Manager / RavTask][Running/Auto Start] <"C:\Program Files\Rising\Rav\RavTask.exe" RavTask> [Rfw Process Communication Center / RfwCCenter][Stopped/Auto Start] [Rising Personal Firewall Service / RfwService][Stopped/Auto Start] [Rising RfwTask Manager / RfwTask][Running/Auto Start] <"C:\Program Files\Rising\RFW\RavTask.exe" RfwTask> [Cyberlink RichVideo Service(CRVS) / RichVideo][Running/Auto Start] <"C:\Program Files\Cyberlink\Shared files\RichVideo.exe"><> [Rising RealTime Monitor / RsRavMon][Stopped/Auto Start] [Rising Scan Service / RsScanSrv][Stopped/Auto Start] [Rising Vista Scanner / RsVScanner][Stopped/Auto Start] <><(File is missing)> [ServiceLayer / ServiceLayer][Stopped/Manual Start] <"C:\Program Files\PC Connectivity Solution\ServiceLayer.exe"> [spmgr / spmgr][Running/Auto Start] <> ================================== 驱动程序 [adp94xx / adp94xx][Stopped/Disabled] <\SystemRoot\system32\drivers\adp94xx.sys> [adpahci / adpahci][Stopped/Disabled] <\SystemRoot\system32\drivers\adpahci.sys> [adpu160m / adpu160m][Stopped/Disabled] <\SystemRoot\system32\drivers\adpu160m.sys> [adpu320 / adpu320][Stopped/Disabled] <\SystemRoot\system32\drivers\adpu320.sys> [aic78xx / aic78xx][Stopped/Disabled] <\SystemRoot\system32\drivers\djsvs.sys> [aliide / aliide][Stopped/Disabled] <\SystemRoot\system32\drivers\aliide.sys> [arc / arc][Stopped/Disabled] <\SystemRoot\system32\drivers\arc.sys> [arcsas / arcsas][Stopped/Disabled] <\SystemRoot\system32\drivers\arcsas.sys> [ASMMAP / ASMMAP][Running/Auto Start] <\??\C:\Program Files\ATKGFNEX\ASMMAP.sys><> [AuthenTec TruePrint USB Driver (SwipeSensor) / ATSWPDRV][Running/Manual Start] [blbdrive / blbdrive][Stopped/Disabled] <\SystemRoot\system32\drivers\blbdrive.sys> [Brother USB Mass-Storage Lower Filter Driver / BrFiltLo][Stopped/Manual Start] <\SystemRoot\system32\drivers\brfiltlo.sys> [Brother USB Mass-Storage Upper Filter Driver / BrFiltUp][Stopped/Manual Start] <\SystemRoot\system32\drivers\brfiltup.sys> [Brother MFC Serial Port Interface Driver (WDM) / Brserid][Stopped/Disabled] <\SystemRoot\system32\drivers\brserid.sys> [Brother WDM Serial driver / BrSerWdm][Stopped/Disabled] <\SystemRoot\system32\drivers\brserwdm.sys> [Brother MFC USB Fax Only Modem / BrUsbMdm][Stopped/Disabled] <\SystemRoot\system32\drivers\brusbmdm.sys> [Brother MFC USB Serial WDM Driver / BrUsbSer][Stopped/Manual Start] <\SystemRoot\system32\drivers\brusbser.sys> [Bluetooth AVRCP 配置文件 / BthAvrcp][Stopped/Manual Start] [cmdide / cmdide][Stopped/Disabled] <\SystemRoot\system32\drivers\cmdide.sys> [Intel(R) PRO/1000 NDIS 6 Adapter Driver / E1G60][Stopped/Manual Start] [EagleNT / EagleNT][Stopped/Manual Start] <\??\C:\Windows\system32\drivers\EagleNT.sys> [elxstor / elxstor][Stopped/Disabled] <\SystemRoot\system32\drivers\elxstor.sys> [ghaio / ghaio][Running/Auto Start] <\??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys> [hookcont / hookcont][Running/System Start] [hooksys / hooksys][Running/System Start] [HpCISSs / HpCISSs][Stopped/Disabled] <\SystemRoot\system32\drivers\hpcisss.sys> [ialm / ialm][Stopped/Manual Start] [Intel AHCI Controller / iaStor][Running/Boot Start] <\SystemRoot\system32\DRIVERS\iaStor.sys> [Intel RAID Controller Vista / iaStorV][Stopped/Disabled] <\SystemRoot\system32\drivers\iastorv.sys> [iirsp / iirsp][Stopped/Disabled] <\SystemRoot\system32\drivers\iirsp.sys> [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] [IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start] [ITEATAPI_Service_Install / iteatapi][Stopped/Disabled] <\SystemRoot\system32\drivers\iteatapi.sys> [ITECIR Infrared Receiver / itecir][Running/Manual Start] [ITERAID_Service_Install / iteraid][Stopped/Disabled] <\SystemRoot\system32\drivers\iteraid.sys> [ItSDisk / ItSDisk][Running/System Start] [Keyboard Filter / kbfiltr][Running/Manual Start] <> [LSI_FC / LSI_FC][Stopped/Disabled] <\SystemRoot\system32\drivers\lsi_fc.sys> [LSI_SAS / LSI_SAS][Stopped/Disabled] <\SystemRoot\system32\drivers\lsi_sas.sys> [LSI_SCSI / LSI_SCSI][Stopped/Disabled] <\SystemRoot\system32\drivers\lsi_scsi.sys> [megasas / megasas][Stopped/Disabled] <\SystemRoot\system32\drivers\megasas.sys> [Mraid35x / Mraid35x][Stopped/Disabled] <\SystemRoot\system32\drivers\mraid35x.sys> [ATK0100 ACPI UTILITY / MTsensor][Running/Manual Start] [Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit / NETw3v32][Stopped/Manual Start] [Intel(R) Wireless WiFi Link 适配器驱动程序(适用于 Windows Vista 32 位) / NETw4v32][Running/Manual Start] [nfrd960 / nfrd960][Stopped/Disabled] <\SystemRoot\system32\drivers\nfrd960.sys> [N-trig HID Tablet Driver / ntrigdigi][Stopped/Disabled] <\SystemRoot\system32\drivers\ntrigdigi.sys> [nvlddmkm / nvlddmkm][Running/Manual Start] [nvraid / nvraid][Stopped/Disabled] <\SystemRoot\system32\drivers\nvraid.sys> [nvstor / nvstor][Stopped/Disabled] <\SystemRoot\system32\drivers\nvstor.sys> [IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start] [IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start] [PCCS Mode Change Filter Driver / pccsmcfd][Stopped/Manual Start] [PxHelp20 / PxHelp20][Running/Boot Start] <\SystemRoot\System32\Drivers\PxHelp20.sys> [QLogic Fibre Channel Miniport Driver / ql2300][Stopped/Disabled] <\SystemRoot\system32\drivers\ql2300.sys> [QLogic iSCSI Miniport Driver / ql40xx][Stopped/Disabled] <\SystemRoot\system32\drivers\ql40xx.sys> [Rising RfwBase Driver / RfwBase9][Running/System Start] [rfwtdi / rfwtdi][Running/Auto Start] <\??\C:\Program Files\Rising\RFW\rfwtdi.sys> [rimmptsk / rimmptsk][Running/Auto Start] [rimsptsk / rimsptsk][Running/Auto Start] [Ricoh xD-Picture Card Driver / rismxdp][Running/Auto Start] [rsfwdrv / rsfwdrv][Running/System Start] <\??\C:\Program Files\Rising\RFW\rsfwdrv.sys> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys> [Realtek 8169 NT Driver / RTL8169][Running/Manual Start] [SiSRaid2 / SiSRaid2][Stopped/Disabled] <\SystemRoot\system32\drivers\sisraid2.sys> [SiSRaid4 / SiSRaid4][Stopped/Disabled] <\SystemRoot\system32\drivers\sisraid4.sys> [smserial / smserial][Running/Manual Start] [USB2.0 PC Camera (SNP2UVC) / SNP2UVC][Running/Manual Start] <> [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [Symc8xx / Symc8xx][Stopped/Disabled] <\SystemRoot\system32\drivers\symc8xx.sys> [Sym_hi / Sym_hi][Stopped/Disabled] <\SystemRoot\system32\drivers\sym_hi.sys> [Sym_u3 / Sym_u3][Stopped/Disabled] <\SystemRoot\system32\drivers\sym_u3.sys> [Synaptics TouchPad Driver / SynTP][Running/Manual Start] [TesDrvPt / TesDrvPt][Stopped/Manual Start] <\??\C:\Windows\system32\TesDrvPt.sys> [TesSafe / TesSafe][Stopped/Manual Start] <\??\C:\Windows\system32\TesSafe.sys> [uliahci / uliahci][Stopped/Disabled] <\SystemRoot\system32\drivers\uliahci.sys> [UlSata / UlSata][Stopped/Disabled] <\SystemRoot\system32\drivers\ulsata.sys> [ulsata2 / ulsata2][Stopped/Disabled] <\SystemRoot\system32\drivers\ulsata2.sys> [upperdev / upperdev][Stopped/Manual Start] [viaide / viaide][Stopped/Disabled] <\SystemRoot\system32\drivers\viaide.sys> [VirtualFD / VirtualFD][Stopped/Manual Start] <\??\g:\Program Files\WINYES\TC20H\vfd.sys> [vsmraid / vsmraid][Stopped/Disabled] <\SystemRoot\system32\drivers\vsmraid.sys> ================================== 浏览器加载项 [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} [WebProtect] {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B} [ed2k Dectector] {56746166-BC44-45f4-ADCE-52EAC919BB79} <, > [FlashGetBHO] {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} [Tencent.FaceQQ.1] {C92AE615-4D46-4489-96FA-C5D6A38B3AB1} [ASUS Security Protect Manager] {DF21F1DB-80C6-11D3-9483-B03D0EC10000} [启动迅雷5] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} [ASUS Security Protect Manager User e-Wallet] {1009C944-97D5-44A9-9E32-DFF54F498968} [中国移动手机桌面助理] {8806E443-0E06-4ed9-86D3-0C2D959F83DD} [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [webmail control] {C03733E5-912E-4163-BC5E-2A8516F9828F} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [Microsoft Office Spreadsheet 10.0] {0002E541-0000-0000-C000-000000000046} [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [PhotoDrawEx Class] {05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} [] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, > [] {0A155D3C-68E2-4215-A47A-E800A446447A} <, > [GerneralPeerID Class] {0A47E819-F82E-4D5D-B806-6A9EA94D68CD} [Edit Class] {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} [ASUS Security Protect Manager User e-Wallet] {1009C944-97D5-44A9-9E32-DFF54F498968} [IFlashGetNetscapeEx Class] {116BA71C-8187-4F15-9A1F-C9D6289155D1} [Fade] {16B280C5-EE70-11D1-9066-00C04FD9189D} [iTrusPTA Class] {1E0DFFCF-27FF-4574-849B-55007349FEDA} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [] {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} <, > [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [JetCarNetscape Class] {2974c985-8151-4de5-b23c-b875f0a8522f} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [EditCtrl Class] {488A4255-3236-44B3-8F27-FA1AECAA8844} [WebProtect] {53763D1D-9CA8-4C7C-9756-A8E6B8FC063B} [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} [ed2k Dectector] {56746166-BC44-45F4-ADCE-52EAC919BB79} <, > [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} [XDRM] {693571CB-54A3-4E90-9D52-EEAE1334E2D3} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <%SystemRoot%\system32\wmp.dll, (Signed) N/A> [WangWangObj Class] {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} [Windows Script Host Shell Object] {72C24DD5-D70A-438B-8A42-98424B88AFB8} [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [] {8806E443-0E06-4ED9-86D3-0C2D959F83DD} <, > [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [XML HTTP 4.0] {88D969C5-F192-11D4-A65F-0040963251E5} [XML DOM 文档 5.0] {88D969E5-F192-11D4-A65F-0040963251E5} [XML HTTP 5.0] {88D969EA-F192-11D4-A65F-0040963251E5} [XML DOM Document 6.0] {88D96A05-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A> [SSOForPTLogin Class] {8FC1EE75-72B3-4A23-B987-2B1C4C8A611B} [] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, > [OFrameObject Class] {9701758C-4373-482E-B13C-776C048EC890} [RMGetLicense Class] {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [] {ACBCF095-E8C0-420F-8769-2845D9B92E8A} <, > [FlashGetBHO] {B070D3E3-FEC0-47D9-8E8A-99D4EEB3D3B0} [] {B4FE8160-76DB-48C4-9803-68ED6278CA2C} <, > [webmail control] {C03733E5-912E-4163-BC5E-2A8516F9828F} [Tencent Safety Online Base Module] {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} [Tencent.FaceQQ.1] {C92AE615-4D46-4489-96FA-C5D6A38B3AB1} [QQPlayerCtrl Class] {CD108273-D434-43E6-AA90-1469F97EB398} [WDCCBCtrl Class] {CE0460F5-48BD-4DC1-A046-0BDCB5A06CEB} [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [ASUS Security Protect Manager] {DF21F1DB-80C6-11D3-9483-B03D0EC10000} [AgControl Class] {DFEAF541-F3E1-4C24-ACAC-99C30715084A} [PlayerCtrl Class] {E05BC2A3-9A46-4A32-80C9-023A473F5B23} [RevealTrans] {E31E87C4-86EA-4940-9B8A-5BD5D179A737} [PasswordEditCtrl Class] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} [TimwpDll.TimwpCheck] {ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [] {EEDD6FF9-13DE-496B-9A1C-D78B3215E266} <, > [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [XML DOM Document 3.0] {F5078F32-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [Free Threaded XML DOM Document 3.0] {F5078F33-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XML HTTP 3.0] {F5078F35-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XSL Template 3.0] {F5078F36-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [IERPCtl Class] {FDC7A535-4070-4B92-A0EA-D9994BCC0DC5} [InstallCheck Class] {FFB8C97E-39D4-4E8A-9FE4-B451A0D6CA65} [Add to Google Photos Screensa&ver] [使用MDA发送彩信] [使用MDA发送短信] [使用光影编辑和美化] [使用快车3下载] [使用快车3下载全部链接] [使用迅雷下载] [使用迅雷下载全部链接] [导出到 Microsoft Office Excel(&X)] [添加到QQ表情] ================================== 正在运行的进程 [PID: 504 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)] [PID: 632 / SYSTEM][C:\Windows\system32\csrss.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [PID: 684 / SYSTEM][C:\Windows\system32\wininit.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 696 / SYSTEM][C:\Windows\system32\csrss.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [PID: 728 / SYSTEM][C:\Windows\system32\services.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 740 / SYSTEM][C:\Windows\system32\lsass.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\ASWLNPkg.dll] [Cognizance Corporation, 2.5.0.077] [C:\Windows\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [PID: 752 / SYSTEM][C:\Windows\system32\lsm.exe] [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 892 / SYSTEM][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 936 / SYSTEM][C:\Windows\System32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [c:\program files\asus security center\asus security protect manager\bin\aswlnpkg.dll] [Cognizance Corporation, 2.5.0.077] [C:\Windows\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [c:\program files\asus security center\asus security protect manager\bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [c:\program files\asus security center\asus security protect manager\bin\aschnl.dll] [Cognizance Corporation, 1.27.0.160] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AuthWiz.dll] [Cognizance Corporation, 2.5.0.558] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItReports.DLL] [Cognizance Corporation, 1.5.0.046] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\AuthWiz.dll] [Cognizance Corporation, 2.5.0.538] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItDAC.dll] [Cognizance Corporation, 1.00.317] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItAuth.dll] [Cognizance Corporation, 1.01.227] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItMsg.dll] [Cognizance Corporation, 1.21.0.413] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll] [ASUSTeK Computer Inc., 1.01.0.014] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\brand.dll] [ASUSTeK Computer Inc., 1.01.0.008] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\BioAuthSrv.dll] [Cognizance Corporation, 2.1.0.083] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCServer.dll] [Cognizance Corporation, 1.00.132] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCard.dll] [Cognizance Corporation, 1.01.173] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\NetAdmin.dll] [Cognizance Corporation, 1.5.0.178] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\NetAdmin.dll] [Cognizance Corporation, 1.5.0.177] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\PETpm.dll] [Cognizance Corporation, 1.5.0.007] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\PETpm.dll] [Cognizance Corporation, 1.5.0.007] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\PESched.dll] [Cognizance Corporation, 2.0.0.014] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\PESched.dll] [Cognizance Corporation, 2.0.0.013] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\PEActiveRule.dll] [Cognizance Corporation, 1.01.0.39] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\PEActiveRule.dll] [Cognizance Corporation, 1.01.0.36] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\pecustom.dll] [Cognizance Corporation, 1.01.0.11] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\pecustom.dll] [Cognizance Corporation, 1.01.0.09] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\PEAuth.dll] [Cognizance Corporation, 1.0.1.64] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\PEAuth.dll] [Cognizance Corporation, 1.0.1.65] [PID: 984 / NETWORK SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1040 / SYSTEM][C:\Program Files\Rising\Rav\CCENTER.EXE] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\Rav\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37] [C:\Program Files\Rising\Rav\cnt08.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [PID: 1064 / SYSTEM][C:\Program Files\Rising\RFW\CCENTER.EXE] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\RFW\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\RFW\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37] [PID: 1084 / SYSTEM][C:\Windows\System32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [PID: 1156 / SYSTEM][C:\Windows\system32\winlogon.exe] [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1168 / LOCAL SERVICE][C:\Windows\System32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\System32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Windows\system32\RtkAPO.dll] [Realtek Semiconductor Corp., 11.0.6000.25 built by: WinDDK] [PID: 1204 / SYSTEM][C:\Windows\System32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\System32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1220 / SYSTEM][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1320 / SYSTEM][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1340 / NETWORK SERVICE][C:\Windows\system32\SLsvc.exe] [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)] [PID: 1388 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1456 / SYSTEM][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\Rav\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 40] [C:\Program Files\Rising\Rav\rsstub.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [PID: 1472 / SYSTEM][C:\Program Files\Rising\RFW\RavTask.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\RFW\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\RFW\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\RFW\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\RFW\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\RFW\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 40] [C:\Program Files\Rising\RFW\rsstub.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [PID: 1548 / NETWORK SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1628 / SYSTEM][C:\Program Files\Rising\RFW\rfwsrv.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\RFW\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\RFW\MonBase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\RFW\MonComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\RFW\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [C:\Program Files\Rising\RFW\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.25] [C:\Program Files\Rising\RFW\rfwsrv.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.89] [C:\Program Files\Rising\RFW\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\RFW\mPorts.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.0] [C:\Program Files\Rising\RFW\rfwdrvc.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.3] [C:\Program Files\Rising\RFW\Rfwdrv.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.5] [C:\Program Files\Rising\RFW\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [C:\Program Files\Rising\RFW\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\RFW\urlrule.dll] [Beijing Rising Information Technology Co., Ltd., 1.0.0.18] [C:\Program Files\Rising\RFW\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\RFW\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\RFW\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\RFW\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\RFW\rfwproxy.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.25] [C:\Program Files\Rising\RFW\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\RFW\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\RFW\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\RFW\urllib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [PID: 1664 / SYSTEM][C:\Program Files\Rising\Rav\RavMonD.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rav\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\Rav\MonBase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\Rav\Rslog.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.41] [C:\Program Files\Rising\Rav\mondrv.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\Program Files\Rising\Rav\defmon.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 31] [C:\Program Files\Rising\Rav\moncom08.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\MonRule.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\Program Files\Rising\Rav\FileMon.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28] [C:\Program Files\Rising\Rav\MailMon.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24] [C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\Hooksys.dll] [Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 18] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\HookCont.dll] [Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 12] [C:\Program Files\Rising\Rav\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [C:\Program Files\Rising\Rav\BACore.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 22] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\RSStore.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\Rav\ScanAdd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.19] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.39] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\Rav\extfile.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 15] [C:\Program Files\Rising\Rav\ffr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\nvfile.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\scanexec.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\Rav\unexe.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\scanex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 58] [C:\Program Files\Rising\Rav\pearc.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\scanpe.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [C:\Program Files\Rising\Rav\ur000.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 16] [C:\Program Files\Rising\Rav\urutils.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\methodex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\pecompd.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\heurex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\revm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 8] [C:\Program Files\Rising\Rav\ur001.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\Rav\ur025.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\scriptci.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\uroutine.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\scansct.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\extmail.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [PID: 1724 / SYSTEM][C:\Program Files\Rising\Rav\RsStub.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [PID: 1804 / SYSTEM][C:\Program Files\ATK Hotkey\ASLDRSrv.exe] [, 1.0.2.0] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1816 / SYSTEM][C:\Program Files\ATKGFNEX\GFNEXSrv.exe] [, 1, 0, 0, 8] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1852 / SYSTEM][C:\Program Files\Rising\Rav\rsnetsvr.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 15] [C:\Program Files\Rising\Rav\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.12] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [PID: 2032 / SYSTEM][C:\Windows\System32\spoolsv.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\System32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 816 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2188 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2244 / SYSTEM][C:\Program Files\Common Files\LightScribe\LSSrvc.exe] [Hewlett-Packard Company, 1.8.13.1] [C:\Program Files\Common Files\LightScribe\LSSProxy.dll] [Hewlett-Packard Company, 1.8.13.1] [C:\Program Files\Common Files\LightScribe\LSLog.dll] [Hewlett-Packard Company, 1.8.13.1] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2536 / SYSTEM][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] [Microsoft Corporation, 7.00.9466] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\2052\mdmui.dll] [Microsoft Corporation, 7.00.9466] [PID: 2580 / SYSTEM][C:\Windows\system32\PnkBstrA.exe] [N/A, ] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2616 / NETWORK SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2644 / SYSTEM][C:\Program Files\Cyberlink\Shared files\RichVideo.exe] [, 2.0.0425 ] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2868 / SYSTEM][C:\Program Files\Rising\Rav\ScanFrm.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.12] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\Rav\scansrvp.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\ScanSrv.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.10] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [PID: 2884 / SYSTEM][C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe] [, 1, 0, 0, 1] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS\NB Probe\SPM\spdiskex.dll] [N/A, ] [C:\Program Files\ASUS\NB Probe\SPM\spos.dll] [N/A, ] [C:\Program Files\ASUS\NB Probe\SPM\spnbacpi.dll] [N/A, ] [C:\Program Files\ASUS\NB Probe\SPM\spdmi.dll] [N/A, ] [C:\Program Files\ASUS\NB Probe\SPM\ghadmi.dll] [N/A, ] [C:\Program Files\ASUS\NB Probe\SPM\spmemory.dll] [N/A, ] [PID: 2940 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2972 / SYSTEM][C:\Windows\System32\svchost.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [PID: 3012 / SYSTEM][C:\Windows\system32\SearchIndexer.exe] [(Verified) Microsoft Corporation, 7.0.6001.16503 (longhorn(wmbla).080526-2159)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 3268 / nick][C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe] [Cognizance Corporation, 2.5.0.057] [C:\Windows\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll] [Bioscrypt Inc., 2.0.0.110] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ASWallet.dll] [Bioscrypt Inc., 2.0.0.110] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItSSO.dll] [Cognizance Corporation, 2.5.0.410] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\RasAdmin.dll] [Cognizance Corporation, 1.5.0.028] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItReports.DLL] [Cognizance Corporation, 1.5.0.046] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\RasAdmin.dll] [Cognizance Corporation, 1.5.0.028] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll] [Cognizance Corporation, 1.22.0.239] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SFSShell.dll] [Cognizance Corporation, 1.22.0.240] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\PkiAdmin.dll] [Cognizance Corporation, 1.5.0.025] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll] [ASUSTeK Computer Inc., 1.01.0.014] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\brand.dll] [ASUSTeK Computer Inc., 1.01.0.008] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItMsg.dll] [Cognizance Corporation, 1.21.0.413] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\PkiAdmin.dll] [Cognizance Corporation, 1.5.0.025] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCClient.dll] [Cognizance Corporation, 2.1.0.182] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCard.dll] [Cognizance Corporation, 1.01.173] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItAPS.dll] [Cognizance Corporation, 2.5.0.064] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItAPS.dll] [Cognizance Corporation, 2.5.0.063] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\TrayIcon.dll] [Cognizance Corporation, 2.5.0.285] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\BioAuth.dll] [Cognizance Corporation, 2.5.0.306] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\BioAuth.dll] [Cognizance Corporation, 2.5.0.301] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll] [Cognizance Corporation, 1.27.0.160] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\NetAdmin.dll] [Cognizance Corporation, 1.5.0.178] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\NetAdmin.dll] [Cognizance Corporation, 1.5.0.177] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SSOMngr.dll] [Cognizance Corporation, 2.25.0.293] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SSOMngr.dll] [Cognizance Corporation, 2.25.0.296] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItEncryptedDisk.dll] [Cognizance Corporation, 1.5.0.054] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItEncrypt.dll] [Cognizance Corporation, 1.01.037] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ittal.dll] [Cognizance Corporation, 2.5.0.208] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItDAC.dll] [Cognizance Corporation, 1.00.317] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AuthWiz.dll] [Cognizance Corporation, 2.5.0.558] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\AuthWiz.dll] [Cognizance Corporation, 2.5.0.538] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASBioAT.dll] [Cognizance Corporation, 2.5.0.083] [C:\Windows\system32\ATSC70.dll] [AuthenTec, Inc., 7, 8, 1, 14] [PID: 3284 / nick][C:\Windows\system32\Dwm.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Windows\system32\nvd3dum.dll] [NVidia Corporation, 7.15.11.0138] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 3332 / nick][C:\Windows\Explorer.EXE] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll] [Cognizance Corporation, 1.22.0.239] [C:\Windows\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SFSShell.dll] [Cognizance Corporation, 1.22.0.240] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [C:\Program Files\Nokia\Nokia PC Suite 6\phonebrowser.dll] [Nokia, 6, 86, 101, 2] [C:\Program Files\Nokia\Nokia PC Suite 6\NGSCM.DLL] [Nokia, 6, 86, 134, 6] [C:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] [Nokia, 6, 86, 63, 0] [C:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] [Nokia, 6, 86, 20, 0] [G:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.34] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll] [Bioscrypt Inc., 2.1.078] [g:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll] [Nero AG, 2, 9, 1, 0] [C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\TrayIcon.dll] [Cognizance Corporation, 2.5.0.285] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll] [ASUSTeK Computer Inc., 1.01.0.014] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\brand.dll] [ASUSTeK Computer Inc., 1.01.0.008] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItMsg.dll] [Cognizance Corporation, 1.21.0.413] [C:\Windows\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [g:\Program Files\Wopti\WOPTIE~1.DLL] [共软网络, 1.0.8.103] [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\CoverEdExtension.dll] [Nero AG, 2, 9, 1, 0] [C:\Program Files\Nero\Nero 7\Nero CoverDesigner\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 3352 / nick][C:\Windows\system32\taskeng.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Windows\system32\nvapi.dll] [NVIDIA Corporation, 7.15.11.0138] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 3664 / nick][C:\Windows\system32\taskeng.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 3808 / nick][C:\Program Files\ASUS\ASUS Live Update\ALU.exe] [, 1, 0, 0, 1] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 3968 / SYSTEM][C:\Windows\system32\wbem\wmiprvse.exe] [(Verified) Microsoft Corporation, 6.0.6001.18226 (vistasp1_gdr.090302-1506)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 4024 / SYSTEM][C:\Program Files\ATK Hotkey\Hcontrol.exe] [ATK0100, 1043, 2, 31, 77] [C:\Program Files\ATK Hotkey\CMSSC.dll] [N/A, ] [C:\Program Files\ATK Hotkey\inter_f2.dll] [ATK, 1043, 2, 15, 52] [C:\Program Files\ATK Hotkey\ATKWLIOC.DLL] [ACTIONTEC Electronics,Inc, 2.01.02] [C:\Program Files\ATK Hotkey\SiSPkt.dll] [Silicon Integrated Systems Corp., 1, 0, 0, 45] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 4032 / SYSTEM][C:\Program Files\ATKOSD2\ATKOSD2.exe] [, 6.64.1.4] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 4040 / SYSTEM][C:\Program Files\Wireless Console 2\wcourier.exe] [, 2, 0, 8, 0] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 4080 / SYSTEM][C:\Program Files\ASUS\Splendid\ACMON.exe] [ATK, 1, 0, 7, 0] [C:\Program Files\ASUS\Splendid\OVS.dll] [ASUSTek, 1, 0, 0, 1] [C:\Program Files\ASUS\Splendid\GLCDdll.dll] [, 1, 0, 1, 0] [C:\Program Files\ASUS\Splendid\Chameleon.dll] [ASUSTeK, 1, 0, 0, 3] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2080 / SYSTEM][C:\Program Files\P4G\BatteryLife.exe] [ATK, 1, 0, 0, 8] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 1680 / nick][C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe] [Motorola Inc., 6.12.05] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Motorola\SMSERIAL\sm56eng.dll] [Motorola Inc., 6.12.05] [C:\Program Files\Motorola\SMSERIAL\sm56fra.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56brz.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56chs.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56cht.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56ger.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56ita.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56jpn.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56esp.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56kor.dll] [, ] [C:\Program Files\Motorola\SMSERIAL\sm56dnk.dll] [, ] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 400 / nick][C:\Program Files\ASUS\ATK Media\DMedia.exe] [ASUSTeK Computer INC., 1, 16, 0, 0] [C:\Program Files\ASUS\ATK Media\ATKMETHOD.dll] [ASUSTeK Computer Inc., 1, 16, 0, 0] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [C:\Program Files\ASUS\ATK Media\CHNSTRING.dll] [N/A, ] [PID: 376 / nick][C:\Windows\RtHDVCpl.exe] [Realtek Semiconductor, 1, 0, 0, 36] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 2548 / SYSTEM][C:\Windows\System32\ACEngSvr.exe] [ASUSTeK, 1, 0, 0, 4] [C:\Windows\System32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Windows\System32\nvd3dum.dll] [NVidia Corporation, 7.15.11.0138] [PID: 3104 / SYSTEM][C:\Program Files\ATK Hotkey\ATKOSD.exe] [, 1043, 2, 15, 67] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 2844 / SYSTEM][C:\Program Files\ATK Hotkey\KBFiltr.exe] [, 1, 0, 0, 1] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 3256 / nick][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] [Synaptics, Inc., 9.1.19 01Mar07] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Windows\system32\SynCOM.dll] [Synaptics, Inc., 9.1.19 01Mar07] [C:\Windows\system32\SynTPAPI.dll] [Synaptics, Inc., 9.1.19 01Mar07] [PID: 1136 / nick][C:\Program Files\P4P\P4P.exe] [, 1.0.0.16] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 244 / nick][C:\Windows\ASScrPro.exe] [N/A, ] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 3184 / nick][C:\Program Files\CMBCHINA\WebProtect\WPService.exe] [China Merchants Bank, 1, 0, 0, 1] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\CMBCHINA\WebProtect\WebProtectPlus.dll] [China Merchants Bank, 1, 0, 0, 1] [PID: 1900 / nick][C:\Windows\System32\WatchData\Watchdata CCB CSP v3.2\wdcertm_ccb.exe] [ Beijing WatchData System Co., Ltd., 3, 2, 0, 0] [C:\Windows\System32\WatchData\Watchdata CCB CSP v3.2\TokenMgr.dll] [ Beijing WatchData System Co., Ltd., 3, 6, 3, 2] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Windows\System32\WatchData\Watchdata CCB CSP v3.2\WDAlg.DLL] [ Beijing WatchData System C0., Ltd., 3, 5, 12, 20] [C:\Windows\System32\WatchData\Watchdata CCB CSP v3.2\wdudk.dll] [北京握奇数据系统有限公司, 7, 0, 3, 1] [C:\Windows\System32\WatchData\Watchdata CCB CSP v3.2\wdcrwv.dll] [Watchdata System Co., Ltd., 5, 0, 3, 0] [C:\Windows\System32\WatchData\Watchdata CCB CSP v3.2\wdpkcs.dll] [ Beijing WatchData System Co., Ltd., 3, 6, 2, 15] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 2484 / nick][C:\Program Files\Rising\RFW\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.22] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\RFW\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.49] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\RFW\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28] [C:\Program Files\Rising\RFW\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\RFW\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\RFW\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\RFW\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\RFW\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\RFW\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.25] [C:\Program Files\Rising\RFW\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\RFW\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\RFW\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\RFW\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.26] [C:\Program Files\Rising\RFW\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 75] [C:\Windows\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\RFW\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 29] [C:\Program Files\Rising\RFW\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [C:\Program Files\Rising\RFW\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\RFW\rfwtray.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 1, 12] [C:\Program Files\Rising\RFW\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\RFW\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [PID: 2476 / nick][C:\Program Files\Rising\Rav\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.22] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\Rising\Rav\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.49] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rav\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\Rav\ScanEvnt.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.14] [C:\Program Files\Rising\Rav\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 75] [C:\Windows\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\Rav\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.26] [C:\Program Files\Rising\Rav\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 29] [C:\Program Files\Rising\Rav\mruleui.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 10] [C:\Program Files\Rising\Rav\MonTray.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.1.4] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\RavITray.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 23] [C:\Program Files\Rising\Rav\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.17] [C:\Program Files\Rising\Rav\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [PID: 1132 / nick][C:\Program Files\Windows Sidebar\sidebar.exe] [Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.76] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Windows\system32\nvd3dum.dll] [NVidia Corporation, 7.15.11.0138] [C:\Windows\system32\icm32.dll] [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [PID: 448 / nick][C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe] [Hewlett-Packard Company, 1.8.13.1] [C:\Program Files\Common Files\LightScribe\QtCore4.dll] [N/A, ] [C:\Program Files\Common Files\LightScribe\QtGui4.dll] [N/A, ] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 3552 / nick][C:\Windows\System32\rundll32.exe] [Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\System32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Windows\System32\NVSVC.DLL] [NVIDIA Corporation, 7.15.11.0138] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [C:\Windows\System32\nvapi.dll] [NVIDIA Corporation, 7.15.11.0138] [PID: 2688 / nick][C:\Windows\system32\wbem\unsecapp.exe] [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 1408 / SYSTEM][C:\Windows\system32\taskeng.exe] [(Verified) Microsoft Corporation, 6.0.6000.16386 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 4632 / nick][C:\Program Files\Windows Media Player\wmpnscfg.exe] [Microsoft Corporation, 11.0.6000.6324 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [PID: 4704 / NETWORK SERVICE][C:\Program Files\Windows Media Player\wmpnetwk.exe] [Microsoft Corporation, 11.0.6000.6324 (vista_rtm.061101-2205)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 5840 / nick][C:\Windows\system32\conime.exe] [(Verified) Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840)] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 3160 / nick][G:\Program Files\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 6, 3, 80] [G:\Program Files\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2] [C:\Windows\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItClient.dll] [Cognizance Corporation, 2.1.0.102] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll] [Cognizance Corporation, 1.22.0.239] [C:\Windows\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SFSShell.dll] [Cognizance Corporation, 1.22.0.240] [G:\Program Files\Maxthon\Plugin\FloatBar\FloatBar.dll] [, 1, 9, 0, 0] [G:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.34] [C:\Windows\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Windows\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [G:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 120] [G:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 20] [G:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 16] [G:\Program Files\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.76] [C:\Windows\system32\nvd3dum.dll] [NVidia Corporation, 7.15.11.0138] [C:\Windows\system32\Macromed\Flash\Flash10c.ocx] [Adobe Systems, Inc., 10,0,32,18] [PID: 924 / nick][G:\TDDOWNLOAD\sreng2\SREngLdr.EXE] [Smallfrogs Studio, 2.7.1.1261] [PID: 5720 / nick][G:\TDDOWNLOAD\sreng2\SRE9120d379.EXE] [Smallfrogs Studio, 2.7.1.1261] [G:\TDDOWNLOAD\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT Error. [C:\Windows\notepad.exe %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["%SystemRoot%\hh.exe" %1] .HLP OK. [%SystemRoot%\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. ["%SystemRoot%\System32\WScript.exe" "%1" %*] .JS Error. [C:\Windows\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 N/A ================================== 进程特权扫描 N/A ================================== 计划任务 [已启用] \\ASUS Live Update C:\Program Files\ASUS\ASUS Live Update\ALU.exe [已启用] \\RunAsStdUser Task20365 C:\Program Files\Rising\Rav\RSTRAY.EXE [已启用] \\SogouImeMgr G:\PROGRA~1\SOGOUI~1\422~1.273\PINYIN~1.EXE /S [已启用] \\{102DBE29-7577-4DDA-ACC7-485CDD0EA109} C:\Windows\system32\pcalua.exe -a "C:\Users\nick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZSOVGG1\TSOBaseInst[1].exe" -d C:\Windows\system32 [已启用] \\{17266D04-D7C7-456A-9728-EF5E2A1F80E7} C:\Windows\system32\pcalua.exe -a "D:\Program Files\极品飞车11 街头狂飙\Need for Speed ProStreet\nfs_cn.exe" -d "d:\Program Files\极品飞车11 街头狂飙\Need for Speed ProStreet" [已启用] \\{1D084458-731B-4FBE-BD23-69E793CE3D7F} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\daemontools简体中文语言包.exe -d G:\TDDOWNLOAD [已启用] \\{4049D4BA-E325-419A-84EA-8BF7B3B3CF11} C:\Windows\system32\pcalua.exe -a "C:\Users\nick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2388VAAO\qqedit2[1].exe" -d C:\Windows\system32 [已启用] \\{4564D325-188A-4C1F-8DE7-9FA784B7E43E} C:\Windows\system32\pcalua.exe -a C:\Users\nick\Desktop\QzoneMusic3.0Beta02.exe -d C:\Users\nick\Desktop [已启用] \\{4C965F05-4788-4DC9-9B9B-988A3A33D1CA} C:\Windows\system32\pcalua.exe -a C:\Users\nick\Desktop\QQPhotoDrawEx.exe -d C:\Users\nick\Desktop [已启用] \\{558761F6-A04A-4D67-A3B6-D68A8BB549E3} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\daemon-x86.exe -d G:\TDDOWNLOAD [已启用] \\{56E054F8-9B6C-48E6-9488-3982286DF9F2} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\hfayuloader.exe -d G:\TDDOWNLOAD [已启用] \\{66A3C520-BAC1-44C0-9D1F-2F4706B3B2DF} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\VS2.6.exe -d G:\TDDOWNLOAD [已启用] \\{7B3CDAB8-3D13-482A-B6D2-2A3E1DCB1DCC} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\daemon_x86.exe -d G:\TDDOWNLOAD [已启用] \\{98D4BFE7-311A-43A0-9DDD-C9734DAD7BC0} C:\Windows\system32\pcalua.exe -a "G:\Program Files\WINYES\TC20H\TC.EXE" -d "g:\Program Files\WINYES\TC20H" [已启用] \\{A08CF8FD-9447-43EC-823E-3EA2A16B604F} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\CaiHong_Setup_1001.exe -d G:\TDDOWNLOAD [已启用] \\{A7A17EED-F53F-45C4-9D19-F73EC28E765C} C:\Windows\system32\pcalua.exe -a "G:\Program Files\AdobePhotoshopCS3-full1201\PS绿化工具.exe" -d "G:\Program Files\AdobePhotoshopCS3-full1201" [已启用] \\{A8E6EC00-E19E-4643-A402-928347949409} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\flashget_1675_1.exe -d G:\TDDOWNLOAD [已启用] \\{A9A852C2-7738-4243-AD39-08F5738C6267} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\mhxmu.exe -d G:\TDDOWNLOAD [已启用] \\{BE193100-82C7-4598-82AD-4A2AA816C295} C:\Windows\system32\pcalua.exe -a "G:\Program Files\QQ堂\QQTang2.2_Beta1_Build090_20080306.EXE" -d "G:\Program Files\QQ堂" [已启用] \\{C088D6F6-456B-4995-8FAC-7BC866BB509F} C:\Windows\system32\pcalua.exe -a "C:\Users\nick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NYXWIKFF\qqedit2[1].exe" -d C:\Windows\system32 [已启用] \\{D024A57F-6CBE-4FA1-821E-D4ADB5ED7CFC} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\hfayuloader(1).exe -d G:\TDDOWNLOAD [已启用] \\{DD4C990C-9A6D-49AA-8860-150E22B8BF22} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\mhxmu(1).exe -d G:\TDDOWNLOAD [已启用] \\{E278FF54-9700-4F6F-BCED-7CED4C484938} C:\Windows\system32\pcalua.exe -a G:\下载\DMC4_Chin_Setup1.2\Setup.exe -d G:\下载\DMC4_Chin_Setup1.2 [已启用] \\{F7B81052-B4B3-4E5B-81CA-32D1983C0AFB} C:\Windows\system32\pcalua.exe -a G:\TDDOWNLOAD\20071229140154014\hfldr132.exe -d G:\TDDOWNLOAD\20071229140154014 [已禁用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated) N/A [已启用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual) N/A [已启用] \Microsoft\Windows\Bluetooth\UninstallDeviceTask BthUdTask.exe $(Arg0) [已启用] \Microsoft\Windows\CertificateServicesClient\SystemTask N/A [已启用] \Microsoft\Windows\CertificateServicesClient\UserTask N/A [已启用] \Microsoft\Windows\CertificateServicesClient\UserTask-Roam N/A [已启用] \Microsoft\Windows\Customer Experience Improvement Program\Consolidator %SystemRoot%\System32\wsqmcons.exe [已启用] \Microsoft\Windows\Customer Experience Improvement Program\OptinNotification %SystemRoot%\System32\wsqmcons.exe -n 0x1C577FA2B69CAD0 [已启用] \Microsoft\Windows\Defrag\ScheduledDefrag %windir%\system32\defrag.exe -c -i [已启用] \Microsoft\Windows\MobilePC\HotStart N/A [已启用] \Microsoft\Windows\MobilePC\TMM N/A [已启用] \Microsoft\Windows\MUI\LPRemove %windir%\system32\lpremove.exe [已启用] \Microsoft\Windows\MUI\Mcbuilder C:\Windows\System32\mcbuilder.exe [已启用] \Microsoft\Windows\Multimedia\SystemSoundsService N/A [已启用] \Microsoft\Windows\NetworkAccessProtection\NAPStatus UI N/A [已启用] \Microsoft\Windows\Shell\CrawlStartPages N/A [已启用] \Microsoft\Windows\SystemRestore\SR %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation [已启用] \Microsoft\Windows\Tcpip\IpAddressConflict1 rundll32 ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem [已启用] \Microsoft\Windows\Tcpip\IpAddressConflict2 rundll32 ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem [已启用] \Microsoft\Windows\UPnP\UPnPHostConfig sc.exe config upnphost start= auto [已启用] \Microsoft\Windows\Windows Error Reporting\QueueReporting %windir%\system32\wermgr.exe -queuereporting [已启用] \Microsoft\Windows\Wired\GatherWiredInfo %windir%\system32\gatherWiredInfo.vbs [已启用] \Microsoft\Windows\Wireless\GatherWirelessInfo %windir%\system32\gatherWirelessInfo.vbs ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]