[CODE]

2009-08-27,10:38:10

SysLog Scanner 3.0 - build 20090620
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 3 (build 2600)


================================================================
注册项


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <Google Update> <"C:\Documents and Settings\BLACK MI\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c> [(Verified)Google Inc., 1.2.131.7]
    <BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}> <"C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"> [Nero AG, 1, 0, 1, 10]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <NvCplDaemon> <RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105) | (Verified)NVIDIA Corporation, 6.14.10.9371]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    <load> <> []


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
    <{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}> <C:\Program Files\Thunder Network\Thunder\Thunder.exe> [(Verified)ShenZhen Thunder Networking Technologies,LTD, 5,8,13,699]
    <{D6E814A0-E0C5-11d4-8D29-0050BA6940E3}> <C:\Program Files\FlashGet\FlashGet.exe> [FlashGet.com, 1, 9, 6, 1073]
    <{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A}> <res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206> []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt]
    <&U使用米人下载并收藏> <C:\Program Files\NamiRobot\Data\du.html> [N/A]
    <&U使用纳米机器人下载并收藏> <C:\Program Files\NamiRobot\Data\du.html> [N/A]
    <&使用快车(FlashGet)下载> <C:\Program Files\FlashGet\jc_link.htm> [N/A]
    <&使用快车(FlashGet)下载全部链接> <C:\Program Files\FlashGet\jc_all.htm> [N/A]
    <使用迅雷下载> <C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm> [N/A]
    <使用迅雷下载全部链接> <C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm> [N/A]
    <氝樓善QQ桶> <L:\QQ\Tencent\QQB2\Bin\AddEmotion.htm> [N/A]
    <添加到QQ表情> <N:\QQ\Tencent\QQB2\AddEmotion.htm> []
    <添加到火星符号> <C:\Program Files\临时\HUO XING\fh_tj.html> [N/A]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MenuExt]
    <氝樓善QQ桶> <L:\QQ\Tencent\QQB2\Bin\AddEmotion.htm> [N/A]
    <添加到QQ表情> <L:\QQ\Tencent\QQB2\Bin\AddEmotion.htm> [N/A]

================================================================
启动组


================================================================
任务计划

[GoogleUpdateTaskUserS-1-5-21-1935655697-790525478-682003330-1003UA.job]
    <C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1935655697-790525478-682003330-1003UA.job> <"C:\Documents and Settings\BLACK MI\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /ua /installsource scheduler> [(Verified)Google Inc., 1.2.131.7]
[GoogleUpdateTaskUserS-1-5-21-1935655697-790525478-682003330-1003Core.job]
    <C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1935655697-790525478-682003330-1003Core.job> <"C:\Documents and Settings\BLACK MI\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c> [(Verified)Google Inc., 1.2.131.7]

================================================================
组件


--------------------------------
ShellExecuteHook
    []
        <{E3531A16-FFEA-416F-82DF-32FEDE02EABF}> <C:\WINDOWS\system32\emHnPuBAaF7XjuXBbdxSg.dll> [N/A]
    []
        <{AB8105BD-1B1B-40F3-8D3D-65FD7FC68CC5}> <C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur> [N/A]
    []
        <{9AD1DE62-196C-4C01-9A2F-0BEDEF727C59}> <C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll> [N/A]
    []
        <{427E02E6-39DB-4424-A49C-7553CD1331F5}> <C:\WINDOWS\system32\WcCtgJ4zcxHF.dll> [N/A]
    []
        <{0220FBE7-F757-4C74-B246-D6703DCF1087}> <C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll> [N/A]
    []
        <{108DA6C0-CFBF-41D4-9A09-C4D06AE6FFD2}> <C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll> [N/A]
    []
        <{D6129F8A-6F6E-41D7-BBC9-AC7426759CED}> <C:\WINDOWS\system32\w7uds3zyayg9.dll> [N/A]
    []
        <{A761BE8E-C15A-4DDD-A777-2C683E9E96C8}> <C:\WINDOWS\system32\a4rxQxCvNBMNnpqs.dll> [N/A]
    []
        <{87DE8A1A-96C5-4420-B222-EF998F697CE7}> <C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll> [N/A]
    []
        <{CF2C613A-A0D9-4E5C-B1BB-6B03B269B054}> <C:\WINDOWS\system32\rKPbzUHze58GK2VWcYUCt.inf> [N/A]
    []
        <{122B901E-493F-4AD9-BC69-7DE8C3E52FCC}> <C:\WINDOWS\system32\122B901E.dll> [N/A]
    []
        <{762D618C-E2CB-4217-8275-03302A93073F}> <C:\WINDOWS\fonts\zEfE48cw9EmcFaR.fon> [N/A]
    []
        <{704C3595-DB85-40F6-A601-8D6F346907BD}> <C:\WINDOWS\system32\704C3595.dll> [N/A]

--------------------------------
Shell Extension
    [Display Panning CPL Extension]
        <{42071714-76d4-11d1-8b24-00a0c9068ff3}> <deskpan.dll> []
    [HyperTerminal Icon Ext]
        <{88895560-9AA2-1069-930E-00AA0030EBC8}> <C:\WINDOWS\system32\hticons.dll> [(Verified)Hilgraeve, Inc., 5.1.2600.0]
    [任务栏和「开始」菜单]
        <{0DF44EAA-FF21-4412-828E-260A8728E7F1}> <> []
    [NvCpl DesktopContext Class]
        <{A70C977A-BF00-412C-90B7-034C51DA2439}> <C:\WINDOWS\system32\nvcpl.dll> [(Verified)NVIDIA Corporation, 6.14.10.9371]
    [Desktop Explorer]
        <{1CDB2949-8F65-4355-8456-263E7C208A5D}> <C:\WINDOWS\system32\nvshell.dll> [N/A]
    [WinRAR shell extension]
        <{B41DB860-8EE4-11D2-9906-E49FADC173CA}> <C:\Program Files\WinRAR\rarext.dll> [N/A]
    [Fusion Cache]
        <{1D2680C9-0E2A-469d-B787-065558BC7D43}> <C:\WINDOWS\system32\mscoree.dll> [Microsoft Corporation, 1.1.4322.573]
    [NeroDigitalIconHandler]
        <{B327765E-D724-4347-8B16-78AE18552FC3}> <C:\Program Files\Common Files\Ahead\lib\NeroDigitalExt.dll> [Nero AG, 2, 0, 0, 8]
    [YouKuDesktop Shell Extension]
        <{20CE0080-7137-41E6-B545-2EAEEEAB6BC9}> <C:\WINDOWS\system32\YouKuDesktopShell.dll> [(Verified)www.youku.com, 1.2.7.1700]
    [SmartFTP Search Shell Namespace Extension]
        <{EB5EE1F3-041A-4c03-9D51-2BEC6715FB00}> <C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFTPShellExtension.dll> [(Verified)SmartSoft Ltd., 1.0.14.4]
    [SmartFTP Favorites Namespace]
        <{39DD67E0-73B6-4a11-AF55-49E1EBBF72BE}> <C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFavoritesShellExtension.dll> [(Verified)SmartSoft Ltd., 1.0.1.14]

--------------------------------
ToolBar
    [金山快译(&K)]
        <{6C3797D2-3FEF-4cd4-B654-D3AE55B4128C}> <C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll> [金山软件股份有限公司, 4, 0, 0, 0]

--------------------------------
Protocols
    [Cor MIME Filter, CorFltr, CorFltr 1]
        <{1E66F26B-79EE-11D2-8710-00C04F79ED0D}> <C:\WINDOWS\system32\mscoree.dll> [Microsoft Corporation, 1.1.4322.573]

--------------------------------
Context Menu
    [iku]
        <{20CE0080-7137-41E6-B545-2EAEEEAB6BC9}> <C:\WINDOWS\system32\YouKuDesktopShell.dll> [(Verified)www.youku.com, 1.2.7.1700]
    [OpenFolder]
        <{0DE1378D-F811-40E6-B60A-1CC56F57D3E9}> <C:\Program Files\Alisoft\WangWang\AliIMExt.dll> [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    [WinRAR]
        <{B41DB860-8EE4-11D2-9906-E49FADC173CA}> <C:\Program Files\WinRAR\rarext.dll> [N/A]
    [00nView]
        <{1E9B04FB-F9E5-4718-997B-B8DA88302A48}> <C:\WINDOWS\system32\nvshell.dll> [N/A]
    [NvCplDesktopContext]
        <{A70C977A-BF00-412C-90B7-034C51DA2439}> <C:\WINDOWS\system32\nvcpl.dll> [(Verified)NVIDIA Corporation, 6.14.10.9371]

--------------------------------
BrowserHelperObject
    [ThunderAtOnce Class]
        <{01443AEC-0FD1-40fd-9C87-E93D1494C233}> <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34]
    [FGCatchUrl]
        <{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}> <C:\Program Files\FlashGet\jccatch.dll> [www.flashget.com, 1, 8, 4, 1007]
    [BitComet Helper]
        <{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}> <C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll> [(Verified)BitComet, 20090302]
    [Thunder Browser Helper]
        <{889D2FEB-5411-4565-8998-1DD2C5261283}> <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    [CBBrowerBuddy Class]
        <{A412E581-59B2-485E-834F-C5F0C0268C79}> <C:\Program Files\Kingsoft\PowerWord Lite\CBEBand.DLL> [Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.2]
    [FlashGet GetFlash Class]
        <{F156768E-81EF-470C-9057-481BA8380DBA}> <C:\Program Files\FlashGet\getflash.dll> [www.flashget.com, 1, 8, 4, 1003]
    [Hotspot Shield Class]
        <{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}> <C:\Program Files\Hotspot Shield\hssie\HssIE.dll> [AnchorFree Inc., 1, 0, 1, 1]

--------------------------------
ActiveX Extension
    [ThunderAtOnce Class]
        <{01443AEC-0FD1-40FD-9C87-E93D1494C233}> <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34]
    [Yahoo! Toolbar Helper]
        <{02478D38-C3F9-4EFB-9B51-7695ECA05670}> <> []
    [AvlPing Control]
        <{169B0044-1CD6-4EFE-A5D8-AEC69797A953}> <C:\WINDOWS\DOWNLO~1\avlPing.ocx> [telepro, 1, 0, 0, 6]
    [iTrusPTA Class]
        <{1E0DFFCF-27FF-4574-849B-55007349FEDA}> <C:\WINDOWS\system32\aliedit\pta.dll> [(Verified)Copyright 2001, 2, 5, 1, 509]
    [FGCatchUrl]
        <{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}> <C:\Program Files\FlashGet\jccatch.dll> [www.flashget.com, 1, 8, 4, 1007]
    [BitComet Helper]
        <{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}> <C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll> [(Verified)BitComet, 20090302]
    [Thunder Agent Class]
        <{485463B7-8FB2-4B3B-B29B-8B919B0EACCE}> <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 6, 0, 5, 49]
    [EditCtrl Class]
        <{488A4255-3236-44B3-8F27-FA1AECAA8844}> <C:\WINDOWS\system32\aliedit\aliedit.dll> [(Verified)Copyright 2008, 2, 1, 2, 4]
    [SkyDrive.Plugin.1]
        <{4990272A-0655-4D80-90A7-C18D0FF7A4A9}> <C:\Program Files\NamiRobot\Plugins\SkyDrive.dll> [Copyright 1998, 1, 0, 0, 6]
    [WangWangX Class]
        <{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B}> <C:\Program Files\Alisoft\WangWang\AliIMX.dll> [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    [XMP Class]
        <{6483F145-A768-4C41-AACC-52D4D7845851}> <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work> [ShenZhen Thunder Networking Technologies,LTD, 2, 1, 9, 102]
    [金山快译(&K)]
        <{6C3797D2-3FEF-4CD4-B654-D3AE55B4128C}> <C:\Program Files\Kingsoft\FastAIT 2005\IEBand.dll> [金山软件股份有限公司, 4, 0, 0, 0]
    [AxInputControl Class]
        <{73E4740C-08EB-4133-896B-8D0A7C9EE3CD}> <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL> [Copyright 2003, 1, 0, 0, 12]
    [MediaComm Class]
        <{7670648D-461B-42AF-BDFE-46D26AF5EFF2}> <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin19.dll> [(Verified)ShenZhen Thunder Networking Technologies,LTD, 3, 1, 7, 82]
    [Thunder Browser Helper]
        <{889D2FEB-5411-4565-8998-1DD2C5261283}> <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    [AxSubmitControl Class]
        <{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2}> <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL> [Copyright 2003, 1, 0, 0, 5]
    [OFrameObject Class]
        <{9701758C-4373-482E-B13C-776C048EC890}> <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5814.166.(69).dll> [(Verified)ShenZhen Thunder Networking Technologies Ltd., 2, 3, 5814, 166]
    [VersionDetector Class]
        <{9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B}> <C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.15.(70).dll> [(Verified)ShenZhen Thunder Networking Technologies,Ltd., 1, 1, 0, 15]
    [CBBrowerBuddy Class]
        <{A412E581-59B2-485E-834F-C5F0C0268C79}> <C:\Program Files\Kingsoft\PowerWord Lite\CBEBand.DLL> [Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.2]
    [Google Update Plugin]
        <{B79267AC-3725-42EB-890A-6CF077567C47}> <C:\Documents and Settings\BLACK MI\Local Settings\Application Data\Google\Update\1.2.183.7\npGoogleOneClick8.dll> [(Verified)Google Inc., 1.2.183.7]
    [WDCCBCtrl Class]
        <{CE0460F5-48BD-4DC1-A046-0BDCB5A06CEB}> <C:\WINDOWS\system32\WDCCB.dll> [Copyright 2007, 1, 0, 0, 6]
    [RealPlayer G2 Control]
        <{CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}> <C:\WINDOWS\system32\rmoc3260.dll> [(Verified)RealNetworks, Inc., 6.0.10.53]
    [Shockwave Flash Object]
        <{D27CDB6E-AE6D-11CF-96B8-444553540000}> <C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx> [(Verified)Adobe Systems, Inc., 10,0,32,18]
    [PlayerCtrl Class]
        <{E05BC2A3-9A46-4A32-80C9-023A473F5B23}> <L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.QQMusic\bin\QQMusic\QzoneMusic.dll> [(Verified)Tencent, 3, 2, 165, 710]
    [FlashGet GetFlash Class]
        <{F156768E-81EF-470C-9057-481BA8380DBA}> <C:\Program Files\FlashGet\getflash.dll> [www.flashget.com, 1, 8, 4, 1003]
    [XPPlayer Class]
        <{F3E70CEA-956E-49CC-B444-73AFE593AD7F}> <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.58110.250.(784).dll> [(Verified)ShenZhen Thunder Networking Technologies,LTD, 2, 1, 58110, 250]
    [FGAutoLive]
        <{F90D830D-C175-4bbe-82C7-FF94669A4C42}> <C:\Program Files\FlashGet\fgupdate.dll> [www.flashget.com, 1, 8, 1, 1003]
    [Hotspot Shield Class]
        <{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}> <C:\Program Files\Hotspot Shield\hssie\HssIE.dll> [AnchorFree Inc., 1, 0, 1, 1]

================================================================
服务

[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
    <%SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe>  [Microsoft Corporation, 1.1.4322.573]
[Capture Device Service / Capture Device Service][Running/Auto Start]
    <"C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe">  [InterVideo Inc., 1.0.0.1]
[Human Interface Device Access / HidServ][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[Hotspot Shield Service / HotspotShieldService][Running/Auto Start]
    <C:\Program Files\Hotspot Shield\bin\openvpnas.exe>  [N/A]
[LightScribeService Direct Disc Labeling Service / LightScribeService][Running/Auto Start]
    <"C:\Program Files\Common Files\LightScribe\LSSrvc.exe">  [Hewlett-Packard Company, 1.4.124.1]

[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
    <%SystemRoot%\system32\nvsvc32.exe>  [(Verified)NVIDIA Corporation, 6.14.10.9371]
[Ulead Burning Helper / UleadBurningHelper][Running/Auto Start]
    <C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe>  [(Verified)Ulead Systems, Inc., 1, 0, 0, 5]

================================================================
驱动

[RAS Asynchronous Media Driver / AsyncMac][Stopped/Manual Start]
    <system32\DRIVERS\asyncmac.sys>  []
[BIOS / BIOS][Running/System Start]
    <\??\C:\WINDOWS\system32\drivers\BIOS.sys>  [BIOSTAR Group, 1, 0, 0, 0]
[EagleNT / EagleNT][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\drivers\EagleNT.sys>  []
[ENTECH / ENTECH][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys>  [EnTech Taiwan, 1.0]
[hid8101 / hid8101][Stopped/Manual Start]
    <system32\drivers\hid8101.sys>  [Compuware Corporation, 3.10]
[InCD File System / InCDFs][Stopped/Disabled]
    <system32\drivers\InCDFs.sys>  []
[InCDPass / InCDPass][Stopped/System Start]
    <system32\drivers\InCDPass.sys>  []
[InCD Reader / InCDRm][Stopped/System Start]
    <system32\drivers\InCDRm.sys>  []
[nocashio / nocashio][Stopped/Manual Start]
    <system32\drivers\nocashio.sys>  [N/A]
[TAP VPN Adapter / tapvpn][Running/Manual Start]
    <system32\DRIVERS\tapvpn.sys>  [The OpenVPN Project, 2.1_beta14b 16/4 built by: WinDDK]
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
    <system32\DRIVERS\tcpip.sys>  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[vb / vb][Running/Manual Start]
    <\??\C:\DOCUME~1\BLACKM~1\LOCALS~1\Temp\~119389578.tmp>  []

[3Com 3C1000 10/100/1000 Desktop NIC / b57w2k][Stopped/Manual Start]
    <system32\DRIVERS\b57xp32.sys>  [(Verified)Broadcom Corporation, 2.16b.0.0 built by: WinDDK]
[Broadcom iLine10(tm) Network Adapter Driver / BCM42XX][Stopped/Manual Start]
    <system32\DRIVERS\bcm42xx5.sys>  [(Verified)Broadcom Corporation, 2.31.0.2]
[DELL 无线网卡驱动程序 / BCM43XX][Stopped/Manual Start]
    <system32\DRIVERS\bcmwl5.sys>  [(Verified)Broadcom Corporation, 4.100.15.5]
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
    <system32\DRIVERS\HDAudBus.sys>  [(Verified)Windows (R) Server 2003 DDK provider, 5.10.01.5013 built by: WinDDK]
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
    <system32\drivers\RtkHDAud.sys>  [(Verified)Realtek Semiconductor Corp., 5.10.0.5497 built by: WinDDK]
[nv / nv][Running/Manual Start]
    <system32\DRIVERS\nv4_mini.sys>  [(Verified)NVIDIA Corporation, 6.14.10.9371]
[Odyssey Network Services Miniport / odysseyIM3][Running/Manual Start]
    <system32\DRIVERS\odysseyIM3.sys>  [(Verified)Funk Software, Inc., 3.00.0.750]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148)]
[Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Running/Manual Start]
    <system32\DRIVERS\Rtenicxp.sys>  [(Verified)Realtek Semiconductor Corporation                           , 5.686.0103.2008 built by: WinDDK]
[Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys>  [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086]
[sptd / sptd][Stopped/Boot Start]
    <System32\Drivers\sptd.sys>  [(Verified)Duplex Secure Ltd., 1.56.0.0 built by: WinDDK]

================================================================
活动进程


[PID: 1180 / SYSTEM]   \??\C:\WINDOWS\system32\winlogon.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

[PID: 1416 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

[PID: 1484 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

[PID: 1680 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    C:\WINDOWS\System32\COMRes.dll   [N/A]

[PID: 1972 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

[PID: 260 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
    C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll   [Windows (R) 2000 DDK provider, 5.00.2195.1620]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

[PID: 604 / BLACK MI]   C:\WINDOWS\Explorer.EXE   [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll   [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll   [ShenZhen Thunder Networking Technologies,LTD, 1, 0, 0, 20]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll   [ShenZhen Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    C:\Program Files\Common Files\Ahead\lib\NeroDigitalExt.dll   [Nero AG, 2, 0, 0, 8]
    C:\Program Files\Common Files\Ahead\lib\MFC71.DLL   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll   [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]
    C:\WINDOWS\system32\nvapi.dll   [(Verified)N/A]
    C:\WINDOWS\system32\nvcpl.dll   [(Verified)NVIDIA Corporation, 6.14.10.9371]
    C:\WINDOWS\system32\nvshell.dll   [N/A]
    C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll   [Nero AG, 2, 0, 0, 6]
    C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL   [Microsoft Corporation, 7.10.3077.0]
    C:\Program Files\WinRAR\rarext.dll   [N/A]
    C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll   [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34]
    C:\Program Files\Alisoft\WangWang\AliIMExt.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\WINDOWS\system32\YouKuDesktopShell.dll   [(Verified)www.youku.com, 1.2.7.1700]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFTPShellExtension.dll   [(Verified)SmartSoft Ltd., 1.0.14.4]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFTPShellExtensionCHS.dll   [SmartSoft Ltd., 1.0.14.1]
    C:\WINDOWS\system32\ac3filter.acm   [N/A]
    C:\Program Files\Common Files\Ahead\lib\MediaLibraryNSE.dll   [Nero AG, 1, 0, 1, 8]
    L:\QQ2008\QQB2\qdshm.dll   [(Verified)Copyright 2004, 1, 0, 101, 20]
    L:\QQ2008\QQB2\MFC42.DLL   [Microsoft Corporation, 6.00.8665.0]
    L:\QQ\Tencent\QQB2\Bin\TXPFProxy.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    C:\WINDOWS\system32\l3codecp.acm   [Fraunhofer Institut Integrierte Schaltungen IIS, 3, 4, 0, 0]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\a4rxQxCvNBMNnpqs.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\emHnPuBAaF7XjuXBbdxSg.dll   [N/A]
    C:\WINDOWS\system32\rKPbzUHze58GK2VWcYUCt.inf   [N/A]
    C:\WINDOWS\system32\122B901E.dll   [N/A]
    C:\WINDOWS\fonts\zEfE48cw9EmcFaR.fon   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 708 / BLACK MI]   C:\WINDOWS\system32\ctfmon.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 728 / BLACK MI]   C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe   [Nero AG, 1, 0, 1, 10]
    C:\Program Files\Common Files\Ahead\lib\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\Program Files\Common Files\Ahead\lib\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\Program Files\Common Files\Ahead\lib\NMIndexStoreSvrPS.dll   [Nero AG, 1, 0, 1, 10]
    C:\Program Files\Common Files\Ahead\lib\NMDataServices.dll   [Nero AG, 1, 0, 1, 10]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll   [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 1084 / SYSTEM]   C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe   [InterVideo Inc., 1.0.0.1]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]

[PID: 1152 / SYSTEM]   C:\Program Files\Hotspot Shield\bin\openvpnas.exe   [N/A]
    C:\Program Files\Hotspot Shield\bin\libcurl.dll   [The cURL library, http://curl.haxx.se/, 7.18.0]
    C:\Program Files\Hotspot Shield\bin\libeay32.dll   [N/A]
    C:\Program Files\Hotspot Shield\bin\libssl32.dll   [N/A]

[PID: 1424 / SYSTEM]   C:\Program Files\Common Files\LightScribe\LSSrvc.exe   [Hewlett-Packard Company, 1.4.124.1]
    C:\Program Files\Common Files\LightScribe\LSSProxy.dll   [Hewlett-Packard Company, 1.4.124.1]
    C:\Program Files\Common Files\LightScribe\LSLog.dll   [Hewlett-Packard Company, 1.4.124.1]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll   [Microsoft Corporation, 8.00.50727.762]

[PID: 1532 / SYSTEM]   C:\WINDOWS\system32\nvsvc32.exe   [(Verified)NVIDIA Corporation, 6.14.10.9371]
    C:\WINDOWS\system32\nvapi.dll   [(Verified)N/A]

[PID: 1588 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

[PID: 1860 / SYSTEM]   C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe   [(Verified)Ulead Systems, Inc., 1, 0, 0, 5]

[PID: 2676 / BLACK MI]   C:\Program Files\GridService\peeradapter.exe   [FS2YOU, 2, 1, 10, 8366]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

[PID: 2768 / BLACK MI]   C:\Program Files\GridService\peer.exe   [FS2YOU, 2, 1, 10, 8366]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 2312 / BLACK MI]   C:\WINDOWS\system32\conime.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 964 / BLACK MI]   C:\Program Files\eMule\eMule.exe   [http://www.emule-project.net, 0.49.2 Unicode]
    C:\Program Files\eMule\lang\zh_CN.dll   [http://www.emule-project.net, 0.49.2]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 2800 / BLACK MI]   L:\QQ\Tencent\QQB2\Bin\TXPlatform.exe   [(Verified)Tencent, 1, 31, 1025, 0]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    L:\QQ\Tencent\QQB2\Bin\TXPFProxy.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 3204 / BLACK MI]   C:\WINDOWS\notepad.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 1844 / BLACK MI]   L:\QQ2008\QQB2\QQ.exe   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQBaseClassInDll.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQHelperDll.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\BasicCtrlDll.dll   [(Verified)TENCENT, 8,0,1248,1851]
    L:\QQ2008\QQB2\MFC42.DLL   [Microsoft Corporation, 6.00.8665.0]
    L:\QQ2008\QQB2\RICHED32.DLL   [Microsoft Corporation, 5.00.2134.1]
    L:\QQ2008\QQB2\RICHED20.dll   [Microsoft Corporation, 5.31.23.1218]
    L:\QQ2008\QQB2\QQAPI.dll   [(Verified)TENCENT, 8,0,1300,1881]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    L:\QQ\Tencent\QQB2\Bin\TXPFProxy.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ2008\QQB2\LoginCtrl.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\LoginCtrlRes.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQRes.dll   [(Verified)TENCENT, 8,0,978,1833]
    L:\QQ2008\QQB2\QQMainFrame.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\UnReadMsgMgr.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQAllInOne.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\SCCore.dll   [(Verified)TENCENT, 1, 6, 0, 2]
    L:\QQ2008\QQB2\CameraDll.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\CQQApplication.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\FlashAvatarDll.dll   [(Verified)版权所有 (C) 2008, 1, 0, 0, 1]
    L:\QQ2008\QQB2\NewSkin.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\MailSummary.dll   [(Verified)TENCENT, 8,0,1234,1851]
    L:\QQ2008\QQB2\QQSpace.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\vbscript.dll   [Microsoft Corporation, 5.6.0.7426]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]
    L:\QQ2008\QQB2\QQAvatar.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\OEMApplication.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQKnowledgeSearch.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQGroupMng.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQPlugin.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQPet.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\UserDefinedHead.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QRingMng.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQConfigPlugin.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQCustomFace.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\LongConnection.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\PhoneAPI.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\DialerAllinOne.dll   [(Verified)tencent, 1, 4, 0, 0]
    L:\QQ2008\QQB2\QQSysMsgMng.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\GroupConnection.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQMagicFace.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\ImageOle.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\BQQApplication.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQLiveQMng.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQSceneMng.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\CommercesMng.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\PersonalDesktop.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQAddr.dll   [(Verified)深圳市腾讯计算机系统有限公司, 5, 0, 101, 330]
    C:\WINDOWS\system32\mscoree.dll   [Microsoft Corporation, 1.1.4322.573]
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorie.dll   [Microsoft Corporation, 1.1.4322.573]
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorld.dll   [Microsoft Corporation, 1.1.4322.573]
    L:\QQ2008\QQB2\AddrSearch.dll   [(Verified)Tencent, 2, 3, 14, 10]
    L:\QQ2008\QQB2\QQFileTransfer.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\QQSettingCtrl.dll   [(Verified)TENCENT, ]
    L:\QQ\Tencent\QQGame\GamePublic.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQGame\Common\Utility.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQGame\Factory.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQGame\Logic\ComAsyn.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQGame\ProtHand\QQProt.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQGame\Socket\NetMod.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQGame\ProtHand\BaseProt.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQGame\ProtHand\ScatProt.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQGame\Common\Compress.dll   [(Verified)N/A]
    L:\QQ2008\QQB2\VqqModule.dll   [(Verified)TENCENT, 8,0,1300,1881]
    L:\QQ2008\QQB2\VqqAllInOne.dll   [(Verified)Tencent, 2, 2, 0, 3]
    L:\QQ2008\QQB2\tencent-proto1.dll   [(Verified)tencent, 2, 1, 0, 0]
    L:\QQ2008\QQB2\tencent-comlib.dll   [(Verified)tencent, 2, 1, 0, 0]
    L:\QQ2008\QQB2\tencent-proto2.dll   [(Verified)tencent, 2, 1, 0, 0]
    L:\QQ2008\QQB2\InPlus.dll   [(Verified)Tencent, 2, 1, 0, 0]
    L:\QQ2008\QQB2\QQNetDisk.dll   [(Verified)Tencent  , 8, 5, 107, 70]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 2320 / BLACK MI]   C:\Program Files\Alisoft\WangWang\AliIM.exe   [Alibaba software (Shanghai) Corporation., 1, 0, 0, 1]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll   [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\Program Files\Alisoft\WangWang\RvCore.DLL   [(Verified)AliSoft, 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\logger.dll   [(Verified)N/A]
    C:\Program Files\Alisoft\WangWang\uicontrols\UiBrowser.dll   [TODO: <公司名>, 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\GUIBase.dll   [(Verified)N/A]
    C:\Program Files\Alisoft\WangWang\wwutils.DLL   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\wwparams.dll   [(Verified)N/A]
    C:\Program Files\Alisoft\WangWang\uicontrols\WWUIUnits.dll   [N/A]
    C:\Program Files\Alisoft\WangWang\uicontrols\rvnw.dll   [N/A]
    C:\Program Files\Alisoft\WangWang\uicontrols\rvwindow.dll   [N/A]
    C:\Program Files\Alisoft\WangWang\UpdateAssist.dll   [(Verified)N/A]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\Program Files\Alisoft\WangWang\xparam.dll   [(Verified)N/A]
    C:\Program Files\Alisoft\WangWang\imbiz.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\protocol.dll   [(Verified)N/A]
    C:\Program Files\Alisoft\WangWang\imnet.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\GUICore.dll   [(Verified)TODO: <公司名>, 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\WWApplication.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\imdb.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\rvcomlib.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\wwsdkcom.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\wwsdk.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1, 0, 0, 1000]
    C:\Program Files\Alisoft\WangWang\SysNotify.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\Program Files\Alisoft\WangWang\alinet.dll   [(Verified)N/A]
    C:\Program Files\Alisoft\WangWang\LIBEAY32.dll   [The OpenSSL Project, http://www.openssl.org/, 0.9.8e]
    C:\Program Files\Alisoft\WangWang\filetransbiz.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.4]
    C:\Program Files\Alisoft\WangWang\ww_network2.dll   [(Verified)Alibaba software (Shanghai) Corporation., 2, 1, 0, 4]
    C:\Program Files\Alisoft\WangWang\P2PBiz.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1, 0, 0, 1]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 1300 / BLACK MI]   C:\Program Files\Alisoft\WangWang\AliUpdate.exe   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 2720 / SYSTEM]   C:\WINDOWS\system32\wbem\wmiprvse.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

[PID: 3776 / BLACK MI]   L:\QQ\Tencent\QQB2\Bin\QQ.exe   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\Common.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll   [Microsoft Corporation, 8.00.50727.762]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll   [Microsoft Corporation, 8.00.50727.762]
    L:\QQ\Tencent\QQB2\Bin\KernelUtil.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\GF.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll   [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
    L:\QQ\Tencent\QQB2\Bin\AppUtil.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    L:\QQ\Tencent\QQB2\Bin\MainFrame.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\IM.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\TaskTray.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\TXPFProxy.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.QQShow\Bin\FlashAvatarDll.dll   [(Verified)Tencent, 1.26.1.26]
    L:\QQ\Tencent\QQB2\Bin\KernelMisc.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\AppMisc.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\AppCtrl.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\ChatFrame.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\ConfigCenter.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\CustomFace.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\LongCnn.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\ContactInfoFrame.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\MsgMgr.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\SkinMgr.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\QInterLive.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\SystemMsg.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.PaiPai\Bin\PaiPai.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.AudioVideo\Bin\AudioVideo.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.MMOG\Bin\MMOG.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.Soso\Bin\Soso.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.Qzone\Bin\Qzone.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.Weather\Bin\Weather.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.SoBar\Bin\SoBar.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.PaiPaiGift\Bin\PaiPaiGift.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.QQLive\Bin\QQLive.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.QQMusic\Bin\QQMusic.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\Com.Tencent.taotao\Bin\Taotao.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOPlatform.dll   [(Verified)Tencent, 1.1.1.11]
    C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOCommon.DLL   [(Verified)Tencent, 1.1.1.3]
    L:\QQ\Tencent\QQB2\Bin\BasicCtrlDll.dll   [(Verified)TENCENT, 8,0,773,1801]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]
    L:\QQ\Tencent\QQB2\Bin\GroupApp.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.snsapp\Bin\SNSApp.dll   [(Verified)Tencent, 1, 30, 860, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.paycenter\Bin\PayCenter.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.qbar\Bin\QBar.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.qqvipmisc\Bin\QQVipMisc.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.wenwen\Bin\WenWen.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.NetBar\Bin\NetBar.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.wireless\Bin\Wireless.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.qqshow\Bin\QQShow.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.crm\Bin\CRM.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.vas\Bin\VAS.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.qqgame\Bin\QQGame.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.qqpet\Bin\QQPet.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.mail\Bin\Mail.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.qqvip\Bin\QQVip.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Bin\InformationBox.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.filetransfer\Bin\FileTransfer.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.advertisement\Bin\Advertisement.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.today\Bin\Today.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.memo\Bin\Memo.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.qqring\Bin\QQRing.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.qqwebsite\Bin\QQWebsite.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    L:\QQ\Tencent\QQB2\Plugin\com.tencent.gamelife\Bin\GameLife.dll   [(Verified)Tencent, 1, 31, 1025, 0]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]
    L:\QQ\Tencent\QQB2\Bin\AddrSearch.dll   [(Verified)Tencent, 2, 3, 12, 11]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 2304 / BLACK MI]   C:\WINDOWS\notepad.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 1624 / BLACK MI]   C:\Program Files\TheWorld1.43Full\TheWorld.exe   [Phoenix Studio, 2, 4, 0, 7]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll   [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]
    C:\WINDOWS\system32\l3codeca.acm   [(Verified)Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
    C:\Program Files\Pure Codec\Codecs\ffdshow.ax   [Copyright © 2002-2005 Milan Èutka, 1.0.5.2018]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Final Codecs\Codecs\vsfilter239.dll   [Gabest, 1, 0, 1, 5]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 564 / BLACK MI]   C:\WINDOWS\notepad.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 4088 / BLACK MI]   C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\SmartFTP.exe   [SmartSoft Ltd., 3.0.1023.4]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFavorites.dll   [(Verified)SmartSoft Ltd., 1.0.19.4]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\SmartFTPCHS.dll   [SmartSoft Ltd., 3.0.1023.1]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFTPLib.dll   [SmartSoft Ltd., 1.5.14.6]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFTPLibCHS.dll   [Copyright © 2007 by SmartSoft, 1.5.14.5]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFavoritesCHS.dll   [SmartSoft Ltd., 1.0.19.1]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfTransferQueue.dll   [(Verified)SmartSoft Ltd., 1.0.16.4]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfTransferQueueCHS.dll   [SmartSoft Ltd., 1.0.16.1]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFavoritesShellExtensionCHS.dll   [SmartSoft Ltd., 1.0.1.14]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfPidlStorage.dll   [(Verified)SmartSoft Ltd., 1.0.14.4]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFTPShellExtension.dll   [(Verified)SmartSoft Ltd., 1.0.14.4]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\sfFTPShellExtensionCHS.dll   [SmartSoft Ltd., 1.0.14.1]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll   [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
    C:\Documents and Settings\BLACK MI\桌面\傻猫\SmartFTP Client\SmartFTPPS.dll   [(Verified)SmartSoft Ltd., 3.0.1023.4]
    C:\Program Files\Common Files\Ahead\lib\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Common Files\Ahead\lib\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\Program Files\Common Files\Ahead\lib\NMDataServices.dll   [Nero AG, 1, 0, 1, 10]
    C:\Program Files\Common Files\Ahead\lib\NMPluginBase.dll   [Nero AG, 1, 0, 1, 10]
    C:\Program Files\Common Files\Ahead\lib\NMCoFoundation.dll   [Nero AG, 1, 0, 1, 10]
    C:\Program Files\Common Files\Ahead\lib\NMVDS.dll   [Nero AG, 1, 0, 1, 10]
    C:\Program Files\Common Files\Ahead\lib\NMIndexStoreSvrPS.dll   [Nero AG, 1, 0, 1, 10]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 6428 / BLACK MI]   C:\WINDOWS\system32\mmc.exe   [(Verified)Microsoft Corporation, 5.2.3790.4136 (srv03_sp2_qfe.070821-1204)]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 8076 / BLACK MI]   C:\WINDOWS\system32\taskmgr.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    C:\WINDOWS\system32\a4rxQxCvNBMNnpqs.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]

[PID: 7472 / BLACK MI]   C:\Program Files\arswp3\arswp3.exe   [(Verified)(C)  2006 - 2009  Windows 清 理 助 手, 3.0.7.803]
    C:\WINDOWS\system32\a4rxQxCvNBMNnpqs.dll   [N/A]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\WINDOWS\system32\704C3595.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]

[PID: 6980 / BLACK MI]   C:\Program Files\Internet Explorer\IEXPLORE.EXE   [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    C:\WINDOWS\system32\a4rxQxCvNBMNnpqs.dll   [N/A]
    C:\WINDOWS\system32\COMRes.dll   [N/A]
    C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll   [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\FlashGet\jccatch.dll   [www.flashget.com, 1, 8, 4, 1007]
    C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll   [(Verified)BitComet, 20090302]
    C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll   [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll   [ShenZhen Thunder Networking Technologies,LTD, 1, 0, 0, 20]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll   [ShenZhen Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    C:\Program Files\FlashGet\getflash.dll   [www.flashget.com, 1, 8, 4, 1003]
    C:\Program Files\Hotspot Shield\hssie\HssIE.dll   [AnchorFree Inc., 1, 0, 1, 1]
    C:\WINDOWS\system32\704C3595.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]

[PID: 6932 / BLACK MI]   C:\Documents and Settings\BLACK MI\桌面\文件夹\常用工具\系统修复工具sreng\sreng2\SREngLdr.EXE   [Smallfrogs Studio, 2.7.1.1261]

[PID: 6308 / BLACK MI]   C:\Documents and Settings\BLACK MI\桌面\文件夹\常用工具\系统修复工具sreng\sreng2\SREf4a5a0ef.EXE   [Smallfrogs Studio, 2.7.1.1261]
    C:\WINDOWS\system32\704C3595.dll   [N/A]
    C:\WINDOWS\system32\2exJW3dsaTgWrf5uAPadmHN.dll   [N/A]
    C:\WINDOWS\system32\w7uds3zyayg9.dll   [N/A]
    C:\WINDOWS\system32\Q9q2MHJ3uTBErM7wc.dll   [N/A]
    C:\WINDOWS\system32\EmfVcSFcRkARFbbTQW5V5.dll   [N/A]
    C:\WINDOWS\system32\WcCtgJ4zcxHF.dll   [N/A]
    C:\WINDOWS\system32\mFr9FPruEFZ9VNdrveJunw3.dll   [N/A]
    C:\WINDOWS\Downloaded Program Files\ktEDQzfuNZk2SUAMgyAZz.cur   [N/A]
    C:\Documents and Settings\BLACK MI\桌面\文件夹\常用工具\系统修复工具sreng\sreng2\Upload\3rdUpd.DLL   [Smallfrogs Studio, 2, 1, 0, 15]
    C:\WINDOWS\system32\COMRes.dll   [N/A]

================================================================
文件关联


================================================================
Autorun.Inf

================================================================
Winsock提供者


================================================================
隐藏进程


================================================================
可疑文件


================================================================
HOSTS



[/CODE]