[CODE] 2009-09-05,15:22:54 System Repair Engineer 2.8.1.1279 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能 以下内容被选中: 所有的启动项目(包括注册表、启动文件夹、服务等) 浏览器加载项 正在运行的进程(包括进程模块信息) 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 进程特权扫描 计划任务 Windows 安全更新检查 API HOOK 隐藏进程 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Component Publisher] [(Verified)"Shenzhen QVOD Technology Co.,Ltd"] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [Cognizance Corporation] <"C:\Program Files\Wireless Console 2\wcourier.exe"> [] <"C:\Program Files\ASUS\Splendid\ACMON.exe"> [ATK] [ASUSTek Computer Inc.] <"C:\Program Files\ATK Hotkey\Hcontrol.exe"> [] [ASUS] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <"C:\Program Files\Rising\Rav\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] [(Verified)"Beijing Gigabit Times Technology Co., Ltd"] <"F:\QQLive\QQLiveOneClick.exe" -system_startup> [(Verified)Tencent Technology(Shenzhen) Company Limited] <"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup> [(Verified)Beijing Rising Information Technology Corporation Limited] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{AEB6717E-7E19-11d0-97EE-00C04FD91972}> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Aspwdflt] [ASUSTek Computer Inc.] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy] <%SystemRoot%\System32\dimsntfy.dll> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OneCard] [Cognizance Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher] <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{9A21033C-BAD4-46D4-9A3D-45B62DBC66A3}] <浏览器自定义设置> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] [HKEY_CURRENT_USER\Control Panel\Desktop] [File is missing] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; "C:\Program Files\SogouInput\OlympicNews.exe"> [File is missing] ================================== 启动文件夹 [QQ游戏启动加速程序] F:\Gs\QQGAME\Accel.exe [深圳市腾讯计算机系统有限公司]> ================================== 服务 [ADSM Service / ADSMService][Running/Auto Start] [登录会话中介器 / ASBroker][Running/Auto Start] C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll> [本地信道 / ASChannel][Running/Auto Start] C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll> [Contrl Center of Storm Media / ccosm][Running/Auto Start] <北京暴风网际科技有限公司> [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start] <(File is missing)> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] [Rav Process Communication Center / RavCCenter][Stopped/Auto Start] [Rising RavTask Manager / RavTask][Running/Auto Start] <"C:\Program Files\Rising\Rav\RavTask.exe" RavTask> [Rising RealTime Monitor / RsRavMon][Stopped/Auto Start] [Rising Scan Service / RsScanSrv][Stopped/Auto Start] [System Restore Service / srservice][Stopped/Disabled] C:\WINDOWS\system32\srsvc.dll> [Tencent Software Update Service / TSUSVC][Running/Auto Start] <"C:\Program Files\Tencent\QQSoftMgr\TencentUpdateSvc.exe" -run> ================================== 驱动程序 [Atheros AR5008 Wireless Network Adapter Service / AR5416][Stopped/Manual Start] [AuthenTec TruePrint USB Driver (SwipeSensor) / ATSWPDRV][Running/Manual Start] [cpuz131 / cpuz131][Running/Manual Start] <\??\C:\DOCUME~1\ASUS\LOCALS~1\Temp\cpuz131\cpuz_x32.sys> [Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start] [hookcont / hookcont][Running/System Start] [hooksys / hooksys][Running/System Start] [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] [ITECIR Infrared Receiver / itecir][Stopped/Manual Start] [ItSDisk / ItSDisk][Running/System Start] [ATK0100 ACPI UTILITY / MTsensor][Running/Manual Start] [Intel(R) Wireless WiFi Link 适配器驱动程序(适用于 Windows XP 32 位) / NETw4x32][Stopped/Manual Start] [Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit / NETw5x32][Running/Manual Start] [nv / nv][Running/Manual Start] [Service for NVIDIA High Definition Audio Driver / NVHDA][Running/Manual Start] [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [rimmptsk / rimmptsk][Running/Auto Start] [rimsptsk / rimsptsk][Running/Auto Start] [Ricoh xD-Picture Card Driver / rismxdp][Running/Auto Start] [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys> [RsProtect / RsProtect][Running/System Start] [Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Running/Manual Start] [Secdrv / Secdrv][Stopped/Manual Start] [SATALink driver accelerator / SiFilter][Running/Boot Start] <\SystemRoot\system32\drivers\SiWinAcc.sys> [System Restore Filter Driver / sr][Stopped/Disabled] <\SystemRoot\system32\DRIVERS\sr.sys> [Synaptics TouchPad Driver / SynTP][Running/Manual Start] [TCP/IP Protocol Driver / Tcpip][Running/System Start] [ITECIR Hid Driver / vhidmini][Running/Manual Start] ================================== 浏览器加载项 [HaoKanBar BrowserHelper] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} [&Windows Live Toolbar] {21FA44EF-376D-4D53-9B0F-8A89D3229068} [asusTek_sysctrl Class] {0D41B8C5-2599-4893-8183-00195EC8D5F9} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [MUWebControl Class] {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [] {00000000-0000-0000-0000-000000000000} <, > [WebThunder Browser Helper] {00000AAA-A363-466E-BEF5-9BB68697AA7F} <, > [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [] {03507A1A-E0C5-4404-AA26-205385C0892D} <, > [] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, > [asusTek_sysctrl Class] {0D41B8C5-2599-4893-8183-00195EC8D5F9} [ASUS Security Protect Manager User e-Wallet] {1009C944-97D5-44A9-9E32-DFF54F498968} [Player Class] {11F2A418-94B2-4e16-9B0C-B00C0435F903} [XDownloaddManager Class] {15BD4A12-BEDA-4A4D-8FB1-04553F1FD1CB} <, > [InformationCardSigninHelper Class] {19916E01-B44E-4E31-94A4-4696DF46157B} [InstallHelper Class] {1DABF8D5-8430-4985-9B7F-A30E53D709B3} [] {219C3416-8CB2-491A-A3C7-D9FCDDC9D600} <, > [&Windows Live Toolbar] {21FA44EF-376D-4D53-9B0F-8A89D3229068} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} [QvodExtend] {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} [Shell Name Space] {55136805-B2DE-11D1-B9F2-00A0C98BC547} [] {577F51B5-7537-4CDD-8469-3FBA1AAB7A65} <, > [] {5F31A76F-4842-4B61-8152-5F8FB545FE48} <, > [] {61F0024B-8278-4999-B7E6-2718426D9FE6} <, > [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} [IEFXZHelper] {6A49F431-2A2E-41a5-9080-0F41D1A3AEC1} [IEFXZ] {6A49F431-2A2E-41A5-9080-0F41D1A3AEC2} [QQLiveFile Class] {6B232760-90F1-41c3-9902-C8552C1D8A72} [StormPlayer Object] {6BE52E1D-E586-474F-A6E2-1A85A9B4D9FB} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [MUWebControl Class] {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [Search Helper] {6EBF7485-159F-4BFF-A14F-B9E3AAC4465B} [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, (Signed) N/A> [HaoKanBar BrowserHelper] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [XDownloaddManager Class] {802F530B-A8F6-4631-AE49-6BACAAC6373E} [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [XML DOM Document 5.0] {88D969E5-F192-11D4-A65F-0040963251E5} [Free Threaded XML DOM Document 5.0] {88D969E6-F192-11D4-A65F-0040963251E5} [XML HTTP 5.0] {88D969EA-F192-11D4-A65F-0040963251E5} [XML DOM Document 6.0] {88D96A05-F192-11D4-A65F-0040963251E5} [XML HTTP 6.0] {88D96A0A-F192-11D4-A65F-0040963251E5} [SSOForPTLogin Class] {8FC1EE75-72B3-4A23-B987-2B1C4C8A611B} [Windows Live 登录帮助程序] {9030D464-4C02-4ABF-8ECC-5164760863C6} [] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, > [] {962EFB8E-2683-42D4-AC74-AAA4C759B9C6} <, > [OFrameObject Class] {9701758C-4373-482E-B13C-776C048EC890} [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [VersionDetector Class] {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} [CBBrowerBuddy Class] {A412E581-59B2-485E-834F-C5F0C0268C79} [APlayer Control] {A9322148-C691-4B9D-91FC-B9C461DBE9DD} [金山词霸浏览器栏] {ABB7394C-91CD-42E9-88A3-23166137709D} [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [] {B69003B3-C55E-4B48-836C-BC5946FC3B28} <, > [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [QQPlayerCtrl Class] {CD108273-D434-43E6-AA90-1469F97EB398} [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} [Microsoft Url Search Hook] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} [Windows Live 登录控制] {D2517915-48CE-4286-970F-921E881B8C5C} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [QQLive Class] {D9EBCF5D-3F8F-4b6a-89BA-70577BE73C62} [ASUS Security Protect Manager] {DF21F1DB-80C6-11D3-9483-B03D0EC10000} [Microsoft Silverlight] {DFEAF541-F3E1-4C24-ACAC-99C30715084A} [PlayerCtrl Class] {E05BC2A3-9A46-4A32-80C9-023A473F5B23} [Windows Live Toolbar Helper] {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} [] {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} [TimwpDll.TimwpCheck] {ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} [QvodCtrl Class] {F3D0D36F-23F8-4682-A195-74C92B03D4AF} [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [XML DOM Document 3.0] {F5078F32-C551-11D3-89B9-0000F81FE221} [Free Threaded XML DOM Document 3.0] {F5078F33-C551-11D3-89B9-0000F81FE221} [XML HTTP 3.0] {F5078F35-C551-11D3-89B9-0000F81FE221} [XSL Template 3.0] {F5078F36-C551-11D3-89B9-0000F81FE221} [XML DOM Document] {F6D90F11-9C73-11D3-B32E-00C04F990BB4} [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} ================================== 正在运行的进程 [PID: 936 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 1008 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 1040 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll] [ASUSTek Computer Inc., 1, 0, 0, 0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll] [Cognizance Corporation, 2.5.0.077] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\TrayIcon.dll] [Cognizance Corporation, 2.5.0.285] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll] [ASUSTeK Computer Inc., 1.01.0.014] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\brand.dll] [ASUSTeK Computer Inc., 1.01.0.008] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItMsg.dll] [Cognizance Corporation, 1.21.0.413] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll] [Cognizance Corporation, 1.27.0.160] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItDAC.dll] [Cognizance Corporation, 1.00.317] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItReports.DLL] [Cognizance Corporation, 1.5.0.046] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\BioAuth.dll] [Cognizance Corporation, 2.5.0.306] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\BioAuth.dll] [Cognizance Corporation, 2.5.0.301] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASBioAT.dll] [Cognizance Corporation, 2.5.0.083] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCClient.dll] [Cognizance Corporation, 2.1.0.182] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AuthWiz.dll] [Cognizance Corporation, 2.5.0.558] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\AuthWiz.dll] [Cognizance Corporation, 2.5.0.538] [PID: 1084 / SYSTEM][C:\WINDOWS\system32\services.exe] [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] [PID: 1096 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\ASWLNPkg.dll] [Cognizance Corporation, 2.5.0.077] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll] [ASUSTek Computer Inc., 1, 0, 0, 0] [PID: 1244 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [c:\program files\asus security center\asus security protect manager\bin\aswlnpkg.dll] [Cognizance Corporation, 2.5.0.077] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [c:\program files\asus security center\asus security protect manager\bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [c:\program files\asus security center\asus security protect manager\bin\aschnl.dll] [Cognizance Corporation, 1.27.0.160] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\BioAuthSrv.dll] [Cognizance Corporation, 2.1.0.083] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItDAC.dll] [Cognizance Corporation, 1.00.317] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItReports.DLL] [Cognizance Corporation, 1.5.0.046] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCServer.dll] [Cognizance Corporation, 1.00.132] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCard.dll] [Cognizance Corporation, 1.01.173] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItMsg.dll] [Cognizance Corporation, 1.21.0.413] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll] [ASUSTeK Computer Inc., 1.01.0.014] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\brand.dll] [ASUSTeK Computer Inc., 1.01.0.008] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItAuth.dll] [Cognizance Corporation, 1.01.227] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AuthWiz.dll] [Cognizance Corporation, 2.5.0.558] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\AuthWiz.dll] [Cognizance Corporation, 2.5.0.538] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\NetAdmin.dll] [Cognizance Corporation, 1.5.0.178] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\NetAdmin.dll] [Cognizance Corporation, 1.5.0.177] [PID: 1280 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1364 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1436 / SYSTEM][C:\Program Files\Rising\Rav\CCENTER.EXE] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37] [C:\Program Files\Rising\Rav\cnt08.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1444 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1516 / SYSTEM][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\Rav\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 40] [C:\Program Files\Rising\Rav\rsstub.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1600 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1644 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1692 / SYSTEM][C:\Program Files\Rising\Rav\RavMonD.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rav\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\Rav\MonBase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\Rav\Rslog.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.41] [C:\Program Files\Rising\Rav\mondrv.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\Program Files\Rising\Rav\defmon.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 31] [C:\Program Files\Rising\Rav\moncom08.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\MonRule.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\Program Files\Rising\Rav\FileMon.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28] [C:\Program Files\Rising\Rav\MailMon.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24] [C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\Hooksys.dll] [Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 18] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\HookCont.dll] [Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 12] [C:\Program Files\Rising\Rav\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [C:\Program Files\Rising\Rav\BACore.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 22] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\RSStore.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\Rav\ScanAdd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.19] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.39] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Rising\Rav\ffr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\nvfile.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\scanexec.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\Rav\unexe.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\scanex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 61] [C:\Program Files\Rising\Rav\pearc.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\scanpe.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [C:\Program Files\Rising\Rav\ur000.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 16] [C:\Program Files\Rising\Rav\urutils.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\methodex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\pecompd.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\heurex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\extfile.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 16] [C:\Program Files\Rising\Rav\revm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\Program Files\Rising\Rav\scansct.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\ur023.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\Rav\ur001.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\Rav\scriptci.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\extmail.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\uroutine.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [PID: 1944 / SYSTEM][C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe] [ASUSTek Computer Inc., 1, 3, 8, 106] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1952 / SYSTEM][C:\Program Files\Rising\Rav\rsnetsvr.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 15] [C:\Program Files\Rising\Rav\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.12] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1980 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [PID: 532 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\System32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\System32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [PID: 552 / SYSTEM][C:\Program Files\StormII\stormliv.exe] [北京暴风网际科技有限公司, 3, 9, 5, 15] [C:\Program Files\StormII\MSVCP60.dll] [Microsoft Corporation, 6.02.3104.0] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\StormII\bfoptdll.dll] [北京暴风网际科技有限公司, 3, 8, 7, 16] [C:\Program Files\StormII\box\BoxLog.dll] [北京暴风网际科技有限公司, 3, 9, 6, 27] [PID: 704 / SYSTEM][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] [Microsoft Corporation, 7.00.9466] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\2052\mdmui.dll] [Microsoft Corporation, 7.00.9466] [PID: 504 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.11.7953] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.7953] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 136 / SYSTEM][C:\Program Files\Rising\Rav\ScanFrm.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.12] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\Rav\scansrvp.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\ScanSrv.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.10] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Rising\Rav\ScanRavT.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.27] [C:\Program Files\Rising\Rav\ScanBT.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.50] [C:\Program Files\Rising\Rav\ScanStub.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.9] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.41] [C:\Program Files\Rising\Rav\ScanAdd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.19] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.39] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\Rav\ffr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\nvfile.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\scanexec.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Program Files\Rising\Rav\unexe.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\scanex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 61] [C:\Program Files\Rising\Rav\pearc.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\scanpe.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14] [C:\Program Files\Rising\Rav\ur000.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 16] [C:\Program Files\Rising\Rav\urutils.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\methodex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\revm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\Program Files\Rising\Rav\heurex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\pecompd.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\extfile.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 16] [C:\Program Files\Rising\Rav\scansct.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [PID: 1744 / SYSTEM][C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe] [Microsoft Corp., 1.2.123.0] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1808 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1916 / SYSTEM][C:\Program Files\Tencent\QQSoftMgr\TencentUpdateSvc.exe] [Tencent, 1.0 Beta2 Build 2009.04.20] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [PID: 2364 / ASUS][C:\WINDOWS\Explorer.EXE] [(Verified) Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll] [, 1.4.7.615] [C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll] [, 1.4.7.530] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll] [Cognizance Corporation, 1.22.0.239] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SFSShell.dll] [Cognizance Corporation, 1.22.0.240] [C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.11.7953] [C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.11.7953] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.7953] [C:\WINDOWS\system32\nvshell.dll] [, ] [C:\Program Files\ASUS\ASUS Data Security Manager\AdsmendecExt.dll] [ASUSTek Computer Inc., 1.6.8.527] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\TrayIcon.dll] [Cognizance Corporation, 2.5.0.285] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll] [ASUSTeK Computer Inc., 1.01.0.014] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\brand.dll] [ASUSTeK Computer Inc., 1.01.0.008] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItMsg.dll] [Cognizance Corporation, 1.21.0.413] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [E:\Internet Applications\QvodPlayer\QvodBand.dll] [Shenzhen QVOD Technology Co.,Ltd, 3, 0, 0, 0] [PID: 2444 / ASUS][C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe] [Cognizance Corporation, 2.5.0.057] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll] [Bioscrypt Inc., 2.0.0.110] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ASWallet.dll] [Bioscrypt Inc., 2.0.0.110] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItSSO.dll] [Cognizance Corporation, 2.5.0.410] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\RasAdmin.dll] [Cognizance Corporation, 1.5.0.028] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItReports.DLL] [Cognizance Corporation, 1.5.0.046] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\RasAdmin.dll] [Cognizance Corporation, 1.5.0.028] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll] [Cognizance Corporation, 1.22.0.239] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SFSShell.dll] [Cognizance Corporation, 1.22.0.240] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\PkiAdmin.dll] [Cognizance Corporation, 1.5.0.025] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll] [ASUSTeK Computer Inc., 1.01.0.014] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\brand.dll] [ASUSTeK Computer Inc., 1.01.0.008] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItMsg.dll] [Cognizance Corporation, 1.21.0.413] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\PkiAdmin.dll] [Cognizance Corporation, 1.5.0.025] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCClient.dll] [Cognizance Corporation, 2.1.0.182] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItVCard.dll] [Cognizance Corporation, 1.01.173] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItAPS.dll] [Cognizance Corporation, 2.5.0.064] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\ItAPS.dll] [Cognizance Corporation, 2.5.0.063] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\TrayIcon.dll] [Cognizance Corporation, 2.5.0.285] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\BioAuth.dll] [Cognizance Corporation, 2.5.0.306] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\BioAuth.dll] [Cognizance Corporation, 2.5.0.301] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll] [Cognizance Corporation, 1.27.0.160] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\NetAdmin.dll] [Cognizance Corporation, 1.5.0.178] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\NetAdmin.dll] [Cognizance Corporation, 1.5.0.177] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SSOMngr.dll] [Cognizance Corporation, 2.25.0.293] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SSOMngr.dll] [Cognizance Corporation, 2.25.0.296] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItEncryptedDisk.dll] [Cognizance Corporation, 1.5.0.054] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItEncrypt.dll] [Cognizance Corporation, 1.01.037] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ittal.dll] [Cognizance Corporation, 2.5.0.208] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASBioAT.dll] [Cognizance Corporation, 2.5.0.083] [C:\WINDOWS\system32\ATSC70.dll] [AuthenTec, Inc., 7, 10, 0, 38] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AuthWiz.dll] [Cognizance Corporation, 2.5.0.558] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\AuthWiz.dll] [Cognizance Corporation, 2.5.0.538] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItDAC.dll] [Cognizance Corporation, 1.00.317] [PID: 2716 / ASUS][C:\Program Files\Wireless Console 2\wcourier.exe] [, 2, 0, 10, 0] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 2756 / ASUS][C:\Program Files\ASUS\Splendid\ACMON.exe] [ATK, 1, 0, 9, 0] [C:\Program Files\ASUS\Splendid\OVS.dll] [ASUSTek, 1, 0, 0, 1] [C:\Program Files\ASUS\Splendid\GLCDdll.dll] [, 1, 0, 1, 0] [C:\Program Files\ASUS\Splendid\Chameleon.dll] [ASUSTeK, 1, 0, 0, 3] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 2828 / ASUS][C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe] [ASUSTek Computer Inc., 1, 0, 0, 0] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 2836 / ASUS][C:\Program Files\ATK Hotkey\Hcontrol.exe] [N/A, ] [C:\Program Files\ATK Hotkey\CMSSC.dll] [N/A, ] [C:\Program Files\ATK Hotkey\inter_f2.dll] [ATK, 1043, 2, 15, 52] [C:\Program Files\ATK Hotkey\ATKWLIOC.DLL] [ACTIONTEC Electronics,Inc, 2.01.02] [C:\Program Files\ATK Hotkey\SiSPkt.dll] [Silicon Integrated Systems Corp., 1, 0, 0, 45] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 2852 / ASUS][C:\WINDOWS\system32\ASUSTPE.exe] [ASUS, 1, 0, 0, 0] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 11.2.2 31Jul08] [PID: 2872 / ASUS][C:\WINDOWS\RTHDCPL.EXE] [Realtek Semiconductor Corp., 2.2.5.2] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 2924 / ASUS][C:\WINDOWS\system32\ACEngSvr.exe] [ASUSTeK, 1, 0, 0, 4] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\icm32.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 2948 / ASUS][C:\Program Files\Rising\Rav\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.22] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Rising\Rav\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.49] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rav\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\Rav\ScanEvnt.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.14] [C:\Program Files\Rising\Rav\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 75] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\Rav\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.26] [C:\Program Files\Rising\Rav\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 29] [C:\Program Files\Rising\Rav\mruleui.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 10] [C:\Program Files\Rising\Rav\MonTray.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.1.4] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\RavITray.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 23] [C:\Program Files\Rising\Rav\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.17] [C:\Program Files\Rising\Rav\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [PID: 3012 / ASUS][C:\Program Files\Rising\AntiSpyware\rstray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.17] [C:\Program Files\Rising\AntiSpyware\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Rising\AntiSpyware\RsXML.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2] [C:\Program Files\Rising\AntiSpyware\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\AntiSpyware\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\AntiSpyware\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.31] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\AntiSpyware\rscommon.dll] [Beijing Rising Information Technology Co., Ltd., 20.0.1.1] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\pngdll.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\runiep.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.43] [C:\Program Files\Rising\AntiSpyware\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.11] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\AntiSpyware\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [PID: 3048 / ASUS][C:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [PID: 3088 / ASUS][E:\Internet Applications\QvodPlayer\QvodTerminal.exe] [Shenzhen QVOD Technology Co.,Ltd, 3, 5, 0, 61] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1004 / ASUS][C:\Program Files\ATK Hotkey\ATKOSD.exe] [, 1043, 2, 15, 78] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 3152 / ASUS][C:\Program Files\Super Rabbit\MagicSet\RabbitLobby.exe] [Supper Rabbit, 1.0.0.1] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Super Rabbit\MagicSet\srlog.dll] [北京千兆时代科技有限公司, 1.0.0.3] [C:\Program Files\Super Rabbit\MagicSet\SrHwMon.dll] [Super Rabbit, 1.0.0.2] [C:\Documents and Settings\ASUS\Local Settings\Temp\SrMonDir\srhdwlib.dll] [PCPC8, 1, 0, 5, 6] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.7953] [PID: 3240 / ASUS][C:\Program Files\ATK Hotkey\WDC.exe] [, 1, 0, 0, 5] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 3856 / ASUS][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll] [, 1.4.7.615] [C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll] [, 1.4.7.530] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll] [Cognizance Corporation, 1.22.0.239] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SFSShell.dll] [Cognizance Corporation, 1.22.0.240] [PID: 2788 / ASUS][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll] [北京千兆时代科技有限公司, 3.5.1.1669] [C:\Program Files\Super Rabbit\MagicSet\WebSafe.dll] [北京千兆时代科技有限公司, 1.0.0.3] [C:\Program Files\Super Rabbit\MagicSet\Scan.dll] [N/A, ] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.77] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\JPWB.IME] [日月科技, 4.00.950] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2810] [C:\Program Files\SogouInput\4.2.3.2810\Resource.dll] [Sogou.com Inc., 4.2.3.2810] [C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx] [Adobe Systems, Inc., 10,0,22,87] [PID: 3132 / ASUS][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll] [北京千兆时代科技有限公司, 3.5.1.1669] [C:\Program Files\Super Rabbit\MagicSet\WebSafe.dll] [北京千兆时代科技有限公司, 1.0.0.3] [C:\Program Files\Super Rabbit\MagicSet\Scan.dll] [N/A, ] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.77] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorie.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx] [Adobe Systems, Inc., 10,0,22,87] [PID: 1740 / ASUS][C:\Program Files\Rising\AntiSpyware\knownsvr.exe] [Beijing Rising Information Technology Co., Ltd., 6.0.0.14] [C:\Program Files\Rising\AntiSpyware\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.11] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [PID: 3444 / ASUS][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll] [北京千兆时代科技有限公司, 3.5.1.1669] [C:\Program Files\Super Rabbit\MagicSet\WebSafe.dll] [北京千兆时代科技有限公司, 1.0.0.3] [C:\Program Files\Super Rabbit\MagicSet\Scan.dll] [N/A, ] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.77] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx] [Adobe Systems, Inc., 10,0,22,87] [C:\WINDOWS\system32\JPWB.IME] [日月科技, 4.00.950] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2810] [C:\Program Files\SogouInput\4.2.3.2810\Resource.dll] [Sogou.com Inc., 4.2.3.2810] [C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll] [, 1.4.7.615] [C:\Program Files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll] [, 1.4.7.530] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll] [Cognizance Corporation, 1.22.0.239] [C:\WINDOWS\system32\MSVCR70.dll] [Microsoft Corporation, 7.00.9955.0] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll] [Cognizance Corporation, 1.21.0.410] [C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin\CHS\SFSShell.dll] [Cognizance Corporation, 1.22.0.240] [PID: 2488 / ASUS][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] [C:\WINDOWS\system32\APSHook.dll] [Cognizance Corporation, 2.0.0.015] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll] [北京千兆时代科技有限公司, 3.5.1.1669] [C:\Program Files\Super Rabbit\MagicSet\WebSafe.dll] [北京千兆时代科技有限公司, 1.0.0.3] [C:\Program Files\Super Rabbit\MagicSet\Scan.dll] [N/A, ] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.77] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx] [Adobe Systems, Inc., 10,0,22,87] [PID: 1720 / ASUS][D:\AZWJ\sreng2\SREngLdr.EXE] [Smallfrogs Studio, 2.8.1.1279] [PID: 3056 / ASUS][D:\AZWJ\sreng2\SREf0465bfe.EXE] [Smallfrogs Studio, 2.8.1.1279] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\AZWJ\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT Error. [C:\WINDOWS\notepad.exe %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost ================================== 进程特权扫描 特殊特权被允许: SeLoadDriverPrivilege [PID = 1040, C:\WINDOWS\SYSTEM32\WINLOGON.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 2444, C:\PROGRAM FILES\ASUS SECURITY CENTER\ASUS SECURITY PROTECT MANAGER\BIN\ASGHOST.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 2756, C:\PROGRAM FILES\ASUS\SPLENDID\ACMON.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 2836, C:\PROGRAM FILES\ATK HOTKEY\HCONTROL.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 2924, C:\WINDOWS\SYSTEM32\ACENGSVR.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 1004, C:\PROGRAM FILES\ATK HOTKEY\ATKOSD.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 3240, C:\PROGRAM FILES\ATK HOTKEY\WDC.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 1720, D:\AZWJ\SRENG2\SRENGLDR.EXE] ================================== 计划任务 [已启用] SogouImeMgr.job C:\PROGRA~1\SOGOUI~1\423~1.281\PinyinRepair.exe ================================== Windows 安全更新检查 Microsoft .NET Framework 版本 1.1,简体中文版 KB829019, Microsoft .NET Framework 2.0 语言包:x86 (KB829019) KB925850, Windows Media Player 11 KB940157, 用于 Windows XP 的 Windows 搜索 4.0 (KB940157) KB921598, Microsoft Office 2003 安全更新 (KB921598) MS08-044 KB955439, Access Snapshot Viewer 2003 安全更新 (KB955439) MS08-041 KB949810, Office 正版增值计划通知 (KB949810)-CHS KB951535, Microsoft Office 2003 安全更新 (KB951535) MS08-069 KB943729, 用于 Windows XP 的组策略首选项客户端扩展 (KB943729) KB905474, Windows Genuine Advantage 通知 (KB905474) KB909520, Microsoft 基本智能卡加密服务提供程序包: x86 (KB909520) KB969618, Microsoft Office system 2007 安全更新 (KB969618) MS09-017 KB970306, Microsoft Search Enhancement Pack 更新 KB931125, 根证书更新程序 [2009 年 5 月] (KB931125) KB951847, Microsoft .NET Framework 3.5 Service Pack 1 和用于 .NET 版本 2.0 至 3.5 的 .NET Framework 3.5 Family Update (KB951847) x86 KB970363, Microsoft Silverlight 更新 (KB970363) KB972688, Microsoft Office Outlook 2003 垃圾邮件筛选器更新 (KB972688) ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]