[CODE] 2009-11-17,10:00:38 System Repair Engineer 2.8.1.1279 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能 以下内容被选中: 所有的启动项目(包括注册表、启动文件夹、服务等) 浏览器加载项 正在运行的进程(包括进程模块信息) 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 进程特权扫描 计划任务 Windows 安全更新检查 API HOOK 隐藏进程 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Component Publisher] <52hxw> [(Verified)厦门网之源信息科技有限公司] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [ATI Technologies, Inc.] <360Safetray><"E:\360\360Safe\safemon\360tray.exe" /start> [(Verified)Qizhi Software (beijing) Co. Ltd] [北京坚果比特科技有限公司] [(Verified)Microsoft Corporation] <; E:\Super Rabbit\MagicSet\SrLoader.exe> [(Verified)"Beijing Gigabit Times Technology Co., Ltd"] <"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin> [(Verified)Adobe Systems Incorporated] <; C:\WINDOWS\system32\hkcmd.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <"C:\Program Files\Rising\Rav\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] <"C:\Program Files\Rising\RFW\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{AEB6717E-7E19-11d0-97EE-00C04FD91972}> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy] <%SystemRoot%\System32\dimsntfy.dll> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\PsNotify] [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher] <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] <"C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] <浏览器自定义组件> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; "E:\PPLive\PPLive.exe" /LoadModule ppvod.dll> [(Verified)Synacast Corp.] <; E:\PPStream\ppsap.exe> [(Verified)SHANGHAI ZHONGYUAN NETWORKS LIMITED] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [(Verified)"RealNetworks, Inc."] ================================== 启动文件夹 [SaveCan] E:\SaveCan\SaveCan.exe [省省看 节能环保软件]> [SaveCan] E:\SaveCan\SaveCan.exe [省省看 节能环保软件]> ================================== 服务 [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] <> [ATI Smart / ATI Smart][Stopped/Auto Start] <> [FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"> [Human Interface Device Access / HidServ][Stopped/Disabled] %SystemRoot%\System32\hidserv.dll> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"> [Rav Service / RsRavMon][Running/Auto Start] <"C:\Program Files\Rising\Rav\RavMonD.exe"> [RFW Service / RsRFWMon][Running/Auto Start] <"C:\Program Files\Rising\RFW\RavMonD.exe"> [Sandboxie Service / SbieSvc][Running/Auto Start] [主动防御 / ZhuDongFangYu][Running/Auto Start] <"E:\360\360Safe\deepscan\zhudongfangyu.exe"><360安全中心> ================================== 驱动程序 [360SelfProtection / 360SelfProtection][Running/System Start] <360安全中心> [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start] [ati2mtag / ati2mtag][Running/Manual Start] [BFSDRV / BFSDRV][Running/System Start] <\??\C:\WINDOWS\system32\drivers\bfsdrv.sys><360安全中心> [BREGDRV / BREGDRV][Running/System Start] <\??\C:\WINDOWS\system32\drivers\bregdrv.sys><360安全中心> [EagleNT / EagleNT][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\EagleNT.sys> [EfiSystemMon / EfiMon][Running/System Start] <奇虎网> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start] [hookcont / hookcont][Running/System Start] [HookPort / HookPort][Running/Boot Start] <\SystemRoot\System32\Drivers\Hookport.sys><360安全中心> [hooksys / hooksys][Running/System Start] [ialm / ialm][Running/Manual Start] [nv / nv][Stopped/Manual Start] [OSCI_DRVNT / OSCI_DRVNT][Running/Manual Start] <\??\E:\SaveCan\savecan32.sys> [Parallel Port Joystick Bus device driver / PPJoyBus][Running/Manual Start] [Parallel Port Joystick device driver / PPortJoystick][Running/Manual Start] [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [QKeyServiceDisplay / QKeyService][Running/Boot Start] <\SystemRoot\system32\KeyCrypt.sys> [Quantum DeepScanner Servers / qutmdserv][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\qutmdrv.sys><360安全中心> [Rising RfwARP Driver / RFWARP][Running/Auto Start] [Rising RfwBase Driver / RfwBase9][Running/Manual Start] [rfwtdi / rfwtdi][Running/Auto Start] <\??\C:\Program Files\Rising\RFW\rfwtdi.sys> [rsassist / rsassist][Running/Auto Start] [rsfwdrv / rsfwdrv][Running/System Start] <\??\C:\Program Files\Rising\RFW\rsfwdrv.sys> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys> [RsProtect / RsProtect][Running/System Start] [Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Running/Manual Start] [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start] [SbieDrv / SbieDrv][Running/Manual Start] <\??\E:\360\360se3\Shield\SbieDrv.sys> [Secdrv / Secdrv][Stopped/Manual Start] [StarForce Protection Environment Driver (version 1.x) / sfdrv01][Running/Boot Start] <\SystemRoot\System32\drivers\sfdrv01.sys> [StarForce Protection Helper Driver (version 2.x) / sfhlp02][Running/Boot Start] <\SystemRoot\System32\drivers\sfhlp02.sys> [StarForce Protection VFS Driver (version 2.x) / sfvfs02][Running/Boot Start] <\SystemRoot\System32\drivers\sfvfs02.sys> [SATALink driver accelerator / SiFilter][Running/Boot Start] <\SystemRoot\system32\drivers\SiWinAcc.sys> [sptd / sptd][Running/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [TCP/IP Protocol Driver / Tcpip][Running/System Start] [TesDrvPt / TesDrvPt][Stopped/Manual Start] <\??\C:\WINDOWS\system32\TesDrvPt.sys> [TesSafe / TesSafe][Stopped/Manual Start] <\??\C:\WINDOWS\system32\TesSafe.sys> ================================== 浏览器加载项 [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} [IE2EMBHO Class] {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} [Adobe PDF Link Helper] {18DF081C-E8AD-4283-A596-FA578C2EBDC3} [QQ工具栏] {29CF293A-1E7D-4069-9E11-E39698D0AF95} [RealPlayer Download and Record Plugin for Internet Explorer] {3049C3E9-B461-4BC5-8870-4C09146192CA} [QvodExtend] {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} [ed2k Dectector] {56746166-BC44-45f4-ADCE-52EAC919BB79} [HaoKanBar BrowserHelper] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [Download_Bho Class] {A986E409-30CC-4185-89BB-AB212C104524} [FlashGetBHO] {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [宏杰加密辅助程序] {BE8EAD98-1F8A-8DD8-9A8D-5AE1B826E88F} [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [PPLive] {95B3F550-91C4-4627-BCC4-521288C52977} [BitComet] {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} <, > [] {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} [瑞星卡卡工具条(&R)] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} [QQ工具栏] {29CF293A-1E7D-4069-9E11-E39698D0AF95} [DAEMON Tools Toolbar] {32099AAC-C132-4136-9E9A-4E364A424E17} [金山快译(&K)] {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [Outlook Today's Data-binding control] {0468C085-CA5B-11D0-AF08-00609797F0E0} [IE2EMBHO Class] {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} [IFlashGetNetscapeEx Class] {116BA71C-8187-4F15-9A1F-C9D6289155D1} [Player Class] {11F2A418-94B2-4e16-9B0C-B00C0435F903} [Adobe PDF Link Helper] {18DF081C-E8AD-4283-A596-FA578C2EBDC3} [InstallHelper Class] {1DABF8D5-8430-4985-9B7F-A30E53D709B3} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} [JetCarNetscape Class] {2974c985-8151-4de5-b23c-b875f0a8522f} [QQ工具栏] {29CF293A-1E7D-4069-9E11-E39698D0AF95} [RealPlayer Download and Record Plugin for Internet Explorer] {3049C3E9-B461-4BC5-8870-4C09146192CA} [Zyzzyva] {30FA9641-9CFE-4D71-A3AA-DF8B6FA02FCC} <, > [DAEMON Tools Toolbar] {32099AAC-C132-4136-9E9A-4E364A424E17} [BitComet Helper] {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [SkyDrive.Plugin.1] {4990272A-0655-4D80-90A7-C18D0FF7A4A9} [QvodExtend] {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} [ed2k Dectector] {56746166-BC44-45F4-ADCE-52EAC919BB79} [QQLiveFile Class] {6B232760-90F1-41c3-9902-C8552C1D8A72} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [金山快译(&K)] {6C3797D2-3FEF-4CD4-B654-D3AE55B4128C} [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, (Signed) N/A> [Windows Script Host Shell Object] {72C24DD5-D70A-438B-8A42-98424B88AFB8} [HaoKanBar BrowserHelper] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [360SafeLive] {87515F61-A66C-4319-A0E0-D416CB8059E3} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [XML DOM Document 6.0] {88D96A05-F192-11D4-A65F-0040963251E5} [XML HTTP 6.0] {88D96A0A-F192-11D4-A65F-0040963251E5} [QQDownload Class] {8AC3BC28-E145-4385-A694-8AAC128ACB16} [] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, > [] {95B3F550-91C4-4627-BCC4-521288C52977} <, > [OFrameObject Class] {9701758C-4373-482E-B13C-776C048EC890} [FGDownMgr] {97F14F61-B206-4F9E-B6A4-318E80B13440} [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [VersionDetector Class] {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} [APlayer Control] {A9322148-C691-4B9D-91FC-B9C461DBE9DD} [Download_Bho Class] {A986E409-30CC-4185-89BB-AB212C104524} [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [FlashGetBHO] {B070D3E3-FEC0-47D9-8E8A-99D4EEB3D3B0} [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [宏杰加密辅助程序] {BE8EAD98-1F8A-8DD8-9A8D-5AE1B826E88F} [QQPlayerCtrl Class] {CD108273-D434-43E6-AA90-1469F97EB398} [Microsoft Url Search Hook] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [] {D18A0B52-D63C-4ED0-AFC6-C1E3DC1AF43A} <, > [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [QQLive Class] {D9EBCF5D-3F8F-4b6a-89BA-70577BE73C62} [瑞星卡卡工具条(&R)] {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} [PlayerCtrl Class] {E05BC2A3-9A46-4A32-80C9-023A473F5B23} [] {E2E2DD38-D088-4134-82B7-F2BA38496583} <, > [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} [] {FB5F1910-F110-11D2-BB9E-00C04F795683} <, > [&U使用米人下载并收藏] [&U使用纳米机器人下载并收藏] [&V使用Vagaa哇嘎下载] [&使用BitComet下载] [&使用BitComet下载全部链接] [&使用BitComet下载本页视频] [&使用QQ旋风下载] [&使用QQ旋风下载全部链接] [iSee 保存所有图片] [iSee保存Flash] [iSee保存所有图片] [iSee读取Exif] [使用光影编辑和美化] [使用快车3下载] [使用快车3下载全部链接] [使用电驴下载] [使用迅雷下载] [使用迅雷下载全部链接] [导出到 Microsoft Excel(&X)] [添加为广告拦截图片] [添加到QQ表情] [添加到火星符号] [添加相册用户到iSee收藏] [用比特精灵下载(&B)] ================================== 正在运行的进程 [PID: 852 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 924 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 948 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\PsNotify.dll] [N/A, ] [C:\WINDOWS\system32\ChNormal.dll] [N/A, ] [C:\Program Files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll] [Adobe Systems Incorporated, 4.0.0.0client1] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [PID: 992 / SYSTEM][C:\WINDOWS\system32\services.exe] [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] [PID: 1004 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1152 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe] [, ] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1172 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1252 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1312 / SYSTEM][C:\Program Files\Rising\Rav\RavMonD.exe] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17] [C:\Program Files\Rising\Rav\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9] [C:\Program Files\Rising\Rav\MonBase.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\Rslog.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.41] [C:\Program Files\Rising\Rav\mondrv.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\defmon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 41] [C:\Program Files\Rising\Rav\moncom08.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\MonRule.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10] [C:\Program Files\Rising\Rav\FileMon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29] [C:\Program Files\Rising\Rav\MailMon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22] [C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12] [C:\Program Files\Rising\Rav\rsindent.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\taskplug.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 8] [C:\Program Files\Rising\Rav\scansrvp.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.7] [C:\Program Files\Rising\Rav\cnt08.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Hooksys.dll] [Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 3] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\HookCont.dll] [Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 1] [C:\Program Files\Rising\Rav\BACore.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\bawhite.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\RSStore.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.17] [C:\Program Files\Rising\Rav\ScanAdd.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [C:\Program Files\Rising\Rav\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\rsstub.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\ScanSrv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.3] [C:\Program Files\Rising\Rav\scanpe.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10] [C:\Program Files\Rising\Rav\pearc.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\ur000.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\urutils.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\revm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\ffr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\nvfile.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\scanexec.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\unexe.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\scanex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 43] [C:\Program Files\Rising\Rav\scantj.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\methodex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\heurex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12] [C:\Program Files\Rising\Rav\pecompd.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\ur001.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\extmail.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\ur025.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\ur023.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\scansct.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [PID: 1344 / SYSTEM][C:\Program Files\Rising\RFW\RavMonD.exe] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\RFW\combase.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17] [C:\Program Files\Rising\RFW\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\RFW\MonBase.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\RFW\MonComm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9] [C:\Program Files\Rising\RFW\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.14] [C:\Program Files\Rising\RFW\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\RFW\rfwsrv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.2] [C:\Program Files\Rising\RFW\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\RFW\mPorts.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\RFW\rfwdrvc.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\RFW\Rfwdrv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.5] [C:\Program Files\Rising\RFW\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\RFW\RfwArp.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.5] [C:\Program Files\Rising\RFW\urlrule.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\Program Files\Rising\RFW\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\RFW\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\RFW\refs.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\RFW\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\RFW\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\RFW\rfwproxy.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 40] [C:\Program Files\Rising\RFW\rsindent.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11] [C:\Program Files\Rising\RFW\taskplug.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 8] [C:\Program Files\Rising\RFW\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\RFW\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\RFW\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\RFW\NComm2.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\RFW\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\RFW\rsstub.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\Rising\RFW\urllib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [PID: 1368 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1536 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1560 / SYSTEM][E:\360\360Safe\deepscan\zhudongfangyu.exe] [360安全中心, 1, 0, 0, 1010] [E:\360\360Safe\deepscan\CloudCom2.dll] [360安全中心, 3, 0, 0, 1009] [E:\360\360Safe\SoftMgr\360SoftMgrS.dll] [奇虎网, 2, 1, 5, 1010] [E:\360\360Safe\deepscan\heavygate.dll] [360安全中心, 3, 6, 11, 0] [E:\360\360Safe\deepscan\qutmload.dll] [360.CN, 1, 0, 0, 1002] [PID: 1716 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1840 / SYSTEM][E:\360\360se3\Shield\SbieSvc.exe] [tzuk, 3.28.04] [E:\360\360se3\Shield\SbieDll.dll] [tzuk, 3.28.04] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [PID: 1928 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [PID: 640 / Administrator][E:\SogouInput\4.2.3.2812\sogoupinyintray.exe] [Sogou.com Inc., 4.2.3.2812] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 748 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\System32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [PID: 1604 / Administrator][C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe] [ATI Technologies, Inc., 6.14.10.5120] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll] [ATI Technologies, Inc., 6.14.10.5120] [C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.CHS] [ATI Technologies, Inc., 6.14.10.5120] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll] [ATI Technologies, Inc., 6.14.10.5120] [E:\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1022] [PID: 1644 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 2152 / Administrator][C:\Program Files\Rising\Rav\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 22.0.0.10] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [C:\Program Files\Rising\Rav\comserv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.15] [C:\Program Files\Rising\Rav\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\ScanEvnt.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.3] [C:\Program Files\Rising\Rav\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\Program Files\Rising\Rav\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.6] [C:\Program Files\Rising\Rav\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21] [C:\Program Files\Rising\Rav\mruleui.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7] [C:\Program Files\Rising\Rav\MonTray.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.69] [C:\Program Files\Rising\Rav\RavITray.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\scanleak.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\ravppops.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [PID: 2216 / Administrator][C:\Program Files\Rising\RFW\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 22.0.0.10] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [C:\Program Files\Rising\RFW\comserv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.15] [C:\Program Files\Rising\RFW\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\RFW\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\RFW\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\RFW\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\RFW\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\RFW\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\RFW\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\RFW\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\Program Files\Rising\RFW\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.6] [C:\Program Files\Rising\RFW\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55] [C:\Program Files\Rising\RFW\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21] [C:\Program Files\Rising\RFW\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\RFW\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\RFW\rfwtray.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 38] [C:\Program Files\Rising\RFW\ravppops.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21] [C:\Program Files\Rising\RFW\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\RFW\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\RFW\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\RFW\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.14] [PID: 2252 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [PID: 2260 / Administrator][E:\52hxw\52hxw.exe] [www.52hxw.com, 2.7.0.1001] [E:\52hxw\Hxw.dll] [www.52hxw.com, 2, 6, 0, 1001] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [C:\WINDOWS\msgctl.dll] [, 1, 0, 0, 1001] [PID: 2356 / Administrator][E:\SaveCan\SaveCan.exe] [省省看 节能环保软件, 1, 0, 0, 1] [E:\SaveCan\Core.dll] [省省看 节能环保软件, 1, 0, 0, 1] [E:\SaveCan\Timer.dll] [省省看 节能环保软件, 1, 0, 0, 1] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [E:\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1022] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [PID: 3324 / Administrator][E:\Thunder Network\Thunder\Program\Thunder.exe] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\Thunder Network\Thunder\Program\XLBugHandler.dll] [深圳市迅雷网络技术有限公司, 2, 0, 0, 7] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [E:\Thunder Network\Thunder\Program\libexpat.dll] [N/A, ] [E:\Thunder Network\Thunder\Program\liblua.dll] [N/A, ] [E:\Thunder Network\Thunder\Program\XLGraphic.dll] [N/A, ] [E:\Thunder Network\Thunder\Program\libpng13.dll] [, 1.2.38] [E:\Thunder Network\Thunder\Program\zlib1.dll] [, 1.2.3] [E:\Thunder Network\Thunder\Program\UACTool.dll] [N/A, ] [E:\Thunder Network\Thunder\Program\XLLuaRuntime.dll] [N/A, ] [C:\WINDOWS\system32\MFC71U.DLL] [Microsoft Corporation, 7.10.3077.0] [E:\Thunder Network\Thunder\Program\sqlite3.dll] [N/A, ] [E:\Thunder Network\Thunder\Program\mini_unzip_dll.dll] [N/A, ] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [E:\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1022] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [E:\Thunder Network\Thunder\Program\SkinEngine2.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\Thunder Network\Thunder\Program\minizip.dll] [N/A, ] [E:\Thunder Network\Thunder\Program\XLGUIPlatform.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\Thunder Network\Thunder\Program\ThunderStorage.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\Thunder Network\Thunder\Program\Thunders.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\Thunder Network\Thunder\Program\download_interface.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 39] [E:\Thunder Network\Thunder\Program\DllNewTask.DLL] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\Thunder Network\Thunder\Program\dl_peer_id.dll] [深圳市迅雷网络技术有限公司, 3, 1, 2, 6] [E:\Thunder Network\Thunder\Program\xl_data.dll] [深圳市迅雷网络技术有限公司, 1.7.2.13] [E:\Thunder Network\Thunder\Program\xl_client.dll] [深圳市迅雷网络技术有限公司, 1, 8, 2, 19] [E:\Thunder Network\Thunder\Program\asyn_frame.dll] [深圳市迅雷网络技术有限公司, 1, 4, 2, 39] [E:\Thunder Network\Thunder\Program\mp.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 7] [E:\Thunder Network\Thunder\Program\XLGUIDevEnv.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\Thunder Network\Thunder\Program\GougouSearch.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\Thunder Network\Thunder\Program\GBLCategory.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\BaseCommunity\BaseCommunity.dll] [深圳市迅雷网络技术有限公司, 1.0.2.20] [E:\Thunder Network\Thunder\Program\libjpeg6b.dll] [N/A, ] [E:\Thunder Network\Thunder\Program\giflib4.dll] [N/A, ] [E:\Thunder Network\Thunder\Program\XLI18N.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 1] [E:\Thunder Network\Thunder\Program\http.dll] [深圳市迅雷网络技术有限公司, 1.0.2.6] [E:\Thunder Network\Thunder\Program\XLCP.dll] [深圳市迅雷网络技术有限公司, 1.0.2.14] [E:\Thunder Network\Thunder\Program\XLUser.dll] [深圳市迅雷网络技术有限公司, 1.0.2.30] [E:\Thunder Network\Thunder\Program\BaseIM.dll] [深圳市迅雷网络技术有限公司, 1.0.2.7] [E:\Thunder Network\Thunder\Program\UpdateCtrl.dll] [深圳市迅雷网络技术有限公司, 2, 4, 2, 210] [E:\Thunder Network\Thunder\Program\FloatPanel.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\Despise\Despise.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 17] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\Tips\TipsClient.dll] [深圳市迅雷网络技术有限公司, 3, 0, 3, 150] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\Tips\XLSkin.dll] [深圳市迅雷网络技术有限公司, 1, 0, 1, 4] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\ResWorker\DsXlCom.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 42] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\ResWorker\DataProcessor_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 20] [E:\Thunder Network\Thunder\Program\XLNetU.Dll] [深圳市迅雷网络技术有限公司, 1, 5, 2, 25] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\ResWorker\MediaWorker.dll] [深圳市迅雷网络技术有限公司, 1, 2, 0, 23] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\InMedia\iEmbed.dll] [深圳市迅雷网络技术有限公司, 3, 4, 12, 135] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\InMedia\XLIPC.DLL] [深圳市迅雷网络技术有限公司, 1, 0, 0, 4] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\XLSafeHost\ThunderRAV\ThunderRAV.dll] [N/A, ] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\XLSafeHost\ThunderRAV\bin\rsscan.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\XLSafeHost\ThunderRAV\bin\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\XLSafeHost\ThunderRAV\bin\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\XLSafeHost\ThunderRAV\bin\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\XLSafeHost\ThunderRAV\bin\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\XLMediaCutter\XLMediaCutter.dll] [深圳市迅雷网络技术有限公司, 4, 0, 0, 41] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\Streamer\Streamer.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 23] [C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx] [Adobe Systems, Inc., 10,0,32,18] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\ThunderSoft\DrSoftUpdate.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 5] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\ThunderSoft\DrSimpleSoftIdentifier.dll] [深圳市迅雷网络技术有限公司, 1, 0, 1, 3] [E:\Thunder Network\Thunder\Program\XLWebDownload.dll] [深圳市迅雷网络技术有限公司, 5,9,8,1090] [E:\52hxw\Hxw.dll] [www.52hxw.com, 2, 6, 0, 1001] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_3199D777-5964-410A-A004-AE79C47178D4_\Components\XLMiniGame\XLMiniGamePlugin.dll] [深圳市迅雷网络技术有限公司, 1.0.0.12] [PID: 3716 / Administrator][C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\ThunderService.exe] [深圳市迅雷网络技术有限公司, 1, 0, 2, 43] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [E:\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1022] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\XLBugHandler.dll] [深圳市迅雷网络技术有限公司, 2, 0, 0, 7] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\UpdateCtrl.dll] [深圳市迅雷网络技术有限公司, 2, 4, 2, 210] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\download_engine.dll] [深圳市迅雷网络技术有限公司, 3, 4, 2, 359] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\mp.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 7] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\XLCrypto.dll] [N/A, ] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\UACTool.dll] [N/A, ] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\asyn_frame.dll] [深圳市迅雷网络技术有限公司, 1, 4, 2, 39] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\backend_agent.dll] [深圳市迅雷网络技术有限公司, 1, 1, 2, 37] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\zlib1.dll] [, 1.2.3] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\ptl.dll] [深圳市迅雷网络技术有限公司, 3, 2, 3, 78] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\dl_peer_id.dll] [深圳市迅雷网络技术有限公司, 3, 1, 2, 6] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.9\xl_stat.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 9] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\p2p_upload.dll] [深圳市迅雷网络技术有限公司, 1,1,2,16] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\dphubt.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 13] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\p2p.dll] [深圳市迅雷网络技术有限公司, 1, 1, 2, 72] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\fs.dll] [深圳市迅雷网络技术有限公司, 1, 1, 2, 21] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.9\xldc.dll] [深圳市迅雷网络技术有限公司, 4, 0, 2, 41] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\stream.dll] [深圳市迅雷网络技术有限公司, 2, 1, 2, 1068] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\p2sp.dll] [深圳市迅雷网络技术有限公司, 1, 1, 2, 84] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\down_dispatcher.dll] [深圳市迅雷网络技术有限公司, 1,0,2,53] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\p2p_local_res.dll] [深圳市迅雷网络技术有限公司, 1,1,2,22] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\al.dll] [深圳市迅雷网络技术有限公司, 1,1,2,47] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.9\p2p_network_com.dll] [深圳市迅雷网络技术有限公司, 3, 0, 2, 47] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\media_data.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 10] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.9\sl.dll] [深圳市迅雷网络技术有限公司, 1.0.2.2] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\module_downloader.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 16] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\mini_unzip_dll.dll] [N/A, ] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\task_report.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 6] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.9\xldcsubtask.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 30] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.9\xldcagent.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 7] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.9\bd.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 22] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\bt_shell.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 13] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\bt_kernel.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 21] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\emule_shell.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 19] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.43\emule_kernel.dll] [深圳市迅雷网络技术有限公司, 1, 2, 2, 70] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.9\emule_id.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 17] [PID: 3164 / Administrator][E:\Leawo\flvsdownload\FLVDownloader.exe] [Leawo Software Co., Ltd., 2.1.8.2] [E:\Leawo\flvsdownload\BugRpt.dll] [Moyea, 1, 0, 0, 1] [E:\Leawo\flvsdownload\adlib.dll] [N/A, ] [E:\Leawo\flvsdownload\videotool.dll] [, 1, 3, 0, 4] [E:\Leawo\flvsdownload\ffbri.dll] [N/A, ] [E:\Leawo\flvsdownload\FLVLib.dll] [Moyea Software Co., Ltd., 1, 1, 1, 16] [E:\Leawo\flvsdownload\AVILib.dll] [N/A, ] [E:\Leawo\flvsdownload\ComContrl.dll] [N/A, ] [E:\Leawo\flvsdownload\SockHook.dll] [N/A, ] [E:\Leawo\flvsdownload\SetHook.dll] [N/A, ] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [E:\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1022] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx] [Adobe Systems, Inc., 10,0,32,18] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [E:\52hxw\Hxw.dll] [www.52hxw.com, 2, 6, 0, 1001] [PID: 3260 / Administrator][C:\WINDOWS\explorer.exe] [(Verified) Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [E:\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1022] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [C:\WINDOWS\system32\msi.dll] [Microsoft Corporation, 4.5.6001.22159] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 9.1.0.2009022700] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS] [, ] [C:\Program Files\Common Files\Adobe\Adobe Drive CS4\ADFSMenu.dll] [Adobe Systems Incorporated, 4.0.0.0client1] [C:\Program Files\Common Files\Adobe\Adobe Drive CS4\BIB.dll] [Adobe Systems Incorporated, 1.2.01.1551] [C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Client\4.0.0\VersionCue.DLL] [Adobe Systems, Incorporated, 4.0.0.0client1] [C:\Program Files\WinRAR\rarext.dll] [, ] [E:\hjjm\hjtools_menu.dll] [宏杰软件开发有限公司, 1.0.0.8] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca69e6d469321943942443a0743dc05d\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\WINDOWS\system32\hjjm.dll] [宏杰软件开发有限公司, 1, 0, 9, 8] [C:\Program Files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll] [Adobe Systems Incorporated, 4.0.0.0client1] [PID: 1520 / Administrator][E:\360\360se3\360SE.exe] [360安全中心, 3, 0, 8, 1] [C:\WINDOWS\system32\kmon.dll] [Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 39] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [E:\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1022] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [E:\360\360se3\Extensions\SafeCentral\urlproc.dll] [360.CN, 1, 0, 0, 1006] [E:\360\360se3\Extensions\SafeCentral\SafeCentral.dll] [, 1, 0, 0, 8] [E:\360\360se3\Extensions\ExtProxy\ExtProxy.dll] [360, 1, 0, 0, 9] [E:\360\360se3\Extensions\pluginbar\pluginbar.dll] [360, 1, 0, 0, 5] [E:\360\360se3\Extensions\MiniSearchBar\MiniSearchBar.dll] [, 1, 0, 0, 3] [E:\360\360se3\Extensions\UICenter\UICenter.dll] [, 1, 0, 0, 5] [E:\360\360se3\Extensions\onlinefav\onlinefav.dll] [, 3, 0, 0, 3] [E:\360\360se3\Extensions\ExtAdfilter\ExtAdfilter.dll] [, 1, 0, 1, 0] [E:\360\360se3\Extensions\ExtSuggest\ExtSuggest.dll] [360SE, 1, 0, 1, 1] [E:\360\360se3\Extensions\ExtDownload\ExtDownload.dll] [360, 1, 0, 2, 5] [E:\360\360se3\Extensions\ExtBlankPage\ExtBlankPage.dll] [360, 1, 0, 0, 3] [E:\360\360se3\Extensions\ExtAddons\ExtAddons.dll] [360安全中心, 1, 0, 2, 1] [E:\360\360se3\Extensions\ExtPages\ExtPages.dll] [360安全中心, 1, 0, 2, 5] [E:\360\360se3\Extensions\Favorites\Favorites.dll] [360安全中心, 1, 0, 0, 7] [E:\52hxw\Hxw.dll] [www.52hxw.com, 2, 6, 0, 1001] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\msdmo.dll] [, ] [C:\Program Files\K-Lite Codec Pack\Filters\vsfilter.dll] [Gabest, 2, 39, 5, 2] [C:\Program Files\K-Lite Codec Pack\Filters\FLVSplitter.ax] [Gabest, 1, 0, 0, 5] [C:\Program Files\Common Files\QvodPlayer\Codecs\PmpSplt.ax] [cooleyes, 1, 0, 1, 1] [C:\Program Files\Common Files\QvodPlayer\Codecs\MpegSplitter.ax] [Gabest, 1, 1, 0, 0] [C:\Program Files\Common Files\QvodPlayer\Codecs\MpaSplitter.ax] [Gabest, 1, 0, 0, 1] [C:\Program Files\Common Files\QvodPlayer\Codecs\RadGtSplitter.ax] [Gabest, 1, 0, 0, 0] [C:\Program Files\K-Lite Codec Pack\Filters\MP4Splitter.ax] [Gabest, 1, 0, 0, 5] [C:\WINDOWS\system32\rmsp.ax] [Gabest, 1, 0, 1, 1] [C:\Program Files\Common Files\Thunder Network\KanKan\RealMediaSplitter.1.0.2.5.(821).ax] [Gabest, 1, 0, 2, 5] [C:\Program Files\Common Files\QvodPlayer\Codecs\DSMSplitter.ax] [Gabest, 1, 1, 0, 0] [C:\Program Files\Common Files\QvodPlayer\Codecs\OggSplitter.ax] [Gabest, 1, 1, 0, 0] [C:\Program Files\Common Files\QvodPlayer\Codecs\ac3filter.ax] [, 1.01a] [PID: 3192 / Administrator][E:\System Repair Engineer\SREngLdr.EXE] [Smallfrogs Studio, 2.8.1.1279] [PID: 3684 / Administrator][E:\System Repair Engineer\SRE2f3759d.EXE] [Smallfrogs Studio, 2.8.1.1279] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [E:\360\360Safe\safemon\safemon.dll] [360.CN, 5, 0, 0, 1022] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.2.3.2812] [E:\SogouInput\4.2.3.2812\Resource.dll] [Sogou.com Inc., 4.2.3.2812] [E:\System Repair Engineer\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT Error. [C:\WINDOWS\notepad.exe %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 localhost 127.0.0.1 activate.adobe.com ================================== 进程特权扫描 特殊特权被允许: SeLoadDriverPrivilege [PID = 1840, E:\360\360SE3\SHIELD\SBIESVC.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 1604, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 2356, E:\SAVECAN\SAVECAN.EXE] 特殊特权被允许: SeDebugPrivilege [PID = 3164, E:\LEAWO\FLVSDOWNLOAD\FLVDOWNLOADER.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 3164, E:\LEAWO\FLVSDOWNLOAD\FLVDOWNLOADER.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 3192, E:\SYSTEM REPAIR ENGINEER\SRENGLDR.EXE] ================================== 计划任务 [已启用] SogouImeMgr.job E:\SOGOUI~1\423~1.281\PinyinRepair.exe ================================== Windows 安全更新检查 N/A ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]