[CODE] 2009-12-06,18:44:11 System Repair Engineer 2.8.1.1279 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能 以下内容被选中： 所有的启动项目（包括注册表、启动文件夹、服务等） 浏览器加载项 正在运行的进程（包括进程模块信息） 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 进程特权扫描 计划任务 Windows 安全更新检查 API HOOK 隐藏进程 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Component Publisher] <"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background> [(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <360Safebox><"D:\Program Files\360\360safebox\SafeBoxTray.exe" /r> [(Verified)Qizhi Software (beijing) Co. Ltd] <360Safetray><"D:\Program Files\360\360Safe\safemon\360tray.exe" /start> [(Verified)Qizhi Software (beijing) Co. Ltd] [NVIDIA Corporation] <"D:\Program Files\Rising\Ris\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] <"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{AEB6717E-7E19-11d0-97EE-00C04FD91972}> [(Verified)Microsoft Windows Component Publisher] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher] <%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy] <%SystemRoot%\System32\dimsntfy.dll> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] <浏览器自定义组件> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] <%SystemRoot%\system32\ie4uinit.exe> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Control Panel\Desktop] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; ALCMTR.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <; ALCWZRD.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <; RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation] <; nwiz.exe /install> [N/A] <; RTHDCPL.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <; SkyTel.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher] <; SOUNDMAN.EXE> [N/A] ================================== 启动文件夹 N/A ================================== 服务 [Human Interface Device Access / HidServ][Stopped/Disabled] %SystemRoot%\System32\hidserv.dll> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] [Ris Service / RsRisMon][Running/Auto Start] <"D:\Program Files\Rising\Ris\RavMonD.exe"> [主动防御 / ZhuDongFangYu][Running/Auto Start] <"D:\Program Files\360\360Safe\deepscan\zhudongfangyu.exe"><360安全中心> ================================== 驱动程序 [360SelfProtection / 360SelfProtection][Running/System Start] <360安全中心> [AMD Low Level Device Driver / AmdLLD][Running/Manual Start] [AMD HwPState Processor Driver / AmdPPM][Running/System Start] [BFSDRV / BFSDRV][Running/System Start] <\??\C:\WINDOWS\system32\drivers\bfsdrv.sys><360安全中心> [BREGDRV / BREGDRV][Running/System Start] <\??\C:\WINDOWS\system32\drivers\bregdrv.sys><360安全中心> [EagleNT / EagleNT][Stopped/Manual Start] <\??\C:\WINDOWS\system32\drivers\EagleNT.sys> [EfiSystemMon / EfiMon][Running/System Start] <奇虎网> [VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start] [Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start] [hookcont / hookcont][Running/System Start] [HookPort / HookPort][Running/Boot Start] <\SystemRoot\System32\Drivers\Hookport.sys><360安全中心> [hooksys / hooksys][Running/System Start] [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] [ATK0110 ACPI UTILITY / MTsensor][Running/Manual Start] <> [Netgroup Packet Filter / NPF][Stopped/Manual Start] [nv / nv][Running/Manual Start] [NVIDIA nForce 10/100 Mbps Ethernet / NVENETFD][Running/Manual Start] [nvgts / nvgts][Running/Boot Start] <\SystemRoot\system32\drivers\nvgts.sys> [NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start] [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [Quantum DeepScanner Servers / qutmdserv][Running/Manual Start] <\??\C:\WINDOWS\system32\drivers\qutmdrv.sys><360安全中心> [qutmipc / qutmipc][Running/System Start] <\??\C:\WINDOWS\system32\drivers\qutmipc.sys><360安全中心> [Rising RfwARP Driver / RFWARP][Running/Auto Start] [Rising RfwBase Driver / RfwBase9][Running/Manual Start] [rfwtdi / rfwtdi][Running/Auto Start] <\??\D:\Program Files\Rising\Ris\rfwtdi.sys> [rsassist / rsassist][Running/Auto Start] [rsfwdrv / rsfwdrv][Running/System Start] <\??\D:\Program Files\Rising\Ris\rsfwdrv.sys> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys> [SafeBoxKrnl / SafeBoxKrnl][Running/System Start] <360安全中心> [Secdrv / Secdrv][Stopped/Manual Start] [SATALink driver accelerator / SiFilter][Running/Boot Start] <\SystemRoot\system32\drivers\SiWinAcc.sys> [TCP/IP Protocol Driver / Tcpip][Running/System Start] [TesSafe / TesSafe][Stopped/Manual Start] <\??\C:\WINDOWS\system32\TesSafe.sys> [VMware Pointing Device / vmmouse][Running/Manual Start] ================================== 浏览器加载项 [HaoKanBar BrowserHelper] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} [&Windows Live Toolbar] {21FA44EF-376D-4D53-9B0F-8A89D3229068} [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [PhotoDrawEx Class] {05F5F404-7C24-4B39-B5CC-340CEDEB9C0D} [] {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, > [] {0A155D3C-68E2-4215-A47A-E800A446447A} <, > [Player Class] {11F2A418-94B2-4e16-9B0C-B00C0435F903} [Fade] {16B280C5-EE70-11D1-9066-00C04FD9189D} [Adobe PDF Link Helper] {18DF081C-E8AD-4283-A596-FA578C2EBDC3} [InstallHelper Class] {1DABF8D5-8430-4985-9B7F-A30E53D709B3} [iTrusPTA Class] {1E0DFFCF-27FF-4574-849B-55007349FEDA} [HallToolkit Class] {1E36C446-29F0-4773-A3FB-59C5501446EB} [] {219C3416-8CB2-491A-A3C7-D9FCDDC9D600} <, > [&Windows Live Toolbar] {21FA44EF-376D-4D53-9B0F-8A89D3229068} [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, (Signed) N/A> [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} [DHTML Edit Control Safe for Scripting for IE5] {2D360201-FFF5-11D1-8D03-00A0C959BC0A} [GDGetTokenInfo Class] {3AA9CF07-DF20-48FF-98BE-DED276E40146} [超级兔子上网精灵] {43869BB3-22FD-4F15-9B46-238106BA2F4E} [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [EditCtrl Class] {488A4255-3236-44B3-8F27-FA1AECAA8844} [QvodExtend] {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} [WUWebControl Class] {6414512B-B978-451D-A0D8-FCFDF33E833C} [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} [QQLiveFile Class] {6B232760-90F1-41c3-9902-C8552C1D8A72} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} [MUWebControl Class] {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [Search Helper] {6EBF7485-159F-4BFF-A14F-B9E3AAC4465B} [Active Desktop Mover] {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, (Signed) N/A> [HaoKanBar BrowserHelper] {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} [AxInputControl Class] {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [XDownloaddManager Class] {802F530B-A8F6-4631-AE49-6BACAAC6373E} [360SafeLive] {87515F61-A66C-4319-A0E0-D416CB8059E3} [Microsoft Web 浏览器] {8856F961-340A-11D0-A96B-00C04FD705A2} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [XML DOM Document 6.0] {88D96A05-F192-11D4-A65F-0040963251E5} [XML HTTP 6.0] {88D96A0A-F192-11D4-A65F-0040963251E5} [TTPlayer ActiveX Control] {89AE5F82-410A-4040-9387-68D1144EFD03} [QQDownload Class] {8AC3BC28-E145-4385-A694-8AAC128ACB16} [AxSubmitControl Class] {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} [SSOForPTLogin Class] {8FC1EE75-72B3-4A23-B987-2B1C4C8A611B} [Windows Live 登录帮助程序] {9030D464-4C02-4ABF-8ECC-5164760863C6} [OFrameObject Class] {9701758C-4373-482E-B13C-776C048EC890} [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [VersionDetector Class] {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} [APlayer Control] {A9322148-C691-4B9D-91FC-B9C461DBE9DD} [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [Microsoft Scriptlet Component] {AE24FDAE-03C6-11D1-8B76-0080C744F389} [InfoSecICBCNetSign Class] {B1FBC1AD-5644-4084-882A-0F8BA85E7506} [SearchAssistantOC] {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A> [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [RDS.DataSpace] {BD96C556-65A3-11D0-983A-00C04FC29E36} [QQPlayerCtrl Class] {CD108273-D434-43E6-AA90-1469F97EB398} [AUDIO__MP3 Moniker Class] {CD3AFA76-B84F-48F0-9393-7EDC34128127} [VIDEO__X_MS_WMV Moniker Class] {CD3AFA94-B84F-48F0-9393-7EDC34128127} [Microsoft Url 搜索挂接] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A> [RealPlayer G2 Control] {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <, > [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [QQLive Class] {D9EBCF5D-3F8F-4b6a-89BA-70577BE73C62} [Microsoft Silverlight] {DFEAF541-F3E1-4C24-ACAC-99C30715084A} [PlayerCtrl Class] {E05BC2A3-9A46-4A32-80C9-023A473F5B23} [Windows Live Toolbar Helper] {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} [] {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} [] {E2E2DD38-D088-4134-82B7-F2BA38496583} <, > [TimwpDll.TimwpCheck] {ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} [QvodCtrl Class] {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <, > [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [XML DOM Document 3.0] {F5078F32-C551-11D3-89B9-0000F81FE221} [Free Threaded XML DOM Document 3.0] {F5078F33-C551-11D3-89B9-0000F81FE221} [XML HTTP 3.0] {F5078F35-C551-11D3-89B9-0000F81FE221} [XSL Template 3.0] {F5078F36-C551-11D3-89B9-0000F81FE221} [XML DOM Document] {F6D90F11-9C73-11D3-B32E-00C04F990BB4} [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} [] {FB5F1910-F110-11D2-BB9E-00C04F795683} <, > [ForceP2PPlayer Object] {FCD61199-E187-4ADD-88E5-9AF238486D11} [使用迅雷下载] [使用迅雷下载全部链接] ================================== 正在运行的进程 [PID: 856 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 916 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [PID: 940 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [PID: 984 / SYSTEM][C:\WINDOWS\system32\services.exe] [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 996 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 1156 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 1216 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1340 / SYSTEM][D:\Program Files\Rising\Ris\RavMonD.exe] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [D:\Program Files\Rising\Ris\combase.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17] [D:\Program Files\Rising\Ris\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [D:\Program Files\Rising\Ris\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9] [D:\Program Files\Rising\Ris\MonBase.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\Rslog.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.41] [D:\Program Files\Rising\Ris\mondrv.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [D:\Program Files\Rising\Ris\defmon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 45] [D:\Program Files\Rising\Ris\moncom08.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [D:\Program Files\Rising\Ris\MonRule.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10] [D:\Program Files\Rising\Ris\FileMon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29] [D:\Program Files\Rising\Ris\MailMon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22] [D:\Program Files\Rising\Ris\HookWeb.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12] [D:\Program Files\Rising\Ris\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.14] [D:\Program Files\Rising\Ris\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [D:\Program Files\Rising\Ris\rfwsrv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.2] [D:\Program Files\Rising\Ris\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [D:\Program Files\Rising\Ris\mPorts.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [D:\Program Files\Rising\Ris\rfwdrvc.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [D:\Program Files\Rising\Ris\Rfwdrv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.5] [D:\Program Files\Rising\Ris\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\RfwArp.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.5] [D:\Program Files\Rising\Ris\urlrule.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [D:\Program Files\Rising\Ris\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [D:\Program Files\Rising\Ris\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [D:\Program Files\Rising\Ris\refs.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\rfwproxy.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55] [D:\Program Files\Rising\Ris\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [D:\Program Files\Rising\Ris\rsindent.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11] [D:\Program Files\Rising\Ris\taskplug.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10] [D:\Program Files\Rising\Ris\scansrvp.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.7] [D:\Program Files\Rising\Ris\cnt08.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\Program Files\Rising\Ris\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [D:\Program Files\Rising\Ris\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [D:\Program Files\Rising\Ris\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [D:\Program Files\Rising\Ris\Hooksys.dll] [Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 3] [D:\Program Files\Rising\Ris\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [D:\Program Files\Rising\Ris\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [D:\Program Files\Rising\Ris\HookCont.dll] [Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 1] [D:\Program Files\Rising\Ris\BACore.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 31] [D:\Program Files\Rising\Ris\bawhite.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\RSStore.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [D:\Program Files\Rising\Ris\Scanner.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.17] [D:\Program Files\Rising\Ris\ScanAdd.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [D:\Program Files\Rising\Ris\NComm2.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [D:\Program Files\Rising\Ris\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [D:\Program Files\Rising\Ris\rsstub.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [D:\Program Files\Rising\Ris\ScanSrv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.3] [D:\Program Files\Rising\Ris\scanpe.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10] [D:\Program Files\Rising\Ris\pearc.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [D:\Program Files\Rising\Ris\ur000.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [D:\Program Files\Rising\Ris\urutils.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [D:\Program Files\Rising\Ris\revm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [D:\Program Files\Rising\Ris\ffr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [D:\Program Files\Rising\Ris\nvfile.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [D:\Program Files\Rising\Ris\scanexec.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [D:\Program Files\Rising\Ris\unexe.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [D:\Program Files\Rising\Ris\scanex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 50] [D:\Program Files\Rising\Ris\extmail.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [D:\Program Files\Rising\Ris\scantj.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [D:\Program Files\Rising\Ris\methodex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\heurex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 13] [D:\Program Files\Rising\Ris\pecompd.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [D:\Program Files\Rising\Ris\scansct.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\urllib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [D:\Program Files\Rising\Ris\ScanRavT.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [D:\Program Files\Rising\Ris\ScanBT.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.18] [D:\Program Files\Rising\Ris\ScanStub.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [PID: 1356 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\msi.dll] [Microsoft Corporation, 4.5.6001.22159] [PID: 1508 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1548 / SYSTEM][D:\Program Files\360\360Safe\deepscan\zhudongfangyu.exe] [360安全中心, 1, 0, 1, 1011] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [D:\Program Files\360\360Safe\deepscan\CloudCom2.dll] [360安全中心, 3, 0, 0, 1010] [D:\Program Files\360\360Safe\SoftMgr\360SoftMgrS.dll] [奇虎网, 2, 1, 5, 1010] [D:\Program Files\360\360Safe\deepscan\heavygate.dll] [360安全中心, 3, 6, 11, 0] [D:\Program Files\360\360Safe\deepscan\qutmload.dll] [360.CN, 1, 0, 0, 1002] [PID: 1716 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 184 / Administrator][C:\WINDOWS\Explorer.EXE] [(Verified) Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 9.1.0.2009022700] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS] [, ] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [C:\WINDOWS\system32\msi.dll] [Microsoft Corporation, 4.5.6001.22159] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\WINDOWS\system32\kakaext.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [PID: 388 / Administrator][D:\Program Files\Rising\Ris\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 22.0.0.10] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [D:\Program Files\Rising\Ris\comserv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.15] [D:\Program Files\Rising\Ris\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [D:\Program Files\Rising\Ris\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [D:\Program Files\Rising\Ris\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [D:\Program Files\Rising\Ris\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [D:\Program Files\Rising\Ris\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [D:\Program Files\Rising\Ris\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [D:\Program Files\Rising\Ris\ScanEvnt.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.3] [D:\Program Files\Rising\Ris\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55] [D:\Program Files\Rising\Ris\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [D:\Program Files\Rising\Ris\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [D:\Program Files\Rising\Ris\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.7] [D:\Program Files\Rising\Ris\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [D:\Program Files\Rising\Ris\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21] [D:\Program Files\Rising\Ris\mruleui.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7] [D:\Program Files\Rising\Ris\MonTray.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.72] [D:\Program Files\Rising\Ris\RavITray.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [D:\Program Files\Rising\Ris\rfwtray.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 38] [D:\Program Files\Rising\Ris\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [D:\Program Files\Rising\Ris\scanleak.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [D:\Program Files\Rising\Ris\ravppops.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21] [D:\Program Files\Rising\Ris\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [D:\Program Files\Rising\Ris\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [D:\Program Files\Rising\Ris\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [D:\Program Files\Rising\Ris\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [D:\Program Files\Rising\Ris\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.14] [PID: 396 / Administrator][C:\Program Files\Rising\AntiSpyware\rstray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.17] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\Program Files\Rising\AntiSpyware\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [C:\Program Files\Rising\AntiSpyware\RsXML.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2] [C:\Program Files\Rising\AntiSpyware\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\AntiSpyware\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\AntiSpyware\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.31] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\AntiSpyware\rscommon.dll] [Beijing Rising Information Technology Co., Ltd., 20.0.1.1] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\pngdll.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\runiep.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.44] [C:\Program Files\Rising\AntiSpyware\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.11] [C:\Program Files\Rising\AntiSpyware\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\AntiSpyware\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [PID: 432 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [PID: 1284 / Administrator][C:\Program Files\CloudEx Onlinebackup\YoubakMSN\YoubakMSN.exe] [21vianet, 1.0.0.1] [C:\Program Files\CloudEx Onlinebackup\YoubakMSN\zlib1.dll] [, 1.2.3] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [PID: 1820 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.11.6921] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.6921] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [PID: 2648 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 2832 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [PID: 1840 / Administrator][C:\Program Files\racer-ccn-racerpc-ha\racer.exe] [Putian Runway, 3,3,130,306] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [C:\Program Files\racer-ccn-racerpc-ha\rwxre.dll] [Putian Runway, 3,3,130,306] [C:\Program Files\racer-ccn-racerpc-ha\nspr4.dll] [Netscape Communications Corporation, 4.6.1] [C:\Program Files\racer-ccn-racerpc-ha\xpcom_core.dll] [Mozilla Foundation, Personal] [C:\Program Files\racer-ccn-racerpc-ha\plc4.dll] [Netscape Communications Corporation, 4.6.1] [C:\Program Files\racer-ccn-racerpc-ha\plds4.dll] [Netscape Communications Corporation, 4.6.1] [C:\Program Files\racer-ccn-racerpc-ha\nss3.dll] [Netscape Communications Corporation, 3.10.2] [C:\Program Files\racer-ccn-racerpc-ha\softokn3.dll] [Netscape Communications Corporation, 3.10.2] [C:\Program Files\racer-ccn-racerpc-ha\js3250.dll] [Netscape Communications Corporation, 4.0] [C:\Program Files\racer-ccn-racerpc-ha\gkgfx.dll] [Mozilla Foundation, Personal] [C:\Program Files\racer-ccn-racerpc-ha\xpcom_compat.dll] [Mozilla Foundation, Personal] [C:\Program Files\racer-ccn-racerpc-ha\smime3.dll] [Netscape Communications Corporation, 3.10.2] [C:\Program Files\racer-ccn-racerpc-ha\ssl3.dll] [Netscape Communications Corporation, 3.10.2] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [C:\Program Files\racer-ccn-racerpc-ha\components\jar50.dll] [Mozilla Foundation, Personal] [C:\Program Files\racer-ccn-racerpc-ha\components\racer_base_comp.dll] [Putian Runway, 3,3,130,306] [C:\Program Files\racer-ccn-racerpc-ha\racer_base.dll] [Putian Runway, 3,3,130,306] [C:\Program Files\racer-ccn-racerpc-ha\kbdhook.dll] [Putian Runway, 3,3,130,306] [C:\Program Files\racer-ccn-racerpc-ha\components\gklayout.dll] [Mozilla Foundation, Personal] [C:\Program Files\racer-ccn-racerpc-ha\nssckbi.dll] [Netscape Communications Corporation, 1.53] [C:\Program Files\racer-ccn-racerpc-ha\components\racer_ad_comp.dll] [Putian Runway, 3,3,130,306] [C:\Program Files\racer-ccn-racerpc-ha\components\racer_access_pppoe.dll] [Putian Runway, 3,3,130,325] [C:\Program Files\racer-ccn-racerpc-ha\pppoe.dll] [北京润汇科技有限公司, 9, 0, 22, 50] [C:\Program Files\racer-ccn-racerpc-ha\components\racer_nss4_comp.dll] [Putian Runway, 3,3,130,306] [C:\Program Files\racer-ccn-racerpc-ha\nss4.dll] [北京润汇科技有限公司, 1, 0, 0, 4] [C:\Program Files\racer-ccn-racerpc-ha\wpcap.dll] [CACE Technologies, 3, 2, 0, 29] [C:\Program Files\racer-ccn-racerpc-ha\packet.dll] [CACE Technologies, 3, 2, 0, 29] [C:\Program Files\racer-ccn-racerpc-ha\WanPacket.dll] [CACE Technologies, 3, 2, 0, 29] [C:\Program Files\racer-ccn-racerpc-ha\plugins\NPSWF32.dll] [, ] [PID: 2216 / Administrator][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\PROGRA~1\RACER-~1\pppoe.dll] [北京润汇科技有限公司, 9, 0, 22, 50] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [PID: 3844 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 732 / Administrator][C:\Program Files\Rising\AntiSpyware\knownsvr.exe] [Beijing Rising Information Technology Co., Ltd., 6.0.0.14] [C:\Program Files\Rising\AntiSpyware\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.11] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [PID: 3148 / Administrator][c:\program files\internet explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [D:\Program Files\Super Rabbit\MagicSet\haokanbar.dll] [北京千兆时代科技有限公司, 3.5.1.1669] [D:\Program Files\Super Rabbit\MagicSet\WebSafe.dll] [北京千兆时代科技有限公司, 1.0.0.3] [D:\Program Files\Super Rabbit\MagicSet\Scan.dll] [N/A, ] [D:\Program Files\Rising\Ris\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 16] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [D:\Program Files\360\360Safe\safemon\urlproc.dll] [360.CN, 1, 0, 0, 1006] [C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx] [Adobe Systems, Inc., 10,0,32,18] [D:\Program Files\ComDlls\xunleiBHO_Now.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.6101.0] [PID: 2708 / Administrator][C:\Program Files\Windows Live\Toolbar\wltuser.exe] [Microsoft Corporation, 14.0.8064.0206] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [PID: 2984 / Administrator][D:\Program Files\Program\Thunder.exe] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\Program\XLI18NEX.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 1] [D:\Program Files\Program\libexpat.dll] [N/A, ] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [D:\Program Files\Program\minizip.dll] [N/A, ] [D:\Program Files\Program\zlib1.dll] [, 1.2.3] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [D:\Program Files\Program\XLBugHandler.dll] [深圳市迅雷网络技术有限公司, 2, 1, 0, 8] [D:\Program Files\Program\liblua.dll] [N/A, ] [D:\Program Files\Program\XLGraphic.dll] [N/A, ] [D:\Program Files\Program\libpng13.dll] [, 1.2.38] [D:\Program Files\Program\UACTool.dll] [N/A, ] [D:\Program Files\Program\XLLuaRuntime.dll] [N/A, ] [C:\WINDOWS\system32\MFC71U.DLL] [Microsoft Corporation, 7.10.6041.0] [C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.6101.0] [D:\Program Files\Program\sqlite3.dll] [N/A, ] [D:\Program Files\Program\mini_unzip_dll.dll] [N/A, ] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [D:\Program Files\Program\SkinEngine2.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\Program\XLGUIPlatform.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\Program\ThunderStorage.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\Program\Thunders.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\Program\download_interface.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 45] [D:\Program Files\Program\DllNewTask.DLL] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\userdata\Components\Streamer\Streamer.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 23] [D:\Program Files\Program\XLNetU.dll] [深圳市迅雷网络技术有限公司, 1, 5, 2, 25] [D:\Program Files\Program\XLWebDownload.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\Program\asyn_frame.dll] [深圳市迅雷网络技术有限公司, 1, 4, 2, 39] [D:\Program Files\Program\mp.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 7] [D:\Program Files\Program\dl_peer_id.dll] [深圳市迅雷网络技术有限公司, 3, 1, 2, 7] [D:\Program Files\Program\xl_data.dll] [深圳市迅雷网络技术有限公司, 1, 10, 2, 24] [D:\Program Files\Program\xl_client.dll] [深圳市迅雷网络技术有限公司, 1, 10, 2, 24] [D:\Program Files\Program\XLGUIDevEnv.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\Program\GougouSearch.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\Program\GBLCategory.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\ComDlls\ThunderAgent5.9.11.1168.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\userdata\Components\BaseCommunity\BaseCommunity.dll] [深圳市迅雷网络技术有限公司, 1.0.2.42] [D:\Program Files\Program\libjpeg6b.dll] [N/A, ] [D:\Program Files\Program\giflib4.dll] [N/A, ] [D:\Program Files\Program\http.dll] [深圳市迅雷网络技术有限公司, 1.0.2.7] [D:\Program Files\Program\XLCP.dll] [深圳市迅雷网络技术有限公司, 1.0.2.16] [D:\Program Files\Program\XLUser.dll] [Thunder Networking Technologies,LTD, 1.0.2.45] [D:\Program Files\Program\BaseIM.dll] [深圳市迅雷网络技术有限公司, 1.0.1.9] [D:\Program Files\Program\UpdateCtrl.dll] [深圳市迅雷网络技术有限公司, 2, 5, 2, 215] [D:\Program Files\Program\FloatPanel.dll] [深圳市迅雷网络技术有限公司, 5,9,11,1168] [D:\Program Files\userdata\Components\Despise\Despise.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 18] [D:\Program Files\userdata\Components\InMedia\iEmbed.dll] [深圳市迅雷网络技术有限公司, 3, 4, 12, 137] [D:\Program Files\userdata\Components\InMedia\XLIPC.DLL] [深圳市迅雷网络技术有限公司, 1, 0, 0, 4] [D:\Program Files\userdata\Components\Tips\TipsClient.dll] [深圳市迅雷网络技术有限公司, 3, 0, 3, 152] [D:\Program Files\userdata\Components\Tips\XLSkin.dll] [深圳市迅雷网络技术有限公司, 1, 0, 1, 4] [D:\Program Files\Rising\Ris\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 16] [D:\Program Files\userdata\Components\ResWorker\DsXlCom.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 43] [D:\Program Files\userdata\Components\ResWorker\DataProcessor_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 20] [D:\Program Files\userdata\Components\ResWorker\MediaWorker.dll] [深圳市迅雷网络技术有限公司, 1, 2, 0, 23] [D:\Program Files\userdata\Components\XlWnd\XlWnd.dll] [深圳市迅雷网络技术有限公司, 1.0.0.4] [D:\Program Files\userdata\Components\Kankan\XMPPlugin.dll] [深圳市迅雷网络技术有限公司, 1.0.0.13] [D:\Program Files\userdata\Components\Kankan\XMPStatistic.dll] [Thunder Networking Technologies,LTD, 1.0.0.1] [D:\Program Files\userdata\Components\XLMediaCutter\XLMediaCutter.dll] [深圳市迅雷网络技术有限公司, 4, 0, 0, 42] [C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx] [Adobe Systems, Inc., 10,0,32,18] [D:\Program Files\Program\TipsManager.dll] [深圳市迅雷网络技术有限公司, 1.0.2.8] [PID: 3756 / Administrator][C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\ThunderService.exe] [深圳市迅雷网络技术有限公司, 1, 0, 2, 54] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\ATL71.DLL] [Microsoft Corporation, 7.10.6101.0] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\XLBugHandler.dll] [, 2, 1, 0, 8] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\UpdateCtrl.dll] [, 2, 5, 2, 215] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\download_engine.dll] [Thunder Networking Technologies,LTD, 3, 4, 2, 363] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\mp.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 7] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\XLCrypto.dll] [N/A, ] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\UACTool.dll] [N/A, ] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\asyn_frame.dll] [Thunder Networking Technologies,LTD, 1, 4, 2, 39] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\backend_agent.dll] [Thunder Networking Technologies,LTD, 1, 1, 2, 39] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\zlib1.dll] [, 1.2.3] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\ptl.dll] [Thunder Networking Technologies,LTD, 3, 2, 3, 78] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\dl_peer_id.dll] [Thunder Networking Technologies,LTD, 3, 1, 2, 7] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\xl_stat.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 9] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\emule_shell.dll] [, 1, 0, 2, 19] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\p2sp.dll] [Thunder Networking Technologies,LTD, 1, 1, 2, 90] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\fs.dll] [Thunder Networking Technologies,LTD, 1, 1, 2, 21] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\down_dispatcher.dll] [Thunder Networking Technologies,LTD, 1,0,2,53] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\p2p.dll] [Thunder Networking Technologies,LTD, 1,1,2,73] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\p2p_upload.dll] [Thunder Networking Technologies,LTD, 1,1,2,16] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\xldc.dll] [深圳市迅雷网络技术有限公司, 4, 0, 2, 41] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\stream.dll] [ShenZhen Thunder Networking Technologies,Ltd., 2, 1, 2, 1083] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\xl_mole.dll] [深圳市迅雷网络技术有限公司, 1.0.0.1] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\dphubt.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 15] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\p2p_local_res.dll] [Thunder Networking Technologies,LTD, 1,1,2,22] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\emule_kernel.dll] [, 1, 2, 2, 70] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\al.dll] [Thunder Networking Technologies,LTD, 1,1,2,47] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\p2p_network_com.dll] [深圳市迅雷网络技术有限公司, 3, 0, 2, 47] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\media_data.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 10] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\sl.dll] [深圳市迅雷网络技术有限公司, 1.0.2.2] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\task_report.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 6] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\p2ptl2.dll] [深圳市迅雷网络技术有限公司, 1,1,2,10] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\p2p_session.dll] [深圳市迅雷网络技术有限公司, 1,2,2,36] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\module_downloader.dll] [, 1, 0, 2, 16] [C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.54\mini_unzip_dll.dll] [N/A, ] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\xldcsubtask.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 30] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\xldcagent.dll] [深圳市迅雷网络技术有限公司, 1, 1, 2, 9] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\emule_id.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 17] [C:\Documents and Settings\All Users\Application Data\Thunder Network\Thunder_A30B0AF7-D81B-464e-B4E4-4B6DF996FB46_\Components\DownloadLibDll\md_p_1.0.14\bd.dll] [深圳市迅雷网络技术有限公司, 1, 0, 2, 22] [PID: 3396 / Administrator][C:\Documents and Settings\Administrator\桌面\SREngLdr.EXE] [Smallfrogs Studio, 2.8.1.1279] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [PID: 3504 / Administrator][C:\Documents and Settings\Administrator\桌面\SREe74ccbd6.EXE] [Smallfrogs Studio, 2.8.1.1279] [C:\WINDOWS\system32\IMM32.DLL] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)] [D:\Program Files\360\360Safe\safemon\safemon.dll] [360.CN, 5, 1, 0, 1002] [C:\WINDOWS\system32\SOGOUPY.IME] [Sogou.com Inc., 4.3.0.3315] [C:\Documents and Settings\Administrator\桌面\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM Error. ["hh.exe" %1] .HLP Error. [C:\WINDOWS\winhlp32.exe %1] .INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1] .INF Error. [C:\WINDOWS\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 N/A ================================== 进程特权扫描 特殊特权被允许： SeLoadDriverPrivilege [PID = 1820, C:\WINDOWS\SYSTEM32\NVSVC32.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 1840, C:\PROGRAM FILES\RACER-CCN-RACERPC-HA\RACER.EXE] 特殊特权被允许： SeLoadDriverPrivilege [PID = 3396, C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SRENGLDR.EXE] ================================== 计划任务 [已启用] SogouImeMgr.job D:\PROGRA~1\SOGOUI~1\430~1.331\PinyinRepair.exe ================================== Windows 安全更新检查 Microsoft .NET Framework 版本 1.1，简体中文版 KB829019, Microsoft .NET Framework 2.0 语言包：x86 (KB829019) KB925850, Windows Media Player 11 KB940157, 用于 Windows XP 的 Windows 搜索 4.0 (KB940157) KB902344, 启用了 WMDRM 的 Media Player 更新程序 (KB902344) KB928416, Microsoft .NET Framework 3.0： x86 语言包 (KB928416) KB905474, Windows Genuine Advantage 通知 (KB905474) KB909520, Microsoft 基本智能卡加密服务提供程序包： x86 (KB909520) KB951847, Microsoft .NET Framework 3.5 Service Pack 1 (KB951847) x86 语言包 KB944036, 用于 Windows XP 的 Internet Explorer 8 KB931125, 根证书更新 [2009 年 11 月] (KB931125) ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]