[CODE]

2010-02-08,09:26:08

System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Advanced Server Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描
    计划任务
    Windows 安全更新检查
    API HOOK
    隐藏进程


启动项目
注册表
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <RavTray><"C:\Program Files\Rising\Rav\RsTray.exe" -system>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <WinVNC><"C:\Program Files\RealVNC\WinVNC\winvnc.exe" -servicehelper>  [RealVNC Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows 2000 Publisher]
    <Userinit><C:\WINNT\system32\userinit.exe,>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINNT\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Corporation Limited]
    <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <Network.ConnectionTray><C:\WINNT\system32\NETSHELL.dll>  [(Verified)Microsoft Windows 2000 Publisher]
    <WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Windows Component Publisher]
    <SysTray><stobject.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\PCANotify]
    <WinlogonNotify: PCANotify><PCANotify.dll>  [Symantec Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
    <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif]
    <WinlogonNotify: wzcnotif><wzcdlg.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
    <自定义浏览器><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player 6.4><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\mplayer2.inf,PerUserStub.NT>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINNT\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6A5110B5-E14B-4268-A065-EF89FF33C325}]
    <EnableRevocation><regsvr32.exe /s /n /i:"S 2 true 3 true 4 true 5 true 6 true 7 true" initpki.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <Address Book 5><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
    <CRLUpdate><%SystemRoot%\system32\updcrl.exe -e -u %SystemRoot%\system32\verisignpub1.crl>  [File is missing]

==================================
启动文件夹
[快捷方式 run.bat]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\快捷方式 run.bat.lnk --> D:\jboss\bin\run.bat [N/A]><N>
[快捷方式 startup.bat]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\快捷方式 startup.bat.lnk --> D:\PROGRA~1\APACHE~1\TOMCAT~1.0\bin\startup.bat [N/A]><N>

==================================
服务
[Windows Auido Serveris / AuidoServeris][Others/Auto Start]
  <C:\WINNT\system32\svchost.exe -k AuidoServeris-->%SystemRoot%\System32\wtxftm.dll><N/A>
[Symantec pcAnywhere Host Service / awhost32][Running/Auto Start]
  <"C:\Program Files\Symantec\pcAnywhere\awhost32.exe"><Symantec Corporation>
[cfmssrerveris / cfmssrerveris][Others/Auto Start]
  <C:\WINNT\system32\svchost.exe -k cfmssrerveris-->%SystemRoot%\System32\cfmssr.dll><N/A>
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Drunsvnre / Drunsvnre][Stopped/Auto Start]
  <C:\Program Files\Drunsvnre\srvany.exe><N/A>
[DameWare Mini Remote Control / DWMRCS][Running/Auto Start]
  <C:\WINNT\SYSTEM32\DWRCS.EXE -service><DameWare Development LLC>
[Microsoft Device Manager / F795496453K][Running/Auto Start]
  <C:\WINNT\System32\svchost.exe -k Kernels-->c:\winnt\system32\f795496453k.cmd><N/A>
[fgpzqt / fgpzqt][Others/Auto Start]
  <C:\WINNT\system32\svchost.exe -k fgpzqt-->%SystemRoot%\System32\mkzmhe.dll><N/A>
[iqtuin / iqtuin][Others/Auto Start]
  <C:\WINNT\system32\svchost.exe -k iqtuin-->%SystemRoot%\System32\syqzng.dll><N/A>
[Device Manager / Irmon][Others/Auto Start]
  <C:\WINNT\sYSTeM32\SVCHOST.EXE -K NETSVCS-->C:\WINNT\system32\Irmonapi.dll><N/A>
[LiveUpdate / LiveUpdate][Stopped/Manual Start]
  <"C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"><Symantec Corporation>
[Portable Media Number / MediaSerial][Others/Auto Start]
  <C:\WINNT\System32\svchost.exe -k  krnlsrvc-->C:\WINNT\system32\RemltsC.dll><N/A>
[Microsoft Search / MSSEARCH][Running/Auto Start]
  <"C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe"><Microsoft Corporation>
[MSSQLSERVER / MSSQLSERVER][Running/Auto Start]
  <C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  <C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe><Microsoft Corporation>
[NETSVCS_0x0 / NETSVCS_0x0][Others/Auto Start]
  <C:\WINNT\SYSTEM32\SVCHOST.EXE -K NETSVCS-->C:\WINNT\system32\NETSVCS_0x0api.dll><N/A>
[OracleMTSRecoveryService / OracleMTSRecoveryService][Running/Auto Start]
  <D:\oracle\ora92\bin\omtsreco.exe "OracleMTSRecoveryService"><Oracle Corporation>
[OracleOraHome92Agent / OracleOraHome92Agent][Running/Auto Start]
  <D:\oracle\ora92\bin\agntsrvc.exe><Oracle Corporation>
[OracleOraHome92ClientCache / OracleOraHome92ClientCache][Stopped/Manual Start]
  <D:\oracle\ora92\BIN\ONRSD.EXE><N/A>
[OracleOraHome92HTTPServer / OracleOraHome92HTTPServer][Running/Auto Start]
  <"D:\oracle\ora92\Apache\Apache\apache.exe" --ntservice><N/A>
[OracleOraHome92PagingServer / OracleOraHome92PagingServer][Stopped/Manual Start]
  <D:\oracle\ora92/bin/pagntsrv.exe><N/A>
[OracleOraHome92SNMPPeerEncapsulator / OracleOraHome92SNMPPeerEncapsulator][Stopped/Manual Start]
  <D:\oracle\ora92\BIN\ENCSVC.EXE><N/A>
[OracleOraHome92SNMPPeerMasterAgent / OracleOraHome92SNMPPeerMasterAgent][Stopped/Manual Start]
  <D:\oracle\ora92\BIN\AGNTSVC.EXE><N/A>
[OracleOraHome92TNSListener / OracleOraHome92TNSListener][Running/Auto Start]
  <D:\oracle\ora92\BIN\TNSLSNR ><N/A>
[OracleServiceZZGJWEB / OracleServiceZZGJWEB][Running/Auto Start]
  <d:\oracle\ora92\bin\ORACLE.EXE ZZGJWEB><Oracle Corporation>
[qclabr / qclabr][Others/Auto Start]
  <C:\WINNT\system32\svchost.exe -k qclabr-->%SystemRoot%\System32\mxxtlx.dll><N/A>
[Rav Service / RsRavMon][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\RavMonD.exe"><Beijing Rising Information Technology Co., Ltd.>
[SQLSERVERAGENT / SQLSERVERAGENT][Stopped/Manual Start]
  <C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlagent.exe><Microsoft Corporation>
[Apache Tomcat / Tomcat5][Running/Manual Start]
  <"d:\Program Files\Apache Software Foundation\Tomcat 5.0\bin\tomcat5.exe" //RS//Tomcat5><Apache Software Foundation>
[VNC Server / winvnc][Stopped/Auto Start]
  <"C:\Program Files\RealVNC\WinVNC\winvnc.exe" -service><RealVNC Ltd.>
[主动防御 / ZhuDongFangYu][Running/Auto Start]
  <"C:\Program Files\360safe\deepscan\zhudongfangyu.exe"><360安全中心>

==================================
驱动程序
[360AntiArp / 360AntiArp][Running/System Start]
  <\??\C:\WINNT\system32\drivers\360AntiArp.sys><360安全中心>
[360SelfProtection / 360SelfProtection][Running/System Start]
  <system32\drivers\360SelfProtection.sys><360安全中心>
[a320raid / a320raid][Running/Boot Start]
  <\SystemRoot\system32\drivers\a320raid.sys><Adaptec, Inc.>
[ati2mtag / ati2mtag][Running/Manual Start]
  <System32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[awecho / awecho][Running/System Start]
  <system32\drivers\awechomd.sys><Symantec Corporation>
[AW_HOST / AW_HOST][Running/System Start]
  <system32\drivers\aw_host5.sys><Symantec Corporation>
[Broadcom NetXtreme Gigabit Ethernet / b57w2k][Running/Manual Start]
  <System32\DRIVERS\b57w2k.sys><Broadcom Corporation>
[BFSDRV / BFSDRV][Running/System Start]
  <\??\C:\WINNT\system32\drivers\bfsdrv.sys><360安全中心>
[BREGDRV / BREGDRV][Running/System Start]
  <\??\C:\WINNT\system32\drivers\bregdrv.sys><360安全中心>
[dmboot / dmboot][Stopped/Disabled]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload][Running/Boot Start]
  <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[DwMirror / DwMirror][Running/Manual Start]
  <system32\DRIVERS\DamewareMini.sys><DameWare Development, Inc.>
[DameWare Virtual Keyboard 32 bit Driver / dwvkbd][Running/System Start]
  <system32\DRIVERS\dwvkbd.sys><DameWare>
[EfiSystemMon / EfiMon][Running/System Start]
  <System32\Drivers\Efimon.sys><奇虎网>
[hookcont / hookcont][Running/System Start]
  <system32\drivers\HookCont.sys><Beijing Rising Information Technology Co., Ltd.>
[HookPort / HookPort][Running/Boot Start]
  <\SystemRoot\System32\Drivers\Hookport.sys><360安全中心>
[hooksys / hooksys][Running/System Start]
  <system32\drivers\HookSys.sys><Beijing Rising Information Technology Co., Ltd.>
[npkcrypt / npkcrypt][Stopped/Auto Start]
  <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><N/A>
[DDK PACKET Protocol / Packet][Stopped/Manual Start]
  <system32\DRIVERS\ProtoDrv.sys><360安全中心>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Quantum DeepScanner Servers / qutmdserv][Running/Manual Start]
  <\??\C:\WINNT\system32\drivers\qutmdrv.sys><360安全中心>
[rsassist / rsassist][Stopped/Auto Start]
  <system32\drivers\rsassist.sys><Beijing Rising Information Technology Co., Ltd.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Information Technology Co., Ltd.>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
  <\??\C:\WINNT\system32\drivers\SafeBoxKrnl.sys><360安全中心>

==================================
浏览器加载项
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, (Signed) 360.CN>
[Web Browser Applet Control]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINNT\system32\msjava.dll, Microsoft Corporation>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, >
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, (Signed) Microsoft Corporation>
[Java Plug-in]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[Java Plug-in]
  {CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[Java Plug-in]
  {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[Java Plug-in]
  {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[Java Plug-in 1.5.0_06]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash10c.ocx, (Signed) Adobe Systems, Inc.>
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\Safelive.dll, (Signed) >

==================================
正在运行的进程
[PID: 176][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6601]
[PID: 200][\??\C:\WINNT\system32\winlogon.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6997]
    [C:\WINNT\system32\PCANotify.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
[PID: 428][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 504][C:\WINNT\system32\spoolsv.exe]  [(Verified) Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\awmon.dll]  [Symantec Corporation, 12.0.0.11]
[PID: 532][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 548][C:\Program Files\Symantec\pcAnywhere\awhost32.exe]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\Util.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\Program Files\Symantec\pcAnywhere\InstData.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awcfgmgr.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCP70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\Program Files\Symantec\pcAnywhere\S32PCAG.DLL]  [Symantec Corporation, 15.0.0.14]
    [C:\Program Files\Symantec\pcAnywhere\AWSES32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awofrwrk.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awio.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\PowerMgr.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\PCACMNDG.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awgui32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MFC70.DLL]  [Microsoft Corporation, 7.00.9466.0]
    [C:\Program Files\Symantec\pcAnywhere\AWDS32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awcm32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\crypto.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awtime32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\pcaime.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awRes-all.dll]  [Symantec Corporation, 12.0.1.156]
    [C:\Program Files\Common Files\Symantec Shared\ehandres.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awres-host.dll]  [Symantec Corporation, 12.0.1.156]
    [C:\Program Files\Symantec\pcAnywhere\AWHXPRB.DLL]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awhprobedll.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\TrayIcon.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\AWDSP32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awcp.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\IMPLODE.DLL]  [PKWare, 1, 0, 0, 1]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\ijl20.dll]  [Intel Corporation, 2,0,13,45]
    [C:\Program Files\Symantec\pcAnywhere\AwioResources.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\AWHPILOT.DLL]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awhutil.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\crypshim.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\SymCrypt.dll]  [Symantec Corporation, 1.0.0.8]
    [C:\Program Files\Symantec\pcAnywhere\awlog32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\snmputil.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\libsnmp.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\AWCONN32.DLL]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\AWHLOGON.DLL]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\AWHSEQ.DLL]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\AW32TCP.DLL]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\RMcommServer.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\RMcomm.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\DSMgr.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\awxfer.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\ftstatus.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\FTStatusResources.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\CMDQENG.DLL]  [Symantec Corporation, 12.0.0.123]
    [C:\Program Files\Symantec\pcAnywhere\LocalEng.DLL]  [Symantec Corporation, 12.0.0.123]
[PID: 560][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 584][C:\WINNT\SYSTEM32\DWRCS.EXE]  [DameWare Development LLC, 6, 5, 0, 0]
    [C:\WINNT\SYSTEM32\DWRCShell.DLL]  [DameWare Development LLC, 6, 5, 0, 0]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 604][C:\WINNT\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 616][C:\WINNT\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
    [c:\winnt\system32\f795496453k.cmd]  [N/A, ]
    [c:\winnt\system32\MSVCP60.dll]  [Microsoft Corporation, 6.00.8972.0]
[PID: 628][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 636][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 684][C:\WINNT\System32\llssrv.exe]  [(Verified) Microsoft Corporation, 5.00.2195.7337]
[PID: 724][C:\WINNT\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 848][C:\PROGRA~1\MICROS~3\MSSQL\binn\sqlservr.exe]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\PROGRA~1\MICROS~3\MSSQL\binn\OPENDS60.DLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\PROGRA~1\MICROS~3\MSSQL\binn\UMS.DLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\PROGRA~1\MICROS~3\MSSQL\binn\SQLSORT.DLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\PROGRA~1\MICROS~3\MSSQL\binn\Resources\2052\sqlevn70.RLL]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\PROGRA~1\MICROS~3\MSSQL\binn\SSNETLIB.dll]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\PROGRA~1\MICROS~3\MSSQL\binn\SSNMPN70.dll]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\PROGRA~1\MICROS~3\MSSQL\binn\SSmsLPCn.dll]  [Microsoft Corporation, 2000.080.0194.00]
    [C:\PROGRA~1\MICROS~3\MSSQL\binn\SQLFTQRY.DLL]  [Microsoft Corporation, 2000.080.0194.00]
[PID: 924][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2800.1106]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1022]
    [C:\WINNT\system32\Meezcouoc.dll]  [N/A, ]
    [C:\WINNT\TEMP\BClib\krnln.fne]  [, 1, 0, 0, 1]
    [C:\WINNT\TEMP\BClib\Exmlrpc.fne]  [N/A, ]
    [C:\WINNT\TEMP\BClib\dp1.fne]  [N/A, ]
    [C:\WINNT\system32\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
    [C:\WINNT\System32\devenum.dll]  [, ]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 940][D:\oracle\ora92\bin\omtsreco.exe]  [Oracle Corporation, 9.2.0.1.0]
    [D:\oracle\ora92\bin\OCI.dll]  [Oracle Corporation, 9.2.0.1.0]
    [D:\oracle\ora92\bin\OraClient9.Dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oravsn9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracommon9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orageneric9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraxml9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\oraxsd9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\orannzsbb9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oran9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranl9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranldap9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraldapclnt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancrypt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\ORATRACE9.dll]  [N/A, ]
    [D:\oracle\ora92\bin\oranro9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranhost9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranoname9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancds9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orantns9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranms.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmsp.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\orapls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraslax9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orasnls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orawtc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orasql9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\omtsrecomsgZHS.dll]  [Oracle Corporation, 9.0.0.0.0]
    [D:\oracle\ora92\bin\omtsrecomsgus.dll]  [Oracle Corporation, 9.2.0.0.1]
[PID: 964][D:\oracle\ora92\bin\agntsrvc.exe]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmi.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oraclient9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oravsn9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracommon9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orageneric9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraxml9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\oraxsd9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\orannzsbb9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oran9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranl9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranldap9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraldapclnt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancrypt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\ORATRACE9.dll]  [N/A, ]
    [D:\oracle\ora92\bin\oranro9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranhost9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranoname9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancds9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orantns9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranms.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmsp.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\orapls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraslax9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orasnls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orawtc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orasql9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oravppdc.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmd.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmt.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranml.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\tcl82.dll]  [Scriptics Corporation, 8.2.3]
    [D:\oracle\ora92\bin\orantcp9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
[PID: 1020][D:\oracle\ora92\Apache\Apache\apache.exe]  [N/A, ]
    [D:\oracle\ora92\Apache\Apache\ApacheCore.dll]  [N/A, ]
    [D:\oracle\ora92\Apache\Apache\yod.dll]  [N/A, ]
    [D:\oracle\ora92\Apache\Apache\Win9xConHook.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulemimemagic.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulemime.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthanon.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthdbm.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthdigest.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulecernmeta.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduledigest.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleexpires.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleheaders.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleproxy.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulerewrite.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulespeling.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleinfo.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulestatus.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleusertrack.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduledms.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleperl.dll]  [N/A, ]
    [D:\oracle\ora92\Apache\Perl\5.00503\bin\mswin32-x86\Perl.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleoprocmgr.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulefastcgi.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulessl.dll]  [N/A, ]
    [d:\oracle\ora92\apache\jserv\apachemodulejserv.dll]  [N/A, ]
    [d:\oracle\ora92\bin\modplsql.dll]  [N/A, ]
    [d:\oracle\ora92\bin\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\OCI.dll]  [Oracle Corporation, 9.2.0.1.0]
[PID: 340][C:\WINNT\system32\cmd.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6995]
[PID: 1056][D:\oracle\ora92\bin\dbsnmp.exe]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmi.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oraclient9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oravsn9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracommon9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orageneric9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraxml9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\oraxsd9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\orannzsbb9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oran9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranl9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranldap9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraldapclnt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancrypt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\ORATRACE9.dll]  [N/A, ]
    [D:\oracle\ora92\bin\oranro9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranhost9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranoname9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancds9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orantns9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranms.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmsp.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\orapls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraslax9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orasnls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orawtc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orasql9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oravppdc.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmd.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmt.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranml.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\tcl82.dll]  [Scriptics Corporation, 8.2.3]
    [D:\oracle\ora92\bin\orantcp9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oravpnt.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oravpxdba.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oravpxeap.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oravpsqlsrv.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oravpxoafnd.dll]  [Oracle Corporation, 9.2.0.0.0]
[PID: 1104][D:\oracle\ora92\BIN\TNSLSNR.exe]  [N/A, ]
    [D:\oracle\ora92\BIN\oransgr9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oran9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oranl9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oranldap9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\orannzsbb9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\orageneric9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\BIN\oracommon9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\BIN\oraclient9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\BIN\oravsn9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\BIN\orawtc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\BIN\orancrypt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oranro9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\orapls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\BIN\oraslax9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\orasnls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\orasql9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oraxml9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\BIN\oraxsd9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\BIN\oraldapclnt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\ORATRACE9.dll]  [N/A, ]
    [D:\oracle\ora92\BIN\oranhost9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oranoname9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\orancds9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\orantns9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\BIN\oranms.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\BIN\oranmsp.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranipc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orantcp9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranbeq9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
[PID: 1128][d:\oracle\ora92\bin\ORACLE.EXE]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oraclient9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oravsn9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oracommon9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\orageneric9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oraxml9.dll]  [Oracle Corporation, ]
    [d:\oracle\ora92\bin\oraxsd9.dll]  [Oracle Corporation, ]
    [d:\oracle\ora92\bin\orannzsbb9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oran9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranl9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranldap9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oraldapclnt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orancrypt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\ORATRACE9.dll]  [N/A, ]
    [d:\oracle\ora92\bin\oranro9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranhost9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranoname9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orancds9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orantns9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranms.dll]  [Oracle Corporation, 9.2.0.0.0]
    [d:\oracle\ora92\bin\oranmsp.dll]  [Oracle Corporation, 9.2.0.0.0]
    [d:\oracle\ora92\bin\orapls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oraslax9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orasnls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orawtc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\orasql9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oraodm9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oraplp9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\orajox9.dll]  [N/A, ]
    [d:\oracle\ora92\bin\oransgr9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orawwg9.dll]  [Oracle Corporation, 8.1.7.0.0]
    [d:\oracle\ora92\bin\ocijdbc9.dll]  [N/A, ]
    [D:\oracle\ora92\BIN\ORAIMR9.Dll]  [Oracle Corporation, 9.2.0.1.0]
    [D:\oracle\ora92\bin\oranbeq9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orannts9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orantcp9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_rdbms.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_lang.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_util.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_vm.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_io.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_lang_ref.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_lang_reflect.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_gss_util.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9sun_io.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9sun_security_action.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_security.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_memoryManager.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_sql.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_sql.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_jdbc_driver.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_java_io.dll]  [N/A, ]
    [D:\oracle\ora92\bin\COREJAVA.DLL]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_math.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_rdbms_security.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_realm.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_jdbc_kprb.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_jdbc_dbaccess.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_jdbc_util.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_net.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9sun_tools_java.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_sqljdecl.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_security.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_security_acl.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9java_net.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_jdkcompiler.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_compiler.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9sun_tools_javac.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_util.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9sun_tools_tree.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9sun_tools_asm.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_classverifier.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_util_classfile.dll]  [N/A, ]
    [D:\ORACLE\ORA92\JAVAVM\ADMIN\orajox9oracle_aurora_java_lang.dll]  [N/A, ]
[PID: 1164][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 1172][C:\WINNT\system32\regsvc.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6701]
[PID: 1292][C:\WINNT\system32\MSTask.exe]  [(Verified) Microsoft Corporation, 4.71.2195.6972]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 1364][C:\WINNT\System32\WBEM\WinMgmt.exe]  [(Verified) Microsoft Corporation, 1.50.1085.0100]
[PID: 1404][C:\WINNT\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
[PID: 1440][C:\WINNT\system32\Dfssvc.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6664]
[PID: 1464][C:\WINNT\system32\inetsrv\inetinfo.exe]  [(Verified) Microsoft Corporation, 5.00.0984]
    [D:\Program Files\Apache Software Foundation\Tomcat 5.0\bin\isapi_redirect.dll]  [N/A, ]
    [D:\oracle\ora92\bin\ociw32.dll]  [Oracle Corporation, 9.2.0.1.0]
[PID: 1480][C:\WINNT\System32\msdtc.exe]  [(Verified) Microsoft Corporation, 1999.9.3421.3]
    [D:\oracle\ora92\bin\ociw32.dll]  [Oracle Corporation, 9.2.0.1.0]
[PID: 1584][C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe]  [Microsoft Corporation, 9.107.5512.0]
    [C:\Program Files\Common Files\System\MSSearch\Bin\mssws.dll]  [Microsoft Corporation, 9.107.5512.0]
    [C:\PROGRA~1\COMMON~1\System\MSSearch\Bin\mssrch.dll]  [Microsoft Corporation, 9.107.5512.0]
    [C:\Program Files\Common Files\System\MSSearch\Bin\tquery.dll]  [Microsoft Corporation, 9.107.5512.0]
    [C:\PROGRA~1\COMMON~1\System\MSSearch\Bin\propdefs.dll]  [Microsoft Corporation, 9.107.5512.0]
    [C:\PROGRA~1\COMMON~1\System\MSSearch\Bin\srchidx.dll]  [Microsoft Corporation, 9.107.5512.0]
[PID: 1836][D:\oracle\ora92\Apache\Apache\apache.exe]  [N/A, ]
    [D:\oracle\ora92\Apache\Apache\ApacheCore.dll]  [N/A, ]
    [D:\oracle\ora92\Apache\Apache\yod.dll]  [N/A, ]
    [D:\oracle\ora92\Apache\Apache\Win9xConHook.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulemimemagic.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulemime.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthanon.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthdbm.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleauthdigest.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulecernmeta.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduledigest.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleexpires.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleheaders.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleproxy.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulerewrite.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulespeling.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleinfo.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulestatus.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleusertrack.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduledms.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleperl.dll]  [N/A, ]
    [D:\oracle\ora92\Apache\Perl\5.00503\bin\mswin32-x86\Perl.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemoduleoprocmgr.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulefastcgi.dll]  [N/A, ]
    [d:\oracle\ora92\apache\apache\modules\apachemodulessl.dll]  [N/A, ]
    [d:\oracle\ora92\apache\jserv\apachemodulejserv.dll]  [N/A, ]
    [d:\oracle\ora92\bin\modplsql.dll]  [N/A, ]
    [d:\oracle\ora92\bin\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\OCI.dll]  [Oracle Corporation, 9.2.0.1.0]
    [D:\oracle\ora92\bin\OraClient9.Dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oravsn9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oracommon9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orageneric9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraxml9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\oraxsd9.dll]  [Oracle Corporation, ]
    [D:\oracle\ora92\bin\orannzsbb9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oran9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranl9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranldap9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oraldapclnt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancrypt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\ORATRACE9.dll]  [N/A, ]
    [D:\oracle\ora92\bin\oranro9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranhost9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranoname9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orancds9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orantns9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\oranms.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\oranmsp.dll]  [Oracle Corporation, 9.2.0.0.0]
    [D:\oracle\ora92\bin\orapls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\oraslax9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orasnls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [D:\oracle\ora92\bin\orawtc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [D:\oracle\ora92\bin\orasql9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
[PID: 2100][d:\oracle\ora92\bin\isqlplus]  [N/A, ]
    [d:\oracle\ora92\bin\oracommon9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oracore9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oraunls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orageneric9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oraclient9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oravsn9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\orawtc9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\orannzsbb9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oran9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranl9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranldap9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oraldapclnt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orancrypt9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\ORATRACE9.dll]  [N/A, ]
    [d:\oracle\ora92\bin\oranro9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranhost9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranoname9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orancds9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orantns9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oranms.dll]  [Oracle Corporation, 9.2.0.0.0]
    [d:\oracle\ora92\bin\oranmsp.dll]  [Oracle Corporation, 9.2.0.0.0]
    [d:\oracle\ora92\bin\orapls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production ]
    [d:\oracle\ora92\bin\oraslax9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orasnls9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\orasql9.dll]  [Oracle Corporation, 9.2.0.1.0 Production]
    [d:\oracle\ora92\bin\oraxml9.dll]  [Oracle Corporation, ]
    [d:\oracle\ora92\bin\oraxsd9.dll]  [Oracle Corporation, ]
[PID: 1192][C:\WINNT\Explorer.EXE]  [(Verified) Microsoft Corporation, 5.00.3700.6690]
    [C:\WINNT\system32\RavExt.dll]  [Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1022]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\WINNT\SYSTEM32\DWRCShell.DLL]  [DameWare Development LLC, 6, 5, 0, 0]
    [C:\WINNT\system32\DWRCSh32.DLL]  [DameWare Development LLC, 6, 7, 0, 8]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\IDM Computer Solutions\UltraEdit-32\ue32ctmn.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 2800][C:\WINNT\system32\dllhost.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6692]
    [D:\oracle\ora92\bin\ociw32.dll]  [Oracle Corporation, 9.2.0.1.0]
[PID: 2944][C:\WINNT\system32\cmd.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6995]
[PID: 3024][C:\WINNT\system32\conime.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6655]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 3032][D:\Program Files\Java\jdk1.5.0\bin\java.exe]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jdk1.5.0\jre\bin\client\jvm.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jdk1.5.0\jre\bin\hpi.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jdk1.5.0\jre\bin\verify.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jdk1.5.0\jre\bin\java.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jdk1.5.0\jre\bin\zip.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jdk1.5.0\jre\bin\net.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jdk1.5.0\jre\bin\rmi.dll]  [Sun Microsystems, Inc., 1.5.0.0]
[PID: 3044][C:\WINNT\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.00.2134.1]
[PID: 3104][C:\WINNT\SYSTEM32\DWRCST.exe]  [DameWare Development, 6, 5, 0, 0]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 1340][C:\WINNT\system32\dllhost.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6692]
[PID: 3636][C:\WINNT\System32\mdm.exe]  [Microsoft Corporation, 6.00.8424]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 2884][d:\Program Files\Apache Software Foundation\Tomcat 5.0\bin\tomcat5.exe]  [Apache Software Foundation, 1.0.0.0]
    [D:\Program Files\Java\jre1.5.0\bin\client\jvm.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jre1.5.0\bin\hpi.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jre1.5.0\bin\verify.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jre1.5.0\bin\java.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jre1.5.0\bin\zip.dll]  [Sun Microsystems, Inc., 1.5.0.0]
    [D:\Program Files\Java\jre1.5.0\bin\net.dll]  [Sun Microsystems, Inc., 1.5.0.0]
[PID: 3804][C:\WINNT\System32\termsrv.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6696]
[PID: 3792][C:\WINNT\system32\cmd.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6995]
[PID: 5292][C:\WINNT\system32\mmc.exe]  [(Verified) Microsoft Corporation, 5.00.2195.7102]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 4828][C:\WINNT\system32\taskmgr.exe]  [(Verified) Microsoft Corporation, 5.00.2195.6620]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
[PID: 5064][D:\oracle\ora92\jdk\bin\java.exe]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\hotspot\jvm.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\hpi.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\verify.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\java.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\zip.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\net.dll]  [N/A, ]
[PID: 5344][D:\oracle\ora92\jdk\bin\java.exe]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\hotspot\jvm.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\hpi.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\verify.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\java.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\zip.dll]  [N/A, ]
    [D:\oracle\ora92\jdk\jre\bin\net.dll]  [N/A, ]
[PID: 5260][C:\Documents and Settings\Administrator\桌面\sreng2\SREngLdr.EXE]  [Smallfrogs Studio, 2.8.2.1321]
[PID: 5372][C:\Documents and Settings\Administrator\桌面\sreng2\SREf5923de9.EXE]  [Smallfrogs Studio, 2.8.2.1321]
    [C:\Program Files\Symantec\pcAnywhere\AWHK32.dll]  [Symantec Corporation, 12.0.0.123]
    [C:\WINNT\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9466.0]
    [C:\Documents and Settings\Administrator\桌面\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [UltraEdit.ini]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   Error. [UltraEdit.js]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1       localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 584, C:\WINNT\SYSTEM32\DWRCS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 940, D:\ORACLE\ORA92\BIN\OMTSRECO.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 964, D:\ORACLE\ORA92\BIN\AGNTSRVC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1020, D:\ORACLE\ORA92\APACHE\APACHE\APACHE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1056, D:\ORACLE\ORA92\BIN\DBSNMP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1104, D:\ORACLE\ORA92\BIN\TNSLSNR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1128, D:\ORACLE\ORA92\BIN\ORACLE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1584, C:\PROGRAM FILES\COMMON FILES\SYSTEM\MSSEARCH\BIN\MSSEARCH.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1836, D:\ORACLE\ORA92\APACHE\APACHE\APACHE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2100, D:\ORACLE\ORA92\BIN\ISQLPLUS]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3032, D:\PROGRAM FILES\JAVA\JDK1.5.0\BIN\JAVA.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3104, C:\WINNT\SYSTEM32\DWRCST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2884, D:\PROGRAM FILES\APACHE SOFTWARE FOUNDATION\TOMCAT 5.0\BIN\TOMCAT5.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 5064, D:\ORACLE\ORA92\JDK\BIN\JAVA.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 5344, D:\ORACLE\ORA92\JDK\BIN\JAVA.EXE]

==================================
计划任务
N/A

==================================
Windows 安全更新检查
N/A

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]