[CODE]

2010-05-21,13:38:00

System Repair Engineer 2.8.2.1321
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描
    计划任务
    Windows 安全更新检查
    API HOOK
    隐藏进程


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
    <360sd><"D:\Program Files\360\360sd\360sd.exe" /autorun>  [(Verified)Qizhi Software (beijing) Co. Ltd]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Persistence><C:\WINDOWS\system32\igfxpers.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <RTHDCPL><RTHDCPL.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <Alcmtr><ALCMTR.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <AzMixerSel><C:\Program Files\Realtek\InstallShield\AzMixerSel.exe>  [Realtek Semiconductor Corp.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    <Userinit><C:\WINDOWS\system32\UserInit.exe,>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Windows Component Publisher]
    <WebCheck><%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Windows Component Publisher]
    <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
    <WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    <WinlogonNotify: igfxcui><igfxdev.dll>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
    <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
    <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
    <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
    <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
    <Microsoft Windows Media Player><C:\WINDOWS\inf\unregmp2.exe /ShowWMP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
    <浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Remove.PerUser.NT>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe>  [(Verified)Microsoft Windows Component Publisher]

==================================
启动文件夹
[REALTEK USB Wireless LAN Utility]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\REALTEK USB Wireless LAN Utility.lnk --> C:\PROGRA~1\REALTE~1\RtWLan.exe [Realtek Semiconductor Corp.]><N>

==================================
服务
[360 杀毒实时防护服务 / 360rp][Running/Auto Start]
  <"D:\Program Files\360\360sd\360rp.exe"><360.cn>
[Contrl Center of Storm Media / ccosm][Running/Auto Start]
  <C:\Program Files\StormII\stormliv.exe /asservice><北京暴风网际科技有限公司>
[Help and Support / helpsvc][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll><N/A>
[360 杀毒全盘扫描辅助服务 / scan][Stopped/Manual Start]
  <C:\WINDOWS\System32\svchost.exe -k bdx-->D:\Program Files\360\360sd\SCAN.DLL><S.C. BitDefender S.R.L>
[TabletServicePen / TabletServicePen][Running/Auto Start]
  <C:\WINDOWS\system32\Pen_Tablet.exe><Wacom Technology, Corp.>
[WTouch Service / WTouchService][Running/Auto Start]
  <C:\Program Files\WTouch\WTouchService.exe><Wacom Technology, Corp.>
[主动防御 / ZhuDongFangYu][Running/Auto Start]
  <"D:\Program Files\360\360Safe\deepscan\ZhuDongFangYu.exe"><360.cn>
[Kingsoft Rescue Service / Kingsoft Rescue Service][Running/Auto Start]
  <D:\Program Files\kingsoft\KSM3.0\ksmsvc.exe><>

==================================
驱动程序
[360SelfProtection / 360SelfProtection][Running/System Start]
  <system32\drivers\360SelfProtection.sys><360安全中心>
[AEGIS Protocol (IEEE 802.1x) v3.4.5.0 / AegisP][Running/Auto Start]
  <system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications>
[BAPIDRV / BAPIDRV][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\BAPIDRV.SYS><360.cn>
[Dritek Keyboard Filter Driver / DKbFltr][Running/Manual Start]
  <system32\DRIVERS\DKbFltr.sys><Dritek System Inc.>
[DrvKiller / DrvKiller][Stopped/Manual Start]
  <\??\C:\WINDOWS\Fonts\rtfm.fon><N/A>
[Realtek EAPPkt Protocol / EAPPkt][Running/Auto Start]
  <system32\DRIVERS\EAPPkt.sys><Windows (R) 2000 DDK provider>
[EfiSystemMon / EfiMon][Running/System Start]
  <System32\Drivers\Efimon.sys><奇虎网>
[Creative AudioPCI (ES1371,ES1373) (WDM) / es1371][Stopped/Manual Start]
  <system32\drivers\es1371mp.sys><Creative Technology Ltd.>
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HookPort / HookPort][Running/Boot Start]
  <\SystemRoot\System32\Drivers\Hookport.sys><360安全中心>
[hptpro / hptpro][Stopped/Boot Start]
  <\SystemRoot\system32\DRIVERS\hptpro.sys><HighPoint Technologies, Inc.>
[HSFHWAZL / HSFHWAZL][Running/Manual Start]
  <system32\DRIVERS\HSFHWAZL.sys><Conexant Systems, Inc.>
[HSF_DPV / HSF_DPV][Running/Manual Start]
  <system32\DRIVERS\HSF_DPV.sys><Conexant Systems, Inc.>
[HUAWEI Mobile Composite Device driver / hwtdbus][Running/Manual Start]
  <system32\DRIVERS\hwtdbus.sys><MCCI Corporation>
[HUAWEI Mobile Cable Emulation Bus / hwtdceb][Running/Manual Start]
  <system32\DRIVERS\hwtdceb.sys><MCCI Corporation>
[Huawei TD USB Fake / hwtdfake][Stopped/Manual Start]
  <system32\DRIVERS\hwtdfake.sys><Huawei Technologies Co., Ltd.>
[HUAWEI Mobile CMCC MMS (Filter) / hwtdmdfl][Running/Manual Start]
  <system32\DRIVERS\hwtdmdfl.sys><MCCI Corporation>
[HUAWEI Mobile CMCC AT Interface Drivers / hwtdmdm][Running/Manual Start]
  <system32\DRIVERS\hwtdmdm.sys><MCCI Corporation>
[HUAWEI Mobile CMCC Modem Controller / hwtdmdmc][Running/Manual Start]
  <system32\DRIVERS\hwtdmdmc.sys><MCCI Corporation>
[HUAWEI Mobile CMCC MMS Controller / hwtdmdmc2][Running/Manual Start]
  <system32\DRIVERS\hwtdmdmc2.sys><MCCI Corporation>
[HUAWEI Mobile CMCC MMS / hwtdsce][Running/Manual Start]
  <system32\DRIVERS\hwtdsce.sys><MCCI Corporation>
[ialm / ialm][Running/Manual Start]
  <system32\DRIVERS\igxpmp32.sys><Intel Corporation>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
  <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[AMD PCNET Compatable Adapter Driver / PCnet][Stopped/Manual Start]
  <system32\DRIVERS\pcntpci5.sys><AMD Inc.>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Quantum DeepScanner Servers / qutmdserv][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\qutmdrv.sys><360.cn>
[Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter / RTLWUSB][Stopped/Manual Start]
  <system32\DRIVERS\RTL8187.sys><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[System Restore Filter Driver / sr][Stopped/Boot Start]
  <\SystemRoot\system32\DRIVERS\sr.sys><N/A>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[Wacom Mouse Filter Driver / wacommousefilter][Running/Manual Start]
  <system32\DRIVERS\wacommousefilter.sys><Wacom Technology>
[Wacom Virtual Hid Driver / wacomvhid][Running/Manual Start]
  <system32\DRIVERS\wacomvhid.sys><Wacom Technology>
[Virtual Keyboard Driver / WacomVKHid][Running/Manual Start]
  <system32\DRIVERS\WacomVKHid.sys><Wacom Technology>
[winachsf / winachsf][Running/Manual Start]
  <system32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>
[NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller / yukonwxp][Running/Manual Start]
  <system32\DRIVERS\yk51x86.sys><Marvell>
[qutmipc / qutmipc][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\qutmipc.sys><360安全中心>
[krpr / krpr][Stopped/Manual Start]
  <\??\D:\Program Files\kingsoft\KSM3.0\krpr.sys><N/A>
[bootsafe / bootsafe][Stopped/Boot Start]
  <\SystemRoot\system32\Drivers\bootsafe.sys><>
[BC / BC][Stopped/Boot Start]
  <\SystemRoot\system32\Drivers\BC.sys><Kingsoft Corporation>

==================================
浏览器加载项
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[]
  {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, (Signed) N/A>
[百度一下]
  {D943E3D8-B612-4F92-A0B6-992EA997B7B3} <http://www.baidu.com/index.php?tn=sayh_1_dg, N/A>
[vc Control]
  {E689D735-1487-420D-9049-16ED198FE411} <C:\WINDOWS\DOWNLO~1\vco.ocx, >
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[]
  {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <, >
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <D:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent5.9.20.1418.dll, (Signed) 深圳市迅雷网络技术有限公司>
[]
  {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} <, >
[XMP Class]
  {6483F145-A768-4C41-AACC-52D4D7845851} <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, N/A>
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <D:\Program Files\Thunder Network\Thunder\userdata\Components\InMedia\MediaAddin.dll, (Signed) 深圳市迅雷网络技术有限公司>
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <D:\Program Files\360\360Safe\Safelive.dll, (Signed) >
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) 深圳市迅雷网络技术有限公司>
[]
  {9701758C-4373-482E-B13C-776C048EC890} <, >
[]
  {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} <, >
[APlayer Control]
  {A9322148-C691-4B9D-91FC-B9C461DBE9DD} <C:\Program Files\Common Files\Thunder Network\APlayer\APlayer_001.dll, N/A>
[]
  {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx, (Signed) Adobe Systems, Inc.>
[]
  {D943E3D8-B612-4F92-A0B6-992EA997B7B3} <, >
[]
  {E2E2DD38-D088-4134-82B7-F2BA38496583} <, >
[]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <, >
[]
  {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[SEInterface Class]
  {FDAEAB93-6DC0-4A63-81C6-95C88ED36F6A} <C:\Program Files\SogouExplorer\seapi.dll, (Signed) Sohu.com Inc.>
[使用迅雷下载]
  <D:\Program Files\Thunder Network\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
  <D:\Program Files\Thunder Network\Thunder\Program\getallurl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>

==================================
正在运行的进程
[PID: 676 / SYSTEM][\SystemRoot\System32\smss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 752 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 776 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 820 / SYSTEM][C:\WINDOWS\system32\services.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)]
[PID: 832 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 972 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1060 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1100 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [c:\windows\system32\msi.dll]  [Microsoft Corporation, 4.5.6001.22159]
[PID: 1172 / SYSTEM][C:\Program Files\WTouch\WTouchService.exe]  [Wacom Technology, Corp., ]
[PID: 1364 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1428 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1496 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\system32\msi.dll]  [Microsoft Corporation, 4.5.6001.22159]
[PID: 1616 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1696 / Administrator][C:\Program Files\WTouch\WTouchUser.exe]  [Wacom Technology, Corp., ]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\system32\Pen_Tablet.dll]  [Wacom Technology, Corp., 5.2.0-6]
[PID: 1772 / Administrator][C:\WINDOWS\Explorer.EXE]  [(Verified) Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\system32\msi.dll]  [Microsoft Corporation, 4.5.6001.22159]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\ATL71.DLL]  [Microsoft Corporation, 7.10.6101.0]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\MSVCP71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\MSVCR71.dll]  [Microsoft Corporation, 7.10.6030.0]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]  [深圳市迅雷网络技术有限公司, 5,9,20,1418]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\zlib1.dll]  [, 1.2.3]
    [C:\Program Files\HaoZip\HaoZipExt.dll]  [好压软件工作室, 1.5]
    [C:\WINDOWS\system32\shdoclc.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360安全中心, 6, 3, 1, 1013]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]  [深圳市迅雷网络技术有限公司, 5,9,20,1418]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent5.9.20.1418.dll]  [深圳市迅雷网络技术有限公司, 5,9,20,1418]
[PID: 1832 / SYSTEM][D:\Program Files\360\360sd\360rp.exe]  [360.cn, 1, 1, 0, 2013]
    [D:\Program Files\360\360sd\Router.dll]  [360安全中心, 1, 0, 0, 1069]
    [D:\Program Files\360\360sd\QTQuart.dll]  [360.cn, 1, 0, 0, 1072]
    [D:\Program Files\360\360sd\SCAN.DLL]  [S.C. BitDefender S.R.L, 12, 0, 53, 0]
    [D:\Program Files\360\360sd\Wrapper.dll]  [360安全中心, 1, 0, 0, 1]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\Program Files\360\360sd\cloudcom2.dll]  [360.cn, 3, 2, 1, 1004]
    [D:\Program Files\360\360sd\smartscn.dll]  [BitDefender S.R.L., 12.0.0.11]
    [D:\Program Files\360\360sd\wlist.dll]  [360安全中心, 3, 0, 0, 1004]
    [D:\PROGRA~2\360\360sd\bdcore.dll]  [BitDefender, 11, 0, 0, 33]
    [D:\PROGRA~2\360\360sd\trufos.dll]  [N/A, ]
    [D:\PROGRA~2\360\360sd\avxdisk.dll]  [BitDefender, 1, 0, 0, 1]
    [D:\Program Files\360\360sd\heavygate.dll]  [360安全中心, 3, 6, 11, 0]
    [D:\Program Files\360\360sd\CrashReport.dll]  [360安全中心, 1, 0, 0, 1074]
    [D:\Program Files\360\360sd\CloudSec2.dll]  [360.cn, 3, 2, 0, 1002]
    [D:\Program Files\360\360sd\deepscan.dll]  [360.cn, 3, 2, 0, 1002]
[PID: 1884 / SYSTEM][C:\Program Files\StormII\stormliv.exe]  [北京暴风网际科技有限公司, 3, 9, 5, 15]
    [C:\Program Files\StormII\MSVCP60.dll]  [Microsoft Corporation, 6.02.3104.0]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\Program Files\StormII\bfoptdll.dll]  [北京暴风网际科技有限公司, 3, 8, 7, 16]
    [C:\Program Files\StormII\box\BoxLog.dll]  [北京暴风网际科技有限公司, 3, 9, 6, 27]
[PID: 1956 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1972 / SYSTEM][C:\WINDOWS\system32\Pen_Tablet.exe]  [Wacom Technology, Corp., 5.2.0-6]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 2016 / Administrator][C:\WINDOWS\system32\igfxpers.exe]  [Intel Corporation, 6.14.10.4926]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4926]
[PID: 2040 / Administrator][C:\WINDOWS\RTHDCPL.EXE]  [Realtek Semiconductor Corp., 2.1.4.2]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 2044 / Administrator][C:\WINDOWS\system32\igfxsrvc.exe]  [Intel Corporation, 6.14.10.4926]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4926]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 6.14.10.4926]
[PID: 324 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 320 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 340 / Administrator][D:\Program Files\360\360sd\360sd.exe]  [360.cn, 1, 1, 0, 2012]
    [D:\Program Files\360\360sd\QTQuart.dll]  [360.cn, 1, 0, 0, 1072]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\Program Files\360\360sd\CrashReport.dll]  [360安全中心, 1, 0, 0, 1074]
    [D:\Program Files\360\360sd\360MalwareSection.dll]  [360.cn, 1, 0, 0, 1007]
    [D:\Program Files\360\360sd\heavygate.dll]  [360安全中心, 3, 6, 11, 0]
    [D:\Program Files\360\360sd\Cloudcom2.dll]  [360.cn, 3, 2, 1, 1004]
    [D:\Program Files\360\360sd\CloudSec2.dll]  [360.cn, 3, 2, 0, 1002]
    [D:\Program Files\360\360sd\deepscan.dll]  [360.cn, 3, 2, 0, 1002]
[PID: 476 / Administrator][C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe]  [Wacom Technology, Corp., 5.2.0-6]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 576 / SYSTEM][C:\WINDOWS\system32\Pen_Tablet.exe]  [Wacom Technology, Corp., 5.2.0-6]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 588 / Administrator][C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\RtWLan.exe]  [Realtek Semiconductor Corp., 402, 1470, 518, 2007]
    [C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\RtlICS.dll]  [Realtek, 1, 0, 320, 2007]
    [C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\EnumDevLib.dll]  [, 400, 1030, 1026, 2006]
    [C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\RtlLib.dll]  [Realtek Semiconductor Corp., 402, 1280, 518, 2007]
    [C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\acAuth.dll]  [, 4.0.2.0 2005-07-19 16:52:58]
    [C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\LIBEAY32.dll]  [The OpenSSL Project, http://www.openssl.org/, 0.9.8b]
    [C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\IpLib.dll]  [TODO: <Company name>, 1.0.0.1]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 2268 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [(Verified) Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 2992 / Administrator][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RtkBtMnt.exe]  [Realtek Semiconductor Corp., 1.0.0.7]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 3044 / Administrator][D:\Program Files\China Mobile\G3 eWalk\G3 eWalk.exe]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\Container.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\China Mobile\G3 eWalk\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [D:\Program Files\China Mobile\G3 eWalk\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\China Mobile\G3 eWalk\isaputrace.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\SkinMagicU.dll]  [Appspeed Inc., 2, 3, 1, 1]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\Program Files\China Mobile\G3 eWalk\DeviceMgrPlugin.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\NetInfoPlugin.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\NetConnectPlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\DialUpPlugin.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\TracePlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\ConfigFilePlugin.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\CryptPlugin.dll]  [Huawei Technologies, 1, 0, 0, 1]
    [D:\Program Files\China Mobile\G3 eWalk\DetectDev.dll]  [, 1, 2, 2, 9]
    [D:\Program Files\China Mobile\G3 eWalk\atcomm.dll]  [, 1, 2, 2, 9]
    [D:\Program Files\China Mobile\G3 eWalk\XCodec.dll]  [, 1, 2, 2, 6]
    [D:\Program Files\China Mobile\G3 eWalk\DeviceOperate.dll]  [, 1, 2, 2, 6]
    [D:\Program Files\China Mobile\G3 eWalk\NetInfoUIExPlugin.dll]  [TODO: <Company name>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\XFramePlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\LocaleMgrPlugin.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\DeviceMgrUIPlugin.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\MenuMgrPlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\ToolBarMgrPlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\StatusBarMgrPlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\LayoutPlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\SkinMagicExU.dll]  [TODO: <公司名>, 1.0.0.3]
    [D:\Program Files\China Mobile\G3 eWalk\NotifyServicePlugin.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\SMSUIPlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\AddrBookPlugin.dll]  [Huawei Technologies, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\FileManager.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\SMSPlugin.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\AddrBookUIPlugin.dll]  [Huawei Technologies, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\MMSUIPlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\mm1agent.dll]  [N/A, ]
    [D:\Program Files\China Mobile\G3 eWalk\MmsDataMgrDll.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\MMParser.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\MMSPreviewUIPlugin.dll]  [TODO: <公司名>, 1.0.0.1]
    [D:\Program Files\China Mobile\G3 eWalk\cximage.dll]  [Pizzolato Davide - www.xdp.it, 5, 9, 9, c]
    [D:\Program Files\China Mobile\G3 eWalk\SDL.dll]  [, 1, 2, 13, 0]
[PID: 2460 / Administrator][D:\Tencent\QQ\Bin\QQ.exe]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\Common.dll]  [Tencent, 1, 46, 1590, 0]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.DLL]  [Microsoft Corporation, 8.00.50727.4053]
    [D:\Tencent\QQ\Bin\KernelUtil.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\GF.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\xGraphic32.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\AppUtil.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\AFUtil.dll]  [Tencent, 1, 46, 1590, 0]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\Tencent\QQ\Bin\AppFramework.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\MainFrame.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\AFCtrl.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\IM.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\TaskTray.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\BasicCtrlDll.dll]  [TENCENT, 8,0,773,1801]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOPlatform.dll]  [Tencent, 1.2.0.22]
    [C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOCommon.DLL]  [Tencent, 1.2.0.3]
    [D:\Tencent\QQ\Bin\SkinMgr.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\KernelMisc.dll]  [Tencent, 1, 46, 1590, 0]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [D:\Tencent\QQ\Bin\SystemMsg.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\ConfigCenter.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\ChatFrame.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\AppMisc.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\GroupApp.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.snsapp\Bin\SNSApp.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.paycenter\Bin\PayCenter.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qbar\Bin\QBar.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqvipmisc\Bin\QQVipMisc.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.wenwen\Bin\WenWen.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\Contacts.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.netbar\Bin\NetBar.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.paipai\Bin\PaiPai.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.vas\Bin\VAS.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.wireless\Bin\Wireless.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\QInterLive.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.paipaigift\Bin\PaiPaiGift.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqshow\Bin\QQShow.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qzone\Bin\Qzone.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.crm\Bin\CRM.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.audiovideo\Bin\AudioVideo.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.soso\Bin\Soso.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.weather\Bin\Weather.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\InformationBox.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\ContactInfoFrame.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqvip\Bin\QQVip.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqpet\Bin\QQPet.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqshow\Bin\FlashAvatarDll.dll]  [Tencent, 1.45.1.45]
    [C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx]  [Adobe Systems, Inc., 10,0,32,18]
    [D:\Tencent\QQ\Plugin\com.tencent.filetransfer\Bin\FileTransfer.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\MsgMgr.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.mmog\Bin\MMOG.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqgame\Bin\QQGame.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqlive\Bin\QQLive.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqmusic\Bin\QQMusic.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.taotao\Bin\taotao.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.mail\Bin\Mail.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.memo\Bin\Memo.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.gamelife\Bin\GameLife.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.qqring\Bin\QQRing.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.sobar\Bin\SoBar.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.advertisement\Bin\Advertisement.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Plugin\com.tencent.today\Bin\Today.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\Camera.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\SCCore.dll]  [Tencent, 1, 7, 1, 6]
    [D:\Tencent\QQ\Plugin\com.tencent.qqwebsite\Bin\QQWebsite.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\CustomFace.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Tencent\QQ\Bin\LongCnn.dll]  [Tencent, 1, 46, 1590, 0]
    [C:\WINDOWS\system32\shdoclc.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SOGOUPY.IME]  [Sogou.com Inc., 5.0.0.3935]
    [D:\Tencent\QQ\Bin\AddrSearch.dll]  [Tencent, 2, 3, 12, 11]
    [D:\Tencent\QQ\Bin\appcom.dll]  [Tencent, 1, 46, 1590, 0]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360安全中心, 6, 3, 1, 1013]
[PID: 2764 / Administrator][D:\Tencent\QQ\Bin\TXPlatform.exe]  [Tencent, 1, 46, 1590, 0]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 3780 / SYSTEM][D:\Program Files\360\360Safe\deepscan\ZhuDongFangYu.exe]  [360.cn, 3, 2, 2, 1001]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\Program Files\360\360Safe\deepscan\qutmload.dll]  [360安全中心, 6, 2, 0, 1009]
[PID: 3144 / SYSTEM][D:\Program Files\kingsoft\KSM3.0\ksmsvc.exe]  [, 2010,03,14,689]
    [D:\Program Files\kingsoft\KSM3.0\kdump.dll]  [Kingsoft Corporation, 2010,03,26,764]
    [D:\Program Files\kingsoft\KSM3.0\kxestat.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [D:\Program Files\kingsoft\KSM3.0\kxebase.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [D:\Program Files\kingsoft\KSM3.0\scom.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [D:\Program Files\kingsoft\KSM3.0\kxecore\kxelog.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [D:\Program Files\kingsoft\KSM3.0\kxecore\kxecore.dll]  [Kingsoft Corporation, 2009,11,20,309]
    [D:\Program Files\kingsoft\KSM3.0\ksmcorex.dll]  [Kingsoft Corporation, 2010,04,01,789]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\Program Files\kingsoft\KSM3.0\COMRes.dll]  [Microsoft Corporation, 2001.12.4414.258]
    [D:\Program Files\kingsoft\KSM3.0\ksbwsspx.dll]  [Kingsoft Corporation, 2010,04,06,806]
    [D:\Program Files\kingsoft\KSM3.0\kcldrep.dll]  [Kingsoft Corporation, 2010,04,06,807]
    [D:\Program Files\kingsoft\KSM3.0\KSE\ksecorex.dll]  [Kingsoft Corporation, 2010,03,26,86]
    [D:\Program Files\kingsoft\KSM3.0\KSE\kae\kaecore.dat]  [Kingsoft Corporation, 2010,03,18,77]
    [D:\Program Files\kingsoft\KSM3.0\KSE\kae\karchive.dat]  [Kingsoft Corporation, 2010,03,18,77]
    [D:\Program Files\kingsoft\KSM3.0\KSE\kae\kaearcha.dat]  [Kingsoft Corporation, 2010,03,18,77]
    [D:\Program Files\kingsoft\KSM3.0\KSE\kae\kaeolea.dat]  [Kingsoft Corporation, 2010,03,18,77]
    [D:\Program Files\kingsoft\KSM3.0\KSE\kae\kaearchb.dat]  [Kingsoft Corporation, 2010,03,18,77]
    [D:\Program Files\kingsoft\KSM3.0\KSE\ksbwdet2.dll]  [Kingsoft Corporation, 2010,03,30,781]
    [D:\Program Files\kingsoft\KSM3.0\KSE\sqlite.dll]  [Kingsoft Corporation, 2010,03,30,781]
    [D:\Program Files\kingsoft\KSM3.0\ksreng.dll]  [Kingsoft Corporation, 2010,04,02,798]
    [D:\Program Files\kingsoft\KSM3.0\khandler.dll]  [Kingsoft Corporation, 2010,01,28,505]
[PID: 348 / Administrator][D:\SReng2.8.2.1321版\sr-engldr.EXE]  [Smallfrogs Studio, 2.8.2.1321]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\Program Files\360\360Safe\safemon\safemon.dll]  [360安全中心, 6, 3, 1, 1013]
[PID: 3356 / Administrator][D:\SReng2.8.2.1321版\sr-engldr.EXE]  [Smallfrogs Studio, 2.8.2.1321]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\SReng2.8.2.1321版\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
[PID: 2068 / SYSTEM][C:\WINDOWS\system32\wuauclt.exe]  [(Verified) Microsoft Corporation, 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  Error. [C:\WINDOWS\system32\notepad.exe %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 776, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 588, C:\PROGRAM FILES\REALTEK USB WIRELESS LAN DRIVER AND UTILITY\RTWLAN.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2992, C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\RTKBTMNT.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3044, D:\PROGRAM FILES\CHINA MOBILE\G3 EWALK\G3 EWALK.EXE]

==================================
计划任务
[已启用] SogouImeMgr.job
        C:\PROGRA~1\SOGOUI~1\500~1.393\SGTool.exe 

==================================
Windows 安全更新检查
N/A

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]