[CODE] 2010-06-29,17:05:18 System Repair Engineer 2.8.2.1321 Smallfrogs (http://www.KZTechs.com) Windows 7 Ultimate Edition (Build 7600) - 管理权限用户 - 完整功能 以下内容被选中： 所有的启动项目（包括注册表、启动文件夹、服务等） 浏览器加载项 正在运行的进程（包括进程模块信息） 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 进程特权扫描 计划任务 Windows 安全更新检查 API HOOK 隐藏进程 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <"C:\Program Files\Tencent\QQ\Bin\QQ.exe" /background> [(Verified)Tencent Technology(Shenzhen) Company Limited] [(Verified)Microsoft Windows] <"C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"> [(Verified)Google Inc] <"C:\Program Files\FlashGet Network\FlashGet 3\mxhelper.exe"> [(Verified)Trend Media Corporation Limited] <"C:\Program Files\FlashGet Network\FlashGet 3\flashget3.exe" -minimize> [(Verified)Trend Media Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [Creative Technology Ltd.] <"C:\Program Files\Rising\Rav\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] <"C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s> [(Verified)Elaborate Bytes AG] [] [RICOH CO.,LTD.] [(Verified)Microsoft Corporation] <"C:\Program Files\Common Files\Java\Java Update\jusched.exe"> [(Verified)Sun Microsystems, Inc.] <"C:\Program Files\ChinaTelecom\eLive\PlugIns\Safe\beikeloader.exe" -launchedbylogin> [(Verified)Beike Internet Security Technology Co.,Ltd] <"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <> [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] <%SystemRoot%\system32\unregmp2.exe /ShowWMP> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] <"C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI> [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] [(Verified)Microsoft Windows] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Control Panel\Desktop] [File is missing] ================================== 启动文件夹 N/A ================================== 服务 [AMD External Events Utility / AMD External Events Utility][Running/Auto Start] [##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## / Bonjour Service][Running/Auto Start] <"C:\Program Files\Bonjour\mDNSResponder.exe"> [eLive Security Service / eLiveSafe][Running/Auto Start] <"C:\Program Files\ChinaTelecom\eLive\PlugIns\Safe\elivesafe.exe"><贝壳网际（北京）安全技术有限公司> [FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"> [Google 更新服务 (gupdate) / gupdate][Stopped/Auto Start] <"C:\Program Files\Google\Update\GoogleUpdate.exe" /svc> [Google Software Updater / gusvc][Stopped/Manual Start] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> [InstallDriver Table Manager / IDriverT][Stopped/Manual Start] <"C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe"> [Machine Debug Manager / MDM][Running/Auto Start] <"C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"> [Panda IManager Service / PSIMSVC][Running/Auto Start] [Rav Service / RsRavMon][Running/Auto Start] <"C:\Program Files\Rising\Rav\RavMonD.exe"> [Rising Vista Scanner / RsVScanner][Running/Auto Start] [Themes / Themes][Running/Auto Start] %SystemRoot%\system32\themeservice.dll> [Tencent Software Update Service / TSUSVC][Stopped/Auto Start] <"C:\Program Files\Tencent\QQSoftMgr\1.0.338.203\TencentUpdateSvc.exe" -run> ================================== 驱动程序 [adp94xx / adp94xx][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\adp94xx.sys> [adpahci / adpahci][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\adpahci.sys> [adpu320 / adpu320][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\adpu320.sys> [aic78xx / aic78xx][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\djsvs.sys> [aliide / aliide][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\aliide.sys> [amdsata / amdsata][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\amdsata.sys> [amdsbs / amdsbs][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\amdsbs.sys> [amdxata / amdxata][Running/Boot Start] <\SystemRoot\system32\DRIVERS\amdxata.sys> [arc / arc][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\arc.sys> [arcsas / arcsas][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\arcsas.sys> [atikmdag / atikmdag][Running/Manual Start] [Broadcom NetXtreme II VBD / b06bdrv][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\bxvbdx.sys> [Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 / b57nd60x][Stopped/Manual Start] [Brother USB Mass-Storage Lower Filter Driver / BrFiltLo][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\BrFiltLo.sys> [Brother USB Mass-Storage Upper Filter Driver / BrFiltUp][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\BrFiltUp.sys> [Brother MFC Serial Port Interface Driver (WDM) / Brserid][Stopped/Manual Start] <\SystemRoot\System32\Drivers\Brserid.sys> [Brother WDM Serial driver / BrSerWdm][Stopped/Manual Start] <\SystemRoot\System32\Drivers\BrSerWdm.sys> [Brother MFC USB Fax Only Modem / BrUsbMdm][Stopped/Manual Start] <\SystemRoot\System32\Drivers\BrUsbMdm.sys> [Brother MFC USB Serial WDM Driver / BrUsbSer][Stopped/Manual Start] <\SystemRoot\System32\Drivers\BrUsbSer.sys> [cmdide / cmdide][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\cmdide.sys> [Intel(R) PRO/1000 PCI Express Network Connection Driver / e1express][Running/Manual Start] [Broadcom NetXtreme II 10 GigE VBD / ebdrv][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\evbdx.sys> [ElbyCDIO Driver / ElbyCDIO][Running/System Start] [elxstor / elxstor][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\elxstor.sys> [Hauppauge Consumer Infrared Receiver / hcw85cir][Stopped/Manual Start] <\SystemRoot\system32\drivers\hcw85cir.sys> [hookcont / hookcont][Running/System Start] [hooksys / hooksys][Running/System Start] [HpSAMD / HpSAMD][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\HpSAMD.sys> [HSF_DPV / HSF_DPV][Running/Manual Start] [HSXHWBS2 / HSXHWBS2][Running/Manual Start] [Huawei DataCard USB Modem and USB Serial / hwdatacard][Stopped/Manual Start] [iaStorV / iaStorV][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\iaStorV.sys> [iirsp / iirsp][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\iirsp.sys> [LSI_FC / LSI_FC][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\lsi_fc.sys> [LSI_SAS / LSI_SAS][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\lsi_sas.sys> [LSI_SAS2 / LSI_SAS2][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\lsi_sas2.sys> [LSI_SCSI / LSI_SCSI][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\lsi_scsi.sys> [mdmxsdk / mdmxsdk][Running/Auto Start] [megasas / megasas][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\megasas.sys> [MegaSR / MegaSR][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\MegaSR.sys> [nfrd960 / nfrd960][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\nfrd960.sys> [nvraid / nvraid][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\nvraid.sys> [nvstor / nvstor][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\nvstor.sys> [Provides a software interface to control audio effects of OEM003 camera. / OEM03Afx][Running/Manual Start] <\??\C:\Windows\system32\Drivers\OEM03Afx.sys> [Creative Camera OEM003 Video VFX Driver / OEM03Vfx][Running/Manual Start] [Creative Camera OEM003 Driver / OEM03Vid][Running/Manual Start] [ACER USB Device for Legacy Serial Communication / qcusbser][Stopped/Manual Start] [ql2300 / ql2300][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\ql2300.sys> [ql40xx / ql40xx][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\ql40xx.sys> [rsassist / rsassist][Running/Auto Start] [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys> [SiSRaid2 / SiSRaid2][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\SiSRaid2.sys> [SiSRaid4 / SiSRaid4][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\sisraid4.sys> [sptd / sptd][Stopped/Boot Start] <\SystemRoot\System32\Drivers\sptd.sys> [SrvHsfPCI / SrvHsfPCI][Stopped/Manual Start] [SrvHsfV92 / SrvHsfV92][Stopped/Manual Start] [SrvHsfWinac / SrvHsfWinac][Stopped/Manual Start] [stexstor / stexstor][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\stexstor.sys> [tcphoc / tcphoc][Stopped/Manual Start] <\??\C:\Program Files\Thunder Network\Thunder\Program\tcphoc.sys> [VClone / VClone][Running/Manual Start] [viaide / viaide][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\viaide.sys> [vsmraid / vsmraid][Stopped/Manual Start] <\SystemRoot\system32\DRIVERS\vsmraid.sys> [winachsf / winachsf][Running/Manual Start] ================================== 浏览器加载项 [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} [Adobe PDF Link Helper] {18DF081C-E8AD-4283-A596-FA578C2EBDC3} [DetectAddin Class] {2D90D33C-DE76-42D0-9040-E4466DDC24AC} [BOC ProcessProtect Class] {776B71E2-B4CC-4C94-BC7C-09103AA690B6} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [Windows Live 登录帮助程序] {9030D464-4C02-4ABF-8ECC-5164760863C6} [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [FlashGetBHO] {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} [CITICS ProcessProtect Class] {C37F9D60-975D-41f2-A745-4DC934D319AA} [Java(tm) Plug-In 2 SSV Helper] {DBC80044-A445-435b-BC74-9C25C1C588A9} [] {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} <, > [] {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} <, > [查看网页全部图片] {548BF84E-9665-47f9-B635-7380F8943E90} <, > [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [Google Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} [EditCtrl Class] {488A4255-3236-44B3-8F27-FA1AECAA8844} [InfoSecNetSign Class] {62B938C4-4190-4F37-8CF0-A92B0A91CC77} [SfEdit32 Control] {69A5F9C4-01CB-470B-8161-CE67313E3CF4} [Java Plug-in 1.6.0_20] {8AD9C840-044E-11D1-B3E9-00805F499D93} [AxSubmitControl Class] {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} [Submit Class] {A3CD7F74-93C9-4BC4-B892-CCDF1514F714} [InfoSecICBCNetSign Class] {B1FBC1AD-5644-4084-882A-0F8BA85E7506} [Java Plug-in 1.6.0_20] {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [Java Plug-in 1.6.0_20] {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [ActiveXshow.workflowshow] {DD3E25C0-DD27-443C-85F3-AAA74BC8917C} [safeInput Class] {ECCBA953-80E5-11D3-9285-0080ADB811C5} [luaisheng.runocx] {FC5B9BE9-134C-42B2-9F52-B4775660EEBB} [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <, > [FG3DownMgr] {10245650-5917-4FF8-BED6-ABB91DD73E47} [IFlashGetNetscapeEx Class] {116BA71C-8187-4F15-9A1F-C9D6289155D1} [QueryFA Control] {1312D009-FC47-422F-AF15-84C2FCB8E677} [Adobe PDF Link Helper] {18DF081C-E8AD-4283-A596-FA578C2EBDC3} [WWPicUploadCtrl Class] {1D63232D-4F15-4A42-890D-EE617AA1537D} [InstallHelper Class] {1DABF8D5-8430-4985-9B7F-A30E53D709B3} [iTrusPTA Class] {1E0DFFCF-27FF-4574-849B-55007349FEDA} [HallToolkit Class] {1E36C446-29F0-4773-A3FB-59C5501446EB} [Google Toolbar] {2318C2B1-4965-11D4-9B18-009027A5CD4F} [HTML Document] {25336920-03F9-11CF-8FD0-00AA00686F13} [XML DOM Document] {2933BF90-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [JetCarNetscape Class] {2974c985-8151-4de5-b23c-b875f0a8522f} [DetectAddin Class] {2D90D33C-DE76-42D0-9040-E4466DDC24AC} [] {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} <, > [] {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} <, > [Crypto Class] {35E3E823-A0C6-42F5-B9A4-C290C6169527} > [XML Document] {48123BC4-99D9-11D1-A6B3-00C04FD91555} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [EditCtrl Class] {488A4255-3236-44B3-8F27-FA1AECAA8844} [HHCtrl Object] {52A2AAAE-085D-4187-97EA-8C30DB990436} <%SystemRoot%\System32\hhctrl.ocx, (Signed) N/A> [] {548BF84E-9665-47F9-B635-7380F8943E90} <, > [isInstalled Class] {5852F5ED-8BF4-11D4-A245-0080C6F74284} [WangWangX Class] {5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} [InfoSecNetSign Class] {62B938C4-4190-4F37-8CF0-A92B0A91CC77} [SfEdit32 Control] {69A5F9C4-01CB-470B-8161-CE67313E3CF4} [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <%SystemRoot%\system32\wmp.dll, (Signed) N/A> [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [BOC ProcessProtect Class] {776B71E2-B4CC-4C94-BC7C-09103AA690B6} [XDownloaddManager Class] {802F530B-A8F6-4631-AE49-6BACAAC6373E} [Microsoft Web Browser] {8856F961-340A-11D0-A96B-00C04FD705A2} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [XML HTTP 4.0] {88D969C5-F192-11D4-A65F-0040963251E5} [XML DOM Document 5.0] {88D969E5-F192-11D4-A65F-0040963251E5} [XML DOM Document 6.0] {88D96A05-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A> [XML HTTP 6.0] {88D96A0A-F192-11D4-A65F-0040963251E5} <%SystemRoot%\System32\msxml6.dll, (Signed) N/A> [Java Plug-in 1.6.0_20] {8AD9C840-044E-11D1-B3E9-00805F499D93} [AxSubmitControl Class] {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} [CheckPayGate Control] {8E10BB5A-2973-4BEF-BF32-980CE7CF4CBB} [SSOForPTLogin Class] {8FC1EE75-72B3-4A23-B987-2B1C4C8A611B} [Windows Live 登录帮助程序] {9030D464-4C02-4ABF-8ECC-5164760863C6} [] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, > [OFrameObject Class] {9701758C-4373-482E-B13C-776C048EC890} [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [ContainerForm Control] {9EBB4193-D192-4433-8426-2EEAE8E0A9EA} [VersionDetector Class] {9EFF1953-9694-47B1-AEF6-B2A3FE8BFE9B} [Submit Class] {A3CD7F74-93C9-4BC4-B892-CCDF1514F714} [APlayer Control] {A9322148-C691-4B9D-91FC-B9C461DBE9DD} [RMGetLicense Class] {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} [Google Toolbar Helper] {AA58ED58-01DD-4D91-8333-CF10577473F7} [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [FlashGetBHO] {B070D3E3-FEC0-47D9-8E8A-99D4EEB3D3B0} [InfoSecICBCNetSign Class] {B1FBC1AD-5644-4084-882A-0F8BA85E7506} [YGQueryCtrlX Control] {B68A65C1-662B-41D1-B39B-EDC70CD63589} [CITICS ProcessProtect Class] {C37F9D60-975D-41F2-A745-4DC934D319AA} [PrintCtl Class] {CA03A5A8-9890-49BE-BA4A-8C524EB06441} [Deployment Toolkit] {CAFEEFAC-DEC7-0000-0001-ABCDEFFEDCBA} [QQPlayerCtrl Class] {CD108273-D434-43E6-AA90-1469F97EB398} [Microsoft Url Search Hook] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [远光FMIS查询表格组件] {D8C8D671-A705-4C41-B418-2747556EFC53} [Java(tm) Plug-In 2 SSV Helper] {DBC80044-A445-435B-BC74-9C25C1C588A9} [ActiveXshow.workflowshow] {DD3E25C0-DD27-443C-85F3-AAA74BC8917C} [Microsoft Silverlight] {DFEAF541-F3E1-4C24-ACAC-99C30715084A} [PlayerCtrl Class] {E05BC2A3-9A46-4A32-80C9-023A473F5B23} [safeInput Class] {ECCBA953-80E5-11D3-9285-0080ADB811C5} [TimwpDll.TimwpCheck] {ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4} [XML HTTP Request] {ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [XML HTTP] {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\System32\msxml3.dll, (Signed) N/A> [luaisheng.runocx] {FC5B9BE9-134C-42B2-9F52-B4775660EEBB} [Google 边栏评注...] [上传到淘江湖相册] [使用快车3下载] [使用快车3下载全部链接] [使用迅雷下载] [使用迅雷下载全部链接] [使用迅雷查看图片] [使用迅雷离线下载] [导出到 Microsoft Excel(&X)] [添加为阿里旺旺表情] ================================== 正在运行的进程 [PID: 272 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 452 / SYSTEM][C:\Windows\system32\csrss.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 524 / SYSTEM][C:\Windows\system32\wininit.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 532 / SYSTEM][C:\Windows\system32\csrss.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 572 / SYSTEM][C:\Windows\system32\services.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 592 / SYSTEM][C:\Windows\system32\lsass.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 600 / SYSTEM][C:\Windows\system32\lsm.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 664 / SYSTEM][C:\Windows\system32\winlogon.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 756 / SYSTEM][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 840 / NETWORK SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 952 / SYSTEM][C:\Windows\system32\atiesrxx.exe] [AMD, 6.14.11.1046] [PID: 1004 / LOCAL SERVICE][C:\Windows\System32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 1044 / SYSTEM][C:\Windows\System32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 1072 / SYSTEM][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [c:\windows\system32\themeservice.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 1268 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 1404 / SYSTEM][C:\Windows\system32\atieclxx.exe] [AMD, 6.14.11.1046] [C:\Windows\system32\atiadlxx.dll] [Advanced Micro Devices, Inc., 6.14.10.1053] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 1468 / NETWORK SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 1624 / SYSTEM][C:\Windows\System32\spoolsv.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Windows\System32\rc4mon.dll] [RICOH CO.,Ltd., 3, 3, 1, 0] [C:\Windows\System32\RPNV2MON.DLL] [RICOH, 1, 7, 0, 3] [C:\Windows\System32\rpnv2job.dll] [RICOH, 1, 7, 0, 3] [C:\Windows\System32\rpnv2CN.dll] [RICOH COMPANY, LTD., 1,1,4,4] [C:\Windows\system32\PMObservINP.dll] [RICOH CO.,LTD., 1, 2, 0, 0] [C:\Windows\system32\spool\PRTPROCS\W32X86\HP1006S.DLL] [Hewlett-Packard , 7.0.1.11101] [C:\Windows\PMCommon.dll] [RICOH CO., LTD., 1, 0, 0, 2] [C:\Windows\system32\spool\DRIVERS\W32X86\3\HP1006U.DLL] [Hewlett-Packard , 7.0.1.11101 (...)] [C:\Windows\system32\spool\DRIVERS\W32X86\3\HP1006L.DLL] [Hewlett-Packard , 7.0.1.11101] [C:\Windows\system32\spool\DRIVERS\W32X86\3\HP1006C.DLL] [Hewlett-Packard , 7.0.1.11101] [C:\Windows\System32\RTCPF.dll] [, 1, 3, 0, 0] [C:\Windows\System32\rpmjbCN.dll] [RICOH COMPANY,LTD., 2.1.0.3] [PID: 1656 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 1808 / SYSTEM][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 1828 / SYSTEM][C:\Program Files\Bonjour\mDNSResponder.exe] [Apple Computer, Inc., 1,0,3,1] [PID: 1896 / SYSTEM][C:\Program Files\ChinaTelecom\eLive\PlugIns\Safe\elivesafe.exe] [贝壳网际（北京）安全技术有限公司, 2009.10.11.35] [C:\Program Files\ChinaTelecom\eLive\PlugIns\Safe\elivebeike.dll] [贝壳网际（北京）安全技术有限公司, 2010.3.4.42] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 1932 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 1968 / SYSTEM][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 400 / SYSTEM][C:\Windows\system32\inetsrv\inetinfo.exe] [(Verified) Microsoft Corporation, 7.5.7600.16385 (win7_rtm.090713-1255)] [PID: 688 / SYSTEM][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe] [Microsoft Corporation, 7.10.3077] [C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\2052\mdmui.dll] [Microsoft Corporation, 7.10.3077] [PID: 1360 / NETWORK SERVICE][C:\Program Files\Microsoft SQL Server\90\DTS\Binn\MsDtsSrvr.exe] [Microsoft Corporation, 9.00.4053.00] [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5ba3bf5367fc012300c6566f20cb7f54\System.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\e71959f4ec6eb386889050ac139835c7\System.ServiceProcess.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea1\ATL80.DLL] [Microsoft Corporation, 8.00.50727.4053] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\aadfdc0e7d9181a98d667a52c3c35601\System.Configuration.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5dd9f783008543df3e642ff1e99de4e8\System.Xml.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Program Files\Microsoft SQL Server\90\DTS\Binn\Microsoft.SqlServer.DtsServer.Interop.dll] [ , 9.0.242.0] [C:\Windows\assembly\GAC_32\Microsoft.SqlServer.DTSRuntimeWrap\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.DTSRuntimeWrap.dll] [ , 9.0.242.0] [PID: 2072 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe] [Microsoft Corporation, 12.0.7822.0] [PID: 2096 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe] [Microsoft Corporation, 2005.090.4053.00] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea1\ATL80.DLL] [Microsoft Corporation, 8.00.50727.4053] [PID: 2488 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL.2\OLAP\bin\msmdsrv.exe] [Microsoft Corporation, 2005.090.4053.00] [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [PID: 2508 / LOCAL SERVICE][C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe] [Microsoft Corporation, 3.0.4506.4926 (NetFXw7.030729-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5ba3bf5367fc012300c6566f20cb7f54\System.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\ddb4e602ccad9160f05ac400fcacc431\SMSvcHost.ni.exe] [Microsoft Corporation, 3.0.4506.4926 (NetFXw7.030729-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\81282964925798589021d3e0e6de779f\SMDiagnostics.ni.dll] [Microsoft Corporation, 3.0.4506.4926 (NetFXw7.030729-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\e71959f4ec6eb386889050ac139835c7\System.ServiceProcess.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\8cdf06a9eeb0f4a3f64b1eaf38c6c13a\System.ServiceModel.ni.dll] [Microsoft Corporation, 3.0.4506.4926 (NetFXw7.030729-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\aadfdc0e7d9181a98d667a52c3c35601\System.Configuration.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5dd9f783008543df3e642ff1e99de4e8\System.Xml.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\f3d145b35bc659c63d4c15df62c2c178\System.IdentityModel.ni.dll] [Microsoft Corporation, 3.0.4506.4926 (NetFXw7.030729-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\39e53f507d9cbc5c10a2f47c4b0d09dd\System.Runtime.Serialization.ni.dll] [Microsoft Corporation, 3.0.4506.4926 (NetFXw7.030729-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\3871fc2b96345aa6f3be81d9e3c97160\System.Web.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [PID: 2664 / NETWORK SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 2736 / SYSTEM][C:\Program Files\Panda Software\Panda Antivirus 2007\pavdr.exe] [N/A, ] [PID: 2756 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL.3\Reporting Services\ReportServer\bin\ReportingServicesService.exe] [Microsoft Corporation, 9.00.4053.00] [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5ba3bf5367fc012300c6566f20cb7f54\System.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\e71959f4ec6eb386889050ac139835c7\System.ServiceProcess.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea1\ATL80.DLL] [Microsoft Corporation, 8.00.50727.4053] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\3871fc2b96345aa6f3be81d9e3c97160\System.Web.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\aadfdc0e7d9181a98d667a52c3c35601\System.Configuration.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5dd9f783008543df3e642ff1e99de4e8\System.Xml.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [PID: 2764 / SYSTEM][C:\Program Files\Panda Software\Panda Antivirus 2007\psimreal.exe] [N/A, ] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 2896 / SYSTEM][C:\Program Files\Rising\Rav\scannerd.exe] [Beijing Rising Technology Co., Ltd., 20.0.0.23] [PID: 2928 / SYSTEM][C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe] [Microsoft Corporation, 2005.090.4035.00] [PID: 2960 / SYSTEM][C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLAGENT90.EXE] [Microsoft Corporation, 2005.090.4035.00] [C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.4927 (NetFXspW7.050727-4900)] [PID: 3040 / SYSTEM][C:\Windows\system32\conhost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 3072 / SYSTEM][C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe] [Microsoft Corporation, 2005.090.4035.00] [PID: 3096 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 3208 / SYSTEM][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 3756 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 3916 / LOCAL SERVICE][C:\Windows\system32\WUDFHost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 3476 / 刘淼][C:\Windows\system32\taskhost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\System32\l3codeca.acm] [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0401] [PID: 3652 / 刘淼][C:\Windows\system32\Dwm.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\atidxx32.dll] [ATI Technologies Inc. , 8.17.10.0240] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [PID: 3800 / 刘淼][C:\Windows\Explorer.EXE] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Windows\System32\l3codeca.acm] [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0401] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\system32\FXSAPI.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Thunder Network\Thunder\ComDlls\ATL71.DLL] [Microsoft Corporation, 7.10.6101.0] [C:\Program Files\Thunder Network\Thunder\ComDlls\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\Program Files\Thunder Network\Thunder\ComDlls\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [深圳市迅雷网络技术有限公司, 5,9,17,1334] [C:\Users\Public\Thunder Network\Thunder_FC22B036-4AD2-46B7-A57F-808A179664D3_\Components\ResWorker\DsBho_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 26] [C:\Users\Public\Thunder Network\Thunder_FC22B036-4AD2-46B7-A57F-808A179664D3_\Components\ResWorker\DataProcessor_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 20] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [深圳市迅雷网络技术有限公司, 5,9,17,1334] [PID: 1152 / 刘淼][C:\Windows\OEM03Mon.exe] [Creative Technology Ltd., 1.00.03.00] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [PID: 2808 / 刘淼][C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe] [Elaborate Bytes AG, 5, 4, 3, 3] [C:\Windows\system32\ElbyVCD.dll] [Elaborate Bytes AG, 5, 4, 3, 5] [C:\Windows\system32\ElbyCDIO.dll] [Elaborate Bytes AG, 6, 0, 9, 0] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [PID: 2140 / 刘淼][C:\Windows\WindowsMobile\wmdc.exe] [Microsoft Corporation, 6.1.6965.0] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [PID: 1636 / 刘淼][C:\Program Files\Common Files\Java\Java Update\jusched.exe] [Sun Microsystems, Inc., 2.0.2.1] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 3832 / 刘淼][C:\Program Files\Rising\AntiSpyware\RSTray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.29] [C:\Program Files\Rising\AntiSpyware\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Program Files\Rising\AntiSpyware\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.33] [C:\Program Files\Rising\AntiSpyware\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\AntiSpyware\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\AntiSpyware\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\AntiSpyware\rscommon.dll] [Beijing Rising Information Technology Co., Ltd., 20.0.1.1] [C:\Program Files\Rising\AntiSpyware\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\AntiSpyware\RsXML.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\AntiSpyware\rsxml1.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2] [C:\Program Files\Rising\AntiSpyware\pngdll.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5] [C:\Program Files\Rising\AntiSpyware\runiep.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.65] [C:\Program Files\Rising\AntiSpyware\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.11] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\AntiSpyware\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Program Files\Rising\AntiSpyware\pscan.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.1.35] [C:\Program Files\Rising\AntiSpyware\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 1608 / 刘淼][C:\Program Files\Windows Sidebar\sidebar.exe] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [PID: 4000 / LOCAL SERVICE][C:\Windows\system32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 2228 / 刘淼][C:\Program Files\FlashGet Network\FlashGet 3\mxhelper.exe] [, 1, 0, 0, 9] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [PID: 3188 / SYSTEM][C:\Windows\system32\SearchIndexer.exe] [(Verified) Microsoft Corporation, 7.00.7600.16385 (win7_rtm.090713-1255)] [PID: 4744 / SYSTEM][C:\Windows\System32\svchost.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 4020 / 刘淼][C:\Program Files\Windows Live\Messenger\msnmsgr.exe] [Microsoft Corporation, 14.0.8089.0726] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Windows Live\Messenger\CRYPTNET.dll] [N/A, ] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Windows\system32\atiumdag.dll] [ATI Technologies Inc. , 8.14.10.0708] [C:\Windows\system32\atiumdva.dll] [Advanced Micro Devices, Inc. , 8.14.10.0239] [C:\Windows\System32\l3codeca.acm] [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0401] [C:\Windows\system32\Macromed\Flash\Flash10h.ocx] [Adobe Systems, Inc., 10,1,53,64] [PID: 4860 / 刘淼][C:\Program Files\Windows Live\Contacts\wlcomm.exe] [Microsoft Corporation, 14.0.8064.0206] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 4620 / 刘淼][C:\Windows\System32\dinotify.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [PID: 5488 / SYSTEM][C:\Windows\system32\UI0Detect.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 4828 / SYSTEM][C:\Program Files\Rising\Rav\RavMonD.exe] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17] [C:\Program Files\Rising\Rav\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9] [C:\Program Files\Rising\Rav\MonBase.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\Rslog.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.41] [C:\Program Files\Rising\Rav\mondrv.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\defmon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 46] [C:\Program Files\Rising\Rav\moncom08.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\MonRule.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10] [C:\Program Files\Rising\Rav\FileMon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29] [C:\Program Files\Rising\Rav\MailMon.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22] [C:\Program Files\Rising\Rav\HookWeb.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12] [C:\Program Files\Rising\Rav\rsindent.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\taskplug.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10] [C:\Program Files\Rising\Rav\scansrvp.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.7] [C:\Program Files\Rising\Rav\cnt08.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Hooksys.dll] [Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 3] [C:\Program Files\Rising\Rav\ProcCom.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\RsCommX2.dll] [Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20] [C:\Program Files\Rising\Rav\HookCont.dll] [Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 1] [C:\Program Files\Rising\Rav\BACore.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 39] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\bawhite.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\RSStore.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.22] [C:\Program Files\Rising\Rav\ScanAdd.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [C:\Program Files\Rising\Rav\NComm2.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\ScanSrv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.3] [C:\Program Files\Rising\Rav\scanpe.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10] [C:\Program Files\Rising\Rav\pearc.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\ur000.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\urutils.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\revm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\ffr.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\nvfile.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\scanexec.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\unexe.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\scanex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 80] [C:\Program Files\Rising\Rav\extmail.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\scantj.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\methodex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\heurex.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17] [C:\Program Files\Rising\Rav\pecompd.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5] [C:\Program Files\Rising\Rav\ur001.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\scansct.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Program Files\Rising\Rav\ur023.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\ur004.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\ur025.dat] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\ScanRavT.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [C:\Program Files\Rising\Rav\ScanBT.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.21] [C:\Program Files\Rising\Rav\ScanStub.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\Program Files\Rising\Rav\extsfx.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\SysMail.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\Program Files\Rising\Rav\extole.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\extarch.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9] [C:\Program Files\Rising\Rav\extcomp.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3] [C:\Program Files\Rising\Rav\scriptci.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\scanmac.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\extalgo.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [PID: 6384 / 刘淼][C:\Program Files\Rising\Rav\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 22.0.0.11] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\Rav\comserv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.15] [C:\Program Files\Rising\Rav\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\ScanEvnt.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.3] [C:\Program Files\Rising\Rav\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 57] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\Program Files\Rising\Rav\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.7] [C:\Program Files\Rising\Rav\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22] [C:\Program Files\Rising\Rav\mruleui.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7] [C:\Program Files\Rising\Rav\MonTray.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.74] [C:\Program Files\Rising\Rav\RavITray.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\scanleak.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6] [C:\Program Files\Rising\Rav\ravppops.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 6708 / 刘淼][C:\Program Files\Foxmail\Foxmail.exe] [Tencent Inc., 6, 15, 201, 22] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Foxmail\Skin\TXScrollbar.dll] [N/A, ] [C:\Program Files\Foxmail\3rdParty\alarm.dll] [N/A, ] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Program Files\Foxmail\3rdParty\Plugins\IM\Rss.dll] [N/A, ] [C:\Program Files\Foxmail\3rdParty\Plugins\IM\rtx.dll] [N/A, ] [C:\Program Files\Foxmail\3rdParty\punylib.dll] [CNNIC, 1, 0, 0, 3] [PID: 7444 / 刘淼][C:\Program Files\Alisoft\WangWang\AliIM.exe] [Alibaba software (Shanghai) Corporation., 1, 0, 0, 1] [C:\Program Files\Alisoft\WangWang\GUIBase.dll] [Alisoft (Shanghai) Co., Ltd., 1, 0, 0,260] [C:\Program Files\Alisoft\WangWang\RvCore.DLL] [Alisoft (Shanghai) Co., Ltd., 1.0.0.260] [C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.4053_none_d1c738ec43578ea1\ATL80.DLL] [Microsoft Corporation, 8.00.50727.4053] [C:\Program Files\Alisoft\WangWang\UpdateAssist.dll] [Alibaba software (Shanghai) Corporation., 1, 0, 0, 6] [C:\Program Files\Alisoft\WangWang\alilog.dll] [Copyright 2009 阿里软件（上海）有限公司., 1, 0, 0,231] [C:\Program Files\Alisoft\WangWang\log4cpp.dll] [Bastiaan Bakker, LifeLine Networks bv. 阿里软件（上海）有限公司., 0, 3, 2,228] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Program Files\Alisoft\WangWang\UiBrowser.dll] [TODO: <公司名>, 1.0.0.1] [C:\Program Files\Alisoft\WangWang\wwutils.DLL] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Program Files\Alisoft\WangWang\pcre.dll] [N/A, ] [C:\Program Files\Alisoft\WangWang\LIBEAY32.dll] [N/A, ] [C:\Program Files\Alisoft\WangWang\protocol.dll] [N/A, ] [C:\Program Files\Alisoft\WangWang\wwparams.dll] [N/A, ] [C:\Program Files\Alisoft\WangWang\WWUIUnits.dll] [N/A, ] [C:\Program Files\Alisoft\WangWang\rvnw.dll] [Alisoft (Shanghai) Co., Ltd., 1, 0, 0,260] [C:\Program Files\Alisoft\WangWang\rvwindow.dll] [Alisoft (Shanghai) Co., Ltd., 1, 0, 0,258] [C:\Program Files\Alisoft\WangWang\xparam.dll] [Alisoft (Shanghai) Co., Ltd., 1, 0, 0,260] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Alisoft\WangWang\imbiz.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Program Files\Alisoft\WangWang\P2PEnv.dll] [N/A, ] [C:\Program Files\Alisoft\WangWang\imnet.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Program Files\Alisoft\WangWang\SSLEAY32.dll] [The OpenSSL Project, http://www.openssl.org/, 0.9.8e] [C:\Program Files\Alisoft\WangWang\GUICore.dll] [Alisoft (Shanghai) Co., Ltd., 1.0.0.260] [C:\Program Files\Alisoft\WangWang\uacclient.dll] [TODO: , 1.0.0.1] [C:\Program Files\Alisoft\WangWang\WWApplication.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Program Files\Alisoft\WangWang\wwsdk.dll] [Alibaba software (Shanghai) Corporation., 3.1.0.0] [C:\Program Files\Alisoft\WangWang\imdb.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Program Files\Alisoft\WangWang\rvcomlib.dll] [Alisoft (Shanghai) Co., Ltd., 1.0.0.260] [C:\Program Files\Alisoft\WangWang\ContactInfoAdapter.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Program Files\Alisoft\WangWang\wwsdkcom.dll] [Alibaba software (Shanghai) Corporation., 3.1.0.0] [C:\Program Files\Alisoft\WangWang\SDKDB.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Windows\system32\aliedit\aliedit.dll] [, 2, 3, 0, 2] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Program Files\Alisoft\WangWang\alinet.dll] [Alisoft (Shanghai) Co., Ltd., 1, 0, 0,260] [C:\Program Files\Alisoft\WangWang\Peripheral.dll] [TODO: <公司名>, 1.0.0.1] [C:\Program Files\Alisoft\WangWang\filetransbiz.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.4] [C:\Program Files\Alisoft\WangWang\ww_network2.dll] [Alibaba software (Shanghai) Corporation., 2, 1, 0, 8] [C:\Program Files\Alisoft\WangWang\P2PBiz.dll] [Alibaba software (Shanghai) Corporation., 1, 0, 0, 1] [C:\Program Files\Alisoft\WangWang\AVTransBiz.dll] [TODO: <公司名>, 1.0.0.1] [C:\Program Files\Alisoft\WangWang\GraffitiGUI.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.0] [C:\Program Files\Alisoft\WangWang\Useful_services.dll] [TODO: <公司名>, 1.0.0.1] [C:\Program Files\Alisoft\WangWang\SysNotify.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Program Files\Alisoft\WangWang\RICHED20.DLL] [Microsoft Corporation, 5.30.23.1221] [C:\Program Files\Alisoft\WangWang\RichEditHandler.dll] [TODO: <公司名>, 1.0.0.1] [C:\Program Files\Alisoft\WangWang\EmotionConfig.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [C:\Windows\System32\l3codeca.acm] [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0401] [C:\Program Files\Alisoft\WangWang\zlibwapi.dll] [, 1.2.1.0] [C:\Windows\system32\atiumdag.dll] [ATI Technologies Inc. , 8.14.10.0708] [C:\Windows\system32\atiumdva.dll] [Advanced Micro Devices, Inc. , 8.14.10.0239] [C:\Program Files\Alisoft\WangWang\PopupEmotionMgr.dll] [Alibaba software (Shanghai) Corporation., 1.0.0.1] [PID: 7452 / 刘淼][C:\Program Files\Rising\Rav\rsmain.exe] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\Rav\rspalmgr.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.24] [C:\Program Files\Rising\Rav\RSXML.DLL] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 57] [C:\Program Files\Rising\Rav\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.1] [C:\Program Files\Rising\Rav\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.7] [C:\Program Files\Rising\Rav\ravppops.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21] [C:\Program Files\Rising\Rav\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\ravpsafe.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.31] [C:\Program Files\Rising\Rav\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.4] [C:\Program Files\Rising\Rav\pubcfg.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.57] [C:\Program Files\Rising\Rav\rsscanbd.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2] [C:\Program Files\Rising\Rav\rsw7pv.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.10] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.0] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4] [C:\Program Files\Rising\Rav\ravxpage.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 54] [C:\Program Files\Rising\Rav\ravxmons.dll] [Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 16] [C:\Program Files\Rising\Rav\ravptool.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.15] [C:\Program Files\Rising\Rav\log2file.dll] [Beijing Rising Information Technology Co., Ltd., 22.0.0.15] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Rising\Rav\htmllib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 5048 / NETWORK SERVICE][C:\Program Files\Windows Media Player\wmpnetwk.exe] [Microsoft Corporation, 12.0.7600.16385 (win7_rtm.090713-1255)] [PID: 7748 / 刘淼][C:\Program Files\Maxthon3\Bin\Maxthon.exe] [Maxthon International ltd., 3, 0, 8, 17] [C:\Program Files\Maxthon3\Bin\MxMsg.dll] [Maxthon, 1, 0, 0, 1] [C:\Program Files\Maxthon3\Bin\MxUI.dll] [Maxthon International ltd., 3, 3, 1, 44] [C:\Program Files\Maxthon3\Bin\MxHttpRq.dll] [Maxthon International ltd., 2, 0, 0, 11] [C:\Program Files\Maxthon3\Bin\MxTool.dll] [Maxthon International ltd., 1, 2, 0, 6] [C:\Program Files\Maxthon3\Bin\MxCrashCatch.dll] [Maxthon International ltd., 2, 0, 0, 28] [C:\Program Files\Maxthon3\Bin\MxCoreMan.DLL] [Maxthon International ltd., 0, 0, 0, 54] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Program Files\Maxthon3\Bin\MxResData.DLL] [Maxthon International ltd., 1, 0, 0, 111] [C:\Program Files\Maxthon3\Bin\MxIPC.dll] [Maxthon International ltd., 1, 1, 0, 16] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Maxthon3\Bin\Maxzlib.dll] [, 1,2,3,1] [C:\Program Files\Maxthon3\Core\Webkit\MxWebkit.dll] [Maxthon International ltd., 1, 0, 3, 73] [C:\Program Files\Maxthon3\Bin\mxdb.dll] [Maxthon International ltd, 3, 6, 2, 3] [C:\Program Files\Maxthon3\Modules\MxSiteIcon\MxSiteIcon.dll] [Maxthon International ltd., 1, 0, 0, 420] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 4428 / 刘淼][C:\Program Files\Maxthon3\Bin\Maxthon.exe] [Maxthon International ltd., 3, 0, 8, 17] [C:\Program Files\Maxthon3\Bin\MxMsg.dll] [Maxthon, 1, 0, 0, 1] [C:\Program Files\Maxthon3\Bin\MxUI.dll] [Maxthon International ltd., 3, 3, 1, 44] [C:\Program Files\Maxthon3\Bin\MxHttpRq.dll] [Maxthon International ltd., 2, 0, 0, 11] [C:\Program Files\Maxthon3\Bin\MxTool.dll] [Maxthon International ltd., 1, 2, 0, 6] [C:\Program Files\Maxthon3\Bin\MxCrashCatch.dll] [Maxthon International ltd., 2, 0, 0, 28] [C:\Program Files\Maxthon3\Bin\MxCoreMan.DLL] [Maxthon International ltd., 0, 0, 0, 54] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Program Files\Maxthon3\Bin\MxResMgr.dll] [Maxthon International ltd., 1, 2, 0, 45] [C:\Program Files\Maxthon3\Bin\MxAccount3.dll] [Maxthon International ltd., 1, 0, 0, 9] [C:\Program Files\Maxthon3\Bin\MxIPC.dll] [Maxthon International ltd., 1, 1, 0, 16] [C:\Program Files\Maxthon3\Bin\mxpp.dll] [Maxthon International ltd., 1, 0, 0, 295] [C:\Program Files\Maxthon3\Bin\MxSk.dll] [Maxthon, 1, 0, 0, 575] [C:\Program Files\Maxthon3\Core\Webkit\MxWebkit.dll] [Maxthon International ltd., 1, 0, 3, 73] [C:\Program Files\Maxthon3\Bin\mxdb.dll] [Maxthon International ltd, 3, 6, 2, 3] [C:\Program Files\Maxthon3\Modules\MxStorage\MxStorage.dll] [Maxthon International ltd., 1, 2, 0, 2] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Program Files\Maxthon3\Modules\MxCmpUrl\MxCmpUrl.dll] [Maxthon International ltd., 1, 0, 1, 8] [C:\Program Files\Maxthon3\Bin\maxzlib.dll] [, 1,2,3,1] [C:\Program Files\Maxthon3\Modules\MxFavDb\MxFavDb.dll] [Maxthon International ltd., 4, 4, 0, 0] [C:\Program Files\Maxthon3\Modules\MxFavDb\MxFav.dll] [Maxthon International ltd., 2, 0, 0, 169] [C:\Program Files\Maxthon3\Modules\MxHistory\MxHistory.dll] [Maxthon International ltd., 1, 0, 0, 112] [PID: 6888 / 刘淼][C:\Program Files\Maxthon3\Bin\Maxthon.exe] [Maxthon International ltd., 3, 0, 8, 17] [C:\Program Files\Maxthon3\Bin\MxMsg.dll] [Maxthon, 1, 0, 0, 1] [C:\Program Files\Maxthon3\Bin\MxUI.dll] [Maxthon International ltd., 3, 3, 1, 44] [C:\Program Files\Maxthon3\Bin\MxHttpRq.dll] [Maxthon International ltd., 2, 0, 0, 11] [C:\Program Files\Maxthon3\Bin\MxTool.dll] [Maxthon International ltd., 1, 2, 0, 6] [C:\Program Files\Maxthon3\Bin\MxCrashCatch.dll] [Maxthon International ltd., 2, 0, 0, 28] [C:\Program Files\Maxthon3\Bin\MxCoreMan.DLL] [Maxthon International ltd., 0, 0, 0, 54] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Program Files\Maxthon3\Bin\MxCore.dll] [Maxthon International ltd., 1, 0, 1, 31] [C:\Program Files\Maxthon3\Bin\MxIPC.dll] [Maxthon International ltd., 1, 1, 0, 16] [C:\Program Files\Maxthon3\Core\Webkit\MxWebkit.dll] [Maxthon International ltd., 1, 0, 3, 73] [C:\Program Files\Maxthon3\Bin\mxdb.dll] [Maxthon International ltd, 3, 6, 2, 3] [C:\Program Files\Maxthon3\Core\Webkit\icudt42.dll] [IBM Corporation and others, 4, 2, 1, 0] [C:\Program Files\Maxthon3\Bin\MxResData.dll] [Maxthon International ltd., 1, 0, 0, 111] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [PID: 5732 / SYSTEM][C:\Program Files\Internet Explorer\IExplore.exe] [Microsoft Corporation, 8.00.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 7536 / SYSTEM][C:\Program Files\Internet Explorer\IExplore.exe] [Microsoft Corporation, 8.00.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [PID: 5200 / SYSTEM][C:\Program Files\Internet Explorer\IExplore.exe] [Microsoft Corporation, 8.00.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll] [Google Inc., 6, 5, 621, 1538 ] [C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_32_EF2274E9A49AB598.dll] [Google Inc., 6, 5, 621, 1538 ] [C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll] [Google Inc., 6, 5, 621, 1538 ] [C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_ext_zh-CN_32_E6BCDD306BBDF5CC.dll] [Google Inc., 6, 5, 621, 1538 ] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [深圳市迅雷网络技术有限公司, 5,9,17,1334] [C:\Program Files\Thunder Network\Thunder\ComDlls\ATL71.DLL] [Microsoft Corporation, 7.10.6101.0] [C:\Program Files\Thunder Network\Thunder\ComDlls\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\Program Files\Thunder Network\Thunder\ComDlls\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll] [Adobe Systems Incorporated, 9.3.2.163] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 9.3.2.163] [C:\Program Files\Thunder Network\Thunder\Program\EmbedDetectNow.dll] [Xunlei, 1, 0, 1, 14] [C:\Windows\system32\ProcessProtection.dll] [www.ISRA.org.cn, 1, 3, 7, 17] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [深圳市迅雷网络技术有限公司, 5,9,17,1334] [C:\Users\Public\Thunder Network\Thunder_FC22B036-4AD2-46B7-A57F-808A179664D3_\Components\ResWorker\DsBho_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 26] [C:\Users\Public\Thunder Network\Thunder_FC22B036-4AD2-46B7-A57F-808A179664D3_\Components\ResWorker\DataProcessor_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 20] [C:\Windows\system32\UrlFilter.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 28] [C:\Program Files\Rising\AntiSpyware\UrlRule.dll] [Beijing Rising Information Technology Co., Ltd., 1.0.0.21] [C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll] [Google Inc., 5, 5, 5126, 1836] [C:\Users\刘淼\AppData\Roaming\FlashGetBHO\FlashGetBHO31.dll] [Trend Media Group, 1.0.0.1018] [C:\Users\刘淼\AppData\Roaming\FlashGetBHO\FlashGetHook.dll] [Trend Media Group, 1.0.0.1025] [C:\Windows\system32\CITICSPP.dll] [www.ISRA.org.cn, 1, 2, 2, 6] [C:\Program Files\Java\jre6\bin\jp2ssv.dll] [Sun Microsystems, Inc., 6.0.200.2] [C:\Windows\system32\Macromed\Flash\Flash10h.ocx] [Adobe Systems, Inc., 10,1,53,64] [PID: 4900 / SYSTEM][C:\Program Files\Internet Explorer\IExplore.exe] [Microsoft Corporation, 8.00.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] [C:\Windows\system32\UxTheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll] [Google Inc., 6, 5, 621, 1538 ] [C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_32_EF2274E9A49AB598.dll] [Google Inc., 6, 5, 621, 1538 ] [C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll] [Google Inc., 6, 5, 621, 1538 ] [C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_ext_zh-CN_32_E6BCDD306BBDF5CC.dll] [Google Inc., 6, 5, 621, 1538 ] [C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll] [深圳市迅雷网络技术有限公司, 5,9,17,1334] [C:\Program Files\Thunder Network\Thunder\ComDlls\ATL71.DLL] [Microsoft Corporation, 7.10.6101.0] [C:\Program Files\Thunder Network\Thunder\ComDlls\MSVCP71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\Program Files\Thunder Network\Thunder\ComDlls\MSVCR71.dll] [Microsoft Corporation, 7.10.6030.0] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll] [Adobe Systems Incorporated, 9.3.2.163] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 9.3.2.163] [C:\Program Files\Thunder Network\Thunder\Program\EmbedDetectNow.dll] [Xunlei, 1, 0, 1, 14] [C:\Windows\system32\ProcessProtection.dll] [www.ISRA.org.cn, 1, 3, 7, 17] [C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll] [深圳市迅雷网络技术有限公司, 5,9,17,1334] [C:\Users\Public\Thunder Network\Thunder_FC22B036-4AD2-46B7-A57F-808A179664D3_\Components\ResWorker\DsBho_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 26] [C:\Users\Public\Thunder Network\Thunder_FC22B036-4AD2-46B7-A57F-808A179664D3_\Components\ResWorker\DataProcessor_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 20] [C:\Windows\system32\UrlFilter.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 28] [C:\Program Files\Rising\AntiSpyware\UrlRule.dll] [Beijing Rising Information Technology Co., Ltd., 1.0.0.21] [C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll] [Google Inc., 5, 5, 5126, 1836] [C:\Users\刘淼\AppData\Roaming\FlashGetBHO\FlashGetBHO31.dll] [Trend Media Group, 1.0.0.1018] [C:\Users\刘淼\AppData\Roaming\FlashGetBHO\FlashGetHook.dll] [Trend Media Group, 1.0.0.1025] [C:\Windows\system32\CITICSPP.dll] [www.ISRA.org.cn, 1, 2, 2, 6] [C:\Program Files\Java\jre6\bin\jp2ssv.dll] [Sun Microsystems, Inc., 6.0.200.2] [C:\Windows\system32\Macromed\Flash\Flash10h.ocx] [Adobe Systems, Inc., 10,1,53,64] [PID: 7296 / 刘淼][C:\Windows\system32\UI0Detect.exe] [(Verified) Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [PID: 5820 / 刘淼][C:\Program Files\Maxthon3\Bin\MxDownloader.exe] [Maxthon International ltd., 1, 0, 0, 41] [C:\Program Files\Maxthon3\Bin\MxUI.dll] [Maxthon International ltd., 3, 3, 1, 44] [C:\Program Files\Maxthon3\Bin\MxCrashCatch.dll] [Maxthon International ltd., 2, 0, 0, 28] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Program Files\Maxthon3\Bin\MxIPC.dll] [Maxthon International ltd., 1, 1, 0, 16] [C:\Program Files\Maxthon3\Bin\MxResData.dll] [Maxthon International ltd., 1, 0, 0, 111] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [C:\Program Files\Maxthon3\Bin\Maxzlib.dll] [, 1,2,3,1] [C:\Program Files\Maxthon3\Core\Webkit\MxWebkit.dll] [Maxthon International ltd., 1, 0, 3, 73] [C:\Program Files\Maxthon3\Bin\MxMsg.dll] [Maxthon, 1, 0, 0, 1] [C:\Program Files\Maxthon3\Bin\MxHttpRq.dll] [Maxthon International ltd., 2, 0, 0, 11] [C:\Program Files\Maxthon3\Bin\mxdb.dll] [Maxthon International ltd, 3, 6, 2, 3] [PID: 2084 / 刘淼][E:\TDOWNLOAD\sreng2\SREngLdr.EXE] [Smallfrogs Studio, 2.8.2.1321] [PID: 6492 / 刘淼][E:\TDOWNLOAD\sreng2\SRE9c2d6971.EXE] [Smallfrogs Studio, 2.8.2.1321] [C:\Windows\system32\uxtheme.dll] [Microsoft Corporation, 6.1.7600.16385 (win7_rtm.090713-1255)] [C:\Program Files\Rising\AntiSpyware\RegCall.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 6] [C:\Windows\system32\SOGOUPY.IME] [Sogou.com Inc., 5.0.1.4158] [E:\TDOWNLOAD\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] [C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1] ================================== 文件关联 .TXT Error. [C:\Windows\notepad.exe %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["%SystemRoot%\hh.exe" %1] .HLP OK. [%SystemRoot%\winhlp32.exe %1] .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .VBS OK. ["%SystemRoot%\System32\WScript.exe" "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 N/A ================================== 进程特权扫描 N/A ================================== 计划任务 [已启用] \\GoogleUpdateTaskMachineCore C:\Program Files\Google\Update\GoogleUpdate.exe /c [已启用] \\GoogleUpdateTaskMachineUA C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler [已启用] \\RunAsStdUser Task18648 C:\Program Files\Rising\Rav\rslogvw.exe /ua /installsource scheduler [已启用] \\SogouImeMgr C:\PROGRA~1\SOGOUI~1\501~1.415\SGTool.exe --appid=pinyinrepair /S [已启用] \\{C0078543-289D-4C13-B887-59EA9197F24B} P:\elive-1.151.exe --appid=pinyinrepair /S [已启用] \\{F8E777F0-D0B4-4200-B917-F2F778E1B2D2} C:\Windows\system32\pcalua.exe -a F:\软件\理光打印机驱动\SETUP.EXE [已禁用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated) N/A [已启用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual) N/A [已禁用] \Microsoft\Windows\AppID\PolicyConverter %windir%\system32\appidpolicyconverter.exe [已禁用] \Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck %windir%\system32\appidcertstorecheck.exe [已启用] \Microsoft\Windows\Application Experience\AitAgent aitagent [已启用] \Microsoft\Windows\Application Experience\ProgramDataUpdater %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate [已启用] \Microsoft\Windows\Autochk\Proxy %windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations [已启用] \Microsoft\Windows\Bluetooth\UninstallDeviceTask BthUdTask.exe $(Arg0) [已启用] \Microsoft\Windows\CertificateServicesClient\SystemTask N/A [已启用] \Microsoft\Windows\CertificateServicesClient\UserTask N/A [已禁用] \Microsoft\Windows\CertificateServicesClient\UserTask-Roam N/A [已启用] \Microsoft\Windows\Customer Experience Improvement Program\Consolidator %SystemRoot%\System32\wsqmcons.exe [已启用] \Microsoft\Windows\Customer Experience Improvement Program\Uploader %windir%\system32\WSqmCons.exe -u [已启用] \Microsoft\Windows\Defrag\ScheduledDefrag %windir%\system32\defrag.exe -c [已启用] \Microsoft\Windows\Location\Notifications %windir%\System32\LocationNotifications.exe [已启用] \Microsoft\Windows\Maintenance\WinSAT N/A [已启用] \Microsoft\Windows\Media Center\ActivateWindowsSearch %SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch [已启用] \Microsoft\Windows\Media Center\ConfigureInternetTimeService %SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService [已启用] \Microsoft\Windows\Media Center\DispatchRecoveryTasks %SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) [已启用] \Microsoft\Windows\Media Center\ehDRMInit %SystemRoot%\ehome\ehPrivJob.exe /DRMInit [已启用] \Microsoft\Windows\Media Center\InstallPlayReady %SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) [已启用] \Microsoft\Windows\Media Center\mcupdate %SystemRoot%\ehome\mcupdate $(Arg0) [已启用] \Microsoft\Windows\Media Center\MediaCenterRecoveryTask %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask [已启用] \Microsoft\Windows\Media Center\MediaCenterRecoveryTask %SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask [已启用] \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask [已启用] \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask %SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask [已启用] \Microsoft\Windows\Media Center\OCURActivate %SystemRoot%\ehome\ehPrivJob.exe /OCURActivate [已启用] \Microsoft\Windows\Media Center\OCURDiscovery %SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) [已启用] \Microsoft\Windows\Media Center\PBDADiscovery %SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery [已启用] \Microsoft\Windows\Media Center\PBDADiscoveryW1 %SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery [已启用] \Microsoft\Windows\Media Center\PBDADiscoveryW2 %SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery [已禁用] \Microsoft\Windows\Media Center\PeriodicScanRetry %windir%\ehome\MCUpdate.exe -pscn 0 [已启用] \Microsoft\Windows\Media Center\PvrRecoveryTask %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask [已启用] \Microsoft\Windows\Media Center\PvrRecoveryTask %SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask [已启用] \Microsoft\Windows\Media Center\PvrScheduleTask %SystemRoot%\ehome\mcupdate.exe -PvrSchedule [已启用] \Microsoft\Windows\Media Center\PvrScheduleTask %SystemRoot%\ehome\mcupdate.exe -PvrSchedule [已禁用] \Microsoft\Windows\Media Center\RecordingRestart %SystemRoot%\ehome\ehrec /RestartRecording [已启用] \Microsoft\Windows\Media Center\RegisterSearch %SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) [已启用] \Microsoft\Windows\Media Center\ReindexSearchRoot %SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot [已启用] \Microsoft\Windows\Media Center\SqlLiteRecoveryTask %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask [已启用] \Microsoft\Windows\Media Center\SqlLiteRecoveryTask %SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask [已启用] \Microsoft\Windows\Media Center\UpdateRecordPath %SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) [已启用] \Microsoft\Windows\MobilePC\HotStart N/A [已启用] \Microsoft\Windows\MUI\LPRemove %windir%\system32\lpremove.exe [已启用] \Microsoft\Windows\Multimedia\SystemSoundsService N/A [已启用] \Microsoft\Windows\NetTrace\GatherNetworkInfo %windir%\system32\gatherNetworkInfo.vbs [已禁用] \Microsoft\Windows\Offline Files\Background Synchronization N/A [已禁用] \Microsoft\Windows\Offline Files\Logon Synchronization N/A [已启用] \Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem %SystemRoot%\System32\powercfg.exe -energy -auto [已启用] \Microsoft\Windows\Ras\MobilityManager N/A [已禁用] \Microsoft\Windows\SideShow\AutoWake N/A [已启用] \Microsoft\Windows\SideShow\GadgetManager N/A [已禁用] \Microsoft\Windows\SideShow\SessionAgent N/A [已禁用] \Microsoft\Windows\SideShow\SystemDataProviders N/A [已启用] \Microsoft\Windows\SystemRestore\SR %windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation [已启用] \Microsoft\Windows\Tcpip\IpAddressConflict1 %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem [已启用] \Microsoft\Windows\Tcpip\IpAddressConflict2 %windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem [已启用] \Microsoft\Windows\Time Synchronization\SynchronizeTime %windir%\system32\sc.exe start w32time task_started [已启用] \Microsoft\Windows\UPnP\UPnPHostConfig sc.exe config upnphost start= auto [已禁用] \Microsoft\Windows\User Profile Service\HiveUploadTask N/A [已启用] \Microsoft\Windows\Windows Error Reporting\QueueReporting %windir%\system32\wermgr.exe -queuereporting [已启用] \Microsoft\Windows\Windows Media Sharing\UpdateLibrary "%ProgramFiles%\Windows Media Player\wmpnscfg.exe" [已启用] \Microsoft\Windows\WindowsBackup\ConfigNotification %systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION [已禁用] \Microsoft\Windows\WindowsColorSystem\Calibration Loader N/A ================================== Windows 安全更新检查 KB972813, 西班牙语语言包 - Windows 7 (KB972813) KB972813, 希腊语语言包 - Windows 7 (KB972813) KB972813, 立陶宛语语言包 - Windows 7 (KB972813) KB972813, 阿拉伯语语言包 - Windows 7 (KB972813) KB972813, 瑞典语语言包 - Windows 7 (KB972813) KB972813, 德语语言包 - Windows 7 (KB972813) KB972813, 斯洛伐克语语言包 - Windows 7 (KB972813) KB972813, 乌克兰语语言包 - Windows 7 (KB972813) KB972813, 繁体中文语言包 - Windows 7 (KB972813) KB972813, 挪威语语言包 - Windows 7 (KB972813) KB972813, 爱沙尼亚语语言包 - Windows 7 (KB972813) KB972813, 捷克语语言包 - Windows 7 (KB972813) KB972813, 斯洛文尼亚语语言包 - Windows 7 (KB972813) KB972813, 日语语言包 - Windows 7 (KB972813) KB972813, 法语语言包 - Windows 7 (KB972813) KB972813, 英语语言包 - Windows 7 (KB972813) KB972813, 罗马尼亚语语言包 - Windows 7 (KB972813) KB972813, 波兰语语言包 - Windows 7 (KB972813) KB972813, 泰语语言包 - Windows 7 (KB972813) KB972813, 保加利亚语语言包 - Windows 7 (KB972813) KB972813, 俄语语言包 - Windows 7 (KB972813) KB972813, 克罗地亚语语言包 - Windows 7 (KB972813) KB972813, 塞尔维亚语（拉丁语）语言包 - Windows 7 (KB972813) KB972813, 葡萄牙语（葡萄牙）语言包 - Windows 7 (KB972813) KB972813, 朝鲜语语言包 - Windows 7 (KB972813) KB972813, 意大利语语言包 - Windows 7 (KB972813) KB972813, 匈牙利语语言包 - Windows 7 (KB972813) KB972813, 土耳其语语言包 - Windows 7 (KB972813) KB972813, 丹麦语语言包 - Windows 7 (KB972813) KB972813, 芬兰语语言包 - Windows 7 (KB972813) KB972813, 拉脱维亚语语言包 - Windows 7 (KB972813) KB972813, 希伯来语语言包 - Windows 7 (KB972813) KB972813, 荷兰语语言包 - Windows 7 (KB972813) KB972813, 葡萄牙语（巴西）语言包 - Windows 7 (KB972813) KB976422, Windows 7 更新程序 (KB976422) ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]