正在运行的进程
[PID: 604][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 668][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 692][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\Ati2evxx.dll]  <ATI Technologies Inc.><6.14.10.4113>
[PID: 736][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 748][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 900][C:\WINDOWS\system32\Ati2evxx.exe]  <ATI Technologies Inc.><6.14.10.4113>
    [C:\WINDOWS\system32\Ati2edxx.dll]  <ATI Technologies, Inc.><6, 14, 10, 2496>
[PID: 912][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 980][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1064][C:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1088][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1124][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1300][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1384][C:\Program Files\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 22>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  <Rising><18, 1, 0, 9>
    [C:\Program Files\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [C:\Program Files\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [C:\Program Files\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [C:\Program Files\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28>
    [C:\Program Files\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\Program Files\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [C:\Program Files\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 15>
    [C:\Program Files\Rising\Rav\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\Program Files\Rising\Rav\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[PID: 1436][c:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [c:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [c:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [c:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [c:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [c:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 1612][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1712][C:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1864][C:\WINDOWS\system32\inetsrv\inetinfo.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1896][C:\MATLAB701\webserver\bin\win32\matlabserver.exe]  <N/A><N/A>
    [C:\MATLAB701\bin\win32\libeng.dll]  <The MathWorks Inc.><7.0.0.12365>
    [C:\MATLAB701\bin\win32\libmx.dll]  <The MathWorks Inc.><7.0.0.12365>
    [C:\MATLAB701\bin\win32\icuuc24.dll]  <IBM Corporation and others><2, 4, 0, 0>
    [C:\MATLAB701\bin\win32\icudt24l.dll]  <N/A><N/A>
    [C:\MATLAB701\bin\win32\libz.dll]  <N/A><N/A>
    [C:\MATLAB701\bin\win32\libut.dll]  <The MathWorks Inc.><7.0.0.12365>
    [C:\MATLAB701\bin\win32\icuin24.dll]  <IBM Corporation and others><2, 4, 0, 0>
    [C:\MATLAB701\bin\win32\icuio24.dll]  <IBM Corporation and others><2, 4, 0, 0>
    [c:\matlab701\bin\win32\mwoles05.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\comcli.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mvalue.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\uiw.dll]  <The MathWorks Inc.><7.0.0.18578>
    [c:\matlab701\bin\win32\m_interpreter.dll]  <The MathWorks Inc.><7.0.0.23893>
    [c:\matlab701\bin\win32\m_pcodeio.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mlib.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwservices.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mpath.dll]  <The MathWorks Inc.><7.0.0.23893>
    [c:\matlab701\bin\win32\libmex.dll]  <The MathWorks Inc.><7.0.0.12365>
    [c:\matlab701\bin\win32\m_dispatcher.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\xerces-c_2_1_0.dll]  <Apache Software Foundation><2, 1, 0>
    [c:\matlab701\bin\win32\datasvcs.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmat.dll]  <The MathWorks Inc.><7.0.0.12365>
    [c:\matlab701\bin\win32\m_pcodegen.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\m_ir.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\m_parser.dll]  <The MathWorks Inc.><7.0.0.23893>

[c:\matlab701\bin\win32\ir_xfmr.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mcos.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwhardcopy.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwgui.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\udd.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\bridge.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\hg.dll]  <The MathWorks Inc.><7.0.0.23872a>
    [c:\matlab701\bin\win32\numerics.dll]  <The MathWorks Inc.><7.0.0.24014a>
    [c:\matlab701\bin\win32\libmwamd.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libfftw3.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libfftw3f.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwlapack.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwumfpackv4.3.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libuij.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\jmi.dll]  <The MathWorks Inc.><7.0.0.23624>
    [c:\matlab701\bin\win32\udd_mi.dll]  <The MathWorks Inc.><7.0.0.23624>
    [c:\matlab701\bin\win32\uinone.dll]  <N/A><N/A>
    [C:\MATLAB701\bin\win32\atlas_Athlon.dll]  <N/A><N/A>
    [C:\MATLAB701\bin\win32\lapack.dll]  <N/A><N/A>
    [C:\MATLAB701\bin\win32\DFORRT.dll]  <Compaq Computer Corporation><6.6 - 893 (Update A)>
[PID: 2020][C:\Program Files\VMware\VMware Workstation\vmware-authd.exe]  <VMware, Inc.><5.5.1 build-19175>
[PID: 388][c:\matlab701\bin\win32\matlab.exe]  <The MathWorks Inc.><7.0.0.19156a>
    [c:\matlab701\bin\win32\libmex.dll]  <The MathWorks Inc.><7.0.0.12365>
    [c:\matlab701\bin\win32\libmx.dll]  <The MathWorks Inc.><7.0.0.12365>
    [c:\matlab701\bin\win32\icuuc24.dll]  <IBM Corporation and others><2, 4, 0, 0>
    [c:\matlab701\bin\win32\icudt24l.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libz.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libut.dll]  <The MathWorks Inc.><7.0.0.12365>
    [c:\matlab701\bin\win32\icuin24.dll]  <IBM Corporation and others><2, 4, 0, 0>
    [c:\matlab701\bin\win32\icuio24.dll]  <IBM Corporation and others><2, 4, 0, 0>
    [c:\matlab701\bin\win32\libmwservices.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mpath.dll]  <The MathWorks Inc.><7.0.0.23893>
    [c:\matlab701\bin\win32\m_dispatcher.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\xerces-c_2_1_0.dll]  <Apache Software Foundation><2, 1, 0>
    [c:\matlab701\bin\win32\datasvcs.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mvalue.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmat.dll]  <The MathWorks Inc.><7.0.0.12365>
    [c:\matlab701\bin\win32\mcr.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\comcli.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\uiw.dll]  <The MathWorks Inc.><7.0.0.18578>
    [c:\matlab701\bin\win32\m_interpreter.dll]  <The MathWorks Inc.><7.0.0.23893>
    [c:\matlab701\bin\win32\m_pcodeio.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mlib.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\m_pcodegen.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\m_ir.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\m_parser.dll]  <The MathWorks Inc.><7.0.0.23893>
    [c:\matlab701\bin\win32\ir_xfmr.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mcos.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwhardcopy.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwgui.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\udd.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\bridge.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\hg.dll]  <The MathWorks Inc.><7.0.0.23872a>
    [c:\matlab701\bin\win32\numerics.dll]  <The MathWorks Inc.><7.0.0.24014a>
    [c:\matlab701\bin\win32\libmwamd.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libfftw3.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libfftw3f.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwlapack.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libmwumfpackv4.3.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\libuij.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\jmi.dll]  <The MathWorks Inc.><7.0.0.23624>
    [c:\matlab701\bin\win32\udd_mi.dll]  <The MathWorks Inc.><7.0.0.23624>
    [c:\matlab701\bin\win32\uinone.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mlautoregister.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\mwoles05.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\atlas_Athlon.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\lapack.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\DFORRT.dll]  <Compaq Computer Corporation><6.6 - 893 (Update A)>
    [C:\WINDOWS\system32\atioglxx.dll]  <ATI Technologies Inc.><6.14.10.4954>
    [c:\matlab701\sys\java\jre\win32\jre1.4.2_04\bin\client\jvm.dll]  <N/A><N/A>
    [c:\matlab701\sys\java\jre\win32\jre1.4.2_04\bin\hpi.dll]  <N/A><N/A>
    [c:\matlab701\sys\java\jre\win32\jre1.4.2_04\bin\verify.dll]  <N/A><N/A>
    [c:\matlab701\sys\java\jre\win32\jre1.4.2_04\bin\java.dll]  <N/A><N/A>
    [c:\matlab701\sys\java\jre\win32\jre1.4.2_04\bin\zip.dll]  <N/A><N/A>
    [C:\MATLAB701\sys\java\jre\win32\jre1.4.2_04\bin\awt.dll]  <N/A><N/A>
    [C:\MATLAB701\sys\java\jre\win32\jre1.4.2_04\bin\fontmanager.dll]  <N/A><N/A>
    [c:\matlab701\bin\win32\jmi_mi.dll]  <N/A><N/A>
    [C:\WINDOWS\Resources\themes\Luna\Luna.msstyles]  <Microsoft><1, 0, 0, 1>
    [c:\matlab701\bin\win32\libmwbuiltins.dll]  <The MathWorks Inc.><7.0.0.12365>
[PID: 392][C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe]  <VMware, Inc.><5.5.1 build-19175>
    [C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmxScsiLib.dll]  <VMware, Inc.><5.5.1 build-19175>
[PID: 432][C:\WINDOWS\system32\vmnat.exe]  <VMware, Inc.><5.5.1 build-19175>
[PID: 500][C:\WINDOWS\system32\vmnetdhcp.exe]  <VMware, Inc.><5.5.1 build-19175>
[PID: 1056][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1224][C:\WINDOWS\system32\Ati2evxx.exe]  <ATI Technologies Inc.><6.14.10.4113>
    [C:\WINDOWS\system32\Ati2edxx.dll]  <ATI Technologies, Inc.><6, 14, 10, 2496>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>

[PID: 1292][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\Downloaded Program Files\Obzc.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\PROGRA~1\3721\alrex.dll]  <><1, 0, 1, 1001>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 4, 1026>
    [C:\PROGRA~1\3721\alliveex.dll]  < ><1, 0, 3, 1006>
    [C:\WINDOWS\system32\xunleibho_v14.dll]  <Thunder Networking Technologies,LTD><4, 6, 0, 62>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><7.0.7.2006011200>
    [C:\WINDOWS\system32\Adxe.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ahas.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xmfy.dll]  <N/A><N/A>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\WINDOWS\system32\Efqgps.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Qmnerk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Nmvovv.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Dlkjhx.dll]  <N/A><N/A>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
[PID: 1324][C:\WINDOWS\system32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\DOWNLO~1\CnsMinIO.dll]  <北京三七二一科技有限公司><1, 0, 3, 6>
    [C:\WINDOWS\DOWNLO~1\cnsio.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
[PID: 2088][c:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
    [c:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [c:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [c:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
[PID: 2256][C:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 2300][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 4, 1026>
    [C:\PROGRA~1\3721\alliveex.dll]  < ><1, 0, 3, 1006>

[PID: 2320][C:\Program Files\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 19>
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
[PID: 2328][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3208>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 2360][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.1.0.34>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 2368][C:\WINDOWS\system32\nvraidservice.exe]  <NVIDIA Corporation><1.0.1>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\WINDOWS\system32\NvRaidSvENU.dll]  <NVIDIA Corporation><1.0.1>
[PID: 2408][C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe]  <ATI Technologies, Inc.><6.14.10.5142>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll]  <ATI Technologies, Inc.><6.14.10.5142>
    [C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.CHS]  <ATI Technologies, Inc.><6.14.10.5142>
    [C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll]  <ATI Technologies, Inc.><6.14.10.5142>
[PID: 2420][C:\WINDOWS\system32\wbem\wmiprvse.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2524][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 2580][C:\WINDOWS\system32\wbem\unsecapp.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 2624][C:\Program Files\Tencent\QQ\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\Program Files\Tencent\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 2076][C:\Program Files\Tencent\TT\TTraveler.exe]  <腾讯公司><3.0.0.238>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 4, 1026>
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 7>
    [c:\program files\google\googletoolbar2.dll]  <Google Inc.><3, 0, 131, 0>
    [C:\WINDOWS\system32\KakaTool.dll]  <Beijing Rising Technology Co., Ltd.><2, 0, 0, 8>
    [C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  <腾讯公司><1, 1, 0, 5>
    [C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\TT\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
    [C:\PROGRA~1\3721\alliveex.dll]  < ><1, 0, 3, 1006>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
[PID: 4028][C:\PROGRA~1\Tencent\TT\TCPlus.exe]  <腾讯公司><2.0.0.12>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
    [C:\PROGRA~1\Tencent\TT\TDMANA~1.DLL]  <腾讯公司><2.0.0.12>
[PID: 3532][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>
[PID: 3892][C:\DOCUME~1\PJJOE\LOCALS~1\Temp\Rar$EX00.813\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 0, 9, 1324>
    [C:\WINDOWS\Downloaded Program Files\Kbjb.dll]  <Tencent><4, 0, 7, 72>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 1>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  Error. ["C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe" "%1"]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

全发了
我什么都没有搞过的

【回复“菊馨”的帖子】
请教高手:
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\MATLAB701\webserver\bin\win32\matlabserver.exe
上面是不是表示灰鸽子病毒呢?如果不是,请问怎么判断是否为灰鸽子病毒.

进入控制面版的添加删除程序中卸载，搜搜地址栏搜索(QQ搜索小助手)和青娱乐。
还是这几项，如果你不知道，建议删除
关闭所有浏览窗口以及一些不必要的程序
运行System Repair Engineer，使用“系统修复，浏览器加载项”来删除以下选项
[]
{26F7B863-CF71-43BA-B961-BA496AE92713} <C:\WINDOWS\system32\Adxe.dll, N/A>
[]
{331B1FE8-57AF-48CE-A3DE-8A370439E68F} <C:\WINDOWS\system32\Ahas.dll, N/A>
[]
{4A1C4F75-E1FA-4311-8769-391CE23EDFA2} <C:\WINDOWS\system32\Xmfy.dll, N/A>
[]
{B86AFE8B-ED06-430F-8F45-AECFAFF5C9C6} <C:\WINDOWS\system32\Efqgps.dll, N/A>
[]
{E8A5B30B-EC40-461B-9199-DF0219CADF25} <C:\WINDOWS\system32\Qmnerk.dll, N/A>
[]
{F2FBF4F9-0FFC-4A05-8134-836A82CADA3F} <C:\WINDOWS\system32\Nmvovv.dll, N/A>
[]
{F76D63F2-299B-4B40-BA7C-5F3A545B8AC1} <C:\WINDOWS\system32\Dlkjhx.dll, N/A>

QQ搜索小助手是腾讯的TT上的搜索工具栏吗？
青娱乐是21cn的那个VGO吗？
在“添加/删除程序”里没有青娱乐

谢谢了

最近这个情况又出现了，不知道是不是我所上的网有问题呢？
一上那个网瑞星文件监控就报是Backdoor.Gpigeon.wtl和Hack.Exploit.Realplayer.a，然后浏览器就自动关闭了。继续请求帮忙，谢谢！