Backdoor.Gpigeon.zbg
Backdoor.Gpigeon.2006.re
Backdoor.Gpigeon.2006.fm

ystem Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <HControl><C:\WINDOWS\ATK0100\HControl.exe>  []
    <Power_Gear><C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1>  []
    <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [Synaptics, Inc.]
    <RfwMain><"D:\软件\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
    <Logitech Hardware Abstraction Layer><KHALMNPR.EXE>  [Logitech Inc.]
    <ATICCC><"C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime>  []
    <RavTask><"D:\软件\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><"C:\WINDOWS\logonui">  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <DelayRun><C:\WINDOWS\system32\91ddc370.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
    <WinlogonNotify: AtiExtEvent><Ati2evxx.dll>  [ATI Technologies Inc.]

==================================
启动文件夹
[Catalyst System Tray]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Catalyst System Tray.lnk><N>
[Logitech SetPoint]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Logitech SetPoint.lnk><N>

==================================
服务
[Ati HotKey Poller / Ati HotKey Poller]
  <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[Intranet Messenger / DiRVIn]
  <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[Intel(R) PROSet/Wireless Event Log / EvtEng]
  <C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[LightScribeService Direct Disc Labeling Service / LightScribeService]
  <"C:\Program Files\Common Files\LightScribe\LSSrvc.exe"><Hewlett-Packard Company>
[Macromedia Licensing Service / Macromedia Licensing Service]
  <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Intel(R) PROSet/Wireless Registry Service / RegSrvc]
  <C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Rising Proxy  Service / RfwProxySrv]
  <d:\软件\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
  <d:\软件\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <"D:\软件\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"D:\软件\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Intel(R) PROSet/Wireless Service / S24EventMonitor]
  <C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>

==================================
浏览器加载项
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\软件\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\软件\迅雷\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[QuickBtn]
  {D1BB7CF4-4463-4e91-88D7-ECC3CE0A13B7} <C:\Program Files\CoolWebsite\QuickLink.dll, Fengcent>
[BHelper Class]
  {F2E37336-BFDB-409B-8D0E-6F013C438B20} <C:\WINDOWS\system\91doc370.dll, N/A>
[Java Plug-in 1.5.0_05]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <D:\软件\Java\jre1.5.0_05\bin\npjpi150_05.dll, Sun Microsystems, Inc.>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Java Plug-in 1.5.0_05]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <D:\软件\Java\jre1.5.0_05\bin\npjpi150_05.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_05]
  {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} <D:\软件\Java\jre1.5.0_05\bin\npjpi150_05.dll, Sun Microsystems, Inc.>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\软件\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\软件\迅雷\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[QuickBtn]
  {D1BB7CF4-4463-4E91-88D7-ECC3CE0A13B7} <C:\Program Files\CoolWebsite\QuickLink.dll, Fengcent>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[BHelper Class]
  {F2E37336-BFDB-409B-8D0E-6F013C438B20} <C:\WINDOWS\system\91doc370.dll, N/A>
[&使用迅雷下载]
  <D:\软件\迅雷\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <D:\软件\迅雷\Program\GetAllUrl.htm, N/A>

=================================
正在运行的进程
[PID: 824][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 880][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 912][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\Ati2evxx.dll]  <ATI Technologies Inc.><6.14.10.4121>
[PID: 956][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 968][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1128][C:\WINDOWS\system32\Ati2evxx.exe]  <ATI Technologies Inc.><6.14.10.4121>
    [C:\WINDOWS\system32\Ati2edxx.dll]  <ATI Technologies, Inc.><6, 14, 10, 2499>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
[PID: 1152][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1244][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1432][D:\软件\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1448][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1524][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe]  <Intel Corporation><10, 1, 0, 1>
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  <Intel Corporation><10, 1, 0, 2>
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  <Intel Corporation><10, 1, 0, 5>
[PID: 1568][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe]  <Intel Corporation ><10, 1, 0, 33>
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  <Intel Corporation><10, 1, 0, 5>
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  <Intel Corporation><10, 1, 0, 2>
    [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  <N/A><N/A>
    [C:\Program Files\Intel\Wireless\Bin\IntStngs.dll]  <><10, 1, 0, 2>
    [C:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL]  <N/A><N/A>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
[PID: 1728][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1808][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1836][D:\软件\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 33>
    [D:\软件\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [D:\软件\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\软件\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\软件\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\软件\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\软件\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
    [D:\软件\Rising\Rav\HOOKSYS.dll]  <Beijing Rising Technology Co., Ltd.><18, 1, 0, 11>
    [D:\软件\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [D:\软件\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\软件\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\软件\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [D:\软件\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 2>
    [D:\软件\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [D:\软件\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\软件\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [D:\软件\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\软件\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [D:\软件\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[PID: 1996][d:\软件\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [d:\软件\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [d:\软件\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [d:\软件\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [d:\软件\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [d:\软件\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 356][C:\WINDOWS\system32\Ati2evxx.exe]  <ATI Technologies Inc.><6.14.10.4121>
    [C:\WINDOWS\system32\Ati2edxx.dll]  <ATI Technologies, Inc.><6, 14, 10, 2499>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
[PID: 516][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\91ddc370.dll]  <N/A><N/A>
    [D:\nokia\Nokia PC Suite 6\PhoneBrowser.dll]  <Nokia><6, 60, 4, 7>
    [C:\WINDOWS\system32\ConnAPI.DLL]  <Nokia.><6, 60, 21, 1>
    [D:\nokia\Nokia PC Suite 6\PCSCM.dll]  <Nokia><6, 60, 45, 3>
    [D:\nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr]  <Nokia><6, 60, 5, 0>
    [D:\nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr]  <Nokia><6, 60, 1, 0>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
    [D:\软件\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><7.0.5.2005092300>
    [D:\软件\迅雷\ComDlls\XunLeiBHO_002.dll]  <Thunder Networking Technologies,LTD><5, 0, 0, 2>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\Program Files\CoolWebsite\QuickLink.dll]  <Fengcent><1, 0, 0, 2>
    [C:\WINDOWS\system\91doc370.dll]  <N/A><N/A>
[PID: 756][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1480][C:\WINDOWS\ATK0100\HControl.exe]  <><1043, 2, 15, 53>
    [C:\WINDOWS\ATK0100\CMSSC.dll]  <N/A><N/A>
    [C:\WINDOWS\ATK0100\inter_f2.dll]  <ATK><1043, 2, 15, 52>
    [C:\WINDOWS\ATK0100\ATKWLIOC.DLL]  <ACTIONTEC Electronics,Inc><2.01.02>
    [C:\WINDOWS\ATK0100\SiSPkt.dll]  <Silicon Integrated Systems Corp.><1, 0, 0, 45>
    [C:\Program Files\Intel\Wireless\Bin\MurocApi.dll]  <Intel Corporation><10, 1, 0, 37>
    [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  <Intel Corporation><10, 1, 0, 1>
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  <Intel Corporation><10, 1, 0, 2>
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  <Intel Corporation><10, 1, 0, 5

[C:\Program Files\Intel\Wireless\Bin\IntStngs.dll]  <><10, 1, 0, 2>
    [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\SynCOM.dll]  <Synaptics, Inc.><8.2.0 21Oct05>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
[PID: 1504][C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe]  <ASUSTeK Computer Inc.><1043, 6, 15, 113>
    [C:\Program Files\ASUS\Power4 Gear\ATKMETHOD.dll]  <ASUSTeK Computer Inc.><1043, 6, 15, 113>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
[PID: 1520][d:\软件\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
    [d:\软件\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [d:\软件\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [d:\软件\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
[PID: 1508][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]  <Synaptics, Inc.><8.2.0 21Oct05>
    [C:\WINDOWS\system32\SynCOM.dll]  <Synaptics, Inc.><8.2.0 21Oct05>
    [C:\WINDOWS\system32\SynTPAPI.dll]  <Synaptics, Inc.><8.2.0 21Oct05>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
[PID: 1612][C:\Program Files\ATI Technologies\ATI.ACE\cli.exe]  <ATI Technologies Inc.><1.11.0.0>
    [c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_2ea47ccc\mscorlib.dll]  <N/A><N/A>
    [c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_2b15d245\system.windows.forms.dll]  <N/A><N/A>
    [c:\program files\ati technologies\ati.ace\cli.implementation.dll]  <ATI Technologies Inc.><1.2.2130.37343>
    [c:\program files\ati technologies\ati.ace\log.foundation.dll]  <ATI Technologies Inc.><1.2.2026.29944>
    [c:\program files\ati technologies\ati.ace\cli.foundation.dll]  <ATI Technologies Inc.><1.2.2026.29944>
    [c:\program files\ati technologies\ati.ace\log.foundation.service.dll]  <ATI Technologies Inc.><1.2.2130.37343>
    [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll]  <ATI Technologies Inc.><1.2.2026.29970>
    [c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0435562c\system.dll]  <N/A><N/A>
    [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll]  <ATI Technologies Inc.><1.2.2130.37343>
    [c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_8e876e03\system.xml.dll]  <N/A><N/A>
    [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37344>
    [c:\program files\ati technologies\ati.ace\aem.foundation.dll]  <ATI Technologies Inc.><1.2.2026.29944>
    [c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_314a1d34\system.drawing.dll]  <N/A><N/A>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [c:\program files\ati technologies\ati.ace\cli.caste.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37336>
    [c:\program files\ati technologies\ati.ace\cli.component.runtime.shared.dll]  <ATI Technologies Inc.><1.2.2026.29946>
    [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2028.21076>
    [c:\program files\ati technologies\ati.ace\dem.foundation.dll]  <ATI Technologies Inc.><1.2.2026.29944>
    [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll]  <ATI Technologies Inc.><1.2.2026.29945>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demosinfo.dll]  <ATI Technologies Inc.><1.2.2026.29947>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demosadapterinfo.dll]  <ATI Technologies Inc.><1.2.2026.29960>
    [c:\program files\ati technologies\ati.ace\dem.graphics.dematiadapterinfo.dll]  <ATI Technologies Inc.><1.2.2095.19505>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdriversettings.dll]  <ATI Technologies Inc.><1.2.2026.29947>
    [c:\program files\ati technologies\ati.ace\atidemgr.dll]  <ATI Technologies Inc.><1.2.2130.37125>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demosmodeinfo.dll]  <ATI Technologies Inc.><1.2.2026.29950>
    [c:\program files\ati technologies\ati.ace\dem.graphics.dematidisplaysmanagersettings.dll]  <ATI Technologies Inc.><1.2.2026.29951>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demverylargedesktopsettings.dll]  <ATI Technologies Inc.><1.2.2026.30965>
    [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37218>
    [c:\program files\ati technologies\ati.ace\cli.aspect.multivpu.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2082.25148>
    [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37182>
    [c:\program files\ati technologies\ati.ace\cli.aspect.verylargedesktop.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2040.18973>
    [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37241>
    [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37237>
    [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3dlegacy.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2042.16922>
    [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37195>
    [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour2.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29953>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplayscoloursettings.dll]  <ATI Technologies Inc.><1.2.2026.29948>
    [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37281>
    [c:\program files\ati technologies\ati.ace\cli.aspect.displayscolour.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29947>
    [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37260>
    [c:\program files\ati technologies\ati.ace\cli.aspect.mmvideo.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29962>
    [c:\program files\ati technologies\ati.ace\dem.graphics.mmdeintlacingsettings.dll]  <ATI Technologies Inc.><1.2.2026.29968>
    [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37228>
    [c:\program files\ati technologies\ati.ace\cli.aspect.videooverlay.graphics.runtime.shared.dll]  <ATI Technologies Inc.><1.2.2026.29952>
    [c:\program files\ati technologies\ati.ace\dem.graphics.videooverlay.shared.dll]  <ATI Technologies Inc.><1.2.2026.29945>
    [c:\program files\ati technologies\ati.ace\cli.aspect.smartgart.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37234>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demsmartgartsettings.dll]  <ATI Technologies Inc.><1.2.2026.29951>
    [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37225>
    [c:\program files\ati technologies\ati.ace\cli.aspect.vpurecover.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29949>
    [c:\program files\ati technologies\ati.ace\cli.aspect.workstationconfig.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37222>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37307>

[c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37202>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37295>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29969>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37195>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicelcd2.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29949>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37303>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2033.19041>
    [c:\program files\ati technologies\ati.ace\cli.aspect.customformats.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29945>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37206>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicecv2.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2033.19045>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37290>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37285>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetvsettings.dll]  <ATI Technologies Inc.><1.2.2026.29961>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37299>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29970>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37198>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicedfp2.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29949>
    [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37249>
    [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive3.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2096.31471>
    [c:\program files\ati technologies\ati.ace\cli.aspect.overdrive2.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37257>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrivesettings.dll]  <ATI Technologies Inc.><1.2.2026.29969>
    [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37245>
    [c:\program files\ati technologies\ati.ace\cli.aspect.powerplay3.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29951>
    [c:\program files\ati technologies\ati.ace\dem.graphics.dempowerplaysettings.dll]  <ATI Technologies Inc.><1.2.2026.29969>
    [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37272>
    [c:\program files\ati technologies\ati.ace\cli.aspect.integratedumaframebuffer.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37265>
    [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37269>
    [c:\program files\ati technologies\ati.ace\cli.aspect.infocentre.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29953>
    [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37210>
    [c:\program files\ati technologies\ati.ace\cli.aspect.hotkeyshandling.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2036.20028>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demmultivpusettings.dll]  <ATI Technologies Inc.><1.2.2032.14723>
    [c:\program files\ati technologies\ati.ace\cli.aspect.radeon3d.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2049.17711>
    [c:\program files\ati technologies\ati.ace\dem.graphics.mmoverlaysettings.dll]  <ATI Technologies Inc.><1.2.2026.29967>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demvideotheatermodesettings.dll]  <ATI Technologies Inc.><1.2.2026.29967>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demvideooverlaysettings.dll]  <ATI Technologies Inc.><1.2.2026.29950>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demvpurecoverinfo.dll]  <ATI Technologies Inc.><1.2.2026.29968>
    [c:\program files\ati technologies\ati.ace\dem.graphics.workstationsettings.dll]  <ATI Technologies Inc.><1.2.2026.29960>
    [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29946>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecrtsettings.dll]  <ATI Technologies Inc.><1.2.2026.29969>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommonsettings.dll]  <ATI Technologies Inc.><1.2.2026.29968>
    [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29946>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecommon2settings.dll]  <ATI Technologies Inc.><1.2.2026.29947>
    [c:\program files\ati technologies\ati.ace\cli.aspect.deviceproperty2.graphics.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37139>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicecrt2.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29950>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicelcdsettings.dll]  <ATI Technologies Inc.><1.2.2026.29967>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicecomponentvideosettings.dll]  <ATI Technologies Inc.><1.2.2026.29946>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicetv2settings.dll]  <ATI Technologies Inc.><1.2.2026.29961>
    [c:\program files\ati technologies\ati.ace\cli.aspect.devicetv2.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2036.27417>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfpsettings.dll]  <ATI Technologies Inc.><1.2.2026.29968>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdevicedfp2settings.dll]  <ATI Technologies Inc.><1.2.2026.29948>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demoverdrive3settings.dll]  <ATI Technologies Inc.><1.2.2096.31461>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demdisplaysmanageroptionssettings.dll]  <ATI Technologies Inc.><1.2.2026.29952>
    [c:\program files\ati technologies\ati.ace\cli.aspect.displaysoptions.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2026.29961>
    [c:\program files\ati technologies\ati.ace\dem.graphics.demumaframebuffersettings.dll]  <ATI Technologies Inc.><1.2.2026.29951>
    [c:\program files\ati technologies\ati.ace\apm.foundation.dll]  <ATI Technologies Inc.><1.2.2026.29959>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[PID: 1016][D:\软件\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [D:\软件\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [D:\软件\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [D:\软件\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [D:\软件\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
[PID: 1688][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3427>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
[PID: 1708][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
[PID: 1884][C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe]  <ATI Technologies Inc.><1.11.0.0>
    [c:\windows\assembly\nativeimages1_v1.1.4322

[c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_2b15d245\system.windows.forms.dll]  <N/A><N/A>
    [c:\program files\ati technologies\ati.ace\cli.implementation.dll]  <ATI Technologies Inc.><1.2.2130.37343>
    [c:\program files\ati technologies\ati.ace\log.foundation.dll]  <ATI Technologies Inc.><1.2.2026.29944>
    [c:\program files\ati technologies\ati.ace\cli.foundation.dll]  <ATI Technologies Inc.><1.2.2026.29944>
    [c:\program files\ati technologies\ati.ace\log.foundation.service.dll]  <ATI Technologies Inc.><1.2.2130.37343>
    [c:\program files\ati technologies\ati.ace\log.foundation.shared.dll]  <ATI Technologies Inc.><1.2.2026.29970>
    [c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_0435562c\system.dll]  <N/A><N/A>
    [c:\program files\ati technologies\ati.ace\cli.foundation.xmanifestation.dll]  <ATI Technologies Inc.><1.2.2130.37343>
    [c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_8e876e03\system.xml.dll]  <N/A><N/A>
    [c:\program files\ati technologies\ati.ace\cli.component.systemtray.dll]  <ATI Technologies Inc.><1.2.2130.37317>
    [c:\program files\ati technologies\ati.ace\cli.caste.graphics.shared.dll]  <ATI Technologies Inc.><1.2.2028.21076>
    [c:\program files\ati technologies\ati.ace\dem.graphics.displaysmanager.shared.dll]  <ATI Technologies Inc.><1.2.2026.29945>
    [c:\program files\ati technologies\ati.ace\cli.component.runtime.dll]  <ATI Technologies Inc.><1.2.2130.37344>
    [c:\program files\ati technologies\ati.ace\apm.foundation.dll]  <ATI Technologies Inc.><1.2.2026.29959>
    [c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_314a1d34\system.drawing.dll]  <N/A><N/A>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [c:\program files\ati technologies\ati.ace\zh-chs\cli.component.systemtray.resources.dll]  <ATI Technologies Inc.><1.2.2130.37317>
[PID: 1932][D:\软件\Logitech\SetPoint\SetPoint.exe]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\KemUtil.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\SetPointCOM.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\kemutb.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\KGame.dll]  <TODO: <Company name>><1.0.0.1>
    [D:\软件\Logitech\SetPoint\KemWnd.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\KemXML.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\Macros\MacroCore.dll]  <Logitech Inc.><2.30.399>
    [C:\Program Files\Common Files\Logitech\KHAL\KhalApi.dll]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\LCabHandler.dll]  <Logitech Inc.><2.30.399>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
[PID: 1980][C:\WINDOWS\SYSTEM32\RUNDLL32.EXE]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 208][C:\Program Files\Common Files\LightScribe\LSSrvc.exe]  <Hewlett-Packard Company><1.4.31.1>
[PID: 260][C:\WINDOWS\ATK0100\ATKOSD.exe]  <><1043, 2, 15, 53>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
[PID: 536][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  <Microsoft Corporation><7.00.9466>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
[PID: 564][C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE]  <Logitech Inc.><2.30.314>
    [C:\Program Files\Common Files\Logitech\KHAL\KHALAPI.DLL]  <Logitech Inc.><2.30.399>
    [D:\软件\Logitech\SetPoint\GameHook.dll]  <N/A><N/A>
    [D:\软件\Logitech\SetPoint\lgscroll.dll]  <Logitech Inc.><2.30.399>
    [C:\Program Files\Common Files\Logitech\KHAL\KHALITCH.DLL]  <Logitech Inc.><2.30.399>
    [C:\Program Files\Common Files\Logitech\KHAL\KHALMW.DLL]  <Logitech Inc.><2.30.399>
    [C:\Program Files\Common Files\Logitech\KHAL\KHALHPP.DLL]  <Logitech Inc.><2.30.399>
    [C:\WINDOWS\cncmaxKey.DLL]  <N/A><N/A>
[PID: 584][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe]  <Intel Corporation><10, 1, 0, 1>
[PID: 708][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1616][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>

打开SRE 启动项目 注册表 删除
<UIHost><"C:\WINDOWS\logonui"> []
<DelayRun><C:\WINDOWS\system32\91ddc370.dll> []

删除
C:\WINDOWS\system32\91ddc370.dll
C:\WINDOWS\logonui

http://forum.ikaka.com/topic.asp?board=28&artid=8105899
下载HijackThis...把日志帖上来..