==================================
正在运行的进程
[PID: 440][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 496][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 520][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 564][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 576][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 728][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 804][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 876][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 940][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1044][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1332][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe] [Symantec Corporation, 2.1.10.2]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 2.1.10.2]
[PID: 1380][C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe] [Symantec Corporation, 2.1.10.2]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 2.1.10.2]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCSETEVT.DLL] [Symantec Corporation, 2.1.10.2]
[D:\PROGRA~1\NORTON~1\NAVEVENT.DLL] [Symantec Corporation, 10.00.13]
[PID: 1544][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1780][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[PID: 1988][C:\Program Files\Common Files\Symantec Shared\ccApp.exe] [Symantec Corporation, 2.1.10.2]
[C:\Program Files\Symantec\LiveUpdate\ProductRegCom.DLL] [Symantec Corporation, 1.90.15.0]
[C:\Program Files\Symantec\LiveUpdate\LuComServerPS.DLL] [Symantec Corporation, 1.90.15.0]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 2.1.10.2]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCALERT.DLL] [Symantec Corporation, 2.1.10.2]
[C:\PROGRA~1\COMMON~1\SYMANT~1\CCEMLPXY.DLL] [Symantec Corporation, 2.1.10.2]
[C:\WINDOWS\system32\SYMREDIR.dll] [Symantec Corporation, 5.5.1.6]
[D:\PROGRA~1\NORTON~1\CCIMSCAN.DLL] [Symantec Corporation, 10.0.2.610]
[D:\PROGRA~1\NORTON~1\DEFALERT.DLL] [Symantec Corporation, 10.00.13]
[D:\PROGRA~1\NORTON~1\NAVAPW32.DLL] [Symantec Corporation, 10.00.13]
[D:\PROGRA~1\NORTON~1\apwutil.dll] [Symantec Corporation, 10.00.13]
[D:\PROGRA~1\NORTON~1\SAVRT32.DLL] [Symantec Corporation, ]
[D:\Program Files\Norton AntiVirus\NAVOPTRF.DLL] [Symantec Corporation, 10.00.2]
[C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll] [Symantec Corporation, 2.1.10.2]
[D:\Program Files\Norton AntiVirus\apwcmdnt.dll] [Symantec Corporation, 10.00.13]
[D:\Program Files\Norton AntiVirus\NavEmail.dll] [Symantec Corporation, 10.0.2.610]
[C:\Program Files\Common Files\Symantec Shared\ccProSub.dll] [Symantec Corporation, 2.1.10.2]
[D:\PROGRA~1\NORTON~1\NAVOpts.dll] [Symantec Corporation, 10.00.13]
[D:\PROGRA~1\NORTON~1\N32Exclu.dll] [Symantec Corporation, 10.00.13]
[D:\PROGRA~1\NORTON~1\S32NAVO.DLL] [Symantec Corporation, 5.3.0.182]
[D:\Program Files\Norton AntiVirus\NAVError.dll] [Symantec Corporation, 10.00.13]
[D:\Program Files\Norton AntiVirus\NAVAPSCR.dll] [Symantec Corporation, 10.00.13]
[PID: 1996][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 372][D:\Program Files\Norton AntiVirus\navapsvc.exe] [Symantec Corporation, 10.00.2]
[D:\Program Files\Norton AntiVirus\SAVRT32.DLL] [Symantec Corporation, ]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 2.1.10.2]
[PID: 468][D:\Program Files\Norton AntiVirus\SAVScan.exe] [Symantec Corporation, ]
[D:\Program Files\Norton AntiVirus\SAVRT32.DLL] [Symantec Corporation, ]
[C:\Program Files\Common Files\Symantec Shared\ccScan.dll] [Symantec Corporation, 2.1.10.2]
[C:\Program Files\Common Files\Symantec Shared\ecmldr32.DLL] [Symantec Corporation, 51.2.0.12]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20061122.019\ecmsvr32.dll] [Symantec Corporation, 61.3.0.18]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20061122.019\NAVEX32a.DLL] [Symantec Corporation, 20061.3.0.12]
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20061122.019\NAVENG32.DLL] [Symantec Corporation, 20061.3.0.12]
[D:\Program Files\Norton AntiVirus\NAVAP32.DLL] [Symantec Corporation, ]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\DECSDK.DLL] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ID.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Zip.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2SS.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2GZIP.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2CAB.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LHA.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RAR.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2ARJ.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TNEF.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2LZ.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2AMG.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2TAR.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2RTF.dll] [Symantec Corporation, 3.02.14.08]
[C:\Program Files\Common Files\Symantec Shared\Decomposers\Dec2Text.dll] [Symantec Corporation, 3.02.14.08]
[PID: 1196][C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe] [Symantec Corporation, 2005.1.2.20]
[C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll] [Symantec Corporation, 2.1.10.2]
[C:\Program Files\Common Files\Symantec Shared\Security Center\WSCHlpr.dll] [Symantec Corporation, 2005.1.2.20]
[C:\Program Files\Common Files\Symantec Shared\Security Center\sscnav.dll] [Symantec Corporation, 2005.1.2.20]
[C:\Program Files\Common Files\Symantec Shared\Security Center\sscnis7.dll] [Symantec Corporation, 2005.1.2.20]
[C:\Program Files\Common Files\Symantec Shared\Security Center\sscnis56.dll] [Symantec Corporation, 2005.1.2.20]
[D:\Program Files\Norton AntiVirus\NAVAPSCR.dll] [Symantec Corporation, 10.00.13]
[D:\Program Files\Norton AntiVirus\SAVRT32.DLL] [Symantec Corporation, ]
[D:\Program Files\Norton AntiVirus\NAVError.dll] [Symantec Corporation, 10.00.13]
[D:\PROGRA~1\NORTON~1\NAVOpts.dll] [Symantec Corporation, 10.00.13]
[D:\PROGRA~1\NORTON~1\N32Exclu.dll] [Symantec Corporation, 10.00.13]
[D:\PROGRA~1\NORTON~1\S32NAVO.DLL] [Symantec Corporation, 5.3.0.182]
[C:\Program Files\Symantec\LiveUpdate\NetDetectController.DLL] [Symantec Corporation, 1.90.15.0]
[PID: 2336][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3408][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Common Files\Symantec Shared\Script Blocking\scrauth.dll] [Symantec Corporation, 1, 1, 1, 131]
[C:\Program Files\Common Files\Symantec Shared\Script Blocking\ScrBlock.dll] [Symantec Corporation, 1, 1, 1, 131]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,7,0]
[PID: 3272][C:\Documents and Settings\zgf\My Documents\反病毒\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================