Logfile of Kaka v2. 0. 2. 6 Scan Module v1. 0. 3. 7
Scan saved at 08:49:43, on 2006-12-26
Platform: Microsoft Windows XP Personal Service Pack 2 (Build 2600)
MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158))


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,default_page_url=http://www.234567.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=http://www.234567.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.234567.com/
R3 - Default URLSearchHook is missing
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: Thunder Browser Helper - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\downwork\Thunder Network\Thunder\ComDlls\XunLeiBHO_006.dll
O2 - BHO:  (file missing)
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] ; "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - HKLM\..\Run: [IgfxTray] ; C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSADService_v1.0] ; C:\WINDOWS\system\a1g.exe
O4 - HKLM\..\Run: [PHIME2002A] ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PHIME2002ASync] ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [ASocksrv] SocksA.exe
O4 - HKLM\..\Run: [RavMont] C:\WINDOWS\system32\RavMon.exe
O4 - HKLM\..\Run: [runeip] D:\垃圾清理程序\Rising\KakaToolBar\runiep.exe
O4 - HKLM\..\RunOnce: [KKDelay] D:\垃圾清理程序\Rising\KakaToolBar\RunOnce.exe
O4 - Global Startup: 服务管理器.lnk = C:\program files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &A添加到网游收藏夹 - F:\game\传奇\客户端\及时雨~1\addgameurl.htm
O8 - Extra context menu item: &使用迅雷下载 - D:\downwork\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - D:\downwork\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Tencent\QQ\SendMMS.htm
O9 - Extra Button: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\downwork\Thunder Network\Thunder\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\downwork\Thunder Network\Thunder\Thunder.exe
O9 - Extra Button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\Tencent\QQ\QQ.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
O15 - Trusted Zone: 
O16 - DPF: DirectAnimation Java Classes - file://C:\WINDOWS\Java\classes\dajava.cab
O16 - DPF: {2761225D-F0F2-44E8-A2C9-476FB6A3316A} - http://dl_dir.qq.com/qqtools/trsetuptr.exe
O16 - DPF: {43E839C5-E10F-443A-BC1F-F09CFD2ABC77} (updatePanelX Control) - http://www.uusee.com/jmd/player/updateC.cab
O16 - DPF: {88734439-46D0-42C0-A13F-7E881EE550CF} (Filetran Control) - http://chat.*****cn/download/filetran.cab
O16 - DPF: {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} (Tencent Safety Online Base Module) - http://safe.qq.com/cgi-bin/tso/TSOBase.ocx
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O16 - DPF: {F138084D-84D7-48CD-BEA8-04772457516E} (VqqSpeedDlProxy Class) - http://218.85.138.27/vqqsdl1009.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{58EE4096-D552-4DC8-96A6-EBE21A3FFE5C}: NameServer = 202.101.224.68,202.101.226.69
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ipp - (no CLSID) - (no file)
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\System32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\System32\wiascr.dll
O20 - Winlogon Notify: igfxcui
O21 - SSODL: UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Application Management (AppMgmt) -  - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Human Interface Device Access (HidServ) -  - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: kavsvc (kavsvc) - Kaspersky Lab - "D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\kavsvc.exe"
O23 - Service: Macromedia Licensing Service (Macromedia Licensing Service) -  - "C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"
O23 - Service: Routing Protect Access (MOBILL) -  - C:\WINDOWS\system32\rundll32.exe c:\windows\system32\wbem\irjit.dll,export 1087
O23 - Service: Panda Process Protection Service (PavPrSrv) -  - "C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe"
O23 - Service: Panda IManager Service (PSIMSVC) -  - "C:\Program Files\Panda Software\熊猫卫士钛金版2004\PsImSvc.exe"
O23 - Service: RawServer (RawServer) -  - C:\WINDOWS\raw.exe
O23 - Service: Rising Process Communication Center (RsCCenter) -  - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) -  - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - Service: System Security (Security) -  - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Sysbak hotkey Server (Sysbak_hotkey_Server) -  - C:\program files\Founder\Emergency Center\Hotkey.exe
O23 - Service: User Privilege Service (usprserv) - Microsoft Corporation - C:\WINDOWS\system32\svchost.exe -k netsvcs

中毒咯
请下载SREng2（最新版） ，使用“智能扫描”，按下“扫描”按钮进行扫描，
扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告
日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。

下载地址
http://www.kztechs.com/sreng/sreng2.zip

[SMSS.EXE]
PID = 0x1d4
CommandLine =
smss.exe
0x48580000
C:\WINDOWS\system32\smss.exe
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT Session Manager
2004-08-16 16:39:24

ntdll.dll
0x7c920000
C:\WINDOWS\system32\ntdll.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
NT Layer DLL
2004-08-16 16:38:38




[CSRSS.EXE]
PID = 0x23c
CommandLine = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
csrss.exe
0x4a680000
c:\windows\system32\csrss.exe
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Client Server Runtime Process
2004-08-16 16:39:14

ntdll.dll
0x7c920000
C:\WINDOWS\system32\ntdll.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
NT Layer DLL
2004-08-16 16:38:38

CSRSRV.dll
0x75aa0000
C:\WINDOWS\system32\csrsrv.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Client Server Runtime Process
2004-08-16 16:38:44

basesrv.dll
0x75ab0000
C:\WINDOWS\system32\basesrv.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT BASE API Server DLL
2004-08-16 16:38:44

winsrv.dll
0x764e0000
C:\WINDOWS\system32\winsrv.dll
5.1.2600.2751 (xpsp_sp2_gdr.050831-1520)
Microsoft Corporation
Windows Server DLL
2005-09-01 09:45:34

GDI32.dll
0x77ef0000
C:\WINDOWS\system32\gdi32.dll
5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)
Microsoft Corporation
GDI Client DLL
2005-12-29 10:56:04

KERNEL32.dll
0x7c800000
C:\WINDOWS\system32\kernel32.dll
5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)
Microsoft Corporation
Windows NT BASE API Client DLL
2006-07-05 18:56:00

USER32.dll
0x77d10000
C:\WINDOWS\system32\user32.dll
5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)
Microsoft Corporation
Windows XP USER API Client DLL
2005-03-03 02:10:06

LPK.DLL
0x62c20000
C:\WINDOWS\system32\lpk.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Language Pack
2004-08-16 16:38:54

USP10.dll
0x73fa0000
C:\WINDOWS\system32\usp10.dll
1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Uniscribe Unicode script processor
2004-08-16 16:39:08

msvcrt.dll
0x77be0000
C:\WINDOWS\system32\msvcrt.dll
7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT CRT DLL
2004-08-16 16:38:58

ADVAPI32.dll
0x77da0000
C:\WINDOWS\system32\advapi32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Advanced Windows 32 Base API
2004-08-16 16:38:42

RPCRT4.dll
0x77e50000
C:\WINDOWS\system32\rpcrt4.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Remote Procedure Call Runtime
2004-08-16 16:39:02

sxs.dll
0x75e00000
C:\WINDOWS\system32\sxs.dll
5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)
Microsoft Corporation
Fusion 2.5
2006-10-20 09:37:48




[WINLOGON.EXE]
PID = 0x258
CommandLine = winlogon.exe
winlogon.exe
0x1000000
c:\windows\system32\winlogon.exe
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT Logon Application
2004-08-16 16:39:24

ntdll.dll
0x7c920000
C:\WINDOWS\system32\ntdll.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
NT Layer DLL
2004-08-16 16:38:38

kernel32.dll
0x7c800000
C:\WINDOWS\system32\kernel32.dll
5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)
Microsoft Corporation
Windows NT BASE API Client DLL
2006-07-05 18:56:00

ADVAPI32.dll
0x77da0000
C:\WINDOWS\system32\advapi32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Advanced Windows 32 Base API
2004-08-16 16:38:42

RPCRT4.dll
0x77e50000
C:\WINDOWS\system32\rpcrt4.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Remote Procedure Call Runtime
2004-08-16 16:39:02

AUTHZ.dll
0x77fe0000
C:\WINDOWS\system32\authz.dll
5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)
Microsoft Corporation
Authorization Framework
2005-03-03 02:10:06

msvcrt.dll
0x77be0000
C:\WINDOWS\system32\msvcrt.dll
7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT CRT DLL
2004-08-16 16:38:58

CRYPT32.dll
0x765e0000
C:\WINDOWS\system32\crypt32.dll
5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Crypto API32
2004-08-16 16:38:44

USER32.dll
0x77d10000
C:\WINDOWS\system32\user32.dll
5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)
Microsoft Corporation
Windows XP USER API Client DLL
2005-03-03 02:10:06

GDI32.dll
0x77ef0000
C:\WINDOWS\system32\gdi32.dll
5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)
Microsoft Corporation
GDI Client DLL
2005-12-29 10:56:04

MSASN1.dll
0x76db0000
C:\WINDOWS\system32\msasn1.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
ASN.1 Runtime APIs
2004-08-16 16:38:56

NDdeApi.dll
0x758a0000
C:\WINDOWS\system32\nddeapi.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Network DDE Share Management APIs
2004-08-16 16:38:58

PROFMAP.dll
0x75890000
C:\WINDOWS\system32\profmap.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Userenv
2004-08-16 16:39:00

NETAPI32.dll
0x5fdd0000
C:\WINDOWS\system32\netapi32.dll
5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)
Microsoft Corporation
Net Win32 API DLL
2006-08-17 20:29:48

USERENV.dll
0x759d0000
C:\WINDOWS\system32\userenv.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Userenv
2004-08-16 16:39:08

PSAPI.DLL
0x76bc0000
C:\WINDOWS\system32\psapi.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Process Status Helper
2004-08-16 16:39:00

REGAPI.dll
0x76b90000
C:\WINDOWS\system32\regapi.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Registry Configuration APIs
2004-08-16 16:39:02

Secur32.dll
0x77fc0000
C:\WINDOWS\system32\secur32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Security Support Provider Interface
2004-08-16 16:39:04

SETUPAPI.dll
0x76060000
C:\WINDOWS\system32\setupapi.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Setup API
2004-08-16 16:39:04

VERSION.dll
0x77bd0000
C:\WINDOWS\system32\version.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Version Checking and File Installation Libraries
2004-08-16 16:39:08

飞的好开心

WINSTA.dll
0x762d0000
C:\WINDOWS\system32\winsta.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Winstation Library
2004-08-16 16:39:10

WINTRUST.dll
0x76c00000
C:\WINDOWS\system32\wintrust.dll
5.131.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft Trust Verification APIs
2004-08-16 16:39:10

IMAGEHLP.dll
0x76c60000
C:\WINDOWS\system32\imagehlp.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT Image Helper
2004-08-16 16:38:52

WS2_32.dll
0x71a20000
C:\WINDOWS\system32\ws2_32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Socket 2.0 32-Bit DLL
2004-08-16 16:39:10

WS2HELP.dll
0x71a10000
C:\WINDOWS\system32\ws2help.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Socket 2.0 Helper for Windows NT
2004-08-16 16:39:10

IMM32.DLL
0x76300000
C:\WINDOWS\system32\imm32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows XP IMM32 API Client DLL
2004-08-16 16:38:52

LPK.DLL
0x62c20000
C:\WINDOWS\system32\lpk.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Language Pack
2004-08-16 16:38:54

USP10.dll
0x73fa0000
C:\WINDOWS\system32\usp10.dll
1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Uniscribe Unicode script processor
2004-08-16 16:39:08

MSGINA.dll
0x758d0000
C:\WINDOWS\system32\msgina.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT Logon GINA DLL
2004-08-16 16:38:56

SHELL32.dll
0x7d590000
C:\WINDOWS\system32\shell32.dll
6.00.2900.2951 (xpsp_sp2_gdr.060713-0009)
Microsoft Corporation
Windows Shell Common Dll
2006-07-13 21:34:56

SHLWAPI.dll
0x77f40000
C:\WINDOWS\system32\shlwapi.dll
6.00.2900.3020 (xpsp_sp2_gdr.061023-0214)
Microsoft Corporation
Shell Light-weight Utility Library
2006-10-23 23:18:16

COMCTL32.dll
0x5d170000
C:\WINDOWS\system32\comctl32.dll
5.82 (xpsp.060825-0040)
Microsoft Corporation
Common Controls Library
2006-08-25 23:49:44

ODBC32.dll
0x73540000
C:\WINDOWS\system32\odbc32.dll
3.525.1117.0 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft Data Access - ODBC Driver Manager
2004-08-16 16:39:00

comdlg32.dll
0x76320000
C:\WINDOWS\system32\comdlg32.dll
6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Common Dialogs DLL
2004-08-16 16:38:44

comctl32.dll
0x77180000
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
6.0 (xpsp.060825-0040)
Microsoft Corporation
User Experience Controls Library
2006-08-25 23:49:42

odbcint.dll
0x20000000
C:\WINDOWS\system32\odbcint.dll
3.525.1117.0 built by: (_sqlbld)
Microsoft Corporation
Microsoft Data Access - ODBC Resources
2004-08-16 16:38:06

SHSVCS.dll
0x76e10000
C:\WINDOWS\system32\shsvcs.dll
6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Shell Services Dll
2004-08-16 16:39:04

sfc.dll
0x76b80000
C:\WINDOWS\system32\sfc.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows File Protection
2004-08-16 16:39:04

sfc_os.dll
0x76c30000
C:\WINDOWS\system32\sfc_os.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows 文件保护
2004-08-16 16:39:04

ole32.dll
0x76990000
C:\WINDOWS\system32\ole32.dll
5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)
Microsoft Corporation
Microsoft OLE for Windows
2005-07-26 12:39:50

Apphelp.dll
0x76d70000
C:\WINDOWS\system32\apphelp.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Application Compatibility Client Library
2004-08-16 16:38:42

msctfime.ime
0x73640000
C:\WINDOWS\system32\msctfime.ime
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft Text Frame Work Service IME
2004-08-16 16:37:46

WINSCARD.DLL
0x72360000
C:\WINDOWS\system32\winscard.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft Smart Card API
2004-08-16 16:39:10

WTSAPI32.dll
0x76f20000
C:\WINDOWS\system32\wtsapi32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Terminal Server SDK APIs
2004-08-16 16:39:10

uxtheme.dll
0x5adc0000
C:\WINDOWS\system32\uxtheme.dll
6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft UxTheme Library
2004-08-16 16:39:08

WINMM.dll
0x76b10000
C:\WINDOWS\system32\winmm.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
MCI API DLL
2004-08-16 16:39:10

cscdll.dll
0x76570000
C:\WINDOWS\system32\cscdll.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Offline Network Agent
2004-08-16 16:38:44

WlNotify.dll
0x758b0000
C:\WINDOWS\system32\wlnotify.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Common DLL to receive Winlogon notifications
2004-08-16 16:39:10

WINSPOOL.DRV
0x72f70000
C:\WINDOWS\system32\winspool.drv
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Spooler Driver
2004-08-16 16:39:28

MPR.dll
0x71a90000
C:\WINDOWS\system32\mpr.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Multiple Provider Router DLL
2004-08-16 16:38:54

rsaenh.dll
0xffd0000
C:\WINDOWS\system32\rsaenh.dll
5.1.2600.2161 (xpsp.040706-1629)
Microsoft Corporation
Microsoft Enhanced Cryptographic Provider
2004-08-03 22:31:44

SAMLIB.dll
0x71b70000
C:\WINDOWS\system32\samlib.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
SAM Library DLL
2004-08-16 16:39:04

sxs.dll
0x75e00000
C:\WINDOWS\system32\sxs.dll
5.1.2600.3019 (xpsp_sp2_gdr.061019-0414)
Microsoft Corporation
Fusion 2.5
2006-10-20 09:37:48

msv1_0.dll
0x77c40000
C:\WINDOWS\system32\msv1_0.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft Authentication Package v1.0
2004-08-16 16:38:58

iphlpapi.dll
0x76d30000
C:\WINDOWS\system32\iphlpapi.dll
5.1.2600.2912 (xpsp_sp2_gdr.060519-0003)
Microsoft Corporation
IP Helper API
2006-05-19 21:14:08

cscui.dll
0x76590000
C:\WINDOWS\system32\cscui.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Client Side Caching UI
2004-08-16 16:38:44

xpsp2res.dll
0x15d0000
C:\WINDOWS\system32\xpsp2res.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Service Pack 2 Messages
2004-08-16 16:38:24

NTMARTA.DLL
0x76cb0000
C:\WINDOWS\system32\ntmarta.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT MARTA provider
2004-08-16 16:39:00

WLDAP32.dll
0x76f30000
C:\WINDOWS\system32\wldap32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Win32 LDAP API DLL
2004-08-16 16:39:10

wdmaud.drv
0x72c90000
C:\WINDOWS\system32\wdmaud.drv
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
WDM Audio driver mapper
2004-08-16 16:39:28

msacm32.drv
0x72c80000
C:\WINDOWS\system32\msacm32.drv
5.1.2600.0 (xpclient.010817-1148)
Microsoft Corporation
Microsoft Sound Mapper
2001-09-05 20:00:00

MSACM32.dll
0x77bb0000
C:\WINDOWS\system32\msacm32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft ACM Audio Filter
2004-08-16 16:38:56

midimap.dll
0x77ba0000
C:\WINDOWS\system32\midimap.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Microsoft MIDI Mapper
2004-08-16 16:38:54

COMRes.dll
0x77020000
C:\WINDOWS\system32\comres.dll
2001.12.4414.258
Microsoft Corporation

2004-08-16 16:38:44

OLEAUT32.dll
0x770f0000
C:\WINDOWS\system32\oleaut32.dll
5.1.2600.2180
Microsoft Corporation

2004-08-16 16:39:00

CLBCATQ.DLL
0x76fa0000
C:\WINDOWS\system32\clbcatq.dll
2001.12.4414.308
Microsoft Corporation

2005-07-26 12:39:46




[SERVICES.EXE]
PID = 0x288
CommandLine = C:\WINDOWS\system32\services.exe
services.exe
0x1000000
C:\WINDOWS\system32\services.exe
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Services and Controller app
2004-08-16 16:39:24

ntdll.dll
0x7c920000
C:\WINDOWS\system32\ntdll.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
NT Layer DLL
2004-08-16 16:38:38

kernel32.dll
0x7c800000
C:\WINDOWS\system32\kernel32.dll
5.1.2600.2945 (xpsp_sp2_gdr.060704-2349)
Microsoft Corporation
Windows NT BASE API Client DLL
2006-07-05 18:56:00

msvcrt.dll
0x77be0000
C:\WINDOWS\system32\msvcrt.dll
7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows NT CRT DLL
2004-08-16 16:38:58

ADVAPI32.dll
0x77da0000
C:\WINDOWS\system32\advapi32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Advanced Windows 32 Base API
2004-08-16 16:38:42

RPCRT4.dll
0x77e50000
C:\WINDOWS\system32\rpcrt4.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Remote Procedure Call Runtime
2004-08-16 16:39:02

USER32.dll
0x77d10000
C:\WINDOWS\system32\user32.dll
5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)
Microsoft Corporation
Windows XP USER API Client DLL
2005-03-03 02:10:06

GDI32.dll
0x77ef0000
C:\WINDOWS\system32\gdi32.dll
5.1.2600.2818 (xpsp_sp2_gdr.051228-1427)
Microsoft Corporation
GDI Client DLL
2005-12-29 10:56:04

USERENV.dll
0x759d0000
C:\WINDOWS\system32\userenv.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Userenv
2004-08-16 16:39:08

SCESRV.dll
0x75840000
C:\WINDOWS\system32\scesrv.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Security Configuration Editor Engine
2004-08-16 16:39:04

AUTHZ.dll
0x77fe0000
C:\WINDOWS\system32\authz.dll
5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)
Microsoft Corporation
Authorization Framework
2005-03-03 02:10:06

umpnpmgr.dll
0x7e1e0000
C:\WINDOWS\system32\umpnpmgr.dll
5.1.2600.2744 (xpsp_sp2_gdr.050822-1647)
Microsoft Corporation
User-mode Plug-and-Play Service
2005-08-23 11:39:56

WINSTA.dll
0x762d0000
C:\WINDOWS\system32\winsta.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Winstation Library
2004-08-16 16:39:10

NETAPI32.dll
0x5fdd0000
C:\WINDOWS\system32\netapi32.dll
5.1.2600.2976 (xpsp_sp2_gdr.060817-0106)
Microsoft Corporation
Net Win32 API DLL
2006-08-17 20:29:48

NCObjAPI.DLL
0x5f9a0000
C:\WINDOWS\system32\ncobjapi.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation

2004-08-16 16:38:58

MSVCP60.dll
0x75ff0000
C:\WINDOWS\system32\msvcp60.dll
6.02.3104.0
Microsoft Corporation
Microsoft (R) C++ Runtime Library
2004-08-16 16:38:58

ShimEng.dll
0x5cc30000
C:\WINDOWS\system32\shimeng.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Shim Engine DLL
2004-08-16 16:39:04

AcAdProc.dll
0x47260000
C:\WINDOWS\AppPatch\acadproc.dll
5.1.2600.3008 (xpsp.061004-0027)
Microsoft Corporation
Windows Compatibility DLL
2006-10-04 22:05:26

IMM32.DLL
0x76300000
C:\WINDOWS\system32\imm32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows XP IMM32 API Client DLL
2004-08-16 16:38:52

LPK.DLL
0x62c20000
C:\WINDOWS\system32\lpk.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Language Pack
2004-08-16 16:38:54

USP10.dll
0x73fa0000
C:\WINDOWS\system32\usp10.dll
1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Uniscribe Unicode script processor
2004-08-16 16:39:08

secur32.dll
0x77fc0000
C:\WINDOWS\system32\secur32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Security Support Provider Interface
2004-08-16 16:39:04

Apphelp.dll
0x76d70000
C:\WINDOWS\system32\apphelp.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Application Compatibility Client Library
2004-08-16 16:38:42

VERSION.dll
0x77bd0000
C:\WINDOWS\system32\version.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Version Checking and File Installation Libraries
2004-08-16 16:39:08

eventlog.dll
0x76ce0000
C:\WINDOWS\system32\eventlog.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Event Logging Service
2004-08-16 16:38:48

WS2_32.dll
0x71a20000
C:\WINDOWS\system32\ws2_32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Socket 2.0 32-Bit DLL
2004-08-16 16:39:10

WS2HELP.dll
0x71a10000
C:\WINDOWS\system32\ws2help.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Socket 2.0 Helper for Windows NT
2004-08-16 16:39:10

PSAPI.DLL
0x76bc0000
C:\WINDOWS\system32\psapi.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Process Status Helper
2004-08-16 16:39:00

wtsapi32.dll
0x76f20000
C:\WINDOWS\system32\wtsapi32.dll
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
Microsoft Corporation
Windows Terminal Server SDK APIs
2004-08-16 16:39:10

看了这篇进程的东西,头都要炸了.

上面的是卡卡助手抄描的,还有好多没发呢
下面这些是 srenglog
[CODE]
2006-12-26,09:27:33
System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background>  [(Verified)Microsoft Corporation]
    <msnmsgr><; "C:\Program Files\MSN Messenger\msnmsgr.exe" /background>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <Winpatch AutoUpdate><C:\WINDOWS\system32\AUTOEXEC.exe>  [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <BigDogPath><C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera>  [N/A]
    <IgfxTray><; C:\WINDOWS\System32\igfxtray.exe>  [(Verified)Intel Corporation]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <MSADService_v1.0><; C:\WINDOWS\system\a1g.exe>  [N/A]
    <PHIME2002A><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <ASocksrv><SocksA.exe>  [1]
    <RavMont><C:\WINDOWS\system32\RavMon.exe>  [N/A]
    <runeip><D:\垃圾清理程序\Rising\KakaToolBar\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <KKDelay><D:\垃圾清理程序\Rising\KakaToolBar\RunOnce.exe>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Corporation]

==================================
启动文件夹
[服务管理器]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\服务管理器.lnk --> C:\PROGRA~1\MICROS~4\80\Tools\Binn\sqlmangr.exe [Microsoft Corporation]><N>

==================================
服务
[Application Management / AppMgmt][Stopped/Manual Start]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[kavsvc / kavsvc][Stopped/Manual Start]
  <"D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\kavsvc.exe"><Kaspersky Lab>
[Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[Routing Protect Access / MOBILL][Stopped/Auto Start]
  <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[MSSQLSERVER / MSSQLSERVER][Running/Auto Start]
  <"C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe" -sMSSQLSERVER><Microsoft Corporation>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  <"C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe"><Microsoft Corporation>
[Panda Process Protection Service / PavPrSrv][Stopped/Disabled]
  <"C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe"><N/A>
[Panda IManager Service / PSIMSVC][Stopped/Disabled]
  <"C:\Program Files\Panda Software\熊猫卫士钛金版2004\PsImSvc.exe"><N/A>
[RawServer / RawServer][Running/Auto Start]
  <C:\WINDOWS\raw.exe><N/A>
[Rising Process Communication Center / RsCCenter][Stopped/Disabled]
  <C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><N/A>
[RsRavMon Service / RsRavMon][Stopped/Disabled]
  <C:\PROGRAM FILES\RISING\RAV\Ravmond.exe><N/A>
[System Security / Security][Stopped/Auto Start]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\system32\spted.dll><N/A>
[SQLSERVERAGENT / SQLSERVERAGENT][Stopped/Manual Start]
  <"C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE" -i MSSQLSERVER><Microsoft Corporation>
[Sysbak hotkey Server / Sysbak_hotkey_Server][Running/Auto Start]
  <C:\program files\Founder\Emergency Center\Hotkey.exe><N/A>

==================================
驱动程序
[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
  <system32\drivers\ac97intc.sys><Intel Corporation>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start]
  <system32\drivers\ALCXWDM.SYS><N/A>
[标准 IDE/ESDI 硬盘控制器 / atapi][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\atapi\atapi.sys><Microsoft Corporation>
[BaseTDI / BaseTDI][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\basetdi.sys><Rising>
[basic2 / basic2][Stopped/Manual Start]
  <System32\DRIVERS\HSF_BSC2.sys><Conexant>
[Cdsys / Cdsys][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\cdcd.sys><N/A>
[EagleNT / EagleNT][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\EagleNT.sys><N/A>
[Rising Exploit Scaner 1.0 / ExpScaner][Stopped/Manual Start]
  <\??\C:\PROGRAM FILES\RISING\RAV\ExpScan.sys><N/A>
[Fallback / Fallback][Running/Auto Start]
  <System32\DRIVERS\HSF_FALL.sys><Conexant>
[Fsks / Fsks][Running/Auto Start]
  <System32\DRIVERS\HSF_FSKS.sys><Conexant>
[HOOKAPI / HOOKAPI][Stopped/Auto Start]
  <\??\C:\PROGRAM FILES\RISING\RAV\HOOKAPI.SYS><N/A>
[HookCont / HookCont][Stopped/Auto Start]
  <\??\C:\PROGRAM FILES\RISING\RAV\HOOKCONT.sys><N/A>
[HookReg / HookReg][Stopped/Auto Start]
  <\??\C:\PROGRAM FILES\RISING\RAV\HOOKREG.sys><N/A>
[HookSys / HookSys][Stopped/Auto Start]
  <\??\C:\PROGRAM FILES\RISING\RAV\hooksys.sys><N/A>
[HSFHWBS2 / HSFHWBS2][Running/Manual Start]
  <System32\DRIVERS\HSFBS2S2.sys><Conexant Systems, Inc.>
[HSF_DP / HSF_DP][Running/Manual Start]
  <System32\DRIVERS\HSFDPSP2.sys><Conexant Systems, Inc.>
[hsf_msft / hsf_msft][Stopped/Manual Start]
  <System32\DRIVERS\HSF_MSFT.sys><Conexant>
[ialm / ialm][Running/Manual Start]
  <System32\DRIVERS\ialmnt5.sys><Intel Corporation>
[K56 / K56][Running/Auto Start]
  <System32\DRIVERS\HSF_K56K.sys><Conexant>
[Kl1 / Kl1][Running/Boot Start]
  <\SystemRoot\System32\drivers\kl1.sys><Kaspersky Lab>
[Klif / Klif][Running/System Start]
  <System32\drivers\klif.sys><Kaspersky Labs>
[Klmc / Klmc][Running/System Start]
  <System32\drivers\klmc.sys><Kaspersky Lab>
[kmsinput / kmsinput][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\kmsinput.sys><N/A>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <System32\DRIVERS\mdmxsdk.sys><Conexant>
[New0 / New0][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\new.sys><N/A>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\D:\Tencent\IPQQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkycryp / npkycryp][Stopped/Manual Start]
  <\??\D:\Tencent\QQ\npkycryp.sys><N/A>
[PauseDrv / PauseDrv][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\PauseDrv.sys><N/A>
[Panda Process Protection Driver / PavProc][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\DRIVERS\PavProc.sys><N/A>
[Pnpnt / Pnpnt][Running/Boot Start]
  <\SystemRoot\System32\Drivers\pnpnt.sys><N/A>
[PnpWmkDrv / PnpWmkDrv][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\PnpWmkDrv.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Rksample / Rksample][Stopped/Manual Start]
  <System32\DRIVERS\HSF_SAMP.sys><Conexant>
[Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver / RTL8023][Stopped/Manual Start]
  <System32\DRIVERS\Rtlnic51.sys><N/A>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <System32\DRIVERS\secdrv.sys><N/A>
[SoftFax / SoftFax][Running/Auto Start]
  <System32\DRIVERS\HSF_FAXX.sys><Conexant>
[SVKP / SVKP][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\SVKP.sys><N/A>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
  <System32\DRIVERS\tcpip.sys><Microsoft Corporation>
[Tones / Tones][Running/Auto Start]
  <System32\DRIVERS\HSF_TONE.sys><Conexant>
[TSP / TSP][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Labs>
[V124 / V124][Running/Auto Start]
  <System32\DRIVERS\HSF_V124.sys><Conexant>
[winachsf / winachsf][Running/Manual Start]
  <System32\DRIVERS\HSFCXTS2.sys><Conexant Systems, Inc.>
[WmNdisDrv / WmNdisDrv][Stopped/Manual Start]
  <System32\Drivers\WmNdisDrv.sys><N/A>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[VIMICRO USB PC Camera / ZSMC302][Running/Manual Start]
  <System32\Drivers\usbVM31b.sys><VM>

==================================
浏览器加载项
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\downwork\Thunder Network\Thunder\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <D:\downwork\Thunder Network\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Tencent\QQ\QQ.EXE, TENCENT>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[updatePanelX Control]
  {43E839C5-E10F-443A-BC1F-F09CFD2ABC77} <C:\WINDOWS\system32\uusee\internet\updateC.ocx, uusee>
[Filetran Control]
  {88734439-46D0-42C0-A13F-7E881EE550CF} <C:\PROGRA~1\Bluesky\BLUESK~1\filetran.ocx, Bluesky Studio(http://www.bluesky.cn)>
[Tencent Safety Online Base Module]
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\DOWNLO~1\TSOBase.ocx, Tencent Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[VqqSpeedDlProxy Class]
  {F138084D-84D7-48CD-BEA8-04772457516E} <C:\WINDOWS\vqqsdl.dll, Tencent>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\downwork\Thunder Network\Thunder\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[卡卡上网安全助手]
  {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\System32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[&A添加到网游收藏夹]
  <F:\game\传奇\客户端\及时雨~1\addgameurl.htm, N/A>
[&使用迅雷下载]
  <D:\downwork\Thunder Network\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <D:\downwork\Thunder Network\Thunder\Program\GetAllUrl.htm, N/A>
[上传到QQ网络硬盘]
  <D:\Tencent\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <D:\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\Tencent\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 468][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 572][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 600][\??\C:\WINDOWS\SYSTEM32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 648][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 660][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 816][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 860][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 932][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 976][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1084][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1244][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll]  [Windows (R) 2000 DDK provider, 5.00.2195.1620]
[PID: 1948][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\垃圾清理程序\Rising\KakaToolBar\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
    [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.4020]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4020]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.4020]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4020]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.4020]
    [C:\WINDOWS\system32\igfxress.dll]  [Intel Corporation, 3.0.0.4020]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RavExt.DLL]  [Beijing Rising Technology Co., Ltd., 17, 0, 0, 3]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\shellex.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\PROGRA~1\ftc\Commenu.dll]  [Fygsoft and Microsoft, 3.0.0.63]
    [D:\downwork\Thunder Network\Thunder\ComDlls\XunLeiBHO_006.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 3]
    [C:\program files\Founder\Emergency Center\SBHotkey.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\WmShell.dll]  [KillSoft, 1.0.0.1]
[PID: 2032][C:\WINDOWS\VM_STI.EXE]  [BIGDOG, 4, 2, 610, 4]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\VM31bPrp.Ax]  [Vimicro, 1.00.01.00]
    [D:\垃圾清理程序\Rising\KakaToolBar\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 132][D:\垃圾清理程序\Rising\KakaToolBar\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 3]
    [D:\垃圾清理程序\Rising\KakaToolBar\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [D:\垃圾清理程序\Rising\KakaToolBar\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 152][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\垃圾清理程序\Rising\KakaToolBar\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 180][C:\program files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe]  [Microsoft Corporation, 2000.080.2039.00]
    [D:\垃圾清理程序\Rising\KakaToolBar\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
[PID: 788][C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe]  [Microsoft Corporation, 2000.080.2039.00]
[PID: 920][C:\WINDOWS\raw.exe]  [N/A, N/A]
[PID: 1116][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1168][C:\program files\Founder\Emergency Center\Hotkey.exe]  [N/A, N/A]
    [C:\program files\Founder\Emergency Center\SBHotkey.dll]  [N/A, N/A]
[PID: 1612][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 3012][D:\Tencent\IPQQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\Tencent\IPQQ\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [D:\Tencent\IPQQ\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [D:\Tencent\IPQQ\ipsearcher.dll]  [N/A, 1.0.0.4]
    [D:\Tencent\IPQQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [D:\Tencent\IPQQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\垃圾清理程序\Rising\KakaToolBar\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
    [D:\Tencent\IPQQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\Tencent\IPQQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\program files\Founder\Emergency Center\SBHotkey.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQMainFrame.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\CQQApplication.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQAllInOne.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\GroupLive.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQPlugin.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\Tencent\IPQQ\QRingMng.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\Tencent\IPQQ\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\Tencent\IPQQ\QQAvatar.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\Tencent\IPQQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQCustomFace.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\BQQApplication.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\Tencent\IPQQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [D:\Tencent\IPQQ\QQSceneMng.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 1, 12]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [D:\Tencent\IPQQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\scrchpg.dll]  [Kaspersky Lab, 5.0.1.18]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\scrch_ag.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\FSSync.dll]  [Kaspersky Lab, 5.0.383.0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\pr_rmt.dll]  [Kaspersky Lab, 5.0.383.0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\ccclient.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\klipc.dll]  [Kaspersky Lab, 5.0.383.0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\KLUtil.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\rpt.dll]  [Kaspersky Lab, 5.0.383.2]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\CCIFACE.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\prloader.dll]  [Kaspersky Lab, 5.0.383.0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\prkernel.ppl]  [Kaspersky Lab, 5.0.383.0]
    [d:\垃圾清理程序\卡巴斯基\kaspersky anti-virus personal\prstring.ppl]  [Kaspersky Lab, 5.0.383.0]
    [d:\垃圾清理程序\卡巴斯基\kaspersky anti-virus personal\pr_srv.ppl]  [Kaspersky Lab, 5.0.383.0]
    [d:\垃圾清理程序\卡巴斯基\kaspersky anti-virus personal\pr_clnt.ppl]  [Kaspersky Lab, 5.0.383.0]
    [D:\Tencent\IPQQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Tencent\IPQQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
[PID: 3092][D:\Tencent\QQ\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
    [D:\垃圾清理程序\Rising\KakaToolBar\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
    [D:\Tencent\IPQQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 3568][D:\Tencent\IPQQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\Tencent\IPQQ\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [D:\Tencent\IPQQ\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [D:\Tencent\IPQQ\ipsearcher.dll]  [N/A, 1.0.0.4]
    [D:\Tencent\IPQQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [D:\Tencent\IPQQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\垃圾清理程序\Rising\KakaToolBar\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 7]
    [D:\Tencent\IPQQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\Tencent\IPQQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\program files\Founder\Emergency Center\SBHotkey.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQMainFrame.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\CQQApplication.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQAllInOne.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\GroupLive.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\QQPlugin.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\Tencent\IPQQ\QRingMng.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\Tencent\IPQQ\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\Tencent\IPQQ\QQAvatar.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\Tencent\IPQQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\BQQApplication.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\IPQQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\Tencent\IPQQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [D:\Tencent\IPQQ\QQCustomFace.dll]  [N/A, N/A]
    [D:\Tencent\IPQQ\QQSceneMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\scrchpg.dll]  [Kaspersky Lab, 5.0.1.18]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\scrch_ag.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\FSSync.dll]  [Kaspersky Lab, 5.0.383.0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\pr_rmt.dll]  [Kaspersky Lab, 5.0.383.0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\ccclient.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\klipc.dll]  [Kaspersky Lab, 5.0.383.0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\KLUtil.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\rpt.dll]  [Kaspersky Lab, 5.0.383.2]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\CCIFACE.dll]  [Kaspersky Lab, 5.0.383.1]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\prloader.dll]  [Kaspersky Lab, 5.0.383.0]
    [D:\垃圾清理程序\卡巴斯基\Kaspersky Anti-Virus Personal\prkernel.ppl]  [Kaspersky Lab, 5.0.383.0]
    [d:\垃圾清理程序\卡巴斯基\kaspersky anti-virus personal\prstring.ppl]  [Kaspersky Lab, 5.0.383.0]
    [d:\垃圾清理程序\卡巴斯基\kaspersky anti-virus personal\pr_srv.ppl]  [Kaspersky Lab, 5.0.383.0]
    [d:\垃圾清理程序\卡巴斯基\kaspersky anti-virus personal\pr_clnt.ppl]  [Kaspersky Lab, 5.0.383.0]
    [D:\Tencent\IPQQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Tencent\IPQQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [D:\Tencent\IPQQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]