正在运行的进程
[PID: 740 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 788 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 812 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2645 (xpsp.050331-1524)]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACNotify.dll]  [Lenovo, 4, 11, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [N/A, ]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [N/A, ]
    [C:\WINDOWS\system32\tphklock.dll]  [N/A, ]
    [C:\Program Files\Lenovo\AwayTask\AwayNotify.dll]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\WINDOWS\system32\NavLogon.dll]  [Symantec Corporation, 10.0.0.846]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 856 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 868 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\csspwntfye.dll]  [Lenovo Group Limited, 6.01.0044.00]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\cssuserdatadispatcher.dll]  [Lenovo Group Limited, 6.01.0044.00]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\ibmtsp.dll]  [IBM, 1,1,2,009]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\tcsrpc.dll]  [IBM, 1,1,2,009]
[PID: 1052 / SYSTEM][C:\WINDOWS\system32\ibmpmsvc.exe]  [, ]
[PID: 1080 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1148 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1188 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1244 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe]  [Intel Corporation, 10, 1, 0, 1]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 10, 1, 0, 2]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 10, 1, 0, 5]
[PID: 1272 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe]  [Intel Corporation , 10, 1, 0, 34]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 10, 1, 0, 5]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 10, 1, 0, 2]
    [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  [N/A, ]
    [C:\Program Files\Intel\Wireless\Bin\IntStngs.dll]  [, 10, 1, 0, 3]
    [C:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL]  [N/A, ]
[PID: 1324 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1416 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1648 / SYSTEM][C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe]  [Symantec Corporation, 103.5.4.3]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Symantec Shared\ccL35.dll]  [Symantec Corporation, 103.5.4.3]
    [C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll]  [Symantec Corporation, 103.5.4.3]
[PID: 452 / IBM][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWRMGRRT.DLL]  [N/A, ]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL]  [N/A, ]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.4436]
    [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 7.0.0.2004121400]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\WINDOWS\System32\DLA\DLASHX_W.DLL]  [Sonic Solutions, 5.10.15a]
    [C:\WINDOWS\system32\DLAAPI_W.DLL]  [Sonic Solutions, 5.10.15a]
    [C:\WINDOWS\System32\DLA\DLACResW.dll]  [Sonic Solutions, 5.10.15a]
    [C:\WINDOWS\DOWNLO~1\BaiDuBar.dll]  [, 2, 0, 0, 0]
    [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
[PID: 644 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 720 / SYSTEM][C:\WINDOWS\system32\netdde.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 776 / SYSTEM][C:\WINDOWS\system32\IPSSVC.EXE]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Lenovo\AwayTask\AwayDB.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
[PID: 832 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [N/A, ]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocMigrator.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ThinQCon.dll]  [N/A, ]

[PID: 1100 / SYSTEM][C:\WINDOWS\system32\drivers\CDAC11BA.EXE]  [Macrovision, 4.20.020]
[PID: 1560 / SYSTEM][C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe]  [Diskeeper Corporation, 9.0.537.0]
    [C:\Program Files\Diskeeper Corporation\Diskeeper\DkLib.dll]  [Diskeeper Corporation, 9.0.537.0]
    [C:\Program Files\Diskeeper Corporation\Diskeeper\Tab.dll]  [Executive Software International, Inc., 1.0.34.0]
    [C:\Program Files\Diskeeper Corporation\Diskeeper\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\Diskeeper Corporation\Diskeeper\GetFATExtents.dll]  [Diskeeper Corporation, 9.0.537.0]
    [C:\WINDOWS\system32\odbcbcp.dll]  [Microsoft Corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Diskeeper Corporation\Diskeeper\2052\DkRes.dll]  [Diskeeper Corporation, 9.0.537.0]
    [C:\Program Files\Diskeeper Corporation\Diskeeper\DkTabProvider.dll]  [Diskeeper Corporation, 9.0.537.0]
[PID: 1628 / SYSTEM][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe]  [Intel Corporation, 10, 1, 0, 1]
[PID: 1724 / SYSTEM][C:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe]  [symantec, 10.0.0.846]
    [C:\Program Files\Common Files\Symantec Shared\SSC\Transman.dll]  [Symantec Corporation, 10.0.0.846]
    [C:\WINDOWS\system32\CBA.DLL]  [Intel? Corporation, 6.12.0.130 E]
    [C:\WINDOWS\system32\MsgSys.dll]  [Intel? Corporation, 6.12.0.130 E]
    [C:\WINDOWS\system32\NTS.dll]  [Intel? Corporation, 6.12.0.130 E]
    [C:\WINDOWS\system32\PDS.DLL]  [Intel? Corporation, 6.12.0.130 E]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [c:\program files\common files\symantec shared\ssc\ScsComms.dll]  [Symantec Corporation, 10.0.0.846]
[PID: 1852 / SYSTEM][C:\WINDOWS\system32\TpKmpSVC.exe]  [N/A, ]
[PID: 1868 / SYSTEM][C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rrservice.exe]  [, 3,0,27,0]
    [C:\Program Files\IBM ThinkVantage\Rescue and Recovery\rr_res.dll]  [, 3,0,29,0]
    [C:\Program Files\IBM ThinkVantage\Rescue and Recovery\pui.dll]  [International Business Machines Corporation, 1, 0, 0, 6]
    [C:\Program Files\IBM ThinkVantage\Rescue and Recovery\ui.dll]  [, 3,0,29,0]
    [C:\Program Files\IBM ThinkVantage\Rescue and Recovery\CDRecord.dll]  [N/A, ]
    [C:\Program Files\IBM ThinkVantage\Rescue and Recovery\zlib.dll]  [, 1.1.4.0]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 1892 / SYSTEM][C:\Program Files\IBM ThinkVantage\Common\Scheduler\tvtsched.exe]  [, 3,0,9,0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 1908 / SYSTEM][C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe]  [N/A, ]
    [C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherCommon.dll]  [N/A, ]
[PID: 1956 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)]
[PID: 2020 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe]  [Lenovo, 4, 11, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [N/A, ]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcHlpr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ANCA.dll]  [IBM Corp., 8.3]
    [C:\Program Files\ThinkPad\ConnectUtilities\ANC.dll]  [IBM Corp., 8.3]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACGolan.DLL]  [N/A, ]
    [C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll]  [Intel Corporation, 10, 1, 0, 46]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 10, 1, 0, 5]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 10, 1, 0, 2]
    [C:\Program Files\Intel\Wireless\Bin\DbEngine.dll]  [Intel Corporation, 10, 1, 0, 13]
    [C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll]  [N/A, ]
    [C:\Program Files\Intel\Wireless\Bin\IntStngs.dll]  [, 10, 1, 0, 3]
    [C:\Program Files\Intel\Wireless\Bin\MurocAPI.dll]  [Intel Corporation, 10, 1, 0, 38]
    [C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll]  [Intel Corporation, 10, 1, 0, 1]
[PID: 2148 / SYSTEM][C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe]  [Lenovo, 4, 11, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [N/A, ]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo, 4, 11, 0, 0]
    [C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll]  [N/A, ]
    [C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll]  [Lenovo, 4, 0, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\SvcHlprRes.dll]  [Lenovo, 4, 0, 0, 0]
[PID: 2220 / SYSTEM][C:\Program Files\IBM ThinkVantage\Common\Logger\logmon.exe]  [N/A, ]
[PID: 2292 / IBM][C:\WINDOWS\system32\tp4serv.exe]  [Lenovo Group Limited, 3.55]
    [C:\WINDOWS\system32\tp4uires.dll]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 2324 / IBM][C:\WINDOWS\system32\hkcmd.exe]  [Intel Corporation, 3.0.0.4436]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4436]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4436]
[PID: 2332 / IBM][C:\WINDOWS\system32\igfxpers.exe]  [Intel Corporation, 3.0.0.4436]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4436]

[PID: 2364 / IBM][C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe]  [Lenovo Group Limited, 1, 0, 0, 0]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\SC\EzMApRes.dll]  [N/A, ]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
[PID: 2412 / IBM][C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\Oemdspif.dll]  [Intel Corporation, 3.0.0.4436]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.4436]
    [C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\tpfnf7.dll]  [N/A, ]
[PID: 2472 / IBM][C:\Program Files\Analog Devices\Core\smax4pnp.exe]  [Analog Devices, Inc., 6, 0, 0, 20]
    [C:\Program Files\Analog Devices\Core\SMWDMIF.dll]  [Analog Devices, Inc., 6, 0, 4200, 014]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 2556 / IBM][C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 2564 / IBM][C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe]  [Lenovo Group Limited, 1.16]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 2620 / IBM][C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe]  [Lenovo Group Limited, 1, 0, 0, 1]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\PROGRA~1\THINKV~1\PrdCtr\SC\LPRESMGR.DLL]  [N/A, ]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\TrayRes.dll]  [Lenovo, 4, 0, 0, 0]
[PID: 2652 / IBM][C:\WINDOWS\System32\DLA\DLACTRLW.EXE]  [Sonic Solutions, 5.10.15a]
    [C:\WINDOWS\system32\DLAAPI_W.DLL]  [Sonic Solutions, 5.10.15a]
    [C:\WINDOWS\System32\DLA\DLACResW.dll]  [Sonic Solutions, 5.10.15a]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 2704 / IBM][C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe]  [InstallShield Software Corporation, 3, 10, 100, 1155]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 2744 / IBM][C:\Program Files\Lenovo\AwayTask\AwaySch.EXE]  [Lenovo Group Limited, 2, 0, 1, 0]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Lenovo\AwayTask\AwayAPI.dll]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Lenovo\AwayTask\AwayDB.dll]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 2776 / IBM][C:\Program Files\IBM ThinkVantage\Client Security Solution\cssauthe.exe]  [Lenovo Group Limited, 6.01.0044.00]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\cssuserdatadispatcher.dll]  [Lenovo Group Limited, 6.01.0044.00]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\csswait.dll]  [Lenovo Group Limited, 6.01.0044.00]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\ibmtsp.dll]  [IBM, 1,1,2,009]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\tcsrpc.dll]  [IBM, 1,1,2,009]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\cssdlgpwentry.dll]  [Lenovo Group Limited, 6.01.0044.00]
    [C:\Program Files\IBM ThinkVantage\Client Security Solution\dlganswerprompt.dll]  [Lenovo Group Limited, 6.01.0044.00]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 2796 / IBM][C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\pdservice.exe]  [Utimaco Safeware AG, 1.10.2.1]
    [C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDLib.dll]  [Utimaco Safeware AG, 1.10.2.1]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\PDLib0804.dll]  [Utimaco Safeware AG, 1.10.2.1]
    [C:\Program Files\IBM ThinkVantage\SafeGuard PrivateDisk\pdservice0804.dll]  [Utimaco Safeware AG, 1.10.2.1]
[PID: 2824 / IBM][C:\Program Files\Picasa2\PicasaMediaDetector.exe]  [Google Inc., 2.1.0]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 2896 / IBM][C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe]  [Lenovo, 4, 11, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [N/A, ]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo, 4, 11, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [N/A, ]
    [C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll]  [Lenovo, 4, 0, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\TrayRes.dll]  [Lenovo, 4, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
[PID: 2928 / IBM][C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe]  [Lenovo, 4, 11, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll]  [N/A, ]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll]  [Lenovo, 4, 11, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll]  [N/A, ]
    [C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll]  [N/A, ]
    [C:\WINDOWS\system32\MFC71U.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\GUIHlprRes.dll]  [Lenovo, 4, 0, 0, 0]
    [C:\Program Files\ThinkPad\ConnectUtilities\Res\SC\IconRes.dll]  [Lenovo, 4, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
[PID: 2964 / IBM][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL]  [Lenovo Group Limited, 1, 0, 0, 0]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\SC\PWRMGRRT.DLL]  [N/A, ]
    [C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL]  [N/A, ]
    [C:\WINDOWS\system32\OEMDSPIF.DLL]  [Intel Corporation, 3.0.0.4436]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.4436]

[PID: 3072 / IBM][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.3510]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 3152 / IBM][D:\Program Files\WINAMP\winampa.exe]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
[PID: 3216 / IBM][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
[PID: 3220 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3148 / IBM][C:\Documents and Settings\IBM\桌面\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\40A3F616.dll]  [N/A, ]
    [C:\WINDOWS\system32\PROCHLP.DLL]  [Lenovo Group Limited, 2, 0, 0, 0]
    [C:\Documents and Settings\IBM\桌面\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  Error. [AutoCADScriptFile]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[D:\]
[AutoRun]
open=40A3F616.exe
shell\open=打开(&O)
shell\open\Command=40A3F616.exe
shell\open\Default=1
shell\explore=资源管理器(&X)
shell\explore\Command=40A3F616.exe
[E:\]
[AutoRun]
open=40A3F616.exe
shell\open=打开(&O)
shell\open\Command=40A3F616.exe
shell\open\Default=1
shell\explore=资源管理器(&X)
shell\explore\Command=40A3F616.exe
[F:\]
[AutoRun]
open=40A3F616.exe
shell\open=打开(&O)
shell\open\Command=40A3F616.exe
shell\open\Default=1
shell\explore=资源管理器(&X)
shell\explore\Command=40A3F616.exe
[G:\]
[AutoRun]
open=40A3F616.exe
shell\open=打开(&O)
shell\open\Command=40A3F616.exe
shell\open\Default=1
shell\explore=资源管理器(&X)
shell\explore\Command=40A3F616.exe

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 1272, C:\PROGRAM FILES\INTEL\WIRELESS\BIN\S24EVMON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1868, C:\PROGRAM FILES\IBM THINKVANTAGE\RESCUE AND RECOVERY\RRSERVICE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1892, C:\PROGRAM FILES\IBM THINKVANTAGE\COMMON\SCHEDULER\TVTSCHED.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2020, C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\ACSVC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2148, C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\SVCGUIHLPR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2220, C:\PROGRAM FILES\IBM THINKVANTAGE\COMMON\LOGGER\LOGMON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2364, C:\PROGRA~1\THINKPAD\UTILIT~1\EZEJMNAP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2412, C:\PROGRA~1\LENOVO\PKGMGR\HOTKEY\TPHKMGR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2556, C:\PROGRAM FILES\LENOVO\PKGMGR\HOTKEY\TPONSCR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2564, C:\PROGRAM FILES\LENOVO\PKGMGR\HOTKEY_1\TPSCREX.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2620, C:\PROGRA~1\THINKV~1\PRDCTR\LPMGR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2652, C:\WINDOWS\SYSTEM32\DLA\DLACTRLW.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2704, C:\PROGRAM FILES\COMMON FILES\INSTALLSHIELD\UPDATESERVICE\ISSCH.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2744, C:\PROGRAM FILES\LENOVO\AWAYTASK\AWAYSCH.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2796, C:\PROGRAM FILES\IBM THINKVANTAGE\SAFEGUARD PRIVATEDISK\PDSERVICE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2824, C:\PROGRAM FILES\PICASA2\PICASAMEDIADETECTOR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2896, C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\ACTRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2928, C:\PROGRAM FILES\THINKPAD\CONNECTUTILITIES\ACWLICON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3072, C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3152, D:\PROGRAM FILES\WINAMP\WINAMPA.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]

参考http://forum.ikaka.com/topic.asp?board=28&artid=8322881

而且每打开一个盘它就会重新弹出一个窗口
还有要安装瑞星时！
打开安装程序后安装到要输入ID时
它就自动把安装程序关掉了！
请大师指点指点啊

Trojan.PSW.Win32.OnlineGames.dai
这个病毒怎么杀掉啊！
我的每个盘上都有啊

水树的建议，你必须自己去看了，没耐心看，也只能等阳光他们是否愿意给你远程帮助了。