[PID: 3664 / OWNER][D:\新建文件夹 (4)\QQ\QZone\Qzone.exe]  [腾讯公司, 1, 9, 103, 20]
    [D:\新建文件夹 (4)\QQ\QZone\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2296 / OWNER][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2540 / OWNER][C:\Program Files\Windows Media Player\wmplayer.exe]  [Microsoft Corporation, 10.00.00.3646]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [D:\瑞星\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [C:\WINDOWS\system32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
    [C:\Program Files\MSN Messenger\psmsong.dll]  [Microsoft Corporation, 7.5.0306]
[PID: 2068 / OWNER][D:\新建文件夹 (4)\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\新建文件夹 (4)\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\BasicCtrlDll.dll]  [Tencent, 7, 0, 101, 80]
    [D:\新建文件夹 (4)\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [D:\新建文件夹 (4)\QQ\PYKer.dll]  [飘云 http://www.pyqq.cn, 飘云]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [D:\新建文件夹 (4)\QQ\ipsearcher.dll]  [, 1.0.0.3]
    [D:\新建文件夹 (4)\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [D:\新建文件夹 (4)\QQ\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
    [D:\新建文件夹 (4)\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\新建文件夹 (4)\QQ\LoginCtrl.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\新建文件夹 (4)\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\新建文件夹 (4)\QQ\LoginCtrlRes.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQMainFrame.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\CQQApplication.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQAllInOne.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\GroupLive.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\新建文件夹 (4)\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [D:\新建文件夹 (4)\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQAvatar.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQPlugin.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QRingMng.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\QQCustomFace.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [D:\新建文件夹 (4)\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQSceneMng.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\新建文件夹 (4)\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\新建文件夹 (4)\QQ\BQQApplication.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\新建文件夹 (4)\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\新建文件夹 (4)\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 280]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 9, 95]
    [D:\新建文件夹 (4)\QQ\QQSysMsgMng.dll]  [N/A, ]

[PID: 3760 / OWNER][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [C:\WINDOWS\system32\KakaTool.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.4]
    [D:\迅雷\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.2.9]
    [D:\迅雷\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 3, 11]
    [D:\迅雷\Components\ResWorker\DsBho_00.dll]  [, 1, 0, 0, 4]
    [D:\迅雷\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 6]
    [C:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 1, 1005]
    [C:\Program Files\FlashGet\getflash.dll]  [www.flashget.com, 1, 8, 1, 1002]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\瑞星\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\TSOBase\TSOBase.ocx]  [Tencent Corporation, 2007, 4, 10, 12]
    [C:\Documents and Settings\OWNER\Local Settings\Temporary Internet Files\Content.IE5\TSOBase\17b8\TSVulChk.DAT]  [Tencent, 2007, 7, 18, 33]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
[PID: 2776 / OWNER][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [C:\WINDOWS\system32\KakaTool.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.4]
    [D:\迅雷\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.2.9]
    [D:\迅雷\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 3, 11]
    [D:\迅雷\Components\ResWorker\DsBho_00.dll]  [, 1, 0, 0, 4]
    [D:\迅雷\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 6]
    [C:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 1, 1005]
    [C:\Program Files\FlashGet\getflash.dll]  [www.flashget.com, 1, 8, 1, 1002]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\瑞星\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\WINDOWS\system32\PYJJ4.IME]  [加加工作组, 4, 1, 0, 48]
    [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
[PID: 2208 / OWNER][D:\新建文件夹 (4)\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\新建文件夹 (4)\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\BasicCtrlDll.dll]  [Tencent, 7, 0, 101, 80]
    [D:\新建文件夹 (4)\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [D:\新建文件夹 (4)\QQ\PYKer.dll]  [飘云 http://www.pyqq.cn, 飘云]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [D:\新建文件夹 (4)\QQ\ipsearcher.dll]  [, 1.0.0.3]
    [D:\新建文件夹 (4)\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [D:\新建文件夹 (4)\QQ\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
    [D:\新建文件夹 (4)\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\新建文件夹 (4)\QQ\LoginCtrl.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\新建文件夹 (4)\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\新建文件夹 (4)\QQ\LoginCtrlRes.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQMainFrame.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\CQQApplication.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQAllInOne.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\GroupLive.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\新建文件夹 (4)\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\vbscript.dll]  [Microsoft Corporation, 5.6.0.7426]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [D:\新建文件夹 (4)\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQPlugin.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\QQCustomFace.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQSysMsgMng.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [D:\新建文件夹 (4)\QQ\QRingMng.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [D:\新建文件夹 (4)\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\QQSceneMng.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\QQAvatar.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\新建文件夹 (4)\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\新建文件夹 (4)\QQ\BQQApplication.dll]  [N/A, ]
    [D:\新建文件夹 (4)\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\新建文件夹 (4)\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\新建文件夹 (4)\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 280]
    [D:\瑞星\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\新建文件夹 (4)\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 9, 95]
    [D:\新建文件夹 (4)\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
[PID: 1628 / SYSTEM][C:\WINDOWS\system32\msiexec.exe]  [Microsoft Corporation, 3.1.4000.1823]
[PID: 3164 / OWNER][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [C:\WINDOWS\system32\KakaTool.dll]  [Beijing Rising Technology Co., Ltd., 4.0.0.4]
    [D:\迅雷\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.2.9]
    [D:\迅雷\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 3, 11]
    [D:\迅雷\Components\ResWorker\DsBho_00.dll]  [, 1, 0, 0, 4]
    [D:\迅雷\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 6]
    [C:\Program Files\FlashGet\jccatch.dll]  [www.flashget.com, 1, 8, 1, 1005]
    [C:\Program Files\FlashGet\getflash.dll]  [www.flashget.com, 1, 8, 1, 1002]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [D:\瑞星\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\迅雷\ComDlls\ThunderAgent_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 3, 20]
[PID: 184 / OWNER][C:\Program Files\FlashGet\flashget.exe]  [FlashGet.com, 1, 8, 1, 1001]
    [C:\Program Files\FlashGet\FGBTCORE.dll]  [, 1, 0, 0, 36]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [C:\Program Files\FlashGet\fgupdate.dll]  [www.flashget.com, 1, 8, 1, 1001]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 3248 / OWNER][D:\解压\WinRAR.exe]  [N/A, ]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 1336 / OWNER][C:\DOCUME~1\OWNER\LOCALS~1\Temp\Rar$EX02.156\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [D:\MSNShell\BIN\ShellDll.dll]  [N/A, ]
    [C:\WINDOWS\system32\SynTPFcs.dll]  [Synaptics, Inc., 7.12.9 19Nov04]
    [D:\瑞星\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\DOCUME~1\OWNER\LOCALS~1\Temp\Rar$EX02.156\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 2500, D:\瑞星\RISING\RFW\RFWMAIN.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3324, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3400, D:\瑞星\RISING\RAV\RAVTASK.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 4024, D:\MSNSHELL\BIN\MSNSHELL.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 4072, D:\JJ4\JIAJIASR.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3460, D:\新建文件夹 (4)\QQ\QQ.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3300, D:\新建文件夹 (4)\QQ\TIMPLATFORM.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1364, C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1316, D:\瑞星\RUNIEP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1316, D:\瑞星\RUNIEP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3816, D:\迅雷\PROGRAM\THUNDER5.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3968, D:\新建文件夹 (4)\QQ\QQ.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1684, D:\新建文件夹 (4)\QQ\QQ.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3008, D:\瑞星\RISING\RAV\RAVMON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2068, D:\新建文件夹 (4)\QQ\QQ.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2208, D:\新建文件夹 (4)\QQ\QQ.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 184, C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3248, D:\解压\WINRAR.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]

完了
是这些吗

安全模式下(开机后不断 按F8键  然后出来一个高级菜单 选择第一项 安全模式 进入系统)

打开sreng （就是你扫日志的软件）
启动项目  注册表 删除如下项目
<{08315C1A-9BA9-4B7C-A432-26885F78DF28}><> [N/A]
<{36CD708B-6077-4C02-9377-D73EAA495A0F}><C:\WINDOWS\WinHttp.dll> [N/A]


双击我的电脑，工具，文件夹选项，查看，单击选取"显示隐藏文件或文件夹" 并清除"隐藏受保护的操作系统文件（推荐）"前面的钩。在提示确定更改时，单击“是” 然后确定
点击  菜单栏下方的 文件夹按钮（搜索右边的按钮）
从左边的资源管理器 进入C盘
删除如下文件
C:\WINDOWS\WinHttp.dll



以下文件希望你发送给我newcenturymoon1986@yahoo.com.cn 压缩加密123
C:\WINDOWS\WinHttp.dll

真复杂

不会弄啊