[D:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr]  [Nokia, 6, 85, 59, 0]
    [D:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr]  [Nokia, 6, 85, 17, 0]
    [C:\WINDOWS\system32\PortableDeviceTypes.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
    [C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
    [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\igfxress.dll]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.17]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll]  [, 1, 0, 0, 17]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    [C:\WINDOWS\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9955.0]
    [C:\Program Files\Hewlett-Packard\IAM\bin\ItMsg.dll]  [Cognizance Corporation, 1.21.0.412]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\AuthWiz.dll]  [Bioscrypt Inc., 2.5.0.562]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ItReports.DLL]  [Cognizance Corporation, 1.5.0.046]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\AuthWiz.dll]  [Cognizance Corporation, 2.5.0.560]
    [C:\Program Files\Common Files\Adobe\Shell\PSICON.DLL]  [Adobe Systems, Incorporated, 7.0]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.16]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 61]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll]  [Bioscrypt Inc., 2.1.078]
    [C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll]  [SEIKO EPSON CORPORATION, 1, 1, 0, 0]
    [C:\Program Files\Microsoft Office\Office12\msohevi.dll]  [Microsoft Corporation, 12.0.4518.1014]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
[PID: 688 / new][C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe]  [Cognizance Corporation, 2.5.0.057]
    [C:\WINDOWS\system32\MSVCR70.dll]  [Microsoft Corporation, 7.00.9955.0]
    [C:\Program Files\Hewlett-Packard\IAM\bin\ItMsg.dll]  [Cognizance Corporation, 1.21.0.412]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ItSSO.dll]  [Cognizance Corporation, 2.5.0.410]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16608 (vista_gdr.071204-1500)]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\RasAdmin.dll]  [Cognizance Corporation, 1.5.0.028]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ItReports.DLL]  [Cognizance Corporation, 1.5.0.046]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\RasAdmin.dll]  [Cognizance Corporation, 1.5.0.028]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\PkiAdmin.dll]  [Cognizance Corporation, 1.5.0.025]
    [C:\Program Files\Hewlett-Packard\IAM\bin\HPBrand.dll]  [Hewlett-Packard Company, 1.02.0.032]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\HPBrand.dll]  [Hewlett-Packard Company, 1.02.0.032]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\ItMsg.dll]  [Cognizance Corporation, 1.21.0.413]

[C:\Program Files\Hewlett-Packard\IAM\bin\CHS\PkiAdmin.dll]  [Cognizance Corporation, 1.5.0.025]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ItVCClient.dll]  [Cognizance Corporation, 2.1.0.182]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ItVCard.dll]  [Cognizance Corporation, 1.01.173]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\Itaps.dll]  [Cognizance Corporation, 2.5.0.064]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\Itaps.dll]  [Cognizance Corporation, 2.5.0.062]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\TrayIcon.dll]  [Bioscrypt Inc., 2.5.0.289]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\BioAuth.dll]  [Cognizance Corporation, 2.5.0.306]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\BioAuth.dll]  [Cognizance Corporation, 2.5.0.301]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\AuthWiz.dll]  [Bioscrypt Inc., 2.5.0.562]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\AuthWiz.dll]  [Cognizance Corporation, 2.5.0.560]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ASChnl.dll]  [Cognizance Corporation, 1.27.0.160]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\NetAdmin.dll]  [Cognizance Corporation, 1.5.0.178]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\NetAdmin.dll]  [Cognizance Corporation, 1.5.0.177]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\SSOMngr.dll]  [Cognizance Corporation, 2.25.0.291]
    [C:\Program Files\Hewlett-Packard\IAM\bin\CHS\SSOMngr.dll]  [Cognizance Corporation, 2.25.0.292]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ittal.dll]  [Cognizance Corporation, 2.5.0.208]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\STEngine.dll]  [Cognizance Corporation, 1.5.0.030]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ItDAC.dll]  [Cognizance Corporation, 1.00.317]
    [C:\Program Files\Hewlett-Packard\IAM\Bin\ASBIoAT.dll]  [Cognizance Corporation, 2.5.0.083]
    [C:\WINDOWS\system32\ATSC70.dll]  [AuthenTec, Inc., 7, 7, 0, 62]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
[PID: 740 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [C:\WINDOWS\system32\bthcrp.dll]  [Broadcom Corporation., 5.1.0.3000]
    [C:\WINDOWS\system32\WidcommSdk.dll]  [Broadcom Corporation., 5.1.0.3000]
    [C:\WINDOWS\system32\wbtapi.dll]  [Broadcom Corporation., 5.1.0.3000]
    [C:\WINDOWS\system32\E_FLBAIP.DLL]  [SEIKO EPSON CORPORATION, 2, 4, 0, 0]
    [C:\WINDOWS\system32\HPMCPMW.DLL]  [Hewlett-Packard, 4.0.0.0]
    [C:\WINDOWS\system32\HPU4PM.DLL]  [Hewlett-Packard, 4.0.0.0]
    [C:\WINDOWS\system32\pdfc_port.dll]  [PDF Complete, Inc., 0.3.1.4]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\hpzpp07s.dll]  [Hewlett-Packard Corporation, 60.071.546.00]
[PID: 796 / LOCAL SERVICE][C:\WINDOWS\System32\SCardSvr.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 896 / NETWORK SERVICE][C:\WINDOWS\system32\msdtc.exe]  [Microsoft Corporation, 2001.12.4414.258]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 1300 / SYSTEM][C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe]  [Autodesk, Inc., 2.51.000]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 1556 / SYSTEM][C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe]  [InterVideo, 1, 0, 4, 0]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 1604 / SYSTEM][C:\Program Files\Common Files\LightScribe\LSSrvc.exe]  [Hewlett-Packard Company, 1.6.43.1]
    [C:\Program Files\Common Files\LightScribe\LSSProxy.dll]  [Hewlett-Packard Company, 1.6.43.1]
    [C:\Program Files\Common Files\LightScribe\LSLog.dll]  [Hewlett-Packard Company, 1.6.43.1]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 1844 / SYSTEM][C:\Program Files\PDF Complete\pdfsvc.exe]  [PDF Complete Inc, 3.0.1.2]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 2084 / new][D:\Program Files\Rising\Rfw\RfwMain.exe]  [Beijing Rising Technology Co., Ltd., 7.0.1.65]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Rising\Rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 88]
    [C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Rising\Rfw\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [D:\Program Files\Rising\Rfw\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [D:\Program Files\Rising\Rfw\RSAPPMGR.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]
    [D:\Program Files\Rising\Rfw\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.16]
    [D:\Program Files\Rising\Rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co.,

[D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [D:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.13]
[PID: 2128 / LOCAL SERVICE][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [c:\windows\system32\hpzipm12.dll]  [Hewlett-Packard, 12,1,1,53]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 2172 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 2296 / SYSTEM][C:\WINDOWS\system32\mqsvc.exe]  [Microsoft Corporation, 5.01.1108]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 2368 / SYSTEM][C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe]  [Hewlett-Packard Development Company, L.P., 2, 0, 1, 9]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 2656 / SYSTEM][C:\WINDOWS\system32\mqtgsvc.exe]  [Microsoft Corporation, 5.01.1108]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 2812 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 3140 / new][C:\Program Files\PDF Complete\pdfsty.exe]  [PDF Complete Inc, 3.0.73.2001]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]

[D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 3188 / new][C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe]  [Hewlett-Packard Co., 50.0.146.000]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 3196 / new][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 20.0.0.22]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.16]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 3212 / new][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  [RealNetworks, Inc., 0.1.0.4279]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 3228 / new][C:\Program Files\Analog Devices\Core\smax4pnp.exe]  [Analog Devices, Inc., 6,0,0,82]
    [C:\Program Files\Analog Devices\Core\SMWDMIF.dll]  [Analog Devices, Inc., 6, 0, 5100, 0]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 3272 / new][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]  [Synaptics, Inc., 9.1.11.3 07Jun07]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [C:\WINDOWS\system32\SynCOM.dll]  [Synaptics, Inc., 9.1.11.3 07Jun07]
    [C:\WINDOWS\system32\SynTPAPI.dll]  [Synaptics, Inc., 9.1.11.3 07Jun07]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
[PID: 3296 / new][C:\WINDOWS\system32\hkcmd.exe]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 6.14.10.4831]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 3328 / new][C:\WINDOWS\system32\igfxpers.exe]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4831]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]

[PID: 3360 / new][C:\Program Files\Rising\Rav\Ravmon.exe]  [Beijing Rising Technology Co., Ltd., 20.0.01.14]
    [C:\WINDOWS\system32\MFC71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MFC71CHS.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\Program Files\Rising\Rav\ProcCom.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RsCommX2.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 19]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [C:\Program Files\Rising\Rav\recomp.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 34]
    [C:\Program Files\Rising\Rav\refs.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 15]
    [C:\Program Files\Rising\Rav\viruslib.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 21]
    [C:\Program Files\Rising\Rav\relibldr.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RSAPPMGR.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.0]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.16]
    [C:\Program Files\Rising\Rav\MonRule.dll]  [Beijing Rising Technology Co., Ltd., 20.0.0.29]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4]
    [C:\Program Files\Rising\Rav\Rsguilib.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 88]
    [C:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 0]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
[PID: 3428 / new][C:\WINDOWS\system32\igfxsrvc.exe]  [Intel Corporation, 6.14.10.4831]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 6.14.10.4831]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 6.14.10.4831]
[PID: 3444 / new][D:\Program Files\360safe\safemon\360tray.exe]  [奇虎网, 4, 1, 0, 1001]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16608 (vista_gdr.071204-1500)]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
    [D:\Program Files\360safe\safemon\SafeKrnl.dll]  [奇虎网, 4, 1, 0, 1001]
    [D:\Program Files\360safe\AntiAdwa.dll]  [360Safe.com, 4, 1, 0, 1001]
    [D:\Program Files\360safe\live.dll]  [360.cn, 1, 0, 1, 1025]
[PID: 3628 / new][C:\WINDOWS\ZSSnp211.exe]  [ZSMCSNAP, 3, 6, 818, 7]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
[PID: 3848 / new][C:\WINDOWS\Domino.exe]  [, 3, 6, 818, 7]

[C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
[PID: 784 / new][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
[PID: 3000 / new][D:\Program Files\ChinaNetSn\bin\NetKeeper.exe]  [XI AN XINLI SOFTWARE TECHNOLOGY CO.,LTD, 0, 0, 1, 6]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16608 (vista_gdr.071204-1500)]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16608 (vista_gdr.071204-1500)]
    [D:\Program Files\ChinaNetSn\bin\detector.dll]  [西安信利软件系统有限公司, 1, 0, 0, 2]
    [C:\WINDOWS\system32\wpcap.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\WINDOWS\system32\packet.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\WINDOWS\system32\WanPacket.dll]  [CACE Technologies, 3, 1, 0, 27]
    [C:\WINDOWS\system32\XLPPoEPCIoctl.dll]  [N/A, ]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3344 / new][D:\Program Files\Tencent\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
[PID: 5544 / SYSTEM][C:\WINDOWS\system32\dllhost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16608 (vista_gdr.071204-1500)]
[PID: 3984 / new][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
[PID: 5704 / new][D:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5.7.7.441]
    [D:\Program Files\Thunder Network\Thunder\Program\BugReport.dll]  [迅雷网络, 1, 0, 1, 4]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16608 (vista_gdr.071204-1500)]
    [D:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 3, 1, 56]
    [D:\Program Files\Thunder Network\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 2, 21, 2, 217]
    [D:\Program Files\Thunder Network\Thunder\Program\stlport_vc646.dll]  [STLport Consulting, Inc., 4.6.2003.1031]
    [D:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll]  [Thunder Networking Technologies,LTD, 2, 21, 2, 217]
    [D:\Program Files\Thunder Network\Thunder\Program\streammedialib.dll]  [, 1, 3, 2, 124]
    [D:\Program Files\Thunder Network\Thunder\Program\al.dll]  [, 1, 0, 1, 3]
    [D:\Program Files\Thunder Network\Thunder\Program\xldc.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
    [D:\Program Files\Thunder Network\Thunder\Program\bd.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 6]
    [D:\Program Files\Thunder Network\Thunder\Program\XLNet.Dll]  [Thunder Networking Technologies,LTD, 1, 3, 4, 18]
    [D:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 1, 0, 8]
    [D:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DownAndPlay.dll]  [, 1, 0, 8, 26]
    [C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16608 (vista_gdr.071204-1500)]
    [D:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll]  [Thunder Networking Technologies,LTD, 1, 0, 3, 34]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
    [C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL]  [Microsoft Corporation, 12.0.4518.1014]

[D:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll]  [　, 1, 0, 2, 24]
    [D:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed15.dll]  [Thunder Networking Technologies,LTD, 3, 4, 6, 99]
    [D:\Program Files\Thunder Network\Thunder\Components\InMedia\PlayerHelper.dll]  [thunder, 1, 1, 4, 37]
    [D:\Program Files\Thunder Network\Thunder\Components\InMedia\XLNet.dll]  [Thunder Networking Technologies,LTD, 1, 3, 4, 18]
    [D:\Program Files\Thunder Network\Thunder\Components\InMedia\XLIPC.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    [D:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 2, 2, 5, 70]
    [D:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 5, 0, 16]
    [D:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 16, 5, 63]
    [D:\Program Files\Thunder Network\Thunder\Program\MSVCIRT.dll]  [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Thunder Network\Thunder\Components\Security\ThunderSafe.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 7, 71]
    [D:\Program Files\Thunder Network\Thunder\Program\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Thunder Network\Thunder\Components\Security\XLSafeUI.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 7, 71]
    [D:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 1, 6, 20]
    [D:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll]  [Thunder Networking Technologies,LTD, 1, 2, 2, 22]
    [D:\Program Files\Thunder Network\Thunder\Plugins\KLScan\PluginKLScan.dll]  [Thunder Networking Technologies,LTD, 1.1.0.9]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\XLSafeHost.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 7, 57]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\ThunderRAV.dll]  [N/A, ]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\rsscan.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\recomp.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 34]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\refs.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 15]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\viruslib.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 21]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\relibldr.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 13]
    [D:\Program Files\Thunder Network\Thunder\Plugins\GouGouTop\GouGouTop.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 4]
    [D:\Program Files\Thunder Network\Thunder\Plugins\KanKanTop\KanKanTop.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 4]
    [D:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 16]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 4, 23]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 61]
    [D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.16]
    [D:\Program Files\Thunder Network\Thunder\Components\Tips\TipsClient.dll]  [Thunder Networking Technologies,LTD, 2, 2, 11, 106]
    [D:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll]  [迅雷网络, 3, 0, 1, 33]
    [D:\Program Files\Thunder Network\Thunder\Components\UserExperience\UserExperience.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsXlCom.dll]  [, 1, 0, 0, 29]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\MediaWorker.dll]  [Thunder Networking Technologies,LTD, 1, 2, 0, 22]
    [D:\Program Files\Thunder Network\Thunder\Components\Tips\XLIPC.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    [D:\Program Files\Thunder Network\Thunder\Components\DownloadStat\DownloadStat.dll]  [深圳市迅雷网络技术有限公司, 1, 3, 1, 4]
[PID: 640 / new][D:\系统工具\日志扫描工具\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
    [C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16608 (vista_gdr.071204-1500)]
    [D:\Program Files\Rising\Rfw\ijt_base.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.10]
    [D:\Program Files\Rising\Rfw\olemon.dll]  [Beijing Rising Technology Co., Ltd., 7.0.0.5]
    [D:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1001]
    [C:\WINDOWS\system32\APSHook.dll]  [Bioscrypt Inc., 2.5.0.029]
    [D:\系统工具\日志扫描工具\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
    [D:\系统工具\日志扫描工具\sreng2\Plugins\NTFSTREAM.SRE]  [Smallfrogs Studio, 1, 0, 0, 5]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost
127.0.0.1  yu.8s7.net
127.0.0.1  1.jopanqc.com
127.0.0.1  2.joppnqq.com
127.0.0.1  wg.47255.com
127.0.0.1  1.joppnqq.com
127.0.0.1  xxx.m111.biz
127.0.0.1  1.jopenqc.com
127.0.0.1  1.jopenkk.com
127.0.0.1  xxx.vh7.biz
127.0.0.1  xxx.j41m.com
127.0.0.1  3.joppnqq.com
127.0.0.1  d.93se.com
127.0.0.1  www.868wg.com
127.0.0.1  xxx.mmma.biz
127.0.0.1  ilove.com
127.0.0.1  tp.shpzhan.cn
127.0.0.1  www.tomwg.com
127.0.0.1  www.cike007.cn
127.0.0.1  www.22aaa.com
127.0.0.1  xx.exiao01.com
127.0.0.1  www.exiao01.com
127.0.0.1  www.exiao01.com
127.0.0.1  new.749571.com
127.0.0.1  xtx.kv8.info
127.0.0.1  cao.kv8.info
127.0.0.1  1.jopmmqq.com
127.0.0.1  171817.171817.com
127.0.0.1  d2.llsging.com
127.0.0.1  down.malasc.cn
127.0.0.1  llboss.com
127.0.0.1  nx.51ylb.cn
127.0.0.1  my.531jx.cn
127.0.0.1  qqq.dzydhx.com
127.0.0.1  qqq.hao1658.com
127.0.0.1  www.333292.com
127.0.0.1  down.18dd.net
127.0.0.1  up.22x44.com

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 1440, C:\PROGRAM FILES\WIDCOMM\BLUETOOTH SOFTWARE\BIN\BTWDINS.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 688, C:\PROGRAM FILES\HEWLETT-PACKARD\IAM\BIN\ASGHOST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 688, C:\PROGRAM FILES\HEWLETT-PACKARD\IAM\BIN\ASGHOST.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 3188, C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3188, C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 3228, C:\PROGRAM FILES\ANALOG DEVICES\CORE\SMAX4PNP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3228, C:\PROGRAM FILES\ANALOG DEVICES\CORE\SMAX4PNP.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 3444, D:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3444, D:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 3628, C:\WINDOWS\ZSSNP211.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3628, C:\WINDOWS\ZSSNP211.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3848, C:\WINDOWS\DOMINO.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 3000, D:\PROGRAM FILES\CHINANETSN\BIN\NETKEEPER.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3000, D:\PROGRAM FILES\CHINANETSN\BIN\NETKEEPER.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 5704, D:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\THUNDER5.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 5704, D:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\THUNDER5.EXE]

==================================
API HOOK
入口点错误：CreateProcessA (危险等级: 高,  被下面模块所HOOK: 0x010E1FFD)
入口点错误：CreateProcessW (危险等级: 高,  被下面模块所HOOK: 0x010E20E5)

==================================
隐藏进程
N/A

==================================


[/CODE]

好长阿 ..

各位大虾..帮帮忙..谢了

可疑文件路径：
C:\WINDOWS\ZSSnp211.exe
C:\WINDOWS\Domino.exe
C:\WINDOWS\system32\drivers\EagleNT.sys
%windir%\Network Diagnostic\xpnetdiag.exe