好下了!

重新弄一份日志?

所以我要你给我最新日志呀

我饿死了

等你半天了

再给你十分钟

不给最新日志

我就回家胀饭去了

正在扫描=下,别走!

对不起打扰你那么长时间!

[CODE]

2009-07-22,19:35:40

System Repair Engineer 2..6..12..1018
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <360Safetray><C:\Program Files\360safe\safemon\360Tray.exe /start>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r>  [(Verified)Qizhi Software (beijing) Co. Ltd]
    <runeip><"G:\新建文件夹\rstray.exe" /startup>  [File is missing]
    <egui><; >  [N/A]
    <FixCamera><; C:\WINDOWS\FixCamera.exe>  []
    <NMGameX_AutoRun><; C:\WINDOWS\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa>  [File is missing]
    <QvodPlayer><; "C:\Program Files\QvodPlayer\QvodPlayer.exe" -autorun>  [Shenzhen QVOD Technology Co.,Ltd]
    <snp325><; C:\WINDOWS\vsnp325.exe>  []
    <SoundMan><; SOUNDMAN.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <SpeedNet><; >  [N/A]
    <tsnp325><; C:\WINDOWS\tsnp325.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <KKDelay><G:\新建文件夹\RunOnce.exe>  [(Verified)Beijing Rising Information Technology Corporation Limited]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{71C4F360-FF1E-413E-B17A-0CA267A78E97}><C:\WINDOWS\system32\qB5BKZy7vR5m.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <qtfstqywi><C:\WINDOWS\system32\loanoltrd.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{7C16B06B-8D27-38D2-5AF4-E38D27D27C16}><C:\WINDOWS\system32\RWBGLQ.dll>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install>  [Microsoft Corporation]

==================================
启动文件夹
N/A

==================================
服务
[Ati HotKey Poller / Ati HotKey Poller][Stopped/Disabled]
  <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[ATI Smart / ATI Smart][Stopped/Disabled]
  <C:\WINDOWS\system32\ati2sgag.exe><>
[Windows Presentation Foundation Font Cache 3.0.0.0 / FontCache3.0.0.0][Stopped/Manual Start]
  <C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe><Microsoft Corporation>
[Windows CardSpace / idsvc][Stopped/Disabled]
  <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"><Microsoft Corporation>
[Kingsoft Rescue Service / Kingsoft Rescue Service][Running/Auto Start]
  <G:\新建文件夹 (2)\新建文件夹\KSM2.0\KSMSvc.exe><>
[Kingsoft Antivirus XEngine Service(Beta) / KxEServBeta][Running/Auto Start]
  <C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxeserv.exe><Kingsoft Corporation>
[McAfee Framework Service / McAfeeFramework][Running/Auto Start]
  <"G:\Common Framework\FrameworkService.exe" /ServiceStart><McAfee, Inc.>
[McAfee McShield / McShield][Running/Auto Start]
  <"G:\杀毒\Mcshield.exe"><McAfee, Inc.>
[McAfee Task Manager / McTaskManager][Running/Auto Start]
  <"G:\杀毒\VsTskMgr.exe"><McAfee, Inc.>
[Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled]
  <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"><Microsoft Corporation>

==================================
驱动程序
[Mobinex Virtual Webcam - 9You, WDM Video Capture / 9you][Running/Auto Start]
  <system32\DRIVERS\9you.sys><Windows (R) 2000 DDK provider>
[aaatimeo / aaatimeo][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\aaatimeo.sys><Microsoft Corporation>
[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start]
  <system32\drivers\ac97intc.sys><Intel Corporation>
[AFAMgt / AFAMgt][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\afamgt.sys><Adaptec, Inc.>
[ahcix86 / ahcix86][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\ahcix86.sys><ATI Technologies Inc.>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AliIde / AliIde][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\aliide.sys><Acer Laboratories Inc.>
[AMD AGP Bus Filter Driver / amdagp][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\amdagp.sys><Advanced Micro Devices, Inc.>
[amdbusdr / amdbusdr][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\amdbusdr.sys><AMD>
[AMD EIDE 驱动程衼E / amdeide][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\AmdEide.sys><AMD>
[AMD K8 Processor Driver / AmdK8][Stopped/Manual Start]
  <System32\DRIVERS\amdk8.sys><Advanced Micro Devices>
[SiI-3112 SATALink  Controller / ASH1205][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\ASH1205.sys><Silicon Image, Inc.>
[ata1200a / ata1200a][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\ata1200a.sys><Adaptec, Inc.>
[ati2mtag / ati2mtag][Running/Manual Start]
  <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[atiide / atiide][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\atiide.sys><ATI Technologies Inc.>
[ATSpy / ATSpy][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\ATSpy.sys><N/A>
[Promise driver accelerator / bb-run][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\bb-run.sys><Promise Technology, Inc.>
[bootsafe / bootsafe][Running/Boot Start]
  <\SystemRoot\system32\Drivers\bootsafe.sys><>
[DELL CERC SATA 1.5/6ch RAID Miniport Driver / cercsr6][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\cercsr6.sys><Adaptec, Inc.>
[CmdIde / CmdIde][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[Cpq32fs2 / Cpq32fs2][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\Cpq32fs2.sys><Hewlett-Packard Company>
[Promise Removable Disk Control Driver / dontgo][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\DontGo.sys><Promise Technology, Inc.>
[EagleNT / EagleNT][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\EagleNT.sys><N/A>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
  <system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[fttxr52P / fttxr52P][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\fttxr52P.sys><Promise Technology, Inc.>
[HpCISSm2 / HpCISSm2][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\HpCISSm2.sys><Hewlett-Packard Company>
[hptmv6 / hptmv6][Stopped/Boot Start]
  <\SystemRoot\system32\DRIVERS\hptmv6.sys><HighPoint Technologies, Inc.>
[hvmgc / hvmgc][Running/Boot Start]
  <\SystemRoot\system32\drivers\pjofv.sys><N/A>
[Intel  RAID Controller / iaStor55][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\iaStor55.sys><Intel Corporation>
[Intel RAID  Controller / iaStor70][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\iaStor70.sys><Intel Corporation>
[IGALIVE / IGALIVE][Running/Auto Start]
  <\??\C:\Program Files\IGALIVE\IGALIVE.sys><N/A>
[IlvMoneyDRIVER53 / IlvMoneyDRIVER53][Stopped/Manual Start]
  <\??\G:\DNF外挂\M E1129\IlvMoney1129.sys><N/A>
[McAfee Inc. / mfeapfk][Running/Manual Start]
  <system32\drivers\mfeapfk.sys><McAfee, Inc.>
[McAfee Inc. / mfeavfk][Running/Manual Start]
  <system32\drivers\mfeavfk.sys><McAfee, Inc.>
[McAfee Inc. / mfebopk][Running/Manual Start]
  <system32\drivers\mfebopk.sys><McAfee, Inc.>
[McAfee Inc. / mfehidk][Running/Manual Start]
  <system32\drivers\mfehidk.sys><McAfee, Inc.>
[VSCore mferkdk / mferkdk][Running/System Start]
  <\??\G:\杀毒\mferkdk.sys><McAfee, Inc.>
[McAfee Inc. / mfetdik][Running/System Start]
  <system32\drivers\mfetdik.sys><McAfee, Inc.>
[mtlrd / mtlrd][Stopped/Auto Start]
  <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\wmp\mtlrd.sys><N/A>
[mv61xx / mv61xx][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\mv61xx.sys><Marvell Semiconductor, Inc.>
[mvSata / mvSata][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\mvsata.sys><Marvell Semiconductors Inc.>
[NTGDT / NTGDT][Running/System Start]
  <\??\C:\WINDOWS\system32\Drivers\NTGDT.SYS><N/A>
[nv / nv][Stopped/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[nvgts / nvgts][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\nvgts.sys><NVIDIA Corporation>
[NVIDIA nForce RAID Driver / nvrd32][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\nvrd32.sys><NVIDIA Corporation>
[pcidump / pcidump][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\pcidump.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[ql2100 / ql2100][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\ql2100.sys><QLogic Corporation>
[ql2200 / ql2200][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\ql2200.sys><QLogic Corporation>
[QQGameProtect / QQGameProtect][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\QQGameProtect.sys><TENCENT>
[Feitian ROCKEY4 Device Service / ROCKEYNT][Running/Manual Start]
  <system32\DRIVERS\Rockey4.sys><Feitian Technologies Co., Ltd.>
[rr172x / rr172x][Stopped/Boot Start]
  <\SystemRoot\system32\DRIVERS\rr172x.sys><HighPoint Technologies, Inc.>
[rr174x / rr174x][Stopped/Boot Start]
  <\SystemRoot\system32\DRIVERS\rr174x.sys><HighPoint Technologies, Inc.>
[rr2340 / rr2340][Stopped/Boot Start]
  <\SystemRoot\system32\DRIVERS\rr2340.sys><HighPoint Technologies, Inc.>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[SafeBoxKrnl / SafeBoxKrnl][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\SafeBoxKrnl.sys><360安全中心>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[sejt1 / sejt1][Stopped/Manual Start]
  <\??\G:\DNF外挂\8月29\AE\sejt.sys><N/A>
[SATALink External Device Filter / SiRemFil][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\SiRemFil.sys><Silicon Image, Inc.>
[SIS AGP Bus Filter / sisagp][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\sisagp.sys><Silicon Integrated Systems Corporation>
[sisraidx / sisraidx][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\sisraidx.sys><Silicon Integrated Systems Corp.>
[USB PC Camera (SNPSTD325) / SNP325][Running/Manual Start]
  <system32\DRIVERS\snp325.sys><Sonix Co. Ltd.>
[TAP-Win32 Adapter V8 / tap0801][Stopped/Manual Start]
  <system32\DRIVERS\tap0801.sys><The OpenVPN Project>
[TesDrvPt / TesDrvPt][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\TesDrvPt.sys><TENCENT>
[TesSafe / TesSafe][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\TesSafe.sys><N/A>
[ViBus / ViBus][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\ViBus.sys><VIA Technologies, Inc.>
[videX32 / videX32][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\videX32.sys><VIA Technologies, Inc.>
[VIA SATA IDE Device Driver / ViPrt][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\ViPrt.sys><VIA Technologies, Inc.>
[VIA SATA IDE Hot-plug Driver / xfilt][Stopped/Disabled]
  <\SystemRoot\system32\DRIVERS\xfilt.sys><VIA Technologies,Inc>

==================================
浏览器加载项
[ThunderAtOnce Class]
  {01443AEC-0FD1-40fd-9C87-E93D1494C233} <F:\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[]
  {16B05A05-27C1-E38D-F49E-8D27C17C16B0} <C:\WINDOWS\system32\LQVAFK.dll, Microsoft Corporation>
[QQToolbar]
  {29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[scriptproxy]
  {7DB2D5A0-7241-4E79-B68D-6309F01C5231} <G:\杀毒\Scriptcl.dll, (Signed) McAfee, Inc.>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <F:\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, (Signed) 360.CN>
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <F:\Thunder\Thunder.exe, (Signed) Thunder Networking Technologies,LTD>
[QQToolbar]
  {29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[MMCPlayer Class]
  {05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINDOWS\Downloaded Program Files\MMCShell.dll, (Signed) Sohu.com Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx, (Signed) Adobe Systems, Inc.>
[XPPlayer Class]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.5871.223.(328).dll, (Signed) Xunlei Networking Technologies,LTD>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <F:\Thunder\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <, >
[]
  {16B05A05-27C1-E38D-F49E-8D27C17C16B0} <C:\WINDOWS\system32\LQVAFK.dll, Microsoft Corporation>
[]
  {2318C2B1-4965-11D4-9B18-009027A5CD4F} <, >
[QQToolbar]
  {29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll, (Signed) TENCENT>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <F:\Thunder\ComDlls\ThunderAgent_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[scriptproxy]
  {7DB2D5A0-7241-4E79-B68D-6309F01C5231} <G:\杀毒\Scriptcl.dll, (Signed) McAfee, Inc.>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, (Signed) Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <F:\Thunder\ComDlls\xunleiBHO_Now.dll, (Signed) Thunder Networking Technologies,LTD>
[卡卡上网安全助手]
  {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} <C:\WINDOWS\system32\UrlFilter.dll, (Signed) Beijing Rising Information Technology Co., Ltd.>
[]
  {AA58ED58-01DD-4D91-8333-CF10577473F7} <, >
[]
  {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <, >
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, (Signed) 360.CN>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx, (Signed) Adobe Systems, Inc.>
[]
  {FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[使用迅雷下载]
  <F:\Thunder\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
  <F:\Thunder\Program\getallurl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ表情]
  <G:\QQ\QQ2008正式版\AddEmotion.htm, N/A>

==================================
正在运行的进程
[PID: 480 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 548 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 576 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\Ati2evxx.dll]  [ATI Technologies Inc., 6.14.10.4124]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 620 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)]
[PID: 632 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
[PID: 788 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 848 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
[PID: 924 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
    [C:\WINDOWS\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 1012 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
[PID: 1068 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1096 / SYSTEM][G:\新建文件夹 (2)\新建文件夹\KSM2.0\KSMSvc.exe]  [, 2009, 4, 8, 3]
    [G:\新建文件夹 (2)\新建文件夹\KSM2.0\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [G:\新建文件夹 (2)\新建文件夹\KSM2.0\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [G:\新建文件夹 (2)\新建文件夹\KSM2.0\KSMCore.dll]  [, 2009, 7, 13, 114]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxebase.dll]  [Kingsoft Corporation, 2009,07,01,38]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\SCOM.dll]  [Kingsoft Corporation, 2009,07,01,38]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxelog.dll]  [Kingsoft Corporation, 2009,07,01,38]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxecore.dll]  [Kingsoft Corporation, 2009,07,01,38]
    [G:\新建文件夹 (2)\新建文件夹\KSM2.0\json.dll]  [N/A, ]
    [G:\新建文件夹 (2)\新建文件夹\KSM2.0\kscanner.dll]  [Kingsoft Corporation, 2009, 7, 9, 338]
    [G:\新建文件夹 (2)\新建文件夹\KSM2.0\bcdll.dll]  [, 2008, 11, 17, 1]
[PID: 1356 / Administrator][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
    [C:\WINDOWS\system32\qB5BKZy7vR5m.dll]  [N/A, ]
    [C:\WINDOWS\system32\RWBGLQ.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932)]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [F:\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.34]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\LQVAFK.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932)]
    [G:\杀毒\Scriptcl.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [F:\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    [F:\Thunder\Components\ResWorker\DsBho_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 20]
    [F:\Thunder\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[PID: 1572 / Administrator][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1604 / SYSTEM][C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxeserv.exe]  [Kingsoft Corporation, 2009,07,01,38]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\MSVCP80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.762]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\json.dll]  [N/A, ]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\COMRes.dll]  [Microsoft Corporation, 2001.12.4414.258]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\scom.dll]  [Kingsoft Corporation, 2009,07,01,38]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxebase.dll]  [Kingsoft Corporation, 2009,07,01,38]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxelog.dll]  [Kingsoft Corporation, 2009,07,01,38]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxecore.dll]  [Kingsoft Corporation, 2009,07,01,38]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
    [C:\Program Files\Common Files\Kingsoft\CommonService_Beta\kxecore\kxestat.dll]  [Kingsoft Corporation, 2009,06,17,28]
[PID: 1840 / SYSTEM][G:\Common Framework\FrameworkService.exe]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\nailog2.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [G:\Common Framework\naXML2_71.dll]  [N/A, ]
    [G:\Common Framework\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [G:\Common Framework\naCmnLib2_71.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\applib.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\Logging.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\InternetManager.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\naInet.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\UserSpace.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\Management.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\cmalib.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\naPolicyManager.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\naisign2.DLL]  [N/A, ]
    [C:\WINDOWS\system32\epoPGPSDK.dll]  [PGP Corporation, 3.5.3]
    [G:\Common Framework\ScriptSubSys.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\UpdateSubSys.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\Scheduler.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\TCSubSys.dll]  [McAfee, Inc., 3.6.0.574]
[PID: 1956 / SYSTEM][G:\杀毒\Mcshield.exe]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\LockDown.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\mytilus.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\mytilus2.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\RES0402\McShield.dll]  [McAfee, Inc., VSCORE.13.3.2.128]
    [G:\杀毒\FTL.Dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\naiann.dll]  [McAfee, Inc., 8.5.0.913]
    [G:\杀毒\VsEvntUI.dll]  [N/A, ]
    [G:\杀毒\NAEvent.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\shutil.dll]  [McAfee, Inc., 8.5.0.895]
    [G:\杀毒\wmain.dll]  [McAfee, Inc., 8.5.0.781]
    [G:\Common Framework\GenEvtInf.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [G:\Common Framework\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [G:\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\杀毒\scriptsv.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [C:\Program Files\Common Files\McAfee\Engine\mcscan32.dll]  [McAfee, Inc., 5.2.00]
    [G:\杀毒\mfebopa.dll]  [McAfee, Inc., SYSCORE.13.3.0.149.x86]
    [G:\杀毒\mfehida.dll]  [McAfee, Inc., SYSCORE.13.3.0.149.x86]
    [G:\杀毒\mfeapfa.dll]  [McAfee, Inc., SYSCORE.13.3.0.149.x86]
    [G:\杀毒\mfeavfa.dll]  [McAfee, Inc., SYSCORE.13.3.0.149.x86]
[PID: 1964 / Administrator][C:\WINDOWS\notepad.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2004 / SYSTEM][G:\杀毒\VsTskMgr.exe]  [McAfee, Inc., 8.5.0.913]
    [G:\杀毒\LockDown.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\mytilus2.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\mytilus.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [G:\杀毒\shutil.dll]  [McAfee, Inc., 8.5.0.895]
    [G:\杀毒\wmain.dll]  [McAfee, Inc., 8.5.0.781]
    [G:\杀毒\condl.dll]  [McAfee, Inc., 8.5.0.857]
    [G:\杀毒\RES0402\McShield.dll]  [McAfee, Inc., VSCORE.13.3.2.128]
    [G:\杀毒\MIDUtil.Dll]  [McAfee, Inc., 8.5.0.148]
[PID: 204 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 424 / SYSTEM][G:\Common Framework\naPrdMgr.exe]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\naisign2.DLL]  [N/A, ]
    [C:\WINDOWS\system32\epoPGPSDK.dll]  [PGP Corporation, 3.5.3]
    [G:\Common Framework\naXML2_71.dll]  [N/A, ]
    [G:\Common Framework\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [G:\Common Framework\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [G:\Common Framework\nailog2.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\naCmnLib2_71.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\applib.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.6.0.574]
    [G:\杀毒\VsPlugin.dll]  [McAfee, Inc., 8.5.0.913]
[PID: 280 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
[PID: 2588 / Administrator][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\LQVAFK.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932)]
[PID: 3760 / Administrator][c:\program files\internet explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [F:\Thunder\ComDlls\TDAtOnce_Now.dll]  [Thunder Networking Technologies,LTD, 1.0.5.34]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINDOWS\system32\LQVAFK.dll]  [Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932)]
    [C:\Program Files\Tencent\QQToolbar\IEBar.dll]  [TENCENT, 3, 1, 25, 11]
    [C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Toolbar.dll]  [TENCENT, 3, 1, 25, 11]
    [C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\TBAddr.dll]  [Tencent, 3, 1, 17, 11]
    [G:\杀毒\Scriptcl.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [F:\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    [F:\Thunder\Components\ResWorker\DsBho_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 20]
    [F:\Thunder\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    [C:\WINDOWS\system32\UrlFilter.dll]  [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15]
    [G:\新建文件夹\UrlRule.dll]  [Beijing Rising Information Technology Co., Ltd., 1.0.0.15]
    [C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 5, 0, 0, 1012]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
    [C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx]  [Adobe Systems, Inc., 10,0,12,36]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\qB5BKZy7vR5m.dll]  [N/A, ]
[PID: 2668 / Administrator][F:\Thunder\Program\Thunder5.exe]  [Thunder Networking Technologies,LTD, 5.8.6.607]
    [F:\Thunder\Program\BugReport.dll]  [Thunder Networking Technologies,LTD, 1, 4, 1, 20]
    [F:\Thunder\Program\TaskManager.dll]  [Thunder Networking Technologies,LTD, 1, 3, 10, 72]
    [F:\Thunder\Program\download_interface.dll]  [Thunder Networking Technologies,LTD, 3, 3, 2, 325]
    [F:\Thunder\Program\mp.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 2]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [F:\Thunder\Program\asyn_frame.dll]  [Thunder Networking Technologies,LTD, 1, 3, 2, 28]
    [F:\Thunder\Program\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
    [F:\Thunder\Program\XLNet.Dll]  [Thunder Networking Technologies,LTD, 1, 5, 2, 25]
    [F:\Thunder\Program\BHOStub.dll]  [Thunder Networking Technologies,LTD, 1, 1, 1, 10]
    [F:\Thunder\Program\FloatBar.dll]  [Giganology Inc., 1, 0, 0, 2]
    [F:\Thunder\Components\DownAndPlay\DownAndPlay.dll]  [, 1, 0, 12, 30]
    [F:\Thunder\Program\backend_agent.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 25]
    [F:\Thunder\Program\zlib1.dll]  [, 1.2.3]
    [F:\Thunder\Program\ptl.dll]  [Thunder Networking Technologies,LTD, 3, 2, 2, 35]
    [F:\Thunder\Program\dl_peer_id.dll]  [Thunder Networking Technologies,LTD, 3, 1, 2, 3]
    [F:\Thunder\Program\xl_stat.dll]  [, 1, 1, 2, 6]
    [F:\Thunder\Program\p2sp.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 43]
    [F:\Thunder\Program\fs.dll]  [Thunder Networking Technologies,LTD, 1, 1, 2, 13]
    [F:\Thunder\Program\down_dispatcher.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 29]
    [G:\杀毒\Scriptcl.dll]  [McAfee, Inc., VSCORE.13.3.2.128.x86]
    [F:\Thunder\Program\iTargetAD.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 35]
    [F:\Thunder\Program\p2p_upload.dll]  [Thunder Networking Technologies,LTD, 1,1,2,13]
    [C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx]  [Adobe Systems, Inc., 10,0,12,36]
    [F:\Thunder\Program\p2p.dll]  [Thunder Networking Technologies,LTD, 1,1,2,37]
    [F:\Thunder\Program\xldc.dll]  [Thunder Networking Technologies,LTD, 4, 0, 2, 28]
    [F:\Thunder\Program\stream.dll]  [Thunder Networking Technologies,LTD, 2, 1, 2, 401]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [F:\Thunder\Program\p2p_local_res.dll]  [Thunder Networking Technologies,LTD, 1,1,2,18]
    [F:\Thunder\Program\al.dll]  [Thunder Networking Technologies,LTD, 1,1,2,23]
    [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL]  [Microsoft Corporation, 11.0.8164]
    [F:\Thunder\Components\InMedia\iEmbedShell.dll]  [　, 3, 4, 10, 117]
    [F:\Thunder\Components\InMedia\iEmbed19.dll]  [Thunder Networking Technologies,LTD, 3, 4, 10, 117]
    [F:\Thunder\Components\InMedia\PlayerHelper.dll]  [thunder, 1, 2, 7, 61]
    [F:\Thunder\Components\InMedia\XLIPC.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    [F:\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 2, 2, 5, 70]
    [F:\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 2, 5, 0, 90]
    [F:\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 17, 0, 67]
    [F:\Thunder\Program\MSVCIRT.dll]  [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [F:\Thunder\Program\imdt.dll]  [Thunder Networking Technologies,LTD, 1.2.0.21]
    [F:\Thunder\Components\Security\ThunderSafe.dll]  [深圳市迅雷网络技术有限公司, 2, 1, 5, 99]
    [F:\Thunder\Components\Security\ConfigManager.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 0, 1]
    [F:\Thunder\Components\Security\SafeManager.dll]  [Xunlei Networking Technologies,LTD, 1, 0, 5, 20]
    [F:\Thunder\Components\Security\SafeStatistic.dll]  [Xunlei Networking Technologies,LTD, 1, 0, 0, 1]
    [F:\Thunder\Program\XLNetU.Dll]  [Thunder Networking Technologies,LTD, 1, 5, 1, 24]
    [F:\Thunder\Components\Community\audioCtrl.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 2]
    [F:\Thunder\Components\Community\xlaudio.dll]  [, 1, 0, 2, 4]
    [F:\Thunder\Program\xlvdt.dll]  [Thunder Networking Technologies,LTD, 1.0.2.6]
    [F:\Thunder\Plugins\XLSafeHost\XLSafeHost.dll]  [深圳市迅雷网络技术有限公司, 1, 2, 7, 87]
    [F:\Thunder\Program\xldcsubtask.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
    [F:\Thunder\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 1, 7, 25]
    [F:\Thunder\Program\LiveUpdate.dll]  [Thunder Networking Technologies,LTD, 1, 2, 4, 26]
    [F:\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 19]
    [F:\Thunder\Components\Tips\TipsClient.dll]  [Thunder Networking Technologies,LTD, 2, 2, 14, 120]
    [F:\Thunder\Components\VPSHELL\VPSHELL.dll]  [迅雷网络, 4, 0, 0, 38]
    [F:\Thunder\Components\UserExperience\UserExperience.dll]  [Thunder Networking Technologies,LTD, 1, 0, 3, 5]
    [F:\Thunder\Components\ResWorker\DsXlCom.dll]  [, 1, 0, 0, 30]
    [F:\Thunder\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    [F:\Thunder\Components\ResWorker\MediaWorker.dll]  [Thunder Networking Technologies,LTD, 1, 2, 0, 22]
    [F:\Thunder\Components\Tips\XLIPC.DLL]  [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    [F:\Thunder\Components\DownloadStat\DownloadStat.dll]  [Thunder Networking Technologies,LTD, 1, 4, 1, 6]
    [F:\Thunder\Program\emule_id.dll]  [, 1, 0, 2, 11]
    [F:\Thunder\Program\bd.dll]  [Thunder Networking Technologies,LTD, 1, 0, 2, 19]
[PID: 208 / Administrator][G:\新建文件夹 (2)\新建文件夹\SREng老版本2.6.12.1018.EXE]  [1111, 2..6..12..1018]
    [C:\WINDOWS\system32\GameLink.dll]  [www.Easy2Game.com, 17, 2, 6, 8]
    [C:\PROGRA~1\MICROS~2\OFFICE11\MCPS.DLL]  [Microsoft Corporation, 11.0.8164]

==================================

接上

文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
Easy2Game-TCPChain
    C:\WINDOWS\system32\GameLink.dll(www.Easy2Game.com, Easy2Game Service Provider)
Easy2Game-UDPChain
    C:\WINDOWS\system32\GameLink.dll(www.Easy2Game.com, Easy2Game Service Provider)
Easy2Game-UDPChain
    C:\WINDOWS\system32\GameLink.dll(www.Easy2Game.com, Easy2Game Service Provider)
Easy2Game-TCPChain
    C:\WINDOWS\system32\GameLink.dll(www.Easy2Game.com, Easy2Game Service Provider)
Easy2Game-TCPFilter
    C:\WINDOWS\system32\GameLink.dll(www.Easy2Game.com, Easy2Game Service Provider)
Easy2Game-UDPFilter
    C:\WINDOWS\system32\GameLink.dll(www.Easy2Game.com, Easy2Game Service Provider)
Easy2Game-UDPFilter
    C:\WINDOWS\system32\GameLink.dll(www.Easy2Game.com, Easy2Game Service Provider)
Easy2Game-TCPFilter
    C:\WINDOWS\system32\GameLink.dll(www.Easy2Game.com, Easy2Game Service Provider)
RSVP UDP Service Provider
    C:\WINDOWS\system32\ESPI11.dll(DYWT, ESPI)
RSVP TCP Service Provider
    C:\WINDOWS\system32\ESPI11.dll(DYWT, ESPI)

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1        localhost
203.209.253.250    www.360safe.com
203.209.253.250    www.k369.com
203.209.253.250    360safe.com
203.209.253.250    update.360safe.com
203.209.253.250    dl.360safe.com
203.209.253.250    down.360safe.com
203.209.253.250    bbs.360safe.com
203.209.253.250    kaba.360safe.com
203.209.253.250    baike.360safe.com
203.209.253.250    www.360.cn
203.209.253.250    360.cn
203.209.253.250    wopti.360.cn
203.209.253.250    update.360.cn
203.209.253.250    dl.360.cn
203.209.253.250    down.360.cn
203.209.253.250    bbs.360.cn
203.209.253.250    kaba.360.cn
203.209.253.250    baike.360.cn
203.209.253.250    360.qihoo.com
203.209.253.250    360safe.qihoo.com
203.209.253.250    inst.360safe.com
203.209.253.250    pdown.stat.360safe.com
203.209.253.250    u360.eset.com.cn
203.209.253.250    eset.360.cn
203.209.253.250    synch.eset.com.cn
203.209.253.250    qd.code.360.cn
203.209.253.250    sale.360.cn
203.209.253.250    stat.360safe.com
203.209.253.250    f.360.cn
203.209.253.250    nod32v2actsrv.eset.com.cn
203.209.253.250    forum.ikaka.com
203.209.253.250    www.ikaka.com
203.209.253.250    safe.qq.com
203.209.253.250    update.ikaka.com
203.209.253.250    forum.jiangmin.com
203.209.253.250    update.jiangmin.com
222.73.85.28      tieba.baidu.com
203.209.253.250    update.rising.com.cn
203.209.253.250    online.rising.com.cn
203.209.253.250    center.rising.com.cn
203.209.253.250    up.duba.net
203.209.253.250    vi.duba.net
203.209.253.250    shadu.baidu.com
203.209.253.250    du.baidu.com
203.209.253.250    security.symantec.com
203.209.253.250    shadu.duba.net
203.209.253.250    bbs.duba.net
203.209.253.250    www.duba.net
203.209.253.250    online.jiangmin.com
203.209.253.250    cn.mcafee.com
203.209.253.250    www.ahn.com.cn
203.209.253.250    www.kaspersky.com.cn
203.209.253.250    www.pcav.cn
203.209.253.250    www.luosoft.com
203.209.253.250    www.im286.com
203.209.253.250    an.baidu.com
203.209.253.250    ma.baidu.com
203.209.253.250    bbs.htmlman.net
203.209.253.250    download.rising.com.cn
203.209.253.250    10000.286er.com
203.209.253.250    im286.net
203.209.253.250    10.88mw.com
222.73.85.28      zhidao.baidu.com
203.209.253.250    ju.qihoo.com
203.209.253.250    bbs.chinaz.com
222.73.85.28      www.qihoo.com
203.209.253.250    rss.360safe.com
203.209.253.250    x.360safe.com
203.209.253.250    d.360safe.com
203.209.253.250    updatem.360safe.com
203.209.253.250    softm.360safe.com
203.209.253.250    ishare.sina.com.cn
203.209.253.250    zhuansha.duba.net
203.209.253.250    buy.duba.net
203.209.253.250    kad.www.duba.net
203.209.253.250    cu001.www.duba.net
203.209.253.250    cu002.www.duba.net
203.209.253.250    cu003.www.duba.net
203.209.253.250    cu004.www.duba.net
203.209.253.250    cu005.www.duba.net
203.209.253.250    cu010.www.duba.net
203.209.253.250    client.download.duba.net
222.73.85.28 cn.yahoo.com
222.73.85.28 www.yahoo.com.cn
222.73.85.28 www.yahoo.com
222.73.85.28 www.soso.com
222.73.85.28 www.google.cn
222.73.85.28 search.msn.com
222.73.85.28 cnweb.search.live.com
222.73.85.28 search.live.com
222.73.85.28 runonce.msn.com
222.73.85.28 www.qidian.com
222.73.85.28 qidian.com
222.73.85.28 www.readnovel.com
222.73.85.28 readnovel.com
222.73.85.28 www.hongxiu.com
222.73.85.28 hongxiu.com
222.73.85.28 www.bookge.com
222.73.85.28 bookge.com
222.73.85.28 www.jjwxc.net
222.73.85.28 jjwxc.net
222.73.85.28 hjsm.tom.com
222.73.85.28 www.cuiweiju.com
222.73.85.28 cuiweiju.com
222.73.85.28 book.sina.com.cn
222.73.85.28 www.xxsy.net
222.73.85.28 xxsy.net
222.73.85.28 www.wansong.net
222.73.85.28 wansong.net
222.73.85.28 www.sodu.com.cn
222.73.85.28 sodu.com.cn
222.73.85.28 www.fmx.cn
222.73.85.28 fmx.cn
222.73.85.28 www.xs8.cn
222.73.85.28 xs8.cn
222.73.85.28 www.booksky.org
222.73.85.28 booksky.org
222.73.85.28 www.zhulang.com
222.73.85.28 zhulang.com
222.73.85.28 www.3320.net
222.73.85.28 3320.net
222.73.85.28 www.17k.com
222.73.85.28 17k.com
222.73.85.28 www.xhsd.net
222.73.85.28 xhsd.net
222.73.85.28 www.qukanshu.com
222.73.85.28 qukanshu.com
222.73.85.28 www.fbook.net
222.73.85.28 fbook.net
222.73.85.28 www.duyidu.com
222.73.85.28 duyidu.com
222.73.85.28 www.cc222.com
222.73.85.28 cc222.com
222.73.85.28 www.junzitang.com
222.73.85.28 junzitang.com
222.73.85.28 www.yuanwen.com
222.73.85.28 yuanwen.com
222.73.85.28 www.feiku.com
222.73.85.28 feiku.com
222.73.85.28 book.hqdoor.com
222.73.85.28 www.52eshu.com
222.73.85.28 52eshu.com
222.73.85.28 book.sohu.com
222.73.85.28 www.laishu.com
222.73.85.28 laishu.com
222.73.85.28 www.tdtxt.cn
222.73.85.28 tdtxt.cn
222.73.85.28 www.2100book.com
222.73.85.28 2100book.com
222.73.85.28 www.ebuk.cn
222.73.85.28 ebuk.cn
222.73.85.28 www.xhxsw.com
222.73.85.28 xhxsw.com
222.73.85.28 www.xstxw.com
222.73.85.28 xstxw.com
222.73.85.28 www.fy01.com
222.73.85.28 fy01.com
222.73.85.28 www.xhxs8.com
222.73.85.28 xhxs8.com
222.73.85.28 www.hahawx.com
222.73.85.28 hahawx.com
222.73.85.28 www.rvxs.com
222.73.85.28 rvxs.com
222.73.85.28 www.jar5.cn
222.73.85.28 jar5.cn
222.73.85.28 www.17650.com
222.73.85.28 17650.com
222.73.85.28 www.freexiaoshuo.com
222.73.85.28 freexiaoshuo.com
222.73.85.28 www.zwwx.com
222.73.85.28 zwwx.com
222.73.85.28 www.67xs.com
222.73.85.28 67xs.com
222.73.85.28 www.rnovel.com
222.73.85.28 rnovel.com
222.73.85.28 www.86zw.com
222.73.85.28 86zw.com
222.73.85.28 www.yixia.net
222.73.85.28 yixia.net
222.73.85.28 www.lcread.com
222.73.85.28 lcread.com
222.73.85.28 www.9bin.com
222.73.85.28 9bin.com
222.73.85.28 www.waok.net
222.73.85.28 waok.net
222.73.85.28 www.365zw.com
222.73.85.28 365zw.com
222.73.85.28 www.pashu8.com
222.73.85.28 pashu8.com
222.73.85.28 www.92du.com
222.73.85.28 92du.com
222.73.85.28 www.mfxhxs.com
222.73.85.28 mfxhxs.com
222.73.85.28 www.89wx.com
222.73.85.28 89wx.com
222.73.85.28 www.8y19.com
222.73.85.28 8y19.com
222.73.85.28 www.xin21.com
222.73.85.28 xin21.com
222.73.85.28 www.e193.net
222.73.85.28 e193.net
222.73.85.28 www.d9cn.com
222.73.85.28 d9cn.com
222.73.85.28 www.cn-novel.com
222.73.85.28 cn-novel.com
222.73.85.28 www.kkzw.net
222.73.85.28 kkzw.net
222.73.85.28 www.xiaoshuo.com
222.73.85.28 xiaoshuo.com
222.73.85.28 www.9173.com
222.73.85.28 9173.com
222.73.85.28 www.wx63.com
222.73.85.28 wx63.com
222.73.85.28 www.hkwxc.com
222.73.85.28 hkwxc.com
222.73.85.28 www.ruoyu.net
222.73.85.28 ruoyu.net
222.73.85.28 www.sydao.net
222.73.85.28 sydao.net
222.73.85.28 www.soso999.com
222.73.85.28 soso999.com
222.73.85.28 www.sobook.org
222.73.85.28 sobook.org
222.73.85.28 www.79soso.com
222.73.85.28 79soso.com
222.73.85.28 so.xxshuo.net
222.73.85.28 www.kxs.cc
222.73.85.28 kxs.cc
222.73.85.28 www.mx99.com
222.73.85.28 mx99.com
222.73.85.28 www.77shu.com
222.73.85.28 77shu.com
222.73.85.28 www.5xia.net
222.73.85.28 5xia.net
222.73.85.28 www.tengbi.com
222.73.85.28 tengbi.com
222.73.85.28 www.syzw.cn
222.73.85.28 syzw.cn
222.73.85.28 www.shulou.com
222.73.85.28 shulou.com
222.73.85.28 www.xiaoshuoshu.com
222.73.85.28 xiaoshuoshu.com
222.73.85.28 www.8fzw.com
222.73.85.28 8fzw.com
222.73.85.28 www.panloo.com
222.73.85.28 panloo.com
222.73.85.28 www.101du.net
222.73.85.28 101du.net
222.73.85.28 book.wjshu.com
222.73.85.28 wjshu.com
222.73.85.28 www.bbus.net
222.73.85.28 bbus.net
222.73.85.28 read.xwdl.com
222.73.85.28 xwdl.com
222.73.85.28 www.278w.com
222.73.85.28 278w.com
222.73.85.28 www.fmxyc.com
222.73.85.28 fmxyc.com
222.73.85.28 www.kenxiaoshuo.com
222.73.85.28 kenxiaoshuo.com
222.73.85.28 www.tongk.com
222.73.85.28 tongk.com
222.73.85.28 www.birdsee.com
222.73.85.28 birdsee.com
222.73.85.28 www.qibi.com
222.73.85.28 qibi.com
222.73.85.28 www.1001w.com
222.73.85.28 1001w.com
222.73.85.28 lz.shulink.com
222.73.85.28 www.shulu.net
222.73.85.28 shulu.net
222.73.85.28 www.tianyibook.com
222.73.85.28 tianyibook.com
222.73.85.28 www.4mbook.com
222.73.85.28 4mbook.com
222.73.85.28 www.wenxuejia.net
222.73.85.28 wenxuejia.net
222.73.85.28 www.wenxuewu.com
222.73.85.28 wenxuewu.com
222.73.85.28 www.woread.com
222.73.85.28 woread.com
222.73.85.28 www.51k1.com
222.73.85.28 51k1.com
222.73.85.28 www.cxa.cn
222.73.85.28 cxa.cn
222.73.85.28 www.wxjia.com
222.73.85.28 wxjia.com
222.73.85.28 www.xieshu.com
222.73.85.28 xieshu.com
222.73.85.28 www.ixxw.net
222.73.85.28 ixxw.net
222.73.85.28 www.xhtx.net
222.73.85.28 xhtx.net
222.73.85.28 www.ptung.com
222.73.85.28 ptung.com
222.73.85.28 www.dajiadu.net
222.73.85.28 dajiadu.net
222.73.85.28 www.wuliaozhai.com
222.73.85.28 wuliaozhai.com
222.73.85.28 www.lmyq.com
222.73.85.28 lmyq.com
222.73.85.28 www.feicuiju.com
222.73.85.28 feicuiju.com
222.73.85.28 www.1617k.com
222.73.85.28 1617k.com
222.73.85.28 www.80zw.com
222.73.85.28 80zw.com
222.73.85.28 www.zhukan.com
222.73.85.28 zhukan.com
222.73.85.28 www.92zw.com
222.73.85.28 92zw.com
222.73.85.28 www.sdxsw.com
222.73.85.28 sdxsw.com
222.73.85.28 www.xiaoshuoku.com.cn
222.73.85.28 xiaoshuoku.com.cn
222.73.85.28 www.xiaoxiaoshuo.net
222.73.85.28 xiaoxiaoshuo.net
222.73.85.28 book.qukanshu.com
222.73.85.28 www.58xs.com
222.73.85.28 58xs.com
222.73.85.28 www.wyxsyd.cn
222.73.85.28 wyxsyd.cn
222.73.85.28 www.16xs.com
222.73.85.28 16xs.com
222.73.85.28 www.88106.com
222.73.85.28 88106.com
222.73.85.28 www.pinshuju.com
222.73.85.28 pinshuju.com
222.73.85.28 www.xiaoshuoqun.cn
222.73.85.28 xiaoshuoqun.cn
222.73.85.28 www.fval.cn
222.73.85.28 fval.cn
222.73.85.28 www.hxxsk.com
222.73.85.28 hxxsk.com
222.73.85.28 www.stwo.cn
222.73.85.28 stwo.cn
222.73.85.28 www.saogugu.com
222.73.85.28 saogugu.com
222.73.85.28 www.xiaoshuo8.cc
222.73.85.28 xiaoshuo8.cc
222.73.85.28 www.qianzai.com
222.73.85.28 qianzai.com
222.73.85.28 www.hszw.com
222.73.85.28 hszw.com
222.73.85.28 www.du8.com
222.73.85.28 du8.com
222.73.85.28 s.du8.com
222.73.85.28 cang.baidu.com
222.73.85.28 my.poco.cn
222.73.85.28 vivi.sina.com.cn
222.73.85.28 www.365key.com
222.73.85.28 hot.yesky.com
222.73.85.28 bookmark.hexun.com
222.73.85.28 www.35766.com
222.73.85.28 bookmark.yinsha.com
222.73.85.28 www.szpc.net
222.73.85.28 bookmark.sina.com.cn
222.73.85.28 my.xuduo.com
222.73.85.28 v.hongxiu.com
222.73.85.28 www.yankanshu.com
222.73.85.28 www.d8cn.com
222.73.85.28 d8cn.com
222.73.85.28 www.yyge.com
222.73.85.28 33xs.com
222.73.85.28 html.hjsm.tom.com
222.73.85.28 book.ddvip.com
222.73.85.28 www.xiaoshuozhe.com
60.173.12.178  www.9348.cn
60.173.12.178  9348.cn
60.173.12.178  www.9991.com
60.173.12.178  9991.com
60.173.12.178  www.114la.com
60.173.12.178  114la.com
60.173.12.178  www.kuku530.com
60.173.12.178  www.zhaodao123.com
60.173.12.178  www.265.com
60.173.12.178  www.2345.com
60.173.12.178  www.1616.net
60.173.12.178  www.1166.com
60.173.12.178  www.5566.net
60.173.12.178  www.77667.com
60.173.12.178  www.33533.com
60.173.12.178  www.353.com
60.173.12.178  www.6700.cn
60.173.12.178  6700.cn

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 576, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]

接上

这里下载费尔木马强力清除助手,点选“抑制文件再生”删除下面文件。
附件: 费 尔.rar(内附说明）（右键选择“目标另存为”下载）本链接不支持迅雷等下载工具下载

删除：
C:\WINDOWS\system32\qB5BKZy7vR5m.dll
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\wmp\mtlrd.sys
C:\WINDOWS\system32\drivers\pcidump.sys

不论删除结果如何立即重启电脑，看情况如何。
————————————————————————————————————
在扫日志的SRENG工具》启动项目》注册表》里面找下面项目删除：
启动项目
注册表
    <{71C4F360-FF1E-413E-B17A-0CA267A78E97}><C:\WINDOWS\system32\qB5BKZy7vR5m.dll>  []
————————————————————————————————————
在扫日志的SRENG工具》启动项目》服务》驱动程序》里面找下面项,将启动类型改为“Disabled”
==================================
驱动程序
[Mobinex Virtual Webcam - 9You, WDM Video Capture / 9you][Running/Auto Start]
  <system32\DRIVERS\9you.sys><Windows (R) 2000 DDK provider>

[hvmgc / hvmgc][Running/Boot Start]
  <\SystemRoot\system32\drivers\pjofv.sys><N/A>

[mtlrd / mtlrd][Stopped/Auto Start]
  <\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\wmp\mtlrd.sys><N/A>

[pcidump / pcidump][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\pcidump.sys><N/A>
————————————————————————————————————
在扫日志的SRENG工具》系统修复》HOSTS文件》选择“重置”再“保存”

SRENG工具的各项操作看这里：http://bbs.ikaka.com/showtopic-8545446.aspx

————————————————————————————————————
在扫日志的SRENG工具》系统修复》高级修复》修复安全模式

重启电脑尽量进安全模式下，去继续上面的操作，检查看是否操作成功

然后就可以再重启电脑

连网用W i n d o w s 清理助手 ，清理你那系统。
W i n d o w s 清理助手 下载：http://www.arswp.com/

杀毒软件升级至最新版本全盘杀。

记得打全系统漏洞补丁

其中这个驱动必须在安全模式下修改启动类型成功，必须修改成“Disabled”，也就是关闭它，否则你的首页还是异常的不能改变。

[hvmgc / hvmgc][Running/Boot Start]
  <\SystemRoot\system32\drivers\pjofv.sys><N/A>

网站改回来了,这算不算好了?

= =?

是不是可以了呀0.0