[F:\瑞星防火墙\Rising\Rfw\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28]
[F:\瑞星防火墙\Rising\Rfw\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
[F:\瑞星防火墙\Rising\Rfw\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[F:\瑞星防火墙\Rising\Rfw\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2]
[F:\瑞星防火墙\Rising\Rfw\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
[F:\瑞星防火墙\Rising\Rfw\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7]
[F:\瑞星防火墙\Rising\Rfw\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.25]
[F:\瑞星防火墙\Rising\Rfw\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
[F:\瑞星防火墙\Rising\Rfw\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
[F:\瑞星防火墙\Rising\Rfw\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20]
[F:\瑞星防火墙\Rising\Rfw\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.26]
[F:\瑞星防火墙\Rising\Rfw\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 75]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[F:\瑞星防火墙\Rising\Rfw\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 29]
[F:\瑞星防火墙\Rising\Rfw\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14]
[F:\瑞星防火墙\Rising\Rfw\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
[F:\瑞星防火墙\Rising\Rfw\rfwtray.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 1, 12]
[F:\瑞星防火墙\Rising\Rfw\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
[F:\瑞星防火墙\Rising\Rfw\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13]
[PID: 844 / Administrator][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\WINDOWS\system32\VM31bPrp.Ax] [VM, 4.2.711.31]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[PID: 900 / SYSTEM][F:\暴风影音\stormliv.exe] [北京暴风网际科技有限公司, 3, 9, 5, 29]
[F:\暴风影音\bfoptdll.dll] [北京暴风网际科技有限公司, 3, 8, 7, 16]
[F:\暴风影音\box\BoxLog.dll] [北京暴风网际科技有限公司, 3, 9, 5, 30]
[PID: 892 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[PID: 1304 / SYSTEM][C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\IcbcDaemon.exe] [N/A, ]
[PID: 1352 / Administrator][E:\G1驱动\SetPoint\SetPoint.exe] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\system32\KemUtil.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[E:\G1驱动\SetPoint\SetPointCOM.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\system32\kemutb.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\system32\KemWnd.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\system32\KemXML.dll] [Logitech, Inc., 4.72.40]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.762]
[E:\G1驱动\SetPoint\Macros\MacroCore.dll] [Logitech, Inc., 4.72.40]
[E:\G1驱动\SetPoint\WebBrowserSupport.dll] [Logitech, Inc., 4.72.40]
[E:\G1驱动\SetPoint\IMHook.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL] [Microsoft Corporation, 8.00.50727.762]
[E:\G1驱动\SetPoint\Macros\MacroAppSwitch.dll] [Logitech, Inc., 4.70.26]
[C:\Program Files\Common Files\Logishrd\KHAL2\KhalApi.dll] [Logitech, Inc., 4.72.40]
[C:\Program Files\Common Files\LogiShrd\bluetooth\LBTServ.dll] [Logitech, Inc., 4.72.40]
[E:\G1驱动\SetPoint\kgame.dll] [Logitech, Inc., 4.72.40]
[E:\G1驱动\SetPoint\GameHook.dll] [Logitech, Inc., 4.72.40]
[E:\G1驱动\SetPoint\LCabHandler.dll] [Logitech, Inc., 4.72.40]
[PID: 1636 / SYSTEM][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] [Microsoft Corporation, 7.00.9466]
[C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\2052\mdmui.dll] [Microsoft Corporation, 7.00.9466]
[PID: 148 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.11.6351]
[C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.6351]
[PID: 800 / SYSTEM][F:\瑞星杀毒\Rising\Rav\ScanFrm.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.12]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[F:\瑞星杀毒\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
[F:\瑞星杀毒\Rising\Rav\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13]
[F:\瑞星杀毒\Rising\Rav\scansrvp.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13]
[F:\瑞星杀毒\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46]
[F:\瑞星杀毒\Rising\Rav\ScanSrv.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.10]
[F:\瑞星杀毒\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
[F:\瑞星杀毒\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
[PID: 852 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1420 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 2240 / Administrator][C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE] [Logitech, Inc., 4.72.24]
[C:\Program Files\Common Files\Logishrd\KHAL2\KHALAPI.DLL] [Logitech, Inc., 4.72.40]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\Program Files\Common Files\LogiShrd\bluetooth\LBTServ.dll] [Logitech, Inc., 4.72.40]
[C:\Program Files\Common Files\Logishrd\KHAL2\KHALITCH.DLL] [Logitech, Inc., 4.72.40]
[C:\Program Files\Common Files\Logishrd\KHAL2\KHALMW.DLL] [Logitech, Inc., 4.72.40]
[C:\Program Files\Common Files\Logishrd\KHAL2\KHALHPP.DLL] [Logitech, Inc., 4.72.40]
[C:\Program Files\Common Files\Logishrd\KHAL2\KHALMOU.DLL] [Logitech, Inc., 4.72.40]
[C:\Program Files\Common Files\Logishrd\KHAL2\KHALHID.DLL] [Logitech, Inc., 4.72.40]
[C:\Program Files\Common Files\Logishrd\KHAL2\KHALUSB.DLL] [Logitech, Inc., 4.72.40]
[PID: 3164 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2764 / Administrator][F:\QQ2008\QQ.exe] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQBaseClassInDll.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQHelperDll.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\BasicCtrlDll.dll] [TENCENT, 8,0,978,1833]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[F:\QQ2008\QQAPI.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\LoginCtrl.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\LoginCtrlRes.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQRes.dll] [TENCENT, 8,0,978,1833]
[C:\WINDOWS\system32\aetsprov.dll] [A.E.T. Europe B.V., 2.3.0.9]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[F:\QQ2008\QQMainFrame.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQPlugin.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\UnReadMsgMgr.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQAllInOne.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\SCCore.dll] [TENCENT, 1, 6, 0, 2]
[F:\QQ2008\CameraDll.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\CQQApplication.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\FlashAvatarDll.dll] [, 1, 0, 0, 1]
[F:\QQ2008\NewSkin.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\MailSummary.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQSpace.dll] [TENCENT, 8,0,978,1833]
[C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx] [Adobe Systems, Inc., 10,0,22,87]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[F:\QQ2008\OEMApplication.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQAvatar.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQKnowledgeSearch.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQGroupMng.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQPet.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\UserDefinedHead.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQConfigPlugin.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQSysMsgMng.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQCustomFace.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QRingMng.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\LongConnection.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\PhoneAPI.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[F:\QQ2008\BQQApplication.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\CommercesMng.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\PersonalDesktop.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 330]
[F:\QQ2008\QQSceneMng.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\AddrSearch.dll] [Tencent, 2, 3, 12, 11]
[F:\QQ2008\ImageOle.dll] [TENCENT, 8,0,978,1833]
[F:\QQ2008\QQLiveQMng.dll] [TENCENT, 8,0,978,1833]
[C:\WINDOWS\system32\shdoclc.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[F:\瑞星杀毒\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.76]
[F:\QQ2008\GroupConnection.dll] [TENCENT, 8,0,978,1833]
[PID: 1272 / Administrator][F:\QQ2008\TXPlatform.exe] [Tencent, 1, 5, 225, 0]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[PID: 336 / Administrator][C:\WINDOWS\system32\conime.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[PID: 2420 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[F:\迅雷\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.34]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200]
[F:\bitcomet_setup\BitComet\tools\BitCometBHO_1.3.3.2.dll] [BitComet, 20090302]
[F:\迅雷\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 120]
[F:\迅雷\Components\ResWorker\DsBho_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 20]
[F:\迅雷\Components\ResWorker\DataProcessor_00.dll] [深圳市迅雷网络技术有限公司, 1, 0, 0, 16]
[C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\Icbc_AntiPhishing.dll] [中国工商银行, 1.0.6.29]
[C:\WINDOWS\system32\shdoclc.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\ICBCEbankTools\ICBCAntiPhishing\KeyMonitor.dll] [N/A, ]
[F:\瑞星杀毒\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.76]
[C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx] [Adobe Systems, Inc., 10,0,22,87]
[PID: 3908 / Administrator][F:\sreng2\SREngLdr.EXE] [Smallfrogs Studio, 2.7.1.1261]
[PID: 1172 / Administrator][F:\sreng2\SREe96f13ec.EXE] [Smallfrogs Studio, 2.7.1.1261]
[E:\G1驱动\SetPoint\lgscroll.dll] [Logitech, Inc., 4.72.40]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[F:\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
[C:\WINDOWS\system32\aetsprov.dll] [A.E.T. Europe B.V., 2.3.0.9]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
==================================
文件关联
.TXT Error. [C:\WINDOWS\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. ["hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 844, C:\WINDOWS\VM_STI.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3908, F:\SRENG2\SRENGLDR.EXE]
==================================
计划任务
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
[/CODE]
