==================================
正在运行的进程
[PID: 384][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 488][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 512][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\gebcd.dll] [N/A, N/A]
[C:\WINDOWS\system32\efcawxu.dll] [N/A, N/A]
[PID: 556][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 576][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 732][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 796][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 884][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 932][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1020][C:\WINDOWS\system32\LEXBCES.EXE] [Lexmark International, Inc., 7.1]
[C:\WINDOWS\system32\lexp2p32.dll] [Lexmark International, Inc., 7.1]
[C:\WINDOWS\system32\lex2kusb.dll] [Lexmark International, Inc., 7.1]
[PID: 1044][C:\WINDOWS\system32\LEXPPS.EXE] [Lexmark International, Inc., 7.1]
[C:\WINDOWS\system32\LEXBCE.DLL] [Lexmark International, Inc., 7.1]
[PID: 1048][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\system32\LEXLMPM.DLL] [Lexmark International, Inc., 7.1]
[C:\WINDOWS\system32\LexBce.dll] [Lexmark International, Inc., 7.1]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LG12PP5C.dll] [Lexmark International, 1.0.7.2]
[C:\WINDOWS\system32\lg12pwr.dll] [Lexmark International, Inc., 1, 0, 1, 0]
[PID: 1236][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1576][C:\WINDOWS\System32\nvsvc32.exe] [NVIDIA Corporation, 5.13.01.1520]
[PID: 1672][C:\Program Files\联想\联想键盘驱动\TGESrvLogon.exe] [, 1, 0, 0, 1]
[C:\Program Files\联想\联想键盘驱动\tgekb.dll] [N/A, N/A]
[C:\Program Files\联想\联想键盘驱动\UsbPnp.dll] [N/A, N/A]
[PID: 1932][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1528][C:\WINDOWS\Explorer.exe] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\WINDOWS\System32\gebcd.dll] [N/A, N/A]
[C:\WINDOWS\System32\efcawxu.dll] [N/A, N/A]
[C:\WINDOWS\System32\olemdb32.dll] [N/A, N/A]
[C:\WINDOWS\System32\iuidcrbv.dll] [N/A, N/A]
[C:\WINDOWS\System32\win5159.dll] [N/A, N/A]
[D:\Winrar\rarext.dll] [N/A, N/A]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 200][C:\WINDOWS\WINLOGON.EXE] [China, 0.00.0181]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\System32\olemdb32.dll] [N/A, N/A]
[C:\WINDOWS\System32\win5159.dll] [N/A, N/A]
[PID: 1292][C:\di21.exe] [N/A, N/A]
[PID: 1376][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\WINDOWS\System32\olemdb32.dll] [N/A, N/A]
[C:\WINDOWS\System32\win5159.dll] [N/A, N/A]
[PID: 1380][C:\WINDOWS\System32\algs.exe] [N/A, N/A]
[PID: 1556][C:\WINDOWS\System32\conime.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\System32\olemdb32.dll] [N/A, N/A]
[C:\WINDOWS\System32\win5159.dll] [N/A, N/A]
[PID: 1668][C:\WINDOWS\System32\cjnr4r4891140.exe] [N/A, N/A]
[PID: 1656][C:\WINDOWS\System32\sklrr7y7768158.exe] [N/A, N/A]
[PID: 1792][C:\WINDOWS\System32\dior4f48329931.exe] [N/A, N/A]
[PID: 1848][C:\Program Files\联想\联想键盘驱动\Ps2Kbdriver.exe] [N/A, N/A]
[C:\Program Files\联想\联想键盘驱动\rmt.dll] [N/A, N/A]
[C:\Program Files\联想\联想键盘驱动\tgekb.dll] [N/A, N/A]
[C:\Program Files\联想\联想键盘驱动\kbled.dll] [N/A, N/A]
[C:\Program Files\联想\联想键盘驱动\VolumeOsd.dll] [N/A, N/A]
[C:\Program Files\联想\联想键盘驱动\ScrOSD32.dll] [N/A, N/A]
[C:\WINDOWS\System32\olemdb32.dll] [N/A, N/A]
[C:\WINDOWS\System32\win5159.dll] [N/A, N/A]
[PID: 1592][C:\WINDOWS\System32\dynsys.exe] [N/A, N/A]
[PID: 1768][C:\WINDOWS\System32\dior4f47667196.exe] [N/A, N/A]
[PID: 2500][C:\WINDOWS\System32\sklrr7y7768158.exe] [N/A, N/A]
[PID: 3008][C:\Program Files\联想\联想键盘驱动\fastkey.exe] [, 1, 0, 0, 1]
[C:\Program Files\联想\联想键盘驱动\SKOSD.DLL] [Silitek Corp., 1, 0, 6, 0]
[C:\Program Files\联想\联想键盘驱动\SKUtil.DLL] [Silitek Corp., 1, 0, 9, 0]
[C:\Program Files\联想\联想键盘驱动\kbled.dll] [N/A, N/A]
[C:\WINDOWS\System32\olemdb32.dll] [N/A, N/A]
[C:\WINDOWS\System32\win5159.dll] [N/A, N/A]
[PID: 348][D:\TT\TTraveler.exe] [腾讯公司, 3.1.0.261]
[D:\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] [腾讯公司, 1, 1, 0, 5]
[D:\TT\Plugins\TWeather\TWeather.dll] [, 1, 0, 0, 3]
[C:\WINDOWS\System32\win5159.dll] [N/A, N/A]
[C:\WINDOWS\System32\olemdb32.dll] [N/A, N/A]
[D:\TT\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\WINDOWS\System32\efcawxu.dll] [N/A, N/A]
[PID: 3068][C:\DOCUME~1\USER_C~2\LOCALS~1\Temp\Rar$EX01.644\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\WINDOWS\System32\win5159.dll] [N/A, N/A]
[C:\WINDOWS\System32\olemdb32.dll] [N/A, N/A]
[C:\DOCUME~1\USER_C~2\LOCALS~1\Temp\Rar$EX01.644\SREng\Plugins\SRECXTMG.SRE] [Smallfrogs Studio, 1, 5, 0, 55]
==================================
文件关联
.TXT Error. [notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
[D:\]
[autorun]
OPEN=D:\pagefile.pif
==================================
HOSTS 文件
127.0.0.1 localhost
127.0.0.1 mmsk.cn
127.0.0.1 bbs.mmsk.cn
127.0.0.1 www.mmsk.cn
127.0.0.1 soudong.com
127.0.0.1 www.soudong.com
==================================
是这样么 第一次不是很会弄 大家帮帮忙