Symantec.com > Security Response > Trojan.Peacomm
Trojan.PeacommRisk Level 3: ModeratePrinter Friendly Page
SUMMARY TECHNICAL DETAILS REMOVAL Discovered: January 19, 2007
Updated: January 22, 2007 03:22:36 PM GMT
Also Known As: CME-711 [Common Malware Enumeration], TROJ_SMALL.EDW [Trend Micro], Small.DAM [F-Secure], Downloader-BAI [McAfee], Troj/Dorf-Fam [Sophos]
Type: Trojan Horse
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP


Trojan.Peacomm is a Trojan horse that drops a driver program file to download additional security threats.

Trojan.Peacomm reportedly arrives as an attachment to a spammed email with the following characteristics:

Subject:
One of the following:


A killer at 11, he's free at 21 and kill again!
U.S. Secretary of State Condoleezza Rice has kicked German Chancellor Angela Merkel
British Muslims Genocide
Naked teens attack home director.
230 dead as storm batters Europe.
Re: Your text
Radical Muslim drinking enemies's blood.
Chinese missile shot down Russian satellite
Chinese missile shot down Russian aircraft
Chinese missile shot down USA aircraft
Chinese missile shot down USA satellite
Russian missile shot down USA aircraft
Russian missile shot down USA satellite
Russian missile shot down Chinese aircraft
Russian missile shot down Chinese satellite
Saddam Hussein safe and sound!
Saddam Hussein alive!
Venezuelan leader: "Let's the War beginning".
Fidel Castro dead.

Attachment:
One of the following:


FullVideo.exe
Full Story.exe
Video.exe
Read More.exe
FullClip.exe
GreetingPostcard.exe
MoreHere.exe
FlashPostcard.exe
GreetingCard.exe
ClickHere.exe
ReadMore.exe
FlashPostcard.exe
FullNews.exe

Note: Due to a substantial increase in activity, Symantec Security Response raised this threat to category 3 on January 22, 2007.

Further reading: Trojan.Peacomm: Building a Peer-to-Peer Botnet


ProtectionVirus Definitions (LiveUpdate™ Daily) January 19, 2007
Virus Definitions (LiveUpdate™ Weekly) January 22, 2007
Virus Definitions (Intelligent Updater) January 19, 2007
Virus Definitions (LiveUpdate™ Plus) January 19, 2007
Threat AssessmentWildWild Level: High
Number of Infections: More than 1000
Number of Sites: More than 10
Geographical Distribution: Medium
Threat Containment: Easy
Removal: Moderate
DamageDamage Level: Medium
Payload: Downloads additional security threats.
Degrades Performance: Sent UDP packets may degrade performance.
DistributionDistribution Level: Low
Ports: UDP port 4000, UDP port 7871

Writeup By: Masaki Suenaga

找个木马专杀工具杀一下。

我这个是这样的,我用的是诺顿,我只是在上Q,突然提示一个威胁没法保护,上网找资料也就只有这些全是英文的,有谁能解释一下呢,威胁重不重,会产生什么文件,全是E文\,我E文不好

用sreng扫描个系统日志发上来吧。

好的,马上扫

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <SonyPowerCfg><C:\Program Files\Sony\VAIO Power Management\SPMgr.exe>  [Sony Corporation]
    <ccApp><"C:\Program Files\Common Files\Symantec Shared\ccApp.exe">  [(Verified)Symantec Corporation]
    <Symantec NetDriver Monitor><C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer>  [(Verified)Symantec Corporation]
    <IeBerDown><D:\BAK\soft\最新收集\小工具\IeBerDown\IeBerDown.exe>  [N/A]
    <runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <BigDog303><C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
    <WinlogonNotify: VESWinlogon><VESWinlogon.dll>  [Sony Corporation]

==================================
启动文件夹
N/A

==================================
服务
[Application Management / AppMgmt]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[Symantec Event Manager / ccEvtMgr]
  <"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"><Symantec Corporation>
[Symantec Network Proxy / ccProxy]
  <"C:\Program Files\Common Files\Symantec Shared\ccProxy.exe"><Symantec Corporation>
[Symantec Password Validation / ccPwdSvc]
  <"C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"><Symantec Corporation>
[Symantec Settings Manager / ccSetMgr]
  <"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"><Symantec Corporation>
[EvtEng / EvtEng]
  <C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[ISSVC / ISSVC]
  <"C:\Program Files\Norton Internet Security\ISSVC.exe"><Symantec Corporation>
[LiveUpdate / LiveUpdate]
  <"C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"><Symantec Corporation>
[MSCSPTISRV / MSCSPTISRV]
  <"C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe"><Sony Corporation>
[Norton AntiVirus Auto-Protect Service / navapsvc]
  <"C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe"><Symantec Corporation>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[PACSPTISVR / PACSPTISVR]
  <"C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe"><Sony Corporation>
[RegSrvc / RegSrvc]
  <C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
  <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><N/A>
[Spectrum24 Event Monitor / S24EventMonitor]
  <C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>
[SAVScan / SAVScan]
  <"C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe"><Symantec Corporation>
[ScriptBlocking Service / SBService]
  <C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe><Symantec Corporation>
[Symantec Network Drivers Service / SNDSrvc]
  <"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"><Symantec Corporation>
[Symantec SPBBCSvc / SPBBCSvc]
  <"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"><Symantec Corporation>
[Sony SPTI Service / SPTISRV]
  <"C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe"><Sony Corporation>
[SonicStage SCSI Service / SSScsiSV]
  <C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe><Sony Corporation>
[VAIO Entertainment TV Device Arbitration Service / VAIO Entertainment TV Device Arbitration Service]
  <"C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe"><Sony Corporation>
[VAIO Event Service / VAIO Event Service]
  <C:\Program Files\Sony\VAIO Event Service\VESMgr.exe><Sony Corporation>
[VAIO Media Integrated Server / VAIOMediaPlatform-IntegratedServer-AppServer]
  <C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe><Sony Corporation>
[VAIO Media Integrated Server (HTTP) / VAIOMediaPlatform-IntegratedServer-HTTP]
  <"C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP"><Sony Corporation>
[VAIO Media Integrated Server (UPnP) / VAIOMediaPlatform-IntegratedServer-UPnP]
  <C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe><Sony Corporation>
[VAIO Media Gateway Server / VAIOMediaPlatform-Mobile-Gateway]
  <"C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server"><Sony Corporation>
[VAIO Entertainment UPnP Client Adapter / Vcsw]
  <C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe -RunBySCM><Sony Corporation>
[VAIO Entertainment Database Service / VzCdbSvc]
  <"C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe"><Sony Corporation>
[VAIO Entertainment File Import Service / VzFw]
  <C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe><Sony Corporation>
[WebClient XML / WebClient XML]
  <C:\WINDOWS\system32\webcxml.exe><N/A>

==================================
驱动程序
[AEGIS Protocol (IEEE 802.1x) v3.1.6.0 / AegisP]
  <system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications>
[Alps Pointing-device Filter Driver / ApfiltrService]
  <system32\DRIVERS\Apfiltr.sys><Alps Electric Co., Ltd.>
[Sony DMI Call service / DMICall]
  <system32\DRIVERS\DMICall.sys><Sony Corporation>
[Intel(R) PRO Network Connection Driver / E100B]
  <system32\DRIVERS\e100b325.sys><Intel Corporation>
[EagleNT / EagleNT]
  <\??\C:\WINDOWS\system32\drivers\EagleNT.sys><N/A>
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus]
  <system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[HSFHWAZL / HSFHWAZL]
  <system32\DRIVERS\HSFHWAZL.sys><Conexant Systems, Inc.>
[HSF_DP / HSF_DP]
  <system32\DRIVERS\HSF_DP.sys><Conexant Systems, Inc.>
[ialm / ialm]
  <system32\DRIVERS\ialmnt5.sys><Intel Corporation>
[InCD File System / InCDFs]
  <system32\drivers\InCDFs.sys><N/A>
[InCDPass / InCDPass]
  <system32\drivers\InCDPass.sys><N/A>
[InCD Reader / InCDRm]
  <system32\drivers\InCDRm.sys><N/A>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService]
  <system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[mdmxsdk / mdmxsdk]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[NAVENG / NAVENG]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070117.019\NAVENG.Sys><Symantec Corporation>
[NAVEX15 / NAVEX15]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20070117.019\NavEx15.Sys><Symantec Corporation>
[NetGroup Packet Filter Driver / NPF]
  <system32\drivers\npf.sys><Politecnico di Torino>
[npkcrypt / npkcrypt]
  <\??\F:\Program Files\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkcusb / npkcusb]
  <\??\F:\Program Files\qq\npkcusb.sys><INCA Internet Co., Ltd.>
[nv / nv]

<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Probe Packet Filter / PROBE]
  <system32\drivers\probe.sys><Probe>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20]
  <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[RsAntiSpyware / RsAntiSpyware]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising>
[WLAN Transport / s24trans]
  <system32\DRIVERS\s24trans.sys><Intel Corporation>
[SAVRT / SAVRT]
  <\??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRT.SYS><Symantec Corporation>
[SAVRTPEL / SAVRTPEL]
  <\??\C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVRTPEL.SYS><Symantec Corporation>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[Sony Notebook Control Device / SNC]
  <System32\Drivers\SonyNC.sys><Sony Corporation>
[SPBBCDrv / SPBBCDrv]
  <\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys><Symantec Corporation>
[SYMDNS / SYMDNS]
  <\SystemRoot\System32\Drivers\SYMDNS.SYS><Symantec Corporation>
[SymEvent / SymEvent]
  <\??\C:\Program Files\Symantec\SYMEVENT.SYS><Symantec Corporation>
[SYMFW / SYMFW]
  <\SystemRoot\System32\Drivers\SYMFW.SYS><Symantec Corporation>
[SYMIDS / SYMIDS]
  <\SystemRoot\System32\Drivers\SYMIDS.SYS><Symantec Corporation>
[SYMIDSCO / SYMIDSCO]
  <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\idsdefs\20070117.002\symidsco.sys><Symantec Corporation>
[SYMNDIS / SYMNDIS]
  <\SystemRoot\System32\Drivers\SYMNDIS.SYS><Symantec Corporation>
[SYMREDRV / SYMREDRV]
  <\SystemRoot\System32\Drivers\SYMREDRV.SYS><Symantec Corporation>
[SYMTDI / SYMTDI]
  <\SystemRoot\System32\Drivers\SYMTDI.SYS><Symantec Corporation>
[TCP/IP Protocol Driver / Tcpip]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[tifmsony / tifmsony]
  <system32\drivers\tifmsony.sys><Texas Instruments>
[vmfilter303 / vmfilter303]
  <system32\drivers\vmfilter303.sys><Vimicro Corporation>
[VMware Virtual Ethernet Adapter Driver / VMnetAdapter]
  <system32\DRIVERS\vmnetadapter.sys><N/A>
[用于 Windows XP 的英特尔(R) PRO/无线 2200BG 网络连接驱动程序 / w29n51]
  <system32\DRIVERS\w29n51.sys><Intel? Corporation>
[winachsf / winachsf]
  <system32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>
[World Standard Teletext Codec / WSTCODEC]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>

==================================
浏览器加载项
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll, Thunder Networking Technologies,LTD>
[Java Plug-in 1.5.0_10]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[启动Web迅雷]
  {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[IMCv1 Control]
  {6924091F-CD97-41E1-B1D4-D9079409D413} <C:\WINDOWS\DOWNLO~1\imcv1.dll, 北京莲塘软件技术有限公司 Liantang Software Tech. Inc. (http://www.liantang.cn)>
[Java Plug-in 1.5.0_10]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[LiveMediaOcx Control]
  {9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} <C:\PROGRA~1\Tencent\QQLive\QQLive.ocx, Tencent>
[WebFtp Class]
  {C7420698-3CCE-4823-8795-1C098F2D3A4B} <C:\WINDOWS\DOWNLO~1\WEBPER~1.DLL, >
[Java Plug-in 1.5.0_09]
  {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_10]
  {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_10]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll, Thunder Networking Technologies,LTD>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[HHCtrl Object]
  {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[IMCv1 Control]
  {6924091F-CD97-41E1-B1D4-D9079409D413} <C:\WINDOWS\DOWNLO~1\imcv1.dll, 北京莲塘软件技术有限公司 Liantang Software Tech. Inc. (http://www.liantang.cn)>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll, Sun Microsystems, Inc.>
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <C:\Program Files\Thunder Network\WebThunder\MediaAddin10.dll, Thunder Networking Technologies,LTD>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Qzone Media Tools]
  {AC3A36A8-9BFF-410A-A33D-2279FFEB69D2} <F:\PROGRA~1\qq\VQQPLA~1.OCX, Tencent Technology (Shenzhen) Company Limited>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[WebFtp Class]
  {C7420698-3CCE-4823-8795-1C098F2D3A4B} <C:\WINDOWS\DOWNLO~1\WEBPER~1.DLL, >
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[上传到QQ网络硬盘]
  <F:\Program Files\qq\AddToNetDisk.htm, N/A>
[使用Web迅雷下载]
  <C:\Program Files\Thunder Network\WebThunder\GetUrl.htm, N/A>
[使用Web迅雷下载全部链接]
  <C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm, N/A>
[添加到QQ自定义面板]
  <F:\Program Files\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <F:\Program Files\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <F:\Program Files\qq\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
  <C:\Program Files\BitSpirit\bsurl.htm, N/A>

==================================

正在运行的进程
[PID: 1028][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1076][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1100][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2505 (xpsp.040806-1825)]
    [C:\WINDOWS\system32\VESWinlogon.dll]  [Sony Corporation, 2.0.00.09300]
[PID: 1144][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1156][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1308][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1412][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1544][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe]  [Intel Corporation, 9, 0, 1, 12]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
[PID: 1612][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe]  [Intel Corporation , 9, 0, 1, 41]
    [C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL]  [Intel Corporation, 9, 0, 1, 22]
    [C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll]  [Intel Corporation, 9, 0, 1, 14]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1684][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1764][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll]  [Symantec Corporation, 2005.1.00.163]
    [C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll]  [Nero AG, 2, 0, 0, 7]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.7083]
    [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.7083]
    [C:\WINDOWS\system32\igfxpph.dll]  [Intel Corporation, 3.0.0.4267]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4267]
    [C:\WINDOWS\system32\igfxres.dll]  [Intel Corporation, 3.0.0.4267]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4267]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.4267]
    [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll]  [Nero AG, 2, 0, 0, 5]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\Thunder Network\WebThunder\WebThunderBHO_015.dll]  [Thunder Networking Technologies,LTD, 6, 0, 0, 5]
[PID: 396][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 692][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe]  [Intel Corporation, 9, 0, 1, 10]
[PID: 736][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 756][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)]
[PID: 784][C:\Program Files\Sony\VAIO Event Service\VESMgr.exe]  [Sony Corporation, 2.1.00.13210]
    [C:\Program Files\Sony\VAIO Event Service\VESSuEvent.dll]  [Sony Corporation, 2.1.00.13210]
    [C:\Program Files\Sony\VAIO Event Service\VESBasePS.dll]  [N/A, N/A]
    [C:\Program Files\Common Files\Sony Shared\Sony Utilities\SnyUtils.dll]  [Sony Corporation, 6, 1, 0, 13260]
    [C:\Program Files\Common Files\Sony Shared\SXBIOS\sxbios.dll]  [Sony Corporation, 4.02.8170]
    [C:\Program Files\Sony\VAIO Event Service\VESWndMsg.dll]  [Sony Corporation, 2.1.00.13210]
    [C:\Program Files\Sony\VAIO Event Service\VESTransform.dll]  [Sony Corporation, 2.1.00.13280]
    [C:\Program Files\Sony\VAIO Event Service\VESWndMsgHook.dll]  [Sony Corporation, 2.1.00.13210]
    [C:\Program Files\Sony\VAIO Power Management\VESPowerMgr.dll]  [Sony Corporation, 2.0.00.10290]
    [C:\Program Files\Sony\VAIO Event Service\VESSemiPnP.dll]  [Sony Corporation, 2.1.00.13210]
    [C:\Program Files\Sony\VAIO Event Service\VESSuPerform.dll]  [Sony Corporation, 2.1.00.13240]
    [C:\Program Files\Sony\VAIO Event Service\VESVideo.dll]  [Sony Corporation, 2.1.00.13210]
    [C:\Program Files\Sony\VAIO Event Service\VESPerform.dll]  [Sony Corporation, 2.1.00.13280]
    [C:\Program Files\Sony\VAIO Event Service\VESHKWndCommon.dll]  [Sony Corporation, 2.1.00.13280]
    [C:\WINDOWS\system32\IGFXEXPS.DLL]  [Intel Corporation, 3.0.0.4267]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 836][C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe]  [Sony Corporation, 1.3.00.13260]
    [C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\sonyuppc.dll]  [Sony Corporation, 7.0.00.11040]
    [C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\UPnPCtrl.dll]  [Sony Corporation, 2, 0, 1, 10010]
[PID: 1120][C:\WINDOWS\system32\igfxext.exe]  [Intel Corporation, 3.0.0.4267]
    [C:\WINDOWS\system32\hccutils.DLL]  [Intel Corporation, 3.0.0.4267]
    [C:\WINDOWS\system32\igfxsrvc.dll]  [Intel Corporation, 3.0.0.4267]
    [C:\WINDOWS\system32\igfxdev.dll]  [Intel Corporation, 3.0.0.4267]
    [C:\WINDOWS\system32\IGFXEXPS.DLL]  [Intel Corporation, 3.0.0.4267]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1732][C:\Program Files\Sony\VAIO Power Management\SPMgr.exe]  [Sony Corporation, 1, 6, 1, 13140]
    [C:\Program Files\Sony\VAIO Power Management\SPMDAM.dll]  [Sony Corporation, 1.0.00.08250]
    [C:\Program Files\Sony\VAIO Power Management\SPMRes.dll]  [Sony Corporation, 1.6.00.09210]
    [C:\Program Files\Sony\VAIO Power Management\SPMDrv.dll]  [Sony Corporation, 1.6.01.14010]
    [C:\Program Files\Common Files\Sony Shared\Sony Utilities\SnyUtils.dll]  [Sony Corporation, 6, 1, 0, 13260]
    [C:\Program Files\Common Files\Sony Shared\SXBIOS\sxbios.dll]  [Sony Corporation, 4.02.8170]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1880][D:\BAK\soft\最新收集\小工具\IeBerDown\IeBerDown.exe]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1824][C:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 4]
    [C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1952][C:\WINDOWS\VM303_STI.EXE]  [Vimicro, 3, 6, 227, 13]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\VM303Prp.Ax]  [Vimicro, 3, 6, 411, 13]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1968][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 3616][F:\Program Files\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [F:\Program Files\qq\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [F:\Program Files\qq\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [F:\Program Files\qq\ipsearcher.dll]  [, 1.0.0.3]
    [F:\Program Files\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll]  [Symantec Corporation, 2005.1.00.163]
    [F:\Program Files\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [F:\Program Files\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [F:\Program Files\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [F:\Program Files\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [F:\Program Files\qq\QQMainFrame.dll]  [N/A, N/A]
    [F:\Program Files\qq\CQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupLive.dll]  [N/A, N/A]
    [F:\Program Files\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQPlugin.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [F:\Program Files\qq\ShareFiles.dll]  [N/A, N/A]
    [F:\Program Files\qq\QRingMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQAvatar.dll]  [N/A, N/A]
    [F:\Program Files\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [F:\Program Files\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\BQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]

[F:\Program Files\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [F:\Program Files\qq\QQSceneMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
    [F:\Program Files\qq\QQAllInOne.dll]  [N/A, N/A]
    [F:\Program Files\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [F:\Program Files\qq\QQCustomFace.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [F:\Program Files\qq\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\VCDXP.IME]  [风清扬, 4.00.950]
    [F:\Program Files\qq\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [F:\Program Files\qq\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [F:\Program Files\qq\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [F:\Program Files\qq\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
[PID: 3620][F:\Program Files\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [F:\Program Files\qq\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [F:\Program Files\qq\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [F:\Program Files\qq\ipsearcher.dll]  [, 1.0.0.3]
    [F:\Program Files\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll]  [Symantec Corporation, 2005.1.00.163]
    [F:\Program Files\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [F:\Program Files\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [F:\Program Files\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [F:\Program Files\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [F:\Program Files\qq\QQMainFrame.dll]  [N/A, N/A]
    [F:\Program Files\qq\CQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupLive.dll]  [N/A, N/A]
    [F:\Program Files\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQPlugin.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QRingMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQAvatar.dll]  [N/A, N/A]
    [F:\Program Files\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [F:\Program Files\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [F:\Program Files\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
    [F:\Program Files\qq\BQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQAllInOne.dll]  [N/A, N/A]
    [F:\Program Files\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [F:\Program Files\qq\QQCustomFace.dll]  [N/A, N/A]
    [F:\Program Files\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [F:\Program Files\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [F:\Program Files\qq\QQSceneMng.dll]  [N/A, N/A]
[PID: 3624][F:\Program Files\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [F:\Program Files\qq\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [F:\Program Files\qq\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [F:\Program Files\qq\ipsearcher.dll]  [, 1.0.0.3]
    [F:\Program Files\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll]  [Symantec Corporation, 2005.1.00.163]
    [F:\Program Files\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [F:\Program Files\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [F:\Program Files\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [F:\Program Files\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [F:\Program Files\qq\QQMainFrame.dll]  [N/A, N/A]
    [F:\Program Files\qq\CQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupLive.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [F:\Program Files\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQPlugin.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [F:\Program Files\qq\QQAvatar.dll]  [N/A, N/A]
    [F:\Program Files\qq\QRingMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQAllInOne.dll]  [N/A, N/A]
    [F:\Program Files\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [F:\Program Files\qq\QQCustomFace.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [F:\Program Files\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [F:\Program Files\qq\BQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [F:\Program Files\qq\QQSceneMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [F:\Program Files\qq\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [F:\Program Files\qq\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\VCDXP.IME]  [风清扬, 4.00.950]
    [F:\Program Files\qq\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [F:\Program Files\qq\DShared.dll]  [Tencent, 1, 6, 0, 0]
    [F:\Program Files\qq\QQMsgFriendMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 3628][F:\Program Files\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [F:\Program Files\qq\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [F:\Program Files\qq\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [F:\Program Files\qq\ipsearcher.dll]  [, 1.0.0.3]
    [F:\Program Files\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll]  [Symantec Corporation, 2005.1.00.163]
    [F:\Program Files\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [F:\Program Files\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [F:\Program Files\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [F:\Program Files\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [F:\Program Files\qq\QQMainFrame.dll]  [N/A, N/A]
    [F:\Program Files\qq\CQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupLive.dll]  [N/A, N/A]
    [F:\Program Files\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQPlugin.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQAllInOne.dll]  [N/A, N/A]
    [F:\Program Files\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [F:\Program Files\qq\QQCustomFace.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QRingMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [F:\Program Files\qq\QQAvatar.dll]  [N/A, N/A]
    [F:\Program Files\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [F:\Program Files\qq\BQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [F:\Program Files\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]

[F:\Program Files\qq\QQSceneMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [F:\Program Files\qq\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [F:\Program Files\qq\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [C:\WINDOWS\system32\VCDXP.IME]  [风清扬, 4.00.950]
    [F:\Program Files\qq\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [F:\Program Files\qq\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [F:\Program Files\qq\VqqModule.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\VqqAllInOne.dll]  [Tencent, 1, 6, 0, 0]
    [F:\Program Files\qq\InPlus.dll]  [Tencent, 1, 6, 0, 0]
    [F:\Program Files\qq\tencent-proto1.dll]  [tencent, 1, 6, 0, 0]
    [F:\Program Files\qq\tencent-comlib.dll]  [tencent, 1, 6, 0, 0]
    [F:\Program Files\qq\tencent-proto2.dll]  [tencent, 1, 6, 0, 0]
    [C:\WINDOWS\system32\VM303Prp.Ax]  [Vimicro, 3, 6, 411, 13]
[PID: 3644][F:\Program Files\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [F:\Program Files\qq\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [F:\Program Files\qq\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [F:\Program Files\qq\ipsearcher.dll]  [, 1.0.0.3]
    [F:\Program Files\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll]  [Symantec Corporation, 2005.1.00.163]
    [F:\Program Files\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [F:\Program Files\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [F:\Program Files\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [F:\Program Files\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [F:\Program Files\qq\QQMainFrame.dll]  [N/A, N/A]
    [F:\Program Files\qq\CQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupLive.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQAllInOne.dll]  [N/A, N/A]
    [F:\Program Files\qq\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [F:\Program Files\qq\QQCustomFace.dll]  [N/A, N/A]
    [F:\Program Files\qq\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [F:\Program Files\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQPlugin.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QRingMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQAvatar.dll]  [N/A, N/A]
    [F:\Program Files\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [F:\Program Files\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [F:\Program Files\qq\BQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [F:\Program Files\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [F:\Program Files\qq\QQSceneMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 3, 30]
    [F:\Program Files\qq\ShareFiles.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [F:\Program Files\qq\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [F:\Program Files\qq\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\VCDXP.IME]  [风清扬, 4.00.950]
[PID: 128][F:\Program Files\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [F:\Program Files\qq\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [F:\Program Files\qq\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [F:\Program Files\qq\ipsearcher.dll]  [, 1.0.0.3]
    [F:\Program Files\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll]  [Symantec Corporation, 2005.1.00.163]
    [F:\Program Files\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [F:\Program Files\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [F:\Program Files\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [F:\Program Files\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [F:\Program Files\qq\QQMainFrame.dll]  [N/A, N/A]
    [F:\Program Files\qq\CQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupLive.dll]  [N/A, N/A]
    [F:\Program Files\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [F:\Program Files\qq\QQPlugin.dll]  [N/A, N/A]
    [F:\Program Files\qq\ShareFiles.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [F:\Program Files\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QRingMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQAvatar.dll]  [N/A, N/A]
    [F:\Program Files\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [F:\Program Files\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\BQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [F:\Program Files\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [F:\Program Files\qq\QQSceneMng.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 3648][F:\Program Files\qq\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [F:\Program Files\qq\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [F:\Program Files\qq\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [F:\Program Files\qq\ipsearcher.dll]  [, 1.0.0.3]
    [F:\Program Files\qq\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\PROGRA~1\COMMON~1\SYMANT~1\ANTISPAM\asOEHook.dll]  [Symantec Corporation, 2005.1.00.163]
    [F:\Program Files\qq\QQAPI.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
    [F:\Program Files\qq\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [F:\Program Files\qq\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [F:\Program Files\qq\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [F:\Program Files\qq\QQMainFrame.dll]  [N/A, N/A]
    [F:\Program Files\qq\CQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\NewSkin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\HostingMgr.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\CameraDll.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\MailSummary.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\GroupLive.dll]  [N/A, N/A]
    [F:\Program Files\qq\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQPlugin.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [F:\Program Files\qq\QRingMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\QQAvatar.dll]  [N/A, N/A]
    [F:\Program Files\qq\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [F:\Program Files\qq\QQPet.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\QQSysMsgMng.dll]  [N/A, N/A]
    [F:\Program Files\qq\BQQApplication.dll]  [N/A, N/A]
    [F:\Program Files\qq\CommercesMng.dll]  [, 1, 0, 0, 1]
    [F:\Program Files\qq\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [F:\Program Files\qq\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]