启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background>  [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Realtek Semiconductor Corp.]
    <RavTray><"C:\Program Files\Rising\Rav\RavTray.exe">  [Rising]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
    <StormCodec_Helper><"d:\Program Files\Storm Codec\StormSet.exe" /S /opti>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\ravext.dll>  [Beijing Rising Technology Co., Ltd.]

==================================
启动文件夹
N/A

==================================
服务
[C-DillaCdaC11BA / C-DillaCdaC11BA][Running/Auto Start]
  <C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Kodak Camera Connection Software / KodakCCS][Stopped/Manual Start]
  <C:\WINDOWS\system32\drivers\KodakCCS.exe><N/A>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[RavService / RavService][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\RavService.exe" /service><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Symantec Protection Agent 5.1 / SmcService][Running/Auto Start]
  <C:\Program Files\Symantec\SPA\smc.exe><Symantec Corporation.>

==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[CdaC15BA / CdaC15BA][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS><Macrovision Europe Ltd>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\D:\Program Files\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
  <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Coolpad Mobile Phone Interface (PID 3197) / qcusbmdm][Stopped/Manual Start]
  <system32\DRIVERS\qcusbmdm.sys><QUALCOMM Incorporated>
[Coolpad Diagnostic Port 3197 / qcusbser][Stopped/Manual Start]
  <system32\DRIVERS\qcusbser.sys><QUALCOMM Incorporated>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[Realtek 10/100/1000 NIC Family all in one NDIS XP Driver / RTL8023xp][Running/Manual Start]
  <system32\DRIVERS\Rtlnicxp.sys><Realtek Semiconductor Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[SysGuard / SysGuard][Running/System Start]
  <\SystemRoot\System32\Drivers\Sysguard.sys><N/A>
[SysPlant for NT / SysPlant][Running/Boot Start]
  <\SystemRoot\SYSTEM32\Drivers\SysPlant.sys><N/A>
[Teefer for NT / Teefer][Running/Boot Start]
  <\SystemRoot\SYSTEM32\Drivers\Teefer.sys><Sygate Technologies, Inc.>
[SyGate for NT, wg3n / wg3n][Running/Auto Start]
  <\SystemRoot\SYSTEM32\Drivers\wg3n.sys><Sygate Technologies, Inc.>
[SyGate for NT, wg4n / wg4n][Running/Auto Start]
  <\SystemRoot\SYSTEM32\Drivers\wg4n.sys><Sygate Technologies, Inc.>
[SyGate for NT, wg5n / wg5n][Running/Auto Start]
  <\SystemRoot\SYSTEM32\Drivers\wg5n.sys><Sygate Technologies, Inc.>
[SyGate for NT, wg6n / wg6n][Running/Auto Start]
  <\SystemRoot\SYSTEM32\Drivers\wg6n.sys><Sygate Technologies, Inc.>
[wpsdrvnt / wpsdrvnt][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys><Sygate Technologies, Inc.>

浏览器加载项
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <d:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[HtmlDlgSafeHelper Class]
  {3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation>
[HHCtrl Object]
  {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[HHCtrl Object]
  {52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[WangWangObj Class]
  {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} <D:\Program Files\淘宝旺旺\WangWangX4.dll, 阿里软件（中国）有限公司>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll, Thunder Networking Technologies,LTD>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Microsoft DirectAnimation Control]
  {B6FFC24C-7E13-11D0-9B47-00C04FC2F51D} <C:\WINDOWS\system32\danim.dll, Microsoft Corporation>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Adobe PDF Reader]
  {CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroPDF.dll, Adobe Systems, Inc.>
[AUDIO__MID Moniker Class]
  {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[上传到QQ网络硬盘]
  <D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用BitComet下载(&B)]
  <res://C:\DOCUME~1\LIUYAN~1\LOCALS~1\Temp\Rar$EX00.641\BitComet.exe/AddLink.htm, N/A>
[使用BitComet下载全部链接]
  <res://C:\DOCUME~1\LIUYAN~1\LOCALS~1\Temp\Rar$EX00.641\BitComet.exe/AddAllLink.htm, N/A>
[使用迅雷下载]
  <d:\Program Files\Thunder\Program\GetUrl.htm, N/A>
[使用迅雷下载全部链接]
  <d:\Program Files\Thunder\Program\GetAllUrl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <D:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\Program Files\Tencent\QQ\SendMMS.htm, N/A>

正在运行的进程
[PID: 492][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 552][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 584][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 628][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 640][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 804][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 852][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 916][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 932][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 984][C:\Program Files\Symantec\SPA\smc.exe]  [Symantec Corporation., 6.6.00.6469]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Symantec\SPA\Trident.dll]  [Sygate Technologies, Inc., 6, 0, 0, 0]
    [C:\Program Files\Symantec\SPA\SyLog.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\Program Files\Symantec\SPA\SyLink.dll]  [Sygate Technologies, Inc., 5, 5, 0, 0]
    [C:\Program Files\Symantec\SPA\DataMan.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\Program Files\Symantec\SPA\tfman.dll]  [Sygate Technologies, Inc., 1.62.1200.0]
    [C:\Program Files\Symantec\SPA\tse.dll]  [Sygate Technologies, Inc.,, 5, 5, 0, 0]
    [C:\Program Files\Symantec\SPA\PSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [C:\Program Files\Symantec\SPA\SpNet.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\Program Files\Symantec\SPA\IdsTrafficPipe.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\Program Files\Symantec\SPA\wpsman.dll]  [Sygate Technologies, Inc., 5, 5, 0, 0]
    [C:\Program Files\Symantec\SPA\wsman.dll]  [Sygate Technologies, Inc., 2, 3, 3115, 0]
    [C:\Program Files\Symantec\SPA\SgHI.dll]  [sygate, 1, 0, 0, 1]
    [C:\Program Files\Symantec\SPA\wgman.dll]  [Sygate Technologies, Inc., 1.01.1222]
    [C:\Program Files\Symantec\SPA\Netport.dll]  [Sygate Technologies, Inc., 5, 5, 0, 0]
    [C:\Program Files\Symantec\SPA\Res\SmcRc2052.dll]  [Sygate Technologies, Inc., 5, 6, 0, 0]
    [C:\Program Files\Symantec\SPA\devman.plg]  [sygate, 1, 0, 0, 1]
    [C:\Program Files\Symantec\SPA\sfman.plg]  [N/A, 1, 0, 0, 1]
    [C:\Program Files\Symantec\SPA\sgman.plg]  [N/A, 1, 0, 0, 1]
[PID: 1028][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 1428][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 1656][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 1792][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\ravext.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 8.0.0.0]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 8.0.0.0]
    [C:\WINDOWS\system32\nvcpl.dll]  [NVIDIA Corporation, 6.14.10.8415]
    [C:\WINDOWS\system32\NVRSZHC.DLL]  [NVIDIA Corporation, 6.14.10.8415]
    [d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 1892][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5, 1, 0, 51]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 1908][C:\Program Files\Rising\Rav\RavTask.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 1916][C:\Program Files\Rising\AntiSpyware\runiep.exe]  [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 1964][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 264][C:\WINDOWS\system32\drivers\CDAC11BA.EXE]  [Macrovision, 4.20.020]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 364][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  [Microsoft Corporation, 7.00.9466]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 400][C:\WINDOWS\system32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.8415]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 1936][C:\Program Files\Symantec\SPA\SmcGui.exe]  [Symantec Corporation., 6.6.00.6469]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Symantec\SPA\DataMan.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\Program Files\Symantec\SPA\SyLog.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\Program Files\Symantec\SPA\tse.dll]  [Sygate Technologies, Inc.,, 5, 5, 0, 0]
    [C:\Program Files\Symantec\SPA\PSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [C:\Program Files\Symantec\SPA\SpNet.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\Program Files\Symantec\SPA\IdsTrafficPipe.dll]  [Sygate Technologies, Inc., 5. 5. 0. 0]
    [C:\Program Files\Symantec\SPA\wpsman.dll]  [Sygate Technologies, Inc., 5, 5, 0, 0]

[C:\Program Files\Symantec\SPA\tfman.dll]  [Sygate Technologies, Inc., 1.62.1200.0]
    [C:\Program Files\Symantec\SPA\wsman.dll]  [Sygate Technologies, Inc., 2, 3, 3115, 0]
    [C:\Program Files\Symantec\SPA\Res\SmcRc2052.dll]  [Sygate Technologies, Inc., 5, 6, 0, 0]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\Program Files\Symantec\SPA\devman.plg]  [sygate, 1, 0, 0, 1]
[PID: 2076][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 2420][C:\Program Files\Rising\Rav\RavService.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 51]
    [C:\Program Files\Rising\Rav\DLCenter.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\BDEngine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\BDEX.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 3]
    [C:\Program Files\Rising\Rav\BDLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 1]
[PID: 2508][C:\Program Files\Rising\Rav\RAVTRAY.EXE]  [Rising, 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RavUILib.dll]  [, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RAVTRAY936.dll]  [Rising, 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RsCommx.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\BDEngine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\BDEX.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 3]
    [C:\Program Files\Rising\Rav\BDLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 1]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 2372][D:\Program Files\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [D:\Program Files\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 6, 0, 200, 320]
    [D:\Program Files\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [d:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [D:\Program Files\Tencent\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQMainFrame.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\CQQApplication.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQKnowledgeSearch.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQAllInOne.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\GroupLive.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQPlugin.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QRingMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQAvatar.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [D:\Program Files\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\Program Files\Tencent\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\Program Files\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\BQQApplication.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\Program Files\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 271]
    [D:\Program Files\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\Program Files\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\Program Files\Tencent\QQ\QQSceneMng.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 8, 81]
    [D:\Program Files\Tencent\QQ\QQCustomFace.dll]  [N/A, N/A]
    [D:\Program Files\Tencent\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Program Files\Tencent\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [D:\Program Files\Tencent\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [D:\Program Files\Tencent\QQ\OEMApplication.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\Tencent\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
[PID: 2552][d:\Program Files\Tencent\QQ\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [d:\Program Files\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 2184][D:\Program Files\淘宝旺旺\WangWang.exe]  [淘宝（中国）软件有限公司, 1, 9, 6, 1221]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [D:\Program Files\淘宝旺旺\AliViewCtrl.dll]  [vline, 1, 0, 0, 1]
    [D:\Program Files\淘宝旺旺\VLNetwork.dll]  [, 1, 0, 0, 6]
    [D:\Program Files\淘宝旺旺\AliViewMedia.dll]  [vline, 1, 0, 0, 1]
    [D:\Program Files\淘宝旺旺\VideoCAP.dll]  [, 1, 0, 0, 4]
    [D:\Program Files\淘宝旺旺\VLAudio.dll]  [, 1, 0, 0, 4]
    [D:\Program Files\淘宝旺旺\JsmShow.dll]  [, 1, 0, 0, 3]
    [D:\Program Files\淘宝旺旺\ww_network.dll]  [N/A, 1, 0, 1, 18]
    [D:\Program Files\淘宝旺旺\Ali_Res.DLL]  [N/A, N/A]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [D:\Program Files\淘宝旺旺\WangWangX4.dll]  [阿里软件（中国）有限公司, 1, 0, 0, 1]
    [D:\Program Files\淘宝旺旺\RichOne.dll]  [淘宝(中国)软件有限公司, 1.0.0.1]
    [D:\Program Files\淘宝旺旺\TBProgress.dll]  [淘宝(中国)软件有限公司, 1.0.0.1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
[PID: 1396][D:\Program Files\AutoCAD 2004\acad.exe]  [Autodesk, Inc., R16.00.086]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Common Files\Autodesk Shared\ac1st16.dll]  [Autodesk, Inc., 16.0.0.86]
    [C:\Program Files\Common Files\Autodesk Shared\acdb16.dll]  [Autodesk, Inc., 16.0.0.86]
    [C:\Program Files\Common Files\Autodesk Shared\AcGe16.dll]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\acui16.dll]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\ANav.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\adui16.dll]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\dswhip.dll]  [Autodesk Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\heidi8.dll]  [Autodesk, Inc., 8.0.16.86]
    [D:\Program Files\AutoCAD 2004\dlint8.dll]  [Autodesk, Inc., 8.0.16.86]
    [D:\Program Files\AutoCAD 2004\SFTTABAC.dll]  [Softel vdm, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\UserData.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\adlmdll.dll]  [Autodesk, Inc., 4.0.0.2]
    [D:\Program Files\AutoCAD 2004\adctrls.dll]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\adui16res.dll]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AnavRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\acui16res.dll]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\DsWhipRes.dll]  [Autodesk Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\sfttabacRes.dll]  [Softel vdm, 16.0.0.86]
    [C:\DOCUME~1\LIUYAN~1\LOCALS~1\Temp\~ef032a\~df394b.tmp]  [N/A, N/A]
    [C:\DOCUME~1\LIUYAN~1\LOCALS~1\Temp\~ef032a\~de8c3a.tmp]  [N/A, 2.20.020]
    [D:\Program Files\AutoCAD 2004\ADCtrlsRes.dll]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\acadbtn.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\acadres.dll]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\adlmres.dll]  [Autodesk, Inc., 4.0.0.2]
    [D:\Program Files\AutoCAD 2004\PrxyInet.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\PrxyInetRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\oleaprot.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\colorRes.dll]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\drv\gdi8.hdi]  [Autodesk, Inc., 8.0.16.86]

[D:\Program Files\AutoCAD 2004\drv\gdi8Res.dll]  [Autodesk, Inc., 8.0.16.86]
    [D:\Program Files\AutoCAD 2004\drv\szb8.hdi]  [Autodesk, Inc., 8.0.16.86]
    [D:\Program Files\AutoCAD 2004\drv\rblast8.hdi]  [Autodesk, Inc., 8.0.16.86]
    [D:\Program Files\AutoCAD 2004\drv\gdifont8.hdi]  [Autodesk, Inc., 8.0.16.86]
    [D:\Program Files\AutoCAD 2004\acgs.dll]  [Autodesk Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\acgsRes.dll]  [Autodesk Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\hcreg8.dll]  [Autodesk, Inc., 8.0.16.86]
    [D:\Program Files\AutoCAD 2004\hcreg8Res.dll]  [Autodesk, Inc., 8.0.16.86]
    [D:\Program Files\AutoCAD 2004\vl.arx]  [Autodesk Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\VLMSG.DLL]  [Autodesk Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\VLLIB.DLL]  [Autodesk Inc., 16.0.0.86]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [D:\Program Files\AutoCAD 2004\AcApp.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcDblClkEdit.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcDblClkEditPE.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcDblClkEditRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\acdim.arx]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\ShareAC.dll]  [Autodesk, Inc, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\ShareMFC.dll]  [Autodesk, Inc, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcDimRes.dll]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\aceplotx.arx]  [Autodesk, 16.0.0.86]
    [c:\program files\common files\autodesk shared\achapi16.dbx]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcEplotXRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\achlnkui.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\achlnkuiRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcIDropMgr.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcIDropMgrRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcLayerP.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcLayerPRes.dll]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcSign.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcSignRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcSpaceTrans.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcSpaceTransRes.dll]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcStd.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcStStdRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcTp.arx]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcTc.DLL]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcTcUi.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcTcRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\AcTcUiRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\whohas.arx]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\whohasRes.dll]  [, 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\acetlodr.arx]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\WSCommCntrAcCon.arx]  [Autodesk, Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\WSCommCntrAcConRes.dll]  [Autodesk, 16.0.0.86]
    [D:\Program Files\PCCAD2004\TH_ARXBase.arx]  [N/A, N/A]
    [D:\Program Files\PCCAD2004\pccadbas.arx]  [N/A, 1, 0, 0, 1]
    [C:\WINDOWS\system32\NSLMS324.DLL]  [Rainbow Technologies, Inc., 5,31,0,0]
    [D:\Program Files\PCCAD2004\thpaperset.arx]  [N/A, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\TH_PowerPara.arx]  [N/A, 1, 0, 0, 1]
    [c:\program files\common files\thsoft shared\CalculateExpressValue30n.DLL]  [TianHe Software Company Beijing P.R.CHINA, 3, 0, 0, 2]
    [D:\Program Files\PCCAD2004\TH_ParaFace.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\para3.dll]  [, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\pchide.arx]  [N/A, N/A]
    [D:\Program Files\PCCAD2004\pccaddim.arx]  [N/A, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\THDimTolerance.arx]  [, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\THsPartDraw.arx]  [, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\RclickMenu.arx]  [, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\TH_const.arx]  [N/A, N/A]
    [D:\Program Files\PCCAD2004\THCurvetext.arx]  [Autodesk, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\THCadToolKit.arx]  [N/A, 2, 0, 0, 1]
    [D:\Program Files\AutoCAD 2004\axdb16.dll]  [N/A, N/A]
    [D:\Program Files\PCCAD2004\SuperTable.arx]  [, 1, 0, 0, 1]
    [D:\Program Files\PCCAD2004\PcCreateView.arx]  [, 1, 0, 0, 1]
    [D:\Program Files\AutoCAD 2004\vlcom.dll]  [Autodesk Inc., 16.0.0.86]
    [D:\Program Files\AutoCAD 2004\vlreac.dll]  [Autodesk, Inc., 16.0.0.86]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 8.0.0.0]
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  [Autodesk, 16.0.0.86]
    [C:\DOCUME~1\LIUYAN~1\LOCALS~1\Temp\~e5d141.tmp]  [Macrovision Europe Ltd., 1, 0, 0, 1]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 3644][C:\Program Files\Common Files\Autodesk Shared\WSCommCntr1.exe]  [Autodesk, Inc., 1.0.0.1]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Common Files\Autodesk Shared\WebServices1.dll]  [Autodesk, Inc., 1.0.0.1]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 3936][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
[PID: 3080][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 8.0.0.2006102200]
    [d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 8.0.0.0]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 8.0.0.0]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
[PID: 2072][C:\Program Files\WinRAR\WinRAR.exe]  [N/A, N/A]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
[PID: 2984][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\WINDOWS\system32\AcSignIcon.dll]  [Autodesk, 16.0.0.86]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll]  [Adobe Systems Incorporated, 8.0.0.2006102200]
    [d:\Program Files\Thunder\ComDlls\XunLeiBHO_002.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 8.0.0.0]
    [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS]  [Adobe Systems, Inc., 8.0.0.0]
[PID: 3696][C:\DOCUME~1\LIUYAN~1\LOCALS~1\Temp\Rar$EX22.8141\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [C:\WINDOWS\SYSTEM32\SYSFER.DLL]  [Sygate Technologies, Inc., 1.0.0]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\SSSensor.dll]  [Sygate Technologies, Inc., 5. 5. 0. 5]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
警告！System Repair Engineer 提醒
你下面的函数内容与预期值不符，他
们可能被一些恶意的软件所修改：
入口点错误：NtCreateFile
入口点错误：NtCreateKey
入口点错误：NtCreateThread
入口点错误：NtDeleteFile
入口点错误：NtOpenKey
入口点错误：NtRenameKey
入口点错误：NtSetInformationFile
入口点错误：NtSetValueKey
入口点错误：NtTerminateProcess
入口点错误：ZwCreateFile
入口点错误：ZwCreateKey
入口点错误：ZwCreateThread
入口点错误：ZwDeleteFile
入口点错误：ZwOpenFile
入口点错误：ZwRenameKey
入口点错误：ZwSetInformationFile
入口点错误：ZwSetValueKey
入口点错误：ZwTerminateProcess

引用某高手 的台词：
下载 System Repair Engineer，
http://www.kztechs.com/sreng/download.html
1 解压缩sreng2.zip
2 运行SREng.exe
3 智能扫描=》扫描=》保存报告
4 把日志中的报告完整拷贝贴上来，不要修改
日志一次发不完，请分次发上来

楼主系统未发现病毒，修复API HOOK即可

[CdaC15BA / CdaC15BA][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS><Macrovision Europe Ltd>

CDAC15BA.SYS

关闭QQ,CAD等不必要程序,重新扫描日志，扫完了发我邮箱.晚上给你处理意见