[CODE]

2008-01-16,20:32:45

System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
    <TOSCDSPD><C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe>  [TOSHIBA]
    <KavPFW><"E:\应用软件\yahu\kingsoft internet security 2008\KPFW32.EXE">  [(Verified)KINGSOFT CORPORATION]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <360Safetray><C:\Program Files\360safe\safemon\360Tray.exe /start>  [奇虎网]
    <ATIPTA><"C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe">  [ATI Technologies, Inc.]
    <dla><C:\WINDOWS\system32\dla\tfswctrl.exe>  [Sonic Solutions]
    <IMEKRMIG6.1><C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE>  [(Verified)Microsoft Windows Publisher]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Publisher]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <MSPY2002><C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC>  [(Verified)Microsoft Windows Publisher]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
    <SVPWUTIL><C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL>  [N/A]
    <Apoint><C:\Program Files\Apoint2K\Apoint.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <TPNF><C:\Program Files\TOSHIBA\TouchPad\TPTray.exe>  [COMPAL ELECTRONIC INC.]
    <CeEKEY><C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe>  [COMPAL ELECTRONIC INC.]
    <AGRSMMSG><AGRSMMSG.exe>  [Agere Systems]
    <PadTouch><C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe>  [TOSHIBA]
    <ZoomingHook><ZoomingHook.exe>  [TOSHIBA]
    <SmoothView><C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe>  [TOSHIBA Corporation]
    <HWSetup><C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP>  [N/A]
    <Tvs><C:\Program Files\Toshiba\Tvs\TvsTray.exe>  [TOSHIBA Corporation]
    <TPSMain><TPSMain.exe>  [TOSHIBA Corporation]
    <TCtryIOHook><TCtrlIOHook.exe>  [TOSHIBA]
    <BigDogPath><C:\WINDOWS\VM_STI.EXE HYUNDAI PC Camera>  [N/A]
    <KavStart><"E:\应用软件\yahu\Kingsoft Internet Security 2008\KAVStart.exe" -startup>  [(Verified)KINGSOFT CORPORATION]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <KASTask><"E:\应用软件\yahu\Kingsoft Internet Security 2008\Antispy\KASTask.EXE">  [(Verified)KINGSOFT CORPORATION]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><C:\WINDOWS\system32\Userinit.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install>  [Microsoft Corporation]

==================================
启动文件夹
[Adobe Gamma Loader]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><N>
[ramasst]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\ramasst.lnk --> C:\WINDOWS\system32\RAMASST.exe [Matsushita Electric Industrial Co., Ltd.]><N>
[星空极速]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\星空极速.lnk --> C:\PROGRA~1\ChinaNet\VNETCL~1.EXE []><N>
[腾讯QQ]
  <C:\Documents and Settings\linbz\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\应用软件\QQ\QQ.exe [TENCENT]><N>

==================================
服务
[Atheros Configuration Service / ACS][Running/Auto Start]
  <C:\WINDOWS\system32\ACS.exe><N/A>
[Application Management / AppMgmt][Stopped/Manual Start]
  <C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
  <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
  <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[BoBoTurbo / BoBoTurbo][Stopped/Manual Start]
  <2 - 系统找不到指定的文件。
><N/A>
[ConfigFree Service / CFSvcs][Running/Auto Start]
  <C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe><TOSHIBA CORPORATION>
[DVD-RAM_Service / DVD-RAM_Service][Running/Auto Start]
  <C:\WINDOWS\system32\DVDRAMSV.exe><Matsushita Electric Industrial Co., Ltd.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Kingsoft Internet Security Common Service / KISSvc][Running/Auto Start]
  <e:\应用软件\yahu\kingsoft internet security 2008\kissvc.exe><Kingsoft Corporation>
[Kingsoft Personal Firewall Service / KPfwSvc][Running/Auto Start]
  <"e:\应用软件\yahu\kingsoft internet security 2008\kpfwsvc.exe"><Kingsoft Corporation>
[Kingsoft Antivirus KWatch Service / KWatchSvc][Running/Auto Start]
  <"e:\应用软件\yahu\kingsoft internet security 2008\kwatch.exe"><Kingsoft Corporation>
[Qvod Terminal / Qvod Terminal][Running/Auto Start]
  <C:\Program Files\QvodPlayer\QvodTerminal.exe><Shenzhen QVOD Technology Co.,Ltd>


[用户系统信息]Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

==================================
驱动程序
[360IceBreaker / 360IceBreaker][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\Drivers\360IceBreaker.sys><N/A>
[TOSHIBA V92 Software Modem / AgereSoftModem][Running/Manual Start]
  <system32\DRIVERS\AGRSM.sys><Agere Systems>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Alps Pointing-device Filter Driver / ApfiltrService][Running/Manual Start]
  <system32\DRIVERS\Apfiltr.sys><Alps Electric Co., Ltd.>
[Atheros Wireless Network Adapter Service / AR5211][Running/Manual Start]
  <system32\DRIVERS\ar5211.sys><Atheros Communications, Inc.>
[ati2mtag / ati2mtag][Running/Manual Start]
  <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[drvmcdb / drvmcdb][Running/Boot Start]
  <\SystemRoot\system32\drivers\drvmcdb.sys><Sonic Solutions>
[drvnddm / drvnddm][Running/Auto Start]
  <system32\drivers\drvnddm.sys><Sonic Solutions>
[EagleNT / EagleNT][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\EagleNT.sys><N/A>
[GROWELL GW1031C MODEM / gwbxpc][Stopped/System Start]
  <system32\DRIVERS\gwbxpc.sys><GROWELL>
[IVI ASPI Shell / Iviaspi][Running/Manual Start]
  <system32\drivers\iviaspi.sys><InterVideo, Inc.>
[KAVBase / KAVBase][Stopped/Auto Start]
  <\??\C:\WINDOWS\system32\Drivers\KAVBase.sys><Kingsoft Corporation>
[KAVBootC / KAVBootC][Running/Boot Start]
  <\SystemRoot\system32\Drivers\KAVBootC.sys><Kingsoft Corporation>
[KNetWch / KNetWch][Running/System Start]
  <\??\e:\应用软件\yahu\kingsoft internet security 2008\KNetWch.SYS><Kingsoft Corporation>
[KPGuard / KPGuard][Stopped/System Start]
  <\??\D:\PROGRA~1\JiangMin\ANTIVI~1\KPGuard.sys><N/A>
[KWatch3 / KWatch3][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\KWatch3.SYS><Kingsoft Corporation>
[AEGIS Protocol (IEEE 802.1x) v2.3.1.10 / MDC8021X][Running/Auto Start]
  <system32\DRIVERS\mdc8021x.sys><Meetinghouse Data Communications>
[meiudf / meiudf][Running/System Start]
  <System32\Drivers\meiudf.sys><Matsushita Electric Industrial Co.,Ltd.>
[mseqsy / mseqsy][Stopped/Auto Start]
  <system32\DRIVERS\msacpe.sys><N/A>
[TOSHIBA Network Device Usermode I/O Protocol / Netdevio][Running/Auto Start]
  <system32\DRIVERS\netdevio.sys><TOSHIBA Corporation.>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
  <system32\DRIVERS\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\E:\应用软件\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[Padus ASPI Shell / Pfc][Running/Manual Start]
  <system32\drivers\pfc.sys><Padus, Inc.>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
  <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver / RTL8023xp][Running/Manual Start]
  <system32\DRIVERS\Rtlnicxp.sys><Realtek Semiconductor Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[SrvcSSIOMngr / SrvcSSIOMngr][Running/System Start]
  <System32\Drivers\SSIoMngr.sys><COMPAL ELECTRONIC INC.>
[sscdbhk5 / sscdbhk5][Running/System Start]
  <system32\drivers\sscdbhk5.sys><Sonic Solutions>
[ssrtln / ssrtln][Running/System Start]
  <system32\drivers\ssrtln.sys><Sonic Solutions>
[tfsnboio / tfsnboio][Running/Auto Start]
  <system32\dla\tfsnboio.sys><Sonic Solutions>
[tfsncofs / tfsncofs][Running/Auto Start]
  <system32\dla\tfsncofs.sys><Sonic Solutions>
[tfsndrct / tfsndrct][Running/Auto Start]
  <system32\dla\tfsndrct.sys><Sonic Solutions>
[tfsndres / tfsndres][Running/Auto Start]
  <system32\dla\tfsndres.sys><Sonic Solutions>
[tfsnifs / tfsnifs][Running/Auto Start]
  <system32\dla\tfsnifs.sys><Sonic Solutions>
[tfsnopio / tfsnopio][Running/Auto Start]
  <system32\dla\tfsnopio.sys><Sonic Solutions>
[tfsnpool / tfsnpool][Running/Auto Start]
  <system32\dla\tfsnpool.sys><Sonic Solutions>
[tfsnudf / tfsnudf][Running/Auto Start]
  <system32\dla\tfsnudf.sys><Sonic Solutions>
[tfsnudfa / tfsnudfa][Running/Auto Start]
  <system32\dla\tfsnudfa.sys><Sonic Solutions>
[Common Driver / TPwSav][Running/System Start]
  <System32\Drivers\TPwSav.sys><TOSHIBA>
[Toshiba Virtual Sound with SRS technologies / Tvs][Running/Manual Start]
  <system32\DRIVERS\Tvs.sys><TOSHIBA Corporation>
[USB 2860 Device / USB28xxBGA][Stopped/Manual Start]
  <system32\DRIVERS\emBDA.sys><eMPIA Technology, Inc.>
[USB 28xx OEM Filter / USB28xxOEM][Stopped/Manual Start]
  <system32\DRIVERS\emOEM.sys><eMPIA Technology, Inc.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[HYUNDAI PC Camera / ZSMC302][Stopped/Manual Start]
  <System32\Drivers\usbVM31b.sys><VM>

==================================
浏览器加载项
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[DriveLetterAccess]
  {5CA3D70E-1895-11CF-8E15-001234567890} <C:\WINDOWS\system32\dla\tfswshx.dll, Sonic Solutions>
[NavigatMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\PROGRA~1\360safe\safemon\safemon.dll, >
[Java Plug-in 1.5.0_02]
  {08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll, Sun Microsystems, Inc.>
[雅虎助手]
  {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/start.htm?source=yzs_icon&btn=yassistnew, N/A>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <D:\游戏\xunlei\ComDlls\TDAtOnce_Now.dll, N/A>
[ActiveMovieControl Object]
  {05589FA1-C356-11CE-BF01-00AA0055595A} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[DriveLetterAccess]
  {5CA3D70E-1895-11CF-8E15-001234567890} <C:\WINDOWS\system32\dla\tfswshx.dll, Sonic Solutions>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[NavigatMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\PROGRA~1\360safe\safemon\safemon.dll, >
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Tencent Safety Online Base Module]
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\system32\TSOBase\TSOBase.ocx, Tencent Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
[金山毒霸在线产品升级]
  {E847C78C-C210-4195-8799-FBF3BF89797D} <C:\PROGRA~1\KOS\KOSInit.ocx, 金山软件股份有限公司>
[QvodCtrl Class]
  {F3D0D36F-23F8-4682-A195-74C92B03D4AF} <C:\Program Files\QvodPlayer\QvodInsert.dll, Shenzhen QVOD Technology Co.,Ltd>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ表情]
  <D:\应用软件\QQ\AddEmotion.htm, N/A>

==================================
正在运行的进程
[PID: 476 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 532 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 556 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\Ati2evxx.dll]  [ATI Technologies Inc., 6.14.10.4117]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 600 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 612 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 780 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe]  [ATI Technologies Inc., 6.14.10.4117]
    [C:\WINDOWS\system32\Ati2edxx.dll]  [ATI Technologies, Inc., 6, 14, 10, 2497]
[PID: 792 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 860 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 896 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 944 / SYSTEM][C:\WINDOWS\system32\ACS.exe]  [N/A, ]
    [C:\WINDOWS\system32\athcfg11.dll]  [Atheros, 3.1.2.45]
    [C:\WINDOWS\system32\AegisE5.dll]  [Meetinghouse Data Communications, 1, 8, 54, 2]
[PID: 1076 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1144 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1308 / SYSTEM][e:\应用软件\yahu\kingsoft internet security 2008\kpfwsvc.exe]  [Kingsoft Corporation, 2007,12,24,165]
    [e:\应用软件\yahu\kingsoft internet security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
[PID: 1324 / SYSTEM][e:\应用软件\yahu\kingsoft internet security 2008\kwatch.exe]  [Kingsoft Corporation, 2007,11,30,131]
    [e:\应用软件\yahu\kingsoft internet security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAVEvent.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAVIPC2.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAVDevC.dll]  [Kingsoft Corporation, 2007,12,20,103]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEPlat.DLL]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEPlatA.DLL]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAESgnLd.DLL]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEArchA.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEOLEA.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAECoreA.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEntryA.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEProxy.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAECentr.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAECore.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEUnpack.DAT]  [Kingsoft Corporation, 2008,01,02,181]
    [e:\应用软件\yahu\kingsoft internet security 2008\KARchive.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KUnpaMgr.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEBoot.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAExt2.DAT]  [Kingsoft Corporation, 2007,11,21,36]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAExtend.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAVQuara.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [e:\应用软件\yahu\kingsoft internet security 2008\KWatchEx.dll]  [Kingsoft Corporation, 1, 0, 0, 1]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAVRep.dll]  [Kingsoft Corporation, 2007,09,29,45]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAVRepRecycle.dll]  [Kingsoft Corporation, 2007,09,29,45]
[PID: 1416 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\mdimon.dll]  [Microsoft Corporation, 11.3.1897.0]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll]  [Microsoft Corporation, 11.3.1897.0]
[PID: 1520 / SYSTEM][C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe]  [TOSHIBA CORPORATION, 6, 0, 0, 1]
    [C:\Program Files\TOSHIBA\ConfigFree\NDSAPI.dll]  [TOSHIBA CORPORATION, 6, 0, 0, 7]
    [C:\Program Files\TOSHIBA\ConfigFree\IpAdrSet.dll]  [TOSHIBA CORPORATION, 6, 0, 0, 3]
[PID: 1552 / SYSTEM][C:\WINDOWS\system32\DVDRAMSV.exe]  [Matsushita Electric Industrial Co., Ltd., 3, 0, 0, 0]
[PID: 1608 / SYSTEM][e:\应用软件\yahu\kingsoft internet security 2008\kissvc.exe]  [Kingsoft Corporation, 2007,11,29,128]
    [e:\应用软件\yahu\kingsoft internet security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [e:\应用软件\yahu\kingsoft internet security 2008\KISSvc.DLL]  [Kingsoft Corporation, 2007,11,29,128]
[PID: 1640 / SYSTEM][C:\Program Files\QvodPlayer\QvodTerminal.exe]  [Shenzhen QVOD Technology Co.,Ltd, 2, 5, 0, 53]
[PID: 1696 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1732 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)]

[PID: 1708 / SYSTEM][e:\应用软件\yahu\kingsoft internet security 2008\KMailMon.EXE]  [Kingsoft Corporation, 2007,12,24,165]
    [e:\应用软件\yahu\kingsoft internet security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAntiSpm.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAVIPC2.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAECall2.DLL]  [Kingsoft Corporation, 2004, 12, 28, 7]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEPlat.DLL]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEPlatA.DLL]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAESgnLd.DLL]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEArchA.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEOLEA.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAECoreA.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEntryA.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEProxy.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAECentr.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAECore.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEUnpack.DAT]  [Kingsoft Corporation, 2008,01,02,181]
    [e:\应用软件\yahu\kingsoft internet security 2008\KARchive.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KUnpaMgr.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAEBoot.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAExt2.DAT]  [Kingsoft Corporation, 2007,11,21,36]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAExtend.DAT]  [Kingsoft Corporation, 2007,11,19,35]
    [e:\应用软件\yahu\kingsoft internet security 2008\KAVEvent.DLL]  [Kingsoft Corporation, 2007,11,29,128]
[PID: 1920 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 500 / linbz][C:\WINDOWS\system32\Ati2evxx.exe]  [ATI Technologies Inc., 6.14.10.4117]
    [C:\WINDOWS\system32\Ati2edxx.dll]  [ATI Technologies, Inc., 6, 14, 10, 2497]
[PID: 1484 / linbz][C:\WINDOWS\explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\TPwrCfg.DLL]  [TOSHIBA Corporation, 1, 0, 8, 0]
    [C:\WINDOWS\system32\TPwrReg.dll]  [TOSHIBA Corporation, 1, 0, 4, 0]
    [C:\WINDOWS\system32\TPSTrace.DLL]  [TOSHIBA Corporation, 1, 0, 3, 0]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [C:\WINDOWS\system32\mscoree.dll]  [Microsoft Corporation, 2.0.50727.253 (QFE.050727-2500)]
    [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Shfusion.dll]  [Microsoft Corporation, 1.1.4322.573]
    [C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KAVEXT.DLL]  [Kingsoft Corporation, 2007,11,29,128]
[PID: 180 / linbz][C:\Program Files\360safe\safemon\360Tray.exe]  [奇虎网, 3, 6, 1, 1001]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [C:\Program Files\360safe\safemon\SafeKrnl.dll]  [奇虎网, 3, 6, 0, 1001]
    [C:\Program Files\360safe\AntiAdwa.dll]  [360Safe.com, 3, 6, 1, 1001]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
[PID: 644 / linbz][C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe]  [ATI Technologies, Inc., 6.14.10.5157]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll]  [ATI Technologies, Inc., 6.14.10.5157]
    [C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.CHS]  [ATI Technologies, Inc., 6.14.10.5157]
    [C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll]  [ATI Technologies, Inc., 6.14.10.5157]
[PID: 308 / linbz][C:\WINDOWS\system32\dla\tfswctrl.exe]  [Sonic Solutions, 1.04.08a]
    [C:\WINDOWS\system32\tfswapi.dll]  [Sonic Solutions, 1.04.08a]
    [C:\WINDOWS\system32\dla\tfswcres.dll]  [Sonic Solutions, 1.04.08a]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 448 / linbz][C:\Program Files\Apoint2K\Apoint.exe]  [Alps Electric Co., Ltd., 6.0.2.186]
    [C:\WINDOWS\system32\VXDIF.DLL]  [Alps Electric Co., Ltd., 6.0.2.67]
    [C:\Program Files\Apoint2K\ApMain.DLL]  [Alps Electric Co., Ltd., 6.0.2.16]
    [C:\Program Files\Apoint2K\ApCommon.dll]  [Alps Electric Co., Ltd., 6.0.2.34]
    [C:\Program Files\Apoint2K\ApDual.dll]  [Alps Electric Co., Ltd., 6.0.2.20]
    [C:\Program Files\Apoint2K\ApPad.dll]  [Alps Electric Co., Ltd., 6.0.2.50]
    [C:\Program Files\Apoint2K\EzCapt.dll]  [Alps Electric Co., Ltd., 6.0.2.18]
    [C:\Program Files\Apoint2K\EzLaunch.dll]  [Alps Electric Co., Ltd., 6.0.2.32]
    [C:\Program Files\Apoint2K\ApStick.dll]  [ALPS Electric Co., Ltd., 6.0.2.37]
    [C:\Program Files\Apoint2K\ApOthers.dll]  [Alps Electric Co., Ltd., 6.0.2.28]
    [C:\Program Files\Apoint2K\ApMouse.dll]  [ALPS Electric Co., Ltd., 6.0.2.32]
    [C:\Program Files\Apoint2K\EzAuto.dll]  [Alps Electric Co., Ltd., 4.5.1.83]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [C:\Program Files\Apoint2K\ApString.dll]  [Alps Electric Co., Ltd., 6.0.301.37]
[PID: 360 / linbz][C:\Program Files\TOSHIBA\TouchPad\TPTray.exe]  [COMPAL ELECTRONIC INC., 1, 0, 0, 5]
    [C:\Program Files\TOSHIBA\TouchPad\TPECioCtl.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\EBLib.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\CeTPPolicy.dll]  [COMPAL ELECTRONIC INC., 2, 1, 0, 17]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 520 / linbz][C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe]  [COMPAL ELECTRONIC INC., 1, 0, 0, 31]
    [C:\WINDOWS\system32\EKECioCtl.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\EBLib.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\CeEKPolicy.dll]  [COMPAL ELECTRONIC INC., 2, 1, 0, 30]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 524 / linbz][C:\WINDOWS\AGRSMMSG.exe]  [Agere Systems, 2.1.49 2.1.49 12/20/2004 15:10:02]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 652 / linbz][C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe]  [TOSHIBA, 1, 2, 9, 0]
    [C:\Program Files\TOSHIBA\Touch and Launch\PadHook.dll]  [ , 1, 2, 2, 0]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [C:\WINDOWS\system32\Audiodev.dll]  [Microsoft Corporation, 5.2.3790.3646 built by: DNSRV(bld4act)]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[PID: 1132 / linbz][C:\WINDOWS\system32\ZoomingHook.exe]  [TOSHIBA, 1, 0, 0, 1]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]

[PID: 1052 / linbz][C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe]  [TOSHIBA Corporation, 2, 0, 0, 23]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 1224 / linbz][C:\Program Files\Toshiba\Tvs\TvsTray.exe]  [TOSHIBA Corporation, 1, 0, 0, 4]
    [C:\WINDOWS\system32\TvsCtrl.dll]  [TOSHIBA Corporation, 1, 0, 0, 6]
    [C:\Program Files\Toshiba\Tvs\TvsRes.dll]  [TOSHIBA Corporation, 1, 0, 0, 9]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 1904 / linbz][C:\WINDOWS\system32\TPSMain.exe]  [TOSHIBA Corporation, 1, 0, 15, 0]
    [C:\WINDOWS\system32\TPSMainCtl.dll]  [TOSHIBA Corporation, 1, 0, 4, 0]
    [C:\WINDOWS\system32\CpuPerf.dll]  [TOSHIBA Corporation, 1, 0, 1, 0]
    [C:\WINDOWS\system32\TPSTrace.DLL]  [TOSHIBA Corporation, 1, 0, 3, 0]
    [C:\WINDOWS\system32\TPwrReg.dll]  [TOSHIBA Corporation, 1, 0, 4, 0]
    [C:\WINDOWS\system32\TPeculiarity.dll]  [, 1, 0, 0, 2]
    [C:\WINDOWS\system32\EBLib.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
[PID: 1912 / linbz][C:\WINDOWS\system32\TCtrlIOHook.exe]  [TOSHIBA, 1, 0, 0, 2]
    [C:\WINDOWS\system32\EBLib.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
[PID: 1896 / linbz][C:\WINDOWS\VM_STI.EXE]  [BIGDOG, 4, 2, 610, 4]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
[PID: 1228 / linbz][E:\应用软件\yahu\Kingsoft Internet Security 2008\KAVStart.exe]  [Kingsoft Corporation, 2007,12,02,142]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KAVIPC2.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\SvcTimer.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\PopSprt3.dll]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KAVPassp.dll]  [Kingsoft Corporation, 2008,01,07,175]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KAVEvent.DLL]  [Kingsoft Corporation, 2007,11,29,128]
[PID: 460 / linbz][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 1444 / linbz][C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe]  [TOSHIBA, 1, 0, 6, 0]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 2068 / linbz][C:\WINDOWS\system32\RAMASST.exe]  [Matsushita Electric Industrial Co., Ltd., 1, 1, 0, 0]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 2144 / linbz][C:\Program Files\Apoint2K\Apntex.exe]  [Alps Electric Co., Ltd., 5.0.1.15]
    [C:\WINDOWS\system32\VXDIF.DLL]  [Alps Electric Co., Ltd., 6.0.2.67]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 2156 / linbz][C:\WINDOWS\system32\TPSBattM.exe]  [TOSHIBA Corporation, 1, 0, 2, 0]
    [C:\WINDOWS\system32\TPwrCfg.DLL]  [TOSHIBA Corporation, 1, 0, 8, 0]
    [C:\WINDOWS\system32\TPwrReg.dll]  [TOSHIBA Corporation, 1, 0, 4, 0]
    [C:\WINDOWS\system32\TPSTrace.DLL]  [TOSHIBA Corporation, 1, 0, 3, 0]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 2196 / linbz][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 2752 / linbz][C:\Program Files\Toshiba\TOSHIBA Controls\TFncKy.exe]  [TOSHIBA Corporation, 3.19.00]
    [C:\WINDOWS\system32\TCtrlCommon.dll]  [TOSHIBA Corporation, 3.19.00]
    [C:\Program Files\Toshiba\TOSHIBA Controls\TBtnCommon.dll]  [TOSHIBA Corporation, 3.19.00]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [C:\WINDOWS\system32\TCtrlIO.DLL]  [, 1, 0, 0, 3]
    [C:\WINDOWS\system32\EBLib.dll]  [, 1, 0, 0, 1]
[PID: 176 / linbz][C:\WINDOWS\system32\wscntfy.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
[PID: 3764 / SYSTEM][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
    [C:\WINDOWS\system32\wups2.dll]  [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 1192 / linbz][C:\Documents and Settings\linbz\桌面\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\KMailOEBand.DLL]  [Kingsoft Corporation, 2007,11,29,128]
    [E:\应用软件\yahu\Kingsoft Internet Security 2008\kis.dll]  [Kingsoft Corporation, 2008,01,03,173]
    [C:\Program Files\360safe\safemon\safemon.dll]  [, 3, 6, 1, 1001]
    [C:\Documents and Settings\linbz\桌面\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 944, C:\WINDOWS\SYSTEM32\ACS.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 180, C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 180, C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 644, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 644, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 308, C:\WINDOWS\SYSTEM32\DLA\TFSWCTRL.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 308, C:\WINDOWS\SYSTEM32\DLA\TFSWCTRL.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 360, C:\PROGRAM FILES\TOSHIBA\TOUCHPAD\TPTRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 360, C:\PROGRAM FILES\TOSHIBA\TOUCHPAD\TPTRAY.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 520, C:\PROGRAM FILES\TOSHIBA\E-KEY\CEEKEY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 520, C:\PROGRAM FILES\TOSHIBA\E-KEY\CEEKEY.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 524, C:\WINDOWS\AGRSMMSG.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 524, C:\WINDOWS\AGRSMMSG.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 652, C:\PROGRAM FILES\TOSHIBA\TOUCH AND LAUNCH\PADEXE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 652, C:\PROGRAM FILES\TOSHIBA\TOUCH AND LAUNCH\PADEXE.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1132, C:\WINDOWS\SYSTEM32\ZOOMINGHOOK.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1132, C:\WINDOWS\SYSTEM32\ZOOMINGHOOK.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1052, C:\PROGRAM FILES\TOSHIBA\TOSHIBA ZOOMING UTILITY\SMOOTHVIEW.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1052, C:\PROGRAM FILES\TOSHIBA\TOSHIBA ZOOMING UTILITY\SMOOTHVIEW.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1224, C:\PROGRAM FILES\TOSHIBA\TVS\TVSTRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1224, C:\PROGRAM FILES\TOSHIBA\TVS\TVSTRAY.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1904, C:\WINDOWS\SYSTEM32\TPSMAIN.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1904, C:\WINDOWS\SYSTEM32\TPSMAIN.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1912, C:\WINDOWS\SYSTEM32\TCTRLIOHOOK.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1912, C:\WINDOWS\SYSTEM32\TCTRLIOHOOK.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1896, C:\WINDOWS\VM_STI.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1896, C:\WINDOWS\VM_STI.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 1444, C:\PROGRAM FILES\TOSHIBA\TOSCDSPD\TOSCDSPD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1444, C:\PROGRAM FILES\TOSHIBA\TOSCDSPD\TOSCDSPD.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 2068, C:\WINDOWS\SYSTEM32\RAMASST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2068, C:\WINDOWS\SYSTEM32\RAMASST.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 2156, C:\WINDOWS\SYSTEM32\TPSBATTM.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2156, C:\WINDOWS\SYSTEM32\TPSBATTM.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 2752, C:\PROGRAM FILES\TOSHIBA\TOSHIBA CONTROLS\TFNCKY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2752, C:\PROGRAM FILES\TOSHIBA\TOSHIBA CONTROLS\TFNCKY.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]

怎么没人帮忙看啊，急

又是机器狗

好烦的说。

愿意重装系统，是最好的了。

把报告保存后,将日志内容复制到空记事本里保存，再以附件形式发来。

一定要以附件形式发来

恐怖`````````````