这个病毒困扰我快一个星期了，我到处求助，询问各路朋友，但有的人说那是病毒，有的人说不是，说是的，我已经按照他们的方法去做了，进了多次安全模式···下载了数款杀毒软件···可是这个东西还是会在我开机半小时以及一小时后跳出来提示要注册··，最近这两天，我被屈服了，我点了放过，我以为事情就这么结束了，但是它并不放过我，还是照样每半小时跳一次，让我不能正常工作，我真的好烦，好困扰，求求大家帮帮我了··如何解决他总是跳出来的问题····我一定万分感谢···谢谢了··



用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)

以下是我的诊断报告
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:2.00GB - 当前可用内存:1.60GB

100 - 未知 - Process: stormliv.exe [暴风影音媒体控制中心] - G:\暴风影音\stormliv.exe /asservice
100 - 未知 - Process: NBService.exe [Nero BackItUp] - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
100 - 未知 - Process: 360tray.exe [360安全卫士实时保护模块] -
100 - 未知 - Process: OlympicNews.exe [搜狐奥运快讯] - G:\搜狗\SogouInput\OlympicNews.exe
O2 - 未知 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O4 - 未知 - HKCU\..\Run: [OlympicExpress] [搜狐奥运快讯] G:\搜狗\SogouInput\OlympicNews.exe
O8 - 未知 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\geturl.htm
O8 - 未知 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm
O8 - 未知 - Extra context menu item: 添加到QQ表情 - G:\QQ\AddEmotion.htm
O9 - 未知 - Extra button: 启动迅雷5(HKLM) - C:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - 未知 - Extra button: 番茄花园(HKLM) - http://www.tomatolei.com
O9 - 未知 - Extra button: PPLive(HKLM) - G:\PPLive\PPLive.exe
O21 - 未知 - Protocol Icons: HKCR\http\shell\open\command - "G:\360safe\360se\360SE.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\ftp\shell\open\command - "G:\360safe\360se\360SE.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\https\shell\open\command - "G:\360safe\360se\360SE.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\htmlfile\shell\open\command - "G:\360safe\360se\360SE.exe" "%1"
O23 - 未知 - Service: ccosm [Contrl Center of Storm Media] - G:\暴风影音\stormliv.exe /asservice - (running)
O23 - 未知 - Service: Nero BackItUp Scheduler 3 [Nero BackItUp Scheduler 3 is responsible to control all jobs created using Nero BackItUp 3. These jobs can create backups of selected files/folders/partitions or complete hard disk to hard disk, network drive, disc or FTP.] - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe - (running)
O23 - 未知 - Service: NMIndexingService [NMIndexingService] - "C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe" - (not running)
O23 - 未知 - Service: WMConnectCDS [使用“通用即插即用”与媒体设备共享媒体] - C:\Program Files\Windows Media Connect 2\wmccds.exe - (not running)

=======================================

100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] - C:\Program Files\Rising\Rav\CCenter.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: RavMonD.exe [瑞星杀毒软件的一部分。] - C:\PROGRAM FILES\RISING\RAV\ravmond.exe
100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: RavStub.exe [瑞星出品的杀毒软件相关程序。] - C:\PROGRAM FILES\RISING\RAV\RavStub.exe
100 - 安全 - Process: LSSrvc.exe [一款名为LightScribe(光雕技术)的刻录机，可以在光盘上光雕个性化图案。] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k imgsvc
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: RavTask.exe [瑞星出品的杀毒软件相关程序。] - C:\Program Files\Rising\Rav\RavTask.exe
100 - 安全 - Process: RavMon.exe [瑞星杀毒软件防火墙。] - C:\Program Files\Rising\Rav\Ravmon.exe
100 - 安全 - Process: safeboxTray.exe [360安全卫士保险箱相关程序。] -
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe
100 - 安全 - Process: EncouterLove.Bat [] - D:\诊断报告\360cmdCT\EncouterLove.Bat
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O2 - 安全 - BHO: (VnetCookie Class) - [星空极速， 拨号软件。] - {4E83D567-4697-4F7B-B1F0-A513B01DB89A} - c:\PROGRA~1\chinanet\VNETTR~1.DLL
O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] G:\360safe\safemon\360tray.exe /start
O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 安全 - HKLM\..\Run: [360Safebox] [360安全卫士保险箱相关程序。] "C:\Program Files\360Safebox\safeboxTray.exe" /r
O4 - 安全 - HKCU\..\Run: [CTFMON.EXE] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://E:\OFFICE~1\OFFICE11\EXCEL.EXE/3000
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe - (running)
O23 - 安全 - Service: ATI Smart [是一个ati图形显示卡驱程的相关进程。] - C:\WINDOWS\system32\ati2sgag.exe - (not running)
O23 - 安全 - Service: LightScribeService [一个来自dvd刻录机\\\"光雕\\\"软件的相关程序,通过用户许可协议安装。] - "C:\Program Files\Common Files\LightScribe\LSSrvc.exe" - (running)
O23 - 安全 - Service: RsCCenter [是瑞星杀毒软件控制台相关程序。] - "C:\Program Files\Rising\Rav\CCenter.exe" - (running)
O23 - 安全 - Service: RsRavMon [是瑞星杀毒软件相关监控程序。] - "C:\PROGRAM FILES\RISING\RAV\Ravmond.exe" - (not running)

=======================================

O31 - 未知 - Notify: AtiExtEvent - C:\WINDOWS\system32\Ati2evxx.dll - ATI Technologies Inc. - ATI External Event Utility DLL Module - 6.14.10.4176 - 122880 - 98d1420df23a0adbde3aa52683876d31
O31 - 未知 - Notify: crypt32chain - C:\WINDOWS\system32\crypt32.dll - Microsoft Corporation - Crypto API32 - 5.131.2600.2180 - 590336 - 874e00d6547c913458525f26695938e1
O31 - 未知 - Notify: cryptnet - C:\WINDOWS\system32\cryptnet.dll - Microsoft Corporation - Crypto Network Related API - 5.131.2600.2180 - 63488 - 742dac6208524b5b633675bdb1a09c0c
O31 - 未知 - Notify: cscdll - C:\WINDOWS\system32\cscdll.dll - Microsoft Corporation - Offline Network Agent - 5.1.2600.2180 - 99840 - 57b10583d5b880a93a82f525b817f867
O31 - 未知 - Notify: ScCertProp - C:\WINDOWS\system32\wlnotify.dll - Microsoft Corporation - Common DLL to receive Winlogon notifications - 5.1.2600.2180 - 89088 - d4732d5f6fb51d07c8c115b658fa84de
O31 - 未知 - Notify: Schedule - C:\WINDOWS\system32\wlnotify.dll - Microsoft Corporation - Common DLL to receive Winlogon notifications - 5.1.2600.2180 - 89088 - d4732d5f6fb51d07c8c115b658fa84de
O31 - 未知 - Notify: sclgntfy - C:\WINDOWS\system32\sclgntfy.dll - Microsoft Corporation - Secondary Logon Service Notification DLL - 5.1.2600.2180 - 18944 - 58001a3833a25dbd7460a69cb69c8fe2
O31 - 未知 - Notify: SensLogn - C:\WINDOWS\system32\WlNotify.dll - Microsoft Corporation - Common DLL to receive Winlogon notifications - 5.1.2600.2180 - 89088 - d4732d5f6fb51d07c8c115b658fa84de
O31 - 未知 - Notify: termsrv - C:\WINDOWS\system32\wlnotify.dll - Microsoft Corporation - Common DLL to receive Winlogon notifications - 5.1.2600.2180 - 89088 - d4732d5f6fb51d07c8c115b658fa84de
O31 - 未知 - Notify: wlballoon - C:\WINDOWS\system32\wlnotify.dll - Microsoft Corporation - Common DLL to receive Winlogon notifications - 5.1.2600.2180 - 89088 - d4732d5f6fb51d07c8c115b658fa84de
O31 - 未知 - SODL: {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation - Windows Shell Common Dll - 6.0.2900.3241 - 8312320 -
O31 - 未知 - SODL: {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation - Windows Shell Common Dll - 6.0.2900.3241 - 8312320 -
O31 - 未知 - SODL: {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SODL: {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll - Microsoft Corporation - Systray shell service object - 5.1.2600.2180 - 121344 - 08488e3e73787c1e7b59f0d5c1b8c554
O31 - 未知 - SODL: {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll - Microsoft Corporation - Windows Portable Device Shell Service Object - 5.2.5358.4827 - 52224 - 8f9a244a9e6d7c3566c9c6b064d8767c
O31 - 未知 - SEApproved: {00022613-0000-0000-C000-000000000046} - C:\WINDOWS\system32\mmsys.cpl - Microsoft Corporation - Control Panel Drivers Applet - 5.1.2600.2180 - 600064 - 085232434a439a6a680380372632f2d4
O31 - 未知 - SEApproved: {176d6597-26d3-11d1-b350-080036a75b03} - C:\WINDOWS\system32\icmui.dll - Microsoft Corporation - Microsoft Color Matching System User Interface DLL - 5.1.2600.0 - 54784 - 25e23917a19873e24457d9bd433108e8
O31 - 未知 - SEApproved: {1F2E5C40-9550-11CE-99D2-00AA006E086C} - C:\WINDOWS\system32\rshx32.dll - Microsoft Corporation - Security Shell Extension - 5.1.2600.2180 - 37888 - 1bc85eebac41ed1ecbb37ef02181a202
O31 - 未知 - SEApproved: {3EA48300-8CF6-101B-84FB-666CCB9BCD32} - C:\WINDOWS\system32\docprop.dll - Microsoft Corporation - OLE DocFile Property Page - 5.1.2600.0 - 46080 - b6f75dd82f6a3596ef934b0e648f4199
O31 - 未知 - SEApproved: {40dd6e20-7c17-11ce-a804-00aa003ca9f6} - C:\WINDOWS\system32\ntshrui.dll - Microsoft Corporation - Shell extensions for sharing - 5.1.2600.2180 - 137216 - 6fd08f1ef02456a30f14b8b37e78cd05
O31 - 未知 - SEApproved: {41E300E0-78B6-11ce-849B-444553540000} - C:\WINDOWS\system32\themeui.dll - Microsoft Corporation - Windows Theme API - 6.0.2900.2180 - 371200 - 65096cf4a9d1281e362e65e52a505eb8
O31 - 未知 - SEApproved: {42071712-76d4-11d1-8b24-00a0c9068ff3} - C:\WINDOWS\system32\deskadp.dll - Microsoft Corporation - Advanced display adapter properties - 6.0.2600.0 - 16384 - 2df0148bcdf1a691e47ae5fe7a3220c0
O31 - 未知 - SEApproved: {42071713-76d4-11d1-8b24-00a0c9068ff3} - C:\WINDOWS\system32\deskmon.dll - Microsoft Corporation - Advanced display monitor properties - 6.0.2600.0 - 16896 - 1ae273152358333693595948a63c0ea7
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll -  -  -  - 0 -
O31 - 未知 - SEApproved: {4E40F770-369C-11d0-8922-00A024AB2DBB} - C:\WINDOWS\system32\dssec.dll - Microsoft Corporation - Directory Service Security UI - 5.1.2600.2180 - 48640 - 65d1b98f7f3cf1650700e6e67a600d6e
O31 - 未知 - SEApproved: {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8} - C:\WINDOWS\system32\SlayerXP.dll - Microsoft Corporation - Compatibility Tab Shell Extension DLL - 5.1.2600.2180 - 24576 - 3de5dac9fbba388890dbe070bc9bab8a
O31 - 未知 - SEApproved: {56117100-C0CD-101B-81E2-00AA004AE837} - C:\WINDOWS\system32\shscrap.dll - Microsoft Corporation - Shell scrap object handler - 5.1.2600.2180 - 25600 - a082c5ad1601962de5c59e95ec426a6b
O31 - 未知 - SEApproved: {59099400-57FF-11CE-BD94-0020AF85B590} - C:\WINDOWS\system32\diskcopy.dll - Microsoft Corporation - Windows DiskCopy - 6.0.2600.0 - 1501696 - dd9a5ae9be5964086f98030f2765c5e6
O31 - 未知 - SEApproved: {59be4990-f85c-11ce-aff7-00aa003ca9f6} - C:\WINDOWS\system32\ntlanui2.dll - Microsoft Corporation - Network object shell UI - 5.1.2600.0 - 14336 - 36feaeb24262211c77548bd118eb82d6
O31 - 未知 - SEApproved: {5DB2625A-54DF-11D0-B6C4-0800091AA605} - C:\WINDOWS\System32\icmui.dll - Microsoft Corporation - Microsoft Color Matching System User Interface DLL - 5.1.2600.0 - 54784 - 25e23917a19873e24457d9bd433108e8
O31 - 未知 - SEApproved: {675F097E-4C4D-11D0-B6C1-0800091AA605} - C:\WINDOWS\system32\icmui.dll - Microsoft Corporation - Microsoft Color Matching System User Interface DLL - 5.1.2600.0 - 54784 - 25e23917a19873e24457d9bd433108e8
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {77597368-7b15-11d0-a0c2-080036af3f03} - C:\WINDOWS\system32\printui.dll - Microsoft Corporation - Print UI DLL - 5.1.2600.2180 - 524288 - a524c4b0210e299c3f602b48ea0c7be8
O31 - 未知 - SEApproved: {7988B573-EC89-11cf-9C00-00AA00A14F56} - C:\WINDOWS\system32\dskquoui.dll - Microsoft Corporation - Windows Shell Disk Quota UI DLL - 5.1.2600.0 - 144384 - 43c63e2827663aca2d8af934fa2e8b19
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {85BBD920-42A0-1069-A2E4-08002B30309D} - C:\WINDOWS\system32\syncui.dll - Microsoft Corporation - Windows Briefcase - 5.1.2600.2180 - 177152 - 88cb75c488f0e5a97051357dc86c3897
O31 - 未知 - SEApproved: {88895560-9AA2-1069-930E-00AA0030EBC8} - C:\WINDOWS\system32\hticons.dll - Hilgraeve, Inc. - HyperTerminal Applet Library - 5.1.2600.0 - 44544 - 455e63cc325be7a6d87059b0e457bcc9
O31 - 未知 - SEApproved: {BD84B380-8CA2-1069-AB1D-08000948F534} - C:\WINDOWS\system32\fontext.dll - Microsoft Corporation - Windows Font Folder - 5.1.2600.2180 - 375808 - edbfdd6bcfa8208ef2b05d0e6c2a760a
O31 - 未知 - SEApproved: {DBCE2480-C732-101B-BE72-BA78E9AD5B27} - C:\WINDOWS\system32\icmui.dll - Microsoft Corporation - Microsoft Color Matching System User Interface DLL - 5.1.2600.0 - 54784 - 25e23917a19873e24457d9bd433108e8
O31 - 未知 - SEApproved: {F37C5810-4D3F-11d0-B4BF-00AA00BBB723} - C:\WINDOWS\system32\rshx32.dll - Microsoft Corporation - Security Shell Extension - 5.1.2600.2180 - 37888 - 1bc85eebac41ed1ecbb37ef02181a202
O31 - 未知 - SEApproved: {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} - C:\WINDOWS\system32\ntshrui.dll - Microsoft Corporation - Shell extensions for sharing - 5.1.2600.2180 - 137216 - 6fd08f1ef02456a30f14b8b37e78cd05
O31 - 未知 - SEApproved: {f92e8c40-3d33-11d2-b1aa-080036a75b03} - C:\WINDOWS\system32\deskperf.dll - Microsoft Corporation - Advanced display performance properties - 5.1.2600.0 - 18432 - 82f4dd2113aff745c63abdba3ecf2c56
O31 - 未知 - SEApproved: {7444C717-39BF-11D1-8CD9-00C04FC29D45} - C:\WINDOWS\system32\cryptext.dll - Microsoft Corporation - Crypto Shell Extensions - 5.131.2600.2180 - 52736 - d8bb430edcd5f3b77b8f67b164f4a7ad
O31 - 未知 - SEApproved: {7444C719-39BF-11D1-8CD9-00C04FC29D45} - C:\WINDOWS\system32\cryptext.dll - Microsoft Corporation - Crypto Shell Extensions - 5.131.2600.2180 - 52736 - d8bb430edcd5f3b77b8f67b164f4a7ad
O31 - 未知 - SEApproved: {7007ACC7-3202-11D1-AAD2-00805FC1270E} - C:\WINDOWS\system32\NETSHELL.dll - Microsoft Corporation - Network Connections Shell - 5.1.2600.2180 - 1655808 - d82cd94b2f86572f36966b700de7e8b5
O31 - 未知 - SEApproved: {992CFFA0-F557-101A-88EC-00DD010CCC48} - C:\WINDOWS\system32\NETSHELL.dll - Microsoft Corporation - Network Connections Shell - 5.1.2600.2180 - 1655808 - d82cd94b2f86572f36966b700de7e8b5
O31 - 未知 - SEApproved: {E211B736-43FD-11D1-9EFB-0000F8757FCD} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 579072 - 4b99b972764984c995b912c174a4e9db
O31 - 未知 - SEApproved: {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 579072 - 4b99b972764984c995b912c174a4e9db
O31 - 未知 - SEApproved: {905667aa-acd6-11d2-8080-00805f6596d2} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 579072 - 4b99b972764984c995b912c174a4e9db
O31 - 未知 - SEApproved: {3F953603-1008-4f6e-A73A-04AAC7A992F1} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 579072 - 4b99b972764984c995b912c174a4e9db
O31 - 未知 - SEApproved: {83bbcbf3-b28a-4919-a5aa-73027445d672} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 579072 - 4b99b972764984c995b912c174a4e9db
O31 - 未知 - SEApproved: {F0152790-D56E-4445-850E-4F3117DB740C} - C:\WINDOWS\system32\remotepg.dll - Microsoft Corporation - Remote Sessions CPL Extension - 5.1.2600.2180 - 57344 - e5cadd733c68ad1fbc1b0423cd1bd12a

O31 - 未知 - SEApproved: {60254CA5-953B-11CF-8C96-00AA00B8708C} - C:\WINDOWS\system32\wshext.dll - Microsoft Corporation - Microsoft (r) Shell Extension for Windows Script Host - 5.6.0.8820 - 65536 - 864d2a170677372919b6517e1392cbdf
O31 - 未知 - SEApproved: {2206CDB2-19C1-11D1-89E0-00C04FD7A829} - C:\Program Files\Common Files\System\Ole DB\oledb32.dll - Microsoft Corporation - Microsoft Data Access - OLE DB Core Services - 2.81.1117.0 - 487424 - e775d5864f0c24e48a2203d6ec20cb08
O31 - 未知 - SEApproved: {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF} - C:\WINDOWS\system32\mstask.dll - Microsoft Corporation - Task Scheduler interface DLL - 5.1.2600.2180 - 260608 - 9817ae630a0c072a6fe51a5e39749ae5
O31 - 未知 - SEApproved: {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF} - C:\WINDOWS\system32\mstask.dll - Microsoft Corporation - Task Scheduler interface DLL - 5.1.2600.2180 - 260608 - 9817ae630a0c072a6fe51a5e39749ae5
O31 - 未知 - SEApproved: {D6277990-4C6A-11CF-8D87-00AA0060F5BF} - C:\WINDOWS\system32\mstask.dll - Microsoft Corporation - Task Scheduler interface DLL - 5.1.2600.2180 - 260608 - 9817ae630a0c072a6fe51a5e39749ae5
O31 - 未知 - SEApproved: {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {5F327514-6C5E-4d60-8F16-D07FA08A78ED} - C:\WINDOWS\system32\wuaucpl.cpl - Microsoft Corporation - Automatic Updates Control Panel - 7.0.6000.381 - 216408 - d7fa9a9750403cc68dc209cde7c50d7a
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {D20EA4E1-3957-11d2-A40B-0C5020524152} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {D20EA4E1-3957-11d2-A40B-0C5020524153} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {596AB062-B4D2-4215-9F74-E9109B0A8153} - C:\WINDOWS\system32\twext.dll - Microsoft Corporation - Previous Versions property page - 6.0.3800.2180 - 44032 - bfbce84cf30c37d274d875ef7f1be9ac
O31 - 未知 - SEApproved: {9DB7A13C-F208-4981-8353-73CC61AE2783} - C:\WINDOWS\system32\twext.dll - Microsoft Corporation - Previous Versions property page - 6.0.3800.2180 - 44032 - bfbce84cf30c37d274d875ef7f1be9ac
O31 - 未知 - SEApproved: {875CB1A1-0F29-45de-A1AE-CFB4950D0B78} - C:\WINDOWS\system32\shmedia.dll - Microsoft Corporation - Media File Property Extractor Shell Extension - 6.0.2900.2180 - 147968 - 8ec7b13733ae0a47480538e0cce1833b
O31 - 未知 - SEApproved: {40C3D757-D6E4-4b49-BB41-0E5BBEA28817} - C:\WINDOWS\system32\shmedia.dll - Microsoft Corporation - Media File Property Extractor Shell Extension - 6.0.2900.2180 - 147968 - 8ec7b13733ae0a47480538e0cce1833b
O31 - 未知 - SEApproved: {E4B29F9D-D390-480b-92FD-7DDB47101D71} - C:\WINDOWS\system32\shmedia.dll - Microsoft Corporation - Media File Property Extractor Shell Extension - 6.0.2900.2180 - 147968 - 8ec7b13733ae0a47480538e0cce1833b
O31 - 未知 - SEApproved: {87D62D94-71B3-4b9a-9489-5FE6850DC73E} - C:\WINDOWS\system32\shmedia.dll - Microsoft Corporation - Media File Property Extractor Shell Extension - 6.0.2900.2180 - 147968 - 8ec7b13733ae0a47480538e0cce1833b
O31 - 未知 - SEApproved: {A6FD9E45-6E44-43f9-8644-08598F5A74D9} - C:\WINDOWS\system32\shmedia.dll - Microsoft Corporation - Media File Property Extractor Shell Extension - 6.0.2900.2180 - 147968 - 8ec7b13733ae0a47480538e0cce1833b
O31 - 未知 - SEApproved: {c5a40261-cd64-4ccf-84cb-c394da41d590} - C:\WINDOWS\system32\shmedia.dll - Microsoft Corporation - Media File Property Extractor Shell Extension - 6.0.2900.2180 - 147968 - 8ec7b13733ae0a47480538e0cce1833b
O31 - 未知 - SEApproved: {5E6AB780-7743-11CF-A12B-00AA004AE837} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {22BF0C20-6DA7-11D0-B373-00A0C9034938} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {91EA3F8B-C99B-11d0-9815-00C04FD91972} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {6413BA2C-B461-11d1-A18A-080036B11A03} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {F61FFEC1-754F-11d0-80CA-00AA005B4383} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {7BA4C742-9E81-11CF-99D3-00AA004AE837} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {30D02401-6A81-11d0-8274-00C04FD5AE38} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {169A0691-8DF9-11d1-A1C4-00C04FD75D13} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {07798131-AF23-11d1-9111-00A0C98BA67D} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {AF4F6510-F982-11d0-8595-00AA004CD6D8} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {01E04581-4EEE-11d0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {A08C11D2-A228-11d0-825B-00AA005B4383} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {00BB2763-6A77-11D0-A535-00C04FD7D062} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {7376D660-C583-11d0-A3A5-00C04FD706EC} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {6756A641-DE71-11d0-831B-00AA005B4383} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {7e653215-fa25-46bd-a339-34a2790f3cb7} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {acf35015-526e-4230-9596-becbe19f0ac9} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {00BB2764-6A77-11D0-A535-00C04FD7D062} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {03C036F1-A186-11D0-824A-00AA005B4383} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {00BB2765-6A77-11D0-A535-00C04FD7D062} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {ECD4FC4E-521C-11D0-B792-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {3CCF8A41-5C85-11d0-9796-00AA00B90ADF} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {ECD4FC4C-521C-11D0-B792-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {ECD4FC4D-521C-11D0-B792-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {DD313E04-FEFF-11d1-8ECD-0000F87A470C} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {EFA24E61-B078-11d0-89E4-00C04FC9E26E} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {0A89A860-D7B1-11CE-8350-444553540000} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {E7E4BC40-E76A-11CE-A9BB-00AA004AE837} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {A5E46E3A-8849-11D1-9D8C-00C04FC99D61} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {FBF23B40-E3F0-101B-8488-00AA003E56F8} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {3C374A40-BAE4-11CF-BF7D-00AA006946EE} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {FF393560-C2A7-11CF-BFF4-444553540000} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {7BD29E00-76C1-11CF-9DD0-00A0C9034933} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {7BD29E01-76C1-11CF-9DD0-00A0C9034933} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec

O31 - 未知 - SEApproved: {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {67EA19A0-CCEF-11d0-8024-00C04FD75D13} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {131A6951-7F78-11D0-A979-00C04FD705A2} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {9461b922-3c5a-11d2-bf8b-00c04fb93661} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {3DC7A020-0ACD-11CF-A9BB-00AA004AE837} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {871C5380-42A0-1069-A2EA-08002B30309D} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {EFA24E64-B078-11d0-89E4-00C04FC9E26E} - C:\WINDOWS\system32\shdocvw.dll - Microsoft Corporation - Shell Doc Object and Control Library - 6.0.2900.3354 - 1494016 - 8bc68a9d989b3bd1dec2d43074dc1dec
O31 - 未知 - SEApproved: {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE} - C:\WINDOWS\system32\sendmail.dll - Microsoft Corporation - Send Mail - 6.0.2900.2180 - 54272 - 736995b40ef4b98717b14adaebe9fd1f
O31 - 未知 - SEApproved: {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE} - C:\WINDOWS\system32\sendmail.dll - Microsoft Corporation - Send Mail - 6.0.2900.2180 - 54272 - 736995b40ef4b98717b14adaebe9fd1f
O31 - 未知 - SEApproved: {88C6C381-2E85-11D0-94DE-444553540000} - C:\WINDOWS\system32\occache.dll - Microsoft Corporation - Object Control Viewer - 6.0.2900.2180 - 93696 - 2e5885a25b48afa9bc5847c1d5d1fe58
O31 - 未知 - SEApproved: {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {F5175861-2688-11d0-9C5E-00AA00A45957} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {08165EA0-E946-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {7D559C10-9FE9-11d0-93F7-00AA0059CE02} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {E6CC6978-6B6E-11D0-BECA-00C04FD940BE} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {D8BD2030-6FC9-11D0-864F-00AA006809D9} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 265728 - fefe188339f412ffaaf800b5ba7dbc84
O31 - 未知 - SEApproved: {352EC2B7-8B9A-11D1-B8AE-006008059382} - C:\WINDOWS\system32\appwiz.cpl - Microsoft Corporation - Shell Application Manager - 5.1.2600.2180 - 538112 - 46845f615595c7d87ceef2e8b446b267
O31 - 未知 - SEApproved: {0B124F8F-91F0-11D1-B8B5-006008059382} - C:\WINDOWS\system32\appwiz.cpl - Microsoft Corporation - Shell Application Manager - 5.1.2600.2180 - 538112 - 46845f615595c7d87ceef2e8b446b267
O31 - 未知 - SEApproved: {CFCCC7A0-A282-11D1-9082-006008059382} - C:\WINDOWS\system32\appwiz.cpl - Microsoft Corporation - Shell Application Manager - 5.1.2600.2180 - 538112 - 46845f615595c7d87ceef2e8b446b267
O31 - 未知 - SEApproved: {e84fda7c-1d6a-45f6-b725-cb260c236066} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 434176 - 19d7a19f964aeeb2435bce3b215ff61b
O31 - 未知 - SEApproved: {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 434176 - 19d7a19f964aeeb2435bce3b215ff61b
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {3F30C968-480A-4C6C-862D-EFC0897BB84B} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 434176 - 19d7a19f964aeeb2435bce3b215ff61b
O31 - 未知 - SEApproved: {9DBD2C50-62AD-11d0-B806-00C04FD706EC} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 434176 - 19d7a19f964aeeb2435bce3b215ff61b
O31 - 未知 - SEApproved: {EAB841A0-9550-11cf-8C16-00805F1408F3} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 434176 - 19d7a19f964aeeb2435bce3b215ff61b
O31 - 未知 - SEApproved: {eb9b1153-3b57-4e68-959a-a3266bc3d7fe} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 434176 - 19d7a19f964aeeb2435bce3b215ff61b
O31 - 未知 - SEApproved: {CC6EEFFB-43F6-46c5-9619-51D571967F7D} - C:\WINDOWS\system32\netplwiz.dll - Microsoft Corporation - Map Network Drives/Network Places Wizard - 5.1.2600.2180 - 847360 - f151ef66cb5fc26a647f7422ca93c092
O31 - 未知 - SEApproved: {add36aa8-751a-4579-a266-d66f5202ccbb} - C:\WINDOWS\system32\netplwiz.dll - Microsoft Corporation - Map Network Drives/Network Places Wizard - 5.1.2600.2180 - 847360 - f151ef66cb5fc26a647f7422ca93c092
O31 - 未知 - SEApproved: {6b33163c-76a5-4b6c-bf21-45de9cd503a1} - C:\WINDOWS\system32\netplwiz.dll - Microsoft Corporation - Map Network Drives/Network Places Wizard - 5.1.2600.2180 - 847360 - f151ef66cb5fc26a647f7422ca93c092
O31 - 未知 - SEApproved: {58f1f272-9240-4f51-b6d4-fd63d1618591} - C:\WINDOWS\system32\netplwiz.dll - Microsoft Corporation - Map Network Drives/Network Places Wizard - 5.1.2600.2180 - 847360 - f151ef66cb5fc26a647f7422ca93c092
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：压缩(zipped)文件夹 -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {BD472F60-27FA-11cf-B8B4-444553540000} - C:\WINDOWS\system32\zipfldr.dll - Microsoft Corporation - Compressed (zipped) Folders - 6.0.2900.2180 - 328192 - 58f917041fe41eece83f1c80d47a5b5c
O31 - 未知 - SEApproved: {888DCA60-FC0A-11CF-8F0F-00C04FD7D062} - C:\WINDOWS\system32\zipfldr.dll - Microsoft Corporation - Compressed (zipped) Folders - 6.0.2900.2180 - 328192 - 58f917041fe41eece83f1c80d47a5b5c
O31 - 未知 - SEApproved: {f39a0dc0-9cc8-11d0-a599-00c04fd64433} - C:\WINDOWS\system32\cdfview.dll - Microsoft Corporation - Channel Definition File Viewer - 6.0.2900.3354 - 150016 - 3f394520a122cf2f7f21b67325b4512d
O31 - 未知 - SEApproved: {f3aa0dc0-9cc8-11d0-a599-00c04fd64434} - C:\WINDOWS\system32\cdfview.dll - Microsoft Corporation - Channel Definition File Viewer - 6.0.2900.3354 - 150016 - 3f394520a122cf2f7f21b67325b4512d
O31 - 未知 - SEApproved: {f3ba0dc0-9cc8-11d0-a599-00c04fd64435} - C:\WINDOWS\system32\cdfview.dll - Microsoft Corporation - Channel Definition File Viewer - 6.0.2900.3354 - 150016 - 3f394520a122cf2f7f21b67325b4512d
O31 - 未知 - SEApproved: {f3da0dc0-9cc8-11d0-a599-00c04fd64437} - C:\WINDOWS\system32\cdfview.dll - Microsoft Corporation - Channel Definition File Viewer - 6.0.2900.3354 - 150016 - 3f394520a122cf2f7f21b67325b4512d
O31 - 未知 - SEApproved: {f3ea0dc0-9cc8-11d0-a599-00c04fd64438} - C:\WINDOWS\system32\cdfview.dll - Microsoft Corporation - Channel Definition File Viewer - 6.0.2900.3354 - 150016 - 3f394520a122cf2f7f21b67325b4512d
O31 - 未知 - SEApproved: {692F0339-CBAA-47e6-B5B5-3B84DB604E87} - C:\WINDOWS\system32\extmgr.dll - Microsoft Corporation - Extensions Manager - 6.0.2900.3354 - 55808 - c2d620487bcfed740c5285ae0fda3740
O31 - 未知 - SEApproved: {63da6ec0-2e98-11cf-8d82-444553540000} - C:\WINDOWS\system32\msieftp.dll - Microsoft Corporation - Microsoft Internet Explorer FTP Folder Shell Extension - 6.0.2900.2180 - 240128 - 2cd04182aa74b07c64ed1b04d63a9fbb
O31 - 未知 - SEApproved: {883373C3-BF89-11D1-BE35-080036B11A03} - C:\WINDOWS\system32\docprop2.dll - Microsoft Corporation - Microsoft DocProp Shell Ext - 5.1.2600.2180 - 47104 - 68a4e26765ef4a8b7595c90cea2a75ee
O31 - 未知 - SEApproved: {A9CF0EAE-901A-4739-A481-E35B73E47F6D} - C:\WINDOWS\system32\docprop2.dll - Microsoft Corporation - Microsoft DocProp Shell Ext - 5.1.2600.2180 - 47104 - 68a4e26765ef4a8b7595c90cea2a75ee
O31 - 未知 - SEApproved: {8EE97210-FD1F-4B19-91DA-67914005F020} - C:\WINDOWS\system32\docprop2.dll - Microsoft Corporation - Microsoft DocProp Shell Ext - 5.1.2600.2180 - 47104 - 68a4e26765ef4a8b7595c90cea2a75ee
O31 - 未知 - SEApproved: {0EEA25CC-4362-4A12-850B-86EE61B0D3EB} - C:\WINDOWS\system32\docprop2.dll - Microsoft Corporation - Microsoft DocProp Shell Ext - 5.1.2600.2180 - 47104 - 68a4e26765ef4a8b7595c90cea2a75ee
O31 - 未知 - SEApproved: {6A205B57-2567-4A2C-B881-F787FAB579A3} - C:\WINDOWS\system32\docprop2.dll - Microsoft Corporation - Microsoft DocProp Shell Ext - 5.1.2600.2180 - 47104 - 68a4e26765ef4a8b7595c90cea2a75ee
O31 - 未知 - SEApproved: {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33} - C:\WINDOWS\system32\docprop2.dll - Microsoft Corporation - Microsoft DocProp Shell Ext - 5.1.2600.2180 - 47104 - 68a4e26765ef4a8b7595c90cea2a75ee
O31 - 未知 - SEApproved: {8A23E65E-31C2-11d0-891C-00A024AB2DBB} - C:\WINDOWS\system32\dsquery.dll - Microsoft Corporation - Directory Service Find - 5.1.2600.2180 - 235520 - 239ce69cdc3bd018ddc240c2ff65ef68
O31 - 未知 - SEApproved: {9E51E0D0-6E0F-11d2-9601-00C04FA31A86} - C:\WINDOWS\system32\dsquery.dll - Microsoft Corporation - Directory Service Find - 5.1.2600.2180 - 235520 - 239ce69cdc3bd018ddc240c2ff65ef68
O31 - 未知 - SEApproved: {163FDC20-2ABC-11d0-88F0-00A024AB2DBB} - C:\WINDOWS\system32\dsquery.dll - Microsoft Corporation - Directory Service Find - 5.1.2600.2180 - 235520 - 239ce69cdc3bd018ddc240c2ff65ef68
O31 - 未知 - SEApproved: {F020E586-5264-11d1-A532-0000F8757D7E} - C:\WINDOWS\system32\dsquery.dll - Microsoft Corporation - Directory Service Find - 5.1.2600.2180 - 235520 - 239ce69cdc3bd018ddc240c2ff65ef68
O31 - 未知 - SEApproved: {0D45D530-764B-11d0-A1CA-00AA00C16E65} - C:\WINDOWS\system32\dsuiext.dll - Microsoft Corporation - Directory Service Common UI - 5.1.2600.2180 - 112128 - 3e6e0e8484d81a4fb2985b7473230dc6
O31 - 未知 - SEApproved: {62AE1F9A-126A-11D0-A14B-0800361B1103} - C:\WINDOWS\system32\dsuiext.dll - Microsoft Corporation - Directory Service Common UI - 5.1.2600.2180 - 112128 - 3e6e0e8484d81a4fb2985b7473230dc6
O31 - 未知 - SEApproved: {ECF03A33-103D-11d2-854D-006008059367} - C:\WINDOWS\system32\mydocs.dll - Microsoft Corporation - My Documents Folder UI - 6.0.2900.2180 - 88576 - c4037e9c0d602e2568c85e9fb7fde1a0
O31 - 未知 - SEApproved: {ECF03A32-103D-11d2-854D-006008059367} - C:\WINDOWS\system32\mydocs.dll - Microsoft Corporation - My Documents Folder UI - 6.0.2900.2180 - 88576 - c4037e9c0d602e2568c85e9fb7fde1a0
O31 - 未知 - SEApproved: {4a7ded0a-ad25-11d0-98a8-0800361b1103} - C:\WINDOWS\system32\mydocs.dll - Microsoft Corporation - My Documents Folder UI - 6.0.2900.2180 - 88576 - c4037e9c0d602e2568c85e9fb7fde1a0
O31 - 未知 - SEApproved: {750fdf0e-2a26-11d1-a3ea-080036587f03} - C:\WINDOWS\System32\cscui.dll - Microsoft Corporation - Client Side Caching UI - 5.1.2600.2180 - 304128 - 1dc96b546d46b30a0e5289bab85d7252
O31 - 未知 - SEApproved: {10CFC467-4392-11d2-8DB4-00C04FA31A66} - C:\WINDOWS\System32\cscui.dll - Microsoft Corporation - Client Side Caching UI - 5.1.2600.2180 - 304128 - 1dc96b546d46b30a0e5289bab85d7252
O31 - 未知 - SEApproved: {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E} - C:\WINDOWS\System32\cscui.dll - Microsoft Corporation - Client Side Caching UI - 5.1.2600.2180 - 304128 - 1dc96b546d46b30a0e5289bab85d7252

O31 - 未知 - SEApproved: {143A62C8-C33B-11D1-84FE-00C04FA34A14} - C:\WINDOWS\msagent\agentpsh.dll - Microsoft Corporation - Microsoft Agent Property Sheet Handler - 2.0.0.3422 - 24064 - fb5109cba3aed5a3d2c776bad4505374
O31 - 未知 - SEApproved: {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6} - C:\WINDOWS\system32\dfsshlex.dll - Microsoft Corporation - Distributed File System shell extension - 5.1.2600.2180 - 28672 - df583d3594c1259d2456d4167fa67cfc
O31 - 未知 - SEApproved: {60fd46de-f830-4894-a628-6fa81bc0190d} - C:\WINDOWS\system32\photowiz.dll - Microsoft Corporation - Photo Printing Wizard - 5.1.2600.2180 - 167424 - 3823949d3c1e17389c2273b6fb5b4f97
O31 - 未知 - SEApproved: {7A80E4A8-8005-11D2-BCF8-00C04F72C717} - C:\WINDOWS\System32\mmcshext.dll - Microsoft Corporation - MMC Shell Extension DLL - 5.1.2600.2180 - 50688 - 5d1e8bd91c7c27bdcc70e02737c0e9e8
O31 - 未知 - SEApproved: {0CD7A5C0-9F37-11CE-AE65-08002B2E1262} - C:\WINDOWS\system32\cabview.dll - Microsoft Corporation - Cabinet File Viewer Shell Extension - 6.0.2900.2180 - 83456 - b66c66b4dab07d5362fe86882d4c52c8
O31 - 未知 - SEApproved: {32714800-2E5F-11d0-8B85-00AA0044F941} - C:\Program Files\Outlook Express\wabfind.dll - Microsoft Corporation - Find People - 6.0.2900.2180 - 32768 - 1be5d8d105cabc4f1f6668d3ad725299
O31 - 未知 - SEApproved: {8DD448E6-C188-4aed-AF92-44956194EB1F} - C:\WINDOWS\system32\wmpshell.dll - Microsoft Corporation - Windows Media Player Launcher - 11.0.5358.4827 - 97792 - 72538b5c87e7d61ac3f16b77cc6763c0
O31 - 未知 - SEApproved: {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C} - C:\WINDOWS\system32\wmpshell.dll - Microsoft Corporation - Windows Media Player Launcher - 11.0.5358.4827 - 97792 - 72538b5c87e7d61ac3f16b77cc6763c0
O31 - 未知 - SEApproved: {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD} - C:\WINDOWS\system32\wmpshell.dll - Microsoft Corporation - Windows Media Player Launcher - 11.0.5358.4827 - 97792 - 72538b5c87e7d61ac3f16b77cc6763c0
O31 - 未知 - SEApproved: {21569614-B795-46b1-85F4-E737A8DC09AD} - C:\WINDOWS\system32\browseui.dll - Microsoft Corporation - Shell Browser UI Library - 6.0.2900.3354 - 1022976 - 5af0b037fd0fcc07cfcf9d5994a68b59
O31 - 未知 - SEApproved: {640167b4-59b0-47a6-b335-a6b3c0695aea} - C:\WINDOWS\system32\Audiodev.dll - Microsoft Corporation - Portable Media Devices Shell Extension - 5.2.5358.4827 - 267776 - 8144dedfe7b8d6ed73e1f14dfc31019d
O31 - 未知 - SEApproved: {35786D3C-B075-49b9-88DD-029876E11C01} - C:\WINDOWS\system32\wpdshext.dll - Microsoft Corporation - Portable Devices Shell Extension - 5.2.5358.4827 - 3745280 -
O31 - 未知 - SEApproved: {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} - C:\WINDOWS\system32\wpdshext.dll - Microsoft Corporation - Portable Devices Shell Extension - 5.2.5358.4827 - 3745280 -
O31 - 未知 - SEApproved: {e82a2d71-5b2f-43a0-97b8-81be15854de8} - C:\WINDOWS\system32\dfshim.dll - Microsoft Corporation - Application Deployment Support Library - 2.0.50727.42 - 83456 - b3511383c8be3a8c5b88a78971fc1141
O31 - 未知 - SEApproved: {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} - C:\WINDOWS\system32\dfshim.dll - Microsoft Corporation - Application Deployment Support Library - 2.0.50727.42 - 83456 - b3511383c8be3a8c5b88a78971fc1141
O31 - 未知 - SEApproved: {5E2121EE-0300-11D4-8D3B-444553540000} - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll -  - ACE Context Menu - 2.0.0.0 - 688128 - 5400c67973dd0c2488a06ac93cfb0699
O31 - 未知 - SEApproved: {97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2} - C:\Program Files\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll - Nero AG - Cover Designer - 3.1.1.0 - 2106664 -
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 128000 - 13c487903d7b714dd9e0cdc2edab4cea
O31 - 未知 - SEApproved: {42042206-2D85-11D3-8CFF-005004838597} - E:\office2003\OFFICE11\msohev.dll - Microsoft Corporation - Microsoft Office 2003 component - 11.0.5510.0 - 67128 - 165ae7a443f2139dd2c078ad87699f91
O31 - 未知 - SEApproved: {BDEADF00-C265-11D0-BCED-00A0C90AB50F} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL - Microsoft Corporation - Microsoft Web Folders - 11.0.5510.0 - 1292872 - bdbf48d13c5343cced93e675effdb72c
O31 - 未知 - SEApproved: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\RavExt.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 20.0.0.17 - 113264 - 9c833eca70163c9a5753c3b25a12695c
O31 - 未知 - SEApproved: {24BA04A9-97F7-4744-ABE9-8DF91792B9B5} - G:\mmsk_2008\FTCCommenu.dll - Fygsoft and Microsoft - Com组件菜单 - 3.0.0.71 - 193536 - ccdf1edbe51cd961bc31ae7894d73de0
O31 - 未知 - Directory Menu: {A470F8CF-A1E8-4f65-8335-227475AA5C46} - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation - Windows Shell Common Dll - 6.0.2900.3241 - 8312320 -
O31 - 未知 - Directory Menu: {24BA04A9-97F7-4744-ABE9-8DF91792B9B5} - G:\mmsk_2008\FTCCommenu.dll - Fygsoft and Microsoft - Com组件菜单 - 3.0.0.71 - 193536 - ccdf1edbe51cd961bc31ae7894d73de0
O31 - 未知 - Directory Menu: {750fdf0e-2a26-11d1-a3ea-080036587f03} - C:\WINDOWS\System32\cscui.dll - Microsoft Corporation - Client Side Caching UI - 5.1.2600.2180 - 304128 - 1dc96b546d46b30a0e5289bab85d7252
O31 - 未知 - Directory Menu: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\RavExt.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 20.0.0.17 - 113264 - 9c833eca70163c9a5753c3b25a12695c
O31 - 未知 - Directory Menu: {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} - C:\WINDOWS\system32\ntshrui.dll - Microsoft Corporation - Shell extensions for sharing - 5.1.2600.2180 - 137216 - 6fd08f1ef02456a30f14b8b37e78cd05
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 128000 - 13c487903d7b714dd9e0cdc2edab4cea
O31 - 未知 - BootExecute:  bsmain -  -  -  - 0 -
O31 - 未知 - LSA: Authentication Packages - C:\WINDOWS\system32\msv1_0.dll - Microsoft Corporation - Microsoft Authentication Package v1.0 - 5.1.2600.2180 - 129536 - d31b15aa03db1f3b91ee322d4df944d0
O31 - 未知 - LSA: Notification Packages - C:\WINDOWS\system32\scecli.dll - Microsoft Corporation - Windows Security Configuration Editor Client Engine - 5.1.2600.2180 - 171008 - de51b90c8c78cabf53757a9becf002da
O31 - 未知 - LSA: Security Packages - C:\WINDOWS\system32\kerberos.dll - Microsoft Corporation - Kerberos Security Package - 5.1.2600.2698 - 295936 - e5f30164055d6441a4def03a97158f49
O31 - 未知 - LSA: Security Packages - sv1_0.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - C:\WINDOWS\system32\digest.dll - Microsoft Corporation - Digest SSPI Authentication Package - 6.0.2900.2180 - 68096 - f223ec0ba1e53eced14aaca1a9568f6c

=======================================

O40 - winlogon.exe - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.dll - ATI External Event Utility DLL Module - 98d1420df23a0adbde3aa52683876d31
O40 - winlogon.exe - Microsoft Corporation - C:\WINDOWS\system32\MPRUI.dll - Multiple Provider - 8d8d64b547abe30149113e1f2f0f071b
O40 - winlogon.exe - Microsoft Corporation - C:\WINDOWS\system32\NETUI2.dll - NT LM UI Common Code - GUI Classes - 3722695cfd021f1054223f900734b7b5
O40 - winlogon.exe - Microsoft Corporation - C:\WINDOWS\system32\netmsg.dll - Net Messages DLL - ff6726a57d76010c9a963d896bf1fbd4
O40 - svchost.exe - Microsoft Corporation - c:\windows\system32\wiaservc.dll - Still Image Devices Service - dc750a7adc5ecb85a12729285fb72653
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\system32\wiavusd.dll - WIA Video Stream device USD - 41f1dcaecadd934366600f0e6750fb20
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\system32\sti.dll - Still Image Devices client DLL  - edc348d313e6d467e9e94ae919d64619
O40 - Explorer.EXE - 360.CN - G:\360safe\safemon\safemon.dll - 360安全卫士实时保护模块 - 3043892c09a110e882756ab1b5989bd0
O40 - Explorer.EXE -  - C:\WINDOWS\msnsn1e.dll -  - 76adea23efdcef748ec2c4574ac8bebb
O40 - Explorer.EXE -  - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll - ACE Context Menu - 5400c67973dd0c2488a06ac93cfb0699
O40 - Explorer.EXE - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiamCHS.dll - AMD Desktop Control Panel - 3b1c7da0c9e9886d7b02005e68de8f6c
O40 - Explorer.EXE - Thunder Networking Technologies,LTD - C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll - 迅雷浏览器高级特性支持模块 - a4800a943cf9664b8650ab295aea83c7
O40 - Explorer.EXE - Thunder Networking Technologies,LTD - C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll - XunLeiBHO - 0ce577e907c45ec8337be8e2a02c69aa
O40 - Explorer.EXE - Thunder Networking Technologies,LTD - C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll - DsBho - 16267b400973b5dfb04a932d09ec2e91
O40 - Explorer.EXE - Thunder Networking Technologies,LTD - C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll - DataProcessor - 0ce1656978df5d43d88a932df0dd820f
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\sti.dll - Still Image Devices client DLL  - edc348d313e6d467e9e94ae919d64619
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\RSCOMMON.DLL - Rising Common Function Dynamic Link Library - 8abcf154f52429e36baf686881ab7337
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\Faultrep.dll - Windows Error Reporting - 7288ced019e498eaccc8fd044f80297d
O40 - Explorer.EXE - Nero AG - C:\Program Files\Common Files\Nero\Shared\NL3\AdvrCntr3.dll - AdvrCntr Module -
O40 - Explorer.EXE - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBShell.dll - Nero BackItUp - fe64c4a6f965b07dac81b163b3665e35
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL - MFCDLL Shared Library - Retail Version - ccc2e312486ae6b80970211da472268b
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll - Microsoft? C Runtime Library - e4fece18310e23b1d8fee993e35e7a6f
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll - Microsoft? C++ Runtime Library - 4c8a880eabc0b4d462cc4b2472116ea1
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL - MFC Language Specific Resources - afa7e91c8c9566e03fb1620f95230b93
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\RavExt.dll - Rising Shell Ext Module - 9c833eca70163c9a5753c3b25a12695c
O40 - Explorer.EXE - Fygsoft and Microsoft - G:\mmsk_2008\FTCCommenu.dll - Com组件菜单 - ccdf1edbe51cd961bc31ae7894d73de0
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\mshtml.dll - Microsoft (R) HTML Viewer -
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\msls31.dll - Microsoft Line Services library file - df922a00320a7614f1d859f9e4e8635b
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\msimtf.dll - Active IMM Server DLL - 87648ec86d3178ca518b1811115d6dba
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\wmp.dll - Windows Media Player -
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MSVFW32.dll - Microsoft Video for Windows DLL - 01f8a84d78c86fe7e59c7901f75f7153
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\wmploc.dll - Windows Media Player Resources -
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\RavScrCh.dll - RavScrCh Module - 3886a3b6eea9d7a0767d2a844db20e4c
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\vbscript.dll - Microsoft (r) VBScript - 7ba8da21e6c66396fce25124ee71d7da
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MFC42.DLL - MFCDLL Shared Library - Retail Version - 61e6d0307797c07cbc04cab21cdbe30f
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\mshtmled.dll - Microsoft (R) HTML Editing Component - 19cb2458c32822d8b4065795819f8c35
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\dxtrans.dll - DirectX Media -- DirectX Transform Core - 90f7dca1aba3856138c537f48e503947
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\ddrawex.dll - Direct Draw Ex - 01658f9bd0decbe4546042768108bcc5
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\DDRAW.dll - Microsoft DirectDraw - c7f4081af94ade0069033c1ba1d01dbd
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\dxtmsft.dll - DirectX Media -- Image DirectX Transforms - fc513608ba26205d444668990faeb8ca
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\IMGUTIL.DLL - IE plugin image decoder support DLL - 2137e46d317b9144477d6cff155ddf3c
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\pngfilt.dll - IE PNG plugin image decoder - 00e9c11dc2ba4b6928e3a80acec041ff
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\wiashext.dll - Imaging Devices Shell Folder UI - 4b99b972764984c995b912c174a4e9db
O40 - Explorer.EXE - Microsoft Corporation - E:\office2003\OFFICE11\msohev.dll - Microsoft Office 2003 component - 165ae7a443f2139dd2c078ad87699f91

=======================================

O41 - Envy24HFS - Envy24 Family Audio Controller WDM - C:\WINDOWS\system32\drivers\Envy24HF.sys - (running) - Envy24 Family Audio Controller WDM - VIA - IC Ensemble, Inc. - 33279ffa69c1b6ef784c6186e42a748b
O41 - fanti - NT file system - C:\WINDOWS\system32\drivers\fanti.sys - (running) - NT file system - Microsoft Corporation - 43f9ae3084d3b87e55a85a37c168b8b9
O41 - HookCont - HookCont - C:\WINDOWS\system32\drivers\HookCont.sys - (running) - HookCont - Beijing Rising Technology Co., Ltd - 37b8670e20a6eb40ce7d23f595eb3830
O41 - HookNtos - HookNtos - C:\WINDOWS\system32\drivers\HookNtos.sys - (running) - HookNtos - Beijing Rising Technology Co., Ltd - 6559385b16ae8b1fe5408f701bd78276
O41 - HookReg - HookReg - C:\WINDOWS\system32\drivers\HOOKREG.sys - (running) - HookReg - Beijing Rising Technology Co., Ltd - 3d5817f09173489fd5aeaa0f610606cd
O41 - HookSys - Hooksys - C:\WINDOWS\system32\drivers\HookSys.sys - (running) - Hooksys - Beijing Rising Technology Co., Ltd - 3ff6f2c8081f6b37a2032ef68170a9a9
O41 - regti - Windows NT Registry Driver - C:\WINDOWS\system32\drivers\regti.sys - (running) - Windows NT Registry Driver - Windows System Internal - 94fa6462df4408f92dacff44f0396444
O41 - rhqfkf - sys 应用程序 - C:\WINDOWS\system32\drivers\rhqfkf.sys - (running) - sys 应用程序 - 北京三七二一科技有限公司 - a66b29a11d2ff06988b4da271a204cc1
O41 - RsNTGDI - RsNTGDI - C:\WINDOWS\system32\drivers\RsNTGdi.sys - (running) - RsNTGDI - Beijing Rising Technology Co., Ltd. - 8345686a5a9287e96050b86dac988c67
O41 - RTLE8023xp - Realtek 10/100/1000 NDIS 5.1 Driver                          - C:\WINDOWS\system32\drivers\Rtenicxp.sys - (running) - Realtek 10/100/1000 NDIS 5.1 Driver                          - Realtek Semiconductor Corporation                            - 3400495f5b219d5153c770a95499579c
O41 - SafeBoxKrnl - 360安全卫士 - 保险箱 - C:\Program Files\360Safebox\SafeBoxKrnl.sys - (running) - 360安全卫士 - 保险箱 - 360安全中心 - 02bef10d709d4bf80d65a473578b5d5e
O41 - usbvideo - USB Video Class Driver - C:\WINDOWS\system32\drivers\usbvideo.sys - (running) - USB Video Class Driver - Microsoft Corporation - 8968ff3973a883c49e8b564200f565b9
O41 - CCDECODE - WDM Closed Caption VBI Codec - C:\WINDOWS\system32\drivers\CCDECODE.sys - (not running) - WDM Closed Caption VBI Codec - Microsoft Corporation - 6163ed60b684bab19d3352ab22fc48b2
O41 - FTCkillfile - FTCkillfile - C:\WINDOWS\system32\drivers\FTCkillfile.sys - (not running) -  -  - 8695a5f556c01979a3bd39716a694e1a
O41 - FTCProtect - FTCProtect - C:\WINDOWS\system32\drivers\FTCProtect.sys - (not running) -  -  - 1525c22044764cb543e5a9b506ab0fe1
O41 - FTCProTime - FTCProTime - C:\WINDOWS\system32\drivers\FTCProTime.sys - (not running) -  -  - 8b5d9be95c9bff4add95ad6d65c94bc0
O41 - gdrv - GIGABYTE Tools - C:\WINDOWS\gdrv.sys - (not running) - GIGABYTE Tools - Windows (R) 2000 DDK provider - 47a244f0dcff72a7ec6dcec111438d28
O41 - HdAudAddService - Ati High Definition Audio Function Driver - C:\WINDOWS\system32\drivers\AtiHdAud.sys - (not running) - Ati High Definition Audio Function Driver - ATI Research Inc. - 56bf27d7a539f9e6bbc1de201aba0edf
O41 - IntcAzAudAddService - Realtek(r) High Definition Audio Function Driver - C:\WINDOWS\system32\drivers\RtkHDAud.sys - (not running) - Realtek(r) High Definition Audio Function Driver - Realtek Semiconductor Corp. -
O41 - MSTEE - WDM Tee/Communication Transform Filter  - C:\WINDOWS\system32\drivers\MSTEE.sys - (not running) - WDM Tee/Communication Transform Filter  - Microsoft Corporation - bf13612142995096ab084f2db7f40f77
O41 - NABTSFEC - WDM NABTS/FEC VBI Codec - C:\WINDOWS\system32\drivers\NABTSFEC.sys - (not running) - WDM NABTS/FEC VBI Codec - Microsoft Corporation - 5c8dc6429c43dc6177c1fa5b76290d1a
O41 - NdisIP - Microsoft IP Driver - C:\WINDOWS\system32\drivers\NdisIP.sys - (not running) - Microsoft IP Driver - Microsoft Corporation - 520ce427a8b298f54112857bcf6bde15
O41 - NPF - NPF Driver - TME extensions - C:\WINDOWS\system32\drivers\npf.sys - (not running) - NPF Driver - TME extensions - Politecnico di Torino - f498c5c3399a60933196fc215ef074f9
O41 - SLIP - Microsoft Slip Deframing Filter Minidriver - C:\WINDOWS\system32\drivers\SLIP.sys - (not running) - Microsoft Slip Deframing Filter Minidriver - Microsoft Corporation - 5caeed86821fa2c6139e32e9e05ccdc9
O41 - streamip - Microsoft IP Test Driver - C:\WINDOWS\system32\drivers\StreamIP.sys - (not running) - Microsoft IP Test Driver - Microsoft Corporation - 284c57df5dc7abca656bc2b96a667afb
O41 - SVKP - SVKP - C:\WINDOWS\system32\SVKP.sys - (not running) -  -  -
O41 - TesSafe - TesSafe NT Driver - C:\WINDOWS\system32\TesSafe.sys - (not running) - TesSafe NT Driver - TENCENT - 75133595d40127810fae7b089969283b
O41 - WSTCODEC - WDM WST Codec Driver - C:\WINDOWS\system32\drivers\WSTCODEC.SYS - (not running) - WDM WST Codec Driver - Microsoft Corporation - d5842484f05e12121c511aa93f6439ec

=======================================
[userinit.exe情况]
MD5: 7bd70ec53cb7398246c84d25bff33aa8
文件大小: 23552
版本信息: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
是否签名: 是
未被感染

=======================================
http://updatem.360safe.com/safe/safeupm.cab?type=tray&m=208b765b7335b788df851cebc9f2ecd3&t=2888171&ver=4.1.8.1006

瑞星系统加固发现程序注册表访问违规

应用程序信息
文件名：C:\WINDOWS\EXPLORER.EXE
版本：6.00.2900.2180
厂商：Microsoft Corporation
PID: 1776      TID: 2588

动作目标：HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SAFEBOXTRAY.EXE\
动作：注册表项：HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SAFEBOXTRAY.EXE\
创建键:

规则信息
名称：应用程序劫持项（IFEO）
描述：
      应用程序劫持项。当该键下某子键名的进程试图加载时，系统会自动创建该子键下 Debugger 键值所指定的进程，并将加载的文件名作为参数传递给 Debugger 键值指定的进程。恶意程序可以利用该键值实现自动运行，或阻止一些正常软件运行。

对应注册表项：
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\


2008-7-10 15:30:00