[PID: 628 / Administrator][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\WINDOWS\system32\VM31bPrp.Ax] [VM, 4.2.711.31]
[PID: 1420 / Administrator][C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe] [ACD Systems, Ltd., 3,1,31,0]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1876 / Administrator][d:\StormII\stMgr.exe] [北京暴风网际科技有限公司, 3, 9, 1, 15]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[d:\StormII\bfoptdll.dll] [北京暴风网际科技有限公司, 3, 8, 7, 16]
[d:\StormII\corelog.dll] [北京暴风网际科技有限公司, 3, 8, 9, 27]
[PID: 2172 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[PID: 2220 / Administrator][D:\Tudou\飞速Tudou\TudouVa.exe] [土豆网, 1.11]
[D:\Tudou\飞速Tudou\upnpdll.dll] [N/A, ]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\msls31.dll] [Microsoft Corporation, 3.10.349.0]
[C:\WINDOWS\system32\jscript.dll] [Microsoft Corporation, 5.7.0.5730]
[C:\WINDOWS\system32\ImgUtil.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\WINDOWS\system32\pngfilt.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[PID: 2400 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\System32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[PID: 4040 / Administrator][D:\Tencent\QQ2009\Bin\QQ.exe] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\Common.dll] [Tencent, 1, 23, 375, 0]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[D:\Tencent\QQ2009\Bin\KernelUtil.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\GF.dll] [Tencent, 1, 23, 375, 0]
[C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll] [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Tencent\QQ2009\Bin\AppUtil.dll] [Tencent, 1, 23, 375, 0]
[C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[D:\Tencent\QQ2009\Bin\MainFrame.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\TaskTray.dll] [Tencent, 1, 23, 375, 0]
[d:\Tencent\QQ2009\Bin\TXPFProxy.dll] [N/A, ]
[D:\Tencent\QQ2009\Bin\AppMisc.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\ChatFrame.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\ConfigCenter.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\CustomFace.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\IM.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\KernelMisc.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\LongCnn.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\ContactInfoFrame.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\MsgMgr.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\SkinMgr.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\QInterLive.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\AppCtrl.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Bin\SystemMsg.dll] [Tencent, 1, 23, 375, 0]
[C:\Program Files\Common Files\Tencent\TXSSO\Bin\SSOPlatform.dll] [Tencent, 1.0.1.19]
[D:\Tencent\QQ2009\Bin\BasicCtrlDll.dll] [TENCENT, 8,0,773,1801]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.PaiPai\Bin\PaiPai.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.AudioVideo\Bin\AudioVideo.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.MMOG\Bin\MMOG.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.Soso\Bin\Soso.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.Qzone\Bin\Qzone.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.Weather\Bin\Weather.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.SoBar\Bin\SoBar.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.PaiPaiGift\Bin\PaiPaiGift.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.QQLive\Bin\QQLive.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.QQMusic\Bin\QQMusic.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.taotao\Bin\Taotao.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\Com.Tencent.QQShow\Bin\FlashAvatarDll.dll] [Tencent, 1.0.0.1]
[C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0]
[C:\WINDOWS\system32\msls31.dll] [Microsoft Corporation, 3.10.349.0]
[C:\WINDOWS\system32\jscript.dll] [Microsoft Corporation, 5.7.0.5730]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[D:\Tencent\QQ2009\Plugin\com.tencent.NetBar\Bin\NetBar.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.qqchat\Bin\QQChat.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.qqgame\Bin\QQGame.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.qqshow\Bin\QQShow.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.snsapp\Bin\SNSApp.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.wenwen\Bin\WenWen.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.wireless\Bin\Wireless.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.mail\Bin\Mail.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.paycenter\Bin\PayCenter.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.filetransfer\Bin\FileTransfer.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.gamelife\Bin\GameLife.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.qqpet\Bin\QQPet.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.qbar\Bin\QBar.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.advertisement\Bin\Advertisement.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.today\Bin\Today.dll] [Tencent, 1, 23, 375, 0]
[D:\Tencent\QQ2009\Plugin\com.tencent.qqring\Bin\QQRing.dll] [Tencent, 1, 23, 375, 0]
[C:\WINDOWS\system32\ImgUtil.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\WINDOWS\system32\QQPINYIN.IME] [Tencent, 1.6.357.201]
[PID: 168 / Administrator][d:\Tencent\QQ2009\Bin\TXPlatform.exe] [Tencent, 1, 23, 375, 0]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[d:\Tencent\QQ2009\Bin\TXPFProxy.dll] [N/A, ]
[PID: 2624 / Administrator][D:\TTPlayer\TTPlayer.exe] [Alen Soft, 5, 3, 1, 0]
[D:\TTPlayer\ttpcomm.dll] [N/A, ]
[C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\TTPlayer\ttpres.dll] [Alen Soft, 5, 3, 1, 0]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[D:\TTPlayer\browser.dll] [N/A, ]
[C:\WINDOWS\system32\jscript.dll] [Microsoft Corporation, 5.7.0.5730]
[D:\TTPlayer\AddIn\ttp_lrcsh.dll] [N/A, ]
[C:\WINDOWS\system32\msls31.dll] [Microsoft Corporation, 3.10.349.0]
[c:\program files\hottools\iebho.dll] [, 3.21.2008.0625]
[C:\WINDOWS\system32\vbscript.dll] [Microsoft Corporation, 5.7.0.5730]
[C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0]
[PID: 1040 / Administrator][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\IEUI.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll] [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
[C:\Program Files\Internet Explorer\ieproxy.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll] [腾讯公司, 1, 9, 252, 252]
[d:\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.34]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[d:\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 120]
[d:\Thunder\Components\ResWorker\DsBho_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 20]
[d:\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
[c:\program files\hottools\iebho.dll] [, 3.21.2008.0625]
[C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\jscript.dll] [Microsoft Corporation, 5.7.0.5730]
[C:\WINDOWS\system32\msls31.dll] [Microsoft Corporation, 3.10.349.0]
[C:\WINDOWS\system32\ImgUtil.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\WINDOWS\system32\pngfilt.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\WINDOWS\system32\QQPINYIN.IME] [Tencent, 1.6.357.201]
[C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx] [Adobe Systems, Inc., 9,0,47,0]
[C:\WINDOWS\system32\Dxtmsft.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[C:\WINDOWS\system32\iepeers.dll] [Microsoft Corporation, 7.00.5730.11 (winmain(wmbla).061017-1135)]
[PID: 1664 / Administrator][G:\瑞星杀毒\专杀工具\杀毒辅助\sreng\SREngLdr.EXE] [Smallfrogs Studio, 2.7.0.1210]
[PID: 3716 / Administrator][G:\瑞星杀毒\专杀工具\杀毒辅助\sreng\SREf416f7d8.EXE] [Smallfrogs Studio, 2.7.0.1210]
[C:\WINDOWS\system32\SYNCOR11.DLL] [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[G:\瑞星杀毒\专杀工具\杀毒辅助\sreng\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
==================================
文件关联
.TXT Error. [C:\WINDOWS\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. ["hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
进程特权扫描
特殊特权被允许: SeLoadDriverPrivilege [PID = 876, C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMTRAY.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 1048, C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 628, C:\WINDOWS\VM_STI.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 1420, C:\PROGRAM FILES\COMMON FILES\ACD SYSTEMS\EN\DEVDETECT.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2220, D:\TUDOU\飞速TUDOU\TUDOUVA.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 2624, D:\TTPLAYER\TTPLAYER.EXE]
特殊特权被允许: SeLoadDriverPrivilege [PID = 1664, G:\瑞星杀毒\专杀工具\杀毒辅助\SRENG\SRENGLDR.EXE]
==================================
计划任务
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
[/CODE]