==================================
正在运行的进程
[PID: 328][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 508][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 532][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 576][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 588][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 740][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 804][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 868][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 944][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1072][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1204][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0]
[C:\WINDOWS\system32\igfxpph.dll] [Intel Corporation, 3,0,0,1915]
[C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3,0,0,1915]
[C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3,0,0,1915]
[C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3,0,0,1915]
[C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3,0,0,1915]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\WINDOWS\system32\igfxress.dll] [Intel Corporation, 3,0,0,1915]
[C:\Program Files\WinRAR\rarext.dll] [N/A, N/A]
[C:\Program Files\ewido anti-spyware 4.0\context.dll] [Anti-Malware Development a.s., 4, 0, 0, 172]
[PID: 1304][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1496][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1632][C:\WINDOWS\SYSTEM32\RUNDLL.EXE] [Microsoft Corporation, 5.00.2134.1]
[PID: 432][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 488][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1536][C:\Program Files\foobar2000\foobar2000.exe] [N/A, N/A]
[C:\Program Files\foobar2000\utf8api.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_ui_std.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_input_std.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_cdda.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_flac.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_ape.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_wavpack.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_speex.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_mod.dll] [N/A, N/A]
[C:\Program Files\foobar2000\BASS.dll] [Un4seen Developments, 2.0]
[C:\Program Files\foobar2000\components\foo_wma.dll] [, 1.0.9]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_output_std.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_out_dsound_ex.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_console.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_read_http.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_rgscan.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_albumlist.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_masstag.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_codepage_action.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_infobox.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_dsp_extra.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_diskwriter.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_clienc.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_vis_manager.dll] [N/A, N/A]
[C:\Program Files\foobar2000\components\foo_liveupdate.dll] [N/A, N/A]
[PID: 976][C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.3.0.220]
[C:\Program Files\Thunder Network\Thunder\Program\UpdateDownload.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 8]
[C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 71]
[C:\Program Files\Thunder Network\Thunder\Program\log4cplus.dll] [, 1, 0, 2, 1]
[C:\Program Files\Thunder Network\Thunder\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031]
[C:\Program Files\Thunder Network\Thunder\Program\asyn_dns.dll] [N/A, N/A]
[C:\Program Files\Thunder Network\Thunder\Program\msgmanage.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 15]
[C:\Program Files\Thunder Network\Thunder\Program\historyinfo_manage.dll] [Thunder Networking Technologies,LTD, 5, 2, 0, 148]
[C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 1, 0, 18]
[C:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
[C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll] [ , 1, 0, 0, 11]
[C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed04.dll] [ , 2, 3, 0, 37]
[C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 8]
[C:\WINDOWS\system32\Maxthonz.dll] [N/A, N/A]
[C:\Program Files\Thunder Network\Thunder\Program\iTargetAd.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 55]
[C:\WINDOWS\Flash.ocx] [Macromedia, Inc., 7,0,14,0]
[PID: 1120][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Maxthonz.dll] [N/A, N/A]
[PID: 2072][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Maxthonz.dll] [N/A, N/A]
[PID: 2628][D:\SREng\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
[D:\]
[autorun]
OPEN=D:\pagefile.pif
==================================
HOSTS 文件
127.0.0.1 localhost
==================================