[PID: 944][C:\Program Files\Rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1000][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[C:\WINDOWS\system32\CNMLM7K.DLL] [CANON INC., 1.90.2.90]
[C:\WINDOWS\system32\hpzsnt09.dll] [HP, 2.240.0.0]
[C:\WINDOWS\system32\WFXMNT40.DLL] [Microsoft Corporation, 7.00 (Build 019)]
[C:\WINDOWS\system32\WFXMNTHQ.DLL] [Microsoft Corporation, 7.00 (Build 019)]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD7K.DLL] [CANON INC., 1.90.2.90]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] [Windows (R) 2000 DDK provider, 5.00.2195.1620]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\wfxpnt40.dll] [N/A, N/A]
[PID: 1672][C:\WINDOWS\System32\basfipm.exe] [Broadcom Corp., 6.0.4]
[C:\WINDOWS\System32\BMAPI.DLL] [Broadcom Corporation, 6.4.9]
[PID: 1764][C:\PROGRA~1\广东省~1\FireBird\bin\fbguard.exe] [The Firebird Project, WI-V1.5.1.4481]
[C:\PROGRA~1\广东省~1\FireBird\bin\fbclient.dll] [The Firebird Project, WI-V1.5.1.4481]
[PID: 1820][C:\PROGRA~1\广东省~1\FireBird\bin\fbserver.exe] [The Firebird Project, WI-V1.5.1.4481]
[C:\WINDOWS\system32\quartz32.dll] [, 4, 0, 0, 0]
[PID: 1936][C:\WINDOWS\system32\WinMgmt.exe] [N/A, N/A]
[PID: 2036][C:\WINDOWS\system32\iexplorer.exe] [N/A, N/A]
[PID: 120][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\CNCC150.DLL] [CANON INC., 2, 0, 0, 0]
[C:\WINDOWS\system32\CNCL150.DLL] [Canon Inc., 1.00]
[PID: 452][C:\WINDOWS\system32\hkcmd.exe] [Intel Corporation, 3.0.0.4020]
[C:\WINDOWS\system32\hccutils.DLL] [Intel Corporation, 3.0.0.4020]
[C:\WINDOWS\system32\igfxdev.dll] [Intel Corporation, 3.0.0.4020]
[C:\WINDOWS\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4020]
[C:\WINDOWS\system32\igfxhk.dll] [Intel Corporation, 3.0.0.4020]
[C:\WINDOWS\system32\igfxres.dll] [Intel Corporation, 3.0.0.4020]
[PID: 572][C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe] [N/A, N/A]
[PID: 592][C:\WINDOWS\VM_STI.EXE] [VM., 4.2.610.4]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[PID: 600][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 22]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[PID: 276][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 712][C:\Program Files\Rising\Rav\Ravmon.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 1, 33]
[C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
[C:\Program Files\Rising\Rav\BWList.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
[C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\Program Files\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 1144][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\wmpdrm.dll] [Allsum Info. Tech. Ltd., 2, 0, 0, 1]
[C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll] [Microsoft Corporation, 01.02.3000.1001]
[C:\WINDOWS\SYSTEM32\WinSC32.dll] [N/A, N/A]
[C:\Progra~1\Baidu\bar\BaiDuBar.dll] [Baidu.com, Inc., 2, 0, 2, 62]
[C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\zh-tw\msntb.dll] [Microsoft Corporation, 01.02.5000.1021]
[C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\zh-tw\mtbres.dll] [Microsoft Corporation, 01.02.5000.1021]
[C:\WINDOWS\system32\quartz32.dll] [, 4, 0, 0, 0]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] [Macromedia, Inc., 8,0,22,0]
[PID: 2488][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\quartz32.dll] [, 4, 0, 0, 0]
[PID: 2180][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)]
[PID: 2900][C:\DOCUME~1\Galileo\LOCALS~1\Temp\Rar$EX00.281\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\WINDOWS\system32\quartz32.dll] [, 4, 0, 0, 0]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
MSTCPChain Provider
C:\WINDOWS\system32\quartz32.dll(, MFCDLL)
MSTCP Provider
C:\WINDOWS\system32\quartz32.dll(, MFCDLL)
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
127.0.0.1 www.powernum123.com
127.0.0.1 www.powernum123.com.cn
127.0.0.1 powernum123.com
127.0.0.1 powernum123.com.cn
127.0.0.1 www.chebl.com
127.0.0.1 www.chebl.cn
127.0.0.1 www.chebl.com.cn
127.0.0.1 chebl.com
127.0.0.1 chebl.com.cn
127.0.0.1 chebl.cn
127.0.0.1 www.chebuluo.com.cn
127.0.0.1 www.chebuluo.com
127.0.0.1 www.chebuluo.cn
127.0.0.1 chebuluo.com.cn
127.0.0.1 chebuluo.com
127.0.0.1 chebuluo.cn
127.0.0.1 www.17sp.com
127.0.0.1 www.17sp.com.cn
127.0.0.1 17sp.com
127.0.0.1 17sp.com.cn
127.0.0.1 www.feikong.com
127.0.0.1 www.feikong.com.cn
127.0.0.1 www.feikong.cn
127.0.0.1 feikong.com
127.0.0.1 feikong.com.cn
127.0.0.1 feikong.cn
127.0.0.1 www.hacong.com
127.0.0.1 hacong.com
127.0.0.1 www.xbxb*****com
127.0.0.1 www.sobt.com
127.0.0.1 www.sobt.com.cn
127.0.0.1 www.sobt.cn
127.0.0.1 www.sobt.net
127.0.0.1 sobt.com
127.0.0.1 sobt.com.cn
127.0.0.1 sobt.cn
127.0.0.1 sobt.net
127.0.0.1 www.xbxbxb*****com
127.0.0.1 xbxb*****com
127.0.0.1 xbxbxb*****com
127.0.0.1 www.nfsinfo.com
127.0.0.1 nfsinfo.com
127.0.0.1 CRMEASE.COM
127.0.0.1 HONGBANGZHU.COM
127.0.0.1 LINUX007.COM
127.0.0.1 LOSPLE.COM
127.0.0.1 LOSTEMPLE.COM
127.0.0.1 www.CRMEASE.COM
127.0.0.1 www.HONGBANGZHU.COM
127.0.0.1 www.LINUX007.COM
127.0.0.1 www.LOSPLE.COM
127.0.0.1 www.LOSTEMPLE.COM
127.0.0.1 SMARTALLYES.COM
127.0.0.1 51CPM.NET
127.0.0.1 51CPM.COM
127.0.0.1 YIQILAI.COM
127.0.0.1 update.smartallyes.com
127.0.0.1 mdmdmdmdmd.com
127.0.0.1 www.SMARTALLYES.COM
127.0.0.1 www.51CPM.NET
127.0.0.1 www.51CPM.COM
127.0.0.1 www.YIQILAI.COM
127.0.0.1 www.mdmdmdmdmd.com