[C:\KAV2006\KMailOEBand.dll] [N/A, 2006, 5, 19, 118]
[C:\KAV2006\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.4156\res_zh-CN.dll] [Google Inc., 1, 0, 720, 4156]
[C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.4156\swg.dll] [Google Inc., 1, 0, 720, 4156]
[E:\KC\DShared.dll] [Tencent, 1.5.0.0]
[PID: 2316][C:\Program Files\MSN Messenger\msnmsgr.exe] [Microsoft Corporation, 8.0.0812.00]
[C:\KAV2006\KMailOEBand.dll] [N/A, 2006, 5, 19, 118]
[C:\KAV2006\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007]
[C:\WINDOWS\system32\Macromed\Flash\Flash9a.ocx] [Adobe Systems, Inc., 9,0,0,296]
[C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1]
[C:\KAV2006\KAScript.DLL] [Kingsoft Corporation, 2006, 2, 10, 60]
[C:\KAV2006\KAEPlat.DLL] [Kingsoft Corp., 2006, 5, 30, 59]
[C:\KAV2006\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16]
[C:\KAV2006\KAEUnpack.DAT] [Kingsoft Corp., 2006, 7, 27, 59]
[C:\WINDOWS\system32\JPWB.IME] [常诚研制, 4.00.950]
[C:\PROGRA~1\Yahoo!\ASSIST~1\yclickon.dll] [YAHOO Corporation Limited, 2, 0, 0, 1001]
[E:\KC\DShared.dll] [Tencent, 1.5.0.0]
[PID: 1920][C:\Program Files\Outlook Express\msimn.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\KAV2006\KMailOEBand.dll] [N/A, 2006, 5, 19, 118]
[C:\KAV2006\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\KAV2006\KAScript.DLL] [Kingsoft Corporation, 2006, 2, 10, 60]
[C:\KAV2006\KAEPlat.DLL] [Kingsoft Corp., 2006, 5, 30, 59]
[C:\KAV2006\KAEMem.DAT] [Kingsoft, 2006, 9, 25, 16]
[C:\KAV2006\KAEUnpack.DAT] [Kingsoft Corp., 2006, 7, 27, 59]
[C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1]
[E:\KC\DShared.dll] [Tencent, 1.5.0.0]
[PID: 2864][C:\Program Files\XunchiTools\Powerword 2006\XDICT.EXE] [Kingsoft Co, Ltd., 8, 5, 0, 0]
[C:\Program Files\XunchiTools\Powerword 2006\DicMngr.dll] [Kingsoft, 1, 0, 0, 0]
[C:\Program Files\XunchiTools\Powerword 2006\doshow.dll] [N/A, N/A]
[C:\Program Files\XunchiTools\Powerword 2006\ITextOut.dll] [Kingsoft, 1, 1, 0, 0]
[C:\Program Files\XunchiTools\Powerword 2006\KPic10.dll] [N/A, N/A]
[C:\Program Files\XunchiTools\Powerword 2006\ijl11.dll] [Intel Corporation, 1.1.2]
[C:\Program Files\XunchiTools\Powerword 2006\NormGrab.DLL] [Kingsoft Co, Ltd., 6, 0, 0, 0]
[C:\Program Files\XunchiTools\Powerword 2006\toTTSEngine50.dll] [Kingsoft Corporation, 1, 0, 0, 1]
[C:\Program Files\XunchiTools\Powerword 2006\xfile.dll] [N/A, N/A]
[C:\KAV2006\KMailOEBand.dll] [N/A, 2006, 5, 19, 118]
[C:\KAV2006\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\Program Files\XunchiTools\Powerword 2006\DBCore10.dll] [Kingsoft Corp., 1, 0, 0, 0]
[C:\Program Files\XunchiTools\Powerword 2006\XdictGrb.dll] [Kingsoft Co, Ltd., 9, 0, 0, 0]
[C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1]
[E:\KC\DShared.dll] [Tencent, 1.5.0.0]
[PID: 324][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\DeskAdTop\Run.dll] [, 1, 0, 0, 1]
[C:\KAV2006\KMailOEBand.dll] [N/A, 2006, 5, 19, 118]
[C:\KAV2006\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1]
[E:\KC\DShared.dll] [Tencent, 1.5.0.0]
[PID: 724][E:\KC\QQ.exe] [TENCENT, 0, 0, 0, 0]
[E:\KC\QQBaseClassInDll.dll] [, 1, 0, 0, 1]
[E:\KC\QQHelperDll.dll] [, 1, 0, 0, 1]
[E:\KC\BasicCtrlDll.dll] [Tencent, 5, 0, 200, 160]
[C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll] [Yahoo! China, 2, 0, 4, 1007]
[C:\KAV2006\KMailOEBand.dll] [N/A, 2006, 5, 19, 118]
[C:\KAV2006\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[E:\KC\QQAPI.dll] [, 1, 0, 0, 1]
[E:\KC\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1]
[E:\KC\LoginCtrl.dll] [, 1, 0, 0, 1]
[E:\KC\npkcntc.dll] [INCA Internet Co., Ltd., 2006, 3, 2, 1]
[E:\KC\npkpdb.dll] [INCA Internet Co., Ltd., 2003, 10, 1, 1]
[E:\KC\QQRes.dll] [tencent, 1, 0, 0, 1]
[E:\KC\QQMainFrame.dll] [N/A, N/A]
[E:\KC\CQQApplication.dll] [N/A, N/A]
[E:\KC\NewSkin.dll] [, 1, 0, 0, 1]
[E:\KC\HostingMgr.dll] [, 1, 0, 0, 1]
[E:\KC\CameraDll.dll] [, 1, 0, 0, 1]
[E:\KC\MailSummary.dll] [, 1, 0, 0, 1]
[E:\KC\QQSpace.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\msdmo.dll] [N/A, N/A]
[E:\KC\QQGroupMng.dll] [, 1, 0, 0, 1]
[E:\KC\GroupLive.dll] [N/A, N/A]
[E:\KC\UserDefinedHead.dll] [, 1, 0, 0, 1]
[E:\KC\QQPlugin.dll] [N/A, N/A]
[E:\KC\QQConfigPlugin.dll] [, 1, 0, 0, 1]
[E:\KC\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[E:\KC\QQAvatar.dll] [N/A, N/A]
[E:\KC\QRingMng.dll] [N/A, N/A]
[E:\KC\PhoneAPI.dll] [, 1, 0, 0, 1]
[E:\KC\DialerAllinOne.dll] [tencent, 1, 4, 0, 0]
[E:\KC\LongConnection.dll] [tencent, 5, 0, 200, 160]
[E:\KC\QQPet.dll] [, 1, 0, 0, 1]
[E:\KC\BQQApplication.dll] [N/A, N/A]
[E:\KC\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
[E:\KC\CommercesMng.dll] [, 1, 0, 0, 1]
[E:\KC\QQAddr.dll] [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200]
[E:\KC\QQAllInOne.dll] [N/A, N/A]
[E:\KC\SCCore.dll] [N/A, N/A]
[E:\KC\QQCustomFace.dll] [N/A, N/A]
[C:\WINDOWS\system32\Macromed\Flash\Flash9a.ocx] [Adobe Systems, Inc., 9,0,0,296]
[E:\KC\QQSceneMng.dll] [N/A, N/A]
[E:\KC\ImageOle.dll] [TODO: <Company name>, 1.0.0.1]
[E:\KC\VqqAllInOne.dll] [Tencent, 1, 5, 0, 3]
[E:\KC\tencent-proto1.dll] [tencent, 1, 5, 0, 3]
[E:\KC\tencent-comlib.dll] [tencent, 1.4.0.2]
[E:\KC\tencent-proto2.dll] [tencent, 1, 5, 0, 3]
[E:\KC\DShared.dll] [Tencent, 1.5.0.0]
[E:\KC\InPlus.dll] [Tencent, 1.5.0.0]
[E:\KC\QQPhoneHelper.dll] [腾讯科技(深圳)有限公司, 2, 0, 6, 60]
[E:\KC\QQSysMsgMng.dll] [N/A, N/A]
[C:\WINDOWS\system32\JPWB.IME] [常诚研制, 4.00.950]
[E:\KC\QQMagicFace.dll] [, 1, 0, 0, 1]
[E:\KC\QQFileTransfer.dll] [Tencent, 5, 0, 202, 180]
[PID: 2016][C:\Documents and Settings\new\桌面\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\KAV2006\KMailOEBand.dll] [N/A, 2006, 5, 19, 118]
[E:\KC\DShared.dll] [Tencent, 1.5.0.0]
[C:\KAV2006\KASocket.dll] [Kingsoft Corporation, 2005, 2, 22, 233]
[C:\Program Files\DeskAdTop\fshook.dll] [, 1, 0, 0, 1]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
127.0.0.1 www.powernum123.com
127.0.0.1 www.powernum123.com.cn
127.0.0.1 powernum123.com
127.0.0.1 powernum123.com.cn
127.0.0.1 www.chebl.com
127.0.0.1 www.chebl.cn
127.0.0.1 www.chebl.com.cn
127.0.0.1 chebl.com
127.0.0.1 chebl.com.cn
127.0.0.1 chebl.cn
127.0.0.1 www.chebuluo.com.cn
127.0.0.1 www.chebuluo.com
127.0.0.1 www.chebuluo.cn
127.0.0.1 chebuluo.com.cn
127.0.0.1 chebuluo.com
127.0.0.1 chebuluo.cn
127.0.0.1 www.17sp.com
127.0.0.1 www.17sp.com.cn
127.0.0.1 17sp.com
127.0.0.1 17sp.com.cn
127.0.0.1 www.feikong.com
127.0.0.1 www.feikong.com.cn
127.0.0.1 www.feikong.cn
127.0.0.1 feikong.com
127.0.0.1 feikong.com.cn
127.0.0.1 feikong.cn
127.0.0.1 www.hacong.com
127.0.0.1 hacong.com
127.0.0.1 www.xbxb*****com
127.0.0.1 www.sobt.com
127.0.0.1 www.sobt.com.cn
127.0.0.1 www.sobt.cn
127.0.0.1 www.sobt.net
127.0.0.1 sobt.com
127.0.0.1 sobt.com.cn
127.0.0.1 sobt.cn
127.0.0.1 sobt.net
127.0.0.1 www.xbxbxb*****com
127.0.0.1 xbxb*****com
127.0.0.1 xbxbxb*****com
127.0.0.1 www.nfsinfo.com
127.0.0.1 nfsinfo.com
127.0.0.1 CRMEASE.COM
127.0.0.1 HONGBANGZHU.COM
127.0.0.1 LINUX007.COM
127.0.0.1 LOSPLE.COM
127.0.0.1 LOSTEMPLE.COM
127.0.0.1 www.CRMEASE.COM
127.0.0.1 www.HONGBANGZHU.COM
127.0.0.1 www.LINUX007.COM
127.0.0.1 www.LOSPLE.COM
127.0.0.1 www.LOSTEMPLE.COM
127.0.0.1 SMARTALLYES.COM
127.0.0.1 51CPM.NET
127.0.0.1 51CPM.COM
127.0.0.1 YIQILAI.COM
127.0.0.1 update.smartallyes.com
127.0.0.1 mdmdmdmdmd.com
127.0.0.1 www.SMARTALLYES.COM
127.0.0.1 www.51CPM.NET
127.0.0.1 www.51CPM.COM
127.0.0.1 www.YIQILAI.COM
127.0.0.1 www.mdmdmdmdmd.com
==================================