[PID: 1504][C:\Program Files\Rising\KakaToolBar\Ras.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 6, 1]
[C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 4, 2, 30]
[C:\Program Files\Rising\KakaToolBar\RasGui.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 19]
[C:\SysWsj6\Ghook.dll] [N/A, ]
[C:\SysTx1\Ghook.dll] [N/A, ]
[C:\SysDayN6\Ghook.dll] [N/A, ]
[C:\Syswm1h\Ghook.dll] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
[C:\Program Files\Internet Explorer\IEXPLORE.win] [N/A, ]
[PID: 2908][D:\Tencent\TT\TTraveler.exe] [腾讯公司, 3.2.200.275]
[C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 4, 2, 30]
[C:\SysWsj6\Ghook.dll] [N/A, ]
[C:\SysTx1\Ghook.dll] [N/A, ]
[C:\SysDayN6\Ghook.dll] [N/A, ]
[C:\Syswm1h\Ghook.dll] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[D:\Tencent\TT\PersonalDesktop.dll] [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
[e:\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1576][C:\Program Files\Internet Explorer\IEXPLORE.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
[C:\Program Files\Windows Live Toolbar\msntb.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\zh-cn\mtbres.dll.mui] [Microsoft Corporation, 03.00.0000.1398]
[C:\Program Files\Windows Live Toolbar\mtbres.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\Tem.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\zh-cn\CMRes.dll.mui] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\CMRes.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\Components\RssFinderRes.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\zh-cn\msn_slrs.DLL.mui] [Microsoft Corporation, 03.00.0000.1398]
[C:\Program Files\Windows Live Toolbar\msn_slrs.DLL] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\Components\rssFinder.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\TENCENT\Adplus\SSAddr1.dll] [Tencent, 4, 4, 2, 22]
[C:\WINDOWS\system32\rs.bin] [N/A, ]
[E:\迅雷5\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
[C:\Program Files\Windows Live Toolbar\stmain.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\cm.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\msn_slps.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
[e:\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 500][E:\迅雷5\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5, 5, 4, 266]
[C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 4, 2, 30]
[E:\迅雷5\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 14]
[E:\迅雷5\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 12, 2, 44]
[E:\迅雷5\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 12, 2, 44]
[E:\迅雷5\Program\iTargetAD.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
[E:\迅雷5\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 8]
[C:\SysWsj6\Ghook.dll] [N/A, ]
[C:\SysTx1\Ghook.dll] [N/A, ]
[C:\SysDayN6\Ghook.dll] [N/A, ]
[C:\Syswm1h\Ghook.dll] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, ]
[C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx] [Adobe Systems, Inc., 9,0,28,0]
[C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[E:\迅雷5\Components\DiagnoseHelper\DiagnoseHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 10]
[E:\迅雷5\Components\PortVerify\PortVerify.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[E:\迅雷5\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[E:\迅雷5\Components\DTAG\DTAG.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
[E:\迅雷5\Program\LiveUpdate.dll] [, 1, 0, 1, 17]
[E:\迅雷5\Components\InMedia\iEmbedShell.dll] [ , 1, 0, 0, 15]
[E:\迅雷5\Components\InMedia\iEmbed08.dll] [ , 3, 2, 0, 63]
[E:\迅雷5\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 0, 3, 14]
[E:\迅雷5\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 2, 1, 43]
[E:\迅雷5\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 0, 1, 6]
[E:\迅雷5\Components\P4PClient\P4PClient.dll] [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
[E:\迅雷5\Components\VPSHELL\VPSHELL.dll] [, 1, 0, 0, 1]
[E:\迅雷5\Components\VPSHELL\VideoPicture.dll] [XunLei, 1, 0, 0, 1]
[E:\迅雷5\Program\msgmanage.dll] [Thunder Networking Technologies,LTD, 2, 0, 1, 38]
[e:\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[E:\迅雷5\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0]
[E:\迅雷5\Components\InMedia\MediaAddin11.dll] [Thunder Networking Technologies,LTD, 3, 1, 0, 63]
[C:\WINDOWS\System32\wmp.dll] [Microsoft Corporation, 9.00.00.2980]
[C:\WINDOWS\System32\msdmo.dll] [, ]
[PID: 1308][e:\Rising\Rav\RsAgent.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 4, 2, 30]
[e:\Rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[C:\SysWsj6\Ghook.dll] [N/A, ]
[C:\SysTx1\Ghook.dll] [N/A, ]
[C:\SysDayN6\Ghook.dll] [N/A, ]
[C:\Syswm1h\Ghook.dll] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, ]
[PID: 2456][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.3422]
[C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 4, 2, 30]
[C:\SysWsj6\Ghook.dll] [N/A, ]
[C:\SysTx1\Ghook.dll] [N/A, ]
[C:\SysDayN6\Ghook.dll] [N/A, ]
[C:\Syswm1h\Ghook.dll] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, ]
[C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 3384][F:\新建文件夹 (2)\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\Program Files\TENCENT\Adplus\Adplus1.dll] [Tencent, 4, 4, 2, 30]
[C:\SysWsj6\Ghook.dll] [N/A, ]
[C:\SysTx1\Ghook.dll] [N/A, ]
[C:\SysDayN6\Ghook.dll] [N/A, ]
[C:\Syswm1h\Ghook.dll] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Dat] [N/A, ]
[C:\Program Files\Internet Explorer\IEXPLORE.Sys] [N/A, ]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rav20.dll] [N/A, ]
[C:\WINDOWS\System32\NpOpenStore.dll] [N/A, ]
[C:\WINDOWS\System32\NPCard.dll] [N/A, ]
[C:\WINDOWS\System32\RsaFun.dll] [N/A, ]
[C:\WINDOWS\System32\GPKPCSC.dll] [N/A, ]
[PID: 1608][C:\Program Files\Windows Live Toolbar\msn_sl.exe] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\MSN_SLrs.dll] [Microsoft Corporation, 03.00.0000.1615]
[C:\Program Files\Windows Live Toolbar\msn_slps.dll] [Microsoft Corporation, 03.00.0000.1615]
==================================
文件关联
.TXT Error. [NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. [hh.exe %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [notepad.exe %1]
.INF Error. [notepad.exe %1]
.VBS Error. [wscript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
[D:\]
[AutoRun]
open=driver.exe
[E:\]
[AutoRun]
open=driver.exe
[F:\]
[AutoRun]
open=driver.exe
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
[/CODE]